@gt-fe/eap-sdk 0.2.18 → 0.2.20

package/dist/packaging/archive.js

@@ -0,0 +1,129 @@
+import { gunzipSync, gzipSync } from 'node:zlib';
+export { sha256 } from '../digest.js';
+export function normalizeArchivePath(path) {
+    const normalized = path.replace(/\\/g, '/');
+    if (!normalized || normalized.startsWith('/') || /^[A-Za-z]:\//.test(normalized) || normalized.includes('../') || normalized === '..') {
+        throw new Error(`Unsafe archive path: ${path}`);
+    }
+    return normalized;
+}
+export function createTarGz(files) {
+    const sorted = [...files]
+        .map((file) => ({ ...file, path: normalizeArchivePath(file.path), mode: file.mode ?? 0o100644 }))
+        .sort((left, right) => left.path.localeCompare(right.path));
+    if (new Set(sorted.map((file) => file.path)).size !== sorted.length)
+        throw new Error('Duplicate archive path');
+    const parts = [];
+    for (const file of sorted) {
+        const header = createTarHeader(file.path, file.data.length, file.mode);
+        const padding = Buffer.alloc((512 - (file.data.length % 512)) % 512);
+        parts.push(header, file.data, padding);
+    }
+    return gzipSync(Buffer.concat([...parts, Buffer.alloc(1024)]));
+}
+export function readTarGz(archive) {
+    let tar;
+    try {
+        tar = gunzipSync(archive);
+    }
+    catch {
+        throw new Error('Package is not a supported TAR.GZ archive');
+    }
+    const entries = new Map();
+    let offset = 0;
+    while (offset + 512 <= tar.length) {
+        const header = tar.subarray(offset, offset + 512);
+        if (header.every((byte) => byte === 0))
+            break;
+        assertTarChecksum(header);
+        const type = header[156];
+        if (type !== 0 && type !== 48)
+            throw new Error('Unsupported TAR entry');
+        const path = normalizeArchivePath(readTarPrefix(header) + readTarString(header, 0, 100, 'name'));
+        const size = readTarNumber(header, 124, 12, path);
+        const dataStart = offset + 512;
+        const dataEnd = dataStart + size;
+        if (dataEnd > tar.length || entries.has(path))
+            throw new Error(`Invalid TAR entry: ${path}`);
+        const data = Buffer.from(tar.subarray(dataStart, dataEnd));
+        entries.set(path, data);
+        offset = dataEnd + ((512 - (size % 512)) % 512);
+    }
+    if (entries.size === 0 || offset + 512 > tar.length)
+        throw new Error('Package is not a supported TAR archive');
+    return entries;
+}
+function createTarHeader(path, size, mode) {
+    const header = Buffer.alloc(512);
+    const { name, prefix } = splitTarPath(path);
+    writeTarString(header, name, 0, 100);
+    writeTarOctal(header, mode & 0o7777, 100, 8);
+    writeTarOctal(header, 0, 108, 8);
+    writeTarOctal(header, 0, 116, 8);
+    writeTarOctal(header, size, 124, 12);
+    writeTarOctal(header, 0, 136, 12);
+    header.fill(0x20, 148, 156);
+    header[156] = 48;
+    writeTarString(header, 'ustar', 257, 6);
+    writeTarString(header, '00', 263, 2);
+    writeTarString(header, prefix, 345, 155);
+    writeTarChecksum(header, header.reduce((sum, byte) => sum + byte, 0));
+    return header;
+}
+function splitTarPath(path) {
+    if (Buffer.byteLength(path) <= 100)
+        return { name: path, prefix: '' };
+    const separator = path.lastIndexOf('/');
+    if (separator <= 0)
+        throw new Error(`Archive path is too long for TAR: ${path}`);
+    const prefix = path.slice(0, separator);
+    const name = path.slice(separator + 1);
+    if (Buffer.byteLength(name) > 100 || Buffer.byteLength(prefix) > 155) {
+        throw new Error(`Archive path is too long for TAR: ${path}`);
+    }
+    return { name, prefix };
+}
+function writeTarString(buffer, value, offset, length) {
+    const bytes = Buffer.from(value, 'utf8');
+    if (bytes.length > length)
+        throw new Error(`TAR field exceeds ${length} bytes: ${value}`);
+    bytes.copy(buffer, offset);
+}
+function writeTarOctal(buffer, value, offset, length) {
+    const encoded = value.toString(8);
+    if (encoded.length > length - 1)
+        throw new Error(`TAR numeric field is too large: ${value}`);
+    buffer.write(encoded.padStart(length - 1, '0'), offset, length - 1, 'ascii');
+    buffer[offset + length - 1] = 0;
+}
+function writeTarChecksum(buffer, value) {
+    const encoded = value.toString(8);
+    if (encoded.length > 6)
+        throw new Error(`TAR checksum is too large: ${value}`);
+    buffer.write(encoded.padStart(6, '0'), 148, 6, 'ascii');
+    buffer[154] = 0;
+    buffer[155] = 0x20;
+}
+function readTarString(buffer, offset, length, field) {
+    const value = buffer.subarray(offset, offset + length).toString('utf8').replace(/\0.*$/, '');
+    if (!value)
+        throw new Error(`TAR entry is missing ${field}`);
+    return value;
+}
+function readTarPrefix(buffer) {
+    const prefix = buffer.subarray(345, 500).toString('utf8').replace(/\0.*$/, '');
+    return prefix ? `${prefix}/` : '';
+}
+function readTarNumber(buffer, offset, length, path) {
+    const raw = buffer.subarray(offset, offset + length).toString('ascii').replace(/\0.*$/, '').trim();
+    if (!/^[0-7]+$/.test(raw))
+        throw new Error(`Invalid TAR entry size: ${path}`);
+    return Number.parseInt(raw, 8);
+}
+function assertTarChecksum(header) {
+    const actual = readTarNumber(header, 148, 8, 'header');
+    const expected = header.reduce((sum, byte, index) => sum + (index >= 148 && index < 156 ? 0x20 : byte), 0);
+    if (actual !== expected)
+        throw new Error('Invalid TAR header checksum');
+}
+//# sourceMappingURL=archive.js.map

