@allyhub/sdk 0.1.0-alpha.8 → 0.2.0-next.1

package/node_modules/@allyhub-next/runtimes/LICENSE

@@ -0,0 +1,241 @@
+AllyHub Software License
+
+Copyright (c) 2026 AllyHub, Inc. ("AllyHub"). All rights reserved.
+
+This software (the AllyHub command-line tool, its SDK, runtime and the
+packages they depend on) is proprietary. It is not open source.
+
+1. Permitted use. You may install and run the software, unmodified, to make,
+   check, preview and render videos and decks, including for commercial
+   purposes. What you make with it is yours.
+
+2. Restrictions. Except as this license permits or applicable law requires,
+   you may not copy, modify, adapt, translate, sublicense, sell, rent, lease,
+   publish or otherwise distribute the software, create derivative works of
+   it, or reverse engineer, decompile or disassemble it.
+
+3. Cloud services. AllyHub's cloud tools (sign-in, research, images, voice,
+   video) are separate services governed by AllyHub's terms of service.
+
+4. Trademarks. This license grants no right to use the name "AllyHub" or its
+   logos.
+
+5. No warranty. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY
+   KIND, EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY,
+   FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL
+   ALLYHUB BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY ARISING FROM,
+   OUT OF OR IN CONNECTION WITH THE SOFTWARE OR ITS USE.
+
+6. Third-party code. Parts of the software are adapted from HyperFrames,
+   licensed under the Apache License, Version 2.0 (see NOTICE). Those parts
+   remain under that license, reproduced below, and nothing in this license
+   limits your rights under it.
+
+7. Starter components. The starter components in the "components" folder,
+   which "allyhub add" copies into your workspace, are licensed under the MIT
+   License (see components/LICENSE): once copied, you may change, use and
+   share them freely.
+
+--------------------------------------------------------------------------------
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/node_modules/@allyhub-next/runtimes/dist/bundled.d.ts

@@ -0,0 +1,10 @@
+import { type Platform, type RuntimeManifest } from "@allyhub-next/protocol";
+export interface BundledOptions {
+    env?: Readonly<Record<string, string | undefined>>;
+    platform?: Platform | undefined;
+    manifest?: RuntimeManifest;
+    exists?: (path: string) => boolean;
+}
+/** The variables that name the programs of the runtimes in `folder`. */
+export declare function bundledEnv(folder: string, options?: BundledOptions): Record<string, string>;
+//# sourceMappingURL=bundled.d.ts.map

package/node_modules/@allyhub-next/runtimes/dist/bundled.js

@@ -0,0 +1,2 @@
+/*! AllyHub. Copyright (c) 2026 AllyHub, Inc. All rights reserved. Use is subject to LICENSE.md. */
+import{existsSync as u}from"node:fs";import{join as v}from"node:path";import{binsOf as x,filesFor as O,platformOf as d}from"@allyhub-next/protocol";import{binVariable as h}from"./runtimes.js";import{shippedManifest as j}from"./manifest.js";import{native as y}from"./unpack.js";export function bundledEnv(s,t={}){const f=t.env??process.env,e="platform"in t?t.platform:d(process.platform,process.arch),m=t.manifest??j(),c=t.exists??u,r={};if(!e)return r;for(const[a,p]of Object.entries(m.runtimes)){const n=O(p,e);if(n)for(const[l,b]of Object.entries(x(n))){const o=h(l),i=v(s,a,y(b));!f[o]&&c(i)&&(r[o]=i)}}return r}

package/node_modules/@allyhub-next/runtimes/dist/download.d.ts

@@ -0,0 +1,15 @@
+export interface DownloadOptions {
+    size: number;
+    sha256: string;
+    fetch: typeof globalThis.fetch;
+    signal?: AbortSignal | undefined;
+    onProgress?: ((received: number, total: number) => void) | undefined;
+}
+/**
+ * Downloads `url` to `dest`, hashing as it comes; a file of another size or
+ * sha256 is deleted and refused, and nothing longer than its pin is read.
+ */
+export declare function download(url: string, dest: string, options: DownloadOptions): Promise<void>;
+/** A file's sha256. */
+export declare function sha256Of(path: string): Promise<string>;
+//# sourceMappingURL=download.d.ts.map

