@camstack/agent 1.1.51 → 1.1.53

package/dist/cli.js

@@ -2081,13 +2081,39 @@ function createAgentService(deps) {
               }
               return deps.installFromNpm(pkg, v);
             },
-            applyBundle: (buf) => applyDeployedBundle({
-              addonsDir: deps.addonsDir,
-              addonId,
-              bundle: buf,
-              extract,
-              logger: deploySwapLogger
-            }),
+            // #17: route the bundle through the agent's AddonInstaller when
+            // wired — installFromTgz runs the FULL post-install (manifest
+            // strip, runtime-deps npm install, manifest-driven NATIVE deps)
+            // with its own staged extract + atomic swap. The plain tar swap
+            // below never installed deps, so every pipeline/post-analysis
+            // deploy on the Mac Electron agent silently shipped without
+            // `sharp` et al. Fallback kept for agents without an installer
+            // (test harnesses).
+            applyBundle: async (buf) => {
+              if (deps.installBundleTgz) {
+                const tgzPath = path5.join(
+                  os2.tmpdir(),
+                  `camstack-deploy-${addonId.replace(/[^\w.-]/g, "_")}-${Date.now()}.tgz`
+                );
+                fs5.writeFileSync(tgzPath, buf);
+                try {
+                  const { name } = await deps.installBundleTgz(tgzPath);
+                  return { addonDir: path5.join(deps.addonsDir, name) };
+                } finally {
+                  try {
+                    fs5.unlinkSync(tgzPath);
+                  } catch {
+                  }
+                }
+              }
+              return applyDeployedBundle({
+                addonsDir: deps.addonsDir,
+                addonId,
+                bundle: buf,
+                extract,
+                logger: deploySwapLogger
+              });
+            },
             fetchBundle: (s) => fetchBundleFromHub(s),
             // Evict every addon DECLARATION id this package contributes
             // from `loadedAddons` so the follow-up `$agent.reload` actually
@@ -2682,7 +2708,11 @@ async function startAgent(configPath) {
     expectedClusterSecretHash: config.secret ? (0, import_system3.hashClusterSecret)(config.secret) : void 0,
     installFromNpm: async (pkg, version) => {
       await installer.install(pkg, version);
-    }
+    },
+    // #17: deployed bundles go through the installer's full post-install
+    // (manifest strip + runtime deps + native deps + atomic swap) instead of
+    // the bare tar swap that shipped addons without their node_modules.
+    installBundleTgz: (tgzPath) => installer.installFromTgz(tgzPath)
   });
   broker.createService(agentServiceSchema);
   const agentTcpPort = (0, import_system3.deriveAgentListenPort)(broker.nodeID);