@jini-ai/platform 0.1.0

package/dist/proxy-env.js

@@ -0,0 +1,373 @@
+/**
+ * @module proxy-env
+ *
+ * System proxy discovery and proxy-aware environment merging. Reads the OS
+ * proxy configuration (macOS `scutil --proxy`, Windows Internet Settings
+ * registry) and normalizes it into canonical `HTTP_PROXY` / `HTTPS_PROXY` /
+ * `ALL_PROXY` / `NO_PROXY` / `NODE_USE_ENV_PROXY` environment variables, plus a
+ * merge that keeps proxy variables consistent across layered env sources.
+ *
+ * Pure aside from the single `execFileSync` used to shell out to the platform
+ * proxy-config tools; owns no other sibling dependency.
+ */
+import { execFileSync } from "node:child_process";
+const CANONICAL_PROXY_ENV_KEYS = new Map([
+    ["all_proxy", "ALL_PROXY"],
+    ["http_proxy", "HTTP_PROXY"],
+    ["https_proxy", "HTTPS_PROXY"],
+    ["node_use_env_proxy", "NODE_USE_ENV_PROXY"],
+    ["no_proxy", "NO_PROXY"],
+]);
+/** @internal Default proxy-config command runner: a short-timeout synchronous shell-out with output captured as UTF-8. */
+function defaultSystemProxyCommandRunner(command, args) {
+    return execFileSync(command, args, {
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
+        timeout: 2_000,
+        windowsHide: true,
+    });
+}
+/** @internal Map a case-insensitive proxy env key to its canonical spelling, or `null` if it is not a proxy variable. */
+function canonicalProxyEnvKey(key) {
+    return CANONICAL_PROXY_ENV_KEYS.get(key.toLowerCase()) ?? null;
+}
+/** @internal Delete every case-variant of a proxy env key from `env` so a canonical value can replace it cleanly. */
+function deleteProxyEnvVariants(env, canonicalKey) {
+    for (const existingKey of Object.keys(env)) {
+        if (existingKey.toLowerCase() === canonicalKey.toLowerCase())
+            delete env[existingKey];
+    }
+}
+/** @internal Assign a canonical proxy value into `env`, clearing prior case-variants and adding lowercase aliases on POSIX. */
+function setCanonicalProxyEnvValue(env, canonicalKey, value, platform) {
+    deleteProxyEnvVariants(env, canonicalKey);
+    if (canonicalKey === "NODE_USE_ENV_PROXY") {
+        env.NODE_USE_ENV_PROXY = value;
+        return;
+    }
+    addProxyEnvValue(env, canonicalKey, value, platform);
+}
+/**
+ * Merge multiple env sources into one proxy-consistent environment. Proxy
+ * variables are collapsed to their canonical spelling (preferring lowercase
+ * inputs), non-proxy keys pass through, and `NODE_USE_ENV_PROXY=1` is set when
+ * a proxy endpoint is present but the flag is not.
+ *
+ * @param platform - Target platform, controlling lowercase-alias emission.
+ * @param sources - Env sources merged left-to-right (later sources win).
+ * @returns A new merged environment with normalized proxy variables.
+ */
+export function mergeProxyAwareEnv(platform, ...sources) {
+    const merged = {};
+    for (const source of sources) {
+        const proxyEntries = new Map();
+        for (const [key, value] of Object.entries(source)) {
+            if (value == null)
+                continue;
+            const canonicalKey = canonicalProxyEnvKey(key);
+            if (canonicalKey) {
+                const current = proxyEntries.get(canonicalKey);
+                const preferLowercase = key === key.toLowerCase();
+                if (!current || preferLowercase || !current.preferLowercase) {
+                    proxyEntries.set(canonicalKey, { preferLowercase, value });
+                }
+                continue;
+            }
+            merged[key] = value;
+        }
+        for (const [canonicalKey, entry] of proxyEntries) {
+            setCanonicalProxyEnvValue(merged, canonicalKey, entry.value, platform);
+        }
+    }
+    if (hasProxyEndpointEnv(merged) && !hasCanonicalProxyEnv(merged, "NODE_USE_ENV_PROXY")) {
+        merged.NODE_USE_ENV_PROXY = "1";
+    }
+    return merged;
+}
+/** @internal Whether `env` already contains any case-variant of the given canonical proxy key. */
+function hasCanonicalProxyEnv(env, canonicalKey) {
+    return Object.keys(env).some((key) => key.toLowerCase() === canonicalKey.toLowerCase());
+}
+/** @internal Whether `env` defines a non-empty HTTP/HTTPS/ALL proxy endpoint (ignoring `NO_PROXY`). */
+function hasProxyEndpointEnv(env) {
+    return ["ALL_PROXY", "HTTP_PROXY", "HTTPS_PROXY"].some((key) => {
+        for (const [envKey, value] of Object.entries(env)) {
+            if (envKey.toLowerCase() === key.toLowerCase() && value?.trim())
+                return true;
+        }
+        return false;
+    });
+}
+/** @internal Set an uppercase proxy variable (and its lowercase alias on POSIX) from a trimmed value; no-op when blank. */
+function addProxyEnvValue(env, key, value, platform) {
+    const trimmed = value.trim();
+    if (!trimmed)
+        return;
+    env[key] = trimmed;
+    if (platform !== "win32")
+        env[key.toLowerCase()] = trimmed;
+}
+/** @internal Expand a single NO_PROXY bypass token into its normalized forms (e.g. `<local>`, `*.foo`, `::1`). */
+function normalizeBypassToken(token) {
+    const trimmed = token.trim();
+    if (!trimmed)
+        return [];
+    if (trimmed === "<local>")
+        return ["<local>", "localhost", "127.0.0.1", "[::1]", ".local"];
+    if (trimmed === "::1")
+        return ["[::1]"];
+    if (trimmed.startsWith("*."))