package/node_modules/@allyhub-next/runtimes/dist/download.js

@@ -0,0 +1,2 @@
+/*! AllyHub. Copyright (c) 2026 AllyHub, Inc. All rights reserved. Use is subject to LICENSE.md. */
+import{createHash as m}from"node:crypto";import{createWriteStream as u}from"node:fs";import{rm as g}from"node:fs/promises";import{Readable as y,Transform as S}from"node:stream";import{pipeline as p}from"node:stream/promises";import{RuntimeError as o}from"./errors.js";export async function download(e,r,n){const{size:i,sha256:w,signal:a,onProgress:$}=n;let s;try{s=await n.fetch(e,{redirect:"follow",...a?{signal:a}:{}})}catch(t){throw a?.aborted?new o("cancelled",`Stopped downloading ${e}.`,{cause:t}):new o("download",`Could not reach ${e}: ${l(t)}`,{cause:t})}if(!s.ok||!s.body)throw new o("download",`${e} answered ${String(s.status)}.`);const d=m("sha256");let c=0;const b=new S({transform(t,x,h){if(c+=t.length,c>i){h(new o("checksum",`${e} is larger than its pin (${String(i)} bytes).`));return}d.update(t),$?.(c,i),h(null,t)}});try{await p(y.fromWeb(s.body),b,u(r),...a?[{signal:a}]:[])}catch(t){throw await g(r,{force:!0}),t instanceof o?t:a?.aborted?new o("cancelled",`Stopped downloading ${e}.`,{cause:t}):new o("download",`Downloading ${e} failed: ${l(t)}`,{cause:t})}const f=d.digest("hex");if(c!==i||f!==w)throw await g(r,{force:!0}),new o("checksum",`${e} came as ${String(c)} bytes with sha256 ${f}; its pin is ${String(i)} bytes, ${w}.`)}export async function sha256Of(e){const{createReadStream:r}=await import("node:fs"),n=m("sha256");return await p(r(e),n),n.digest("hex")}const l=e=>e instanceof Error?e.message:String(e);

package/node_modules/@allyhub-next/runtimes/dist/errors.d.ts

@@ -0,0 +1,16 @@
+export type RuntimeErrorCode = 
+/** The manifest has no runtime by that name. */
+"unknown-runtime"
+/** The runtime has no files for this platform. */
+ | "unsupported"
+/** A download did not complete. */
+ | "download"
+/** A file came in another size or with another sha256 than its pin. */
+ | "checksum"
+/** An archive could not be unpacked, or held a path outside its folder. */
+ | "unpack" | "cancelled";
+export declare class RuntimeError extends Error {
+    readonly code: RuntimeErrorCode;
+    constructor(code: RuntimeErrorCode, message: string, options?: ErrorOptions);
+}
+//# sourceMappingURL=errors.d.ts.map

package/node_modules/@allyhub-next/runtimes/dist/errors.js

@@ -0,0 +1,2 @@
+/*! AllyHub. Copyright (c) 2026 AllyHub, Inc. All rights reserved. Use is subject to LICENSE.md. */
+export class RuntimeError extends Error{code;constructor(r,e,o){super(e,o),this.name="RuntimeError",this.code=r}}

package/node_modules/@allyhub-next/runtimes/dist/home.d.ts

@@ -0,0 +1,2 @@
+export declare function cacheHome(env?: Readonly<Record<string, string | undefined>>): string;
+//# sourceMappingURL=home.d.ts.map

package/node_modules/@allyhub-next/runtimes/dist/home.js

@@ -0,0 +1,2 @@
+/*! AllyHub. Copyright (c) 2026 AllyHub, Inc. All rights reserved. Use is subject to LICENSE.md. */
+import{resolve as n}from"node:path";import t from"env-paths";export function cacheHome(o=process.env){const e=o.ALLYHUB_CACHE_HOME;if(e)return n(e);const r=process.platform==="linux"?"allyhub":"AllyHub";return t(r,{suffix:""}).cache}

package/node_modules/@allyhub-next/runtimes/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { binVariable, createRuntimes, type EnsureOptions, type Located, type Progress, type Runtimes, type RuntimesOptions, type Status, } from "./runtimes.js";
+export { bundledEnv, type BundledOptions } from "./bundled.js";
+export { RuntimeError, type RuntimeErrorCode } from "./errors.js";
+export { cacheHome } from "./home.js";
+export { shippedManifest } from "./manifest.js";
+export { download, sha256Of } from "./download.js";
+export { withLock } from "./lock.js";
+export { unzip, untgz } from "./unpack.js";
+//# sourceMappingURL=index.d.ts.map

