@ai-agent-forge/agent-forge 0.85.0

package/dist/plugins/ecosystem/node-registry-source.js

@@ -0,0 +1,286 @@
+const NODE_HTTP_PLUGIN_REGISTRY_SOURCE_VERSION_V1 = 1;
+const DEFAULT_TIMEOUT_MS_V1 = 15_000;
+const MAX_TIMEOUT_MS_V1 = 120_000;
+const DEFAULT_MAX_RESPONSE_BYTES_V1 = 4 * 1024 * 1024;
+const MAX_RESPONSE_BYTES_V1 = 8 * 1024 * 1024;
+/**
+ * Deliberately does not retain transport exceptions or response bodies: callers
+ * must not turn registry diagnostics into a credential or path disclosure.
+ */
+export class NodeHttpPluginRegistrySourceErrorV1 extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = "NodeHttpPluginRegistrySourceErrorV1";
+        this.code = code;
+    }
+}
+function boundedPositive(value, fallback, maximum, label) {
+    const result = value ?? fallback;
+    if (!Number.isSafeInteger(result) || result <= 0 || result > maximum) {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_configuration", `${label} must be a positive integer at most ${maximum}`);
+    }
+    return result;
+}
+function allowedOrigin(value) {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_configuration", "Allowed registry origin is invalid");
+    }
+    if ((parsed.protocol !== "http:" && parsed.protocol !== "https:") || parsed.username || parsed.password) {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_configuration", "Allowed registry origin must be an http(s) origin without credentials");
+    }
+    if (parsed.pathname !== "/" || parsed.search !== "" || parsed.hash !== "") {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_configuration", "Allowed registry origin must not include a path, query, or fragment");
+    }
+    return parsed.origin;
+}
+function endpointUrl(value, origins) {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_configuration", "Plugin registry URL is invalid");
+    }
+    if ((parsed.protocol !== "http:" && parsed.protocol !== "https:") || parsed.username || parsed.password) {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_configuration", "Plugin registry URL must use http(s) without credentials");
+    }
+    if (parsed.search !== "" || parsed.hash !== "") {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_configuration", "Plugin registry URL must not include a query or fragment");
+    }
+    if (!origins.has(parsed.origin)) {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_configuration", "Plugin registry origin is not allowed");
+    }
+    return parsed;
+}
+function responseLength(response) {
+    const raw = response.headers.get("content-length");
+    if (raw === null)
+        return undefined;
+    if (!/^\d+$/u.test(raw)) {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_response", "Plugin registry response length is invalid");
+    }
+    const value = Number(raw);
+    if (!Number.isSafeInteger(value)) {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_response", "Plugin registry response length is invalid");
+    }
+    return value;
+}
+function isJsonResponse(response) {
+    const contentType = response.headers.get("content-type");
+    if (contentType === null)
+        return false;
+    const mediaType = contentType.split(";", 1)[0]?.trim().toLowerCase();
+    return mediaType === "application/json" || mediaType === "application/vnd.agent-forge.plugin-registry+json";
+}
+function requestController(parent, timeoutMs) {
+    const controller = new AbortController();
+    let timedOut = false;
+    const abort = () => controller.abort(parent?.reason);
+    if (parent?.aborted === true)
+        abort();
+    else
+        parent?.addEventListener("abort", abort, { once: true });
+    const timeout = setTimeout(() => {
+        timedOut = true;
+        controller.abort();
+    }, timeoutMs);
+    return {
+        signal: controller.signal,
+        timedOut: () => timedOut,
+        cleanup: () => {
+            clearTimeout(timeout);
+            parent?.removeEventListener("abort", abort);
+        },
+    };
+}
+function abortPromise(signal) {
+    let rejectAbort;
+    const promise = new Promise((_resolve, reject) => {
+        rejectAbort = () => reject(new DOMException("aborted", "AbortError"));
+        if (signal.aborted)
+            rejectAbort();
+        else
+            signal.addEventListener("abort", rejectAbort, { once: true });
+    });
+    return {
+        promise,
+        cleanup: () => {
+            if (rejectAbort !== undefined)
+                signal.removeEventListener("abort", rejectAbort);
+        },
+    };
+}
+async function awaitBeforeAbort(operation, signal) {
+    const abort = abortPromise(signal);
+    try {
+        return await Promise.race([operation, abort.promise]);
+    }
+    finally {
+        abort.cleanup();
+    }
+}
+function discardResponseBody(response) {
+    const responseBody = response?.body;
+    if (responseBody !== undefined && responseBody !== null) {
+        void responseBody.cancel().catch(() => undefined);
+    }
+}
+async function readBody(response, maxBytes, signal) {
+    if (response.body === null) {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_response", "Plugin registry response has no body");
+    }
+    const reader = response.body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        for (;;) {
+            if (signal.aborted)
+                throw new DOMException("aborted", "AbortError");
+            const item = await awaitBeforeAbort(reader.read(), signal);
+            if (item.done)
+                break;
+            total += item.value.byteLength;
+            if (total > maxBytes) {
+                throw new NodeHttpPluginRegistrySourceErrorV1("response_too_large", "Plugin registry response exceeds the configured size limit");
+            }
+            chunks.push(item.value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return bytes;
+}
+function parseDocument(bytes) {
+    let value;
+    try {
+        value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+    }
+    catch {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_response", "Plugin registry response is not valid JSON");
+    }
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_response", "Plugin registry document is invalid");
+    }
+    const document = value;
+    if (Object.keys(document).some((key) => key !== "version" && key !== "entries") ||
+        document.version !== 1 ||
+        !Array.isArray(document.entries)) {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_response", "Plugin registry document is invalid");
+    }
+    return document.entries;
+}
+function isAbortLike(error) {
+    return error instanceof DOMException && error.name === "AbortError";
+}
+function isCallerCancelled(signal) {
+    return signal?.aborted === true;
+}
+function sanitizedSourceError(error) {
+    const code = error.code;
+    if (code !== "cancelled" &&
+        code !== "invalid_configuration" &&
+        code !== "request_failed" &&
+        code !== "request_timed_out" &&
+        code !== "invalid_response" &&
+        code !== "response_too_large") {
+        return new NodeHttpPluginRegistrySourceErrorV1("request_failed", "Plugin registry request failed");
+    }
+    return new NodeHttpPluginRegistrySourceErrorV1(code, "Plugin registry request failed");
+}
+/**
+ * Creates a bounded, allowlisted HTTP registry reader. It only transports
+ * metadata to the existing registry verifier; package bytes, trust decisions,
+ * and installation remain separate host-owned capabilities.
