@nextclaw/app-runtime 0.10.0 → 0.12.0

package/dist/services/app-publish.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-publish.service.js","names":[],"sources":["../../src/services/app-publish.service.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { readFile } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { AppBundleService } from \"#app-runtime/services/app-bundle.service.js\";\nimport type { AppDistributionMode } from \"#app-runtime/types/app-bundle.types.js\";\nimport { AppManifestService } from \"#app-runtime/services/app-manifest.service.js\";\nimport { AppMarketplaceClientService } from \"./app-marketplace-client.service.js\";\nimport { AppMarketplaceMetadataService } from \"./app-marketplace-metadata.service.js\";\nimport type { AppPublishPayload, AppPublishResult } from \"#app-runtime/types/app-publish.types.js\";\nimport { PlatformAuthStateService } from \"./platform-auth-state.service.js\";\n\nconst DEFAULT_PLATFORM_API_BASE = \"https://ai-gateway-api.nextclaw.io\";\n\ntype ResolvedPublishActor = {\n  token: string;\n  publisher: NonNullable<AppPublishPayload[\"publisher\"]>;\n};\n\nexport class AppPublishService {\n  constructor(\n    private readonly manifestService: AppManifestService = new AppManifestService(),\n    private readonly bundleService: AppBundleService = new AppBundleService(),\n    private readonly metadataService: AppMarketplaceMetadataService = new AppMarketplaceMetadataService(),\n    private readonly marketplaceClient: AppMarketplaceClientService = new AppMarketplaceClientService(),\n    private readonly authStateService: PlatformAuthStateService = new PlatformAuthStateService(),\n  ) {}\n\n  publish = async (params: {\n    appDirectory: string;\n    metadataPath?: string;\n    bundleOutputPath?: string;\n    apiBaseUrl?: string;\n    token?: string;\n    mode?: AppDistributionMode;\n  }): Promise<AppPublishResult> => {\n    const {\n      appDirectory: inputAppDirectory,\n      metadataPath,\n      bundleOutputPath,\n      apiBaseUrl,\n      token,\n    } = params;\n    const appDirectory = path.resolve(inputAppDirectory);\n    const manifestBundle = await this.manifestService.load(appDirectory);\n    const distributionMode = params.mode ??\n      (manifestBundle.manifest.schemaVersion === 2 ? \"bundle\" : \"source\");\n    const metadata = await this.metadataService.load({\n      appDirectory,\n      manifest: manifestBundle.manifest,\n      metadataPath,\n    });\n    const actor = await this.resolvePublishActor({\n      apiBaseUrl,\n      explicitToken: token,\n      appId: manifestBundle.manifest.id,\n    });\n    const bundle = await this.bundleService.packAppDirectory({\n      appDirectory,\n      outputPath: bundleOutputPath,\n      mode: distributionMode,\n    });\n    const bundleBytes = Buffer.from(await readFile(bundle.bundlePath));\n    const bundleSha256 = createHash(\"sha256\").update(bundleBytes).digest(\"hex\");\n    const publishFiles = await this.metadataService.collectPublishFiles({\n      appDirectory,\n      iconPath: manifestBundle.manifest.icon,\n      metadataPath,\n      visuals: metadata.visuals,\n    });\n    const payload: AppPublishPayload = {\n      slug: metadata.slug,\n      appId: manifestBundle.manifest.id,\n      name: manifestBundle.manifest.name,\n      version: manifestBundle.manifest.version,\n      summary: metadata.summary,\n      summaryI18n: metadata.summaryI18n,\n      description: metadata.description ?? manifestBundle.manifest.description,\n      descriptionI18n: metadata.descriptionI18n,\n      author: metadata.author,\n      tags: metadata.tags,\n      sourceRepo: metadata.sourceRepo,\n      homepage: metadata.homepage,\n      featured: metadata.featured ?? false,\n      publisher: actor.publisher,\n      visuals: metadata.visuals,\n      distributionMode,\n      manifest: manifestBundle.manifest,\n      permissions: manifestBundle.manifest.schemaVersion === 1\n        ? manifestBundle.manifest.permissions ?? {}\n        : {},\n      bundleBase64: bundleBytes.toString(\"base64\"),\n      bundleSha256,\n      files: publishFiles.map((file) => ({\n        path: file.path,\n        contentBase64: file.bytes.toString(\"base64\"),\n      })),\n    };\n    const result = await this.marketplaceClient.publish({\n      payload,\n      apiBaseUrl,\n      token: actor.token,\n    });\n    return {\n      ...result,\n      distribution: {\n        path: bundle.bundlePath,\n        sha256: bundleSha256,\n        mode: distributionMode,\n      },\n    };\n  };\n\n  private resolvePublishActor = async (params: {\n    apiBaseUrl?: string;\n    explicitToken?: string;\n    appId: string;\n  }): Promise<ResolvedPublishActor> => {\n    const explicitToken = params.explicitToken?.trim();\n    const envAdminToken = process.env.NEXTCLAW_MARKETPLACE_ADMIN_TOKEN?.trim();\n    if (explicitToken) {\n      const token = explicitToken;\n      if (!token) {\n        throw new Error(\"缺少 publish token。\");\n      }\n      const me = await this.fetchCurrentPlatformUser({\n        token,\n        platformApiBase: this.resolvePlatformApiBase(),\n      });\n      return {\n        token,\n        publisher: this.buildUserPublisher(me, params.appId),\n      };\n    }\n\n    const authState = this.authStateService.readCurrentAuthState();\n    const platformToken = authState.token?.trim();\n    if (platformToken) {\n      const me = await this.fetchCurrentPlatformUser({\n        token: platformToken,\n        platformApiBase: this.resolvePlatformApiBase(authState.apiBaseUrl),\n      });\n      return {\n        token: platformToken,\n        publisher: this.buildUserPublisher(me, params.appId),\n      };\n    }\n\n    if (envAdminToken) {\n      return {\n        token: envAdminToken,\n        publisher: this.buildOfficialPublisher(),\n      };\n    }\n\n    throw new Error(\"发布需要 NextClaw 平台登录态。请先运行 nextclaw login，或传入 --token。\");\n  };\n\n  private fetchCurrentPlatformUser = async (params: {\n    token: string;\n    platformApiBase: string;\n  }): Promise<{\n    id: string;\n    username: string | null;\n    role: \"admin\" | \"user\";\n  }> => {\n    const response = await fetch(`${params.platformApiBase}/platform/auth/me`, {\n      headers: {\n        authorization: `Bearer ${params.token}`,\n        accept: \"application/json\",\n      },\n    });\n    const payload = await response.json().catch(() => null);\n    if (!response.ok) {\n      const message =\n        typeof payload === \"object\" &&\n        payload &&\n        \"error\" in payload &&\n        typeof (payload as { error?: { message?: unknown } }).error?.message === \"string\"\n          ? (payload as { error: { message: string } }).error.message\n          : `${response.status} ${response.statusText}`;\n      throw new Error(`读取 NextClaw 登录态失败：${message}`);\n    }\n    const user = typeof payload === \"object\" &&\n      payload &&\n      \"data\" in payload &&\n      typeof (payload as { data?: { user?: unknown } }).data?.user === \"object\" &&\n      (payload as { data: { user: Record<string, unknown> } }).data.user\n      ? (payload as { data: { user: Record<string, unknown> } }).data.user\n      : null;\n    const id = typeof user?.id === \"string\" ? user.id.trim() : \"\";\n    const username = typeof user?.username === \"string\" ? user.username.trim() : \"\";\n    const role = user?.role === \"admin\" ? \"admin\" : \"user\";\n    if (!id) {\n      throw new Error(\"平台登录态缺少用户 id。\");\n    }\n    return {\n      id,\n      username: username || null,\n      role,\n    };\n  };\n\n  private resolvePlatformApiBase = (configuredApiBase?: string): string => {\n    const source = configuredApiBase?.trim() || process.env.NEXTCLAW_PLATFORM_API_BASE?.trim() || DEFAULT_PLATFORM_API_BASE;\n    const normalized = new URL(source);\n    normalized.pathname = normalized.pathname.replace(/\\/v1\\/?$/, \"/\");\n    return normalized.toString().replace(/\\/+$/, \"\");\n  };\n\n  private buildUserPublisher = (\n    user: { id: string; username: string | null; role: \"admin\" | \"user\" },\n    appId: string,\n  ): NonNullable<AppPublishPayload[\"publisher\"]> => {\n    const isOfficialScope = appId.startsWith(\"nextclaw.\");\n    if (isOfficialScope && user.role === \"admin\") {\n      return this.buildOfficialPublisher();\n    }\n    if (!user.username) {\n      throw new Error(\"当前 NextClaw 账号还没有 username，无法发布个人 scope app。请先在平台账号页设置用户名。\");\n    }\n    return {\n      id: user.username,\n      name: user.username,\n      url: `https://platform.nextclaw.io/account`,\n    };\n  };\n\n  private buildOfficialPublisher = (): NonNullable<AppPublishPayload[\"publisher\"]> => {\n    return {\n      id: \"nextclaw\",\n      name: \"NextClaw\",\n      url: \"https://nextclaw.io\",\n    };\n  };\n}\n"],"mappings":";;;;;;;;;AAWA,MAAM,4BAA4B;AAOlC,IAAa,oBAAb,MAA+B;CAC7B,YACE,kBAAuD,IAAI,oBAAoB,EAC/E,gBAAmD,IAAI,kBAAkB,EACzE,kBAAkE,IAAI,+BAA+B,EACrG,oBAAkE,IAAI,6BAA6B,EACnG,mBAA8D,IAAI,0BAA0B,EAC5F;AALiB,OAAA,kBAAA;AACA,OAAA,gBAAA;AACA,OAAA,kBAAA;AACA,OAAA,oBAAA;AACA,OAAA,mBAAA;;CAGnB,UAAU,OAAO,WAOgB;EAC/B,MAAM,EACJ,cAAc,mBACd,cACA,kBACA,YACA,UACE;EACJ,MAAM,eAAe,KAAK,QAAQ,kBAAkB;EACpD,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,KAAK,aAAa;EACpE,MAAM,mBAAmB,OAAO,SAC7B,eAAe,SAAS,kBAAkB,IAAI,WAAW;EAC5D,MAAM,WAAW,MAAM,KAAK,gBAAgB,KAAK;GAC/C;GACA,UAAU,eAAe;GACzB;GACD,CAAC;EACF,MAAM,QAAQ,MAAM,KAAK,oBAAoB;GAC3C;GACA,eAAe;GACf,OAAO,eAAe,SAAS;GAChC,CAAC;EACF,MAAM,SAAS,MAAM,KAAK,cAAc,iBAAiB;GACvD;GACA,YAAY;GACZ,MAAM;GACP,CAAC;EACF,MAAM,cAAc,OAAO,KAAK,MAAM,SAAS,OAAO,WAAW,CAAC;EAClE,MAAM,eAAe,WAAW,SAAS,CAAC,OAAO,YAAY,CAAC,OAAO,MAAM;EAC3E,MAAM,eAAe,MAAM,KAAK,gBAAgB,oBAAoB;GAClE;GACA,UAAU,eAAe,SAAS;GAClC;GACA,SAAS,SAAS;GACnB,CAAC;EACF,MAAM,UAA6B;GACjC,MAAM,SAAS;GACf,OAAO,eAAe,SAAS;GAC/B,MAAM,eAAe,SAAS;GAC9B,SAAS,eAAe,SAAS;GACjC,SAAS,SAAS;GAClB,aAAa,SAAS;GACtB,aAAa,SAAS,eAAe,eAAe,SAAS;GAC7D,iBAAiB,SAAS;GAC1B,QAAQ,SAAS;GACjB,MAAM,SAAS;GACf,YAAY,SAAS;GACrB,UAAU,SAAS;GACnB,UAAU,SAAS,YAAY;GAC/B,WAAW,MAAM;GACjB,SAAS,SAAS;GAClB;GACA,UAAU,eAAe;GACzB,aAAa,eAAe,SAAS,kBAAkB,IACnD,eAAe,SAAS,eAAe,EAAE,GACzC,EAAE;GACN,cAAc,YAAY,SAAS,SAAS;GAC5C;GACA,OAAO,aAAa,KAAK,UAAU;IACjC,MAAM,KAAK;IACX,eAAe,KAAK,MAAM,SAAS,SAAS;IAC7C,EAAE;GACJ;AAMD,SAAO;GACL,GANa,MAAM,KAAK,kBAAkB,QAAQ;IAClD;IACA;IACA,OAAO,MAAM;IACd,CAAC;GAGA,cAAc;IACZ,MAAM,OAAO;IACb,QAAQ;IACR,MAAM;IACP;GACF;;CAGH,sBAA8B,OAAO,WAIA;EACnC,MAAM,gBAAgB,OAAO,eAAe,MAAM;EAClD,MAAM,gBAAgB,QAAQ,IAAI,kCAAkC,MAAM;AAC1E,MAAI,eAAe;GACjB,MAAM,QAAQ;AACd,OAAI,CAAC,MACH,OAAM,IAAI,MAAM,oBAAoB;GAEtC,MAAM,KAAK,MAAM,KAAK,yBAAyB;IAC7C;IACA,iBAAiB,KAAK,wBAAwB;IAC/C,CAAC;AACF,UAAO;IACL;IACA,WAAW,KAAK,mBAAmB,IAAI,OAAO,MAAM;IACrD;;EAGH,MAAM,YAAY,KAAK,iBAAiB,sBAAsB;EAC9D,MAAM,gBAAgB,UAAU,OAAO,MAAM;AAC7C,MAAI,eAAe;GACjB,MAAM,KAAK,MAAM,KAAK,yBAAyB;IAC7C,OAAO;IACP,iBAAiB,KAAK,uBAAuB,UAAU,WAAW;IACnE,CAAC;AACF,UAAO;IACL,OAAO;IACP,WAAW,KAAK,mBAAmB,IAAI,OAAO,MAAM;IACrD;;AAGH,MAAI,cACF,QAAO;GACL,OAAO;GACP,WAAW,KAAK,wBAAwB;GACzC;AAGH,QAAM,IAAI,MAAM,uDAAuD;;CAGzE,2BAAmC,OAAO,WAOpC;EACJ,MAAM,WAAW,MAAM,MAAM,GAAG,OAAO,gBAAgB,oBAAoB,EACzE,SAAS;GACP,eAAe,UAAU,OAAO;GAChC,QAAQ;GACT,EACF,CAAC;EACF,MAAM,UAAU,MAAM,SAAS,MAAM,CAAC,YAAY,KAAK;AACvD,MAAI,CAAC,SAAS,IAAI;GAChB,MAAM,UACJ,OAAO,YAAY,YACnB,WACA,WAAW,WACX,OAAQ,QAA8C,OAAO,YAAY,WACpE,QAA2C,MAAM,UAClD,GAAG,SAAS,OAAO,GAAG,SAAS;AACrC,SAAM,IAAI,MAAM,qBAAqB,UAAU;;EAEjD,MAAM,OAAO,OAAO,YAAY,YAC9B,WACA,UAAU,WACV,OAAQ,QAA0C,MAAM,SAAS,YAChE,QAAwD,KAAK,OAC3D,QAAwD,KAAK,OAC9D;EACJ,MAAM,KAAK,OAAO,MAAM,OAAO,WAAW,KAAK,GAAG,MAAM,GAAG;EAC3D,MAAM,WAAW,OAAO,MAAM,aAAa,WAAW,KAAK,SAAS,MAAM,GAAG;EAC7E,MAAM,OAAO,MAAM,SAAS,UAAU,UAAU;AAChD,MAAI,CAAC,GACH,OAAM,IAAI,MAAM,gBAAgB;AAElC,SAAO;GACL;GACA,UAAU,YAAY;GACtB;GACD;;CAGH,0BAAkC,sBAAuC;EACvE,MAAM,SAAS,mBAAmB,MAAM,IAAI,QAAQ,IAAI,4BAA4B,MAAM,IAAI;EAC9F,MAAM,aAAa,IAAI,IAAI,OAAO;AAClC,aAAW,WAAW,WAAW,SAAS,QAAQ,YAAY,IAAI;AAClE,SAAO,WAAW,UAAU,CAAC,QAAQ,QAAQ,GAAG;;CAGlD,sBACE,MACA,UACgD;AAEhD,MADwB,MAAM,WAAW,YAAY,IAC9B,KAAK,SAAS,QACnC,QAAO,KAAK,wBAAwB;AAEtC,MAAI,CAAC,KAAK,SACR,OAAM,IAAI,MAAM,6DAA6D;AAE/E,SAAO;GACL,IAAI,KAAK;GACT,MAAM,KAAK;GACX,KAAK;GACN;;CAGH,+BAAoF;AAClF,SAAO;GACL,IAAI;GACJ,MAAM;GACN,KAAK;GACN"}
