ysk-server-core 1.0.0 → 1.1.9

package/dist/update/self-update-overlay.js

@@ -0,0 +1,360 @@
+/**
+ * Overlay the official ysk-server npm tarball onto the running install.
+ *
+ * Panel apply must not depend on YSK_EXECUTE: default systemd units omit it,
+ * so HostExecutor refuses `npm install -g`. This path uses Node fetch + tar +
+ * copy onto the process's own package dir (authenticated admin, own files).
+ */
+import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, rmSync, statSync, writeFileSync, } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { tmpdir } from 'node:os';
+import { dirname, join, resolve, sep } from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { tl } from 'ysk-server-shared';
+import { assertSafeOutboundUrl } from '../net/ssrf.js';
+/** Classify a cli.js path into the directory we must overlay. */
+export function classifyCliPath(cliJsHint) {
+    let cliJs = String(cliJsHint || '').trim();
+    try {
+        if (cliJs && existsSync(cliJs))
+            cliJs = realpathSync(cliJs);
+    }
+    catch {
+        /* keep raw */
+    }
+    if (!cliJs)
+        return { kind: 'unknown', cliJs: '', packageDir: '' };
+    const norm = cliJs.split(sep).join('/');
+    if (norm.includes('/apps/server/dist/') && /cli\.(js|cjs|mjs)$/.test(norm)) {
+        return { kind: 'monorepo', cliJs, packageDir: dirname(dirname(cliJs)) };
+    }
+    if (/\/ysk-server\/dist\/cli\.(js|cjs|mjs)$/.test(norm)) {
+        return { kind: 'npm-package', cliJs, packageDir: dirname(dirname(cliJs)) };
+    }
+    const pkgDir = dirname(dirname(cliJs));
+    try {
+        const name = JSON.parse(readFileSync(join(pkgDir, 'package.json'), 'utf8'));
+        if (name.name === 'ysk-server') {
+            return { kind: 'npm-package', cliJs, packageDir: pkgDir };
+        }
+    }
+    catch {
+        /* */
+    }
+    return { kind: 'unknown', cliJs, packageDir: '' };
+}
+const MAX_TARBALL_BYTES = 80 * 1024 * 1024;
+const OFFICIAL_NPM_HOSTS = new Set(['registry.npmjs.org', 'registry.npmjs.com']);
+function isTestEnv() {
+    return process.env.VITEST === 'true' || process.env.NODE_ENV === 'test';
+}
+/** Reject overlay onto system roots that are not a ysk-server package. */
+export function isSafeOverlayDest(dir) {
+    const raw = String(dir || '').trim();
+    if (!raw)
+        return false;
+    const abs = resolve(raw);
+    if (!abs || abs === '/' || abs.length < 6)
+        return false;
+    const norm = abs.split(sep).join('/');
+    const blocked = ['/etc', '/bin', '/sbin', '/boot', '/proc', '/sys', '/dev', '/run', '/root'];
+    for (const b of blocked) {
+        if (norm === b || norm.startsWith(`${b}/`))
+            return false;
+    }
+    try {
+        const pkg = JSON.parse(readFileSync(join(abs, 'package.json'), 'utf8'));
+        if (pkg.name === 'ysk-server')
+            return true;
+    }
+    catch {
+        /* no package.json */
+    }
+    if (/\/apps\/server$/.test(norm))
+        return true;
+    if (/\/ysk-server$/.test(norm))
+        return true;
+    return existsSync(join(abs, 'dist', 'cli.js'));
+}
+function parseExecStartCli(unitText) {
+    const m = unitText.match(/^ExecStart=(.+)$/m);
+    if (!m?.[1])
+        return '';
+    const parts = m[1].trim().split(/\s+/);
+    return parts.find((p) => /cli\.(js|cjs|mjs)$/.test(p)) ?? '';
+}
+/** Read systemd unit ExecStart cli.js — skipped in unit tests (must not touch the host). */
+export function readSystemdExecStartCli() {
+    if (isTestEnv())
+        return '';
+    const units = [
+        '/etc/systemd/system/ysk-server.service',
+        '/lib/systemd/system/ysk-server.service',
+        '/usr/lib/systemd/system/ysk-server.service',
+    ];
+    for (const p of units) {
+        try {
+            if (!existsSync(p))
+                continue;
+            const cli = parseExecStartCli(readFileSync(p, 'utf8'));
+            if (cli && existsSync(cli))
+                return cli;
+        }
+        catch {
+            /* next */
+        }
+    }
+    return '';
+}
+export function resolveOverlayDest(cliJsHint) {
+    const fromArgv = classifyCliPath(cliJsHint);
+    if (fromArgv.packageDir && isSafeOverlayDest(fromArgv.packageDir))
+        return fromArgv;
+    const cli = readSystemdExecStartCli();
+    if (cli) {
+        const fromUnit = classifyCliPath(cli);
