@ai-agent-forge/agent-forge 0.85.0

package/dist/plugins/ecosystem/node-plugin-acquisition-host.js

@@ -0,0 +1,423 @@
+import { createHash, randomUUID } from "node:crypto";
+import { lstatSync } from "node:fs";
+import { collectLocalDirectoryPackageEntriesV1, readLocalPackageFileV1 } from "./node-local-package-source.js";
+import { createNodeNpmRegistrySourceV1, NodeNpmRegistrySourceErrorV1, } from "./node-npm-registry-source.js";
+import { NodePackageInstallErrorV1, parseNodeZipPackageV1, } from "./node-package-install-host.js";
+import { detectPluginPackageMediaTypeV1 } from "./node-package-media.js";
+import { createNodeReleasePackageSourceV1, NodeReleasePackageSourceErrorV1, } from "./node-release-package-source.js";
+import { parseNodeTarGzPackageV1 } from "./node-tar-package.js";
+import { buildNodeTarGzBytesV1 } from "./node-tar-writer.js";
+import { PluginAcquisitionErrorV1, parsePluginAcquisitionRefV1, } from "./plugin-acquisition.js";
+import { pluginManifestDigestV1 } from "./updates.js";
+import { downloadNodeUrlPackageV1, NodeUrlPackageSourceErrorV1 } from "./node-url-package-source.js";
+/**
+ * Node acquisition orchestration for `plugin install <ref>` (design §4.6).
+ * One boundary acquires package bytes for every source (npm packument+tarball,
+ * GitHub/Gitee release asset, custom URL, local file, local directory),
+ * verifies the source-specific integrity layer (npm SRI > ref digest fragment
+ * > sha256 on exchange), discovers the `agent-forge.json` identity through the
+ * shared bounded unpackers, and exposes the result as an opaque distribution
+ * artifact the existing installer/install-host chain consumes unchanged.
+ */
+const NODE_PLUGIN_ACQUISITION_HOST_VERSION_V1 = 1;
+const MAX_PACKAGE_MANIFEST_BYTES_V1 = 64 * 1024;
+const ECOSYSTEM_MANIFEST_FILE_V1 = "agent-forge.json";
+/** Fixed far-future expiry; the artifact handle is single-transaction and never persisted. */
+const ACQUISITION_ARTIFACT_EXPIRES_AT_V1 = "2099-01-01T00:00:00.000Z";
+const ARTIFACT_CHUNK_BYTES_V1 = 64 * 1024;
+/** Environment variable overriding the npm registry origin (bare http(s) origin). */
+export const AGENT_FORGE_NPM_REGISTRY_ENV_V1 = "AGENT_FORGE_NPM_REGISTRY";
+/** Environment variable carrying the npm registry bearer token. */
+export const AGENT_FORGE_NPM_TOKEN_ENV_V1 = "AGENT_FORGE_NPM_TOKEN";
+/** Environment variable overriding the GitHub release API origin (bare http(s) origin). */
+export const AGENT_FORGE_GITHUB_API_ENV_V1 = "AGENT_FORGE_GITHUB_API";
+/** Environment variable overriding the Gitee release API origin (bare http(s) origin, includes the /api/v5 path). */
+export const AGENT_FORGE_GITEE_API_ENV_V1 = "AGENT_FORGE_GITEE_API";
+/** Environment variable carrying the optional GitHub API token. */
+export const GITHUB_TOKEN_ENV_V1 = "GITHUB_TOKEN";
+/** Environment variable carrying the optional Gitee API token. */
+export const GITEE_TOKEN_ENV_V1 = "GITEE_TOKEN";
+const LOCAL_PROBE_V1 = {
+    // The parser contract is synchronous; one lstat per candidate ref keeps
+    // this bounded. Symlinks classify as "other" so they never install as local.
+    statLocalRef: (path) => {
+        const stats = lstatSync(path, { throwIfNoEntry: false });
+        if (stats === undefined)
+            return "missing";
+        if (stats.isSymbolicLink())
+            return "other";
+        if (stats.isDirectory())
+            return "directory";
+        if (stats.isFile())
+            return "file";
+        return "other";
+    },
+};
+function mapInstallError(error) {
+    if (error instanceof PluginAcquisitionErrorV1)
+        return error;
+    if (error instanceof NodePackageInstallErrorV1) {
+        if (error.code === "cancelled")
+            return new PluginAcquisitionErrorV1("cancelled");
+        if (error.code === "archive_budget_exceeded")
+            return new PluginAcquisitionErrorV1("budget_exceeded");
+        if (error.code === "unsupported_media_type")
+            return new PluginAcquisitionErrorV1("unsupported_media_type");
+        return new PluginAcquisitionErrorV1("package_invalid");
+    }
+    return new PluginAcquisitionErrorV1("download_failed");
+}
+function mapNpmError(error) {
+    if (error instanceof PluginAcquisitionErrorV1)
+        return error;
+    if (error instanceof NodeNpmRegistrySourceErrorV1) {
+        if (error.code === "package_not_found")
+            return new PluginAcquisitionErrorV1("package_not_found");
+        if (error.code === "version_not_found")
+            return new PluginAcquisitionErrorV1("version_not_found");
+        if (error.code === "cancelled")
+            return new PluginAcquisitionErrorV1("cancelled");
+        if (error.code === "invalid_response" || error.code === "integrity_unsupported")
+            return new PluginAcquisitionErrorV1("package_invalid");
+        return new PluginAcquisitionErrorV1("download_failed");
+    }
+    return mapInstallError(error);
+}
+function mapUrlError(error) {
+    if (error instanceof PluginAcquisitionErrorV1)
+        return error;
+    if (error instanceof NodeUrlPackageSourceErrorV1) {
+        if (error.code === "digest_mismatch")
+            return new PluginAcquisitionErrorV1("digest_mismatch");
+        if (error.code === "cancelled")
+            return new PluginAcquisitionErrorV1("cancelled");
+        if (error.code === "invalid_url" || error.code === "invalid_configuration")
+            return new PluginAcquisitionErrorV1("invalid_ref");
+        if (error.code === "response_too_large")
+            return new PluginAcquisitionErrorV1("budget_exceeded");
+        return new PluginAcquisitionErrorV1("download_failed");
+    }
+    return mapInstallError(error);
+}
+function mapReleaseError(error) {
+    if (error instanceof PluginAcquisitionErrorV1)
+        return error;
+    if (error instanceof NodeReleasePackageSourceErrorV1) {
+        if (error.code === "cancelled")
+            return new PluginAcquisitionErrorV1("cancelled");
+        if (error.code === "invalid_configuration")
+            return new PluginAcquisitionErrorV1("invalid_ref");
+        if (error.code === "response_too_large")
+            return new PluginAcquisitionErrorV1("budget_exceeded");
+        if (error.code === "invalid_response")
+            return new PluginAcquisitionErrorV1("package_invalid");
+        if (error.code === "rate_limited")
+            return new PluginAcquisitionErrorV1("rate_limited", error.resetEpochSeconds === undefined
+                ? undefined
+                : `rate limit resets at ${new Date(error.resetEpochSeconds * 1000).toISOString()}`);
+        if (error.code === "release_not_found" ||
+            error.code === "release_asset_not_found" ||
+            error.code === "release_asset_ambiguous")
+            return new PluginAcquisitionErrorV1(error.code, error.message);
+        return new PluginAcquisitionErrorV1("download_failed");
+    }
+    // Asset downloads ride the URL package source; digest and budget errors pass through unchanged.
+    return mapUrlError(error);
+}
+function shaHex(algorithm, bytes) {
+    return createHash(algorithm).update(bytes).digest("hex");
+}
+/** Abort probe as a function so later re-checks are not flow-narrowed away after awaits. */
+function signalAborted(signal) {
+    return signal?.aborted === true;
+}
+/** Discover the `agent-forge.json` identity in already-bounded package entries. */
+export function pluginAcquisitionManifestFromEntriesV1(entries) {
+    const manifestEntry = entries.find((entry) => entry.name === ECOSYSTEM_MANIFEST_FILE_V1 && !entry.directory);
+    if (manifestEntry === undefined || manifestEntry.bytes.byteLength > MAX_PACKAGE_MANIFEST_BYTES_V1)
+        throw new PluginAcquisitionErrorV1("package_invalid");
+    let value;
+    try {
+        value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(manifestEntry.bytes));
+    }
+    catch {
+        throw new PluginAcquisitionErrorV1("package_invalid");
+    }
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        throw new PluginAcquisitionErrorV1("package_invalid");
+    const record = value;
+    const manifestKeys = new Set([
+        "id",
+        "pluginVersion",
+        "apiVersion",
+        "minHostVersion",
+        "maxHostVersion",
+        "capabilityRefs",
+        "requires",
+        "platform",
+        "testOnly",
+    ]);
+    if (record.packageFormatVersion !== 1 ||
+        Object.keys(record).some((key) => key !== "packageFormatVersion" && !manifestKeys.has(key)))
+        throw new PluginAcquisitionErrorV1("package_invalid");
+    const id = record.id;
+    const pluginVersion = record.pluginVersion;
+    const apiVersion = record.apiVersion;
+    if (typeof id !== "string" ||
+        id.trim().length === 0 ||
+        id.length > 256 ||
+        typeof pluginVersion !== "string" ||
+        pluginVersion.trim().length === 0 ||
+        pluginVersion.length > 256 ||
+        typeof apiVersion !== "string" ||
+        apiVersion.trim().length === 0 ||
+        apiVersion.length > 256)
+        throw new PluginAcquisitionErrorV1("package_invalid");
+    if (record.minHostVersion === undefined && record.maxHostVersion === undefined)
+        throw new PluginAcquisitionErrorV1("package_invalid");
+    const manifest = Object.freeze({
+        id,
+        pluginVersion,
+        apiVersion,
+        ...(record.minHostVersion === undefined ? {} : { minHostVersion: record.minHostVersion }),
+        ...(record.maxHostVersion === undefined ? {} : { maxHostVersion: record.maxHostVersion }),
+        ...(record.capabilityRefs === undefined
+            ? {}
+            : { capabilityRefs: record.capabilityRefs }),
+        ...(record.requires === undefined ? {} : { requires: record.requires }),
+        ...(record.platform === undefined ? {} : { platform: record.platform }),
+        ...(record.testOnly === undefined ? {} : { testOnly: record.testOnly }),
+    });
+    return { manifest, manifestDigest: pluginManifestDigestV1(manifest) };
+}
+/**
+ * Create the Node acquisition host. All sources share the bounded unpackers,
+ * the manifest identity discovery, and the artifact reader contract used by
+ * the existing install host. Nothing is downloaded until `resolvePackage`.