+{"version":3,"file":"app-publish.service.js","names":[],"sources":["../../src/services/app-publish.service.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { readFile } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { AppBundleService } from \"#app-runtime/services/app-bundle.service.js\";\nimport type { AppDistributionMode } from \"#app-runtime/types/app-bundle.types.js\";\nimport { AppManifestService } from \"#app-runtime/services/app-manifest.service.js\";\nimport { AppMarketplaceClientService } from \"./app-marketplace-client.service.js\";\nimport { AppMarketplaceMetadataService } from \"./app-marketplace-metadata.service.js\";\nimport type { AppPublishPayload, AppPublishResult } from \"#app-runtime/types/app-publish.types.js\";\nimport { PlatformAuthStateService } from \"./platform-auth-state.service.js\";\n\nconst DEFAULT_PLATFORM_API_BASE = \"https://ai-gateway-api.nextclaw.io\";\n\ntype ResolvedPublishActor = {\n  token: string;\n  publisher: NonNullable<AppPublishPayload[\"publisher\"]>;\n};\n\nexport class AppPublishService {\n  constructor(\n    private readonly manifestService: AppManifestService = new AppManifestService(),\n    private readonly bundleService: AppBundleService = new AppBundleService(),\n    private readonly metadataService: AppMarketplaceMetadataService = new AppMarketplaceMetadataService(),\n    private readonly marketplaceClient: AppMarketplaceClientService = new AppMarketplaceClientService(),\n    private readonly authStateService: PlatformAuthStateService = new PlatformAuthStateService(),\n  ) {}\n\n  publish = async (params: {\n    appDirectory: string;\n    metadataPath?: string;\n    bundleOutputPath?: string;\n    apiBaseUrl?: string;\n    token?: string;\n    mode?: AppDistributionMode;\n  }): Promise<AppPublishResult> => {\n    const {\n      appDirectory: inputAppDirectory,\n      metadataPath,\n      bundleOutputPath,\n      apiBaseUrl,\n      token,\n    } = params;\n    const appDirectory = path.resolve(inputAppDirectory);\n    const manifestBundle = await this.manifestService.load(appDirectory);\n    const distributionMode = params.mode ??\n      (manifestBundle.manifest.schemaVersion === 2 ? \"bundle\" : \"source\");\n    const metadata = await this.metadataService.load({\n      appDirectory,\n      manifest: manifestBundle.manifest,\n      metadataPath,\n    });\n    const actor = await this.resolvePublishActor({\n      apiBaseUrl,\n      explicitToken: token,\n      appId: manifestBundle.manifest.id,\n    });\n    const bundle = await this.bundleService.packAppDirectory({\n      appDirectory,\n      outputPath: bundleOutputPath,\n      mode: distributionMode,\n    });\n    const bundleBytes = Buffer.from(await readFile(bundle.bundlePath));\n    const bundleSha256 = createHash(\"sha256\").update(bundleBytes).digest(\"hex\");\n    const publishFiles = await this.metadataService.collectPublishFiles({\n      appDirectory,\n      iconPath: manifestBundle.manifest.icon,\n      metadataPath,\n      visuals: metadata.visuals,\n    });\n    const payload: AppPublishPayload = {\n      slug: metadata.slug,\n      appId: manifestBundle.manifest.id,\n      name: manifestBundle.manifest.name,\n      version: manifestBundle.manifest.version,\n      summary: metadata.summary,\n      summaryI18n: metadata.summaryI18n,\n      description: metadata.description ?? manifestBundle.manifest.description,\n      descriptionI18n: metadata.descriptionI18n,\n      author: metadata.author,\n      tags: metadata.tags,\n      sourceRepo: metadata.sourceRepo,\n      homepage: metadata.homepage,\n      featured: metadata.featured ?? false,\n      publisher: actor.publisher,\n      visuals: metadata.visuals,\n      distributionMode,\n      manifest: manifestBundle.manifest,\n      permissions: manifestBundle.manifest.schemaVersion === 1\n        ? manifestBundle.manifest.permissions ?? {}\n        : this.manifestService.resolvePlatformSecurity(manifestBundle.manifest).permissions,\n      bundleBase64: bundleBytes.toString(\"base64\"),\n      bundleSha256,\n      files: publishFiles.map((file) => ({\n        path: file.path,\n        contentBase64: file.bytes.toString(\"base64\"),\n      })),\n    };\n    const result = await this.marketplaceClient.publish({\n      payload,\n      apiBaseUrl,\n      token: actor.token,\n    });\n    return {\n      ...result,\n      distribution: {\n        path: bundle.bundlePath,\n        sha256: bundleSha256,\n        mode: distributionMode,\n      },\n    };\n  };\n\n  private resolvePublishActor = async (params: {\n    apiBaseUrl?: string;\n    explicitToken?: string;\n    appId: string;\n  }): Promise<ResolvedPublishActor> => {\n    const explicitToken = params.explicitToken?.trim();\n    const envAdminToken = process.env.NEXTCLAW_MARKETPLACE_ADMIN_TOKEN?.trim();\n    if (explicitToken) {\n      const token = explicitToken;\n      if (!token) {\n        throw new Error(\"缺少 publish token。\");\n      }\n      const me = await this.fetchCurrentPlatformUser({\n        token,\n        platformApiBase: this.resolvePlatformApiBase(),\n      });\n      return {\n        token,\n        publisher: this.buildUserPublisher(me, params.appId),\n      };\n    }\n\n    const authState = this.authStateService.readCurrentAuthState();\n    const platformToken = authState.token?.trim();\n    if (platformToken) {\n      const me = await this.fetchCurrentPlatformUser({\n        token: platformToken,\n        platformApiBase: this.resolvePlatformApiBase(authState.apiBaseUrl),\n      });\n      return {\n        token: platformToken,\n        publisher: this.buildUserPublisher(me, params.appId),\n      };\n    }\n\n    if (envAdminToken) {\n      return {\n        token: envAdminToken,\n        publisher: this.buildOfficialPublisher(),\n      };\n    }\n\n    throw new Error(\"发布需要 NextClaw 平台登录态。请先运行 nextclaw login，或传入 --token。\");\n  };\n\n  private fetchCurrentPlatformUser = async (params: {\n    token: string;\n    platformApiBase: string;\n  }): Promise<{\n    id: string;\n    username: string | null;\n    role: \"admin\" | \"user\";\n  }> => {\n    const response = await fetch(`${params.platformApiBase}/platform/auth/me`, {\n      headers: {\n        authorization: `Bearer ${params.token}`,\n        accept: \"application/json\",\n      },\n    });\n    const payload = await response.json().catch(() => null);\n    if (!response.ok) {\n      const message =\n        typeof payload === \"object\" &&\n        payload &&\n        \"error\" in payload &&\n        typeof (payload as { error?: { message?: unknown } }).error?.message === \"string\"\n          ? (payload as { error: { message: string } }).error.message\n          : `${response.status} ${response.statusText}`;\n      throw new Error(`读取 NextClaw 登录态失败：${message}`);\n    }\n    const user = typeof payload === \"object\" &&\n      payload &&\n      \"data\" in payload &&\n      typeof (payload as { data?: { user?: unknown } }).data?.user === \"object\" &&\n      (payload as { data: { user: Record<string, unknown> } }).data.user\n      ? (payload as { data: { user: Record<string, unknown> } }).data.user\n      : null;\n    const id = typeof user?.id === \"string\" ? user.id.trim() : \"\";\n    const username = typeof user?.username === \"string\" ? user.username.trim() : \"\";\n    const role = user?.role === \"admin\" ? \"admin\" : \"user\";\n    if (!id) {\n      throw new Error(\"平台登录态缺少用户 id。\");\n    }\n    return {\n      id,\n      username: username || null,\n      role,\n    };\n  };\n\n  private resolvePlatformApiBase = (configuredApiBase?: string): string => {\n    const source = configuredApiBase?.trim() || process.env.NEXTCLAW_PLATFORM_API_BASE?.trim() || DEFAULT_PLATFORM_API_BASE;\n    const normalized = new URL(source);\n    normalized.pathname = normalized.pathname.replace(/\\/v1\\/?$/, \"/\");\n    return normalized.toString().replace(/\\/+$/, \"\");\n  };\n\n  private buildUserPublisher = (\n    user: { id: string; username: string | null; role: \"admin\" | \"user\" },\n    appId: string,\n  ): NonNullable<AppPublishPayload[\"publisher\"]> => {\n    const isOfficialScope = appId.startsWith(\"nextclaw.\");\n    if (isOfficialScope && user.role === \"admin\") {\n      return this.buildOfficialPublisher();\n    }\n    if (!user.username) {\n      throw new Error(\"当前 NextClaw 账号还没有 username，无法发布个人 scope app。请先在平台账号页设置用户名。\");\n    }\n    return {\n      id: user.username,\n      name: user.username,\n      url: `https://platform.nextclaw.io/account`,\n    };\n  };\n\n  private buildOfficialPublisher = (): NonNullable<AppPublishPayload[\"publisher\"]> => {\n    return {\n      id: \"nextclaw\",\n      name: \"NextClaw\",\n      url: \"https://nextclaw.io\",\n    };\n  };\n}\n"],"mappings":";;;;;;;;;AAWA,MAAM,4BAA4B;AAOlC,IAAa,oBAAb,MAA+B;CAC7B,YACE,kBAAuD,IAAI,oBAAoB,EAC/E,gBAAmD,IAAI,kBAAkB,EACzE,kBAAkE,IAAI,+BAA+B,EACrG,oBAAkE,IAAI,6BAA6B,EACnG,mBAA8D,IAAI,0BAA0B,EAC5F;AALiB,OAAA,kBAAA;AACA,OAAA,gBAAA;AACA,OAAA,kBAAA;AACA,OAAA,oBAAA;AACA,OAAA,mBAAA;;CAGnB,UAAU,OAAO,WAOgB;EAC/B,MAAM,EACJ,cAAc,mBACd,cACA,kBACA,YACA,UACE;EACJ,MAAM,eAAe,KAAK,QAAQ,kBAAkB;EACpD,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,KAAK,aAAa;EACpE,MAAM,mBAAmB,OAAO,SAC7B,eAAe,SAAS,kBAAkB,IAAI,WAAW;EAC5D,MAAM,WAAW,MAAM,KAAK,gBAAgB,KAAK;GAC/C;GACA,UAAU,eAAe;GACzB;GACD,CAAC;EACF,MAAM,QAAQ,MAAM,KAAK,oBAAoB;GAC3C;GACA,eAAe;GACf,OAAO,eAAe,SAAS;GAChC,CAAC;EACF,MAAM,SAAS,MAAM,KAAK,cAAc,iBAAiB;GACvD;GACA,YAAY;GACZ,MAAM;GACP,CAAC;EACF,MAAM,cAAc,OAAO,KAAK,MAAM,SAAS,OAAO,WAAW,CAAC;EAClE,MAAM,eAAe,WAAW,SAAS,CAAC,OAAO,YAAY,CAAC,OAAO,MAAM;EAC3E,MAAM,eAAe,MAAM,KAAK,gBAAgB,oBAAoB;GAClE;GACA,UAAU,eAAe,SAAS;GAClC;GACA,SAAS,SAAS;GACnB,CAAC;EACF,MAAM,UAA6B;GACjC,MAAM,SAAS;GACf,OAAO,eAAe,SAAS;GAC/B,MAAM,eAAe,SAAS;GAC9B,SAAS,eAAe,SAAS;GACjC,SAAS,SAAS;GAClB,aAAa,SAAS;GACtB,aAAa,SAAS,eAAe,eAAe,SAAS;GAC7D,iBAAiB,SAAS;GAC1B,QAAQ,SAAS;GACjB,MAAM,SAAS;GACf,YAAY,SAAS;GACrB,UAAU,SAAS;GACnB,UAAU,SAAS,YAAY;GAC/B,WAAW,MAAM;GACjB,SAAS,SAAS;GAClB;GACA,UAAU,eAAe;GACzB,aAAa,eAAe,SAAS,kBAAkB,IACnD,eAAe,SAAS,eAAe,EAAE,GACzC,KAAK,gBAAgB,wBAAwB,eAAe,SAAS,CAAC;GAC1E,cAAc,YAAY,SAAS,SAAS;GAC5C;GACA,OAAO,aAAa,KAAK,UAAU;IACjC,MAAM,KAAK;IACX,eAAe,KAAK,MAAM,SAAS,SAAS;IAC7C,EAAE;GACJ;AAMD,SAAO;GACL,GANa,MAAM,KAAK,kBAAkB,QAAQ;IAClD;IACA;IACA,OAAO,MAAM;IACd,CAAC;GAGA,cAAc;IACZ,MAAM,OAAO;IACb,QAAQ;IACR,MAAM;IACP;GACF;;CAGH,sBAA8B,OAAO,WAIA;EACnC,MAAM,gBAAgB,OAAO,eAAe,MAAM;EAClD,MAAM,gBAAgB,QAAQ,IAAI,kCAAkC,MAAM;AAC1E,MAAI,eAAe;GACjB,MAAM,QAAQ;AACd,OAAI,CAAC,MACH,OAAM,IAAI,MAAM,oBAAoB;GAEtC,MAAM,KAAK,MAAM,KAAK,yBAAyB;IAC7C;IACA,iBAAiB,KAAK,wBAAwB;IAC/C,CAAC;AACF,UAAO;IACL;IACA,WAAW,KAAK,mBAAmB,IAAI,OAAO,MAAM;IACrD;;EAGH,MAAM,YAAY,KAAK,iBAAiB,sBAAsB;EAC9D,MAAM,gBAAgB,UAAU,OAAO,MAAM;AAC7C,MAAI,eAAe;GACjB,MAAM,KAAK,MAAM,KAAK,yBAAyB;IAC7C,OAAO;IACP,iBAAiB,KAAK,uBAAuB,UAAU,WAAW;IACnE,CAAC;AACF,UAAO;IACL,OAAO;IACP,WAAW,KAAK,mBAAmB,IAAI,OAAO,MAAM;IACrD;;AAGH,MAAI,cACF,QAAO;GACL,OAAO;GACP,WAAW,KAAK,wBAAwB;GACzC;AAGH,QAAM,IAAI,MAAM,uDAAuD;;CAGzE,2BAAmC,OAAO,WAOpC;EACJ,MAAM,WAAW,MAAM,MAAM,GAAG,OAAO,gBAAgB,oBAAoB,EACzE,SAAS;GACP,eAAe,UAAU,OAAO;GAChC,QAAQ;GACT,EACF,CAAC;EACF,MAAM,UAAU,MAAM,SAAS,MAAM,CAAC,YAAY,KAAK;AACvD,MAAI,CAAC,SAAS,IAAI;GAChB,MAAM,UACJ,OAAO,YAAY,YACnB,WACA,WAAW,WACX,OAAQ,QAA8C,OAAO,YAAY,WACpE,QAA2C,MAAM,UAClD,GAAG,SAAS,OAAO,GAAG,SAAS;AACrC,SAAM,IAAI,MAAM,qBAAqB,UAAU;;EAEjD,MAAM,OAAO,OAAO,YAAY,YAC9B,WACA,UAAU,WACV,OAAQ,QAA0C,MAAM,SAAS,YAChE,QAAwD,KAAK,OAC3D,QAAwD,KAAK,OAC9D;EACJ,MAAM,KAAK,OAAO,MAAM,OAAO,WAAW,KAAK,GAAG,MAAM,GAAG;EAC3D,MAAM,WAAW,OAAO,MAAM,aAAa,WAAW,KAAK,SAAS,MAAM,GAAG;EAC7E,MAAM,OAAO,MAAM,SAAS,UAAU,UAAU;AAChD,MAAI,CAAC,GACH,OAAM,IAAI,MAAM,gBAAgB;AAElC,SAAO;GACL;GACA,UAAU,YAAY;GACtB;GACD;;CAGH,0BAAkC,sBAAuC;EACvE,MAAM,SAAS,mBAAmB,MAAM,IAAI,QAAQ,IAAI,4BAA4B,MAAM,IAAI;EAC9F,MAAM,aAAa,IAAI,IAAI,OAAO;AAClC,aAAW,WAAW,WAAW,SAAS,QAAQ,YAAY,IAAI;AAClE,SAAO,WAAW,UAAU,CAAC,QAAQ,QAAQ,GAAG;;CAGlD,sBACE,MACA,UACgD;AAEhD,MADwB,MAAM,WAAW,YAAY,IAC9B,KAAK,SAAS,QACnC,QAAO,KAAK,wBAAwB;AAEtC,MAAI,CAAC,KAAK,SACR,OAAM,IAAI,MAAM,6DAA6D;AAE/E,SAAO;GACL,IAAI,KAAK;GACT,MAAM,KAAK;GACX,KAAK;GACN;;CAGH,+BAAoF;AAClF,SAAO;GACL,IAAI;GACJ,MAAM;GACN,KAAK;GACN"}

