openmeld 0.3.225 → 0.3.227

package/dist/{daemon-service-runtime-BtqJMt8J.js → daemon-service-runtime-nIBQreis.js}

@@ -1,27 +1,29 @@
 #!/usr/bin/env node
 
-import { $ as openMeldManagedVersionBinaryPath, A as OPENMELD_HOME_ENV_KEY, Q as openMeldManagedBinaryPath, X as openMeldBinDir, Z as openMeldManagedBinaryName, a as isOpenMeldOrphanedLockError, d as runWithHeldLock, et as openMeldManagedVersionDir, ft as resolveOpenMeldServiceScope, i as isOpenMeldLockError, lt as resolveOpenMeldEnvPreset, nt as openMeldVersionsDir, t as acquireLock, ut as resolveOpenMeldRootDir } from "./lock-iue1J2xy.js";
-import { i as windowsPublisherNameSchema, n as WINDOWS_PROCESS_HELPER_FILENAME, r as windowsManagedCliInstallationSchema } from "./windows-artifact-DJ9DKjfc.js";
-import { a as cliBinaryServiceReleaseSchema, n as OPENMELD_MACOS_CLI_SIGNING_REQUIREMENT, o as resolveCliBinaryPlatform, r as cliBinaryDeltaPatchSchema, t as OPENMELD_MACOS_CLI_SIGNING_IDENTITY } from "./cli-binary-manifest-CT5X05lk.js";
+import { C as openMeldManagedBinaryName, E as openMeldManagedVersionDir, F as resolveOpenMeldEnvPreset, I as resolveOpenMeldRootDir, O as openMeldVersionsDir, R as resolveOpenMeldServiceScope, S as openMeldBinDir, T as openMeldManagedVersionBinaryPath, t as OPENMELD_HOME_ENV_KEY, w as openMeldManagedBinaryPath } from "./paths-DSkUuEu3.js";
+import { i as windowsPublisherNameSchema, n as WINDOWS_PROCESS_HELPER_FILENAME } from "./windows-artifact-D99JU1ll.js";
+import { a as cliBinaryServiceReleaseSchema, n as OPENMELD_MACOS_CLI_SIGNING_REQUIREMENT, o as resolveCliBinaryPlatform, r as cliBinaryDeltaPatchSchema, t as OPENMELD_MACOS_CLI_SIGNING_IDENTITY } from "./cli-binary-manifest-Bjf6T7Ef.js";
 import { b as openMeldToolsUpdateOperationPhaseSchema, w as openMeldToolsUpdateRequestSourceSchema } from "./local-components-DleLEzSU.js";
-import { r as readDaemonRuntimeLease } from "./daemon-runtime-lease-1LMeZ6IS.js";
-import { l as resolveWindowsPowerShellPath, o as powerShellEncodedArguments, s as pruneWindowsBinaryBundle } from "./process-identity-BQLdaZdB.js";
+import { r as readDaemonRuntimeLease } from "./daemon-runtime-lease-C1wkT4Bi.js";
+import { l as resolveWindowsPowerShellPath, o as powerShellEncodedArguments, s as pruneWindowsBinaryBundle } from "./process-identity-BRbhGGTM.js";
+import { a as isOpenMeldOrphanedLockError, d as runWithHeldLock, i as isOpenMeldLockError, t as acquireLock } from "./lock-CMH9eoS7.js";
 import { n as normalizeCommandEnvironment } from "./process-environment-BWSFeUu6.js";
 import { n as resolveOpenMeldDistribution, t as isBinaryDistribution } from "./distribution-BDQT2ilb.js";
-import { A as getDaemonStatus, C as daemonServiceStableBinaryExecutablePath, D as daemonStatePath, E as daemonServiceUpdateWorkerBinaryExecutablePath, T as daemonServiceStableLauncherPath, U as uninstallDaemon, _ as daemonRuntimeStateRootPath, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, b as daemonServiceLegacyExecutableWrapperPath, g as daemonRuntimeServiceManagerPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, k as getDaemonRuntimeStatus, l as clearDaemonServiceRuntimeState, n as DAEMON_SERVICE_RUNTIME_AUTO_START_ENV, p as daemonRuntimeBundlesPath, r as DAEMON_SERVICE_RUNTIME_CONTROLLER_ENV, s as DAEMON_SERVICE_RUNTIME_SYSTEM_SERVICE_ENV, t as DAEMON_HEARTBEAT_STALE_MS, v as daemonServiceActiveBundleStatePath, w as daemonServiceStableExecutableWrapperPath, x as daemonServiceRecognizedExecutablePaths$1, y as daemonServiceExecutableWrapperPaths$1 } from "./daemon-state-Ca0WK5x0.js";
