@guanjinke/artifact-client 1.5.1 → 1.6.1

package/dist/environment/root.d.ts

@@ -1,15 +1,33 @@
+/**
+ * Canonicalize a directory that may not exist yet: the deepest existing
+ * ancestor is resolved (`fs.realpath`), the missing tail is appended.
+ *
+ * This is what makes the tool work on macOS, where `$TMPDIR` lives under
+ * `/var/folders/...` and `/var` is itself a symlink to `/private/var`: the
+ * stored root is the real location, so the "no linked ancestor" rule below
+ * rejects only links the operator created, and deletion later removes exactly
+ * the recorded directory instead of traversing a link.
+ */
+export declare function canonicalDirectory(directory: string): Promise<string>;
+/**
+ * macOS ships `/var`, `/tmp` and `/etc` as symlinks into `/private`. Those are
+ * system links rather than operator ones, so the "no linked ancestor" rule has to
+ * let them through or `$TMPDIR` paths could never be used; the recorded root is
+ * still the canonical location, so nothing is ever operated through the link.
+ */
+export declare function isSystemLinkTarget(resolved: string, platform?: NodeJS.Platform): boolean;
 /**
  * Verify that a directory is safe to use as an environment directory or as the
  * unified directory that contains managed environments.
  *
  * Rejected locations are filesystem roots, the user profile itself, the AFM
- * configuration directory, Windows/Program Files locations, ancestors of the
- * configuration directory, and any path with an existing linked (symlink or
- * junction) ancestor. The check is read-only; it never creates or removes
- * anything and returns whether the directory already exists as a regular
- * directory.
+ * configuration directory, system locations and their descendants, ancestors of
+ * the configuration directory, and any path with an existing linked (symlink or
+ * junction) ancestor other than a platform system link. The check is read-only;
+ * it never creates or removes anything and returns whether the directory already
+ * exists as a regular directory.
  */
-export declare function inspectEnvironmentDirectory(directory: string, configDirectory: string): Promise<boolean>;
+export declare function inspectEnvironmentDirectory(directory: string, configDirectory: string, platform?: NodeJS.Platform): Promise<boolean>;
 export interface EnvironmentContainer {
     directory: string;
     created: boolean;

package/dist/environment/root.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"root.d.ts","sourceRoot":"","sources":["../../src/environment/root.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;GAUG;AACH,wBAAsB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAwB9G;AAED,MAAM,WAAW,oBAAoB;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;CAAE;AAE9E;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAS3J;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMxF"}
+{"version":3,"file":"root.d.ts","sourceRoot":"","sources":["../../src/environment/root.ts"],"names":[],"mappings":"AAKA;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAc3E;AAUD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,OAAO,CAE1G;AAqBD;;;;;;;;;;GAUG;AACH,wBAAsB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,OAAO,CAAC,OAAO,CAAC,CAY5J;AAED,MAAM,WAAW,oBAAoB;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;CAAE;AAE9E;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAS3J;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMxF"}

package/dist/environment/root.js

@@ -33,6 +33,8 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.canonicalDirectory = canonicalDirectory;
+exports.isSystemLinkTarget = isSystemLinkTarget;
 exports.inspectEnvironmentDirectory = inspectEnvironmentDirectory;
 exports.resolveEnvironmentContainer = resolveEnvironmentContainer;
 exports.resolveNamedEnvironmentDirectory = resolveNamedEnvironmentDirectory;
@@ -41,40 +43,67 @@ const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const registry_1 = require("./registry");
 /**
- * Verify that a directory is safe to use as an environment directory or as the
- * unified directory that contains managed environments.
+ * Canonicalize a directory that may not exist yet: the deepest existing
+ * ancestor is resolved (`fs.realpath`), the missing tail is appended.
  *
- * Rejected locations are filesystem roots, the user profile itself, the AFM
- * configuration directory, Windows/Program Files locations, ancestors of the
- * configuration directory, and any path with an existing linked (symlink or
- * junction) ancestor. The check is read-only; it never creates or removes
- * anything and returns whether the directory already exists as a regular
- * directory.
+ * This is what makes the tool work on macOS, where `$TMPDIR` lives under
+ * `/var/folders/...` and `/var` is itself a symlink to `/private/var`: the
+ * stored root is the real location, so the "no linked ancestor" rule below
+ * rejects only links the operator created, and deletion later removes exactly
+ * the recorded directory instead of traversing a link.
