@moxt-ai/mobius 0.0.9 → 0.0.11

package/dist/agent-installation/managed-adapter-installer.js

@@ -1,8 +1,5 @@
-import { mkdir, mkdtemp, open, realpath, rename, rm, stat, } from "node:fs/promises";
-import { delimiter, dirname, join, relative } from "node:path";
-import { findExecutableOnPath, resolveExecutablePath, runBoundedProcess, } from "../process/executable.js";
-const ADAPTER_INSTALL_TIMEOUT_MILLISECONDS = 2 * 60 * 1_000;
-const PACKAGE_METADATA_LIMIT_BYTES = 64 * 1024;
+import { join } from "node:path";
+import { ManagedNpmPackageError, ManagedNpmPackageInstaller, validateManagedNpmPackage, } from "./managed-npm-package.js";
 export class ManagedAdapterInstallError extends Error {
     code;
     constructor(code, message, options = {}) {
@@ -11,148 +8,50 @@ export class ManagedAdapterInstallError extends Error {
         this.name = "ManagedAdapterInstallError";
     }
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function packagePath(root, packageName) {
-    return join(root, "node_modules", ...packageName.split("/"));
-}
-async function readPackageJson(path) {
-    const handle = await open(path, "r");
-    try {
-        const metadata = await handle.stat();
-        if (!metadata.isFile() || metadata.size > PACKAGE_METADATA_LIMIT_BYTES) {
-            throw new ManagedAdapterInstallError("adapter_verification_failed", "The managed adapter package metadata is invalid");
+function translateError(error) {
+    if (error instanceof ManagedAdapterInstallError) {
+        return error;
+    }
+    if (error instanceof ManagedNpmPackageError) {
+        if (error.code === "package_manager_not_found") {
+            return new ManagedAdapterInstallError(error.code, "A supported npm executable is required to install the ACP adapter", { cause: error });
         }
-        const value = JSON.parse(await handle.readFile({ encoding: "utf8" }));
-        if (!isRecord(value)) {
-            throw new ManagedAdapterInstallError("adapter_verification_failed", "The managed adapter package metadata is invalid");
+        if (error.code === "managed_package_verification_failed") {
+            return new ManagedAdapterInstallError("adapter_verification_failed", "The managed adapter did not match its pinned artifact", { cause: error });
+        }
+        if (error.code === "managed_package_publish_failed") {
+            return new ManagedAdapterInstallError("adapter_publish_failed", "The managed adapter could not be published", { cause: error });
         }
-        return value;
-    }
-    finally {
-        await handle.close();
-    }
-}
-function readBinPath(packageMetadata, executableName) {
-    const bin = packageMetadata["bin"];
-    if (typeof bin === "string") {
-        return bin;
-    }
-    if (isRecord(bin) && typeof bin[executableName] === "string") {
-        return bin[executableName];
     }
-    throw new ManagedAdapterInstallError("adapter_verification_failed", "The managed adapter executable declaration is invalid");
+    return new ManagedAdapterInstallError("adapter_install_failed", "The pinned ACP adapter could not be installed", { cause: error });
 }
 export async function validateManagedAdapter(root, specification) {
-    const rootPath = await realpath(root);
-    const packageRoot = await realpath(packagePath(rootPath, specification.adapterPackage));
-    const packageDifference = relative(rootPath, packageRoot);
-    if (packageDifference.startsWith("..") || packageDifference.length === 0) {
-        throw new ManagedAdapterInstallError("adapter_verification_failed", "The managed adapter package escaped its private cache");
-    }
-    const metadata = await readPackageJson(join(packageRoot, "package.json"));
-    if (metadata["name"] !== specification.adapterPackage ||
-        metadata["version"] !== specification.adapterVersion) {
-        throw new ManagedAdapterInstallError("adapter_verification_failed", "The managed adapter package identity is invalid");
-    }
-    const declaredBin = readBinPath(metadata, specification.adapterExecutable);
-    const executable = await resolveExecutablePath(join(packageRoot, declaredBin));
-    if (executable === null) {
-        throw new ManagedAdapterInstallError("adapter_verification_failed", "The managed adapter executable is invalid");
+    try {
+        return await validateManagedNpmPackage(root, specification.adapterPackageDefinition);
     }
-    const executableDifference = relative(rootPath, executable.path);
-    if (executableDifference.startsWith("..") ||
-        executableDifference.length === 0) {
-        throw new ManagedAdapterInstallError("adapter_verification_failed", "The managed adapter executable escaped its private cache");
+    catch (error) {
+        throw translateError(error);
     }
-    return executable;
 }
 export class ManagedAdapterInstaller {
     #environment;
+    #npmInstaller;
     #stateDirectory;
-    constructor(options) {
+    constructor(options, npmInstaller = new ManagedNpmPackageInstaller()) {
         this.#environment = options.environment;
+        this.#npmInstaller = npmInstaller;
         this.#stateDirectory = options.stateDirectory;
     }
     install = async (specification, signal) => {
-        signal.throwIfAborted();
-        const agentCache = join(this.#stateDirectory, "adapters", specification.id);