+        if (fromUnit.packageDir && isSafeOverlayDest(fromUnit.packageDir))
+            return fromUnit;
+    }
+    if (!isTestEnv()) {
+        const wellKnown = [
+            '/usr/lib/ysk-server/apps/server',
+            '/usr/local/lib/ysk-server/apps/server',
+        ];
+        for (const dir of wellKnown) {
+            if (isSafeOverlayDest(dir)) {
+                return {
+                    kind: 'monorepo',
+                    cliJs: join(dir, 'dist', 'cli.js'),
+                    packageDir: dir,
+                };
+            }
+        }
+    }
+    return fromArgv.packageDir
+        ? fromArgv
+        : { kind: 'unknown', cliJs: fromArgv.cliJs, packageDir: '' };
+}
+function destWritable(dir) {
+    try {
+        const probe = join(dir, '.ysk-self-update-write-probe');
+        writeFileSync(probe, 'ok', 'utf8');
+        rmSync(probe, { force: true });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function assertOfficialTarballUrl(raw) {
+    const u = assertSafeOutboundUrl(raw, { field: 'selfUpdate.tarball' });
+    const host = u.hostname.toLowerCase();
+    if (!OFFICIAL_NPM_HOSTS.has(host)) {
+        throw new Error(`tarball host not official npm: ${host}`);
+    }
+    return u;
+}
+function officialTarballUrl(packageName, latest) {
+    const name = packageName.replace(/^@/, '').replace(/\//g, '-');
+    const pkg = packageName.startsWith('@') ? packageName : name;
+    return `https://registry.npmjs.org/${encodeURIComponent(pkg)}/-/${name.split('/').pop()}-${latest}.tgz`;
+}
+async function downloadTarball(url, destFile) {
+    const safe = assertOfficialTarballUrl(url);
+    const res = await fetch(safe.toString(), {
+        headers: { Accept: 'application/octet-stream', 'User-Agent': 'ysk-server-self-update' },
+    });
+    if (!res.ok) {
+        throw new Error(`HTTP ${res.status}`);
+    }
+    const buf = Buffer.from(await res.arrayBuffer());
+    if (buf.length > MAX_TARBALL_BYTES) {
+        throw new Error(`tarball too large (${buf.length})`);
+    }
+    writeFileSync(destFile, buf);
+}
+function sha1File(path) {
+    const h = createHash('sha1');
+    h.update(readFileSync(path));
+    return h.digest('hex');
+}
+function extractTarball(tgz, destDir) {
+    mkdirSync(destDir, { recursive: true });
+    const r = spawnSync('tar', ['-xzf', tgz, '-C', destDir], {
+        encoding: 'utf8',
+        timeout: 60_000,
+    });
+    if (r.status !== 0) {
+        throw new Error((r.stderr || r.stdout || 'tar failed').slice(0, 300));
+    }
+}
+function copyOverlayTrees(pkgRoot, dest) {
+    const dist = join(pkgRoot, 'dist');
+    if (!existsSync(join(dist, 'cli.js'))) {
+        throw new Error('packed package missing dist/cli.js');
+    }
+    mkdirSync(join(dest, 'dist'), { recursive: true });
+    cpSync(dist, join(dest, 'dist'), { recursive: true, dereference: true });
+    const pkgJson = join(pkgRoot, 'package.json');
+    if (existsSync(pkgJson)) {
+        cpSync(pkgJson, join(dest, 'package.json'));
+    }
+    const pub = join(pkgRoot, 'public');
+    if (existsSync(pub)) {
+        mkdirSync(join(dest, 'public'), { recursive: true });
+        cpSync(pub, join(dest, 'public'), { recursive: true, dereference: true });
+    }
+    const nm = join(pkgRoot, 'node_modules');
+    if (existsSync(nm)) {
+        for (const dep of ['ysk-server-core', 'ysk-server-shared']) {
+            const src = join(nm, dep);
+            if (!existsSync(src))
+                continue;
+            const target = join(dest, 'node_modules', dep);
+            mkdirSync(dirname(target), { recursive: true });
+            cpSync(src, target, { recursive: true, dereference: true });
+        }
+    }
+}
+export function versionFileContains(dest, latest) {
+    const vf = join(dest, 'dist', 'version.js');
+    if (!existsSync(vf))
+        return false;
+    try {
+        return readFileSync(vf, 'utf8').includes(latest);
+    }
+    catch {
+        return false;
+    }
+}
+/** True when this process may ask systemd to bounce ysk-server. */
+export function canScheduleYskServerRestart() {
+    if (isTestEnv())
+        return false;
+    if (typeof process.getuid === 'function' && process.getuid() !== 0)
+        return false;
+    return true;
+}
+/**
+ * Schedule systemd restart after the HTTP/CLI caller has flushed output.