package/dist/services/app-registry.service.d.ts

@@ -1,12 +1,14 @@
-import { AppPermissions, AppResolvedComponent } from "../types/app-manifest.types.js";
+import { AppPermissions, AppPlatformSecuritySummary, AppResolvedComponent } from "../types/app-manifest.types.js";
 import { AppDocumentGrantMap } from "../types/app-permissions.types.js";
 import { AppHomeService } from "./app-home.service.js";
+import { AppInstanceRecord } from "../types/app-storage.types.js";
 import { AppInstallSourceKind, AppRegistry, AppRegistryAppRecord, AppRegistryInstalledVersion } from "../types/app-registry.types.js";
 
 //#region src/services/app-registry.service.d.ts
 declare class AppRegistryService {
   private readonly appHomeService;
-  private static readonly mutationQueues;
+  private readonly instanceStorageService;
+  private readonly fileLockService;
   constructor(appHomeService?: AppHomeService);
   load: () => Promise<AppRegistry>;
   save: (registry: AppRegistry) => Promise<void>;
@@ -20,7 +22,7 @@ declare class AppRegistryService {
     description?: string;
     version: string;
     installDirectory: string;
-    dataDirectory: string;
+    defaultInstance: AppInstanceRecord;
     sourceKind: AppInstallSourceKind;
     sourceRef: string;
     installedAt: string;
@@ -33,10 +35,15 @@ declare class AppRegistryService {
     manifestSchemaVersion: 1 | 2;
     components?: AppResolvedComponent[];
     primaryPanelId?: string;
+    security?: AppPlatformSecuritySummary;
+    dataSchemaVersion: number;
+    contentSha256?: string;
     enabled?: boolean;
+    activate?: boolean;
   }) => Promise<AppRegistryAppRecord>;
   setEnabled: (appId: string, enabled: boolean) => Promise<AppRegistryAppRecord>;
   activateVersion: (appId: string, version: string) => Promise<AppRegistryAppRecord>;
+  setVersionContentDigest: (appId: string, version: string, contentSha256: string) => Promise<AppRegistryAppRecord>;
   updateGrants: (appId: string, grants: AppDocumentGrantMap) => Promise<AppRegistryAppRecord>;
   setDocumentGrant: (appId: string, scopeId: string, directoryPath: string) => Promise<AppRegistryAppRecord>;
   removeDocumentGrant: (appId: string, scopeId: string) => Promise<boolean>;
@@ -46,6 +53,9 @@ declare class AppRegistryService {
   private updateApp;
   private withMutation;
   private parseRegistry;
+  private parseDefaultInstance;
+  private assertExactPath;
+  private parseComponents;
   private assertRecord;
   private requireString;
   private isMissingFileError;

package/dist/services/app-registry.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-registry.service.d.ts","names":[],"sources":["../../src/services/app-registry.service.ts"],"mappings":";;;;;;cAYa,kBAAA;EAAA,iBAGkB,cAAA;EAAA,wBAFL,cAAA;cAEK,cAAA,GAAgB,cAAA;EAE7C,IAAA,QAAiB,OAAA,CAAQ,WAAA;EAazB,IAAA,GAAc,QAAA,EAAU,WAAA,KAAc,OAAA;EAAA,QAI9B,YAAA;EAsBR,QAAA,QAAqB,OAAA,CAAQ,oBAAA;EAK7B,MAAA,GAAgB,KAAA,aAAgB,OAAA,CAAQ,oBAAA;EAKxC,gBAAA,GAA0B,KAAA,aAAgB,OAAA,CAAQ,2BAAA;EAKlD,kBAAA,GAA4B,MAAA;IAC1B,KAAA;IACA,IAAA;IACA,WAAA;IACA,OAAA;IACA,gBAAA;IACA,aAAA;IACA,UAAA,EAAY,oBAAA;IACZ,SAAA;IACA,WAAA;IACA,gBAAA,GAAmB,2BAAA;IACnB,WAAA,EAAa,cAAA;IACb,WAAA;IACA,SAAA;IACA,MAAA;IACA,SAAA,GAAY,2BAAA;IACZ,qBAAA;IACA,UAAA,GAAa,oBAAA;IACb,cAAA;IACA,OAAA;EAAA,MACE,OAAA,CAAQ,oBAAA;EAsCZ,UAAA,GAAoB,KAAA,UAAe,OAAA,cAAmB,OAAA,CAAQ,oBAAA;EAI9D,eAAA,GACE,KAAA,UACA,OAAA,aACC,OAAA,CAAQ,oBAAA;EASX,YAAA,GACE,KAAA,UACA,MAAA,EAAQ,mBAAA,KACP,OAAA,CAAQ,oBAAA;EAOX,gBAAA,GACE,KAAA,UACA,OAAA,UACA,aAAA,aACC,OAAA,CAAQ,oBAAA;EAIX,mBAAA,GAA6B,KAAA,UAAe,OAAA,aAAkB,OAAA;EAc9D,SAAA,GAAmB,KAAA,aAAgB,OAAA,CAAQ,oBAAA;EAa3C,mBAAA,GAA6B,KAAA,aAAgB,OAAA;EAK7C,oBAAA,GAA8B,KAAA,UAAe,UAAA,cAAsB,OAAA;EAAA,QAY3D,SAAA;EAAA,QAiBA,YAAA;EAAA,QAcA,aAAA;EAAA,QAoDA,YAAA;EAAA,QAOA,aAAA;EAAA,QAOA,kBAAA;AAAA"}
+{"version":3,"file":"app-registry.service.d.ts","names":[],"sources":["../../src/services/app-registry.service.ts"],"mappings":";;;;;;;cAuBa,kBAAA;EAAA,iBAIkB,cAAA;EAAA,iBAHZ,sBAAA;EAAA,iBACA,eAAA;cAEY,cAAA,GAAgB,cAAA;EAI7C,IAAA,QAAiB,OAAA,CAAQ,WAAA;EAazB,IAAA,GAAc,QAAA,EAAU,WAAA,KAAc,OAAA;EAAA,QAI9B,YAAA;EAsBR,QAAA,QAAqB,OAAA,CAAQ,oBAAA;EAK7B,MAAA,GAAgB,KAAA,aAAgB,OAAA,CAAQ,oBAAA;EAKxC,gBAAA,GAA0B,KAAA,aAAgB,OAAA,CAAQ,2BAAA;EAKlD,kBAAA,GAA4B,MAAA;IAC1B,KAAA;IACA,IAAA;IACA,WAAA;IACA,OAAA;IACA,gBAAA;IACA,eAAA,EAAiB,iBAAA;IACjB,UAAA,EAAY,oBAAA;IACZ,SAAA;IACA,WAAA;IACA,gBAAA,GAAmB,2BAAA;IACnB,WAAA,EAAa,cAAA;IACb,WAAA;IACA,SAAA;IACA,MAAA;IACA,SAAA,GAAY,2BAAA;IACZ,qBAAA;IACA,UAAA,GAAa,oBAAA;IACb,cAAA;IACA,QAAA,GAAW,0BAAA;IACX,iBAAA;IACA,aAAA;IACA,OAAA;IACA,QAAA;EAAA,MACE,OAAA,CAAQ,oBAAA;EAoDZ,UAAA,GAAoB,KAAA,UAAe,OAAA,cAAmB,OAAA,CAAQ,oBAAA;EAI9D,eAAA,GACE,KAAA,UACA,OAAA,aACC,OAAA,CAAQ,oBAAA;EASX,uBAAA,GACE,KAAA,UACA,OAAA,UACA,aAAA,aACC,OAAA,CAAQ,oBAAA;EAmBX,YAAA,GACE,KAAA,UACA,MAAA,EAAQ,mBAAA,KACP,OAAA,CAAQ,oBAAA;EAOX,gBAAA,GACE,KAAA,UACA,OAAA,UACA,aAAA,aACC,OAAA,CAAQ,oBAAA;EAIX,mBAAA,GAA6B,KAAA,UAAe,OAAA,aAAkB,OAAA;EAc9D,SAAA,GAAmB,KAAA,aAAgB,OAAA,CAAQ,oBAAA;EAa3C,mBAAA,GAA6B,KAAA,aAAgB,OAAA;EAK7C,oBAAA,GAA8B,KAAA,UAAe,UAAA,cAAsB,OAAA;EAAA,QAY3D,SAAA;EAAA,QAiBA,YAAA;EAAA,QAKA,aAAA;EAAA,QA+FA,oBAAA;EAAA,QAyGA,eAAA;EAAA,QAMA,eAAA;EAAA,QA6DA,YAAA;EAAA,QAOA,aAAA;EAAA,QAOA,kBAAA;AAAA"}

package/dist/services/app-registry.service.js

@@ -1,11 +1,18 @@
 import { AppHomeService } from "./app-home.service.js";
+import { FileLockService } from "./file-lock.service.js";
+import { AppInstanceStorageService } from "./app-instance-storage.service.js";
 import { open, readFile, rename, rm } from "node:fs/promises";
 import path from "node:path";
 //#region src/services/app-registry.service.ts
-var AppRegistryService = class AppRegistryService {
-	static mutationQueues = /* @__PURE__ */ new Map();
+const SAFE_APP_ID_PATTERN = /^[a-z0-9]+(?:[.-][a-z0-9]+)*$/;
+const SAFE_VERSION_PATTERN = /^[0-9A-Za-z]+(?:[._+-][0-9A-Za-z]+)*$/;
+const SAFE_COMPONENT_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var AppRegistryService = class {
+	instanceStorageService;
+	fileLockService = new FileLockService();
 	constructor(appHomeService = new AppHomeService()) {
 		this.appHomeService = appHomeService;
+		this.instanceStorageService = new AppInstanceStorageService(appHomeService);
 	}
 	load = async () => {
 		await this.appHomeService.ensureBaseDirectories();
@@ -57,13 +64,17 @@ var AppRegistryService = class AppRegistryService {
 		return await this.withMutation(async () => {
 			const registry = await this.load();
 			const currentRecord = registry.apps[params.appId];
+			const currentPublisher = currentRecord?.publisher ?? currentRecord?.installedVersions[currentRecord.activeVersion]?.publisher;
+			if (currentPublisher && currentPublisher.id !== params.publisher?.id) throw new Error(`应用 ${params.appId} 已绑定发布者 ${currentPublisher.id}，拒绝由 ${params.publisher?.id ?? "未验证本地来源"} 覆盖。`);
 			const nextRecord = {
 				appId: params.appId,
 				name: params.name,
 				description: params.description,
-				activeVersion: params.version,
+				publisher: currentPublisher ?? params.publisher,
+				activeVersion: params.activate === false && currentRecord ? currentRecord.activeVersion : params.version,
 				enabled: params.enabled ?? currentRecord?.enabled ?? params.manifestSchemaVersion === 1,
-				dataDirectory: params.dataDirectory,
+				dataDirectory: params.defaultInstance.storage.dataDirectory,
+				defaultInstance: params.defaultInstance,
 				installedVersions: {
 					...currentRecord?.installedVersions ?? {},
 					[params.version]: {
@@ -80,7 +91,10 @@ var AppRegistryService = class AppRegistryService {
 						publisher: params.publisher,
 						manifestSchemaVersion: params.manifestSchemaVersion,
 						components: params.components,
-						primaryPanelId: params.primaryPanelId
+						primaryPanelId: params.primaryPanelId,
+						security: params.security,
+						dataSchemaVersion: params.dataSchemaVersion,
+						contentSha256: params.contentSha256
 					}
 				},
 				grants: currentRecord?.grants ?? {}
@@ -105,6 +119,23 @@ var AppRegistryService = class AppRegistryService {
 			};
 		});
 	};
+	setVersionContentDigest = async (appId, version, contentSha256) => {
+		return await this.updateApp(appId, (record) => {
+			const installedVersion = record.installedVersions[version];
+			if (!installedVersion) throw new Error(`应用 ${appId} 未安装版本 ${version}。`);
+			if (installedVersion.contentSha256 && installedVersion.contentSha256 !== contentSha256) throw new Error(`应用 ${appId}@${version} 已存在不同的代码完整性摘要。`);
+			return {
+				...record,
+				installedVersions: {
+					...record.installedVersions,
+					[version]: {
+						...installedVersion,
+						contentSha256
+					}
+				}
+			};
+		});
+	};
 	updateGrants = async (appId, grants) => {
 		return await this.updateApp(appId, (record) => ({
 			...record,
@@ -166,13 +197,7 @@ var AppRegistryService = class AppRegistryService {
 	};
 	withMutation = async (operation) => {
 		const registryPath = path.resolve(this.appHomeService.getRegistryPath());
-		const current = (AppRegistryService.mutationQueues.get(registryPath) ?? Promise.resolve()).catch(() => void 0).then(operation);
-		AppRegistryService.mutationQueues.set(registryPath, current);
-		try {
-			return await current;
-		} finally {
-			if (AppRegistryService.mutationQueues.get(registryPath) === current) AppRegistryService.mutationQueues.delete(registryPath);
-		}
+		return await this.fileLockService.withLock(`${registryPath}.lock`, operation);
 	};
 	parseRegistry = (rawRegistry) => {
 		const candidate = this.assertRecord(rawRegistry, "registry.json");
@@ -180,24 +205,37 @@ var AppRegistryService = class AppRegistryService {
 		const rawApps = this.assertRecord(candidate.apps, "registry.apps");
 		const apps = {};
 		for (const [appId, rawApp] of Object.entries(rawApps)) {
+			if (!SAFE_APP_ID_PATTERN.test(appId)) throw new Error(`registry.apps 包含不安全的 appId：${appId}`);
 			const app = this.assertRecord(rawApp, `registry.apps.${appId}`);
 			const installedVersions = {};
 			const rawVersions = this.assertRecord(app.installedVersions, `registry.apps.${appId}.installedVersions`);