-import { t as assertNoPublishedProductionMutationDuringTests } from "./published-production-safety-C40hKrBA.js";
-import { i as readDaemonServiceContract } from "./daemon-service-contract-GLmAxsq-.js";
-import { d as compareSemver, l as OPENMELD_VERSION, t as emitDaemonLifecycleEvent, v as package_default } from "./daemon-lifecycle-journal-ChhAF8yX.js";
-import { a as expectedBinaryServiceFingerprint, c as verifyWindowsServiceSubsystem, l as windowsMaintenanceBinaryPath, o as hashBinaryServiceBundle, s as prepareWindowsMaintenanceBinary } from "./windows-user-task-Io5QuEVR.js";
+import { A as getDaemonStatus, C as daemonServiceStableBinaryExecutablePath, D as daemonStatePath, E as daemonServiceUpdateWorkerBinaryExecutablePath, T as daemonServiceStableLauncherPath, U as uninstallDaemon, _ as daemonRuntimeStateRootPath, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, b as daemonServiceLegacyExecutableWrapperPath, g as daemonRuntimeServiceManagerPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, k as getDaemonRuntimeStatus, l as clearDaemonServiceRuntimeState, n as DAEMON_SERVICE_RUNTIME_AUTO_START_ENV, p as daemonRuntimeBundlesPath, r as DAEMON_SERVICE_RUNTIME_CONTROLLER_ENV, s as DAEMON_SERVICE_RUNTIME_SYSTEM_SERVICE_ENV, t as DAEMON_HEARTBEAT_STALE_MS, v as daemonServiceActiveBundleStatePath, w as daemonServiceStableExecutableWrapperPath, x as daemonServiceRecognizedExecutablePaths$1, y as daemonServiceExecutableWrapperPaths$1 } from "./daemon-state-B6G5xe7f.js";
+import { t as assertNoPublishedProductionMutationDuringTests } from "./published-production-safety-CgXxtdMK.js";
+import { i as readDaemonServiceContract } from "./daemon-service-contract-DhEfbzHt.js";
+import { d as compareSemver, l as OPENMELD_VERSION, t as emitDaemonLifecycleEvent, v as package_default } from "./daemon-lifecycle-journal-NeBAn_SY.js";
+import { a as reconcileWindowsManagedLauncher, i as readWindowsManagedCliVersion, n as placeWindowsManagedVersion, t as activateWindowsManagedCli } from "./windows-managed-install-BVlswqjA.js";
+import { a as expectedBinaryServiceFingerprint, c as verifyWindowsServiceSubsystem, l as windowsMaintenanceBinaryPath, o as hashBinaryServiceBundle, s as prepareWindowsMaintenanceBinary } from "./windows-user-task-BR-WB7hr.js";
 import { t as sleep } from "./dist-BLuEEVHh.js";
-import { E as resolveDaemonServiceIdentity, S as resolveDaemonServiceManager } from "./daemon-service-manager-C8RUCMDo.js";
+import { E as resolveDaemonServiceIdentity, S as resolveDaemonServiceManager } from "./daemon-service-manager-CRnFxPKA.js";
 import { createRequire } from "node:module";
-import { createHash, randomUUID } from "node:crypto";
+import { createHash } from "node:crypto";
 import { homedir } from "node:os";
 import path, { basename, dirname, isAbsolute, join, relative, sep, win32 } from "node:path";
-import { access, chmod, copyFile, cp, lstat, mkdir, mkdtemp, readFile, readdir, readlink, realpath, rename, rm, stat, symlink, writeFile } from "node:fs/promises";
+import { access, chmod, copyFile, cp, lstat, mkdir, readFile, readdir, readlink, realpath, rename, rm, stat, symlink, writeFile } from "node:fs/promises";
 import * as z$1 from "zod/v4";
-import { constants, createReadStream } from "node:fs";
+import { constants } from "node:fs";
 import process$1 from "node:process";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
