@nextclaw/app-runtime 0.10.0 → 0.12.0

package/dist/services/app-installation.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-installation.service.js","names":[],"sources":["../../src/services/app-installation.service.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { access, cp, mkdir, readdir, rename, rm } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { AppBundleService } from \"#app-runtime/services/app-bundle.service.js\";\nimport { AppManifestService } from \"#app-runtime/services/app-manifest.service.js\";\nimport {\n  isAppComponentManifestBundle,\n  isAppStandaloneManifestBundle,\n} from \"#app-runtime/types/app-manifest.types.js\";\nimport { AppHomeService } from \"#app-runtime/services/app-home.service.js\";\nimport { AppBuildService } from \"#app-runtime/services/app-build.service.js\";\nimport type { AppDistributionMode } from \"#app-runtime/types/app-bundle.types.js\";\nimport type { AppDocumentGrantMap } from \"#app-runtime/types/app-permissions.types.js\";\nimport { AppRegistryConfigService } from \"#app-runtime/services/app-registry-config.service.js\";\nimport { AppRemoteRegistryClientService } from \"#app-runtime/services/app-remote-registry-client.service.js\";\nimport { AppRegistryService } from \"#app-runtime/services/app-registry.service.js\";\nimport { AppInstallSourceService } from \"#app-runtime/services/app-install-source.service.js\";\nimport type {\n  AppInfoResult,\n  AppInstallProgressHandler,\n  AppActivationResult,\n  AppInstallResult,\n  AppLaunchResolution,\n  AppUpdateResult,\n  AppRollbackResult,\n  AppUninstallResult,\n  InstalledAppListItem,\n} from \"#app-runtime/types/app-installation.types.js\";\n\nexport class AppInstallationService {\n  private readonly installSourceService: AppInstallSourceService;\n\n  constructor(\n    private readonly appHomeService: AppHomeService = new AppHomeService(),\n    private readonly bundleService: AppBundleService = new AppBundleService(),\n    private readonly manifestService: AppManifestService = new AppManifestService(),\n    private readonly buildService: AppBuildService = new AppBuildService(),\n    private readonly registryService: AppRegistryService = new AppRegistryService(appHomeService),\n    private readonly registryConfigService: AppRegistryConfigService = new AppRegistryConfigService(\n      appHomeService,\n    ),\n    private readonly remoteRegistryClient: AppRemoteRegistryClientService = new AppRemoteRegistryClientService(\n      new AppRegistryConfigService(appHomeService),\n    ),\n  ) {\n    this.installSourceService = new AppInstallSourceService(\n      this.manifestService,\n      this.remoteRegistryClient,\n    );\n  }\n\n  install = async (\n    appSource: string,\n    options?: {\n      registryUrl?: string;\n      onProgress?: AppInstallProgressHandler;\n    },\n  ): Promise<AppInstallResult> => {\n    const { onProgress, registryUrl } = options ?? {};\n    await onProgress?.(\"resolving\");\n    const source = await this.installSourceService.resolve(appSource, registryUrl);\n    const tempDirectory = await this.appHomeService.createTemporaryDirectory(\"napp-install-\");\n    try {\n      if (source.kind === \"registry\") {\n        await onProgress?.(\"downloading\");\n      }\n      const bundlePath =\n        source.kind === \"directory\"\n          ? (await this.bundleService.packAppDirectory({\n              appDirectory: source.appDirectory,\n              outputPath: path.join(tempDirectory, \"app.napp\"),\n            })).bundlePath\n          : source.kind === \"bundle\"\n            ? source.bundlePath\n            : (\n                await this.remoteRegistryClient.downloadBundle({\n                  resolution: source.registryResolution,\n                  targetDirectory: tempDirectory,\n                })\n              ).bundlePath;\n      await onProgress?.(\"verifying\");\n      const extractedDirectory = path.join(tempDirectory, \"bundle\");\n      const extractedMetadata = await this.bundleService.extractBundle({\n        bundlePath,\n        targetDirectory: extractedDirectory,\n      });\n      await this.materializeDistribution({\n        appDirectory: extractedDirectory,\n        distributionMode: extractedMetadata.metadata.distributionMode,\n      });\n      const manifestBundle = await this.manifestService.load(extractedDirectory);\n      const installDirectory = this.appHomeService.getInstallDirectory(\n        manifestBundle.manifest.id,\n        manifestBundle.manifest.version,\n      );\n      if (\n        source.kind === \"registry\" &&\n        manifestBundle.manifest.id !== source.registryResolution.appId\n      ) {\n        throw new Error(\n          `bundle manifest.appId 与 registry 请求不一致：期望 ${source.registryResolution.appId}，实际 ${manifestBundle.manifest.id}`,\n        );\n      }\n      await onProgress?.(\"installing\");\n      const dataDirectory = this.appHomeService.getAppDataDirectory(manifestBundle.manifest.id);\n      await this.copyToImmutableInstallDirectory({\n        appId: manifestBundle.manifest.id,\n        appVersion: manifestBundle.manifest.version,\n        extractedDirectory,\n        installDirectory,\n      });\n      await mkdir(dataDirectory, { recursive: true });\n      await onProgress?.(\"finalizing\");\n      let registryRecord;\n      try {\n        registryRecord = await this.registryService.upsertInstallation({\n          appId: manifestBundle.manifest.id,\n          name: manifestBundle.manifest.name,\n          description: manifestBundle.manifest.description,\n          version: manifestBundle.manifest.version,\n          installDirectory,\n          dataDirectory,\n          sourceKind: source.kind,\n          distributionMode:\n            source.kind === \"registry\"\n              ? source.registryResolution.distributionMode\n              : extractedMetadata.metadata.distributionMode,\n          sourceRef: source.sourceRef,\n          installedAt: new Date().toISOString(),\n          permissions: manifestBundle.manifest.schemaVersion === 1\n            ? manifestBundle.manifest.permissions ?? {}\n            : {},\n          registryUrl:\n            source.kind === \"registry\" ? source.registryResolution.registryUrl : undefined,\n          bundleUrl:\n            source.kind === \"registry\" ? source.registryResolution.bundleUrl : undefined,\n          sha256: source.kind === \"registry\" ? source.registryResolution.sha256 : undefined,\n          publisher:\n            source.kind === \"registry\" ? source.registryResolution.publisher : undefined,\n          manifestSchemaVersion: manifestBundle.manifest.schemaVersion,\n          components: isAppComponentManifestBundle(manifestBundle)\n            ? manifestBundle.components.map((component) => ({\n                ...component,\n                componentDirectory: path.join(installDirectory, component.path),\n                manifestPath: path.join(\n                  installDirectory,\n                  component.path,\n                  component.kind === \"panel\" ? \"panel-app.json\" : \"service-app.json\",\n                ),\n              }))\n            : undefined,\n          primaryPanelId: isAppComponentManifestBundle(manifestBundle)\n            ? manifestBundle.primaryPanelId\n            : undefined,\n        });\n      } catch (error) {\n        await rm(installDirectory, { recursive: true, force: true });\n        throw error;\n      }\n      const activeVersionRecord = registryRecord.installedVersions[registryRecord.activeVersion];\n      return {\n        appId: registryRecord.appId,\n        name: registryRecord.name,\n        version: registryRecord.activeVersion,\n        installDirectory,\n        dataDirectory,\n        sourceKind: source.kind,\n        sourceRef: source.sourceRef,\n        distributionMode:\n          registryRecord.installedVersions[registryRecord.activeVersion]?.distributionMode,\n        permissions:\n          registryRecord.installedVersions[registryRecord.activeVersion]?.permissions ?? {},\n        registryUrl:\n          registryRecord.installedVersions[registryRecord.activeVersion]?.registryUrl,\n        bundleUrl:\n          registryRecord.installedVersions[registryRecord.activeVersion]?.bundleUrl,\n        sha256: registryRecord.installedVersions[registryRecord.activeVersion]?.sha256,\n        publisher:\n          registryRecord.installedVersions[registryRecord.activeVersion]?.publisher,\n        enabled: registryRecord.enabled,\n        manifestSchemaVersion: activeVersionRecord?.manifestSchemaVersion ?? 1,\n        components: activeVersionRecord?.components,\n        primaryPanelId: activeVersionRecord?.primaryPanelId,\n      };\n    } finally {\n      await rm(tempDirectory, { recursive: true, force: true });\n    }\n  };\n\n  update = async (\n    appId: string,\n    options?: {\n      version?: string;\n      registryUrl?: string;\n      onProgress?: AppInstallProgressHandler;\n    },\n  ): Promise<AppUpdateResult> => {\n    const { onProgress, registryUrl: requestedRegistryUrl, version } = options ?? {};\n    await onProgress?.(\"resolving\");\n    const appRecord = await this.registryService.getApp(appId);\n    if (!appRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    const activeVersionRecord = appRecord.installedVersions[appRecord.activeVersion];\n    const registryUrl =\n      requestedRegistryUrl ??\n      activeVersionRecord?.registryUrl ??\n      (await this.registryConfigService.getSnapshot()).currentUrl;\n    const resolution = await this.remoteRegistryClient.resolve({\n      appId,\n      version,\n      registryUrl,\n    });\n    if (resolution.version === appRecord.activeVersion) {\n      if (!activeVersionRecord) {\n        throw new Error(`已安装应用缺少激活版本：${appId}`);\n      }\n      return {\n        appId: appRecord.appId,\n        name: appRecord.name,\n        version: appRecord.activeVersion,\n        previousVersion: appRecord.activeVersion,\n        installDirectory: activeVersionRecord.installDirectory,\n        dataDirectory: appRecord.dataDirectory,\n        sourceKind: activeVersionRecord.sourceKind,\n        sourceRef: activeVersionRecord.sourceRef,\n        permissions: activeVersionRecord.permissions,\n        registryUrl: activeVersionRecord.registryUrl,\n        bundleUrl: activeVersionRecord.bundleUrl,\n        sha256: activeVersionRecord.sha256,\n        publisher: activeVersionRecord.publisher,\n        enabled: appRecord.enabled,\n        manifestSchemaVersion: activeVersionRecord.manifestSchemaVersion,\n        components: activeVersionRecord.components,\n        primaryPanelId: activeVersionRecord.primaryPanelId,\n        updated: false,\n      };\n    }\n    const installedTarget = appRecord.installedVersions[resolution.version];\n    if (installedTarget) {\n      await onProgress?.