runpane 2.4.183 → 2.4.185

package/dist/update.d.ts

@@ -0,0 +1,9 @@
+import type { ParsedArgs } from './commands';
+import { stageApp } from './updateArtifacts';
+export declare function runUpdate(parsed: ParsedArgs): Promise<number>;
+/** Entry point executed solely from the independently staged code and runtime. */
+export interface UpdateArtifactStager {
+    stageApplication: typeof stageApp;
+}
+export declare function runUpdateHelper(directory: string, artifacts?: UpdateArtifactStager): Promise<number>;
+//# sourceMappingURL=update.d.ts.map

package/dist/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../src/update.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAU7C,OAAO,EAAE,QAAQ,EAAoC,MAAM,mBAAmB,CAAC;AA+B/E,wBAAsB,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAmDnE;AAWD,kFAAkF;AAClF,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,EAAE,OAAO,QAAQ,CAAC;CACnC;AAED,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,GAAE,oBAAqD,GAAG,OAAO,CAAC,MAAM,CAAC,CA4I1I"}

package/dist/update.js

@@ -0,0 +1,312 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runUpdate = runUpdate;
+exports.runUpdateHelper = runUpdateHelper;
+const updateCapacity_1 = require("./updateCapacity");
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_crypto_1 = require("node:crypto");
+const node_child_process_1 = require("node:child_process");
+const boundaryDecoder_1 = require("./boundaryDecoder");
+const daemonClient_1 = require("./daemonClient");
+const errors_1 = require("./errors");
+const updatePreflight_1 = require("./updatePreflight");
+const updateRuntime_1 = require("./updateRuntime");
+const updateSupervisor_1 = require("./updateSupervisor");
+const updateOperation_1 = require("./updateOperation");
+const updatePackage_1 = require("./updatePackage");
+const updatePython_1 = require("./updatePython");
+const updateArtifacts_1 = require("./updateArtifacts");
+const preflightSchema = boundaryDecoder_1.boundary.object({
+    machine: boundaryDecoder_1.boundary.nonEmptyString, paneDir: boundaryDecoder_1.boundary.nonEmptyString,
+    scope: boundaryDecoder_1.boundary.enumeration('both', 'pane', 'cli'), requestedVersion: boundaryDecoder_1.boundary.nonEmptyString,
+    host: boundaryDecoder_1.boundary.nullable(updatePreflight_1.updateHostSchema),
+    cli: boundaryDecoder_1.boundary.nullable(boundaryDecoder_1.boundary.object({ owner: boundaryDecoder_1.boundary.enumeration('managed', 'npm', 'pip'), entrypoint: boundaryDecoder_1.boundary.nonEmptyString, version: boundaryDecoder_1.boundary.nonEmptyString, prefix: boundaryDecoder_1.boundary.nonEmptyString, packageManager: boundaryDecoder_1.boundary.optional(boundaryDecoder_1.boundary.nonEmptyString), pipUser: boundaryDecoder_1.boundary.optional(boundaryDecoder_1.boundary.boolean) })),
+    disableOsIntegration: boundaryDecoder_1.boundary.optional(boundaryDecoder_1.boundary.boolean),
+    npmSource: boundaryDecoder_1.boundary.optional(boundaryDecoder_1.boundary.nonEmptyString),
+    runtimeSource: boundaryDecoder_1.boundary.nonEmptyString, lockDirectory: boundaryDecoder_1.boundary.nonEmptyString, additionalLockDirectories: boundaryDecoder_1.boundary.array(boundaryDecoder_1.boundary.nonEmptyString),
+    limitations: boundaryDecoder_1.boundary.array(boundaryDecoder_1.boundary.string),
+});
+const stagedSchema = boundaryDecoder_1.boundary.object({
+    app: boundaryDecoder_1.boundary.nullable(boundaryDecoder_1.boundary.object({ version: boundaryDecoder_1.boundary.string, artifact: boundaryDecoder_1.boundary.string, installPath: boundaryDecoder_1.boundary.string, backupPath: boundaryDecoder_1.boundary.string, sha256: boundaryDecoder_1.boundary.string })),
+    cli: boundaryDecoder_1.boundary.nullable(boundaryDecoder_1.boundary.object({ version: boundaryDecoder_1.boundary.string, archive: boundaryDecoder_1.boundary.string, packageRoot: boundaryDecoder_1.boundary.string })),
+    npm: boundaryDecoder_1.boundary.optional(boundaryDecoder_1.boundary.string),
+});
+const terminal = (journal) => ['complete', 'needs-attention', 'failed'].includes(journal.phase);
+const pause = (ms) => new Promise(resolve => setTimeout(resolve, ms));
+function operationDirectory(paneDir, id) {
+    if (!/^[a-zA-Z0-9-]{1,80}$/.test(id))
+        throw new errors_1.RunpaneError('ERR_UPDATE_ID', 'Invalid update operation ID. Nothing was changed.', 'Use the ID returned by runpane update.');
+    return node_path_1.default.join(paneDir, 'updates', id);
+}
+function processExists(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        const code = (0, boundaryDecoder_1.decodeBoundary)(error, boundaryDecoder_1.boundary.object({ code: boundaryDecoder_1.boundary.optional(boundaryDecoder_1.boundary.string) })).code;
+        if (code === 'ESRCH')
+            return false;
+        throw error;
+    }
+}
+async function runUpdate(parsed) {
+    const paneDir = node_path_1.default.resolve((0, daemonClient_1.resolvePaneDirectory)(parsed.paneDir));
+    if (parsed.updateStatus)
+        return presentUpdate(node_path_1.default.join(operationDirectory(paneDir, parsed.updateStatus), 'status.json'), parsed);
+    const preflight = await (0, updatePreflight_1.preflightUpdate)(parsed, parsed.updateScope ?? 'both');
+    if (parsed.dryRun) {
+        console.log(JSON.stringify({ preflight, changed: false }, null, 2));
+        return 0;
+    }
+    if (!parsed.json)
+        console.log(`Updating ${preflight.scope} on ${preflight.machine}. Pane: ${preflight.host?.executable ?? 'not selected'}; CLI: ${preflight.cli ? `${preflight.cli.owner} ${preflight.cli.entrypoint}` : 'not selected'}.`);
+    const id = (0, node_crypto_1.randomUUID)();
+    const directory = operationDirectory(paneDir, id);
+    const file = node_path_1.default.join(directory, 'status.json');
+    (0, updateOperation_1.writeUpdateJson)(file, { id, host: preflight.machine, scope: preflight.scope, version: preflight.requestedVersion, phase: 'accepted', completed: [], setupPid: process.pid, setupExpiresAt: Date.now() + 120_000, updatedAt: new Date().toISOString(), appUpdated: false, cliUpdated: false, hostReachable: false, restored: [] });
+    const acquired = [];
+    try {
+        for (const target of [...new Set([preflight.lockDirectory, ...preflight.additionalLockDirectories])].sort()) {
+            const lock = (0, updateOperation_1.claimUpdateLock)(target, id, file);
+            if (!lock.acquired) {
+                for (const owned of acquired)
+                    (0, updateOperation_1.releaseUpdateLock)(owned, id);
+                return presentUpdate(lock.statusFile, parsed);
+            }
+            acquired.push(target);
+        }
+    }
+    catch (error) {
+        for (const owned of acquired)
+            (0, updateOperation_1.releaseUpdateLock)(owned, id);
+        throw error;
+    }
+    node_fs_1.default.mkdirSync(directory, { recursive: true, mode: 0o700 });
+    try {
+        const runtime = (0, updateRuntime_1.stageUpdateRuntime)(preflight.runtimeSource, node_path_1.default.join(directory, 'runtime'));
+        const helper = (0, updatePackage_1.stageUpdateCode)(process.argv[1], node_path_1.default.join(directory, 'helper'));
+        (0, updateOperation_1.writeUpdateJson)(node_path_1.default.join(directory, 'preflight.json'), { ...preflight, runtimeSource: runtime });
+        // Verify the staged helper can load every runtime import without depending
+        // on the active npm package or the installed Electron executable.
+        (0, node_child_process_1.execFileSync)(runtime, [helper, '--version'], { timeout: 15_000, env: { ...process.env, ELECTRON_RUN_AS_NODE: '' } });
+        (0, updateSupervisor_1.startUpdateSupervisor)({ id, directory, executable: runtime, args: [helper, '__update-runner', directory] });
+        const deadline = Date.now() + 20_000;
+        while (!(0, updateOperation_1.readUpdateJournal)(file).helperPid && Date.now() < deadline)
+            await pause(100);
+        if (!(0, updateOperation_1.readUpdateJournal)(file).helperPid)
+            throw new errors_1.RunpaneError('ERR_UPDATE_HELPER_NOT_READY', 'The supervisor did not acknowledge startup. Pane was not shut down.', `Inspect ${directory} and retry after resolving the supervisor error.`);