@@ -717,7 +719,7 @@ function daemonServiceUpdateWorkerNpmEntryPath(pathInput = {}) {
 }
 async function hasIndependentMaintenanceRegistration(pathInput = {}, platform = process$1.platform, expectedDefinition) {
 	if (platform === "win32") {
-		const { runWindowsUserTask, readWindowsTaskAction } = await import("./windows-user-task-B8NcRg_u.js");
+		const { runWindowsUserTask, readWindowsTaskAction } = await import("./windows-user-task-m9eMEUEq.js");
 		const task = await runWindowsUserTask({
 			name: resolveDaemonServiceUpdateWorkerIdentity(pathInput).windowsServiceName,
 			legacyScript: resolveDaemonServiceUpdateWorkerWindowsScriptPath(pathInput),
@@ -728,7 +730,7 @@ async function hasIndependentMaintenanceRegistration(pathInput = {}, platform =
 	const registration = await readDaemonServiceUpdateWorkerRegistration(pathInput, platform);
 	if (!registration?.includes("openmeld-independent-maintenance-v1")) return false;
 	if (expectedDefinition !== void 0 && registration !== expectedDefinition) return false;
-	const { parseDaemonServiceEnvironmentFromDefinition } = await import("./daemon-service-manager-CU-79a4z.js");
+	const { parseDaemonServiceEnvironmentFromDefinition } = await import("./daemon-service-manager-l0unaDGa.js");
 	return resolveOpenMeldRootDir({ env: parseDaemonServiceEnvironmentFromDefinition({
 		controller: platform === "darwin" ? "launchd" : "systemd",
 		definition: registration
@@ -803,7 +805,7 @@ function resolveDaemonServiceUpdateWorkerRegistrationPath(pathInput, platform) {
 }
 async function readDaemonServiceUpdateWorkerRegistration(pathInput, platform) {
 	if (platform === "win32") {
-		const { runWindowsUserTask, readWindowsTaskAction } = await import("./windows-user-task-B8NcRg_u.js");
+		const { runWindowsUserTask, readWindowsTaskAction } = await import("./windows-user-task-m9eMEUEq.js");
 		const task = await runWindowsUserTask({
 			name: resolveDaemonServiceUpdateWorkerIdentity(pathInput).windowsServiceName,
 			legacyScript: resolveDaemonServiceUpdateWorkerWindowsScriptPath(pathInput),
@@ -995,138 +997,6 @@ function getErrorCode$1(error) {
 	return error && typeof error === "object" && "code" in error ? String(error.code) : null;
 }
 //#endregion
-//#region src/local-components/windows-managed-install.ts
-const INSTALLATION_RECORD = "cli-installation.json";
-const CLI_FILENAME = "openmeld.exe";
-const RETIRED_LAUNCHER = /^\.retired-launcher-[a-f0-9-]{36}\.exe$/u;
-const STAGING_VERSION = /^\.install-[A-Za-z0-9]{6}$/u;
-async function readWindowsManagedCliVersion(root) {
-	const serialized = await readFile(join(root, "bin", INSTALLATION_RECORD), "utf8").catch((error) => {
-		if (hasCode(error, "ENOENT")) return null;
-		throw error;
-	});
-	if (serialized === null) return null;
-	const parsed = windowsManagedCliInstallationSchema.safeParse(JSON.parse(serialized));
-	if (!parsed.success) throw new Error("The managed Windows CLI installation record is invalid. No version was selected.");
-	return parsed.data.version;
-}
-/** Publish the complete immutable directory, never overwrite an in-use image. */
-async function placeWindowsManagedVersion(input) {
-	const { version } = windowsManagedCliInstallationSchema.parse({
-		schemaVersion: 1,
-		version: input.version
-	});
-	const versions = join(input.root, "versions");
-	const destination = join(versions, version);
-	const sources = [{
-		source: input.sourceBinary,
-		name: CLI_FILENAME
-	}, {
-		source: join(dirname(input.sourceBinary), WINDOWS_PROCESS_HELPER_FILENAME),
