@bastani/atomic 0.8.31-alpha.5 → 0.9.0-alpha.1

package/dist/core/package-manager-git.js

@@ -0,0 +1,271 @@
+import { existsSync, mkdirSync, readdirSync, rmSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { getProjectConfigDirs } from "../config.js";
+import { NETWORK_TIMEOUT_MS } from "./package-manager-constants.js";
+import { runCommand, runCommandCapture } from "./package-manager-command.js";
+import { isOfflineModeEnabled } from "./package-manager-env.js";
+import { getBaseDirsForScope, getGitInstallPath, getGitInstallRoot } from "./package-manager-paths.js";
+import { withProgress } from "./package-manager-progress.js";
+import { ensureGitIgnore, getGitDependencyInstallArgs, runNpmCommand } from "./package-manager-npm.js";
+function runGitProcess(context, command, args, options) {
+    return context.driver ? context.driver.runCommand(command, args, options) : runCommand(command, args, options);
+}
+function captureGitProcess(context, command, args, options) {
+    return context.driver
+        ? context.driver.runCommandCapture(command, args, options)
+        : runCommandCapture(command, args, options);
+}
+function getSafeGitRef(ref) {
+    if (!isSafeGitRef(ref)) {
+        throw new Error(`Invalid git ref: ${JSON.stringify(ref)}`);
+    }
+    return ref;
+}
+function isSafeGitRef(ref) {
+    if (!ref || ref === "@" || ref.startsWith("-") || ref.endsWith(".") || ref.endsWith("/")) {
+        return false;
+    }
+    if (/[\x00-\x1f\x7f\s~^:?*\[\]\\]/u.test(ref)) {
+        return false;
+    }
+    if (ref.includes("..") || ref.includes("@{") || ref.includes("//")) {
+        return false;
+    }
+    return ref
+        .split("/")
+        .every((part) => part && part !== "." && part !== ".." && !part.startsWith(".") && !part.endsWith(".lock"));
+}
+export function getExistingGitInstallPath(context, source, scope) {
+    const candidates = [getGitInstallPath(context, source, scope)];
+    if (scope === "project") {
+        for (const configDir of getProjectConfigDirs(context.cwd)) {
+            candidates.push(join(configDir, "git", source.host, source.path));
+        }
+    }
+    else if (scope === "user") {
+        for (const agentDir of getBaseDirsForScope(context, "user")) {
+            candidates.push(join(agentDir, "git", source.host, source.path));
+        }
+    }
+    for (const candidate of Array.from(new Set(candidates))) {
+        if (existsSync(candidate))
+            return candidate;
+    }
+    return undefined;
+}
+export async function installGit(context, source, scope) {
+    const safeRef = source.ref ? getSafeGitRef(source.ref) : undefined;
+    const targetDir = getGitInstallPath(context, source, scope);
+    if (existsSync(targetDir)) {
+        if (safeRef) {
+            await ensureGitRef(context, targetDir, ["fetch", "origin", "--", safeRef], "FETCH_HEAD");
+            return;
+        }
+        const target = context.driver
+            ? await context.driver.getLocalGitUpdateTarget(targetDir)
+            : await getLocalGitUpdateTarget(context, targetDir);
+        await ensureGitRef(context, targetDir, target.fetchArgs, target.ref);
+        return;
+    }
+    const gitRoot = getGitInstallRoot(context, scope);
+    if (gitRoot) {
+        ensureGitIgnore(gitRoot);
+    }
+    mkdirSync(dirname(targetDir), { recursive: true });
+    // Defense-in-depth: the clone URL is already parsed/validated upstream, but
+    // assert it contains only shell-safe characters immediately before it reaches
+    // `git clone`, so no metacharacter can ever reach a shell even on platforms
+    // that wrap process spawns. Capture the validated value in a local so the
+    // guard sanitizes exactly the binding handed to the spawn.
+    const cloneUrl = source.repo;
+    if (!/^[A-Za-z0-9._~:@\/%+-]+$/.test(cloneUrl)) {
+        throw new Error(`Refusing to clone repository with unsafe URL: ${cloneUrl}`);
+    }
+    await runGitProcess(context, "git", ["clone", "--", cloneUrl, targetDir]);
+    if (safeRef) {
+        await runGitProcess(context, "git", ["checkout", safeRef], { cwd: targetDir });
+    }
+    const packageJsonPath = join(targetDir, "package.json");
+    if (existsSync(packageJsonPath)) {
+        await runNpmCommand(context, getGitDependencyInstallArgs(context), { cwd: targetDir });
+    }
+}
+export async function updateGit(context, source, scope) {
+    const safeRef = source.ref ? getSafeGitRef(source.ref) : undefined;
+    const targetDir = getExistingGitInstallPath(context, source, scope) ?? getGitInstallPath(context, source, scope);
+    if (!existsSync(targetDir)) {
+        await installGit(context, source, scope);
+        return;
+    }
+    if (safeRef) {
+        await ensureGitRef(context, targetDir, ["fetch", "origin", "--", safeRef], "FETCH_HEAD");
+        return;
+    }
+    const target = context.driver
+        ? await context.driver.getLocalGitUpdateTarget(targetDir)
+        : await getLocalGitUpdateTarget(context, targetDir);
+    await ensureGitRef(context, targetDir, target.fetchArgs, target.ref);
+}
+async function ensureGitRef(context, targetDir, fetchArgs, ref) {
+    await runGitProcess(context, "git", fetchArgs, { cwd: targetDir });
+    const localHead = await captureGitProcess(context, "git", ["rev-parse", "HEAD"], {
+        cwd: targetDir,
+        timeoutMs: NETWORK_TIMEOUT_MS,
+    });
+    const commitRef = `${ref}^{commit}`;
+    const targetHead = await captureGitProcess(context, "git", ["rev-parse", commitRef], {
+        cwd: targetDir,
+        timeoutMs: NETWORK_TIMEOUT_MS,
+    });
+    if (localHead.trim() === targetHead.trim()) {
+        return;
+    }
+    await runGitProcess(context, "git", ["reset", "--hard", commitRef], { cwd: targetDir });
+    await runGitProcess(context, "git", ["clean", "-fdx"], { cwd: targetDir });
+    const packageJsonPath = join(targetDir, "package.json");
+    if (existsSync(packageJsonPath)) {
+        await runNpmCommand(context, getGitDependencyInstallArgs(context), { cwd: targetDir });
+    }
+}
+export async function refreshTemporaryGitSource(context, source, sourceStr) {
+    if (isOfflineModeEnabled()) {
+        return;
+    }
+    try {
+        await withProgress(context, "pull", sourceStr, `Refreshing ${sourceStr}...`, async () => {
+            await updateGit(context, source, "temporary");
+        });
+    }
+    catch { }
+}
+export async function removeGit(context, source, scope) {
+    const targetDir = getGitInstallPath(context, source, scope);
+    if (!existsSync(targetDir))
+        return;
+    rmSync(targetDir, { recursive: true, force: true });
+    pruneEmptyGitParents(targetDir, getGitInstallRoot(context, scope));
