@ai-agent-forge/agent-forge 0.85.0

package/dist/plugins/ecosystem/node-package-install-stack.js

@@ -0,0 +1,65 @@
+import { createPluginInstallerV1 } from "./installer.js";
+import { createNodeHttpPluginDistributionStackV1, } from "./node-distribution-host.js";
+import { createNodePackageInstallHostForSessionV1, createNodePackageInstallHostV1, } from "./node-package-install-host.js";
+/**
+ * Compose distribution, installation and optional session runtime assembly.
+ * Every dependency is explicit; this function does not alter Core defaults.
+ */
+export async function createNodePluginPackageInstallStackV1(options) {
+    const distributionHost = await createNodeHttpPluginDistributionStackV1(options.distribution);
+    try {
+        const packageOptions = {
+            ...options.packageHost,
+            openArtifact: distributionHost.openArtifact,
+        };
+        const packageHost = options.session === undefined
+            ? await createNodePackageInstallHostV1(packageOptions)
+            : await createNodePackageInstallHostForSessionV1(packageOptions, options.session);
+        try {
+            const installer = createPluginInstallerV1({
+                host: packageHost,
+                ...(options.verifier === undefined ? {} : { verifier: options.verifier }),
+            });
+            let closePromise;
+            const close = () => {
+                if (closePromise !== undefined)
+                    return closePromise;
+                closePromise = (async () => {
+                    let failure;
+                    try {
+                        await packageHost.close();
+                    }
+                    catch (error) {
+                        failure = error;
+                    }
+                    try {
+                        await distributionHost.close();
+                    }
+                    catch (error) {
+                        if (failure === undefined)
+                            failure = error;
+                    }
+                    if (failure !== undefined)
+                        throw failure;
+                })();
+                return closePromise;
+            };
+            return Object.freeze({
+                distributionHost,
+                distribution: distributionHost.distribution,
+                packageHost,
+                installer,
+                close,
+            });
+        }
+        catch (error) {
+            await packageHost.close().catch(() => undefined);
+            throw error;
+        }
+    }
+    catch (error) {
+        await distributionHost.close().catch(() => undefined);
+        throw error;
+    }
+}
+//# sourceMappingURL=node-package-install-stack.js.map

package/dist/plugins/ecosystem/node-package-install-stack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-package-install-stack.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-package-install-stack.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EACN,uCAAuC,GAGvC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACN,wCAAwC,EACxC,8BAA8B,GAI9B,MAAM,gCAAgC,CAAC;AAsBxC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAC1D,OAA+C,EACJ;IAC3C,MAAM,gBAAgB,GAAG,MAAM,uCAAuC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7F,IAAI,CAAC;QACJ,MAAM,cAAc,GAAG;YACtB,GAAG,OAAO,CAAC,WAAW;YACtB,YAAY,EAAE,gBAAgB,CAAC,YAAY;SAC3C,CAAC;QACF,MAAM,WAAW,GAChB,OAAO,CAAC,OAAO,KAAK,SAAS;YAC5B,CAAC,CAAC,MAAM,8BAA8B,CAAC,cAAc,CAAC;YACtD,CAAC,CAAC,MAAM,wCAAwC,CAAC,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACpF,IAAI,CAAC;YACJ,MAAM,SAAS,GAAG,uBAAuB,CAAC;gBACzC,IAAI,EAAE,WAAW;gBACjB,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;aACzE,CAAC,CAAC;YACH,IAAI,YAAuC,CAAC;YAC5C,MAAM,KAAK,GAAG,GAAkB,EAAE,CAAC;gBAClC,IAAI,YAAY,KAAK,SAAS;oBAAE,OAAO,YAAY,CAAC;gBACpD,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC3B,IAAI,OAAgB,CAAC;oBACrB,IAAI,CAAC;wBACJ,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;oBAC3B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,OAAO,GAAG,KAAK,CAAC;oBACjB,CAAC;oBACD,IAAI,CAAC;wBACJ,MAAM,gBAAgB,CAAC,KAAK,EAAE,CAAC;oBAChC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,IAAI,OAAO,KAAK,SAAS;4BAAE,OAAO,GAAG,KAAK,CAAC;oBAC5C,CAAC;oBACD,IAAI,OAAO,KAAK,SAAS;wBAAE,MAAM,OAAO,CAAC;gBAAA,CACzC,CAAC,EAAE,CAAC;gBACL,OAAO,YAAY,CAAC;YAAA,CACpB,CAAC;YACF,OAAO,MAAM,CAAC,MAAM,CAAC;gBACpB,gBAAgB;gBAChB,YAAY,EAAE,gBAAgB,CAAC,YAAY;gBAC3C,WAAW;gBACX,SAAS;gBACT,KAAK;aACL,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACjD,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,gBAAgB,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACb,CAAC;AAAA,CACD","sourcesContent":["import type { PluginDistributionV1 } from \"./distribution.ts\";\nimport type { PluginInstallerV1 } from \"./installer.ts\";\nimport { createPluginInstallerV1 } from \"./installer.ts\";\nimport {\n\tcreateNodeHttpPluginDistributionStackV1,\n\ttype NodeHttpPluginDistributionStackOptionsV1,\n\ttype NodeHttpPluginDistributionStackV1,\n} from \"./node-distribution-host.ts\";\nimport {\n\tcreateNodePackageInstallHostForSessionV1,\n\tcreateNodePackageInstallHostV1,\n\ttype NodePackageInstallCapabilityPluginSessionV1,\n\ttype NodePackageInstallHostOptionsV1,\n\ttype NodePackageInstallHostV1,\n} from \"./node-package-install-host.ts\";\nimport type { PluginSourceVerifierV1 } from \"./types.ts\";\n\n/** Explicit host-owned composition for signed HTTP ZIP package installation. */\nexport interface NodePluginPackageInstallStackOptionsV1 {\n\treadonly distribution: NodeHttpPluginDistributionStackOptionsV1;\n\t/** `openArtifact` is supplied by the distribution host and must not be overridden. */\n\treadonly packageHost: Omit<NodePackageInstallHostOptionsV1, \"openArtifact\">;\n\t/** Optional AgentSession-compatible loader for runtime assembly. */\n\treadonly session?: NodePackageInstallCapabilityPluginSessionV1;\n\t/** Optional source verifier for the registry/update record. */\n\treadonly verifier?: PluginSourceVerifierV1;\n}\n\nexport interface NodePluginPackageInstallStackV1 {\n\treadonly distributionHost: NodeHttpPluginDistributionStackV1;\n\treadonly distribution: PluginDistributionV1;\n\treadonly packageHost: NodePackageInstallHostV1;\n\treadonly installer: PluginInstallerV1;\n\treadonly close: () => Promise<void>;\n}\n\n/**\n * Compose distribution, installation and optional session runtime assembly.