+ */
+export function createNodeHttpPluginRegistrySourceV1(options) {
+    const transport = options.fetch ?? globalThis.fetch;
+    if (typeof transport !== "function") {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_configuration", "Node fetch is unavailable");
+    }
+    if (!Array.isArray(options.allowedOrigins) || options.allowedOrigins.length === 0) {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_configuration", "At least one allowed registry origin is required");
+    }
+    const origins = new Set(options.allowedOrigins.map(allowedOrigin));
+    const endpoint = endpointUrl(options.url, origins);
+    const timeoutMs = boundedPositive(options.requestTimeoutMs, DEFAULT_TIMEOUT_MS_V1, MAX_TIMEOUT_MS_V1, "requestTimeoutMs");
+    const maxResponseBytes = boundedPositive(options.maxResponseBytes, DEFAULT_MAX_RESPONSE_BYTES_V1, MAX_RESPONSE_BYTES_V1, "maxResponseBytes");
+    const userAgent = options.userAgent ?? "agent-forge-plugin-registry/1";
+    if (userAgent.length === 0 || userAgent.length > 256 || /[\r\n]/u.test(userAgent)) {
+        throw new NodeHttpPluginRegistrySourceErrorV1("invalid_configuration", "userAgent is invalid");
+    }
+    const source = endpoint.origin + endpoint.pathname;
+    return {
+        version: NODE_HTTP_PLUGIN_REGISTRY_SOURCE_VERSION_V1,
+        source,
+        list: async ({ signal } = {}) => {
+            if (isCallerCancelled(signal)) {
+                throw new NodeHttpPluginRegistrySourceErrorV1("cancelled", "Plugin registry request was cancelled");
+            }
+            const request = requestController(signal, timeoutMs);
+            let response;
+            try {
+                const transportResponse = Promise.resolve().then(() => {
+                    if (request.signal.aborted)
+                        throw new DOMException("aborted", "AbortError");
+                    return transport(endpoint.toString(), {
+                        method: "GET",
+                        headers: {
+                            accept: "application/vnd.agent-forge.plugin-registry+json, application/json",
+                            "user-agent": userAgent,
+                        },
+                        redirect: "error",
+                        signal: request.signal,
+                    });
+                });
+                void transportResponse.then((lateResponse) => {
+                    if (request.signal.aborted)
+                        discardResponseBody(lateResponse);
+                }, () => undefined);
+                const receivedResponse = await awaitBeforeAbort(transportResponse, request.signal);
+                response = receivedResponse;
+                if (receivedResponse.status < 200 || receivedResponse.status >= 300) {
+                    throw new NodeHttpPluginRegistrySourceErrorV1("request_failed", "Plugin registry request did not succeed");
+                }
+                if (!isJsonResponse(receivedResponse)) {
+                    throw new NodeHttpPluginRegistrySourceErrorV1("invalid_response", "Plugin registry response must be JSON");
+                }
+                const length = responseLength(receivedResponse);
+                if (length !== undefined && length > maxResponseBytes) {
+                    throw new NodeHttpPluginRegistrySourceErrorV1("response_too_large", "Plugin registry response exceeds the configured size limit");
+                }
+                return parseDocument(await readBody(receivedResponse, maxResponseBytes, request.signal));
+            }
+            catch (error) {
+                if (isCallerCancelled(signal)) {
+                    throw new NodeHttpPluginRegistrySourceErrorV1("cancelled", "Plugin registry request was cancelled");
+                }
+                if (request.timedOut()) {
+                    throw new NodeHttpPluginRegistrySourceErrorV1("request_timed_out", "Plugin registry request timed out");
+                }
+                if (error instanceof NodeHttpPluginRegistrySourceErrorV1)
+                    throw sanitizedSourceError(error);
+                if (isAbortLike(error)) {
+                    throw new NodeHttpPluginRegistrySourceErrorV1("cancelled", "Plugin registry request was cancelled");
+                }
+                throw new NodeHttpPluginRegistrySourceErrorV1("request_failed", "Plugin registry request failed");
+            }
+            finally {
+                request.cleanup();
+                discardResponseBody(response);
+            }
+        },
+    };
+}
+//# sourceMappingURL=node-registry-source.js.map

package/dist/plugins/ecosystem/node-registry-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-registry-source.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-registry-source.ts"],"names":[],"mappings":"AAEA,MAAM,2CAA2C,GAAG,CAAU,CAAC;AAC/D,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,6BAA6B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACtD,MAAM,qBAAqB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAU9C;;;GAGG;AACH,MAAM,OAAO,mCAAoC,SAAQ,KAAK;IACpD,IAAI,CAA0C;IAEvD,YAAY,IAA6C,EAAE,OAAe,EAAE;QAC3E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qCAAqC,CAAC;QAClD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAAA,CACjB;CACD;AAyBD,SAAS,eAAe,CAAC,KAAyB,EAAE,QAAgB,EAAE,OAAe,EAAE,KAAa,EAAU;IAC7G,MAAM,MAAM,GAAG,KAAK,IAAI,QAAQ,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;QACtE,MAAM,IAAI,mCAAmC,CAC5C,uBAAuB,EACvB,GAAG,KAAK,uCAAuC,OAAO,EAAE,CACxD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,aAAa,CAAC,KAAa,EAAU;IAC7C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,mCAAmC,CAAC,uBAAuB,EAAE,oCAAoC,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzG,MAAM,IAAI,mCAAmC,CAC5C,uBAAuB,EACvB,uEAAuE,CACvE,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC3E,MAAM,IAAI,mCAAmC,CAC5C,uBAAuB,EACvB,qEAAqE,CACrE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;AAAA,CACrB;AAED,SAAS,WAAW,CAAC,KAAmB,EAAE,OAA4B,EAAO;IAC5E,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,mCAAmC,CAAC,uBAAuB,EAAE,gCAAgC,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzG,MAAM,IAAI,mCAAmC,CAC5C,uBAAuB,EACvB,0DAA0D,CAC1D,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,mCAAmC,CAC5C,uBAAuB,EACvB,0DAA0D,CAC1D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,mCAAmC,CAAC,uBAAuB,EAAE,uCAAuC,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,cAAc,CAAC,QAAkB,EAAsB;IAC/D,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACnD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,mCAAmC,CAAC,kBAAkB,EAAE,4CAA4C,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,mCAAmC,CAAC,kBAAkB,EAAE,4CAA4C,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,cAAc,CAAC,QAAkB,EAAW;IACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACzD,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrE,OAAO,SAAS,KAAK,kBAAkB,IAAI,SAAS,KAAK,kDAAkD,CAAC;AAAA,CAC5G;AAED,SAAS,iBAAiB,CACzB,MAA+B,EAC/B,SAAiB,EAKhB;IACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI;QAAE,KAAK,EAAE,CAAC;;QACjC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;QAChC,QAAQ,GAAG,IAAI,CAAC;QAChB,UAAU,CAAC,KAAK,EAAE,CAAC;IAAA,CACnB,EAAE,SAAS,CAAC,CAAC;IACd,OAAO;QACN,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;QACxB,OAAO,EAAE,GAAG,EAAE,CAAC;YACd,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAAA,CAC5C;KACD,CAAC;AAAA,CACF;AAED,SAAS,YAAY,CAAC,MAAmB,EAAsE;IAC9G,IAAI,WAAqC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC;QACxD,WAAW,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,OAAO;YAAE,WAAW,EAAE,CAAC;;YAC7B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAAA,CACnE,CAAC,CAAC;IACH,OAAO;QACN,OAAO;QACP,OAAO,EAAE,GAAG,EAAE,CAAC;YACd,IAAI,WAAW,KAAK,SAAS;gBAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAAA,CAChF;KACD,CAAC;AAAA,CACF;AAED,KAAK,UAAU,gBAAgB,CAAI,SAAqB,EAAE,MAAmB,EAAc;IAC1F,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC;QACJ,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;YAAS,CAAC;QACV,KAAK,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;AAAA,CACD;AAED,SAAS,mBAAmB,CAAC,QAA8B,EAAQ;IAClE,MAAM,YAAY,GAAG,QAAQ,EAAE,IAAI,CAAC;IACpC,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACzD,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;AAAA,CACD;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB,EAAE,QAAgB,EAAE,MAAmB,EAAuB;IACvG,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,mCAAmC,CAAC,kBAAkB,EAAE,sCAAsC,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACJ,SAAS,CAAC;YACT,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;YAC3D,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,mCAAmC,CAC5C,oBAAoB,EACpB,4DAA4D,CAC5D,CAAC;YACH,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;YAAS,CAAC;QACV,MAAM,CAAC,WAAW,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,aAAa,CAAC,KAAiB,EAA+C;IACtF,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,mCAAmC,CAAC,kBAAkB,EAAE,4CAA4C,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,mCAAmC,CAAC,kBAAkB,EAAE,qCAAqC,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,IACC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,CAAC;QAC3E,QAAQ,CAAC,OAAO,KAAK,CAAC;QACtB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC/B,CAAC;QACF,MAAM,IAAI,mCAAmC,CAAC,kBAAkB,EAAE,qCAAqC,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,QAAQ,CAAC,OAAmD,CAAC;AAAA,CACpE;AAED,SAAS,WAAW,CAAC,KAAc,EAAW;IAC7C,OAAO,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;AAAA,CACpE;AAED,SAAS,iBAAiB,CAAC,MAA+B,EAAW;IACpE,OAAO,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;AAAA,CAChC;AAED,SAAS,oBAAoB,CAAC,KAA0C,EAAuC;IAC9G,MAAM,IAAI,GAAY,KAAK,CAAC,IAAI,CAAC;IACjC,IACC,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,uBAAuB;QAChC,IAAI,KAAK,gBAAgB;QACzB,IAAI,KAAK,mBAAmB;QAC5B,IAAI,KAAK,kBAAkB;QAC3B,IAAI,KAAK,oBAAoB,EAC5B,CAAC;QACF,OAAO,IAAI,mCAAmC,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,IAAI,mCAAmC,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;AAAA,CACvF;AAED;;;;GAIG;AACH,MAAM,UAAU,oCAAoC,CACnD,OAA8C,EACb;IACjC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACpD,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,IAAI,mCAAmC,CAAC,uBAAuB,EAAE,2BAA2B,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,mCAAmC,CAC5C,uBAAuB,EACvB,kDAAkD,CAClD,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,eAAe,CAChC,OAAO,CAAC,gBAAgB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,CAClB,CAAC;IACF,MAAM,gBAAgB,GAAG,eAAe,CACvC,OAAO,CAAC,gBAAgB,EACxB,6BAA6B,EAC7B,qBAAqB,EACrB,kBAAkB,CAClB,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,+BAA+B,CAAC;IACvE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,mCAAmC,CAAC,uBAAuB,EAAE,sBAAsB,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAEnD,OAAO;QACN,OAAO,EAAE,2CAA2C;QACpD,MAAM;QACN,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;YAChC,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,mCAAmC,CAAC,WAAW,EAAE,uCAAuC,CAAC,CAAC;YACrG,CAAC;YACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACrD,IAAI,QAA8B,CAAC;YACnC,IAAI,CAAC;gBACJ,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;oBACtD,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;wBAAE,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;oBAC5E,OAAO,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE;wBACrC,MAAM,EAAE,KAAK;wBACb,OAAO,EAAE;4BACR,MAAM,EAAE,oEAAoE;4BAC5E,YAAY,EAAE,SAAS;yBACvB;wBACD,QAAQ,EAAE,OAAO;wBACjB,MAAM,EAAE,OAAO,CAAC,MAAM;qBACtB,CAAC,CAAC;gBAAA,CACH,CAAC,CAAC;gBACH,KAAK,iBAAiB,CAAC,IAAI,CAC1B,CAAC,YAAY,EAAE,EAAE,CAAC;oBACjB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;wBAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;gBAAA,CAC9D,EACD,GAAG,EAAE,CAAC,SAAS,CACf,CAAC;gBACF,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBACnF,QAAQ,GAAG,gBAAgB,CAAC;gBAC5B,IAAI,gBAAgB,CAAC,MAAM,GAAG,GAAG,IAAI,gBAAgB,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;oBACrE,MAAM,IAAI,mCAAmC,CAC5C,gBAAgB,EAChB,yCAAyC,CACzC,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBACvC,MAAM,IAAI,mCAAmC,CAC5C,kBAAkB,EAClB,uCAAuC,CACvC,CAAC;gBACH,CAAC;gBACD,MAAM,MAAM,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC;gBAChD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,GAAG,gBAAgB,EAAE,CAAC;oBACvD,MAAM,IAAI,mCAAmC,CAC5C,oBAAoB,EACpB,4DAA4D,CAC5D,CAAC;gBACH,CAAC;gBACD,OAAO,aAAa,CAAC,MAAM,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC/B,MAAM,IAAI,mCAAmC,CAAC,WAAW,EAAE,uCAAuC,CAAC,CAAC;gBACrG,CAAC;gBACD,IAAI,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;oBACxB,MAAM,IAAI,mCAAmC,CAAC,mBAAmB,EAAE,mCAAmC,CAAC,CAAC;gBACzG,CAAC;gBACD,IAAI,KAAK,YAAY,mCAAmC;oBAAE,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBAC5F,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxB,MAAM,IAAI,mCAAmC,CAAC,WAAW,EAAE,uCAAuC,CAAC,CAAC;gBACrG,CAAC;gBACD,MAAM,IAAI,mCAAmC,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC;YACnG,CAAC;oBAAS,CAAC;gBACV,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;QAAA,CACD;KACD,CAAC;AAAA,CACF","sourcesContent":["import type { PluginRegistryManifestEnvelopeV1, PluginRegistrySourceV1 } from \"./registry.ts\";\n\nconst NODE_HTTP_PLUGIN_REGISTRY_SOURCE_VERSION_V1 = 1 as const;\nconst DEFAULT_TIMEOUT_MS_V1 = 15_000;\nconst MAX_TIMEOUT_MS_V1 = 120_000;\nconst DEFAULT_MAX_RESPONSE_BYTES_V1 = 4 * 1024 * 1024;\nconst MAX_RESPONSE_BYTES_V1 = 8 * 1024 * 1024;\n\nexport type NodeHttpPluginRegistrySourceErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_configuration\"\n\t| \"request_failed\"\n\t| \"request_timed_out\"\n\t| \"invalid_response\"\n\t| \"response_too_large\";\n\n/**\n * Deliberately does not retain transport exceptions or response bodies: callers\n * must not turn registry diagnostics into a credential or path disclosure.