-		name: WINDOWS_PROCESS_HELPER_FILENAME
-	}];
-	if (await entryExists(destination)) {
-		for (const { source, name } of sources) if (!await sameFileBytes(source, join(destination, name))) throw new Error(`The installed Windows CLI ${version} differs from the selected artifact. Published versions are immutable; acquire a new release instead of overwriting this installation.`);
-		return;
-	}
-	await mkdir(versions, { recursive: true });
-	for (const entry of await readdir(versions, { withFileTypes: true })) if (entry.isDirectory() && STAGING_VERSION.test(entry.name)) await rm(join(versions, entry.name), { recursive: true });
-	const staging = await mkdtemp(join(versions, ".install-"));
-	try {
-		for (const { source, name } of sources) await copyFile(source, join(staging, name));
-		await rename(staging, destination);
-	} finally {
-		await rm(staging, {
-			recursive: true,
-			force: true
-		});
-	}
-}
-/** The caller holds the shared managed-install lock. Record replacement is the commit. */
-async function activateWindowsManagedCli(root, version) {
-	const record = windowsManagedCliInstallationSchema.parse({
-		schemaVersion: 1,
-		version
-	});
-	await reconcileWindowsManagedLauncher(root, version);
-	const destination = join(root, "bin", INSTALLATION_RECORD);
-	const temporary = `${destination}.${randomUUID()}.tmp`;
-	try {
-		await writeFile(temporary, `${JSON.stringify(record)}\n`, {
-			flag: "wx",
-			mode: 384
-		});
-		await rename(temporary, destination);
-	} finally {
-		await rm(temporary, { force: true });
-	}
-}
-/**
-* Repair from the authoritative version record. An interrupted launcher swap
-* can leave bin/openmeld.exe absent; install/maintenance restore it from the
-* immutable version without changing account data or selecting another version.
-*/
-async function reconcileWindowsManagedLauncher(root, version) {
-	windowsManagedCliInstallationSchema.parse({
-		schemaVersion: 1,
-		version
-	});
-	const source = join(root, "versions", version, WINDOWS_PROCESS_HELPER_FILENAME);
-	const bin = join(root, "bin");
-	const launcher = join(bin, CLI_FILENAME);
-	await mkdir(bin, { recursive: true });
-	for (const entry of await readdir(bin, { withFileTypes: true })) if (entry.isFile() && RETIRED_LAUNCHER.test(entry.name)) await removeRetiredLauncher(join(bin, entry.name));
-	if (await sameFileBytes(source, launcher)) return;
-	const temporary = join(bin, `.launcher-${randomUUID()}.tmp`);
-	const retired = join(bin, `.retired-launcher-${randomUUID()}.exe`);
-	await copyFile(source, temporary);
-	let movedPrevious = false;
-	try {
-		if (await entryExists(launcher)) {
-			await rename(launcher, retired);
-			movedPrevious = true;
-		}
-		try {
-			await rename(temporary, launcher);
-		} catch (error) {
-			if (movedPrevious) await rename(retired, launcher);
-			throw error;
-		}
-		if (movedPrevious) await removeRetiredLauncher(retired);
-	} finally {
-		await rm(temporary, { force: true });
-	}
-}
-async function removeRetiredLauncher(file) {
-	await rm(file).catch((error) => {
-		if (hasCode(error, "EPERM") || hasCode(error, "EBUSY")) return;
-		throw error;
-	});
-}
-async function entryExists(file) {
-	return await lstat(file).then(() => true, (error) => {
-		if (hasCode(error, "ENOENT")) return false;
-		throw error;
-	});
-}
-async function sameFileBytes(left, right) {
-	const [leftStat, rightStat] = await Promise.all([lstat(left), lstat(right).catch((error) => {
-		if (hasCode(error, "ENOENT")) return null;
