@nextclaw/app-runtime 0.12.2 → 0.13.1

package/dist/services/app-installation-filesystem.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-installation-filesystem.service.js","names":[],"sources":["../../src/services/app-installation-filesystem.service.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { cp, mkdir, readdir, rename, rm } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport type { AppBuildService } from \"#app-runtime/services/app-build.service.js\";\nimport type { AppInstallationIntegrityService } from \"#app-runtime/services/app-installation-integrity.service.js\";\nimport type { AppManifestService } from \"#app-runtime/services/app-manifest.service.js\";\nimport { isAppStandaloneManifestBundle } from \"#app-runtime/types/app-manifest.types.js\";\nimport type { AppDistributionMode } from \"#app-runtime/types/app-bundle.types.js\";\n\nexport class AppInstallationFilesystemService {\n  constructor(private readonly params: {\n    buildService: AppBuildService;\n    integrityService: AppInstallationIntegrityService;\n    manifestService: AppManifestService;\n  }) {}\n\n  copyToImmutableInstallDirectory = async (params: {\n    appId: string;\n    appVersion: string;\n    extractedDirectory: string;\n    installDirectory: string;\n  }): Promise<string> => {\n    const { appId, appVersion, extractedDirectory, installDirectory } = params;\n    if (await this.params.integrityService.pathExists(installDirectory)) {\n      throw new Error(`应用版本目录已存在，不能覆盖不可变版本：${appId}@${appVersion}`);\n    }\n    await mkdir(path.dirname(installDirectory), { recursive: true });\n    const stagedInstallDirectory = `${installDirectory}.staging-${randomUUID()}`;\n    try {\n      await cp(extractedDirectory, stagedInstallDirectory, { recursive: true });\n      const stagedManifest = await this.params.manifestService.load(stagedInstallDirectory);\n      if (\n        stagedManifest.manifest.id !== appId ||\n        stagedManifest.manifest.version !== appVersion\n      ) {\n        throw new Error(\"staging manifest 与已验证 bundle 身份不一致。\");\n      }\n      const contentSha256 = await this.params.integrityService.calculateDigest(\n        stagedInstallDirectory,\n      );\n      await rename(stagedInstallDirectory, installDirectory);\n      await this.params.integrityService.protectDirectory(installDirectory);\n      return contentSha256;\n    } catch (error) {\n      await rm(stagedInstallDirectory, { recursive: true, force: true });\n      throw error;\n    }\n  };\n\n  materializeDistribution = async (params: {\n    appDirectory: string;\n    distributionMode: AppDistributionMode;\n  }): Promise<void> => {\n    if (params.distributionMode !== \"source\") {\n      return;\n    }\n    const manifestBundle = await this.params.manifestService.load(params.appDirectory);\n    if (!isAppStandaloneManifestBundle(manifestBundle)) {\n      throw new Error(\"schema v2 组合包不允许运行安装期 build。\");\n    }\n    if (manifestBundle.manifest.main.kind !== \"wasi-http-component\") {\n      return;\n    }\n    await this.params.buildService.build({\n      appDirectory: params.appDirectory,\n      install: true,\n    });\n  };\n\n  reconcileGeneratedSiblings = async (\n    parentDirectory: string,\n    referencedPaths: Set<string>,\n  ): Promise<void> => {\n    for (const entry of await this.readDirectories(parentDirectory)) {\n      const entryName = path.basename(entry);\n      if (entryName.includes(\".staging-\")) {\n        await this.params.integrityService.removeDirectory(entry);\n        continue;\n      }\n      const markerIndex = entryName.indexOf(\".uninstalling-\");\n      if (markerIndex < 0) {\n        continue;\n      }\n      const originalPath = path.join(parentDirectory, entryName.slice(0, markerIndex));\n      if (\n        referencedPaths.has(path.resolve(originalPath)) &&\n        !await this.params.integrityService.pathExists(originalPath)\n      ) {\n        await rename(entry, originalPath);\n      } else {\n        await this.params.integrityService.removeDirectory(entry);\n      }\n    }\n  };\n\n  readDirectories = async (directory: string): Promise<string[]> => {\n    try {\n      return (await readdir(directory, { withFileTypes: true }))\n        .filter((entry) => entry.isDirectory())\n        .map((entry) => path.join(directory, entry.name));\n    } catch (error) {\n      if (this.isMissingFileError(error)) {\n        return [];\n      }\n      throw error;\n    }\n  };\n\n  private isMissingFileError = (error: unknown): boolean =>\n    typeof error === \"object\" && error !== null &&\n    \"code\" in error && (error as { code?: unknown }).code === \"ENOENT\";\n}\n"],"mappings":";;;;;AASA,IAAa,mCAAb,MAA8C;CAC5C,YAAY,QAIT;AAJ0B,OAAA,SAAA;;CAM7B,kCAAkC,OAAO,WAKlB;EACrB,MAAM,EAAE,OAAO,YAAY,oBAAoB,qBAAqB;AACpE,MAAI,MAAM,KAAK,OAAO,iBAAiB,WAAW,iBAAiB,CACjE,OAAM,IAAI,MAAM,uBAAuB,MAAM,GAAG,aAAa;AAE/D,QAAM,MAAM,KAAK,QAAQ,iBAAiB,EAAE,EAAE,WAAW,MAAM,CAAC;EAChE,MAAM,yBAAyB,GAAG,iBAAiB,WAAW,YAAY;AAC1E,MAAI;AACF,SAAM,GAAG,oBAAoB,wBAAwB,EAAE,WAAW,MAAM,CAAC;GACzE,MAAM,iBAAiB,MAAM,KAAK,OAAO,gBAAgB,KAAK,uBAAuB;AACrF,OACE,eAAe,SAAS,OAAO,SAC/B,eAAe,SAAS,YAAY,WAEpC,OAAM,IAAI,MAAM,sCAAsC;GAExD,MAAM,gBAAgB,MAAM,KAAK,OAAO,iBAAiB,gBACvD,uBACD;AACD,SAAM,OAAO,wBAAwB,iBAAiB;AACtD,SAAM,KAAK,OAAO,iBAAiB,iBAAiB,iBAAiB;AACrE,UAAO;WACA,OAAO;AACd,SAAM,GAAG,wBAAwB;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;AAClE,SAAM;;;CAIV,0BAA0B,OAAO,WAGZ;AACnB,MAAI,OAAO,qBAAqB,SAC9B;EAEF,MAAM,iBAAiB,MAAM,KAAK,OAAO,gBAAgB,KAAK,OAAO,aAAa;AAClF,MAAI,CAAC,8BAA8B,eAAe,CAChD,OAAM,IAAI,MAAM,+BAA+B;AAEjD,MAAI,eAAe,SAAS,KAAK,SAAS,sBACxC;AAEF,QAAM,KAAK,OAAO,aAAa,MAAM;GACnC,cAAc,OAAO;GACrB,SAAS;GACV,CAAC;;CAGJ,6BAA6B,OAC3B,iBACA,oBACkB;AAClB,OAAK,MAAM,SAAS,MAAM,KAAK,gBAAgB,gBAAgB,EAAE;GAC/D,MAAM,YAAY,KAAK,SAAS,MAAM;AACtC,OAAI,UAAU,SAAS,YAAY,EAAE;AACnC,UAAM,KAAK,OAAO,iBAAiB,gBAAgB,MAAM;AACzD;;GAEF,MAAM,cAAc,UAAU,QAAQ,iBAAiB;AACvD,OAAI,cAAc,EAChB;GAEF,MAAM,eAAe,KAAK,KAAK,iBAAiB,UAAU,MAAM,GAAG,YAAY,CAAC;AAChF,OACE,gBAAgB,IAAI,KAAK,QAAQ,aAAa,CAAC,IAC/C,CAAC,MAAM,KAAK,OAAO,iBAAiB,WAAW,aAAa,CAE5D,OAAM,OAAO,OAAO,aAAa;OAEjC,OAAM,KAAK,OAAO,iBAAiB,gBAAgB,MAAM;;;CAK/D,kBAAkB,OAAO,cAAyC;AAChE,MAAI;AACF,WAAQ,MAAM,QAAQ,WAAW,EAAE,eAAe,MAAM,CAAC,EACtD,QAAQ,UAAU,MAAM,aAAa,CAAC,CACtC,KAAK,UAAU,KAAK,KAAK,WAAW,MAAM,KAAK,CAAC;WAC5C,OAAO;AACd,OAAI,KAAK,mBAAmB,MAAM,CAChC,QAAO,EAAE;AAEX,SAAM;;;CAIV,sBAA8B,UAC5B,OAAO,UAAU,YAAY,UAAU,QACvC,UAAU,SAAU,MAA6B,SAAS"}
+{"version":3,"file":"app-installation-filesystem.service.js","names":[],"sources":["../../src/services/app-installation-filesystem.service.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { chmod, cp, lstat, mkdir, readFile, readdir, rename, rm } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport type { AppBuildService } from \"#app-runtime/services/app-build.service.js\";\nimport type { AppInstallationIntegrityService } from \"#app-runtime/services/app-installation-integrity.service.js\";\nimport type { AppManifestService } from \"#app-runtime/services/app-manifest.service.js\";\nimport { AppServiceLaunchService } from \"#app-runtime/services/app-service-launch.service.js\";\nimport {\n  isAppComponentManifestBundle,\n  isAppStandaloneManifestBundle,\n  type AppManifestBundle,\n  type AppNativeArtifactTarget,\n} from \"#app-runtime/types/app-manifest.types.js\";\nimport type { AppDistributionMode } from \"#app-runtime/types/app-bundle.types.js\";\n\nexport class AppInstallationFilesystemService {\n  constructor(private readonly params: {\n    buildService: AppBuildService;\n    integrityService: AppInstallationIntegrityService;\n    manifestService: AppManifestService;\n  }) {}\n\n  copyToImmutableInstallDirectory = async (params: {\n    appId: string;\n    appVersion: string;\n    extractedDirectory: string;\n    installDirectory: string;\n    target?: AppNativeArtifactTarget;\n  }): Promise<string> => {\n    const { appId, appVersion, extractedDirectory, installDirectory, target } = params;\n    if (await this.params.integrityService.pathExists(installDirectory)) {\n      throw new Error(`应用版本目录已存在，不能覆盖不可变版本：${appId}@${appVersion}`);\n    }\n    await mkdir(path.dirname(installDirectory), { recursive: true });\n    const stagedInstallDirectory = `${installDirectory}.staging-${randomUUID()}`;\n    try {\n      await cp(extractedDirectory, stagedInstallDirectory, { recursive: true });\n      const stagedManifest = await this.params.manifestService.load(stagedInstallDirectory);\n      if (\n        stagedManifest.manifest.id !== appId ||\n        stagedManifest.manifest.version !== appVersion\n      ) {\n        throw new Error(\"staging manifest 与已验证 bundle 身份不一致。\");\n      }\n      await this.restoreServiceCommandPermissions(stagedManifest, target);\n      const contentSha256 = await this.params.integrityService.calculateDigest(\n        stagedInstallDirectory,\n      );\n      await rename(stagedInstallDirectory, installDirectory);\n      await this.params.integrityService.protectDirectory(installDirectory);\n      return contentSha256;\n    } catch (error) {\n      await rm(stagedInstallDirectory, { recursive: true, force: true });\n      throw error;\n    }\n  };\n\n  private restoreServiceCommandPermissions = async (\n    manifestBundle: AppManifestBundle,\n    target?: AppNativeArtifactTarget,\n  ): Promise<void> => {\n    if (!isAppComponentManifestBundle(manifestBundle)) {\n      return;\n    }\n    const launchService = new AppServiceLaunchService();\n    for (const component of manifestBundle.components) {\n      if (component.kind !== \"service\") {\n        continue;\n      }\n      const serviceManifest = JSON.parse(\n        await readFile(component.manifestPath, \"utf8\"),\n      ) as Record<string, unknown>;\n      const { command } = launchService.resolve(serviceManifest, target);\n      if (path.isAbsolute(command) || !command.includes(\"/\")) {\n        continue;\n      }\n      const commandPath = path.resolve(component.componentDirectory, command);\n      const relativeCommandPath = path.relative(component.componentDirectory, commandPath);\n      if (\n        !relativeCommandPath ||\n        relativeCommandPath.startsWith(\"..\") ||\n        path.isAbsolute(relativeCommandPath)\n      ) {\n        throw new Error(`service app command 必须位于组件目录内：${command}`);\n      }\n      const stats = await lstat(commandPath);\n      if (!stats.isFile()) {\n        throw new Error(`service app command 必须是普通文件：${command}`);\n      }\n      await chmod(commandPath, stats.mode | 0o100);\n    }\n  };\n\n  materializeDistribution = async (params: {\n    appDirectory: string;\n    distributionMode: AppDistributionMode;\n  }): Promise<void> => {\n    if (params.distributionMode !== \"source\") {\n      return;\n    }\n    const manifestBundle = await this.params.manifestService.load(params.appDirectory);\n    if (!isAppStandaloneManifestBundle(manifestBundle)) {\n      throw new Error(\"schema v2 组合包不允许运行安装期 build。\");\n    }\n    if (manifestBundle.manifest.main.kind !== \"wasi-http-component\") {\n      return;\n    }\n    await this.params.buildService.build({\n      appDirectory: params.appDirectory,\n      install: true,\n    });\n  };\n\n  reconcileGeneratedSiblings = async (\n    parentDirectory: string,\n    referencedPaths: Set<string>,\n  ): Promise<void> => {\n    for (const entry of await this.readDirectories(parentDirectory)) {\n      const entryName = path.basename(entry);\n      if (entryName.includes(\".staging-\")) {\n        await this.params.integrityService.removeDirectory(entry);\n        continue;\n      }\n      const markerIndex = entryName.indexOf(\".uninstalling-\");\n      if (markerIndex < 0) {\n        continue;\n      }\n      const originalPath = path.join(parentDirectory, entryName.slice(0, markerIndex));\n      if (\n        referencedPaths.has(path.resolve(originalPath)) &&\n        !await this.params.integrityService.pathExists(originalPath)\n      ) {\n        await rename(entry, originalPath);\n      } else {\n        await this.params.integrityService.removeDirectory(entry);\n      }\n    }\n  };\n\n  readDirectories = async (directory: string): Promise<string[]> => {\n    try {\n      return (await readdir(directory, { withFileTypes: true }))\n        .filter((entry) => entry.isDirectory())\n        .map((entry) => path.join(directory, entry.name));\n    } catch (error) {\n      if (this.isMissingFileError(error)) {\n        return [];\n      }\n      throw error;\n    }\n  };\n\n  private isMissingFileError = (error: unknown): boolean =>\n    typeof error === \"object\" && error !== null &&\n    \"code\" in error && (error as { code?: unknown }).code === \"ENOENT\";\n}\n"],"mappings":";;;;;;AAeA,IAAa,mCAAb,MAA8C;CAC5C,YAAY,QAIT;AAJ0B,OAAA,SAAA;;CAM7B,kCAAkC,OAAO,WAMlB;EACrB,MAAM,EAAE,OAAO,YAAY,oBAAoB,kBAAkB,WAAW;AAC5E,MAAI,MAAM,KAAK,OAAO,iBAAiB,WAAW,iBAAiB,CACjE,OAAM,IAAI,MAAM,uBAAuB,MAAM,GAAG,aAAa;AAE/D,QAAM,MAAM,KAAK,QAAQ,iBAAiB,EAAE,EAAE,WAAW,MAAM,CAAC;EAChE,MAAM,yBAAyB,GAAG,iBAAiB,WAAW,YAAY;AAC1E,MAAI;AACF,SAAM,GAAG,oBAAoB,wBAAwB,EAAE,WAAW,MAAM,CAAC;GACzE,MAAM,iBAAiB,MAAM,KAAK,OAAO,gBAAgB,KAAK,uBAAuB;AACrF,OACE,eAAe,SAAS,OAAO,SAC/B,eAAe,SAAS,YAAY,WAEpC,OAAM,IAAI,MAAM,sCAAsC;AAExD,SAAM,KAAK,iCAAiC,gBAAgB,OAAO;GACnE,MAAM,gBAAgB,MAAM,KAAK,OAAO,iBAAiB,gBACvD,uBACD;AACD,SAAM,OAAO,wBAAwB,iBAAiB;AACtD,SAAM,KAAK,OAAO,iBAAiB,iBAAiB,iBAAiB;AACrE,UAAO;WACA,OAAO;AACd,SAAM,GAAG,wBAAwB;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;AAClE,SAAM;;;CAIV,mCAA2C,OACzC,gBACA,WACkB;AAClB,MAAI,CAAC,6BAA6B,eAAe,CAC/C;EAEF,MAAM,gBAAgB,IAAI,yBAAyB;AACnD,OAAK,MAAM,aAAa,eAAe,YAAY;AACjD,OAAI,UAAU,SAAS,UACrB;GAEF,MAAM,kBAAkB,KAAK,MAC3B,MAAM,SAAS,UAAU,cAAc,OAAO,CAC/C;GACD,MAAM,EAAE,YAAY,cAAc,QAAQ,iBAAiB,OAAO;AAClE,OAAI,KAAK,WAAW,QAAQ,IAAI,CAAC,QAAQ,SAAS,IAAI,CACpD;GAEF,MAAM,cAAc,KAAK,QAAQ,UAAU,oBAAoB,QAAQ;GACvE,MAAM,sBAAsB,KAAK,SAAS,UAAU,oBAAoB,YAAY;AACpF,OACE,CAAC,uBACD,oBAAoB,WAAW,KAAK,IACpC,KAAK,WAAW,oBAAoB,CAEpC,OAAM,IAAI,MAAM,iCAAiC,UAAU;GAE7D,MAAM,QAAQ,MAAM,MAAM,YAAY;AACtC,OAAI,CAAC,MAAM,QAAQ,CACjB,OAAM,IAAI,MAAM,+BAA+B,UAAU;AAE3D,SAAM,MAAM,aAAa,MAAM,OAAO,GAAM;;;CAIhD,0BAA0B,OAAO,WAGZ;AACnB,MAAI,OAAO,qBAAqB,SAC9B;EAEF,MAAM,iBAAiB,MAAM,KAAK,OAAO,gBAAgB,KAAK,OAAO,aAAa;AAClF,MAAI,CAAC,8BAA8B,eAAe,CAChD,OAAM,IAAI,MAAM,+BAA+B;AAEjD,MAAI,eAAe,SAAS,KAAK,SAAS,sBACxC;AAEF,QAAM,KAAK,OAAO,aAAa,MAAM;GACnC,cAAc,OAAO;GACrB,SAAS;GACV,CAAC;;CAGJ,6BAA6B,OAC3B,iBACA,oBACkB;AAClB,OAAK,MAAM,SAAS,MAAM,KAAK,gBAAgB,gBAAgB,EAAE;GAC/D,MAAM,YAAY,KAAK,SAAS,MAAM;AACtC,OAAI,UAAU,SAAS,YAAY,EAAE;AACnC,UAAM,KAAK,OAAO,iBAAiB,gBAAgB,MAAM;AACzD;;GAEF,MAAM,cAAc,UAAU,QAAQ,iBAAiB;AACvD,OAAI,cAAc,EAChB;GAEF,MAAM,eAAe,KAAK,KAAK,iBAAiB,UAAU,MAAM,GAAG,YAAY,CAAC;AAChF,OACE,gBAAgB,IAAI,KAAK,QAAQ,aAAa,CAAC,IAC/C,CAAC,MAAM,KAAK,OAAO,iBAAiB,WAAW,aAAa,CAE5D,OAAM,OAAO,OAAO,aAAa;OAEjC,OAAM,KAAK,OAAO,iBAAiB,gBAAgB,MAAM;;;CAK/D,kBAAkB,OAAO,cAAyC;AAChE,MAAI;AACF,WAAQ,MAAM,QAAQ,WAAW,EAAE,eAAe,MAAM,CAAC,EACtD,QAAQ,UAAU,MAAM,aAAa,CAAC,CACtC,KAAK,UAAU,KAAK,KAAK,WAAW,MAAM,KAAK,CAAC;WAC5C,OAAO;AACd,OAAI,KAAK,mBAAmB,MAAM,CAChC,QAAO,EAAE;AAEX,SAAM;;;CAIV,sBAA8B,UAC5B,OAAO,UAAU,YAAY,UAAU,QACvC,UAAU,SAAU,MAA6B,SAAS"}

package/dist/services/app-installation-lifecycle.service.js

@@ -80,6 +80,7 @@ var AppInstallationLifecycleService = class {
 		registryUrl: versionRecord.registryUrl,
 		bundleUrl: versionRecord.bundleUrl,
 		sha256: versionRecord.sha256,
+		target: versionRecord.target,
 		publisher: versionRecord.publisher,
 		enabled: appRecord.enabled,
 		manifestSchemaVersion: versionRecord.manifestSchemaVersion,