+}
+function pruneEmptyGitParents(targetDir, installRoot) {
+    if (!installRoot)
+        return;
+    const resolvedRoot = resolve(installRoot);
+    let current = dirname(targetDir);
+    while (current.startsWith(resolvedRoot) && current !== resolvedRoot) {
+        if (!existsSync(current)) {
+            current = dirname(current);
+            continue;
+        }
+        const entries = readdirSync(current);
+        if (entries.length > 0)
+            break;
+        try {
+            rmSync(current, { recursive: true, force: true });
+        }
+        catch {
+            break;
+        }
+        current = dirname(current);
+    }
+}
+export async function gitHasAvailableUpdate(context, installedPath) {
+    if (isOfflineModeEnabled()) {
+        return false;
+    }
+    try {
+        const localHead = await captureGitProcess(context, "git", ["rev-parse", "HEAD"], {
+            cwd: installedPath,
+            timeoutMs: NETWORK_TIMEOUT_MS,
+        });
+        const remoteHead = await getRemoteGitHead(context, installedPath);
+        return localHead.trim() !== remoteHead.trim();
+    }
+    catch {
+        return false;
+    }
+}
+async function getRemoteGitHead(context, installedPath) {
+    const upstreamRef = await getGitUpstreamRef(context, installedPath);
+    if (upstreamRef) {
+        const remoteHead = await runGitRemoteCommand(context, installedPath, ["ls-remote", "origin", upstreamRef]);
+        const match = remoteHead.match(/^([0-9a-f]{40})\s+/m);
+        if (match?.[1])
+            return match[1];
+    }
+    const remoteHead = await runGitRemoteCommand(context, installedPath, ["ls-remote", "origin", "HEAD"]);
+    const match = remoteHead.match(/^([0-9a-f]{40})\s+HEAD$/m);
+    if (!match?.[1]) {
+        throw new Error("Failed to determine remote HEAD");
+    }
+    return match[1];
+}
+export async function getLocalGitUpdateTarget(context, installedPath) {
+    try {
+        const upstream = await captureGitProcess(context, "git", ["rev-parse", "--abbrev-ref", "@{upstream}"], {
+            cwd: installedPath,
+            timeoutMs: NETWORK_TIMEOUT_MS,
+        });
+        const trimmedUpstream = upstream.trim();
+        if (!trimmedUpstream.startsWith("origin/"))
+            throw new Error(`Unsupported upstream remote: ${trimmedUpstream}`);
+        const branch = trimmedUpstream.slice("origin/".length);
+        if (!branch)
+            throw new Error("Missing upstream branch name");
+        const head = await captureGitProcess(context, "git", ["rev-parse", "@{upstream}"], {
+            cwd: installedPath,
+            timeoutMs: NETWORK_TIMEOUT_MS,
+        });
+        return {
+            ref: "@{upstream}",
+            head,
+            fetchArgs: ["fetch", "--prune", "--no-tags", "origin", `+refs/heads/${branch}:refs/remotes/origin/${branch}`],
+        };
+    }
+    catch {
+        await runGitProcess(context, "git", ["remote", "set-head", "origin", "-a"], { cwd: installedPath }).catch(() => { });
+        const head = await captureGitProcess(context, "git", ["rev-parse", "origin/HEAD"], {
+            cwd: installedPath,
+            timeoutMs: NETWORK_TIMEOUT_MS,
+        });
+        const originHeadRef = await captureGitProcess(context, "git", ["symbolic-ref", "refs/remotes/origin/HEAD"], {
+            cwd: installedPath,
+            timeoutMs: NETWORK_TIMEOUT_MS,
+        }).catch(() => "");
+        const branch = originHeadRef.trim().replace(/^refs\/remotes\/origin\//, "");
+        if (branch) {
+            return {
+                ref: "origin/HEAD",
+                head,
+                fetchArgs: ["fetch", "--prune", "--no-tags", "origin", `+refs/heads/${branch}:refs/remotes/origin/${branch}`],
+            };
+        }
+        return {
+            ref: "origin/HEAD",
+            head,
+            fetchArgs: ["fetch", "--prune", "--no-tags", "origin", "+HEAD:refs/remotes/origin/HEAD"],
+        };
+    }
+}
+async function getGitUpstreamRef(context, installedPath) {
+    try {
+        const upstream = await captureGitProcess(context, "git", ["rev-parse", "--abbrev-ref", "@{upstream}"], {
+            cwd: installedPath,
+            timeoutMs: NETWORK_TIMEOUT_MS,
+        });
+        const trimmed = upstream.trim();
+        if (!trimmed.startsWith("origin/"))
+            return undefined;
+        const branch = trimmed.slice("origin/".length);
+        return branch ? `refs/heads/${branch}` : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function runGitRemoteCommand(context, installedPath, args) {
+    return captureGitProcess(context, "git", args, {
+        cwd: installedPath,
+        timeoutMs: NETWORK_TIMEOUT_MS,
+        env: { GIT_TERMINAL_PROMPT: "0" },
+    });
+}
+//# sourceMappingURL=package-manager-git.js.map

package/dist/core/package-manager-git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-manager-git.js","sourceRoot":"","sources":["../../src/core/package-manager-git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACvG,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGvG,SAAS,aAAa,CACrB,OAA8B,EAC9B,OAAe,EACf,IAAc,EACd,OAA0B;IAE1B,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,iBAAiB,CACzB,OAA8B,EAC9B,OAAe,EACf,IAAc,EACd,OAA4E;IAE5E,OAAO,OAAO,CAAC,MAAM;QACpB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC;QAC1D,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IACjC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAChC,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1F,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,GAAG;SACR,KAAK,CAAC,GAAG,CAAC;SACV,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9G,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,OAA8B,EAC9B,MAAiB,EACjB,KAAkB;IAElB,MAAM,UAAU,GAAG,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,KAAK,MAAM,SAAS,IAAI,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,CAAC;IACF,CAAC;SAAM,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC7B,KAAK,MAAM,QAAQ,IAAI,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,CAAC;IACF,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACzD,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC7C,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,OAA8B,EAC9B,MAAiB,EACjB,KAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;YACzF,OAAO;QACR,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC5B,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC;YACzD,CAAC,CAAC,MAAM,uBAAuB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACrE,OAAO;IACR,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,OAAO,EAAE,CAAC;QACb,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnD,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,iDAAiD,QAAQ,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1E,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACxD,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACjC,MAAM,aAAa,CAAC,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IACxF,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC9B,OAA8B,EAC9B,MAAiB,EACjB,KAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACjH,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO;IACR,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;QACzF,OAAO;IACR,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;QAC5B,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC;QACzD,CAAC,CAAC,MAAM,uBAAuB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACrD,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,YAAY,CAC1B,OAA8B,EAC9B,SAAiB,EACjB,SAAmB,EACnB,GAAW;IAEX,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IAEnE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;QAChF,GAAG,EAAE,SAAS;QACd,SAAS,EAAE,kBAAkB;KAC7B,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,GAAG,GAAG,WAAW,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE;QACpF,GAAG,EAAE,SAAS;QACd,SAAS,EAAE,kBAAkB;KAC7B,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,OAAO;IACR,CAAC;IAED,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IACxF,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IAE3E,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACxD,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACjC,MAAM,aAAa,CAAC,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IACxF,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAA8B,EAC9B,MAAiB,EACjB,SAAiB;IAEjB,IAAI,oBAAoB,EAAE,EAAE,CAAC;QAC5B,OAAO;IACR,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,SAAS,KAAK,EAAE,KAAK,IAAI,EAAE;YACvF,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC9B,OAA8B,EAC9B,MAAiB,EACjB,KAAkB;IAElB,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO;IACnC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,oBAAoB,CAAC,SAAS,EAAE,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB,EAAE,WAA+B;IAC/E,IAAI,CAAC,WAAW;QAAE,OAAO;IACzB,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACjC,OAAO,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QACrE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3B,SAAS;QACV,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM;QAC9B,IAAI,CAAC;YACJ,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACR,MAAM;QACP,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAA8B,EAAE,aAAqB;IAChG,IAAI,oBAAoB,EAAE,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;YAChF,GAAG,EAAE,aAAa;YAClB,SAAS,EAAE,kBAAkB;SAC7B,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAClE,OAAO,SAAS,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,OAA8B,EAAE,aAAqB;IACpF,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACpE,IAAI,WAAW,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;QAC3G,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACtD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACtG,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,OAA8B,EAC9B,aAAqB;IAErB,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE;YACtG,GAAG,EAAE,aAAa;YAClB,SAAS,EAAE,kBAAkB;SAC7B,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,eAAe,EAAE,CAAC,CAAC;QAC/G,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE;YAClF,GAAG,EAAE,aAAa;YAClB,SAAS,EAAE,kBAAkB;SAC7B,CAAC,CAAC;QACH,OAAO;YACN,GAAG,EAAE,aAAa;YAClB,IAAI;YACJ,SAAS,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,MAAM,wBAAwB,MAAM,EAAE,CAAC;SAC7G,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACpH,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE;YAClF,GAAG,EAAE,aAAa;YAClB,SAAS,EAAE,kBAAkB;SAC7B,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,0BAA0B,CAAC,EAAE;YAC3G,GAAG,EAAE,aAAa;YAClB,SAAS,EAAE,kBAAkB;SAC7B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QAC5E,IAAI,MAAM,EAAE,CAAC;YACZ,OAAO;gBACN,GAAG,EAAE,aAAa;gBAClB,IAAI;gBACJ,SAAS,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,MAAM,wBAAwB,MAAM,EAAE,CAAC;aAC7G,CAAC;QACH,CAAC;QACD,OAAO;YACN,GAAG,EAAE,aAAa;YAClB,IAAI;YACJ,SAAS,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,gCAAgC,CAAC;SACxF,CAAC;IACH,CAAC;AACF,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,OAA8B,EAAE,aAAqB;IACrF,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE;YACtG,GAAG,EAAE,aAAa;YAClB,SAAS,EAAE,kBAAkB;SAC7B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QACrD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,SAAS,mBAAmB,CAAC,OAA8B,EAAE,aAAqB,EAAE,IAAc;IACjG,OAAO,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE;QAC9C,GAAG,EAAE,aAAa;QAClB,SAAS,EAAE,kBAAkB;QAC7B,GAAG,EAAE,EAAE,mBAAmB,EAAE,GAAG,EAAE;KACjC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { existsSync, mkdirSync, readdirSync, rmSync } from \"node:fs\";\nimport { dirname, join, resolve } from \"node:path\";\nimport { getProjectConfigDirs } from \"../config.ts\";\nimport type { GitSource } from \"../utils/git.ts\";\nimport { NETWORK_TIMEOUT_MS } from \"./package-manager-constants.ts\";\nimport { runCommand, runCommandCapture } from \"./package-manager-command.ts\";\nimport { isOfflineModeEnabled } from \"./package-manager-env.ts\";\nimport { getBaseDirsForScope, getGitInstallPath, getGitInstallRoot } from \"./package-manager-paths.ts\";\nimport { withProgress } from \"./package-manager-progress.ts\";\nimport { ensureGitIgnore, getGitDependencyInstallArgs, runNpmCommand } from \"./package-manager-npm.ts\";\nimport type { GitUpdateTargetInfo, PackageManagerContext, SourceScope } from \"./package-manager-types.ts\";\n\nfunction runGitProcess(\n\tcontext: PackageManagerContext,\n\tcommand: string,\n\targs: string[],\n\toptions?: { cwd?: string },\n): Promise<void> {\n\treturn context.driver ? context.driver.runCommand(command, args, options) : runCommand(command, args, options);\n}\n\nfunction captureGitProcess(\n\tcontext: PackageManagerContext,\n\tcommand: string,\n\targs: string[],\n\toptions?: { cwd?: string; timeoutMs?: number; env?: Record<string, string> },\n): Promise<string> {\n\treturn context.driver\n\t\t? context.driver.runCommandCapture(command, args, options)\n\t\t: runCommandCapture(command, args, options);\n}\n\nfunction getSafeGitRef(ref: string): string {\n\tif (!isSafeGitRef(ref)) {\n\t\tthrow new Error(`Invalid git ref: ${JSON.stringify(ref)}`);\n\t}\n\treturn ref;\n}\n\nfunction isSafeGitRef(ref: string): boolean {\n\tif (!ref || ref === \"@\" || ref.startsWith(\"-\") || ref.endsWith(\".\") || ref.endsWith(\"/\")) {\n\t\treturn false;\n\t}\n\tif (/[\\x00-\\x1f\\x7f\\s~^:?*\\[\\]\\\\]/u.test(ref)) {\n\t\treturn false;\n\t}\n\tif (ref.includes(\"..