@legioncodeinc/hive 0.2.0 → 0.3.0

package/dist/daemon/installer/funnel-telemetry.js

@@ -0,0 +1,134 @@
+/**
+ * PRD-009c: daemon-side onboarding funnel emission.
+ *
+ * Every funnel byte leaves through {@link emitTelemetry} in `src/telemetry/emit.ts`. UI-originated
+ * milestones arrive via the token-gated event route; install and auth milestones are observed from
+ * daemon state transitions. Session-scoped dedupe lives in `onboarding-session-ledger.ts`.
+ */
+import { z } from "zod";
+import { emitTelemetry, HIVE_STATE_DIR } from "../../telemetry/emit.js";
+import { isSessionEventReported, loadOnboardingLedger, markSessionEventReported, sessionKeyFromToken } from "../../telemetry/onboarding-session-ledger.js";
+/** UI-reported funnel events validated at the event route (tm-AC-1). */
+export const UI_FUNNEL_EVENTS = [
+    "onboarding_started",
+    "mode_selected",
+    "login_shown",
+    "dashboard_reached"
+];
+const ModeSelectedBodySchema = z.object({
+    event: z.literal("mode_selected"),
+    properties: z.object({ mode: z.enum(["standard", "advanced"]) })
+});
+const SimpleUiEventBodySchema = z.object({
+    event: z.enum(["onboarding_started", "login_shown", "dashboard_reached"]),
+    properties: z.record(z.string(), z.string()).optional()
+});
+/** Closed zod schema for `POST /api/onboarding/event` bodies. */
+export const OnboardingEventBodySchema = z.union([ModeSelectedBodySchema, SimpleUiEventBodySchema]);
+const SESSION_ONCE_SET = new Set([
+    "onboarding_started",
+    "health_check_passed",
+    "login_completed",
+    "dashboard_reached"
+]);
+const INSTALL_STAGES = [
+    "resolving",
+    "downloading",
+    "linking",
+    "registering_service"
+];
+function failureStageFromInstallStage(stage) {
+    if (stage === "completed" || stage === "failed")
+        return null;
+    return INSTALL_STAGES.includes(stage) ? stage : null;
+}
+function readSessionKey(config) {
+    const raw = config.readTextFile(config.tokenPath);
+    if (raw === null)
+        return null;
+    const trimmed = raw.trim();
+    if (trimmed.length === 0)
+        return null;
+    return sessionKeyFromToken(trimmed);
+}
+function fireAndForget(run) {
+    void run().catch(() => {
+        // Fail-soft: telemetry never affects install behavior (tm-AC-3).
+    });
+}
+export function createFunnelTelemetry(deps) {
+    const stateDir = deps.stateDir ?? deps.emitDeps?.stateDir ?? HIVE_STATE_DIR;
+    const emitDeps = deps.emitDeps ?? {};
+    const clock = deps.clock ?? (() => new Date().toISOString());
+    let sawAuthenticated = false;
+    const emit = (event, extras = {}, dedupeSession = false) => {
+        fireAndForget(async () => {
+            const sessionKey = readSessionKey(deps.config);
+            if (dedupeSession && sessionKey !== null) {
+                if (!SESSION_ONCE_SET.has(event))
+                    return;
+                const ledger = loadOnboardingLedger(stateDir);
+                if (isSessionEventReported(ledger, sessionKey, event))
+                    return;
+            }
+            const outcome = await emitTelemetry(event, {}, emitDeps, extras);
+            if (outcome.sent &&
+                dedupeSession &&
+                sessionKey !== null &&
+                SESSION_ONCE_SET.has(event)) {
+                try {
+                    markSessionEventReported(stateDir, sessionKey, event, clock);
+                }
+                catch {
+                    // Persist hiccup after a successful send is non-fatal.
+                }
+            }
+        });
+    };
+    return {
+        recordUiEvent(body) {
+            switch (body.event) {
+                case "mode_selected":
+                    emit("mode_selected", { mode: body.properties.mode });
+                    break;
+                case "onboarding_started":
+                    emit("onboarding_started", {}, true);
+                    break;
+                case "login_shown":
+                    emit("login_shown");
+                    break;
+                case "dashboard_reached":
+                    emit("dashboard_reached", {}, true);
+                    break;
+                default: {
+                    const _exhaustive = body;
+                    void _exhaustive;
+                }
+            }
+        },
+        recordProductInstallStarted(product) {
+            emit("product_install_started", { product });
+        },
+        recordProductInstallCompleted(product) {
+            emit("product_install_completed", { product });
+        },
+        recordProductInstallFailed(product, stage) {
+            const failureStage = failureStageFromInstallStage(stage);
+            if (failureStage === null)
+                return;
+            emit("product_install_failed", { product, failure_stage: failureStage });
+        },
+        observeHealthReady(ready) {
+            if (!ready)
+                return;
+            emit("health_check_passed", {}, true);
+        },
+        observeAuthenticated(authenticated) {
+            if (!authenticated || sawAuthenticated)
+                return;
+            sawAuthenticated = true;
+            emit("login_completed", {}, true);
+        }
+    };
+}
+//# sourceMappingURL=funnel-telemetry.js.map