package/node_modules/@allyhub-next/runtimes/dist/index.js

@@ -0,0 +1,2 @@
+/*! AllyHub. Copyright (c) 2026 AllyHub, Inc. All rights reserved. Use is subject to LICENSE.md. */
+export{binVariable,createRuntimes}from"./runtimes.js";export{bundledEnv}from"./bundled.js";export{RuntimeError}from"./errors.js";export{cacheHome}from"./home.js";export{shippedManifest}from"./manifest.js";export{download,sha256Of}from"./download.js";export{withLock}from"./lock.js";export{unzip,untgz}from"./unpack.js";

package/node_modules/@allyhub-next/runtimes/dist/lock.d.ts

@@ -0,0 +1,6 @@
+export interface LockOptions {
+    signal?: AbortSignal | undefined;
+    pollMs?: number;
+}
+export declare function withLock<T>(path: string, run: () => Promise<T>, options?: LockOptions): Promise<T>;
+//# sourceMappingURL=lock.d.ts.map

package/node_modules/@allyhub-next/runtimes/dist/lock.js

@@ -0,0 +1,2 @@
+/*! AllyHub. Copyright (c) 2026 AllyHub, Inc. All rights reserved. Use is subject to LICENSE.md. */
+import{setTimeout as s}from"node:timers/promises";import{lock as c}from"proper-lockfile";export async function withLock(r,i,l={}){const{signal:e,pollMs:f=150}=l;let t,a;for(;;){e?.throwIfAborted();try{a=await c(r,{lockfilePath:r,realpath:!1,onCompromised:o=>{t=o}});break}catch(o){if(o.code!=="ELOCKED")throw o;await s(f,void 0,e?{signal:e}:{})}}try{const o=await i();if(t)throw t;return o}finally{t||await a()}}

package/node_modules/@allyhub-next/runtimes/dist/manifest.d.ts

@@ -0,0 +1,3 @@
+import { type RuntimeManifest } from "@allyhub-next/protocol";
+export declare function shippedManifest(): RuntimeManifest;
+//# sourceMappingURL=manifest.d.ts.map

package/node_modules/@allyhub-next/runtimes/dist/manifest.js

@@ -0,0 +1,2 @@
+/*! AllyHub. Copyright (c) 2026 AllyHub, Inc. All rights reserved. Use is subject to LICENSE.md. */
+import{readFileSync as r}from"node:fs";import{RuntimeManifestSchema as t}from"@allyhub-next/protocol";let e;export function shippedManifest(){return e??=t.parse(JSON.parse(r(new URL("../manifest.json",import.meta.url),"utf8"))),e}

package/node_modules/@allyhub-next/runtimes/dist/runtimes.d.ts

@@ -0,0 +1,63 @@
+import { type Platform, type RuntimeManifest } from "@allyhub-next/protocol";
+export interface RuntimesOptions {
+    /** The cache folder (default: the system's, `cacheHome`). */
+    home?: string;
+    manifest?: RuntimeManifest;
+    /** The platform (default: this process's). */
+    platform?: Platform | undefined;
+    env?: Readonly<Record<string, string | undefined>>;
+    fetch?: typeof globalThis.fetch;
+}
+export interface Located {
+    name: string;
+    /** The pinned version; none for programs the environment names, whose version is their own. */
+    version: string | undefined;
+    /** Its folder; for one named by the environment, where its first program is. */
+    dir: string;
+    /** Its programs, by name, at their absolute paths. */
+    bins: Record<string, string>;
+    /** Where it was found. */
+    from: "cache" | "env";
+}
+export interface Status {
+    name: string;
+    about: string;
+    version: string;
+    license: string;
+    /** It has files for this platform. */
+    available: boolean;
+    installed: boolean;
+    /** Where it is, when it is. */
+    from?: "cache" | "env";
+    /** What it downloads, in bytes. */
+    size: number;
+    dir: string;
+}
+export interface Progress {
+    runtime: string;
+    url: string;
+    received: number;
+    total: number;
+}
+export interface EnsureOptions {
+    signal?: AbortSignal | undefined;
+    onProgress?: (progress: Progress) => void;
+}
+export interface Runtimes {
+    readonly home: string;
+    readonly platform: Platform | undefined;
+    /** Every runtime of the manifest, as it stands on this computer. */
+    status(): Promise<Status[]>;
+    /** A runtime if it is there; never downloads. */
+    locate(name: string): Promise<Located | undefined>;
+    /** A runtime, downloaded and checked first if it is not there. */
+    ensure(name: string, options?: EnsureOptions): Promise<Located>;
+    /** One program of a runtime, ensured. */
+    bin(name: string, bin: string, options?: EnsureOptions): Promise<string>;
+    /** Takes a runtime off this computer; it comes back when next ensured. */
+    remove(name: string): Promise<void>;
+}
+/** The variable that names a program on the computer: ALLYHUB_FFMPEG, ALLYHUB_YT_DLP. */
+export declare const binVariable: (bin: string) => string;
+export declare function createRuntimes(options?: RuntimesOptions): Runtimes;
+//# sourceMappingURL=runtimes.d.ts.map