 			for (const [version, rawVersion] of Object.entries(rawVersions)) {
+				if (!SAFE_VERSION_PATTERN.test(version)) throw new Error(`registry.apps.${appId} 包含不安全的版本：${version}`);
 				const versionRecord = this.assertRecord(rawVersion, `registry.apps.${appId}.installedVersions.${version}`);
+				const installDirectory = this.requireString(versionRecord.installDirectory, `registry.apps.${appId}.installedVersions.${version}.installDirectory`);
+				this.assertExactPath(installDirectory, this.appHomeService.getInstallDirectory(appId, version), `registry.apps.${appId}.installedVersions.${version}.installDirectory`);
 				installedVersions[version] = {
 					...versionRecord,
 					version,
-					manifestSchemaVersion: versionRecord.manifestSchemaVersion === 2 ? 2 : 1
+					installDirectory: path.resolve(installDirectory),
+					manifestSchemaVersion: versionRecord.manifestSchemaVersion === 2 ? 2 : 1,
+					components: this.parseComponents(versionRecord.components, installDirectory, `registry.apps.${appId}.installedVersions.${version}.components`),
+					dataSchemaVersion: typeof versionRecord.dataSchemaVersion === "number" && Number.isSafeInteger(versionRecord.dataSchemaVersion) && versionRecord.dataSchemaVersion > 0 ? versionRecord.dataSchemaVersion : 1
 				};
 			}
 			const activeVersion = this.requireString(app.activeVersion, `registry.apps.${appId}.activeVersion`);
 			if (!installedVersions[activeVersion]) throw new Error(`registry.apps.${appId} 缺少 activeVersion ${activeVersion}。`);
+			const dataDirectory = this.requireString(app.dataDirectory, `registry.apps.${appId}.dataDirectory`);
+			const firstInstalledAt = Object.values(installedVersions).map((version) => version.installedAt).filter((value) => typeof value === "string").sort()[0] ?? (/* @__PURE__ */ new Date(0)).toISOString();
+			const defaultInstance = this.parseDefaultInstance(app.defaultInstance, appId, dataDirectory, firstInstalledAt);
 			apps[appId] = {
 				...app,
 				appId,
+				publisher: app.publisher ?? installedVersions[activeVersion]?.publisher,
 				enabled: typeof app.enabled === "boolean" ? app.enabled : true,
 				activeVersion,
+				dataDirectory: defaultInstance.storage.dataDirectory,
+				defaultInstance,
 				installedVersions,
 				grants: app.grants && typeof app.grants === "object" ? app.grants : {}
 			};
@@ -212,6 +250,98 @@ var AppRegistryService = class AppRegistryService {
 			})) : {}
 		};
 	};
+	parseDefaultInstance = (rawInstance, appId, dataDirectory, createdAt) => {
+		if (!rawInstance || typeof rawInstance !== "object" || Array.isArray(rawInstance)) {
+			this.assertExactPath(dataDirectory, this.appHomeService.getAppDataDirectory(appId), `registry.apps.${appId}.dataDirectory`);
+			return this.instanceStorageService.buildLegacyDefaultInstance({
+				appId,
+				dataDirectory,
+				createdAt
+			});
+		}
+		const instance = rawInstance;
+		if (instance.id !== "default" || !instance.storage || typeof instance.storage !== "object" || instance.storage.layout !== "legacy" && instance.storage.layout !== "instance-v1") throw new Error(`registry.apps.${appId}.defaultInstance 无效。`);
+		if (instance.publisherId !== void 0 && typeof instance.publisherId !== "string") throw new Error(`registry.apps.${appId}.defaultInstance.publisherId 无效。`);
+		const dataSchemaVersion = typeof instance.dataSchemaVersion === "number" && Number.isSafeInteger(instance.dataSchemaVersion) && instance.dataSchemaVersion > 0 ? instance.dataSchemaVersion : 1;
+		const instanceCreatedAt = typeof instance.createdAt === "string" ? instance.createdAt : createdAt;
+		const instanceDirectory = path.resolve(this.appHomeService.getAppInstanceDirectory(appId, "default"));
+		const expectedStorage = {
+			layout: "instance-v1",
+			layoutVersion: 1,
+			instanceId: "default",
+			instanceDirectory,
+			dataDirectory: path.join(instanceDirectory, "data"),
+			configDirectory: path.join(instanceDirectory, "config"),
+			stateDirectory: path.join(instanceDirectory, "state"),
+			cacheDirectory: path.join(instanceDirectory, "cache"),
+			temporaryDirectory: path.join(instanceDirectory, "tmp"),
+			logsDirectory: path.join(instanceDirectory, "logs")
+		};
+		if (instance.storage.layout === "legacy") {
+			const expectedLegacyDataDirectory = this.appHomeService.getAppDataDirectory(appId);
+			this.assertExactPath(dataDirectory, expectedLegacyDataDirectory, `registry.apps.${appId}.dataDirectory`);
+			return {
+				id: "default",
+				publisherId: instance.publisherId,
+				storage: {
+					...expectedStorage,
+					layout: "legacy",
+					dataDirectory: path.resolve(expectedLegacyDataDirectory)
+				},
+				dataSchemaVersion,
+				createdAt: instanceCreatedAt,
+				migratedAt: instance.migratedAt,
+				legacyDataDirectory: path.resolve(expectedLegacyDataDirectory)
+			};
+		}
+		for (const [field, expectedPath] of Object.entries({
+			instanceDirectory: expectedStorage.instanceDirectory,
+			dataDirectory: expectedStorage.dataDirectory,
+			configDirectory: expectedStorage.configDirectory,
+			stateDirectory: expectedStorage.stateDirectory,
+			cacheDirectory: expectedStorage.cacheDirectory,
+			temporaryDirectory: expectedStorage.temporaryDirectory,
+			logsDirectory: expectedStorage.logsDirectory
+		})) this.assertExactPath(instance.storage[field], expectedPath, `registry.apps.${appId}.defaultInstance.storage.${field}`);
+		this.assertExactPath(dataDirectory, expectedStorage.dataDirectory, `registry.apps.${appId}.dataDirectory`);
+		return {
+			id: "default",
+			publisherId: instance.publisherId,
+			storage: expectedStorage,
+			dataSchemaVersion,
+			createdAt: instanceCreatedAt,
+			migratedAt: instance.migratedAt,
+			legacyDataDirectory: instance.legacyDataDirectory
+		};
+	};
+	assertExactPath = (actual, expected, field) => {
+		if (typeof actual !== "string" || path.resolve(actual) !== path.resolve(expected)) throw new Error(`${field} 必须位于受管路径 ${path.resolve(expected)}。`);
+	};
+	parseComponents = (rawComponents, installDirectory, field) => {
+		if (rawComponents === void 0) return;
+		if (!Array.isArray(rawComponents)) throw new Error(`${field} 必须是数组。`);
+		return rawComponents.map((rawComponent, index) => {
+			const component = this.assertRecord(rawComponent, `${field}[${index}]`);
+			const kind = component.kind;
+			if (kind !== "panel" && kind !== "service") throw new Error(`${field}[${index}].kind 无效。`);
+			const id = this.requireString(component.id, `${field}[${index}].id`);
+			if (!SAFE_COMPONENT_ID_PATTERN.test(id)) throw new Error(`${field}[${index}].id 不安全。`);
+			const relativeComponentPath = this.requireString(component.path, `${field}[${index}].path`);
+			const expectedComponentDirectory = path.resolve(installDirectory, relativeComponentPath);
+			const relativeToInstall = path.relative(path.resolve(installDirectory), expectedComponentDirectory);
+			if (!relativeToInstall || relativeToInstall.startsWith("..") || path.isAbsolute(relativeToInstall)) throw new Error(`${field}[${index}].path 必须位于版本目录内。`);
+			const expectedManifestPath = path.join(expectedComponentDirectory, kind === "panel" ? "panel-app.json" : "service-app.json");
+			this.assertExactPath(component.componentDirectory, expectedComponentDirectory, `${field}[${index}].componentDirectory`);
+			this.assertExactPath(component.manifestPath, expectedManifestPath, `${field}[${index}].manifestPath`);
+			return {
+				kind,
+				id,
+				path: relativeComponentPath,
+				componentDirectory: expectedComponentDirectory,
+				manifestPath: expectedManifestPath
+			};
+		});
+	};
 	assertRecord = (value, field) => {
 		if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${field} 必须是对象。`);
 		return value;

package/dist/services/app-registry.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-registry.service.js","names":[],"sources":["../../src/services/app-registry.service.ts"],"sourcesContent":["import { open, readFile, rename, rm } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport type { AppPermissions, AppResolvedComponent } from \"#app-runtime/types/app-manifest.types.js\";\nimport type { AppDocumentGrantMap } from \"#app-runtime/types/app-permissions.types.js\";\nimport { AppHomeService } from \"#app-runtime/services/app-home.service.js\";\nimport type {\n  AppInstallSourceKind,\n  AppRegistry,\n  AppRegistryAppRecord,\n  AppRegistryInstalledVersion,\n} from \"#app-runtime/types/app-registry.types.js\";\n\nexport class AppRegistryService {\n  private static readonly mutationQueues = new Map<string, Promise<unknown>>();\n\n  constructor(private readonly appHomeService: AppHomeService = new AppHomeService()) {}\n\n  load = async (): Promise<AppRegistry> => {\n    await this.appHomeService.ensureBaseDirectories();\n    try {\n      const raw = await readFile(this.appHomeService.getRegistryPath(), \"utf-8\");\n      return this.parseRegistry(JSON.parse(raw) as unknown);\n    } catch (error) {\n      if (this.isMissingFileError(error)) {\n        return { schemaVersion: 1, apps: {}, suppressedBuiltIns: {} };\n      }\n      throw error;\n    }\n  };\n\n  save = async (registry: AppRegistry): Promise<void> => {\n    await this.withMutation(async () => await this.saveUnlocked(registry));\n  };\n\n  private saveUnlocked = async (registry: AppRegistry): Promise<void> => {\n    await this.appHomeService.ensureBaseDirectories();\n    const registryPath = this.appHomeService.getRegistryPath();\n    const temporaryPath = path.join(\n      path.dirname(registryPath),\n      `.${path.basename(registryPath)}.${process.pid}.${Date.now()}.tmp`,\n    );\n    const handle = await open(temporaryPath, \"wx\", 0o600);\n    try {\n      await handle.writeFile(`${JSON.stringify(registry, null, 2)}\\n`, \"utf-8\");\n      await handle.sync();\n    } finally {\n      await handle.close();\n    }\n    try {\n      await rename(temporaryPath, registryPath);\n    } catch (error) {\n      await rm(temporaryPath, { force: true });\n      throw error;\n    }\n  };\n\n  listApps = async (): Promise<AppRegistryAppRecord[]> => {\n    const registry = await this.load();\n    return Object.values(registry.apps).sort((left, right) => left.appId.localeCompare(right.appId));\n  };\n\n  getApp = async (appId: string): Promise<AppRegistryAppRecord | undefined> => {\n    const registry = await this.load();\n    return registry.apps[appId];\n  };\n\n  getActiveVersion = async (appId: string): Promise<AppRegistryInstalledVersion | undefined> => {\n    const appRecord = await this.getApp(appId);\n    return appRecord?.installedVersions[appRecord.activeVersion];\n  };\n\n  upsertInstallation = async (params: {\n    appId: string;\n    name: string;\n    description?: string;\n    version: string;\n    installDirectory: string;\n    dataDirectory: string;\n    sourceKind: AppInstallSourceKind;\n    sourceRef: string;\n    installedAt: string;\n    distributionMode?: AppRegistryInstalledVersion[\"distributionMode\"];\n    permissions: AppPermissions;\n    registryUrl?: string;\n    bundleUrl?: string;\n    sha256?: string;\n    publisher?: AppRegistryInstalledVersion[\"publisher\"];\n    manifestSchemaVersion: 1 | 2;\n    components?: AppResolvedComponent[];\n    primaryPanelId?: string;\n    enabled?: boolean;\n  }): Promise<AppRegistryAppRecord> => {\n    return await this.withMutation(async () => {\n      const registry = await this.load();\n      const currentRecord = registry.apps[params.appId];\n      const nextRecord: AppRegistryAppRecord = {\n        appId: params.appId,\n        name: params.name,\n        description: params.description,\n        activeVersion: params.version,\n        enabled: params.enabled ?? currentRecord?.enabled ?? params.manifestSchemaVersion === 1,\n        dataDirectory: params.dataDirectory,\n        installedVersions: {\n          ...