package/dist/packaging/archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.js","sourceRoot":"","sources":["../../src/packaging/archive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAQtC,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACtI,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAoB;IAC9C,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC;SACtB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC;SAChG,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAE/G,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAK,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QACrE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;YAAE,MAAM;QAC9C,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,oBAAoB,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACjG,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,MAAM,GAAG,GAAG,CAAC;QAC/B,MAAM,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;QACjC,IAAI,OAAO,GAAG,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxB,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC/G,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5C,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IACrC,aAAa,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC7C,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACjC,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACjC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACrC,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAClC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IACjB,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACxC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACrC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACzC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,SAAS,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,KAAa,EAAE,MAAc,EAAE,MAAc;IACnF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,WAAW,KAAK,EAAE,CAAC,CAAC;IAC1F,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,KAAa,EAAE,MAAc,EAAE,MAAc;IAClF,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;IAC7F,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,KAAa;IACrD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;IAC/E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,MAAc,EAAE,MAAc,EAAE,KAAa;IAClF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;IAC7D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,MAAc,EAAE,MAAc,EAAE,IAAY;IACjF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3G,IAAI,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAC1E,CAAC"}

package/dist/packaging/index.d.ts

@@ -0,0 +1,4 @@
+export * from './archive.js';
+export * from './read-package.js';
+export * from './package-agent-project.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/packaging/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/packaging/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC"}

package/dist/packaging/index.js

@@ -0,0 +1,4 @@
+export * from './archive.js';
+export * from './read-package.js';
+export * from './package-agent-project.js';
+//# sourceMappingURL=index.js.map

package/dist/packaging/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/packaging/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC"}

package/dist/packaging/package-agent-project.d.ts

@@ -0,0 +1,20 @@
+import { type PreparedAgentRuntime } from '../materialization/index.js';
+import { type VerifiedAgentPackage } from './read-package.js';
+export interface PackageAgentProjectOptions {
+    root?: string;
+    outputPath?: string;
+}
+export interface PackagedAgentProject extends VerifiedAgentPackage {
+    checksumPath: string;
+}
+export interface PackageStandaloneAgentProjectOptions {
+    root?: string;
+    outputDirectory?: string;
+}
+export declare function packageAgentProject(options?: PackageAgentProjectOptions): Promise<PackagedAgentProject>;
+/**
+ * Materializes the same verified Runtime tree used by deployment packaging,
+ * but leaves it as a directory for an independently bundled service entry.
+ */
+export declare function packageStandaloneAgentProject(options?: PackageStandaloneAgentProjectOptions): Promise<PreparedAgentRuntime>;
+//# sourceMappingURL=package-agent-project.d.ts.map