\n */\nexport class NodeHttpPluginRegistrySourceErrorV1 extends Error {\n\treadonly code: NodeHttpPluginRegistrySourceErrorCodeV1;\n\n\tconstructor(code: NodeHttpPluginRegistrySourceErrorCodeV1, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeHttpPluginRegistrySourceErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface NodeHttpPluginRegistrySourceOptionsV1 {\n\t/** Absolute endpoint returning the versioned JSON registry document. */\n\treadonly url: string | URL;\n\t/** Exact http(s) origins the host has intentionally allowed. */\n\treadonly allowedOrigins: readonly string[];\n\t/** Real fetch or deterministic test replacement. */\n\treadonly fetch?: typeof globalThis.fetch;\n\treadonly requestTimeoutMs?: number;\n\treadonly maxResponseBytes?: number;\n\treadonly userAgent?: string;\n}\n\nexport interface NodeHttpPluginRegistrySourceV1 extends PluginRegistrySourceV1 {\n\treadonly version: typeof NODE_HTTP_PLUGIN_REGISTRY_SOURCE_VERSION_V1;\n\t/** Sanitized endpoint identity: never contains credentials, query, or fragment. */\n\treadonly source: string;\n}\n\ninterface RegistryDocumentV1 {\n\treadonly version: 1;\n\treadonly entries: readonly PluginRegistryManifestEnvelopeV1[];\n}\n\nfunction boundedPositive(value: number | undefined, fallback: number, maximum: number, label: string): number {\n\tconst result = value ?? fallback;\n\tif (!Number.isSafeInteger(result) || result <= 0 || result > maximum) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t`${label} must be a positive integer at most ${maximum}`,\n\t\t);\n\t}\n\treturn result;\n}\n\nfunction allowedOrigin(value: string): string {\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(value);\n\t} catch {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_configuration\", \"Allowed registry origin is invalid\");\n\t}\n\tif ((parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") || parsed.username || parsed.password) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t\"Allowed registry origin must be an http(s) origin without credentials\",\n\t\t);\n\t}\n\tif (parsed.pathname !== \"/\" || parsed.search !== \"\" || parsed.hash !== \"\") {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t\"Allowed registry origin must not include a path, query, or fragment\",\n\t\t);\n\t}\n\treturn parsed.origin;\n}\n\nfunction endpointUrl(value: string | URL, origins: ReadonlySet<string>): URL {\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(value);\n\t} catch {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_configuration\", \"Plugin registry URL is invalid\");\n\t}\n\tif ((parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") || parsed.username || parsed.password) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t\"Plugin registry URL must use http(s) without credentials\",\n\t\t);\n\t}\n\tif (parsed.search !== \"\" || parsed.hash !== \"\") {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t\"Plugin registry URL must not include a query or fragment\",\n\t\t);\n\t}\n\tif (!origins.has(parsed.origin)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_configuration\", \"Plugin registry origin is not allowed\");\n\t}\n\treturn parsed;\n}\n\nfunction responseLength(response: Response): number | undefined {\n\tconst raw = response.headers.get(\"content-length\");\n\tif (raw === null) return undefined;\n\tif (!/^\\d+$/u.test(raw)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", \"Plugin registry response length is invalid\");\n\t}\n\tconst value = Number(raw);\n\tif (!Number.isSafeInteger(value)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", \"Plugin registry response length is invalid\");\n\t}\n\treturn value;\n}\n\nfunction isJsonResponse(response: Response): boolean {\n\tconst contentType = response.headers.get(\"content-type\");\n\tif (contentType === null) return false;\n\tconst mediaType = contentType.split(\";\", 1)[0]?.trim().toLowerCase();\n\treturn mediaType === \"application/json\" || mediaType === \"application/vnd.agent-forge.plugin-registry+json\";\n}\n\nfunction requestController(\n\tparent: AbortSignal | undefined,\n\ttimeoutMs: number,\n): {\n\treadonly signal: AbortSignal;\n\treadonly timedOut: () => boolean;\n\treadonly cleanup: () => void;\n} {\n\tconst controller = new AbortController();\n\tlet timedOut = false;\n\tconst abort = () => controller.abort(parent?.reason);\n\tif (parent?.aborted === true) abort();\n\telse parent?.addEventListener(\"abort\", abort, { once: true });\n\tconst timeout = setTimeout(() => {\n\t\ttimedOut = true;\n\t\tcontroller.abort();\n\t}, timeoutMs);\n\treturn {\n\t\tsignal: controller.signal,\n\t\ttimedOut: () => timedOut,\n\t\tcleanup: () => {\n\t\t\tclearTimeout(timeout);\n\t\t\tparent?.removeEventListener(\"abort\", abort);\n\t\t},\n\t};\n}\n\nfunction abortPromise(signal: AbortSignal): { readonly promise: Promise<never>; readonly cleanup: () => void } {\n\tlet rejectAbort: (() => void) | undefined;\n\tconst promise = new Promise<never>((_resolve, reject) => {\n\t\trejectAbort = () => reject(new DOMException(\"aborted\", \"AbortError\"));\n\t\tif (signal.aborted) rejectAbort();\n\t\telse signal.addEventListener(\"abort\", rejectAbort, { once: true });\n\t});\n\treturn {\n\t\tpromise,\n\t\tcleanup: () => {\n\t\t\tif (rejectAbort !== undefined) signal.removeEventListener(\"abort\", rejectAbort);\n\t\t},\n\t};\n}\n\nasync function awaitBeforeAbort<T>(operation: Promise<T>, signal: AbortSignal): Promise<T> {\n\tconst abort = abortPromise(signal);\n\ttry {\n\t\treturn await Promise.race([operation, abort.promise]);\n\t} finally {\n\t\tabort.cleanup();\n\t}\n}\n\nfunction discardResponseBody(response: Response | undefined): void {\n\tconst responseBody = response?.body;\n\tif (responseBody !== undefined && responseBody !== null) {\n\t\tvoid responseBody.cancel().catch(() => undefined);\n\t}\n}\n\nasync function readBody(response: Response, maxBytes: number, signal: AbortSignal): Promise<Uint8Array> {\n\tif (response.body === null) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", \"Plugin registry response has no body\");\n\t}\n\tconst reader = response.body.getReader();\n\tconst chunks: Uint8Array[] = [];\n\tlet total = 0;\n\ttry {\n\t\tfor (;;) {\n\t\t\tif (signal.aborted) throw new DOMException(\"aborted\", \"AbortError\");\n\t\t\tconst item = await awaitBeforeAbort(reader.read(), signal);\n\t\t\tif (item.done) break;\n\t\t\ttotal += item.value.byteLength;\n\t\t\tif (total > maxBytes) {\n\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\t\t\"response_too_large\",\n\t\t\t\t\t\"Plugin registry response exceeds the configured size limit\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tchunks.push(item.value);\n\t\t}\n\t} finally {\n\t\treader.releaseLock();\n\t}\n\tconst bytes = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const chunk of chunks) {\n\t\tbytes.set(chunk, offset);\n\t\toffset += chunk.byteLength;\n\t}\n\treturn bytes;\n}\n\nfunction parseDocument(bytes: Uint8Array): readonly PluginRegistryManifestEnvelopeV1[] {\n\tlet value: unknown;\n\ttry {\n\t\tvalue = JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes));\n\t} catch {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", \"Plugin registry response is not valid JSON\");\n\t}\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", \"Plugin registry document is invalid\");\n\t}\n\tconst document = value as Record<string, unknown>;\n\tif (\n\t\tObject.keys(document).some((key) => key !== \"version\" && key !== \"entries\") ||\n\t\tdocument.version !