package/dist/daemon/installer/funnel-telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"funnel-telemetry.js","sourceRoot":"","sources":["../../../src/daemon/installer/funnel-telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EACL,aAAa,EACb,cAAc,EAMf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EAEpB,MAAM,8CAA8C,CAAC;AAGtD,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,oBAAoB;IACpB,eAAe;IACf,aAAa;IACb,mBAAmB;CACX,CAAC;AAIX,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;CACjE,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;IACzE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAC;AAEH,iEAAiE;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC,CAAC;AAIpG,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAmB;IACjD,oBAAoB;IACpB,qBAAqB;IACrB,iBAAiB;IACjB,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,cAAc,GAAkC;IACpD,WAAW;IACX,aAAa;IACb,SAAS;IACT,qBAAqB;CACtB,CAAC;AAEF,SAAS,4BAA4B,CAAC,KAAmB;IACvD,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAQ,cAAoC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAA4B,CAAC,CAAC,CAAC,IAAI,CAAC;AACtG,CAAC;AAyBD,SAAS,cAAc,CAAC,MAAuB;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,aAAa,CAAC,GAAwB;IAC7C,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;QACpB,iEAAiE;IACnE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAyB;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,cAAc,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAW,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACrE,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAE7B,MAAM,IAAI,GAAG,CAAC,KAA4B,EAAE,SAAuB,EAAE,EAAE,aAAa,GAAG,KAAK,EAAQ,EAAE;QACpG,aAAa,CAAC,KAAK,IAAI,EAAE;YACvB,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,aAAa,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACzC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAyB,CAAC;oBAAE,OAAO;gBAC7D,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;gBAC9C,IAAI,sBAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAyB,CAAC;oBAAE,OAAO;YACpF,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjE,IACE,OAAO,CAAC,IAAI;gBACZ,aAAa;gBACb,UAAU,KAAK,IAAI;gBACnB,gBAAgB,CAAC,GAAG,CAAC,KAAyB,CAAC,EAC/C,CAAC;gBACD,IAAI,CAAC;oBACH,wBAAwB,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAyB,EAAE,KAAK,CAAC,CAAC;gBACnF,CAAC;gBAAC,MAAM,CAAC;oBACP,uDAAuD;gBACzD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,aAAa,CAAC,IAAI;YAChB,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,KAAK,eAAe;oBAClB,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAkB,EAAE,CAAC,CAAC;oBACpE,MAAM;gBACR,KAAK,oBAAoB;oBACvB,IAAI,CAAC,oBAAoB,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;oBACrC,MAAM;gBACR,KAAK,aAAa;oBAChB,IAAI,CAAC,aAAa,CAAC,CAAC;oBACpB,MAAM;gBACR,KAAK,mBAAmB;oBACtB,IAAI,CAAC,mBAAmB,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;oBACpC,MAAM;gBACR,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,WAAW,GAAU,IAAI,CAAC;oBAChC,KAAK,WAAW,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;QAED,2BAA2B,CAAC,OAAO;YACjC,IAAI,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,6BAA6B,CAAC,OAAO;YACnC,IAAI,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,0BAA0B,CAAC,OAAO,EAAE,KAAK;YACvC,MAAM,YAAY,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,YAAY,KAAK,IAAI;gBAAE,OAAO;YAClC,IAAI,CAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,kBAAkB,CAAC,KAAK;YACtB,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,IAAI,CAAC,qBAAqB,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;QAED,oBAAoB,CAAC,aAAa;YAChC,IAAI,CAAC,aAAa,IAAI,gBAAgB;gBAAE,OAAO;YAC/C,gBAAgB,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,iBAAiB,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/daemon/installer/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * PRD-009a: the installer service public surface.
+ *
+ * `server.ts` imports {@link createInstallerService} and registers its routes before the generic
+ * `/api/*` BFF proxy. Everything else here is exported for the installer test suites.
+ */
+export { createInstallerService } from "./routes.js";
+export type { InstallerService, InstallerServiceOptions } from "./routes.js";
+export { createInstallerConfig } from "./config.js";
+export type { InstallerConfig } from "./config.js";
+export type { SpawnFn, SpawnOutcome, RawSpawn } from "./spawn.js";
+export { createNodeSpawn } from "./spawn.js";