-        const published = join(agentCache, specification.adapterVersion);
+        const root = join(this.#stateDirectory, "adapters", specification.id, specification.adapterVersion);
         try {
-            const metadata = await stat(published);
-            if (metadata.isDirectory()) {
-                return await validateManagedAdapter(published, specification);
-            }
-        }
-        catch (error) {
-            if (!(error instanceof Error) ||
-                !("code" in error) ||
-                error.code !== "ENOENT") {
-                throw error;
-            }
-        }
-        await mkdir(agentCache, { mode: 0o700, recursive: true });
-        const staging = await mkdtemp(join(agentCache, `.${specification.adapterVersion}.staging-`));
-        try {
-            const npm = await findExecutableOnPath(process.platform === "win32" ? "npm.cmd" : "npm", this.#environment);
-            if (npm === null) {
-                throw new ManagedAdapterInstallError("package_manager_not_found", "A supported npm executable is required to install the ACP adapter");
-            }
-            await runBoundedProcess({
-                arguments: [
-                    "install",
-                    "--prefix",
-                    staging,
-                    "--omit=optional",
-                    "--ignore-scripts",
-                    "--no-audit",
-                    "--no-fund",
-                    "--package-lock=false",
-                    "--save=false",
-                    "--registry=https://registry.npmjs.org/",
-                    `${specification.adapterPackage}@${specification.adapterVersion}`,
-                ],
-                command: npm.path,
-                cwd: staging,
-                environment: {
-                    HOME: join(staging, "home"),
-                    NPM_CONFIG_AUDIT: "false",
-                    NPM_CONFIG_FUND: "false",
-                    NPM_CONFIG_IGNORE_SCRIPTS: "true",
-                    NPM_CONFIG_OMIT: "optional",
-                    NPM_CONFIG_REGISTRY: "https://registry.npmjs.org/",
-                    PATH: `${dirname(process.execPath)}${delimiter}/usr/bin${delimiter}/bin`,
-                },
-                outputLimitBytes: 64 * 1024,
-                signal,
-                timeoutMilliseconds: ADAPTER_INSTALL_TIMEOUT_MILLISECONDS,
-            });
-            await validateManagedAdapter(staging, specification);
-            try {
-                await rename(staging, published);
-            }
-            catch (error) {
-                try {
-                    return await validateManagedAdapter(published, specification);
-                }
-                catch {
-                    throw new ManagedAdapterInstallError("adapter_publish_failed", "The managed adapter could not be published", { cause: error });
-                }
-            }
-            return await validateManagedAdapter(published, specification);
+            return await this.#npmInstaller.install(root, specification.adapterPackageDefinition, this.#environment, signal);
         }
         catch (error) {
             if (signal.aborted) {
                 signal.throwIfAborted();
             }
-            if (error instanceof ManagedAdapterInstallError) {
-                throw error;
-            }
-            throw new ManagedAdapterInstallError("adapter_install_failed", "The pinned ACP adapter could not be installed", { cause: error });
-        }
-        finally {
-            await rm(staging, { force: true, recursive: true });
+            throw translateError(error);
         }
     };
 }

package/dist/agent-installation/managed-adapter-installer.js.map

@@ -1 +1 @@
-{"version":3,"file":"managed-adapter-installer.js","sourceRoot":"","sources":["../../src/agent-installation/managed-adapter-installer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,EAAE,EACF,IAAI,GACL,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAG/D,OAAO,EACL,oBAAoB,EAEpB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAElC,MAAM,oCAAoC,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AAC5D,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/C,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe,EAAE,OAAO,GAAiB,EAAE;QACnE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,WAAmB;IACpD,OAAO,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,GAAG,4BAA4B,EAAE,CAAC;YACvE,MAAM,IAAI,0BAA0B,CAClC,6BAA6B,EAC7B,iDAAiD,CAClD,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAC/B,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAC5C,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,0BAA0B,CAClC,6BAA6B,EAC7B,iDAAiD,CAClD,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,eAAkD,EAClD,cAAsB;IAEtB,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7D,OAAO,GAAG,CAAC,cAAc,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,0BAA0B,CAClC,6BAA6B,EAC7B,uDAAuD,CACxD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,aAAsC;IAEtC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,MAAM,QAAQ,CAChC,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC,cAAc,CAAC,CACpD,CAAC;IACF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC1D,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,0BAA0B,CAClC,6BAA6B,EAC7B,