== 1 ||\n\t\t!Array.isArray(document.entries)\n\t) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_response\", \"Plugin registry document is invalid\");\n\t}\n\treturn document.entries as unknown as RegistryDocumentV1[\"entries\"];\n}\n\nfunction isAbortLike(error: unknown): boolean {\n\treturn error instanceof DOMException && error.name === \"AbortError\";\n}\n\nfunction isCallerCancelled(signal: AbortSignal | undefined): boolean {\n\treturn signal?.aborted === true;\n}\n\nfunction sanitizedSourceError(error: NodeHttpPluginRegistrySourceErrorV1): NodeHttpPluginRegistrySourceErrorV1 {\n\tconst code: unknown = error.code;\n\tif (\n\t\tcode !== \"cancelled\" &&\n\t\tcode !== \"invalid_configuration\" &&\n\t\tcode !== \"request_failed\" &&\n\t\tcode !== \"request_timed_out\" &&\n\t\tcode !== \"invalid_response\" &&\n\t\tcode !== \"response_too_large\"\n\t) {\n\t\treturn new NodeHttpPluginRegistrySourceErrorV1(\"request_failed\", \"Plugin registry request failed\");\n\t}\n\treturn new NodeHttpPluginRegistrySourceErrorV1(code, \"Plugin registry request failed\");\n}\n\n/**\n * Creates a bounded, allowlisted HTTP registry reader. It only transports\n * metadata to the existing registry verifier; package bytes, trust decisions,\n * and installation remain separate host-owned capabilities.\n */\nexport function createNodeHttpPluginRegistrySourceV1(\n\toptions: NodeHttpPluginRegistrySourceOptionsV1,\n): NodeHttpPluginRegistrySourceV1 {\n\tconst transport = options.fetch ?? globalThis.fetch;\n\tif (typeof transport !== \"function\") {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_configuration\", \"Node fetch is unavailable\");\n\t}\n\tif (!Array.isArray(options.allowedOrigins) || options.allowedOrigins.length === 0) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t\"At least one allowed registry origin is required\",\n\t\t);\n\t}\n\tconst origins = new Set(options.allowedOrigins.map(allowedOrigin));\n\tconst endpoint = endpointUrl(options.url, origins);\n\tconst timeoutMs = boundedPositive(\n\t\toptions.requestTimeoutMs,\n\t\tDEFAULT_TIMEOUT_MS_V1,\n\t\tMAX_TIMEOUT_MS_V1,\n\t\t\"requestTimeoutMs\",\n\t);\n\tconst maxResponseBytes = boundedPositive(\n\t\toptions.maxResponseBytes,\n\t\tDEFAULT_MAX_RESPONSE_BYTES_V1,\n\t\tMAX_RESPONSE_BYTES_V1,\n\t\t\"maxResponseBytes\",\n\t);\n\tconst userAgent = options.userAgent ?? \"agent-forge-plugin-registry/1\";\n\tif (userAgent.length === 0 || userAgent.length > 256 || /[\\r\\n]/u.test(userAgent)) {\n\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"invalid_configuration\", \"userAgent is invalid\");\n\t}\n\tconst source = endpoint.origin + endpoint.pathname;\n\n\treturn {\n\t\tversion: NODE_HTTP_PLUGIN_REGISTRY_SOURCE_VERSION_V1,\n\t\tsource,\n\t\tlist: async ({ signal } = {}) => {\n\t\t\tif (isCallerCancelled(signal)) {\n\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"cancelled\", \"Plugin registry request was cancelled\");\n\t\t\t}\n\t\t\tconst request = requestController(signal, timeoutMs);\n\t\t\tlet response: Response | undefined;\n\t\t\ttry {\n\t\t\t\tconst transportResponse = Promise.resolve().then(() => {\n\t\t\t\t\tif (request.signal.aborted) throw new DOMException(\"aborted\", \"AbortError\");\n\t\t\t\t\treturn transport(endpoint.toString(), {\n\t\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\t\theaders: {\n\t\t\t\t\t\t\taccept: \"application/vnd.agent-forge.plugin-registry+json, application/json\",\n\t\t\t\t\t\t\t\"user-agent\": userAgent,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tredirect: \"error\",\n\t\t\t\t\t\tsignal: request.signal,\n\t\t\t\t\t});\n\t\t\t\t});\n\t\t\t\tvoid transportResponse.then(\n\t\t\t\t\t(lateResponse) => {\n\t\t\t\t\t\tif (request.signal.aborted) discardResponseBody(lateResponse);\n\t\t\t\t\t},\n\t\t\t\t\t() => undefined,\n\t\t\t\t);\n\t\t\t\tconst receivedResponse = await awaitBeforeAbort(transportResponse, request.signal);\n\t\t\t\tresponse = receivedResponse;\n\t\t\t\tif (receivedResponse.status < 200 || receivedResponse.status >= 300) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\t\t\t\"request_failed\",\n\t\t\t\t\t\t\"Plugin registry request did not succeed\",\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tif (!isJsonResponse(receivedResponse)) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\t\t\t\"invalid_response\",\n\t\t\t\t\t\t\"Plugin registry response must be JSON\",\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst length = responseLength(receivedResponse);\n\t\t\t\tif (length !== undefined && length > maxResponseBytes) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\n\t\t\t\t\t\t\"response_too_large\",\n\t\t\t\t\t\t\"Plugin registry response exceeds the configured size limit\",\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\treturn parseDocument(await readBody(receivedResponse, maxResponseBytes, request.signal));\n\t\t\t} catch (error) {\n\t\t\t\tif (isCallerCancelled(signal)) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"cancelled\", \"Plugin registry request was cancelled\");\n\t\t\t\t}\n\t\t\t\tif (request.timedOut()) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"request_timed_out\", \"Plugin registry request timed out\");\n\t\t\t\t}\n\t\t\t\tif (error instanceof NodeHttpPluginRegistrySourceErrorV1) throw sanitizedSourceError(error);\n\t\t\t\tif (isAbortLike(error)) {\n\t\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"cancelled\", \"Plugin registry request was cancelled\");\n\t\t\t\t}\n\t\t\t\tthrow new NodeHttpPluginRegistrySourceErrorV1(\"request_failed\", \"Plugin registry request failed\");\n\t\t\t} finally {\n\t\t\t\trequest.cleanup();\n\t\t\t\tdiscardResponseBody(response);\n\t\t\t}\n\t\t},\n\t};\n}\n"]}

package/dist/plugins/ecosystem/node-release-package-source.d.ts

@@ -0,0 +1,47 @@
+export type NodeReleasePackageSourceErrorCodeV1 = "cancelled" | "invalid_configuration" | "request_failed" | "request_timed_out" | "invalid_response" | "response_too_large" | "release_not_found" | "release_asset_not_found" | "release_asset_ambiguous" | "rate_limited";
+export declare class NodeReleasePackageSourceErrorV1 extends Error {
+    readonly code: NodeReleasePackageSourceErrorCodeV1;
+    /** Unix epoch seconds advertised by `X-RateLimit-Reset`; present only for `rate_limited`. */
+    readonly resetEpochSeconds?: number;
+    constructor(code: NodeReleasePackageSourceErrorCodeV1, message: string, options?: {
+        readonly resetEpochSeconds?: number;
+    });
+}
+export interface NodeReleasePackageSourceOptionsV1 {
+    /** Bare http(s) GitHub API origin; defaults to `https://api.github.com`. */
+    readonly githubApiOrigin?: string;
+    /** Bare http(s) Gitee API origin; defaults to `https://gitee.com/api/v5`. */
+    readonly giteeApiOrigin?: string;
+    /** Optional GitHub API token sent as a bearer header. */
+    readonly githubToken?: string;
+    /** Optional Gitee API token sent as an `access_token` query parameter. */
+    readonly giteeToken?: string;
+    /** Real fetch or a deterministic test replacement. */
+    readonly fetch?: typeof globalThis.fetch;
+    readonly requestTimeoutMs?: number;
+    readonly maxResponseBytes?: number;
+    readonly maxAssetBytes?: number;
+    readonly maxRedirects?: number;
+    readonly userAgent?: string;
+}
+export interface NodeReleaseAssetDownloadV1 {
+    readonly bytes: Uint8Array;