package/dist/packaging/package-agent-project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-agent-project.d.ts","sourceRoot":"","sources":["../../src/packaging/package-agent-project.ts"],"names":[],"mappings":"AAIA,OAAO,EAAgD,KAAK,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAatH,OAAO,EAAoB,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEhF,MAAM,WAAW,0BAA0B;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oCAAoC;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAsB,mBAAmB,CACvC,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAoD/B;AAED;;;GAGG;AACH,wBAAsB,6BAA6B,CACjD,OAAO,GAAE,oCAAyC,GACjD,OAAO,CAAC,oBAAoB,CAAC,CAmB/B"}

package/dist/packaging/package-agent-project.js

@@ -0,0 +1,120 @@
+import { randomUUID } from 'node:crypto';
+import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, rmSync } from 'node:fs';
+import { dirname, relative, resolve } from 'node:path';
+import { prepareAgentRuntime, resolveAgentRuntimeRoot } from '../materialization/index.js';
+import { toSha256Hex } from '../digest.js';
+import { canonicalJson } from '../lockfile/index.js';
+import { ensureGeneratedDirectory, ensureGeneratedDirectoryPath, removeDirectoryChild, validateDirectoryChild, writeFileAtomically, } from '../resources/resource-files.js';
+import { PackageManifestSchema } from '../schema/index.js';
+import { validateAgentProject } from '../validation/index.js';
+import { createTarGz, sha256 } from './archive.js';
+import { readAgentPackage } from './read-package.js';
+export async function packageAgentProject(options = {}) {
+    const validation = validateAgentProject(options.root);
+    if (!validation.valid || !validation.agent) {
+        throw new Error('无法打包：Agent 项目校验未通过。\n' +
+            validation.issues
+                .map((issue) => `  - [${issue.code}] ${issue.message}`)
+                .join('\n') +
+            '\n请修复以上问题后重试，或运行 eap validate 查看完整校验详情。');
+    }
+    ensureGeneratedDirectory(validation.root);
+    const stagingParent = ensureGeneratedDirectoryPath(validation.root, ['.eap', 'package-staging']);
+    const stagingName = `${process.pid}-${randomUUID()}`;
+    if (validateDirectoryChild(stagingParent, stagingName)) {
+        throw new Error(`Package staging directory already exists: ${stagingName}`);
+    }
+    const stagingRoot = ensureGeneratedDirectoryPath(stagingParent, [stagingName]);
+    const runtimeRoot = resolve(stagingRoot, 'runtime');
+    try {
+        const prepared = await prepareAgentRuntime({
+            root: validation.root,
+            outputRoot: runtimeRoot,
+        });
+        const files = collectArchiveFiles(prepared.agentDir)
+            .sort((left, right) => left.path.localeCompare(right.path));
+        const manifest = PackageManifestSchema.parse({
+            packageVersion: 2,
+            agents: [{ code: prepared.agentCode, version: prepared.version }],
+            files: files.map((file) => ({ path: file.path, size: file.data.length, digest: sha256(file.data) })),
+        });
+        files.push({ path: 'eap-package.json', data: Buffer.from(`${canonicalJson(manifest)}\n`, 'utf8') });
+        const archive = createTarGz(files);
+        let outputPath;
+        if (options.outputPath) {
+            outputPath = resolve(options.outputPath);
+            mkdirSync(dirname(outputPath), { recursive: true });
+        }
+        else {
+            const packageDir = ensureGeneratedDirectoryPath(validation.root, ['.eap', 'package']);
+            clearPackageDirectory(packageDir);
+            outputPath = resolve(packageDir, `eap-agent-project-${prepared.agentCode}-${prepared.version}.tar.gz`);
+        }
+        writeFileAtomically(outputPath, archive);
+        const digest = sha256(archive);
+        const checksumPath = `${outputPath}.sha256`;
+        writeFileAtomically(checksumPath, `${toSha256Hex(digest)}  ${outputPath.split(/[\\/]/).pop()}\n`);
+        const verified = readAgentPackage(outputPath);
+        return { ...verified, checksumPath };
+    }
+    finally {
+        removeDirectoryChild(stagingParent, stagingName);
+    }
+}
+/**
+ * Materializes the same verified Runtime tree used by deployment packaging,
+ * but leaves it as a directory for an independently bundled service entry.
+ */
+export async function packageStandaloneAgentProject(options = {}) {
+    const validation = validateAgentProject(options.root);
+    if (!validation.valid || !validation.agent) {
+        throw new Error('无法生成 standalone Runtime：Agent 项目校验未通过。\n' +
+            validation.issues
+                .map((issue) => `  - [${issue.code}] ${issue.message}`)
+                .join('\n') +
+            '\n请修复以上问题后重试，或运行 eap validate 查看完整校验详情。');
+    }
+    const outputDirectory = resolve(options.outputDirectory ?? resolveAgentRuntimeRoot({ root: validation.root }));
+    return prepareAgentRuntime({
+        root: validation.root,
+        outputRoot: outputDirectory,
+    });
+}
+/** 打包前清空 .eap/package/ 下的旧产物，避免多版本或异常目录残留。 */
+function clearPackageDirectory(packageDir) {
+    for (const entry of readdirSync(packageDir)) {
+        rmSync(resolve(packageDir, entry), { recursive: true, force: true });
+    }
+}
+function collectArchiveFiles(directory) {
+    if (!existsSync(directory))
+        return [];
+    const stat = lstatSync(directory);
+    if (!stat.isDirectory() || stat.isSymbolicLink())
+        throw new Error(`Package source must be a regular directory: ${directory}`);
+    const files = [];
+    walk(directory, directory, files);
+    return files;
+}
+function walk(root, directory, files) {
+    for (const entry of readdirSync(directory, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name))) {
+        const path = resolve(directory, entry.name);
+        const relativePath = relative(root, path).replace(/\\/g, '/');
+        if (!relativePath || relativePath === '..' || relativePath.startsWith('../')) {
+            throw new Error(`Package source path escapes Runtime tree: ${path}`);
+        }
+        if (relativePath.split('/').includes('users')) {
+            throw new Error(`Package source must not contain users resources: ${relativePath}`);
+        }
+        if (entry.isSymbolicLink())
+            throw new Error(`Package source must not contain symbolic links: ${path}`);
+        if (entry.isDirectory()) {
+            walk(root, path, files);
+            continue;
+        }
+        if (!entry.isFile())
+            throw new Error(`Package source contains an unsupported entry: ${path}`);
+        files.push({ path: relativePath, data: readFileSync(path), mode: 0o100644 });
+    }
+}
+//# sourceMappingURL=package-agent-project.js.map