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IAC1E,IACE,QAAQ,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,cAAc;QACjD,QAAQ,CAAC,SAAS,CAAC,KAAK,aAAa,CAAC,cAAc,EACpD,CAAC;QACD,MAAM,IAAI,0BAA0B,CAClC,6BAA6B,EAC7B,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAC5C,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAC/B,CAAC;IACF,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,0BAA0B,CAClC,6BAA6B,EAC7B,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,MAAM,oBAAoB,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACjE,IACE,oBAAoB,CAAC,UAAU,CAAC,IAAI,CAAC;QACrC,oBAAoB,CAAC,MAAM,KAAK,CAAC,EACjC,CAAC;QACD,MAAM,IAAI,0BAA0B,CAClC,6BAA6B,EAC7B,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAcD,MAAM,OAAO,uBAAuB;IACzB,YAAY,CAA8B;IAC1C,eAAe,CAAS;IAEjC,YAAY,OAAuC;QACjD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;IAChD,CAAC;IAEQ,OAAO,GAAG,KAAK,EACtB,aAAsC,EACtC,MAAmB,EACU,EAAE;QAC/B,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3B,OAAO,MAAM,sBAAsB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;gBACzB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;gBAClB,KAAK,CAAC,IAAI,KAAK,QAAQ,EACvB,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,IAAI,CAAC,UAAU,EAAE,IAAI,aAAa,CAAC,cAAc,WAAW,CAAC,CAC9D,CAAC;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,oBAAoB,CACpC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAChD,IAAI,CAAC,YAAY,CAClB,CAAC;YACF,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,0BAA0B,CAClC,2BAA2B,EAC3B,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,MAAM,iBAAiB,CAAC;gBACtB,SAAS,EAAE;oBACT,SAAS;oBACT,UAAU;oBACV,OAAO;oBACP,iBAAiB;oBACjB,kBAAkB;oBAClB,YAAY;oBACZ,WAAW;oBACX,sBAAsB;oBACtB,cAAc;oBACd,wCAAwC;oBACxC,GAAG,aAAa,CAAC,cAAc,IAAI,aAAa,CAAC,cAAc,EAAE;iBAClE;gBACD,OAAO,EAAE,GAAG,CAAC,IAAI;gBACjB,GAAG,EAAE,OAAO;gBACZ,WAAW,EAAE;oBACX,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;oBAC3B,gBAAgB,EAAE,OAAO;oBACzB,eAAe,EAAE,OAAO;oBACxB,yBAAyB,EAAE,MAAM;oBACjC,eAAe,EAAE,UAAU;oBAC3B,mBAAmB,EAAE,6BAA6B;oBAClD,IAAI,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,SAAS,WAAW,SAAS,MAAM;iBACzE;gBACD,gBAAgB,EAAE,EAAE,GAAG,IAAI;gBAC3B,MAAM;gBACN,mBAAmB,EAAE,oCAAoC;aAC1D,CAAC,CAAC;YACH,MAAM,sBAAsB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACrD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,OAAO,MAAM,sBAAsB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;gBAChE,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,0BAA0B,CAClC,wBAAwB,EACxB,4CAA4C,EAC5C,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,MAAM,sBAAsB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;gBAChD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,0BAA0B,CAClC,wBAAwB,EACxB,+CAA+C,EAC/C,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC;CACH"}
+{"version":3,"file":"managed-adapter-installer.js","sourceRoot":"","sources":["../../src/agent-installation/managed-adapter-installer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EACL,sBAAsB,EAEtB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAElC,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe,EAAE,OAAO,GAAiB,EAAE;QACnE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;YAC/C,OAAO,IAAI,0BAA0B,CACnC,KAAK,CAAC,IAAI,EACV,mEAAmE,EACnE,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,qCAAqC,EAAE,CAAC;YACzD,OAAO,IAAI,0BAA0B,CACnC,6BAA6B,EAC7B,uDAAuD,EACvD,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,gCAAgC,EAAE,CAAC;YACpD,OAAO,IAAI,0BAA0B,CACnC,wBAAwB,EACxB,4CAA4C,EAC5C,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,0BAA0B,CACnC,wBAAwB,EACxB,+CAA+C,EAC/C,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,aAAwC;IAExC,IAAI,CAAC;QACH,OAAO,MAAM,yBAAyB,CACpC,IAAI,EACJ,aAAa,CAAC,wBAAwB,CACvC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAcD,MAAM,OAAO,uBAAuB;IACzB,YAAY,CAA8B;IAC1C,aAAa,CAAoC;IACjD,eAAe,CAAS;IAEjC,YACE,OAAuC,EACvC,YAAY,GAAsC,IAAI,0BAA0B,EAAE;QAElF,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QAClC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;IAChD,CAAC;IAEQ,OAAO,GAAG,KAAK,EACtB,aAAwC,EACxC,MAAmB,EACU,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,CACf,IAAI,CAAC,eAAe,EACpB,UAAU,EACV,aAAa,CAAC,EAAE,EAChB,aAAa,CAAC,cAAc,CAC7B,CAAC;QACF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CACrC,IAAI,EACJ,aAAa,CAAC,wBAAwB,EACtC,IAAI,CAAC,YAAY,EACjB,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,CAAC;YACD,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;CACH"}

package/dist/agent-installation/managed-agent-archive.d.ts

@@ -0,0 +1,40 @@
+import { type ResolvedExecutable } from "../process/executable.ts";
+import { type VerifiedDownload, type VerifiedDownloadOptions } from "./verified-download.ts";
+export declare abstract class ManagedAgentArchiveDefinition {
+    readonly archiveName: string;
+    readonly archiveSha256: string;
+    readonly archiveUrl: URL;
+    readonly executableName: string;
+    readonly version: string;
+    abstract readonly extractArguments: (archivePath: string, destination: string) => readonly string[];
+    abstract readonly extractor: string;
+    abstract readonly listArguments: (archivePath: string) => readonly string[];
+    constructor(version: string, archiveName: string, archiveUrl: URL, archiveSha256: string, executableName: string);
+}
+export declare class ZipManagedAgentArchiveDefinition extends ManagedAgentArchiveDefinition {