package/dist/daemon/installer/index.js

@@ -0,0 +1,10 @@
+/**
+ * PRD-009a: the installer service public surface.
+ *
+ * `server.ts` imports {@link createInstallerService} and registers its routes before the generic
+ * `/api/*` BFF proxy. Everything else here is exported for the installer test suites.
+ */
+export { createInstallerService } from "./routes.js";
+export { createInstallerConfig } from "./config.js";
+export { createNodeSpawn } from "./spawn.js";
+//# sourceMappingURL=index.js.map

package/dist/daemon/installer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/daemon/installer/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGpD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}

package/dist/daemon/installer/install-state.d.ts

@@ -0,0 +1,50 @@
+/**
+ * PRD-009a: the in-memory install state machine, SSE broadcast, and child-process orchestration
+ * (is-AC-11 through is-AC-17).
+ *
+ * State is daemon-session scoped, not persisted (the parent PRD adds no store). Each product moves
+ * through idle -> in_progress -> installed | failed. Progress is broadcast to any number of SSE
+ * subscribers as staged events drawn from a closed set, NEVER a synthesized percentage (is-AC-12).
+ * Stages are derived from real signals: `resolving` (target pinned), `downloading` (npm spawned),
+ * `linking` (npm exited 0), `registering_service` (the product's own verb spawned), then
+ * `completed` / `failed` from the verb's exit code. An install runs to its terminal state even if
+ * every subscriber disconnects (is-AC-14): the work is owned by daemon-held state, not a browser tab.
+ */
+import type { InstallableProduct, InstallError, InstallStage, ProgressEvent } from "../../shared/onboarding-types.js";
+import type { InstallerConfig } from "./config.js";
+/** A resolved, shape-validated npm install target (from `manifest.ts`, never from the request). */
+export interface InstallTarget {
+    readonly packageName: string;
+    readonly version: string;
+    readonly target: string;
+}
+/** The lifecycle status of one product's install. */
+export type InstallStatus = "idle" | "in_progress" | "installed" | "failed";
+/** An SSE consumer of one product's progress stream. */
+export interface ProgressSubscriber {
+    send(event: ProgressEvent): void;
+    close(): void;
+}
+/** The result of a `begin` call: a fresh install started, or attachment to an in-flight one (is-AC-16). */
+export type BeginResult = "started" | "attached";
+/** Optional funnel hooks; when absent, no telemetry is emitted. */
+export interface InstallStateFunnelHooks {
+    readonly onInstallStarted?: (product: InstallableProduct) => void;
+    readonly onInstallCompleted?: (product: InstallableProduct) => void;
+    readonly onInstallFailed?: (product: InstallableProduct, stage: InstallStage) => void;
+}
+/** A read-only snapshot of one product's install state, consumed by detection (is-AC-2). */
+export interface ProductStateSnapshot {
+    readonly status: InstallStatus;
+    readonly currentStage: InstallStage | null;
+    readonly error?: InstallError;
+}
+/** The installer's session state: begin/attach installs, subscribe to progress, record funnel events. */
+export interface InstallStateStore {
+    detectState(product: InstallableProduct): ProductStateSnapshot;
+    begin(product: InstallableProduct, target: InstallTarget): BeginResult;
+    subscribe(product: InstallableProduct, subscriber: ProgressSubscriber): () => void;
+    /** The in-flight install promise for a product (resolved when none), for test synchronization. */
+    settled(product: InstallableProduct): Promise<void>;
+}
+export declare function createInstallStateStore(config: InstallerConfig, hooks?: InstallStateFunnelHooks): InstallStateStore;