+    }
+    catch (error) {
+        // A queued task must not wake later and shut down a host after its caller
+        // reported failure. Fence independently of the mutable journal: a helper
+        // may be publishing its acknowledgment concurrently with this failure.
+        (0, updateOperation_1.writeUpdateJson)(node_path_1.default.join(directory, 'canceled.json'), { id, reason: error instanceof Error ? error.message : String(error) });
+        // A supervisor command can fail after launching its task. Once the helper
+        // acknowledged, it owns reconciliation and any post-shutdown locks; never
+        // overwrite its progress or release those locks from the requesting CLI.
+        if ((0, updateOperation_1.readUpdateJournal)(file).helperPid)
+            return presentUpdate(file, parsed);
+        (0, updateOperation_1.writeUpdateJson)(file, { ...(0, updateOperation_1.readUpdateJournal)(file), phase: 'failed', error: error instanceof Error ? error.message : String(error) });
+        try {
+            (0, updateSupervisor_1.removeUpdateSupervisor)(id);
+        }
+        catch { /* the operation is durably failed */ }
+        for (const lock of [preflight.lockDirectory, ...preflight.additionalLockDirectories])
+            (0, updateOperation_1.releaseUpdateLock)(lock, id);
+        throw error;
+    }
+    return presentUpdate(file, parsed);
+}
+async function presentUpdate(file, parsed) {
+    let journal = (0, updateOperation_1.readUpdateJournal)(file);
+    if (parsed.updateWait) {
+        while (!terminal(journal)) {
+            await pause(500);
+            journal = (0, updateOperation_1.readUpdateJournal)(file);
+        }
+    }
+    console.log(JSON.stringify({ ...journal, statusFile: file, next: `runpane update --status ${journal.id} --pane-dir ${JSON.stringify(node_path_1.default.dirname(node_path_1.default.dirname(node_path_1.default.dirname(file))))} --wait --json` }, null, 2));
+    return journal.phase === 'failed' || journal.phase === 'needs-attention' ? 1 : 0;
+}
+async function runUpdateHelper(directory, artifacts = { stageApplication: updateArtifacts_1.stageApp }) {
+    const file = node_path_1.default.join(directory, 'status.json');
+    const preflight = (0, boundaryDecoder_1.decodeBoundary)(JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(directory, 'preflight.json'), 'utf8')), preflightSchema);
+    const options = { paneDir: preflight.paneDir, timeoutMs: 15_000 };
+    const host = preflight.host;
+    const id = (0, updateOperation_1.readUpdateJournal)(file).id;
+    if (node_path_1.default.resolve(directory) !== operationDirectory(preflight.paneDir, id))
+        throw new Error('Update operation path does not match its target.');
+    const request = { id, bootId: host?.bootId ?? '' };
+    const manifest = node_path_1.default.join(directory, 'staged.json');
+    const result = await (0, updateOperation_1.executeUpdate)(file, { run: async (step, journal) => {
+            if (step === 'stage') {
+                (0, updateSupervisor_1.checkUpdateSupervisor)();
+                if (node_fs_1.default.existsSync(manifest)) {
+                    const staged = (0, boundaryDecoder_1.decodeBoundary)(JSON.parse(node_fs_1.default.readFileSync(manifest, 'utf8')), stagedSchema);
+                    return { version: staged.app?.version ?? staged.cli.version };
+                }
+                for (const folder of ['app', 'cli'])
+                    node_fs_1.default.rmSync(node_path_1.default.join(directory, folder), { recursive: true, force: true });
+                let app = null;
+                let cli = null;
+                const npm = preflight.npmSource;
+                if (host)
+                    app = await artifacts.stageApplication(host, preflight.requestedVersion, node_path_1.default.join(directory, 'app'));
+                if (preflight.cli)
+                    cli = preflight.cli.owner === 'pip'
+                        ? (0, updatePython_1.stagePythonCli)(preflight.cli.packageManager, app?.version ?? preflight.requestedVersion, node_path_1.default.join(directory, 'cli'))
+                        : (0, updatePackage_1.stageCliPackage)(preflight.runtimeSource, npm, app?.version ?? preflight.requestedVersion, node_path_1.default.join(directory, 'cli'));
+                if (preflight.cli?.owner === 'pip' && cli)
+                    (0, node_child_process_1.execFileSync)(preflight.cli.packageManager, ['-m', 'pip', 'install', '--dry-run', '--no-index', '--no-deps', ...(preflight.cli.pipUser ? ['--user'] : []), cli.archive], { timeout: 30_000, stdio: 'pipe' });
+                (0, updateOperation_1.writeUpdateJson)(manifest, { app, cli, npm });
+                return { version: app?.version ?? cli.version };
+            }
+            const staged = (0, boundaryDecoder_1.decodeBoundary)(JSON.parse(node_fs_1.default.readFileSync(manifest, 'utf8')), stagedSchema);
+            if (step === 'checkpoint' && host) {
+                (0, updateCapacity_1.assertUpdateCapacity)(preflight.paneDir, host, staged.app.installPath, preflight.cli?.prefix);
+                const current = await (0, daemonClient_1.invokeDaemon)('runpane:update:host', [], updatePreflight_1.updateHostSchema, options);
+                if (current.bootId !== host.bootId || current.executable !== host.executable || current.endpointFingerprint !== host.endpointFingerprint)
+                    throw new Error('The target host changed after preflight. Pane remains running.');
+                await (0, daemonClient_1.invokeDaemon)('runpane:update:checkpoint', [request], boundaryDecoder_1.boundary.jsonObject, options);
+            }
+            if (step === 'stop' && host) {
+                // Reconcile an acknowledged stop after a helper restart. Never kill a
+                // reused PID, another Pane installation, or a replacement daemon.
+                if (processExists(host.pid)) {
+                    try {
+                        await (0, daemonClient_1.invokeDaemon)('runpane:update:stop', [request], boundaryDecoder_1.boundary.object({ accepted: boundaryDecoder_1.boundary.boolean }), options);
+                    }
+                    catch (error) {
+                        if (processExists(host.pid))
+                            throw error;
+                    }
+                }
+                const deadline = Date.now() + 30_000;
+                while (processExists(host.pid) && Date.now() < deadline)
+                    await pause(200);
+                if (processExists(host.pid))
+                    throw new Error('Pane did not exit within 30 seconds. No installer was started. Inspect the host before retrying.');
+                (0, updateOperation_1.assertUpdateQuiescence)(directory, { id, bootId: host.bootId, pid: host.pid });
+            }
+            if (step === 'snapshot' && host) {
+                const snapshot = node_path_1.default.join(directory, 'snapshot');
+                const ready = node_path_1.default.join(snapshot, 'complete.json');
+                if (!node_fs_1.default.existsSync(ready)) {
+                    node_fs_1.default.rmSync(snapshot, { recursive: true, force: true });
+                    node_fs_1.default.mkdirSync(snapshot, { recursive: true, mode: 0o700 });
+                    for (const [name, source] of [['data', host.paneDir], ['profile', host.userData]]) {
+                        const target = node_path_1.default.join(snapshot, name);
+                        node_fs_1.default.mkdirSync(target, { recursive: true, mode: 0o700 });
+                        for (const entry of node_fs_1.default.readdirSync(source)) {
+                            if (source === host.paneDir && entry === 'updates')
+                                continue;
+                            node_fs_1.default.cpSync(node_path_1.default.join(source, entry), node_path_1.default.join(target, entry), { recursive: true, verbatimSymlinks: true, filter: file => !node_fs_1.default.lstatSync(file).isSocket() && !node_path_1.default.basename(file).startsWith('Singleton') });