(\"verifying\");\n      await onProgress?.(\"installing\");\n      await this.rollback(appId, resolution.version);\n      await onProgress?.(\"finalizing\");\n      return {\n        appId: appRecord.appId,\n        name: appRecord.name,\n        version: resolution.version,\n        previousVersion: appRecord.activeVersion,\n        installDirectory: installedTarget.installDirectory,\n        dataDirectory: appRecord.dataDirectory,\n        sourceKind: installedTarget.sourceKind,\n        distributionMode: installedTarget.distributionMode,\n        sourceRef: installedTarget.sourceRef,\n        permissions: installedTarget.permissions,\n        registryUrl: installedTarget.registryUrl,\n        bundleUrl: installedTarget.bundleUrl,\n        sha256: installedTarget.sha256,\n        publisher: installedTarget.publisher,\n        enabled: appRecord.enabled,\n        manifestSchemaVersion: installedTarget.manifestSchemaVersion,\n        components: installedTarget.components,\n        primaryPanelId: installedTarget.primaryPanelId,\n        updated: true,\n      };\n    }\n    const installResult = await this.install(`${appId}@${resolution.version}`, {\n      registryUrl,\n      onProgress,\n    });\n    return {\n      ...installResult,\n      previousVersion: appRecord.activeVersion,\n      updated: true,\n    };\n  };\n\n  uninstall = async (\n    appId: string,\n    purgeData: boolean,\n  ): Promise<AppUninstallResult> => {\n    const appRecord = await this.registryService.getApp(appId);\n    if (!appRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    const removedVersions = Object.keys(appRecord.installedVersions).sort((left, right) =>\n      left.localeCompare(right),\n    );\n    const stagedPaths: Array<{ originalPath: string; stagedPath: string }> = [];\n    const stagePath = async (originalPath: string): Promise<void> => {\n      if (!await this.pathExists(originalPath)) {\n        return;\n      }\n      const stagedPath = `${originalPath}.uninstalling-${randomUUID()}`;\n      await rename(originalPath, stagedPath);\n      stagedPaths.push({ originalPath, stagedPath });\n    };\n    const restoreStagedPaths = async (): Promise<void> => {\n      for (const entry of [...stagedPaths].reverse()) {\n        if (await this.pathExists(entry.stagedPath)) {\n          await rename(entry.stagedPath, entry.originalPath);\n        }\n      }\n    };\n    try {\n      for (const versionRecord of Object.values(appRecord.installedVersions)) {\n        await stagePath(versionRecord.installDirectory);\n      }\n      if (purgeData) {\n        await stagePath(appRecord.dataDirectory);\n      }\n      const removedRecord = await this.registryService.removeApp(appId);\n      if (!removedRecord) {\n        throw new Error(`卸载过程中应用记录已发生变化：${appId}`);\n      }\n    } catch (error) {\n      try {\n        await restoreStagedPaths();\n      } catch (restoreError) {\n        throw new AggregateError(\n          [error, restoreError],\n          `卸载 ${appId} 失败，且无法完全恢复已暂存文件。`,\n        );\n      }\n      throw error;\n    }\n    await Promise.all(stagedPaths.map((entry) =>\n      rm(entry.stagedPath, { recursive: true, force: true }),\n    ));\n    return {\n      appId,\n      removedVersions,\n      dataRemoved: purgeData,\n    };\n  };\n\n  list = async (): Promise<InstalledAppListItem[]> => {\n    const appRecords = await this.registryService.listApps();\n    return appRecords.map((appRecord) => ({\n      appId: appRecord.appId,\n      name: appRecord.name,\n      activeVersion: appRecord.activeVersion,\n      sourceKind:\n        appRecord.installedVersions[appRecord.activeVersion]?.sourceKind ?? \"directory\",\n      distributionMode:\n        appRecord.installedVersions[appRecord.activeVersion]?.distributionMode,\n      enabled: appRecord.enabled,\n      manifestSchemaVersion:\n        appRecord.installedVersions[appRecord.activeVersion]?.manifestSchemaVersion ?? 1,\n      primaryPanelId:\n        appRecord.installedVersions[appRecord.activeVersion]?.primaryPanelId,\n    }));\n  };\n\n  reconcileFilesystem = async (): Promise<void> => {\n    await this.appHomeService.ensureBaseDirectories();\n    const appRecords = await this.registryService.listApps();\n    const referencedInstallPaths = new Set(appRecords.flatMap((record) =>\n      Object.values(record.installedVersions).map((version) => path.resolve(version.installDirectory))));\n    const referencedDataPaths = new Set(appRecords.map((record) => path.resolve(record.dataDirectory)));\n\n    const packageDirectories = await this.readDirectories(this.appHomeService.getPackagesDirectory());\n    for (const appDirectory of packageDirectories) {\n      await this.reconcileGeneratedSiblings(appDirectory, referencedInstallPaths);\n    }\n    await this.reconcileGeneratedSiblings(\n      this.appHomeService.getDataDirectory(),\n      referencedDataPaths,\n    );\n  };\n\n  info = async (appId: string): Promise<AppInfoResult> => {\n    const appRecord = await this.registryService.getApp(appId);\n    if (!appRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    const installedVersions = Object.values(appRecord.installedVersions).sort((left, right) =>\n      left.version.localeCompare(right.version),\n    );\n    return {\n      appId: appRecord.appId,\n      name: appRecord.name,\n      description: appRecord.description,\n      activeVersion: appRecord.activeVersion,\n      enabled: appRecord.enabled,\n      dataDirectory: appRecord.dataDirectory,\n      installedVersions: installedVersions.map((versionRecord) => ({\n        version: versionRecord.version,\n        installDirectory: versionRecord.installDirectory,\n        sourceKind: versionRecord.sourceKind,\n        distributionMode: versionRecord.distributionMode,\n        sourceRef: versionRecord.sourceRef,\n        installedAt: versionRecord.installedAt,\n        permissions: versionRecord.permissions,\n        registryUrl: versionRecord.registryUrl,\n        bundleUrl: versionRecord.bundleUrl,\n        sha256: versionRecord.sha256,\n        publisher: versionRecord.publisher,\n        manifestSchemaVersion: versionRecord.manifestSchemaVersion,\n        components: versionRecord.components,\n        primaryPanelId: versionRecord.primaryPanelId,\n      })),\n      grants: appRecord.grants,\n    };\n  };\n\n  setEnabled = async (appId: string, enabled: boolean): Promise<AppActivationResult> => {\n    const appRecord = await this.registryService.setEnabled(appId, enabled);\n    return {\n      appId: appRecord.appId,\n      activeVersion: appRecord.activeVersion,\n      enabled: appRecord.enabled,\n    };\n  };\n\n  rollback = async (appId: string, version: string): Promise<AppRollbackResult> => {\n    const currentRecord = await this.registryService.getApp(appId);\n    if (!currentRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    if (currentRecord.activeVersion === version) {\n      return {\n        appId,\n        activeVersion: version,\n        previousVersion: version,\n        enabled: currentRecord.enabled,\n        rolledBack: false,\n      };\n    }\n    const targetVersion = currentRecord.installedVersions[version];\n    if (!targetVersion) {\n      throw new Error(`应用 ${appId} 未安装版本 ${version}。`);\n    }\n    const targetManifest = await this.manifestService.load(targetVersion.installDirectory);\n    if (targetManifest.manifest.id !== appId || targetManifest.manifest.version !== version) {\n      throw new Error(`回滚目标 ${appId}@${version} 校验失败。`);\n    }\n    const appRecord = await this.registryService.activateVersion(appId, version);\n    return {\n      appId,\n      activeVersion: appRecord.activeVersion,\n      previousVersion: currentRecord.activeVersion,\n      enabled: appRecord.enabled,\n      rolledBack: true,\n    };\n  };\n\n  resolveLaunch = async (\n    appReference: string,\n    explicitDocumentGrantMap: AppDocumentGrantMap,\n  ): Promise<AppLaunchResolution> => {\n    const sourceType = await this.installSourceService.detectLocal(appReference, false);\n    if (sourceType.kind === \"directory\") {\n      return {\n        appDirectory: sourceType.appDirectory,\n        documentGrantMap: explicitDocumentGrantMap,\n      };\n    }\n    const appRecord = await this.registryService.getApp(appReference);\n    if (!appRecord) {\n      throw new Error(`未找到应用目录，也未找到已安装应用：${appReference}`);\n    }\n    const activeVersion = appRecord.installedVersions[appRecord.activeVersion];\n    if (!activeVersion) {\n      throw new Error(`已安装应用缺少激活版本：${appReference}`);\n    }\n    return {\n      appDirectory: activeVersion.installDirectory,\n      appId: appRecord.appId,\n      dataDirectory: appRecord.dataDirectory,\n      documentGrantMap: {\n        ...appRecord.grants,\n        ...explicitDocumentGrantMap,\n      },\n    };\n  };\n\n  persistGrants = async (\n    appId: string | undefined,\n    documentGrantMap: AppDocumentGrantMap,\n  ): Promise<void> => {\n    if (!appId || Object.keys(documentGrantMap).length === 0) {\n      return;\n    }\n    await this.registryService.updateGrants(appId, documentGrantMap);\n  };\n\n  private copyToImmutableInstallDirectory = async (params: {\n    appId: string;\n    appVersion: string;\n    extractedDirectory: string;\n    installDirectory: string;\n  }): Promise<void> => {\n    const { appId, appVersion, extractedDirectory, installDirectory } = params;\n    if (await this.pathExists(installDirectory)) {\n      throw new Error(`应用版本目录已存在，不能覆盖不可变版本：${appId}@${appVersion}`);\n    }\n    await mkdir(path.dirname(installDirectory), { recursive: true });\n    const stagedInstallDirectory = `${installDirectory}.staging-${randomUUID()}`;\n    try {\n      await cp(extractedDirectory, stagedInstallDirectory, { recursive: true });\n      const stagedManifest = await this.manifestService.load(stagedInstallDirectory);\n      if (\n        stagedManifest.manifest.id !== appId ||\n        stagedManifest.manifest.version !== appVersion\n      ) {\n        throw new Error(\"staging manifest 与已验证 bundle 身份不一致。\");\n      }\n      await rename(stagedInstallDirectory, installDirectory);\n    } catch (error) {\n      await rm(stagedInstallDirectory, { recursive: true, force: true });\n      throw error;\n    }\n  };\n\n  private materializeDistribution = async (params: {\n    appDirectory: string;\n    distributionMode: AppDistributionMode;\n  }): Promise<void> => {\n    if (params.distributionMode !== \"source\") {\n      return;\n    }\n    const manifestBundle = await this.manifestService.load(params.appDirectory);\n    if (!isAppStandaloneManifestBundle(manifestBundle)) {\n      throw new Error(\"schema v2 组合包不允许运行安装期 build。\");\n    }\n    if (manifestBundle.manifest.main.kind !