+    readonly mediaType: "application/zip" | "application/gzip";
+    readonly sha256Hex: string;
+    /** `github:<owner>/<repo>@<tag|latest>` or the `gitee:` equivalent. */
+    readonly sourceLabel: string;
+}
+export interface NodeReleasePackageSourceV1 {
+    readonly version: 1;
+    readonly downloadReleaseAsset: (input: {
+        readonly kind: "github" | "gitee";
+        readonly owner: string;
+        readonly repo: string;
+        readonly tag?: string;
+        readonly expectedDigestHex?: string;
+        readonly signal?: AbortSignal;
+    }) => Promise<NodeReleaseAssetDownloadV1>;
+}
+/** Create the bounded GitHub/Gitee release reader. */
+export declare function createNodeReleasePackageSourceV1(options?: NodeReleasePackageSourceOptionsV1): NodeReleasePackageSourceV1;
+//# sourceMappingURL=node-release-package-source.d.ts.map

package/dist/plugins/ecosystem/node-release-package-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-release-package-source.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-release-package-source.ts"],"names":[],"mappings":"AA8BA,MAAM,MAAM,mCAAmC,GAC5C,WAAW,GACX,uBAAuB,GACvB,gBAAgB,GAChB,mBAAmB,GACnB,kBAAkB,GAClB,oBAAoB,GACpB,mBAAmB,GACnB,yBAAyB,GACzB,yBAAyB,GACzB,cAAc,CAAC;AAElB,qBAAa,+BAAgC,SAAQ,KAAK;IACzD,QAAQ,CAAC,IAAI,EAAE,mCAAmC,CAAC;IACnD,6FAA6F;IAC7F,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAEpC,YACC,IAAI,EAAE,mCAAmC,EACzC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,EAMjD;CACD;AAED,MAAM,WAAW,iCAAiC;IACjD,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,6EAA6E;IAC7E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,yDAAyD;IACzD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,sDAAsD;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,GAAG,kBAAkB,CAAC;IAC3D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE;QACtC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;QAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;CAC1C;AAwND,sDAAsD;AACtD,wBAAgB,gCAAgC,CAC/C,OAAO,GAAE,iCAAsC,GAC7C,0BAA0B,CAsJ5B","sourcesContent":["import { downloadNodeUrlPackageV1 } from \"./node-url-package-source.ts\";\n\n/**\n * GitHub/Gitee release plugin package source (design\n * `插件独立分发与启动装配设计.md` §4.6 \"GitHub\"/\"Gitee\" rows). Two-step\n * protocol: resolve one release through the repo's release API — the exact\n * tag endpoint when a tag is given, otherwise the first non-draft entry of\n * the first releases page in API order (no client-side sorting) — then pick\n * the release's single `.zip`/`.tgz` asset and download it with the same\n * bounded http(s) semantics as custom URL packages (redirect-per-hop, budget,\n * timeout, optional strong sha256). Zero or multiple matching assets are\n * explicit structured errors listing the asset names; nothing is guessed.\n * Authentication is optional: GitHub uses an `Authorization: Bearer` header,\n * Gitee an `access_token` query parameter. Anonymous rate limits (403/429\n * with `X-RateLimit-Remaining: 0`, or any 429) surface as `rate_limited`\n * carrying the advertised `X-RateLimit-Reset` epoch; there is no retry.\n */\n\nconst DEFAULT_GITHUB_API_ORIGIN_V1 = \"https://api.github.com\";\nconst DEFAULT_GITEE_API_ORIGIN_V1 = \"https://gitee.com/api/v5\";\nconst DEFAULT_TIMEOUT_MS_V1 = 15_000;\nconst MAX_TIMEOUT_MS_V1 = 120_000;\nconst DEFAULT_MAX_RESPONSE_BYTES_V1 = 8 * 1024 * 1024;\nconst MAX_RESPONSE_BYTES_V1 = 16 * 1024 * 1024;\nconst DEFAULT_MAX_ASSET_BYTES_V1 = 128 * 1024 * 1024;\nconst MAX_ASSET_BYTES_V1 = 512 * 1024 * 1024;\nconst DEFAULT_REDIRECTS_V1 = 3;\nconst MAX_REDIRECTS_V1 = 5;\nconst REDIRECT_STATUS = new Set([301, 302, 303, 307, 308]);\n\nexport type NodeReleasePackageSourceErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_configuration\"\n\t| \"request_failed\"\n\t| \"request_timed_out\"\n\t| \"invalid_response\"\n\t| \"response_too_large\"\n\t| \"release_not_found\"\n\t| \"release_asset_not_found\"\n\t| \"release_asset_ambiguous\"\n\t| \"rate_limited\";\n\nexport class NodeReleasePackageSourceErrorV1 extends Error {\n\treadonly code: NodeReleasePackageSourceErrorCodeV1;\n\t/** Unix epoch seconds advertised by `X-RateLimit-Reset`; present only for `rate_limited`. */\n\treadonly resetEpochSeconds?: number;\n\n\tconstructor(\n\t\tcode: NodeReleasePackageSourceErrorCodeV1,\n\t\tmessage: string,\n\t\toptions?: { readonly resetEpochSeconds?: number },\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeReleasePackageSourceErrorV1\";\n\t\tthis.code = code;\n\t\tif (options?.resetEpochSeconds !== undefined) this.resetEpochSeconds = options.resetEpochSeconds;\n\t}\n}\n\nexport interface NodeReleasePackageSourceOptionsV1 {\n\t/** Bare http(s) GitHub API origin; defaults to `https://api.github.com`. */\n\treadonly githubApiOrigin?: string;\n\t/** Bare http(s) Gitee API origin; defaults to `https://gitee.com/api/v5`. */\n\treadonly giteeApiOrigin?: string;\n\t/** Optional GitHub API token sent as a bearer header. */\n\treadonly githubToken?: string;\n\t/** Optional Gitee API token sent as an `access_token` query parameter. */\n\treadonly giteeToken?: string;\n\t/** Real fetch or a deterministic test replacement. */\n\treadonly fetch?: typeof globalThis.fetch;\n\treadonly requestTimeoutMs?: number;\n\treadonly maxResponseBytes?: number;\n\treadonly maxAssetBytes?: number;\n\treadonly maxRedirects?: number;\n\treadonly userAgent?: string;\n}\n\nexport interface NodeReleaseAssetDownloadV1 {\n\treadonly bytes: Uint8Array;\n\treadonly mediaType: \"application/zip\" | \"application/gzip\";\n\treadonly sha256Hex: string;\n\t/** `github:<owner>/<repo>@<tag|latest>` or the `gitee:` equivalent. */\n\treadonly sourceLabel: string;\n}\n\nexport interface NodeReleasePackageSourceV1 {\n\treadonly version: 1;\n\treadonly downloadReleaseAsset: (input: {\n\t\treadonly kind: \"github\" | \"gitee\";\n\t\treadonly owner: string;\n\t\treadonly repo: string;\n\t\treadonly tag?: string;\n\t\treadonly expectedDigestHex?: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<NodeReleaseAssetDownloadV1>;\n}\n\ninterface ReleaseAssetShapeV1 {\n\treadonly name?: unknown;\n\treadonly browser_download_url?: unknown;\n}\n\ninterface ReleaseShapeV1 {\n\treadonly draft?: unknown;\n\treadonly assets?: unknown;\n}\n\nfunction boundedPositive(value: number | undefined, fallback: number, maximum: number, label: string): number {\n\tconst result = value ?? fallback;\n\tif (!Number.isSafeInteger(result) || result <= 0 || result > maximum)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t`${label} must be a positive integer at most ${maximum}`,\n\t\t);\n\treturn result;\n}\n\nfunction boundedToken(value: string | undefined, label: string): string | undefined {\n\tif (value === undefined) return undefined;\n\tif (value.length === 0 || value.length > 4096 || /[\\r\\n\\s]/u.test(value))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_configuration\", `${label} is invalid`);\n\treturn value;\n}\n\nfunction apiOrigin(value: string, label: string): { readonly origin: string; readonly pathPrefix: string } {\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(value);\n\t} catch {\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_configuration\", `${label} is invalid`);\n\t}\n\tif (\n\t\t(parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") ||\n\t\tparsed.username !