@moxt-ai/mobius 0.0.9 → 0.0.11

package/dist/agent-installation/managed-npm-package.js

@@ -0,0 +1,258 @@
+import { mkdir, mkdtemp, open, realpath, rename, rm, stat, } from "node:fs/promises";
+import { delimiter, dirname, isAbsolute, join, relative, sep } from "node:path";
+import { findExecutableOnPath, resolveExecutablePath, runBoundedProcess, } from "../process/executable.js";
+const INSTALL_TIMEOUT_MILLISECONDS = 5 * 60 * 1_000;
+const PACKAGE_METADATA_LIMIT_BYTES = 64 * 1024;
+const PACKAGE_LOCK_LIMIT_BYTES = 8 * 1024 * 1024;
+export class ManagedNpmPackageDefinition {
+    dependencyResolutionArguments = Object.freeze([]);
+    executableName;
+    includeOptionalDependencies = false;
+    packageName;
+    version;
+    verifyDependencyClosure = false;
+    constructor(packageName, version, executableName) {
+        this.executableName = executableName;
+        this.packageName = packageName;
+        this.version = version;
+    }
+}
+export class SriManagedNpmPackageDefinition extends ManagedNpmPackageDefinition {
+    integrity;
+    tarballUrl;
+    constructor(packageName, version, executableName, integrity, tarballUrl) {
+        super(packageName, version, executableName);
+        this.integrity = integrity;
+        this.tarballUrl = tarballUrl;
+    }
+}
+export class ManagedNpmPackageError extends Error {
+    code;
+    constructor(code, message, options = {}) {
+        super(message, options);
+        this.code = code;
+        this.name = "ManagedNpmPackageError";
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function packagePath(root, packageName) {
+    return join(root, "node_modules", ...packageName.split("/"));
+}
+function isContainedPath(root, candidate) {
+    const difference = relative(root, candidate);
+    return (difference.length > 0 &&
+        difference !== ".." &&
+        !difference.startsWith(`..${sep}`) &&
+        !isAbsolute(difference));
+}
+async function readJsonRecord(path, maximumBytes) {
+    try {
+        const handle = await open(path, "r");
+        try {
+            const metadata = await handle.stat();
+            if (!metadata.isFile() || metadata.size > maximumBytes) {
+                throw new ManagedNpmPackageError("managed_package_verification_failed", "The managed npm package metadata is invalid");
+            }
+            const value = JSON.parse(await handle.readFile({ encoding: "utf8" }));
+            if (!isRecord(value)) {
+                throw new ManagedNpmPackageError("managed_package_verification_failed", "The managed npm package metadata is invalid");
+            }
+            return value;
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch (error) {
+        if (error instanceof ManagedNpmPackageError) {
+            throw error;
+        }
+        throw new ManagedNpmPackageError("managed_package_verification_failed", "The managed npm package metadata is invalid", { cause: error });
+    }
+}
+function readBinPath(packageMetadata, executableName) {
+    const bin = packageMetadata["bin"];
+    if (typeof bin === "string") {
+        return bin;
+    }
+    if (isRecord(bin) && typeof bin[executableName] === "string") {
+        return bin[executableName];
+    }
+    throw new ManagedNpmPackageError("managed_package_verification_failed", "The managed npm package executable declaration is invalid");
+}
+function verifyPackageLock(lock, definition) {
+    if (lock["lockfileVersion"] !== 3) {
+        throw new ManagedNpmPackageError("managed_package_verification_failed", "The managed npm package lockfile is invalid");
+    }
+    const packages = lock["packages"];
+    if (!isRecord(packages)) {
+        throw new ManagedNpmPackageError("managed_package_verification_failed", "The managed npm package lockfile is invalid");
+    }
+    const suffix = `node_modules/${definition.packageName}`;
+    let entry;
+    let matches = 0;
+    for (const [key, candidate] of Object.entries(packages)) {
+        const normalizedKey = key.replaceAll("\\", "/");
+        if (definition.verifyDependencyClosure && normalizedKey.length > 0) {
+            let resolved;
+            try {
+                if (!normalizedKey.split("/").includes("node_modules") ||
+                    !isRecord(candidate) ||
+                    typeof candidate["version"] !== "string" ||
+                    candidate["version"].length === 0 ||
+                    typeof candidate["integrity"] !== "string" ||
+                    !/^sha512-[A-Za-z0-9+/]{86}==$/.test(candidate["integrity"]) ||
+                    typeof candidate["resolved"] !== "string") {
+                    throw new Error("Invalid locked dependency");
+                }
+                resolved = new URL(candidate["resolved"]);
+            }
+            catch (error) {
+                throw new ManagedNpmPackageError("managed_package_verification_failed", "The managed npm dependency closure is invalid", { cause: error });
+            }
+            if (resolved.protocol !== "https:" ||
+                resolved.hostname !== "registry.npmjs.org" ||
+                resolved.port.length > 0 ||
+                resolved.username.length > 0 ||
+                resolved.password.length > 0) {
+                throw new ManagedNpmPackageError("managed_package_verification_failed", "The managed npm dependency closure is invalid");
+            }
+        }
+        if (normalizedKey === suffix || normalizedKey.endsWith(`/${suffix}`)) {
+            entry = candidate;
+            matches += 1;
+        }
+    }
+    if (matches !== 1 ||
+        !isRecord(entry) ||
+        entry["integrity"] !== definition.integrity ||
+        entry["resolved"] !== definition.tarballUrl ||
+        entry["version"] !== definition.version) {
+        throw new ManagedNpmPackageError("managed_package_verification_failed", "The managed npm package lockfile does not match the pinned artifact");
+    }
+}