\n * Every dependency is explicit; this function does not alter Core defaults.\n */\nexport async function createNodePluginPackageInstallStackV1(\n\toptions: NodePluginPackageInstallStackOptionsV1,\n): Promise<NodePluginPackageInstallStackV1> {\n\tconst distributionHost = await createNodeHttpPluginDistributionStackV1(options.distribution);\n\ttry {\n\t\tconst packageOptions = {\n\t\t\t...options.packageHost,\n\t\t\topenArtifact: distributionHost.openArtifact,\n\t\t};\n\t\tconst packageHost =\n\t\t\toptions.session === undefined\n\t\t\t\t? await createNodePackageInstallHostV1(packageOptions)\n\t\t\t\t: await createNodePackageInstallHostForSessionV1(packageOptions, options.session);\n\t\ttry {\n\t\t\tconst installer = createPluginInstallerV1({\n\t\t\t\thost: packageHost,\n\t\t\t\t...(options.verifier === undefined ? {} : { verifier: options.verifier }),\n\t\t\t});\n\t\t\tlet closePromise: Promise<void> | undefined;\n\t\t\tconst close = (): Promise<void> => {\n\t\t\t\tif (closePromise !== undefined) return closePromise;\n\t\t\t\tclosePromise = (async () => {\n\t\t\t\t\tlet failure: unknown;\n\t\t\t\t\ttry {\n\t\t\t\t\t\tawait packageHost.close();\n\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\tfailure = error;\n\t\t\t\t\t}\n\t\t\t\t\ttry {\n\t\t\t\t\t\tawait distributionHost.close();\n\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\tif (failure === undefined) failure = error;\n\t\t\t\t\t}\n\t\t\t\t\tif (failure !== undefined) throw failure;\n\t\t\t\t})();\n\t\t\t\treturn closePromise;\n\t\t\t};\n\t\t\treturn Object.freeze({\n\t\t\t\tdistributionHost,\n\t\t\t\tdistribution: distributionHost.distribution,\n\t\t\t\tpackageHost,\n\t\t\t\tinstaller,\n\t\t\t\tclose,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tawait packageHost.close().catch(() => undefined);\n\t\t\tthrow error;\n\t\t}\n\t} catch (error) {\n\t\tawait distributionHost.close().catch(() => undefined);\n\t\tthrow error;\n\t}\n}\n"]}

package/dist/plugins/ecosystem/node-package-media.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Package media-type detection shared by the URL and local-file acquisition
+ * sources. The decision combines the file-name extension (when present) with
+ * the leading magic bytes; a mismatch between them is an explicit rejection,
+ * never a guess.
+ */
+export type PluginPackageMediaTypeV1 = "application/zip" | "application/gzip";
+/**
+ * Detect the package media type from magic bytes plus an optional file name.
+ * `application/gzip` must still be a tar package; the install host's tar
+ * parser enforces that during extraction.
+ */
+export declare function detectPluginPackageMediaTypeV1(bytes: Uint8Array, fileName?: string): PluginPackageMediaTypeV1;
+//# sourceMappingURL=node-package-media.d.ts.map

package/dist/plugins/ecosystem/node-package-media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-package-media.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-package-media.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH,MAAM,MAAM,wBAAwB,GAAG,iBAAiB,GAAG,kBAAkB,CAAC;AAqB9E;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,wBAAwB,CAO7G","sourcesContent":["import { NodePackageInstallErrorV1 } from \"./node-package-install-host.ts\";\n\n/**\n * Package media-type detection shared by the URL and local-file acquisition\n * sources. The decision combines the file-name extension (when present) with\n * the leading magic bytes; a mismatch between them is an explicit rejection,\n * never a guess.\n */\n\nexport type PluginPackageMediaTypeV1 = \"application/zip\" | \"application/gzip\";\n\nfunction sniffMagic(bytes: Uint8Array): PluginPackageMediaTypeV1 | undefined {\n\tif (\n\t\tbytes.byteLength >= 4 &&\n\t\tbytes[0] === 0x50 &&\n\t\tbytes[1] === 0x4b &&\n\t\t(bytes[2] === 0x03 || bytes[2] === 0x05 || bytes[2] === 0x07)\n\t)\n\t\treturn \"application/zip\";\n\tif (bytes.byteLength >= 2 && bytes[0] === 0x1f && bytes[1] === 0x8b) return \"application/gzip\";\n\treturn undefined;\n}\n\nfunction extensionMediaType(fileName: string): PluginPackageMediaTypeV1 | undefined {\n\tconst value = fileName.toLowerCase();\n\tif (value.endsWith(\".zip\")) return \"application/zip\";\n\tif (value.endsWith(\".tgz\") || value.endsWith(\".tar.gz\")) return \"application/gzip\";\n\treturn undefined;\n}\n\n/**\n * Detect the package media type from magic bytes plus an optional file name.\n * `application/gzip` must still be a tar package; the install host's tar\n * parser enforces that during extraction.\n */\nexport function detectPluginPackageMediaTypeV1(bytes: Uint8Array, fileName?: string): PluginPackageMediaTypeV1 {\n\tif (!(bytes instanceof Uint8Array)) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\tconst magic = sniffMagic(bytes);\n\tconst extension = fileName === undefined ? undefined : extensionMediaType(fileName);\n\tif (magic === undefined) throw new NodePackageInstallErrorV1(\"unsupported_media_type\");\n\tif (extension !== undefined && extension !== magic) throw new NodePackageInstallErrorV1(\"unsupported_media_type\");\n\treturn magic;\n}\n"]}

package/dist/plugins/ecosystem/node-package-media.js

@@ -0,0 +1,36 @@
+import { NodePackageInstallErrorV1 } from "./node-package-install-host.js";
+function sniffMagic(bytes) {
+    if (bytes.byteLength >= 4 &&
+        bytes[0] === 0x50 &&
+        bytes[1] === 0x4b &&
+        (bytes[2] === 0x03 || bytes[2] === 0x05 || bytes[2] === 0x07))
+        return "application/zip";
+    if (bytes.byteLength >= 2 && bytes[0] === 0x1f && bytes[1] === 0x8b)
+        return "application/gzip";
+    return undefined;
+}
+function extensionMediaType(fileName) {
+    const value = fileName.toLowerCase();
+    if (value.endsWith(".zip"))
+        return "application/zip";
+    if (value.endsWith(".tgz") || value.endsWith(".tar.gz"))
+        return "application/gzip";
+    return undefined;
+}
+/**
+ * Detect the package media type from magic bytes plus an optional file name.
+ * `application/gzip` must still be a tar package; the install host's tar
+ * parser enforces that during extraction.