+        return [`.${trimmed.slice(2)}`];
+    return [trimmed];
+}
+/** @internal Build a de-duplicated, comma-joined NO_PROXY value from bypass tokens, or `null` when empty. */
+function buildNoProxyValue(tokens) {
+    const seen = new Set();
+    const values = [];
+    for (const token of tokens) {
+        for (const normalized of normalizeBypassToken(token)) {
+            if (!seen.has(normalized)) {
+                seen.add(normalized);
+                values.push(normalized);
+            }
+        }
+    }
+    return values.length > 0 ? values.join(",") : null;
+}
+/** @internal Preserve a wildcard (`*`) NO_PROXY bypass verbatim, since it disables proxying entirely. */
+function preserveWildcardNoProxyValue(noProxy) {
+    return noProxy?.split(",").some((token) => token.trim() === "*") ? "*" : undefined;
+}
+/** @internal Ensure a proxy URL has a scheme, defaulting to the supplied scheme when only an authority is given.
+ *  Its only call site (`normalizeHostPortProxyUrl`) already guarantees a non-empty `raw` (both `host` and `port`
+ *  are checked truthy before it's composed), so no empty/whitespace-only-input guard is needed here. */
+function normalizeProxyUrl(raw, scheme) {
+    const trimmed = raw.trim();
+    return /^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed) ? trimmed : `${scheme}://${trimmed}`;
+}
+/** @internal Bracket a bare IPv6 host in an `authority` (`host:port`) so URL parsing does not mistake it for a port. */
+function bracketIpv6Authority(authority) {
+    if (authority.startsWith("[") || !authority.includes(":"))
+        return authority;
+    const portSeparatorIndex = authority.lastIndexOf(":");
+    if (portSeparatorIndex <= 0)
+        return authority;
+    const host = authority.slice(0, portSeparatorIndex);
+    const port = authority.slice(portSeparatorIndex + 1);
+    if (!host.includes(":") || !/^\d+$/.test(port))
+        return authority;
+    return `[${host}]:${port}`;
+}
+/** @internal Normalize a proxy authority into a scheme-qualified URL, IPv6-bracketing the host as needed.
+ *  Every call site already guarantees a non-empty, trimmed `raw` before calling this (see
+ *  `parseWindowsInternetSettingsProxyOutput`'s own `!kind || !value` / `!proxyServer.trim()` guards), so no
+ *  empty/whitespace-only-input guard is needed here. */
+function normalizeAuthorityProxyUrl(raw, scheme) {
+    const trimmed = raw.trim();
+    if (/^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed))
+        return trimmed;
+    return `${scheme}://${bracketIpv6Authority(trimmed)}`;
+}
+/** @internal Compose a scheme-qualified proxy URL from separate host and port fields, IPv6-bracketing the host. */
+function normalizeHostPortProxyUrl(host, port, scheme) {
+    const trimmedHost = host?.trim() ?? "";
+    const trimmedPort = port?.trim() ?? "";
+    if (!trimmedHost || !trimmedPort)
+        return null;
+    const normalizedHost = trimmedHost.includes(":") && !trimmedHost.startsWith("[") && !trimmedHost.endsWith("]")
+        ? `[${trimmedHost}]`
+        : trimmedHost;
+    return normalizeProxyUrl(`${normalizedHost}:${trimmedPort}`, scheme);
+}
+/** @internal Assemble the final proxy env from parsed values, adding loopback bypasses and the `NODE_USE_ENV_PROXY` flag. */
+function finalizeSystemProxyEnv(values, platform) {
+    const hasProxy = Boolean(values.httpProxy || values.httpsProxy || values.allProxy);
+    const noProxy = hasProxy
+        ? preserveWildcardNoProxyValue(values.noProxy) ??