package/dist/services/app-installation-lifecycle.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-installation-lifecycle.service.js","names":[],"sources":["../../src/services/app-installation-lifecycle.service.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { rename } from \"node:fs/promises\";\nimport type { AppInstallationIntegrityService } from \"#app-runtime/services/app-installation-integrity.service.js\";\nimport type { AppInstanceStorageService } from \"#app-runtime/services/app-instance-storage.service.js\";\nimport type { AppRegistryConfigService } from \"#app-runtime/services/app-registry-config.service.js\";\nimport type { AppRegistryService } from \"#app-runtime/services/app-registry.service.js\";\nimport type { AppRemoteRegistryClientService } from \"#app-runtime/services/app-remote-registry-client.service.js\";\nimport type {\n  AppInstallProgressHandler,\n  AppInstallResult,\n  AppRollbackResult,\n  AppUninstallResult,\n  AppUpdateResult,\n} from \"#app-runtime/types/app-installation.types.js\";\n\ntype AppUpdateOptions = {\n  version?: string;\n  registryUrl?: string;\n  onProgress?: AppInstallProgressHandler;\n  activate?: boolean;\n};\n\nexport class AppInstallationLifecycleService {\n  constructor(private readonly params: {\n    registryService: AppRegistryService;\n    registryConfigService: AppRegistryConfigService;\n    remoteRegistryClient: AppRemoteRegistryClientService;\n    instanceStorageService: AppInstanceStorageService;\n    integrityService: AppInstallationIntegrityService;\n    install: (source: string, options: AppUpdateOptions) => Promise<AppInstallResult>;\n    rollback: (appId: string, version: string) => Promise<AppRollbackResult>;\n  }) {}\n\n  update = async (appId: string, options: AppUpdateOptions = {}): Promise<AppUpdateResult> => {\n    const { onProgress, registryUrl: requestedRegistryUrl, version } = options;\n    await onProgress?.(\"resolving\");\n    const appRecord = await this.params.registryService.getApp(appId);\n    if (!appRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    const activeVersionRecord = appRecord.installedVersions[appRecord.activeVersion];\n    const registryUrl = requestedRegistryUrl ??\n      activeVersionRecord?.registryUrl ??\n      (await this.params.registryConfigService.getSnapshot()).currentUrl;\n    const resolution = await this.params.remoteRegistryClient.resolve({\n      appId,\n      version,\n      registryUrl,\n    });\n    if (resolution.version === appRecord.activeVersion) {\n      if (!activeVersionRecord) {\n        throw new Error(`已安装应用缺少激活版本：${appId}`);\n      }\n      return this.toUpdateResult(appRecord, activeVersionRecord, appRecord.activeVersion, false);\n    }\n    const installedTarget = appRecord.installedVersions[resolution.version];\n    if (installedTarget) {\n      await onProgress?.(\"verifying\");\n      await onProgress?.(\"installing\");\n      if (options.activate !== false) {\n        await this.params.rollback(appId, resolution.version);\n      }\n      await onProgress?.(\"finalizing\");\n      return this.toUpdateResult(appRecord, installedTarget, resolution.version, true);\n    }\n    const installResult = await this.params.install(`${appId}@${resolution.version}`, {\n      registryUrl,\n      onProgress,\n      activate: options.activate,\n    });\n    return {\n      ...installResult,\n      previousVersion: appRecord.activeVersion,\n      updated: true,\n    };\n  };\n\n  uninstall = async (appId: string, purgeData: boolean): Promise<AppUninstallResult> => {\n    const appRecord = await this.params.registryService.getApp(appId);\n    if (!appRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    if (!purgeData) {\n      await this.params.instanceStorageService.materializeDefaultInstance({\n        appId,\n        publisherId: appRecord.publisher?.id,\n        legacyDataDirectory: appRecord.defaultInstance.storage.layout === \"legacy\"\n          ? appRecord.dataDirectory\n          : undefined,\n        dataSchemaVersion: appRecord.defaultInstance.dataSchemaVersion,\n      });\n    }\n    const removedVersions = Object.keys(appRecord.installedVersions).sort((left, right) =>\n      left.localeCompare(right));\n    const stagedPaths: Array<{ originalPath: string; stagedPath: string }> = [];\n    try {\n      for (const versionRecord of Object.values(appRecord.installedVersions)) {\n        await this.stagePath(versionRecord.installDirectory, stagedPaths);\n      }\n      if (purgeData) {\n        await this.stagePath(\n          appRecord.defaultInstance.storage.layout === \"instance-v1\"\n            ? appRecord.defaultInstance.storage.instanceDirectory\n            : appRecord.dataDirectory,\n          stagedPaths,\n        );\n      }\n      if (!await this.params.registryService.removeApp(appId)) {\n        throw new Error(`卸载过程中应用记录已发生变化：${appId}`);\n      }\n    } catch (error) {\n      await this.restoreOrThrow(appId, stagedPaths, error);\n      throw error;\n    }\n    await Promise.all(stagedPaths.map(async (entry) =>\n      await this.params.integrityService.removeDirectory(entry.stagedPath)));\n    return { appId, removedVersions, dataRemoved: purgeData };\n  };\n\n  private toUpdateResult = (\n    appRecord: NonNullable<Awaited<ReturnType<AppRegistryService[\"getApp\"]>>>,\n    versionRecord: NonNullable<Awaited<ReturnType<AppRegistryService[\"getApp\"]>>>[\"installedVersions\"][string],\n    version: string,\n    updated: boolean,\n  ): AppUpdateResult => ({\n    appId: appRecord.appId,\n    name: appRecord.name,\n    version,\n    previousVersion: appRecord.activeVersion,\n    installDirectory: versionRecord.installDirectory,\n    dataDirectory: appRecord.dataDirectory,\n    instance: appRecord.defaultInstance,\n    sourceKind: versionRecord.sourceKind,\n    distributionMode: versionRecord.distributionMode,\n    sourceRef: versionRecord.sourceRef,\n    permissions: versionRecord.permissions,\n    registryUrl: versionRecord.registryUrl,\n    bundleUrl: versionRecord.bundleUrl,\n    sha256: versionRecord.sha256,\n    publisher: versionRecord.publisher,\n    enabled: appRecord.enabled,\n    manifestSchemaVersion: versionRecord.manifestSchemaVersion,\n    components: versionRecord.components,\n    primaryPanelId: versionRecord.primaryPanelId,\n    updated,\n  });\n\n  private stagePath = async (\n    originalPath: string,\n    stagedPaths: Array<{ originalPath: string; stagedPath: string }>,\n  ): Promise<void> => {\n    if (!await this.params.integrityService.pathExists(originalPath)) {\n      return;\n    }\n    const stagedPath = `${originalPath}.uninstalling-${randomUUID()}`;\n    await rename(originalPath, stagedPath);\n    stagedPaths.push({ originalPath, stagedPath });\n  };\n\n  private restoreOrThrow = async (\n    appId: string,\n    stagedPaths: Array<{ originalPath: string; stagedPath: string }>,\n    operationError: unknown,\n  ): Promise<void> => {\n    try {\n      for (const entry of [...stagedPaths].reverse()) {\n        if (await this.params.integrityService.pathExists(entry.stagedPath)) {\n          await rename(entry.stagedPath, entry.originalPath);\n        }\n      }\n    } catch (restoreError) {\n      throw new AggregateError(\n        [operationError, restoreError],\n        `卸载 ${appId} 失败，且无法完全恢复已暂存文件。`,\n      );\n    }\n  };\n}\n"],"mappings":";;;AAsBA,IAAa,kCAAb,MAA6C;CAC3C,YAAY,QAQT;AAR0B,OAAA,SAAA;;CAU7B,SAAS,OAAO,OAAe,UAA4B,EAAE,KAA+B;EAC1F,MAAM,EAAE,YAAY,aAAa,sBAAsB,YAAY;AACnE,QAAM,aAAa,YAAY;EAC/B,MAAM,YAAY,MAAM,KAAK,OAAO,gBAAgB,OAAO,MAAM;AACjE,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;EAEtC,MAAM,sBAAsB,UAAU,kBAAkB,UAAU;EAClE,MAAM,cAAc,wBAClB,qBAAqB,gBACpB,MAAM,KAAK,OAAO,sBAAsB,aAAa,EAAE;EAC1D,MAAM,aAAa,MAAM,KAAK,OAAO,qBAAqB,QAAQ;GAChE;GACA;GACA;GACD,CAAC;AACF,MAAI,WAAW,YAAY,UAAU,eAAe;AAClD,OAAI,CAAC,oBACH,OAAM,IAAI,MAAM,eAAe,QAAQ;AAEzC,UAAO,KAAK,eAAe,WAAW,qBAAqB,UAAU,eAAe,MAAM;;EAE5F,MAAM,kBAAkB,UAAU,kBAAkB,WAAW;AAC/D,MAAI,iBAAiB;AACnB,SAAM,aAAa,YAAY;AAC/B,SAAM,aAAa,aAAa;AAChC,OAAI,QAAQ,aAAa,MACvB,OAAM,KAAK,OAAO,SAAS,OAAO,WAAW,QAAQ;AAEvD,SAAM,aAAa,aAAa;AAChC,UAAO,KAAK,eAAe,WAAW,iBAAiB,WAAW,SAAS,KAAK;;AAOlF,SAAO;GACL,GANoB,MAAM,KAAK,OAAO,QAAQ,GAAG,MAAM,GAAG,WAAW,WAAW;IAChF;IACA;IACA,UAAU,QAAQ;IACnB,CAAC;GAGA,iBAAiB,UAAU;GAC3B,SAAS;GACV;;CAGH,YAAY,OAAO,OAAe,cAAoD;EACpF,MAAM,YAAY,MAAM,KAAK,OAAO,gBAAgB,OAAO,MAAM;AACjE,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;AAEtC,MAAI,CAAC,UACH,OAAM,KAAK,OAAO,uBAAuB,2BAA2B;GAClE;GACA,aAAa,UAAU,WAAW;GAClC,qBAAqB,UAAU,gBAAgB,QAAQ,WAAW,WAC9D,UAAU,gBACV,KAAA;GACJ,mBAAmB,UAAU,gBAAgB;GAC9C,CAAC;EAEJ,MAAM,kBAAkB,OAAO,KAAK,UAAU,kBAAkB,CAAC,MAAM,MAAM,UAC3E,KAAK,cAAc,MAAM,CAAC;EAC5B,MAAM,cAAmE,EAAE;AAC3E,MAAI;AACF,QAAK,MAAM,iBAAiB,OAAO,OAAO,UAAU,kBAAkB,CACpE,OAAM,KAAK,UAAU,cAAc,kBAAkB,YAAY;AAEnE,OAAI,UACF,OAAM,KAAK,UACT,UAAU,gBAAgB,QAAQ,WAAW,gBACzC,UAAU,gBAAgB,QAAQ,oBAClC,UAAU,eACd,YACD;AAEH,OAAI,CAAC,MAAM,KAAK,OAAO,gBAAgB,UAAU,MAAM,CACrD,OAAM,IAAI,MAAM,kBAAkB,QAAQ;WAErC,OAAO;AACd,SAAM,KAAK,eAAe,OAAO,aAAa,MAAM;AACpD,SAAM;;AAER,QAAM,QAAQ,IAAI,YAAY,IAAI,OAAO,UACvC,MAAM,KAAK,OAAO,iBAAiB,gBAAgB,MAAM,WAAW,CAAC,CAAC;AACxE,SAAO;GAAE;GAAO;GAAiB,aAAa;GAAW;;CAG3D,kBACE,WACA,eACA,SACA,aACqB;EACrB,OAAO,UAAU;EACjB,MAAM,UAAU;EAChB;EACA,iBAAiB,UAAU;EAC3B,kBAAkB,cAAc;EAChC,eAAe,UAAU;EACzB,UAAU,UAAU;EACpB,YAAY,cAAc;EAC1B,kBAAkB,cAAc;EAChC,WAAW,cAAc;EACzB,aAAa,cAAc;EAC3B,aAAa,cAAc;EAC3B,WAAW,cAAc;EACzB,QAAQ,cAAc;EACtB,WAAW,cAAc;EACzB,SAAS,UAAU;EACnB,uBAAuB,cAAc;EACrC,YAAY,cAAc;EAC1B,gBAAgB,cAAc;EAC9B;EACD;CAED,YAAoB,OAClB,cACA,gBACkB;AAClB,MAAI,CAAC,MAAM,KAAK,OAAO,iBAAiB,WAAW,aAAa,CAC9D;EAEF,MAAM,aAAa,GAAG,aAAa,gBAAgB,YAAY;AAC/D,QAAM,OAAO,cAAc,WAAW;AACtC,cAAY,KAAK;GAAE;GAAc;GAAY,CAAC;;CAGhD,iBAAyB,OACvB,OACA,aACA,mBACkB;AAClB,MAAI;AACF,QAAK,MAAM,SAAS,CAAC,GAAG,YAAY,CAAC,SAAS,CAC5C,KAAI,MAAM,KAAK,OAAO,iBAAiB,WAAW,MAAM,WAAW,CACjE,OAAM,OAAO,MAAM,YAAY,MAAM,aAAa;WAG/C,cAAc;AACrB,SAAM,IAAI,eACR,CAAC,gBAAgB,aAAa,EAC9B,MAAM,MAAM,mBACb"}
+{"version":3,"file":"app-installation-lifecycle.service.js","names":[],"sources":["../../src/services/app-installation-lifecycle.service.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { rename } from \"node:fs/promises\";\nimport type { AppInstallationIntegrityService } from \"#app-runtime/services/app-installation-integrity.service.js\";\nimport type { AppInstanceStorageService } from \"#app-runtime/services/app-instance-storage.service.js\";\nimport type { AppRegistryConfigService } from \"#app-runtime/services/app-registry-config.service.js\";\nimport type { AppRegistryService } from \"#app-runtime/services/app-registry.service.js\";\nimport type { AppRemoteRegistryClientService } from \"#app-runtime/services/app-remote-registry-client.service.js\";\nimport type {\n  AppInstallProgressHandler,\n  AppInstallResult,\n  AppRollbackResult,\n  AppUninstallResult,\n  AppUpdateResult,\n} from \"#app-runtime/types/app-installation.types.js\";\n\ntype AppUpdateOptions = {\n  version?: string;\n  registryUrl?: string;\n  onProgress?: AppInstallProgressHandler;\n  activate?: boolean;\n};\n\nexport class AppInstallationLifecycleService {\n  constructor(private readonly params: {\n    registryService: AppRegistryService;\n    registryConfigService: AppRegistryConfigService;\n    remoteRegistryClient: AppRemoteRegistryClientService;\n    instanceStorageService: AppInstanceStorageService;\n    integrityService: AppInstallationIntegrityService;\n    install: (source: string, options: AppUpdateOptions) => Promise<AppInstallResult>;\n    rollback: (appId: string, version: string) => Promise<AppRollbackResult>;\n  }) {}\n\n  update = async (appId: string, options: AppUpdateOptions = {}): Promise<AppUpdateResult> => {\n    const { onProgress, registryUrl: requestedRegistryUrl, version } = options;\n    await onProgress?.(\"resolving\");\n    const appRecord = await this.params.registryService.getApp(appId);\n    if (!appRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    const activeVersionRecord = appRecord.installedVersions[appRecord.activeVersion];\n    const registryUrl = requestedRegistryUrl ??\n      activeVersionRecord?.registryUrl ??\n      (await this.params.registryConfigService.getSnapshot()).currentUrl;\n    const resolution = await this.params.remoteRegistryClient.resolve({\n      appId,\n      version,\n      registryUrl,\n    });\n    if (resolution.version === appRecord.activeVersion) {\n      if (!activeVersionRecord) {\n        throw new Error(`已安装应用缺少激活版本：${appId}`);\n      }\n      return this.toUpdateResult(appRecord, activeVersionRecord, appRecord.activeVersion, false);\n    }\n    const installedTarget = appRecord.installedVersions[resolution.version];\n    if (installedTarget) {\n      await onProgress?.(\"verifying\");\n      await onProgress?.(\"installing\");\n      if (options.activate !== false) {\n        await this.params.rollback(appId, resolution.version);\n      }\n      await onProgress?.(\"finalizing\");\n      return this.toUpdateResult(appRecord, installedTarget, resolution.version, true);\n    }\n    const installResult = await this.params.install(`${appId}@${resolution.version}`, {\n      registryUrl,\n      onProgress,\n      activate: options.activate,\n    });\n    return {\n      ...installResult,\n      previousVersion: appRecord.activeVersion,\n      updated: true,\n    };\n  };\n\n  uninstall = async (appId: string, purgeData: boolean): Promise<AppUninstallResult> => {\n    const appRecord = await this.params.registryService.getApp(appId);\n    if (!appRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    if (!purgeData) {\n      await this.params.instanceStorageService.materializeDefaultInstance({\n        appId,\n        publisherId: appRecord.publisher?.id,\n        legacyDataDirectory: appRecord.defaultInstance.storage.layout === \"legacy\"\n          ? appRecord.dataDirectory\n          : undefined,\n        dataSchemaVersion: appRecord.defaultInstance.dataSchemaVersion,\n      });\n    }\n    const removedVersions = Object.keys(appRecord.installedVersions).sort((left, right) =>\n      left.localeCompare(right));\n    const stagedPaths: Array<{ originalPath: string; stagedPath: string }> = [];\n    try {\n      for (const versionRecord of Object.values(appRecord.installedVersions)) {\n        await this.stagePath(versionRecord.installDirectory, stagedPaths);\n      }\n      if (purgeData) {\n        await this.stagePath(\n          appRecord.defaultInstance.storage.layout === \"instance-v1\"\n            ? appRecord.defaultInstance.storage.instanceDirectory\n            : appRecord.dataDirectory,\n          stagedPaths,\n        );\n      }\n      if (!await this.params.registryService.removeApp(appId)) {\n        throw new Error(`卸载过程中应用记录已发生变化：${appId}`);\n      }\n    } catch (error) {\n      await this.restoreOrThrow(appId, stagedPaths, error);\n      throw error;\n    }\n    await Promise.all(stagedPaths.map(async (entry) =>\n      await this.params.integrityService.removeDirectory(entry.stagedPath)));\n    return { appId, removedVersions, dataRemoved: purgeData };\n  };\n\n  private toUpdateResult = (\n    appRecord: NonNullable<Awaited<ReturnType<AppRegistryService[\"getApp\"]>>>,\n    versionRecord: NonNullable<Awaited<ReturnType<AppRegistryService[\"getApp\"]>>>[\"installedVersions\"][string],\n    version: string,\n    updated: boolean,\n  ): AppUpdateResult => ({\n    appId: appRecord.appId,\n    name: appRecord.name,\n    version,\n    previousVersion: appRecord.activeVersion,\n    installDirectory: versionRecord.installDirectory,\n    dataDirectory: appRecord.dataDirectory,\n    instance: appRecord.defaultInstance,\n    sourceKind: versionRecord.sourceKind,\n    distributionMode: versionRecord.distributionMode,\n    sourceRef: versionRecord.sourceRef,\n    permissions: versionRecord.permissions,\n    registryUrl: versionRecord.registryUrl,\n    bundleUrl: versionRecord.bundleUrl,\n    sha256: versionRecord.sha256,\n    target: versionRecord.target,\n    publisher: versionRecord.publisher,\n    enabled: appRecord.enabled,\n    manifestSchemaVersion: versionRecord.manifestSchemaVersion,\n    components: versionRecord.components,\n    primaryPanelId: versionRecord.primaryPanelId,\n    updated,\n  });\n\n  private stagePath = async (\n    originalPath: string,\n    stagedPaths: Array<{ originalPath: string; stagedPath: string }>,\n  ): Promise<void> => {\n    if (!await this.params.integrityService.pathExists(originalPath)) {\n      return;\n    }\n    const stagedPath = `${originalPath}.uninstalling-${randomUUID()}`;\n    await rename(originalPath, stagedPath);\n    stagedPaths.push({ originalPath, stagedPath });\n  };\n\n  private restoreOrThrow = async (\n    appId: string,\n    stagedPaths: Array<{ originalPath: string; stagedPath: string }>,\n    operationError: unknown,\n  ): Promise<void> => {\n    try {\n      for (const entry of [...stagedPaths].reverse()) {\n        if (await this.params.integrityService.pathExists(entry.stagedPath)) {\n          await rename(entry.stagedPath, entry.originalPath);\n        }\n      }\n    } catch (restoreError) {\n      throw new AggregateError(\n        [operationError, restoreError],\n        `卸载 ${appId} 失败，且无法完全恢复已暂存文件。`,\n      );\n    }\n  };\n}\n"],"mappings":";;;AAsBA,IAAa,kCAAb,MAA6C;CAC3C,YAAY,QAQT;AAR0B,OAAA,SAAA;;CAU7B,SAAS,OAAO,OAAe,UAA4B,EAAE,KAA+B;EAC1F,MAAM,EAAE,YAAY,aAAa,sBAAsB,YAAY;AACnE,QAAM,aAAa,YAAY;EAC/B,MAAM,YAAY,MAAM,KAAK,OAAO,gBAAgB,OAAO,MAAM;AACjE,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;EAEtC,MAAM,sBAAsB,UAAU,kBAAkB,UAAU;EAClE,MAAM,cAAc,wBAClB,qBAAqB,gBACpB,MAAM,KAAK,OAAO,sBAAsB,aAAa,EAAE;EAC1D,MAAM,aAAa,MAAM,KAAK,OAAO,qBAAqB,QAAQ;GAChE;GACA;GACA;GACD,CAAC;AACF,MAAI,WAAW,YAAY,UAAU,eAAe;AAClD,OAAI,CAAC,oBACH,OAAM,IAAI,MAAM,eAAe,QAAQ;AAEzC,UAAO,KAAK,eAAe,WAAW,qBAAqB,UAAU,eAAe,MAAM;;EAE5F,MAAM,kBAAkB,UAAU,kBAAkB,WAAW;AAC/D,MAAI,iBAAiB;AACnB,SAAM,aAAa,YAAY;AAC/B,SAAM,aAAa,aAAa;AAChC,OAAI,QAAQ,aAAa,MACvB,OAAM,KAAK,OAAO,SAAS,OAAO,WAAW,QAAQ;AAEvD,SAAM,aAAa,aAAa;AAChC,UAAO,KAAK,eAAe,WAAW,iBAAiB,WAAW,SAAS,KAAK;;AAOlF,SAAO;GACL,GANoB,MAAM,KAAK,OAAO,QAAQ,GAAG,MAAM,GAAG,WAAW,WAAW;IAChF;IACA;IACA,UAAU,QAAQ;IACnB,CAAC;GAGA,iBAAiB,UAAU;GAC3B,SAAS;GACV;;CAGH,YAAY,OAAO,OAAe,cAAoD;EACpF,MAAM,YAAY,MAAM,KAAK,OAAO,gBAAgB,OAAO,MAAM;AACjE,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;AAEtC,MAAI,CAAC,UACH,OAAM,KAAK,OAAO,uBAAuB,2BAA2B;GAClE;GACA,aAAa,UAAU,WAAW;GAClC,qBAAqB,UAAU,gBAAgB,QAAQ,WAAW,WAC9D,UAAU,gBACV,KAAA;GACJ,mBAAmB,UAAU,gBAAgB;GAC9C,CAAC;EAEJ,MAAM,kBAAkB,OAAO,KAAK,UAAU,kBAAkB,CAAC,MAAM,MAAM,UAC3E,KAAK,cAAc,MAAM,CAAC;EAC5B,MAAM,cAAmE,EAAE;AAC3E,MAAI;AACF,QAAK,MAAM,iBAAiB,OAAO,OAAO,UAAU,kBAAkB,CACpE,OAAM,KAAK,UAAU,cAAc,kBAAkB,YAAY;AAEnE,OAAI,UACF,OAAM,KAAK,UACT,UAAU,gBAAgB,QAAQ,WAAW,gBACzC,UAAU,gBAAgB,QAAQ,oBAClC,UAAU,eACd,YACD;AAEH,OAAI,CAAC,MAAM,KAAK,OAAO,gBAAgB,UAAU,MAAM,CACrD,OAAM,IAAI,MAAM,kBAAkB,QAAQ;WAErC,OAAO;AACd,SAAM,KAAK,eAAe,OAAO,aAAa,MAAM;AACpD,SAAM;;AAER,QAAM,QAAQ,IAAI,YAAY,IAAI,OAAO,UACvC,MAAM,KAAK,OAAO,iBAAiB,gBAAgB,MAAM,WAAW,CAAC,CAAC;AACxE,SAAO;GAAE;GAAO;GAAiB,aAAa;GAAW;;CAG3D,kBACE,WACA,eACA,SACA,aACqB;EACrB,OAAO,UAAU;EACjB,MAAM,UAAU;EAChB;EACA,iBAAiB,UAAU;EAC3B,kBAAkB,cAAc;EAChC,eAAe,UAAU;EACzB,UAAU,UAAU;EACpB,YAAY,cAAc;EAC1B,kBAAkB,cAAc;EAChC,WAAW,cAAc;EACzB,aAAa,cAAc;EAC3B,aAAa,cAAc;EAC3B,WAAW,cAAc;EACzB,QAAQ,cAAc;EACtB,QAAQ,cAAc;EACtB,WAAW,cAAc;EACzB,SAAS,UAAU;EACnB,uBAAuB,cAAc;EACrC,YAAY,cAAc;EAC1B,gBAAgB,cAAc;EAC9B;EACD;CAED,YAAoB,OAClB,cACA,gBACkB;AAClB,MAAI,CAAC,MAAM,KAAK,OAAO,iBAAiB,WAAW,aAAa,CAC9D;EAEF,MAAM,aAAa,GAAG,aAAa,gBAAgB,YAAY;AAC/D,QAAM,OAAO,cAAc,WAAW;AACtC,cAAY,KAAK;GAAE;GAAc;GAAY,CAAC;;CAGhD,iBAAyB,OACvB,OACA,aACA,mBACkB;AAClB,MAAI;AACF,QAAK,MAAM,SAAS,CAAC,GAAG,YAAY,CAAC,SAAS,CAC5C,KAAI,MAAM,KAAK,OAAO,iBAAiB,WAAW,MAAM,WAAW,CACjE,OAAM,OAAO,MAAM,YAAY,MAAM,aAAa;WAG/C,cAAc;AACrB,SAAM,IAAI,eACR,CAAC,gBAAgB,aAAa,EAC9B,MAAM,MAAM,mBACb"}

package/dist/services/app-installation.service.d.ts

@@ -53,6 +53,7 @@ declare class AppInstallationService {
   assertVersionIntegrity: (appId: string, version?: string) => Promise<void>;
   withAppOperation: <T>(appId: string, operation: () => Promise<T>) => Promise<T>;
   resolveLaunch: (appReference: string, explicitDocumentGrantMap: AppDocumentGrantMap) => Promise<AppLaunchResolution>;
+  private readRemoteSourceFields;
   persistGrants: (appId: string | undefined, documentGrantMap: AppDocumentGrantMap) => Promise<void>;
 }
 //#endregion