+export async function validateManagedNpmPackage(root, definition) {
+    try {
+        return await validateManagedNpmPackageContents(root, definition);
+    }
+    catch (error) {
+        if (error instanceof ManagedNpmPackageError) {
+            throw error;
+        }
+        throw new ManagedNpmPackageError("managed_package_verification_failed", "The managed npm package is invalid", { cause: error });
+    }
+}
+async function validateManagedNpmPackageContents(root, definition) {
+    const rootPath = await realpath(root);
+    const packageRoot = await realpath(packagePath(rootPath, definition.packageName));
+    if (!isContainedPath(rootPath, packageRoot)) {
+        throw new ManagedNpmPackageError("managed_package_verification_failed", "The managed npm package escaped its private cache");
+    }
+    const metadata = await readJsonRecord(join(packageRoot, "package.json"), PACKAGE_METADATA_LIMIT_BYTES);
+    if (metadata["name"] !== definition.packageName ||
+        metadata["version"] !== definition.version) {
+        throw new ManagedNpmPackageError("managed_package_verification_failed", "The managed npm package identity is invalid");
+    }
+    if (definition instanceof SriManagedNpmPackageDefinition) {
+        verifyPackageLock(await readJsonRecord(join(rootPath, "package-lock.json"), PACKAGE_LOCK_LIMIT_BYTES), definition);
+    }
+    const declaredBin = readBinPath(metadata, definition.executableName);
+    const executable = await resolveExecutablePath(join(packageRoot, declaredBin));
+    if (executable === null || !isContainedPath(rootPath, executable.path)) {
+        throw new ManagedNpmPackageError("managed_package_verification_failed", "The managed npm package executable is invalid");
+    }
+    return executable;
+}
+export class ManagedNpmPackageInstaller {
+    install = async (root, definition, environment, signal) => {
+        signal.throwIfAborted();
+        try {
+            const metadata = await stat(root);
+            if (metadata.isDirectory()) {
+                return await validateManagedNpmPackage(root, definition);
+            }
+        }
+        catch (error) {
+            if (!(error instanceof Error) ||
+                !("code" in error) ||
+                error.code !== "ENOENT") {
+                throw error;
+            }
+        }
+        const parent = dirname(root);
+        await mkdir(parent, { mode: 0o700, recursive: true });
+        const staging = await mkdtemp(join(parent, `.${definition.version}.staging-`));
+        try {
+            const npm = await findExecutableOnPath(process.platform === "win32" ? "npm.cmd" : "npm", environment);
+            if (npm === null) {
+                throw new ManagedNpmPackageError("package_manager_not_found", "A supported npm executable is required to install the managed package");
+            }
+            const installArguments = ["install", "--prefix", staging];
+            installArguments.push(...definition.dependencyResolutionArguments);
+            if (definition.includeOptionalDependencies) {
+                installArguments.push("--include=optional");
+            }
+            else {
+                installArguments.push("--omit=optional");
+            }
+            installArguments.push("--ignore-scripts", "--no-audit", "--no-fund", "--package-lock=true", "--save-exact", "--registry=https://registry.npmjs.org/", `${definition.packageName}@${definition.version}`);
+            const installEnvironment = {
+                HOME: join(staging, "home"),
+                NPM_CONFIG_AUDIT: "false",
+                NPM_CONFIG_CACHE: join(staging, ".npm-cache"),
+                NPM_CONFIG_FUND: "false",
+                NPM_CONFIG_IGNORE_SCRIPTS: "true",
+                NPM_CONFIG_PACKAGE_LOCK: "true",
+                NPM_CONFIG_REGISTRY: "https://registry.npmjs.org/",
+                PATH: `${dirname(process.execPath)}${delimiter}/usr/bin${delimiter}/bin`,
+            };
+            if (definition.includeOptionalDependencies) {
+                installEnvironment["NPM_CONFIG_INCLUDE"] = "optional";
+            }
+            else {
+                installEnvironment["NPM_CONFIG_OMIT"] = "optional";
+            }
+            await runBoundedProcess({
+                arguments: installArguments,
+                command: npm.path,
+                cwd: staging,
+                environment: installEnvironment,
+                outputLimitBytes: 64 * 1024,
+                signal,
+                timeoutMilliseconds: INSTALL_TIMEOUT_MILLISECONDS,
+            });
+            await Promise.all([
+                rm(join(staging, ".npm-cache"), { force: true, recursive: true }),
+                rm(join(staging, "home"), { force: true, recursive: true }),
+            ]);
+            await validateManagedNpmPackage(staging, definition);
+            try {
+                await rename(staging, root);
+            }
+            catch (error) {
+                try {
+                    return await validateManagedNpmPackage(root, definition);
+                }
+                catch {
+                    throw new ManagedNpmPackageError("managed_package_publish_failed", "The managed npm package could not be published", { cause: error });
+                }
+            }
+            return await validateManagedNpmPackage(root, definition);
+        }
+        catch (error) {
+            if (signal.aborted) {
+                signal.throwIfAborted();
+            }
+            if (error instanceof ManagedNpmPackageError) {
+                throw error;
+            }
+            throw new ManagedNpmPackageError("managed_package_install_failed", "The pinned npm package could not be installed", { cause: error });
+        }
+        finally {
+            await rm(staging, { force: true, recursive: true });
+        }
+    };
+}
+//# sourceMappingURL=managed-npm-package.js.map