+ */
+export function createNodePluginAcquisitionHostV1(options = {}) {
+    const limits = options.limits ?? {};
+    const npmRegistryOption = options.npmRegistry ?? process.env[AGENT_FORGE_NPM_REGISTRY_ENV_V1]?.trim();
+    const npmTokenOption = options.npmToken ?? process.env[AGENT_FORGE_NPM_TOKEN_ENV_V1]?.trim();
+    const githubApiOriginOption = options.githubApiOrigin ?? process.env[AGENT_FORGE_GITHUB_API_ENV_V1]?.trim();
+    const giteeApiOriginOption = options.giteeApiOrigin ?? process.env[AGENT_FORGE_GITEE_API_ENV_V1]?.trim();
+    const githubTokenOption = options.githubToken ?? process.env[GITHUB_TOKEN_ENV_V1]?.trim();
+    const giteeTokenOption = options.giteeToken ?? process.env[GITEE_TOKEN_ENV_V1]?.trim();
+    const npmSource = createNodeNpmRegistrySourceV1({
+        ...(npmRegistryOption === undefined || npmRegistryOption === "" ? {} : { registry: npmRegistryOption }),
+        ...(npmTokenOption === undefined || npmTokenOption === "" ? {} : { token: npmTokenOption }),
+        ...(options.fetch === undefined ? {} : { fetch: options.fetch }),
+        ...(options.requestTimeoutMs === undefined ? {} : { requestTimeoutMs: options.requestTimeoutMs }),
+        ...(options.maxResponseBytes === undefined ? {} : { maxResponseBytes: options.maxResponseBytes }),
+        ...(options.maxTarballBytes === undefined ? {} : { maxTarballBytes: options.maxTarballBytes }),
+        ...(options.userAgent === undefined ? {} : { userAgent: options.userAgent }),
+    });
+    const releaseSource = createNodeReleasePackageSourceV1({
+        ...(githubApiOriginOption === undefined || githubApiOriginOption === ""
+            ? {}
+            : { githubApiOrigin: githubApiOriginOption }),
+        ...(giteeApiOriginOption === undefined || giteeApiOriginOption === ""
+            ? {}
+            : { giteeApiOrigin: giteeApiOriginOption }),
+        ...(githubTokenOption === undefined || githubTokenOption === "" ? {} : { githubToken: githubTokenOption }),
+        ...(giteeTokenOption === undefined || giteeTokenOption === "" ? {} : { giteeToken: giteeTokenOption }),
+        ...(options.fetch === undefined ? {} : { fetch: options.fetch }),
+        ...(options.requestTimeoutMs === undefined ? {} : { requestTimeoutMs: options.requestTimeoutMs }),
+        ...(options.maxResponseBytes === undefined ? {} : { maxResponseBytes: options.maxResponseBytes }),
+        ...(options.maxTarballBytes === undefined ? {} : { maxAssetBytes: options.maxTarballBytes }),
+        ...(options.userAgent === undefined ? {} : { userAgent: options.userAgent }),
+    });
+    const artifacts = new Map();
+    let closed = false;
+    const acquireBytes = async (ref, signal) => {
+        if (ref.kind === "github" || ref.kind === "gitee") {
+            try {
+                const download = await releaseSource.downloadReleaseAsset({
+                    kind: ref.kind,
+                    owner: ref.owner,
+                    repo: ref.repo,
+                    ...(ref.tag === undefined ? {} : { tag: ref.tag }),
+                    ...(ref.expectedDigestHex === undefined ? {} : { expectedDigestHex: ref.expectedDigestHex }),
+                    signal,
+                });
+                return {
+                    bytes: download.bytes,
+                    mediaType: download.mediaType,
+                    digest: { algorithm: "sha256", hex: download.sha256Hex },
+                    source: download.sourceLabel,
+                };
+            }
+            catch (error) {
+                throw mapReleaseError(error);
+            }
+        }
+        if (ref.kind === "npm") {
+            try {
+                const resolved = await npmSource.resolveNpmPackage({
+                    name: ref.name,
+                    ...(ref.range === undefined ? {} : { range: ref.range }),
+                    signal,
+                });
+                const bytes = await npmSource.fetchTarball({ url: resolved.tarballUrl, signal });
+                const hex = shaHex(resolved.integrity.algorithm, bytes);
+                if (hex !== resolved.integrity.hex)
+                    throw new PluginAcquisitionErrorV1("digest_mismatch");
+                return {
+                    bytes,
+                    mediaType: "application/gzip",
+                    digest: resolved.integrity,
+                    source: `npm:${new URL(resolved.tarballUrl).host}`,
+                };
+            }
+            catch (error) {
+                throw mapNpmError(error);
+            }
+        }
+        if (ref.kind === "url") {
+            try {
+                const download = await downloadNodeUrlPackageV1({
+                    ...(options.fetch === undefined ? {} : { fetch: options.fetch }),
+                    ...(options.requestTimeoutMs === undefined ? {} : { requestTimeoutMs: options.requestTimeoutMs }),
+                    ...(options.maxTarballBytes === undefined ? {} : { maxPackageBytes: options.maxTarballBytes }),
+                    ...(options.userAgent === undefined ? {} : { userAgent: options.userAgent }),
+                }, {
+                    url: ref.url,
+                    ...(ref.expectedDigestHex === undefined ? {} : { expectedDigestHex: ref.expectedDigestHex }),
+                    signal,
+                });
+                return {
+                    bytes: download.bytes,
+                    mediaType: download.mediaType,
+                    digest: { algorithm: "sha256", hex: download.digestHex },
+                    source: `url:${new URL(ref.url).host}`,
+                };
+            }
+            catch (error) {
+                throw mapUrlError(error);
+            }
+        }
+        if (ref.kind === "local-file") {
+            try {
+                const bytes = await readLocalPackageFileV1(ref.path, limits, signal);
+                const fileName = ref.path.split(/[\\/]/u).pop();
+                const mediaType = detectPluginPackageMediaTypeV1(bytes, fileName === undefined || fileName.length === 0 ? undefined : fileName);
+                return {
+                    bytes,
+                    mediaType,
+                    digest: { algorithm: "sha256", hex: shaHex("sha256", bytes) },
+                    source: "local:file",
+                };
+            }
+            catch (error) {
+                throw mapInstallError(error);
+            }
+        }
+        if (ref.kind === "local-path") {
+            try {
+                const entries = await collectLocalDirectoryPackageEntriesV1(ref.path, limits, signal);
+                const bytes = buildNodeTarGzBytesV1(entries.map((entry) => ({ name: entry.name, directory: entry.directory, bytes: entry.bytes })));
+                return {
+                    bytes,
+                    mediaType: "application/gzip",
+                    digest: { algorithm: "sha256", hex: shaHex("sha256", bytes) },
+                    source: "local:dir",
+                };
+            }
+            catch (error) {
+                throw mapInstallError(error);
+            }
+        }
+        throw new PluginAcquisitionErrorV1("invalid_ref");
+    };
+    const releaseArtifact = async (input) => {
+        if (!artifacts.delete(input.artifact.artifactRef))
+            throw new NodePackageInstallErrorV1("invalid_artifact");
+    };
+    const resolvePackage = async (input) => {
+        if (closed || signalAborted(input.signal))
+            throw new PluginAcquisitionErrorV1("cancelled");
+        let ref;
+        try {
+            ref = parsePluginAcquisitionRefV1(input.ref, LOCAL_PROBE_V1);
+        }
+        catch (error) {
+            if (error instanceof PluginAcquisitionErrorV1)
+                throw error;
+            throw new PluginAcquisitionErrorV1("invalid_ref");
+        }
+        const acquired = await acquireBytes(ref, input.signal);
+        if (signalAborted(input.signal))
+            throw new PluginAcquisitionErrorV1("cancelled");
+        let entries;
+        try {
+            entries =
+                acquired.mediaType === "application/gzip"
+                    ? await parseNodeTarGzPackageV1(acquired.bytes, limits)
+                    : parseNodeZipPackageV1(acquired.bytes, limits);
+        }
+        catch (error) {
+            throw mapInstallError(error);
+        }
+        const identity = pluginAcquisitionManifestFromEntriesV1(entries);
+        if (closed)
+            throw new PluginAcquisitionErrorV1("cancelled");
+        const artifactRef = `plugin-acquisition://node/${randomUUID()}`;
+        const artifact = Object.freeze({
+            version: 1,
+            source: acquired.source,
+            pluginId: identity.manifest.id,
+            pluginVersion: identity.manifest.pluginVersion,
+            manifestDigest: identity.manifestDigest,
+            artifactDigest: acquired.digest.algorithm === "sha512" ? `sha512:${acquired.digest.hex}` : `sha256:${acquired.digest.hex}`,
+            expiresAt: ACQUISITION_ARTIFACT_EXPIRES_AT_V1,
+            sizeBytes: acquired.bytes.byteLength,