+            buildNoProxyValue([
+                ...(values.noProxy ? values.noProxy.split(",") : []),
+                "localhost",
+                "127.0.0.1",
+                "[::1]",
+            ])
+        : null;
+    const env = {};
+    if (values.httpProxy)
+        addProxyEnvValue(env, "HTTP_PROXY", values.httpProxy, platform);
+    if (values.httpsProxy)
+        addProxyEnvValue(env, "HTTPS_PROXY", values.httpsProxy, platform);
+    if (values.allProxy)
+        addProxyEnvValue(env, "ALL_PROXY", values.allProxy, platform);
+    if (noProxy)
+        addProxyEnvValue(env, "NO_PROXY", noProxy, platform);
+    if (hasProxy)
+        env.NODE_USE_ENV_PROXY = "1";
+    return env;
+}
+/**
+ * Parse macOS `scutil --proxy` output into a normalized proxy environment.
+ * Honors the HTTP/HTTPS/SOCKS enable flags, exception list, and the
+ * "exclude simple hostnames" toggle.
+ *
+ * @param stdout - Raw `scutil --proxy` output.
+ * @param platform - Target platform for env normalization (defaults to `"darwin"`).
+ * @returns A normalized proxy environment (empty when no proxy is enabled).
+ */
+export function parseMacosScutilProxyOutput(stdout, platform = "darwin") {
+    const scalars = new Map();
+    const exceptions = [];
+    let inExceptions = false;
+    for (const rawLine of stdout.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (!line)
+            continue;
+        if (/^ExceptionsList\s*:\s*<array>\s*\{$/.test(line)) {
+            inExceptions = true;
+            continue;
+        }
+        if (inExceptions) {
+            if (line === "}") {
+                inExceptions = false;
+                continue;
+            }
+            const match = line.match(/^\d+\s*:\s*(.+)$/);
+            if (match)
+                exceptions.push(match[1].trim());
+            continue;
+        }
+        const match = line.match(/^([A-Za-z][A-Za-z0-9]*)\s*:\s*(.+)$/);
+        if (match)
+            scalars.set(match[1], match[2].trim());
+    }
+    const httpProxy = scalars.get("HTTPEnable") === "1"
+        ? normalizeHostPortProxyUrl(scalars.get("HTTPProxy"), scalars.get("HTTPPort"), "http")
+        : null;
+    const httpsProxy = scalars.get("HTTPSEnable") === "1"
+        ? normalizeHostPortProxyUrl(scalars.get("HTTPSProxy"), scalars.get("HTTPSPort"), "http")
+        : null;
+    const allProxy = scalars.get("SOCKSEnable") === "1"
+        ? normalizeHostPortProxyUrl(scalars.get("SOCKSProxy"), scalars.get("SOCKSPort"), "socks5")
+        : null;
+    return finalizeSystemProxyEnv({
+        allProxy,
+        httpProxy,
+        httpsProxy,
+        noProxy: buildNoProxyValue([
+            ...exceptions,
+            ...(scalars.get("ExcludeSimpleHostnames") === "1" ? ["<local>"] : []),
+        ]),
+    }, platform);
+}
+/** @internal Extract a `reg query` value line (`Name REG_TYPE value`) for the named value, or `null` if absent. */
+function parseRegistryValue(stdout, valueName) {
+    const match = stdout.match(new RegExp(`^\\s*${valueName}\\s+REG_\\w+\\s+(.+)$`, "m"));
+    return match ? match[1].trim() : null;
+}
+/**
+ * Parse Windows Internet Settings proxy registry output into a normalized proxy
+ * environment. Handles both the per-protocol (`http=…;https=…`) and shared
+ * single-endpoint `ProxyServer` forms, and the `ProxyOverride` bypass list.
+ *
+ * @param input - Raw `reg query` output for `ProxyEnable`, and optionally `ProxyServer` / `ProxyOverride`.
+ * @param platform - Target platform for env normalization (defaults to `"win32"`).
+ * @returns A normalized proxy environment (empty when proxying is disabled or unset).
+ */
+export function parseWindowsInternetSettingsProxyOutput(input, platform = "win32") {
+    const enabled = parseRegistryValue(input.proxyEnable, "ProxyEnable");
+    if (enabled == null || !/^(1|0x1)$/i.test(enabled))
+        return {};
+    const proxyServer = parseRegistryValue(input.proxyServer ?? "", "ProxyServer") ?? "";
+    const proxyOverride = parseRegistryValue(input.proxyOverride ?? "", "ProxyOverride") ?? "";
+    if (!proxyServer.trim())
+        return {};
+    let httpProxy = null;
+    let httpsProxy = null;
+    let allProxy = null;
+    if (proxyServer.includes("=")) {
+        for (const segment of proxyServer.split(";")) {
+            const [kind, rawValue] = segment.split("=", 2);
+            const value = rawValue?.trim();
+            if (!kind || !value)
+                continue;
+            const lowerKind = kind.trim().toLowerCase();
+            if (lowerKind === "http")
+                httpProxy = normalizeAuthorityProxyUrl(value, "http");
+            else if (lowerKind === "https")
+                httpsProxy = normalizeAuthorityProxyUrl(value, "http");
+            else if (lowerKind === "socks")
+                allProxy = normalizeAuthorityProxyUrl(value, "socks5");
+        }
+    }
+    else {
+        const shared = normalizeAuthorityProxyUrl(proxyServer, "http");
+        httpProxy = shared;
+        httpsProxy = shared;
+    }
+    return finalizeSystemProxyEnv({
+        allProxy,
+        httpProxy,
+        httpsProxy,
+        noProxy: buildNoProxyValue(proxyOverride.split(/[;,]/)),
+    }, platform);
+}
+/**
+ * Resolve the OS-level proxy configuration into a normalized proxy environment.