\") || ref.includes(\"@{\") || ref.includes(\"//\")) {\n\t\treturn false;\n\t}\n\treturn ref\n\t\t.split(\"/\")\n\t\t.every((part) => part && part !== \".\" && part !== \"..\" && !part.startsWith(\".\") && !part.endsWith(\".lock\"));\n}\n\nexport function getExistingGitInstallPath(\n\tcontext: PackageManagerContext,\n\tsource: GitSource,\n\tscope: SourceScope,\n): string | undefined {\n\tconst candidates = [getGitInstallPath(context, source, scope)];\n\tif (scope === \"project\") {\n\t\tfor (const configDir of getProjectConfigDirs(context.cwd)) {\n\t\t\tcandidates.push(join(configDir, \"git\", source.host, source.path));\n\t\t}\n\t} else if (scope === \"user\") {\n\t\tfor (const agentDir of getBaseDirsForScope(context, \"user\")) {\n\t\t\tcandidates.push(join(agentDir, \"git\", source.host, source.path));\n\t\t}\n\t}\n\tfor (const candidate of Array.from(new Set(candidates))) {\n\t\tif (existsSync(candidate)) return candidate;\n\t}\n\treturn undefined;\n}\n\nexport async function installGit(\n\tcontext: PackageManagerContext,\n\tsource: GitSource,\n\tscope: SourceScope,\n): Promise<void> {\n\tconst safeRef = source.ref ? getSafeGitRef(source.ref) : undefined;\n\tconst targetDir = getGitInstallPath(context, source, scope);\n\tif (existsSync(targetDir)) {\n\t\tif (safeRef) {\n\t\t\tawait ensureGitRef(context, targetDir, [\"fetch\", \"origin\", \"--\", safeRef], \"FETCH_HEAD\");\n\t\t\treturn;\n\t\t}\n\t\tconst target = context.driver\n\t\t\t? await context.driver.getLocalGitUpdateTarget(targetDir)\n\t\t\t: await getLocalGitUpdateTarget(context, targetDir);\n\t\tawait ensureGitRef(context, targetDir, target.fetchArgs, target.ref);\n\t\treturn;\n\t}\n\tconst gitRoot = getGitInstallRoot(context, scope);\n\tif (gitRoot) {\n\t\tensureGitIgnore(gitRoot);\n\t}\n\tmkdirSync(dirname(targetDir), { recursive: true });\n\n\t// Defense-in-depth: the clone URL is already parsed/validated upstream, but\n\t// assert it contains only shell-safe characters immediately before it reaches\n\t// `git clone`, so no metacharacter can ever reach a shell even on platforms\n\t// that wrap process spawns. Capture the validated value in a local so the\n\t// guard sanitizes exactly the binding handed to the spawn.\n\tconst cloneUrl = source.repo;\n\tif (!/^[A-Za-z0-9._~:@\\/%+-]+$/.test(cloneUrl)) {\n\t\tthrow new Error(`Refusing to clone repository with unsafe URL: ${cloneUrl}`);\n\t}\n\tawait runGitProcess(context, \"git\", [\"clone\", \"--\", cloneUrl, targetDir]);\n\tif (safeRef) {\n\t\tawait runGitProcess(context, \"git\", [\"checkout\", safeRef], { cwd: targetDir });\n\t}\n\tconst packageJsonPath = join(targetDir, \"package.json\");\n\tif (existsSync(packageJsonPath)) {\n\t\tawait runNpmCommand(context, getGitDependencyInstallArgs(context), { cwd: targetDir });\n\t}\n}\n\nexport async function updateGit(\n\tcontext: PackageManagerContext,\n\tsource: GitSource,\n\tscope: SourceScope,\n): Promise<void> {\n\tconst safeRef = source.ref ? getSafeGitRef(source.ref) : undefined;\n\tconst targetDir = getExistingGitInstallPath(context, source, scope) ?? getGitInstallPath(context, source, scope);\n\tif (!existsSync(targetDir)) {\n\t\tawait installGit(context, source, scope);\n\t\treturn;\n\t}\n\tif (safeRef) {\n\t\tawait ensureGitRef(context, targetDir, [\"fetch\", \"origin\", \"--\", safeRef], \"FETCH_HEAD\");\n\t\treturn;\n\t}\n\tconst target = context.driver\n\t\t? await context.driver.getLocalGitUpdateTarget(targetDir)\n\t\t: await getLocalGitUpdateTarget(context, targetDir);\n\tawait ensureGitRef(context, targetDir, target.fetchArgs, target.ref);\n}\n\nasync function ensureGitRef(\n\tcontext: PackageManagerContext,\n\ttargetDir: string,\n\tfetchArgs: string[],\n\tref: string,\n): Promise<void> {\n\tawait runGitProcess(context, \"git\", fetchArgs, { cwd: targetDir });\n\n\tconst localHead = await captureGitProcess(context, \"git\", [\"rev-parse\", \"HEAD\"], {\n\t\tcwd: targetDir,\n\t\ttimeoutMs: NETWORK_TIMEOUT_MS,\n\t});\n\tconst commitRef = `${ref}^{commit}`;\n\tconst targetHead = await captureGitProcess(context, \"git\", [\"rev-parse\", commitRef], {\n\t\tcwd: targetDir,\n\t\ttimeoutMs: NETWORK_TIMEOUT_MS,\n\t});\n\tif (localHead.trim() === targetHead.trim()) {\n\t\treturn;\n\t}\n\n\tawait runGitProcess(context, \"git\", [\"reset\", \"--hard\", commitRef], { cwd: targetDir });\n\tawait runGitProcess(context, \"git\", [\"clean\", \"-fdx\"], { cwd: targetDir });\n\n\tconst packageJsonPath = join(targetDir, \"package.json\");\n\tif (existsSync(packageJsonPath)) {\n\t\tawait runNpmCommand(context, getGitDependencyInstallArgs(context), { cwd: targetDir });\n\t}\n}\n\nexport async function refreshTemporaryGitSource(\n\tcontext: PackageManagerContext,\n\tsource: GitSource,\n\tsourceStr: string,\n): Promise<void> {\n\tif (isOfflineModeEnabled()) {\n\t\treturn;\n\t}\n\ttry {\n\t\tawait withProgress(context, \"pull\", sourceStr, `Refreshing ${sourceStr}...`, async () => {\n\t\t\tawait updateGit(context, source, \"temporary\");\n\t\t});\n\t} catch {}\n}\n\nexport async function removeGit(\n\tcontext: PackageManagerContext,\n\tsource: GitSource,\n\tscope: SourceScope,\n): Promise<void> {\n\tconst targetDir = getGitInstallPath(context, source, scope);\n\tif (!existsSync(targetDir)) return;\n\trmSync(targetDir, { recursive: true, force: true });\n\tpruneEmptyGitParents(targetDir, getGitInstallRoot(context, scope));\n}\n\nfunction pruneEmptyGitParents(targetDir: string, installRoot: string | undefined): void {\n\tif (!installRoot) return;\n\tconst resolvedRoot = resolve(installRoot);\n\tlet current = dirname(targetDir);\n\twhile (current.startsWith(resolvedRoot) && current !== resolvedRoot) {\n\t\tif (!existsSync(current)) {\n\t\t\tcurrent = dirname(current);\n\t\t\tcontinue;\n\t\t}\n\t\tconst entries = readdirSync(current);\n\t\tif (entries.length > 0) break;\n\t\ttry {\n\t\t\trmSync(current, { recursive: true, force: true });\n\t\t} catch {\n\t\t\tbreak;\n\t\t}\n\t\tcurrent = dirname(current);\n\t}\n}\n\nexport async function gitHasAvailableUpdate(context: PackageManagerContext, installedPath: string): Promise<boolean> {\n\tif (isOfflineModeEnabled()) {\n\t\treturn false;\n\t}\n\ttry {\n\t\tconst localHead = await captureGitProcess(context, \"git\", [\"rev-parse\", \"HEAD\"], {\n\t\t\tcwd: installedPath,\n\t\t\ttimeoutMs: NETWORK_TIMEOUT_MS,\n\t\t});\n\t\tconst remoteHead = await getRemoteGitHead(context, installedPath);\n\t\treturn localHead.trim() !== remoteHead.trim();\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nasync function getRemoteGitHead(context: PackageManagerContext, installedPath: string): Promise<string> {\n\tconst upstreamRef = await getGitUpstreamRef(context, installedPath);\n\tif (upstreamRef) {\n\t\tconst remoteHead = await runGitRemoteCommand(context, installedPath, [\"ls-remote\", \"origin\", upstreamRef]);\n\t\tconst match = remoteHead.match(/^([0-9a-f]{40})\\s+/m);\n\t\tif (match?.