package/dist/services/app-installation.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-installation.service.d.ts","names":[],"sources":["../../src/services/app-installation.service.ts"],"mappings":";;;;;;;;;;;;;KAsCK,iBAAA;EACH,WAAA;EACA,UAAA,GAAa,yBAAA;EACb,QAAA;EACA,gBAAA,GAAmB,YAAA;AAAA;AAAA,cAWR,sBAAA;EAAA,iBAUQ,cAAA;EAAA,iBACA,aAAA;EAAA,iBACA,eAAA;EAAA,iBACA,YAAA;EAAA,iBACA,eAAA;EAAA,iBACA,qBAAA;EAAA,iBAGA,oBAAA;EAAA,iBAjBF,oBAAA;EAAA,iBACA,sBAAA;EAAA,iBACA,eAAA;EAAA,iBACA,gBAAA;EAAA,iBACA,iBAAA;EAAA,iBACA,gBAAA;EAAA,iBACA,mBAAA;cAGE,cAAA,GAAgB,cAAA,EAChB,aAAA,GAAe,gBAAA,EACf,eAAA,GAAiB,kBAAA,EACjB,YAAA,GAAc,eAAA,EACd,eAAA,GAAiB,kBAAA,EACjB,qBAAA,GAAuB,wBAAA,EAGvB,oBAAA,GAAsB,8BAAA,EAGvC,sBAAA,GAAyB,yBAAA;EAyB3B,OAAA,GACE,SAAA,UACA,OAAA,GAAS,iBAAA,KACR,OAAA,CAAQ,gBAAA;EAAA,QAkCH,qBAAA;EAAA,QAUA,qBAAA;EAmIR,MAAA,GACE,KAAA,UACA,OAAA;IACE,OAAA;IACA,WAAA;IACA,UAAA,GAAa,yBAAA;IACb,QAAA;EAAA,MAED,OAAA,CAAQ,eAAA;EAOX,SAAA,GACE,KAAA,UACA,SAAA,cACC,OAAA,CAAQ,kBAAA;EAOX,IAAA,QAAiB,OAAA,CAAQ,oBAAA;EAkBzB,mBAAA,QAAgC,OAAA;EA0GhC,IAAA,GACE,KAAA,UACA,OAAA;IAAW,mBAAA;EAAA,MACV,OAAA,CAAQ,aAAA;EA0CX,UAAA,GAAoB,KAAA,UAAe,OAAA,cAAmB,OAAA,CAAQ,mBAAA;EAW9D,QAAA,GAAkB,KAAA,UAAe,OAAA,aAAkB,OAAA,CAAQ,iBAAA;EAoC3D,sBAAA,GAAgC,KAAA,UAAe,OAAA,cAAmB,OAAA;EAqBlE,gBAAA,MAA6B,KAAA,UAAe,SAAA,QAAiB,OAAA,CAAQ,CAAA,MAAK,OAAA,CAAQ,CAAA;EAgBlF,aAAA,GACE,YAAA,UACA,wBAAA,EAA0B,mBAAA,KACzB,OAAA,CAAQ,mBAAA;EA6BX,aAAA,GACE,KAAA,sBACA,gBAAA,EAAkB,mBAAA,KACjB,OAAA;AAAA"}
+{"version":3,"file":"app-installation.service.d.ts","names":[],"sources":["../../src/services/app-installation.service.ts"],"mappings":";;;;;;;;;;;;;KAuCK,iBAAA;EACH,WAAA;EACA,UAAA,GAAa,yBAAA;EACb,QAAA;EACA,gBAAA,GAAmB,YAAA;AAAA;AAAA,cAaR,sBAAA;EAAA,iBAUQ,cAAA;EAAA,iBACA,aAAA;EAAA,iBACA,eAAA;EAAA,iBACA,YAAA;EAAA,iBACA,eAAA;EAAA,iBACA,qBAAA;EAAA,iBAGA,oBAAA;EAAA,iBAjBF,oBAAA;EAAA,iBACA,sBAAA;EAAA,iBACA,eAAA;EAAA,iBACA,gBAAA;EAAA,iBACA,iBAAA;EAAA,iBACA,gBAAA;EAAA,iBACA,mBAAA;cAGE,cAAA,GAAgB,cAAA,EAChB,aAAA,GAAe,gBAAA,EACf,eAAA,GAAiB,kBAAA,EACjB,YAAA,GAAc,eAAA,EACd,eAAA,GAAiB,kBAAA,EACjB,qBAAA,GAAuB,wBAAA,EAGvB,oBAAA,GAAsB,8BAAA,EAGvC,sBAAA,GAAyB,yBAAA;EAyB3B,OAAA,GACE,SAAA,UACA,OAAA,GAAS,iBAAA,KACR,OAAA,CAAQ,gBAAA;EAAA,QAkCH,qBAAA;EAAA,QAUA,qBAAA;EA8HR,MAAA,GACE,KAAA,UACA,OAAA;IACE,OAAA;IACA,WAAA;IACA,UAAA,GAAa,yBAAA;IACb,QAAA;EAAA,MAED,OAAA,CAAQ,eAAA;EAOX,SAAA,GACE,KAAA,UACA,SAAA,cACC,OAAA,CAAQ,kBAAA;EAOX,IAAA,QAAiB,OAAA,CAAQ,oBAAA;EAkBzB,mBAAA,QAAgC,OAAA;EAwGhC,IAAA,GACE,KAAA,UACA,OAAA;IAAW,mBAAA;EAAA,MACV,OAAA,CAAQ,aAAA;EAwCX,UAAA,GAAoB,KAAA,UAAe,OAAA,cAAmB,OAAA,CAAQ,mBAAA;EAW9D,QAAA,GAAkB,KAAA,UAAe,OAAA,aAAkB,OAAA,CAAQ,iBAAA;EAoC3D,sBAAA,GAAgC,KAAA,UAAe,OAAA,cAAmB,OAAA;EAqBlE,gBAAA,MAA6B,KAAA,UAAe,SAAA,QAAiB,OAAA,CAAQ,CAAA,MAAK,OAAA,CAAQ,CAAA;EAgBlF,aAAA,GACE,YAAA,UACA,wBAAA,EAA0B,mBAAA,KACzB,OAAA,CAAQ,mBAAA;EAAA,QA6BH,sBAAA;EAOR,aAAA,GACE,KAAA,sBACA,gBAAA,EAAkB,mBAAA,KACjB,OAAA;AAAA"}

package/dist/services/app-installation.service.js

@@ -106,7 +106,8 @@ var AppInstallationService = class {
 			appId,
 			appVersion: version,
 			extractedDirectory,
-			installDirectory
+			installDirectory,
+			target: extractedMetadata.metadata.target?.kind === "native" ? extractedMetadata.metadata.target : void 0
 		});
 		const defaultInstance = await this.instanceStorageService.materializeDefaultInstance({
 			appId,
@@ -129,9 +130,7 @@ var AppInstallationService = class {
 				sourceRef: source.sourceRef,
 				installedAt: (/* @__PURE__ */ new Date()).toISOString(),
 				permissions: manifestBundle.manifest.schemaVersion === 1 ? manifestBundle.manifest.permissions ?? {} : this.manifestService.resolvePlatformSecurity(manifestBundle.manifest).permissions,
-				registryUrl: source.kind === "registry" ? source.registryResolution.registryUrl : void 0,
-				bundleUrl: source.kind === "registry" ? source.registryResolution.bundleUrl : void 0,
-				sha256: source.kind === "registry" ? source.registryResolution.sha256 : void 0,
+				...this.readRemoteSourceFields(source.kind === "registry" ? source.registryResolution : void 0),
 				publisher,
 				manifestSchemaVersion: manifestBundle.manifest.schemaVersion,
 				components: isAppComponentManifestBundle(manifestBundle) ? manifestBundle.components.map((component) => ({
@@ -165,9 +164,7 @@ var AppInstallationService = class {
 			sourceRef: source.sourceRef,
 			distributionMode: installedVersion?.distributionMode,
 			permissions: installedVersion?.permissions ?? {},
-			registryUrl: installedVersion?.registryUrl,
-			bundleUrl: installedVersion?.bundleUrl,
-			sha256: installedVersion?.sha256,
+			...this.readRemoteSourceFields(installedVersion),
 			publisher: installedVersion?.publisher,
 			enabled: registryRecord.enabled,
 			manifestSchemaVersion: installedVersion?.manifestSchemaVersion ?? 1,
@@ -242,9 +239,7 @@ var AppInstallationService = class {
 						installedAt: activeVersion.installedAt,
 						distributionMode: activeVersion.distributionMode,
 						permissions: activeVersion.permissions,
-						registryUrl: activeVersion.registryUrl,
-						bundleUrl: activeVersion.bundleUrl,
-						sha256: activeVersion.sha256,
+						...this.readRemoteSourceFields(activeVersion),
 						publisher: currentRecord.publisher ?? activeVersion.publisher,
 						manifestSchemaVersion: activeVersion.manifestSchemaVersion,
 						components: activeVersion.components,
@@ -287,9 +282,7 @@ var AppInstallationService = class {
 				sourceRef: versionRecord.sourceRef,
 				installedAt: versionRecord.installedAt,
 				permissions: versionRecord.permissions,
-				registryUrl: versionRecord.registryUrl,
-				bundleUrl: versionRecord.bundleUrl,
-				sha256: versionRecord.sha256,
+				...this.readRemoteSourceFields(versionRecord),
 				publisher: versionRecord.publisher,
 				manifestSchemaVersion: versionRecord.manifestSchemaVersion,
 				components: versionRecord.components,
@@ -383,6 +376,12 @@ var AppInstallationService = class {
 			}
 		};
 	};
+	readRemoteSourceFields = (source) => ({
+		registryUrl: source?.registryUrl,
+		bundleUrl: source?.bundleUrl,
+		sha256: source?.sha256,
+		target: source?.target
+	});
 	persistGrants = async (appId, documentGrantMap) => {
 		if (!appId || Object.keys(documentGrantMap).length === 0) return;
 		await this.registryService.updateGrants(appId, documentGrantMap);