(currentRecord?.installedVersions ?? {}),\n          [params.version]: {\n            version: params.version,\n            installDirectory: params.installDirectory,\n            sourceKind: params.sourceKind,\n            sourceRef: params.sourceRef,\n            installedAt: params.installedAt,\n            distributionMode: params.distributionMode,\n            permissions: params.permissions,\n            registryUrl: params.registryUrl,\n            bundleUrl: params.bundleUrl,\n            sha256: params.sha256,\n            publisher: params.publisher,\n            manifestSchemaVersion: params.manifestSchemaVersion,\n            components: params.components,\n            primaryPanelId: params.primaryPanelId,\n          },\n        },\n        grants: currentRecord?.grants ?? {},\n      };\n      registry.apps[params.appId] = nextRecord;\n      await this.saveUnlocked(registry);\n      return nextRecord;\n    });\n  };\n\n  setEnabled = async (appId: string, enabled: boolean): Promise<AppRegistryAppRecord> => {\n    return await this.updateApp(appId, (record) => ({ ...record, enabled }));\n  };\n\n  activateVersion = async (\n    appId: string,\n    version: string,\n  ): Promise<AppRegistryAppRecord> => {\n    return await this.updateApp(appId, (record) => {\n      if (!record.installedVersions[version]) {\n        throw new Error(`应用 ${appId} 未安装版本 ${version}。`);\n      }\n      return { ...record, activeVersion: version };\n    });\n  };\n\n  updateGrants = async (\n    appId: string,\n    grants: AppDocumentGrantMap,\n  ): Promise<AppRegistryAppRecord> => {\n    return await this.updateApp(appId, (record) => ({\n      ...record,\n      grants: { ...record.grants, ...grants },\n    }));\n  };\n\n  setDocumentGrant = async (\n    appId: string,\n    scopeId: string,\n    directoryPath: string,\n  ): Promise<AppRegistryAppRecord> => {\n    return await this.updateGrants(appId, { [scopeId]: directoryPath });\n  };\n\n  removeDocumentGrant = async (appId: string, scopeId: string): Promise<boolean> => {\n    let removed = false;\n    await this.updateApp(appId, (record) => {\n      if (!(scopeId in record.grants)) {\n        return record;\n      }\n      const grants = { ...record.grants };\n      delete grants[scopeId];\n      removed = true;\n      return { ...record, grants };\n    });\n    return removed;\n  };\n\n  removeApp = async (appId: string): Promise<AppRegistryAppRecord | undefined> => {\n    return await this.withMutation(async () => {\n      const registry = await this.load();\n      const appRecord = registry.apps[appId];\n      if (!appRecord) {\n        return undefined;\n      }\n      delete registry.apps[appId];\n      await this.saveUnlocked(registry);\n      return appRecord;\n    });\n  };\n\n  isBuiltInSuppressed = async (appId: string): Promise<boolean> => {\n    const registry = await this.load();\n    return Boolean(registry.suppressedBuiltIns[appId]);\n  };\n\n  setBuiltInSuppressed = async (appId: string, suppressed: boolean): Promise<void> => {\n    await this.withMutation(async () => {\n      const registry = await this.load();\n      if (suppressed) {\n        registry.suppressedBuiltIns[appId] = { suppressedAt: new Date().toISOString() };\n      } else {\n        delete registry.suppressedBuiltIns[appId];\n      }\n      await this.saveUnlocked(registry);\n    });\n  };\n\n  private updateApp = async (\n    appId: string,\n    update: (record: AppRegistryAppRecord) => AppRegistryAppRecord,\n  ): Promise<AppRegistryAppRecord> => {\n    return await this.withMutation(async () => {\n      const registry = await this.load();\n      const appRecord = registry.apps[appId];\n      if (!appRecord) {\n        throw new Error(`未找到已安装应用：${appId}`);\n      }\n      const nextRecord = update(appRecord);\n      registry.apps[appId] = nextRecord;\n      await this.saveUnlocked(registry);\n      return nextRecord;\n    });\n  };\n\n  private withMutation = async <T>(operation: () => Promise<T>): Promise<T> => {\n    const registryPath = path.resolve(this.appHomeService.getRegistryPath());\n    const previous = AppRegistryService.mutationQueues.get(registryPath) ?? Promise.resolve();\n    const current = previous.catch(() => undefined).then(operation);\n    AppRegistryService.mutationQueues.set(registryPath, current);\n    try {\n      return await current;\n    } finally {\n      if (AppRegistryService.mutationQueues.get(registryPath) === current) {\n        AppRegistryService.mutationQueues.delete(registryPath);\n      }\n    }\n  };\n\n  private parseRegistry = (rawRegistry: unknown): AppRegistry => {\n    const candidate = this.assertRecord(rawRegistry, \"registry.json\");\n    if (candidate.schemaVersion !== 1) {\n      throw new Error(\"当前只支持 registry schemaVersion = 1。\");\n    }\n    const rawApps = this.assertRecord(candidate.apps, \"registry.apps\");\n    const apps: Record<string, AppRegistryAppRecord> = {};\n    for (const [appId, rawApp] of Object.entries(rawApps)) {\n      const app = this.assertRecord(rawApp, `registry.apps.${appId}`) as Partial<AppRegistryAppRecord>;\n      const installedVersions: Record<string, AppRegistryInstalledVersion> = {};\n      const rawVersions = this.assertRecord(\n        app.installedVersions,\n        `registry.apps.${appId}.installedVersions`,\n      );\n      for (const [version, rawVersion] of Object.entries(rawVersions)) {\n        const versionRecord = this.assertRecord(\n          rawVersion,\n          `registry.apps.${appId}.installedVersions.${version}`,\n        ) as Partial<AppRegistryInstalledVersion>;\n        installedVersions[version] = {\n          ...(versionRecord as AppRegistryInstalledVersion),\n          version,\n          manifestSchemaVersion: versionRecord.manifestSchemaVersion === 2 ? 2 : 1,\n        };\n      }\n      const activeVersion = this.requireString(app.activeVersion, `registry.apps.${appId}.activeVersion`);\n      if (!installedVersions[activeVersion]) {\n        throw new Error(`registry.apps.${appId} 缺少 activeVersion ${activeVersion}。`);\n      }\n      apps[appId] = {\n        ...(app as AppRegistryAppRecord),\n        appId,\n        enabled: typeof app.enabled === \"boolean\" ? app.enabled : true,\n        activeVersion,\n        installedVersions,\n        grants: app.grants && typeof app.grants === \"object\" ? app.grants : {},\n      };\n    }\n    const suppressedBuiltIns = candidate.suppressedBuiltIns &&\n      typeof candidate.suppressedBuiltIns === \"object\" &&\n      !Array.isArray(candidate.suppressedBuiltIns)\n      ? Object.fromEntries(Object.entries(candidate.suppressedBuiltIns).flatMap(([appId, raw]) => {\n          if (!raw || typeof raw !== \"object\" || Array.isArray(raw)) {\n            return [];\n          }\n          const suppressedAt = (raw as { suppressedAt?: unknown }).suppressedAt;\n          return typeof suppressedAt === \"string\" ? [[appId, { suppressedAt }]] : [];\n        }))\n      : {};\n    return { schemaVersion: 1, apps, suppressedBuiltIns };\n  };\n\n  private assertRecord = (value: unknown, field: string): Record<string, unknown> => {\n    if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n      throw new Error(`${field} 必须是对象。`);\n    }\n    return value as Record<string, unknown>;\n  };\n\n  private requireString = (value: unknown, field: string): string => {\n    if (typeof value !== \"string\" || !value.trim()) {\n      throw new Error(`${field} 必须是非空字符串。`);\n    }\n    return value;\n  };\n\n  private isMissingFileError = (error: unknown): boolean =>\n    typeof error === \"object\" && error !== null &&\n    \"code\" in error && (error as { code?: unknown }).code === \"ENOENT\";\n}\n"],"mappings":";;;;AAYA,IAAa,qBAAb,MAAa,mBAAmB;CAC9B,OAAwB,iCAAiB,IAAI,KAA+B;CAE5E,YAAY,iBAAkD,IAAI,gBAAgB,EAAE;AAAvD,OAAA,iBAAA;;CAE7B,OAAO,YAAkC;AACvC,QAAM,KAAK,eAAe,uBAAuB;AACjD,MAAI;GACF,MAAM,MAAM,MAAM,SAAS,KAAK,eAAe,iBAAiB,EAAE,QAAQ;AAC1E,UAAO,KAAK,cAAc,KAAK,MAAM,IAAI,CAAY;WAC9C,OAAO;AACd,OAAI,KAAK,mBAAmB,MAAM,CAChC,QAAO;IAAE,eAAe;IAAG,MAAM,EAAE;IAAE,oBAAoB,EAAE;IAAE;AAE/D,SAAM;;;CAIV,OAAO,OAAO,aAAyC;AACrD,QAAM,KAAK,aAAa,YAAY,MAAM,KAAK,aAAa,SAAS,CAAC;;CAGxE,eAAuB,OAAO,aAAyC;AACrE,QAAM,KAAK,eAAe,uBAAuB;EACjD,MAAM,eAAe,KAAK,eAAe,iBAAiB;EAC1D,MAAM,gBAAgB,KAAK,KACzB,KAAK,QAAQ,aAAa,EAC1B,IAAI,KAAK,SAAS,aAAa,CAAC,GAAG,QAAQ,IAAI,GAAG,KAAK,KAAK,CAAC,MAC9D;EACD,MAAM,SAAS,MAAM,KAAK,eAAe,MAAM,IAAM;AACrD,MAAI;AACF,SAAM,OAAO,UAAU,GAAG,KAAK,UAAU,UAAU,MAAM,EAAE,CAAC,KAAK,QAAQ;AACzE,SAAM,OAAO,MAAM;YACX;AACR,SAAM,OAAO,OAAO;;AAEtB,MAAI;AACF,SAAM,OAAO,eAAe,aAAa;WAClC,OAAO;AACd,SAAM,GAAG,eAAe,EAAE,OAAO,MAAM,CAAC;AACxC,SAAM;;;CAIV,WAAW,YAA6C;EACtD,MAAM,WAAW,MAAM,KAAK,MAAM;AAClC,SAAO,OAAO,OAAO,SAAS,KAAK,CAAC,MAAM,MAAM,UAAU,KAAK,MAAM,cAAc,MAAM,MAAM,CAAC;;CAGlG,SAAS,OAAO,UAA6D;AAE3E,UADiB,MAAM,KAAK,MAAM,EAClB,KAAK;;CAGvB,mBAAmB,OAAO,UAAoE;EAC5F,MAAM,YAAY,MAAM,KAAK,OAAO,MAAM;AAC1C,SAAO,WAAW,kBAAkB,UAAU;;CAGhD,qBAAqB,OAAO,WAoBS;AACnC,SAAO,MAAM,KAAK,aAAa,YAAY;GACzC,MAAM,WAAW,MAAM,KAAK,MAAM;GAClC,MAAM,gBAAgB,SAAS,KAAK,OAAO;GAC3C,MAAM,aAAmC;IACvC,OAAO,OAAO;IACd,MAAM,OAAO;IACb,aAAa,OAAO;IACpB,eAAe,OAAO;IACtB,SAAS,OAAO,WAAW,eAAe,WAAW,OAAO,0BAA0B;IACtF,eAAe,OAAO;IACtB,mBAAmB;KACjB,GAAI,eAAe,qBAAqB,EAAE;MACzC,OAAO,UAAU;MAChB,SAAS,OAAO;MAChB,kBAAkB,OAAO;MACzB,YAAY,OAAO;MACnB,WAAW,OAAO;MAClB,aAAa,OAAO;MACpB,kBAAkB,OAAO;MACzB,aAAa,OAAO;MACpB,aAAa,OAAO;MACpB,WAAW,OAAO;MAClB,QAAQ,OAAO;MACf,WAAW,OAAO;MAClB,uBAAuB,OAAO;MAC9B,YAAY,OAAO;MACnB,gBAAgB,OAAO;MACxB;KACF;IACD,QAAQ,eAAe,UAAU,EAAE;IACpC;AACD,YAAS,KAAK,OAAO,SAAS;AAC9B,SAAM,KAAK,aAAa,SAAS;AACjC,UAAO;IACP;;CAGJ,aAAa,OAAO,OAAe,YAAoD;AACrF,SAAO,MAAM,KAAK,UAAU,QAAQ,YAAY;GAAE,GAAG;GAAQ;GAAS,EAAE;;CAG1E,kBAAkB,OAChB,OACA,YACkC;AAClC,SAAO,MAAM,KAAK,UAAU,QAAQ,WAAW;AAC7C,OAAI,CAAC,OAAO,kBAAkB,SAC5B,OAAM,IAAI,MAAM,MAAM,MAAM,SAAS,QAAQ,GAAG;AAElD,UAAO;IAAE,GAAG;IAAQ,eAAe;IAAS;IAC5C;;CAGJ,eAAe,OACb,OACA,WACkC;AAClC,SAAO,MAAM,KAAK,UAAU,QAAQ,YAAY;GAC9C,GAAG;GACH,QAAQ;IAAE,GAAG,OAAO;IAAQ,GAAG;IAAQ;GACxC,EAAE;;CAGL,mBAAmB,OACjB,OACA,SACA,kBACkC;AAClC,SAAO,MAAM,KAAK,aAAa,OAAO,GAAG,UAAU,eAAe,CAAC;;CAGrE,sBAAsB,OAAO,OAAe,YAAsC;EAChF,IAAI,UAAU;AACd,QAAM,KAAK,UAAU,QAAQ,WAAW;AACtC,OAAI,EAAE,WAAW,OAAO,QACtB,QAAO;GAET,MAAM,SAAS,EAAE,GAAG,OAAO,QAAQ;AACnC,UAAO,OAAO;AACd,aAAU;AACV,UAAO;IAAE,GAAG;IAAQ;IAAQ;IAC5B;AACF,SAAO;;CAGT,YAAY,OAAO,UAA6D;AAC9E,SAAO,MAAM,KAAK,aAAa,YAAY;GACzC,MAAM,WAAW,MAAM,KAAK,MAAM;GAClC,MAAM,YAAY,SAAS,KAAK;AAChC,OAAI,CAAC,UACH;AAEF,UAAO,SAAS,KAAK;AACrB,SAAM,KAAK,aAAa,SAAS;AACjC,UAAO;IACP;;CAGJ,sBAAsB,OAAO,UAAoC;EAC/D,MAAM,WAAW,MAAM,KAAK,MAAM;AAClC,SAAO,QAAQ,SAAS,mBAAmB,OAAO;;CAGpD,uBAAuB,OAAO,OAAe,eAAuC;AAClF,QAAM,KAAK,aAAa,YAAY;GAClC,MAAM,WAAW,MAAM,KAAK,MAAM;AAClC,OAAI,WACF,UAAS,mBAAmB,SAAS,EAAE,+BAAc,IAAI,MAAM,EAAC,aAAa,EAAE;OAE/E,QAAO,SAAS,mBAAmB;AAErC,SAAM,KAAK,aAAa,SAAS;IACjC;;CAGJ,YAAoB,OAClB,OACA,WACkC;AAClC,SAAO,MAAM,KAAK,aAAa,YAAY;GACzC,MAAM,WAAW,MAAM,KAAK,MAAM;GAClC,MAAM,YAAY,SAAS,KAAK;AAChC,OAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;GAEtC,MAAM,aAAa,OAAO,UAAU;AACpC,YAAS,KAAK,SAAS;AACvB,SAAM,KAAK,aAAa,SAAS;AACjC,UAAO;IACP;;CAGJ,eAAuB,OAAU,cAA4C;EAC