[1]) return match[1];\n\t}\n\n\tconst remoteHead = await runGitRemoteCommand(context, installedPath, [\"ls-remote\", \"origin\", \"HEAD\"]);\n\tconst match = remoteHead.match(/^([0-9a-f]{40})\\s+HEAD$/m);\n\tif (!match?.[1]) {\n\t\tthrow new Error(\"Failed to determine remote HEAD\");\n\t}\n\treturn match[1];\n}\n\nexport async function getLocalGitUpdateTarget(\n\tcontext: PackageManagerContext,\n\tinstalledPath: string,\n): Promise<GitUpdateTargetInfo> {\n\ttry {\n\t\tconst upstream = await captureGitProcess(context, \"git\", [\"rev-parse\", \"--abbrev-ref\", \"@{upstream}\"], {\n\t\t\tcwd: installedPath,\n\t\t\ttimeoutMs: NETWORK_TIMEOUT_MS,\n\t\t});\n\t\tconst trimmedUpstream = upstream.trim();\n\t\tif (!trimmedUpstream.startsWith(\"origin/\")) throw new Error(`Unsupported upstream remote: ${trimmedUpstream}`);\n\t\tconst branch = trimmedUpstream.slice(\"origin/\".length);\n\t\tif (!branch) throw new Error(\"Missing upstream branch name\");\n\t\tconst head = await captureGitProcess(context, \"git\", [\"rev-parse\", \"@{upstream}\"], {\n\t\t\tcwd: installedPath,\n\t\t\ttimeoutMs: NETWORK_TIMEOUT_MS,\n\t\t});\n\t\treturn {\n\t\t\tref: \"@{upstream}\",\n\t\t\thead,\n\t\t\tfetchArgs: [\"fetch\", \"--prune\", \"--no-tags\", \"origin\", `+refs/heads/${branch}:refs/remotes/origin/${branch}`],\n\t\t};\n\t} catch {\n\t\tawait runGitProcess(context, \"git\", [\"remote\", \"set-head\", \"origin\", \"-a\"], { cwd: installedPath }).catch(() => {});\n\t\tconst head = await captureGitProcess(context, \"git\", [\"rev-parse\", \"origin/HEAD\"], {\n\t\t\tcwd: installedPath,\n\t\t\ttimeoutMs: NETWORK_TIMEOUT_MS,\n\t\t});\n\t\tconst originHeadRef = await captureGitProcess(context, \"git\", [\"symbolic-ref\", \"refs/remotes/origin/HEAD\"], {\n\t\t\tcwd: installedPath,\n\t\t\ttimeoutMs: NETWORK_TIMEOUT_MS,\n\t\t}).catch(() => \"\");\n\t\tconst branch = originHeadRef.trim().replace(/^refs\\/remotes\\/origin\\//, \"\");\n\t\tif (branch) {\n\t\t\treturn {\n\t\t\t\tref: \"origin/HEAD\",\n\t\t\t\thead,\n\t\t\t\tfetchArgs: [\"fetch\", \"--prune\", \"--no-tags\", \"origin\", `+refs/heads/${branch}:refs/remotes/origin/${branch}`],\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tref: \"origin/HEAD\",\n\t\t\thead,\n\t\t\tfetchArgs: [\"fetch\", \"--prune\", \"--no-tags\", \"origin\", \"+HEAD:refs/remotes/origin/HEAD\"],\n\t\t};\n\t}\n}\n\nasync function getGitUpstreamRef(context: PackageManagerContext, installedPath: string): Promise<string | undefined> {\n\ttry {\n\t\tconst upstream = await captureGitProcess(context, \"git\", [\"rev-parse\", \"--abbrev-ref\", \"@{upstream}\"], {\n\t\t\tcwd: installedPath,\n\t\t\ttimeoutMs: NETWORK_TIMEOUT_MS,\n\t\t});\n\t\tconst trimmed = upstream.trim();\n\t\tif (!trimmed.startsWith(\"origin/\")) return undefined;\n\t\tconst branch = trimmed.slice(\"origin/\".length);\n\t\treturn branch ? `refs/heads/${branch}` : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction runGitRemoteCommand(context: PackageManagerContext, installedPath: string, args: string[]): Promise<string> {\n\treturn captureGitProcess(context, \"git\", args, {\n\t\tcwd: installedPath,\n\t\ttimeoutMs: NETWORK_TIMEOUT_MS,\n\t\tenv: { GIT_TERMINAL_PROMPT: \"0\" },\n\t});\n}\n\n"]}

package/dist/core/package-manager-manifest.d.ts

@@ -0,0 +1,7 @@
+import type { PiManifest, ResourceType } from "./package-manager-types.ts";
+export declare function getManifestFromPackageJson(pkg: Record<string, unknown>): PiManifest | null;
+export declare function readPiManifestFile(packageJsonPath: string): PiManifest | null;
+export declare function readPiManifest(packageRoot: string): PiManifest | null;
+export declare function conventionDirsForResource(packageRoot: string, resourceType: ResourceType): string[];
+export declare function manifestEntriesForResource(manifest: PiManifest | null, resourceType: ResourceType): string[] | undefined;
+//# sourceMappingURL=package-manager-manifest.d.ts.map

package/dist/core/package-manager-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-manager-manifest.d.ts","sourceRoot":"","sources":["../../src/core/package-manager-manifest.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE3E,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,GAAG,IAAI,CAU1F;AAED,wBAAgB,kBAAkB,CAAC,eAAe,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAQ7E;AAED,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAMrE;AAED,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,GAAG,MAAM,EAAE,CAKnG;AAED,wBAAgB,0BAA0B,CACzC,QAAQ,EAAE,UAAU,GAAG,IAAI,EAC3B,YAAY,EAAE,YAAY,GACxB,MAAM,EAAE,GAAG,SAAS,CAItB","sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { APP_NAME } from \"../config.ts\";\nimport type { PiManifest, ResourceType } from \"./package-manager-types.ts\";\n\nexport function getManifestFromPackageJson(pkg: Record<string, unknown>): PiManifest | null {\n\tconst appManifest = pkg[APP_NAME];\n\tif (appManifest && typeof appManifest === \"object\" && !Array.isArray(appManifest)) {\n\t\treturn appManifest as PiManifest;\n\t}\n\tconst legacyManifest = pkg.pi;\n\tif (legacyManifest && typeof legacyManifest === \"object\" && !Array.isArray(legacyManifest)) {\n\t\treturn legacyManifest as PiManifest;\n\t}\n\treturn null;\n}\n\nexport function readPiManifestFile(packageJsonPath: string): PiManifest | null {\n\ttry {\n\t\tconst content = readFileSync(packageJsonPath, \"utf-8\");\n\t\tconst pkg = JSON.parse(content) as Record<string, unknown>;\n\t\treturn getManifestFromPackageJson(pkg);\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nexport function readPiManifest(packageRoot: string): PiManifest | null {\n\tconst packageJsonPath = join(packageRoot, \"package.json\");\n\tif (!existsSync(packageJsonPath)) {\n\t\treturn null;\n\t}\n\treturn readPiManifestFile(packageJsonPath);\n}\n\nexport function conventionDirsForResource(packageRoot: string, resourceType: ResourceType): string[] {\n\tif (resourceType === \"workflows\") {\n\t\treturn [join(packageRoot, \"workflows\"), join(packageRoot, \"workflow\")];\n\t}\n\treturn [join(packageRoot, resourceType)];\n}\n\nexport function manifestEntriesForResource(\n\tmanifest: PiManifest | null,\n\tresourceType: ResourceType,\n): string[] | undefined {\n\tif (!manifest) return undefined;\n\tif (resourceType === \"workflows\") return manifest.workflows ?? manifest.workflow;\n\treturn manifest[resourceType];\n}\n"]}

package/dist/core/package-manager-manifest.js

@@ -0,0 +1,45 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { APP_NAME } from "../config.js";
