@agent-link/agent 0.1.293 → 0.1.295

package/dist/runtime-release.js

@@ -0,0 +1,218 @@
+import { createHash } from 'crypto';
+const RUNTIME_MANIFEST_BASE_URL = 'https://msclaude.ai/files/agent/runtime/';
+const ALLOWED_ORIGIN = 'https://msclaude.ai';
+const ALLOWED_PATH = '/files/agent/runtime/';
+const MAX_MANIFEST_SIZE = 128 * 1024;
+const MAX_BUNDLE_SIZE = 150 * 1024 * 1024;
+const REQUEST_TIMEOUT_MS = 60_000;
+const STABLE_SEMVER = /^\d+\.\d+\.\d+$/;
+const SHA1 = /^[a-f0-9]{40}$/;
+function requireString(value, field) {
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new Error(`Invalid runtime manifest: ${field} must be a non-empty string`);
+    }
+    return value;
+}
+function validateIntegrity(value) {
+    const integrity = requireString(value, 'integrity');
+    if (!integrity.startsWith('sha512-')) {
+        throw new Error('Invalid runtime manifest: integrity must use SHA-512');
+    }
+    const encoded = integrity.slice('sha512-'.length);
+    const digest = Buffer.from(encoded, 'base64');
+    if (digest.length !== 64 || digest.toString('base64') !== encoded) {
+        throw new Error('Invalid runtime manifest: integrity is not valid SHA-512 base64');
+    }
+    return integrity;
+}
+function isLoopbackUrl(url) {
+    return (url.protocol === 'http:' || url.protocol === 'https:')
+        && (url.hostname === '127.0.0.1' || url.hostname === 'localhost' || url.hostname === '::1');
+}
+function validateArtifactUrl(value, allowLoopback) {
+    const artifactUrl = new URL(requireString(value, 'bundle URL'));
+    const production = artifactUrl.origin === ALLOWED_ORIGIN
+        && artifactUrl.pathname.startsWith(ALLOWED_PATH);
+    if ((!production && !(allowLoopback && isLoopbackUrl(artifactUrl)))
+        || !artifactUrl.pathname.endsWith('.tgz')
+        || artifactUrl.username
+        || artifactUrl.password
+        || artifactUrl.search
+        || artifactUrl.hash) {
+        throw new Error('Invalid runtime manifest: bundle URL is not allowed');
+    }
+    return artifactUrl.toString();
+}
+export function getRuntimeManifestUrl(version) {
+    if (!STABLE_SEMVER.test(version))
+        throw new Error('Runtime version must use major.minor.patch');
+    return `${RUNTIME_MANIFEST_BASE_URL}${version}/manifest.json`;
+}
+export function validateRuntimeManifest(value, expectedVersion, options = {}) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error('Invalid runtime manifest: expected an object');
+    }
+    const manifest = value;
+    if (manifest.schemaVersion !== 1 || manifest.package !== '@agent-link/agent') {
+        throw new Error('Invalid runtime manifest: unsupported schema or package');
+    }
+    const version = requireString(manifest.version, 'version');
+    if (!STABLE_SEMVER.test(version) || version !== expectedVersion) {
+        throw new Error(`Invalid runtime manifest: version must equal ${expectedVersion}`);
+    }
+    const publishedAt = requireString(manifest.publishedAt, 'publishedAt');
+    if (!Number.isFinite(Date.parse(publishedAt))) {
+        throw new Error('Invalid runtime manifest: publishedAt must be an ISO timestamp');
+    }
+    if (!Array.isArray(manifest.bundles) || manifest.bundles.length === 0) {
+        throw new Error('Invalid runtime manifest: bundles must be a non-empty array');
+    }
+    const seen = new Set();
+    const bundles = manifest.bundles.map((entry, index) => {
+        if (!entry || typeof entry !== 'object' || Array.isArray(entry)) {
+            throw new Error(`Invalid runtime manifest: bundle ${index} must be an object`);
+        }
+        const bundle = entry;
+        const platform = requireString(bundle.platform, `bundle ${index} platform`);
+        if (!['win32', 'linux', 'darwin'].includes(platform)) {
+            throw new Error(`Invalid runtime manifest: bundle ${index} platform is unsupported`);
+        }
+        const arch = requireString(bundle.arch, `bundle ${index} arch`);
+        if (!['x64', 'arm64'].includes(arch)) {
+            throw new Error(`Invalid runtime manifest: bundle ${index} arch is unsupported`);
+        }
+        const tuple = `${platform}-${arch}`;
+        if (seen.has(tuple))
+            throw new Error(`Invalid runtime manifest: duplicate bundle ${tuple}`);
+        seen.add(tuple);
+        const nodeRange = requireString(bundle.nodeRange, `bundle ${index} nodeRange`);
+        if (nodeRange !== '>=18') {
+            throw new Error(`Invalid runtime manifest: bundle ${index} nodeRange is unsupported`);
+        }
+        const shasum = requireString(bundle.shasum, `bundle ${index} shasum`).toLowerCase();
+        if (!SHA1.test(shasum)) {
+            throw new Error(`Invalid runtime manifest: bundle ${index} shasum must be SHA-1`);