+ */
+export function detectPluginPackageMediaTypeV1(bytes, fileName) {
+    if (!(bytes instanceof Uint8Array))
+        throw new NodePackageInstallErrorV1("archive_invalid");
+    const magic = sniffMagic(bytes);
+    const extension = fileName === undefined ? undefined : extensionMediaType(fileName);
+    if (magic === undefined)
+        throw new NodePackageInstallErrorV1("unsupported_media_type");
+    if (extension !== undefined && extension !== magic)
+        throw new NodePackageInstallErrorV1("unsupported_media_type");
+    return magic;
+}
+//# sourceMappingURL=node-package-media.js.map

package/dist/plugins/ecosystem/node-package-media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-package-media.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-package-media.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAW3E,SAAS,UAAU,CAAC,KAAiB,EAAwC;IAC5E,IACC,KAAK,CAAC,UAAU,IAAI,CAAC;QACrB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QACjB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAE7D,OAAO,iBAAiB,CAAC;IAC1B,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,kBAAkB,CAAC;IAC/F,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAwC;IACnF,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACrD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACnF,OAAO,SAAS,CAAC;AAAA,CACjB;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAAiB,EAAE,QAAiB,EAA4B;IAC9G,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;QAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACpF,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,yBAAyB,CAAC,wBAAwB,CAAC,CAAC;IACvF,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,KAAK;QAAE,MAAM,IAAI,yBAAyB,CAAC,wBAAwB,CAAC,CAAC;IAClH,OAAO,KAAK,CAAC;AAAA,CACb","sourcesContent":["import { NodePackageInstallErrorV1 } from \"./node-package-install-host.ts\";\n\n/**\n * Package media-type detection shared by the URL and local-file acquisition\n * sources. The decision combines the file-name extension (when present) with\n * the leading magic bytes; a mismatch between them is an explicit rejection,\n * never a guess.\n */\n\nexport type PluginPackageMediaTypeV1 = \"application/zip\" | \"application/gzip\";\n\nfunction sniffMagic(bytes: Uint8Array): PluginPackageMediaTypeV1 | undefined {\n\tif (\n\t\tbytes.byteLength >= 4 &&\n\t\tbytes[0] === 0x50 &&\n\t\tbytes[1] === 0x4b &&\n\t\t(bytes[2] === 0x03 || bytes[2] === 0x05 || bytes[2] === 0x07)\n\t)\n\t\treturn \"application/zip\";\n\tif (bytes.byteLength >= 2 && bytes[0] === 0x1f && bytes[1] === 0x8b) return \"application/gzip\";\n\treturn undefined;\n}\n\nfunction extensionMediaType(fileName: string): PluginPackageMediaTypeV1 | undefined {\n\tconst value = fileName.toLowerCase();\n\tif (value.endsWith(\".zip\")) return \"application/zip\";\n\tif (value.endsWith(\".tgz\") || value.endsWith(\".tar.gz\")) return \"application/gzip\";\n\treturn undefined;\n}\n\n/**\n * Detect the package media type from magic bytes plus an optional file name.\n * `application/gzip` must still be a tar package; the install host's tar\n * parser enforces that during extraction.\n */\nexport function detectPluginPackageMediaTypeV1(bytes: Uint8Array, fileName?: string): PluginPackageMediaTypeV1 {\n\tif (!(bytes instanceof Uint8Array)) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\tconst magic = sniffMagic(bytes);\n\tconst extension = fileName === undefined ? undefined : extensionMediaType(fileName);\n\tif (magic === undefined) throw new NodePackageInstallErrorV1(\"unsupported_media_type\");\n\tif (extension !== undefined && extension !== magic) throw new NodePackageInstallErrorV1(\"unsupported_media_type\");\n\treturn magic;\n}\n"]}

package/dist/plugins/ecosystem/node-plugin-acquisition-host.d.ts

@@ -0,0 +1,83 @@
+import type { PluginDistributionArtifactV1 } from "./distribution.ts";
+import { type NodeZipPackageEntryV1, type NodeZipPackageLimitsV1 } from "./node-package-install-host.ts";
+import { type PluginAcquisitionPackageV1 } from "./plugin-acquisition.ts";
+import type { PluginManifestV1 } from "./types.ts";
+export type { PluginAcquisitionPackageV1 } from "./plugin-acquisition.ts";
+/**
+ * Node acquisition orchestration for `plugin install <ref>` (design §4.6).
+ * One boundary acquires package bytes for every source (npm packument+tarball,
+ * GitHub/Gitee release asset, custom URL, local file, local directory),
+ * verifies the source-specific integrity layer (npm SRI > ref digest fragment
+ * > sha256 on exchange), discovers the `agent-forge.json` identity through the
+ * shared bounded unpackers, and exposes the result as an opaque distribution
+ * artifact the existing installer/install-host chain consumes unchanged.
+ */
+declare const NODE_PLUGIN_ACQUISITION_HOST_VERSION_V1: 1;
+/** Environment variable overriding the npm registry origin (bare http(s) origin). */
+export declare const AGENT_FORGE_NPM_REGISTRY_ENV_V1 = "AGENT_FORGE_NPM_REGISTRY";
+/** Environment variable carrying the npm registry bearer token. */
+export declare const AGENT_FORGE_NPM_TOKEN_ENV_V1 = "AGENT_FORGE_NPM_TOKEN";
+/** Environment variable overriding the GitHub release API origin (bare http(s) origin). */
+export declare const AGENT_FORGE_GITHUB_API_ENV_V1 = "AGENT_FORGE_GITHUB_API";
+/** Environment variable overriding the Gitee release API origin (bare http(s) origin, includes the /api/v5 path). */
+export declare const AGENT_FORGE_GITEE_API_ENV_V1 = "AGENT_FORGE_GITEE_API";
+/** Environment variable carrying the optional GitHub API token. */
+export declare const GITHUB_TOKEN_ENV_V1 = "GITHUB_TOKEN";
+/** Environment variable carrying the optional Gitee API token. */
+export declare const GITEE_TOKEN_ENV_V1 = "GITEE_TOKEN";
+export interface NodePluginAcquisitionHostV1 {
+    readonly version: typeof NODE_PLUGIN_ACQUISITION_HOST_VERSION_V1;
+    /** Parse and acquire one ref into a package + artifact pair. */
+    readonly resolvePackage: (input: {
+        readonly ref: string;
+        readonly signal?: AbortSignal;
+    }) => Promise<PluginAcquisitionPackageV1>;
+    /** Private installer-facing reader; mirrors the HTTP distribution host boundary. */
+    readonly openArtifact: (input: {
+        readonly artifact: PluginDistributionArtifactV1;
+        readonly signal?: AbortSignal;
+    }) => AsyncIterable<Uint8Array>;
+    readonly releaseArtifact: (input: {
+        readonly artifact: {
+            readonly artifactRef: string;
+        };
+    }) => Promise<void>;
+    /** Whether this host owns the artifact reference (used to compose artifact readers). */
+    readonly ownsArtifact: (input: {
+        readonly artifactRef: string;
+    }) => boolean;
+    readonly close: () => Promise<void>;
+}
+export interface NodePluginAcquisitionHostOptionsV1 {
+    /** Real fetch or a deterministic test replacement. */
+    readonly fetch?: typeof globalThis.fetch;
+    /** Bare http(s) npm registry origin; defaults to the environment variable, then the npm public registry. */
+    readonly npmRegistry?: string;
+    /** npm registry bearer token; defaults to the environment variable. */
+    readonly npmToken?: string;
+    /** Bare http(s) GitHub release API origin; defaults to the environment variable, then api.github.com. */
+    readonly githubApiOrigin?: string;
+    /** Bare http(s) Gitee release API origin; defaults to the environment variable, then gitee.com/api/v5. */
+    readonly giteeApiOrigin?: string;
+    /** GitHub API token sent as a bearer header; defaults to the environment variable. */
+    readonly githubToken?: string;
+    /** Gitee API token sent as an access_token query parameter; defaults to the environment variable. */
+    readonly giteeToken?: string;
+    readonly requestTimeoutMs?: number;
+    readonly maxResponseBytes?: number;
+    readonly maxTarballBytes?: number;
+    readonly limits?: NodeZipPackageLimitsV1;
+    readonly userAgent?: string;
+}
+/** Discover the `agent-forge.json` identity in already-bounded package entries. */
+export declare function pluginAcquisitionManifestFromEntriesV1(entries: readonly NodeZipPackageEntryV1[]): {
+    readonly manifest: PluginManifestV1;
+    readonly manifestDigest: string;
+};
+/**
+ * Create the Node acquisition host. All sources share the bounded unpackers,
+ * the manifest identity discovery, and the artifact reader contract used by
+ * the existing install host. Nothing is downloaded until `resolvePackage`.