3E,MAAM,eAAe,KAAK,QAAQ,KAAK,eAAe,iBAAiB,CAAC;EAExE,MAAM,WADW,mBAAmB,eAAe,IAAI,aAAa,IAAI,QAAQ,SAAS,EAChE,YAAY,KAAA,EAAU,CAAC,KAAK,UAAU;AAC/D,qBAAmB,eAAe,IAAI,cAAc,QAAQ;AAC5D,MAAI;AACF,UAAO,MAAM;YACL;AACR,OAAI,mBAAmB,eAAe,IAAI,aAAa,KAAK,QAC1D,oBAAmB,eAAe,OAAO,aAAa;;;CAK5D,iBAAyB,gBAAsC;EAC7D,MAAM,YAAY,KAAK,aAAa,aAAa,gBAAgB;AACjE,MAAI,UAAU,kBAAkB,EAC9B,OAAM,IAAI,MAAM,oCAAoC;EAEtD,MAAM,UAAU,KAAK,aAAa,UAAU,MAAM,gBAAgB;EAClE,MAAM,OAA6C,EAAE;AACrD,OAAK,MAAM,CAAC,OAAO,WAAW,OAAO,QAAQ,QAAQ,EAAE;GACrD,MAAM,MAAM,KAAK,aAAa,QAAQ,iBAAiB,QAAQ;GAC/D,MAAM,oBAAiE,EAAE;GACzE,MAAM,cAAc,KAAK,aACvB,IAAI,mBACJ,iBAAiB,MAAM,oBACxB;AACD,QAAK,MAAM,CAAC,SAAS,eAAe,OAAO,QAAQ,YAAY,EAAE;IAC/D,MAAM,gBAAgB,KAAK,aACzB,YACA,iBAAiB,MAAM,qBAAqB,UAC7C;AACD,sBAAkB,WAAW;KAC3B,GAAI;KACJ;KACA,uBAAuB,cAAc,0BAA0B,IAAI,IAAI;KACxE;;GAEH,MAAM,gBAAgB,KAAK,cAAc,IAAI,eAAe,iBAAiB,MAAM,gBAAgB;AACnG,OAAI,CAAC,kBAAkB,eACrB,OAAM,IAAI,MAAM,iBAAiB,MAAM,oBAAoB,cAAc,GAAG;AAE9E,QAAK,SAAS;IACZ,GAAI;IACJ;IACA,SAAS,OAAO,IAAI,YAAY,YAAY,IAAI,UAAU;IAC1D;IACA;IACA,QAAQ,IAAI,UAAU,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS,EAAE;IACvE;;AAaH,SAAO;GAAE,eAAe;GAAG;GAAM,oBAXN,UAAU,sBACnC,OAAO,UAAU,uBAAuB,YACxC,CAAC,MAAM,QAAQ,UAAU,mBAAmB,GAC1C,OAAO,YAAY,OAAO,QAAQ,UAAU,mBAAmB,CAAC,SAAS,CAAC,OAAO,SAAS;AACxF,QAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CACvD,QAAO,EAAE;IAEX,MAAM,eAAgB,IAAmC;AACzD,WAAO,OAAO,iBAAiB,WAAW,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,GAAG,EAAE;KAC1E,CAAC,GACH,EAAE;GAC+C;;CAGvD,gBAAwB,OAAgB,UAA2C;AACjF,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,OAAM,IAAI,MAAM,GAAG,MAAM,SAAS;AAEpC,SAAO;;CAGT,iBAAyB,OAAgB,UAA0B;AACjE,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,MAAM,CAC5C,OAAM,IAAI,MAAM,GAAG,MAAM,YAAY;AAEvC,SAAO;;CAGT,sBAA8B,UAC5B,OAAO,UAAU,YAAY,UAAU,QACvC,UAAU,SAAU,MAA6B,SAAS"}
+{"version":3,"file":"app-registry.service.js","names":[],"sources":["../../src/services/app-registry.service.ts"],"sourcesContent":["import { open, readFile, rename, rm } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport type {\n  AppPermissions,\n  AppPlatformSecuritySummary,\n  AppResolvedComponent,\n} from \"#app-runtime/types/app-manifest.types.js\";\nimport type { AppDocumentGrantMap } from \"#app-runtime/types/app-permissions.types.js\";\nimport { AppHomeService } from \"#app-runtime/services/app-home.service.js\";\nimport { AppInstanceStorageService } from \"#app-runtime/services/app-instance-storage.service.js\";\nimport { FileLockService } from \"#app-runtime/services/file-lock.service.js\";\nimport type { AppInstanceRecord } from \"#app-runtime/types/app-storage.types.js\";\nimport type {\n  AppInstallSourceKind,\n  AppRegistry,\n  AppRegistryAppRecord,\n  AppRegistryInstalledVersion,\n} from \"#app-runtime/types/app-registry.types.js\";\n\nconst SAFE_APP_ID_PATTERN = /^[a-z0-9]+(?:[.-][a-z0-9]+)*$/;\nconst SAFE_VERSION_PATTERN = /^[0-9A-Za-z]+(?:[._+-][0-9A-Za-z]+)*$/;\nconst SAFE_COMPONENT_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\n\nexport class AppRegistryService {\n  private readonly instanceStorageService: AppInstanceStorageService;\n  private readonly fileLockService = new FileLockService();\n\n  constructor(private readonly appHomeService: AppHomeService = new AppHomeService()) {\n    this.instanceStorageService = new AppInstanceStorageService(appHomeService);\n  }\n\n  load = async (): Promise<AppRegistry> => {\n    await this.appHomeService.ensureBaseDirectories();\n    try {\n      const raw = await readFile(this.appHomeService.getRegistryPath(), \"utf-8\");\n      return this.parseRegistry(JSON.parse(raw) as unknown);\n    } catch (error) {\n      if (this.isMissingFileError(error)) {\n        return { schemaVersion: 1, apps: {}, suppressedBuiltIns: {} };\n      }\n      throw error;\n    }\n  };\n\n  save = async (registry: AppRegistry): Promise<void> => {\n    await this.withMutation(async () => await this.saveUnlocked(registry));\n  };\n\n  private saveUnlocked = async (registry: AppRegistry): Promise<void> => {\n    await this.appHomeService.ensureBaseDirectories();\n    const registryPath = this.appHomeService.getRegistryPath();\n    const temporaryPath = path.join(\n      path.dirname(registryPath),\n      `.${path.basename(registryPath)}.${process.pid}.${Date.now()}.tmp`,\n    );\n    const handle = await open(temporaryPath, \"wx\", 0o600);\n    try {\n      await handle.writeFile(`${JSON.stringify(registry, null, 2)}\\n`, \"utf-8\");\n      await handle.sync();\n    } finally {\n      await handle.close();\n    }\n    try {\n      await rename(temporaryPath, registryPath);\n    } catch (error) {\n      await rm(temporaryPath, { force: true });\n      throw error;\n    }\n  };\n\n  listApps = async (): Promise<AppRegistryAppRecord[]> => {\n    const registry = await this.load();\n    return Object.values(registry.apps).sort((left, right) => left.appId.localeCompare(right.appId));\n  };\n\n  getApp = async (appId: string): Promise<AppRegistryAppRecord | undefined> => {\n    const registry = await this.load();\n    return registry.apps[appId];\n  };\n\n  getActiveVersion = async (appId: string): Promise<AppRegistryInstalledVersion | undefined> => {\n    const appRecord = await this.getApp(appId);\n    return appRecord?.installedVersions[appRecord.activeVersion];\n  };\n\n  upsertInstallation = async (params: {\n    appId: string;\n    name: string;\n    description?: string;\n    version: string;\n    installDirectory: string;\n    defaultInstance: AppInstanceRecord;\n    sourceKind: AppInstallSourceKind;\n    sourceRef: string;\n    installedAt: string;\n    distributionMode?: AppRegistryInstalledVersion[\"distributionMode\"];\n    permissions: AppPermissions;\n    registryUrl?: string;\n    bundleUrl?: string;\n    sha256?: string;\n    publisher?: AppRegistryInstalledVersion[\"publisher\"];\n    manifestSchemaVersion: 1 | 2;\n    components?: AppResolvedComponent[];\n    primaryPanelId?: string;\n    security?: AppPlatformSecuritySummary;\n    dataSchemaVersion: number;\n    contentSha256?: string;\n    enabled?: boolean;\n    activate?: boolean;\n  }): Promise<AppRegistryAppRecord> => {\n    return await this.withMutation(async () => {\n      const registry = await this.load();\n      const currentRecord = registry.apps[params.appId];\n      const currentPublisher = currentRecord?.publisher ??\n        currentRecord?.installedVersions[currentRecord.activeVersion]?.publisher;\n      if (currentPublisher && currentPublisher.id !== params.publisher?.id) {\n        throw new Error(\n          `应用 ${params.appId} 已绑定发布者 ${currentPublisher.id}，拒绝由 ${params.publisher?.id ?? \"未验证本地来源\"} 覆盖。`,\n        );\n      }\n      const nextRecord: AppRegistryAppRecord = {\n        appId: params.appId,\n        name: params.name,\n        description: params.description,\n        publisher: currentPublisher ?? params.publisher,\n        activeVersion: params.activate === false && currentRecord\n          ? currentRecord.activeVersion\n          : params.version,\n        enabled: params.enabled ?? currentRecord?.enabled ?? params.manifestSchemaVersion === 1,\n        dataDirectory: params.defaultInstance.storage.dataDirectory,\n        defaultInstance: params.defaultInstance,\n        installedVersions: {\n          ...(currentRecord?.installedVersions ?? {}),\n          [params.version]: {\n            version: params.version,\n            installDirectory: params.installDirectory,\n            sourceKind: params.sourceKind,\n            sourceRef: params.sourceRef,\n            installedAt: params.installedAt,\n            distributionMode: params.distributionMode,\n            permissions: params.permissions,\n            registryUrl: params.registryUrl,\n            bundleUrl: params.bundleUrl,\n            sha256: params.sha256,\n            publisher: params.publisher,\n            manifestSchemaVersion: params.manifestSchemaVersion,\n            components: params.components,\n            primaryPanelId: params.primaryPanelId,\n            security: params.security,\n            dataSchemaVersion: params.dataSchemaVersion,\n            contentSha256: params.contentSha256,\n          },\n        },\n        grants: currentRecord?.grants ?? {},\n      };\n      registry.apps[params.appId] = nextRecord;\n      await this.saveUnlocked(registry);\n      return nextRecord;\n    });\n  };\n\n  setEnabled = async (appId: string, enabled: boolean): Promise<AppRegistryAppRecord> => {\n    return await this.updateApp(appId, (record) => ({ ...record, enabled }));\n  };\n\n  activateVersion = async (\n    appId: string,\n    version: string,\n  ): Promise<AppRegistryAppRecord> => {\n    return await this.updateApp(appId, (record) => {\n      if (!record.installedVersions[version]) {\n        throw new Error(`应用 ${appId} 未安装版本 ${version}。`);\n      }\n      return { ...record, activeVersion: version };\n    });\n  };\n\n  setVersionContentDigest = async (\n    appId: string,\n    version: string,\n    contentSha256: string,\n  ): Promise<AppRegistryAppRecord> => {\n    return await this.updateApp(appId, (record) => {\n      const installedVersion = record.installedVersions[version];\n      if (!installedVersion) {\n        throw new Error(`应用 ${appId} 未安装版本 ${version}。`);\n      }\n      if (installedVersion.contentSha256 && installedVersion.contentSha256 !== contentSha256) {\n        throw new Error(`应用 ${appId}@${version} 已存在不同的代码完整性摘要。`);\n      }\n      return {\n        ...record,\n        installedVersions: {\n          ...record.installedVersions,\n          [version]: { ...installedVersion, contentSha256 },\n        },\n      };\n    });\n  };\n\n  updateGrants = async (\n    appId: string,\n    grants: AppDocumentGrantMap,\n  ): Promise<AppRegistryAppRecord> => {\n    return await this.updateApp(appId, (record) => ({\n      ...record,\n      grants: { ...record.grants, ...grants },\n    }));\n  };\n\n  setDocumentGrant = async (\n    appId: string,\n    scopeId: string,\n    directoryPath: string,\n  ): Promise<AppRegistryAppRecord> => {\n    return await this.updateGrants(appId, { [scopeId]: directoryPath });\n  };\n\n  removeDocumentGrant = async (appId: string, scopeId: string): Promise<boolean> => {\n    let removed = false;\n    await this.updateApp(appId, (record) => {\n      if (!(scopeId in record.grants)) {\n        return record;\n      }\n      const grants = { ...record.grants };\n      delete grants[scopeId];\n      removed = true;\n      return { ...record, grants };\n    });\n    return removed;\n  };\n\n  removeApp = async (appId: string): Promise<AppRegistryAppRecord | undefined> => {\n    return await this.withMutation(async () => {\n      const registry = await this.load();\n      const appRecord = registry.apps[appId];\n      if (!appRecord) {\n        return undefined;\n      }\n      delete registry.apps[appId];\n      await this.saveUnlocked(registry);\n      return appRecord;\n    });\n  };\n\n  isBuiltInSuppressed = async (appId: string): Promise<boolean> => {\n    const registry = await this.load();\n    return Boolean(registry.suppressedBuiltIns[appId]);\n  };\n\n  setBuiltInSuppressed = async (appId: string, suppressed: boolean): Promise<void> => {\n    await this.withMutation(async () => {\n      const registry = await this.load();\n      if (suppressed) {\n        registry.suppressedBuiltIns[appId] = { suppressedAt: new Date().toISOString() };\n      } else {\n        delete registry.suppressedBuiltIns[appId];\n      }\n      await this.saveUnlocked(registry);\n    });\n  };\n\n  private updateApp = async (\n    appId: string,\n    update: (record: AppRegistryAppRecord) => AppRegistryAppRecord,\n  ): Promise<AppRegistryAppRecord> => {\n    return await this.withMutation(async () => {\n      const registry = await this.load();\n      const appRecord = registry.apps[appId];\n      if (!appRecord) {\n        throw new Error(`未找到已安装应用：${appId}`);\n      }\n      const nextRecord = update(appRecord);\n      registry.apps[appId] = nextRecord;\n      await this.saveUnlocked(registry);\n      return nextRecord;\n    });\n  };\n\n  private withMutation = async <T>(operation: () => Promise<T>): Promise<T> => {\n    const registryPath = path.resolve(this.appHomeService.getRegistryPath());\n    return await this.fileLockService.withLock(`${registryPath}.lock`, operation);\n  };\n\n  private parseRegistry = (rawRegistry: unknown): AppRegistry => {\n    const candidate = this.assertRecord(rawRegistry, \"registry.json\");\n    if (candidate.schemaVersion !