+            mediaType: acquired.mediaType,
+            artifactRef,
+        });
+        artifacts.set(artifactRef, { bytes: acquired.bytes, artifact });
+        return Object.freeze({
+            manifest: identity.manifest,
+            manifestDigest: identity.manifestDigest,
+            source: acquired.source,
+            artifact,
+            release: async () => {
+                try {
+                    await releaseArtifact({ artifact: { artifactRef } });
+                    return true;
+                }
+                catch {
+                    return false;
+                }
+            },
+        });
+    };
+    return {
+        version: NODE_PLUGIN_ACQUISITION_HOST_VERSION_V1,
+        resolvePackage,
+        openArtifact(input) {
+            return (async function* () {
+                const record = artifacts.get(input.artifact.artifactRef);
+                if (record === undefined)
+                    throw new NodePackageInstallErrorV1("invalid_artifact");
+                if (record.artifact.pluginId !== input.artifact.pluginId ||
+                    record.artifact.pluginVersion !== input.artifact.pluginVersion ||
+                    record.artifact.manifestDigest !== input.artifact.manifestDigest ||
+                    record.artifact.artifactDigest !== input.artifact.artifactDigest ||
+                    record.artifact.sizeBytes !== input.artifact.sizeBytes)
+                    throw new NodePackageInstallErrorV1("invalid_artifact");
+                for (let offset = 0; offset < record.bytes.byteLength; offset += ARTIFACT_CHUNK_BYTES_V1) {
+                    if (input.signal?.aborted === true)
+                        throw new NodePackageInstallErrorV1("cancelled");
+                    yield new Uint8Array(record.bytes.subarray(offset, Math.min(offset + ARTIFACT_CHUNK_BYTES_V1, record.bytes.byteLength)));
+                }
+            })();
+        },
+        releaseArtifact,
+        ownsArtifact: (input) => artifacts.has(input.artifactRef),
+        async close() {
+            closed = true;
+            artifacts.clear();
+        },
+    };
+}
+//# sourceMappingURL=node-plugin-acquisition-host.js.map

package/dist/plugins/ecosystem/node-plugin-acquisition-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-plugin-acquisition-host.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-plugin-acquisition-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,EAAE,qCAAqC,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC/G,OAAO,EACN,6BAA6B,EAC7B,4BAA4B,GAE5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,yBAAyB,EAGzB,qBAAqB,GACrB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EACN,gCAAgC,EAChC,+BAA+B,GAE/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EACN,wBAAwB,EAIxB,2BAA2B,GAC3B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAItD,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAErG;;;;;;;;GAQG;AAEH,MAAM,uCAAuC,GAAG,CAAU,CAAC;AAC3D,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,MAAM,0BAA0B,GAAG,kBAAkB,CAAC;AACtD,8FAA8F;AAC9F,MAAM,kCAAkC,GAAG,0BAA0B,CAAC;AACtE,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1C,qFAAqF;AACrF,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CAAC;AAC1E,mEAAmE;AACnE,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC;AACpE,2FAA2F;AAC3F,MAAM,CAAC,MAAM,6BAA6B,GAAG,wBAAwB,CAAC;AACtE,qHAAqH;AACrH,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC;AACpE,mEAAmE;AACnE,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAClD,kEAAkE;AAClE,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAsDhD,MAAM,cAAc,GAAkC;IACrD,wEAAwE;IACxE,6EAA6E;IAC7E,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,OAAO,OAAO,CAAC;QAC3C,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,OAAO,WAAW,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,EAAE;YAAE,OAAO,MAAM,CAAC;QAClC,OAAO,OAAO,CAAC;IAAA,CACf;CACD,CAAC;AAEF,SAAS,eAAe,CAAC,KAAc,EAA4B;IAClE,IAAI,KAAK,YAAY,wBAAwB;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;QAChD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACjF,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB;YAAE,OAAO,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;QACrG,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB;YAAE,OAAO,IAAI,wBAAwB,CAAC,wBAAwB,CAAC,CAAC;QAC3G,OAAO,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;AAAA,CACvD;AAED,SAAS,WAAW,CAAC,KAAc,EAA4B;IAC9D,IAAI,KAAK,YAAY,wBAAwB;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,KAAK,YAAY,4BAA4B,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;YAAE,OAAO,IAAI,wBAAwB,CAAC,mBAAmB,CAAC,CAAC;QACjG,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;YAAE,OAAO,IAAI,wBAAwB,CAAC,mBAAmB,CAAC,CAAC;QACjG,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACjF,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB;YAC9E,OAAO,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;QACxD,OAAO,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAAA,CAC9B;AAED,SAAS,WAAW,CAAC,KAAc,EAA4B;IAC9D,IAAI,KAAK,YAAY,wBAAwB;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,KAAK,YAAY,2BAA2B,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;YAAE,OAAO,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;QAC7F,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACjF,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB;YACzE,OAAO,IAAI,wBAAwB,CAAC,aAAa,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB;YAAE,OAAO,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;QAChG,OAAO,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAAA,CAC9B;AAED,SAAS,eAAe,CAAC,KAAc,EAA4B;IAClE,IAAI,KAAK,YAAY,wBAAwB;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,KAAK,YAAY,+BAA+B,EAAE,CAAC;QACtD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACjF,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB;YAAE,OAAO,IAAI,wBAAwB,CAAC,aAAa,CAAC,CAAC;QAC/F,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB;YAAE,OAAO,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;QAChG,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;YAAE,OAAO,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;QAC9F,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAChC,OAAO,IAAI,wBAAwB,CAClC,cAAc,EACd,KAAK,CAAC,iBAAiB,KAAK,SAAS;gBACpC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,wBAAwB,IAAI,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CACnF,CAAC;QACH,IACC,KAAK,CAAC,IAAI,KAAK,mBAAmB;YAClC,KAAK,CAAC,IAAI,KAAK,yBAAyB;YACxC,KAAK,CAAC,IAAI,KAAK,yBAAyB;YAExC,OAAO,IAAI,wBAAwB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAChE,OAAO,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IACxD,CAAC;IACD,gGAAgG;IAChG,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;AAAA,CAC1B;AAED,SAAS,MAAM,CAAC,SAA8B,EAAE,KAAiB,EAAU;IAC1E,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CACzD;AAED,4FAA4F;AAC5F,SAAS,aAAa,CAAC,MAA+B,EAAW;IAChE,OAAO,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;AAAA,CAChC;AAED,mFAAmF;AACnF,MAAM,UAAU,sCAAsC,CAAC,OAAyC,EAG9F;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,0BAA0B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7G,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,KAAK,CAAC,UAAU,GAAG,6BAA6B;QAChG,MAAM,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IACvD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtE,MAAM,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;QAC5B,IAAI;QACJ,eAAe;QACf,YAAY;QACZ,gBAAgB;QAChB,gBAAgB;QAChB,gBAAgB;QAChB,UAAU;QACV,UAAU;QACV,UAAU;KACV,CAAC,CAAC;IACH,IACC,MAAM,CAAC,oBAAoB,KAAK,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,sBAAsB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE3F,MAAM,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IACvD,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;IACrB,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACrC,IACC,OAAO,EAAE,KAAK,QAAQ;QACtB,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QACtB,EAAE,CAAC,MAAM,GAAG,GAAG;QACf,OAAO,aAAa,KAAK,QAAQ;QACjC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QACjC,aAAa,CAAC,MAAM,GAAG,GAAG;QAC1B,OAAO,UAAU,KAAK,QAAQ;QAC9B,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAC9B,UAAU,CAAC,MAAM,GAAG,GAAG;QAEvB,MAAM,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;QAC7E,MAAM,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAqB,MAAM,CAAC,MAAM,CAAC;QAChD,EAAE;QACF,aAAa;QACb,UAAU;QACV,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAwB,EAAE,CAAC;QACnG,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAwB,EAAE,CAAC;QACnG,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS;YACtC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAoD,EAAE,CAAC;QACnF,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAwC,EAAE,CAAC;QACvG,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAwC,EAAE,CAAC;QACvG,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAmB,EAAE,CAAC;KAClF,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;AAAA,CACtE;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAChD,OAAO,GAAuC,EAAE,EAClB;IAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,EAAE,IAAI,EAAE,CAAC;IACtG,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7F,MAAM