+    readonly extractor = "/usr/bin/unzip";
+    readonly extractArguments: (archivePath: string, destination: string) => readonly string[];
+    readonly listArguments: (archivePath: string) => readonly string[];
+}
+export declare class TarGzipManagedAgentArchiveDefinition extends ManagedAgentArchiveDefinition {
+    readonly extractor = "/usr/bin/tar";
+    readonly extractArguments: (archivePath: string, destination: string) => readonly string[];
+    readonly listArguments: (archivePath: string) => readonly string[];
+}
+export declare class ManagedAgentArchiveError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string, options?: ErrorOptions);
+}
+export interface ManagedAgentArchiveDownloadPort {
+    readonly download: (options: VerifiedDownloadOptions) => Promise<VerifiedDownload>;
+}
+export interface ManagedAgentArchiveInstallationPort {
+    readonly install: (root: string, definition: ManagedAgentArchiveDefinition, signal: AbortSignal) => Promise<ResolvedExecutable>;
+}
+export declare function validateManagedAgentArchive(root: string, definition: ManagedAgentArchiveDefinition, signal: AbortSignal): Promise<ResolvedExecutable>;
+export declare class ManagedAgentArchiveInstaller implements ManagedAgentArchiveInstallationPort {
+    #private;
+    constructor(downloader?: ManagedAgentArchiveDownloadPort);
+    readonly install: (root: string, definition: ManagedAgentArchiveDefinition, signal: AbortSignal) => Promise<ResolvedExecutable>;
+}
+//# sourceMappingURL=managed-agent-archive.d.ts.map

package/dist/agent-installation/managed-agent-archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-agent-archive.d.ts","sourceRoot":"","sources":["../../src/agent-installation/managed-agent-archive.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,KAAK,kBAAkB,EAGxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAQhC,8BAAsB,6BAA6B;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAClC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,KAChB,SAAS,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,CAAC;IAE5E,YACE,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,GAAG,EACf,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EAOvB;CACF;AAED,qBAAa,gCAAiC,SAAQ,6BAA6B;IACjF,QAAQ,CAAC,SAAS,oBAAoB;IACtC,QAAQ,CAAC,gBAAgB,gBACV,MAAM,eACN,MAAM,KAClB,SAAS,MAAM,EAAE,CAA2C;IAC/D,QAAQ,CAAC,aAAa,gBAAiB,MAAM,KAAG,SAAS,MAAM,EAAE,CAG/D;CACH;AAED,qBAAa,oCAAqC,SAAQ,6BAA6B;IACrF,QAAQ,CAAC,SAAS,kBAAkB;IACpC,QAAQ,CAAC,gBAAgB,gBACV,MAAM,eACN,MAAM,KAClB,SAAS,MAAM,EAAE,CAA6C;IACjE,QAAQ,CAAC,aAAa,gBAAiB,MAAM,KAAG,SAAS,MAAM,EAAE,CAG/D;CACH;AAED,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,YAAY,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,EAIpE;CACF;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,QAAQ,EAAE,CACjB,OAAO,EAAE,uBAAuB,KAC7B,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAChC;AAQD,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,OAAO,EAAE,CAChB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,6BAA6B,EACzC,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAClC;AA4FD,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,6BAA6B,EACzC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,kBAAkB,CAAC,CA4C7B;AAsBD,qBAAa,4BACX,YAAW,mCAAmC;;IAI9C,YACE,UAAU,GAAE,+BAAqE,EAGlF;IAED,QAAQ,CAAC,OAAO,SACR,MAAM,cACA,6BAA6B,UACjC,WAAW,KAClB,OAAO,CAAC,kBAAkB,CAAC,CAkI5B;CACH"}

package/dist/agent-installation/managed-agent-archive.js

@@ -0,0 +1,274 @@
+import { createHash } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { chmod, copyFile, mkdir, mkdtemp, open, realpath, rename, rm, stat, writeFile, } from "node:fs/promises";
+import { dirname, isAbsolute, join, relative, sep } from "node:path";
+import { resolveExecutablePath, runBoundedProcess, } from "../process/executable.js";
+import { downloadVerifiedFile, } from "./verified-download.js";
+const ARCHIVE_DOWNLOAD_LIMIT_BYTES = 128 * 1024 * 1024;
+const ARCHIVE_DOWNLOAD_TIMEOUT_MILLISECONDS = 2 * 60 * 1_000;
+const ARCHIVE_EXTRACTION_TIMEOUT_MILLISECONDS = 60_000;
+const MANIFEST_LIMIT_BYTES = 16 * 1024;
+const MINIMAL_PATH = "/usr/bin:/bin";
+export class ManagedAgentArchiveDefinition {
+    archiveName;
+    archiveSha256;
+    archiveUrl;
+    executableName;
+    version;
+    constructor(version, archiveName, archiveUrl, archiveSha256, executableName) {
+        this.archiveName = archiveName;
+        this.archiveSha256 = archiveSha256;
+        this.archiveUrl = new URL(archiveUrl);
+        this.executableName = executableName;
+        this.version = version;
+    }
+}
+export class ZipManagedAgentArchiveDefinition extends ManagedAgentArchiveDefinition {
+    extractor = "/usr/bin/unzip";
+    extractArguments = (archivePath, destination) => ["-q", archivePath, "-d", destination];
+    listArguments = (archivePath) => [
+        "-Z1",
+        archivePath,
+    ];
+}
+export class TarGzipManagedAgentArchiveDefinition extends ManagedAgentArchiveDefinition {
+    extractor = "/usr/bin/tar";
+    extractArguments = (archivePath, destination) => ["-xzf", archivePath, "-C", destination];
+    listArguments = (archivePath) => [
+        "-tzf",
+        archivePath,
+    ];
+}
+export class ManagedAgentArchiveError extends Error {
+    code;
+    constructor(code, message, options = {}) {
+        super(message, options);