+                        }
+                    }
+                    (0, updateOperation_1.writeUpdateJson)(ready, { version: host.version, createdAt: new Date().toISOString() });
+                }
+            }
+            if (step === 'install') {
+                if (staged.app) {
+                    (0, updateArtifacts_1.installStagedApp)(staged.app);
+                    (0, updateOperation_1.writeUpdateJson)(file, { ...(0, updateOperation_1.readUpdateJournal)(file), appUpdated: true });
+                }
+                if (staged.cli && preflight.cli) {
+                    if (preflight.cli.owner === 'pip')
+                        (0, updatePython_1.installPythonCli)(preflight.cli.packageManager, staged.cli.archive, preflight.cli.pipUser ?? false);
+                    else if (preflight.cli.owner === 'npm')
+                        (0, updatePackage_1.runNpm)(preflight.runtimeSource, staged.npm, ['install', '--global', '--prefix', preflight.cli.prefix, '--ignore-scripts', '--offline', staged.cli.archive]);
+                    else {
+                        const target = node_path_1.default.join(preflight.cli.prefix, 'cli', id);
+                        const packageRoot = node_path_1.default.join(target, 'package');
+                        node_fs_1.default.mkdirSync(target, { recursive: true, mode: 0o700 });
+                        node_fs_1.default.cpSync(staged.cli.packageRoot, packageRoot, { recursive: true });
+                        const runtimeDirectory = node_path_1.default.join(target, 'runtime');
+                        const runtime = node_fs_1.default.existsSync(runtimeDirectory) ? node_path_1.default.join(runtimeDirectory, process.platform === 'win32' ? 'node.exe' : 'node') : (0, updateRuntime_1.stageUpdateRuntime)(preflight.runtimeSource, runtimeDirectory);
+                        (0, updatePackage_1.activateManagedCli)(preflight.paneDir, staged.cli.version, node_path_1.default.join(packageRoot, 'dist/cli.js'), runtime);
+                    }
+                }
+                return { appUpdated: Boolean(staged.app), cliUpdated: Boolean(staged.cli) };
+            }
+            if (step === 'launch' && host) {
+                let running = false;
+                try {
+                    const current = await (0, daemonClient_1.invokeDaemon)('runpane:update:host', [], updatePreflight_1.updateHostSchema, options);
+                    running = current.bootId !== host.bootId;
+                }
+                catch { /* expected after shutdown */ }
+                if (!running) {
+                    const env = { PANE_DIR: preflight.paneDir };
+                    if (preflight.disableOsIntegration)
+                        env.PANE_DISABLE_OS_INTEGRATION = '1';
+                    delete env.ELECTRON_RUN_AS_NODE;
+                    if (process.platform === 'darwin') {
+                        (0, node_child_process_1.execFileSync)('/usr/bin/open', ['-n', '-a', node_path_1.default.resolve(host.executable, '../../..'), '--env', `PANE_DIR=${preflight.paneDir}`, ...(preflight.disableOsIntegration ? ['--env', 'PANE_DISABLE_OS_INTEGRATION=1'] : []), '--args', `--user-data-dir=${host.userData}`], { timeout: 30_000 });
+                    }
+                    else {
+                        // Relaunch has its own supervisor lifetime. Completing/removing the
+                        // updater task must not tear down the new app with the helper's job.
+                        const launcher = node_path_1.default.join(directory, 'launch-app.cjs');
+                        node_fs_1.default.writeFileSync(launcher, `const {spawn}=require('node:child_process');const env={...process.env,...${JSON.stringify(env)}};delete env.ELECTRON_RUN_AS_NODE;const child=spawn(${JSON.stringify(host.executable)},${JSON.stringify([`--user-data-dir=${host.userData}`])},{stdio:'ignore',env});child.on('error',()=>process.exit(1));child.on('exit',code=>process.exit(code||0));`, { mode: 0o600 });
+                        (0, updateSupervisor_1.startUpdateSupervisor)({ id: `${id}-app`, directory, executable: preflight.runtimeSource, args: [launcher] });
+                    }
+                }
+            }
+            if (step === 'health' && staged.cli && preflight.cli) {
+                const actual = preflight.cli.owner === 'pip'
+                    ? (0, updatePython_1.identifyPythonCli)(preflight.cli.packageManager, preflight.cli.entrypoint).version
+                    : (0, node_child_process_1.execFileSync)(preflight.runtimeSource, [preflight.cli.owner === 'managed' ? node_path_1.default.join(preflight.cli.prefix, 'cli', id, 'package/dist/cli.js') : preflight.cli.entrypoint, '--version'], { encoding: 'utf8', timeout: 15_000 }).trim().split(/\s+/).pop();
+                if (actual !== staged.cli.version)
+                    throw new Error(`The active CLI reports ${actual}, expected ${staged.cli.version}.`);
+            }
+            if (step === 'health' && host) {
+                const deadline = Date.now() + 90_000;
+                let failure = '';
+                while (Date.now() < deadline) {
+                    try {
+                        const current = await (0, daemonClient_1.invokeDaemon)('runpane:update:host', [], updatePreflight_1.updateHostSchema, options);
+                        if (!current.remoteHealthy || current.bootId === host.bootId || current.version !== journal.version || current.paneDir !== host.paneDir || current.userData !== host.userData || current.executable !== host.executable || current.endpointFingerprint !== host.endpointFingerprint)
+                            throw new Error('Relaunched host version, identity, or endpoint/auth configuration does not match.');
+                        if (process.platform === 'win32')
+                            (0, updateSupervisor_1.removeUpdateSupervisor)(`${id}-app`);
+                        return { hostReachable: true };
+                    }
+                    catch (error) {
+                        failure = error instanceof Error ? error.message : String(error);
+                        await pause(500);
+                    }
+                }
+                throw new Error(`The new host failed its health check: ${failure}. The data snapshot is preserved; no automatic database downgrade was attempted.`);
+            }
+            if (step === 'restore' && host) {
+                const deadline = Date.now() + 30 * 60_000;
+                while (Date.now() < deadline) {
+                    const progress = await (0, daemonClient_1.invokeDaemon)('runpane:update:restore', [{ id }], boundaryDecoder_1.boundary.object({ complete: boundaryDecoder_1.boundary.boolean, restored: boundaryDecoder_1.boundary.array(boundaryDecoder_1.boundary.object({ panelId: boundaryDecoder_1.boundary.string, outcome: boundaryDecoder_1.boundary.string, reason: boundaryDecoder_1.boundary.string })) }), options);
+                    (0, updateOperation_1.writeUpdateJson)(file, { ...(0, updateOperation_1.readUpdateJournal)(file), restored: progress.restored });
+                    if (progress.complete)
+                        return { restored: progress.restored };
+                    await pause(500);
+                }
+                throw new Error('Panel restoration exceeded its deadline. Durable per-panel progress is preserved; inspect the operation before taking further action.');
+            }
+            return {};
+        } });
+    if (terminal(result)) {
+        // Keep failed-after-shutdown ownership for inspection; a new operation must
+        // not overwrite the recovery evidence or start a second installer.
+        if (result.phase === 'complete' || result.phase === 'failed')
+            for (const lock of [preflight.lockDirectory, ...preflight.additionalLockDirectories])
+                (0, updateOperation_1.releaseUpdateLock)(lock, id);
+        try {
+            (0, updateSupervisor_1.removeUpdateSupervisor)(id);
+        }
+        catch { /* terminal journal prevents another execution */ }
+    }
+    return result.phase === 'complete' ? 0 : 1;
+}
+//# sourceMappingURL=update.js.map