+ */
+export declare function createNodePluginAcquisitionHostV1(options?: NodePluginAcquisitionHostOptionsV1): NodePluginAcquisitionHostV1;
+//# sourceMappingURL=node-plugin-acquisition-host.d.ts.map

package/dist/plugins/ecosystem/node-plugin-acquisition-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-plugin-acquisition-host.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-plugin-acquisition-host.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAOtE,OAAO,EAEN,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAE3B,MAAM,gCAAgC,CAAC;AASxC,OAAO,EAGN,KAAK,0BAA0B,EAG/B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGnD,YAAY,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAI1E;;;;;;;;GAQG;AAEH,QAAA,MAAM,uCAAuC,GAAa,CAAC;AAO3D,qFAAqF;AACrF,eAAO,MAAM,+BAA+B,6BAA6B,CAAC;AAC1E,mEAAmE;AACnE,eAAO,MAAM,4BAA4B,0BAA0B,CAAC;AACpE,2FAA2F;AAC3F,eAAO,MAAM,6BAA6B,2BAA2B,CAAC;AACtE,qHAAqH;AACrH,eAAO,MAAM,4BAA4B,0BAA0B,CAAC;AACpE,mEAAmE;AACnE,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAClD,kEAAkE;AAClE,eAAO,MAAM,kBAAkB,gBAAgB,CAAC;AAEhD,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,uCAAuC,CAAC;IACjE,gEAAgE;IAChE,QAAQ,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE;QAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC1C,oFAAoF;IACpF,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE;QAC9B,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;QAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,aAAa,CAAC,UAAU,CAAC,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE;YAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5G,wFAAwF;IACxF,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;IAC5E,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,kCAAkC;IAClD,sDAAsD;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,4GAA4G;IAC5G,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,yGAAyG;IACzG,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,0GAA0G;IAC1G,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,sFAAsF;IACtF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,qGAAqG;IACrG,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAmGD,mFAAmF;AACnF,wBAAgB,sCAAsC,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,GAAG;IAClG,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CAChC,CA4DA;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAChD,OAAO,GAAE,kCAAuC,GAC9C,2BAA2B,CAuO7B","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport { lstatSync } from \"node:fs\";\nimport type { PluginDistributionArtifactV1 } from \"./distribution.ts\";\nimport { collectLocalDirectoryPackageEntriesV1, readLocalPackageFileV1 } from \"./node-local-package-source.ts\";\nimport {\n\tcreateNodeNpmRegistrySourceV1,\n\tNodeNpmRegistrySourceErrorV1,\n\ttype NodeNpmRegistrySourceV1,\n} from \"./node-npm-registry-source.ts\";\nimport {\n\tNodePackageInstallErrorV1,\n\ttype NodeZipPackageEntryV1,\n\ttype NodeZipPackageLimitsV1,\n\tparseNodeZipPackageV1,\n} from \"./node-package-install-host.ts\";\nimport { detectPluginPackageMediaTypeV1 } from \"./node-package-media.ts\";\nimport {\n\tcreateNodeReleasePackageSourceV1,\n\tNodeReleasePackageSourceErrorV1,\n\ttype NodeReleasePackageSourceV1,\n} from \"./node-release-package-source.ts\";\nimport { parseNodeTarGzPackageV1 } from \"./node-tar-package.ts\";\nimport { buildNodeTarGzBytesV1 } from \"./node-tar-writer.ts\";\nimport {\n\tPluginAcquisitionErrorV1,\n\ttype PluginAcquisitionLocalProbeV1,\n\ttype PluginAcquisitionPackageV1,\n\ttype PluginAcquisitionRefV1,\n\tparsePluginAcquisitionRefV1,\n} from \"./plugin-acquisition.ts\";\nimport type { PluginManifestV1 } from \"./types.ts\";\nimport { pluginManifestDigestV1 } from \"./updates.ts\";\n\nexport type { PluginAcquisitionPackageV1 } from \"./plugin-acquisition.ts\";\n\nimport { downloadNodeUrlPackageV1, NodeUrlPackageSourceErrorV1 } from \"./node-url-package-source.ts\";\n\n/**\n * Node acquisition orchestration for `plugin install <ref>` (design §4.6).\n * One boundary acquires package bytes for every source (npm packument+tarball,\n * GitHub/Gitee release asset, custom URL, local file, local directory),\n * verifies the source-specific integrity layer (npm SRI > ref digest fragment\n * > sha256 on exchange), discovers the `agent-forge.json` identity through the\n * shared bounded unpackers, and exposes the result as an opaque distribution\n * artifact the existing installer/install-host chain consumes unchanged.\n */\n\nconst NODE_PLUGIN_ACQUISITION_HOST_VERSION_V1 = 1 as const;\nconst MAX_PACKAGE_MANIFEST_BYTES_V1 = 64 * 1024;\nconst ECOSYSTEM_MANIFEST_FILE_V1 = \"agent-forge.json\";\n/** Fixed far-future expiry; the artifact handle is single-transaction and never persisted. */\nconst ACQUISITION_ARTIFACT_EXPIRES_AT_V1 = \"2099-01-01T00:00:00.000Z\";\nconst ARTIFACT_CHUNK_BYTES_V1 = 64 * 1024;\n\n/** Environment variable overriding the npm registry origin (bare http(s) origin). */\nexport const AGENT_FORGE_NPM_REGISTRY_ENV_V1 = \"AGENT_FORGE_NPM_REGISTRY\";\n/** Environment variable carrying the npm registry bearer token. */\nexport const AGENT_FORGE_NPM_TOKEN_ENV_V1 = \"AGENT_FORGE_NPM_TOKEN\";\n/** Environment variable overriding the GitHub release API origin (bare http(s) origin). */\nexport