package/dist/packaging/package-agent-project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-agent-project.js","sourceRoot":"","sources":["../../src/packaging/package-agent-project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEvD,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAA6B,MAAM,6BAA6B,CAAC;AACtH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAwB,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,EAAoB,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAA6B,MAAM,mBAAmB,CAAC;AAgBhF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAsC,EAAE;IAExC,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,uBAAuB;YACvB,UAAU,CAAC,MAAM;iBACd,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;iBACtD,IAAI,CAAC,IAAI,CAAC;YACb,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,wBAAwB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,4BAA4B,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACjG,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC;IACrD,IAAI,sBAAsB,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,6CAA6C,WAAW,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,WAAW,GAAG,4BAA4B,CAAC,aAAa,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;YACzC,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACjD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAoB,qBAAqB,CAAC,KAAK,CAAC;YAC5D,cAAc,EAAE,CAAC;YACjB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;YACjE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACrG,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,UAAkB,CAAC;QACvB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACzC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,4BAA4B,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;YACtF,qBAAqB,CAAC,UAAU,CAAC,CAAC;YAClC,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,qBAAqB,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,OAAO,SAAS,CAAC,CAAC;QACzG,CAAC;QACD,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,YAAY,GAAG,GAAG,UAAU,SAAS,CAAC;QAC5C,mBAAmB,CAAC,YAAY,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClG,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC9C,OAAO,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,oBAAoB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,UAAgD,EAAE;IAElD,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,0CAA0C;YAC1C,UAAU,CAAC,MAAM;iBACd,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;iBACtD,IAAI,CAAC,IAAI,CAAC;YACb,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAC7B,OAAO,CAAC,eAAe,IAAI,uBAAuB,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAC9E,CAAC;IACF,OAAO,mBAAmB,CAAC;QACzB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,UAAU,EAAE,eAAe;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,8CAA8C;AAC9C,SAAS,qBAAqB,CAAC,UAAkB;IAC/C,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,SAAS,EAAE,CAAC,CAAC;IAC9H,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,SAAiB,EAAE,KAAoB;IACjE,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/H,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9D,IAAI,CAAC,YAAY,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,oDAAoD,YAAY,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAC;QACvG,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,EAAE,CAAC,CAAC;QAC9F,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC"}