== \"wasi-http-component\") {\n      return;\n    }\n    await this.buildService.build({\n      appDirectory: params.appDirectory,\n      install: true,\n    });\n  };\n\n  private reconcileGeneratedSiblings = async (\n    parentDirectory: string,\n    referencedPaths: Set<string>,\n  ): Promise<void> => {\n    for (const entry of await this.readDirectories(parentDirectory)) {\n      const entryName = path.basename(entry);\n      const stagingMarker = \".staging-\";\n      const uninstallingMarker = \".uninstalling-\";\n      if (entryName.includes(stagingMarker)) {\n        await rm(entry, { recursive: true, force: true });\n        continue;\n      }\n      const markerIndex = entryName.indexOf(uninstallingMarker);\n      if (markerIndex < 0) {\n        continue;\n      }\n      const originalPath = path.join(parentDirectory, entryName.slice(0, markerIndex));\n      if (referencedPaths.has(path.resolve(originalPath)) && !await this.pathExists(originalPath)) {\n        await rename(entry, originalPath);\n      } else {\n        await rm(entry, { recursive: true, force: true });\n      }\n    }\n  };\n\n  private readDirectories = async (directory: string): Promise<string[]> => {\n    try {\n      return (await readdir(directory, { withFileTypes: true }))\n        .filter((entry) => entry.isDirectory())\n        .map((entry) => path.join(directory, entry.name));\n    } catch (error) {\n      if (this.isMissingFileError(error)) {\n        return [];\n      }\n      throw error;\n    }\n  };\n\n  private pathExists = async (targetPath: string): Promise<boolean> => {\n    try {\n      await access(targetPath);\n      return true;\n    } catch {\n      return false;\n    }\n  };\n\n  private isMissingFileError = (error: unknown): boolean =>\n    typeof error === \"object\" && error !== null &&\n    \"code\" in error && (error as { code?: unknown }).code === \"ENOENT\";\n}\n"],"mappings":";;;;;;;;;;;;;AA6BA,IAAa,yBAAb,MAAoC;CAClC;CAEA,YACE,iBAAkD,IAAI,gBAAgB,EACtE,gBAAmD,IAAI,kBAAkB,EACzE,kBAAuD,IAAI,oBAAoB,EAC/E,eAAiD,IAAI,iBAAiB,EACtE,kBAAuD,IAAI,mBAAmB,eAAe,EAC7F,wBAAmE,IAAI,yBACrE,eACD,EACD,uBAAwE,IAAI,+BAC1E,IAAI,yBAAyB,eAAe,CAC7C,EACD;AAXiB,OAAA,iBAAA;AACA,OAAA,gBAAA;AACA,OAAA,kBAAA;AACA,OAAA,eAAA;AACA,OAAA,kBAAA;AACA,OAAA,wBAAA;AAGA,OAAA,uBAAA;AAIjB,OAAK,uBAAuB,IAAI,wBAC9B,KAAK,iBACL,KAAK,qBACN;;CAGH,UAAU,OACR,WACA,YAI8B;EAC9B,MAAM,EAAE,YAAY,gBAAgB,WAAW,EAAE;AACjD,QAAM,aAAa,YAAY;EAC/B,MAAM,SAAS,MAAM,KAAK,qBAAqB,QAAQ,WAAW,YAAY;EAC9E,MAAM,gBAAgB,MAAM,KAAK,eAAe,yBAAyB,gBAAgB;AACzF,MAAI;AACF,OAAI,OAAO,SAAS,WAClB,OAAM,aAAa,cAAc;GAEnC,MAAM,aACJ,OAAO,SAAS,eACX,MAAM,KAAK,cAAc,iBAAiB;IACzC,cAAc,OAAO;IACrB,YAAY,KAAK,KAAK,eAAe,WAAW;IACjD,CAAC,EAAE,aACJ,OAAO,SAAS,WACd,OAAO,cAEL,MAAM,KAAK,qBAAqB,eAAe;IAC7C,YAAY,OAAO;IACnB,iBAAiB;IAClB,CAAC,EACF;AACV,SAAM,aAAa,YAAY;GAC/B,MAAM,qBAAqB,KAAK,KAAK,eAAe,SAAS;GAC7D,MAAM,oBAAoB,MAAM,KAAK,cAAc,cAAc;IAC/D;IACA,iBAAiB;IAClB,CAAC;AACF,SAAM,KAAK,wBAAwB;IACjC,cAAc;IACd,kBAAkB,kBAAkB,SAAS;IAC9C,CAAC;GACF,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,KAAK,mBAAmB;GAC1E,MAAM,mBAAmB,KAAK,eAAe,oBAC3C,eAAe,SAAS,IACxB,eAAe,SAAS,QACzB;AACD,OACE,OAAO,SAAS,cAChB,eAAe,SAAS,OAAO,OAAO,mBAAmB,MAEzD,OAAM,IAAI,MACR,6CAA6C,OAAO,mBAAmB,MAAM,MAAM,eAAe,SAAS,KAC5G;AAEH,SAAM,aAAa,aAAa;GAChC,MAAM,gBAAgB,KAAK,eAAe,oBAAoB,eAAe,SAAS,GAAG;AACzF,SAAM,KAAK,gCAAgC;IACzC,OAAO,eAAe,SAAS;IAC/B,YAAY,eAAe,SAAS;IACpC;IACA;IACD,CAAC;AACF,SAAM,MAAM,eAAe,EAAE,WAAW,MAAM,CAAC;AAC/C,SAAM,aAAa,aAAa;GAChC,IAAI;AACJ,OAAI;AACF,qBAAiB,MAAM,KAAK,gBAAgB,mBAAmB;KAC7D,OAAO,eAAe,SAAS;KAC/B,MAAM,eAAe,SAAS;KAC9B,aAAa,eAAe,SAAS;KACrC,SAAS,eAAe,SAAS;KACjC;KACA;KACA,YAAY,OAAO;KACnB,kBACE,OAAO,SAAS,aACZ,OAAO,mBAAmB,mBAC1B,kBAAkB,SAAS;KACjC,WAAW,OAAO;KAClB,8BAAa,IAAI,MAAM,EAAC,aAAa;KACrC,aAAa,eAAe,SAAS,kBAAkB,IACnD,eAAe,SAAS,eAAe,EAAE,GACzC,EAAE;KACN,aACE,OAAO,SAAS,aAAa,OAAO,mBAAmB,cAAc,KAAA;KACvE,WACE,OAAO,SAAS,aAAa,OAAO,mBAAmB,YAAY,KAAA;KACrE,QAAQ,OAAO,SAAS,aAAa,OAAO,mBAAmB,SAAS,KAAA;KACxE,WACE,OAAO,SAAS,aAAa,OAAO,mBAAmB,YAAY,KAAA;KACrE,uBAAuB,eAAe,SAAS;KAC/C,YAAY,6BAA6B,eAAe,GACpD,eAAe,WAAW,KAAK,eAAe;MAC5C,GAAG;MACH,oBAAoB,KAAK,KAAK,kBAAkB,UAAU,KAAK;MAC/D,cAAc,KAAK,KACjB,kBACA,UAAU,MACV,UAAU,SAAS,UAAU,mBAAmB,mBACjD;MACF,EAAE,GACH,KAAA;KACJ,gBAAgB,6BAA6B,eAAe,GACxD,eAAe,iBACf,KAAA;KACL,CAAC;YACK,OAAO;AACd,UAAM,GAAG,kBAAkB;KAAE,WAAW;KAAM,OAAO;KAAM,CAAC;AAC5D,UAAM;;GAER,MAAM,sBAAsB,eAAe,kBAAkB,eAAe;AAC5E,UAAO;IACL,OAAO,eAAe;IACtB,MAAM,eAAe;IACrB,SAAS,eAAe;IACxB;IACA;IACA,YAAY,OAAO;IACnB,WAAW,OAAO;IAClB,kBACE,eAAe,kBAAkB,eAAe,gBAAgB;IAClE,aACE,eAAe,kBAAkB,eAAe,gBAAgB,eAAe,EAAE;IACnF,aACE,eAAe,kBAAkB,eAAe,gBAAgB;IAClE,WACE,eAAe,kBAAkB,eAAe,gBAAgB;IAClE,QAAQ,eAAe,kBAAkB,eAAe,gBAAgB;IACxE,WACE,eAAe,kBAAkB,eAAe,gBAAgB;IAClE,SAAS,eAAe;IACxB,uBAAuB,qBAAqB,yBAAyB;IACrE,YAAY,qBAAqB;IACjC,gBAAgB,qBAAqB;IACtC;YACO;AACR,SAAM,GAAG,eAAe;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;;;CAI7D,SAAS,OACP,OACA,YAK6B;EAC7B,MAAM,EAAE,YAAY,aAAa,sBAAsB,YAAY,WAAW,EAAE;AAChF,QAAM,aAAa,YAAY;EAC/B,MAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO,MAAM;AAC1D,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;EAEtC,MAAM,sBAAsB,UAAU,kBAAkB,UAAU;EAClE,MAAM,cACJ,wBACA,qBAAqB,gBACpB,MAAM,KAAK,sBAAsB,aAAa,EAAE;EACnD,MAAM,aAAa,MAAM,KAAK,qBAAqB,QAAQ;GACzD;GACA;GACA;GACD,CAAC;AACF,MAAI,WAAW,YAAY,UAAU,eAAe;AAClD,OAAI,CAAC,oBACH,OAAM,IAAI,MAAM,eAAe,QAAQ;AAEzC,UAAO;IACL,OAAO,UAAU;IACjB,MAAM,UAAU;IAChB,SAAS,UAAU;IACnB,iBAAiB,UAAU;IAC3B,kBAAkB,oBAAoB;IACtC,eAAe,UAAU;IACzB,YAAY,oBAAoB;IAChC,WAAW,oBAAoB;IAC/B,aAAa,oBAAoB;IACjC,aAAa,oBAAoB;IACjC,WAAW,oBAAoB;IAC/B,QAAQ,oBAAoB;IAC5B,WAAW,oBAAoB;IAC/B,SAAS,UAAU;IACnB,uBAAuB,oBAAoB;IAC3C,YAAY,oBAAoB;IAChC,gBAAgB,oBAAoB;IACpC,SAAS;IACV;;EAEH,MAAM,kBAAkB,UAAU,kBAAkB,WAAW;AAC/D,MAAI,iBAAiB;AACnB,SAAM,aAAa,YAAY;AAC/B,SAAM,aAAa,aAAa;AAChC,SAAM,KAAK,SAAS,OAAO,WAAW,QAAQ;AAC9C,SAAM,aAAa,aAAa;AAChC,UAAO;IACL,OAAO,UAAU;IACjB,MAAM,UAAU;IAChB,SAAS,WAAW;IACpB,iBAAiB,UAAU;IAC3B,kBAAkB,gBAAgB;IAClC,eAAe,UAAU;IACzB,YAAY,gBAAgB;IAC5B,kBAAkB,gBAAgB;IAClC,WAAW,gBAAgB;IAC3B,aAAa,gBAAgB;IAC7B,aAAa,gBAAgB;IAC7B,WAAW,gBAAgB;IAC3B,QAAQ,gBAAgB;IACxB,WAAW,gBAAgB;IAC3B,SAAS,UAAU;IACnB,uBAAuB,gBAAgB;IACvC,YAAY,gBAAgB;IAC5B,gBAAgB,gBAAgB;IAChC,SAAS;IACV;;AAMH,SAAO;GACL,GALoB,MAAM,KAAK,QAAQ,GAAG,MAAM,GAAG,WAAW,WAAW;IACzE;IACA;IACD,CAAC;GAGA,iBAAiB,UAAU;GAC3B,SAAS;GACV;;CAGH,YAAY,OACV,OACA,cACgC;EAChC,MAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO,MAAM;AAC1D,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;EAEtC,MAAM,kBAAkB,OAAO,KAAK,UAAU,kBAAkB,CAAC,MAAM,MAAM,UAC3E,KAAK,cAAc,MAAM,CAC1B;EACD,MAAM,cAAmE,EAAE;EAC3E,MAAM,YAAY,OAAO,iBAAwC;AAC/D,OAAI,CAAC,MAAM,KAAK,WAAW,aAAa,CACtC;GAEF,MAAM,aAAa,GAAG,aAAa,gBAAgB,YAAY;AAC/D,SAAM,OAAO,cAAc,WAAW;AACtC,eAAY,KAAK;IAAE;IAAc;IAAY,CAAC;;EAEhD,MAAM,qBAAqB,YAA2B;AACpD,QAAK,MAAM,SAAS,CAAC,GAAG,YAAY,CAAC,SAAS,CAC5C,KAAI,MAAM,KAAK,WAAW,MAAM,WAAW,CACzC,OAAM,OAAO,MAAM,YAAY,MAAM,aAAa;;AAIxD,MAAI;AACF,QAAK,MAAM,iBAAiB,OAAO,OAAO,UAAU,kBAAkB,CACpE,OAAM,UAAU,cAAc,iBAAiB;AAEjD,OAAI,UACF,OAAM,UAAU,UAAU,cAAc;AAG1C,OAAI,CADkB,MAAM,KAAK,gBAAgB,UAAU,MAAM,CAE/D,OAAM,IAAI,MAAM,kBAAkB,QAAQ;WAErC,OAAO;AACd,OAAI;AACF,UAAM,oBAAoB;YACnB,cAAc;AACrB,UAAM,IAAI,eACR,CAAC,OAAO,aAAa,EACrB,MAAM,MAAM,mBACb;;AAEH,SAAM;;AAER,QAAM,QAAQ,IAAI,YAAY,KAAK,UACjC,GAAG,MAAM,YAAY;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC,CACvD,CAAC;AACF,SAAO;GACL;GACA;GACA,aAAa;GACd;;CAGH,OAAO,YAA6C;AAElD,UADmB,MAAM,KAAK,gBAAgB,UAAU,EACtC,KAAK,eAAe;GACpC,OAAO,UAAU;GACjB,MAAM,UAAU;GAChB,eAAe,UAAU;GACzB,YACE,UAAU,kBAAkB,UAAU,gBAAgB,cAAc;GACtE,kBACE,UAAU,kBAAkB,UAAU,gBAAgB;GACxD,SAAS,UAAU;GACnB,uBACE,UAAU,kBAAkB,UAAU,gBAAgB,yBAAyB;GACjF,gBACE,UAAU,kBAAkB,UAAU,gBAAgB;GACzD,EAAE;;CAGL,sBAAsB,YAA2B;AAC/C,QAAM,KAAK,eAAe,uBAAuB;EACjD,MAAM,aAAa,MAAM,KAAK,gBAAgB,UAAU;EACxD,MAAM,yBAAyB,IAAI,IAAI,WAAW,SAAS,WACzD,OAAO,OAAO,OAAO,kBAAkB,CAAC,KAAK,YAAY,KAAK,QAAQ,QAAQ,iBAAiB,CAAC,CAAC,CAAC;EACpG,MAAM,sBAAsB,IAAI,IAAI,WAAW,KAAK,WAAW,KAAK,QAAQ,OAAO,cAAc,CAAC,CAAC;EAEnG,MAAM,qBAAqB,MAAM,KAAK,gBAAgB,KAAK,eAAe,sBAAsB,CAAC;AACjG,OAAK,MAAM,gBAAgB,mBACzB,OAAM,KAAK,2BAA2B,cAAc,uBAAuB;AAE7E,QAAM,KAAK,2BACT,KAAK,eAAe,kBAAkB,EACtC,oBACD;;CAGH,OAAO,OAAO,UAA0C;EACtD,MAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO,MAAM;AAC1D,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;EAEtC,MAAM,oBAAoB,OAAO,OAAO,UAAU,kBAAkB,CAAC,MAAM,MAAM,UAC/E,KAAK,QAAQ,cAAc,MAAM,QAAQ,CAC1C;AACD,SAAO;GACL,OAAO,UAAU;GACjB,MAAM,UAAU;GAChB,aAAa,UAAU;GACvB,eAAe,UAAU;GACzB,SAAS,UAAU;GACnB,eAAe,UAAU;GACzB,mBAAmB,kBAAkB,KAAK,mBAAmB;IAC3D,SAAS,cAAc;IACvB,kBAAkB,cAAc;IAChC,YAAY,cAAc;IAC1B,kBAAkB,cAAc;IAChC,WAAW,cAAc;IACzB,aAAa,cAAc;IAC3B,aAAa,cAAc;IAC3B,aAAa,cAAc;IAC3B,WAAW,cAAc;IACzB,QAAQ,cAAc;IACtB,WAAW,cAAc;IACzB,uBAAuB,cAAc;IACrC,YAAY,cAAc;IAC1B,gBAAgB,cAAc;IAC/B,EAAE;GACH,QAAQ,UAAU;GACnB;;CAGH,aAAa,OAAO,OAAe,YAAmD;EACpF,MAAM,YAAY,MAAM,KAAK,gBAAgB,WAAW,OAAO,QAAQ;AACvE,SAAO;GACL,OAAO,UAAU;GACjB,eAAe,UAAU;GACzB,SAAS,UAAU;GACpB;;CAGH,WAAW,OAAO,OAAe,YAAgD;EAC/E,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,OAAO,MAAM;AAC9D,MAAI,CAAC,cACH,OAAM,IAAI,MAAM,YAAY,QAAQ;AAEtC,MAAI,cAAc,kBAAkB,QAClC,QAAO;GACL;GACA,eAAe;GACf,iBAAiB;GACjB,SAAS,cAAc;GACvB,YAAY;GACb;EAEH,MAAM,gBAAgB,cAAc,kBAAkB;AACtD,MAAI,CAAC,cACH,OAAM,IAAI,MAAM,MAAM,MAAM,SAAS,QAAQ,GAAG;EAElD,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,KAAK,cAAc,iBAAiB;AACtF,MAAI,eAAe,SAAS,OAAO,SAAS,eAAe,SAAS,YAAY,QAC9E,OAAM,IAAI,MAAM,QAAQ,MAAM,GAAG,QAAQ,QAAQ;EAEnD,MAAM,YAAY,MAAM,KAAK,gBAAgB,gBAAgB,OAAO,QAAQ;AAC5E,SAAO;GACL;GACA,eAAe,UAAU;GACzB,iBAAiB,cAAc;GAC/B,SAAS,UAAU;GACnB,YAAY;GACb;;CAGH,gBAAgB,OACd,cACA,6BACiC;EACjC,MAAM,aAAa,MAAM,KAAK,qBAAqB,YAAY,cAAc,MAAM;AACnF,MAAI,WAAW,SAAS,YACtB,QAAO;GACL,cAAc,WAAW;GACzB,kBAAkB;GACnB;EAEH,MAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO,aAAa;AACjE,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,qBAAqB,eAAe;EAEtD,MAAM,gBAAgB,UAAU,kBAAkB,UAAU;AAC5D,MAAI,CAAC,cACH,OAAM,IAAI,MAAM,eAAe,eAAe;AAEhD,SAAO;GACL,cAAc,cAAc;GAC5B,OAAO,UAAU;GACjB,eAAe,UAAU;GACzB,kBAAkB;IAChB,GAAG,UAAU;IACb,GAAG;IACJ;GACF;;CAGH,gBAAgB,OACd,OACA,qBACkB;AAClB,MAAI,CAAC,SAAS,OAAO,KAAK,iBAAiB,CAAC,WAAW,EACrD;AAEF,QAAM,KAAK,gBAAgB,aAAa,OAAO,iBAAiB;;CAGlE,kCAA0C,OAAO,WAK5B;EACnB,MAAM,EAAE,OAAO,YAAY,oBAAoB,qBAAqB;AACpE,MAAI,MAAM,KAAK,WAAW,iBAAiB,CACzC,OAAM,IAAI,MAAM,uBAAuB,MAAM,GAAG,aAAa;AAE/D,QAAM,MAAM,KAAK,QAAQ,iBAAiB,EAAE,EAAE,WAAW,MAAM,CAAC;EAChE,MAAM,yBAAyB,GAAG,iBAAiB,WAAW,YAAY;AAC1E,MAAI;AACF,SAAM,GAAG,oBAAoB,wBAAwB,EAAE,WAAW,MAAM,CAAC;GACzE,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,KAAK,uBAAuB;AAC9E,OACE,eAAe,SAAS,OAAO,SAC/B,eAAe,SAAS,YAAY,WAEpC,OAAM,IAAI,MAAM,sCAAsC;AAExD,SAAM,OAAO,wBAAwB,iBAAiB;WAC/C,OAAO;AACd,SAAM,GAAG,wBAAwB;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;AAClE,SAAM;;;CAIV,0BAAkC,OAAO,WAGpB;AACnB,MAAI,OAAO,qBAAqB,SAC9B;EAEF,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,KAAK,OAAO,aAAa;AAC3E,MAAI,CAAC,8BAA8B,eAAe,CAChD,OAAM,IAAI,MAAM,+BAA+B;AAEjD,MAAI,eAAe,SAAS,KAAK,SAAS,sBACxC;AAEF,QAAM,KAAK,aAAa,MAAM;GAC5B,cAAc,OAAO;GACrB,SAAS;GACV,CAAC;;CAGJ,6BAAqC,OACnC,iBACA,oBACkB;AAClB,OAAK,MAAM,SAAS,MAAM,KAAK,gBAAgB,gBAAgB,EAAE;GAC/D,MAAM,YAAY,KAAK,SAAS,MAAM;GACtC,MAAM,gBAAgB;GACtB,MAAM,qBAAqB;AAC3B,OAAI,UAAU,SAAS,cAAc,EAAE;AACrC,UAAM,GAAG,OAAO;KAAE,WAAW;KAAM,OAAO;KAAM,CAAC;AACjD;;GAEF,MAAM,cAAc,UAAU,QAAQ,mBAAmB;AACzD,OAAI,cAAc,EAChB;GAEF,MAAM,eAAe,KAAK,KAAK,iBAAiB,UAAU,MAAM,GAAG,YAAY,CAAC;AAChF,OAAI,gBAAgB,IAAI,KAAK,QAAQ,aAAa,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,aAAa,CACzF,OAAM,OAAO,OAAO,aAAa;OAEjC,OAAM,GAAG,OAAO;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;;;CAKvD,kBAA0B,OAAO,cAAyC;AACxE,MAAI;AACF,WAAQ,MAAM,QAAQ,WAAW,EAAE,eAAe,MAAM,CAAC,EACtD,QAAQ,UAAU,MAAM,aAAa,CAAC,CACtC,KAAK,UAAU,KAAK,KAAK,WAAW,MAAM,KAAK,CAAC;WAC5C,OAAO;AACd,OAAI,KAAK,mBAAmB,MAAM,CAChC,QAAO,EAAE;AAEX,SAAM;;;CAIV,aAAqB,OAAO,eAAyC;AACnE,MAAI;AACF,SAAM,OAAO,WAAW;AACxB,UAAO;UACD;AACN,UAAO;;;CAIX,sBAA8B,UAC5B,OAAO,UAAU,YAAY,UAAU,QACvC,UAAU,SAAU,MAA6B,SAAS"}