+ * Never run in unit tests. Call only after sendJson (panel) or stdout (CLI).
+ */
+export function scheduleYskServerRestart(delayMs = 2500) {
+    if (!canScheduleYskServerRestart())
+        return false;
+    const wait = Number.isFinite(delayMs) ? Math.max(0, delayMs) : 2500;
+    setTimeout(() => {
+        try {
+            spawnSync('systemctl', ['try-restart', 'ysk-server'], { timeout: 60_000, stdio: 'ignore' });
+        }
+        catch {
+            /* best-effort */
+        }
+    }, wait);
+    return true;
+}
+export async function applyNpmOverlayToDest(input) {
+    const notes = [];
+    const commandResults = [];
+    const latest = input.latest.replace(/^v/, '');
+    const dest = String(input.destDir || '').trim();
+    if (!dest) {
+        notes.push(tl('notes.auto.selfDestMissing'));
+        return { applied: false, destDir: '', notes, commandResults };
+    }
+    if (!existsSync(dest) || !statSync(dest).isDirectory()) {
+        notes.push(tl('notes.auto.selfDestMissing'));
+        return { applied: false, destDir: dest, notes, commandResults };
+    }
+    if (!isSafeOverlayDest(dest)) {
+        notes.push(tl('notes.auto.selfDestUnwritable', { v0: dest }));
+        return { applied: false, destDir: dest, notes, commandResults };
+    }
+    if (!destWritable(dest)) {
+        notes.push(tl('notes.auto.selfDestUnwritable', { v0: dest }));
+        return { applied: false, destDir: dest, notes, commandResults };
+    }
+    const tmp = mkdtempSync(join(tmpdir(), 'ysk-self-upd-'));
+    const log = (line, stream = 'status') => {
+        try {
+            input.onLog?.({ stream, line });
+        }
+        catch {
+            /* */
+        }
+    };
+    commandResults.push({
+        argv: ['npm-overlay', input.spec, dest],
+        exitCode: 0,
+        stdout: '',
+        stderr: '',
+    });
+    try {
+        let pkgRoot = '';
+        if (input.unpackedDir && existsSync(join(input.unpackedDir, 'dist', 'cli.js'))) {
+            pkgRoot = input.unpackedDir;
+        }
+        else {
+            let tgz = input.tarballPath?.trim() || '';
+            if (tgz && !existsSync(tgz))
+                tgz = '';
+            if (!tgz) {
+                const allowFetch = Boolean(input.tarballUrl) ||
+                    (!isTestEnv() && Boolean(latest));
+                if (!allowFetch) {
+                    notes.push(tl('notes.auto.selfDownloadFail', {
+                        v0: input.spec,
+                        v1: 'no local tarball',
+                    }));
+                    return { applied: false, destDir: dest, notes, commandResults };
+                }
+                const url = input.tarballUrl?.trim() ||
+                    officialTarballUrl(input.spec.split('@')[0] || 'ysk-server', latest);
+                tgz = join(tmp, 'pkg.tgz');
+                log(`download ${url}`);
+                await downloadTarball(url, tgz);
+            }
+            if (input.shasum && input.shasum.length === 40) {
+                log('verify shasum');
+                const got = sha1File(tgz);
+                if (got !== input.shasum.toLowerCase()) {
+                    notes.push(tl('notes.auto.selfDownloadFail', {
+                        v0: input.spec,
+                        v1: 'shasum mismatch',
+                    }));
+                    return { applied: false, destDir: dest, notes, commandResults };
+                }
+            }
+            log('extract tarball');
+            extractTarball(tgz, tmp);
+            pkgRoot = join(tmp, 'package');
+        }
+        log(`write overlay ${dest}`);
+        copyOverlayTrees(pkgRoot, dest);
+        if (!versionFileContains(dest, latest)) {
+            notes.push(tl('notes.auto.selfVerifyFail', { v0: latest }));
+            commandResults[0].exitCode = 1;
+            return { applied: false, destDir: dest, notes, commandResults };
+        }
+        log(`applied ${input.spec}`);
+        notes.push(tl('notes.auto.selfApplied', { v0: input.spec, v1: dest }));
+        commandResults[0].stdout = readFileSync(join(dest, 'dist', 'version.js'), 'utf8').slice(0, 400);
+        return { applied: true, destDir: dest, notes, commandResults };
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        notes.push(tl('notes.auto.selfDownloadFail', { v0: input.spec, v1: msg.slice(0, 300) }));
+        if (commandResults[0])
+            commandResults[0].exitCode = 1;
+        return { applied: false, destDir: dest, notes, commandResults };
+    }
+    finally {
+        try {
+            rmSync(tmp, { recursive: true, force: true });
+        }