,qBAAqB,GAAG,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,IAAI,EAAE,CAAC;IAC5G,MAAM,oBAAoB,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,CAAC;IACzG,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC1F,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC;IACvF,MAAM,SAAS,GAA4B,6BAA6B,CAAC;QACxE,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;QACvG,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAC3F,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACjG,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACjG,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;QAC9F,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;KAC5E,CAAC,CAAC;IACH,MAAM,aAAa,GAA+B,gCAAgC,CAAC;QAClF,GAAG,CAAC,qBAAqB,KAAK,SAAS,IAAI,qBAAqB,KAAK,EAAE;YACtE,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC;QAC9C,GAAG,CAAC,oBAAoB,KAAK,SAAS,IAAI,oBAAoB,KAAK,EAAE;YACpE,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,oBAAoB,EAAE,CAAC;QAC5C,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;QAC1G,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;QACtG,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACjG,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACjG,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5F,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;KAC5E,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC9D,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,MAAM,YAAY,GAAG,KAAK,EACzB,GAA2B,EAC3B,MAA+B,EACJ,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACnD,IAAI,CAAC;gBACJ,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC;oBACzD,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;oBAClD,GAAG,CAAC,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC;oBAC5F,MAAM;iBACN,CAAC,CAAC;gBACH,OAAO;oBACN,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,SAAS,EAAE;oBACxD,MAAM,EAAE,QAAQ,CAAC,WAAW;iBAC5B,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;QACF,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC;gBACJ,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC;oBAClD,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;oBACxD,MAAM;iBACN,CAAC,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;gBACjF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBACxD,IAAI,GAAG,KAAK,QAAQ,CAAC,SAAS,CAAC,GAAG;oBAAE,MAAM,IAAI,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;gBAC1F,OAAO;oBACN,KAAK;oBACL,SAAS,EAAE,kBAAkB;oBAC7B,MAAM,EAAE,QAAQ,CAAC,SAAS;oBAC1B,MAAM,EAAE,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE;iBAClD,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACF,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC;gBACJ,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC9C;oBACC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;oBAChE,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;oBACjG,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;oBAC9F,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;iBAC5E,EACD;oBACC,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,GAAG,CAAC,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC;oBAC5F,MAAM;iBACN,CACD,CAAC;gBACF,OAAO;oBACN,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,SAAS,EAAE;oBACxD,MAAM,EAAE,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;iBACtC,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACF,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACJ,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBACrE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC;gBAChD,MAAM,SAAS,GAAG,8BAA8B,CAC/C,KAAK,EACL,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CACtE,CAAC;gBACF,OAAO;oBACN,KAAK;oBACL,SAAS;oBACT,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE;oBAC7D,MAAM,EAAE,YAAY;iBACpB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;QACF,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,qCAAqC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBACtF,MAAM,KAAK,GAAG,qBAAqB,CAClC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAC9F,CAAC;gBACF,OAAO;oBACN,KAAK;oBACL,SAAS,EAAE,kBAAkB;oBAC7B,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE;oBAC7D,MAAM,EAAE,WAAW;iBACnB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;QACF,CAAC;QACD,MAAM,IAAI,wBAAwB,CAAC,aAAa,CAAC,CAAC;IAAA,CAClD,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAAE,KAA8D,EAAiB,EAAE,CAAC;QAChH,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;IAAA,CAC3G,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAAE,KAG7B,EAAuC,EAAE,CAAC;QAC1C,IAAI,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAC3F,IAAI,GAA2B,CAAC;QAChC,IAAI,CAAC;YACJ,GAAG,GAAG,2BAA2B,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,wBAAwB;gBAAE,MAAM,KAAK,CAAC;YAC3D,MAAM,IAAI,wBAAwB,CAAC,aAAa,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACjF,IAAI,OAAyC,CAAC;QAC9C,IAAI,CAAC;YACJ,OAAO;gBACN,QAAQ,CAAC,SAAS,KAAK,kBAAkB;oBACxC,CAAC,CAAC,MAAM,uBAAuB,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;oBACvD,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,QAAQ,GAAG,sCAAsC,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,MAAM;YAAE,MAAM,IAAI,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,WAAW,GAAG,6BAA6B,UAAU,EAAE,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAiC,MAAM,CAAC,MAAM,CAAC;YAC5D,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAC9B,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,aAAa;YAC9C,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,cAAc,EACb,QAAQ,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,UAAU,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE;YAC3G,SAAS,EAAE,kCAAkC;YAC7C,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;YACpC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,WAAW;SACX,CAAC,CAAC;QACH,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ;YACR,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACJ,MAAM,eAAe,CAAC,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;oBACrD,OAAO,IAAI,CAAC;gBACb,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,KAAK,CAAC;gBACd,CAAC;YAAA,CACD;SACD,CAAC,CAAC;IAAA,CACH,CAAC;IAEF,OAAO;QACN,OAAO,EAAE,uCAAuC;QAChD,cAAc;QACd,YAAY,CAAC,KAAK,EAAE;YACnB,OAAO,CAAC,KAAK,SAAS,CAAC,IAAgC;gBACtD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACzD,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;gBAClF,IACC,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,QAAQ;oBACpD,MAAM,CAAC,QAAQ,CAAC,aAAa,KAAK,KAAK,CAAC,QAAQ,CAAC,aAAa;oBAC9D,MAAM,CAAC,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,QAAQ,CAAC,cAAc;oBAChE,MAAM,CAAC,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,QAAQ,CAAC,cAAc;oBAChE,MAAM,CAAC,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ,CAAC,SAAS;oBAEtD,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;gBACzD,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,uBAAuB,EAAE,CAAC;oBAC1F,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;wBAAE,MAAM,IAAI,yBAAyB,CAAC,WAAW,CAAC,CAAC;oBACrF,MAAM,IAAI,UAAU,CACnB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,uBAAuB,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAClG,CAAC;gBACH,CAAC;YAAA,CACD,CAAC,EAAE,CAAC;QAAA,CACL;QACD,eAAe;QACf,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;QACzD,KAAK,CAAC,KAAK,GAAG;YACb,MAAM,GAAG,IAAI,CAAC;YACd,SAAS,CAAC,KAAK,EAAE,CAAC;QAAA,CAClB;KACD,CAAC;AAAA,CACF","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport { lstatSync } from \"node:fs\";\nimport type { PluginDistributionArtifactV1 } from \"./distribution.ts\";\nimport { collectLocalDirectoryPackageEntriesV1, readLocalPackageFileV1 } from \"./node-local-package-source.ts\";\nimport {\n\tcreateNodeNpmRegistrySourceV1,\n\tNodeNpmRegistrySourceErrorV1,\n\ttype NodeNpmRegistrySourceV1,\n} from \"./node-npm-registry-source.ts\";\nimport {\n\tNodePackageInstallErrorV1,\n\ttype NodeZipPackageEntryV1,\n\ttype NodeZipPackageLimitsV1,\n\tparseNodeZipPackageV1,\n} from \"./node-package-install-host.ts\";\nimport { detectPluginPackageMediaTypeV1 } from \"./node-package-media.ts\";\nimport {\n\tcreateNodeReleasePackageSourceV1,\n\tNodeReleasePackageSourceErrorV1,\n\ttype NodeReleasePackageSourceV1,\n} from \"./node-release-package-source.ts\";\nimport { parseNodeTarGzPackageV1 } from \"./node-tar-package.ts\";\nimport { buildNodeTarGzBytesV1 } from \"./node-tar-writer.ts\";\nimport {\n\tPluginAcquisitionErrorV1,\n\ttype PluginAcquisitionLocalProbeV1,\n\ttype PluginAcquisitionPackageV1,\n\ttype PluginAcquisitionRefV1,\n\tparsePluginAcquisitionRefV1,\n} from \"./plugin-acquisition.ts\";\nimport type { PluginManifestV1 } from \"./types.ts\";\nimport { pluginManifestDigestV1 } from \"./updates.ts\";\n\nexport type { PluginAcquisitionPackageV1 } from \"./plugin-acquisition.ts\";\n\nimport { downloadNodeUrlPackageV1, NodeUrlPackageSourceErrorV1 } from \"./node-url-package-source.ts\";\n\n/**\n * Node acquisition orchestration for `plugin install <ref>` (design §4.6).\n * One boundary acquires package bytes for every source (npm packument+tarball,\n * GitHub/Gitee release asset, custom URL, local file, local directory),\n * verifies the source-specific integrity layer (npm SRI > ref digest fragment\n * > sha256 on exchange), discovers the `agent-forge.json` identity through the\n * shared bounded unpackers, and exposes the result as an opaque distribution\n * artifact the existing installer/install-host chain consumes unchanged.