+{"version":3,"file":"app-installation.service.js","names":[],"sources":["../../src/services/app-installation.service.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"node:async_hooks\";\nimport { rm } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { AppBundleService } from \"#app-runtime/services/app-bundle.service.js\";\nimport { AppManifestService } from \"#app-runtime/services/app-manifest.service.js\";\nimport { isAppComponentManifestBundle } from \"#app-runtime/types/app-manifest.types.js\";\nimport type { AppManifestBundle } from \"#app-runtime/types/app-manifest.types.js\";\nimport { AppHomeService } from \"#app-runtime/services/app-home.service.js\";\nimport { AppInstanceStorageService } from \"#app-runtime/services/app-instance-storage.service.js\";\nimport { AppInstallationIntegrityService } from \"#app-runtime/services/app-installation-integrity.service.js\";\nimport { AppInstallationFilesystemService } from \"#app-runtime/services/app-installation-filesystem.service.js\";\nimport { AppInstallationLifecycleService } from \"#app-runtime/services/app-installation-lifecycle.service.js\";\nimport { FileLockService } from \"#app-runtime/services/file-lock.service.js\";\nimport { AppBuildService } from \"#app-runtime/services/app-build.service.js\";\nimport type { AppBundleExtractResult } from \"#app-runtime/types/app-bundle.types.js\";\nimport type { AppDocumentGrantMap } from \"#app-runtime/types/app-permissions.types.js\";\nimport type { AppPublisher } from \"#app-runtime/types/app-remote-registry.types.js\";\nimport { AppRegistryConfigService } from \"#app-runtime/services/app-registry-config.service.js\";\nimport { AppRemoteRegistryClientService } from \"#app-runtime/services/app-remote-registry-client.service.js\";\nimport { AppRegistryService } from \"#app-runtime/services/app-registry.service.js\";\nimport {\n  AppInstallSourceService,\n  type ResolvedAppInstallSource,\n} from \"#app-runtime/services/app-install-source.service.js\";\nimport type {\n  AppInfoResult,\n  AppInstallProgressHandler,\n  AppActivationResult,\n  AppInstallResult,\n  AppLaunchResolution,\n  AppUpdateResult,\n  AppRollbackResult,\n  AppUninstallResult,\n  InstalledAppListItem,\n} from \"#app-runtime/types/app-installation.types.js\";\n\nconst SAFE_APP_ID_PATTERN = /^[a-z0-9]+(?:[.-][a-z0-9]+)*$/;\n\ntype AppInstallOptions = {\n  registryUrl?: string;\n  onProgress?: AppInstallProgressHandler;\n  activate?: boolean;\n  trustedPublisher?: AppPublisher;\n};\n\ntype PreparedAppInstall = {\n  source: ResolvedAppInstallSource;\n  extractedDirectory: string;\n  extractedMetadata: AppBundleExtractResult;\n  manifestBundle: AppManifestBundle;\n  options: AppInstallOptions;\n};\n\nexport class AppInstallationService {\n  private readonly installSourceService: AppInstallSourceService;\n  private readonly instanceStorageService: AppInstanceStorageService;\n  private readonly fileLockService = new FileLockService();\n  private readonly integrityService: AppInstallationIntegrityService;\n  private readonly filesystemService: AppInstallationFilesystemService;\n  private readonly lifecycleService: AppInstallationLifecycleService;\n  private readonly appOperationContext = new AsyncLocalStorage<ReadonlySet<string>>();\n\n  constructor(\n    private readonly appHomeService: AppHomeService = new AppHomeService(),\n    private readonly bundleService: AppBundleService = new AppBundleService(),\n    private readonly manifestService: AppManifestService = new AppManifestService(),\n    private readonly buildService: AppBuildService = new AppBuildService(),\n    private readonly registryService: AppRegistryService = new AppRegistryService(appHomeService),\n    private readonly registryConfigService: AppRegistryConfigService = new AppRegistryConfigService(\n      appHomeService,\n    ),\n    private readonly remoteRegistryClient: AppRemoteRegistryClientService = new AppRemoteRegistryClientService(\n      new AppRegistryConfigService(appHomeService),\n    ),\n    instanceStorageService?: AppInstanceStorageService,\n  ) {\n    this.installSourceService = new AppInstallSourceService(\n      this.manifestService,\n      this.remoteRegistryClient,\n      this.bundleService,\n    );\n    this.instanceStorageService = instanceStorageService ?? new AppInstanceStorageService(appHomeService);\n    this.integrityService = new AppInstallationIntegrityService(manifestService);\n    this.filesystemService = new AppInstallationFilesystemService({\n      buildService,\n      integrityService: this.integrityService,\n      manifestService,\n    });\n    this.lifecycleService = new AppInstallationLifecycleService({\n      registryService,\n      registryConfigService,\n      remoteRegistryClient,\n      instanceStorageService: this.instanceStorageService,\n      integrityService: this.integrityService,\n      install: this.install,\n      rollback: this.rollback,\n    });\n  }\n\n  install = async (\n    appSource: string,\n    options: AppInstallOptions = {},\n  ): Promise<AppInstallResult> => {\n    const { onProgress, registryUrl } = options;\n    await onProgress?.(\"resolving\");\n    const source = await this.installSourceService.resolve(appSource, registryUrl);\n    const tempDirectory = await this.appHomeService.createTemporaryDirectory(\"napp-install-\");\n    try {\n      const bundlePath = await this.installSourceService.materializeBundle(\n        source,\n        tempDirectory,\n        onProgress,\n      );\n      await onProgress?.(\"verifying\");\n      const extractedDirectory = path.join(tempDirectory, \"bundle\");\n      const extractedMetadata = await this.bundleService.extractBundle({\n        bundlePath,\n        targetDirectory: extractedDirectory,\n      });\n      await this.filesystemService.materializeDistribution({\n        appDirectory: extractedDirectory,\n        distributionMode: extractedMetadata.metadata.distributionMode,\n      });\n      const manifestBundle = await this.manifestService.load(extractedDirectory);\n      return await this.installPreparedBundle({\n        source,\n        extractedDirectory,\n        extractedMetadata,\n        manifestBundle,\n        options,\n      });\n    } finally {\n      await rm(tempDirectory, { recursive: true, force: true });\n    }\n  };\n\n  private installPreparedBundle = async (\n    prepared: PreparedAppInstall,\n  ): Promise<AppInstallResult> => {\n    const appId = prepared.manifestBundle.manifest.id;\n    return await this.withAppOperation(\n      appId,\n      async () => await this.commitPreparedInstall(prepared),\n    );\n  };\n\n  private commitPreparedInstall = async (\n    prepared: PreparedAppInstall,\n  ): Promise<AppInstallResult> => {\n    const { extractedDirectory, extractedMetadata, manifestBundle, options, source } = prepared;\n    const { onProgress } = options;\n    const { id: appId, version } = manifestBundle.manifest;\n    const installDirectory = this.appHomeService.getInstallDirectory(appId, version);\n    if (source.kind === \"registry\" && appId !== source.registryResolution.appId) {\n      throw new Error(\n        `bundle manifest.appId 与 registry 请求不一致：期望 ${source.registryResolution.appId}，实际 ${appId}`,\n      );\n    }\n    await onProgress?.(\"installing\");\n    const existingRecord = await this.registryService.getApp(appId);\n    const publisher = source.kind === \"registry\"\n      ? source.registryResolution.publisher\n      : options.trustedPublisher;\n    const currentPublisher = existingRecord?.publisher ??\n      existingRecord?.installedVersions[existingRecord.activeVersion]?.publisher;\n    if (currentPublisher && currentPublisher.id !== publisher?.id) {\n      throw new Error(\n        `应用 ${appId} 已绑定发布者 ${currentPublisher.id}，拒绝由 ${publisher?.id ?? \"未验证本地来源\"} 覆盖。`,\n      );\n    }\n    const dataSchemaVersion = manifestBundle.manifest.schemaVersion === 2\n      ? manifestBundle.manifest.storage?.schemaVersion ?? 1\n      : 1;\n    if (existingRecord?.defaultInstance.dataSchemaVersion !== undefined &&\n      existingRecord.defaultInstance.dataSchemaVersion !== dataSchemaVersion) {\n      throw new Error(\n        `应用 ${appId} 数据 schema 从 ${existingRecord.defaultInstance.dataSchemaVersion} 升级到 ${dataSchemaVersion}，但包内没有受支持的迁移合同。更新已停止，现有数据和版本保持不变。`,\n      );\n    }\n    const instanceDirectory = this.appHomeService.getAppInstanceDirectory(appId, \"default\");\n    const instanceExisted = await this.integrityService.pathExists(instanceDirectory);\n    const contentSha256 = await this.filesystemService.copyToImmutableInstallDirectory({\n      appId,\n      appVersion: version,\n      extractedDirectory,\n      installDirectory,\n    });\n    const defaultInstance = await this.instanceStorageService.materializeDefaultInstance({\n      appId,\n      publisherId: (currentPublisher ?? publisher)?.id,\n      legacyDataDirectory: existingRecord?.defaultInstance.storage.layout === \"legacy\"\n        ? existingRecord.dataDirectory\n        : undefined,\n      dataSchemaVersion,\n    });\n    await onProgress?.