+export function getManifestFromPackageJson(pkg) {
+    const appManifest = pkg[APP_NAME];
+    if (appManifest && typeof appManifest === "object" && !Array.isArray(appManifest)) {
+        return appManifest;
+    }
+    const legacyManifest = pkg.pi;
+    if (legacyManifest && typeof legacyManifest === "object" && !Array.isArray(legacyManifest)) {
+        return legacyManifest;
+    }
+    return null;
+}
+export function readPiManifestFile(packageJsonPath) {
+    try {
+        const content = readFileSync(packageJsonPath, "utf-8");
+        const pkg = JSON.parse(content);
+        return getManifestFromPackageJson(pkg);
+    }
+    catch {
+        return null;
+    }
+}
+export function readPiManifest(packageRoot) {
+    const packageJsonPath = join(packageRoot, "package.json");
+    if (!existsSync(packageJsonPath)) {
+        return null;
+    }
+    return readPiManifestFile(packageJsonPath);
+}
+export function conventionDirsForResource(packageRoot, resourceType) {
+    if (resourceType === "workflows") {
+        return [join(packageRoot, "workflows"), join(packageRoot, "workflow")];
+    }
+    return [join(packageRoot, resourceType)];
+}
+export function manifestEntriesForResource(manifest, resourceType) {
+    if (!manifest)
+        return undefined;
+    if (resourceType === "workflows")
+        return manifest.workflows ?? manifest.workflow;
+    return manifest[resourceType];
+}
+//# sourceMappingURL=package-manager-manifest.js.map

package/dist/core/package-manager-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-manager-manifest.js","sourceRoot":"","sources":["../../src/core/package-manager-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGxC,MAAM,UAAU,0BAA0B,CAAC,GAA4B;IACtE,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACnF,OAAO,WAAyB,CAAC;IAClC,CAAC;IACD,MAAM,cAAc,GAAG,GAAG,CAAC,EAAE,CAAC;IAC9B,IAAI,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5F,OAAO,cAA4B,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,eAAuB;IACzD,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;QAC3D,OAAO,0BAA0B,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,WAAmB;IACjD,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,kBAAkB,CAAC,eAAe,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,WAAmB,EAAE,YAA0B;IACxF,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,QAA2B,EAC3B,YAA0B;IAE1B,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,YAAY,KAAK,WAAW;QAAE,OAAO,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC;IACjF,OAAO,QAAQ,CAAC,YAAY,CAAC,CAAC;AAC/B,CAAC","sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { APP_NAME } from \"../config.ts\";\nimport type { PiManifest, ResourceType } from \"./package-manager-types.ts\";\n\nexport function getManifestFromPackageJson(pkg: Record<string, unknown>): PiManifest | null {\n\tconst appManifest = pkg[APP_NAME];\n\tif (appManifest && typeof appManifest === \"object\" && !Array.isArray(appManifest)) {\n\t\treturn appManifest as PiManifest;\n\t}\n\tconst legacyManifest = pkg.pi;\n\tif (legacyManifest && typeof legacyManifest === \"object\" && !Array.isArray(legacyManifest)) {\n\t\treturn legacyManifest as PiManifest;\n\t}\n\treturn null;\n}\n\nexport function readPiManifestFile(packageJsonPath: string): PiManifest | null {\n\ttry {\n\t\tconst content = readFileSync(packageJsonPath, \"utf-8\");\n\t\tconst pkg = JSON.parse(content) as Record<string, unknown>;\n\t\treturn getManifestFromPackageJson(pkg);\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nexport function readPiManifest(packageRoot: string): PiManifest | null {\n\tconst packageJsonPath = join(packageRoot, \"package.json\");\n\tif (!existsSync(packageJsonPath)) {\n\t\treturn null;\n\t}\n\treturn readPiManifestFile(packageJsonPath);\n}\n\nexport function conventionDirsForResource(packageRoot: string, resourceType: ResourceType): string[] {\n\tif (resourceType === \"workflows\") {\n\t\treturn [join(packageRoot, \"workflows\"), join(packageRoot, \"workflow\")];\n\t}\n\treturn [join(packageRoot, resourceType)];\n}\n\nexport function manifestEntriesForResource(\n\tmanifest: PiManifest | null,\n\tresourceType: ResourceType,\n): string[] | undefined {\n\tif (!manifest) return undefined;\n\tif (resourceType === \"workflows\") return manifest.workflows ?? manifest.workflow;\n\treturn manifest[resourceType];\n}\n"]}

package/dist/core/package-manager-npm.d.ts

@@ -0,0 +1,25 @@
+import type { InstalledSourceScope, NpmSource, PackageManagerContext, SourceScope } from "./package-manager-types.ts";
+export declare function getNpmCommand(context: PackageManagerContext): {
+    command: string;
+    args: string[];
+};
+export declare function getPackageManagerName(context: PackageManagerContext): string;
+export declare function runNpmCommand(context: PackageManagerContext, args: string[], options?: {
+    cwd?: string;
+}): Promise<void>;
+export declare function runNpmCommandSync(context: PackageManagerContext, args: string[]): string;
+export declare function getGitDependencyInstallArgs(context: PackageManagerContext): string[];
+export declare function getNpmInstallArgs(context: PackageManagerContext, specs: string[], installRoot: string): string[];
+export declare function installNpm(context: PackageManagerContext, source: NpmSource, scope: SourceScope, temporary: boolean): Promise<void>;
+export declare function uninstallNpm(context: PackageManagerContext, source: NpmSource, scope: SourceScope): Promise<void>;
+export declare function installNpmBatch(context: PackageManagerContext, specs: string[], scope: InstalledSourceScope): Promise<void>;
+export declare function ensureGitIgnore(dir: string): void;
+export declare function getManagedNpmInstallPath(context: PackageManagerContext, source: NpmSource, scope: SourceScope): string;
+export declare function getGlobalNpmRoot(context: PackageManagerContext): string;
+export declare function getNpmInstallPath(context: PackageManagerContext, source: NpmSource, scope: SourceScope): string;
+export declare function getExistingNpmInstallPath(context: PackageManagerContext, source: NpmSource, scope: SourceScope): string | undefined;
+export declare function installedNpmMatchesConfiguredVersion(context: PackageManagerContext, source: NpmSource, installedPath: string): Promise<boolean>;
+export declare function npmHasAvailableUpdate(context: PackageManagerContext, source: NpmSource, installedPath: string): Promise<boolean>;
+export declare function getInstalledNpmVersion(installedPath: string): string | undefined;
+export declare function getLatestNpmVersion(context: PackageManagerContext, packageSpec: string, range?: string): Promise<string>;