+ * Shells out to `scutil` on macOS and `reg query` on Windows (swallowing per-
+ * command failures), and returns an empty env on other platforms or on error.
+ *
+ * @param options - Optional platform override and command runner (for testing).
+ * @returns A normalized proxy environment, or `{}` when no proxy is configured.
+ */
+export function resolveSystemProxyEnv(options = {}) {
+    const platform = options.platform ?? process.platform;
+    const runCommand = options.runCommand ?? defaultSystemProxyCommandRunner;
+    const tryRun = (command, args) => {
+        try {
+            return runCommand(command, args);
+        }
+        catch {
+            return "";
+        }
+    };
+    try {
+        if (platform === "darwin") {
+            return parseMacosScutilProxyOutput(tryRun("scutil", ["--proxy"]), platform);
+        }
+        if (platform === "win32") {
+            return parseWindowsInternetSettingsProxyOutput({
+                proxyEnable: tryRun("reg", [
+                    "query",
+                    "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
+                    "/v",
+                    "ProxyEnable",
+                ]),
+                proxyOverride: tryRun("reg", [
+                    "query",
+                    "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
+                    "/v",
+                    "ProxyOverride",
+                ]),
+                proxyServer: tryRun("reg", [
+                    "query",
+                    "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
+                    "/v",
+                    "ProxyServer",
+                ]),
+            }, platform);
+        }
+    }
+    catch {
+        // Defense-in-depth, not reachable through any real call path: `tryRun`
+        // already swallows every `runCommand` failure, and neither parse
+        // function (`parseMacosScutilProxyOutput` / the Windows one) nor
+        // anything they call performs any operation that can throw for a
+        // string input — no `new URL`, no `JSON.parse`, no fixed-pattern
+        // `RegExp` construction from untrusted input. Empirically re-verified
+        // this session: 200k fuzzed `stdout`/registry-value strings (control
+        // characters, huge lengths, null bytes) through both parse functions,
+        // zero throws — see source-map.md's 2026-07-22 entry.
+        return {};
+    }
+    return {};
+}
+//# sourceMappingURL=proxy-env.js.map

package/dist/proxy-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-env.js","sourceRoot":"","sources":["../src/proxy-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AASlD,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAyF;IAC/H,CAAC,WAAW,EAAE,WAAW,CAAC;IAC1B,CAAC,YAAY,EAAE,YAAY,CAAC;IAC5B,CAAC,aAAa,EAAE,aAAa,CAAC;IAC9B,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IAC5C,CAAC,UAAU,EAAE,UAAU,CAAC;CACzB,CAAC,CAAC;AAEH,0HAA0H;AAC1H,SAAS,+BAA+B,CAAC,OAAe,EAAE,IAAc;IACtE,OAAO,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE;QACjC,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;QACnC,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;AACL,CAAC;AAED,yHAAyH;AACzH,SAAS,oBAAoB,CAC3B,GAAW;IAEX,OAAO,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAC;AACjE,CAAC;AAED,qHAAqH;AACrH,SAAS,sBAAsB,CAAC,GAAsB,EAAE,YAAoB;IAC1E,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,IAAI,WAAW,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,WAAW,EAAE;YAAE,OAAO,GAAG,CAAC,WAAW,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,+HAA+H;AAC/H,SAAS,yBAAyB,CAChC,GAAsB,EACtB,YAA4F,EAC5F,KAAa,EACb,QAAyB;IAEzB,sBAAsB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC1C,IAAI,YAAY,KAAK,oBAAoB,EAAE,CAAC;QAC1C,GAAG,CAAC,kBAAkB,GAAG,KAAK,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAyB,EACzB,GAAG,OAAsE;IAEzE,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,IAAI,GAAG,EAGzB,CAAC;QACJ,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,IAAI,IAAI;gBAAE,SAAS;YAC5B,MAAM,YAAY,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAC/C,MAAM,eAAe,GAAG,GAAG,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC;gBAClD,IAAI,CAAC,OAAO,IAAI,eAAe,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;oBAC5D,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;QACD,KAAK,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;YACjD,yBAAyB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACvF,MAAM,CAAC,kBAAkB,GAAG,GAAG,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kGAAkG;AAClG,SAAS,oBAAoB,CAC3B,GAAsB,EACtB,YAA4F;IAE5F,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,uGAAuG;AACvG,SAAS,mBAAmB,CAAC,GAAsB;IACjD,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7D,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,WAAW,EAAE,IAAI,KAAK,EAAE,IAAI,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC/E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2HAA2H;AAC3H,SAAS,gBAAgB,CACvB,GAAsB,EACtB,GAA4D,EAC5D,KAAa,EACb,QAAyB;IAEzB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IACnB,IAAI,QAAQ,KAAK,OAAO;QAAE,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC;AAC7D,CAAC;AAED,kHAAkH;AAClH,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3F,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED,6GAA6G;AAC7G,SAAS,iBAAiB,CAAC,MAAwB;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