package/dist/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../src/update.ts"],"names":[],"mappings":";;;;;AA8CA,8BAmDC;AAgBD,0CA4IC;AA7PD,qDAAwD;AACxD,sDAAyB;AACzB,0DAA6B;AAC7B,6CAAyC;AACzC,2DAAkD;AAElD,uDAA6D;AAC7D,iDAAoE;AACpE,qCAAwC;AACxC,uDAAsE;AACtE,mDAAqD;AACrD,yDAA0G;AAC1G,uDAAsK;AACtK,mDAA+G;AAC/G,iDAAqF;AACrF,uDAA+E;AAE/E,MAAM,eAAe,GAAG,0BAAQ,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,0BAAQ,CAAC,cAAc,EAAE,OAAO,EAAE,0BAAQ,CAAC,cAAc;IAClE,KAAK,EAAE,0BAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,gBAAgB,EAAE,0BAAQ,CAAC,cAAc;IAC7F,IAAI,EAAE,0BAAQ,CAAC,QAAQ,CAAC,kCAAgB,CAAC;IACzC,GAAG,EAAE,0BAAQ,CAAC,QAAQ,CAAC,0BAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,0BAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,0BAAQ,CAAC,cAAc,EAAE,OAAO,EAAE,0BAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,0BAAQ,CAAC,cAAc,EAAE,cAAc,EAAE,0BAAQ,CAAC,QAAQ,CAAC,0BAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,0BAAQ,CAAC,QAAQ,CAAC,0BAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnT,oBAAoB,EAAE,0BAAQ,CAAC,QAAQ,CAAC,0BAAQ,CAAC,OAAO,CAAC;IACzD,SAAS,EAAE,0BAAQ,CAAC,QAAQ,CAAC,0BAAQ,CAAC,cAAc,CAAC;IACrD,aAAa,EAAE,0BAAQ,CAAC,cAAc,EAAE,aAAa,EAAE,0BAAQ,CAAC,cAAc,EAAE,yBAAyB,EAAE,0BAAQ,CAAC,KAAK,CAAC,0BAAQ,CAAC,cAAc,CAAC;IAClJ,WAAW,EAAE,0BAAQ,CAAC,KAAK,CAAC,0BAAQ,CAAC,MAAM,CAAC;CAC7C,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,0BAAQ,CAAC,MAAM,CAAC;IACnC,GAAG,EAAE,0BAAQ,CAAC,QAAQ,CAAC,0BAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0BAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,0BAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,0BAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,0BAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,0BAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACpL,GAAG,EAAE,0BAAQ,CAAC,QAAQ,CAAC,0BAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0BAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,0BAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,0BAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7H,GAAG,EAAE,0BAAQ,CAAC,QAAQ,CAAC,0BAAQ,CAAC,MAAM,CAAC;CACxC,CAAC,CAAC;AACH,MAAM,QAAQ,GAAG,CAAC,OAAsB,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC/G,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AACpF,SAAS,kBAAkB,CAAC,OAAe,EAAE,EAAU;IACrD,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,qBAAY,CAAC,eAAe,EAAE,mDAAmD,EAAE,wCAAwC,CAAC,CAAC;IAC7K,OAAO,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AACD,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,IAAA,gCAAc,EAAC,KAAK,EAAE,0BAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,0BAAQ,CAAC,QAAQ,CAAC,0BAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACvG,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,SAAS,CAAC,MAAkB;IAChD,MAAM,OAAO,GAAG,mBAAI,CAAC,OAAO,CAAC,IAAA,mCAAoB,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,YAAY;QAAE,OAAO,aAAa,CAAC,mBAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAClI,MAAM,SAAS,GAAG,MAAM,IAAA,iCAAe,EAAC,MAAM,EAAE,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC;IAC9E,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IACrG,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,CAAC,KAAK,OAAO,SAAS,CAAC,OAAO,WAAW,SAAS,CAAC,IAAI,EAAE,UAAU,IAAI,cAAc,UAAU,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC;IAC5O,MAAM,EAAE,GAAG,IAAA,wBAAU,GAAE,CAAC;IACxB,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACjD,IAAA,iCAAe,EAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAClU,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,SAAS,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5G,MAAM,IAAI,GAAG,IAAA,iCAAe,EAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,KAAK,MAAM,KAAK,IAAI,QAAQ;oBAAE,IAAA,mCAAiB,EAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC3D,OAAO,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAChD,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,QAAQ;YAAE,IAAA,mCAAiB,EAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,CAAC;IACd,CAAC;IACD,iBAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,kCAAkB,EAAC,SAAS,CAAC,aAAa,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,IAAA,+BAAe,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChF,IAAA,iCAAe,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,EAAE,GAAG,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;QAClG,2EAA2E;QAC3E,kEAAkE;QAClE,IAAA,iCAAY,EAAC,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,oBAAoB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACrH,IAAA,wCAAqB,EAAC,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5G,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;QACrC,OAAO,CAAC,IAAA,mCAAiB,EAAC,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;YAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACrF,IAAI,CAAC,IAAA,mCAAiB,EAAC,IAAI,CAAC,CAAC,SAAS;YAAE,MAAM,IAAI,qBAAY,CAAC,6BAA6B,EAAE,qEAAqE,EAAE,WAAW,SAAS,kDAAkD,CAAC,CAAC;IAC/O,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,yEAAyE;QACzE,uEAAuE;QACvE,IAAA,iCAAe,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/H,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,IAAI,IAAA,mCAAiB,EAAC,IAAI,CAAC,CAAC,SAAS;YAAE,OAAO,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1E,IAAA,iCAAe,EAAC,IAAI,EAAE,EAAE,GAAG,IAAA,mCAAiB,EAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtI,IAAI,CAAC;YAAC,IAAA,yCAAsB,EAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,qCAAqC,CAAC,CAAC;QACnF,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,SAAS,CAAC,yBAAyB,CAAC;YAAE,IAAA,mCAAiB,EAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClH,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,MAAkB;IAC3D,IAAI,OAAO,GAAG,IAAA,mCAAiB,EAAC,IAAI,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,OAAO,GAAG,IAAA,mCAAiB,EAAC,IAAI,CAAC,CAAC;QAAC,CAAC;IACrF,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,2BAA2B,OAAO,CAAC,EAAE,eAAe,IAAI,CAAC,SAAS,CAAC,mBAAI,CAAC,OAAO,CAAC,mBAAI,CAAC,OAAO,CAAC,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACjN,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC;AAOM,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,YAAkC,EAAE,gBAAgB,EAAE,0BAAQ,EAAE;IACvH,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAC/H,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IAC5B,MAAM,EAAE,GAAG,IAAA,mCAAiB,EAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACtC,IAAI,mBAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,kBAAkB,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC/I,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAa,EAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;YACtE,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,IAAA,wCAAqB,GAAE,CAAC;gBACxB,IAAI,iBAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5B,MAAM,MAAM,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;oBAC3F,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAI,CAAC,OAAO,EAAE,CAAC;gBACjE,CAAC;gBACD,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;oBAAE,iBAAE,CAAC,MAAM,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/G,IAAI,GAAG,GAAqB,IAAI,CAAC;gBACjC,IAAI,GAAG,GAAqB,IAAI,CAAC;gBACjC,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC;gBAChC,IAAI,IAAI;oBAAE,GAAG,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,gBAAgB,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;gBAChH,IAAI,SAAS,CAAC,GAAG;oBAAE,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK;wBACpD,CAAC,CAAC,IAAA,6BAAc,EAAC,SAAS,CAAC,GAAG,CAAC,cAAe,EAAE,GAAG,EAAE,OAAO,IAAI,SAAS,CAAC,gBAAgB,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;wBACxH,CAAC,CAAC,IAAA,+BAAe,EAAC,SAAS,CAAC,aAAa,EAAE,GAAI,EAAE,GAAG,EAAE,OAAO,IAAI,SAAS,CAAC,gBAAgB,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC5H,IAAI,SAAS,CAAC,GAAG,EAAE,KAAK,KAAK,KAAK,IAAI,GAAG;oBAAE,IAAA,iCAAY,EAAC,SAAS,CAAC,GAAG,CAAC,cAAe,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBACxP,IAAA,iCAAe,EAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC7C,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,GAAI,CAAC,OAAO,EAAE,CAAC;YACnD,CAAC;YACD,MAAM,MAAM,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;YAC3F,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,EAAE,CAAC;gBAClC,IAAA,qCAAoB,EAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,GAAI,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC9F,MAAM,OAAO,GAAG,MAAM,IAAA,2BAAY,EAAC,qBAAqB,EAAE,EAAE,EAAE,kCAAgB,EAAE,OAAO,CAAC,CAAC;gBACzF,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,mBAAmB,KAAK,IAAI,CAAC,mBAAmB;oBAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;gBAC5N,MAAM,IAAA,2BAAY,EAAC,2BAA2B,EAAE,CAAC,OAAO,CAAC,EAAE,0BAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC3F,CAAC;YACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC;gBAC5B,sEAAsE;gBACtE,kEAAkE;gBAClE,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBAAC,MAAM,IAAA,2BAAY,EAAC,qBAAqB,EAAE,CAAC,OAAO,CAAC,EAAE,0BAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,0BAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;oBAAC,CAAC;oBACvH,OAAO,KAAK,EAAE,CAAC;wBAAC,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;4BAAE,MAAM,KAAK,CAAC;oBAAC,CAAC;gBAC7D,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;gBACrC,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;oBAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC1E,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;gBACjJ,IAAA,wCAAsB,EAAC,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBAClD,MAAM,KAAK,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;gBACnD,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1B,iBAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACtD,iBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBACzD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;wBAClF,MAAM,MAAM,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;wBACzC,iBAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;wBACvD,KAAK,MAAM,KAAK,IAAI,iBAAE,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;4BAC3C,IAAI,MAAM,KAAK,IAAI,CAAC,OAAO,IAAI,KAAK,KAAK,SAAS;gCAAE,SAAS;4BAC7D,iBAAE,CAAC,MAAM,CAAC,mBAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,mBAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,iBAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,mBAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;wBAC7M,CAAC;oBACH,CAAC;oBACD,IAAA,iCAAe,EAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBACzF,CAAC;YACH,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;oBACf,IAAA,kCAAgB,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC7B,IAAA,iCAAe,EAAC,IAAI,EAAE,EAAE,GAAG,IAAA,mCAAiB,EAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1E,CAAC;gBACD,IAAI,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;oBAChC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK;wBAAE,IAAA,+BAAgB,EAAC,SAAS,CAAC,GAAG,CAAC,cAAe,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC;yBAClI,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK;wBAAE,IAAA,sBAAM,EAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,GAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;yBAChM,CAAC;wBACJ,MAAM,MAAM,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;wBAC1D,MAAM,WAAW,GAAG,mBAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;wBACjD,iBAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;wBACvD,iBAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBACpE,MAAM,gBAAgB,GAAG,mBAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;wBACtD,MAAM,OAAO,GAAG,iBAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAA,kCAAkB,EAAC,SAAS,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;wBAClM,IAAA,kCAAkB,EAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,mBAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;oBAC5G,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9E,CAAC;YACD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE,CAAC;gBAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,IAAI,CAAC;oBAAC,MAAM,OAAO,GAAG,MAAM,IAAA,2BAAY,EAAC,qBAAqB,EAAE,EAAE,EAAE,kCAAgB,EAAE,OAAO,CAAC,CAAC;oBAAC,OAAO,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;gBACnL,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,GAAG,GAAsB,EAAE,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;oBAC/D,IAAI,SAAS,CAAC,oBAAoB;wBAAE,GAAG,CAAC,2BAA2B,GAAG,GAAG,CAAC;oBAC1E,OAAO,GAAG,CAAC,oBAAoB,CAAC;oBAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAClC,IAAA,iCAAY,EAAC,eAAe,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,YAAY,SAAS,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,mBAAmB,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC7R,CAAC;yBAAM,CAAC;wBACN,oEAAoE;wBACpE,qEAAqE;wBACrE,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;wBACxD,iBAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,4EAA4E,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,uDAAuD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,mBAAmB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,4GAA4G,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;wBACvY,IAAA,wCAAqB,EAAC,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBAC/G,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;gBACrD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK;oBAC1C,CAAC,CAAC,IAAA,gCAAiB,EAAC,SAAS,CAAC,GAAG,CAAC,cAAe,EAAE,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO;oBACpF,CAAC,CAAC,IAAA,iCAAY,EAAC,SAAS,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;gBAC5P,IAAI,MAAM,KAAK,MAAM,CAAC,GAAG,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,cAAc,MAAM,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;YAC1H,CAAC;YACD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;gBACrC,IAAI,OAAO,GAAG,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;oBAC7B,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,MAAM,IAAA,2BAAY,EAAC,qBAAqB,EAAE,EAAE,EAAE,kCAAgB,EAAE,OAAO,CAAC,CAAC;wBACzF,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,mBAAmB,KAAK,IAAI,CAAC,mBAAmB;4BAAE,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;wBAC1X,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;4BAAE,IAAA,yCAAsB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;wBACtE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;oBACjC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAAC,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;oBAAC,CAAC;gBACzG,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,kFAAkF,CAAC,CAAC;YACtJ,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;gBAC1C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;oBAC7B,MAAM,QAAQ,GAAG,MAAM,IAAA,2BAAY,EAAC,wBAAwB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,0BAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,0BAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,0BAAQ,CAAC,KAAK,CAAC,0BAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0BAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,0BAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,0BAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;oBAC9P,IAAA,iCAAe,EAAC,IAAI,EAAE,EAAE,GAAG,IAAA,mCAAiB,EAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACnF,IAAI,QAAQ,CAAC,QAAQ;wBAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;oBAC9D,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBACnB,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,uIAAuI,CAAC,CAAC;YAC3J,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACrB,4EAA4E;QAC5E,mEAAmE;QACnE,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ;YAAE,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,SAAS,CAAC,yBAAyB,CAAC;gBAAE,IAAA,mCAAiB,EAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChL,IAAI,CAAC;YAAC,IAAA,yCAAsB,EAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iDAAiD,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/updateArtifacts.d.ts