  */
-async function inspectEnvironmentDirectory(directory, configDirectory) {
-    const root = path.resolve(directory);
-    if (root === path.parse(root).root)
-        throw new Error(`Protected environment root: ${root} is a filesystem root.`);
-    const key = root.toLowerCase();
-    const home = path.resolve(os.homedir()).toLowerCase();
-    const config = path.resolve(configDirectory).toLowerCase();
-    const protectedRoots = [home, config, process.env.ProgramFiles, process.env['ProgramFiles(x86)'], process.env.SystemRoot, process.env.WINDIR]
-        .filter((value) => typeof value === 'string' && value.trim() !== '')
-        .map(value => path.resolve(value).toLowerCase());
-    if (protectedRoots.some(value => key === value || (value !== home && key.startsWith(value + path.sep))) || config.startsWith(key + path.sep)) {
-        throw new Error(`Protected environment root: ${root} is a system, user profile or configuration location.`);
+async function canonicalDirectory(directory) {
+    const absolute = path.resolve(directory);
+    const tail = [];
+    for (let current = absolute;; current = path.dirname(current)) {
+        try {
+            const resolved = await fs.realpath(current);
+            return tail.length ? path.join(resolved, ...tail.reverse()) : resolved;
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        const parent = path.dirname(current);
+        if (parent === current)
+            return absolute;
+        tail.push(path.basename(current));
     }
+}
+/** System locations that must never receive an environment, per platform. */
+function systemRoots(platform = process.platform) {
+    const variables = platform === 'win32'
+        ? [process.env.ProgramFiles, process.env['ProgramFiles(x86)'], process.env.SystemRoot, process.env.WINDIR]
+        : ['/usr', '/etc', '/bin', '/sbin', '/lib', '/lib64', '/boot', '/dev', '/proc', '/sys', '/opt', '/System', '/Library', '/Applications'];
+    return variables.filter((value) => typeof value === 'string' && value.trim() !== '').map(value => path.resolve(value).toLowerCase());
+}
+/**
+ * macOS ships `/var`, `/tmp` and `/etc` as symlinks into `/private`. Those are
+ * system links rather than operator ones, so the "no linked ancestor" rule has to
+ * let them through or `$TMPDIR` paths could never be used; the recorded root is
+ * still the canonical location, so nothing is ever operated through the link.
+ */
+function isSystemLinkTarget(resolved, platform = process.platform) {
+    return platform === 'darwin' && ['/private/var', '/private/tmp', '/private/etc', '/private/var/run'].includes(resolved);
+}
+/** Reject a linked or non-directory ancestor, allowing only a platform system link. */
+async function assertRegularAncestors(requested, platform) {
     let exists = true;
-    for (let current = root;; current = path.dirname(current)) {
+    for (let current = requested;; current = path.dirname(current)) {
         try {
             const stat = await fs.lstat(current);
-            if (!stat.isDirectory() || stat.isSymbolicLink())
+            if (stat.isSymbolicLink()) {
+                const resolved = await fs.realpath(current).catch(() => '');
+                if (!isSystemLinkTarget(resolved, platform))
+                    throw new Error(`Environment root or ancestor is linked or not a directory: ${current}`);
+            }
+            else if (!stat.isDirectory())
                 throw new Error(`Environment root or ancestor is linked or not a directory: ${current}`);
         }
         catch (error) {
             if (error.code !== 'ENOENT')
                 throw error;
-            if (current === root)
+            if (current === requested)
                 exists = false;
         }
         if (current === path.dirname(current))
@@ -82,6 +111,31 @@ async function inspectEnvironmentDirectory(directory, configDirectory) {
     }
     return exists;
 }
+/**
+ * Verify that a directory is safe to use as an environment directory or as the
+ * unified directory that contains managed environments.
+ *
+ * Rejected locations are filesystem roots, the user profile itself, the AFM
+ * configuration directory, system locations and their descendants, ancestors of
+ * the configuration directory, and any path with an existing linked (symlink or
+ * junction) ancestor other than a platform system link. The check is read-only;
+ * it never creates or removes anything and returns whether the directory already
+ * exists as a regular directory.
+ */
+async function inspectEnvironmentDirectory(directory, configDirectory, platform = process.platform) {
+    const requested = path.resolve(directory);
+    const root = await canonicalDirectory(requested);
+    if (root === path.parse(root).root)
+        throw new Error(`Protected environment root: ${root} is a filesystem root.`);
+    const key = root.toLowerCase();
+    const home = (await canonicalDirectory(os.homedir())).toLowerCase();
+    const config = (await canonicalDirectory(configDirectory)).toLowerCase();
+    const protectedRoots = [home, config, ...systemRoots(platform)];
+    if (protectedRoots.some(value => key === value || (value !== home && key.startsWith(value + path.sep))) || config.startsWith(key + path.sep)) {
+        throw new Error(`Protected environment root: ${root} is a system, user profile or configuration location.`);
+    }
+    return assertRegularAncestors(requested, platform);
+}
 /**
  * Validate the unified directory that holds managed environments.