,UAAU,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,yGAAyG;AACzG,SAAS,4BAA4B,CAAC,OAAkC;IACtE,OAAO,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACrF,CAAC;AAED;;wGAEwG;AACxG,SAAS,iBAAiB,CAAC,GAAW,EAAE,MAAc;IACpD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,MAAM,OAAO,EAAE,CAAC;AACvF,CAAC;AAED,wHAAwH;AACxH,SAAS,oBAAoB,CAAC,SAAiB;IAC7C,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,MAAM,kBAAkB,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,kBAAkB,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACjE,OAAO,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED;;;wDAGwD;AACxD,SAAS,0BAA0B,CAAC,GAAW,EAAE,MAAc;IAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7D,OAAO,GAAG,MAAM,MAAM,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,mHAAmH;AACnH,SAAS,yBAAyB,CAChC,IAAwB,EACxB,IAAwB,EACxB,MAAc;IAEd,MAAM,WAAW,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,cAAc,GAClB,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrF,CAAC,CAAC,IAAI,WAAW,GAAG;QACpB,CAAC,CAAC,WAAW,CAAC;IAClB,OAAO,iBAAiB,CAAC,GAAG,cAAc,IAAI,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;AACvE,CAAC;AAED,6HAA6H;AAC7H,SAAS,sBAAsB,CAC7B,MAKC,EACD,QAAyB;IAEzB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,QAAQ;QACtB,CAAC,CAAC,4BAA4B,CAAC,MAAM,CAAC,OAAO,CAAC;YAC5C,iBAAiB,CAAC;gBAChB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,WAAW;gBACX,WAAW;gBACX,OAAO;aACR,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,IAAI,MAAM,CAAC,SAAS;QAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,UAAU;QAAE,gBAAgB,CAAC,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACzF,IAAI,MAAM,CAAC,QAAQ;QAAE,gBAAgB,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnF,IAAI,OAAO;QAAE,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClE,IAAI,QAAQ;QAAE,GAAG,CAAC,kBAAkB,GAAG,GAAG,CAAC;IAC3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAc,EACd,WAA4B,QAAQ;IAEpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,YAAY,GAAG,IAAI,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,YAAY,GAAG,KAAK,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAC7C,IAAI,KAAK;gBAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAChE,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG;QAC/B,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QACtF,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,UAAU,GACd,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG;QAChC,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QACxF,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,QAAQ,GACZ,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG;QAChC,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC;QAC1F,CAAC,CAAC,IAAI,CAAC;IACX,OAAO,sBAAsB,CAC3B;QACE,QAAQ;QACR,SAAS;QACT,UAAU;QACV,OAAO,EAAE,iBAAiB,CAAC;YACzB,GAAG,UAAU;YACb,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC;KACH,EACD,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,mHAAmH;AACnH,SAAS,kBAAkB,CAAC,MAAc,EAAE,SAAiB;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,SAAS,uBAAuB,EAAE,GAAG,CAAC,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uCAAuC,CACrD,KAA4E,EAC5E,WAA4B,OAAO;IAEnC,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACrE,IAAI,OAAO,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9D,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC;IACrF,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC;IAC3F,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAEnC,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;gBAAE,SAAS;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,SAAS,KAAK,MAAM;gBAAE,SAAS,GAAG,0BAA0B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;iBAC3E,IAAI,SAAS,KAAK,OAAO;gBAAE,UAAU,GAAG,0BAA0B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;iBAClF,IAAI,SAAS,KAAK,OAAO;gBAAE,QAAQ,GAAG,0BAA0B,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,0BAA0B,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/D,SAAS,GAAG,MAAM,CAAC;QACnB,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;IACD,OAAO,sBAAsB,CAC3B;QACE,QAAQ;QACR,SAAS;QACT,UAAU;QACV,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;KACxD,EACD,QAAQ,CACT,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAwC,EAAE;IAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,+BAA+B,CAAC;IACzE,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,IAAc,EAAU,EAAE;QACzD,IAAI,CAAC;YACH,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC;QACH,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,2BAA2B,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,OAAO,uCAAuC,CAC5C;gBACE,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE;oBACzB,OAAO;oBACP,uEAAuE;oBACvE,IAAI;oBACJ,aAAa;iBACd,CAAC;gBACF,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE;oBAC3B,OAAO;oBACP,uEAAuE;oBACvE,IAAI;oBACJ,eAAe;iBAChB,CAAC;gBACF,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE;oBACzB,OAAO;oBACP,uEAAuE;oBACvE,IAAI;oBACJ,aAAa;iBACd,CAAC;aACH,EACD,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,iEAAiE;QACjE,iEAAiE;QACjE,iEAAiE;QACjE,iEAAiE;QACjE,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,sDAAsD;QACtD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/resource-paths.d.ts

@@ -0,0 +1,68 @@
+/** Names the env vars and product identifiers this port reads/writes. */
+export interface ResourcePathsConfig {