package/dist/packaging/read-package.d.ts

@@ -0,0 +1,8 @@
+import { type PackageManifest } from '../schema/index.js';
+export interface VerifiedAgentPackage {
+    archivePath: string;
+    digest: `sha256:${string}`;
+    manifest: PackageManifest;
+}
+export declare function readAgentPackage(archivePath: string): VerifiedAgentPackage;
+//# sourceMappingURL=read-package.d.ts.map

package/dist/packaging/read-package.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-package.d.ts","sourceRoot":"","sources":["../../src/packaging/read-package.ts"],"names":[],"mappings":"AAGA,OAAO,EAOL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAG5B,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,CAuF1E"}

package/dist/packaging/read-package.js

@@ -0,0 +1,88 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { parseDocument } from 'yaml';
+import { AgentManifestSchema, DependenciesLockSchema, EapLockSchema, EapProjectConfigSchema, GraphSchema, PackageManifestSchema, } from '../schema/index.js';
+import { normalizeArchivePath, readTarGz, sha256 } from './archive.js';
+export function readAgentPackage(archivePath) {
+    if (!existsSync(archivePath))
+        throw new Error(`Package not found: ${archivePath}`);
+    const archive = readFileSync(archivePath);
+    const entries = readTarGz(archive);
+    const manifestBytes = entries.get('eap-package.json');
+    if (!manifestBytes)
+        throw new Error('Package is missing eap-package.json');
+    const manifest = PackageManifestSchema.parse(JSON.parse(manifestBytes.toString('utf8')));
+    const declared = new Set(manifest.files.map((file) => file.path));
+    const expected = new Set(['eap-package.json', ...declared]);
+    if (entries.size !== expected.size || [...expected].some((path) => !entries.has(path))) {
+        throw new Error('Package contains unsupported or missing files');
+    }
+    for (const file of manifest.files) {
+        if (file.path === 'eap-package.json' || normalizeArchivePath(file.path) !== file.path) {
+            throw new Error(`Package manifest contains an invalid Runtime file path: ${file.path}`);
+        }
+        const bytes = entries.get(file.path);
+        if (!bytes || bytes.length !== file.size || sha256(bytes) !== file.digest) {
+            throw new Error(`Package file verification failed: ${file.path}`);
+        }
+    }
+    const agent = manifest.agents[0];
+    const agentManifest = AgentManifestSchema.parse(JSON.parse(requiredEntry(entries, 'agent.manifest.json').toString('utf8')));
+    if (agentManifest.code !== agent.code || agentManifest.version !== agent.version) {
+        throw new Error(`Packaged Agent identity does not match ${agent.code}@${agent.version}`);
+    }
+    const dependenciesLock = DependenciesLockSchema.parse(JSON.parse(requiredEntry(entries, 'dependencies.lock').toString('utf8')));
+    if (dependenciesLock.agentCode && dependenciesLock.agentCode !== agent.code) {
+        throw new Error(`Packaged dependencies.lock Agent identity does not match ${agent.code}`);
+    }
+    if (dependenciesLock.agentVersion && dependenciesLock.agentVersion !== agent.version) {
+        throw new Error(`Packaged dependencies.lock version does not match ${agent.version}`);
+    }
+    for (const artifact of [...dependenciesLock.toolRefs, ...dependenciesLock.skillRefs]) {
+        if (!artifact.sha256 || !/^(?:sha256:)?[a-f0-9]{64}$/.test(artifact.sha256)) {
+            throw new Error(`Packaged dependencies.lock entry ${artifact.code}@${artifact.version} is missing a valid SHA-256 digest`);
+        }
+    }
+    GraphSchema.parse(JSON.parse(requiredEntry(entries, 'graph.json').toString('utf8')));
+    EapProjectConfigSchema.parse(JSON.parse(requiredEntry(entries, 'eap.config.json').toString('utf8')));
+    const eapLockDocument = parseDocument(requiredEntry(entries, 'eap.lock.yaml').toString('utf8'), {
+        prettyErrors: true,
+        strict: true,
+    });
+    if (eapLockDocument.errors.length > 0) {
+        throw new Error(`Package eap.lock.yaml is invalid: ${eapLockDocument.errors.map((error) => error.message).join('; ')}`);
+    }
+    EapLockSchema.parse(eapLockDocument.toJS());
+    const snapshot = JSON.parse(requiredEntry(entries, 'snapshot.json').toString('utf8'));
+    if (!snapshot || typeof snapshot !== 'object' || !Array.isArray(snapshot.tools) || !Array.isArray(snapshot.skills)) {
+        throw new Error('Package snapshot.json is invalid');
+    }
+    for (const [kind, items] of [['tools', snapshot.tools], ['skills', snapshot.skills]]) {
+        for (const item of items) {
+            if (!item || typeof item !== 'object' || Array.isArray(item)) {
+                throw new Error(`Package snapshot.json ${kind} entry is invalid`);
+            }
+            const record = item;
+            const code = kind === 'tools' ? record.name : record.skillId;
+            if (typeof code !== 'string' || typeof record.version !== 'string' || typeof record.sha256 !== 'string' || !/^[a-f0-9]{64}$/.test(record.sha256)) {
+                throw new Error(`Package snapshot.json ${kind} entry is missing a valid SHA-256 digest`);
+            }
+        }
+    }
+    const snapshotArtifacts = new Map((snapshot.artifacts ?? [])
+        .filter((artifact) => (typeof artifact.path === 'string' && typeof artifact.sha256 === 'string'))
+        .map((artifact) => [artifact.path, artifact.sha256]));
+    for (const path of ['agent.manifest.json', 'graph.json', 'eap.config.json', 'eap.lock.yaml', 'dependencies.lock']) {
+        const expected = sha256(requiredEntry(entries, path)).slice('sha256:'.length);
+        if (snapshotArtifacts.get(path) !== expected) {
+            throw new Error(`Package snapshot digest does not match ${path}`);
+        }
+    }
+    return { archivePath, digest: sha256(archive), manifest };
+}
+function requiredEntry(entries, path) {
+    const entry = entries.get(path);
+    if (!entry)
+        throw new Error(`Package is missing ${path}`);
+    return entry;
+}
+//# sourceMappingURL=read-package.js.map