  *
@@ -93,7 +147,7 @@ async function inspectEnvironmentDirectory(directory, configDirectory) {
 async function resolveEnvironmentContainer(input, configDirectory, options = {}) {
     if (typeof input !== 'string' || input.trim() === '')
         throw new Error('Environment root must be a non-empty directory path.');
-    const directory = path.resolve(input);
+    const directory = await canonicalDirectory(input);
     if (await inspectEnvironmentDirectory(directory, configDirectory))
         return { directory, created: false };
     if (!options.create)

package/dist/environment/root.js.map

@@ -1 +1 @@
-{"version":3,"file":"root.js","sourceRoot":"","sources":["../../src/environment/root.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,kEAwBC;AAYD,kEASC;AAMD,4EAMC;AAzED,gDAAkC;AAClC,uCAAyB;AACzB,2CAA6B;AAC7B,yCAA0C;AAE1C;;;;;;;;;;GAUG;AACI,KAAK,UAAU,2BAA2B,CAAC,SAAiB,EAAE,eAAuB;IAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,wBAAwB,CAAC,CAAC;IACjH,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;SAC1I,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;SACpF,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACnD,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7I,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,uDAAuD,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,IAAI,OAAO,GAAG,IAAI,GAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,OAAO,EAAE,CAAC,CAAC;QAC7I,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM,GAAG,KAAK,CAAC;QACvC,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,MAAM;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAID;;;;;;;GAOG;AACI,KAAK,UAAU,2BAA2B,CAAC,KAAa,EAAE,eAAuB,EAAE,UAAgC,EAAE;IAC1H,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC9H,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,MAAM,2BAA2B,CAAC,SAAS,EAAE,eAAe,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxG,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1D,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,SAAS,EAAE,CAAC,CAAC;IAC/H,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,SAAgB,gCAAgC,CAAC,SAAiB,EAAE,IAAY;IAC9E,IAAA,uBAAY,EAAC,IAAI,CAAC,CAAC;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IACtI,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"root.js","sourceRoot":"","sources":["../../src/environment/root.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAeA,gDAcC;AAgBD,gDAEC;AAgCD,kEAYC;AAYD,kEASC;AAMD,4EAMC;AA5HD,gDAAkC;AAClC,uCAAyB;AACzB,2CAA6B;AAC7B,yCAA0C;AAE1C;;;;;;;;;GASG;AACI,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,OAAO,GAAG,QAAQ,GAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,QAAQ,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAAC,WAA4B,OAAO,CAAC,QAAQ;IAC/D,MAAM,SAAS,GAAG,QAAQ,KAAK,OAAO;QACpC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QAC1G,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAC1I,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACxJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,QAAgB,EAAE,WAA4B,OAAO,CAAC,QAAQ;IAC/F,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC1H,CAAC;AAED,uFAAuF;AACvF,KAAK,UAAU,sBAAsB,CAAC,SAAiB,EAAE,QAAyB;IAChF,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,IAAI,OAAO,GAAG,SAAS,GAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC1B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC5D,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,OAAO,EAAE,CAAC,CAAC;YACxI,CAAC;iBAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,OAAO,EAAE,CAAC,CAAC;QAC3H,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,GAAG,KAAK,CAAC;QAC5C,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,MAAM;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,2BAA2B,CAAC,SAAiB,EAAE,eAAuB,EAAE,WAA4B,OAAO,CAAC,QAAQ;IACxI,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,wBAAwB,CAAC,CAAC;IACjH,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,MAAM,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,MAAM,MAAM,GAAG,CAAC,MAAM,kBAAkB,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACzE,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChE,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7I,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,uDAAuD,CAAC,CAAC;IAC9G,CAAC;IACD,OAAO,sBAAsB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AACrD,CAAC;AAID;;;;;;;GAOG;AACI,KAAK,UAAU,2BAA2B,CAAC,KAAa,EAAE,eAAuB,EAAE,UAAgC,EAAE;IAC1H,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC9H,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,MAAM,2BAA2B,CAAC,SAAS,EAAE,eAAe,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxG,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1D,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,SAAS,EAAE,CAAC,CAAC;IAC/H,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,SAAgB,gCAAgC,CAAC,SAAiB,EAAE,IAAY;IAC9E,IAAA,uBAAY,EAAC,IAAI,CAAC,CAAC;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IACtI,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/environment/types.d.ts

@@ -1,5 +1,5 @@
 import { ArtifactClient } from '../artifact-client';
-export type EnvironmentModule = 'dashboard' | 'reporting' | 'analysis' | 'sheets' | 'documents';
+export type EnvironmentModule = 'dashboard' | 'reporting' | 'analysis' | 'sheets' | 'documents' | 'collaboration';
 export interface EnvironmentOptions {
     root: string;
     major: string;
@@ -13,8 +13,13 @@ export type EnvironmentClient = Pick<ArtifactClient, 'getLatestVersion' | 'listA
 export interface LayoutMapping {
     source: string;
     destination: string;
+    /**
+     * .NET assemblies this mapping must contain. Empty for a `service` mapping:
+     * an out-of-process native service that ships no managed assembly and is
+     * loaded by the Server from its `<Services>` declaration alone.