+    /** Primary env var carrying an explicit CLI entry-point path override. */
+    cliPathEnvVar: string;
+    /** Secondary/legacy env var carrying the same override. */
+    cliPathFallbackEnvVar: string;
+    /** The npm package specifier whose `package.json` locates the CLI when no override is set. */
+    cliPackageName: string;
+    /** Env var carrying an explicit resource-root override. */
+    resourceRootEnvVar: string;
+    /** Env var carrying an explicit plugin-previews-directory override. */
+    pluginPreviewsDirEnvVar: string;
+    /** Env var carrying the daemon's data directory. */
+    dataDirEnvVar: string;
+    /** Directory name used under `projectRoot` when {@link dataDirEnvVar} is unset. */
+    defaultDataDirName: string;
+    /** Path segment identifying a Windows packaged-app `resources/<segment>/bin/` layout. */
+    windowsResourceBinSegment: string;
+}
+/**
+ * Resolves the daemon CLI's own entry-point path: an explicit env override
+ * first, then the CLI's own package location.
+ */
+export declare function resolveDaemonCliPath(config: ResourcePathsConfig, env?: NodeJS.ProcessEnv): string;
+/**
+ * Resolves a packaged-app "resources" directory: Electron's own
+ * `process.resourcesPath` when present, else a macOS `.app/Contents/Resources`
+ * marker in `process.execPath`, else a Windows `resources/<segment>/bin`
+ * marker. Returns `null` when running unpackaged (plain Node).
+ */
+export declare function resolveProcessResourcesPath(config: ResourcePathsConfig, processInfo?: {
+    resourcesPath?: string;
+    execPath: string;
+}): string | null;
+export interface ResolveDaemonResourceRootOptions {
+    configured?: string;
+    safeBases?: Array<string | null | undefined>;
+}
+/**
+ * Resolves an explicit resource-root override, requiring it to fall under
+ * one of `safeBases`. Returns `null` when no override is configured; throws
+ * when an override is configured but escapes every safe base.
+ */
+export declare function resolveDaemonResourceRoot(config: ResourcePathsConfig, { configured, safeBases }?: ResolveDaemonResourceRootOptions): string | null;
+/** Joins `segment` under `resourceRoot` when present, else returns `fallback`. */
+export declare function resolveDaemonResourceDir(resourceRoot: string | null, segment: string, fallback: string): string;
+export interface ResolveDaemonPluginPreviewsDirOptions {
+    env?: NodeJS.ProcessEnv;
+    resourceRoot: string | null | undefined;
+    projectRoot: string;
+}
+/**
+ * Resolves the plugin-previews scratch directory: an explicit env override
+ * (resolved against `projectRoot` if relative), else the standard
+ * `data/plugin-previews` location under the resource root or project root.
+ */
+export declare function resolveDaemonPluginPreviewsDir(config: ResourcePathsConfig, { env, resourceRoot, projectRoot }: ResolveDaemonPluginPreviewsDirOptions): string;
+export interface ResolveDataDirOptions {
+    requireExplicit?: boolean;
+}
+/**
+ * Resolves the daemon's data directory: an explicit env value (expanded and
+ * made absolute) if set, else `<projectRoot>/<defaultDataDirName>`. Creates
+ * the resolved directory and verifies it's writable, throwing a
+ * diagnostic-rich error otherwise.
+ */
+export declare function resolveDataDir(config: ResourcePathsConfig, raw: string | undefined, projectRoot: string, options?: ResolveDataDirOptions): string;
+//# sourceMappingURL=resource-paths.d.ts.map

package/dist/resource-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-paths.d.ts","sourceRoot":"","sources":["../src/resource-paths.ts"],"names":[],"mappings":"AAuBA,yEAAyE;AACzE,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,aAAa,EAAE,MAAM,CAAC;IACtB,2DAA2D;IAC3D,qBAAqB,EAAE,MAAM,CAAC;IAC9B,8FAA8F;IAC9F,cAAc,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uEAAuE;IACvE,uBAAuB,EAAE,MAAM,CAAC;IAChC,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yFAAyF;IACzF,yBAAyB,EAAE,MAAM,CAAC;CACnC;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,mBAAmB,EAC3B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAOR;AAUD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,mBAAmB,EAC3B,WAAW,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAY,GAClE,MAAM,GAAG,IAAI,CAqBf;AAED,MAAM,WAAW,gCAAgC;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CAC9C;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,mBAAmB,EAC3B,EAAE,UAAmD,EAAE,SAAS,EAAE,GAAE,gCAAqC,GACxG,MAAM,GAAG,IAAI,CAaf;AAED,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE/G;AAED,MAAM,WAAW,qCAAqC;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACxC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,mBAAmB,EAC3B,EAAE,GAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,qCAAqC,GACtF,MAAM,CAUR;AAED,MAAM,WAAW,qBAAqB;IACpC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,mBAAmB,EAC3B,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,qBAA0B,GAClC,MAAM,CAkCR"}

package/dist/resource-paths.js

@@ -0,0 +1,137 @@
+/**
+ * @module resource-paths
+ *
+ * Resolves the paths a packaged desktop host needs to find itself: its own
+ * CLI entry point, a packaged-app "resources" directory (macOS `.app`
+ * bundle / Windows install-relative layout), a resource root override
+ * (validated to stay under safe bases), plugin-preview scratch space, and
+ * the daemon's on-disk data directory.