package/dist/services/app-installation.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-installation.service.js","names":[],"sources":["../../src/services/app-installation.service.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"node:async_hooks\";\nimport { rm } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { AppBundleService } from \"#app-runtime/services/app-bundle.service.js\";\nimport { AppManifestService } from \"#app-runtime/services/app-manifest.service.js\";\nimport { isAppComponentManifestBundle } from \"#app-runtime/types/app-manifest.types.js\";\nimport type { AppManifestBundle } from \"#app-runtime/types/app-manifest.types.js\";\nimport { AppHomeService } from \"#app-runtime/services/app-home.service.js\";\nimport { AppInstanceStorageService } from \"#app-runtime/services/app-instance-storage.service.js\";\nimport { AppInstallationIntegrityService } from \"#app-runtime/services/app-installation-integrity.service.js\";\nimport { AppInstallationFilesystemService } from \"#app-runtime/services/app-installation-filesystem.service.js\";\nimport { AppInstallationLifecycleService } from \"#app-runtime/services/app-installation-lifecycle.service.js\";\nimport { FileLockService } from \"#app-runtime/services/file-lock.service.js\";\nimport { AppBuildService } from \"#app-runtime/services/app-build.service.js\";\nimport type { AppBundleExtractResult } from \"#app-runtime/types/app-bundle.types.js\";\nimport type { AppDocumentGrantMap } from \"#app-runtime/types/app-permissions.types.js\";\nimport type { AppPublisher } from \"#app-runtime/types/app-remote-registry.types.js\";\nimport { AppRegistryConfigService } from \"#app-runtime/services/app-registry-config.service.js\";\nimport { AppRemoteRegistryClientService } from \"#app-runtime/services/app-remote-registry-client.service.js\";\nimport { AppRegistryService } from \"#app-runtime/services/app-registry.service.js\";\nimport {\n  AppInstallSourceService,\n  type ResolvedAppInstallSource,\n} from \"#app-runtime/services/app-install-source.service.js\";\nimport type {\n  AppInfoResult,\n  AppInstallProgressHandler,\n  AppActivationResult,\n  AppInstallResult,\n  AppLaunchResolution,\n  AppUpdateResult,\n  AppRollbackResult,\n  AppUninstallResult,\n  InstalledAppListItem,\n} from \"#app-runtime/types/app-installation.types.js\";\n\nconst SAFE_APP_ID_PATTERN = /^[a-z0-9]+(?:[.-][a-z0-9]+)*$/;\n\ntype AppInstallOptions = {\n  registryUrl?: string;\n  onProgress?: AppInstallProgressHandler;\n  activate?: boolean;\n  trustedPublisher?: AppPublisher;\n};\n\ntype PreparedAppInstall = {\n  source: ResolvedAppInstallSource;\n  extractedDirectory: string;\n  extractedMetadata: AppBundleExtractResult;\n  manifestBundle: AppManifestBundle;\n  options: AppInstallOptions;\n};\n\nexport class AppInstallationService {\n  private readonly installSourceService: AppInstallSourceService;\n  private readonly instanceStorageService: AppInstanceStorageService;\n  private readonly fileLockService = new FileLockService();\n  private readonly integrityService: AppInstallationIntegrityService;\n  private readonly filesystemService: AppInstallationFilesystemService;\n  private readonly lifecycleService: AppInstallationLifecycleService;\n  private readonly appOperationContext = new AsyncLocalStorage<ReadonlySet<string>>();\n\n  constructor(\n    private readonly appHomeService: AppHomeService = new AppHomeService(),\n    private readonly bundleService: AppBundleService = new AppBundleService(),\n    private readonly manifestService: AppManifestService = new AppManifestService(),\n    private readonly buildService: AppBuildService = new AppBuildService(),\n    private readonly registryService: AppRegistryService = new AppRegistryService(appHomeService),\n    private readonly registryConfigService: AppRegistryConfigService = new AppRegistryConfigService(\n      appHomeService,\n    ),\n    private readonly remoteRegistryClient: AppRemoteRegistryClientService = new AppRemoteRegistryClientService(\n      new AppRegistryConfigService(appHomeService),\n    ),\n    instanceStorageService?: AppInstanceStorageService,\n  ) {\n    this.installSourceService = new AppInstallSourceService(\n      this.manifestService,\n      this.remoteRegistryClient,\n      this.bundleService,\n    );\n    this.instanceStorageService = instanceStorageService ?? new AppInstanceStorageService(appHomeService);\n    this.integrityService = new AppInstallationIntegrityService(manifestService);\n    this.filesystemService = new AppInstallationFilesystemService({\n      buildService,\n      integrityService: this.integrityService,\n      manifestService,\n    });\n    this.lifecycleService = new AppInstallationLifecycleService({\n      registryService,\n      registryConfigService,\n      remoteRegistryClient,\n      instanceStorageService: this.instanceStorageService,\n      integrityService: this.integrityService,\n      install: this.install,\n      rollback: this.rollback,\n    });\n  }\n\n  install = async (\n    appSource: string,\n    options: AppInstallOptions = {},\n  ): Promise<AppInstallResult> => {\n    const { onProgress, registryUrl } = options;\n    await onProgress?.(\"resolving\");\n    const source = await this.installSourceService.resolve(appSource, registryUrl);\n    const tempDirectory = await this.appHomeService.createTemporaryDirectory(\"napp-install-\");\n    try {\n      const bundlePath = await this.installSourceService.materializeBundle(\n        source,\n        tempDirectory,\n        onProgress,\n      );\n      await onProgress?.(\"verifying\");\n      const extractedDirectory = path.join(tempDirectory, \"bundle\");\n      const extractedMetadata = await this.bundleService.extractBundle({\n        bundlePath,\n        targetDirectory: extractedDirectory,\n      });\n      await this.filesystemService.materializeDistribution({\n        appDirectory: extractedDirectory,\n        distributionMode: extractedMetadata.metadata.distributionMode,\n      });\n      const manifestBundle = await this.manifestService.load(extractedDirectory);\n      return await this.installPreparedBundle({\n        source,\n        extractedDirectory,\n        extractedMetadata,\n        manifestBundle,\n        options,\n      });\n    } finally {\n      await rm(tempDirectory, { recursive: true, force: true });\n    }\n  };\n\n  private installPreparedBundle = async (\n    prepared: PreparedAppInstall,\n  ): Promise<AppInstallResult> => {\n    const appId = prepared.manifestBundle.manifest.id;\n    return await this.withAppOperation(\n      appId,\n      async () => await this.commitPreparedInstall(prepared),\n    );\n  };\n\n  private commitPreparedInstall = async (\n    prepared: PreparedAppInstall,\n  ): Promise<AppInstallResult> => {\n    const { extractedDirectory, extractedMetadata, manifestBundle, options, source } = prepared;\n    const { onProgress } = options;\n    const { id: appId, version } = manifestBundle.manifest;\n    const installDirectory = this.appHomeService.getInstallDirectory(appId, version);\n    if (source.kind === \"registry\" && appId !== source.registryResolution.appId) {\n      throw new Error(\n        `bundle manifest.appId 与 registry 请求不一致：期望 ${source.registryResolution.appId}，实际 ${appId}`,\n      );\n    }\n    await onProgress?.(\"installing\");\n    const existingRecord = await this.registryService.getApp(appId);\n    const publisher = source.kind === \"registry\"\n      ? source.registryResolution.publisher\n      : options.trustedPublisher;\n    const currentPublisher = existingRecord?.publisher ??\n      existingRecord?.installedVersions[existingRecord.activeVersion]?.publisher;\n    if (currentPublisher && currentPublisher.id !== publisher?.id) {\n      throw new Error(\n        `应用 ${appId} 已绑定发布者 ${currentPublisher.id}，拒绝由 ${publisher?.id ?? \"未验证本地来源\"} 覆盖。`,\n      );\n    }\n    const dataSchemaVersion = manifestBundle.manifest.schemaVersion === 2\n      ? manifestBundle.manifest.storage?.schemaVersion ?? 1\n      : 1;\n    if (existingRecord?.defaultInstance.dataSchemaVersion !== undefined &&\n      existingRecord.defaultInstance.dataSchemaVersion !== dataSchemaVersion) {\n      throw new Error(\n        `应用 ${appId} 数据 schema 从 ${existingRecord.defaultInstance.dataSchemaVersion} 升级到 ${dataSchemaVersion}，但包内没有受支持的迁移合同。更新已停止，现有数据和版本保持不变。`,\n      );\n    }\n    const instanceDirectory = this.appHomeService.getAppInstanceDirectory(appId, \"default\");\n    const instanceExisted = await this.integrityService.pathExists(instanceDirectory);\n    const contentSha256 = await this.filesystemService.copyToImmutableInstallDirectory({\n      appId,\n      appVersion: version,\n      extractedDirectory,\n      installDirectory,\n    });\n    const defaultInstance = await this.instanceStorageService.materializeDefaultInstance({\n      appId,\n      publisherId: (currentPublisher ?? publisher)?.id,\n      legacyDataDirectory: existingRecord?.defaultInstance.storage.layout === \"legacy\"\n        ? existingRecord.dataDirectory\n        : undefined,\n      dataSchemaVersion,\n    });\n    await onProgress?.(\"finalizing\");\n    let registryRecord;\n    try {\n      registryRecord = await this.registryService.upsertInstallation({\n        appId,\n        name: manifestBundle.manifest.name,\n        description: manifestBundle.manifest.description,\n        version,\n        installDirectory,\n        defaultInstance,\n        sourceKind: source.kind,\n        distributionMode: source.kind === \"registry\"\n          ? source.registryResolution.distributionMode\n          : extractedMetadata.metadata.distributionMode,\n        sourceRef: source.sourceRef,\n        installedAt: new Date().toISOString(),\n        permissions: manifestBundle.manifest.schemaVersion === 1\n          ? manifestBundle.manifest.permissions ?? {}\n          : this.manifestService.resolvePlatformSecurity(manifestBundle.manifest).permissions,\n        registryUrl: source.kind === \"registry\"\n          ? source.registryResolution.registryUrl\n          : undefined,\n        bundleUrl: source.kind === \"registry\" ? source.registryResolution.bundleUrl : undefined,\n        sha256: source.kind === \"registry\" ? source.registryResolution.sha256 : undefined,\n        publisher,\n        manifestSchemaVersion: manifestBundle.manifest.schemaVersion,\n        components: isAppComponentManifestBundle(manifestBundle)\n          ? manifestBundle.components.map((component) => ({\n              ...component,\n              componentDirectory: path.join(installDirectory, component.path),\n              manifestPath: path.join(\n                installDirectory,\n                component.path,\n                component.kind === \"panel\" ? \"panel-app.json\" : \"service-app.json\",\n              ),\n            }))\n          : undefined,\n        primaryPanelId: isAppComponentManifestBundle(manifestBundle)\n          ? manifestBundle.primaryPanelId\n          : undefined,\n        security: isAppComponentManifestBundle(manifestBundle)\n          ? this.manifestService.resolvePlatformSecurity(manifestBundle.manifest)\n          : undefined,\n        dataSchemaVersion,\n        contentSha256,\n        activate: options.activate,\n      });\n    } catch (error) {\n      await this.integrityService.removeDirectory(installDirectory);\n      if (!instanceExisted) {\n        await this.instanceStorageService.rollbackNewInstance({\n          instance: defaultInstance,\n          legacyDataDirectory: existingRecord?.defaultInstance.storage.layout === \"legacy\"\n            ? existingRecord.dataDirectory\n            : undefined,\n        });\n      }\n      throw error;\n    }\n    const installedVersion = registryRecord.installedVersions[version];\n    return {\n      appId: registryRecord.appId,\n      name: registryRecord.name,\n      version,\n      installDirectory,\n      dataDirectory: defaultInstance.storage.dataDirectory,\n      instance: registryRecord.defaultInstance,\n      sourceKind: source.kind,\n      sourceRef: source.sourceRef,\n      distributionMode: installedVersion?.distributionMode,\n      permissions: installedVersion?.permissions ?? {},\n      registryUrl: installedVersion?.registryUrl,\n      bundleUrl: installedVersion?.bundleUrl,\n      sha256: installedVersion?.sha256,\n      publisher: installedVersion?.publisher,\n      enabled: registryRecord.enabled,\n      manifestSchemaVersion: installedVersion?.manifestSchemaVersion ?? 1,\n      components: installedVersion?.components,\n      primaryPanelId: installedVersion?.primaryPanelId,\n    };\n  };\n\n  update = async (\n    appId: string,\n    options?: {\n      version?: string;\n      registryUrl?: string;\n      onProgress?: AppInstallProgressHandler;\n      activate?: boolean;\n    },\n  ): Promise<AppUpdateResult> => {\n    return await this.withAppOperation(\n      appId,\n      async () => await this.lifecycleService.update(appId, options),\n    );\n  };\n\n  uninstall = async (\n    appId: string,\n    purgeData: boolean,\n  ): Promise<AppUninstallResult> => {\n    return await this.withAppOperation(\n      appId,\n      async () => await this.lifecycleService.uninstall(appId, purgeData),\n    );\n  };\n\n  list = async (): Promise<InstalledAppListItem[]> => {\n    const appRecords = await this.registryService.listApps();\n    return appRecords.map((appRecord) => ({\n      appId: appRecord.appId,\n      name: appRecord.name,\n      activeVersion: appRecord.activeVersion,\n      sourceKind:\n        appRecord.installedVersions[appRecord.activeVersion]?.sourceKind ?? \"directory\",\n      distributionMode:\n        appRecord.installedVersions[appRecord.activeVersion]?.distributionMode,\n      enabled: appRecord.enabled,\n      manifestSchemaVersion:\n        appRecord.installedVersions[appRecord.activeVersion]?.manifestSchemaVersion ?? 1,\n      primaryPanelId:\n        appRecord.installedVersions[appRecord.activeVersion]?.primaryPanelId,\n    }));\n  };\n\n  reconcileFilesystem = async (): Promise<void> => {\n    await this.appHomeService.ensureBaseDirectories();\n    let appRecords = await this.registryService.listApps();\n    for (const appRecord of appRecords) {\n      await this.withAppOperation(appRecord.appId, async () => {\n        for (const versionRecord of Object.values(appRecord.installedVersions)) {\n          if (!await this.integrityService.pathExists(versionRecord.installDirectory)) {\n            continue;\n          }\n          if (!versionRecord.contentSha256) {\n            const contentSha256 = await this.integrityService.calculateDigest(\n              versionRecord.installDirectory,\n            );\n            await this.registryService.setVersionContentDigest(\n              appRecord.appId,\n              versionRecord.version,\n              contentSha256,\n            );\n          }\n          await this.integrityService.protectDirectory(versionRecord.installDirectory);\n        }\n      });\n    }\n    appRecords = await this.registryService.listApps();\n    const referencedInstallPaths = new Set(appRecords.flatMap((record) =>\n      Object.values(record.installedVersions).map((version) => path.resolve(version.installDirectory))));\n    const referencedDataPaths = new Set(appRecords.map((record) => path.resolve(\n      record.defaultInstance.storage.layout === \"instance-v1\"\n        ? record.defaultInstance.storage.instanceDirectory\n        : record.dataDirectory,\n    )));\n\n    const packageDirectories = await this.filesystemService.readDirectories(\n      this.appHomeService.getPackagesDirectory(),\n    );\n    for (const appDirectory of packageDirectories) {\n      await this.filesystemService.reconcileGeneratedSiblings(appDirectory, referencedInstallPaths);\n    }\n    await this.filesystemService.reconcileGeneratedSiblings(\n      this.appHomeService.getDataDirectory(),\n      referencedDataPaths,\n    );\n    for (const appRecord of appRecords) {\n      if (appRecord.defaultInstance.storage.layout !== \"instance-v1\") {\n        continue;\n      }\n      await this.filesystemService.reconcileGeneratedSiblings(\n        appRecord.defaultInstance.storage.instanceDirectory,\n        new Set([path.resolve(appRecord.defaultInstance.storage.dataDirectory)]),\n      );\n    }\n    for (const appRecord of appRecords) {\n      if (appRecord.defaultInstance.storage.layout !== \"legacy\") {\n        continue;\n      }\n      await this.withAppOperation(appRecord.appId, async () => {\n        const currentRecord = await this.registryService.getApp(appRecord.appId);\n        if (!currentRecord || currentRecord.defaultInstance.storage.layout !== \"legacy\") {\n          return;\n        }\n        const activeVersion = currentRecord.installedVersions[currentRecord.activeVersion];\n        if (!activeVersion) {\n          throw new Error(`已安装应用缺少激活版本：${currentRecord.appId}`);\n        }\n        const instance = await this.instanceStorageService.materializeDefaultInstance({\n          appId: currentRecord.appId,\n          publisherId: currentRecord.publisher?.id,\n          legacyDataDirectory: currentRecord.dataDirectory,\n          dataSchemaVersion: currentRecord.defaultInstance.dataSchemaVersion,\n        });\n        try {\n          await this.registryService.upsertInstallation({\n            appId: currentRecord.appId,\n            name: currentRecord.name,\n            description: currentRecord.description,\n            version: currentRecord.activeVersion,\n            installDirectory: activeVersion.installDirectory,\n            defaultInstance: instance,\n            sourceKind: activeVersion.sourceKind,\n            sourceRef: activeVersion.sourceRef,\n            installedAt: activeVersion.installedAt,\n            distributionMode: activeVersion.distributionMode,\n            permissions: activeVersion.permissions,\n            registryUrl: activeVersion.registryUrl,\n            bundleUrl: activeVersion.bundleUrl,\n            sha256: activeVersion.sha256,\n            publisher: currentRecord.publisher ?? activeVersion.publisher,\n            manifestSchemaVersion: activeVersion.manifestSchemaVersion,\n            components: activeVersion.components,\n            primaryPanelId: activeVersion.primaryPanelId,\n            security: activeVersion.security,\n            dataSchemaVersion: activeVersion.dataSchemaVersion,\n            contentSha256: activeVersion.contentSha256,\n            enabled: currentRecord.enabled,\n          });\n        } catch (error) {\n          await this.instanceStorageService.rollbackNewInstance({\n            instance,\n            legacyDataDirectory: currentRecord.dataDirectory,\n          });\n          throw error;\n        }\n      });\n    }\n  };\n\n  info = async (\n    appId: string,\n    options: { measureStorageUsage?: boolean } = {},\n  ): Promise<AppInfoResult> => {\n    const appRecord = await this.registryService.getApp(appId);\n    if (!appRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    const installedVersions = Object.values(appRecord.installedVersions).sort((left, right) =>\n      left.version.localeCompare(right.version),\n    );\n    const storageUsage = options.measureStorageUsage === false\n      ? undefined\n      : await this.instanceStorageService.measureUsage(appRecord.defaultInstance.storage);\n    return {\n      appId: appRecord.appId,\n      name: appRecord.name,\n      description: appRecord.description,\n      activeVersion: appRecord.activeVersion,\n      enabled: appRecord.enabled,\n      dataDirectory: appRecord.dataDirectory,\n      instance: appRecord.defaultInstance,\n      storage: appRecord.defaultInstance.storage,\n      storageUsage,\n      installedVersions: installedVersions.map((versionRecord) => ({\n        version: versionRecord.version,\n        installDirectory: versionRecord.installDirectory,\n        sourceKind: versionRecord.sourceKind,\n        distributionMode: versionRecord.distributionMode,\n        sourceRef: versionRecord.sourceRef,\n        installedAt: versionRecord.installedAt,\n        permissions: versionRecord.permissions,\n        registryUrl: versionRecord.registryUrl,\n        bundleUrl: versionRecord.bundleUrl,\n        sha256: versionRecord.sha256,\n        publisher: versionRecord.publisher,\n        manifestSchemaVersion: versionRecord.manifestSchemaVersion,\n        components: versionRecord.components,\n        primaryPanelId: versionRecord.primaryPanelId,\n        contentSha256: versionRecord.contentSha256,\n      })),\n      grants: appRecord.grants,\n    };\n  };\n\n  setEnabled = async (appId: string, enabled: boolean): Promise<AppActivationResult> => {\n    return await this.withAppOperation(appId, async () => {\n      const appRecord = await this.registryService.setEnabled(appId, enabled);\n      return {\n        appId: appRecord.appId,\n        activeVersion: appRecord.activeVersion,\n        enabled: appRecord.enabled,\n      };\n    });\n  };\n\n  rollback = async (appId: string, version: string): Promise<AppRollbackResult> => {\n    return await this.withAppOperation(appId, async () => {\n    const currentRecord = await this.registryService.getApp(appId);\n    if (!currentRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    if (currentRecord.activeVersion === version) {\n      return {\n        appId,\n        activeVersion: version,\n        previousVersion: version,\n        enabled: currentRecord.enabled,\n        rolledBack: false,\n      };\n    }\n    const targetVersion = currentRecord.installedVersions[version];\n    if (!targetVersion) {\n      throw new Error(`应用 ${appId} 未安装版本 ${version}。`);\n    }\n    if (targetVersion.dataSchemaVersion !== currentRecord.defaultInstance.dataSchemaVersion) {\n      throw new Error(\n        `应用 ${appId}@${version} 需要数据 schema ${targetVersion.dataSchemaVersion}，当前实例为 ${currentRecord.defaultInstance.dataSchemaVersion}。没有可用 checkpoint，已阻止回滚。`,\n      );\n    }\n    await this.assertVersionIntegrity(appId, version);\n    const appRecord = await this.registryService.activateVersion(appId, version);\n    return {\n      appId,\n      activeVersion: appRecord.activeVersion,\n      previousVersion: currentRecord.activeVersion,\n      enabled: appRecord.enabled,\n      rolledBack: true,\n    };\n    });\n  };\n\n  assertVersionIntegrity = async (appId: string, version?: string): Promise<void> => {\n    const appRecord = await this.registryService.getApp(appId);\n    if (!appRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    const targetVersion = version ?? appRecord.activeVersion;\n    const versionRecord = appRecord.installedVersions[targetVersion];\n    if (!versionRecord) {\n      throw new Error(`应用 ${appId} 未安装版本 ${targetVersion}。