+     */
     assemblies: string[];
-    role: 'plugin' | 'worker' | 'server' | 'monitor';
+    role: 'plugin' | 'worker' | 'server' | 'monitor' | 'service';
     service?: string;
 }
 export interface EnvironmentArtifact {

package/dist/environment/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/environment/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AAChG,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AACD,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,cAAc,EAAE,kBAAkB,GAAG,eAAe,GAAG,kBAAkB,CAAC,CAAC;AAChH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AACD,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,MAAM,CAAC;AAC/C,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACtC,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,UAAU,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,iBAAiB,EAAE,CAAC;IACrC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AACD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AACD,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAE5D,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,gEAAgE;IAChE,OAAO,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACxC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/environment/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,eAAe,CAAC;AAClH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AACD,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,cAAc,EAAE,kBAAkB,GAAG,eAAe,GAAG,kBAAkB,CAAC,CAAC;AAChH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AACD,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,MAAM,CAAC;AAC/C,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACtC,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,UAAU,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,iBAAiB,EAAE,CAAC;IACrC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AACD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AACD,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAE5D,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,gEAAgE;IAChE,OAAO,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACxC"}

package/dist/environment/update.d.ts

@@ -1,6 +1,8 @@
 import { EnvironmentRegistry } from './registry';
 import { ProcessBackend } from './process';
 import { EnvironmentClient, EnvironmentProgress } from './types';
+/** Modules `update-env` may replace; exported so the web interface lists the same set. */
+export declare const updatableModules: string[];
 export interface ModuleUpdateSpec {
     module: string;
     version?: string;
@@ -81,7 +83,7 @@ export declare function parseModuleSpecs(values: string[]): ModuleUpdateSpec[];
  * `Disabled`; a configuration without that node is updated through
  * `<PluginWorkers>` alone.
  */
-export declare function patchEnvironmentConfiguration(xml: string, entries: PluginEntry[]): string;
+export declare function patchEnvironmentConfiguration(xml: string, entries: PluginEntry[], platform?: NodeJS.Platform): string;
 /**
  * Update selected modules of a registered environment.