+ *
+ * Generalized from an upstream flat daemon module: every hardcoded env-var
+ * name, the host CLI's own package specifier, the default data-directory
+ * name, and the Windows packaged-resources marker segment are now fields on
+ * {@link ResourcePathsConfig} — see `source-map.md` for the exact mapping.
+ */
+import fs from 'node:fs';
+import { createRequire } from 'node:module';
+import os from 'node:os';
+import path from 'node:path';
+import { resolveProjectRelativePath } from './home-expansion.js';
+const require = createRequire(import.meta.url);
+function cleanOptionalPath(value) {
+    return typeof value === 'string' && value.trim().length > 0 ? path.resolve(value) : null;
+}
+/**
+ * Resolves the daemon CLI's own entry-point path: an explicit env override
+ * first, then the CLI's own package location.
+ */
+export function resolveDaemonCliPath(config, env = process.env) {
+    const configured = cleanOptionalPath(env[config.cliPathEnvVar]) ?? cleanOptionalPath(env[config.cliPathFallbackEnvVar]);
+    if (configured)
+        return configured;
+    const packageJsonPath = require.resolve(`${config.cliPackageName}/package.json`);
+    return path.join(path.dirname(packageJsonPath), 'dist', 'cli.js');
+}
+function isPathWithin(base, target) {
+    const relativePath = path.relative(path.resolve(base), path.resolve(target));
+    return (relativePath === '' ||
+        (relativePath.length > 0 && !relativePath.startsWith('..') && !path.isAbsolute(relativePath)));
+}
+/**
+ * Resolves a packaged-app "resources" directory: Electron's own
+ * `process.resourcesPath` when present, else a macOS `.app/Contents/Resources`
+ * marker in `process.execPath`, else a Windows `resources/<segment>/bin`
+ * marker. Returns `null` when running unpackaged (plain Node).
+ */
+export function resolveProcessResourcesPath(config, processInfo = process) {
+    const { resourcesPath } = processInfo;
+    if (typeof resourcesPath === 'string' && resourcesPath.length > 0) {
+        return resourcesPath;
+    }
+    const resourcesMarker = `${path.sep}Contents${path.sep}Resources${path.sep}`;
+    const markerIndex = processInfo.execPath.indexOf(resourcesMarker);
+    if (markerIndex !== -1) {
+        return processInfo.execPath.slice(0, markerIndex + resourcesMarker.length - 1);
+    }
+    const normalizedExecPath = processInfo.execPath.toLowerCase();
+    const windowsResourceBinMarker = `${path.sep}resources${path.sep}${config.windowsResourceBinSegment}${path.sep}bin${path.sep}`.toLowerCase();
+    const windowsMarkerIndex = normalizedExecPath.indexOf(windowsResourceBinMarker);
+    if (windowsMarkerIndex !== -1) {
+        return processInfo.execPath.slice(0, windowsMarkerIndex + `${path.sep}resources`.length);
+    }
+    return null;
+}
+/**
+ * Resolves an explicit resource-root override, requiring it to fall under
+ * one of `safeBases`. Returns `null` when no override is configured; throws
+ * when an override is configured but escapes every safe base.
+ */
+export function resolveDaemonResourceRoot(config, { configured = process.env[config.resourceRootEnvVar], safeBases } = {}) {
+    if (!configured || configured.length === 0)
+        return null;
+    const resolved = path.resolve(configured);
+    const normalizedSafeBases = (safeBases ?? [])
+        .filter((base) => typeof base === 'string' && base.length > 0)
+        .map((base) => path.resolve(base));
+    if (!normalizedSafeBases.some((base) => isPathWithin(base, resolved))) {
+        throw new Error(`${config.resourceRootEnvVar} must be under the workspace root or app resources path`);
+    }
+    return resolved;
+}
+/** Joins `segment` under `resourceRoot` when present, else returns `fallback`. */
+export function resolveDaemonResourceDir(resourceRoot, segment, fallback) {
+    return resourceRoot ? path.join(resourceRoot, segment) : fallback;
+}
+/**
+ * Resolves the plugin-previews scratch directory: an explicit env override
+ * (resolved against `projectRoot` if relative), else the standard
+ * `data/plugin-previews` location under the resource root or project root.