== \"\" ||\n\t\tparsed.password !== \"\"\n\t)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t`${label} must be http(s) without credentials`,\n\t\t);\n\tif (parsed.search !== \"\" || parsed.hash !== \"\")\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t`${label} must not include a query or fragment`,\n\t\t);\n\t// The Gitee default origin carries the `/api/v5` path prefix. The prefix is\n\t// kept as a plain string because a URL normalizes an empty pathname back\n\t// to \"/\", which would reintroduce a double slash when joining endpoints.\n\tconst trimmed = parsed.pathname.replace(/\\/+$/u, \"\");\n\treturn { origin: parsed.origin, pathPrefix: trimmed === \"\" || trimmed === \"/\" ? \"\" : trimmed.replace(/^\\//u, \"\") };\n}\n\nfunction jsonBytes(value: Uint8Array): unknown {\n\ttry {\n\t\treturn JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(value));\n\t} catch {\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release API response is not valid JSON\");\n\t}\n}\n\nfunction parseReleaseList(bytes: Uint8Array): readonly ReleaseShapeV1[] {\n\tconst value = jsonBytes(bytes);\n\tif (!Array.isArray(value))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release API response is not a release list\");\n\treturn value as readonly ReleaseShapeV1[];\n}\n\nfunction parseReleaseObject(bytes: Uint8Array): ReleaseShapeV1 {\n\tconst value = jsonBytes(bytes);\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release API response is not a release object\");\n\treturn value as ReleaseShapeV1;\n}\n\n/** First non-draft entry in API order; the array itself is the ordering contract. */\nfunction firstPublishedRelease(releases: readonly ReleaseShapeV1[]): ReleaseShapeV1 {\n\tconst published = releases.find((release) => release.draft !== true);\n\tif (published === undefined)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"release_not_found\", \"repo has no published release\");\n\treturn published;\n}\n\ninterface ReleaseAssetNameV1 {\n\treadonly name: string;\n\treadonly url: unknown;\n}\n\n/** Assets with a usable name; entries without a string name are ignored as API noise. */\nfunction namedAssets(release: ReleaseShapeV1): readonly ReleaseAssetNameV1[] {\n\tif (release.assets === undefined) return [];\n\tif (!Array.isArray(release.assets))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release assets are invalid\");\n\tconst entries: ReleaseAssetNameV1[] = [];\n\tfor (const asset of release.assets) {\n\t\tif (typeof asset !== \"object\" || asset === null) continue;\n\t\tconst shape = asset as ReleaseAssetShapeV1;\n\t\tif (typeof shape.name !== \"string\" || shape.name.length === 0) continue;\n\t\tentries.push({ name: shape.name, url: shape.browser_download_url });\n\t}\n\treturn entries;\n}\n\nfunction isPackageAssetName(name: string): boolean {\n\tconst value = name.toLowerCase();\n\treturn value.endsWith(\".zip\") || value.endsWith(\".tgz\");\n}\n\n/** Select the release's single `.zip`/`.tgz` asset and return its download URL. */\nfunction selectPackageAssetUrl(release: ReleaseShapeV1): string {\n\tconst assets = namedAssets(release);\n\tconst candidates = assets.filter((asset) => isPackageAssetName(asset.name));\n\tconst assetNames = assets.map((asset) => asset.name).join(\", \");\n\tif (candidates.length === 0)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"release_asset_not_found\",\n\t\t\tassetNames.length === 0 ? \"release has no assets\" : `assets: ${assetNames}`,\n\t\t);\n\tif (candidates.length > 1)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"release_asset_ambiguous\",\n\t\t\t`candidates: ${candidates.map((asset) => asset.name).join(\", \")}`,\n\t\t);\n\tconst chosen = candidates[0]!;\n\tif (typeof chosen.url !== \"string\" || chosen.url.length === 0)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release asset has no download URL\");\n\treturn chosen.url;\n}\n\nfunction isAbortLike(error: unknown): boolean {\n\treturn error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\");\n}\n\ninterface RequestSignal {\n\treadonly signal: AbortSignal;\n\treadonly timedOut: () => boolean;\n\treadonly cleanup: () => void;\n}\n\nfunction requestSignal(parent: AbortSignal | undefined, timeoutMs: number): RequestSignal {\n\tconst controller = new AbortController();\n\tlet timedOut = false;\n\tconst abort = () => controller.abort(parent?.reason);\n\tif (parent?.aborted === true) abort();\n\telse parent?.addEventListener(\"abort\", abort, { once: true });\n\tconst timeout = setTimeout(() => {\n\t\ttimedOut = true;\n\t\tcontroller.abort();\n\t}, timeoutMs);\n\treturn {\n\t\tsignal: controller.signal,\n\t\ttimedOut: () => timedOut,\n\t\tcleanup: () => {\n\t\t\tclearTimeout(timeout);\n\t\t\tparent?.removeEventListener(\"abort\", abort);\n\t\t},\n\t};\n}\n\nfunction isJsonResponse(response: Response): boolean {\n\tconst contentType = response.headers.get(\"content-type\");\n\tif (contentType === null) return false;\n\tconst mediaType = contentType.split(\";\", 1)[0]?.trim().toLowerCase();\n\treturn mediaType === \"application/json\" || mediaType === \"application/vnd.github+json\";\n}\n\n/**\n * Rate-limit verdict for 403/429 responses: any 429, and a 403 whose\n * `X-RateLimit-Remaining` is exactly `0`. The reset epoch is passed through\n * verbatim when present and integer-like; absent headers stay absent.\n */\nfunction rateLimitState(response: Response): { readonly limited: boolean; readonly resetEpochSeconds?: number } {\n\tconst limited =\n\t\tresponse.status === 429 || (response.status === 403 && response.headers.get(\"x-ratelimit-remaining\") === \"0\");\n\tif (!limited) return { limited: false };\n\tconst reset = response.headers.get(\"x-ratelimit-reset\");\n\tconst resetValue = reset === null ? Number.NaN : Number.parseInt(reset, 10);\n\tif (!Number.isSafeInteger(resetValue) || resetValue < 0) return { limited: true };\n\treturn { limited: true, resetEpochSeconds: resetValue };\n}\n\nasync function readBody(response: Response, maxBytes: number, signal: AbortSignal): Promise<Uint8Array> {\n\tif (response.body === null)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release API response has no body\");\n\tconst reader = response.body.getReader();\n\tconst chunks: Uint8Array[] = [];\n\tlet total = 0;\n\ttry {\n\t\tfor (;;) {\n\t\t\tif (signal.aborted) throw new DOMException(\"aborted\", \"AbortError\");\n\t\t\tconst item = await reader.read();\n\t\t\tif (item.done) break;\n\t\t\ttotal += item.value.byteLength;\n\t\t\tif (total > maxBytes)\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\t\t\"response_too_large\",\n\t\t\t\t\t\"release API response exceeds the configured size limit\",\n\t\t\t\t);\n\t\t\tchunks.push(item.value);\n\t\t}\n\t} finally {\n\t\treader.releaseLock();\n\t}\n\tconst bytes = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const chunk of chunks) {\n\t\tbytes.set(chunk, offset);\n\t\toffset += chunk.byteLength;\n\t}\n\treturn bytes;\n}\n\n/** Create the bounded GitHub/Gitee release reader. */\nexport function createNodeReleasePackageSourceV1(\n\toptions: NodeReleasePackageSourceOptionsV1 = {},\n): NodeReleasePackageSourceV1 {\n\tconst transport = options.fetch ?? globalThis.fetch;\n\tif (typeof transport !