`);\n    }\n    const contentSha256 = await this.integrityService.assertVersion({\n      appId,\n      version: targetVersion,\n      versionRecord,\n    });\n    if (!versionRecord.contentSha256) {\n      await this.registryService.setVersionContentDigest(appId, targetVersion, contentSha256);\n      await this.integrityService.protectDirectory(versionRecord.installDirectory);\n    }\n  };\n\n  withAppOperation = async <T>(appId: string, operation: () => Promise<T>): Promise<T> => {\n    if (!SAFE_APP_ID_PATTERN.test(appId)) {\n      throw new Error(`appId 不是安全的 App 操作标识：${appId}`);\n    }\n    const lockPath = path.resolve(this.appHomeService.getAppOperationLockPath(appId));\n    const activeLocks = this.appOperationContext.getStore();\n    if (activeLocks?.has(lockPath)) {\n      return await operation();\n    }\n    return await this.fileLockService.withLock(lockPath, async () => {\n      const nextLocks = new Set(activeLocks ?? []);\n      nextLocks.add(lockPath);\n      return await this.appOperationContext.run(nextLocks, operation);\n    });\n  };\n\n  resolveLaunch = async (\n    appReference: string,\n    explicitDocumentGrantMap: AppDocumentGrantMap,\n  ): Promise<AppLaunchResolution> => {\n    const sourceType = await this.installSourceService.detectLocal(appReference, false);\n    if (sourceType.kind === \"directory\") {\n      return {\n        appDirectory: sourceType.appDirectory,\n        documentGrantMap: explicitDocumentGrantMap,\n      };\n    }\n    const appRecord = await this.registryService.getApp(appReference);\n    if (!appRecord) {\n      throw new Error(`未找到应用目录，也未找到已安装应用：${appReference}`);\n    }\n    const activeVersion = appRecord.installedVersions[appRecord.activeVersion];\n    if (!activeVersion) {\n      throw new Error(`已安装应用缺少激活版本：${appReference}`);\n    }\n    await this.assertVersionIntegrity(appRecord.appId, appRecord.activeVersion);\n    return {\n      appDirectory: activeVersion.installDirectory,\n      appId: appRecord.appId,\n      dataDirectory: appRecord.dataDirectory,\n      storage: appRecord.defaultInstance.storage,\n      documentGrantMap: {\n        ...appRecord.grants,\n        ...explicitDocumentGrantMap,\n      },\n    };\n  };\n\n  persistGrants = async (\n    appId: string | undefined,\n    documentGrantMap: AppDocumentGrantMap,\n  ): Promise<void> => {\n    if (!appId || Object.keys(documentGrantMap).length === 0) {\n      return;\n    }\n    await this.registryService.updateGrants(appId, documentGrantMap);\n  };\n\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAoCA,MAAM,sBAAsB;AAiB5B,IAAa,yBAAb,MAAoC;CAClC;CACA;CACA,kBAAmC,IAAI,iBAAiB;CACxD;CACA;CACA;CACA,sBAAuC,IAAI,mBAAwC;CAEnF,YACE,iBAAkD,IAAI,gBAAgB,EACtE,gBAAmD,IAAI,kBAAkB,EACzE,kBAAuD,IAAI,oBAAoB,EAC/E,eAAiD,IAAI,iBAAiB,EACtE,kBAAuD,IAAI,mBAAmB,eAAe,EAC7F,wBAAmE,IAAI,yBACrE,eACD,EACD,uBAAwE,IAAI,+BAC1E,IAAI,yBAAyB,eAAe,CAC7C,EACD,wBACA;AAZiB,OAAA,iBAAA;AACA,OAAA,gBAAA;AACA,OAAA,kBAAA;AACA,OAAA,eAAA;AACA,OAAA,kBAAA;AACA,OAAA,wBAAA;AAGA,OAAA,uBAAA;AAKjB,OAAK,uBAAuB,IAAI,wBAC9B,KAAK,iBACL,KAAK,sBACL,KAAK,cACN;AACD,OAAK,yBAAyB,0BAA0B,IAAI,0BAA0B,eAAe;AACrG,OAAK,mBAAmB,IAAI,gCAAgC,gBAAgB;AAC5E,OAAK,oBAAoB,IAAI,iCAAiC;GAC5D;GACA,kBAAkB,KAAK;GACvB;GACD,CAAC;AACF,OAAK,mBAAmB,IAAI,gCAAgC;GAC1D;GACA;GACA;GACA,wBAAwB,KAAK;GAC7B,kBAAkB,KAAK;GACvB,SAAS,KAAK;GACd,UAAU,KAAK;GAChB,CAAC;;CAGJ,UAAU,OACR,WACA,UAA6B,EAAE,KACD;EAC9B,MAAM,EAAE,YAAY,gBAAgB;AACpC,QAAM,aAAa,YAAY;EAC/B,MAAM,SAAS,MAAM,KAAK,qBAAqB,QAAQ,WAAW,YAAY;EAC9E,MAAM,gBAAgB,MAAM,KAAK,eAAe,yBAAyB,gBAAgB;AACzF,MAAI;GACF,MAAM,aAAa,MAAM,KAAK,qBAAqB,kBACjD,QACA,eACA,WACD;AACD,SAAM,aAAa,YAAY;GAC/B,MAAM,qBAAqB,KAAK,KAAK,eAAe,SAAS;GAC7D,MAAM,oBAAoB,MAAM,KAAK,cAAc,cAAc;IAC/D;IACA,iBAAiB;IAClB,CAAC;AACF,SAAM,KAAK,kBAAkB,wBAAwB;IACnD,cAAc;IACd,kBAAkB,kBAAkB,SAAS;IAC9C,CAAC;GACF,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,KAAK,mBAAmB;AAC1E,UAAO,MAAM,KAAK,sBAAsB;IACtC;IACA;IACA;IACA;IACA;IACD,CAAC;YACM;AACR,SAAM,GAAG,eAAe;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;;;CAI7D,wBAAgC,OAC9B,aAC8B;EAC9B,MAAM,QAAQ,SAAS,eAAe,SAAS;AAC/C,SAAO,MAAM,KAAK,iBAChB,OACA,YAAY,MAAM,KAAK,sBAAsB,SAAS,CACvD;;CAGH,wBAAgC,OAC9B,aAC8B;EAC9B,MAAM,EAAE,oBAAoB,mBAAmB,gBAAgB,SAAS,WAAW;EACnF,MAAM,EAAE,eAAe;EACvB,MAAM,EAAE,IAAI,OAAO,YAAY,eAAe;EAC9C,MAAM,mBAAmB,KAAK,eAAe,oBAAoB,OAAO,QAAQ;AAChF,MAAI,OAAO,SAAS,cAAc,UAAU,OAAO,mBAAmB,MACpE,OAAM,IAAI,MACR,6CAA6C,OAAO,mBAAmB,MAAM,MAAM,QACpF;AAEH,QAAM,aAAa,aAAa;EAChC,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,OAAO,MAAM;EAC/D,MAAM,YAAY,OAAO,SAAS,aAC9B,OAAO,mBAAmB,YAC1B,QAAQ;EACZ,MAAM,mBAAmB,gBAAgB,aACvC,gBAAgB,kBAAkB,eAAe,gBAAgB;AACnE,MAAI,oBAAoB,iBAAiB,OAAO,WAAW,GACzD,OAAM,IAAI,MACR,MAAM,MAAM,UAAU,iBAAiB,GAAG,OAAO,WAAW,MAAM,UAAU,MAC7E;EAEH,MAAM,oBAAoB,eAAe,SAAS,kBAAkB,IAChE,eAAe,SAAS,SAAS,iBAAiB,IAClD;AACJ,MAAI,gBAAgB,gBAAgB,sBAAsB,KAAA,KACxD,eAAe,gBAAgB,sBAAsB,kBACrD,OAAM,IAAI,MACR,MAAM,MAAM,eAAe,eAAe,gBAAgB,kBAAkB,OAAO,kBAAkB,mCACtG;EAEH,MAAM,oBAAoB,KAAK,eAAe,wBAAwB,OAAO,UAAU;EACvF,MAAM,kBAAkB,MAAM,KAAK,iBAAiB,WAAW,kBAAkB;EACjF,MAAM,gBAAgB,MAAM,KAAK,kBAAkB,gCAAgC;GACjF;GACA,YAAY;GACZ;GACA;GACD,CAAC;EACF,MAAM,kBAAkB,MAAM,KAAK,uBAAuB,2BAA2B;GACnF;GACA,cAAc,oBAAoB,YAAY;GAC9C,qBAAqB,gBAAgB,gBAAgB,QAAQ,WAAW,WACpE,eAAe,gBACf,KAAA;GACJ;GACD,CAAC;AACF,QAAM,aAAa,aAAa;EAChC,IAAI;AACJ,MAAI;AACF,oBAAiB,MAAM,KAAK,gBAAgB,mBAAmB;IAC7D;IACA,MAAM,eAAe,SAAS;IAC9B,aAAa,eAAe,SAAS;IACrC;IACA;IACA;IACA,YAAY,OAAO;IACnB,kBAAkB,OAAO,SAAS,aAC9B,OAAO,mBAAmB,mBAC1B,kBAAkB,SAAS;IAC/B,WAAW,OAAO;IAClB,8BAAa,IAAI,MAAM,EAAC,aAAa;IACrC,aAAa,eAAe,SAAS,kBAAkB,IACnD,eAAe,SAAS,eAAe,EAAE,GACzC,KAAK,gBAAgB,wBAAwB,eAAe,SAAS,CAAC;IAC1E,aAAa,OAAO,SAAS,aACzB,OAAO,mBAAmB,cAC1B,KAAA;IACJ,WAAW,OAAO,SAAS,aAAa,OAAO,mBAAmB,YAAY,KAAA;IAC9E,QAAQ,OAAO,SAAS,aAAa,OAAO,mBAAmB,SAAS,KAAA;IACxE;IACA,uBAAuB,eAAe,SAAS;IAC/C,YAAY,6BAA6B,eAAe,GACpD,eAAe,WAAW,KAAK,eAAe;KAC5C,GAAG;KACH,oBAAoB,KAAK,KAAK,kBAAkB,UAAU,KAAK;KAC/D,cAAc,KAAK,KACjB,kBACA,UAAU,MACV,UAAU,SAAS,UAAU,mBAAmB,mBACjD;KACF,EAAE,GACH,KAAA;IACJ,gBAAgB,6BAA6B,eAAe,GACxD,eAAe,iBACf,KAAA;IACJ,UAAU,6BAA6B,eAAe,GAClD,KAAK,gBAAgB,wBAAwB,eAAe,SAAS,GACrE,KAAA;IACJ;IACA;IACA,UAAU,QAAQ;IACnB,CAAC;WACK,OAAO;AACd,SAAM,KAAK,iBAAiB,gBAAgB,iBAAiB;AAC7D,OAAI,CAAC,gBACH,OAAM,KAAK,uBAAuB,oBAAoB;IACpD,UAAU;IACV,qBAAqB,gBAAgB,gBAAgB,QAAQ,WAAW,WACpE,eAAe,gBACf,KAAA;IACL,CAAC;AAEJ,SAAM;;EAER,MAAM,mBAAmB,eAAe,kBAAkB;AAC1D,SAAO;GACL,OAAO,eAAe;GACtB,MAAM,eAAe;GACrB;GACA;GACA,eAAe,gBAAgB,QAAQ;GACvC,UAAU,eAAe;GACzB,YAAY,OAAO;GACnB,WAAW,OAAO;GAClB,kBAAkB,kBAAkB;GACpC,aAAa,kBAAkB,eAAe,EAAE;GAChD,aAAa,kBAAkB;GAC/B,WAAW,kBAAkB;GAC7B,QAAQ,kBAAkB;GAC1B,WAAW,kBAAkB;GAC7B,SAAS,eAAe;GACxB,uBAAuB,kBAAkB,yBAAyB;GAClE,YAAY,kBAAkB;GAC9B,gBAAgB,kBAAkB;GACnC;;CAGH,SAAS,OACP,OACA,YAM6B;AAC7B,SAAO,MAAM,KAAK,iBAChB,OACA,YAAY,MAAM,KAAK,iBAAiB,OAAO,OAAO,QAAQ,CAC/D;;CAGH,YAAY,OACV,OACA,cACgC;AAChC,SAAO,MAAM,KAAK,iBAChB,OACA,YAAY,MAAM,KAAK,iBAAiB,UAAU,OAAO,UAAU,CACpE;;CAGH,OAAO,YAA6C;AAElD,UADmB,MAAM,KAAK,gBAAgB,UAAU,EACtC,KAAK,eAAe;GACpC,OAAO,UAAU;GACjB,MAAM,UAAU;GAChB,eAAe,UAAU;GACzB,YACE,UAAU,kBAAkB,UAAU,gBAAgB,cAAc;GACtE,kBACE,UAAU,kBAAkB,UAAU,gBAAgB;GACxD,SAAS,UAAU;GACnB,uBACE,UAAU,kBAAkB,UAAU,gBAAgB,yBAAyB;GACjF,gBACE,UAAU,kBAAkB,UAAU,gBAAgB;GACzD,EAAE;;CAGL,sBAAsB,YAA2B;AAC/C,QAAM,KAAK,eAAe,uBAAuB;EACjD,IAAI,aAAa,MAAM,KAAK,gBAAgB,UAAU;AACtD,OAAK,MAAM,aAAa,WACtB,OAAM,KAAK,iBAAiB,UAAU,OAAO,YAAY;AACvD,QAAK,MAAM,iBAAiB,OAAO,OAAO,UAAU,kBAAkB,EAAE;AACtE,QAAI,CAAC,MAAM,KAAK,iBAAiB,WAAW,cAAc,iBAAiB,CACzE;AAEF,QAAI,CAAC,cAAc,eAAe;KAChC,MAAM,gBAAgB,MAAM,KAAK,iBAAiB,gBAChD,cAAc,iBACf;AACD,WAAM,KAAK,gBAAgB,wBACzB,UAAU,OACV,cAAc,SACd,cACD;;AAEH,UAAM,KAAK,iBAAiB,iBAAiB,cAAc,iBAAiB;;IAE9E;AAEJ,eAAa,MAAM,KAAK,gBAAgB,UAAU;EAClD,MAAM,yBAAyB,IAAI,IAAI,WAAW,SAAS,WACzD,OAAO,OAAO,OAAO,kBAAkB,CAAC,KAAK,YAAY,KAAK,QAAQ,QAAQ,iBAAiB,CAAC,CAAC,CAAC;EACpG,MAAM,sBAAsB,IAAI,IAAI,WAAW,KAAK,WAAW,KAAK,QAClE,OAAO,gBAAgB,QAAQ,WAAW,gBACtC,OAAO,gBAAgB,QAAQ,oBAC/B,OAAO,cACZ,CAAC,CAAC;EAEH,MAAM,qBAAqB,MAAM,KAAK,kBAAkB,gBACtD,KAAK,eAAe,sBAAsB,CAC3C;AACD,OAAK,MAAM,gBAAgB,mBACzB,OAAM,KAAK,kBAAkB,2BAA2B,cAAc,uBAAuB;AAE/F,QAAM,KAAK,kBAAkB,2BAC3B,KAAK,eAAe,kBAAkB,EACtC,oBACD;AACD,OAAK,MAAM,aAAa,YAAY;AAClC,OAAI,UAAU,gBAAgB,QAAQ,WAAW,cAC/C;AAEF,SAAM,KAAK,kBAAkB,2BAC3B,UAAU,gBAAgB,QAAQ,mBAClC,IAAI,IAAI,CAAC,KAAK,QAAQ,UAAU,gBAAgB,QAAQ,cAAc,CAAC,CAAC,CACzE;;AAEH,OAAK,MAAM,aAAa,YAAY;AAClC,OAAI,UAAU,gBAAgB,QAAQ,WAAW,SAC/C;AAEF,SAAM,KAAK,iBAAiB,UAAU,OAAO,YAAY;IACvD,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,OAAO,UAAU,MAAM;AACxE,QAAI,CAAC,iBAAiB,cAAc,gBAAgB,QAAQ,WAAW,SACrE;IAEF,MAAM,gBAAgB,cAAc,kBAAkB,cAAc;AACpE,QAAI,CAAC,cACH,OAAM,IAAI,MAAM,eAAe,cAAc,QAAQ;IAEvD,MAAM,WAAW,MAAM,KAAK,uBAAuB,2BAA2B;KAC5E,OAAO,cAAc;KACrB,aAAa,cAAc,WAAW;KACtC,qBAAqB,cAAc;KACnC,mBAAmB,cAAc,gBAAgB;KAClD,CAAC;AACF,QAAI;AACF,WAAM,KAAK,gBAAgB,mBAAmB;MAC5C,OAAO,cAAc;MACrB,MAAM,cAAc;MACpB,aAAa,cAAc;MAC3B,SAAS,cAAc;MACvB,kBAAkB,cAAc;MAChC,iBAAiB;MACjB,YAAY,cAAc;MAC1B,WAAW,cAAc;MACzB,aAAa,cAAc;MAC3B,kBAAkB,cAAc;MAChC,aAAa,cAAc;MAC3B,aAAa,cAAc;MAC3B,WAAW,cAAc;MACzB,QAAQ,cAAc;MACtB,WAAW,cAAc,aAAa,cAAc;MACpD,uBAAuB,cAAc;MACrC,YAAY,cAAc;MAC1B,gBAAgB,cAAc;MAC9B,UAAU,cAAc;MACxB,mBAAmB,cAAc;MACjC,eAAe,cAAc;MAC7B,SAAS,cAAc;MACxB,CAAC;aACK,OAAO;AACd,WAAM,KAAK,uBAAuB,oBAAoB;MACpD;MACA,qBAAqB,cAAc;MACpC,CAAC;AACF,WAAM;;KAER;;;CAIN,OAAO,OACL,OACA,UAA6C,EAAE,KACpB;EAC3B,MAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO,MAAM;AAC1D,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;EAEtC,MAAM,oBAAoB,OAAO,OAAO,UAAU,kBAAkB,CAAC,MAAM,MAAM,UAC/E,KAAK,QAAQ,cAAc,MAAM,QAAQ,CAC1C;EACD,MAAM,eAAe,QAAQ,wBAAwB,QACjD,KAAA,IACA,MAAM,KAAK,uBAAuB,aAAa,UAAU,gBAAgB,QAAQ;AACrF,SAAO;GACL,OAAO,UAAU;GACjB,MAAM,UAAU;GAChB,aAAa,UAAU;GACvB,eAAe,UAAU;GACzB,SAAS,UAAU;GACnB,eAAe,UAAU;GACzB,UAAU,UAAU;GACpB,SAAS,UAAU,gBAAgB;GACnC;GACA,mBAAmB,kBAAkB,KAAK,mBAAmB;IAC3D,SAAS,cAAc;IACvB,kBAAkB,cAAc;IAChC,YAAY,cAAc;IAC1B,kBAAkB,cAAc;IAChC,WAAW,cAAc;IACzB,aAAa,cAAc;IAC3B,aAAa,cAAc;IAC3B,aAAa,cAAc;IAC3B,WAAW,cAAc;IACzB,QAAQ,cAAc;IACtB,WAAW,cAAc;IACzB,uBAAuB,cAAc;IACrC,YAAY,cAAc;IAC1B,gBAAgB,cAAc;IAC9B,eAAe,cAAc;IAC9B,EAAE;GACH,QAAQ,UAAU;GACnB;;CAGH,aAAa,OAAO,OAAe,YAAmD;AACpF,SAAO,MAAM,KAAK,iBAAiB,OAAO,YAAY;GACpD,MAAM,YAAY,MAAM,KAAK,gBAAgB,WAAW,OAAO,QAAQ;AACvE,UAAO;IACL,OAAO,UAAU;IACjB,eAAe,UAAU;IACzB,SAAS,UAAU;IACpB;IACD;;CAGJ,WAAW,OAAO,OAAe,YAAgD;AAC/E,SAAO,MAAM,KAAK,iBAAiB,OAAO,YAAY;GACtD,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,OAAO,MAAM;AAC9D,OAAI,CAAC,cACH,OAAM,IAAI,MAAM,YAAY,QAAQ;AAEtC,OAAI,cAAc,kBAAkB,QAClC,QAAO;IACL;IACA,eAAe;IACf,iBAAiB;IACjB,SAAS,cAAc;IACvB,YAAY;IACb;GAEH,MAAM,gBAAgB,cAAc,kBAAkB;AACtD,OAAI,CAAC,cACH,OAAM,IAAI,MAAM,MAAM,MAAM,SAAS,QAAQ,GAAG;AAElD,OAAI,cAAc,sBAAsB,cAAc,gBAAgB,kBACpE,OAAM,IAAI,MACR,MAAM,MAAM,GAAG,QAAQ,eAAe,cAAc,kBAAkB,SAAS,cAAc,gBAAgB,kBAAkB,yBAChI;AAEH,SAAM,KAAK,uBAAuB,OAAO,QAAQ;GACjD,MAAM,YAAY,MAAM,KAAK,gBAAgB,gBAAgB,OAAO,QAAQ;AAC5E,UAAO;IACL;IACA,eAAe,UAAU;IACzB,iBAAiB,cAAc;IAC/B,SAAS,UAAU;IACnB,YAAY;IACb;IACC;;CAGJ,yBAAyB,OAAO,OAAe,YAAoC;EACjF,MAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO,MAAM;AAC1D,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;EAEtC,MAAM,gBAAgB,WAAW,UAAU;EAC3C,MAAM,gBAAgB,UAAU,kBAAkB;AAClD,MAAI,CAAC,cACH,OAAM,IAAI,MAAM,MAAM,MAAM,SAAS,cAAc,GAAG;EAExD,MAAM,gBAAgB,MAAM,KAAK,iBAAiB,cAAc;GAC9D;GACA,SAAS;GACT;GACD,CAAC;AACF,MAAI,CAAC,cAAc,eAAe;AAChC,SAAM,KAAK,gBAAgB,wBAAwB,OAAO,eAAe,cAAc;AACvF,SAAM,KAAK,iBAAiB,iBAAiB,cAAc,iBAAiB;;;CAIhF,mBAAmB,OAAU,OAAe,cAA4C;AACtF,MAAI,CAAC,oBAAoB,KAAK,MAAM,CAClC,OAAM,IAAI,MAAM,wBAAwB,QAAQ;EAElD,MAAM,WAAW,KAAK,QAAQ,KAAK,eAAe,wBAAwB,MAAM,CAAC;EACjF,MAAM,cAAc,KAAK,oBAAoB,UAAU;AACvD,MAAI,aAAa,IAAI,SAAS,CAC5B,QAAO,MAAM,WAAW;AAE1B,SAAO,MAAM,KAAK,gBAAgB,SAAS,UAAU,YAAY;GAC/D,MAAM,YAAY,IAAI,IAAI,eAAe,EAAE,CAAC;AAC5C,aAAU,IAAI,SAAS;AACvB,UAAO,MAAM,KAAK,oBAAoB,IAAI,WAAW,UAAU;IAC/D;;CAGJ,gBAAgB,OACd,cACA,6BACiC;EACjC,MAAM,aAAa,MAAM,KAAK,qBAAqB,YAAY,cAAc,MAAM;AACnF,MAAI,WAAW,SAAS,YACtB,QAAO;GACL,cAAc,WAAW;GACzB,kBAAkB;GACnB;EAEH,MAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO,aAAa;AACjE,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,qBAAqB,eAAe;EAEtD,MAAM,gBAAgB,UAAU,kBAAkB,UAAU;AAC5D,MAAI,CAAC,cACH,OAAM,IAAI,MAAM,eAAe,eAAe;AAEhD,QAAM,KAAK,uBAAuB,UAAU,OAAO,UAAU,cAAc;AAC3E,SAAO;GACL,cAAc,cAAc;GAC5B,OAAO,UAAU;GACjB,eAAe,UAAU;GACzB,SAAS,UAAU,gBAAgB;GACnC,kBAAkB;IAChB,GAAG,UAAU;IACb,GAAG;IACJ;GACF;;CAGH,gBAAgB,OACd,OACA,qBACkB;AAClB,MAAI,CAAC,SAAS,OAAO,KAAK,iBAAiB,CAAC,WAAW,EACrD;AAEF,QAAM,KAAK,gBAAgB,aAAa,OAAO,iBAAiB"}
+{"version":3,"file":"app-installation.service.js","names":[],"sources":["../../src/services/app-installation.service.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"node:async_hooks\";\nimport { rm } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { AppBundleService } from \"#app-runtime/services/app-bundle.service.js\";\nimport { AppManifestService } from \"#app-runtime/services/app-manifest.service.js\";\nimport { isAppComponentManifestBundle } from \"#app-runtime/types/app-manifest.types.js\";\nimport type { AppManifestBundle } from \"#app-runtime/types/app-manifest.types.js\";\nimport { AppHomeService } from \"#app-runtime/services/app-home.service.js\";\nimport { AppInstanceStorageService } from \"#app-runtime/services/app-instance-storage.service.js\";\nimport { AppInstallationIntegrityService } from \"#app-runtime/services/app-installation-integrity.service.js\";\nimport { AppInstallationFilesystemService } from \"#app-runtime/services/app-installation-filesystem.service.js\";\nimport { AppInstallationLifecycleService } from \"#app-runtime/services/app-installation-lifecycle.service.js\";\nimport { FileLockService } from \"#app-runtime/services/file-lock.service.js\";\nimport { AppBuildService } from \"#app-runtime/services/app-build.service.js\";\nimport type { AppBundleExtractResult } from \"#app-runtime/types/app-bundle.types.js\";\nimport type { AppDocumentGrantMap } from \"#app-runtime/types/app-permissions.types.js\";\nimport type { AppPublisher } from \"#app-runtime/types/app-remote-registry.types.js\";\nimport type { AppRegistryInstalledVersion } from \"#app-runtime/types/app-registry.types.js\";\nimport { AppRegistryConfigService } from \"#app-runtime/services/app-registry-config.service.js\";\nimport { AppRemoteRegistryClientService } from \"#app-runtime/services/app-remote-registry-client.service.js\";\nimport { AppRegistryService } from \"#app-runtime/services/app-registry.service.js\";\nimport {\n  AppInstallSourceService,\n  type ResolvedAppInstallSource,\n} from \"#app-runtime/services/app-install-source.service.js\";\nimport type {\n  AppInfoResult,\n  AppInstallProgressHandler,\n  AppActivationResult,\n  AppInstallResult,\n  AppLaunchResolution,\n  AppUpdateResult,\n  AppRollbackResult,\n  AppUninstallResult,\n  InstalledAppListItem,\n} from \"#app-runtime/types/app-installation.types.js\";\n\nconst SAFE_APP_ID_PATTERN = /^[a-z0-9]+(?:[.-][a-z0-9]+)*$/;\n\ntype AppInstallOptions = {\n  registryUrl?: string;\n  onProgress?: AppInstallProgressHandler;\n  activate?: boolean;\n  trustedPublisher?: AppPublisher;\n};\n\ntype PreparedAppInstall = {\n  source: ResolvedAppInstallSource;\n  extractedDirectory: string;\n  extractedMetadata: AppBundleExtractResult;\n  manifestBundle: AppManifestBundle;\n  options: AppInstallOptions;\n};\n\ntype RemoteSourceFields = Pick<AppRegistryInstalledVersion, \"registryUrl\" | \"bundleUrl\" | \"sha256\" | \"target\">;\n\nexport class AppInstallationService {\n  private readonly installSourceService: AppInstallSourceService;\n  private readonly instanceStorageService: AppInstanceStorageService;\n  private readonly fileLockService = new FileLockService();\n  private readonly integrityService: AppInstallationIntegrityService;\n  private readonly filesystemService: AppInstallationFilesystemService;\n  private readonly lifecycleService: AppInstallationLifecycleService;\n  private readonly appOperationContext = new AsyncLocalStorage<ReadonlySet<string>>();\n\n  constructor(\n    private readonly appHomeService: AppHomeService = new AppHomeService(),\n    private readonly bundleService: AppBundleService = new AppBundleService(),\n    private readonly manifestService: AppManifestService = new AppManifestService(),\n    private readonly buildService: AppBuildService = new AppBuildService(),\n    private readonly registryService: AppRegistryService = new AppRegistryService(appHomeService),\n    private readonly registryConfigService: AppRegistryConfigService = new AppRegistryConfigService(\n      appHomeService,\n    ),\n    private readonly remoteRegistryClient: AppRemoteRegistryClientService = new AppRemoteRegistryClientService(\n      new AppRegistryConfigService(appHomeService),\n    ),\n    instanceStorageService?: AppInstanceStorageService,\n  ) {\n    this.installSourceService = new AppInstallSourceService(\n      this.manifestService,\n      this.remoteRegistryClient,\n      this.bundleService,\n    );\n    this.instanceStorageService = instanceStorageService ?? new AppInstanceStorageService(appHomeService);\n    this.integrityService = new AppInstallationIntegrityService(manifestService);\n    this.filesystemService = new AppInstallationFilesystemService({\n      buildService,\n      integrityService: this.integrityService,\n      manifestService,\n    });\n    this.lifecycleService = new AppInstallationLifecycleService({\n      registryService,\n      registryConfigService,\n      remoteRegistryClient,\n      instanceStorageService: this.instanceStorageService,\n      integrityService: this.integrityService,\n      install: this.install,\n      rollback: this.rollback,\n    });\n  }\n\n  install = async (\n    appSource: string,\n    options: AppInstallOptions = {},\n  ): Promise<AppInstallResult> => {\n    const { onProgress, registryUrl } = options;\n    await onProgress?.(\"resolving\");\n    const source = await this.installSourceService.resolve(appSource, registryUrl);\n    const tempDirectory = await this.appHomeService.createTemporaryDirectory(\"napp-install-\");\n    try {\n      const bundlePath = await this.installSourceService.materializeBundle(\n        source,\n        tempDirectory,\n        onProgress,\n      );\n      await onProgress?.(\"verifying\");\n      const extractedDirectory = path.join(tempDirectory, \"bundle\");\n      const extractedMetadata = await this.bundleService.extractBundle({\n        bundlePath,\n        targetDirectory: extractedDirectory,\n      });\n      await this.filesystemService.materializeDistribution({\n        appDirectory: extractedDirectory,\n        distributionMode: extractedMetadata.metadata.distributionMode,\n      });\n      const manifestBundle = await this.manifestService.load(extractedDirectory);\n      return await this.installPreparedBundle({\n        source,\n        extractedDirectory,\n        extractedMetadata,\n        manifestBundle,\n        options,\n      });\n    } finally {\n      await rm(tempDirectory, { recursive: true, force: true });\n    }\n  };\n\n  private installPreparedBundle = async (\n    prepared: PreparedAppInstall,\n  ): Promise<AppInstallResult> => {\n    const appId = prepared.manifestBundle.manifest.id;\n    return await this.withAppOperation(\n      appId,\n      async () => await this.commitPreparedInstall(prepared),\n    );\n  };\n\n  private commitPreparedInstall = async (\n    prepared: PreparedAppInstall,\n  ): Promise<AppInstallResult> => {\n    const { extractedDirectory, extractedMetadata, manifestBundle, options, source } = prepared;\n    const { onProgress } = options;\n    const { id: appId, version } = manifestBundle.manifest;\n    const installDirectory = this.appHomeService.getInstallDirectory(appId, version);\n    if (source.kind === \"registry\" && appId !== source.registryResolution.appId) {\n      throw new Error(\n        `bundle manifest.appId 与 registry 请求不一致：期望 ${source.registryResolution.appId}，实际 ${appId}`,\n      );\n    }\n    await onProgress?.(\"installing\");\n    const existingRecord = await this.registryService.getApp(appId);\n    const publisher = source.kind === \"registry\"\n      ? source.registryResolution.publisher\n      : options.trustedPublisher;\n    const currentPublisher = existingRecord?.publisher ??\n      existingRecord?.installedVersions[existingRecord.activeVersion]?.publisher;\n    if (currentPublisher && currentPublisher.id !== publisher?.id) {\n      throw new Error(\n        `应用 ${appId} 已绑定发布者 ${currentPublisher.id}，拒绝由 ${publisher?.id ?? \"未验证本地来源\"} 覆盖。`,\n      );\n    }\n    const dataSchemaVersion = manifestBundle.manifest.schemaVersion === 2\n      ? manifestBundle.manifest.storage?.schemaVersion ?? 1\n      : 1;\n    if (existingRecord?.defaultInstance.dataSchemaVersion !== undefined &&\n      existingRecord.defaultInstance.dataSchemaVersion !== dataSchemaVersion) {\n      throw new Error(\n        `应用 ${appId} 数据 schema 从 ${existingRecord.defaultInstance.dataSchemaVersion} 升级到 ${dataSchemaVersion}，但包内没有受支持的迁移合同。更新已停止，现有数据和版本保持不变。`,\n      );\n    }\n    const instanceDirectory = this.appHomeService.getAppInstanceDirectory(appId, \"default\");\n    const instanceExisted = await this.integrityService.pathExists(instanceDirectory);\n    const contentSha256 = await this.filesystemService.copyToImmutableInstallDirectory({\n      appId,\n      appVersion: version,\n      extractedDirectory,\n      installDirectory,\n      target: extractedMetadata.metadata.target?.kind === \"native\" ? extractedMetadata.metadata.target : undefined,\n    });\n    const defaultInstance = await this.instanceStorageService.materializeDefaultInstance({\n      appId,\n      publisherId: (currentPublisher ?? publisher)?.id,\n      legacyDataDirectory: existingRecord?.defaultInstance.storage.layout === \"legacy\"\n        ? existingRecord.dataDirectory\n        : undefined,\n      dataSchemaVersion,\n    });\n    await onProgress?.(\"finalizing\");\n    let registryRecord;\n    try {\n      registryRecord = await this.registryService.upsertInstallation({\n        appId,\n        name: manifestBundle.manifest.name,\n        description: manifestBundle.manifest.description,\n        version,\n        installDirectory,\n        defaultInstance,\n        sourceKind: source.kind,\n        distributionMode: source.kind === \"registry\"\n          ? source.registryResolution.distributionMode\n          : extractedMetadata.metadata.distributionMode,\n        sourceRef: source.sourceRef,\n        installedAt: new Date().toISOString(),\n        permissions: manifestBundle.manifest.schemaVersion === 1\n          ? manifestBundle.manifest.permissions ?? {}\n          : this.manifestService.resolvePlatformSecurity(manifestBundle.manifest).permissions,\n        ...this.readRemoteSourceFields(source.kind === \"registry\" ? source.registryResolution : undefined),\n        publisher,\n        manifestSchemaVersion: manifestBundle.manifest.schemaVersion,\n        components: isAppComponentManifestBundle(manifestBundle)\n          ? manifestBundle.components.map((component) => ({\n              ...component,\n              componentDirectory: path.join(installDirectory, component.path),\n              manifestPath: path.join(\n                installDirectory,\n                component.path,\n                component.kind === \"panel\" ? \"panel-app.json\" : \"service-app.json\",\n              ),\n            }))\n          : undefined,\n        primaryPanelId: isAppComponentManifestBundle(manifestBundle)\n          ? manifestBundle.primaryPanelId\n          : undefined,\n        security: isAppComponentManifestBundle(manifestBundle)\n          ? this.manifestService.resolvePlatformSecurity(manifestBundle.manifest)\n          : undefined,\n        dataSchemaVersion,\n        contentSha256,\n        activate: options.activate,\n      });\n    } catch (error) {\n      await this.integrityService.removeDirectory(installDirectory);\n      if (!instanceExisted) {\n        await this.instanceStorageService.rollbackNewInstance({\n          instance: defaultInstance,\n          legacyDataDirectory: existingRecord?.defaultInstance.storage.layout === \"legacy\"\n            ? existingRecord.dataDirectory\n            : undefined,\n        });\n      }\n      throw error;\n    }\n    const installedVersion = registryRecord.installedVersions[version];\n    return {\n      appId: registryRecord.appId,\n      name: registryRecord.name,\n      version,\n      installDirectory,\n      dataDirectory: defaultInstance.storage.dataDirectory,\n      instance: registryRecord.defaultInstance,\n      sourceKind: source.kind,\n      sourceRef: source.sourceRef,\n      distributionMode: installedVersion?.distributionMode,\n      permissions: installedVersion?.permissions ?? {},\n      ...this.readRemoteSourceFields(installedVersion),\n      publisher: installedVersion?.publisher,\n      enabled: registryRecord.enabled,\n      manifestSchemaVersion: installedVersion?.manifestSchemaVersion ?? 