== 1) {\n      throw new Error(\"当前只支持 registry schemaVersion = 1。\");\n    }\n    const rawApps = this.assertRecord(candidate.apps, \"registry.apps\");\n    const apps: Record<string, AppRegistryAppRecord> = {};\n    for (const [appId, rawApp] of Object.entries(rawApps)) {\n      if (!SAFE_APP_ID_PATTERN.test(appId)) {\n        throw new Error(`registry.apps 包含不安全的 appId：${appId}`);\n      }\n      const app = this.assertRecord(rawApp, `registry.apps.${appId}`) as Partial<AppRegistryAppRecord>;\n      const installedVersions: Record<string, AppRegistryInstalledVersion> = {};\n      const rawVersions = this.assertRecord(\n        app.installedVersions,\n        `registry.apps.${appId}.installedVersions`,\n      );\n      for (const [version, rawVersion] of Object.entries(rawVersions)) {\n        if (!SAFE_VERSION_PATTERN.test(version)) {\n          throw new Error(`registry.apps.${appId} 包含不安全的版本：${version}`);\n        }\n        const versionRecord = this.assertRecord(\n          rawVersion,\n          `registry.apps.${appId}.installedVersions.${version}`,\n        ) as Partial<AppRegistryInstalledVersion>;\n        const installDirectory = this.requireString(\n          versionRecord.installDirectory,\n          `registry.apps.${appId}.installedVersions.${version}.installDirectory`,\n        );\n        this.assertExactPath(\n          installDirectory,\n          this.appHomeService.getInstallDirectory(appId, version),\n          `registry.apps.${appId}.installedVersions.${version}.installDirectory`,\n        );\n        installedVersions[version] = {\n          ...(versionRecord as AppRegistryInstalledVersion),\n          version,\n          installDirectory: path.resolve(installDirectory),\n          manifestSchemaVersion: versionRecord.manifestSchemaVersion === 2 ? 2 : 1,\n          components: this.parseComponents(\n            versionRecord.components,\n            installDirectory,\n            `registry.apps.${appId}.installedVersions.${version}.components`,\n          ),\n          dataSchemaVersion: typeof versionRecord.dataSchemaVersion === \"number\" &&\n            Number.isSafeInteger(versionRecord.dataSchemaVersion) &&\n            versionRecord.dataSchemaVersion > 0\n            ? versionRecord.dataSchemaVersion\n            : 1,\n        };\n      }\n      const activeVersion = this.requireString(app.activeVersion, `registry.apps.${appId}.activeVersion`);\n      if (!installedVersions[activeVersion]) {\n        throw new Error(`registry.apps.${appId} 缺少 activeVersion ${activeVersion}。`);\n      }\n      const dataDirectory = this.requireString(\n        app.dataDirectory,\n        `registry.apps.${appId}.dataDirectory`,\n      );\n      const firstInstalledAt = Object.values(installedVersions)\n        .map((version) => version.installedAt)\n        .filter((value): value is string => typeof value === \"string\")\n        .sort()[0] ?? new Date(0).toISOString();\n      const defaultInstance = this.parseDefaultInstance(\n        app.defaultInstance,\n        appId,\n        dataDirectory,\n        firstInstalledAt,\n      );\n      apps[appId] = {\n        ...(app as AppRegistryAppRecord),\n        appId,\n        publisher: app.publisher ?? installedVersions[activeVersion]?.publisher,\n        enabled: typeof app.enabled === \"boolean\" ? app.enabled : true,\n        activeVersion,\n        dataDirectory: defaultInstance.storage.dataDirectory,\n        defaultInstance,\n        installedVersions,\n        grants: app.grants && typeof app.grants === \"object\" ? app.grants : {},\n      };\n    }\n    const suppressedBuiltIns = candidate.suppressedBuiltIns &&\n      typeof candidate.suppressedBuiltIns === \"object\" &&\n      !Array.isArray(candidate.suppressedBuiltIns)\n      ? Object.fromEntries(Object.entries(candidate.suppressedBuiltIns).flatMap(([appId, raw]) => {\n          if (!raw || typeof raw !== \"object\" || Array.isArray(raw)) {\n            return [];\n          }\n          const suppressedAt = (raw as { suppressedAt?: unknown }).suppressedAt;\n          return typeof suppressedAt === \"string\" ? [[appId, { suppressedAt }]] : [];\n        }))\n      : {};\n    return { schemaVersion: 1, apps, suppressedBuiltIns };\n  };\n\n  private parseDefaultInstance = (\n    rawInstance: unknown,\n    appId: string,\n    dataDirectory: string,\n    createdAt: string,\n  ): AppInstanceRecord => {\n    if (!rawInstance || typeof rawInstance !== \"object\" || Array.isArray(rawInstance)) {\n      this.assertExactPath(\n        dataDirectory,\n        this.appHomeService.getAppDataDirectory(appId),\n        `registry.apps.${appId}.dataDirectory`,\n      );\n      return this.instanceStorageService.buildLegacyDefaultInstance({\n        appId,\n        dataDirectory,\n        createdAt,\n      });\n    }\n    const instance = rawInstance as Partial<AppInstanceRecord>;\n    if (\n      instance.id !== \"default\" ||\n      !instance.storage ||\n      typeof instance.storage !== \"object\" ||\n      (instance.storage.layout !== \"legacy\" && instance.storage.layout !== \"instance-v1\")\n    ) {\n      throw new Error(`registry.apps.${appId}.defaultInstance 无效。`);\n    }\n    if (instance.publisherId !== undefined && typeof instance.publisherId !== \"string\") {\n      throw new Error(`registry.apps.${appId}.defaultInstance.publisherId 无效。`);\n    }\n    const dataSchemaVersion = typeof instance.dataSchemaVersion === \"number\" &&\n      Number.isSafeInteger(instance.dataSchemaVersion) &&\n      instance.dataSchemaVersion > 0\n      ? instance.dataSchemaVersion\n      : 1;\n    const instanceCreatedAt = typeof instance.createdAt === \"string\"\n      ? instance.createdAt\n      : createdAt;\n    const instanceDirectory = path.resolve(\n      this.appHomeService.getAppInstanceDirectory(appId, \"default\"),\n    );\n    const expectedStorage = {\n      layout: \"instance-v1\" as const,\n      layoutVersion: 1 as const,\n      instanceId: \"default\",\n      instanceDirectory,\n      dataDirectory: path.join(instanceDirectory, \"data\"),\n      configDirectory: path.join(instanceDirectory, \"config\"),\n      stateDirectory: path.join(instanceDirectory, \"state\"),\n      cacheDirectory: path.join(instanceDirectory, \"cache\"),\n      temporaryDirectory: path.join(instanceDirectory, \"tmp\"),\n      logsDirectory: path.join(instanceDirectory, \"logs\"),\n    };\n    if (instance.storage.layout === \"legacy\") {\n      const expectedLegacyDataDirectory = this.appHomeService.getAppDataDirectory(appId);\n      this.assertExactPath(\n        dataDirectory,\n        expectedLegacyDataDirectory,\n        `registry.apps.${appId}.dataDirectory`,\n      );\n      return {\n        id: \"default\",\n        publisherId: instance.publisherId,\n        storage: {\n          ...expectedStorage,\n          layout: \"legacy\",\n          dataDirectory: path.resolve(expectedLegacyDataDirectory),\n        },\n        dataSchemaVersion,\n        createdAt: instanceCreatedAt,\n        migratedAt: instance.migratedAt,\n        legacyDataDirectory: path.resolve(expectedLegacyDataDirectory),\n      };\n    }\n    for (const [field, expectedPath] of Object.entries({\n      instanceDirectory: expectedStorage.instanceDirectory,\n      dataDirectory: expectedStorage.dataDirectory,\n      configDirectory: expectedStorage.configDirectory,\n      stateDirectory: expectedStorage.stateDirectory,\n      cacheDirectory: expectedStorage.cacheDirectory,\n      temporaryDirectory: expectedStorage.temporaryDirectory,\n      logsDirectory: expectedStorage.logsDirectory,\n    })) {\n      this.assertExactPath(\n        instance.storage[field as keyof typeof instance.storage] as string,\n        expectedPath,\n        `registry.apps.${appId}.defaultInstance.storage.${field}`,\n      );\n    }\n    this.assertExactPath(\n      dataDirectory,\n      expectedStorage.dataDirectory,\n      `registry.apps.${appId}.dataDirectory`,\n    );\n    return {\n      id: \"default\",\n      publisherId: instance.publisherId,\n      storage: expectedStorage,\n      dataSchemaVersion,\n      createdAt: instanceCreatedAt,\n      migratedAt: instance.migratedAt,\n      legacyDataDirectory: instance.legacyDataDirectory,\n    };\n  };\n\n  private assertExactPath = (actual: unknown, expected: string, field: string): void => {\n    if (typeof actual !== \"string\" || path.resolve(actual) !== path.resolve(expected)) {\n      throw new Error(`${field} 必须位于受管路径 ${path.resolve(expected)}。`);\n    }\n  };\n\n  private parseComponents = (\n    rawComponents: unknown,\n    installDirectory: string,\n    field: string,\n  ): AppResolvedComponent[] | undefined => {\n    if (rawComponents === undefined) {\n      return undefined;\n    }\n    if (!Array.isArray(rawComponents)) {\n      throw new Error(`${field} 必须是数组。`);\n    }\n    return rawComponents.map((rawComponent, index) => {\n      const component = this.assertRecord(rawComponent, `${field}[${index}]`);\n      const kind = component.kind;\n      if (kind !== \"panel\" && kind !== \"service\") {\n        throw new Error(`${field}[${index}].kind 无效。`);\n      }\n      const id = this.requireString(component.id, `${field}[${index}].id`);\n      if (!SAFE_COMPONENT_ID_PATTERN.test(id)) {\n        throw new Error(`${field}[${index}].id 不安全。`);\n      }\n      const relativeComponentPath = this.requireString(\n        component.path,\n        `${field}[${index}].path`,\n      );\n      const expectedComponentDirectory = path.resolve(installDirectory, relativeComponentPath);\n      const relativeToInstall = path.relative(\n        path.resolve(installDirectory),\n        expectedComponentDirectory,\n      );\n      if (\n        !relativeToInstall ||\n        relativeToInstall.startsWith(\"..\") ||\n        path.isAbsolute(relativeToInstall)\n      ) {\n        throw new Error(`${field}[${index}].path 必须位于版本目录内。