\n */\n\nconst NODE_PLUGIN_ACQUISITION_HOST_VERSION_V1 = 1 as const;\nconst MAX_PACKAGE_MANIFEST_BYTES_V1 = 64 * 1024;\nconst ECOSYSTEM_MANIFEST_FILE_V1 = \"agent-forge.json\";\n/** Fixed far-future expiry; the artifact handle is single-transaction and never persisted. */\nconst ACQUISITION_ARTIFACT_EXPIRES_AT_V1 = \"2099-01-01T00:00:00.000Z\";\nconst ARTIFACT_CHUNK_BYTES_V1 = 64 * 1024;\n\n/** Environment variable overriding the npm registry origin (bare http(s) origin). */\nexport const AGENT_FORGE_NPM_REGISTRY_ENV_V1 = \"AGENT_FORGE_NPM_REGISTRY\";\n/** Environment variable carrying the npm registry bearer token. */\nexport const AGENT_FORGE_NPM_TOKEN_ENV_V1 = \"AGENT_FORGE_NPM_TOKEN\";\n/** Environment variable overriding the GitHub release API origin (bare http(s) origin). */\nexport const AGENT_FORGE_GITHUB_API_ENV_V1 = \"AGENT_FORGE_GITHUB_API\";\n/** Environment variable overriding the Gitee release API origin (bare http(s) origin, includes the /api/v5 path). */\nexport const AGENT_FORGE_GITEE_API_ENV_V1 = \"AGENT_FORGE_GITEE_API\";\n/** Environment variable carrying the optional GitHub API token. */\nexport const GITHUB_TOKEN_ENV_V1 = \"GITHUB_TOKEN\";\n/** Environment variable carrying the optional Gitee API token. */\nexport const GITEE_TOKEN_ENV_V1 = \"GITEE_TOKEN\";\n\nexport interface NodePluginAcquisitionHostV1 {\n\treadonly version: typeof NODE_PLUGIN_ACQUISITION_HOST_VERSION_V1;\n\t/** Parse and acquire one ref into a package + artifact pair. */\n\treadonly resolvePackage: (input: {\n\t\treadonly ref: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginAcquisitionPackageV1>;\n\t/** Private installer-facing reader; mirrors the HTTP distribution host boundary. */\n\treadonly openArtifact: (input: {\n\t\treadonly artifact: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => AsyncIterable<Uint8Array>;\n\treadonly releaseArtifact: (input: { readonly artifact: { readonly artifactRef: string } }) => Promise<void>;\n\t/** Whether this host owns the artifact reference (used to compose artifact readers). */\n\treadonly ownsArtifact: (input: { readonly artifactRef: string }) => boolean;\n\treadonly close: () => Promise<void>;\n}\n\nexport interface NodePluginAcquisitionHostOptionsV1 {\n\t/** Real fetch or a deterministic test replacement. */\n\treadonly fetch?: typeof globalThis.fetch;\n\t/** Bare http(s) npm registry origin; defaults to the environment variable, then the npm public registry. */\n\treadonly npmRegistry?: string;\n\t/** npm registry bearer token; defaults to the environment variable. */\n\treadonly npmToken?: string;\n\t/** Bare http(s) GitHub release API origin; defaults to the environment variable, then api.github.com. */\n\treadonly githubApiOrigin?: string;\n\t/** Bare http(s) Gitee release API origin; defaults to the environment variable, then gitee.com/api/v5. */\n\treadonly giteeApiOrigin?: string;\n\t/** GitHub API token sent as a bearer header; defaults to the environment variable. */\n\treadonly githubToken?: string;\n\t/** Gitee API token sent as an access_token query parameter; defaults to the environment variable. */\n\treadonly giteeToken?: string;\n\treadonly requestTimeoutMs?: number;\n\treadonly maxResponseBytes?: number;\n\treadonly maxTarballBytes?: number;\n\treadonly limits?: NodeZipPackageLimitsV1;\n\treadonly userAgent?: string;\n}\n\ninterface AcquiredBytesV1 {\n\treadonly bytes: Uint8Array;\n\treadonly mediaType: \"application/zip\" | \"application/gzip\";\n\treadonly digest: { readonly algorithm: \"sha256\" | \"sha512\"; readonly hex: string };\n\treadonly source: string;\n}\n\ninterface AcquiredArtifactRecordV1 {\n\treadonly bytes: Uint8Array;\n\treadonly artifact: PluginDistributionArtifactV1;\n}\n\nconst LOCAL_PROBE_V1: PluginAcquisitionLocalProbeV1 = {\n\t// The parser contract is synchronous; one lstat per candidate ref keeps\n\t// this bounded. Symlinks classify as \"other\" so they never install as local.\n\tstatLocalRef: (path) => {\n\t\tconst stats = lstatSync(path, { throwIfNoEntry: false });\n\t\tif (stats === undefined) return \"missing\";\n\t\tif (stats.isSymbolicLink()) return \"other\";\n\t\tif (stats.isDirectory()) return \"directory\";\n\t\tif (stats.isFile()) return \"file\";\n\t\treturn \"other\";\n\t},\n};\n\nfunction mapInstallError(error: unknown): PluginAcquisitionErrorV1 {\n\tif (error instanceof PluginAcquisitionErrorV1) return error;\n\tif (error instanceof NodePackageInstallErrorV1) {\n\t\tif (error.code === \"cancelled\") return new PluginAcquisitionErrorV1(\"cancelled\");\n\t\tif (error.code === \"archive_budget_exceeded\") return new PluginAcquisitionErrorV1(\"budget_exceeded\");\n\t\tif (error.code === \"unsupported_media_type\") return new PluginAcquisitionErrorV1(\"unsupported_media_type\");\n\t\treturn new PluginAcquisitionErrorV1(\"package_invalid\");\n\t}\n\treturn new PluginAcquisitionErrorV1(\"download_failed\");\n}\n\nfunction mapNpmError(error: unknown): PluginAcquisitionErrorV1 {\n\tif (error instanceof PluginAcquisitionErrorV1) return error;\n\tif (error instanceof NodeNpmRegistrySourceErrorV1) {\n\t\tif (error.code === \"package_not_found\") return new PluginAcquisitionErrorV1(\"package_not_found\");\n\t\tif (error.code === \"version_not_found\") return new PluginAcquisitionErrorV1(\"version_not_found\");\n\t\tif (error.code === \"cancelled\") return new PluginAcquisitionErrorV1(\"cancelled\");\n\t\tif (error.code === \"invalid_response\" || error.code === \"integrity_unsupported\")\n\t\t\treturn new PluginAcquisitionErrorV1(\"package_invalid\");\n\t\treturn new PluginAcquisitionErrorV1(\"download_failed\");\n\t}\n\treturn mapInstallError(error);\n}\n\nfunction mapUrlError(error: unknown): PluginAcquisitionErrorV1 {\n\tif (error instanceof PluginAcquisitionErrorV1) return error;\n\tif (error instanceof NodeUrlPackageSourceErrorV1) {\n\t\tif (error.code === \"digest_mismatch\") return new PluginAcquisitionErrorV1(\"digest_mismatch\");\n\t\tif (error.code === \"cancelled\") return new PluginAcquisitionErrorV1(\"cancelled\");\n\t\tif (error.code === \"invalid_url\" || error.code === \"invalid_configuration\")\n\t\t\treturn new PluginAcquisitionErrorV1(\"invalid_ref\");\n\t\tif (error.code === \"response_too_large\") return new PluginAcquisitionErrorV1(\"budget_exceeded\");\n\t\treturn new PluginAcquisitionErrorV1(\"download_failed\");\n\t}\n\treturn mapInstallError(error);\n}\n\nfunction mapReleaseError(error: unknown): PluginAcquisitionErrorV1 {\n\tif (error instanceof PluginAcquisitionErrorV1) return error;\n\tif (error instanceof NodeReleasePackageSourceErrorV1) {\n\t\tif (error.code === \"cancelled\") return new PluginAcquisitionErrorV1(\"cancelled\");\n\t\tif (error.code === \"invalid_configuration\") return new PluginAcquisitionErrorV1(\"invalid_ref\");\n\t\tif (error.code === \"response_too_large\") return new PluginAcquisitionErrorV1(\"budget_exceeded\");\n\t\tif (error.code === \"invalid_response\") return new PluginAcquisitionErrorV1(\"package_invalid\");\n\t\tif (error.code === \"rate_limited\")\n\t\t\treturn new PluginAcquisitionErrorV1(\n\t\t\t\t\"rate_limited\",\n\t\t\t\terror.resetEpochSeconds === undefined\n\t\t\t\t\t? undefined\n\t\t\t\t\t: `rate limit resets at ${new Date(error.resetEpochSeconds * 1000).toISOString()}`,\n\t\t\t);\n\t\tif (\n\t\t\terror.code === \"release_not_found\" ||\n\t\t\terror.code === \"release_asset_not_found\" ||\n\t\t\terror.code === \"release_asset_ambiguous\"\n\t\t)\n\t\t\treturn new PluginAcquisitionErrorV1(error.code, error.message);\n\t\treturn new PluginAcquisitionErrorV1(\"download_failed\");\n\t}\n\t// Asset downloads ride the URL package source; digest and budget errors pass through unchanged.\n\treturn mapUrlError(error);\n}\n\nfunction shaHex(algorithm: \"sha256\" | \"sha512\", bytes: Uint8Array): string {\n\treturn createHash(algorithm).update(bytes).digest(\"hex\");\n}\n\n/** Abort probe as a function so later re-checks are not flow-narrowed away after awaits. */\nfunction signalAborted(signal: AbortSignal | undefined): boolean {\n\treturn signal?.aborted === true;\n}\n\n/** Discover the `agent-forge.json` identity in already-bounded package entries. */\nexport function pluginAcquisitionManifestFromEntriesV1(entries: readonly NodeZipPackageEntryV1[]): {\n\treadonly manifest: PluginManifestV1;\n\treadonly manifestDigest: string;\n} {\n\tconst manifestEntry = entries.find((entry) => entry.name === ECOSYSTEM_MANIFEST_FILE_V1 && !entry.directory);\n\tif (manifestEntry === undefined || manifestEntry.bytes.byteLength > MAX_PACKAGE_MANIFEST_BYTES_V1)\n\t\tthrow new PluginAcquisitionErrorV1(\"package_invalid\");\n\tlet value: unknown;\n\ttry {\n\t\tvalue = JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(manifestEntry.bytes));\n\t} catch {\n\t\tthrow new PluginAcquisitionErrorV1(\"package_invalid\");\n\t}\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value))\n\t\tthrow new PluginAcquisitionErrorV1(\"package_invalid\");\n\tconst record = value as Record<string, unknown>;\n\tconst manifestKeys = new Set([\n\t\t\"id\",\n\t\t\"pluginVersion\",\n\t\t\"apiVersion\",\n\t\t\"minHostVersion\",\n\t\t\"maxHostVersion\",\n\t\t\"capabilityRefs\",\n\t\t\"requires\",\n\t\t\"platform\",\n\t\t\"testOnly\",\n\t]);\n\tif (\n\t\trecord.packageFormatVersion !