1,\n      components: installedVersion?.components,\n      primaryPanelId: installedVersion?.primaryPanelId,\n    };\n  };\n\n  update = async (\n    appId: string,\n    options?: {\n      version?: string;\n      registryUrl?: string;\n      onProgress?: AppInstallProgressHandler;\n      activate?: boolean;\n    },\n  ): Promise<AppUpdateResult> => {\n    return await this.withAppOperation(\n      appId,\n      async () => await this.lifecycleService.update(appId, options),\n    );\n  };\n\n  uninstall = async (\n    appId: string,\n    purgeData: boolean,\n  ): Promise<AppUninstallResult> => {\n    return await this.withAppOperation(\n      appId,\n      async () => await this.lifecycleService.uninstall(appId, purgeData),\n    );\n  };\n\n  list = async (): Promise<InstalledAppListItem[]> => {\n    const appRecords = await this.registryService.listApps();\n    return appRecords.map((appRecord) => ({\n      appId: appRecord.appId,\n      name: appRecord.name,\n      activeVersion: appRecord.activeVersion,\n      sourceKind:\n        appRecord.installedVersions[appRecord.activeVersion]?.sourceKind ?? \"directory\",\n      distributionMode:\n        appRecord.installedVersions[appRecord.activeVersion]?.distributionMode,\n      enabled: appRecord.enabled,\n      manifestSchemaVersion:\n        appRecord.installedVersions[appRecord.activeVersion]?.manifestSchemaVersion ?? 1,\n      primaryPanelId:\n        appRecord.installedVersions[appRecord.activeVersion]?.primaryPanelId,\n    }));\n  };\n\n  reconcileFilesystem = async (): Promise<void> => {\n    await this.appHomeService.ensureBaseDirectories();\n    let appRecords = await this.registryService.listApps();\n    for (const appRecord of appRecords) {\n      await this.withAppOperation(appRecord.appId, async () => {\n        for (const versionRecord of Object.values(appRecord.installedVersions)) {\n          if (!await this.integrityService.pathExists(versionRecord.installDirectory)) {\n            continue;\n          }\n          if (!versionRecord.contentSha256) {\n            const contentSha256 = await this.integrityService.calculateDigest(\n              versionRecord.installDirectory,\n            );\n            await this.registryService.setVersionContentDigest(\n              appRecord.appId,\n              versionRecord.version,\n              contentSha256,\n            );\n          }\n          await this.integrityService.protectDirectory(versionRecord.installDirectory);\n        }\n      });\n    }\n    appRecords = await this.registryService.listApps();\n    const referencedInstallPaths = new Set(appRecords.flatMap((record) =>\n      Object.values(record.installedVersions).map((version) => path.resolve(version.installDirectory))));\n    const referencedDataPaths = new Set(appRecords.map((record) => path.resolve(\n      record.defaultInstance.storage.layout === \"instance-v1\"\n        ? record.defaultInstance.storage.instanceDirectory\n        : record.dataDirectory,\n    )));\n\n    const packageDirectories = await this.filesystemService.readDirectories(\n      this.appHomeService.getPackagesDirectory(),\n    );\n    for (const appDirectory of packageDirectories) {\n      await this.filesystemService.reconcileGeneratedSiblings(appDirectory, referencedInstallPaths);\n    }\n    await this.filesystemService.reconcileGeneratedSiblings(\n      this.appHomeService.getDataDirectory(),\n      referencedDataPaths,\n    );\n    for (const appRecord of appRecords) {\n      if (appRecord.defaultInstance.storage.layout !== \"instance-v1\") {\n        continue;\n      }\n      await this.filesystemService.reconcileGeneratedSiblings(\n        appRecord.defaultInstance.storage.instanceDirectory,\n        new Set([path.resolve(appRecord.defaultInstance.storage.dataDirectory)]),\n      );\n    }\n    for (const appRecord of appRecords) {\n      if (appRecord.defaultInstance.storage.layout !== \"legacy\") {\n        continue;\n      }\n      await this.withAppOperation(appRecord.appId, async () => {\n        const currentRecord = await this.registryService.getApp(appRecord.appId);\n        if (!currentRecord || currentRecord.defaultInstance.storage.layout !== \"legacy\") {\n          return;\n        }\n        const activeVersion = currentRecord.installedVersions[currentRecord.activeVersion];\n        if (!activeVersion) {\n          throw new Error(`已安装应用缺少激活版本：${currentRecord.appId}`);\n        }\n        const instance = await this.instanceStorageService.materializeDefaultInstance({\n          appId: currentRecord.appId,\n          publisherId: currentRecord.publisher?.id,\n          legacyDataDirectory: currentRecord.dataDirectory,\n          dataSchemaVersion: currentRecord.defaultInstance.dataSchemaVersion,\n        });\n        try {\n          await this.registryService.upsertInstallation({\n            appId: currentRecord.appId,\n            name: currentRecord.name,\n            description: currentRecord.description,\n            version: currentRecord.activeVersion,\n            installDirectory: activeVersion.installDirectory,\n            defaultInstance: instance,\n            sourceKind: activeVersion.sourceKind,\n            sourceRef: activeVersion.sourceRef,\n            installedAt: activeVersion.installedAt,\n            distributionMode: activeVersion.distributionMode,\n            permissions: activeVersion.permissions,\n            ...this.readRemoteSourceFields(activeVersion),\n            publisher: currentRecord.publisher ?? activeVersion.publisher,\n            manifestSchemaVersion: activeVersion.manifestSchemaVersion,\n            components: activeVersion.components,\n            primaryPanelId: activeVersion.primaryPanelId,\n            security: activeVersion.security,\n            dataSchemaVersion: activeVersion.dataSchemaVersion,\n            contentSha256: activeVersion.contentSha256,\n            enabled: currentRecord.enabled,\n          });\n        } catch (error) {\n          await this.instanceStorageService.rollbackNewInstance({\n            instance,\n            legacyDataDirectory: currentRecord.dataDirectory,\n          });\n          throw error;\n        }\n      });\n    }\n  };\n\n  info = async (\n    appId: string,\n    options: { measureStorageUsage?: boolean } = {},\n  ): Promise<AppInfoResult> => {\n    const appRecord = await this.registryService.getApp(appId);\n    if (!appRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    const installedVersions = Object.values(appRecord.installedVersions).sort((left, right) =>\n      left.version.localeCompare(right.version),\n    );\n    const storageUsage = options.measureStorageUsage === false\n      ? undefined\n      : await this.instanceStorageService.measureUsage(appRecord.defaultInstance.storage);\n    return {\n      appId: appRecord.appId,\n      name: appRecord.name,\n      description: appRecord.description,\n      activeVersion: appRecord.activeVersion,\n      enabled: appRecord.enabled,\n      dataDirectory: appRecord.dataDirectory,\n      instance: appRecord.defaultInstance,\n      storage: appRecord.defaultInstance.storage,\n      storageUsage,\n      installedVersions: installedVersions.map((versionRecord) => ({\n        version: versionRecord.version,\n        installDirectory: versionRecord.installDirectory,\n        sourceKind: versionRecord.sourceKind,\n        distributionMode: versionRecord.distributionMode,\n        sourceRef: versionRecord.sourceRef,\n        installedAt: versionRecord.installedAt,\n        permissions: versionRecord.permissions,\n        ...this.readRemoteSourceFields(versionRecord),\n        publisher: versionRecord.publisher,\n        manifestSchemaVersion: versionRecord.manifestSchemaVersion,\n        components: versionRecord.components,\n        primaryPanelId: versionRecord.primaryPanelId,\n        contentSha256: versionRecord.contentSha256,\n      })),\n      grants: appRecord.grants,\n    };\n  };\n\n  setEnabled = async (appId: string, enabled: boolean): Promise<AppActivationResult> => {\n    return await this.withAppOperation(appId, async () => {\n      const appRecord = await this.registryService.setEnabled(appId, enabled);\n      return {\n        appId: appRecord.appId,\n        activeVersion: appRecord.activeVersion,\n        enabled: appRecord.enabled,\n      };\n    });\n  };\n\n  rollback = async (appId: string, version: string): Promise<AppRollbackResult> => {\n    return await this.withAppOperation(appId, async () => {\n    const currentRecord = await this.registryService.getApp(appId);\n    if (!currentRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    if (currentRecord.activeVersion === version) {\n      return {\n        appId,\n        activeVersion: version,\n        previousVersion: version,\n        enabled: currentRecord.enabled,\n        rolledBack: false,\n      };\n    }\n    const targetVersion = currentRecord.installedVersions[version];\n    if (!targetVersion) {\n      throw new Error(`应用 ${appId} 未安装版本 ${version}。`);\n    }\n    if (targetVersion.dataSchemaVersion !== currentRecord.defaultInstance.dataSchemaVersion) {\n      throw new Error(\n        `应用 ${appId}@${version} 需要数据 schema ${targetVersion.dataSchemaVersion}，当前实例为 ${currentRecord.defaultInstance.dataSchemaVersion}。没有可用 checkpoint，已阻止回滚。`,\n      );\n    }\n    await this.assertVersionIntegrity(appId, version);\n    const appRecord = await this.registryService.activateVersion(appId, version);\n    return {\n      appId,\n      activeVersion: appRecord.activeVersion,\n      previousVersion: currentRecord.activeVersion,\n      enabled: appRecord.enabled,\n      rolledBack: true,\n    };\n    });\n  };\n\n  assertVersionIntegrity = async (appId: string, version?: string): Promise<void> => {\n    const appRecord = await this.registryService.getApp(appId);\n    if (!appRecord) {\n      throw new Error(`未找到已安装应用：${appId}`);\n    }\n    const targetVersion = version ?? appRecord.activeVersion;\n    const versionRecord = appRecord.installedVersions[targetVersion];\n    if (!versionRecord) {\n      throw new Error(`应用 ${appId} 未安装版本 ${targetVersion}。`);\n    }\n    const contentSha256 = await this.integrityService.assertVersion({\n      appId,\n      version: targetVersion,\n      versionRecord,\n    });\n    if (!versionRecord.contentSha256) {\n      await this.registryService.setVersionContentDigest(appId, targetVersion, contentSha256);\n      await this.integrityService.protectDirectory(versionRecord.installDirectory);\n    }\n  };\n\n  withAppOperation = async <T>(appId: string, operation: () => Promise<T>): Promise<T> => {\n    if (!SAFE_APP_ID_PATTERN.test(appId)) {\n      throw new Error(`appId 不是安全的 App 操作标识：${appId}`);\n    }\n    const lockPath = path.resolve(this.appHomeService.getAppOperationLockPath(appId));\n    const activeLocks = this.appOperationContext.getStore();\n    if (activeLocks?.has(lockPath)) {\n      return await operation();\n    }\n    return await this.fileLockService.withLock(lockPath, async () => {\n      const nextLocks = new Set(activeLocks ?? []);\n      nextLocks.add(lockPath);\n      return await this.appOperationContext.run(nextLocks, operation);\n    });\n  };\n\n  resolveLaunch = async (\n    appReference: string,\n    explicitDocumentGrantMap: AppDocumentGrantMap,\n  ): Promise<AppLaunchResolution> => {\n    const sourceType = await this.installSourceService.detectLocal(appReference, false);\n    if (sourceType.kind === \"directory\") {\n      return {\n        appDirectory: sourceType.appDirectory,\n        documentGrantMap: explicitDocumentGrantMap,\n      };\n    }\n    const appRecord = await this.registryService.getApp(appReference);\n    if (!appRecord) {\n      throw new Error(`未找到应用目录，也未找到已安装应用：${appReference}`);\n    }\n    const activeVersion = appRecord.installedVersions[appRecord.activeVersion];\n    if (!activeVersion) {\n      throw new Error(`已安装应用缺少激活版本：${appReference}`);\n    }\n    await this.assertVersionIntegrity(appRecord.appId, appRecord.activeVersion);\n    return {\n      appDirectory: activeVersion.installDirectory,\n      appId: appRecord.appId,\n      dataDirectory: appRecord.dataDirectory,\n      storage: appRecord.defaultInstance.storage,\n      documentGrantMap: {\n        ...appRecord.grants,\n        ...explicitDocumentGrantMap,\n      },\n    };\n  };\n\n  private readRemoteSourceFields = (source?: RemoteSourceFields): RemoteSourceFields => ({\n    registryUrl: source?.registryUrl,\n    bundleUrl: source?.bundleUrl,\n    sha256: source?.sha256,\n    target: source?.target,\n  });\n\n  persistGrants = async (\n    appId: string | undefined,\n    documentGrantMap: AppDocumentGrantMap,\n  ): Promise<void> => {\n    if (!appId || Object.keys(documentGrantMap).length === 0) {\n      return;\n    }\n    await this.registryService.updateGrants(appId, documentGrantMap);\n  };\n\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqCA,MAAM,sBAAsB;AAmB5B,IAAa,yBAAb,MAAoC;CAClC;CACA;CACA,kBAAmC,IAAI,iBAAiB;CACxD;CACA;CACA;CACA,sBAAuC,IAAI,mBAAwC;CAEnF,YACE,iBAAkD,IAAI,gBAAgB,EACtE,gBAAmD,IAAI,kBAAkB,EACzE,kBAAuD,IAAI,oBAAoB,EAC/E,eAAiD,IAAI,iBAAiB,EACtE,kBAAuD,IAAI,mBAAmB,eAAe,EAC7F,wBAAmE,IAAI,yBACrE,eACD,EACD,uBAAwE,IAAI,+BAC1E,IAAI,yBAAyB,eAAe,CAC7C,EACD,wBACA;AAZiB,OAAA,iBAAA;AACA,OAAA,gBAAA;AACA,OAAA,kBAAA;AACA,OAAA,eAAA;AACA,OAAA,kBAAA;AACA,OAAA,wBAAA;AAGA,OAAA,uBAAA;AAKjB,OAAK,uBAAuB,IAAI,wBAC9B,KAAK,iBACL,KAAK,sBACL,KAAK,cACN;AACD,OAAK,yBAAyB,0BAA0B,IAAI,0BAA0B,eAAe;AACrG,OAAK,mBAAmB,IAAI,gCAAgC,gBAAgB;AAC5E,OAAK,oBAAoB,IAAI,iCAAiC;GAC5D;GACA,kBAAkB,KAAK;GACvB;GACD,CAAC;AACF,OAAK,mBAAmB,IAAI,gCAAgC;GAC1D;GACA;GACA;GACA,wBAAwB,KAAK;GAC7B,kBAAkB,KAAK;GACvB,SAAS,KAAK;GACd,UAAU,KAAK;GAChB,CAAC;;CAGJ,UAAU,OACR,WACA,UAA6B,EAAE,KACD;EAC9B,MAAM,EAAE,YAAY,gBAAgB;AACpC,QAAM,aAAa,YAAY;EAC/B,MAAM,SAAS,MAAM,KAAK,qBAAqB,QAAQ,WAAW,YAAY;EAC9E,MAAM,gBAAgB,MAAM,KAAK,eAAe,yBAAyB,gBAAgB;AACzF,MAAI;GACF,MAAM,aAAa,MAAM,KAAK,qBAAqB,kBACjD,QACA,eACA,WACD;AACD,SAAM,aAAa,YAAY;GAC/B,MAAM,qBAAqB,KAAK,KAAK,eAAe,SAAS;GAC7D,MAAM,oBAAoB,MAAM,KAAK,cAAc,cAAc;IAC/D;IACA,iBAAiB;IAClB,CAAC;AACF,SAAM,KAAK,kBAAkB,wBAAwB;IACnD,cAAc;IACd,kBAAkB,kBAAkB,SAAS;IAC9C,CAAC;GACF,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,KAAK,mBAAmB;AAC1E,UAAO,MAAM,KAAK,sBAAsB;IACtC;IACA;IACA;IACA;IACA;IACD,CAAC;YACM;AACR,SAAM,GAAG,eAAe;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;;;CAI7D,wBAAgC,OAC9B,aAC8B;EAC9B,MAAM,QAAQ,SAAS,eAAe,SAAS;AAC/C,SAAO,MAAM,KAAK,iBAChB,OACA,YAAY,MAAM,KAAK,sBAAsB,SAAS,CACvD;;CAGH,wBAAgC,OAC9B,aAC8B;EAC9B,MAAM,EAAE,oBAAoB,mBAAmB,gBAAgB,SAAS,WAAW;EACnF,MAAM,EAAE,eAAe;EACvB,MAAM,EAAE,IAAI,OAAO,YAAY,eAAe;EAC9C,MAAM,mBAAmB,KAAK,eAAe,oBAAoB,OAAO,QAAQ;AAChF,MAAI,OAAO,SAAS,cAAc,UAAU,OAAO,mBAAmB,MACpE,OAAM,IAAI,MACR,6CAA6C,OAAO,mBAAmB,MAAM,MAAM,QACpF;AAEH,QAAM,aAAa,aAAa;EAChC,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,OAAO,MAAM;EAC/D,MAAM,YAAY,OAAO,SAAS,aAC9B,OAAO,mBAAmB,YAC1B,QAAQ;EACZ,MAAM,mBAAmB,gBAAgB,aACvC,gBAAgB,kBAAkB,eAAe,gBAAgB;AACnE,MAAI,oBAAoB,iBAAiB,OAAO,WAAW,GACzD,OAAM,IAAI,MACR,MAAM,MAAM,UAAU,iBAAiB,GAAG,OAAO,WAAW,MAAM,UAAU,MAC7E;EAEH,MAAM,oBAAoB,eAAe,SAAS,kBAAkB,IAChE,eAAe,SAAS,SAAS,iBAAiB,IAClD;AACJ,MAAI,gBAAgB,gBAAgB,sBAAsB,KAAA,KACxD,eAAe,gBAAgB,sBAAsB,kBACrD,OAAM,IAAI,MACR,MAAM,MAAM,eAAe,eAAe,gBAAgB,kBAAkB,OAAO,kBAAkB,mCACtG;EAEH,MAAM,oBAAoB,KAAK,eAAe,wBAAwB,OAAO,UAAU;EACvF,MAAM,kBAAkB,MAAM,KAAK,iBAAiB,WAAW,kBAAkB;EACjF,MAAM,gBAAgB,MAAM,KAAK,kBAAkB,gCAAgC;GACjF;GACA,YAAY;GACZ;GACA;GACA,QAAQ,kBAAkB,SAAS,QAAQ,SAAS,WAAW,kBAAkB,SAAS,SAAS,KAAA;GACpG,CAAC;EACF,MAAM,kBAAkB,MAAM,KAAK,uBAAuB,2BAA2B;GACnF;GACA,cAAc,oBAAoB,YAAY;GAC9C,qBAAqB,gBAAgB,gBAAgB,QAAQ,WAAW,WACpE,eAAe,gBACf,KAAA;GACJ;GACD,CAAC;AACF,QAAM,aAAa,aAAa;EAChC,IAAI;AACJ,MAAI;AACF,oBAAiB,MAAM,KAAK,gBAAgB,mBAAmB;IAC7D;IACA,MAAM,eAAe,SAAS;IAC9B,aAAa,eAAe,SAAS;IACrC;IACA;IACA;IACA,YAAY,OAAO;IACnB,kBAAkB,OAAO,SAAS,aAC9B,OAAO,mBAAmB,mBAC1B,kBAAkB,SAAS;IAC/B,WAAW,OAAO;IAClB,8BAAa,IAAI,MAAM,EAAC,aAAa;IACrC,aAAa,eAAe,SAAS,kBAAkB,IACnD,eAAe,SAAS,eAAe,EAAE,GACzC,KAAK,gBAAgB,wBAAwB,eAAe,SAAS,CAAC;IAC1E,GAAG,KAAK,uBAAuB,OAAO,SAAS,aAAa,OAAO,qBAAqB,KAAA,EAAU;IAClG;IACA,uBAAuB,eAAe,SAAS;IAC/C,YAAY,6BAA6B,eAAe,GACpD,eAAe,WAAW,KAAK,eAAe;KAC5C,GAAG;KACH,oBAAoB,KAAK,KAAK,kBAAkB,UAAU,KAAK;KAC/D,cAAc,KAAK,KACjB,kBACA,UAAU,MACV,UAAU,SAAS,UAAU,mBAAmB,mBACjD;KACF,EAAE,GACH,KAAA;IACJ,gBAAgB,6BAA6B,eAAe,GACxD,eAAe,iBACf,KAAA;IACJ,UAAU,6BAA6B,eAAe,GAClD,KAAK,gBAAgB,wBAAwB,eAAe,SAAS,GACrE,KAAA;IACJ;IACA;IACA,UAAU,QAAQ;IACnB,CAAC;WACK,OAAO;AACd,SAAM,KAAK,iBAAiB,gBAAgB,iBAAiB;AAC7D,OAAI,CAAC,gBACH,OAAM,KAAK,uBAAuB,oBAAoB;IACpD,UAAU;IACV,qBAAqB,gBAAgB,gBAAgB,QAAQ,WAAW,WACpE,eAAe,gBACf,KAAA;IACL,CAAC;AAEJ,SAAM;;EAER,MAAM,mBAAmB,eAAe,kBAAkB;AAC1D,SAAO;GACL,OAAO,eAAe;GACtB,MAAM,eAAe;GACrB;GACA;GACA,eAAe,gBAAgB,QAAQ;GACvC,UAAU,eAAe;GACzB,YAAY,OAAO;GACnB,WAAW,OAAO;GAClB,kBAAkB,kBAAkB;GACpC,aAAa,kBAAkB,eAAe,EAAE;GAChD,GAAG,KAAK,uBAAuB,iBAAiB;GAChD,WAAW,kBAAkB;GAC7B,SAAS,eAAe;GACxB,uBAAuB,kBAAkB,yBAAyB;GAClE,YAAY,kBAAkB;GAC9B,gBAAgB,kBAAkB;GACnC;;CAGH,SAAS,OACP,OACA,YAM6B;AAC7B,SAAO,MAAM,KAAK,iBAChB,OACA,YAAY,MAAM,KAAK,iBAAiB,OAAO,OAAO,QAAQ,CAC/D;;CAGH,YAAY,OACV,OACA,cACgC;AAChC,SAAO,MAAM,KAAK,iBAChB,OACA,YAAY,MAAM,KAAK,iBAAiB,UAAU,OAAO,UAAU,CACpE;;CAGH,OAAO,YAA6C;AAElD,UADmB,MAAM,KAAK,gBAAgB,UAAU,EACtC,KAAK,eAAe;GACpC,OAAO,UAAU;GACjB,MAAM,UAAU;GAChB,eAAe,UAAU;GACzB,YACE,UAAU,kBAAkB,UAAU,gBAAgB,cAAc;GACtE,kBACE,UAAU,kBAAkB,UAAU,gBAAgB;GACxD,SAAS,UAAU;GACnB,uBACE,UAAU,kBAAkB,UAAU,gBAAgB,yBAAyB;GACjF,gBACE,UAAU,kBAAkB,UAAU,gBAAgB;GACzD,EAAE;;CAGL,sBAAsB,YAA2B;AAC/C,QAAM,KAAK,eAAe,uBAAuB;EACjD,IAAI,aAAa,MAAM,KAAK,gBAAgB,UAAU;AACtD,OAAK,MAAM,aAAa,WACtB,OAAM,KAAK,iBAAiB,UAAU,OAAO,YAAY;AACvD,QAAK,MAAM,iBAAiB,OAAO,OAAO,UAAU,kBAAkB,EAAE;AACtE,QAAI,CAAC,MAAM,KAAK,iBAAiB,WAAW,cAAc,iBAAiB,CACzE;AAEF,QAAI,CAAC,cAAc,eAAe;KAChC,MAAM,gBAAgB,MAAM,KAAK,iBAAiB,gBAChD,cAAc,iBACf;AACD,WAAM,KAAK,gBAAgB,wBACzB,UAAU,OACV,cAAc,SACd,cACD;;AAEH,UAAM,KAAK,iBAAiB,iBAAiB,cAAc,iBAAiB;;IAE9E;AAEJ,eAAa,MAAM,KAAK,gBAAgB,UAAU;EAClD,MAAM,yBAAyB,IAAI,IAAI,WAAW,SAAS,WACzD,OAAO,OAAO,OAAO,kBAAkB,CAAC,KAAK,YAAY,KAAK,QAAQ,QAAQ,iBAAiB,CAAC,CAAC,CAAC;EACpG,MAAM,sBAAsB,IAAI,IAAI,WAAW,KAAK,WAAW,KAAK,QAClE,OAAO,gBAAgB,QAAQ,WAAW,gBACtC,OAAO,gBAAgB,QAAQ,oBAC/B,OAAO,cACZ,CAAC,CAAC;EAEH,MAAM,qBAAqB,MAAM,KAAK,kBAAkB,gBACtD,KAAK,eAAe,sBAAsB,CAC3C;AACD,OAAK,MAAM,gBAAgB,mBACzB,OAAM,KAAK,kBAAkB,2BAA2B,cAAc,uBAAuB;AAE/F,QAAM,KAAK,kBAAkB,2BAC3B,KAAK,eAAe,kBAAkB,EACtC,oBACD;AACD,OAAK,MAAM,aAAa,YAAY;AAClC,OAAI,UAAU,gBAAgB,QAAQ,WAAW,cAC/C;AAEF,SAAM,KAAK,kBAAkB,2BAC3B,UAAU,gBAAgB,QAAQ,mBAClC,IAAI,IAAI,CAAC,KAAK,QAAQ,UAAU,gBAAgB,QAAQ,cAAc,CAAC,CAAC,CACzE;;AAEH,OAAK,MAAM,aAAa,YAAY;AAClC,OAAI,UAAU,gBAAgB,QAAQ,WAAW,SAC/C;AAEF,SAAM,KAAK,iBAAiB,UAAU,OAAO,YAAY;IACvD,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,OAAO,UAAU,MAAM;AACxE,QAAI,CAAC,iBAAiB,cAAc,gBAAgB,QAAQ,WAAW,SACrE;IAEF,MAAM,gBAAgB,cAAc,kBAAkB,cAAc;AACpE,QAAI,CAAC,cACH,OAAM,IAAI,MAAM,eAAe,cAAc,QAAQ;IAEvD,MAAM,WAAW,MAAM,KAAK,uBAAuB,2BAA2B;KAC5E,OAAO,cAAc;KACrB,aAAa,cAAc,WAAW;KACtC,qBAAqB,cAAc;KACnC,mBAAmB,cAAc,gBAAgB;KAClD,CAAC;AACF,QAAI;AACF,WAAM,KAAK,gBAAgB,mBAAmB;MAC5C,OAAO,cAAc;MACrB,MAAM,cAAc;MACpB,aAAa,cAAc;MAC3B,SAAS,cAAc;MACvB,kBAAkB,cAAc;MAChC,iBAAiB;MACjB,YAAY,cAAc;MAC1B,WAAW,cAAc;MACzB,aAAa,cAAc;MAC3B,kBAAkB,cAAc;MAChC,aAAa,cAAc;MAC3B,GAAG,KAAK,uBAAuB,cAAc;MAC7C,WAAW,cAAc,aAAa,cAAc;MACpD,uBAAuB,cAAc;MACrC,YAAY,cAAc;MAC1B,gBAAgB,cAAc;MAC9B,UAAU,cAAc;MACxB,mBAAmB,cAAc;MACjC,eAAe,cAAc;MAC7B,SAAS,cAAc;MACxB,CAAC;aACK,OAAO;AACd,WAAM,KAAK,uBAAuB,oBAAoB;MACpD;MACA,qBAAqB,cAAc;MACpC,CAAC;AACF,WAAM;;KAER;;;CAIN,OAAO,OACL,OACA,UAA6C,EAAE,KACpB;EAC3B,MAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO,MAAM;AAC1D,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;EAEtC,MAAM,oBAAoB,OAAO,OAAO,UAAU,kBAAkB,CAAC,MAAM,MAAM,UAC/E,KAAK,QAAQ,cAAc,MAAM,QAAQ,CAC1C;EACD,MAAM,eAAe,QAAQ,wBAAwB,QACjD,KAAA,IACA,MAAM,KAAK,uBAAuB,aAAa,UAAU,gBAAgB,QAAQ;AACrF,SAAO;GACL,OAAO,UAAU;GACjB,MAAM,UAAU;GAChB,aAAa,UAAU;GACvB,eAAe,UAAU;GACzB,SAAS,UAAU;GACnB,eAAe,UAAU;GACzB,UAAU,UAAU;GACpB,SAAS,UAAU,gBAAgB;GACnC;GACA,mBAAmB,kBAAkB,KAAK,mBAAmB;IAC3D,SAAS,cAAc;IACvB,kBAAkB,cAAc;IAChC,YAAY,cAAc;IAC1B,kBAAkB,cAAc;IAChC,WAAW,cAAc;IACzB,aAAa,cAAc;IAC3B,aAAa,cAAc;IAC3B,GAAG,KAAK,uBAAuB,cAAc;IAC7C,WAAW,cAAc;IACzB,uBAAuB,cAAc;IACrC,YAAY,cAAc;IAC1B,gBAAgB,cAAc;IAC9B,eAAe,cAAc;IAC9B,EAAE;GACH,QAAQ,UAAU;GACnB;;CAGH,aAAa,OAAO,OAAe,YAAmD;AACpF,SAAO,MAAM,KAAK,iBAAiB,OAAO,YAAY;GACpD,MAAM,YAAY,MAAM,KAAK,gBAAgB,WAAW,OAAO,QAAQ;AACvE,UAAO;IACL,OAAO,UAAU;IACjB,eAAe,UAAU;IACzB,SAAS,UAAU;IACpB;IACD;;CAGJ,WAAW,OAAO,OAAe,YAAgD;AAC/E,SAAO,MAAM,KAAK,iBAAiB,OAAO,YAAY;GACtD,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,OAAO,MAAM;AAC9D,OAAI,CAAC,cACH,OAAM,IAAI,MAAM,YAAY,QAAQ;AAEtC,OAAI,cAAc,kBAAkB,QAClC,QAAO;IACL;IACA,eAAe;IACf,iBAAiB;IACjB,SAAS,cAAc;IACvB,YAAY;IACb;GAEH,MAAM,gBAAgB,cAAc,kBAAkB;AACtD,OAAI,CAAC,cACH,OAAM,IAAI,MAAM,MAAM,MAAM,SAAS,QAAQ,GAAG;AAElD,OAAI,cAAc,sBAAsB,cAAc,gBAAgB,kBACpE,OAAM,IAAI,MACR,MAAM,MAAM,GAAG,QAAQ,eAAe,cAAc,kBAAkB,SAAS,cAAc,gBAAgB,kBAAkB,yBAChI;AAEH,SAAM,KAAK,uBAAuB,OAAO,QAAQ;GACjD,MAAM,YAAY,MAAM,KAAK,gBAAgB,gBAAgB,OAAO,QAAQ;AAC5E,UAAO;IACL;IACA,eAAe,UAAU;IACzB,iBAAiB,cAAc;IAC/B,SAAS,UAAU;IACnB,YAAY;IACb;IACC;;CAGJ,yBAAyB,OAAO,OAAe,YAAoC;EACjF,MAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO,MAAM;AAC1D,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,YAAY,QAAQ;EAEtC,MAAM,gBAAgB,WAAW,UAAU;EAC3C,MAAM,gBAAgB,UAAU,kBAAkB;AAClD,MAAI,CAAC,cACH,OAAM,IAAI,MAAM,MAAM,MAAM,SAAS,cAAc,GAAG;EAExD,MAAM,gBAAgB,MAAM,KAAK,iBAAiB,cAAc;GAC9D;GACA,SAAS;GACT;GACD,CAAC;AACF,MAAI,CAAC,cAAc,eAAe;AAChC,SAAM,KAAK,gBAAgB,wBAAwB,OAAO,eAAe,cAAc;AACvF,SAAM,KAAK,iBAAiB,iBAAiB,cAAc,iBAAiB;;;CAIhF,mBAAmB,OAAU,OAAe,cAA4C;AACtF,MAAI,CAAC,oBAAoB,KAAK,MAAM,CAClC,OAAM,IAAI,MAAM,wBAAwB,QAAQ;EAElD,MAAM,WAAW,KAAK,QAAQ,KAAK,eAAe,wBAAwB,MAAM,CAAC;EACjF,MAAM,cAAc,KAAK,oBAAoB,UAAU;AACvD,MAAI,aAAa,IAAI,SAAS,CAC5B,QAAO,MAAM,WAAW;AAE1B,SAAO,MAAM,KAAK,gBAAgB,SAAS,UAAU,YAAY;GAC/D,MAAM,YAAY,IAAI,IAAI,eAAe,EAAE,CAAC;AAC5C,aAAU,IAAI,SAAS;AACvB,UAAO,MAAM,KAAK,oBAAoB,IAAI,WAAW,UAAU;IAC/D;;CAGJ,gBAAgB,OACd,cACA,6BACiC;EACjC,MAAM,aAAa,MAAM,KAAK,qBAAqB,YAAY,cAAc,MAAM;AACnF,MAAI,WAAW,SAAS,YACtB,QAAO;GACL,cAAc,WAAW;GACzB,kBAAkB;GACnB;EAEH,MAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO,aAAa;AACjE,MAAI,CAAC,UACH,OAAM,IAAI,MAAM,qBAAqB,eAAe;EAEtD,MAAM,gBAAgB,UAAU,kBAAkB,UAAU;AAC5D,MAAI,CAAC,cACH,OAAM,IAAI,MAAM,eAAe,eAAe;AAEhD,QAAM,KAAK,uBAAuB,UAAU,OAAO,UAAU,cAAc;AAC3E,SAAO;GACL,cAAc,cAAc;GAC5B,OAAO,UAAU;GACjB,eAAe,UAAU;GACzB,SAAS,UAAU,gBAAgB;GACnC,kBAAkB;IAChB,GAAG,UAAU;IACb,GAAG;IACJ;GACF;;CAGH,0BAAkC,YAAqD;EACrF,aAAa,QAAQ;EACrB,WAAW,QAAQ;EACnB,QAAQ,QAAQ;EAChB,QAAQ,QAAQ;EACjB;CAED,gBAAgB,OACd,OACA,qBACkB;AAClB,MAAI,CAAC,SAAS,OAAO,KAAK,iBAAiB,CAAC,WAAW,EACrD;AAEF,QAAM,KAAK,gBAAgB,aAAa,OAAO,iBAAiB"}