+//# sourceMappingURL=package-manager-npm.d.ts.map

package/dist/core/package-manager-npm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-manager-npm.d.ts","sourceRoot":"","sources":["../../src/core/package-manager-npm.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEtH,wBAAgB,aAAa,CAAC,OAAO,EAAE,qBAAqB,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAUjG;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAM5E;AAED,wBAAsB,aAAa,CAClC,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACxB,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAMxF;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,EAAE,CAMpF;AAED,wBAAgB,iBAAiB,CAChC,OAAO,EAAE,qBAAqB,EAC9B,KAAK,EAAE,MAAM,EAAE,EACf,WAAW,EAAE,MAAM,GACjB,MAAM,EAAE,CAiBV;AAED,wBAAsB,UAAU,CAC/B,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,OAAO,GAChB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,YAAY,CACjC,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,WAAW,GAChB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,wBAAsB,eAAe,CACpC,OAAO,EAAE,qBAAqB,EAC9B,KAAK,EAAE,MAAM,EAAE,EACf,KAAK,EAAE,oBAAoB,GACzB,OAAO,CAAC,IAAI,CAAC,CAIf;AAeD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAQjD;AAED,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,WAAW,GAChB,MAAM,CAQR;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAcvE;AA0BD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,GAAG,MAAM,CAO/G;AAED,wBAAgB,yBAAyB,CACxC,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,WAAW,GAChB,MAAM,GAAG,SAAS,CAWpB;AAED,wBAAsB,oCAAoC,CACzD,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,SAAS,EACjB,aAAa,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC,CAclB;AAED,wBAAsB,qBAAqB,CAC1C,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,SAAS,EACjB,aAAa,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC,CAUlB;AAED,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUhF;AAED,wBAAsB,mBAAmB,CACxC,OAAO,EAAE,qBAAqB,EAC9B,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAqBjB","sourcesContent":["import { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { basename, dirname, join } from \"node:path\";\nimport { maxSatisfying, rcompare, satisfies } from \"semver\";\nimport { APP_NAME, CONFIG_DIR_NAME, getProjectConfigDirs } from \"../config.ts\";\nimport { markPathIgnoredByCloudSync } from \"../utils/paths.ts\";\nimport { NETWORK_TIMEOUT_MS } from \"./package-manager-constants.ts\";\nimport { runCommand, runCommandCapture, runCommandSync } from \"./package-manager-command.ts\";\nimport { isOfflineModeEnabled } from \"./package-manager-env.ts\";\nimport { getNpmInstallRoot } from \"./package-manager-paths.ts\";\nimport type { InstalledSourceScope, NpmSource, PackageManagerContext, SourceScope } from \"./package-manager-types.ts\";\n\nexport function getNpmCommand(context: PackageManagerContext): { command: string; args: string[] } {\n\tconst configuredCommand = context.settingsManager.getNpmCommand();\n\tif (!configuredCommand || configuredCommand.length === 0) {\n\t\treturn { command: \"npm\", args: [] };\n\t}\n\tconst [command, ...args] = configuredCommand;\n\tif (!command) {\n\t\tthrow new Error(\"Invalid npmCommand: first array entry must be a non-empty command\");\n\t}\n\treturn { command, args };\n}\n\nexport function getPackageManagerName(context: PackageManagerContext): string {\n\tconst npmCommand = getNpmCommand(context);\n\tconst commandParts = [npmCommand.command, ...npmCommand.args];\n\tconst separatorIndex = commandParts.lastIndexOf(\"--\");\n\tconst packageManagerCommand = separatorIndex >= 0 ? commandParts[separatorIndex + 1] : npmCommand.command;\n\treturn packageManagerCommand ? basename(packageManagerCommand).replace(/\\.(cmd|exe)$/i, \"\") : \"\";\n}\n\nexport async function runNpmCommand(\n\tcontext: PackageManagerContext,\n\targs: string[],\n\toptions?: { cwd?: string },\n): Promise<void> {\n\tconst npmCommand = getNpmCommand(context);\n\tif (context.driver) {\n\t\tawait context.driver.runCommand(npmCommand.command, [...npmCommand.args, ...args], options);\n\t\treturn;\n\t}\n\tawait runCommand(npmCommand.command, [...npmCommand.args, ...args], options);\n}\n\nexport function runNpmCommandSync(context: PackageManagerContext, args: string[]): string {\n\tconst npmCommand = getNpmCommand(context);\n\tif (context.driver) {\n\t\treturn context.driver.runCommandSync(npmCommand.command, [...npmCommand.args, ...args]);\n\t}\n\treturn runCommandSync(npmCommand.command, [...npmCommand.args, ...args]);\n}\n\nexport function getGitDependencyInstallArgs(context: PackageManagerContext): string[] {\n\tconst configuredCommand = context.settingsManager.getNpmCommand();\n\tif (configuredCommand && configuredCommand.length > 0) {\n\t\treturn [\"install\"];\n\t}\n\treturn [\"install\", \"--omit=dev\"];\n}\n\nexport function getNpmInstallArgs(\n\tcontext: PackageManagerContext,\n\tspecs: string[],\n\tinstallRoot: string,\n): string[] {\n\tconst packageManagerName = getPackageManagerName(context);\n\tif (packageManagerName === \"bun\") {\n\t\treturn [\"install\", ...specs, \"--cwd\", installRoot, \"--omit=peer\"];\n\t}\n\tif (packageManagerName === \"pnpm\") {\n\t\treturn [\n\t\t\t\"install\",\n\t\t\t...specs,\n\t\t\t\"--prefix\",\n\t\t\tinstallRoot,\n\t\t\t\"--config.auto-install-peers=false\",\n\t\t\t\"--config.strict-peer-dependencies=false\",\n\t\t\t\"--config.strict-dep-builds=false\",\n\t\t];\n\t}\n\treturn [\"install\", ...specs, \"--prefix\", installRoot, \"--legacy-peer-deps\"];\n}\n\nexport async function installNpm(\n\tcontext: PackageManagerContext,\n\tsource: NpmSource,\n\tscope: SourceScope,\n\ttemporary: boolean,\n): Promise<void> {\n\tconst installRoot = getNpmInstallRoot(context, scope, temporary);\n\tensureNpmProject(installRoot);\n\tawait runNpmCommand(context, getNpmInstallArgs(context, [source.spec], installRoot));\n}\n\nexport async function uninstallNpm(\n\tcontext: PackageManagerContext,\n\tsource: NpmSource,\n\tscope: SourceScope,\n): Promise<void> {\n\tconst installRoot = getNpmInstallRoot(context, scope, false);\n\tif (!existsSync(installRoot)) {\n\t\treturn;\n\t}\n\tif (getPackageManagerName(context) === \"bun\") {\n\t\tawait runNpmCommand(context, [\"uninstall\", source.name, \"--cwd\", installRoot]);\n\t\treturn;\n\t}\n\tawait runNpmCommand(context, [\"uninstall\", source.name, \"--prefix\", installRoot]);\n}\n\nexport async function installNpmBatch(\n\tcontext: PackageManagerContext,\n\tspecs: string[],\n\tscope: InstalledSourceScope,\n): Promise<void> {\n\tconst installRoot = getNpmInstallRoot(context, scope, false);\n\tensureNpmProject(installRoot);\n\tawait runNpmCommand(context, getNpmInstallArgs(context, specs, installRoot));\n}\n\nfunction