const AGENT_FORGE_GITHUB_API_ENV_V1 = \"AGENT_FORGE_GITHUB_API\";\n/** Environment variable overriding the Gitee release API origin (bare http(s) origin, includes the /api/v5 path). */\nexport const AGENT_FORGE_GITEE_API_ENV_V1 = \"AGENT_FORGE_GITEE_API\";\n/** Environment variable carrying the optional GitHub API token. */\nexport const GITHUB_TOKEN_ENV_V1 = \"GITHUB_TOKEN\";\n/** Environment variable carrying the optional Gitee API token. */\nexport const GITEE_TOKEN_ENV_V1 = \"GITEE_TOKEN\";\n\nexport interface NodePluginAcquisitionHostV1 {\n\treadonly version: typeof NODE_PLUGIN_ACQUISITION_HOST_VERSION_V1;\n\t/** Parse and acquire one ref into a package + artifact pair. */\n\treadonly resolvePackage: (input: {\n\t\treadonly ref: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginAcquisitionPackageV1>;\n\t/** Private installer-facing reader; mirrors the HTTP distribution host boundary. */\n\treadonly openArtifact: (input: {\n\t\treadonly artifact: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => AsyncIterable<Uint8Array>;\n\treadonly releaseArtifact: (input: { readonly artifact: { readonly artifactRef: string } }) => Promise<void>;\n\t/** Whether this host owns the artifact reference (used to compose artifact readers). */\n\treadonly ownsArtifact: (input: { readonly artifactRef: string }) => boolean;\n\treadonly close: () => Promise<void>;\n}\n\nexport interface NodePluginAcquisitionHostOptionsV1 {\n\t/** Real fetch or a deterministic test replacement. */\n\treadonly fetch?: typeof globalThis.fetch;\n\t/** Bare http(s) npm registry origin; defaults to the environment variable, then the npm public registry. */\n\treadonly npmRegistry?: string;\n\t/** npm registry bearer token; defaults to the environment variable. */\n\treadonly npmToken?: string;\n\t/** Bare http(s) GitHub release API origin; defaults to the environment variable, then api.github.com. */\n\treadonly githubApiOrigin?: string;\n\t/** Bare http(s) Gitee release API origin; defaults to the environment variable, then gitee.com/api/v5. */\n\treadonly giteeApiOrigin?: string;\n\t/** GitHub API token sent as a bearer header; defaults to the environment variable. */\n\treadonly githubToken?: string;\n\t/** Gitee API token sent as an access_token query parameter; defaults to the environment variable. */\n\treadonly giteeToken?: string;\n\treadonly requestTimeoutMs?: number;\n\treadonly maxResponseBytes?: number;\n\treadonly maxTarballBytes?: number;\n\treadonly limits?: NodeZipPackageLimitsV1;\n\treadonly userAgent?: string;\n}\n\ninterface AcquiredBytesV1 {\n\treadonly bytes: Uint8Array;\n\treadonly mediaType: \"application/zip\" | \"application/gzip\";\n\treadonly digest: { readonly algorithm: \"sha256\" | \"sha512\"; readonly hex: string };\n\treadonly source: string;\n}\n\ninterface AcquiredArtifactRecordV1 {\n\treadonly bytes: Uint8Array;\n\treadonly artifact: PluginDistributionArtifactV1;\n}\n\nconst LOCAL_PROBE_V1: PluginAcquisitionLocalProbeV1 = {\n\t// The parser contract is synchronous; one lstat per candidate ref keeps\n\t// this bounded. Symlinks classify as \"other\" so they never install as local.\n\tstatLocalRef: (path) => {\n\t\tconst stats = lstatSync(path, { throwIfNoEntry: false });\n\t\tif (stats === undefined) return \"missing\";\n\t\tif (stats.isSymbolicLink()) return \"other\";\n\t\tif (stats.isDirectory()) return \"directory\";\n\t\tif (stats.isFile()) return \"file\";\n\t\treturn \"other\";\n\t},\n};\n\nfunction mapInstallError(error: unknown): PluginAcquisitionErrorV1 {\n\tif (error instanceof PluginAcquisitionErrorV1) return error;\n\tif (error instanceof NodePackageInstallErrorV1) {\n\t\tif (error.code === \"cancelled\") return new PluginAcquisitionErrorV1(\"cancelled\");\n\t\tif (error.code === \"archive_budget_exceeded\") return new PluginAcquisitionErrorV1(\"budget_exceeded\");\n\t\tif (error.code === \"unsupported_media_type\") return new PluginAcquisitionErrorV1(\"unsupported_media_type\");\n\t\treturn new PluginAcquisitionErrorV1(\"package_invalid\");\n\t}\n\treturn new PluginAcquisitionErrorV1(\"download_failed\");\n}\n\nfunction mapNpmError(error: unknown): PluginAcquisitionErrorV1 {\n\tif (error instanceof PluginAcquisitionErrorV1) return error;\n\tif (error instanceof NodeNpmRegistrySourceErrorV1) {\n\t\tif (error.code === \"package_not_found\") return new PluginAcquisitionErrorV1(\"package_not_found\");\n\t\tif (error.code === \"version_not_found\") return new PluginAcquisitionErrorV1(\"version_not_found\");\n\t\tif (error.code === \"cancelled\") return new PluginAcquisitionErrorV1(\"cancelled\");\n\t\tif (error.code === \"invalid_response\" || error.code === \"integrity_unsupported\")\n\t\t\treturn new PluginAcquisitionErrorV1(\"package_invalid\");\n\t\treturn new PluginAcquisitionErrorV1(\"download_failed\");\n\t}\n\treturn mapInstallError(error);\n}\n\nfunction mapUrlError(error: unknown): PluginAcquisitionErrorV1 {\n\tif (error instanceof PluginAcquisitionErrorV1) return error;\n\tif (error instanceof NodeUrlPackageSourceErrorV1) {\n\t\tif (error.code === \"digest_mismatch\") return new PluginAcquisitionErrorV1(\"digest_mismatch\");\n\t\tif (error.code === \"cancelled\") return new PluginAcquisitionErrorV1(\"cancelled\");\n\t\tif (error.code === \"invalid_url\" || error.code === \"invalid_configuration\")\n\t\t\treturn new PluginAcquisitionErrorV1(\"invalid_ref\");\n\t\tif (error.code === \"response_too_large\") return new PluginAcquisitionErrorV1(\"budget_exceeded\");\n\t\treturn new PluginAcquisitionErrorV1(\"download_failed\");\n\t}\n\treturn mapInstallError(error);\n}\n\nfunction mapReleaseError(error: unknown): PluginAcquisitionErrorV1 {\n\tif (error instanceof PluginAcquisitionErrorV1) return error;\n\tif (error instanceof NodeReleasePackageSourceErrorV1) {\n\t\tif (error.code === \"cancelled\") return new PluginAcquisitionErrorV1(\"cancelled\");\n\t\tif (error.code === \"invalid_configuration\") return new PluginAcquisitionErrorV1(\"invalid_ref\");\n\t\tif (error.code === \"response_too_large\") return new PluginAcquisitionErrorV1(\"budget_exceeded\");\n\t\tif (error.code === \"invalid_response\") return new PluginAcquisitionErrorV1(\"package_invalid\");\n\t\tif (error.code === \"rate_limited\")\n\t\t\treturn new PluginAcquisitionErrorV1(\n\t\t\t\t\"rate_limited\",\n\t\t\t\terror.resetEpochSeconds === undefined\n\t\t\t\t\t? undefined\n\t\t\t\t\t: `rate limit resets at ${new Date(error.resetEpochSeconds * 1000).toISOString()}`,\n\t\t\t);\n\t\tif (\n\t\t\terror.code === \"release_not_found\" ||\n\t\t\terror.code === \"release_asset_not_found\" ||\n\t\t\terror.code === \"release_asset_ambiguous\"\n\t\t)\n\t\t\treturn new PluginAcquisitionErrorV1(error.code, error.message);\n\t\treturn new PluginAcquisitionErrorV1(\"download_failed\");\n\t}\n\t// Asset downloads ride the URL package source; digest and budget errors pass through unchanged.\n\treturn mapUrlError(error);\n}\n\nfunction shaHex(algorithm: \"sha256\" | \"sha512\", bytes: Uint8Array): string {\n\treturn createHash(algorithm).update(bytes).digest(\"hex\");\n}\n\n/** Abort probe as a function so later re-checks are not flow-narrowed away after awaits. */\nfunction signalAborted(signal: AbortSignal | undefined): boolean {\n\treturn signal?.aborted === true;\n}\n\n/** Discover the `agent-forge.json` identity in already-bounded package entries. */\nexport function pluginAcquisitionManifestFromEntriesV1(entries: readonly NodeZipPackageEntryV1[]): {\n\treadonly manifest: PluginManifestV1;\n\treadonly manifestDigest: string;\n} {\n\tconst manifestEntry = entries.find((entry) => entry.name === ECOSYSTEM_MANIFEST_FILE_V1 && !entry.directory);\n\tif (manifestEntry === undefined || manifestEntry.bytes.byteLength > MAX_PACKAGE_MANIFEST_BYTES_V1)\n\t\tthrow new PluginAcquisitionErrorV1(\"package_invalid\");\n\tlet value: unknown;\n\ttry {\n\t\tvalue = JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(manifestEntry.bytes));\n\t} catch {\n\t\tthrow new PluginAcquisitionErrorV1(\"package_invalid\");\n\t}\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value))\n\t\tthrow new PluginAcquisitionErrorV1(\"package_invalid\");\n\tconst record = value as Record<string, unknown>;\n\tconst manifestKeys = new Set([\n\t\t\"id\",\n\t\t\"pluginVersion\",\n\t\t\"apiVersion\",\n\t\t\"minHostVersion\",\n\t\t\"maxHostVersion\",\n\t\t\"capabilityRefs\",\n\t\t\"requires\",\n\t\t\"platform\",\n\t\t\"testOnly\",\n\t]);\n\tif (\n\t\trecord.packageFormatVersion !== 1 ||\n\t\tObject.keys(record).some((key) => key !== \"packageFormatVersion\" && !manifestKeys.has(key))\n\t)\n\t\tthrow new PluginAcquisitionErrorV1(\"package_invalid\");\n\tconst id = record.id;\n\tconst pluginVersion = record.pluginVersion;\n\tconst apiVersion = record.apiVersion;\n\tif (\n\t\ttypeof id !== \"string\" ||\n\t\tid.trim().length === 0 ||\n\t\tid.length > 256 ||\n\t\ttypeof pluginVersion !== \"string\" ||\n\t\tpluginVersion.trim().length === 0 ||\n\t\tpluginVersion.length > 256 ||\n\t\ttypeof apiVersion !== \"string\" ||\n\t\tapiVersion.trim().length === 0 ||\n\t\tapiVersion.length > 256\n\t)\n\t\tthrow new PluginAcquisitionErrorV1(\"package_invalid\");\n\tif (record.minHostVersion === undefined && record.maxHostVersion === undefined)\n\t\tthrow new PluginAcquisitionErrorV1(\"package_invalid\");\n\tconst manifest: PluginManifestV1 = Object.freeze({\n\t\tid,\n\t\tpluginVersion,\n\t\tapiVersion,\n\t\t...(record.minHostVersion === undefined ? {} : { minHostVersion: record.minHostVersion as string }),\n\t\t...(record.maxHostVersion === undefined ? {} : { maxHostVersion: record.maxHostVersion as string }),\n\t\t...(record.capabilityRefs === undefined\n\t\t\t? {}\n\t\t\t: { capabilityRefs: record.capabilityRefs as PluginManifestV1[\"capabilityRefs\"] }),\n\t\t...(record.requires === undefined ? {} : { requires: record.requires as PluginManifestV1[\"requires\"] }),\n\t\t...(record.platform === undefined ? {} : { platform: record.platform as PluginManifestV1[\"platform\"] }),\n\t\t...(record.testOnly === undefined ? {} : { testOnly: record.testOnly as boolean }),\n\t});\n\treturn { manifest, manifestDigest: pluginManifestDigestV1(manifest) };\n}\n\n/**\n * Create the Node acquisition host. All sources share the bounded unpackers,\n * the manifest identity discovery, and the artifact reader contract used by\n * the existing install host. Nothing is downloaded until `resolvePackage`.