+        catch {
+            /* */
+        }
+    }
+}
+//# sourceMappingURL=self-update-overlay.js.map

package/dist/update/self-update-overlay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-update-overlay.js","sourceRoot":"","sources":["../../src/update/self-update-overlay.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,MAAM,EACN,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAQvD,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAAC,SAAkB;IAChD,IAAI,KAAK,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,IAAI,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;YAAE,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAElE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAEzE,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,KAAK;IACP,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAgBjF,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;AAC1E,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7F,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAsB,CAAC;QAC7F,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,uBAAuB;IACrC,IAAI,SAAS,EAAE;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG;QACZ,wCAAwC;QACxC,wCAAwC;QACxC,4CAA4C;KAC7C,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC7B,MAAM,GAAG,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YACvD,IAAI,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,GAAG,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAAkB;IACnD,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,QAAQ,CAAC,UAAU,IAAI,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnF,MAAM,GAAG,GAAG,uBAAuB,EAAE,CAAC;IACtC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,QAAQ,CAAC,UAAU,IAAI,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,QAAQ,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG;YAChB,iCAAiC;YACjC,uCAAuC;SACxC,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC;oBAClC,UAAU,EAAE,GAAG;iBAChB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,UAAU;QACxB,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;QACxD,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAW;IAC3C,MAAM,CAAC,GAAG,qBAAqB,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB,EAAE,MAAc;IAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,OAAO,8BAA8B,kBAAkB,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,MAAM,CAAC;AAC1G,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,QAAgB;IAC1D,MAAM,IAAI,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE;QACvC,OAAO,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,YAAY,EAAE,wBAAwB,EAAE;KACxF,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD,IAAI,GAAG,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IACvD,CAAC;IACD,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7B,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,OAAe;IAClD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;QACvD,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,MAAM;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe,EAAE,IAAY;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACzC,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,EAAE,CAAC;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;YAC/C,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAc;IAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,2BAA2B;IACzC,IAAI,SAAS,EAAE;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAO,GAAG,IAAI;IACrD,IAAI,CAAC,2BAA2B,EAAE;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC;YACH,SAAS,CACP,WAAW,EACX,CAAC,aAAa,EAAE,YAAY,CAAC,EAC7B,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CACrC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC,EAAE,IAAI,CAAC,CAAC;IACT,OAAO,IAAI,CAAC;AACd,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAS3C;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEhD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,+BAA+B,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,+BAA+B,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,SAAyC,QAAQ,EAAE,EAAE;QAC9E,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,KAAK;QACP,CAAC;IACH,CAAC,CAAC;IACF,cAAc,CAAC,IAAI,CAAC;QAClB,IAAI,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;QACvC,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;KACX,CAAC,CAAC;IACH,IAAI,CAAC;QACH,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,KAAK,CAAC,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC/E,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC1C,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,GAAG,GAAG,EAAE,CAAC;YACtC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,UAAU,GACd,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