  *

package/dist/environment/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/environment/update.ts"],"names":[],"mappings":"AAOA,OAAO,EAAqB,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEpE,OAAO,EAAE,cAAc,EAAyB,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAiB,MAAM,SAAS,CAAC;AAShF,MAAM,WAAW,gBAAgB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE;AAC7G,2FAA2F;AAC3F,MAAM,WAAW,WAAW;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;AACjJ,MAAM,WAAW,YAAY;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,EAAE,MAAM,EAAE,CAAA;CAAE;AACvM,MAAM,WAAW,YAAY;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,YAAY,EAAE,CAAC;IAAC,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAAC,eAAe,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,WAAW,EAAE,CAAA;CAAE;AACjO,MAAM,WAAW,kBAAkB;IAAG,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAAC,SAAS,CAAC,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAAC,UAAU,CAAC,EAAE,mBAAmB,CAAA;CAAE;AAEhK;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAAG,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;AA6FtI;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAarE;AAwDD;;;;;;;;;;;GAWG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,CAyCzF;AAmMD;;;;;;;;GAQG;AACH,qBAAa,kBAAkB;IAKjB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAJzC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAsB;gBACrB,YAAY,GAAE,kBAAuB;IAM5D,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,gBAAgB,GAAG,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,iBAAiB,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,mBAAmB,CAAA;KAAO,GAAG,OAAO,CAAC,YAAY,CAAC;CA6LtM"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/environment/update.ts"],"names":[],"mappings":"AAOA,OAAO,EAAqB,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEpE,OAAO,EAAE,cAAc,EAAyB,MAAM,WAAW,CAAC;AAElE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAiB,MAAM,SAAS,CAAC;AAUhF,0FAA0F;AAC1F,eAAO,MAAM,gBAAgB,UAA0E,CAAC;AAGxG,MAAM,WAAW,gBAAgB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE;AAC7G,2FAA2F;AAC3F,MAAM,WAAW,WAAW;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;AACjJ,MAAM,WAAW,YAAY;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,EAAE,MAAM,EAAE,CAAA;CAAE;AACvM,MAAM,WAAW,YAAY;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,YAAY,EAAE,CAAC;IAAC,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAAC,eAAe,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,WAAW,EAAE,CAAA;CAAE;AACjO,MAAM,WAAW,kBAAkB;IAAG,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAAC,SAAS,CAAC,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAAC,UAAU,CAAC,EAAE,mBAAmB,CAAA;CAAE;AAEhK;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAAG,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;AA6FtI;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAarE;AAwDD;;;;;;;;;;;GAWG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,MAAM,CAyCvI;AAmMD;;;;;;;;GAQG;AACH,qBAAa,kBAAkB;IAKjB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAJzC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAsB;gBACrB,YAAY,GAAE,kBAAuB;IAM5D,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,gBAAgB,GAAG,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,iBAAiB,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,mBAAmB,CAAA;KAAO,GAAG,OAAO,CAAC,YAAY,CAAC;CAqMtM"}

package/dist/environment/update.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.EnvironmentUpdater = void 0;
+exports.EnvironmentUpdater = exports.updatableModules = void 0;
 exports.parseModuleSpecs = parseModuleSpecs;
 exports.patchEnvironmentConfiguration = patchEnvironmentConfiguration;
 const fs = __importStar(require("fs/promises"));
@@ -45,22 +45,28 @@ const builder_1 = require("./builder");
 const registry_1 = require("./registry");
 const validate_1 = require("./validate");
 const process_1 = require("./process");
+const posix_process_1 = require("./posix-process");
+const atomic_1 = require("../utils/atomic");
+const local_path_1 = require("../utils/local-path");
 /** Same parser options as the creation path, so a rewrite round-trips identically. */
 const parserOptions = { ignoreAttributes: false, parseTagValue: false, processEntities: false };
 const builderOptions = { ignoreAttributes: false, format: true, suppressEmptyNode: false };
-const windowsPath = (value) => value.replace(/\//g, '\\');
-const updatableModules = ['dashboard', 'reporting', 'sheets', 'analysis', 'common'];
+const windowsPath = (value, platform) => (0, local_path_1.nativeSeparators)(value, platform);
+/** The separator the recorded entries use on the target platform. */
+const separatorOf = (platform) => (platform === 'win32' ? '\\' : '/');
+/** Modules `update-env` may replace; exported so the web interface lists the same set. */
+exports.updatableModules = ['dashboard', 'reporting', 'sheets', 'documents', 'analysis', 'common'];
 const installationDirectory = (root, destination) => path.join(root, ...destination.split('/'));
 function validateUpdatableModule(module) {
-    if (updatableModules.includes(module))
+    if (exports.updatableModules.includes(module))
         return;
     if (module === 'server')
         throw new Error('Module server cannot be updated: it defines the environment runtime and configuration schema. Recreate the environment with create-env instead.');