+        this.code = code;
+        this.name = "ManagedAgentArchiveError";
+    }
+}
+class ManagedAgentArchiveDownloader {
+    download = async (options) => await downloadVerifiedFile(options);
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isContainedPath(root, candidate) {
+    const difference = relative(root, candidate);
+    return (difference.length > 0 &&
+        difference !== ".." &&
+        !difference.startsWith(`..${sep}`) &&
+        !isAbsolute(difference));
+}
+async function hashFile(path, signal) {
+    signal.throwIfAborted();
+    const digest = createHash("sha256");
+    const stream = createReadStream(path, { signal });
+    try {
+        for await (const chunk of stream) {
+            signal.throwIfAborted();
+            if (!(chunk instanceof Uint8Array)) {
+                throw new ManagedAgentArchiveError("managed_archive_verification_failed", "The managed Agent archive produced invalid bytes");
+            }
+            digest.update(chunk);
+        }
+        return digest.digest("hex");
+    }
+    catch (error) {
+        if (signal.aborted) {
+            signal.throwIfAborted();
+        }
+        if (error instanceof ManagedAgentArchiveError) {
+            throw error;
+        }
+        throw new ManagedAgentArchiveError("managed_archive_verification_failed", "The managed Agent artifact could not be verified", { cause: error });
+    }
+}
+async function readManifest(path) {
+    let handle;
+    try {
+        handle = await open(path, "r");
+    }
+    catch (error) {
+        throw new ManagedAgentArchiveError("managed_archive_verification_failed", "The managed Agent archive manifest is invalid", { cause: error });
+    }
+    try {
+        const metadata = await handle.stat();
+        if (!metadata.isFile() || metadata.size > MANIFEST_LIMIT_BYTES) {
+            throw new ManagedAgentArchiveError("managed_archive_verification_failed", "The managed Agent archive manifest is invalid");
+        }
+        const parsed = JSON.parse(await handle.readFile({ encoding: "utf8" }));
+        if (!isRecord(parsed)) {
+            throw new ManagedAgentArchiveError("managed_archive_verification_failed", "The managed Agent archive manifest is invalid");
+        }
+        return parsed;
+    }
+    catch (error) {
+        if (error instanceof ManagedAgentArchiveError) {
+            throw error;
+        }
+        throw new ManagedAgentArchiveError("managed_archive_verification_failed", "The managed Agent archive manifest is invalid", { cause: error });
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function validateManagedAgentArchive(root, definition, signal) {
+    try {
+        const rootPath = await realpath(root);
+        const rootMetadata = await stat(rootPath);
+        if (!rootMetadata.isDirectory() ||
+            (typeof process.getuid === "function" &&
+                rootMetadata.uid !== process.getuid())) {
+            throw new Error("Managed Agent root is not user-owned");
+        }
+        const manifest = await readManifest(join(rootPath, "archive.json"));
+        if (manifest["archiveSha256"] !== definition.archiveSha256 ||
+            manifest["archiveUrl"] !== definition.archiveUrl.toString() ||
+            manifest["version"] !== definition.version ||
+            typeof manifest["executableSha256"] !== "string") {
+            throw new Error("Managed Agent archive identity is invalid");
+        }
+        const executable = await resolveExecutablePath(join(rootPath, "bin", definition.executableName));
+        if (executable === null ||
+            !isContainedPath(rootPath, executable.path) ||
+            (await hashFile(executable.path, signal)) !== manifest["executableSha256"]) {
+            throw new Error("Managed Agent executable is invalid");
+        }
+        return executable;
+    }
+    catch (error) {
+        if (signal.aborted) {
+            signal.throwIfAborted();
+        }
+        if (error instanceof ManagedAgentArchiveError) {
+            throw error;
+        }
+        throw new ManagedAgentArchiveError("managed_archive_verification_failed", "The managed Agent archive did not match its pinned artifact", { cause: error });
+    }
+}
+function validateArchiveEntries(output, definition) {
+    const entries = output
+        .split(/\r?\n/)
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0);
+    if (entries.length !== 1 ||
+        (entries[0] !== definition.executableName &&
+            entries[0] !== `./${definition.executableName}`)) {
+        throw new ManagedAgentArchiveError("managed_archive_verification_failed", "The managed Agent archive contains unexpected entries");
+    }
+}
+export class ManagedAgentArchiveInstaller {
+    #downloader;
+    constructor(downloader = new ManagedAgentArchiveDownloader()) {
+        this.#downloader = downloader;
+    }
+    install = async (root, definition, signal) => {
+        signal.throwIfAborted();
+        try {
+            const metadata = await stat(root);
+            if (metadata.isDirectory()) {
+                return await validateManagedAgentArchive(root, definition, signal);
+            }
+        }
+        catch (error) {
+            if (error instanceof ManagedAgentArchiveError ||
+                !(error instanceof Error) ||