+        }
+        if (!Number.isSafeInteger(bundle.size) || bundle.size < 1 || bundle.size > MAX_BUNDLE_SIZE) {
+            throw new Error(`Invalid runtime manifest: bundle ${index} size is invalid`);
+        }
+        return {
+            platform,
+            arch,
+            nodeRange,
+            url: validateArtifactUrl(bundle.url, options.allowLoopback === true),
+            integrity: validateIntegrity(bundle.integrity),
+            shasum,
+            size: bundle.size,
+        };
+    });
+    return {
+        schemaVersion: 1,
+        package: '@agent-link/agent',
+        version,
+        publishedAt,
+        ...(typeof manifest.sourceTag === 'string' ? { sourceTag: manifest.sourceTag } : {}),
+        ...(typeof manifest.sourceCommit === 'string' ? { sourceCommit: manifest.sourceCommit } : {}),
+        bundles,
+    };
+}
+async function fetchBuffer(url, fetchImpl, maxSize) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+    try {
+        const response = await fetchImpl(url, {
+            signal: controller.signal,
+            redirect: 'error',
+            headers: { 'user-agent': 'agentlink-version-store' },
+        });
+        if (!response.ok)
+            throw new Error(`HTTP ${response.status} ${response.statusText}`.trim());
+        const declaredLength = Number(response.headers.get('content-length'));
+        if (Number.isFinite(declaredLength) && declaredLength > maxSize) {
+            throw new Error(`response exceeds ${maxSize} bytes`);
+        }
+        if (!response.body)
+            return Buffer.alloc(0);
+        const chunks = [];
+        let total = 0;
+        const reader = response.body.getReader();
+        try {
+            for (;;) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                total += value.byteLength;
+                if (total > maxSize) {
+                    await reader.cancel();
+                    throw new Error(`response exceeds ${maxSize} bytes`);
+                }
+                chunks.push(Buffer.from(value));
+            }
+        }
+        finally {
+            reader.releaseLock();
+        }
+        return Buffer.concat(chunks, total);
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+export async function fetchRuntimeManifest(version, options = {}) {
+    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+    const manifestUrl = options.manifestUrl ?? getRuntimeManifestUrl(version);
+    const parsedUrl = new URL(manifestUrl);
+    const allowLoopback = isLoopbackUrl(parsedUrl);
+    if (options.manifestUrl && !allowLoopback) {
+        throw new Error('Runtime manifest override must use a loopback URL');
+    }
+    let bytes;
+    try {
+        bytes = await fetchBuffer(manifestUrl, fetchImpl, MAX_MANIFEST_SIZE);
+    }
+    catch (error) {
+        throw new Error(`Failed to download runtime manifest: ${error.message}`);
+    }
+    let value;
+    try {
+        value = JSON.parse(bytes.toString('utf8'));
+    }
+    catch {
+        throw new Error('Invalid runtime manifest: response is not valid JSON');
+    }
+    return {
+        manifest: validateRuntimeManifest(value, version, { allowLoopback }),
+        manifestUrl: parsedUrl.toString(),
+    };
+}
+export function selectRuntimeBundle(manifest, platform = process.platform, arch = process.arch) {
+    const bundle = manifest.bundles.find(item => item.platform === platform && item.arch === arch);
+    if (!bundle) {
+        throw new Error(`No runtime bundle is available for ${platform}-${arch}; version-store adoption remains disabled`);
+    }
+    return bundle;
+}
+export function verifyRuntimeBundle(bytes, bundle) {
+    if (bytes.length !== bundle.size) {
+        throw new Error(`Runtime bundle size mismatch: expected ${bundle.size}, received ${bytes.length}`);
+    }
+    const shasum = createHash('sha1').update(bytes).digest('hex');
+    if (shasum !== bundle.shasum)
+        throw new Error('Runtime bundle SHA-1 mismatch');
+    const integrity = `sha512-${createHash('sha512').update(bytes).digest('base64')}`;
+    if (integrity !== bundle.integrity)
+        throw new Error('Runtime bundle SHA-512 mismatch');
+}
+export async function prepareRuntimeBundle(manifest, options = {}) {
+    const bundle = selectRuntimeBundle(manifest, options.platform, options.arch);
+    let bytes;
+    try {
+        bytes = await fetchBuffer(bundle.url, options.fetchImpl ?? globalThis.fetch, bundle.size);
+    }
+    catch (error) {
+        throw new Error(`Failed to download runtime bundle: ${error.message}`);
+    }
+    verifyRuntimeBundle(bytes, bundle);
+    return { manifest, bundle, bytes };
+}
+//# sourceMappingURL=runtime-release.js.map