package/dist/services/app-manifest.service.d.ts

@@ -1,7 +1,10 @@
 import { AppComponentManifest, AppManifestBundle, AppManifestSummary, AppPlatformSecuritySummary } from "../types/app-manifest.types.js";
+import { AppPlatformTargetService } from "./app-platform-target.service.js";
 
 //#region src/services/app-manifest.service.d.ts
 declare class AppManifestService {
+  private readonly platformTargetService;
+  constructor(platformTargetService?: AppPlatformTargetService);
   load: (appDirectory: string) => Promise<AppManifestBundle>;
   summarize: (bundle: AppManifestBundle) => AppManifestSummary;
   private loadStandaloneBundle;

package/dist/services/app-manifest.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-manifest.service.d.ts","names":[],"sources":["../../src/services/app-manifest.service.ts"],"mappings":";;;cAoBa,kBAAA;EACX,IAAA,GAAc,YAAA,aAAuB,OAAA,CAAQ,iBAAA;EAU7C,SAAA,GAAa,MAAA,EAAQ,iBAAA,KAAoB,kBAAA;EAAA,QAqCjC,oBAAA;EAAA,QA8BA,mBAAA;EAAA,QA8DA,aAAA;EA+BR,uBAAA,GACE,QAAA,EAAU,oBAAA,KACT,0BAAA;EAAA,QAgCK,mBAAA;EAAA,QAcA,SAAA;EAAA,QAoBA,OAAA;EAAA,QAKA,eAAA;EAAA,QA+BA,YAAA;EAAA,QAUA,iBAAA;EAAA,QAeA,YAAA;EAAA,QAcA,eAAA;EAAA,QAkBA,8BAAA;EAAA,QAqBA,eAAA;EAAA,QA0BA,gBAAA;EAAA,QAaA,mBAAA;EAAA,QAwBA,gBAAA;EAAA,QAUA,YAAA;EAAA,QAQA,iBAAA;EAAA,QAeA,kBAAA;EAAA,QAaA,uBAAA;EAAA,QAcA,aAAA;EAAA,QAUA,qBAAA;EAAA,QAWA,YAAA;EAAA,QAOA,kBAAA;EAAA,QAOA,kBAAA;EAAA,QAIA,UAAA;EAAA,QAOA,WAAA;AAAA"}
+{"version":3,"file":"app-manifest.service.d.ts","names":[],"sources":["../../src/services/app-manifest.service.ts"],"mappings":";;;;cAqBa,kBAAA;EAAA,iBAEQ,qBAAA;cAAA,qBAAA,GAAqB,wBAAA;EAGxC,IAAA,GAAc,YAAA,aAAuB,OAAA,CAAQ,iBAAA;EAU7C,SAAA,GAAa,MAAA,EAAQ,iBAAA,KAAoB,kBAAA;EAAA,QAwCjC,oBAAA;EAAA,QA8BA,mBAAA;EAAA,QA8DA,aAAA;EAgCR,uBAAA,GACE,QAAA,EAAU,oBAAA,KACT,0BAAA;EAAA,QAgCK,mBAAA;EAAA,QAcA,SAAA;EAAA,QAoBA,OAAA;EAAA,QAKA,eAAA;EAAA,QA+BA,YAAA;EAAA,QAUA,iBAAA;EAAA,QAeA,YAAA;EAAA,QAcA,eAAA;EAAA,QAkBA,8BAAA;EAAA,QAqBA,eAAA;EAAA,QA0BA,gBAAA;EAAA,QAaA,mBAAA;EAAA,QAwBA,gBAAA;EAAA,QAUA,YAAA;EAAA,QAQA,iBAAA;EAAA,QAeA,kBAAA;EAAA,QAaA,uBAAA;EAAA,QAcA,aAAA;EAAA,QAUA,qBAAA;EAAA,QAWA,YAAA;EAAA,QAOA,kBAAA;EAAA,QAOA,kBAAA;EAAA,QAIA,UAAA;EAAA,QAOA,WAAA;AAAA"}

package/dist/services/app-manifest.service.js

@@ -1,9 +1,13 @@
+import { AppPlatformTargetService } from "./app-platform-target.service.js";
 import { access, lstat, readFile } from "node:fs/promises";
 import path from "node:path";
 //#region src/services/app-manifest.service.ts
 const PACKAGE_ID_PATTERN = /^[a-z0-9]+(?:[.-][a-z0-9]+)*$/;
 const COMPONENT_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 var AppManifestService = class {
+	constructor(platformTargetService = new AppPlatformTargetService()) {
+		this.platformTargetService = platformTargetService;
+	}
 	load = async (appDirectory) => {
 		const normalizedDirectory = path.resolve(appDirectory);
 		const manifestPath = path.join(normalizedDirectory, "manifest.json");
@@ -24,6 +28,7 @@ var AppManifestService = class {
 				iconPath: componentBundle.iconPath,
 				primaryPanelId: componentBundle.primaryPanelId,
 				components: componentBundle.components,
+				distribution: this.platformTargetService.resolveDistribution(componentBundle.manifest.distribution),
 				security: this.resolvePlatformSecurity(componentBundle.manifest)
 			};
 		}
@@ -112,6 +117,7 @@ var AppManifestService = class {
 			engines: this.parseEngines(candidate.engines),
 			presentation: this.parsePresentation(candidate.presentation),
 			runtime,
+			distribution: this.platformTargetService.parseDistribution(candidate.distribution),
 			storage: this.parseAppStorage(candidate.storage),
 			permissions: this.parsePermissions(candidate.permissions),
 			components