(\"finalizing\");\n    let registryRecord;\n    try {\n      registryRecord = await this.registryService.upsertInstallation({\n        appId,\n        name: manifestBundle.manifest.name,\n        description: manifestBundle.manifest.description,\n        version,\n        installDirectory,\n        defaultInstance,\n        sourceKind: source.kind,\n        distributionMode: source.kind === \"registry\"\n          ? source.registryResolution.distributionMode\n          : extractedMetadata.metadata.distributionMode,\n        sourceRef: source.sourceRef,\n        installedAt: new Date().toISOString(),\n        permissions: manifestBundle.manifest.schemaVersion === 1\n          ? manifestBundle.manifest.permissions ?? {}\n          : this.manifestService.resolvePlatformSecurity(manifestBundle.manifest).permissions,\n        registryUrl: source.kind === \"registry\"\n          ? source.registryResolution.registryUrl\n          : undefined,\n        bundleUrl: source.kind === \"registry\" ? source.registryResolution.bundleUrl : undefined,\n        sha256: source.kind === \"registry\" ? source.registryResolution.sha256 : undefined,\n        publisher,\n        manifestSchemaVersion: manifestBundle.manifest.schemaVersion,\n        components: isAppComponentManifestBundle(manifestBundle)\n          ? manifestBundle.components.map((component) => ({\n              ...component,\n              componentDirectory: path.join(installDirectory, component.path),\n              manifestPath: path.join(\n                installDirectory,\n                component.path,\n                component.kind === \"panel\" ? \"panel-app.json\" : \"service-app.json\",\n              ),\n            }))\n          : undefined,\n        primaryPanelId: isAppComponentManifestBundle(manifestBundle)\n          ? manifestBundle.primaryPanelId\n          : undefined,\n        security: isAppComponentManifestBundle(manifestBundle)\n          ? this.manifestService.resolvePlatformSecurity(manifestBundle.manifest)\n          : undefined,\n        dataSchemaVersion,\n        contentSha256,\n        activate: options.activate,\n      });\n    } catch (error) {\n      await this.integrityService.removeDirectory(installDirectory);\n      if (!instanceExisted) {\n        await this.instanceStorageService.rollbackNewInstance({\n          instance: defaultInstance,\n          legacyDataDirectory: existingRecord?.defaultInstance.storage.layout === \"legacy\"\n            ? existingRecord.dataDirectory\n            : undefined,\n        });\n      }\n      throw error;\n    }\n    const installedVersion = registryRecord.installedVersions[version];\n    return {\n      appId: registryRecord.appId,\n      name: registryRecord.name,\n      version,\n      installDirectory,\n      dataDirectory: defaultInstance.storage.dataDirectory,\n      instance: registryRecord.defaultInstance,\n      sourceKind: source.kind,\n      sourceRef: source.sourceRef,\n      distributionMode: installedVersion?.distributionMode,\n      permissions: installedVersion?.permissions ?? {},\n      registryUrl: installedVersion?.registryUrl,\n      bundleUrl: installedVersion?.bundleUrl,\n      sha256: installedVersion?.sha256,\n      publisher: installedVersion?.publisher,\n      enabled: registryRecord.enabled,\n      manifestSchemaVersion: installedVersion?.manifestSchemaVersion ?? 1,\n      components: installedVersion?.components,\n      primaryPanelId: installedVersion?.primaryPanelId,\n    };\n  };\n\n  update = async (\n    appId: string,\n    options?: {\n      version?: string;\n      registryUrl?: string;\n      onProgress?: AppInstallProgressHandler;\n      activate?: boolean;\n    },\n  ): Promise<AppUpdateResult> => {\n    return await this.withAppOperation(\n      appId,\n      async () => await this.lifecycleService.update(appId, options),\n    );\n  };\n\n  uninstall = async (\n    appId: string,\n    purgeData: boolean,\n  ): Promise<AppUninstallResult> => {\n    return await this.withAppOperation(\n      appId,\n      async () => await this.lifecycleService.uninstall(appId, purgeData),\n    );\n  };\n\n  list = async (): Promise<InstalledAppListItem[]> => {\n    const appRecords = await this.registryService.listApps();\n    return appRecords.map((appRecord) => ({\n      appId: appRecord.appId,\n      name: appRecord.name,\n      activeVersion: appRecord.activeVersion,\n      sourceKind:\n        appRecord.installedVersions[appRecord.activeVersion]?.sourceKind ?? \"directory\",\n      distributionMode:\n        appRecord.installedVersions[appRecord.activeVersion]?.distributionMode,\n      enabled: appRecord.enabled,\n      manifestSchemaVersion:\n        appRecord.installedVersions[appRecord.activeVersion]?.manifestSchemaVersion ?? 1,\n      primaryPanelId:\n        appRecord.installedVersions[appRecord.activeVersion]?.primaryPanelId,\n    }));\n  };\n\n  reconcileFilesystem = async (): Promise<void> => {\n    await this.appHomeService.ensureBaseDirectories();\n    let appRecords = await this.registryService.listApps();\n    for (const appRecord of appRecords) {\n      await this.withAppOperation(appRecord.appId, async () => {\n        for (const versionRecord of Object.values(appRecord.installedVersions)) {\n          if (!await this.integrityService.pathExists(versionRecord.installDirectory)) {\n            continue;\n          }\n          if (!versionRecord.contentSha256) {\n            const contentSha256 = await this.integrityService.calculateDigest(\n              versionRecord.installDirectory,\n            );\n            await this.registryService.setVersionContentDigest(\n              appRecord.appId,\n              versionRecord.version,\n              contentSha256,\n            );\n          }\n          await this.integrityService.protectDirectory(versionRecord.installDirectory);\n        }\n      });\n    }\n    appRecords = await this.registryService.listApps();\n    const referencedInstallPaths = new Set(appRecords.flatMap((record) =>\n      Object.values(record.installedVersions).map((version) => path.resolve(version.installDirectory))));\n    const referencedDataPaths = new Set(appRecords.map((record) => path.resolve(\n      record.defaultInstance.storage.layout === \"instance-v1\"\n        ? record.defaultInstance.storage.instanceDirectory\n        : record.dataDirectory,\n    )));\n\n    const packageDirectories = await this.filesystemService.readDirectories(\n      this.appHomeService.getPackagesDirectory(),\n    );\n    for (const appDirectory of packageDirectories) {\n      await this.filesystemService.reconcileGeneratedSiblings(appDirectory, referencedInstallPaths);\n    }\n    await this.filesystemService.reconcileGeneratedSiblings(\n      this.appHomeService.getDataDirectory(),\n      referencedDataPaths,\n    );\n    for (const appRecord of appRecords) {\n      if (appRecord.defaultInstance.storage.layout !== \"instance-v1\") {\n        continue;\n      }\n      await this.filesystemService.reconcileGeneratedSiblings(\n        appRecord.defaultInstance.storage.instanceDirectory,\n        new Set([path.resolve(appRecord.defaultInstance.storage.dataDirectory)]),\n      );\n    }\n    for (const appRecord of appRecords) {\n      if (appRecord.defaultInstance.storage.layout !== \"legacy\") {\n        continue;\n      }\n      await this.withAppOperation(appRecord.appId, async () => {\n        const currentRecord = await this.registryService.getApp(appRecord.appId);\n        if (!currentRecord || currentRecord.defaultInstance.storage.layout !== \"legacy\") {\n          return;\n        }\n        const activeVersion = currentRecord.installedVersions[currentRecord.activeVersion];\n        if (!activeVersion) {\n          throw new Error(`已安装应用缺少激活版本：${currentRecord.appId}`);\n        }\n        const instance = await this.instanceStorageService.materializeDefaultInstance({\n          appId: currentRecord.appId,\n          publisherId: currentRecord.publisher?.id,\n          legacyDataDirectory: currentRecord.dataDirectory,\n          dataSchemaVersion: currentRecord.defaultInstance.dataSchemaVersion,\n        });\n        try {\n          await this.registryService.upsertInstallation({\n            appId: currentRecord.appId,\n            name: currentRecord.name,\n            description: currentRecord.description,\n            version: currentRecord.activeVersion,\n            installDirectory: activeVersion.installDirectory,\n            defaultInstance: instance,\n            sourceKind: activeVersion.sourceKind,\n            sourceRef: activeVersion.sourceRef,\n            installedAt: activeVersion.installedAt,\n            distributionMode: activeVersion.distributionMode,\n            permissions: activeVersion.permissions,\n            registryUrl: activeVersion.registryUrl,\n            bundleUrl: activeVersion.bundleUrl,\n            sha256: activeVersion.sha256,\n            publisher: currentRecord.publisher ?? activeVersion.publisher,\n            manifestSchemaVersion: activeVersion.manifestSchemaVersion,\n            components: activeVersion.components,\n            primaryPanelId: activeVersion.primaryPanelId,\n            security: activeVersion.security,\n            dataSchemaVersion: activeVersion.dataSchemaVersion,\n            contentSha256: activeVersion.contentSha256,\n            enabled: currentRecord.enabled,\n          });\n        } catch (error) {\n          await this.instanceStorageService.rollbackNewInstance({\n            instance,\n            legacyDataDirectory: currentRecord.dataDirectory,\n          });\n          throw error;\n        }\n      });\n    }\n  };\n\n  info = async (appId: string): Promise<AppInfoResult> => {\n    const appRecord = await this.registryService.getApp(appId);\n    if (!appRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    const installedVersions = Object.values(appRecord.installedVersions).sort((left, right) =>\n      left.version.localeCompare(right.version),\n    );\n    return {\n      appId: appRecord.appId,\n      name: appRecord.name,\n      description: appRecord.description,\n      activeVersion: appRecord.activeVersion,\n      enabled: appRecord.enabled,\n      dataDirectory: appRecord.dataDirectory,\n      instance: appRecord.defaultInstance,\n      storage: appRecord.defaultInstance.storage,\n      storageUsage: await this.instanceStorageService.measureUsage(\n        appRecord.defaultInstance.storage,\n      ),\n      installedVersions: installedVersions.map((versionRecord) => ({\n        version: versionRecord.version,\n        installDirectory: versionRecord.installDirectory,\n        sourceKind: versionRecord.sourceKind,\n        distributionMode: versionRecord.distributionMode,\n        sourceRef: versionRecord.sourceRef,\n        installedAt: versionRecord.installedAt,\n        permissions: versionRecord.permissions,\n        registryUrl: versionRecord.registryUrl,\n        bundleUrl: versionRecord.bundleUrl,\n        sha256: versionRecord.sha256,\n        publisher: versionRecord.publisher,\n        manifestSchemaVersion: versionRecord.manifestSchemaVersion,\n        components: versionRecord.components,\n        primaryPanelId: versionRecord.primaryPanelId,\n        contentSha256: versionRecord.contentSha256,\n      })),\n      grants: appRecord.grants,\n    };\n  };\n\n  setEnabled = async (appId: string, enabled: boolean): Promise<AppActivationResult> => {\n    return await this.withAppOperation(appId, async () => {\n      const appRecord = await this.registryService.setEnabled(appId, enabled);\n      return {\n        appId: appRecord.appId,\n        activeVersion: appRecord.activeVersion,\n        enabled: appRecord.enabled,\n      };\n    });\n  };\n\n  rollback = async (appId: string, version: string): Promise<AppRollbackResult> => {\n    return await this.withAppOperation(appId, async () => {\n    const currentRecord = await this.registryService.getApp(appId);\n    if (!currentRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    if (currentRecord.activeVersion === version) {\n      return {\n        appId,\n        activeVersion: version,\n        previousVersion: version,\n        enabled: currentRecord.enabled,\n        rolledBack: false,\n      };\n    }\n    const targetVersion = currentRecord.installedVersions[version];\n    if (!targetVersion) {\n      throw new Error(`应用 ${appId} 未安装版本 ${version}。