-		throw error;
-	})]);
-	if (!(leftStat.isFile() && rightStat?.isFile()) || leftStat.size !== rightStat.size) return false;
-	const hash = async (file) => {
-		const digest = createHash("sha256");
-		for await (const chunk of createReadStream(file)) digest.update(chunk);
-		return digest.digest("hex");
-	};
-	const [leftHash, rightHash] = await Promise.all([hash(left), hash(right)]);
-	return leftHash === rightHash;
-}
-function hasCode(error, code) {
-	return error !== null && typeof error === "object" && "code" in error && error.code === code;
-}
-//#endregion
 //#region src/local-components/managed-install.ts
 const MANAGED_INSTALL_LOCK_PROFILE = "managed-cli";
 const MANAGED_INSTALL_LOCK_KEY = "install";
@@ -1317,7 +1187,7 @@ async function placeVersionedBinary(sourceBinary, version, managedBinaryPath) {
 }
 async function swapCurrentPointer(currentPointerPath, managedBinaryPath) {
 	if (process$1.platform === "win32") {
-		await activateWindowsManagedCli(resolveOpenMeldRootDir(), path.basename(path.dirname(managedBinaryPath)));
+		await activateWindowsManagedCli(resolveOpenMeldRootDir(), path.basename(path.dirname(managedBinaryPath)), allowUnsignedWindowsInternalPreview() ? "windows-preview" : void 0);
 		return;
 	}
 	await mkdir(openMeldBinDir(), { recursive: true });
@@ -2774,7 +2644,10 @@ async function matchesExpectedDaemonServiceManagerDefinition(input) {
 	}).some((path) => definition.includes(path));
 }
 function matchesWindowsTaskInstallation(spec, pathInput = {}) {
-	return spec.args[0] === daemonServiceLauncherPath(pathInput) && spec.args[1] === "service" && spec.args[2] === "run" && resolveOpenMeldRootDir({ env: spec.env }) === resolveOpenMeldRootDir(pathInput);
+	if (resolveOpenMeldRootDir({ env: spec.env }) !== resolveOpenMeldRootDir(pathInput)) return false;
+	if (spec.args[0] === daemonServiceLauncherPath(pathInput)) return spec.args[1] === "service" && spec.args[2] === "run";
+	const relativeExecutable = relative(daemonRuntimeBundlesPath(pathInput), spec.executable).split(sep);
+	return relativeExecutable.length === 2 && relativeExecutable[0] !== ".." && relativeExecutable[1]?.toLowerCase() === "openmeld.exe" && spec.args[0] === "service" && spec.args[1] === "run" && spec.args[2] === "--mode" && spec.args[3] === "foreground" && (spec.args.length === 4 || spec.args.length === 6 && spec.args[4] === "--account-admission-id" && Boolean(spec.args[5]));
 }
 function resolveExpectedDaemonServiceManagerCommandPaths(input) {
 	if (input.controller === "launchd") return [daemonServiceExecutableWrapperPath(input.pathInput), ...input.includeLegacyExecutableWrappers === true ? [daemonServiceLegacyWrapperPath(input.pathInput)] : []];
@@ -2844,7 +2717,8 @@ function resolveDaemonBundleIdFromEntryPath(entryPath, pathInput = {}) {
 	return bundleId && bundleId.length > 0 ? bundleId : null;
 }
 function looksLikeDaemonEntryPath(token, pathInput) {
-	return token.includes("/bundles/") || token.includes("openmeld/dist/openmeld.js") || token.endsWith("/openmeld.js") || token.endsWith("/openmeld-dev.js") || token.endsWith("/daemon-service-launcher.mjs") || isRecognizedDaemonServiceExecutableWrapperPath(token, pathInput) || isOpenMeldManagedBinaryPath(token, pathInput);
+	const normalizedToken = normalizeDaemonCommandPath(token);