package/dist/runtime-release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-release.js","sourceRoot":"","sources":["../src/runtime-release.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,yBAAyB,GAAG,0CAA0C,CAAC;AAC7E,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAC7C,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAC7C,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC;AACrC,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,IAAI,GAAG,gBAAgB,CAAC;AA4B9B,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,6BAA6B,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,OAAO,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,GAAQ;IAC7B,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;WACzD,CAAC,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,aAAsB;IACjE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,KAAK,cAAc;WACnD,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACnD,IACE,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,aAAa,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC;WAC5D,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;WACtC,WAAW,CAAC,QAAQ;WACpB,WAAW,CAAC,QAAQ;WACpB,WAAW,CAAC,MAAM;WAClB,WAAW,CAAC,IAAI,EACnB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,WAAW,CAAC,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChG,OAAO,GAAG,yBAAyB,GAAG,OAAO,gBAAgB,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAc,EACd,eAAuB,EACvB,UAAuC,EAAE;IAEzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,gDAAgD,eAAe,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAA2B,EAAE;QAC7E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,oBAAoB,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,KAAK,WAAW,CAAoB,CAAC;QAC/F,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,0BAA0B,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,sBAAsB,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,KAAK,YAAY,CAAC,CAAC;QAC/E,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,2BAA2B,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACpF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,uBAAuB,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,IAAK,MAAM,CAAC,IAAe,GAAG,CAAC,IAAK,MAAM,CAAC,IAAe,GAAG,eAAe,EAAE,CAAC;YACnH,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,kBAAkB,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO;YACL,QAAQ;YACR,IAAI;YACJ,SAAS;YACT,GAAG,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC;YACpE,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC;YAC9C,MAAM;YACN,IAAI,EAAE,MAAM,CAAC,IAAc;SAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,mBAAmB;QAC5B,OAAO;QACP,WAAW;QACX,GAAG,CAAC,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,OAAO;KACR,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,SAAuB,EACvB,OAAe;IAEf,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,EAAE,YAAY,EAAE,yBAAyB,EAAE;SACrD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,OAAO,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,QAAQ,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAChB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;gBAC1B,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;oBACpB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,QAAQ,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAe,EACf,UAA8D,EAAE;IAEhE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACxD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,wCAAyC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC;QACpE,WAAW,EAAE,SAAS,CAAC,QAAQ,EAAE;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAgC,EAChC,WAA4B,OAAO,CAAC,QAAQ,EAC5C,OAAe,OAAO,CAAC,IAAI;IAE3B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC/F,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,sCAAsC,QAAQ,IAAI,IAAI,2CAA2C,CAAC,CAAC;IACrH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,MAA+B;IAChF,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,0CAA0C,MAAM,CAAC,IAAI,cAAc,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;IAClF,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAgC,EAChC,UAII,EAAE;IAEN,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sCAAuC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACrC,CAAC"}

