@copado/agentia-cli 1.0.0-beta.7 → 1.0.0-beta.8

package/dist/commands/plugins/install.js

@@ -0,0 +1,76 @@
+import { confirm } from '@inquirer/prompts';
+import { Args, Flags } from '@oclif/core';
+import { AgentiaCommand } from '../../lib/agentia-command.js';
+import { assessInstalls, enforceInstalls, parseInstallArguments, PluginTrustError, stockInstallArguments, uncheckedWarning } from '../../lib/plugin-trust/gate.js';
+export default class PluginsInstall extends AgentiaCommand {
+    static aliases = ['plugins:add'];
+    static args = {
+        plugin: Args.string({ description: 'npm package name (optionally with @tag) or git URL.', required: true }),
+    };
+    static description = `Install plugins with npm after checking them against the Agentia plugin catalog.
+
+Official and Verified plugins install without a prompt. Community, unlisted, and git URL plugins ask first. Use --allow-unverified when there is no terminal or with --json.
+
+A revoked version, or an npm tarball that differs from the hash in the catalog, is always refused. If the catalog cannot be reached, the command warns and the install continues.`;
+    static examples = [
+        '<%= config.bin %> <%= command.id %> @acme/agentia-plugin-x',
+        '<%= config.bin %> <%= command.id %> @acme/agentia-plugin-x@1.2.0 --allow-unverified --json',
+    ];
+    static flags = {
+        'allow-unverified': Flags.boolean({ description: 'Install plugins that are not Official or Verified without asking. Never overrides a revoked or mismatched version.' }),
+        force: Flags.boolean({ char: 'f', description: 'Force npm to fetch remote resources even if a local copy exists.' }),
+        silent: Flags.boolean({ char: 's', description: 'Silence npm output.' }),
+        verbose: Flags.boolean({ char: 'v', description: 'Show verbose npm output.' }),
+    };
+    static strict = false;
+    async run() {
+        let plugins;
+        let stockArguments;
+        try {
+            const parsed = parseInstallArguments(this.argv);
+            const inputs = this.applyAliases(parsed.inputs);
+            if (inputs.length === 0)
+                this.error('Missing 1 required arg:\nplugin  Plugin to install.', { exit: 2 });
+            // The installer reads this registry setting; a hash from public npm would not describe a package from another registry.
+            const registryVariable = this.config.scopedEnvVarKey('NPM_REGISTRY');
+            const customRegistry = Boolean(process.env[registryVariable]);
+            const { assessments } = await assessInstalls(inputs, { resolve: !customRegistry });
+            const skipped = uncheckedWarning(assessments);
+            if (skipped)
+                this.display(() => this.warn(skipped));
+            if (customRegistry)
+                this.display(() => this.warn(`${registryVariable} is set, so versions cannot be checked against the catalog.`));
+            plugins = await enforceInstalls(assessments, {
+                allowUnverified: parsed.allowUnverified,
+                confirm: async (message) => confirm({ default: false, message }),
+                interactive: !this.jsonEnabled() && Boolean(process.stdin.isTTY && process.stdout.isTTY),
+                warn: (line) => this.display(() => this.warn(line)),
+            });
+            stockArguments = stockInstallArguments(parsed, assessments);
+        }
+        catch (error) {
+            if (error instanceof PluginTrustError)
+                this.error(error.message, { exit: 1 });
+            throw error;
+        }
+        await this.runStockInstall(stockArguments);
+        return { plugins };
+    }
+    applyAliases(inputs) {
+        const aliases = this.config.pjson.oclif.aliases ?? {};
+        return inputs.map((input) => {
+            if (aliases[input] === null)
+                this.error(`${input} is blocked`, { exit: 1 });
+            return aliases[input] ?? input;
+        });
+    }
+    // Runs the stock @oclif/plugin-plugins command, which still does the npm install.
+    async runStockInstall(argv) {
+        const stock = this.config.plugins.get('@oclif/plugin-plugins')?.commands.find((command) => command.id === 'plugins:install');
+        if (stock === undefined)
+            this.error('@oclif/plugin-plugins is not available, so plugins cannot be installed.', { exit: 1 });
+        const StockInstall = await stock.load();
+        await StockInstall.run(argv, this.config);
+    }
+}
+//# sourceMappingURL=install.js.map

package/dist/lib/plugin-trust/catalog.js

@@ -0,0 +1,6 @@
+import {modules} from '../runtime.js';
+const DEFAULT_CATALOG_URL = modules["plugin-trust/catalog.js"]["DEFAULT_CATALOG_URL"]
+const cleanText = modules["plugin-trust/catalog.js"]["cleanText"]
+const loadCatalog = modules["plugin-trust/catalog.js"]["loadCatalog"]
+const parseCatalog = modules["plugin-trust/catalog.js"]["parseCatalog"]
+export {DEFAULT_CATALOG_URL, cleanText, loadCatalog, parseCatalog};

package/dist/lib/plugin-trust/gate.js

@@ -0,0 +1,14 @@
+import {modules} from '../runtime.js';
+const PluginTrustError = modules["plugin-trust/gate.js"]["PluginTrustError"]
+const assessInstalls = modules["plugin-trust/gate.js"]["assessInstalls"]
+const confirmationWarning = modules["plugin-trust/gate.js"]["confirmationWarning"]
+const deprecationWarning = modules["plugin-trust/gate.js"]["deprecationWarning"]
+const enforceInstalls = modules["plugin-trust/gate.js"]["enforceInstalls"]
+const installPrompt = modules["plugin-trust/gate.js"]["installPrompt"]
+const parseInstallArguments = modules["plugin-trust/gate.js"]["parseInstallArguments"]
+const parseInstallTarget = modules["plugin-trust/gate.js"]["parseInstallTarget"]
+const pluginSpec = modules["plugin-trust/gate.js"]["pluginSpec"]
+const resolveNpmVersion = modules["plugin-trust/gate.js"]["resolveNpmVersion"]
+const stockInstallArguments = modules["plugin-trust/gate.js"]["stockInstallArguments"]
+const uncheckedWarning = modules["plugin-trust/gate.js"]["uncheckedWarning"]
+export {PluginTrustError, assessInstalls, confirmationWarning, deprecationWarning, enforceInstalls, installPrompt, parseInstallArguments, parseInstallTarget, pluginSpec, resolveNpmVersion, stockInstallArguments, uncheckedWarning};

package/dist/lib/plugin-trust/http.js

@@ -0,0 +1,5 @@
+import {modules} from '../runtime.js';
+const defaultFetchJson = modules["plugin-trust/http.js"]["defaultFetchJson"]
+const fetchJson = modules["plugin-trust/http.js"]["fetchJson"]
+const setFetchJsonForTests = modules["plugin-trust/http.js"]["setFetchJsonForTests"]
+export {defaultFetchJson, fetchJson, setFetchJsonForTests};

package/dist/lib/plugin-trust/policy.js

@@ -0,0 +1,3 @@
+import {modules} from '../runtime.js';
+const decideInstall = modules["plugin-trust/policy.js"]["decideInstall"]
+export {decideInstall};