+ */
+export function resolveDaemonPluginPreviewsDir(config, { env = process.env, resourceRoot, projectRoot }) {
+    const override = env[config.pluginPreviewsDirEnvVar];
+    if (override) {
+        return path.isAbsolute(override) ? override : path.resolve(projectRoot, override);
+    }
+    return resolveDaemonResourceDir(resourceRoot ?? null, path.join('data', 'plugin-previews'), path.join(projectRoot, 'data', 'plugin-previews'));
+}
+/**
+ * Resolves the daemon's data directory: an explicit env value (expanded and
+ * made absolute) if set, else `<projectRoot>/<defaultDataDirName>`. Creates
+ * the resolved directory and verifies it's writable, throwing a
+ * diagnostic-rich error otherwise.
+ */
+export function resolveDataDir(config, raw, projectRoot, options = {}) {
+    const value = raw?.trim();
+    if (!value) {
+        if (options.requireExplicit) {
+            throw new Error(`${config.dataDirEnvVar} is required when sandboxing is enabled`);
+        }
+        return path.join(projectRoot, config.defaultDataDirName);
+    }
+    const resolved = resolveProjectRelativePath(value, projectRoot);
+    try {
+        fs.mkdirSync(resolved, { recursive: true });
+        fs.accessSync(resolved, fs.constants.W_OK);
+    }
+    catch (err) {
+        const e = err;
+        const currentUser = (() => {
+            try {
+                return os.userInfo().username;
+            }
+            catch {
+                return process.env.USER ?? process.env.LOGNAME ?? 'unknown';
+            }
+        })();
+        const parentDir = path.dirname(resolved);
+        throw new Error([
+            `${config.dataDirEnvVar} "${resolved}" is not writable: ${e.message}`,
+            `Current user: ${currentUser}`,
+            'Check whether the folder or one of its parents is owned by another user, is a symlink to a protected location, or was previously created with sudo.',
+            `Try: ls -ld "${parentDir}" "${resolved}"`,
+            `If the folder should belong to you, fix ownership/permissions, for example: sudo chown -R "${currentUser}":staff "${parentDir}" && chmod -R u+rwX "${parentDir}"`,
+        ].join(' '));
+    }
+    return resolved;
+}
+//# sourceMappingURL=resource-paths.js.map

package/dist/resource-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-paths.js","sourceRoot":"","sources":["../src/resource-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAEjE,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAsB/C,SAAS,iBAAiB,CAAC,KAAyB;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAA2B,EAC3B,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,UAAU,GACd,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACvG,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,cAAc,eAAe,CAAC,CAAC;IACjF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAc;IAChD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,OAAO,CACL,YAAY,KAAK,EAAE;QACnB,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAA2B,EAC3B,cAA4D,OAAO;IAEnE,MAAM,EAAE,aAAa,EAAE,GAAG,WAAW,CAAC;IACtC,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,eAAe,GAAG,GAAG,IAAI,CAAC,GAAG,WAAW,IAAI,CAAC,GAAG,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7E,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAClE,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,kBAAkB,GAAG,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC9D,MAAM,wBAAwB,GAC5B,GAAG,IAAI,CAAC,GAAG,YAAY,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,yBAAyB,GAAG,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9G,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAChF,IAAI,kBAAkB,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9B,OAAO,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,GAAG,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAOD;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAA2B,EAC3B,EAAE,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,SAAS,KAAuC,EAAE;IAEzG,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAExD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,mBAAmB,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;SAC1C,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SAC7E,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAErC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,kBAAkB,yDAAyD,CAAC,CAAC;IACzG,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,wBAAwB,CAAC,YAA2B,EAAE,OAAe,EAAE,QAAgB;IACrG,OAAO,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpE,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,MAA2B,EAC3B,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,WAAW,EAAyC;IAEvF,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;IACrD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,wBAAwB,CAC7B,YAAY,IAAI,IAAI,EACpB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,EACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAClD,CAAC;AACJ,CAAC;AAMD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA2B,EAC3B,GAAuB,EACvB,WAAmB,EACnB,UAAiC,EAAE;IAEnC,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,aAAa,yCAAyC,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAAY,CAAC;QACvB,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;YACxB,IAAI,CAAC;gBACH,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;YAC9D,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,IAAI,KAAK,CACb;YACE,GAAG,MAAM,CAAC,aAAa,KAAK,QAAQ,sBAAsB,CAAC,CAAC,OAAO,EAAE;YACrE,iBAAiB,WAAW,EAAE;YAC9B,qJAAqJ;YACrJ,gBAAgB,SAAS,MAAM,QAAQ,GAAG;YAC1C,8FAA8F,WAAW,YAAY,SAAS,wBAAwB,SAAS,GAAG;SACnK,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}