\n */\nexport function createNodePluginAcquisitionHostV1(\n\toptions: NodePluginAcquisitionHostOptionsV1 = {},\n): NodePluginAcquisitionHostV1 {\n\tconst limits = options.limits ?? {};\n\tconst npmRegistryOption = options.npmRegistry ?? process.env[AGENT_FORGE_NPM_REGISTRY_ENV_V1]?.trim();\n\tconst npmTokenOption = options.npmToken ?? process.env[AGENT_FORGE_NPM_TOKEN_ENV_V1]?.trim();\n\tconst githubApiOriginOption = options.githubApiOrigin ?? process.env[AGENT_FORGE_GITHUB_API_ENV_V1]?.trim();\n\tconst giteeApiOriginOption = options.giteeApiOrigin ?? process.env[AGENT_FORGE_GITEE_API_ENV_V1]?.trim();\n\tconst githubTokenOption = options.githubToken ?? process.env[GITHUB_TOKEN_ENV_V1]?.trim();\n\tconst giteeTokenOption = options.giteeToken ?? process.env[GITEE_TOKEN_ENV_V1]?.trim();\n\tconst npmSource: NodeNpmRegistrySourceV1 = createNodeNpmRegistrySourceV1({\n\t\t...(npmRegistryOption === undefined || npmRegistryOption === \"\" ? {} : { registry: npmRegistryOption }),\n\t\t...(npmTokenOption === undefined || npmTokenOption === \"\" ? {} : { token: npmTokenOption }),\n\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t...(options.requestTimeoutMs === undefined ? {} : { requestTimeoutMs: options.requestTimeoutMs }),\n\t\t...(options.maxResponseBytes === undefined ? {} : { maxResponseBytes: options.maxResponseBytes }),\n\t\t...(options.maxTarballBytes === undefined ? {} : { maxTarballBytes: options.maxTarballBytes }),\n\t\t...(options.userAgent === undefined ? {} : { userAgent: options.userAgent }),\n\t});\n\tconst releaseSource: NodeReleasePackageSourceV1 = createNodeReleasePackageSourceV1({\n\t\t...(githubApiOriginOption === undefined || githubApiOriginOption === \"\"\n\t\t\t? {}\n\t\t\t: { githubApiOrigin: githubApiOriginOption }),\n\t\t...(giteeApiOriginOption === undefined || giteeApiOriginOption === \"\"\n\t\t\t? {}\n\t\t\t: { giteeApiOrigin: giteeApiOriginOption }),\n\t\t...(githubTokenOption === undefined || githubTokenOption === \"\" ? {} : { githubToken: githubTokenOption }),\n\t\t...(giteeTokenOption === undefined || giteeTokenOption === \"\" ? {} : { giteeToken: giteeTokenOption }),\n\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t...(options.requestTimeoutMs === undefined ? {} : { requestTimeoutMs: options.requestTimeoutMs }),\n\t\t...(options.maxResponseBytes === undefined ? {} : { maxResponseBytes: options.maxResponseBytes }),\n\t\t...(options.maxTarballBytes === undefined ? {} : { maxAssetBytes: options.maxTarballBytes }),\n\t\t...(options.userAgent === undefined ? {} : { userAgent: options.userAgent }),\n\t});\n\tconst artifacts = new Map<string, AcquiredArtifactRecordV1>();\n\tlet closed = false;\n\n\tconst acquireBytes = async (\n\t\tref: PluginAcquisitionRefV1,\n\t\tsignal: AbortSignal | undefined,\n\t): Promise<AcquiredBytesV1> => {\n\t\tif (ref.kind === \"github\" || ref.kind === \"gitee\") {\n\t\t\ttry {\n\t\t\t\tconst download = await releaseSource.downloadReleaseAsset({\n\t\t\t\t\tkind: ref.kind,\n\t\t\t\t\towner: ref.owner,\n\t\t\t\t\trepo: ref.repo,\n\t\t\t\t\t...(ref.tag === undefined ? {} : { tag: ref.tag }),\n\t\t\t\t\t...(ref.expectedDigestHex === undefined ? {} : { expectedDigestHex: ref.expectedDigestHex }),\n\t\t\t\t\tsignal,\n\t\t\t\t});\n\t\t\t\treturn {\n\t\t\t\t\tbytes: download.bytes,\n\t\t\t\t\tmediaType: download.mediaType,\n\t\t\t\t\tdigest: { algorithm: \"sha256\", hex: download.sha256Hex },\n\t\t\t\t\tsource: download.sourceLabel,\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tthrow mapReleaseError(error);\n\t\t\t}\n\t\t}\n\t\tif (ref.kind === \"npm\") {\n\t\t\ttry {\n\t\t\t\tconst resolved = await npmSource.resolveNpmPackage({\n\t\t\t\t\tname: ref.name,\n\t\t\t\t\t...(ref.range === undefined ? {} : { range: ref.range }),\n\t\t\t\t\tsignal,\n\t\t\t\t});\n\t\t\t\tconst bytes = await npmSource.fetchTarball({ url: resolved.tarballUrl, signal });\n\t\t\t\tconst hex = shaHex(resolved.integrity.algorithm, bytes);\n\t\t\t\tif (hex !== resolved.integrity.hex) throw new PluginAcquisitionErrorV1(\"digest_mismatch\");\n\t\t\t\treturn {\n\t\t\t\t\tbytes,\n\t\t\t\t\tmediaType: \"application/gzip\",\n\t\t\t\t\tdigest: resolved.integrity,\n\t\t\t\t\tsource: `npm:${new URL(resolved.tarballUrl).host}`,\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tthrow mapNpmError(error);\n\t\t\t}\n\t\t}\n\t\tif (ref.kind === \"url\") {\n\t\t\ttry {\n\t\t\t\tconst download = await downloadNodeUrlPackageV1(\n\t\t\t\t\t{\n\t\t\t\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t\t\t\t\t...(options.requestTimeoutMs === undefined ? {} : { requestTimeoutMs: options.requestTimeoutMs }),\n\t\t\t\t\t\t...(options.maxTarballBytes === undefined ? {} : { maxPackageBytes: options.maxTarballBytes }),\n\t\t\t\t\t\t...(options.userAgent === undefined ? {} : { userAgent: options.userAgent }),\n\t\t\t\t\t},\n\t\t\t\t\t{\n\t\t\t\t\t\turl: ref.url,\n\t\t\t\t\t\t...