+	return normalizedToken.includes("/bundles/") || normalizedToken.includes("openmeld/dist/openmeld.js") || normalizedToken.endsWith("/openmeld.js") || normalizedToken.endsWith("/openmeld-dev.js") || normalizedToken.endsWith("/daemon-service-launcher.mjs") || isRecognizedDaemonServiceExecutableWrapperPath(token, pathInput) || isOpenMeldManagedBinaryPath(token, pathInput);
 }
 function findDaemonServiceCommandIndex(tokens) {
 	return tokens.findIndex((token, index) => token === "service" && (tokens[index + 1] === "run" || tokens[index + 1] === "start"));
@@ -3439,4 +3313,4 @@ async function readObservedRuntimeState() {
 //#endregion
 export { readPendingDaemonServiceUpdate as $, prepareDaemonServiceBundle as A, resolveDaemonServiceArtifact as B, daemonServiceExecutableWrapperPath as C, ensureDaemonServiceStableBinaryExecutable as D, discardPreparedDaemonServiceBundle as E, restoreDaemonActiveBundleStateSnapshot as F, readManagedCliInstallation as G, buildInstallSelfJsonPayload as H, runAuditedServiceManagerCarrierMutation as I, withManagedInstallTransaction as J, reconcileManagedCliLauncher as K, verifyDaemonActiveBundleIntegrity as L, resolveAlignedDaemonActiveBundleEntryPath as M, resolveDaemonBundleEntryPathFromState as N, ensureDaemonServiceUpdateWorkerBinaryExecutable as O, resolveInstalledDaemonBundleFingerprint as P, readLastDaemonServiceUpdate as Q, writeDaemonServiceExecutableWrapper as R, daemonServiceBinaryExecutablePath as S, daemonServiceUpdateWorkerBinaryPath as T, performManagedInstall as U, collectLocalOperationFailure as V, pruneManagedInstallVersions as W, completePendingDaemonServiceUpdate as X, DAEMON_SERVICE_UPDATE_JOB_SCHEMA as Y, persistPendingDaemonServiceUpdate as Z, matchesExpectedDaemonServiceManagerDefinition as _, resolveDaemonRuntimeState as a, resolveDaemonServiceUpdateWorkerIdentity as at, cleanupInactiveDaemonServiceBundles as b, resolveObservedDaemonRuntimeStatus as c, resolveDaemonServiceUpdateWorkerSystemdTimerUnitPath as ct, inspectLegacySharedDaemonService as d, DEFAULT_CLI_BINARY_DOWNLOAD_POLICY as dt, resolveBundledServiceRelease as et, listDaemonOwnedProcesses as f, allowUnsignedWindowsInternalPreview as ft, assertDaemonMaintenanceInstallationOwnership as g, verifyCliBinaryCodeSignature as gt, resolveDaemonBundleIdFromEntryPath as h, resolveCliBinaryUpdatePlan as ht, readCurrentObservedDaemonRuntimeStatus as i, hasIndependentMaintenanceRegistration as it, readDaemonActiveBundleState as j, isDaemonBundleSourceAllowedForLane as k, resolveObservedRuntimeCommandEntryPath as l, resolveDaemonServiceUpdateWorkerSystemdUnitPath as lt, normalizeDaemonCommandPath as m, prepareCliBinaryProcessHelper as mt, getEffectiveDaemonRuntimeStatus as n, configureDaemonMaintenanceEnvironment as nt, resolveDaemonServiceManagerForRuntimeState as o, resolveDaemonServiceUpdateWorkerLaunchdPlistPath as ot, extractDaemonCommandEntryPath as p, downloadCliBinaryUpdateArtifact as pt, resolveCliSelfVersion as q, readCurrentDaemonRuntimeContext as r, daemonServiceUpdateWorkerNpmEntryPath as rt, waitForDaemonSystemServiceToStop as s, resolveDaemonServiceUpdateWorkerSystemdPathUnitPath as st, clearDaemonRuntimeStateIfDefinitelyStopped as t, INDEPENDENT_MAINTENANCE_REGISTRATION as tt, cleanupLegacySharedDaemonServiceState as u, resolveDaemonServiceUpdateWorkerWindowsScriptPath as ut, isOpenMeldManagedBinaryPath as v, daemonServiceLauncherPath as w, clearDaemonServiceUpdateWorkerBinaryExecutable as x, activateDaemonServiceBundle as y, writeDaemonServiceLauncher as z };
 
-//# sourceMappingURL=daemon-service-runtime-BtqJMt8J.js.map
+//# sourceMappingURL=daemon-service-runtime-nIBQreis.js.map