ensureNpmProject(installRoot: string): void {\n\tif (!existsSync(installRoot)) {\n\t\tmkdirSync(installRoot, { recursive: true });\n\t}\n\tmarkPathIgnoredByCloudSync(installRoot);\n\tensureGitIgnore(installRoot);\n\tconst packageJsonPath = join(installRoot, \"package.json\");\n\tif (!existsSync(packageJsonPath)) {\n\t\tconst pkgJson = { name: `${APP_NAME}-extensions`, private: true };\n\t\twriteFileSync(packageJsonPath, JSON.stringify(pkgJson, null, 2), \"utf-8\");\n\t}\n}\n\nexport function ensureGitIgnore(dir: string): void {\n\tif (!existsSync(dir)) {\n\t\tmkdirSync(dir, { recursive: true });\n\t}\n\tconst ignorePath = join(dir, \".gitignore\");\n\tif (!existsSync(ignorePath)) {\n\t\twriteFileSync(ignorePath, \"*\\n!.gitignore\\n\", \"utf-8\");\n\t}\n}\n\nexport function getManagedNpmInstallPath(\n\tcontext: PackageManagerContext,\n\tsource: NpmSource,\n\tscope: SourceScope,\n): string {\n\tif (scope === \"temporary\") {\n\t\treturn join(getNpmInstallRoot(context, scope, true), \"node_modules\", source.name);\n\t}\n\tif (scope === \"project\") {\n\t\treturn join(context.cwd, CONFIG_DIR_NAME, \"npm\", \"node_modules\", source.name);\n\t}\n\treturn join(context.agentDir, \"npm\", \"node_modules\", source.name);\n}\n\nexport function getGlobalNpmRoot(context: PackageManagerContext): string {\n\tconst npmCommand = getNpmCommand(context);\n\tconst commandKey = [npmCommand.command, ...npmCommand.args].join(\"\\0\");\n\tif (context.globalNpmRoot && context.globalNpmRootCommandKey === commandKey) {\n\t\treturn context.globalNpmRoot;\n\t}\n\tif (getPackageManagerName(context) === \"bun\") {\n\t\tconst binDir = runNpmCommandSync(context, [\"pm\", \"bin\", \"-g\"]).trim();\n\t\tcontext.globalNpmRoot = join(dirname(binDir), \"install\", \"global\", \"node_modules\");\n\t} else {\n\t\tcontext.globalNpmRoot = runNpmCommandSync(context, [\"root\", \"-g\"]).trim();\n\t}\n\tcontext.globalNpmRootCommandKey = commandKey;\n\treturn context.globalNpmRoot;\n}\n\nfunction getPnpmGlobalPackagePath(context: PackageManagerContext, packageName: string): string | undefined {\n\tif (getPackageManagerName(context) !== \"pnpm\") {\n\t\treturn undefined;\n\t}\n\tconst output = runNpmCommandSync(context, [\"list\", \"-g\", \"--depth\", \"0\", \"--json\"]);\n\tconst entries = JSON.parse(output) as Array<{ dependencies?: Record<string, { path?: string }> }>;\n\tfor (const entry of entries) {\n\t\tconst path = entry.dependencies?.[packageName]?.path;\n\t\tif (path) return path;\n\t}\n\treturn undefined;\n}\n\nfunction getLegacyGlobalNpmInstallPath(context: PackageManagerContext, source: NpmSource): string | undefined {\n\ttry {\n\t\tconst pnpmPath = getPnpmGlobalPackagePath(context, source.name);\n\t\tif (pnpmPath) return pnpmPath;\n\t\tconst globalRoot = context.driver?.getGlobalNpmRoot ? context.driver.getGlobalNpmRoot() : getGlobalNpmRoot(context);\n\t\treturn join(globalRoot, source.name);\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nexport function getNpmInstallPath(context: PackageManagerContext, source: NpmSource, scope: SourceScope): string {\n\tconst managedPath = getManagedNpmInstallPath(context, source, scope);\n\tif (scope !== \"user\" || existsSync(managedPath)) {\n\t\treturn managedPath;\n\t}\n\tconst legacyPath = getLegacyGlobalNpmInstallPath(context, source);\n\treturn legacyPath && existsSync(legacyPath) ? legacyPath : managedPath;\n}\n\nexport function getExistingNpmInstallPath(\n\tcontext: PackageManagerContext,\n\tsource: NpmSource,\n\tscope: SourceScope,\n): string | undefined {\n\tconst candidates = [getNpmInstallPath(context, source, scope)];\n\tif (scope === \"project\") {\n\t\tfor (const configDir of getProjectConfigDirs(context.cwd)) {\n\t\t\tcandidates.push(join(configDir, \"npm\", \"node_modules\", source.name));\n\t\t}\n\t}\n\tfor (const candidate of Array.from(new Set(candidates))) {\n\t\tif (existsSync(candidate)) return candidate;\n\t}\n\treturn undefined;\n}\n\nexport async function installedNpmMatchesConfiguredVersion(\n\tcontext: PackageManagerContext,\n\tsource: NpmSource,\n\tinstalledPath: string,\n): Promise<boolean> {\n\tconst installedVersion = getInstalledNpmVersion(installedPath);\n\tif (!installedVersion) return false;\n\tif (source.range) return satisfies(installedVersion, source.range);\n\tif (source.version !== undefined) {\n\t\tif (isOfflineModeEnabled()) return true;\n\t\ttry {\n\t\t\tconst targetVersion = await getLatestNpmVersion(context, source.spec);\n\t\t\treturn installedVersion === targetVersion;\n\t\t} catch {\n\t\t\treturn false;\n\t\t}\n\t}\n\treturn true;\n}\n\nexport async function npmHasAvailableUpdate(\n\tcontext: PackageManagerContext,\n\tsource: NpmSource,\n\tinstalledPath: string,\n): Promise<boolean> {\n\tif (isOfflineModeEnabled()) return false;\n\tconst installedVersion = getInstalledNpmVersion(installedPath);\n\tif (!installedVersion) return false;\n\ttry {\n\t\tconst targetVersion = await getLatestNpmVersion(context, source.version ? source.spec : source.name, source.range);\n\t\treturn targetVersion !== installedVersion;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nexport function getInstalledNpmVersion(installedPath: string): string | undefined {\n\tconst packageJsonPath = join(installedPath, \"package.json\");\n\tif (!existsSync(packageJsonPath)) return undefined;\n\ttry {\n\t\tconst content = readFileSync(packageJsonPath, \"utf-8\");\n\t\tconst pkg = JSON.parse(content) as { version?: string };\n\t\treturn pkg.version;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nexport async function getLatestNpmVersion(\n\tcontext: PackageManagerContext,\n\tpackageSpec: string,\n\trange?: string,\n): Promise<string> {\n\tconst npmCommand = getNpmCommand(context);\n\tconst stdout = context.driver\n\t\t? await context.driver.runCommandCapture(npmCommand.command, [...npmCommand.args, \"view\", packageSpec, \"version\", \"--json\"], {\n\t\t\t\tcwd: context.cwd,\n\t\t\t\ttimeoutMs: NETWORK_TIMEOUT_MS,\n\t\t\t})\n\t\t: await runCommandCapture(npmCommand.command, [...npmCommand.args, \"view\", packageSpec, \"version\", \"--json\"], {\n\t\t\t\tcwd: context.cwd,\n\t\t\t\ttimeoutMs: NETWORK_TIMEOUT_MS,\n\t\t\t});\n\tconst raw = stdout.trim();\n\tif (!raw) throw new Error(\"Empty response from npm view\");\n\tconst parsed = JSON.parse(raw) as string | string[];\n\tif (typeof parsed === \"string\") return parsed;\n\tif (Array.isArray(parsed)) {\n\t\tconst versions = parsed.filter((value) => typeof value === \"string\" && value.length > 0);\n\t\tconst latest = range ? maxSatisfying(versions, range) : [...versions].sort(rcompare)[0];\n\t\tif (latest) return latest;\n\t}\n\tthrow new Error(\"Unexpected response from npm view\");\n}\n"]}