;oBACzB,CAAC,CAAC,SAAS,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBACpC,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,6BAA6B,EAAE;wBAChC,EAAE,EAAE,KAAK,CAAC,IAAI;wBACd,EAAE,EAAE,kBAAkB;qBACvB,CAAC,CACH,CAAC;oBACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;gBAClE,CAAC;gBACD,MAAM,GAAG,GACP,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE;oBACxB,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,MAAM,CAAC,CAAC;gBACvE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAC3B,GAAG,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC;gBACvB,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAClC,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBAC/C,GAAG,CAAC,eAAe,CAAC,CAAC;gBACrB,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,GAAG,KAAK,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;oBACvC,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,6BAA6B,EAAE;wBAChC,EAAE,EAAE,KAAK,CAAC,IAAI;wBACd,EAAE,EAAE,iBAAiB;qBACtB,CAAC,CACH,CAAC;oBACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;gBAClE,CAAC;YACH,CAAC;YACD,GAAG,CAAC,iBAAiB,CAAC,CAAC;YACvB,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzB,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACjC,CAAC;QAED,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QAC7B,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,2BAA2B,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAC5D,cAAc,CAAC,CAAC,CAAE,CAAC,QAAQ,GAAG,CAAC,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAClE,CAAC;QACD,GAAG,CAAC,WAAW,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,wBAAwB,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACvE,cAAc,CAAC,CAAC,CAAE,CAAC,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CACtF,CAAC,EACD,GAAG,CACJ,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,6BAA6B,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACzF,IAAI,cAAc,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAClE,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,KAAK;QACP,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/update/update-hub.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Unified update hub — one scan for panel + catalog services + runtimes + remaining apt.
+ */
+import type { HostExecutor } from '../host/executor.js';
+import { type InventoryCollectMeta } from './inventory.js';
+export type UpdateHubGroup = 'panel' | 'service' | 'runtime' | 'os';
+export type UpdateHubKind = 'npm-panel' | 'apt' | 'runtime' | 'npm-global';
+export type UpdateApplyPath = 'apt' | 'runtime' | 'panel' | 'none';
+export type UpdateHubEntry = {
+    id: string;
+    title: string;
+    group: UpdateHubGroup;
+    kind: UpdateHubKind;
+    softwareId?: string;
+    packageName?: string;
+    currentVersion?: string;
+    latestVersion?: string;
+    installed: boolean;
+    upgradable: boolean;
+    href: string;
+    applyPath: UpdateApplyPath;
+    risk?: string;
+    cves?: string[];
+    requiresApproval?: boolean;
+    summary?: string;
+    notes: string[];
+};
+export declare function collectUpdateHub(input: {
+    host: HostExecutor;
+    dataDir: string;
+    currentPanelVersion: string;
+    refreshRuntimes?: boolean;
+}): Promise<{
+    entries: UpdateHubEntry[];
+    inventoryMeta: InventoryCollectMeta;
+}>;
+export declare function summarizeHub(entries: UpdateHubEntry[]): {
+    panelUpgradable: number;
+    serviceUpgradable: number;
+    runtimeUpgradable: number;
+    osUpgradable: number;
+    highRisk: number;
+    badgeCount: number;
+};
+//# sourceMappingURL=update-hub.d.ts.map

package/dist/update/update-hub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-hub.d.ts","sourceRoot":"","sources":["../../src/update/update-hub.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAAoB,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAG7E,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,IAAI,CAAC;AACpE,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,KAAK,GAAG,SAAS,GAAG,YAAY,CAAC;AAC3E,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;AAEnE,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,cAAc,CAAC;IACtB,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,eAAe,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAgEF,wBAAsB,gBAAgB,CAAC,KAAK,EAAE;IAC5C,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,aAAa,EAAE,oBAAoB,CAAC;CACrC,CAAC,CA4ID;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG;IACvD,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,CAkBA"}

package/dist/update/update-hub.js

@@ -0,0 +1,217 @@
+/**
+ * Unified update hub — one scan for panel + catalog services + runtimes + remaining apt.