package/dist/daemon/installer/install-state.js

@@ -0,0 +1,142 @@
+/**
+ * PRD-009a: the in-memory install state machine, SSE broadcast, and child-process orchestration
+ * (is-AC-11 through is-AC-17).
+ *
+ * State is daemon-session scoped, not persisted (the parent PRD adds no store). Each product moves
+ * through idle -> in_progress -> installed | failed. Progress is broadcast to any number of SSE
+ * subscribers as staged events drawn from a closed set, NEVER a synthesized percentage (is-AC-12).
+ * Stages are derived from real signals: `resolving` (target pinned), `downloading` (npm spawned),
+ * `linking` (npm exited 0), `registering_service` (the product's own verb spawned), then
+ * `completed` / `failed` from the verb's exit code. An install runs to its terminal state even if
+ * every subscriber disconnects (is-AC-14): the work is owned by daemon-held state, not a browser tab.
+ */
+import { globalNodeModulesDir, locateNpmCliJs, resolvePackageBinJs } from "./bin-resolver.js";
+import { productProfile } from "./products.js";
+/** Bound a spawn's error label + exit code + stderr tail into a single truthful summary (is-AC-17). */
+function summarizeFailure(label, code, stderrTail) {
+    const trimmed = stderrTail.trim();
+    const suffix = trimmed.length > 0 ? `: ${trimmed}` : "";
+    return `${label} exited with code ${code ?? "null"}${suffix}`;
+}
+export function createInstallStateStore(config, hooks = {}) {
+    const states = new Map();
+    const stateFor = (product) => {
+        let state = states.get(product);
+        if (state === undefined) {
+            state = { status: "idle", currentStage: null, error: undefined, subscribers: new Set(), inFlight: null };
+            states.set(product, state);
+        }
+        return state;
+    };
+    const broadcast = (state, event) => {
+        for (const subscriber of state.subscribers) {
+            subscriber.send(event);
+        }
+    };
+    const closeSubscribers = (state) => {
+        for (const subscriber of state.subscribers) {
+            subscriber.close();
+        }
+        state.subscribers.clear();
+    };
+    const setStage = (state, stage, detail) => {
+        state.currentStage = stage;
+        broadcast(state, detail === undefined ? { stage } : { stage, detail });
+    };
+    const complete = (state, product) => {
+        state.status = "installed";
+        state.error = undefined;
+        setStage(state, "completed");
+        hooks.onInstallCompleted?.(product);
+        closeSubscribers(state);
+    };
+    const fail = (state, stage, summary, product) => {
+        state.status = "failed";
+        state.error = { stage, summary };
+        state.currentStage = "failed";
+        hooks.onInstallFailed?.(product, stage);
+        broadcast(state, { stage: "failed", detail: summary });
+        closeSubscribers(state);
+    };
+    const performInstall = async (product, target, state) => {
+        // Yield once so the synchronously-set `resolving` stage is observable in order before the
+        // `downloading` transition (the install is already owned by daemon state at this point).
+        await Promise.resolve();
+        try {
+            const npmCli = locateNpmCliJs(config);
+            if (npmCli === null) {
+                fail(state, "downloading", "npm executable could not be located", product);
+                return;
+            }
+            setStage(state, "downloading");
+            const npm = await config.spawn(config.execPath, [npmCli, "install", "-g", target.target]);
+            if (npm.code !== 0) {
+                fail(state, "downloading", summarizeFailure("npm install", npm.code, npm.stderrTail), product);
+                return;
+            }
+            setStage(state, "linking");
+            const profile = productProfile(product);
+            const prefix = await config.resolveNpmPrefix();
+            const verbBin = prefix === null
+                ? null
+                : resolvePackageBinJs(config, globalNodeModulesDir(prefix, config.platform), target.packageName, profile.binName);
+            if (verbBin === null) {
+                fail(state, "registering_service", `could not resolve the ${profile.binName} bin to run its registration verb`, product);
+                return;
+            }
+            setStage(state, "registering_service");
+            const registration = await config.spawn(config.execPath, [verbBin, ...profile.registrationVerb]);
+            if (registration.code !== 0) {
+                const label = `${profile.binName} ${profile.registrationVerb.join(" ")}`;
+                fail(state, "registering_service", summarizeFailure(label, registration.code, registration.stderrTail), product);
+                return;
+            }
+            complete(state, product);
+        }
+        catch (error) {
+            const stage = state.currentStage === "registering_service" ? "registering_service" : "downloading";
+            fail(state, stage, error instanceof Error ? error.message : String(error), product);
+        }
+    };
+    return {
+        detectState(product) {
+            const state = stateFor(product);
+            return { status: state.status, currentStage: state.currentStage, error: state.error };
+        },
+        begin(product, target) {
+            const state = stateFor(product);
+            // is-AC-16: a second concurrent request attaches to the in-flight install; only one child runs.
+            if (state.status === "in_progress")
+                return "attached";
+            // is-AC-17: a prior failure is retryable; reset and run again.
+            state.status = "in_progress";
+            state.error = undefined;
+            setStage(state, "resolving");
+            hooks.onInstallStarted?.(product);
+            state.inFlight = performInstall(product, target, state);
+            return "started";
+        },
+        subscribe(product, subscriber) {
+            const state = stateFor(product);
+            state.subscribers.add(subscriber);
+            // is-AC-14: immediately replay the CURRENT stage so a re-attached client catches up.
+            if (state.currentStage !== null) {
+                const detail = state.currentStage === "failed" ? state.error?.summary : undefined;
+                subscriber.send(detail === undefined ? { stage: state.currentStage } : { stage: state.currentStage, detail });
+            }
+            // If the install has already reached a terminal state, end this late subscriber's stream.
+            if (state.status === "installed" || state.status === "failed") {
+                state.subscribers.delete(subscriber);
+                subscriber.close();
+                return () => undefined;
+            }
+            return () => {
+                state.subscribers.delete(subscriber);
+            };
+        },
+        settled(product) {
+            return stateFor(product).inFlight ?? Promise.resolve();
+        }
+    };
+}
+//# sourceMappingURL=install-state.js.map