     if (module === 'monitoring')
         throw new Error('Module monitoring cannot be updated: it defines the configuration schema and monitor runtime. Recreate the environment with create-env instead.');
-    if (module === 'documents')
-        throw new Error('Module documents cannot be updated: embedded Documents execution is not supported.');
-    throw new Error(`Unsupported module "${module}": updateable modules are dashboard, reporting, sheets, analysis and common.`);
+    if (module === 'collaboration')
+        throw new Error('Module collaboration is deployed together with documents by create-env and the Server loads it from its own configuration entry; it is not updated on its own. Update `documents`, or recreate the environment.');
+    throw new Error(`Unsupported module "${module}": updateable modules are dashboard, reporting, sheets, documents, analysis and common.`);
 }
 /** `all` is the only allowed pseudo-module: every configured module from remote. */
 const allModules = 'all';
@@ -208,24 +214,24 @@ function stringList(raw) {
     return list;
 }
 /** Replace or append one `<sys:string>` path list, matching by destination or assembly name. */
-function rewritePathList(values, entries) {
+function rewritePathList(values, entries, platform) {
     const strings = values.map(value => value.trim());
     const used = new Set();
     const appended = [];
     for (const entry of entries) {
-        const prefix = windowsPath(entry.destination).toLowerCase() + '\\';
+        const prefix = windowsPath(entry.destination, platform).toLowerCase() + separatorOf(platform);
         const assemblies = new Set(entry.assemblies.map(name => name.toLowerCase()));
         const index = strings.findIndex((value, candidate) => {
             if (used.has(candidate))
                 return false;
-            const folded = windowsPath(value).toLowerCase();
-            return folded.startsWith(prefix) || assemblies.has(path.win32.basename(folded));
+            const folded = windowsPath(value, platform).toLowerCase();
+            return folded.startsWith(prefix) || assemblies.has((0, local_path_1.baseNameOf)(folded));
         });
         if (index < 0)
-            appended.push(windowsPath(entry.path));
+            appended.push(windowsPath(entry.path, platform));
         else {
             used.add(index);
-            strings[index] = windowsPath(entry.path);
+            strings[index] = windowsPath(entry.path, platform);
         }
     }
     return [...strings, ...appended];
@@ -242,7 +248,7 @@ function rewritePathList(values, entries) {
  * `Disabled`; a configuration without that node is updated through
  * `<PluginWorkers>` alone.
  */
-function patchEnvironmentConfiguration(xml, entries) {
+function patchEnvironmentConfiguration(xml, entries, platform = process.platform) {
     if (typeof xml !== 'string' || /<!DOCTYPE|<!ENTITY/i.test(xml) || fast_xml_parser_1.XMLValidator.validate(xml) !== true)
         throw new Error('Invalid environment configuration.');
     const document = new fast_xml_parser_1.XMLParser(parserOptions).parse(xml);
@@ -254,11 +260,11 @@ function patchEnvironmentConfiguration(xml, entries) {
         const plugins = server.Plugins === undefined || server.Plugins === '' ? {} : server.Plugins;
         if (typeof plugins !== 'object' || Array.isArray(plugins))
             throw new Error('Invalid environment configuration.');
-        const combined = rewritePathList(stringList(plugins['sys:string']), pluginEntries);
+        const combined = rewritePathList(stringList(plugins['sys:string']), pluginEntries, platform);
         // Keep Dashboard first even when it is a local build path rather than a deployed one.
         const dashboard = combined.findIndex(value => {
-            const folded = windowsPath(value).toLowerCase();
-            return folded.startsWith('plugins\\dashboard\\') || path.win32.basename(folded) === 'wyn.dashboards.plugin.dll';
+            const folded = windowsPath(value, platform).toLowerCase();
+            return folded.startsWith(separatorOf(platform) === '\\' ? 'plugins\\dashboard\\' : 'plugins/dashboard/') || (0, local_path_1.baseNameOf)(folded) === 'wyn.dashboards.plugin.dll';
         });
         if (dashboard > 0)
             combined.unshift(combined.splice(dashboard, 1)[0]);
@@ -270,7 +276,7 @@ function patchEnvironmentConfiguration(xml, entries) {
         const pluginWorkers = server.PluginWorkers === undefined || server.PluginWorkers === '' ? {} : server.PluginWorkers;
         if (typeof pluginWorkers !== 'object' || Array.isArray(pluginWorkers))
             throw new Error('Invalid environment configuration.');
-        pluginWorkers['sys:string'] = rewritePathList(stringList(pluginWorkers['sys:string']), workers);
+        pluginWorkers['sys:string'] = rewritePathList(stringList(pluginWorkers['sys:string']), workers, platform);
         server.PluginWorkers = pluginWorkers;
         const services = document?.SystemConfig?.Services;
         for (const entry of workers) {
@@ -282,8 +288,8 @@ function patchEnvironmentConfiguration(xml, entries) {
             const node = service;
             // The worker is loaded from the path list above and uses its own directory
             // as its base directory: keep the service in step without touching Disabled.