`);\n    }\n    if (targetVersion.dataSchemaVersion !== currentRecord.defaultInstance.dataSchemaVersion) {\n      throw new Error(\n        `应用 ${appId}@${version} 需要数据 schema ${targetVersion.dataSchemaVersion}，当前实例为 ${currentRecord.defaultInstance.dataSchemaVersion}。没有可用 checkpoint，已阻止回滚。`,\n      );\n    }\n    await this.assertVersionIntegrity(appId, version);\n    const appRecord = await this.registryService.activateVersion(appId, version);\n    return {\n      appId,\n      activeVersion: appRecord.activeVersion,\n      previousVersion: currentRecord.activeVersion,\n      enabled: appRecord.enabled,\n      rolledBack: true,\n    };\n    });\n  };\n\n  assertVersionIntegrity = async (appId: string, version?: string): Promise<void> => {\n    const appRecord = await this.registryService.getApp(appId);\n    if (!appRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    const targetVersion = version ?? appRecord.activeVersion;\n    const versionRecord = appRecord.installedVersions[targetVersion];\n    if (!versionRecord) {\n      throw new Error(`应用 ${appId} 未安装版本 ${targetVersion}。`);\n    }\n    const contentSha256 = await this.integrityService.assertVersion({\n      appId,\n      version: targetVersion,\n      versionRecord,\n    });\n    if (!versionRecord.contentSha256) {\n      await this.registryService.setVersionContentDigest(appId, targetVersion, contentSha256);\n      await this.integrityService.protectDirectory(versionRecord.installDirectory);\n    }\n  };\n\n  withAppOperation = async <T>(appId: string, operation: () => Promise<T>): Promise<T> => {\n    if (!SAFE_APP_ID_PATTERN.test(appId)) {\n      throw new Error(`appId 不是安全的 App 操作标识：${appId}`);\n    }\n    const lockPath = path.resolve(this.appHomeService.getAppOperationLockPath(appId));\n    const activeLocks = this.appOperationContext.getStore();\n    if (activeLocks?.has(lockPath)) {\n      return await operation();\n    }\n    return await this.fileLockService.withLock(lockPath, async () => {\n      const nextLocks = new Set(activeLocks ?? []);\n      nextLocks.add(lockPath);\n      return await this.appOperationContext.run(nextLocks, operation);\n    });\n  };\n\n  resolveLaunch = async (\n    appReference: string,\n    explicitDocumentGrantMap: AppDocumentGrantMap,\n  ): Promise<AppLaunchResolution> => {\n    const sourceType = await this.installSourceService.detectLocal(appReference, false);\n    if (sourceType.kind === \"directory\") {\n      return {\n        appDirectory: sourceType.appDirectory,\n        documentGrantMap: explicitDocumentGrantMap,\n      };\n    }\n    const appRecord = await this.registryService.getApp(appReference);\n    if (!appRecord) {\n      throw new Error(`未找到应用目录，也未找到已安装应用：${appReference}`);\n    }\n    const activeVersion = appRecord.installedVersions[appRecord.activeVersion];\n    if (!activeVersion) {\n      throw new Error(`已安装应用缺少激活版本：${appReference}`);\n    }\n    await this.assertVersionIntegrity(appRecord.appId, appRecord.activeVersion);\n    return {\n      appDirectory: activeVersion.installDirectory,\n      appId: appRecord.appId,\n      dataDirectory: appRecord.dataDirectory,\n      storage: appRecord.defaultInstance.storage,\n      documentGrantMap: {\n        ...appRecord.grants,\n        ...explicitDocumentGrantMap,\n      },\n    };\n  };\n\n  persistGrants = async (\n    appId: string | undefined,\n    documentGrantMap: AppDocumentGrantMap,\n  ): Promise<void> => {\n    if (!appId || Object.keys(documentGrantMap).length === 0) {\n      return;\n    }\n    await this.registryService.updateGrants(appId, documentGrantMap);\n  };\n\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAoCA,MAAM,sBAAsB;AAiB5B,IAAa,yBAAb,MAAoC;CAClC;CACA;CACA,kBAAmC,IAAI,iBAAiB;CACxD;CACA;CACA;CACA,sBAAuC,IAAI,mBAAwC;CAEnF,YACE,iBAAkD,IAAI,gBAAgB,EACtE,gBAAmD,IAAI,kBAAkB,EACzE,kBAAuD,IAAI,oBAAoB,EAC/E,eAAiD,IAAI,iBAAiB,EACtE,kBAAuD,IAAI,mBAAmB,eAAe,EAC7F,wBAAmE,IAAI,yBACrE,eACD,EACD,uBAAwE,IAAI,+BAC1E,IAAI,yBAAyB,eAAe,CAC7C,EACD,wBACA;AAZiB,OAAA,iBAAA;AACA,OAAA,gBAAA;AACA,OAAA,kBAAA;AACA,OAAA,eAAA;AACA,OAAA,kBAAA;AACA,OAAA,wBAAA;AAGA,OAAA,uBAAA;AAKjB,OAAK,uBAAuB,IAAI,wBAC9B,KAAK,iBACL,KAAK,sBACL,KAAK,cACN;AACD,OAAK,yBAAyB,0BAA0B,IAAI,0BAA0B,eAAe;AACrG,OAAK,mBAAmB,IAAI,gCAAgC,gBAAgB;AAC5E,OAAK,oBAAoB,IAAI,iCAAiC;GAC5D;GACA,kBAAkB,KAAK;GACvB;GACD,CAAC;AACF,OAAK,mBAAmB,IAAI,gCAAgC;GAC1D;GACA;GACA;GACA,wBAAwB,KAAK;GAC7B,kBAAkB,KAAK;GACvB,SAAS,KAAK;GACd,UAAU,KAAK;GAChB,CAAC;;CAGJ,UAAU,OACR,WACA,UAA6B,EAAE,KACD;EAC9B,MAAM,EAAE,YAAY,gBAAgB;AACpC,QAAM,aAAa,YAAY;EAC/B,MAAM,SAAS,MAAM,KAAK,qBAAqB,QAAQ,WAAW,YAAY;EAC9E,MAAM,gBAAgB,MAAM,KAAK,eAAe,yBAAyB,gBAAgB;AACzF,MAAI;GACF,MAAM,aAAa,MAAM,KAAK,qBAAqB,kBACjD,QACA,eACA,WACD;AACD,SAAM,aAAa,YAAY;GAC/B,MAAM,qBAAqB,KAAK,KAAK,eAAe,SAAS;GAC7D,MAAM,oBAAoB,MAAM,KAAK,cAAc,cAAc;IAC/D;IACA,iBAAiB;IAClB,CAAC;AACF,SAAM,KAAK,kBAAkB,wBAAwB;IACnD,cAAc;IACd,kBAAkB,kBAAkB,SAAS;IAC9C,CAAC;GACF,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,KAAK,mBAAmB;AAC1E,UAAO,MAAM,KAAK,sBAAsB;IACtC;IACA;IACA;IACA;IACA;IACD,CAAC;YACM;AACR,SAAM,GAAG,eAAe;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;;;CAI7D,wBAAgC,OAC9B,aAC8B;EAC9B,MAAM,QAAQ,SAAS,eAAe,SAAS;AAC/C,SAAO,MAAM,KAAK,iBAChB,OACA,YAAY,MAAM,KAAK,sBAAsB,SAAS,CACvD;;CAGH,wBAAgC,OAC9B,aAC8B;EAC9B,MAAM,EAAE,oBAAoB,mBAAmB,gBAAgB,SAAS,WAAW;EACnF,MAAM,EAAE,eAAe;EACvB,MAAM,EAAE,IAAI,OAAO,YAAY,eAAe;EAC9C,MAAM,mBAAmB,KAAK,eAAe,oBAAoB,OAAO,QAAQ;AAChF,MAAI,OAAO,SAAS,cAAc,UAAU,OAAO,mBAAmB,MACpE,OAAM,IAAI,MACR,6CAA6C,OAAO,mBAAmB,MAAM,MAAM,QACpF;AAEH,QAAM,aAAa,aAAa;EAChC,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,OAAO,MAAM;EAC/D,MAAM,YAAY,OAAO,SAAS,aAC9B,OAAO,mBAAmB,YAC1B,QAAQ;EACZ,MAAM,mBAAmB,gBAAgB,aACvC,gBAAgB,kBAAkB,eAAe,gBAAgB;AACnE,MAAI,oBAAoB,iBAAiB,OAAO,WAAW,GACzD,OAAM,IAAI,MACR,MAAM,MAAM,UAAU,iBAAiB,GAAG,OAAO,WAAW,MAAM,UAAU,MAC7E;EAEH,MAAM,oBAAoB,eAAe,SAAS,kBAAkB,IAChE,eAAe,SAAS,SAAS,iBAAiB,IAClD;AACJ,MAAI,gBAAgB,gBAAgB,sBAAsB,KAAA,KACxD,eAAe,gBAAgB,sBAAsB,kBACrD,OAAM,IAAI,MACR,MAAM,MAAM,eAAe,eAAe,gBAAgB,kBAAkB,OAAO,kBAAkB,mCACtG;EAEH,MAAM,oBAAoB,KAAK,eAAe,wBAAwB,OAAO,UAAU;EACvF,MAAM,kBAAkB,MAAM,KAAK,iBAAiB,WAAW,kBAAkB;EACjF,MAAM,gBAAgB,MAAM,KAAK,kBAAkB,gCAAgC;GACjF;GACA,YAAY;GACZ;GACA;GACD,CAAC;EACF,MAAM,kBAAkB,MAAM,KAAK,uBAAuB,2BAA2B;GACnF;GACA,cAAc,oBAAoB,YAAY;GAC9C,qBAAqB,gBAAgB,gBAAgB,QAAQ,WAAW,WACpE,eAAe,gBACf,KAAA;GACJ;GACD,CAAC;AACF,QAAM,aAAa,aAAa;EAChC,IAAI;AACJ,MAAI;AACF,oBAAiB,MAAM,KAAK,gBAAgB,mBAAmB;IAC7D;IACA,MAAM,eAAe,SAAS;IAC9B,aAAa,eAAe,SAAS;IACrC;IACA;IACA;IACA,YAAY,OAAO;IACnB,kBAAkB,OAAO,SAAS,aAC9B,OAAO,mBAAmB,mBAC1B,kBAAkB,SAAS;IAC/B,WAAW,OAAO;IAClB,8BAAa,IAAI,MAAM,EAAC,aAAa;IACrC,aAAa,eAAe,SAAS,kBAAkB,IACnD,eAAe,SAAS,eAAe,EAAE,GACzC,KAAK,gBAAgB,wBAAwB,eAAe,SAAS,CAAC;IAC1E,aAAa,OAAO,SAAS,aACzB,OAAO,mBAAmB,cAC1B,KAAA;IACJ,WAAW,OAAO,SAAS,aAAa,OAAO,mBAAmB,YAAY,KAAA;IAC9E,QAAQ,OAAO,SAAS,aAAa,OAAO,mBAAmB,SAAS,KAAA;IACxE;IACA,uBAAuB,eAAe,SAAS;IAC/C,YAAY,6BAA6B,eAAe,GACpD,eAAe,WAAW,KAAK,eAAe;KAC5C,GAAG;KACH,oBAAoB,KAAK,KAAK,kBAAkB,UAAU,KAAK;KAC/D,cAAc,KAAK,KACjB,kBACA,UAAU,MACV,UAAU,SAAS,UAAU,mBAAmB,mBACjD;KACF,EAAE,GACH,KAAA;IACJ,gBAAgB,6BAA6B,eAAe,GACxD,eAAe,iBACf,KAAA;IACJ,UAAU,6BAA6B,eAAe,GAClD,KAAK,gBAAgB,wBAAwB,eAAe,SAAS,GACrE,KAAA;IACJ;IACA;IACA,UAAU,QAAQ;IACnB,CAAC;WACK,OAAO;AACd,SAAM,KAAK,iBAAiB,gBAAgB,iBAAiB;AAC7D,OAAI,CAAC,gBACH,OAAM,KAAK,uBAAuB,oBAAoB;IACpD,UAAU;IACV,qBAAqB,gBAAgB,gBAAgB,QAAQ,WAAW,WACpE,eAAe,gBACf,KAAA;IACL,CAAC;AAEJ,SAAM;;EAER,MAAM,mBAAmB,eAAe,kBAAkB;AAC1D,SAAO;GACL,OAAO,eAAe;GACtB,MAAM,eAAe;GACrB;GACA;GACA,eAAe,gBAAgB,QAAQ;GACvC,UAAU,eAAe;GACzB,YAAY,OAAO;GACnB,WAAW,OAAO;GAClB,kBAAkB,kBAAkB;GACpC,aAAa,kBAAkB,eAAe,EAAE;GAChD,aAAa,kBAAkB;GAC/B,WAAW,kBAAkB;GAC7B,QAAQ,kBAAkB;GAC1B,WAAW,kBAAkB;GAC7B,SAAS,eAAe;GACxB,uBAAuB,kBAAkB,yBAAyB;GAClE,YAAY,kBAAkB;GAC9B,gBAAgB,kBAAkB;GACnC;;CAGH,SAAS,OACP,OACA,YAM6B;AAC7B,SAAO,MAAM,KAAK,iBAChB,OACA,YAAY,MAAM,KAAK,iBAAiB,OAAO,OAAO,QAAQ,CAC/D;;CAGH,YAAY,OACV,OACA,cACgC;AAChC,SAAO,MAAM,KAAK,iBAChB,OACA,YAAY,MAAM,KAAK,iBAAiB,UAAU,OAAO,UAAU,CACpE;;CAGH,OAAO,YAA6C;AAElD,UADmB,MAAM,KAAK,gBAAgB,UAAU,EACtC,KAAK,eAAe;GACpC,OAAO,UAAU;GACjB,MAAM,UAAU;GAChB,eAAe,UAAU;GACzB,YACE,UAAU,kBAAkB,UAAU,gBAAgB,cAAc;GACtE,kBACE,UAAU,kBAAkB,UAAU,gBAAgB;GACxD,SAAS,UAAU;GACnB,uBACE,UAAU,kBAAkB,UAAU,gBAAgB,yBAAyB;GACjF,gBACE,UAAU,kBAAkB,UAAU,gBAAgB;GACzD,EAAE;;CAGL,sBAAsB,YAA2B;AAC/C,QAAM,KAAK,eAAe,uBAAuB;EACjD,IAAI,aAAa,MAAM,KAAK,gBAAgB,UAAU;AACtD,OAAK,MAAM,aAAa,WACtB,OAAM,KAAK,iBAAiB,UAAU,OAAO,YAAY;AACvD,QAAK,MAAM,iBAAiB,OAAO,OAAO,UAAU,kBAAkB,EAAE;AACtE,QAAI,CAAC,MAAM,KAAK,iBAAiB,WAAW,cAAc,iBAAiB,CACzE;AAEF,QAAI,CAAC,cAAc,eAAe;KAChC,MAAM,gBAAgB,MAAM,KAAK,iBAAiB,gBAChD,cAAc,iBACf;AACD,WAAM,KAAK,gBAAgB,wBACzB,UAAU,OACV,cAAc,SACd,cACD;;AAEH,UAAM,KAAK,iBAAiB,iBAAiB,cAAc,iBAAiB;;IAE9E;AAEJ,eAAa,MAAM,KAAK,gBAAgB,UAAU;EAClD,MAAM,yBAAyB,IAAI,IAAI,WAAW,SAAS,WACzD,OAAO,OAAO,OAAO,kBAAkB,CAAC,KAAK,YAAY,KAAK,QAAQ,QAAQ,iBAAiB,CAAC,CAAC,CAAC;EACpG,MAAM,sBAAsB,IAAI,IAAI,WAAW,KAAK,WAAW,KAAK,QAClE,OAAO,gBAAgB,QAAQ,WAAW,gBACtC,OAAO,gBAAgB,QAAQ,oBAC/B,OAAO,cACZ,CAAC,CAAC;EAEH,MAAM,qBAAqB,MAAM,KAAK,kBAAkB,gBACtD,KAAK,eAAe,sBAAsB,CAC3C;AACD,OAAK,MAAM,gBAAgB,mBACzB,OAAM,KAAK,kBAAkB,2BAA2B,cAAc,uBAAuB;AAE/F,QAAM,KAAK,kBAAkB,2BAC3B,KAAK,eAAe,kBAAkB,EACtC,oBACD;AACD,OAAK,MAAM,aAAa,YAAY;AAClC,OAAI,UAAU,gBAAgB,QAAQ,WAAW,cAC/C;AAEF,SAAM,KAAK,kBAAkB,2BAC3B,UAAU,gBAAgB,QAAQ,mBAClC,IAAI,IAAI,CAAC,KAAK,QAAQ,UAAU,gBAAgB,QAAQ,cAAc,CAAC,CAAC,CACzE;;AAEH,OAAK,MAAM,aAAa,YAAY;AAClC,OAAI,UAAU,gBAAgB,QAAQ,WAAW,SAC/C;AAEF,SAAM,KAAK,iBAAiB,UAAU,OAAO,YAAY;IACvD,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,OAAO,UAAU,MAAM;AACxE,QAAI,CAAC,iBAAiB,cAAc,gBAAgB,QAAQ,WAAW,SACrE;IAEF,MAAM,gBAAgB,cAAc,kBAAkB,cAAc;AACpE,QAAI,CAAC,cACH,OAAM,IAAI,MAAM,eAAe,cAAc,QAAQ;IAEvD,MAAM,WAAW,MAAM,KAAK,uBAAuB,2BAA2B;KAC5E,OAAO,cAAc;KACrB,aAAa,cAAc,WAAW;KACtC,qBAAqB,cAAc;KACnC,mBAAmB,cAAc,gBAAgB;KAClD,CAAC;AACF,QAAI;AACF,WAAM,KAAK,gBAAgB,mBAAmB;MAC5C,OAAO,cAAc;MACrB,MAAM,cAAc;MACpB,aAAa,cAAc;MAC3B,SAAS,cAAc;MACvB,kBAAkB,cAAc;MAChC,iBAAiB;MACjB,YAAY,cAAc;MAC1B,WAAW,cAAc;MACzB,aAAa,cAAc;MAC3B,kBAAkB,cAAc;MAChC,aAAa,cAAc;MAC3B,aAAa,cAAc;MAC3B,WAAW,cAAc;MACzB,QAAQ,cAAc;MACtB,WAAW,cAAc,aAAa,cAAc;MACpD,uBAAuB,cAAc;MACrC,YAAY,cAAc;MAC1B,gBAAgB,cAAc;MAC9B,UAAU,cAAc;MACxB,mBAAmB,cAAc;MACjC,eAAe,cAAc;MAC7B,SAAS,cAAc;MACxB,CAAC;aACK,OAAO;AACd,WAAM,KAAK,uBAAuB,oBAAoB;MACpD;MACA,qBAAqB,cAAc;MACpC,CAAC;AACF,WAAM;;KAER;;;CAIN,OAAO,OAAO,UAA0C;EACtD,MAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO,MAAM;AAC1D,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;EAEtC,MAAM,oBAAoB,OAAO,OAAO,UAAU,kBAAkB,CAAC,MAAM,MAAM,UAC/E,KAAK,QAAQ,cAAc,MAAM,QAAQ,CAC1C;AACD,SAAO;GACL,OAAO,UAAU;GACjB,MAAM,UAAU;GAChB,aAAa,UAAU;GACvB,eAAe,UAAU;GACzB,SAAS,UAAU;GACnB,eAAe,UAAU;GACzB,UAAU,UAAU;GACpB,SAAS,UAAU,gBAAgB;GACnC,cAAc,MAAM,KAAK,uBAAuB,aAC9C,UAAU,gBAAgB,QAC3B;GACD,mBAAmB,kBAAkB,KAAK,mBAAmB;IAC3D,SAAS,cAAc;IACvB,kBAAkB,cAAc;IAChC,YAAY,cAAc;IAC1B,kBAAkB,cAAc;IAChC,WAAW,cAAc;IACzB,aAAa,cAAc;IAC3B,aAAa,cAAc;IAC3B,aAAa,cAAc;IAC3B,WAAW,cAAc;IACzB,QAAQ,cAAc;IACtB,WAAW,cAAc;IACzB,uBAAuB,cAAc;IACrC,YAAY,cAAc;IAC1B,gBAAgB,cAAc;IAC9B,eAAe,cAAc;IAC9B,EAAE;GACH,QAAQ,UAAU;GACnB;;CAGH,aAAa,OAAO,OAAe,YAAmD;AACpF,SAAO,MAAM,KAAK,iBAAiB,OAAO,YAAY;GACpD,MAAM,YAAY,MAAM,KAAK,gBAAgB,WAAW,OAAO,QAAQ;AACvE,UAAO;IACL,OAAO,UAAU;IACjB,eAAe,UAAU;IACzB,SAAS,UAAU;IACpB;IACD;;CAGJ,WAAW,OAAO,OAAe,YAAgD;AAC/E,SAAO,MAAM,KAAK,iBAAiB,OAAO,YAAY;GACtD,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,OAAO,MAAM;AAC9D,OAAI,CAAC,cACH,OAAM,IAAI,MAAM,YAAY,QAAQ;AAEtC,OAAI,cAAc,kBAAkB,QAClC,QAAO;IACL;IACA,eAAe;IACf,iBAAiB;IACjB,SAAS,cAAc;IACvB,YAAY;IACb;GAEH,MAAM,gBAAgB,cAAc,kBAAkB;AACtD,OAAI,CAAC,cACH,OAAM,IAAI,MAAM,MAAM,MAAM,SAAS,QAAQ,GAAG;AAElD,OAAI,cAAc,sBAAsB,cAAc,gBAAgB,kBACpE,OAAM,IAAI,MACR,MAAM,MAAM,GAAG,QAAQ,eAAe,cAAc,kBAAkB,SAAS,cAAc,gBAAgB,kBAAkB,yBAChI;AAEH,SAAM,KAAK,uBAAuB,OAAO,QAAQ;GACjD,MAAM,YAAY,MAAM,KAAK,gBAAgB,gBAAgB,OAAO,QAAQ;AAC5E,UAAO;IACL;IACA,eAAe,UAAU;IACzB,iBAAiB,cAAc;IAC/B,SAAS,UAAU;IACnB,YAAY;IACb;IACC;;CAGJ,yBAAyB,OAAO,OAAe,YAAoC;EACjF,MAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO,MAAM;AAC1D,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;EAEtC,MAAM,gBAAgB,WAAW,UAAU;EAC3C,MAAM,gBAAgB,UAAU,kBAAkB;AAClD,MAAI,CAAC,cACH,OAAM,IAAI,MAAM,MAAM,MAAM,SAAS,cAAc,GAAG;EAExD,MAAM,gBAAgB,MAAM,KAAK,iBAAiB,cAAc;GAC9D;GACA,SAAS;GACT;GACD,CAAC;AACF,MAAI,CAAC,cAAc,eAAe;AAChC,SAAM,KAAK,gBAAgB,wBAAwB,OAAO,eAAe,cAAc;AACvF,SAAM,KAAK,iBAAiB,iBAAiB,cAAc,iBAAiB;;;CAIhF,mBAAmB,OAAU,OAAe,cAA4C;AACtF,MAAI,CAAC,oBAAoB,KAAK,MAAM,CAClC,OAAM,IAAI,MAAM,wBAAwB,QAAQ;EAElD,MAAM,WAAW,KAAK,QAAQ,KAAK,eAAe,wBAAwB,MAAM,CAAC;EACjF,MAAM,cAAc,KAAK,oBAAoB,UAAU;AACvD,MAAI,aAAa,IAAI,SAAS,CAC5B,QAAO,MAAM,WAAW;AAE1B,SAAO,MAAM,KAAK,gBAAgB,SAAS,UAAU,YAAY;GAC/D,MAAM,YAAY,IAAI,IAAI,eAAe,EAAE,CAAC;AAC5C,aAAU,IAAI,SAAS;AACvB,UAAO,MAAM,KAAK,oBAAoB,IAAI,WAAW,UAAU;IAC/D;;CAGJ,gBAAgB,OACd,cACA,6BACiC;EACjC,MAAM,aAAa,MAAM,KAAK,qBAAqB,YAAY,cAAc,MAAM;AACnF,MAAI,WAAW,SAAS,YACtB,QAAO;GACL,cAAc,WAAW;GACzB,kBAAkB;GACnB;EAEH,MAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO,aAAa;AACjE,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,qBAAqB,eAAe;EAEtD,MAAM,gBAAgB,UAAU,kBAAkB,UAAU;AAC5D,MAAI,CAAC,cACH,OAAM,IAAI,MAAM,eAAe,eAAe;AAEhD,QAAM,KAAK,uBAAuB,UAAU,OAAO,UAAU,cAAc;AAC3E,SAAO;GACL,cAAc,cAAc;GAC5B,OAAO,UAAU;GACjB,eAAe,UAAU;GACzB,SAAS,UAAU,gBAAgB;GACnC,kBAAkB;IAChB,GAAG,UAAU;IACb,GAAG;IACJ;GACF;;CAGH,gBAAgB,OACd,OACA,qBACkB;AAClB,MAAI,CAAC,SAAS,OAAO,KAAK,iBAAiB,CAAC,WAAW,EACrD;AAEF,QAAM,KAAK,gBAAgB,aAAa,OAAO,iBAAiB"}

package/dist/services/app-instance-inventory.service.d.ts

@@ -0,0 +1,31 @@
+import { AppInstanceInventory } from "../types/app-storage.types.js";
+import { AppInstanceStorageService } from "./app-instance-storage.service.js";
+
+//#region src/services/app-instance-inventory.service.d.ts
+declare class AppInstanceInventoryService {
+  private readonly storageService;
+  private readonly fileLockService;
+  constructor(storageService?: AppInstanceStorageService);
+  list: (instancesRoot: string) => Promise<AppInstanceInventory>;
+  purge: (params: {
+    instancesRoot: string;
+    appId: string;
+    instanceId: string;
+    assertCanPurge?: () => Promise<void>;
+  }) => Promise<void>;
+  purgeNested: (params: {
+    instancesRoot: string;
+    pathSegments: string[];
+    appId: string;
+    instanceId: string;
+    assertCanPurge?: () => Promise<void>;
+  }) => Promise<void>;
+  private listDirectories;
+  private assertSafeId;
+  private assertWithinRoot;
+  private pathExists;
+  private isMissingFileError;
+}
+//#endregion
+export { AppInstanceInventoryService };
+//# sourceMappingURL=app-instance-inventory.service.d.ts.map

package/dist/services/app-instance-inventory.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-instance-inventory.service.d.ts","names":[],"sources":["../../src/services/app-instance-inventory.service.ts"],"mappings":";;;;cAYa,2BAAA;EAAA,iBAIQ,cAAA;EAAA,iBAHF,eAAA;cAGE,cAAA,GAAc,yBAAA;EAGjC,IAAA,GAAc,aAAA,aAAwB,OAAA,CAAQ,oBAAA;EAuD9C,KAAA,GAAe,MAAA;IACb,aAAA;IACA,KAAA;IACA,UAAA;IACA,cAAA,SAAuB,OAAA;EAAA,MACrB,OAAA;EAWJ,WAAA,GAAqB,MAAA;IACnB,aAAA;IACA,YAAA;IACA,KAAA;IACA,UAAA;IACA,cAAA,SAAuB,OAAA;EAAA,MACrB,OAAA;EAAA,QAuCI,eAAA;EAAA,QAYA,YAAA;EAAA,QAMA,gBAAA;EAAA,QAOA,UAAA;EAAA,QASA,kBAAA;AAAA"}

package/dist/services/app-instance-inventory.service.js

@@ -0,0 +1,136 @@
+import { FileLockService } from "./file-lock.service.js";
+import { AppInstanceStorageService } from "./app-instance-storage.service.js";
+import { randomUUID } from "node:crypto";
+import { access, readdir, rename, rm } from "node:fs/promises";
+import path from "node:path";
+//#region src/services/app-instance-inventory.service.ts
+const SAFE_ID_PATTERN = /^[a-z0-9]+(?:[.-][a-z0-9]+)*$/;
+var AppInstanceInventoryService = class {
+	fileLockService = new FileLockService();
+	constructor(storageService = new AppInstanceStorageService()) {
+		this.storageService = storageService;
+	}
+	list = async (instancesRoot) => {
+		const root = path.resolve(instancesRoot);
+		const entries = [];
+		const diagnostics = [];
+		for (const appDirectory of await this.listDirectories(root)) {
+			const appId = appDirectory.name;
+			const appPath = path.join(root, appId);
+			if (!SAFE_ID_PATTERN.test(appId)) {
+				diagnostics.push({
+					instanceDirectory: appPath,
+					message: `不安全的 App Instance appId：${appId}`
+				});
+				continue;
+			}
+			for (const instanceDirectory of await this.listDirectories(appPath)) {
+				const instanceId = instanceDirectory.name;
+				const instancePath = path.join(appPath, instanceId);
+				if (!SAFE_ID_PATTERN.test(instanceId)) {
+					diagnostics.push({
+						instanceDirectory: instancePath,
+						message: `不安全的 App Instance instanceId：${instanceId}`
+					});
+					continue;
+				}
+				try {
+					const instance = await this.storageService.inspect({
+						appId,
+						instanceId,
+						instanceDirectory: instancePath
+					});
+					const usage = await this.storageService.measureUsage(instance.storage);
+					entries.push({
+						appId,
+						instanceId,
+						publisherId: instance.publisherId,
+						storage: instance.storage,
+						usage,
+						createdAt: instance.createdAt,
+						migratedAt: instance.migratedAt
+					});
+				} catch (error) {
+					diagnostics.push({
+						instanceDirectory: instancePath,
+						message: error instanceof Error ? error.message : String(error)
+					});
+				}
+			}
+		}
+		entries.sort((left, right) => left.appId.localeCompare(right.appId) || left.instanceId.localeCompare(right.instanceId));
+		diagnostics.sort((left, right) => left.instanceDirectory.localeCompare(right.instanceDirectory));
+		return {
+			entries,
+			diagnostics
+		};
+	};
+	purge = async (params) => {
+		const { appId, assertCanPurge, instanceId, instancesRoot } = params;
+		return await this.purgeNested({
+			instancesRoot,
+			pathSegments: [appId, instanceId],
+			appId,
+			instanceId,
+			assertCanPurge
+		});
+	};
+	purgeNested = async (params) => {
+		const { appId, assertCanPurge, instanceId, instancesRoot, pathSegments } = params;
+		this.assertSafeId(appId, "appId");
+		this.assertSafeId(instanceId, "instanceId");
+		if (pathSegments.length === 0) throw new Error("App Instance 相对路径不能为空。");
+		pathSegments.forEach((segment, index) => this.assertSafeId(segment, `pathSegments[${index}]`));
+		const root = path.resolve(instancesRoot);
+		const instanceDirectory = path.resolve(root, ...pathSegments);
+		this.assertWithinRoot(root, instanceDirectory);
+		await this.fileLockService.withLock(`${instanceDirectory}.lock`, async () => {
+			await assertCanPurge?.();
+			await this.storageService.inspect({
+				appId,
+				instanceId,
+				instanceDirectory
+			});
+			const stagingDirectory = `${instanceDirectory}.deleting-${randomUUID()}`;
+			await rename(instanceDirectory, stagingDirectory);
+			try {
+				await rm(stagingDirectory, { recursive: true });
+			} catch (error) {
+				try {
+					if (!await this.pathExists(instanceDirectory)) await rename(stagingDirectory, instanceDirectory);
+				} catch (restoreError) {
+					throw new AggregateError([error, restoreError], `App Instance 删除失败且恢复失败：${appId}/${instanceId}`);
+				}
+				throw error;
+			}
+		});
+	};
+	listDirectories = async (directory) => {
+		try {
+			return (await readdir(directory, { withFileTypes: true })).filter((entry) => entry.isDirectory() && !entry.name.startsWith("."));
+		} catch (error) {
+			if (this.isMissingFileError(error)) return [];
+			throw error;
+		}
+	};
+	assertSafeId = (value, field) => {
+		if (!SAFE_ID_PATTERN.test(value)) throw new Error(`${field} 不是安全的 App Instance 标识：${value}`);
+	};
+	assertWithinRoot = (root, target) => {
+		const relative = path.relative(root, target);
+		if (!relative || relative.startsWith("..") || path.isAbsolute(relative)) throw new Error(`App Instance 路径不在受管根目录内：${target}`);
+	};
+	pathExists = async (targetPath) => {
+		try {
+			await access(targetPath);
+			return true;
+		} catch {
+			return false;
+		}
+	};
+	isMissingFileError = (error) => typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
+};
+//#endregion
+export { AppInstanceInventoryService };
+
+//# sourceMappingURL=app-instance-inventory.service.js.map