(ref.expectedDigestHex === undefined ? {} : { expectedDigestHex: ref.expectedDigestHex }),\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t},\n\t\t\t\t);\n\t\t\t\treturn {\n\t\t\t\t\tbytes: download.bytes,\n\t\t\t\t\tmediaType: download.mediaType,\n\t\t\t\t\tdigest: { algorithm: \"sha256\", hex: download.digestHex },\n\t\t\t\t\tsource: `url:${new URL(ref.url).host}`,\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tthrow mapUrlError(error);\n\t\t\t}\n\t\t}\n\t\tif (ref.kind === \"local-file\") {\n\t\t\ttry {\n\t\t\t\tconst bytes = await readLocalPackageFileV1(ref.path, limits, signal);\n\t\t\t\tconst fileName = ref.path.split(/[\\\\/]/u).pop();\n\t\t\t\tconst mediaType = detectPluginPackageMediaTypeV1(\n\t\t\t\t\tbytes,\n\t\t\t\t\tfileName === undefined || fileName.length === 0 ? undefined : fileName,\n\t\t\t\t);\n\t\t\t\treturn {\n\t\t\t\t\tbytes,\n\t\t\t\t\tmediaType,\n\t\t\t\t\tdigest: { algorithm: \"sha256\", hex: shaHex(\"sha256\", bytes) },\n\t\t\t\t\tsource: \"local:file\",\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tthrow mapInstallError(error);\n\t\t\t}\n\t\t}\n\t\tif (ref.kind === \"local-path\") {\n\t\t\ttry {\n\t\t\t\tconst entries = await collectLocalDirectoryPackageEntriesV1(ref.path, limits, signal);\n\t\t\t\tconst bytes = buildNodeTarGzBytesV1(\n\t\t\t\t\tentries.map((entry) => ({ name: entry.name, directory: entry.directory, bytes: entry.bytes })),\n\t\t\t\t);\n\t\t\t\treturn {\n\t\t\t\t\tbytes,\n\t\t\t\t\tmediaType: \"application/gzip\",\n\t\t\t\t\tdigest: { algorithm: \"sha256\", hex: shaHex(\"sha256\", bytes) },\n\t\t\t\t\tsource: \"local:dir\",\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tthrow mapInstallError(error);\n\t\t\t}\n\t\t}\n\t\tthrow new PluginAcquisitionErrorV1(\"invalid_ref\");\n\t};\n\n\tconst releaseArtifact = async (input: { readonly artifact: { readonly artifactRef: string } }): Promise<void> => {\n\t\tif (!artifacts.delete(input.artifact.artifactRef)) throw new NodePackageInstallErrorV1(\"invalid_artifact\");\n\t};\n\n\tconst resolvePackage = async (input: {\n\t\treadonly ref: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginAcquisitionPackageV1> => {\n\t\tif (closed || signalAborted(input.signal)) throw new PluginAcquisitionErrorV1(\"cancelled\");\n\t\tlet ref: PluginAcquisitionRefV1;\n\t\ttry {\n\t\t\tref = parsePluginAcquisitionRefV1(input.ref, LOCAL_PROBE_V1);\n\t\t} catch (error) {\n\t\t\tif (error instanceof PluginAcquisitionErrorV1) throw error;\n\t\t\tthrow new PluginAcquisitionErrorV1(\"invalid_ref\");\n\t\t}\n\t\tconst acquired = await acquireBytes(ref, input.signal);\n\t\tif (signalAborted(input.signal)) throw new PluginAcquisitionErrorV1(\"cancelled\");\n\t\tlet entries: readonly NodeZipPackageEntryV1[];\n\t\ttry {\n\t\t\tentries =\n\t\t\t\tacquired.mediaType === \"application/gzip\"\n\t\t\t\t\t? await parseNodeTarGzPackageV1(acquired.bytes, limits)\n\t\t\t\t\t: parseNodeZipPackageV1(acquired.bytes, limits);\n\t\t} catch (error) {\n\t\t\tthrow mapInstallError(error);\n\t\t}\n\t\tconst identity = pluginAcquisitionManifestFromEntriesV1(entries);\n\t\tif (closed) throw new PluginAcquisitionErrorV1(\"cancelled\");\n\t\tconst artifactRef = `plugin-acquisition://node/${randomUUID()}`;\n\t\tconst artifact: PluginDistributionArtifactV1 = Object.freeze({\n\t\t\tversion: 1,\n\t\t\tsource: acquired.source,\n\t\t\tpluginId: identity.manifest.id,\n\t\t\tpluginVersion: identity.manifest.pluginVersion,\n\t\t\tmanifestDigest: identity.manifestDigest,\n\t\t\tartifactDigest:\n\t\t\t\tacquired.digest.algorithm === \"sha512\" ? `sha512:${acquired.digest.hex}` : `sha256:${acquired.digest.hex}`,\n\t\t\texpiresAt: ACQUISITION_ARTIFACT_EXPIRES_AT_V1,\n\t\t\tsizeBytes: acquired.bytes.byteLength,\n\t\t\tmediaType: acquired.mediaType,\n\t\t\tartifactRef,\n\t\t});\n\t\tartifacts.set(artifactRef, { bytes: acquired.bytes, artifact });\n\t\treturn Object.freeze({\n\t\t\tmanifest: identity.manifest,\n\t\t\tmanifestDigest: identity.manifestDigest,\n\t\t\tsource: acquired.source,\n\t\t\tartifact,\n\t\t\trelease: async () => {\n\t\t\t\ttry {\n\t\t\t\t\tawait releaseArtifact({ artifact: { artifactRef } });\n\t\t\t\t\treturn true;\n\t\t\t\t} catch {\n\t\t\t\t\treturn false;\n\t\t\t\t}\n\t\t\t},\n\t\t});\n\t};\n\n\treturn {\n\t\tversion: NODE_PLUGIN_ACQUISITION_HOST_VERSION_V1,\n\t\tresolvePackage,\n\t\topenArtifact(input) {\n\t\t\treturn (async function* (): AsyncGenerator<Uint8Array> {\n\t\t\t\tconst record = artifacts.get(input.artifact.artifactRef);\n\t\t\t\tif (record === undefined) throw new NodePackageInstallErrorV1(\"invalid_artifact\");\n\t\t\t\tif (\n\t\t\t\t\trecord.artifact.pluginId !== input.artifact.pluginId ||\n\t\t\t\t\trecord.artifact.pluginVersion !== input.artifact.pluginVersion ||\n\t\t\t\t\trecord.artifact.manifestDigest !== input.artifact.manifestDigest ||\n\t\t\t\t\trecord.artifact.artifactDigest !== input.artifact.artifactDigest ||\n\t\t\t\t\trecord.artifact.sizeBytes !== input.artifact.sizeBytes\n\t\t\t\t)\n\t\t\t\t\tthrow new NodePackageInstallErrorV1(\"invalid_artifact\");\n\t\t\t\tfor (let offset = 0; offset < record.bytes.byteLength; offset += ARTIFACT_CHUNK_BYTES_V1) {\n\t\t\t\t\tif (input.signal?.aborted === true) throw new NodePackageInstallErrorV1(\"cancelled\");\n\t\t\t\t\tyield new Uint8Array(\n\t\t\t\t\t\trecord.bytes.subarray(offset, Math.min(offset + ARTIFACT_CHUNK_BYTES_V1, record.bytes.byteLength)),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t})();\n\t\t},\n\t\treleaseArtifact,\n\t\townsArtifact: (input) => artifacts.has(input.artifactRef),\n\t\tasync close() {\n\t\t\tclosed = true;\n\t\t\tartifacts.clear();\n\t\t},\n\t};\n}\n"]}