+ */
+import { SOFTWARE_CATALOG } from '../hosting/software-catalog.js';
+import { resolveSoftwareTitle } from '../hosting/software-catalog.js';
+import { HostSoftwareProbe } from '../hosting/software-probe/index.js';
+import { resolveSoftwareVersionStatus } from '../hosting/version-discovery.js';
+import { adviseUpdate } from './advisor.js';
+import { collectInventory } from './inventory.js';
+import { CANONICAL_NPM_PACKAGE, checkSelfUpdate } from './self-update-apply.js';
+const FEATURE_HREF = {
+    ftp: '/ftp',
+    nginx: '/nginx',
+    apache: '/apache',
+    ssl: '/ssl',
+    mysql: '/databases/mysql',
+    mariadb: '/databases/mariadb',
+    postgres: '/databases/postgres',
+    redis: '/databases/redis',
+    firewall: '/protection',
+    fail2ban: '/protection',
+    dns: '/dns',
+    email: '/email',
+    node: '/runtimes/node',
+    php: '/runtimes/php',
+    python: '/runtimes/python',
+    go: '/runtimes/go',
+    rust: '/runtimes/rust',
+    java: '/runtimes/java',
+    kotlin: '/runtimes/kotlin',
+    bun: '/runtimes/bun',
+    hostBrowse: '/host-browse',
+    vpn: '/vpn',
+    wireguard: '/vpn',
+    openvpn: '/vpn',
+    outline: '/vpn',
+    vnc: '/vnc',
+    tigervnc: '/vnc',
+    novnc: '/vnc',
+    git: '/system',
+};
+function hrefFor(spec) {
+    for (const f of spec.features) {
+        if (f !== 'all' && FEATURE_HREF[f])
+            return FEATURE_HREF[f];
+    }
+    return '/updates';
+}
+function catalogKind(spec) {
+    if (spec.installer === 'npm-global') {
+        return { group: 'runtime', kind: 'npm-global', applyPath: 'runtime' };
+    }
+    if (spec.installer?.startsWith('runtime-')) {
+        return { group: 'runtime', kind: 'runtime', applyPath: 'runtime' };
+    }
+    return { group: 'service', kind: 'apt', applyPath: 'apt' };
+}
+function catalogAptNames() {
+    const s = new Set();
+    for (const spec of SOFTWARE_CATALOG) {
+        if (spec.installer?.startsWith('runtime-') || spec.installer === 'npm-global')
+            continue;
+        for (const p of spec.aptPackages)
+            s.add(p);
+    }
+    return s;
+}
+export async function collectUpdateHub(input) {
+    const entries = [];
+    const probe = new HostSoftwareProbe(input.host);
+    const self = await checkSelfUpdate({ currentVersion: input.currentPanelVersion });
+    entries.push({
+        id: 'panel:ysk-server',
+        title: 'YSK Server',
+        group: 'panel',
+        kind: 'npm-panel',
+        packageName: self.packageName || CANONICAL_NPM_PACKAGE,
+        currentVersion: self.currentVersion,
+        latestVersion: self.checked ? self.latestVersion : undefined,
+        installed: true,
+        upgradable: Boolean(self.updateAvailable && self.checked),
+        href: '/updates',
+        applyPath: 'panel',
+        notes: self.ok ? self.notes.filter((n) => !/HTTP 404|@ysk\//i.test(n)) : self.notes,
+        summary: self.updateAvailable ? `${self.currentVersion} → ${self.latestVersion}` : undefined,
+    });
+    const catalogUps = await probe.upgrades();
+    const byId = new Map(catalogUps.map((u) => [u.id, u]));
+    for (const spec of SOFTWARE_CATALOG) {
+        const { group, kind, applyPath } = catalogKind(spec);
+        const title = spec.title;
+        const href = hrefFor(spec);
+        if (kind === 'runtime' || kind === 'npm-global') {
+            if (!input.refreshRuntimes) {
+                const pres = await probe.presence(spec.id);
+                const ver = await probe.version(spec.id);
+                entries.push({
+                    id: `catalog:${spec.id}`,
+                    title,
+                    group,
+                    kind,
+                    softwareId: spec.id,
+                    packageName: spec.npmPackages?.[0] || spec.id,
+                    currentVersion: ver.version,
+                    installed: pres.installed,
+                    upgradable: false,
+                    href,
+                    applyPath: pres.installed ? applyPath : 'none',
+                    notes: ['scan to refresh runtime latest'],
+                });
+                continue;
+            }
+            const st = await resolveSoftwareVersionStatus({
+                host: input.host,
+                dataDir: input.dataDir,
+                id: spec.id,
+                refresh: true,
+            });
+            entries.push({
+                id: `catalog:${spec.id}`,
+                title,
+                group,
+                kind,
+                softwareId: spec.id,