== 1 ||\n\t\tObject.keys(record).some((key) => key !== \"packageFormatVersion\" && !manifestKeys.has(key))\n\t)\n\t\tthrow new PluginAcquisitionErrorV1(\"package_invalid\");\n\tconst id = record.id;\n\tconst pluginVersion = record.pluginVersion;\n\tconst apiVersion = record.apiVersion;\n\tif (\n\t\ttypeof id !== \"string\" ||\n\t\tid.trim().length === 0 ||\n\t\tid.length > 256 ||\n\t\ttypeof pluginVersion !== \"string\" ||\n\t\tpluginVersion.trim().length === 0 ||\n\t\tpluginVersion.length > 256 ||\n\t\ttypeof apiVersion !== \"string\" ||\n\t\tapiVersion.trim().length === 0 ||\n\t\tapiVersion.length > 256\n\t)\n\t\tthrow new PluginAcquisitionErrorV1(\"package_invalid\");\n\tif (record.minHostVersion === undefined && record.maxHostVersion === undefined)\n\t\tthrow new PluginAcquisitionErrorV1(\"package_invalid\");\n\tconst manifest: PluginManifestV1 = Object.freeze({\n\t\tid,\n\t\tpluginVersion,\n\t\tapiVersion,\n\t\t...(record.minHostVersion === undefined ? {} : { minHostVersion: record.minHostVersion as string }),\n\t\t...(record.maxHostVersion === undefined ? {} : { maxHostVersion: record.maxHostVersion as string }),\n\t\t...(record.capabilityRefs === undefined\n\t\t\t? {}\n\t\t\t: { capabilityRefs: record.capabilityRefs as PluginManifestV1[\"capabilityRefs\"] }),\n\t\t...(record.requires === undefined ? {} : { requires: record.requires as PluginManifestV1[\"requires\"] }),\n\t\t...(record.platform === undefined ? {} : { platform: record.platform as PluginManifestV1[\"platform\"] }),\n\t\t...(record.testOnly === undefined ? {} : { testOnly: record.testOnly as boolean }),\n\t});\n\treturn { manifest, manifestDigest: pluginManifestDigestV1(manifest) };\n}\n\n/**\n * Create the Node acquisition host. All sources share the bounded unpackers,\n * the manifest identity discovery, and the artifact reader contract used by\n * the existing install host. Nothing is downloaded until `resolvePackage`.\n */\nexport function createNodePluginAcquisitionHostV1(\n\toptions: NodePluginAcquisitionHostOptionsV1 = {},\n): NodePluginAcquisitionHostV1 {\n\tconst limits = options.limits ?? {};\n\tconst npmRegistryOption = options.npmRegistry ?? process.env[AGENT_FORGE_NPM_REGISTRY_ENV_V1]?.trim();\n\tconst npmTokenOption = options.npmToken ?? process.env[AGENT_FORGE_NPM_TOKEN_ENV_V1]?.trim();\n\tconst githubApiOriginOption = options.githubApiOrigin ?? process.env[AGENT_FORGE_GITHUB_API_ENV_V1]?.trim();\n\tconst giteeApiOriginOption = options.giteeApiOrigin ?? process.env[AGENT_FORGE_GITEE_API_ENV_V1]?.trim();\n\tconst githubTokenOption = options.githubToken ?? process.env[GITHUB_TOKEN_ENV_V1]?.trim();\n\tconst giteeTokenOption = options.giteeToken ?? process.env[GITEE_TOKEN_ENV_V1]?.trim();\n\tconst npmSource: NodeNpmRegistrySourceV1 = createNodeNpmRegistrySourceV1({\n\t\t...(npmRegistryOption === undefined || npmRegistryOption === \"\" ? {} : { registry: npmRegistryOption }),\n\t\t...(npmTokenOption === undefined || npmTokenOption === \"\" ? {} : { token: npmTokenOption }),\n\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t...(options.requestTimeoutMs === undefined ? {} : { requestTimeoutMs: options.requestTimeoutMs }),\n\t\t...(options.maxResponseBytes === undefined ? {} : { maxResponseBytes: options.maxResponseBytes }),\n\t\t...(options.maxTarballBytes === undefined ? {} : { maxTarballBytes: options.maxTarballBytes }),\n\t\t...(options.userAgent === undefined ? {} : { userAgent: options.userAgent }),\n\t});\n\tconst releaseSource: NodeReleasePackageSourceV1 = createNodeReleasePackageSourceV1({\n\t\t...(githubApiOriginOption === undefined || githubApiOriginOption === \"\"\n\t\t\t? {}\n\t\t\t: { githubApiOrigin: githubApiOriginOption }),\n\t\t...(giteeApiOriginOption === undefined || giteeApiOriginOption === \"\"\n\t\t\t? {}\n\t\t\t: { giteeApiOrigin: giteeApiOriginOption }),\n\t\t...(githubTokenOption === undefined || githubTokenOption === \"\" ? {} : { githubToken: githubTokenOption }),\n\t\t...(giteeTokenOption === undefined || giteeTokenOption === \"\" ? {} : { giteeToken: giteeTokenOption }),\n\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t...(options.requestTimeoutMs === undefined ? {} : { requestTimeoutMs: options.requestTimeoutMs }),\n\t\t...(options.maxResponseBytes === undefined ? {} : { maxResponseBytes: options.maxResponseBytes }),\n\t\t...(options.maxTarballBytes === undefined ? {} : { maxAssetBytes: options.maxTarballBytes }),\n\t\t...(options.userAgent === undefined ? {} : { userAgent: options.userAgent }),\n\t});\n\tconst artifacts = new Map<string, AcquiredArtifactRecordV1>();\n\tlet closed = false;\n\n\tconst acquireBytes = async (\n\t\tref: PluginAcquisitionRefV1,\n\t\tsignal: AbortSignal | undefined,\n\t): Promise<AcquiredBytesV1> => {\n\t\tif (ref.kind === \"github\" || ref.kind === \"gitee\") {\n\t\t\ttry {\n\t\t\t\tconst download = await releaseSource.downloadReleaseAsset({\n\t\t\t\t\tkind: ref.kind,\n\t\t\t\t\towner: ref.owner,\n\t\t\t\t\trepo: ref.repo,\n\t\t\t\t\t...(ref.tag === undefined ? {} : { tag: ref.tag }),\n\t\t\t\t\t...(ref.expectedDigestHex === undefined ? {} : { expectedDigestHex: ref.expectedDigestHex }),\n\t\t\t\t\tsignal,\n\t\t\t\t});\n\t\t\t\treturn {\n\t\t\t\t\tbytes: download.bytes,\n\t\t\t\t\tmediaType: download.mediaType,\n\t\t\t\t\tdigest: { algorithm: \"sha256\", hex: download.sha256Hex },\n\t\t\t\t\tsource: download.sourceLabel,\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tthrow mapReleaseError(error);\n\t\t\t}\n\t\t}\n\t\tif (ref.kind === \"npm\") {\n\t\t\ttry {\n\t\t\t\tconst resolved = await npmSource.resolveNpmPackage({\n\t\t\t\t\tname: ref.name,\n\t\t\t\t\t...(ref.range === undefined ? {} : { range: ref.range }),\n\t\t\t\t\tsignal,\n\t\t\t\t});\n\t\t\t\tconst bytes = await npmSource.fetchTarball({ url: resolved.tarballUrl, signal });\n\t\t\t\tconst hex = shaHex(resolved.integrity.algorithm, bytes);\n\t\t\t\tif (hex !== resolved.integrity.hex) throw new PluginAcquisitionErrorV1(\"digest_mismatch\");\n\t\t\t\treturn {\n\t\t\t\t\tbytes,\n\t\t\t\t\tmediaType: \"application/gzip\",\n\t\t\t\t\tdigest: resolved.integrity,\n\t\t\t\t\tsource: `npm:${new URL(resolved.tarballUrl).host}`,\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tthrow mapNpmError(error);\n\t\t\t}\n\t\t}\n\t\tif (ref.kind === \"url\") {\n\t\t\ttry {\n\t\t\t\tconst download = await downloadNodeUrlPackageV1(\n\t\t\t\t\t{\n\t\t\t\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t\t\t\t\t...(options.requestTimeoutMs === undefined ? {} : { requestTimeoutMs: options.requestTimeoutMs }),\n\t\t\t\t\t\t...(options.maxTarballBytes === undefined ? {} : { maxPackageBytes: options.maxTarballBytes }),\n\t\t\t\t\t\t...(options.userAgent === undefined ? {} : { userAgent: options.userAgent }),\n\t\t\t\t\t},\n\t\t\t\t\t{\n\t\t\t\t\t\turl: ref.url,\n\t\t\t\t\t\t...(ref.expectedDigestHex === undefined ? {} : { expectedDigestHex: ref.expectedDigestHex }),\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t},\n\t\t\t\t);\n\t\t\t\treturn {\n\t\t\t\t\tbytes: download.bytes,\n\t\t\t\t\tmediaType: download.mediaType,\n\t\t\t\t\tdigest: { algorithm: \"sha256\", hex: download.digestHex },\n\t\t\t\t\tsource: `url:${new URL(ref.url).host}`,\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tthrow mapUrlError(error);\n\t\t\t}\n\t\t}\n\t\tif (ref.kind === \"local-file\") {\n\t\t\ttry {\n\t\t\t\tconst bytes = await readLocalPackageFileV1(ref.path, limits, signal);\n\t\t\t\tconst fileName = ref.path.split(/[\\\\/]/u).pop();\n\t\t\t\tconst mediaType = detectPluginPackageMediaTypeV1(\n\t\t\t\t\tbytes,\n\t\t\t\t\tfileName === undefined || fileName.length === 0 ? undefined : fileName,\n\t\t\t\t);\n\t\t\t\treturn {\n\t\t\t\t\tbytes,\n\t\t\t\t\tmediaType,\n\t\t\t\t\tdigest: { algorithm: \"sha256\", hex: shaHex(\"sha256\", bytes) },\n\t\t\t\t\tsource: \"local:file\",\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tthrow mapInstallError(error);\n\t\t\t}\n\t\t}\n\t\tif (ref.kind === \"local-path\") {\n\t\t\ttry {\n\t\t\t\tconst entries = await collectLocalDirectoryPackageEntriesV1(ref.path, limits, signal);\n\t\t\t\tconst bytes = buildNodeTarGzBytesV1(\n\t\t\t\t\tentries.map((entry) => ({ name: entry.name, directory: entry.directory, bytes: entry.bytes })),\n\t\t\t\t);\n\t\t\t\treturn {\n\t\t\t\t\tbytes,\n\t\t\t\t\tmediaType: \"application/gzip\",\n\t\t\t\t\tdigest: { algorithm: \"sha256\", hex: shaHex(\"sha256\", bytes) },\n\t\t\t\t\tsource: \"local:dir\",\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tthrow mapInstallError(error);\n\t\t\t}\n\t\t}\n\t\tthrow new PluginAcquisitionErrorV1(\"invalid_ref\");\n\t};\n\n\tconst releaseArtifact = async (input: { readonly artifact: { readonly artifactRef: string } }): Promise<void> => {\n\t\tif (!artifacts.delete(input.artifact.artifactRef)) throw