package/dist/daemon/installer/install-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-state.js","sourceRoot":"","sources":["../../../src/daemon/installer/install-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAoD/C,uGAAuG;AACvG,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAmB,EAAE,UAAkB;IAC9E,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,OAAO,GAAG,KAAK,qBAAqB,IAAI,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAuB,EACvB,QAAiC,EAAE;IAEnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2C,CAAC;IAElE,MAAM,QAAQ,GAAG,CAAC,OAA2B,EAAuB,EAAE;QACpE,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACzG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,CAAC,KAA0B,EAAE,KAAoB,EAAQ,EAAE;QAC3E,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YAC3C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,KAA0B,EAAQ,EAAE;QAC5D,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YAC3C,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,KAA0B,EAAE,KAAmB,EAAE,MAAe,EAAQ,EAAE;QAC1F,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC;QAC3B,SAAS,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,KAA0B,EAAE,OAA2B,EAAQ,EAAE;QACjF,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC;QAC3B,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC7B,KAAK,CAAC,kBAAkB,EAAE,CAAC,OAAO,CAAC,CAAC;QACpC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,KAA0B,EAAE,KAAmB,EAAE,OAAe,EAAE,OAA2B,EAAQ,EAAE;QACnH,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC;QACxB,KAAK,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACjC,KAAK,CAAC,YAAY,GAAG,QAAQ,CAAC;QAC9B,KAAK,CAAC,eAAe,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACxC,SAAS,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAC1B,OAA2B,EAC3B,MAAqB,EACrB,KAA0B,EACX,EAAE;QACjB,0FAA0F;QAC1F,yFAAyF;QACzF,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,qCAAqC,EAAE,OAAO,CAAC,CAAC;gBAC3E,OAAO;YACT,CAAC;YAED,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1F,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACnB,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,gBAAgB,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC/F,OAAO;YACT,CAAC;YAED,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAE3B,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC/C,MAAM,OAAO,GACX,MAAM,KAAK,IAAI;gBACb,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACtH,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,IAAI,CACF,KAAK,EACL,qBAAqB,EACrB,yBAAyB,OAAO,CAAC,OAAO,mCAAmC,EAC3E,OAAO,CACR,CAAC;gBACF,OAAO;YACT,CAAC;YAED,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YACvC,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACjG,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzE,IAAI,CAAC,KAAK,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;gBACjH,OAAO;YACT,CAAC;YAED,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,GAAiB,KAAK,CAAC,YAAY,KAAK,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,aAAa,CAAC;YACjH,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;QACtF,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,WAAW,CAAC,OAAO;YACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YAChC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QACxF,CAAC;QAED,KAAK,CAAC,OAAO,EAAE,MAAM;YACnB,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YAChC,gGAAgG;YAChG,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa;gBAAE,OAAO,UAAU,CAAC;YAEtD,+DAA+D;YAC/D,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC;YAC7B,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;YACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAC7B,KAAK,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YACxD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,SAAS,CAAC,OAAO,EAAE,UAAU;YAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YAChC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAElC,qFAAqF;YACrF,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBAClF,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;YAChH,CAAC;YACD,0FAA0F;YAC1F,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC9D,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACrC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC;YACzB,CAAC;YAED,OAAO,GAAG,EAAE;gBACV,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACvC,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,OAAO;YACb,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACzD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/daemon/installer/manifest-snapshot.json