+                packageName: st.packageName || spec.npmPackages?.[0] || spec.id,
+                currentVersion: st.currentVersion,
+                latestVersion: st.latestVersion,
+                installed: st.installed,
+                upgradable: Boolean(st.installed && st.upgradable),
+                href,
+                applyPath: st.installed ? applyPath : 'none',
+                notes: st.notes,
+            });
+            continue;
+        }
+        const up = byId.get(spec.id);
+        const installed = Boolean(up?.installed);
+        const currentVersion = up?.currentVersion;
+        const latestVersion = up?.candidateVersion || up?.currentVersion;
+        const upgradable = Boolean(up?.upgradable && installed);
+        let risk;
+        let requiresApproval;
+        let summary;
+        if (installed && currentVersion) {
+            const advised = adviseUpdate({
+                packageName: up?.packageName || spec.aptPackages[0] || spec.id,
+                currentVersion,
+                candidateVersion: latestVersion,
+            });
+            risk = advised.risk;
+            requiresApproval = advised.requiresApproval;
+            summary = advised.summary;
+        }
+        entries.push({
+            id: `catalog:${spec.id}`,
+            title: resolveSoftwareTitle(spec) || title,
+            group,
+            kind,
+            softwareId: spec.id,
+            packageName: up?.packageName || spec.aptPackages[0],
+            currentVersion,
+            latestVersion,
+            installed,
+            upgradable,
+            href,
+            applyPath: installed ? 'apt' : 'none',
+            risk,
+            requiresApproval,
+            summary,
+            notes: up?.notes ?? [],
+        });
+    }
+    const { items, meta } = await collectInventory(input.host);
+    const claimed = catalogAptNames();
+    for (const item of items) {
+        if (claimed.has(item.packageName))
+            continue;
+        const advised = adviseUpdate(item);
+        const upgradable = Boolean(item.candidateVersion && item.candidateVersion !== item.currentVersion);
+        entries.push({
+            id: `os:${item.packageName}`,
+            title: item.packageName,
+            group: 'os',
+            kind: 'apt',
+            packageName: item.packageName,
+            currentVersion: item.currentVersion,
+            latestVersion: item.candidateVersion,
+            installed: true,
+            upgradable,
+            href: '/updates',
+            applyPath: 'apt',
+            risk: advised.risk,
+            cves: advised.cves,
+            requiresApproval: advised.requiresApproval,
+            summary: advised.summary,
+            notes: [],
+        });
+    }
+    return { entries, inventoryMeta: meta };
+}
+export function summarizeHub(entries) {
+    const up = (g) => entries.filter((e) => e.group === g && e.upgradable).length;
+    const panelUpgradable = up('panel');
+    const serviceUpgradable = up('service');
+    const runtimeUpgradable = up('runtime');
+    const osUpgradable = up('os');
+    const highRisk = entries.filter((e) => e.upgradable && (e.risk === 'high' || e.risk === 'critical')).length;
+    return {
+        panelUpgradable,
+        serviceUpgradable,
+        runtimeUpgradable,
+        osUpgradable,
+        highRisk,
+        badgeCount: panelUpgradable + serviceUpgradable + runtimeUpgradable + osUpgradable,
+    };
+}
+//# sourceMappingURL=update-hub.js.map

package/dist/update/update-hub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-hub.js","sourceRoot":"","sources":["../../src/update/update-hub.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAqB,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAE/E,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAA6B,MAAM,gBAAgB,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AA0BhF,MAAM,YAAY,GAA2B;IAC3C,GAAG,EAAE,MAAM;IACX,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,SAAS;IACjB,GAAG,EAAE,MAAM;IACX,KAAK,EAAE,kBAAkB;IACzB,OAAO,EAAE,oBAAoB;IAC7B,QAAQ,EAAE,qBAAqB;IAC/B,KAAK,EAAE,kBAAkB;IACzB,QAAQ,EAAE,aAAa;IACvB,QAAQ,EAAE,aAAa;IACvB,GAAG,EAAE,MAAM;IACX,KAAK,EAAE,QAAQ;IACf,IAAI,EAAE,gBAAgB;IACtB,GAAG,EAAE,eAAe;IACpB,MAAM,EAAE,kBAAkB;IAC1B,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,gBAAgB;IACtB,IAAI,EAAE,gBAAgB;IACtB,MAAM,EAAE,kBAAkB;IAC1B,GAAG,EAAE,eAAe;IACpB,UAAU,EAAE,cAAc;IAC1B,GAAG,EAAE,MAAM;IACX,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,MAAM