package/dist/agent-installation/managed-npm-package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-npm-package.js","sourceRoot":"","sources":["../../src/agent-installation/managed-npm-package.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,EAAE,EACF,IAAI,GACL,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhF,OAAO,EACL,oBAAoB,EAEpB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAElC,MAAM,4BAA4B,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AACpD,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/C,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD,MAAM,OAAO,2BAA2B;IAC7B,6BAA6B,GAAsB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrE,cAAc,CAAS;IACvB,2BAA2B,GAAY,KAAK,CAAC;IAC7C,WAAW,CAAS;IACpB,OAAO,CAAS;IAChB,uBAAuB,GAAY,KAAK,CAAC;IAElD,YAAY,WAAmB,EAAE,OAAe,EAAE,cAAsB;QACtE,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,8BAA+B,SAAQ,2BAA2B;IACpE,SAAS,CAAS;IAClB,UAAU,CAAS;IAE5B,YACE,WAAmB,EACnB,OAAe,EACf,cAAsB,EACtB,SAAiB,EACjB,UAAkB;QAElB,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe,EAAE,OAAO,GAAiB,EAAE;QACnE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,WAAmB;IACpD,OAAO,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,SAAiB;IACtD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7C,OAAO,CACL,UAAU,CAAC,MAAM,GAAG,CAAC;QACrB,UAAU,KAAK,IAAI;QACnB,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;QAClC,CAAC,UAAU,CAAC,UAAU,CAAC,CACxB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,IAAY,EACZ,YAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,GAAG,YAAY,EAAE,CAAC;gBACvD,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,EACrC,6CAA6C,CAC9C,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAC/B,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAC5C,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,EACrC,6CAA6C,CAC9C,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,EACrC,6CAA6C,EAC7C,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,eAAkD,EAClD,cAAsB;IAEtB,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7D,OAAO,GAAG,CAAC,cAAc,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,EACrC,2DAA2D,CAC5D,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAuC,EACvC,UAA0C;IAE1C,IAAI,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,EACrC,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,EACrC,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,UAAU,CAAC,WAAW,EAAE,CAAC;IACxD,IAAI,KAAc,CAAC;IACnB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,aAAa,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,uBAAuB,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnE,IAAI,QAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IACE,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;oBAClD,CAAC,QAAQ,CAAC,SAAS,CAAC;oBACpB,OAAO,SAAS,CAAC,SAAS,CAAC,KAAK,QAAQ;oBACxC,SAAS,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC;oBACjC,OAAO,SAAS,CAAC,WAAW,CAAC,KAAK,QAAQ;oBAC1C,CAAC,8BAA8B,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;oBAC5D,OAAO,SAAS,CAAC,UAAU,CAAC,KAAK,QAAQ,EACzC,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC/C,CAAC;gBACD,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,EACrC,+CAA+C,EAC/C,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;YACD,IACE,QAAQ,CAAC,QAAQ,KAAK,QAAQ;gBAC9B,QAAQ,CAAC,QAAQ,KAAK,oBAAoB;gBAC1C,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;gBACxB,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAC5B,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAC5B,CAAC;gBACD,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,EACrC,+CAA+C,CAChD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC;YACrE,KAAK,GAAG,SAAS,CAAC;YAClB,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,IACE,OAAO,KAAK,CAAC;QACb,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,KAAK,CAAC,WAAW,CAAC,KAAK,UAAU,CAAC,SAAS;QAC3C,KAAK,CAAC,UAAU,CAAC,KAAK,UAAU,CAAC,UAAU;QAC3C,KAAK,CAAC,SAAS,CAAC,KAAK,UAAU,CAAC,OAAO,EACvC,CAAC;QACD,