package/dist/safe-tar.d.ts

@@ -0,0 +1,11 @@
+export interface SafeTarLimits {
+    maxEntries: number;
+    maxFileSize: number;
+    maxUnpackedSize: number;
+}
+export declare function listSafeTarGz(archive: Buffer, limits?: Partial<SafeTarLimits>): ReadonlyArray<{
+    path: string;
+    type: 'file' | 'directory';
+    size: number;
+}>;
+export declare function extractSafeTarGz(archive: Buffer, destination: string, limits?: Partial<SafeTarLimits>): void;

package/dist/safe-tar.js

@@ -0,0 +1,180 @@
+import { chmodSync, mkdirSync, writeFileSync, } from 'fs';
+import { dirname, resolve } from 'path';
+import { posix } from 'path';
+import { gunzipSync } from 'zlib';
+const DEFAULT_LIMITS = {
+    maxEntries: 100_000,
+    maxFileSize: 100 * 1024 * 1024,
+    maxUnpackedSize: 300 * 1024 * 1024,
+};
+function readTarString(buffer, start, length) {
+    const end = buffer.indexOf(0, start);
+    return buffer.toString('utf8', start, end >= start && end < start + length ? end : start + length);
+}
+function parseOctal(value, field) {
+    const parsed = Number.parseInt(value.trim() || '0', 8);
+    if (!Number.isSafeInteger(parsed) || parsed < 0) {
+        throw new Error(`Runtime bundle contains an invalid ${field}`);
+    }
+    return parsed;
+}
+function validateArchivePath(path) {
+    if (!path || path.includes('\\') || path.includes('\0') || path.includes(':')) {
+        throw new Error('Runtime bundle contains an unsupported path');
+    }
+    const normalized = posix.normalize(path).replace(/^\.\/+/, '');
+    if (!normalized
+        || posix.isAbsolute(normalized)
+        || normalized === '..'
+        || normalized.startsWith('../')) {
+        throw new Error('Runtime bundle contains an unsafe path');
+    }
+    return normalized.replace(/\/+$/, '');
+}
+function validateTarChecksum(header) {
+    const expected = parseOctal(readTarString(header, 148, 8), 'header checksum');
+    let actual = 0;
+    for (let index = 0; index < header.length; index++) {
+        actual += index >= 148 && index < 156 ? 0x20 : header[index];
+    }
+    if (actual !== expected)
+        throw new Error('Runtime bundle contains an invalid header checksum');
+}
+function parsePaxPath(content) {
+    let offset = 0;
+    let path = null;
+    while (offset < content.length) {
+        const space = content.indexOf(0x20, offset);
+        if (space < 0)
+            throw new Error('Runtime bundle contains invalid PAX metadata');
+        const length = Number(content.toString('ascii', offset, space));
+        if (!Number.isSafeInteger(length) || length <= 0 || offset + length > content.length) {
+            throw new Error('Runtime bundle contains invalid PAX record length');
+        }
+        const record = content.subarray(space + 1, offset + length);
+        if (record[record.length - 1] !== 0x0a)
+            throw new Error('Runtime bundle contains invalid PAX record');
+        const equals = record.indexOf(0x3d);
+        if (equals < 1)
+            throw new Error('Runtime bundle contains invalid PAX field');
+        const key = record.toString('utf8', 0, equals);
+        const value = record.toString('utf8', equals + 1, record.length - 1);
+        if (key === 'path')
+            path = validateArchivePath(value);
+        else if (!['mtime', 'atime', 'ctime'].includes(key)) {
+            throw new Error(`Runtime bundle contains unsupported PAX field ${key}`);
+        }
+        offset += length;
+    }
+    return path;
+}
+function parseTarGz(archive, limits) {
+    let tar;
+    try {
+        tar = gunzipSync(archive, { maxOutputLength: limits.maxUnpackedSize });
+    }
+    catch {
+        throw new Error('Runtime bundle is not a valid bounded gzip archive');
+    }
+    const entries = [];
+    const seen = new Set();
+    let unpackedSize = 0;
+    let pendingPath = null;
+    for (let offset = 0; offset + 512 <= tar.length;) {
+        const header = tar.subarray(offset, offset + 512);
+        if (header.every(byte => byte === 0))
+            break;
+        validateTarChecksum(header);