;IACf,OAAO,EAAE,MAAM;IACf,GAAG,EAAE,MAAM;IACX,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;IACb,GAAG,EAAE,SAAS;CACf,CAAC;AAEF,SAAS,OAAO,CAAC,IAAkB;IACjC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC;YAAE,OAAO,YAAY,CAAC,CAAC,CAAE,CAAC;IAC9D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,IAAkB;IAKrC,IAAI,IAAI,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,CAAC,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,SAAS,KAAK,YAAY;YAAE,SAAS;QACxF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW;YAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAKtC;IAIC,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEhD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,IAAI,CAAC;QACX,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,qBAAqB;QACtD,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QAC5D,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,CAAC;QACzD,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,OAAO;QAClB,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK;QACnF,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,cAAc,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS;KAC7F,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvD,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE3B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAChD,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC3C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC;oBACX,EAAE,EAAE,WAAW,IAAI,CAAC,EAAE,EAAE;oBACxB,KAAK;oBACL,KAAK;oBACL,IAAI;oBACJ,UAAU,EAAE,IAAI,CAAC,EAAE;oBACnB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE;oBAC7C,cAAc,EAAE,GAAG,CAAC,OAAO;oBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,UAAU,EAAE,KAAK;oBACjB,IAAI;oBACJ,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;oBAC9C,KAAK,EAAE,CAAC,gCAAgC,CAAC;iBAC1C,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,4BAA4B,CAAC;gBAC5C,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,WAAW,IAAI,CAAC,EAAE,EAAE;gBACxB,KAAK;gBACL,KAAK;gBACL,IAAI;gBACJ,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,WAAW,EAAE,EAAE,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE;gBAC/D,cAAc,EAAE,EAAE,CAAC,cAAc;gBACjC,aAAa,EAAE,EAAE,CAAC,aAAa;gBAC/B,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClD,IAAI;gBACJ,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;gBAC5C,KAAK,EAAE,EAAE,CAAC,KAAK;aAChB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACzC,MAAM,cAAc,GAAG,EAAE,EAAE,cAAc,CAAC;QAC1C,MAAM,aAAa,GAAG,EAAE,EAAE,gBAAgB,IAAI,EAAE,EAAE,cAAc,CAAC;QACjE,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,EAAE,UAAU,IAAI,SAAS,CAAC,CAAC;QACxD,IAAI,IAAwB,CAAC;QAC7B,IAAI,gBAAqC,CAAC;QAC1C,IAAI,OAA2B,CAAC;QAChC,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,YAAY,CAAC;gBAC3B,WAAW,EAAE,EAAE,EAAE,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE;gBAC9D,cAAc;gBACd,gBAAgB,EAAE,aAAa;aAChC,CAAC,CAAC;YACH,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YACpB,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAC5C,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC5B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,WAAW,IAAI,CAAC,EAAE,EAAE;YACxB,KAAK,EAAE,oBAAoB,CAAC,IAAI,CAAC,IAAI,KAAK;YAC1C,KAAK;YACL,IAAI;YACJ,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,WAAW,EAAE,EAAE,EAAE,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YACnD,cAAc;YACd,aAAa;YACb,SAAS;YACT,UAAU;YACV,IAAI;YACJ,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;YACrC,IAAI;YACJ,gBAAgB;YAChB,OAAO;YACP,KAAK,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;SACvB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,SAAS;QAC5C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,UAAU,GAAG,OAAO,CACxB,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,cAAc,CACvE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,MAAM,IAAI,CAAC,WAAW,EAAE;YAC5B,KAAK,EAAE,IAAI,CAAC,WAAW;YACvB,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,aAAa,EAAE,IAAI,CAAC,gBAAgB;YACpC,SAAS,EAAE,IAAI;YACf,UAAU;YACV,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAyB;IAQpD,MAAM,EAAE,GAAG,CAAC,CAAiB,EAAE,EAAE,CAC/B,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IAC9D,MAAM,eAAe,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,iBAAiB,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,iBAAiB,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CACpE,CAAC,MAAM,CAAC;IACT,OAAO;QACL,eAAe;QACf,iBAAiB;QACjB,iBAAiB;QACjB,YAAY;QACZ,QAAQ;QACR,UAAU,EAAE,eAAe,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,YAAY;KACnF,CAAC;AACJ,CAAC"}