package/dist/services/app-instance-inventory.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-instance-inventory.service.js","names":[],"sources":["../../src/services/app-instance-inventory.service.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { access, readdir, rename, rm } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { AppInstanceStorageService } from \"#app-runtime/services/app-instance-storage.service.js\";\nimport { FileLockService } from \"#app-runtime/services/file-lock.service.js\";\nimport type {\n  AppInstanceInventory,\n  AppInstanceInventoryEntry,\n} from \"#app-runtime/types/app-storage.types.js\";\n\nconst SAFE_ID_PATTERN = /^[a-z0-9]+(?:[.-][a-z0-9]+)*$/;\n\nexport class AppInstanceInventoryService {\n  private readonly fileLockService = new FileLockService();\n\n  constructor(\n    private readonly storageService = new AppInstanceStorageService(),\n  ) {}\n\n  list = async (instancesRoot: string): Promise<AppInstanceInventory> => {\n    const root = path.resolve(instancesRoot);\n    const entries: AppInstanceInventoryEntry[] = [];\n    const diagnostics: AppInstanceInventory[\"diagnostics\"] = [];\n    for (const appDirectory of await this.listDirectories(root)) {\n      const appId = appDirectory.name;\n      const appPath = path.join(root, appId);\n      if (!SAFE_ID_PATTERN.test(appId)) {\n        diagnostics.push({\n          instanceDirectory: appPath,\n          message: `不安全的 App Instance appId：${appId}`,\n        });\n        continue;\n      }\n      for (const instanceDirectory of await this.listDirectories(appPath)) {\n        const instanceId = instanceDirectory.name;\n        const instancePath = path.join(appPath, instanceId);\n        if (!SAFE_ID_PATTERN.test(instanceId)) {\n          diagnostics.push({\n            instanceDirectory: instancePath,\n            message: `不安全的 App Instance instanceId：${instanceId}`,\n          });\n          continue;\n        }\n        try {\n          const instance = await this.storageService.inspect({\n            appId,\n            instanceId,\n            instanceDirectory: instancePath,\n          });\n          const usage = await this.storageService.measureUsage(instance.storage);\n          entries.push({\n            appId,\n            instanceId,\n            publisherId: instance.publisherId,\n            storage: instance.storage,\n            usage,\n            createdAt: instance.createdAt,\n            migratedAt: instance.migratedAt,\n          });\n        } catch (error) {\n          diagnostics.push({\n            instanceDirectory: instancePath,\n            message: error instanceof Error ? error.message : String(error),\n          });\n        }\n      }\n    }\n    entries.sort((left, right) =>\n      left.appId.localeCompare(right.appId) || left.instanceId.localeCompare(right.instanceId));\n    diagnostics.sort((left, right) =>\n      left.instanceDirectory.localeCompare(right.instanceDirectory));\n    return { entries, diagnostics };\n  };\n\n  purge = async (params: {\n    instancesRoot: string;\n    appId: string;\n    instanceId: string;\n    assertCanPurge?: () => Promise<void>;\n  }): Promise<void> => {\n    const { appId, assertCanPurge, instanceId, instancesRoot } = params;\n    return await this.purgeNested({\n      instancesRoot,\n      pathSegments: [appId, instanceId],\n      appId,\n      instanceId,\n      assertCanPurge,\n    });\n  };\n\n  purgeNested = async (params: {\n    instancesRoot: string;\n    pathSegments: string[];\n    appId: string;\n    instanceId: string;\n    assertCanPurge?: () => Promise<void>;\n  }): Promise<void> => {\n    const { appId, assertCanPurge, instanceId, instancesRoot, pathSegments } = params;\n    this.assertSafeId(appId, \"appId\");\n    this.assertSafeId(instanceId, \"instanceId\");\n    if (pathSegments.length === 0) {\n      throw new Error(\"App Instance 相对路径不能为空。\");\n    }\n    pathSegments.forEach((segment, index) =>\n      this.assertSafeId(segment, `pathSegments[${index}]`));\n    const root = path.resolve(instancesRoot);\n    const instanceDirectory = path.resolve(root, ...pathSegments);\n    this.assertWithinRoot(root, instanceDirectory);\n    await this.fileLockService.withLock(`${instanceDirectory}.lock`, async () => {\n      await assertCanPurge?.();\n      await this.storageService.inspect({\n        appId,\n        instanceId,\n        instanceDirectory,\n      });\n      const stagingDirectory = `${instanceDirectory}.deleting-${randomUUID()}`;\n      await rename(instanceDirectory, stagingDirectory);\n      try {\n        await rm(stagingDirectory, { recursive: true });\n      } catch (error) {\n        try {\n          if (!await this.pathExists(instanceDirectory)) {\n            await rename(stagingDirectory, instanceDirectory);\n          }\n        } catch (restoreError) {\n          throw new AggregateError(\n            [error, restoreError],\n            `App Instance 删除失败且恢复失败：${appId}/${instanceId}`,\n          );\n        }\n        throw error;\n      }\n    });\n  };\n\n  private listDirectories = async (directory: string) => {\n    try {\n      return (await readdir(directory, { withFileTypes: true }))\n        .filter((entry) => entry.isDirectory() && !entry.name.startsWith(\".\"));\n    } catch (error) {\n      if (this.isMissingFileError(error)) {\n        return [];\n      }\n      throw error;\n    }\n  };\n\n  private assertSafeId = (value: string, field: string): void => {\n    if (!SAFE_ID_PATTERN.test(value)) {\n      throw new Error(`${field} 不是安全的 App Instance 标识：${value}`);\n    }\n  };\n\n  private assertWithinRoot = (root: string, target: string): void => {\n    const relative = path.relative(root, target);\n    if (!relative || relative.startsWith(\"..\") || path.isAbsolute(relative)) {\n      throw new Error(`App Instance 路径不在受管根目录内：${target}`);\n    }\n  };\n\n  private pathExists = async (targetPath: string): Promise<boolean> => {\n    try {\n      await access(targetPath);\n      return true;\n    } catch {\n      return false;\n    }\n  };\n\n  private isMissingFileError = (error: unknown): boolean =>\n    typeof error === \"object\" && error !== null &&\n    \"code\" in error && (error as { code?: unknown }).code === \"ENOENT\";\n}\n"],"mappings":";;;;;;AAUA,MAAM,kBAAkB;AAExB,IAAa,8BAAb,MAAyC;CACvC,kBAAmC,IAAI,iBAAiB;CAExD,YACE,iBAAkC,IAAI,2BAA2B,EACjE;AADiB,OAAA,iBAAA;;CAGnB,OAAO,OAAO,kBAAyD;EACrE,MAAM,OAAO,KAAK,QAAQ,cAAc;EACxC,MAAM,UAAuC,EAAE;EAC/C,MAAM,cAAmD,EAAE;AAC3D,OAAK,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,KAAK,EAAE;GAC3D,MAAM,QAAQ,aAAa;GAC3B,MAAM,UAAU,KAAK,KAAK,MAAM,MAAM;AACtC,OAAI,CAAC,gBAAgB,KAAK,MAAM,EAAE;AAChC,gBAAY,KAAK;KACf,mBAAmB;KACnB,SAAS,2BAA2B;KACrC,CAAC;AACF;;AAEF,QAAK,MAAM,qBAAqB,MAAM,KAAK,gBAAgB,QAAQ,EAAE;IACnE,MAAM,aAAa,kBAAkB;IACrC,MAAM,eAAe,KAAK,KAAK,SAAS,WAAW;AACnD,QAAI,CAAC,gBAAgB,KAAK,WAAW,EAAE;AACrC,iBAAY,KAAK;MACf,mBAAmB;MACnB,SAAS,gCAAgC;MAC1C,CAAC;AACF;;AAEF,QAAI;KACF,MAAM,WAAW,MAAM,KAAK,eAAe,QAAQ;MACjD;MACA;MACA,mBAAmB;MACpB,CAAC;KACF,MAAM,QAAQ,MAAM,KAAK,eAAe,aAAa,SAAS,QAAQ;AACtE,aAAQ,KAAK;MACX;MACA;MACA,aAAa,SAAS;MACtB,SAAS,SAAS;MAClB;MACA,WAAW,SAAS;MACpB,YAAY,SAAS;MACtB,CAAC;aACK,OAAO;AACd,iBAAY,KAAK;MACf,mBAAmB;MACnB,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;MAChE,CAAC;;;;AAIR,UAAQ,MAAM,MAAM,UAClB,KAAK,MAAM,cAAc,MAAM,MAAM,IAAI,KAAK,WAAW,cAAc,MAAM,WAAW,CAAC;AAC3F,cAAY,MAAM,MAAM,UACtB,KAAK,kBAAkB,cAAc,MAAM,kBAAkB,CAAC;AAChE,SAAO;GAAE;GAAS;GAAa;;CAGjC,QAAQ,OAAO,WAKM;EACnB,MAAM,EAAE,OAAO,gBAAgB,YAAY,kBAAkB;AAC7D,SAAO,MAAM,KAAK,YAAY;GAC5B;GACA,cAAc,CAAC,OAAO,WAAW;GACjC;GACA;GACA;GACD,CAAC;;CAGJ,cAAc,OAAO,WAMA;EACnB,MAAM,EAAE,OAAO,gBAAgB,YAAY,eAAe,iBAAiB;AAC3E,OAAK,aAAa,OAAO,QAAQ;AACjC,OAAK,aAAa,YAAY,aAAa;AAC3C,MAAI,aAAa,WAAW,EAC1B,OAAM,IAAI,MAAM,yBAAyB;AAE3C,eAAa,SAAS,SAAS,UAC7B,KAAK,aAAa,SAAS,gBAAgB,MAAM,GAAG,CAAC;EACvD,MAAM,OAAO,KAAK,QAAQ,cAAc;EACxC,MAAM,oBAAoB,KAAK,QAAQ,MAAM,GAAG,aAAa;AAC7D,OAAK,iBAAiB,MAAM,kBAAkB;AAC9C,QAAM,KAAK,gBAAgB,SAAS,GAAG,kBAAkB,QAAQ,YAAY;AAC3E,SAAM,kBAAkB;AACxB,SAAM,KAAK,eAAe,QAAQ;IAChC;IACA;IACA;IACD,CAAC;GACF,MAAM,mBAAmB,GAAG,kBAAkB,YAAY,YAAY;AACtE,SAAM,OAAO,mBAAmB,iBAAiB;AACjD,OAAI;AACF,UAAM,GAAG,kBAAkB,EAAE,WAAW,MAAM,CAAC;YACxC,OAAO;AACd,QAAI;AACF,SAAI,CAAC,MAAM,KAAK,WAAW,kBAAkB,CAC3C,OAAM,OAAO,kBAAkB,kBAAkB;aAE5C,cAAc;AACrB,WAAM,IAAI,eACR,CAAC,OAAO,aAAa,EACrB,0BAA0B,MAAM,GAAG,aACpC;;AAEH,UAAM;;IAER;;CAGJ,kBAA0B,OAAO,cAAsB;AACrD,MAAI;AACF,WAAQ,MAAM,QAAQ,WAAW,EAAE,eAAe,MAAM,CAAC,EACtD,QAAQ,UAAU,MAAM,aAAa,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC;WACjE,OAAO;AACd,OAAI,KAAK,mBAAmB,MAAM,CAChC,QAAO,EAAE;AAEX,SAAM;;;CAIV,gBAAwB,OAAe,UAAwB;AAC7D,MAAI,CAAC,gBAAgB,KAAK,MAAM,CAC9B,OAAM,IAAI,MAAM,GAAG,MAAM,yBAAyB,QAAQ;;CAI9D,oBAA4B,MAAc,WAAyB;EACjE,MAAM,WAAW,KAAK,SAAS,MAAM,OAAO;AAC5C,MAAI,CAAC,YAAY,SAAS,WAAW,KAAK,IAAI,KAAK,WAAW,SAAS,CACrE,OAAM,IAAI,MAAM,2BAA2B,SAAS;;CAIxD,aAAqB,OAAO,eAAyC;AACnE,MAAI;AACF,SAAM,OAAO,WAAW;AACxB,UAAO;UACD;AACN,UAAO;;;CAIX,sBAA8B,UAC5B,OAAO,UAAU,YAAY,UAAU,QACvC,UAAU,SAAU,MAA6B,SAAS"}

package/dist/services/app-instance-storage.service.d.ts

@@ -0,0 +1,55 @@
+import { AppHomeService } from "./app-home.service.js";
+import { AppInstanceRecord, AppStorageContext, AppStorageUsage } from "../types/app-storage.types.js";
+
+//#region src/services/app-instance-storage.service.d.ts
+declare class AppInstanceStorageService {
+  private readonly appHomeService;
+  private readonly fileLockService;
+  constructor(appHomeService?: AppHomeService);
+  materializeDefaultInstance: (params: {
+    appId: string;
+    publisherId?: string;
+    legacyDataDirectory?: string;
+    dataSchemaVersion?: number;
+  }) => Promise<AppInstanceRecord>;
+  materialize: (params: {
+    appId: string;
+    instanceId: string;
+    instanceDirectory: string;
+    publisherId?: string;
+    legacyDataDirectory?: string;
+    dataSchemaVersion?: number;
+  }) => Promise<AppInstanceRecord>;
+  private materializeUnlocked;
+  private materializeNewInstance;
+  buildLegacyDefaultInstance: (params: {
+    appId: string;
+    dataDirectory: string;
+    createdAt: string;
+  }) => AppInstanceRecord;
+  measureUsage: (storage: AppStorageContext) => Promise<AppStorageUsage>;
+  inspect: (params: {
+    appId: string;
+    instanceId: string;
+    instanceDirectory: string;
+  }) => Promise<AppInstanceRecord>;
+  rollbackNewInstance: (params: {
+    instance: AppInstanceRecord;
+    legacyDataDirectory?: string;
+  }) => Promise<void>;
+  private resolveExistingInstance;
+  private buildContext;
+  private ensureStorageDirectories;
+  private readMetadata;
+  private toInstanceRecord;
+  private assertMetadataIdentity;
+  private assertMetadataCoordinates;
+  private bindPublisher;
+  private assertSafeId;
+  private measureDirectory;
+  private pathExists;
+  private isMissingFileError;
+}
+//#endregion
+export { AppInstanceStorageService };
+//# sourceMappingURL=app-instance-storage.service.d.ts.map

package/dist/services/app-instance-storage.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-instance-storage.service.d.ts","names":[],"sources":["../../src/services/app-instance-storage.service.ts"],"mappings":";;;;cAiBa,yBAAA;EAAA,iBAGkB,cAAA;EAAA,iBAFZ,eAAA;cAEY,cAAA,GAAgB,cAAA;EAE7C,0BAAA,GAAoC,MAAA;IAClC,KAAA;IACA,WAAA;IACA,mBAAA;IACA,iBAAA;EAAA,MACE,OAAA,CAAQ,iBAAA;EAWZ,WAAA,GAAqB,MAAA;IACnB,KAAA;IACA,UAAA;IACA,iBAAA;IACA,WAAA;IACA,mBAAA;IACA,iBAAA;EAAA,MACE,OAAA,CAAQ,iBAAA;EAAA,QAUJ,mBAAA;EAAA,QA6BA,sBAAA;EA+ER,0BAAA,GAA8B,MAAA;IAC5B,KAAA;IACA,aAAA;IACA,SAAA;EAAA,MACE,iBAAA;EAoBJ,YAAA,GAAsB,OAAA,EAAS,iBAAA,KAAoB,OAAA,CAAQ,eAAA;EAqB3D,OAAA,GAAiB,MAAA;IACf,KAAA;IACA,UAAA;IACA,iBAAA;EAAA,MACE,OAAA,CAAQ,iBAAA;EAgBZ,mBAAA,GAA6B,MAAA;IAC3B,QAAA,EAAU,iBAAA;IACV,mBAAA;EAAA,MACE,OAAA;EAAA,QAqBI,uBAAA;EAAA,QAqBA,YAAA;EAAA,QAgBA,wBAAA;EAAA,QAWA,YAAA;EAAA,QA0BA,gBAAA;EAAA,QAcA,sBAAA;EAAA,QAcA,yBAAA;EAAA,QAYA,aAAA;EAAA,QAqBA,YAAA;EAAA,QAMA,gBAAA;EAAA,QA0BA,UAAA;EAAA,QASA,kBAAA;AAAA"}