new NodePackageInstallErrorV1(\"invalid_artifact\");\n\t};\n\n\tconst resolvePackage = async (input: {\n\t\treadonly ref: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginAcquisitionPackageV1> => {\n\t\tif (closed || signalAborted(input.signal)) throw new PluginAcquisitionErrorV1(\"cancelled\");\n\t\tlet ref: PluginAcquisitionRefV1;\n\t\ttry {\n\t\t\tref = parsePluginAcquisitionRefV1(input.ref, LOCAL_PROBE_V1);\n\t\t} catch (error) {\n\t\t\tif (error instanceof PluginAcquisitionErrorV1) throw error;\n\t\t\tthrow new PluginAcquisitionErrorV1(\"invalid_ref\");\n\t\t}\n\t\tconst acquired = await acquireBytes(ref, input.signal);\n\t\tif (signalAborted(input.signal)) throw new PluginAcquisitionErrorV1(\"cancelled\");\n\t\tlet entries: readonly NodeZipPackageEntryV1[];\n\t\ttry {\n\t\t\tentries =\n\t\t\t\tacquired.mediaType === \"application/gzip\"\n\t\t\t\t\t? await parseNodeTarGzPackageV1(acquired.bytes, limits)\n\t\t\t\t\t: parseNodeZipPackageV1(acquired.bytes, limits);\n\t\t} catch (error) {\n\t\t\tthrow mapInstallError(error);\n\t\t}\n\t\tconst identity = pluginAcquisitionManifestFromEntriesV1(entries);\n\t\tif (closed) throw new PluginAcquisitionErrorV1(\"cancelled\");\n\t\tconst artifactRef = `plugin-acquisition://node/${randomUUID()}`;\n\t\tconst artifact: PluginDistributionArtifactV1 = Object.freeze({\n\t\t\tversion: 1,\n\t\t\tsource: acquired.source,\n\t\t\tpluginId: identity.manifest.id,\n\t\t\tpluginVersion: identity.manifest.pluginVersion,\n\t\t\tmanifestDigest: identity.manifestDigest,\n\t\t\tartifactDigest:\n\t\t\t\tacquired.digest.algorithm === \"sha512\" ? `sha512:${acquired.digest.hex}` : `sha256:${acquired.digest.hex}`,\n\t\t\texpiresAt: ACQUISITION_ARTIFACT_EXPIRES_AT_V1,\n\t\t\tsizeBytes: acquired.bytes.byteLength,\n\t\t\tmediaType: acquired.mediaType,\n\t\t\tartifactRef,\n\t\t});\n\t\tartifacts.set(artifactRef, { bytes: acquired.bytes, artifact });\n\t\treturn Object.freeze({\n\t\t\tmanifest: identity.manifest,\n\t\t\tmanifestDigest: identity.manifestDigest,\n\t\t\tsource: acquired.source,\n\t\t\tartifact,\n\t\t\trelease: async () => {\n\t\t\t\ttry {\n\t\t\t\t\tawait releaseArtifact({ artifact: { artifactRef } });\n\t\t\t\t\treturn true;\n\t\t\t\t} catch {\n\t\t\t\t\treturn false;\n\t\t\t\t}\n\t\t\t},\n\t\t});\n\t};\n\n\treturn {\n\t\tversion: NODE_PLUGIN_ACQUISITION_HOST_VERSION_V1,\n\t\tresolvePackage,\n\t\topenArtifact(input) {\n\t\t\treturn (async function* (): AsyncGenerator<Uint8Array> {\n\t\t\t\tconst record = artifacts.get(input.artifact.artifactRef);\n\t\t\t\tif (record === undefined) throw new NodePackageInstallErrorV1(\"invalid_artifact\");\n\t\t\t\tif (\n\t\t\t\t\trecord.artifact.pluginId !== input.artifact.pluginId ||\n\t\t\t\t\trecord.artifact.pluginVersion !== input.artifact.pluginVersion ||\n\t\t\t\t\trecord.artifact.manifestDigest !== input.artifact.manifestDigest ||\n\t\t\t\t\trecord.artifact.artifactDigest !== input.artifact.artifactDigest ||\n\t\t\t\t\trecord.artifact.sizeBytes !== input.artifact.sizeBytes\n\t\t\t\t)\n\t\t\t\t\tthrow new NodePackageInstallErrorV1(\"invalid_artifact\");\n\t\t\t\tfor (let offset = 0; offset < record.bytes.byteLength; offset += ARTIFACT_CHUNK_BYTES_V1) {\n\t\t\t\t\tif (input.signal?.aborted === true) throw new NodePackageInstallErrorV1(\"cancelled\");\n\t\t\t\t\tyield new Uint8Array(\n\t\t\t\t\t\trecord.bytes.subarray(offset, Math.min(offset + ARTIFACT_CHUNK_BYTES_V1, record.bytes.byteLength)),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t})();\n\t\t},\n\t\treleaseArtifact,\n\t\townsArtifact: (input) => artifacts.has(input.artifactRef),\n\t\tasync close() {\n\t\t\tclosed = true;\n\t\t\tartifacts.clear();\n\t\t},\n\t};\n}\n"]}

package/dist/plugins/ecosystem/node-plugin-bootstrap.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Node wiring for the startup plugin bootstrap (design
+ * `插件独立分发与启动装配设计.md` §4.4, §0.7).
+ *
+ * `AGENT_FORGE_PLUGIN_BOOTSTRAP=off` skips everything, including the local
+ * comparison. The comparison dependency reads the global and project
+ * plugin-state.json stores only — read-only, and it never constructs an HTTP
+ * client, so an assembled environment starts offline (G3). Network objects
+ * (npm acquisition host, install host) are built lazily inside the install
+ * action and closed when the bootstrap finishes. Installs go through the
+ * npm acquisition path exclusively and persist the `npm:<host>` source label
+ * in the global plugin state (same prepare/install/activate/upsert
+ * transaction shape as the CLI install flow, implemented as a library
+ * function without going through the CLI layer).
+ */
+import type { PluginBootstrapFactoryEntryV1 } from "./bootstrap-factory-manifest.ts";
+import { type NodeZipPackageLimitsV1 } from "./node-package-install-host.ts";
+import { type PluginBootstrapDepsV1, type PluginBootstrapResultV1 } from "./plugin-bootstrap.ts";
+/** Environment variable disabling the startup bootstrap entirely (`off`). */
+export declare const AGENT_FORGE_PLUGIN_BOOTSTRAP_ENV_V1 = "AGENT_FORGE_PLUGIN_BOOTSTRAP";
+export interface NodePluginBootstrapOptionsV1 {
+    readonly agentDir: string;
+    readonly cwd: string;
+    /** Defaults to the frozen factory manifest. */
+    readonly manifest?: readonly PluginBootstrapFactoryEntryV1[];
+    /** Bare http(s) npm registry origin; forwarded to the acquisition host. */
+    readonly npmRegistry?: string;
+    /** npm registry bearer token; forwarded to the acquisition host. */
+    readonly npmToken?: string;
+    readonly limits?: NodeZipPackageLimitsV1;
+    /** Deterministic fetch replacement for tests. */
+    readonly fetch?: typeof globalThis.fetch;
+    readonly signal?: AbortSignal;
+    /** Full dependency override for deterministic tests; the env switch still applies. */
+    readonly deps?: PluginBootstrapDepsV1;
+}
+export type NodePluginBootstrapResultV1 = PluginBootstrapResultV1 & {
+    /** Present when the env switch short-circuited the run before any local comparison. */
+    readonly skipped?: "disabled";
+};
+/**
+ * Run the startup bootstrap for one agent directory. The function resolves
+ * with a structured result and never throws for per-plugin failures; only a
+ * wiring-level construction error propagates to the caller (main.ts guards
+ * startup with its own catch).
+ */
+export declare function runNodePluginBootstrapV1(options: NodePluginBootstrapOptionsV1): Promise<NodePluginBootstrapResultV1>;
+//# sourceMappingURL=node-plugin-bootstrap.d.ts.map

package/dist/plugins/ecosystem/node-plugin-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-plugin-bootstrap.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-plugin-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AASrF,OAAO,EAGN,KAAK,sBAAsB,EAC3B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,KAAK,qBAAqB,EAAE,KAAK,uBAAuB,EAAwB,MAAM,uBAAuB,CAAC;AAGvH,6EAA6E;AAC7E,eAAO,MAAM,mCAAmC,iCAAiC,CAAC;AAKlF,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAC7D,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IACzC,iDAAiD;IACjD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC;CACtC;AAED,MAAM,MAAM,2BAA2B,GAAG,uBAAuB,GAAG;IACnE,uFAAuF;IACvF,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC;CAC9B,CAAC;AAkCF;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC7C,OAAO,EAAE,4BAA4B,GACnC,OAAO,CAAC,2BAA2B,CAAC,CA+ItC","sourcesContent":["/**\n * Node wiring for the startup plugin bootstrap (design\n * `插件独立分发与启动装配设计.md` §4.4, §0.7).\n *\n * `AGENT_FORGE_PLUGIN_BOOTSTRAP=off` skips everything, including the local\n * comparison. The comparison dependency reads the global and project\n * plugin-state.json stores only — read-only, and it never constructs an HTTP\n * client, so an assembled environment starts offline (G3). Network objects\n * (npm acquisition host, install host) are built lazily inside the install\n * action and closed when the bootstrap finishes. Installs go through the\n * npm acquisition path exclusively and persist the `npm:<host>` source label\n * in the global plugin state (same prepare/install/activate/upsert\n * transaction shape as the CLI install flow, implemented as a library\n * function without going through the CLI layer).