== \"function\")\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_configuration\", \"Node fetch is unavailable\");\n\tconst githubOrigin = apiOrigin(options.githubApiOrigin ?? DEFAULT_GITHUB_API_ORIGIN_V1, \"githubApiOrigin\");\n\tconst giteeOrigin = apiOrigin(options.giteeApiOrigin ?? DEFAULT_GITEE_API_ORIGIN_V1, \"giteeApiOrigin\");\n\tconst githubToken = boundedToken(options.githubToken, \"githubToken\");\n\tconst giteeToken = boundedToken(options.giteeToken, \"giteeToken\");\n\tconst timeoutMs = boundedPositive(\n\t\toptions.requestTimeoutMs,\n\t\tDEFAULT_TIMEOUT_MS_V1,\n\t\tMAX_TIMEOUT_MS_V1,\n\t\t\"requestTimeoutMs\",\n\t);\n\tconst maxResponseBytes = boundedPositive(\n\t\toptions.maxResponseBytes,\n\t\tDEFAULT_MAX_RESPONSE_BYTES_V1,\n\t\tMAX_RESPONSE_BYTES_V1,\n\t\t\"maxResponseBytes\",\n\t);\n\tconst maxAssetBytes = boundedPositive(\n\t\toptions.maxAssetBytes,\n\t\tDEFAULT_MAX_ASSET_BYTES_V1,\n\t\tMAX_ASSET_BYTES_V1,\n\t\t\"maxAssetBytes\",\n\t);\n\tconst maxRedirects = options.maxRedirects ?? DEFAULT_REDIRECTS_V1;\n\tif (!Number.isSafeInteger(maxRedirects) || maxRedirects < 0 || maxRedirects > MAX_REDIRECTS_V1)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t`maxRedirects must be an integer between 0 and ${MAX_REDIRECTS_V1}`,\n\t\t);\n\tconst userAgent = options.userAgent ?? \"agent-forge-plugin-release/1\";\n\tif (userAgent.length === 0 || userAgent.length > 256 || /[\\r\\n]/u.test(userAgent))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_configuration\", \"userAgent is invalid\");\n\n\tconst fetchReleaseJson = async (\n\t\turl: URL,\n\t\theaders: Readonly<Record<string, string>>,\n\t\tparentSignal: AbortSignal | undefined,\n\t): Promise<Uint8Array> => {\n\t\tlet current = url;\n\t\tfor (let redirect = 0; ; redirect += 1) {\n\t\t\tconst request = requestSignal(parentSignal, timeoutMs);\n\t\t\tlet response: Response;\n\t\t\ttry {\n\t\t\t\tresponse = await transport(current.toString(), {\n\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\theaders: { accept: \"application/json\", \"user-agent\": userAgent, ...headers },\n\t\t\t\t\tredirect: \"manual\",\n\t\t\t\t\tsignal: request.signal,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\trequest.cleanup();\n\t\t\t\tif (request.timedOut())\n\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"request_timed_out\", \"release API request timed out\");\n\t\t\t\tif (isAbortLike(error))\n\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"cancelled\", \"release API request was cancelled\");\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"request_failed\", \"release API request failed\");\n\t\t\t}\n\t\t\tif (!REDIRECT_STATUS.has(response.status)) {\n\t\t\t\ttry {\n\t\t\t\t\tif (response.status === 404)\n\t\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"release_not_found\", \"repo or release was not found\");\n\t\t\t\t\tconst limit = rateLimitState(response);\n\t\t\t\t\tif (limit.limited) {\n\t\t\t\t\t\tconst message =\n\t\t\t\t\t\t\tlimit.resetEpochSeconds === undefined\n\t\t\t\t\t\t\t\t? \"rate limit was exceeded\"\n\t\t\t\t\t\t\t\t: `rate limit resets at ${new Date(limit.resetEpochSeconds * 1000).toISOString()}`;\n\t\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"rate_limited\", message, {\n\t\t\t\t\t\t\t...(limit.resetEpochSeconds === undefined ? {} : { resetEpochSeconds: limit.resetEpochSeconds }),\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\t\t\t\t\tif (response.status < 200 || response.status >= 300)\n\t\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"request_failed\", \"release API request did not succeed\");\n\t\t\t\t\tif (!isJsonResponse(response))\n\t\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release API response must be JSON\");\n\t\t\t\t\tconst bytes = await readBody(response, maxResponseBytes, request.signal);\n\t\t\t\t\treturn bytes;\n\t\t\t\t} finally {\n\t\t\t\t\tawait response.body?.cancel().catch(() => undefined);\n\t\t\t\t\trequest.cleanup();\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst location = response.headers.get(\"location\");\n\t\t\tawait response.body?.cancel().catch(() => undefined);\n\t\t\trequest.cleanup();\n\t\t\tif (location === null || redirect >= maxRedirects)\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"request_failed\", \"release API redirect limit exceeded\");\n\t\t\tlet next: URL;\n\t\t\ttry {\n\t\t\t\tnext = new URL(location, current);\n\t\t\t} catch {\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release API redirect target is invalid\");\n\t\t\t}\n\t\t\tif ((next.protocol !== \"http:\" && next.protocol !== \"https:\") || next.username !== \"\" || next.password !== \"\")\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release API redirect must stay http(s)\");\n\t\t\tcurrent = next;\n\t\t}\n\t};\n\n\tconst downloadReleaseAsset: NodeReleasePackageSourceV1[\"downloadReleaseAsset\"] = async (input) => {\n\t\tif (input.signal?.aborted === true)\n\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"cancelled\", \"release asset download was cancelled\");\n\t\tconst sourceLabel = `${input.kind}:${input.owner}/${input.repo}@${input.tag ?? \"latest\"}`;\n\t\tconst base = input.kind === \"github\" ? githubOrigin : giteeOrigin;\n\t\tconst segments = [\n\t\t\tbase.pathPrefix === \"\" ? undefined : base.pathPrefix,\n\t\t\t\"repos\",\n\t\t\tencodeURIComponent(input.owner),\n\t\t\tencodeURIComponent(input.repo),\n\t\t\t\"releases\",\n\t\t\t...(input.tag === undefined ? [] : [\"tags\", encodeURIComponent(input.tag)]),\n\t\t].filter((segment): segment is string => segment !== undefined);\n\t\tconst endpoint = new URL(`${base.origin}/${segments.join(\"/\")}`);\n\t\tconst headers: Readonly<Record<string, string>> =\n\t\t\tinput.kind === \"github\"\n\t\t\t\t? {\n\t\t\t\t\t\t\"x-github-api-version\": \"2022-11-28\",\n\t\t\t\t\t\t...(githubToken === undefined ? {} : { authorization: `Bearer ${githubToken}` }),\n\t\t\t\t\t}\n\t\t\t\t: {};\n\t\tif (input.kind === \"gitee\" && giteeToken !== undefined) endpoint.searchParams.set(\"access_token\", giteeToken);\n\t\tconst payload = await fetchReleaseJson(endpoint, headers, input.signal);\n\t\tconst release =\n\t\t\tinput.tag === undefined ? firstPublishedRelease(parseReleaseList(payload)) : parseReleaseObject(payload);\n\t\tconst assetUrl = selectPackageAssetUrl(release);\n\t\tconst download = await downloadNodeUrlPackageV1(\n\t\t\t{\n\t\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t\t\trequestTimeoutMs: timeoutMs,\n\t\t\t\tmaxPackageBytes: maxAssetBytes,\n\t\t\t\tuserAgent,\n\t\t\t},\n\t\t\t{\n\t\t\t\turl: assetUrl,\n\t\t\t\t...(input.expectedDigestHex === undefined ? {} : { expectedDigestHex: input.expectedDigestHex }),\n\t\t\t\tsignal: input.signal,\n\t\t\t},\n\t\t);\n\t\treturn {\n\t\t\tbytes: download.bytes,\n\t\t\tmediaType: download.mediaType,\n\t\t\tsha256Hex: download.digestHex,\n\t\t\tsourceLabel,\n\t\t};\n\t};\n\n\treturn { version: 1, downloadReleaseAsset };\n}\n"]}