@@ -0,0 +1,12 @@
+import type { UpdateHost } from './updatePreflight';
+export interface StagedApp {
+    version: string;
+    artifact: string;
+    installPath: string;
+    backupPath: string;
+    sha256: string;
+}
+export declare function stageApp(host: UpdateHost, requested: string, directory: string): Promise<StagedApp>;
+/** Replacement is reconciled from owned sibling paths after a helper restart. */
+export declare function installStagedApp(staged: StagedApp): void;
+//# sourceMappingURL=updateArtifacts.d.ts.map

package/dist/updateArtifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateArtifacts.d.ts","sourceRoot":"","sources":["../src/updateArtifacts.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAIpD,MAAM,WAAW,SAAS;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAczH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAqCzG;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAsBxD"}

package/dist/updateArtifacts.js

@@ -0,0 +1,112 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stageApp = stageApp;
+exports.installStagedApp = installStagedApp;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
+const releases_1 = require("./releases");
+const download_1 = require("./download");
+const platform_1 = require("./platform");
+const errors_1 = require("./errors");
+const boundaryDecoder_1 = require("./boundaryDecoder");
+function sha(file) { return (0, node_crypto_1.createHash)('sha256').update(node_fs_1.default.readFileSync(file)).digest('hex'); }
+function macSigner(bundle) {
+    (0, node_child_process_1.execFileSync)('/usr/bin/codesign', ['--verify', '--deep', '--strict', bundle], { timeout: 60_000 });
+    const result = (0, node_child_process_1.spawnSync)('/usr/bin/codesign', ['-dv', '--verbose=2', bundle], { encoding: 'utf8', timeout: 10_000 });
+    const team = result.stderr.match(/^TeamIdentifier=(.+)$/m)?.[1];
+    if (result.status !== 0 || !team || team === 'not set')
+        throw new Error('The application has no verified signing team.');
+    return team;
+}
+function windowsSigner(file) {
+    const script = `$s=Get-AuthenticodeSignature -LiteralPath '${file.replace(/'/g, "''")}'; if ($s.Status -ne 'Valid') { throw 'Invalid application signature' }; $s.SignerCertificate.Thumbprint`;
+    return (0, node_child_process_1.execFileSync)('powershell.exe', ['-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(script, 'utf16le').toString('base64')], { encoding: 'utf8', timeout: 30_000 }).trim();
+}
+async function stageApp(host, requested, directory) {
+    const platform = (0, platform_1.detectPlatform)();
+    const resolved = await (0, releases_1.resolveRelease)({ version: requested, channel: 'stable', source: 'npm', platform, format: platform.os === 'darwin' ? 'zip' : platform.os === 'win32' ? 'exe' : 'appimage', target: 'client' });
+    const metadata = resolved.release.assets?.find(asset => asset.name === 'continuity.json');
+    if (!metadata)
+        throw new errors_1.RunpaneError('ERR_UPDATE_TARGET_PROTOCOL', 'This release does not declare the continuity protocol. Pane remains running.', 'Choose a release supporting independent updates; older installers require a manual update.');
+    const response = await fetch(metadata.browser_download_url, { signal: AbortSignal.timeout(30_000) });
+    if (!response.ok)
+        throw new Error('The release continuity manifest could not be downloaded. Pane remains running.');
+    const manifest = (0, boundaryDecoder_1.decodeBoundary)(await response.json(), boundaryDecoder_1.boundary.object({ protocol: boundaryDecoder_1.boundary.literal(1), version: boundaryDecoder_1.boundary.nonEmptyString, artifacts: boundaryDecoder_1.boundary.array(boundaryDecoder_1.boundary.object({ name: boundaryDecoder_1.boundary.nonEmptyString, sha256: boundaryDecoder_1.boundary.nonEmptyString })) }));
+    if (manifest.version !== resolved.release.tag_name.replace(/^v/, ''))
+        throw new Error('The continuity manifest identifies a different release.');
+    const expected = manifest.artifacts.find(item => item.name === resolved.artifact.name)?.sha256;
+    if (!expected || !/^[a-f0-9]{64}$/i.test(expected))
+        throw new Error('The selected artifact is missing from the continuity manifest.');
+    const downloaded = await (0, download_1.downloadArtifact)(resolved, directory);
+    if (sha(downloaded.path) !== expected.toLowerCase())
+        throw new Error('The update artifact does not match the continuity manifest. Pane remains running.');
+    const version = resolved.release.tag_name.replace(/^v/, '');
+    let artifact = downloaded.path;
+    const installPath = process.platform === 'darwin' ? node_path_1.default.resolve(host.executable, '../../..') : process.platform === 'linux' ? host.executable : node_path_1.default.dirname(host.executable);
+    if (process.platform === 'darwin') {
+        const unpacked = node_path_1.default.join(directory, 'unpacked');
+        node_fs_1.default.mkdirSync(unpacked);
+        (0, node_child_process_1.execFileSync)('/usr/bin/ditto', ['-x', '-k', artifact, unpacked], { timeout: 120_000 });
+        artifact = node_path_1.default.join(unpacked, 'Pane.app');
+        if (macSigner(installPath) !== macSigner(artifact))
+            throw new Error('The update signing team does not match the installed Pane.');
+        (0, node_child_process_1.execFileSync)('/usr/sbin/spctl', ['--assess', '--type', 'execute', artifact], { timeout: 60_000 });
+        const actual = (0, node_child_process_1.execFileSync)('/usr/libexec/PlistBuddy', ['-c', 'Print :CFBundleShortVersionString', node_path_1.default.join(artifact, 'Contents/Info.plist')], { encoding: 'utf8' }).trim();
+        if (actual !== version)
+            throw new Error('The staged app version does not match the requested release.');
+    }
+    else if (process.platform === 'win32') {
+        if (windowsSigner(host.executable) !== windowsSigner(artifact))
+            throw new Error('The installer signer does not match the installed Pane.');
+    }
+    else {
+        // The public installer historically treats checksums as optional. Independent
+        // updates require one before shutting down a healthy Linux host.
+        const response = await fetch(resolved.checksumUrl, { signal: AbortSignal.timeout(30_000) });
+        if (!response.ok)
+            throw new Error('A release checksum is required for an independent Linux update.');
+        const line = (await response.text()).split(/\r?\n/).find(item => item.trim().endsWith(downloaded.fileName));
+        if (!line || line.trim().split(/\s+/)[0].toLowerCase() !== sha(artifact))
+            throw new Error('The AppImage release checksum is missing or invalid.');
+        node_fs_1.default.chmodSync(artifact, 0o755);
+    }
