@cjhyy/code-shell-core 0.7.1 → 0.8.1

package/dist/panel-apps/github-archive.js

@@ -0,0 +1,98 @@
+import { open, rm } from "node:fs/promises";
+import { PanelAppInstallError } from "./paths.js";
+const GITHUB_ARCHIVE_TIMEOUT_MS = 45_000;
+const MAX_GITHUB_ARCHIVE_BYTES = 128 * 1024 * 1024;
+const USER_AGENT = "CodeShell-panel-app-installer/1";
+function githubArchiveUrl(source) {
+    const parsed = new URL(source.url);
+    const parts = parsed.pathname.replace(/^\/+|\/+$/g, "").split("/");
+    const owner = parts[0];
+    const repository = parts[1]?.replace(/\.git$/i, "");
+    if (!owner || !repository) {
+        throw new PanelAppInstallError("GitHub Panel App source is invalid");
+    }
+    const ref = source.ref || "HEAD";
+    const encodedRef = ref
+        .split("/")
+        .map((segment) => encodeURIComponent(segment))
+        .join("/");
+    return new URL(`https://codeload.github.com/${encodeURIComponent(owner)}/${encodeURIComponent(repository)}/zip/${encodedRef}`);
+}
+/**
+ * Download one atomic GitHub source snapshot with bounded memory and disk use.
+ * Codeload avoids the smart-Git checkout path that can strand git-remote-https
+ * helpers on poor networks. The caller selectively extracts the requested
+ * Panel App subdirectory afterward.
+ */
+export async function downloadGitHubPanelAppArchive(source, targetPath, fetchImpl = globalThis.fetch) {
+    if (typeof fetchImpl !== "function") {
+        throw new PanelAppInstallError("GitHub source download is unavailable");
+    }
+    const url = githubArchiveUrl(source);
+    let response;
+    try {
+        response = await fetchImpl(url, {
+            method: "GET",
+            redirect: "error",
+            headers: {
+                Accept: "application/zip, application/octet-stream",
+                "Accept-Encoding": "identity",
+                "User-Agent": USER_AGENT,
+            },
+            signal: AbortSignal.timeout(GITHUB_ARCHIVE_TIMEOUT_MS),
+        });
+    }
+    catch (error) {
+        throw new PanelAppInstallError(`GitHub source download failed: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (response.status === 404) {
+        throw new PanelAppInstallError("GitHub repository or ref was not found");
+    }
+    if (!response.ok) {
+        throw new PanelAppInstallError(`GitHub source download returned HTTP ${response.status} ${response.statusText}`);
+    }
+    const declaredText = response.headers.get("content-length");
+    const declared = declaredText ? Number(declaredText) : undefined;
+    if (declaredText &&
+        (!/^[0-9]+$/.test(declaredText) ||
+            !Number.isSafeInteger(declared) ||
+            declared > MAX_GITHUB_ARCHIVE_BYTES)) {
+        throw new PanelAppInstallError(`GitHub source archive exceeds ${MAX_GITHUB_ARCHIVE_BYTES} bytes`);
+    }
+    if (!response.body) {
+        throw new PanelAppInstallError("GitHub source download returned an empty response");
+    }
+    const output = await open(targetPath, "wx", 0o600);
+    let total = 0;
+    let header = Buffer.alloc(0);
+    try {
+        for await (const value of response.body) {
+            const chunk = Buffer.from(value);
+            total += chunk.length;
+            if (total > MAX_GITHUB_ARCHIVE_BYTES) {
+                throw new PanelAppInstallError(`GitHub source archive exceeds ${MAX_GITHUB_ARCHIVE_BYTES} bytes`);
+            }
+            if (header.length < 4) {
+                header = Buffer.concat([header, chunk.subarray(0, 4 - header.length)]);
+            }
+            await output.write(chunk);
+        }
+        if (declared !== undefined && total !== declared) {
+            throw new PanelAppInstallError("GitHub source archive length does not match Content-Length");
+        }
+        if (header.length !== 4 ||
+            header[0] !== 0x50 ||
+            header[1] !== 0x4b ||
+            !((header[2] === 0x03 && header[3] === 0x04) || (header[2] === 0x05 && header[3] === 0x06))) {
+            throw new PanelAppInstallError("GitHub source response is not a ZIP archive");
+        }
+    }
+    catch (error) {
+        await output.close();
+        await rm(targetPath, { force: true }).catch(() => undefined);
+        if (error instanceof PanelAppInstallError)
+            throw error;
+        throw new PanelAppInstallError(`GitHub source download failed: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    await output.close();
+}