@@ -0,0 +1,25 @@
+{
+    "manifestVersion": "0.2.1",
+    "products": {
+        "honeycomb": {
+            "version": "0.2.1",
+            "packageName": "@legioncodeinc/honeycomb",
+            "published": true
+        },
+        "doctor": {
+            "version": "0.2.1",
+            "packageName": "@legioncodeinc/doctor",
+            "published": true
+        },
+        "hive": {
+            "version": "0.2.1",
+            "packageName": "@legioncodeinc/hive",
+            "published": true
+        },
+        "nectar": {
+            "version": "0.1.1",
+            "packageName": "@legioncodeinc/nectar",
+            "published": true
+        }
+    }
+}

package/dist/daemon/installer/manifest.d.ts

@@ -0,0 +1,47 @@
+/**
+ * PRD-009a: server-side `packageName@version` resolution from the fleet manifest (is-AC-4/5).
+ *
+ * The install target is NEVER taken from the request. It is resolved from `hive-release.json`:
+ * fetched once per daemon session from the raw URL (bounded timeout), cached in memory, with a
+ * build-time bundled snapshot as the offline fallback. Before any resolved value is used it must
+ * pass a strict shape check (scoped-npm-name regex + semver regex, mirroring install.sh's
+ * `npm_package_name_is_safe` / `semver_is_safe`), so a malformed or tampered field is refused
+ * (is-AC-5) rather than degrading into an unpinned `npm i -g <name>@latest`.
+ *
+ * The imported snapshot is the SHIP-TIME manifest: the version set the running hive shipped with.
+ * It is only consulted when the network fetch fails, so an offline-ish first run still pins.
+ */
+import { z } from "zod";
+import type { InstallableProduct } from "../../shared/onboarding-types.js";
+import type { InstallerConfig } from "./config.js";
+declare const ManifestSchema: z.ZodObject<{
+    manifestVersion: z.ZodString;
+    products: z.ZodRecord<z.ZodString, z.ZodObject<{
+        version: z.ZodString;
+        packageName: z.ZodString;
+        published: z.ZodBoolean;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ParsedManifest = z.infer<typeof ManifestSchema>;
+/** The outcome of resolving an install target for a product. */
+export type TargetResolution = {
+    readonly kind: "ok";
+    readonly packageName: string;
+    readonly version: string;
+    readonly target: string;
+} | {
+    readonly kind: "unpublished";
+} | {
+    readonly kind: "manifest_unresolved";
+};
+/** The manifest resolver: a memoized manifest plus a per-product target resolver. */
+export interface ManifestResolver {
+    resolve(product: InstallableProduct): Promise<TargetResolution>;
+}
+/**
+ * Build a session-scoped manifest resolver. The manifest is fetched at most once (memoized on the
+ * first call); a network failure falls back to the bundled snapshot. Returns `manifest_unresolved`
+ * only when neither source yields a shape-valid entry for the requested product.
+ */
+export declare function createManifestResolver(config: InstallerConfig): ManifestResolver;
+export {};