+        if (entries.length >= limits.maxEntries) {
+            throw new Error('Runtime bundle contains too many entries');
+        }
+        const name = readTarString(header, 0, 100);
+        const prefix = readTarString(header, 345, 155);
+        const typeFlag = String.fromCharCode(header[156] || 0);
+        const size = parseOctal(readTarString(header, 124, 12), 'entry size');
+        const mode = parseOctal(readTarString(header, 100, 8), 'entry mode') & 0o777;
+        if (size > limits.maxFileSize) {
+            throw new Error('Runtime bundle entry exceeds allowed limits');
+        }
+        const contentStart = offset + 512;
+        const contentEnd = contentStart + size;
+        if (contentEnd > tar.length) {
+            throw new Error('Runtime bundle contains a truncated entry');
+        }
+        const content = tar.subarray(contentStart, contentEnd);
+        offset = contentStart + Math.ceil(size / 512) * 512;
+        if (typeFlag === 'x') {
+            if (size > 1024 * 1024)
+                throw new Error('Runtime bundle PAX metadata is too large');
+            pendingPath = parsePaxPath(content) ?? pendingPath;
+            continue;
+        }
+        if (typeFlag === 'L') {
+            if (size > 1024 * 1024)
+                throw new Error('Runtime bundle long path is too large');
+            pendingPath = validateArchivePath(readTarString(content, 0, content.length));
+            continue;
+        }
+        if (typeFlag === 'g' || typeFlag === 'K') {
+            throw new Error(`Runtime bundle contains unsupported entry type ${typeFlag}`);
+        }
+        const type = typeFlag === '5'
+            ? 'directory'
+            : (typeFlag === '\0' || typeFlag === '0' || typeFlag === '') ? 'file' : null;
+        if (!type) {
+            throw new Error(`Runtime bundle contains unsupported entry type ${typeFlag || 'NUL'}`);
+        }
+        if (type === 'directory' && size !== 0) {
+            throw new Error('Runtime bundle directory contains unexpected data');
+        }
+        const archivePath = pendingPath
+            ?? validateArchivePath(prefix ? `${prefix}/${name}` : name);
+        pendingPath = null;
+        if (seen.has(archivePath)) {
+            throw new Error(`Runtime bundle contains a duplicate path: ${archivePath}`);
+        }
+        seen.add(archivePath);
+        unpackedSize += size;
+        if (unpackedSize > limits.maxUnpackedSize) {
+            throw new Error('Runtime bundle exceeds maximum unpacked size');
+        }
+        entries.push({
+            path: archivePath,
+            type,
+            mode,
+            content,
+        });
+    }
+    if (pendingPath)
+        throw new Error('Runtime bundle contains dangling extended path metadata');
+    return entries;
+}
+export function listSafeTarGz(archive, limits = {}) {
+    const resolvedLimits = { ...DEFAULT_LIMITS, ...limits };
+    return parseTarGz(archive, resolvedLimits).map(entry => ({
+        path: entry.path,
+        type: entry.type,
+        size: entry.content.length,
+    }));
+}
+export function extractSafeTarGz(archive, destination, limits = {}) {
+    const root = resolve(destination);
+    mkdirSync(root, { recursive: true, mode: 0o700 });
+    const resolvedLimits = { ...DEFAULT_LIMITS, ...limits };
+    for (const entry of parseTarGz(archive, resolvedLimits)) {
+        const target = resolve(root, ...entry.path.split('/'));
+        const rel = posix.normalize(entry.path);
+        if (target === root || rel.startsWith('../')) {
+            throw new Error('Runtime bundle extraction escaped its destination');
+        }
+        if (entry.type === 'directory') {
+            mkdirSync(target, { recursive: true, mode: entry.mode || 0o755 });
+            continue;
+        }
+        mkdirSync(dirname(target), { recursive: true, mode: 0o755 });
+        writeFileSync(target, entry.content, { mode: entry.mode || 0o644, flag: 'wx' });
+        if (process.platform !== 'win32')
+            chmodSync(target, entry.mode || 0o644);
+    }
+}
+//# sourceMappingURL=safe-tar.js.map