+    return { version, artifact, installPath, backupPath: `${installPath}.before-${node_path_1.default.basename(node_path_1.default.dirname(directory))}`, sha256: sha(downloaded.path) };
+}
+/** Replacement is reconciled from owned sibling paths after a helper restart. */
+function installStagedApp(staged) {
+    if (process.platform === 'win32') {
+        // /D is deliberately last, with no shell. NSIS owns its exact registered
+        // installation and migration; failures retain the data snapshot for repair.
+        // NSIS /D consumes the unquoted remainder, including spaces:
+        // https://nsis.sourceforge.io/Docs/Chapter3.html#installerusage
+        const installed = (0, node_child_process_1.spawnSync)(staged.artifact, ['/S', '--updated', `/D=${staged.installPath}`], { timeout: 180_000, stdio: 'pipe', windowsVerbatimArguments: true });
+        if (installed.error)
+            throw installed.error;
+        if (installed.status !== 0)
+            throw new errors_1.RunpaneError('ERR_UPDATE_INSTALL', `The installer exited with ${installed.status}. The data snapshot was retained.`, 'Inspect the operation and installer log before retrying.');
+        return;
+    }
+    const incoming = `${staged.installPath}.incoming-${node_path_1.default.basename(staged.backupPath)}`;
+    if (!node_fs_1.default.existsSync(staged.backupPath)) {
+        if (node_fs_1.default.existsSync(incoming))
+            node_fs_1.default.rmSync(incoming, { recursive: true });
+        if (process.platform === 'darwin')
+            (0, node_child_process_1.execFileSync)('/usr/bin/ditto', [staged.artifact, incoming], { timeout: 120_000 });
+        else {
+            node_fs_1.default.copyFileSync(staged.artifact, incoming);
+            node_fs_1.default.chmodSync(incoming, 0o755);
+        }
+        node_fs_1.default.renameSync(staged.installPath, staged.backupPath);
+    }
+    if (!node_fs_1.default.existsSync(staged.installPath)) {
+        if (!node_fs_1.default.existsSync(incoming))
+            throw new errors_1.RunpaneError('ERR_UPDATE_RECOVERY', 'The prepared app is missing after the old installation was preserved.', `Inspect ${staged.backupPath}; do not restore old application data over a migrated database.`);
+        node_fs_1.default.renameSync(incoming, staged.installPath);
+    }
+}
+//# sourceMappingURL=updateArtifacts.js.map

package/dist/updateArtifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateArtifacts.js","sourceRoot":"","sources":["../src/updateArtifacts.ts"],"names":[],"mappings":";;;;;AAyBA,4BAqCC;AAGD,4CAsBC;AAvFD,sDAAyB;AACzB,0DAA6B;AAC7B,2DAA6D;AAC7D,6CAAyC;AACzC,yCAA4C;AAC5C,yCAA8C;AAC9C,yCAA4C;AAE5C,qCAAwC;AACxC,uDAA6D;AAG7D,SAAS,GAAG,CAAC,IAAY,IAAY,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/G,SAAS,SAAS,CAAC,MAAc;IAC/B,IAAA,iCAAY,EAAC,mBAAmB,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,IAAA,8BAAS,EAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACrH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACzH,OAAO,IAAI,CAAC;AACd,CAAC;AACD,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,MAAM,GAAG,8CAA8C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,0GAA0G,CAAC;IAChM,OAAO,IAAA,iCAAY,EAAC,gBAAgB,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/L,CAAC;AAEM,KAAK,UAAU,QAAQ,CAAC,IAAgB,EAAE,SAAiB,EAAE,SAAiB;IACnF,MAAM,QAAQ,GAAG,IAAA,yBAAc,GAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,IAAA,yBAAc,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrN,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC;IAC1F,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,qBAAY,CAAC,4BAA4B,EAAE,8EAA8E,EAAE,4FAA4F,CAAC,CAAC;IAClP,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IACpH,MAAM,QAAQ,GAAG,IAAA,gCAAc,EAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,0BAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,0BAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,0BAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,0BAAQ,CAAC,KAAK,CAAC,0BAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,0BAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,0BAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7P,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACjJ,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAC/F,IAAI,CAAC,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACtI,MAAM,UAAU,GAAG,MAAM,IAAA,2BAAgB,EAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC/D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;IAC1J,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5D,IAAI,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC;IAC/B,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/K,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAClD,iBAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvB,IAAA,iCAAY,EAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACvF,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC3C,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAClI,IAAA,iCAAY,EAAC,iBAAiB,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,IAAA,iCAAY,EAAC,yBAAyB,EAAE,CAAC,IAAI,EAAE,mCAAmC,EAAE,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7K,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAC1G,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7I,CAAC;SAAM,CAAC;QACN,8EAA8E;QAC9E,iEAAiE;QACjE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrG,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5G,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAClJ,iBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,WAAW,WAAW,mBAAI,CAAC,QAAQ,CAAC,mBAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;AACzJ,CAAC;AAED,iFAAiF;AACjF,SAAgB,gBAAgB,CAAC,MAAiB;IAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,yEAAyE;QACzE,4EAA4E;QAC5E,6DAA6D;QAC7D,gEAAgE;QAChE,MAAM,SAAS,GAAG,IAAA,8BAAS,EAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,CAAC;QACnK,IAAI,SAAS,CAAC,KAAK;YAAE,MAAM,SAAS,CAAC,KAAK,CAAC;QAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,qBAAY,CAAC,oBAAoB,EAAE,6BAA6B,SAAS,CAAC,MAAM,mCAAmC,EAAE,0DAA0D,CAAC,CAAC;QACvN,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,WAAW,aAAa,mBAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;IACtF,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,IAAI,iBAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,iBAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,IAAA,iCAAY,EAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;aAChH,CAAC;YAAC,iBAAE,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAAC,iBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QACnF,iBAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,qBAAY,CAAC,qBAAqB,EAAE,uEAAuE,EAAE,WAAW,MAAM,CAAC,UAAU,iEAAiE,CAAC,CAAC;QACpP,iBAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/updateCapacity.d.ts