package/dist/daemon/installer/manifest.js

@@ -0,0 +1,103 @@
+/**
+ * PRD-009a: server-side `packageName@version` resolution from the fleet manifest (is-AC-4/5).
+ *
+ * The install target is NEVER taken from the request. It is resolved from `hive-release.json`:
+ * fetched once per daemon session from the raw URL (bounded timeout), cached in memory, with a
+ * build-time bundled snapshot as the offline fallback. Before any resolved value is used it must
+ * pass a strict shape check (scoped-npm-name regex + semver regex, mirroring install.sh's
+ * `npm_package_name_is_safe` / `semver_is_safe`), so a malformed or tampered field is refused
+ * (is-AC-5) rather than degrading into an unpinned `npm i -g <name>@latest`.
+ *
+ * The imported snapshot is the SHIP-TIME manifest: the version set the running hive shipped with.
+ * It is only consulted when the network fetch fails, so an offline-ish first run still pins.
+ */
+import { z } from "zod";
+// The ship-time snapshot fallback (is-AC-5). Comment-free JSON copied from the superproject
+// `hive-release.json`; consulted only when the network manifest fetch fails.
+import manifestSnapshot from "./manifest-snapshot.json" with { type: "json" };
+/** A conservative npm package-name allowlist (lowercase / digits / `.` `_` `-`, optional `@scope/`). */
+const NPM_NAME_RE = /^(@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/;
+/** digits.digits.digits with an optional `-prerelease` / `+build` drawn from a safe charset. */
+const SEMVER_RE = /^[0-9]+\.[0-9]+\.[0-9]+([-+][0-9A-Za-z.+-]+)?$/;
+const ProductEntrySchema = z.object({
+    version: z.string(),
+    packageName: z.string(),
+    published: z.boolean()
+});
+const ManifestSchema = z.object({
+    manifestVersion: z.string(),
+    products: z.record(z.string(), ProductEntrySchema)
+});
+function validateSnapshot() {
+    const parsed = ManifestSchema.safeParse(manifestSnapshot);
+    return parsed.success ? parsed.data : null;
+}
+async function fetchManifestFromUrl(config, url) {
+    try {
+        const response = await config.manifestFetch(url, {
+            signal: AbortSignal.timeout(config.manifestTimeoutMs)
+        });
+        if (!response.ok)
+            return null;
+        let parsedJson;
+        try {
+            parsedJson = await response.json();
+        }
+        catch {
+            return null;
+        }
+        const parsed = ManifestSchema.safeParse(parsedJson);
+        return parsed.success ? parsed.data : null;
+    }
+    catch {
+        return null;
+    }
+}
+async function fetchNetworkManifest(config) {
+    const primary = await fetchManifestFromUrl(config, config.manifestUrl);
+    if (primary !== null)
+        return primary;
+    if (config.manifestFallbackUrl !== config.manifestUrl) {
+        const fallback = await fetchManifestFromUrl(config, config.manifestFallbackUrl);
+        if (fallback !== null)
+            return fallback;
+    }
+    return null;
+}
+/**
+ * Build a session-scoped manifest resolver. The manifest is fetched at most once (memoized on the
+ * first call); a network failure falls back to the bundled snapshot. Returns `manifest_unresolved`
+ * only when neither source yields a shape-valid entry for the requested product.
+ */
+export function createManifestResolver(config) {
+    let manifestPromise = null;
+    const getManifest = () => {
+        if (manifestPromise === null) {
+            manifestPromise = fetchNetworkManifest(config).then((network) => network ?? validateSnapshot());
+        }
+        return manifestPromise;
+    };
+    return {
+        async resolve(product) {
+            const manifest = await getManifest();
+            if (manifest === null)
+                return { kind: "manifest_unresolved" };
+            const entry = manifest.products[product];
+            if (entry === undefined)
+                return { kind: "manifest_unresolved" };
+            // Refuse a tampered/malformed field rather than ever reaching npm with an unsafe target.
+            if (!NPM_NAME_RE.test(entry.packageName) || !SEMVER_RE.test(entry.version)) {
+                return { kind: "manifest_unresolved" };
+            }
+            if (!entry.published)
+                return { kind: "unpublished" };
+            return {
+                kind: "ok",
+                packageName: entry.packageName,
+                version: entry.version,
+                target: `${entry.packageName}@${entry.version}`
+            };
+        }
+    };
+}
+//# sourceMappingURL=manifest.js.map

package/dist/daemon/installer/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/daemon/installer/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,4FAA4F;AAC5F,6EAA6E;AAC7E,OAAO,gBAAgB,MAAM,0BAA0B,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAE9E,wGAAwG;AACxG,MAAM,WAAW,GAAG,kDAAkD,CAAC;AAEvE,gGAAgG;AAChG,MAAM,SAAS,GAAG,gDAAgD,CAAC;AAEnE,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC;CACnD,CAAC,CAAC;AAeH,SAAS,gBAAgB;IACvB,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,MAAuB,EAAE,GAAW;IACtE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE;YAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC;SACtD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAE9B,IAAI,UAAmB,CAAC;QACxB,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,MAAuB;IACzD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACrC,IAAI,MAAM,CAAC,mBAAmB,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAChF,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAuB;IAC5D,IAAI,eAAe,GAA0C,IAAI,CAAC;IAElE,MAAM,WAAW,GAAG,GAAmC,EAAE;QACvD,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC7B,eAAe,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,gBAAgB,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,OAA2B;YACvC,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;YACrC,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YAE9D,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YAEhE,yFAAyF;YACzF,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3E,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YAErD,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,EAAE;aAChD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/daemon/installer/products.d.ts