`);\n      }\n      const expectedManifestPath = path.join(\n        expectedComponentDirectory,\n        kind === \"panel\" ? \"panel-app.json\" : \"service-app.json\",\n      );\n      this.assertExactPath(\n        component.componentDirectory,\n        expectedComponentDirectory,\n        `${field}[${index}].componentDirectory`,\n      );\n      this.assertExactPath(\n        component.manifestPath,\n        expectedManifestPath,\n        `${field}[${index}].manifestPath`,\n      );\n      return {\n        kind,\n        id,\n        path: relativeComponentPath,\n        componentDirectory: expectedComponentDirectory,\n        manifestPath: expectedManifestPath,\n      };\n    });\n  };\n\n  private assertRecord = (value: unknown, field: string): Record<string, unknown> => {\n    if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n      throw new Error(`${field} 必须是对象。`);\n    }\n    return value as Record<string, unknown>;\n  };\n\n  private requireString = (value: unknown, field: string): string => {\n    if (typeof value !== \"string\" || !value.trim()) {\n      throw new Error(`${field} 必须是非空字符串。`);\n    }\n    return value;\n  };\n\n  private isMissingFileError = (error: unknown): boolean =>\n    typeof error === \"object\" && error !== null &&\n    \"code\" in error && (error as { code?: unknown }).code === \"ENOENT\";\n}\n"],"mappings":";;;;;;AAmBA,MAAM,sBAAsB;AAC5B,MAAM,uBAAuB;AAC7B,MAAM,4BAA4B;AAElC,IAAa,qBAAb,MAAgC;CAC9B;CACA,kBAAmC,IAAI,iBAAiB;CAExD,YAAY,iBAAkD,IAAI,gBAAgB,EAAE;AAAvD,OAAA,iBAAA;AAC3B,OAAK,yBAAyB,IAAI,0BAA0B,eAAe;;CAG7E,OAAO,YAAkC;AACvC,QAAM,KAAK,eAAe,uBAAuB;AACjD,MAAI;GACF,MAAM,MAAM,MAAM,SAAS,KAAK,eAAe,iBAAiB,EAAE,QAAQ;AAC1E,UAAO,KAAK,cAAc,KAAK,MAAM,IAAI,CAAY;WAC9C,OAAO;AACd,OAAI,KAAK,mBAAmB,MAAM,CAChC,QAAO;IAAE,eAAe;IAAG,MAAM,EAAE;IAAE,oBAAoB,EAAE;IAAE;AAE/D,SAAM;;;CAIV,OAAO,OAAO,aAAyC;AACrD,QAAM,KAAK,aAAa,YAAY,MAAM,KAAK,aAAa,SAAS,CAAC;;CAGxE,eAAuB,OAAO,aAAyC;AACrE,QAAM,KAAK,eAAe,uBAAuB;EACjD,MAAM,eAAe,KAAK,eAAe,iBAAiB;EAC1D,MAAM,gBAAgB,KAAK,KACzB,KAAK,QAAQ,aAAa,EAC1B,IAAI,KAAK,SAAS,aAAa,CAAC,GAAG,QAAQ,IAAI,GAAG,KAAK,KAAK,CAAC,MAC9D;EACD,MAAM,SAAS,MAAM,KAAK,eAAe,MAAM,IAAM;AACrD,MAAI;AACF,SAAM,OAAO,UAAU,GAAG,KAAK,UAAU,UAAU,MAAM,EAAE,CAAC,KAAK,QAAQ;AACzE,SAAM,OAAO,MAAM;YACX;AACR,SAAM,OAAO,OAAO;;AAEtB,MAAI;AACF,SAAM,OAAO,eAAe,aAAa;WAClC,OAAO;AACd,SAAM,GAAG,eAAe,EAAE,OAAO,MAAM,CAAC;AACxC,SAAM;;;CAIV,WAAW,YAA6C;EACtD,MAAM,WAAW,MAAM,KAAK,MAAM;AAClC,SAAO,OAAO,OAAO,SAAS,KAAK,CAAC,MAAM,MAAM,UAAU,KAAK,MAAM,cAAc,MAAM,MAAM,CAAC;;CAGlG,SAAS,OAAO,UAA6D;AAE3E,UADiB,MAAM,KAAK,MAAM,EAClB,KAAK;;CAGvB,mBAAmB,OAAO,UAAoE;EAC5F,MAAM,YAAY,MAAM,KAAK,OAAO,MAAM;AAC1C,SAAO,WAAW,kBAAkB,UAAU;;CAGhD,qBAAqB,OAAO,WAwBS;AACnC,SAAO,MAAM,KAAK,aAAa,YAAY;GACzC,MAAM,WAAW,MAAM,KAAK,MAAM;GAClC,MAAM,gBAAgB,SAAS,KAAK,OAAO;GAC3C,MAAM,mBAAmB,eAAe,aACtC,eAAe,kBAAkB,cAAc,gBAAgB;AACjE,OAAI,oBAAoB,iBAAiB,OAAO,OAAO,WAAW,GAChE,OAAM,IAAI,MACR,MAAM,OAAO,MAAM,UAAU,iBAAiB,GAAG,OAAO,OAAO,WAAW,MAAM,UAAU,MAC3F;GAEH,MAAM,aAAmC;IACvC,OAAO,OAAO;IACd,MAAM,OAAO;IACb,aAAa,OAAO;IACpB,WAAW,oBAAoB,OAAO;IACtC,eAAe,OAAO,aAAa,SAAS,gBACxC,cAAc,gBACd,OAAO;IACX,SAAS,OAAO,WAAW,eAAe,WAAW,OAAO,0BAA0B;IACtF,eAAe,OAAO,gBAAgB,QAAQ;IAC9C,iBAAiB,OAAO;IACxB,mBAAmB;KACjB,GAAI,eAAe,qBAAqB,EAAE;MACzC,OAAO,UAAU;MAChB,SAAS,OAAO;MAChB,kBAAkB,OAAO;MACzB,YAAY,OAAO;MACnB,WAAW,OAAO;MAClB,aAAa,OAAO;MACpB,kBAAkB,OAAO;MACzB,aAAa,OAAO;MACpB,aAAa,OAAO;MACpB,WAAW,OAAO;MAClB,QAAQ,OAAO;MACf,WAAW,OAAO;MAClB,uBAAuB,OAAO;MAC9B,YAAY,OAAO;MACnB,gBAAgB,OAAO;MACvB,UAAU,OAAO;MACjB,mBAAmB,OAAO;MAC1B,eAAe,OAAO;MACvB;KACF;IACD,QAAQ,eAAe,UAAU,EAAE;IACpC;AACD,YAAS,KAAK,OAAO,SAAS;AAC9B,SAAM,KAAK,aAAa,SAAS;AACjC,UAAO;IACP;;CAGJ,aAAa,OAAO,OAAe,YAAoD;AACrF,SAAO,MAAM,KAAK,UAAU,QAAQ,YAAY;GAAE,GAAG;GAAQ;GAAS,EAAE;;CAG1E,kBAAkB,OAChB,OACA,YACkC;AAClC,SAAO,MAAM,KAAK,UAAU,QAAQ,WAAW;AAC7C,OAAI,CAAC,OAAO,kBAAkB,SAC5B,OAAM,IAAI,MAAM,MAAM,MAAM,SAAS,QAAQ,GAAG;AAElD,UAAO;IAAE,GAAG;IAAQ,eAAe;IAAS;IAC5C;;CAGJ,0BAA0B,OACxB,OACA,SACA,kBACkC;AAClC,SAAO,MAAM,KAAK,UAAU,QAAQ,WAAW;GAC7C,MAAM,mBAAmB,OAAO,kBAAkB;AAClD,OAAI,CAAC,iBACH,OAAM,IAAI,MAAM,MAAM,MAAM,SAAS,QAAQ,GAAG;AAElD,OAAI,iBAAiB,iBAAiB,iBAAiB,kBAAkB,cACvE,OAAM,IAAI,MAAM,MAAM,MAAM,GAAG,QAAQ,iBAAiB;AAE1D,UAAO;IACL,GAAG;IACH,mBAAmB;KACjB,GAAG,OAAO;MACT,UAAU;MAAE,GAAG;MAAkB;MAAe;KAClD;IACF;IACD;;CAGJ,eAAe,OACb,OACA,WACkC;AAClC,SAAO,MAAM,KAAK,UAAU,QAAQ,YAAY;GAC9C,GAAG;GACH,QAAQ;IAAE,GAAG,OAAO;IAAQ,GAAG;IAAQ;GACxC,EAAE;;CAGL,mBAAmB,OACjB,OACA,SACA,kBACkC;AAClC,SAAO,MAAM,KAAK,aAAa,OAAO,GAAG,UAAU,eAAe,CAAC;;CAGrE,sBAAsB,OAAO,OAAe,YAAsC;EAChF,IAAI,UAAU;AACd,QAAM,KAAK,UAAU,QAAQ,WAAW;AACtC,OAAI,EAAE,WAAW,OAAO,QACtB,QAAO;GAET,MAAM,SAAS,EAAE,GAAG,OAAO,QAAQ;AACnC,UAAO,OAAO;AACd,aAAU;AACV,UAAO;IAAE,GAAG;IAAQ;IAAQ;IAC5B;AACF,SAAO;;CAGT,YAAY,OAAO,UAA6D;AAC9E,SAAO,MAAM,KAAK,aAAa,YAAY;GACzC,MAAM,WAAW,MAAM,KAAK,MAAM;GAClC,MAAM,YAAY,SAAS,KAAK;AAChC,OAAI,CAAC,UACH;AAEF,UAAO,SAAS,KAAK;AACrB,SAAM,KAAK,aAAa,SAAS;AACjC,UAAO;IACP;;CAGJ,sBAAsB,OAAO,UAAoC;EAC/D,MAAM,WAAW,MAAM,KAAK,MAAM;AAClC,SAAO,QAAQ,SAAS,mBAAmB,OAAO;;CAGpD,uBAAuB,OAAO,OAAe,eAAuC;AAClF,QAAM,KAAK,aAAa,YAAY;GAClC,MAAM,WAAW,MAAM,KAAK,MAAM;AAClC,OAAI,WACF,UAAS,mBAAmB,SAAS,EAAE,+BAAc,IAAI,MAAM,EAAC,aAAa,EAAE;OAE/E,QAAO,SAAS,mBAAmB;AAErC,SAAM,KAAK,aAAa,SAAS;IACjC;;CAGJ,YAAoB,OAClB,OACA,WACkC;AAClC,SAAO,MAAM,KAAK,aAAa,YAAY;GACzC,MAAM,WAAW,MAAM,KAAK,MAAM;GAClC,MAAM,YAAY,SAAS,KAAK;AAChC,OAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;GAEtC,MAAM,aAAa,OAAO,UAAU;AACpC,YAAS,KAAK,SAAS;AACvB,SAAM,KAAK,aAAa,SAAS;AACjC,UAAO;IACP;;CAGJ,eAAuB,OAAU,cAA4C;EAC3E,MAAM,eAAe,KAAK,QAAQ,KAAK,eAAe,iBAAiB,CAAC;AACxE,SAAO,MAAM,KAAK,gBAAgB,SAAS,GAAG,aAAa,QAAQ,UAAU;;CAG/E,iBAAyB,gBAAsC;EAC7D,MAAM,YAAY,KAAK,aAAa,aAAa,gBAAgB;AACjE,MAAI,UAAU,kBAAkB,EAC9B,OAAM,IAAI,MAAM,oCAAoC;EAEtD,MAAM,UAAU,KAAK,aAAa,UAAU,MAAM,gBAAgB;EAClE,MAAM,OAA6C,EAAE;AACrD,OAAK,MAAM,CAAC,OAAO,WAAW,OAAO,QAAQ,QAAQ,EAAE;AACrD,OAAI,CAAC,oBAAoB,KAAK,MAAM,CAClC,OAAM,IAAI,MAAM,8BAA8B,QAAQ;GAExD,MAAM,MAAM,KAAK,aAAa,QAAQ,iBAAiB,QAAQ;GAC/D,MAAM,oBAAiE,EAAE;GACzE,MAAM,cAAc,KAAK,aACvB,IAAI,mBACJ,iBAAiB,MAAM,oBACxB;AACD,QAAK,MAAM,CAAC,SAAS,eAAe,OAAO,QAAQ,YAAY,EAAE;AAC/D,QAAI,CAAC,qBAAqB,KAAK,QAAQ,CACrC,OAAM,IAAI,MAAM,iBAAiB,MAAM,YAAY,UAAU;IAE/D,MAAM,gBAAgB,KAAK,aACzB,YACA,iBAAiB,MAAM,qBAAqB,UAC7C;IACD,MAAM,mBAAmB,KAAK,cAC5B,cAAc,kBACd,iBAAiB,MAAM,qBAAqB,QAAQ,mBACrD;AACD,SAAK,gBACH,kBACA,KAAK,eAAe,oBAAoB,OAAO,QAAQ,EACvD,iBAAiB,MAAM,qBAAqB,QAAQ,mBACrD;AACD,sBAAkB,WAAW;KAC3B,GAAI;KACJ;KACA,kBAAkB,KAAK,QAAQ,iBAAiB;KAChD,uBAAuB,cAAc,0BAA0B,IAAI,IAAI;KACvE,YAAY,KAAK,gBACf,cAAc,YACd,kBACA,iBAAiB,MAAM,qBAAqB,QAAQ,aACrD;KACD,mBAAmB,OAAO,cAAc,sBAAsB,YAC5D,OAAO,cAAc,cAAc,kBAAkB,IACrD,cAAc,oBAAoB,IAChC,cAAc,oBACd;KACL;;GAEH,MAAM,gBAAgB,KAAK,cAAc,IAAI,eAAe,iBAAiB,MAAM,gBAAgB;AACnG,OAAI,CAAC,kBAAkB,eACrB,OAAM,IAAI,MAAM,iBAAiB,MAAM,oBAAoB,cAAc,GAAG;GAE9E,MAAM,gBAAgB,KAAK,cACzB,IAAI,eACJ,iBAAiB,MAAM,gBACxB;GACD,MAAM,mBAAmB,OAAO,OAAO,kBAAkB,CACtD,KAAK,YAAY,QAAQ,YAAY,CACrC,QAAQ,UAA2B,OAAO,UAAU,SAAS,CAC7D,MAAM,CAAC,uBAAM,IAAI,KAAK,EAAE,EAAC,aAAa;GACzC,MAAM,kBAAkB,KAAK,qBAC3B,IAAI,iBACJ,OACA,eACA,iBACD;AACD,QAAK,SAAS;IACZ,GAAI;IACJ;IACA,WAAW,IAAI,aAAa,kBAAkB,gBAAgB;IAC9D,SAAS,OAAO,IAAI,YAAY,YAAY,IAAI,UAAU;IAC1D;IACA,eAAe,gBAAgB,QAAQ;IACvC;IACA;IACA,QAAQ,IAAI,UAAU,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS,EAAE;IACvE;;AAaH,SAAO;GAAE,eAAe;GAAG;GAAM,oBAXN,UAAU,sBACnC,OAAO,UAAU,uBAAuB,YACxC,CAAC,MAAM,QAAQ,UAAU,mBAAmB,GAC1C,OAAO,YAAY,OAAO,QAAQ,UAAU,mBAAmB,CAAC,SAAS,CAAC,OAAO,SAAS;AACxF,QAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CACvD,QAAO,EAAE;IAEX,MAAM,eAAgB,IAAmC;AACzD,WAAO,OAAO,iBAAiB,WAAW,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,GAAG,EAAE;KAC1E,CAAC,GACH,EAAE;GAC+C;;CAGvD,wBACE,aACA,OACA,eACA,cACsB;AACtB,MAAI,CAAC,eAAe,OAAO,gBAAgB,YAAY,MAAM,QAAQ,YAAY,EAAE;AACjF,QAAK,gBACH,eACA,KAAK,eAAe,oBAAoB,MAAM,EAC9C,iBAAiB,MAAM,gBACxB;AACD,UAAO,KAAK,uBAAuB,2BAA2B;IAC5D;IACA;IACA;IACD,CAAC;;EAEJ,MAAM,WAAW;AACjB,MACE,SAAS,OAAO,aAChB,CAAC,SAAS,WACV,OAAO,SAAS,YAAY,YAC3B,SAAS,QAAQ,WAAW,YAAY,SAAS,QAAQ,WAAW,cAErE,OAAM,IAAI,MAAM,iBAAiB,MAAM,sBAAsB;AAE/D,MAAI,SAAS,gBAAgB,KAAA,KAAa,OAAO,SAAS,gBAAgB,SACxE,OAAM,IAAI,MAAM,iBAAiB,MAAM,kCAAkC;EAE3E,MAAM,oBAAoB,OAAO,SAAS,sBAAsB,YAC9D,OAAO,cAAc,SAAS,kBAAkB,IAChD,SAAS,oBAAoB,IAC3B,SAAS,oBACT;EACJ,MAAM,oBAAoB,OAAO,SAAS,cAAc,WACpD,SAAS,YACT;EACJ,MAAM,oBAAoB,KAAK,QAC7B,KAAK,eAAe,wBAAwB,OAAO,UAAU,CAC9D;EACD,MAAM,kBAAkB;GACtB,QAAQ;GACR,eAAe;GACf,YAAY;GACZ;GACA,eAAe,KAAK,KAAK,mBAAmB,OAAO;GACnD,iBAAiB,KAAK,KAAK,mBAAmB,SAAS;GACvD,gBAAgB,KAAK,KAAK,mBAAmB,QAAQ;GACrD,gBAAgB,KAAK,KAAK,mBAAmB,QAAQ;GACrD,oBAAoB,KAAK,KAAK,mBAAmB,MAAM;GACvD,eAAe,KAAK,KAAK,mBAAmB,OAAO;GACpD;AACD,MAAI,SAAS,QAAQ,WAAW,UAAU;GACxC,MAAM,8BAA8B,KAAK,eAAe,oBAAoB,MAAM;AAClF,QAAK,gBACH,eACA,6BACA,iBAAiB,MAAM,gBACxB;AACD,UAAO;IACL,IAAI;IACJ,aAAa,SAAS;IACtB,SAAS;KACP,GAAG;KACH,QAAQ;KACR,eAAe,KAAK,QAAQ,4BAA4B;KACzD;IACD;IACA,WAAW;IACX,YAAY,SAAS;IACrB,qBAAqB,KAAK,QAAQ,4BAA4B;IAC/D;;AAEH,OAAK,MAAM,CAAC,OAAO,iBAAiB,OAAO,QAAQ;GACjD,mBAAmB,gBAAgB;GACnC,eAAe,gBAAgB;GAC/B,iBAAiB,gBAAgB;GACjC,gBAAgB,gBAAgB;GAChC,gBAAgB,gBAAgB;GAChC,oBAAoB,gBAAgB;GACpC,eAAe,gBAAgB;GAChC,CAAC,CACA,MAAK,gBACH,SAAS,QAAQ,QACjB,cACA,iBAAiB,MAAM,2BAA2B,QACnD;AAEH,OAAK,gBACH,eACA,gBAAgB,eAChB,iBAAiB,MAAM,gBACxB;AACD,SAAO;GACL,IAAI;GACJ,aAAa,SAAS;GACtB,SAAS;GACT;GACA,WAAW;GACX,YAAY,SAAS;GACrB,qBAAqB,SAAS;GAC/B;;CAGH,mBAA2B,QAAiB,UAAkB,UAAwB;AACpF,MAAI,OAAO,WAAW,YAAY,KAAK,QAAQ,OAAO,KAAK,KAAK,QAAQ,SAAS,CAC/E,OAAM,IAAI,MAAM,GAAG,MAAM,YAAY,KAAK,QAAQ,SAAS,CAAC,GAAG;;CAInE,mBACE,eACA,kBACA,UACuC;AACvC,MAAI,kBAAkB,KAAA,EACpB;AAEF,MAAI,CAAC,MAAM,QAAQ,cAAc,CAC/B,OAAM,IAAI,MAAM,GAAG,MAAM,SAAS;AAEpC,SAAO,cAAc,KAAK,cAAc,UAAU;GAChD,MAAM,YAAY,KAAK,aAAa,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG;GACvE,MAAM,OAAO,UAAU;AACvB,OAAI,SAAS,WAAW,SAAS,UAC/B,OAAM,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,YAAY;GAEhD,MAAM,KAAK,KAAK,cAAc,UAAU,IAAI,GAAG,MAAM,GAAG,MAAM,MAAM;AACpE,OAAI,CAAC,0BAA0B,KAAK,GAAG,CACrC,OAAM,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,WAAW;GAE/C,MAAM,wBAAwB,KAAK,cACjC,UAAU,MACV,GAAG,MAAM,GAAG,MAAM,QACnB;GACD,MAAM,6BAA6B,KAAK,QAAQ,kBAAkB,sBAAsB;GACxF,MAAM,oBAAoB,KAAK,SAC7B,KAAK,QAAQ,iBAAiB,EAC9B,2BACD;AACD,OACE,CAAC,qBACD,kBAAkB,WAAW,KAAK,IAClC,KAAK,WAAW,kBAAkB,CAElC,OAAM,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,mBAAmB;GAEvD,MAAM,uBAAuB,KAAK,KAChC,4BACA,SAAS,UAAU,mBAAmB,mBACvC;AACD,QAAK,gBACH,UAAU,oBACV,4BACA,GAAG,MAAM,GAAG,MAAM,sBACnB;AACD,QAAK,gBACH,UAAU,cACV,sBACA,GAAG,MAAM,GAAG,MAAM,gBACnB;AACD,UAAO;IACL;IACA;IACA,MAAM;IACN,oBAAoB;IACpB,cAAc;IACf;IACD;;CAGJ,gBAAwB,OAAgB,UAA2C;AACjF,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,OAAM,IAAI,MAAM,GAAG,MAAM,SAAS;AAEpC,SAAO;;CAGT,iBAAyB,OAAgB,UAA0B;AACjE,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,MAAM,CAC5C,OAAM,IAAI,MAAM,GAAG,MAAM,YAAY;AAEvC,SAAO;;CAGT,sBAA8B,UAC5B,OAAO,UAAU,YAAY,UAAU,QACvC,UAAU,SAAU,MAA6B,SAAS"}

package/dist/services/file-lock.service.d.ts

@@ -0,0 +1,20 @@
+//#region src/services/file-lock.service.d.ts
+declare class FileLockService {
+  private static readonly localQueues;
+  withLock: <T>(lockPath: string, operation: () => Promise<T>, options?: {
+    waitTimeoutMs?: number;
+  }) => Promise<T>;
+  private acquire;
+  private recoverAndAcquire;
+  private waitOrThrow;
+  private removeOwnedLock;
+  private canRecoverLock;
+  private parseMetadata;
+  private isProcessAlive;
+  private pathExists;
+  private isAlreadyExistsError;
+  private isMissingFileError;
+}
+//#endregion
+export { FileLockService };
+//# sourceMappingURL=file-lock.service.d.ts.map

package/dist/services/file-lock.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-lock.service.d.ts","names":[],"sources":["../../src/services/file-lock.service.ts"],"mappings":";cAea,eAAA;EAAA,wBACa,WAAA;EAExB,QAAA,MACE,QAAA,UACA,SAAA,QAAiB,OAAA,CAAQ,CAAA,GACzB,OAAA;IAAW,aAAA;EAAA,MACV,OAAA,CAAQ,CAAA;EAAA,QAqBH,OAAA;EAAA,QA8CA,iBAAA;EAAA,QA6CA,WAAA;EAAA,QAWA,eAAA;EAAA,QAcA,cAAA;EAAA,QAgBA,aAAA;EAAA,QAmBA,cAAA;EAAA,QAUA,UAAA;EAAA,QASA,oBAAA;EAAA,QAIA,kBAAA;AAAA"}