-            node.WorkingDirectory = windowsPath(path.win32.dirname(entry.path));
-            node.Assembly = path.win32.basename(entry.path);
+            node.WorkingDirectory = windowsPath((0, local_path_1.directoryOf)(entry.path, platform), platform);
+            node.Assembly = (0, local_path_1.baseNameOf)(entry.path);
         }
     }
     const output = new fast_xml_parser_1.XMLBuilder(builderOptions).build(document);
@@ -361,7 +367,7 @@ function manifestSource(module, targets, previous) {
 async function writeAtomic(file, content) {
     const temporary = `${file}.afm-tmp`;
     await fs.writeFile(temporary, content, 'utf8');
-    await fs.rename(temporary, file);
+    await (0, atomic_1.renameAtomic)(temporary, file);
 }
 const writeJsonAtomic = (file, value) => writeAtomic(file, JSON.stringify(value, null, 2) + '\n');
 /**
@@ -469,7 +475,7 @@ async function resolveLocalSource(entry, module, assembly, input) {
         if (path.extname(source).toLowerCase() !== '.dll')
             throw new Error(`Local source must be a .dll file: ${source}.`);
         if (assembly === undefined) {
-            const name = path.win32.basename(source).toLowerCase();
+            const name = (0, local_path_1.baseNameOf)(source).toLowerCase();
             const matches = mappings.filter(mapping => mapping.assemblies.some(known => known.toLowerCase() === name));
             if (matches.length !== 1)
                 throw new Error(`Local source ${source} matches ${matches.length} targets of module ${module}. Expected one of ${expectedAssemblies(module).join(', ')}; select one explicitly with ${module}#<assembly>=<path>.`);
@@ -480,7 +486,7 @@ async function resolveLocalSource(entry, module, assembly, input) {
             const named = mappingForAssembly(module, assembly);
             // The explicit form exists for a build whose file name matches no assembly;
             // a file that is another target's assembly is still a mistake.
-            const basename = path.win32.basename(source);
+            const basename = (0, local_path_1.baseNameOf)(source);
             const conflicts = mappings.filter(mapping => mapping !== named.mapping && mapping.assemblies.some(known => known.toLowerCase() === basename.toLowerCase()));
             if (conflicts.length)
                 throw new Error(`Local source ${source} is an assembly of ${conflicts.map(mapping => mapping.destination).join(', ')}, not of ${named.mapping.destination}: ${module}#${assembly}= selects ${named.mapping.destination}.`);
@@ -544,15 +550,13 @@ class EnvironmentUpdater {
     constructor(dependencies = {}) {
         this.dependencies = dependencies;
         this.registry = dependencies.registry ?? new registry_1.EnvironmentRegistry();
-        this.processes = dependencies.processes ?? new process_1.WindowsProcessBackend();
+        this.processes = dependencies.processes ?? (process.platform === 'win32' ? new process_1.WindowsProcessBackend() : new posix_process_1.PosixProcessBackend());
         this.platform = dependencies.platform ?? process.platform;
         this.onProgress = dependencies.onProgress;
     }
     async update(name, specs, clientFactory, options = {}) {
         const dryRun = options.dryRun === true;
         const onProgress = options.onProgress ?? this.onProgress;
-        if (!dryRun && this.platform !== 'win32')
-            throw new Error('Environment execution is Windows-only. Use dry-run on other platforms.');
         onProgress?.('Validating module specs');
         let parsed = normalizeModuleSpecs(specs);
         if (!parsed.length)
@@ -564,12 +568,13 @@ class EnvironmentUpdater {
         await (0, validate_1.validateEnvironmentTree)(entry.root);
         const manifest = await readManifest(entry.root);
         const artifacts = [...(manifest.artifacts ?? [])];
+        const installed = new Set(artifacts.map(artifact => artifact.module));
         const skipped = [];
         if (parsed.some(spec => spec.module === 'all')) {
             // `all` means every configured module from remote; modules that already
             // point at a local developer build are left exactly as they are.
             const localModules = new Set([...Object.keys(manifest.moduleSources ?? {}), ...(entry.localModules ?? [])]);
-            const configured = [...new Set(artifacts.map(artifact => artifact.module))].filter(module => updatableModules.includes(module)).sort();
+            const configured = [...new Set(artifacts.map(artifact => artifact.module))].filter(module => exports.updatableModules.includes(module)).sort();
             for (const module of configured)
                 if (localModules.has(module))
                     skipped.push({ module, reason: 'local' });
@@ -582,8 +587,8 @@ class EnvironmentUpdater {
         const localOverrides = new Map();
         const selectedTargets = new Set();
         for (const spec of parsed) {
-            if (spec.module === 'sheets' && entry.edition !== 'en')
-                throw new Error(`Module sheets requires an EN edition environment; ${entry.name} is ${entry.edition}.`);
+            if (['sheets', 'documents'].includes(spec.module) && entry.edition !== 'en')
+                throw new Error(`Module ${spec.module} requires an EN edition environment; ${entry.name} is ${entry.edition}.`);
             if (spec.localPath === undefined)
                 continue;
             const resolution = await resolveLocalSource(entry, spec.module, spec.assembly, spec.localPath);
@@ -599,6 +604,14 @@ class EnvironmentUpdater {
             localOverrides.set(spec.module, targets);
         }
         const remote = parsed.filter(spec => spec.localPath === undefined);
+        // Smart documents cannot run without the collaboration service, which
+        // create-env deploys and declares in the Server configuration alongside
+        // documents. Installing documents into an environment with no collaboration
+        // deployment would produce a broken environment, so refuse — after the
+        // edition gate above, so a CN environment still reports the EN requirement.