\n */\n\nimport { join } from \"node:path\";\nimport { CONFIG_DIR_NAME } from \"../../config.ts\";\nimport type { PluginBootstrapFactoryEntryV1 } from \"./bootstrap-factory-manifest.ts\";\nimport { BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1 } from \"./bootstrap-factory-manifest.ts\";\nimport {\n\tDEFAULT_PLUGIN_STATE_FILE_V1,\n\tdefaultPluginHostFactsV1,\n\tdefaultPluginInstallStoreDirectoryV1,\n\tprojectPluginScopeRefV1,\n} from \"./default-active-bindings.ts\";\nimport { createPluginInstallerV1, DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1, type PluginInstallerV1 } from \"./installer.ts\";\nimport {\n\tcreateNodePackageInstallHostV1,\n\ttype NodePackageInstallHostV1,\n\ttype NodeZipPackageLimitsV1,\n} from \"./node-package-install-host.ts\";\nimport { createNodePluginAcquisitionHostV1, type NodePluginAcquisitionHostV1 } from \"./node-plugin-acquisition-host.ts\";\nimport { type PluginBootstrapDepsV1, type PluginBootstrapResultV1, runPluginBootstrapV1 } from \"./plugin-bootstrap.ts\";\nimport { createPluginStateStoreV1, type PluginStateStoreV1 } from \"./state.ts\";\n\n/** Environment variable disabling the startup bootstrap entirely (`off`). */\nexport const AGENT_FORGE_PLUGIN_BOOTSTRAP_ENV_V1 = \"AGENT_FORGE_PLUGIN_BOOTSTRAP\";\n\n/** The only recognized disabling value; every other value (and absence) keeps bootstrap on. */\nconst PLUGIN_BOOTSTRAP_DISABLED_VALUE_V1 = \"off\";\n\nexport interface NodePluginBootstrapOptionsV1 {\n\treadonly agentDir: string;\n\treadonly cwd: string;\n\t/** Defaults to the frozen factory manifest. */\n\treadonly manifest?: readonly PluginBootstrapFactoryEntryV1[];\n\t/** Bare http(s) npm registry origin; forwarded to the acquisition host. */\n\treadonly npmRegistry?: string;\n\t/** npm registry bearer token; forwarded to the acquisition host. */\n\treadonly npmToken?: string;\n\treadonly limits?: NodeZipPackageLimitsV1;\n\t/** Deterministic fetch replacement for tests. */\n\treadonly fetch?: typeof globalThis.fetch;\n\treadonly signal?: AbortSignal;\n\t/** Full dependency override for deterministic tests; the env switch still applies. */\n\treadonly deps?: PluginBootstrapDepsV1;\n}\n\nexport type NodePluginBootstrapResultV1 = PluginBootstrapResultV1 & {\n\t/** Present when the env switch short-circuited the run before any local comparison. */\n\treadonly skipped?: \"disabled\";\n};\n\n/** Install-scoped boundaries; created lazily by the first install action. */\ninterface InstallSessionV1 {\n\treadonly acquisition: NodePluginAcquisitionHostV1;\n\treadonly installHost: NodePackageInstallHostV1;\n\treadonly installer: PluginInstallerV1;\n\treadonly stateStore: PluginStateStoreV1;\n}\n\nfunction readActiveVersions(\n\tstore: PluginStateStoreV1,\n\tscope: \"global\" | \"project\",\n\tscopeRef: string,\n\tsignal: AbortSignal | undefined,\n): Promise<ReadonlyMap<string, string>> {\n\treturn (async () => {\n\t\tconst result = await store.read({ ...(signal === undefined ? {} : { signal }) });\n\t\tif (result.status !== \"ok\" && result.status !== \"missing\")\n\t\t\tthrow new Error(\n\t\t\t\t`plugin state read failed (${result.diagnostics[0]?.code ?? result.status}) for the ${scope} scope`,\n\t\t\t);\n\t\tconst versions = new Map<string, string>();\n\t\tfor (const record of result.snapshot.records) {\n\t\t\tif (record.state.scope !== scope || record.state.scopeRef !== scopeRef) continue;\n\t\t\t// Enabled is deliberately not filtered: a disabled plugin still owns\n\t\t\t// its active installation record, and bootstrap never touches it (G5).\n\t\t\tif (record.state.lifecycle !== \"active\") continue;\n\t\t\tversions.set(record.pluginId, record.pluginVersion);\n\t\t}\n\t\treturn versions;\n\t})();\n}\n\n/**\n * Run the startup bootstrap for one agent directory. The function resolves\n * with a structured result and never throws for per-plugin failures; only a\n * wiring-level construction error propagates to the caller (main.ts guards\n * startup with its own catch).\n */\nexport async function runNodePluginBootstrapV1(\n\toptions: NodePluginBootstrapOptionsV1,\n): Promise<NodePluginBootstrapResultV1> {\n\tif (process.env[AGENT_FORGE_PLUGIN_BOOTSTRAP_ENV_V1]?.trim() === PLUGIN_BOOTSTRAP_DISABLED_VALUE_V1) {\n\t\treturn Object.freeze({\n\t\t\tversion: 1,\n\t\t\tstatus: \"succeeded\",\n\t\t\tactions: Object.freeze([]),\n\t\t\tdiagnostics: Object.freeze([]),\n\t\t\tdurationMs: 0,\n\t\t\tskipped: \"disabled\",\n\t\t});\n\t}\n\tif (options.deps !== undefined) {\n\t\treturn await runPluginBootstrapV1({\n\t\t\tmanifest: options.manifest ?? BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1,\n\t\t\tdeps: options.deps,\n\t\t});\n\t}\n\tlet session: InstallSessionV1 | undefined;\n\tconst ensureSession = async (): Promise<InstallSessionV1> => {\n\t\tif (session !== undefined) return session;\n\t\tconst acquisition = createNodePluginAcquisitionHostV1({\n\t\t\t...(options.npmRegistry === undefined ? {} : { npmRegistry: options.npmRegistry }),\n\t\t\t...(options.npmToken === undefined ? {} : { npmToken: options.npmToken }),\n\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t\t...(options.limits === undefined ? {} : { limits: options.limits }),\n\t\t});\n\t\tconst installHost = await createNodePackageInstallHostV1({\n\t\t\topenArtifact: (input) => acquisition.openArtifact(input),\n\t\t\tinstallationDirectory: defaultPluginInstallStoreDirectoryV1(options.agentDir),\n\t\t\tpersistence: \"persistent\",\n\t\t\tsupportedScopes: [\"global\", \"project\"],\n\t\t\t...(options.limits === undefined ? {} : { ...options.limits }),\n\t\t});\n\t\tsession = {\n\t\t\tacquisition,\n\t\t\tinstallHost,\n\t\t\tinstaller: createPluginInstallerV1({ host: installHost }),\n\t\t\tstateStore: createPluginStateStoreV1({ filePath: join(options.agentDir, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t};\n\t\treturn session;\n\t};\n\tconst deps: PluginBootstrapDepsV1 = {\n\t\tlistActive: async ({ signal }) => {\n\t\t\tconst globalVersions = readActiveVersions(\n\t\t\t\tcreatePluginStateStoreV1({ filePath: join(options.agentDir, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t\t\t\"global\",\n\t\t\t\tDEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\tconst projectVersions = readActiveVersions(\n\t\t\t\tcreatePluginStateStoreV1({ filePath: join(options.cwd, CONFIG_DIR_NAME, DEFAULT_PLUGIN_STATE_FILE_V1) }),\n\t\t\t\t\"project\",\n\t\t\t\tprojectPluginScopeRefV1(options.cwd),\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\tconst [globalResult, projectResult] = await Promise.all([globalVersions, projectVersions]);\n\t\t\t// Project precedence mirrors active-binding resolution: a project\n\t\t\t// installation shadows the same plugin id from the global scope.\n\t\t\treturn new Map([...globalResult, ...projectResult]);\n\t\t},\n\t\tinstallFromNpm: async ({ npmName, range, signal }) => {\n\t\t\tconst active = await ensureSession();\n\t\t\t// npm refs only (§0.7): scoped or plain names with the shared minimal\n\t\t\t// range subset; no github/gitee/url/local ref can be expressed here.\n\t\t\tconst ref = range === undefined ? npmName : `${npmName}@${range}`;\n\t\t\tconst acquired = await active.acquisition.resolvePackage({ ref, ...(signal === undefined ? {} : { signal }) });\n\t\t\tlet released = false;\n\t\t\tconst release = async (): Promise<void> => {\n\t\t\t\tif (released) return;\n\t\t\t\treleased = true;\n\t\t\t\tawait acquired.release();\n\t\t\t};\n\t\t\ttry {\n\t\t\t\tconst verified = active.installer.prepare({\n\t\t\t\t\tmanifest: acquired.manifest,\n\t\t\t\t\tsource: acquired.source,\n\t\t\t\t\thost: defaultPluginHostFactsV1(),\n\t\t\t\t});\n\t\t\t\tif (verified.status !== \"verified\")\n\t\t\t\t\tthrow new Error(`installer prepare rejected ${acquired.manifest.id}: ${verified.reason}`);\n\t\t\t\tconst installed = await active.installer.install({\n\t\t\t\t\trecord: verified.record,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\tartifact: acquired.artifact,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (installed.status !== \"succeeded\")\n\t\t\t\t\tthrow new Error(`plugin install failed (${installed.error.code}) for ${acquired.manifest.id}`);\n\t\t\t\tconst activated = await active.installer.activate({\n\t\t\t\t\tinstallation: installed.installation,\n\t\t\t\t\trecord: verified.record,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (activated.status !== \"succeeded\") {\n\t\t\t\t\tawait active.installer\n\t\t\t\t\t\t.remove({\n\t\t\t\t\t\t\tinstallation: installed.installation,\n\t\t\t\t\t\t\tscope: \"global\",\n\t\t\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => undefined);\n\t\t\t\t\tthrow new Error(`plugin activation failed (${activated.error.code}) for ${acquired.manifest.id}`);\n\t\t\t\t}\n\t\t\t\tconst persisted = await active.stateStore.upsert({\n\t\t\t\t\tinstallation: activated.installation,\n\t\t\t\t\tscope: \"global\",\n\t\t\t\t\tenabled: true,\n\t\t\t\t\tsource: acquired.source,\n\t\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t\t});\n\t\t\t\tif (persisted.status !== \"ok\") {\n\t\t\t\t\tawait active.installer\n\t\t\t\t\t\t.remove({\n\t\t\t\t\t\t\tinstallation: activated.installation,\n\t\t\t\t\t\t\tscope: \"global\",\n\t\t\t\t\t\t\tscopeRef: DEFAULT_GLOBAL_PLUGIN_SCOPE_REF_V1,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => undefined);\n\t\t\t\t\tthrow new Error(`plugin state persist failed (${persisted.status}) for ${acquired.manifest.id}`);\n\t\t\t\t}\n\t\t\t\treturn { pluginVersion: activated.installation.pluginVersion, source: acquired.source };\n\t\t\t} finally {\n\t\t\t\tawait release();\n\t\t\t}\n\t\t},\n\t\t...(options.signal === undefined ? {} : { signal: options.signal }),\n\t};\n\ttry {\n\t\treturn await runPluginBootstrapV1({\n\t\t\tmanifest: options.manifest ?? BOOTSTRAP_FACTORY_PLUGIN_MANIFEST_V1,\n\t\t\tdeps,\n\t\t});\n\t} finally {\n\t\tconst active = session;\n\t\tsession = undefined;\n\t\tif (active !== undefined) {\n\t\t\tawait active.installHost.close().catch(() => undefined);\n\t\t\tawait active.acquisition.close().catch(() => undefined);\n\t\t}\n\t}\n}\n"]}