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,EACrC,qEAAqE,CACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAY,EACZ,UAAuC;IAEvC,IAAI,CAAC;QACH,OAAO,MAAM,iCAAiC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,EACrC,oCAAoC,EACpC,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,IAAY,EACZ,UAAuC;IAEvC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,MAAM,QAAQ,CAChC,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,WAAW,CAAC,CAC9C,CAAC;IACF,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,EACrC,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,cAAc,CACnC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EACjC,4BAA4B,CAC7B,CAAC;IACF,IACE,QAAQ,CAAC,MAAM,CAAC,KAAK,UAAU,CAAC,WAAW;QAC3C,QAAQ,CAAC,SAAS,CAAC,KAAK,UAAU,CAAC,OAAO,EAC1C,CAAC;QACD,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,EACrC,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,YAAY,8BAA8B,EAAE,CAAC;QACzD,iBAAiB,CACf,MAAM,cAAc,CAClB,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EACnC,wBAAwB,CACzB,EACD,UAAU,CACX,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,cAAc,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAC5C,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAC/B,CAAC;IACF,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,EACrC,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAWD,MAAM,OAAO,0BAA0B;IAG5B,OAAO,GAAG,KAAK,EACtB,IAAY,EACZ,UAAuC,EACvC,WAAwC,EACxC,MAAmB,EACU,EAAE;QAC/B,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3B,OAAO,MAAM,yBAAyB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;gBACzB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;gBAClB,KAAK,CAAC,IAAI,KAAK,QAAQ,EACvB,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,IAAI,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,OAAO,WAAW,CAAC,CAChD,CAAC;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,oBAAoB,CACpC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAChD,WAAW,CACZ,CAAC;YACF,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,sBAAsB,CAC9B,2BAA2B,EAC3B,uEAAuE,CACxE,CAAC;YACJ,CAAC;YACD,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAC1D,gBAAgB,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,6BAA6B,CAAC,CAAC;YACnE,IAAI,UAAU,CAAC,2BAA2B,EAAE,CAAC;gBAC3C,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC3C,CAAC;YACD,gBAAgB,CAAC,IAAI,CACnB,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,wCAAwC,EACxC,GAAG,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,OAAO,EAAE,CAClD,CAAC;YACF,MAAM,kBAAkB,GAAsB;gBAC5C,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;gBAC3B,gBAAgB,EAAE,OAAO;gBACzB,gBAAgB,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC;gBAC7C,eAAe,EAAE,OAAO;gBACxB,yBAAyB,EAAE,MAAM;gBACjC,uBAAuB,EAAE,MAAM;gBAC/B,mBAAmB,EAAE,6BAA6B;gBAClD,IAAI,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,SAAS,WAAW,SAAS,MAAM;aACzE,CAAC;YACF,IAAI,UAAU,CAAC,2BAA2B,EAAE,CAAC;gBAC3C,kBAAkB,CAAC,oBAAoB,CAAC,GAAG,UAAU,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,kBAAkB,CAAC,iBAAiB,CAAC,GAAG,UAAU,CAAC;YACrD,CAAC;YACD,MAAM,iBAAiB,CAAC;gBACtB,SAAS,EAAE,gBAAgB;gBAC3B,OAAO,EAAE,GAAG,CAAC,IAAI;gBACjB,GAAG,EAAE,OAAO;gBACZ,WAAW,EAAE,kBAAkB;gBAC/B,gBAAgB,EAAE,EAAE,GAAG,IAAI;gBAC3B,MAAM;gBACN,mBAAmB,EAAE,4BAA4B;aAClD,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;gBACjE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;aAC5D,CAAC,CAAC;YACH,MAAM,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACrD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,OAAO,MAAM,yBAAyB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBAC3D,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,sBAAsB,CAC9B,gCAAgC,EAChC,gDAAgD,EAChD,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,MAAM,yBAAyB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;gBAC5C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,sBAAsB,CAC9B,gCAAgC,EAChC,+CAA+C,EAC/C,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC;CACH"}