package/node_modules/@allyhub-next/runtimes/dist/runtimes.js

@@ -0,0 +1,3 @@
+/*! AllyHub. Copyright (c) 2026 AllyHub, Inc. All rights reserved. Use is subject to LICENSE.md. */
+import{randomBytes as P}from"node:crypto";import{chmod as B,mkdir as S,readFile as D,rename as x,rm as g,writeFile as M}from"node:fs/promises";import{dirname as J,join as u}from"node:path";import{binsOf as L,filesFor as U,platformOf as _}from"@allyhub-next/protocol";import{download as T,sha256Of as V}from"./download.js";import{RuntimeError as p}from"./errors.js";import{cacheHome as Y}from"./home.js";import{withLock as q}from"./lock.js";import{shippedManifest as G}from"./manifest.js";import{inside as A,native as K,untgz as Q,unzip as W}from"./unpack.js";const C=".allyhub-runtime.json";export const binVariable=f=>`ALLYHUB_${f.toUpperCase().replaceAll("-","_")}`;export function createRuntimes(f={}){const j=f.env??process.env,z=f.home??Y(j),b=f.manifest??G(),l="platform"in f?f.platform:_(process.platform,process.arch),F=f.fetch??globalThis.fetch,$=u(z,"runtimes"),O=t=>{const e=Object.hasOwn(b.runtimes,t)?b.runtimes[t]:void 0;if(!e)throw new p("unknown-runtime",`AllyHub has no runtime "${t}".`);return e},d=(t,e)=>u($,`${t}@${e.version}`),h=(t,e)=>{const r=l?U(e,l):void 0;if(!r)throw new p("unsupported",`${t} ${e.version} has no build for ${l??`${process.platform}-${process.arch}`}.`);return r},H=(t,e,r)=>Object.fromEntries(Object.entries(L(h(t,e))).map(([n,s])=>[n,u(r,K(s))])),R=(t,e)=>{const r=[...new Set(Object.values(e.platforms).flatMap(i=>Object.keys(L(i))))];if(r.length===0)return;const n=r.map(i=>[i,j[binVariable(i)]]);if(n.some(([,i])=>!i))return;const s=Object.fromEntries(n),o=n[0]?.[1]??"";return{name:t,version:void 0,dir:J(o),bins:s,from:"env"}},y=async(t,e)=>{try{const r=JSON.parse(await D(u(d(t,e),C),"utf8")),n=h(t,e).map(s=>s.sha256);return r.version===e.version&&JSON.stringify(r.files)===JSON.stringify(n)}catch{return!1}},k=async t=>{const e=O(t),r=R(t,e);if(r)return r;if(!await y(t,e))return;const n=d(t,e);return{name:t,version:e.version,dir:n,bins:H(t,e,n),from:"cache"}},I=async(t,e,r)=>{const n=h(t,e),s=d(t,e),o=`${s}.partial-${String(process.pid)}-${P(4).toString("hex")}`,i=u(o,".downloads");await S(i,{recursive:!0});try{for(const[w,a]of n.entries()){const m=u(i,String(w));if(await T(a.url,m,{size:a.size,sha256:a.sha256,fetch:F,signal:r.signal,onProgress:(c,v)=>{r.onProgress?.({runtime:t,url:a.url,received:c,total:v})}}),a.unpack==="zip")await W(m,o);else if(a.unpack==="tgz")await Q(m,o);else{const c=A(o,a.name??X(a.url));if(!c)throw new p("unpack",`${a.url} would be kept outside its folder.`);await S(J(c),{recursive:!0}),await x(m,c),a.executable&&await B(c,493)}for(const c of a.check){const v=A(o,c.path),N=v?await V(v).catch(()=>"missing"):"missing";if(N!==c.sha256)throw new p("checksum",`${c.path} from ${a.url} has sha256 ${N}; its pin is ${c.sha256}.`)}}await g(i,{recursive:!0,force:!0}),await M(u(o,C),`${JSON.stringify({version:e.version,files:n.map(w=>w.sha256),at:new Date().toISOString()})}
+`),await g(s,{recursive:!0,force:!0}),await x(o,s)}catch(w){throw await g(o,{recursive:!0,force:!0}),w}},E=async(t,e={})=>{const r=O(t),n=await k(t);if(n)return n;h(t,r),await S($,{recursive:!0}),await q(`${d(t,r)}.lock`,async()=>{await y(t,r)||await I(t,r,e)},{signal:e.signal});const s=await k(t);if(!s)throw new p("download",`${t} was installed but cannot be found in ${$}.`);return s};return{home:z,platform:l,locate:k,ensure:E,async bin(t,e,r){const s=(await E(t,r)).bins[e];if(!s)throw new p("unknown-runtime",`${t} holds no program "${e}".`);return s},async remove(t){const e=O(t);await g(d(t,e),{recursive:!0,force:!0})},async status(){return Promise.all(Object.entries(b.runtimes).map(async([t,e])=>{const r=l?U(e,l):void 0,n=d(t,e),s=R(t,e)!==void 0?"env":r!==void 0&&await y(t,e)?"cache":void 0;return{name:t,about:e.about,version:e.version,license:e.license,available:r!==void 0,installed:s!==void 0,...s?{from:s}:{},size:(r??[]).reduce((o,i)=>o+i.size,0),dir:n}}))}}}const X=f=>decodeURIComponent(new URL(f).pathname.split("/").pop()??"file");