@@ -0,0 +1,5 @@
+export declare function assertUpdateCapacity(paneDir: string, host: {
+    paneDir: string;
+    userData: string;
+} | null, install: string, cliPrefix?: string): void;
+//# sourceMappingURL=updateCapacity.d.ts.map

package/dist/updateCapacity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateCapacity.d.ts","sourceRoot":"","sources":["../src/updateCapacity.ts"],"names":[],"mappings":"AAmCA,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAmBnJ"}

package/dist/updateCapacity.js

@@ -0,0 +1,72 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertUpdateCapacity = assertUpdateCapacity;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_module_1 = require("node:module");
+const node_path_1 = __importDefault(require("node:path"));
+const errors_1 = require("./errors");
+// Electron virtualizes app.asar as a directory. Capacity and snapshots concern
+// physical files; the staged standalone Node helper has these semantics too.
+// SAFETY: Electron's built-in original-fs exposes the unchanged Node fs API.
+const fs = process.versions.electron
+    ? (0, node_module_1.createRequire)(__filename)('original-fs')
+    : node_fs_1.default;
+/** Live Chromium files may be exclusively locked until clean shutdown on Windows. */
+function updateSnapshotBytes(source, excludeUpdates = false, liveProfile = false) {
+    let total = 0;
+    for (const entry of fs.readdirSync(source)) {
+        if ((excludeUpdates && entry === 'updates') || entry.startsWith('Singleton'))
+            continue;
+        const file = node_path_1.default.join(source, entry);
+        const stat = fs.lstatSync(file);
+        if (stat.isSocket())
+            continue;
+        if (stat.isDirectory())
+            total += updateSnapshotBytes(file, false, liveProfile);
+        else if (stat.isSymbolicLink()) {
+            fs.readlinkSync(file);
+            total += stat.size;
+        }
+        else if (stat.isFile()) {
+            try {
+                const fd = fs.openSync(file, 'r');
+                fs.closeSync(fd);
+            }
+            catch (error) {
+                // A sharing violation is not an ACL denial. Count the physical size
+                // now; the post-quiescence snapshot must read/copy it before install.
+                if (!(liveProfile && process.platform === 'win32' && error instanceof Error && 'code' in error && error.code === 'EBUSY'))
+                    throw error;
+            }
+            total += stat.size;
+        }
+        else
+            throw new errors_1.RunpaneError('ERR_UPDATE_SNAPSHOT_ENTRY', `The recovery snapshot cannot copy ${file}. Pane remains running.`, 'Move the unsupported special file outside Pane data and retry.');
+    }
+    return total;
+}
+function assertUpdateCapacity(paneDir, host, install, cliPrefix) {
+    const GiB = 1024 ** 3;
+    const installBytes = host ? (fs.statSync(install).isDirectory() ? updateSnapshotBytes(install) : fs.statSync(install).size) : 0;
+    const snapshotBytes = host ? updateSnapshotBytes(host.paneDir, true) + updateSnapshotBytes(host.userData, false, true) : 0;
+    const requirements = [
+        { directory: paneDir, bytes: snapshotBytes * 1.2 + (host ? installBytes * 3 : 0) + 2 * GiB },
+        ...(host ? [{ directory: node_path_1.default.dirname(install), bytes: installBytes * 2 }] : []),
+        ...(cliPrefix ? [{ directory: cliPrefix, bytes: GiB }] : []),
+    ];
+    const volumes = new Map();
+    for (const requirement of requirements) {
+        const device = fs.statSync(requirement.directory).dev;
+        const prior = volumes.get(device);
+        volumes.set(device, { directory: requirement.directory, bytes: (prior?.bytes ?? 0) + requirement.bytes });
+    }
+    for (const { directory, bytes } of volumes.values()) {
+        const disk = fs.statfsSync(directory);
+        if (disk.bavail * disk.bsize < bytes)
+            throw new errors_1.RunpaneError('ERR_UPDATE_DISK_SPACE', `The volume containing ${directory} needs at least ${(bytes / GiB).toFixed(1)} GiB free for staging, replacement and recovery. Pane remains running.`, 'Free space on that volume and retry.');
+    }
+}
+//# sourceMappingURL=updateCapacity.js.map

package/dist/updateCapacity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateCapacity.js","sourceRoot":"","sources":["../src/updateCapacity.ts"],"names":[],"mappings":";;;;;AAmCA,oDAmBC;AAtDD,sDAA6B;AAC7B,6CAA4C;AAC5C,0DAA6B;AAC7B,qCAAwC;AAExC,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,EAAE,GAAkB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACjD,CAAC,CAAC,IAAA,2BAAa,EAAC,UAAU,CAAC,CAAC,aAAa,CAAkB;IAC3D,CAAC,CAAC,iBAAM,CAAC;AAEX,qFAAqF;AACrF,SAAS,mBAAmB,CAAC,MAAc,EAAE,cAAc,GAAG,KAAK,EAAE,WAAW,GAAG,KAAK;IACtF,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,cAAc,IAAI,KAAK,KAAK,SAAS,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,SAAS;QACvF,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,QAAQ,EAAE;YAAE,SAAS;QAC9B,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,KAAK,IAAI,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;aAC1E,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;QAAC,CAAC;aACzE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACvB,IAAI,CAAC;gBAAC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAC5D,OAAO,KAAK,EAAE,CAAC;gBACb,oEAAoE;gBACpE,sEAAsE;gBACtE,IAAI,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;oBAAE,MAAM,KAAK,CAAC;YACzI,CAAC;YACD,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;QACrB,CAAC;;YAAM,MAAM,IAAI,qBAAY,CAAC,2BAA2B,EAAE,qCAAqC,IAAI,yBAAyB,EAAE,gEAAgE,CAAC,CAAC;IACnM,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,oBAAoB,CAAC,OAAe,EAAE,IAAkD,EAAE,OAAe,EAAE,SAAkB;IAC3I,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC;IACtB,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChI,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3H,MAAM,YAAY,GAAG;QACnB,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE;QAC5F,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgD,CAAC;IACxE,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC;QACtD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,KAAK,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK;YAAE,MAAM,IAAI,qBAAY,CAAC,uBAAuB,EAAE,yBAAyB,SAAS,mBAAmB,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,wEAAwE,EAAE,sCAAsC,CAAC,CAAC;IACvR,CAAC;AACH,CAAC"}