package/dist/packaging/read-package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-package.js","sourceRoot":"","sources":["../../src/packaging/read-package.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAErC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,sBAAsB,EACtB,WAAW,EACX,qBAAqB,GAEtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAQvE,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACtD,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;IAClC,MAAM,aAAa,GAAG,mBAAmB,CAAC,KAAK,CAC7C,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC3E,CAAC;IACF,IAAI,aAAa,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,aAAa,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CACnD,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CACzE,CAAC;IACF,IAAI,gBAAgB,CAAC,SAAS,IAAI,gBAAgB,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,4DAA4D,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,gBAAgB,CAAC,YAAY,IAAI,gBAAgB,CAAC,YAAY,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,qDAAqD,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,gBAAgB,CAAC,QAAQ,EAAE,GAAG,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QACrF,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,oCAAoC,CAAC,CAAC;QAC7H,CAAC;IACH,CAAC;IACD,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrF,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrG,MAAM,eAAe,GAAG,aAAa,CAAC,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;QAC9F,YAAY,EAAE,IAAI;QAClB,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,qCAAqC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAInF,CAAC;IACF,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACnH,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAU,EAAE,CAAC;QAC9F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,mBAAmB,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,MAAM,GAAG,IAA+B,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAC7D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjJ,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,0CAA0C,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC;SACvB,MAAM,CAAC,CAAC,QAAQ,EAAgD,EAAE,CAAC,CAClE,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,CACzE,CAAC;SACD,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CACvD,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,CAAC,qBAAqB,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,mBAAmB,CAAC,EAAE,CAAC;QAClH,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9E,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,OAA4B,EAAE,IAAY;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/platform/client.d.ts

@@ -0,0 +1,10 @@
+import type { PlatformClient, PlatformClientOptions } from './types.js';
+export declare function createPlatformClient(options: PlatformClientOptions): PlatformClient;
+/** 平台接口返回的错误。携带 code / status / requestId，供上层做精确映射与引导。 */
+export declare class PlatformApiError extends Error {
+    readonly code?: (number | string) | undefined;
+    readonly status?: number | undefined;
+    readonly requestId?: string | undefined;
+    constructor(message: string, code?: (number | string) | undefined, status?: number | undefined, requestId?: string | undefined);
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/platform/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/platform/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAKV,cAAc,EACd,qBAAqB,EAStB,MAAM,YAAY,CAAC;AAapB,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,cAAc,CAEnF;AAED,0DAA0D;AAC1D,qBAAa,gBAAiB,SAAQ,KAAK;IAGvC,QAAQ,CAAC,IAAI,CAAC,GAAE,MAAM,GAAG,MAAM;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM;gBAH3B,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,GAAE,MAAM,GAAG,MAAM,aAAA,EACtB,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,SAAS,CAAC,EAAE,MAAM,YAAA;CAK9B"}