package/dist/panel-apps/index.d.ts

@@ -0,0 +1,4 @@
+export { PANEL_APP_ICONS, PANEL_APP_MANIFEST_FILE, PANEL_APP_PERMISSIONS, PanelAppAgentContribution, PanelAppAgentTool, PanelAppManifest, type PanelAppAgentContribution as PanelAppAgentContributionData, type PanelAppAgentTool as PanelAppAgentToolData, type PanelAppManifest as PanelAppManifestData, } from "./manifest.js";
+export { PanelAppAlreadyInstalledError, PanelAppInstallError, PanelAppReviewChangedError, assertSafePanelAppId, panelAppInstallDir, panelAppsRegistryPath, panelAppsRoot, } from "./paths.js";
+export { installReviewedLocalPanelApp, installReviewedPanelAppUpdate, listInstalledPanelApps, previewInstalledPanelAppUpdate, previewLocalPanelApp, uninstallPanelApp, type InstalledPanelApp, type InstalledPanelAppSource, type GitPanelAppSourceInput, type LocalPanelAppSourceInput, type PanelAppSourceInput, type PanelAppPreview, } from "./installer.js";
+export { isPanelAppBound, resolvePanelAppBindingPolicy, resolvePanelAppBindingProjectPath, type PanelAppBindingPolicy, } from "./bindings.js";

package/dist/panel-apps/index.js

@@ -0,0 +1,4 @@
+export { PANEL_APP_ICONS, PANEL_APP_MANIFEST_FILE, PANEL_APP_PERMISSIONS, PanelAppAgentContribution, PanelAppAgentTool, PanelAppManifest, } from "./manifest.js";
+export { PanelAppAlreadyInstalledError, PanelAppInstallError, PanelAppReviewChangedError, assertSafePanelAppId, panelAppInstallDir, panelAppsRegistryPath, panelAppsRoot, } from "./paths.js";
+export { installReviewedLocalPanelApp, installReviewedPanelAppUpdate, listInstalledPanelApps, previewInstalledPanelAppUpdate, previewLocalPanelApp, uninstallPanelApp, } from "./installer.js";
+export { isPanelAppBound, resolvePanelAppBindingPolicy, resolvePanelAppBindingProjectPath, } from "./bindings.js";

package/dist/panel-apps/installer.d.ts

@@ -0,0 +1,68 @@
+import { PanelAppManifest, type PanelAppAgentContribution } from "./manifest.js";
+export interface LocalPanelAppSourceInput {
+    kind: "dir" | "zip";
+    path: string;
+}
+export interface GitPanelAppSourceInput {
+    kind: "git";
+    url: string;
+    ref?: string;
+    subdir?: string;
+}
+export type PanelAppSourceInput = LocalPanelAppSourceInput | GitPanelAppSourceInput;
+export type InstalledPanelAppSource = string | GitPanelAppSourceInput;
+export interface PanelAppPreview {
+    id: string;
+    version: string;
+    title: {
+        default: string;
+        en?: string;
+        "zh-CN"?: string;
+    };
+    description?: string;
+    entry: string;
+    icon: PanelAppManifest["icon"];
+    singleton: boolean;
+    permissions: PanelAppManifest["permissions"];
+    agent?: PanelAppAgentContribution;
+    alreadyInstalled: boolean;
+    reviewToken: string;
+    source: {
+        kind: PanelAppSourceInput["kind"];
+        label: string;
+    };
+    warnings: string[];
+}
+export interface InstalledPanelApp {
+    id: string;
+    version: string;
+    title: {
+        default: string;
+        en?: string;
+        "zh-CN"?: string;
+    };
+    description?: string;
+    entry: string;
+    icon: PanelAppManifest["icon"];
+    singleton: boolean;
+    permissions: PanelAppManifest["permissions"];
+    agent?: PanelAppAgentContribution;
+    installPath: string;
+    source: InstalledPanelAppSource;
+    installedAt: string;
+    lastUpdated: string;
+}
+export declare function previewLocalPanelApp(input: PanelAppSourceInput): Promise<PanelAppPreview>;
+/**
+ * Re-open the original folder, archive, or GitHub source through the same
+ * bounded installer review. This is the repo-development path: edit or push
+ * source files, review the new digest, then explicitly apply the update.
+ */
+export declare function previewInstalledPanelAppUpdate(id: string): Promise<PanelAppPreview>;
+export declare function installReviewedLocalPanelApp(input: PanelAppSourceInput, expectedReviewToken: string, installedAt: string, options?: {
+    overwrite?: boolean;
+    expectedId?: string;
+}): Promise<InstalledPanelApp>;
+export declare function installReviewedPanelAppUpdate(id: string, expectedReviewToken: string, installedAt: string): Promise<InstalledPanelApp>;
+export declare function listInstalledPanelApps(): Promise<InstalledPanelApp[]>;
+export declare function uninstallPanelApp(id: string): Promise<void>;