package/dist/safe-tar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-tar.js","sourceRoot":"","sources":["../src/safe-tar.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,SAAS,EACT,aAAa,GACd,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAQlC,MAAM,cAAc,GAAkB;IACpC,UAAU,EAAE,OAAO;IACnB,WAAW,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IAC9B,eAAe,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;CACnC,CAAC;AASF,SAAS,aAAa,CAAC,MAAc,EAAE,KAAa,EAAE,MAAc;IAClE,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,KAAK,IAAI,GAAG,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC/D,IACE,CAAC,UAAU;WACR,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;WAC5B,UAAU,KAAK,IAAI;WACnB,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,EAC/B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc;IACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC9E,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACtG,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrE,IAAI,GAAG,KAAK,MAAM;YAAE,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;aACjD,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,iDAAiD,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,IAAI,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,MAAqB;IACxD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QACjD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;YAAE,MAAM;QAC5C,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;QAC7E,IAAI,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,GAAG,GAAG,CAAC;QAClC,MAAM,UAAU,GAAG,YAAY,GAAG,IAAI,CAAC;QACvC,IAAI,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACvD,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;QAEpD,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACrB,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACpF,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC;YACnD,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACrB,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACjF,WAAW,GAAG,mBAAmB,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7E,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,kDAAkD,QAAQ,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,KAAK,GAAG;YAC3B,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,kDAAkD,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,WAAW,GAAG,WAAW;eAC1B,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9D,WAAW,GAAG,IAAI,CAAC;QACnB,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,6CAA6C,WAAW,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtB,YAAY,IAAI,IAAI,CAAC;QACrB,IAAI,YAAY,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,WAAW;YACjB,IAAI;YACJ,IAAI;YACJ,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,IAAI,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC5F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,SAAiC,EAAE;IAEnC,MAAM,cAAc,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACxD,OAAO,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;KAC3B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,WAAmB,EACnB,SAAiC,EAAE;IAEnC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;YAClE,SAAS;QACX,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC"}

package/dist/self-check.d.ts

@@ -0,0 +1,14 @@
+export interface SelfCheckResult {
+    ok: true;
+    version: string;
+    packageRoot: string;
+    launchSpecValidated: boolean;
+    nativeModulesValidated: boolean;
+}
+export declare function getCurrentPackageRoot(): string;
+export declare function runSelfCheck(options?: {
+    packageRoot?: string;
+    expectedVersion?: string;
+    launchSpecPath?: string;
+    validateNativeModules?: boolean;
+}): SelfCheckResult;