package/dist/agent-installation/opencode-managed-release.d.ts

@@ -0,0 +1,4 @@
+import { type ManagedAgentArchiveDefinition } from "./managed-agent-archive.ts";
+export declare const OPENCODE_MANAGED_VERSION = "1.18.29";
+export declare function openCodeManagedArchive(platform: NodeJS.Platform, architecture: NodeJS.Architecture): ManagedAgentArchiveDefinition;
+//# sourceMappingURL=opencode-managed-release.d.ts.map

package/dist/agent-installation/opencode-managed-release.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-managed-release.d.ts","sourceRoot":"","sources":["../../src/agent-installation/opencode-managed-release.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,6BAA6B,EAGnC,MAAM,4BAA4B,CAAC;AAEpC,eAAO,MAAM,wBAAwB,YAAY,CAAC;AAQlD,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EACzB,YAAY,EAAE,MAAM,CAAC,YAAY,GAChC,6BAA6B,CA4C/B"}

package/dist/agent-installation/opencode-managed-release.js

@@ -0,0 +1,25 @@
+import { TarGzipManagedAgentArchiveDefinition, ZipManagedAgentArchiveDefinition, } from "./managed-agent-archive.js";
+export const OPENCODE_MANAGED_VERSION = "1.18.29";
+function releaseUrl(asset) {
+    return new URL(`https://github.com/anomalyco/opencode/releases/download/v${OPENCODE_MANAGED_VERSION}/${asset}`);
+}
+export function openCodeManagedArchive(platform, architecture) {
+    if (platform === "darwin" && architecture === "arm64") {
+        const asset = "opencode-darwin-arm64.zip";
+        return new ZipManagedAgentArchiveDefinition(OPENCODE_MANAGED_VERSION, asset, releaseUrl(asset), "fe764f7f360c584a83e18dd5f23fb1a6b2725f5ee8854b0252fe558f7798e946", "opencode");
+    }
+    if (platform === "darwin" && architecture === "x64") {
+        const asset = "opencode-darwin-x64.zip";
+        return new ZipManagedAgentArchiveDefinition(OPENCODE_MANAGED_VERSION, asset, releaseUrl(asset), "9858853e7bacdbbd22c2d70c377e009dc4b354dd04f5588705411e7afb89fd2d", "opencode");
+    }
+    if (platform === "linux" && architecture === "arm64") {
+        const asset = "opencode-linux-arm64.tar.gz";
+        return new TarGzipManagedAgentArchiveDefinition(OPENCODE_MANAGED_VERSION, asset, releaseUrl(asset), "70baf769395ca4e7a68924026530c390eace194f3b7e4919d4efcb2aa2eed3c0", "opencode");
+    }
+    if (platform === "linux" && architecture === "x64") {
+        const asset = "opencode-linux-x64.tar.gz";
+        return new TarGzipManagedAgentArchiveDefinition(OPENCODE_MANAGED_VERSION, asset, releaseUrl(asset), "ea800b7ff56226b70952126c9fc1e2517ca4c4b5682fd9d3f9e87449697a1194", "opencode");
+    }
+    throw new Error("OpenCode does not publish an approved archive for this platform");
+}
+//# sourceMappingURL=opencode-managed-release.js.map