@@ -0,0 +1,33 @@
+/**
+ * PRD-009a: the hard-coded product allowlist and per-product registration verbs (is-AC-3/13).
+ *
+ * This is the single source of truth for which slugs exist, their npm bin names, and the OWN
+ * registration verb each product runs post-install, exactly as honeycomb's `install.sh` does today
+ * (`doctor install-service`, `honeycomb install`, `nectar install`). The install endpoint only ever
+ * acts on a slug present in {@link INSTALLABLE_PRODUCTS}; `hive` is deliberately absent (it is the
+ * running daemon, never a portal install target).
+ */
+import type { InstallableProduct, ProductSlug } from "../../shared/onboarding-types.js";
+/** The four known product slugs (is-AC-3). The install allowlist is the installable subset below. */
+export declare const PRODUCT_SLUGS: readonly ["honeycomb", "doctor", "hive", "nectar"];
+/**
+ * The npm package name for each slug, used as LOCAL DETECTION evidence (the folder name under the
+ * global node_modules). This is deliberately independent of the manifest so detection works before
+ * any manifest is fetched (is-AC-1); the manifest remains the sole authority for INSTALL targets.
+ */
+export declare const PRODUCT_PACKAGES: Record<ProductSlug, string>;
+/** The three portal-installable products; `hive` is excluded (not installable, 400). */
+export declare const INSTALLABLE_PRODUCTS: readonly ["doctor", "honeycomb", "nectar"];
+/** Per-product static facts: the npm bin name and the argv of its own post-install registration verb. */
+export interface ProductProfile {
+    /** The npm bin name (equals the slug for every fleet product). */
+    readonly binName: string;
+    /** The registration verb argv run after a successful npm install (is-AC-13). */
+    readonly registrationVerb: readonly string[];
+}
+/** True for one of the four known slugs (is-AC-3 allowlist membership). */
+export declare function isProductSlug(value: string): value is ProductSlug;
+/** True for a portal-installable product (`hive` is excluded). */
+export declare function isInstallableProduct(value: string): value is InstallableProduct;
+/** The static profile (bin name + registration verb) for an installable product. */
+export declare function productProfile(product: InstallableProduct): ProductProfile;

package/dist/daemon/installer/products.js

@@ -0,0 +1,42 @@
+/**
+ * PRD-009a: the hard-coded product allowlist and per-product registration verbs (is-AC-3/13).
+ *
+ * This is the single source of truth for which slugs exist, their npm bin names, and the OWN
+ * registration verb each product runs post-install, exactly as honeycomb's `install.sh` does today
+ * (`doctor install-service`, `honeycomb install`, `nectar install`). The install endpoint only ever
+ * acts on a slug present in {@link INSTALLABLE_PRODUCTS}; `hive` is deliberately absent (it is the
+ * running daemon, never a portal install target).
+ */
+/** The four known product slugs (is-AC-3). The install allowlist is the installable subset below. */
+export const PRODUCT_SLUGS = ["honeycomb", "doctor", "hive", "nectar"];
+/**
+ * The npm package name for each slug, used as LOCAL DETECTION evidence (the folder name under the
+ * global node_modules). This is deliberately independent of the manifest so detection works before
+ * any manifest is fetched (is-AC-1); the manifest remains the sole authority for INSTALL targets.
+ */
+export const PRODUCT_PACKAGES = {
+    honeycomb: "@legioncodeinc/honeycomb",
+    doctor: "@legioncodeinc/doctor",
+    hive: "@legioncodeinc/hive",
+    nectar: "@legioncodeinc/nectar"
+};
+/** The three portal-installable products; `hive` is excluded (not installable, 400). */
+export const INSTALLABLE_PRODUCTS = ["doctor", "honeycomb", "nectar"];
+const PROFILES = {
+    doctor: { binName: "doctor", registrationVerb: ["install-service"] },
+    honeycomb: { binName: "honeycomb", registrationVerb: ["install"] },
+    nectar: { binName: "nectar", registrationVerb: ["install"] }
+};
+/** True for one of the four known slugs (is-AC-3 allowlist membership). */
+export function isProductSlug(value) {
+    return PRODUCT_SLUGS.includes(value);
+}
+/** True for a portal-installable product (`hive` is excluded). */
+export function isInstallableProduct(value) {
+    return INSTALLABLE_PRODUCTS.includes(value);
+}
+/** The static profile (bin name + registration verb) for an installable product. */
+export function productProfile(product) {
+    return PROFILES[product];
+}
+//# sourceMappingURL=products.js.map

package/dist/daemon/installer/products.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"products.js","sourceRoot":"","sources":["../../../src/daemon/installer/products.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,qGAAqG;AACrG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AAEhF;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAgC;IAC3D,SAAS,EAAE,0BAA0B;IACrC,MAAM,EAAE,uBAAuB;IAC/B,IAAI,EAAE,qBAAqB;IAC3B,MAAM,EAAE,uBAAuB;CAChC,CAAC;AAEF,wFAAwF;AACxF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAU/E,MAAM,QAAQ,GAA+C;IAC3D,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,iBAAiB,CAAC,EAAE;IACpE,SAAS,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,SAAS,CAAC,EAAE;IAClE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,SAAS,CAAC,EAAE;CAC7D,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAQ,aAAmC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAQ,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,OAA2B;IACxD,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC"}