package/dist/self-check.js

@@ -0,0 +1,62 @@
+import { createRequire } from 'module';
+import { existsSync, readFileSync, statSync } from 'fs';
+import { dirname, join, resolve } from 'path';
+import { fileURLToPath } from 'url';
+import { loadLaunchSpec } from './launch-spec.js';
+export function getCurrentPackageRoot() {
+    return resolve(dirname(fileURLToPath(import.meta.url)), '..');
+}
+export function runSelfCheck(options = {}) {
+    const packageRoot = resolve(options.packageRoot ?? getCurrentPackageRoot());
+    const packageJsonPath = join(packageRoot, 'package.json');
+    const cliPath = join(packageRoot, 'dist', 'cli.js');
+    const indexPath = join(packageRoot, 'dist', 'index.js');
+    for (const path of [packageJsonPath, cliPath, indexPath]) {
+        if (!existsSync(path) || !statSync(path).isFile()) {
+            throw new Error(`Self-check required file is missing: ${path}`);
+        }
+    }
+    const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf8'));
+    if (packageJson.name !== '@agent-link/agent' || typeof packageJson.version !== 'string') {
+        throw new Error('Self-check package identity is invalid');
+    }
+    if (options.expectedVersion && packageJson.version !== options.expectedVersion) {
+        throw new Error(`Self-check expected version ${options.expectedVersion}, found ${packageJson.version}`);
+    }
+    let launchSpecValidated = false;
+    if (options.launchSpecPath) {
+        loadLaunchSpec(resolve(options.launchSpecPath));
+        launchSpecValidated = true;
+    }
+    let nativeModulesValidated = false;
+    if (options.validateNativeModules !== false) {
+        const require = createRequire(cliPath);
+        const nodePty = require('node-pty');
+        if (typeof nodePty.spawn !== 'function') {
+            throw new Error('Self-check failed to load node-pty native runtime');
+        }
+        const shell = process.platform === 'win32'
+            ? 'powershell.exe'
+            : (process.env.SHELL || '/bin/sh');
+        const args = process.platform === 'win32'
+            ? ['-NoProfile', '-Command', 'exit 0']
+            : ['-c', 'exit 0'];
+        const nativeProbe = nodePty.spawn(shell, args, {
+            name: 'xterm-256color',
+            cols: 20,
+            rows: 5,
+            cwd: packageRoot,
+            env: Object.fromEntries(Object.entries(process.env).filter((entry) => entry[1] !== undefined)),
+        });
+        nativeProbe.kill();
+        nativeModulesValidated = true;
+    }
+    return {
+        ok: true,
+        version: packageJson.version,
+        packageRoot,
+        launchSpecValidated,
+        nativeModulesValidated,
+    };
+}
+//# sourceMappingURL=self-check.js.map

package/dist/self-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-check.js","sourceRoot":"","sources":["../src/self-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAUlD,MAAM,UAAU,qBAAqB;IACnC,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,UAKzB,EAAE;IACJ,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,qBAAqB,EAAE,CAAC,CAAC;IAC5E,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAGnE,CAAC;IACF,IAAI,WAAW,CAAC,IAAI,KAAK,mBAAmB,IAAI,OAAO,WAAW,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,IAAI,WAAW,CAAC,OAAO,KAAK,OAAO,CAAC,eAAe,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,CAAC,eAAe,WAAW,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QAChD,mBAAmB,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,IAAI,sBAAsB,GAAG,KAAK,CAAC;IACnC,IAAI,OAAO,CAAC,qBAAqB,KAAK,KAAK,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAYjC,CAAC;QACF,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;YACxC,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;YACvC,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC;YACtC,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACrB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE;YAC7C,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,CAAC;YACP,GAAG,EAAE,WAAW;YAChB,GAAG,EAAE,MAAM,CAAC,WAAW,CACrB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CACjG;SACF,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,EAAE,CAAC;QACnB,sBAAsB,GAAG,IAAI,CAAC;IAChC,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,WAAW;QACX,mBAAmB;QACnB,sBAAsB;KACvB,CAAC;AACJ,CAAC"}

package/dist/service.d.ts

@@ -4,6 +4,7 @@ export interface ServiceInstallOptions {
     platform?: NodeJS.Platform;
     startIfStopped?: boolean;
     persistPolicy?: boolean;
+    launcherPath?: string | null;
 }
 export interface ServiceUninstallOptions {
     platform?: NodeJS.Platform;
@@ -17,9 +18,18 @@ export interface ServiceInstallResult {
     spec: LaunchSpec;
     pendingReload: boolean;
 }
+export interface ServiceInstallationSnapshot {
+    platform: NodeJS.Platform;
+    artifactPath: string;
+    artifactContent: string | null;
+    specPath: string;
+    specContent: string | null;
+}
 export declare function getServiceArtifactPath(platform?: NodeJS.Platform): string;
 export declare function getServiceEnvironment(hostType?: LaunchHostType): Record<string, string>;
-export declare function renderServiceArtifact(spec: LaunchSpec, specPath: string, platform?: NodeJS.Platform): string;
+export declare function renderServiceArtifact(spec: LaunchSpec, specPath: string, platform?: NodeJS.Platform, launcherPath?: string | null): string;
+export declare function captureServiceInstallation(platform?: NodeJS.Platform): ServiceInstallationSnapshot;
+export declare function restoreServiceInstallation(snapshot: ServiceInstallationSnapshot): void;
 export declare function installServiceLaunchSpec(source: LaunchSpec, options?: ServiceInstallOptions): ServiceInstallResult;
 export declare function isServiceInstalled(platform?: NodeJS.Platform): boolean;
 export declare function serviceInstall(config: AgentConfig): void;