package/dist/agent-installation/opencode-managed-release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-managed-release.js","sourceRoot":"","sources":["../../src/agent-installation/opencode-managed-release.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,oCAAoC,EACpC,gCAAgC,GACjC,MAAM,4BAA4B,CAAC;AAEpC,MAAM,CAAC,MAAM,wBAAwB,GAAG,SAAS,CAAC;AAElD,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,GAAG,CACZ,4DAA4D,wBAAwB,IAAI,KAAK,EAAE,CAChG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAAyB,EACzB,YAAiC;IAEjC,IAAI,QAAQ,KAAK,QAAQ,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,2BAA2B,CAAC;QAC1C,OAAO,IAAI,gCAAgC,CACzC,wBAAwB,EACxB,KAAK,EACL,UAAU,CAAC,KAAK,CAAC,EACjB,kEAAkE,EAClE,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,yBAAyB,CAAC;QACxC,OAAO,IAAI,gCAAgC,CACzC,wBAAwB,EACxB,KAAK,EACL,UAAU,CAAC,KAAK,CAAC,EACjB,kEAAkE,EAClE,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,6BAA6B,CAAC;QAC5C,OAAO,IAAI,oCAAoC,CAC7C,wBAAwB,EACxB,KAAK,EACL,UAAU,CAAC,KAAK,CAAC,EACjB,kEAAkE,EAClE,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,2BAA2B,CAAC;QAC1C,OAAO,IAAI,oCAAoC,CAC7C,wBAAwB,EACxB,KAAK,EACL,UAAU,CAAC,KAAK,CAAC,EACjB,kEAAkE,EAClE,UAAU,CACX,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;AACJ,CAAC"}

package/dist/agent-installation/pi-managed-packages.d.ts

@@ -0,0 +1,4 @@
+import { SriManagedNpmPackageDefinition } from "./managed-npm-package.ts";
+export declare const PI_ACP_PACKAGE: SriManagedNpmPackageDefinition;
+export declare const PI_AGENT_PACKAGE: SriManagedNpmPackageDefinition;
+//# sourceMappingURL=pi-managed-packages.d.ts.map

package/dist/agent-installation/pi-managed-packages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-managed-packages.d.ts","sourceRoot":"","sources":["../../src/agent-installation/pi-managed-packages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAE1E,eAAO,MAAM,cAAc,gCAM1B,CAAC;AAEF,eAAO,MAAM,gBAAgB,gCAM5B,CAAC"}

package/dist/agent-installation/pi-managed-packages.js

@@ -0,0 +1,4 @@
+import { SriManagedNpmPackageDefinition } from "./managed-npm-package.js";
+export const PI_ACP_PACKAGE = new SriManagedNpmPackageDefinition("pi-acp", "0.0.33", "pi-acp", "sha512-vX9kY1tK14E72G4dBAx+RGCk/k7XPjTHls6dLUxA8WSkBav6B6JHuSBv3eusp50LCR/GTRsR2kIKsG0Z5jANzw==", "https://registry.npmjs.org/pi-acp/-/pi-acp-0.0.33.tgz");
+export const PI_AGENT_PACKAGE = new SriManagedNpmPackageDefinition("@earendil-works/pi-coding-agent", "0.85.0", "pi", "sha512-INxVkLAVfAMju5MojJpmyu/0bMP+r+ffZuS7UqVv32E2JwHBRbcHfELDfmFNvapEbgYfKN2r9OYO1p3TqDBR+g==", "https://registry.npmjs.org/@earendil-works/pi-coding-agent/-/pi-coding-agent-0.85.0.tgz");
+//# sourceMappingURL=pi-managed-packages.js.map

package/dist/agent-installation/pi-managed-packages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-managed-packages.js","sourceRoot":"","sources":["../../src/agent-installation/pi-managed-packages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAE1E,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,8BAA8B,CAC9D,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,iGAAiG,EACjG,uDAAuD,CACxD,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,8BAA8B,CAChE,iCAAiC,EACjC,QAAQ,EACR,IAAI,EACJ,iGAAiG,EACjG,yFAAyF,CAC1F,CAAC"}