package/node_modules/@allyhub-next/runtimes/dist/unpack.d.ts

@@ -0,0 +1,7 @@
+/** Where an archive's entry goes inside `dir`, or undefined for one that would leave it. */
+export declare function inside(dir: string, entry: string): string | undefined;
+export declare function unzip(file: string, dir: string): Promise<void>;
+export declare function untgz(file: string, dir: string): Promise<void>;
+/** A path in its system's spelling, from a manifest's forward slashes. */
+export declare const native: (path: string) => string;
+//# sourceMappingURL=unpack.d.ts.map

package/node_modules/@allyhub-next/runtimes/dist/unpack.js

@@ -0,0 +1,2 @@
+/*! AllyHub. Copyright (c) 2026 AllyHub, Inc. All rights reserved. Use is subject to LICENSE.md. */
+import{createWriteStream as w}from"node:fs";import{chmod as h,mkdir as d}from"node:fs/promises";import{dirname as k,isAbsolute as f,join as $,normalize as g,relative as z,sep as y}from"node:path";import{pipeline as x}from"node:stream/promises";import{extract as E}from"tar";import S from"yauzl";import{RuntimeError as s}from"./errors.js";export function inside(n,o){if(o.includes("\0")||f(o)||/^[A-Za-z]:/u.test(o))return;const e=g($(n,o)),t=z(n,e);if(!(t===""||t.startsWith("..")||f(t)))return e}export async function unzip(n,o){const e=await new Promise((t,a)=>{S.open(n,{lazyEntries:!0,autoClose:!0},(i,r)=>{i?a(new s("unpack",`${n} is not a zip: ${i.message}`,{cause:i})):t(r)})});await new Promise((t,a)=>{const i=r=>{e.close(),a(r instanceof s?r:new s("unpack",`Unpacking ${n} failed: ${String(r)}`,{cause:r}))};e.on("error",i),e.on("end",()=>{t()}),e.on("entry",r=>{const c=r.fileName.split("\\").join("/"),u=inside(o,c);if(!u){i(new s("unpack",`${n} holds ${c}, outside its folder.`));return}const p=r.externalFileAttributes>>>16&65535;if((p&61440)===40960){i(new s("unpack",`${n} holds a link, ${c}.`));return}if(c.endsWith("/")){d(u,{recursive:!0}).then(()=>{e.readEntry()},i);return}e.openReadStream(r,(m,l)=>{if(m){i(m);return}d(k(u),{recursive:!0}).then(()=>x(l,w(u))).then(()=>p&73?h(u,493):void 0).then(()=>{e.readEntry()},i)})}),e.readEntry()})}export async function untgz(n,o){try{await E({file:n,cwd:o,strict:!0,filter:(e,t)=>{const a="type"in t?t.type:void 0;return inside(o,e)!==void 0&&a!=="SymbolicLink"&&a!=="Link"}})}catch(e){throw new s("unpack",`Unpacking ${n} failed: ${e instanceof Error?e.message:String(e)}`,{cause:e})}}export const native=n=>n.split("/").join(y);