package/dist/service.js

@@ -6,6 +6,7 @@ import { fileURLToPath } from 'url';
 import { CONFIG_DIR, clearRuntimeState, getLogDir, isProcessAlive, killProcess, loadRuntimeState, saveConfig, saveRuntimeState, } from './config.js';
 import { computeLaunchSpecDigest, createLaunchSpec, createServiceLaunchSpec, getServiceLaunchSpecPath, saveLaunchSpec, saveLaunchSpecSnapshot, loadLaunchSpec, } from './launch-spec.js';
 import { getCachedPathEnvVars, getResolvedExecPaths, warmExecPaths } from './sdk.js';
+import { getAdoptedLauncherPath } from './launcher-manager.js';
 const SERVICE_NAME = 'agentlink';
 const LAUNCHD_LABEL = 'com.agentlink.agent';
 function getCliPath() {
@@ -78,9 +79,9 @@ function renderEnvironment(environment, format) {
         .map(([name, value]) => `set "${name}=${value.replace(/%/g, '%%')}"`)
         .join('\r\n');
 }
-export function renderServiceArtifact(spec, specPath, platform = process.platform) {
+export function renderServiceArtifact(spec, specPath, platform = process.platform, launcherPath = getAdoptedLauncherPath()) {
     const nodePath = process.execPath;
-    const cliPath = getCliPath();
+    const cliPath = launcherPath ?? getCliPath();
     const logDir = getLogDir();
     const environment = getServiceEnvironment(spec.host.type);
     if (platform === 'linux') {
@@ -161,6 +162,30 @@ function writeTextAtomic(filePath, content) {
     }
     return true;
 }
+export function captureServiceInstallation(platform = process.platform) {
+    const artifactPath = getServiceArtifactPath(platform);
+    const specPath = getServiceLaunchSpecPath();
+    return {
+        platform,
+        artifactPath,
+        artifactContent: existsSync(artifactPath) ? readFileSync(artifactPath, 'utf8') : null,
+        specPath,
+        specContent: existsSync(specPath) ? readFileSync(specPath, 'utf8') : null,
+    };
+}
+export function restoreServiceInstallation(snapshot) {
+    if (snapshot.artifactContent === null)
+        rmSync(snapshot.artifactPath, { force: true });
+    else
+        writeTextAtomic(snapshot.artifactPath, snapshot.artifactContent);
+    if (snapshot.specContent === null)
+        rmSync(snapshot.specPath, { force: true });
+    else
+        writeTextAtomic(snapshot.specPath, snapshot.specContent);
+    if (!isSimulation() && snapshot.platform === 'linux') {
+        runSystemctl(['daemon-reload']);
+    }
+}
 function runSystemctl(args) {
     execFileSync('systemctl', ['--user', ...args], { stdio: 'ignore' });
 }
@@ -193,7 +218,7 @@ function removeLegacySystemdService(stopAgent) {
     }
 }
 function startFromServiceLaunchSpec(specPath) {
-    execFileSync(process.execPath, [getCliPath(), 'start', '--launch-spec', specPath], {
+    execFileSync(process.execPath, [getAdoptedLauncherPath() ?? getCliPath(), 'start', '--launch-spec', specPath], {
         stdio: 'inherit',
         windowsHide: true,
     });
@@ -227,7 +252,10 @@ export function installServiceLaunchSpec(source, options = {}) {
     const artifactPath = getServiceArtifactPath(platform);
     const previousContent = existsSync(artifactPath) ? readFileSync(artifactPath, 'utf8') : null;
     const existed = previousContent !== null;
-    const content = renderServiceArtifact(spec, specPath, platform);
+    const launcherPath = options.launcherPath === undefined
+        ? getAdoptedLauncherPath()
+        : options.launcherPath;
+    const content = renderServiceArtifact(spec, specPath, platform, launcherPath);
     preserveRuntimeServiceSpecBeforeReplace(spec);
     const changed = writeTextAtomic(artifactPath, content);
     // Write the referenced LaunchSpec only after the host entry is safely staged.