+        if (parsed.some(spec => spec.module === 'documents') && !installed.has('collaboration')) {
+            throw new Error(`Module documents requires the collaboration service, which ${entry.name} has not deployed. Recreate the environment with create-env: selecting documents deploys collaboration automatically.`);
+        }
         const state = await (0, validate_1.observeRuntimeState)(entry, this.processes);
         if (remote.length && state !== 'ready' && state !== 'stopped')
             throw new Error(`Cannot update modules from a remote source while ${entry.name} is ${state}: deployed files may be in use. Run \`afm env stop ${entry.name}\` first.`);
@@ -607,7 +620,6 @@ class EnvironmentUpdater {
         const downloads = [...(manifest.downloads ?? [])];
         const selectedModules = manifest.selectedModules === undefined ? undefined : [...manifest.selectedModules];
         const moduleSources = { ...(manifest.moduleSources ?? {}) };
-        const installed = new Set(artifacts.map(artifact => artifact.module));
         const workspace = remote.length && !dryRun ? await fs.mkdtemp(path.join(path.dirname(entry.root), '.afm-env-')) : undefined;
         const warnings = [];
         try {
@@ -671,7 +683,7 @@ class EnvironmentUpdater {
                     if (stagedArtifact)
                         copies.push({ source: path.join(stagedArtifact.expanded, mapping.source), destination });
                     copiedDirectories.push(mapping.destination);
-                    const assembly = stagedArtifact?.assemblies.get(mapping.destination) ?? knownAssembly(configured, mapping);
+                    const assembly = stagedArtifact?.assemblies.get(mapping.destination) ?? knownAssembly(configured, mapping, this.platform);
                     // Plugins stay relative to the environment root; a worker entry does too,
                     // and its service keeps using the deployed destination as working directory.
                     if (mapping.role === 'plugin' || mapping.role === 'worker') {
@@ -702,7 +714,7 @@ class EnvironmentUpdater {
                 });
             }
             const changes = plans.map(plan => ({ module: plan.module, previous: plan.previous, next: plan.next, copiedDirectories: plan.copiedDirectories, removedDirectories: plan.removedDirectories }));
-            const configuration = patchEnvironmentConfiguration(configured, plans.flatMap(plan => plan.entries));
+            const configuration = patchEnvironmentConfiguration(configured, plans.flatMap(plan => plan.entries), this.platform);
             const nextArtifacts = [...artifacts];
             const nextDownloads = [...downloads];
             for (const plan of plans) {
@@ -785,20 +797,20 @@ class EnvironmentUpdater {
 }
 exports.EnvironmentUpdater = EnvironmentUpdater;
 /** Best-effort preview assembly for dry-run, where nothing can be extracted. */
-function knownAssembly(xml, mapping) {
+function knownAssembly(xml, mapping, platform) {
     try {
         const document = new fast_xml_parser_1.XMLParser(parserOptions).parse(xml);
         const server = document?.SystemConfig?.Services?.Server;
         const raw = mapping.role === 'worker' ? server?.PluginWorkers?.['sys:string'] : server?.Plugins?.['sys:string'];
         const list = raw === undefined ? [] : Array.isArray(raw) ? raw : [raw];
-        const prefix = windowsPath(mapping.destination).toLowerCase() + '\\';
+        const prefix = windowsPath(mapping.destination, platform).toLowerCase() + separatorOf(platform);
         for (const value of list) {
             if (typeof value !== 'string')
                 continue;
-            const folded = windowsPath(value).toLowerCase();
+            const folded = windowsPath(value, platform).toLowerCase();
             if (!folded.startsWith(prefix))
                 continue;
-            const name = path.win32.basename(folded);
+            const name = (0, local_path_1.baseNameOf)(folded);
             const match = mapping.assemblies.find(assembly => assembly.toLowerCase() === name);
             if (match)
                 return match;