+                !("code" in error) ||
+                error.code !== "ENOENT") {
+                throw error;
+            }
+        }
+        const parent = dirname(root);
+        await mkdir(parent, { mode: 0o700, recursive: true });
+        const working = await mkdtemp(join(parent, `.${definition.version}.archive-`));
+        const staging = await mkdtemp(join(parent, `.${definition.version}.staging-`));
+        try {
+            const archivePath = join(working, definition.archiveName);
+            const extractionRoot = join(working, "extracted");
+            await mkdir(extractionRoot, { mode: 0o700 });
+            const canonicalExtractionRoot = await realpath(extractionRoot);
+            const download = await this.#downloader.download({
+                allowedHosts: new Set([
+                    "github.com",
+                    "objects.githubusercontent.com",
+                    "release-assets.githubusercontent.com",
+                ]),
+                destination: archivePath,
+                maximumBytes: ARCHIVE_DOWNLOAD_LIMIT_BYTES,
+                signal,
+                timeoutMilliseconds: ARCHIVE_DOWNLOAD_TIMEOUT_MILLISECONDS,
+                url: definition.archiveUrl,
+            });
+            if (download.sha256 !== definition.archiveSha256) {
+                throw new ManagedAgentArchiveError("managed_archive_verification_failed", "The managed Agent archive checksum is invalid");
+            }
+            const list = await runBoundedProcess({
+                arguments: definition.listArguments(archivePath),
+                command: definition.extractor,
+                cwd: working,
+                environment: { PATH: MINIMAL_PATH },
+                outputLimitBytes: 64 * 1024,
+                signal,
+                timeoutMilliseconds: ARCHIVE_EXTRACTION_TIMEOUT_MILLISECONDS,
+            });
+            validateArchiveEntries(list.stdout, definition);
+            await runBoundedProcess({
+                arguments: definition.extractArguments(archivePath, extractionRoot),
+                command: definition.extractor,
+                cwd: working,
+                environment: { PATH: MINIMAL_PATH },
+                outputLimitBytes: 64 * 1024,
+                signal,
+                timeoutMilliseconds: ARCHIVE_EXTRACTION_TIMEOUT_MILLISECONDS,
+            });
+            const extracted = await realpath(join(canonicalExtractionRoot, definition.executableName));
+            const extractedMetadata = await stat(extracted);
+            if (!isContainedPath(canonicalExtractionRoot, extracted) ||
+                !extractedMetadata.isFile()) {
+                throw new ManagedAgentArchiveError("managed_archive_verification_failed", "The managed Agent archive executable is invalid");
+            }
+            const binDirectory = join(staging, "bin");
+            const executablePath = join(binDirectory, definition.executableName);
+            await mkdir(binDirectory, { mode: 0o700 });
+            await copyFile(extracted, executablePath);
+            await chmod(executablePath, 0o700);
+            const executableSha256 = await hashFile(executablePath, signal);
+            await writeFile(join(staging, "archive.json"), `${JSON.stringify({
+                archiveSha256: definition.archiveSha256,
+                archiveUrl: definition.archiveUrl.toString(),
+                executableSha256,
+                version: definition.version,
+            })}\n`, { mode: 0o600 });
+            await validateManagedAgentArchive(staging, definition, signal);
+            try {
+                await rename(staging, root);
+            }
+            catch (error) {
+                try {
+                    return await validateManagedAgentArchive(root, definition, signal);
+                }
+                catch {
+                    throw new ManagedAgentArchiveError("managed_archive_publish_failed", "The managed Agent archive could not be published", { cause: error });
+                }
+            }
+            return await validateManagedAgentArchive(root, definition, signal);
+        }
+        catch (error) {
+            if (signal.aborted) {
+                signal.throwIfAborted();
+            }
+            if (error instanceof ManagedAgentArchiveError) {
+                throw error;
+            }
+            throw new ManagedAgentArchiveError("managed_archive_install_failed", "The pinned Agent archive could not be installed", { cause: error });
+        }
+        finally {
+            await Promise.all([
+                rm(working, { force: true, recursive: true }),
+                rm(staging, { force: true, recursive: true }),
+            ]);
+        }
+    };
+}
+//# sourceMappingURL=managed-agent-archive.js.map

package/dist/agent-installation/managed-agent-archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-agent-archive.js","sourceRoot":"","sources":["../../src/agent-installation/managed-agent-archive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EACL,KAAK,EACL,QAAQ,EACR,KAAK,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,EAAE,EACF,IAAI,EACJ,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErE,OAAO,EAEL,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,GAGrB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,4BAA4B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACvD,MAAM,qCAAqC,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AAC7D,MAAM,uCAAuC,GAAG,MAAM,CAAC;AACvD,MAAM,oBAAoB,GAAG,EAAE,GAAG,IAAI,CAAC;AACvC,MAAM,YAAY,GAAG,eAAe,CAAC;AAErC,MAAM,OAAgB,6BAA6B;IACxC,WAAW,CAAS;IACpB,aAAa,CAAS;IACtB,UAAU,CAAM;IAChB,cAAc,CAAS;IACvB,OAAO,CAAS;IAQzB,YACE,OAAe,EACf,WAAmB,EACnB,UAAe,EACf,aAAqB,EACrB,cAAsB;QAEtB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,gCAAiC,SAAQ,6BAA6B;IACxE,SAAS,GAAG,gBAAgB,CAAC;IAC7B,gBAAgB,GAAG,CAC1B,WAAmB,EACnB,WAAmB,EACA,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IACtD,aAAa,GAAG,CAAC,WAAmB,EAAqB,EAAE,CAAC;QACnE,KAAK;QACL,WAAW;KACZ,CAAC;CACH;AAED,MAAM,OAAO,oCAAqC,SAAQ,6BAA6B;IAC5E,SAAS,GAAG,cAAc,CAAC;IAC3B,gBAAgB,GAAG,CAC1B,WAAmB,EACnB,WAAmB,EACA,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IACxD,aAAa,GAAG,CAAC,WAAmB,EAAqB,EAAE,CAAC;QACnE,MAAM;QACN,WAAW;KACZ,CAAC;CACH;AAED,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe,EAAE,OAAO,GAAiB,EAAE;QACnE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAQD,MAAM,6BAA6B;IACxB,QAAQ,GAAG,KAAK,EACvB,OAAgC,EACL,EAAE,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;CACrE;AAUD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,SAAiB;IACtD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7C,OAAO,CACL,UAAU,CAAC,MAAM,GAAG,CAAC;QACrB,UAAU,KAAK,IAAI;QACnB,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;QAClC,CAAC,UAAU,CAAC,UAAU,CAAC,CACxB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,MAAmB;IACvD,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,wBAAwB,CAChC,qCAAqC,EACrC,kDAAkD,CACnD,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,YAAY,wBAAwB,EAAE,CAAC;YAC9C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,qCAAqC,EACrC,kDAAkD,EAClD,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY;IAEZ,IAAI,MAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,wBAAwB,CAChC,qCAAqC,EACrC,+CAA+C,EAC/C,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,GAAG,oBAAoB,EAAE,CAAC;YAC/D,MAAM,IAAI,wBAAwB,CAChC,qCAAqC,EACrC,+CAA+C,CAChD,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAChC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAC5C,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,wBAAwB,CAChC,qCAAqC,EACrC,+CAA+C,CAChD,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,wBAAwB,EAAE,CAAC;YAC9C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,qCAAqC,EACrC,+CAA+C,EAC/C,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY,EACZ,UAAyC,EACzC,MAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IACE,CAAC,YAAY,CAAC,WAAW,EAAE;YAC3B,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;gBACnC,YAAY,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,EACxC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;QACpE,IACE,QAAQ,CAAC,eAAe,CAAC,KAAK,UAAU,CAAC,aAAa;YACtD,QAAQ,CAAC,YAAY,CAAC,KAAK,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE;YAC3D,QAAQ,CAAC,SAAS,CAAC,KAAK,UAAU,CAAC,OAAO;YAC1C,OAAO,QAAQ,CAAC,kBAAkB,CAAC,KAAK,QAAQ,EAChD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAC5C,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,cAAc,CAAC,CACjD,CAAC;QACF,IACE,UAAU,KAAK,IAAI;YACnB,CAAC,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC;YAC3C,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,QAAQ,CAAC,kBAAkB,CAAC,EAC1E,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,YAAY,wBAAwB,EAAE,CAAC;YAC9C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,qCAAqC,EACrC,6DAA6D,EAC7D,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAAc,EACd,UAAyC;IAEzC,MAAM,OAAO,GAAG,MAAM;SACnB,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,IACE,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,cAAc;YACvC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,cAAc,EAAE,CAAC,EAClD,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,qCAAqC,EACrC,uDAAuD,CACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,OAAO,4BAA4B;IAG9B,WAAW,CAAkC;IAEtD,YACE,UAAU,GAAoC,IAAI,6BAA6B,EAAE;QAEjF,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;IAChC,CAAC;IAEQ,OAAO,GAAG,KAAK,EACtB,IAAY,EACZ,UAAyC,EACzC,MAAmB,EACU,EAAE;QAC/B,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3B,OAAO,MAAM,2BAA2B,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK,YAAY,wBAAwB;gBACzC,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;gBACzB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;gBAClB,KAAK,CAAC,IAAI,KAAK,QAAQ,EACvB,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,IAAI,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,OAAO,WAAW,CAAC,CAChD,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,IAAI,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,OAAO,WAAW,CAAC,CAChD,CAAC;QACF,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;YAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAClD,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7C,MAAM,uBAAuB,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;gBAC/C,YAAY,EAAE,IAAI,GAAG,CAAC;oBACpB,YAAY;oBACZ,+BAA+B;oBAC/B,sCAAsC;iBACvC,CAAC;gBACF,WAAW,EAAE,WAAW;gBACxB,YAAY,EAAE,4BAA4B;gBAC1C,MAAM;gBACN,mBAAmB,EAAE,qCAAqC;gBAC1D,GAAG,EAAE,UAAU,CAAC,UAAU;aAC3B,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,aAAa,EAAE,CAAC;gBACjD,MAAM,IAAI,wBAAwB,CAChC,qCAAqC,EACrC,+CAA+C,CAChD,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;gBACnC,SAAS,EAAE,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC;gBAChD,OAAO,EAAE,UAAU,CAAC,SAAS;gBAC7B,GAAG,EAAE,OAAO;gBACZ,WAAW,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;gBACnC,gBAAgB,EAAE,EAAE,GAAG,IAAI;gBAC3B,MAAM;gBACN,mBAAmB,EAAE,uCAAuC;aAC7D,CAAC,CAAC;YACH,sBAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAChD,MAAM,iBAAiB,CAAC;gBACtB,SAAS,EAAE,UAAU,CAAC,gBAAgB,CAAC,WAAW,EAAE,cAAc,CAAC;gBACnE,OAAO,EAAE,UAAU,CAAC,SAAS;gBAC7B,GAAG,EAAE,OAAO;gBACZ,WAAW,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;gBACnC,gBAAgB,EAAE,EAAE,GAAG,IAAI;gBAC3B,MAAM;gBACN,mBAAmB,EAAE,uCAAuC;aAC7D,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAC9B,IAAI,CAAC,uBAAuB,EAAE,UAAU,CAAC,cAAc,CAAC,CACzD,CAAC;YACF,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YAChD,IACE,CAAC,eAAe,CAAC,uBAAuB,EAAE,SAAS,CAAC;gBACpD,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAC3B,CAAC;gBACD,MAAM,IAAI,wBAAwB,CAChC,qCAAqC,EACrC,iDAAiD,CAClD,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,cAAc,CAAC,CAAC;YACrE,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3C,MAAM,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAC1C,MAAM,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YACnC,MAAM,gBAAgB,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YAChE,MAAM,SAAS,CACb,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAC7B,GAAG,IAAI,CAAC,SAAS,CAAC;gBAChB,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE;gBAC5C,gBAAgB;gBAChB,OAAO,EAAE,UAAU,CAAC,OAAO;aAC5B,CAAC,IAAI,EACN,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;YACF,MAAM,2BAA2B,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAC/D,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,OAAO,MAAM,2BAA2B,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;gBACrE,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,wBAAwB,CAChC,gCAAgC,EAChC,kDAAkD,EAClD,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,MAAM,2BAA2B,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,KAAK,YAAY,wBAAwB,EAAE,CAAC;gBAC9C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,wBAAwB,CAChC,gCAAgC,EAChC,iDAAiD,EACjD,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;gBAC7C,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;aAC9C,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;CACH"}

package/dist/agent-installation/managed-npm-package.d.ts

@@ -0,0 +1,27 @@
+import { type ResolvedExecutable } from "../process/executable.ts";
+export declare class ManagedNpmPackageDefinition {
+    readonly dependencyResolutionArguments: readonly string[];
+    readonly executableName: string;
+    readonly includeOptionalDependencies: boolean;
+    readonly packageName: string;
+    readonly version: string;
+    readonly verifyDependencyClosure: boolean;
+    constructor(packageName: string, version: string, executableName: string);
+}
+export declare class SriManagedNpmPackageDefinition extends ManagedNpmPackageDefinition {
+    readonly integrity: string;
+    readonly tarballUrl: string;
+    constructor(packageName: string, version: string, executableName: string, integrity: string, tarballUrl: string);
+}
+export declare class ManagedNpmPackageError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string, options?: ErrorOptions);
+}
+export declare function validateManagedNpmPackage(root: string, definition: ManagedNpmPackageDefinition): Promise<ResolvedExecutable>;
+export interface ManagedNpmPackageInstallationPort {
+    readonly install: (root: string, definition: ManagedNpmPackageDefinition, environment: Readonly<NodeJS.ProcessEnv>, signal: AbortSignal) => Promise<ResolvedExecutable>;
+}
+export declare class ManagedNpmPackageInstaller implements ManagedNpmPackageInstallationPort {
+    readonly install: (root: string, definition: ManagedNpmPackageDefinition, environment: Readonly<NodeJS.ProcessEnv>, signal: AbortSignal) => Promise<ResolvedExecutable>;
+}
+//# sourceMappingURL=managed-npm-package.d.ts.map

package/dist/agent-installation/managed-npm-package.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-npm-package.d.ts","sourceRoot":"","sources":["../../src/agent-installation/managed-npm-package.ts"],"names":[],"mappings":"AAWA,OAAO,EAEL,KAAK,kBAAkB,EAGxB,MAAM,0BAA0B,CAAC;AAMlC,qBAAa,2BAA2B;IACtC,QAAQ,CAAC,6BAA6B,EAAE,SAAS,MAAM,EAAE,CAAqB;IAC9E,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,2BAA2B,EAAE,OAAO,CAAS;IACtD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAS;IAElD,YAAY,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAIvE;CACF;AAED,qBAAa,8BAA+B,SAAQ,2BAA2B;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,YACE,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAKnB;CACF;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,YAAY,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,EAIpE;CACF;AAwJD,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,2BAA2B,GACtC,OAAO,CAAC,kBAAkB,CAAC,CAa7B;AAmDD,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,OAAO,EAAE,CAChB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,2BAA2B,EACvC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EACxC,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAClC;AAED,qBAAa,0BACX,YAAW,iCAAiC;IAE5C,QAAQ,CAAC,OAAO,SACR,MAAM,cACA,2BAA2B,eAC1B,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,UAChC,WAAW,KAClB,OAAO,CAAC,kBAAkB,CAAC,CA2G5B;CACH"}