package/dist/services/app-manifest.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-manifest.service.js","names":[],"sources":["../../src/services/app-manifest.service.ts"],"sourcesContent":["import { access, lstat, readFile } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport type {\n  AppComponentManifest,\n  AppComponentManifestBundle,\n  AppComponentReference,\n  AppDocumentAccessScope,\n  AppManifest,\n  AppManifestBundle,\n  AppManifestSummary,\n  AppPermissions,\n  AppPlatformSecuritySummary,\n  AppResolvedComponent,\n  AppStandaloneManifest,\n  AppStandaloneManifestBundle,\n} from \"#app-runtime/types/app-manifest.types.js\";\n\nconst PACKAGE_ID_PATTERN = /^[a-z0-9]+(?:[.-][a-z0-9]+)*$/;\nconst COMPONENT_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\n\nexport class AppManifestService {\n  load = async (appDirectory: string): Promise<AppManifestBundle> => {\n    const normalizedDirectory = path.resolve(appDirectory);\n    const manifestPath = path.join(normalizedDirectory, \"manifest.json\");\n    const rawManifest = JSON.parse(await readFile(manifestPath, \"utf-8\")) as unknown;\n    const manifest = this.parseManifest(rawManifest);\n    return manifest.schemaVersion === 1\n      ? await this.loadStandaloneBundle(normalizedDirectory, manifestPath, manifest)\n      : await this.loadComponentBundle(normalizedDirectory, manifestPath, manifest);\n  };\n\n  summarize = (bundle: AppManifestBundle): AppManifestSummary => {\n    if (bundle.manifest.schemaVersion === 2) {\n      const componentBundle = bundle as AppComponentManifestBundle;\n      return {\n        schemaVersion: 2,\n        id: componentBundle.manifest.id,\n        name: componentBundle.manifest.name,\n        version: componentBundle.manifest.version,\n        description: componentBundle.manifest.description,\n        manifestPath: componentBundle.manifestPath,\n        iconPath: componentBundle.iconPath,\n        primaryPanelId: componentBundle.primaryPanelId,\n        components: componentBundle.components,\n        security: this.resolvePlatformSecurity(componentBundle.manifest),\n      };\n    }\n    const standaloneBundle = bundle as AppStandaloneManifestBundle;\n    const permissions = standaloneBundle.manifest.permissions ?? {};\n    return {\n      schemaVersion: 1,\n      id: standaloneBundle.manifest.id,\n      name: standaloneBundle.manifest.name,\n      version: standaloneBundle.manifest.version,\n      description: standaloneBundle.manifest.description,\n      mainKind: standaloneBundle.manifest.main.kind,\n      action:\n        standaloneBundle.manifest.main.kind === \"wasm\"\n          ? standaloneBundle.manifest.main.action\n          : undefined,\n      manifestPath: standaloneBundle.manifestPath,\n      mainEntryPath: standaloneBundle.mainEntryPath,\n      uiEntryPath: standaloneBundle.uiEntryPath,\n      iconPath: standaloneBundle.iconPath,\n      permissions,\n    };\n  };\n\n  private loadStandaloneBundle = async (\n    appDirectory: string,\n    manifestPath: string,\n    manifest: AppStandaloneManifest,\n  ): Promise<AppStandaloneManifestBundle> => {\n    const mainEntryPath = await this.assertResolvedFile(\n      appDirectory,\n      manifest.main.entry,\n      \"main.entry\",\n    );\n    const uiEntryPath = await this.assertResolvedFile(\n      appDirectory,\n      manifest.ui.entry,\n      \"ui.entry\",\n    );\n    const iconPath = manifest.icon\n      ? await this.assertResolvedFile(appDirectory, manifest.icon, \"icon\")\n      : undefined;\n    return {\n      appDirectory,\n      manifestPath,\n      manifest,\n      mainEntryPath,\n      uiEntryPath,\n      uiDirectoryPath: path.dirname(uiEntryPath),\n      assetsDirectoryPath: path.join(appDirectory, \"assets\"),\n      iconPath,\n    };\n  };\n\n  private loadComponentBundle = async (\n    appDirectory: string,\n    manifestPath: string,\n    manifest: AppComponentManifest,\n  ): Promise<AppComponentManifestBundle> => {\n    const components: AppResolvedComponent[] = [];\n    for (const [index, component] of manifest.components.entries()) {\n      const componentDirectory = await this.assertResolvedDirectory(\n        appDirectory,\n        component.path,\n        `components[${index}].path`,\n      );\n      const componentId = await this.readComponentId(component, componentDirectory);\n      const expectedPrefix = `${manifest.id.replace(/[^a-z0-9]+/g, \"-\")}-`;\n      if (!componentId.startsWith(expectedPrefix)) {\n        throw new Error(\n          `组件 ${componentId} 必须使用包前缀 ${expectedPrefix}。`,\n        );\n      }\n      components.push({\n        ...component,\n        id: componentId,\n        componentDirectory,\n        manifestPath: path.join(\n          componentDirectory,\n          component.kind === \"panel\" ? \"panel-app.json\" : \"service-app.json\",\n        ),\n      });\n    }\n    const duplicateId = components.find(\n      (component, index) => components.findIndex((entry) => entry.id === component.id) !== index,\n    );\n    if (duplicateId) {\n      throw new Error(`components 包含重复组件 id：${duplicateId.id}`);\n    }\n    const panelIds = components\n      .filter((component) => component.kind === \"panel\")\n      .map((component) => component.id);\n    const declaredPrimaryPanel = manifest.presentation?.primaryPanel;\n    if (declaredPrimaryPanel && !panelIds.includes(declaredPrimaryPanel)) {\n      throw new Error(\"presentation.primaryPanel 必须引用真实 Panel component id。\");\n    }\n    if (panelIds.length > 1 && !declaredPrimaryPanel) {\n      throw new Error(\"包含多个 Panel 时必须声明 presentation.primaryPanel。\");\n    }\n    if (panelIds.length === 0 && declaredPrimaryPanel) {\n      throw new Error(\"不含 Panel 的包不能声明 presentation.primaryPanel。\");\n    }\n    const iconPath = manifest.icon\n      ? await this.assertResolvedFile(appDirectory, manifest.icon, \"icon\")\n      : undefined;\n    return {\n      appDirectory,\n      manifestPath,\n      manifest,\n      components,\n      assetsDirectoryPath: path.join(appDirectory, \"assets\"),\n      iconPath,\n      primaryPanelId: declaredPrimaryPanel ?? panelIds[0],\n    };\n  };\n\n  private parseManifest = (rawManifest: unknown): AppManifest => {\n    const candidate = this.assertObject(rawManifest, \"manifest.json\");\n    const schemaVersion = this.readNumber(candidate.schemaVersion, \"schemaVersion\");\n    if (schemaVersion !== 1 && schemaVersion !== 2) {\n      throw new Error(\"当前只支持 schemaVersion = 1 或 2。\");\n    }\n    const common = this.parseCommonManifest(candidate);\n    if (schemaVersion === 1) {\n      return {\n        schemaVersion: 1,\n        ...common,\n        main: this.parseMain(candidate.main),\n        ui: this.parseUi(candidate.ui),\n        permissions: this.parsePermissions(candidate.permissions),\n      };\n    }\n    const components = this.parseComponents(candidate.components);\n    const runtime = this.parseRuntime(candidate.runtime);\n    this.assertRuntimeMatchesComponents(runtime, components);\n    return {\n      schemaVersion: 2,\n      ...common,\n      engines: this.parseEngines(candidate.engines),\n      presentation: this.parsePresentation(candidate.presentation),\n      runtime,\n      storage: this.parseAppStorage(candidate.storage),\n      permissions: this.parsePermissions(candidate.permissions),\n      components,\n    };\n  };\n\n  resolvePlatformSecurity = (\n    manifest: AppComponentManifest,\n  ): AppPlatformSecuritySummary => {\n    const hasServiceComponents = manifest.components.some(\n      (component) => component.kind === \"service\",\n    );\n    const runtimeProfile = manifest.runtime?.profile ?? (\n      hasServiceComponents ? \"native-process\" : \"panel-only\"\n    );\n    const isolation = runtimeProfile === \"panel-only\"\n      ? \"sandboxed\"\n      : runtimeProfile === \"wasi\"\n        ? \"host-mediated\"\n        : \"full-user\";\n    const declaredPermissions = manifest.permissions ?? {};\n    const permissions: AppPermissions = runtimeProfile === \"native-process\"\n      ? {\n          ...declaredPermissions,\n          storage: declaredPermissions.storage ?? true,\n          capabilities: {\n            ...declaredPermissions.capabilities,\n            nativeProcess: true,\n          },\n        }\n      : declaredPermissions;\n    return {\n      runtimeProfile,\n      isolation,\n      hasServiceComponents,\n      inferred: manifest.runtime === undefined,\n      permissions,\n    };\n  };\n\n  private parseCommonManifest = (candidate: Record<string, unknown>) => {\n    const id = this.readRequiredString(candidate.id, \"id\");\n    if (!PACKAGE_ID_PATTERN.test(id)) {\n      throw new Error(\"id 必须由小写字母、数字、点或连字符组成。\");\n    }\n    return {\n      id,\n      name: this.readRequiredString(candidate.name, \"name\"),\n      version: this.readRequiredString(candidate.version, \"version\"),\n      description: this.readOptionalString(candidate.description, \"description\"),\n      icon: this.readOptionalString(candidate.icon, \"icon\"),\n    };\n  };\n\n  private parseMain = (rawMain: unknown): AppStandaloneManifest[\"main\"] => {\n    const candidate = this.assertObject(rawMain, \"main\");\n    const kind = this.readRequiredString(candidate.kind, \"main.kind\");\n    if (kind === \"wasm\") {\n      return {\n        kind,\n        entry: this.readRequiredString(candidate.entry, \"main.entry\"),\n        export: this.readRequiredString(candidate.export, \"main.export\"),\n        action: this.readRequiredString(candidate.action, \"main.action\"),\n      };\n    }\n    if (kind === \"wasi-http-component\") {\n      return {\n        kind,\n        entry: this.readRequiredString(candidate.entry, \"main.entry\"),\n      };\n    }\n    throw new Error(\"当前 main.kind 只支持 wasm 或 wasi-http-component。\");\n  };\n\n  private parseUi = (rawUi: unknown): AppStandaloneManifest[\"ui\"] => {\n    const candidate = this.assertObject(rawUi, \"ui\");\n    return { entry: this.readRequiredString(candidate.entry, \"ui.entry\") };\n  };\n\n  private parseComponents = (rawComponents: unknown): AppComponentReference[] => {\n    if (!Array.isArray(rawComponents) || rawComponents.length === 0) {\n      throw new Error(\"components 必须是非空数组。\");\n    }\n    const components = rawComponents.map((rawComponent, index) => {\n      const candidate = this.assertObject(rawComponent, `components[${index}]`);\n      const kind = this.readRequiredString(candidate.kind, `components[${index}].kind`);\n      if (kind !== \"panel\" && kind !== \"service\") {\n        throw new Error(`components[${index}].kind 只支持 panel 或 service。`);\n      }\n      const normalizedKind: AppComponentReference[\"kind\"] = kind;\n      return {\n        kind: normalizedKind,\n        path: this.normalizeRelativePath(\n          this.readRequiredString(candidate.path, `components[${index}].path`),\n          `components[${index}].path`,\n        ),\n      };\n    });\n    for (let leftIndex = 0; leftIndex < components.length; leftIndex += 1) {\n      for (let rightIndex = leftIndex + 1; rightIndex < components.length; rightIndex += 1) {\n        const left = components[leftIndex]?.path;\n        const right = components[rightIndex]?.path;\n        if (left && right && (left === right || left.startsWith(`${right}/`) || right.startsWith(`${left}/`))) {\n          throw new Error(`components path 不能重复或重叠：${left} / ${right}`);\n        }\n      }\n    }\n    return components;\n  };\n\n  private parseEngines = (\n    rawEngines: unknown,\n  ): AppComponentManifest[\"engines\"] => {\n    if (rawEngines === undefined) {\n      return undefined;\n    }\n    const candidate = this.assertObject(rawEngines, \"engines\");\n    return { nextclaw: this.readOptionalString(candidate.nextclaw, \"engines.nextclaw\") };\n  };\n\n  private parsePresentation = (\n    rawPresentation: unknown,\n  ): AppComponentManifest[\"presentation\"] => {\n    if (rawPresentation === undefined) {\n      return undefined;\n    }\n    const candidate = this.assertObject(rawPresentation, \"presentation\");\n    return {\n      primaryPanel: this.readOptionalString(\n        candidate.primaryPanel,\n        \"presentation.primaryPanel\",\n      ),\n    };\n  };\n\n  private parseRuntime = (\n    rawRuntime: unknown,\n  ): AppComponentManifest[\"runtime\"] => {\n    if (rawRuntime === undefined) {\n      return undefined;\n    }\n    const candidate = this.assertObject(rawRuntime, \"runtime\");\n    const profile = this.readRequiredString(candidate.profile, \"runtime.profile\");\n    if (profile !== \"panel-only\" && profile !== \"wasi\" && profile !== \"native-process\") {\n      throw new Error(\"runtime.profile 只支持 panel-only、wasi 或 native-process。\");\n    }\n    return { profile };\n  };\n\n  private parseAppStorage = (\n    rawStorage: unknown,\n  ): AppComponentManifest[\"storage\"] => {\n    if (rawStorage === undefined) {\n      return undefined;\n    }\n    const candidate = this.assertObject(rawStorage, \"storage\");\n    const scope = this.readRequiredString(candidate.scope, \"storage.scope\");\n    if (scope !== \"global\") {\n      throw new Error(\"当前 storage.scope 只支持 global。\");\n    }\n    const schemaVersion = this.readNumber(candidate.schemaVersion, \"storage.schemaVersion\");\n    if (!Number.isSafeInteger(schemaVersion) || schemaVersion < 1) {\n      throw new Error(\"storage.schemaVersion 必须是正整数。\");\n    }\n    return { scope, schemaVersion };\n  };\n\n  private assertRuntimeMatchesComponents = (\n    runtime: AppComponentManifest[\"runtime\"],\n    components: AppComponentReference[],\n  ): void => {\n    if (!runtime) {\n      return;\n    }\n    const hasService = components.some((component) => component.kind === \"service\");\n    if (runtime.profile === \"panel-only\" && hasService) {\n      throw new Error(\"runtime.profile=panel-only 不能包含 Service component。\");\n    }\n    if (runtime.profile === \"wasi\") {\n      throw new Error(\n        \"schema v2 Service component 尚不支持 WASI runtime；当前 Service App 合同会启动宿主进程，请使用 native-process，或改为 panel-only App。\",\n      );\n    }\n    if (runtime.profile !== \"panel-only\" && !hasService) {\n      throw new Error(`${runtime.profile} runtime 必须包含 Service component。`);\n    }\n  };\n\n  private readComponentId = async (\n    component: AppComponentReference,\n    componentDirectory: string,\n  ): Promise<string> => {\n    const manifestFile = component.kind === \"panel\" ? \"panel-app.json\" : \"service-app.json\";\n    const raw = JSON.parse(\n      await readFile(path.join(componentDirectory, manifestFile), \"utf-8\"),\n    ) as unknown;\n    const manifest = this.assertObject(raw, `${component.path}/${manifestFile}`);\n    const id = this.readRequiredString(manifest.id, `${component.path}/${manifestFile}.id`);\n    if (!COMPONENT_ID_PATTERN.test(id)) {\n      throw new Error(`组件 id 必须是 kebab-case：${id}`);\n    }\n    const directoryName = path.basename(componentDirectory);\n    const expectedId = component.kind === \"panel\"\n      ? directoryName.replace(/\\.panel$/, \"\")\n      : directoryName;\n    if (component.kind === \"panel\" && !directoryName.endsWith(\".panel\")) {\n      throw new Error(`Panel component 目录必须以 .panel 结尾：${component.path}`);\n    }\n    if (id !== expectedId) {\n      throw new Error(`组件 id 必须与目录名一致：期望 ${expectedId}，实际 ${id}`);\n    }\n    return id;\n  };\n\n  private parsePermissions = (rawPermissions: unknown): AppPermissions | undefined => {\n    if (rawPermissions === undefined) {\n      return undefined;\n    }\n    const candidate = this.assertObject(rawPermissions, \"permissions\");\n    return {\n      documentAccess: this.parseDocumentAccess(candidate.documentAccess),\n      allowedDomains: this.parseStringArray(candidate.allowedDomains, \"permissions.allowedDomains\"),\n      storage: this.parseStorage(candidate.storage),\n      capabilities: this.parseCapabilities(candidate.capabilities),\n    };\n  };\n\n  private parseDocumentAccess = (rawDocumentAccess: unknown): AppDocumentAccessScope[] | undefined => {\n    if (rawDocumentAccess === undefined) {\n      return undefined;\n    }\n    if (!Array.isArray(rawDocumentAccess)) {\n      throw new Error(\"permissions.documentAccess 必须是数组。\");\n    }\n    return rawDocumentAccess.map((scope, index) => {\n      const candidate = this.assertObject(scope, `permissions.documentAccess[${index}]`);\n      const mode = this.readRequiredString(candidate.mode, `permissions.documentAccess[${index}].mode`);\n      if (mode !== \"read\" && mode !== \"read-write\") {\n        throw new Error(`permissions.documentAccess[${index}].mode 只支持 read 或 read-write。`);\n      }\n      return {\n        id: this.readRequiredString(candidate.id, `permissions.documentAccess[${index}].id`),\n        mode,\n        description: this.readOptionalString(\n          candidate.description,\n          `permissions.documentAccess[${index}].description`,\n        ),\n      };\n    });\n  };\n\n  private parseStringArray = (rawValue: unknown, fieldName: string): string[] | undefined => {\n    if (rawValue === undefined) {\n      return undefined;\n    }\n    if (!Array.isArray(rawValue)) {\n      throw new Error(`${fieldName} 必须是字符串数组。`);\n    }\n    return rawValue.map((item, index) => this.readRequiredString(item, `${fieldName}[${index}]`));\n  };\n\n  private parseStorage = (rawStorage: unknown): AppPermissions[\"storage\"] | undefined => {\n    if (rawStorage === undefined || typeof rawStorage === \"boolean\") {\n      return rawStorage;\n    }\n    const candidate = this.assertObject(rawStorage, \"permissions.storage\");\n    return { namespace: this.readOptionalString(candidate.namespace, \"permissions.storage.namespace\") };\n  };\n\n  private parseCapabilities = (rawCapabilities: unknown): AppPermissions[\"capabilities\"] | undefined => {\n    if (rawCapabilities === undefined) {\n      return undefined;\n    }\n    const candidate = this.assertObject(rawCapabilities, \"permissions.capabilities\");\n    return {\n      hostBridge: candidate.hostBridge === undefined\n        ? undefined\n        : this.readBoolean(candidate.hostBridge, \"permissions.capabilities.hostBridge\"),\n      nativeProcess: candidate.nativeProcess === undefined\n        ? undefined\n        : this.readBoolean(candidate.nativeProcess, \"permissions.capabilities.nativeProcess\"),\n    };\n  };\n\n  private assertResolvedFile = async (\n    appDirectory: string,\n    relativePath: string,\n    fieldName: string,\n  ): Promise<string> => {\n    const resolvedPath = this.resolveInside(appDirectory, relativePath, fieldName);\n    const stats = await lstat(resolvedPath);\n    if (!stats.isFile() || stats.isSymbolicLink()) {\n      throw new Error(`${fieldName} 必须指向包内普通文件。`);\n    }\n    return resolvedPath;\n  };\n\n  private assertResolvedDirectory = async (\n    appDirectory: string,\n    relativePath: string,\n    fieldName: string,\n  ): Promise<string> => {\n    const resolvedPath = this.resolveInside(appDirectory, relativePath, fieldName);\n    const stats = await lstat(resolvedPath);\n    if (!stats.isDirectory() || stats.isSymbolicLink()) {\n      throw new Error(`${fieldName} 必须指向包内普通目录。`);\n    }\n    await access(resolvedPath);\n    return resolvedPath;\n  };\n\n  private resolveInside = (appDirectory: string, relativePath: string, fieldName: string): string => {\n    const normalizedPath = this.normalizeRelativePath(relativePath, fieldName);\n    const resolvedPath = path.resolve(appDirectory, normalizedPath);\n    const relative = path.relative(appDirectory, resolvedPath);\n    if (relative.startsWith(\"..\") || path.isAbsolute(relative)) {\n      throw new Error(`${fieldName} 不能指向应用目录之外。`);\n    }\n    return resolvedPath;\n  };\n\n  private normalizeRelativePath = (relativePath: string, fieldName: string): string => {\n    if (path.isAbsolute(relativePath) || relativePath.includes(\"\\0\")) {\n      throw new Error(`${fieldName} 必须使用包内相对路径。`);\n    }\n    const segments = relativePath.replace(/\\\\/g, \"/\").split(\"/\");\n    if (segments.some((segment) => !segment || segment === \".\" || segment === \"..\")) {\n      throw new Error(`${fieldName} 包含非法路径片段。`);\n    }\n    return segments.join(\"/\");\n  };\n\n  private assertObject = (value: unknown, fieldName: string): Record<string, unknown> => {\n    if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n      throw new Error(`${fieldName} 必须是对象。`);\n    }\n    return value as Record<string, unknown>;\n  };\n\n  private readRequiredString = (value: unknown, fieldName: string): string => {\n    if (typeof value !== \"string\" || !value.trim()) {\n      throw new Error(`${fieldName} 必须是非空字符串。`);\n    }\n    return value.trim();\n  };\n\n  private readOptionalString = (value: unknown, fieldName: string): string | undefined => {\n    return value === undefined ? undefined : this.readRequiredString(value, fieldName);\n  };\n\n  private readNumber = (value: unknown, fieldName: string): number => {\n    if (typeof value !== \"number\" || Number.isNaN(value)) {\n      throw new Error(`${fieldName} 必须是数字。`);\n    }\n    return value;\n  };\n\n  private readBoolean = (value: unknown, fieldName: string): boolean => {\n    if (typeof value !== \"boolean\") {\n      throw new Error(`${fieldName} 必须是布尔值。`);\n    }\n    return value;\n  };\n}\n"],"mappings":";;;AAiBA,MAAM,qBAAqB;AAC3B,MAAM,uBAAuB;AAE7B,IAAa,qBAAb,MAAgC;CAC9B,OAAO,OAAO,iBAAqD;EACjE,MAAM,sBAAsB,KAAK,QAAQ,aAAa;EACtD,MAAM,eAAe,KAAK,KAAK,qBAAqB,gBAAgB;EACpE,MAAM,cAAc,KAAK,MAAM,MAAM,SAAS,cAAc,QAAQ,CAAC;EACrE,MAAM,WAAW,KAAK,cAAc,YAAY;AAChD,SAAO,SAAS,kBAAkB,IAC9B,MAAM,KAAK,qBAAqB,qBAAqB,cAAc,SAAS,GAC5E,MAAM,KAAK,oBAAoB,qBAAqB,cAAc,SAAS;;CAGjF,aAAa,WAAkD;AAC7D,MAAI,OAAO,SAAS,kBAAkB,GAAG;GACvC,MAAM,kBAAkB;AACxB,UAAO;IACL,eAAe;IACf,IAAI,gBAAgB,SAAS;IAC7B,MAAM,gBAAgB,SAAS;IAC/B,SAAS,gBAAgB,SAAS;IAClC,aAAa,gBAAgB,SAAS;IACtC,cAAc,gBAAgB;IAC9B,UAAU,gBAAgB;IAC1B,gBAAgB,gBAAgB;IAChC,YAAY,gBAAgB;IAC5B,UAAU,KAAK,wBAAwB,gBAAgB,SAAS;IACjE;;EAEH,MAAM,mBAAmB;EACzB,MAAM,cAAc,iBAAiB,SAAS,eAAe,EAAE;AAC/D,SAAO;GACL,eAAe;GACf,IAAI,iBAAiB,SAAS;GAC9B,MAAM,iBAAiB,SAAS;GAChC,SAAS,iBAAiB,SAAS;GACnC,aAAa,iBAAiB,SAAS;GACvC,UAAU,iBAAiB,SAAS,KAAK;GACzC,QACE,iBAAiB,SAAS,KAAK,SAAS,SACpC,iBAAiB,SAAS,KAAK,SAC/B,KAAA;GACN,cAAc,iBAAiB;GAC/B,eAAe,iBAAiB;GAChC,aAAa,iBAAiB;GAC9B,UAAU,iBAAiB;GAC3B;GACD;;CAGH,uBAA+B,OAC7B,cACA,cACA,aACyC;EACzC,MAAM,gBAAgB,MAAM,KAAK,mBAC/B,cACA,SAAS,KAAK,OACd,aACD;EACD,MAAM,cAAc,MAAM,KAAK,mBAC7B,cACA,SAAS,GAAG,OACZ,WACD;EACD,MAAM,WAAW,SAAS,OACtB,MAAM,KAAK,mBAAmB,cAAc,SAAS,MAAM,OAAO,GAClE,KAAA;AACJ,SAAO;GACL;GACA;GACA;GACA;GACA;GACA,iBAAiB,KAAK,QAAQ,YAAY;GAC1C,qBAAqB,KAAK,KAAK,cAAc,SAAS;GACtD;GACD;;CAGH,sBAA8B,OAC5B,cACA,cACA,aACwC;EACxC,MAAM,aAAqC,EAAE;AAC7C,OAAK,MAAM,CAAC,OAAO,cAAc,SAAS,WAAW,SAAS,EAAE;GAC9D,MAAM,qBAAqB,MAAM,KAAK,wBACpC,cACA,UAAU,MACV,cAAc,MAAM,QACrB;GACD,MAAM,cAAc,MAAM,KAAK,gBAAgB,WAAW,mBAAmB;GAC7E,MAAM,iBAAiB,GAAG,SAAS,GAAG,QAAQ,eAAe,IAAI,CAAC;AAClE,OAAI,CAAC,YAAY,WAAW,eAAe,CACzC,OAAM,IAAI,MACR,MAAM,YAAY,WAAW,eAAe,GAC7C;AAEH,cAAW,KAAK;IACd,GAAG;IACH,IAAI;IACJ;IACA,cAAc,KAAK,KACjB,oBACA,UAAU,SAAS,UAAU,mBAAmB,mBACjD;IACF,CAAC;;EAEJ,MAAM,cAAc,WAAW,MAC5B,WAAW,UAAU,WAAW,WAAW,UAAU,MAAM,OAAO,UAAU,GAAG,KAAK,MACtF;AACD,MAAI,YACF,OAAM,IAAI,MAAM,wBAAwB,YAAY,KAAK;EAE3D,MAAM,WAAW,WACd,QAAQ,cAAc,UAAU,SAAS,QAAQ,CACjD,KAAK,cAAc,UAAU,GAAG;EACnC,MAAM,uBAAuB,SAAS,cAAc;AACpD,MAAI,wBAAwB,CAAC,SAAS,SAAS,qBAAqB,CAClE,OAAM,IAAI,MAAM,uDAAuD;AAEzE,MAAI,SAAS,SAAS,KAAK,CAAC,qBAC1B,OAAM,IAAI,MAAM,8CAA8C;AAEhE,MAAI,SAAS,WAAW,KAAK,qBAC3B,OAAM,IAAI,MAAM,6CAA6C;EAE/D,MAAM,WAAW,SAAS,OACtB,MAAM,KAAK,mBAAmB,cAAc,SAAS,MAAM,OAAO,GAClE,KAAA;AACJ,SAAO;GACL;GACA;GACA;GACA;GACA,qBAAqB,KAAK,KAAK,cAAc,SAAS;GACtD;GACA,gBAAgB,wBAAwB,SAAS;GAClD;;CAGH,iBAAyB,gBAAsC;EAC7D,MAAM,YAAY,KAAK,aAAa,aAAa,gBAAgB;EACjE,MAAM,gBAAgB,KAAK,WAAW,UAAU,eAAe,gBAAgB;AAC/E,MAAI,kBAAkB,KAAK,kBAAkB,EAC3C,OAAM,IAAI,MAAM,+BAA+B;EAEjD,MAAM,SAAS,KAAK,oBAAoB,UAAU;AAClD,MAAI,kBAAkB,EACpB,QAAO;GACL,eAAe;GACf,GAAG;GACH,MAAM,KAAK,UAAU,UAAU,KAAK;GACpC,IAAI,KAAK,QAAQ,UAAU,GAAG;GAC9B,aAAa,KAAK,iBAAiB,UAAU,YAAY;GAC1D;EAEH,MAAM,aAAa,KAAK,gBAAgB,UAAU,WAAW;EAC7D,MAAM,UAAU,KAAK,aAAa,UAAU,QAAQ;AACpD,OAAK,+BAA+B,SAAS,WAAW;AACxD,SAAO;GACL,eAAe;GACf,GAAG;GACH,SAAS,KAAK,aAAa,UAAU,QAAQ;GAC7C,cAAc,KAAK,kBAAkB,UAAU,aAAa;GAC5D;GACA,SAAS,KAAK,gBAAgB,UAAU,QAAQ;GAChD,aAAa,KAAK,iBAAiB,UAAU,YAAY;GACzD;GACD;;CAGH,2BACE,aAC+B;EAC/B,MAAM,uBAAuB,SAAS,WAAW,MAC9C,cAAc,UAAU,SAAS,UACnC;EACD,MAAM,iBAAiB,SAAS,SAAS,YACvC,uBAAuB,mBAAmB;EAE5C,MAAM,YAAY,mBAAmB,eACjC,cACA,mBAAmB,SACjB,kBACA;EACN,MAAM,sBAAsB,SAAS,eAAe,EAAE;EACtD,MAAM,cAA8B,mBAAmB,mBACnD;GACE,GAAG;GACH,SAAS,oBAAoB,WAAW;GACxC,cAAc;IACZ,GAAG,oBAAoB;IACvB,eAAe;IAChB;GACF,GACD;AACJ,SAAO;GACL;GACA;GACA;GACA,UAAU,SAAS,YAAY,KAAA;GAC/B;GACD;;CAGH,uBAA+B,cAAuC;EACpE,MAAM,KAAK,KAAK,mBAAmB,UAAU,IAAI,KAAK;AACtD,MAAI,CAAC,mBAAmB,KAAK,GAAG,CAC9B,OAAM,IAAI,MAAM,yBAAyB;AAE3C,SAAO;GACL;GACA,MAAM,KAAK,mBAAmB,UAAU,MAAM,OAAO;GACrD,SAAS,KAAK,mBAAmB,UAAU,SAAS,UAAU;GAC9D,aAAa,KAAK,mBAAmB,UAAU,aAAa,cAAc;GAC1E,MAAM,KAAK,mBAAmB,UAAU,MAAM,OAAO;GACtD;;CAGH,aAAqB,YAAoD;EACvE,MAAM,YAAY,KAAK,aAAa,SAAS,OAAO;EACpD,MAAM,OAAO,KAAK,mBAAmB,UAAU,MAAM,YAAY;AACjE,MAAI,SAAS,OACX,QAAO;GACL;GACA,OAAO,KAAK,mBAAmB,UAAU,OAAO,aAAa;GAC7D,QAAQ,KAAK,mBAAmB,UAAU,QAAQ,cAAc;GAChE,QAAQ,KAAK,mBAAmB,UAAU,QAAQ,cAAc;GACjE;AAEH,MAAI,SAAS,sBACX,QAAO;GACL;GACA,OAAO,KAAK,mBAAmB,UAAU,OAAO,aAAa;GAC9D;AAEH,QAAM,IAAI,MAAM,+CAA+C;;CAGjE,WAAmB,UAAgD;EACjE,MAAM,YAAY,KAAK,aAAa,OAAO,KAAK;AAChD,SAAO,EAAE,OAAO,KAAK,mBAAmB,UAAU,OAAO,WAAW,EAAE;;CAGxE,mBAA2B,kBAAoD;AAC7E,MAAI,CAAC,MAAM,QAAQ,cAAc,IAAI,cAAc,WAAW,EAC5D,OAAM,IAAI,MAAM,sBAAsB;EAExC,MAAM,aAAa,cAAc,KAAK,cAAc,UAAU;GAC5D,MAAM,YAAY,KAAK,aAAa,cAAc,cAAc,MAAM,GAAG;GACzE,MAAM,OAAO,KAAK,mBAAmB,UAAU,MAAM,cAAc,MAAM,QAAQ;AACjF,OAAI,SAAS,WAAW,SAAS,UAC/B,OAAM,IAAI,MAAM,cAAc,MAAM,6BAA6B;AAGnE,UAAO;IAD+C;IAGpD,MAAM,KAAK,sBACT,KAAK,mBAAmB,UAAU,MAAM,cAAc,MAAM,QAAQ,EACpE,cAAc,MAAM,QACrB;IACF;IACD;AACF,OAAK,IAAI,YAAY,GAAG,YAAY,WAAW,QAAQ,aAAa,EAClE,MAAK,IAAI,aAAa,YAAY,GAAG,aAAa,WAAW,QAAQ,cAAc,GAAG;GACpF,MAAM,OAAO,WAAW,YAAY;GACpC,MAAM,QAAQ,WAAW,aAAa;AACtC,OAAI,QAAQ,UAAU,SAAS,SAAS,KAAK,WAAW,GAAG,MAAM,GAAG,IAAI,MAAM,WAAW,GAAG,KAAK,GAAG,EAClG,OAAM,IAAI,MAAM,2BAA2B,KAAK,KAAK,QAAQ;;AAInE,SAAO;;CAGT,gBACE,eACoC;AACpC,MAAI,eAAe,KAAA,EACjB;EAEF,MAAM,YAAY,KAAK,aAAa,YAAY,UAAU;AAC1D,SAAO,EAAE,UAAU,KAAK,mBAAmB,UAAU,UAAU,mBAAmB,EAAE;;CAGtF,qBACE,oBACyC;AACzC,MAAI,oBAAoB,KAAA,EACtB;EAEF,MAAM,YAAY,KAAK,aAAa,iBAAiB,eAAe;AACpE,SAAO,EACL,cAAc,KAAK,mBACjB,UAAU,cACV,4BACD,EACF;;CAGH,gBACE,eACoC;AACpC,MAAI,eAAe,KAAA,EACjB;EAEF,MAAM,YAAY,KAAK,aAAa,YAAY,UAAU;EAC1D,MAAM,UAAU,KAAK,mBAAmB,UAAU,SAAS,kBAAkB;AAC7E,MAAI,YAAY,gBAAgB,YAAY,UAAU,YAAY,iBAChE,OAAM,IAAI,MAAM,wDAAwD;AAE1E,SAAO,EAAE,SAAS;;CAGpB,mBACE,eACoC;AACpC,MAAI,eAAe,KAAA,EACjB;EAEF,MAAM,YAAY,KAAK,aAAa,YAAY,UAAU;EAC1D,MAAM,QAAQ,KAAK,mBAAmB,UAAU,OAAO,gBAAgB;AACvE,MAAI,UAAU,SACZ,OAAM,IAAI,MAAM,+BAA+B;EAEjD,MAAM,gBAAgB,KAAK,WAAW,UAAU,eAAe,wBAAwB;AACvF,MAAI,CAAC,OAAO,cAAc,cAAc,IAAI,gBAAgB,EAC1D,OAAM,IAAI,MAAM,gCAAgC;AAElD,SAAO;GAAE;GAAO;GAAe;;CAGjC,kCACE,SACA,eACS;AACT,MAAI,CAAC,QACH;EAEF,MAAM,aAAa,WAAW,MAAM,cAAc,UAAU,SAAS,UAAU;AAC/E,MAAI,QAAQ,YAAY,gBAAgB,WACtC,OAAM,IAAI,MAAM,qDAAqD;AAEvE,MAAI,QAAQ,YAAY,OACtB,OAAM,IAAI,MACR,gHACD;AAEH,MAAI,QAAQ,YAAY,gBAAgB,CAAC,WACvC,OAAM,IAAI,MAAM,GAAG,QAAQ,QAAQ,kCAAkC;;CAIzE,kBAA0B,OACxB,WACA,uBACoB;EACpB,MAAM,eAAe,UAAU,SAAS,UAAU,mBAAmB;EACrE,MAAM,MAAM,KAAK,MACf,MAAM,SAAS,KAAK,KAAK,oBAAoB,aAAa,EAAE,QAAQ,CACrE;EACD,MAAM,WAAW,KAAK,aAAa,KAAK,GAAG,UAAU,KAAK,GAAG,eAAe;EAC5E,MAAM,KAAK,KAAK,mBAAmB,SAAS,IAAI,GAAG,UAAU,KAAK,GAAG,aAAa,KAAK;AACvF,MAAI,CAAC,qBAAqB,KAAK,GAAG,CAChC,OAAM,IAAI,MAAM,wBAAwB,KAAK;EAE/C,MAAM,gBAAgB,KAAK,SAAS,mBAAmB;EACvD,MAAM,aAAa,UAAU,SAAS,UAClC,cAAc,QAAQ,YAAY,GAAG,GACrC;AACJ,MAAI,UAAU,SAAS,WAAW,CAAC,cAAc,SAAS,SAAS,CACjE,OAAM,IAAI,MAAM,mCAAmC,UAAU,OAAO;AAEtE,MAAI,OAAO,WACT,OAAM,IAAI,MAAM,qBAAqB,WAAW,MAAM,KAAK;AAE7D,SAAO;;CAGT,oBAA4B,mBAAwD;AAClF,MAAI,mBAAmB,KAAA,EACrB;EAEF,MAAM,YAAY,KAAK,aAAa,gBAAgB,cAAc;AAClE,SAAO;GACL,gBAAgB,KAAK,oBAAoB,UAAU,eAAe;GAClE,gBAAgB,KAAK,iBAAiB,UAAU,gBAAgB,6BAA6B;GAC7F,SAAS,KAAK,aAAa,UAAU,QAAQ;GAC7C,cAAc,KAAK,kBAAkB,UAAU,aAAa;GAC7D;;CAGH,uBAA+B,sBAAqE;AAClG,MAAI,sBAAsB,KAAA,EACxB;AAEF,MAAI,CAAC,MAAM,QAAQ,kBAAkB,CACnC,OAAM,IAAI,MAAM,oCAAoC;AAEtD,SAAO,kBAAkB,KAAK,OAAO,UAAU;GAC7C,MAAM,YAAY,KAAK,aAAa,OAAO,8BAA8B,MAAM,GAAG;GAClF,MAAM,OAAO,KAAK,mBAAmB,UAAU,MAAM,8BAA8B,MAAM,QAAQ;AACjG,OAAI,SAAS,UAAU,SAAS,aAC9B,OAAM,IAAI,MAAM,8BAA8B,MAAM,+BAA+B;AAErF,UAAO;IACL,IAAI,KAAK,mBAAmB,UAAU,IAAI,8BAA8B,MAAM,MAAM;IACpF;IACA,aAAa,KAAK,mBAChB,UAAU,aACV,8BAA8B,MAAM,eACrC;IACF;IACD;;CAGJ,oBAA4B,UAAmB,cAA4C;AACzF,MAAI,aAAa,KAAA,EACf;AAEF,MAAI,CAAC,MAAM,QAAQ,SAAS,CAC1B,OAAM,IAAI,MAAM,GAAG,UAAU,YAAY;AAE3C,SAAO,SAAS,KAAK,MAAM,UAAU,KAAK,mBAAmB,MAAM,GAAG,UAAU,GAAG,MAAM,GAAG,CAAC;;CAG/F,gBAAwB,eAA+D;AACrF,MAAI,eAAe,KAAA,KAAa,OAAO,eAAe,UACpD,QAAO;EAET,MAAM,YAAY,KAAK,aAAa,YAAY,sBAAsB;AACtE,SAAO,EAAE,WAAW,KAAK,mBAAmB,UAAU,WAAW,gCAAgC,EAAE;;CAGrG,qBAA6B,oBAAyE;AACpG,MAAI,oBAAoB,KAAA,EACtB;EAEF,MAAM,YAAY,KAAK,aAAa,iBAAiB,2BAA2B;AAChF,SAAO;GACL,YAAY,UAAU,eAAe,KAAA,IACjC,KAAA,IACA,KAAK,YAAY,UAAU,YAAY,sCAAsC;GACjF,eAAe,UAAU,kBAAkB,KAAA,IACvC,KAAA,IACA,KAAK,YAAY,UAAU,eAAe,yCAAyC;GACxF;;CAGH,qBAA6B,OAC3B,cACA,cACA,cACoB;EACpB,MAAM,eAAe,KAAK,cAAc,cAAc,cAAc,UAAU;EAC9E,MAAM,QAAQ,MAAM,MAAM,aAAa;AACvC,MAAI,CAAC,MAAM,QAAQ,IAAI,MAAM,gBAAgB,CAC3C,OAAM,IAAI,MAAM,GAAG,UAAU,cAAc;AAE7C,SAAO;;CAGT,0BAAkC,OAChC,cACA,cACA,cACoB;EACpB,MAAM,eAAe,KAAK,cAAc,cAAc,cAAc,UAAU;EAC9E,MAAM,QAAQ,MAAM,MAAM,aAAa;AACvC,MAAI,CAAC,MAAM,aAAa,IAAI,MAAM,gBAAgB,CAChD,OAAM,IAAI,MAAM,GAAG,UAAU,cAAc;AAE7C,QAAM,OAAO,aAAa;AAC1B,SAAO;;CAGT,iBAAyB,cAAsB,cAAsB,cAA8B;EACjG,MAAM,iBAAiB,KAAK,sBAAsB,cAAc,UAAU;EAC1E,MAAM,eAAe,KAAK,QAAQ,cAAc,eAAe;EAC/D,MAAM,WAAW,KAAK,SAAS,cAAc,aAAa;AAC1D,MAAI,SAAS,WAAW,KAAK,IAAI,KAAK,WAAW,SAAS,CACxD,OAAM,IAAI,MAAM,GAAG,UAAU,cAAc;AAE7C,SAAO;;CAGT,yBAAiC,cAAsB,cAA8B;AACnF,MAAI,KAAK,WAAW,aAAa,IAAI,aAAa,SAAS,KAAK,CAC9D,OAAM,IAAI,MAAM,GAAG,UAAU,cAAc;EAE7C,MAAM,WAAW,aAAa,QAAQ,OAAO,IAAI,CAAC,MAAM,IAAI;AAC5D,MAAI,SAAS,MAAM,YAAY,CAAC,WAAW,YAAY,OAAO,YAAY,KAAK,CAC7E,OAAM,IAAI,MAAM,GAAG,UAAU,YAAY;AAE3C,SAAO,SAAS,KAAK,IAAI;;CAG3B,gBAAwB,OAAgB,cAA+C;AACrF,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,OAAM,IAAI,MAAM,GAAG,UAAU,SAAS;AAExC,SAAO;;CAGT,sBAA8B,OAAgB,cAA8B;AAC1E,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,MAAM,CAC5C,OAAM,IAAI,MAAM,GAAG,UAAU,YAAY;AAE3C,SAAO,MAAM,MAAM;;CAGrB,sBAA8B,OAAgB,cAA0C;AACtF,SAAO,UAAU,KAAA,IAAY,KAAA,IAAY,KAAK,mBAAmB,OAAO,UAAU;;CAGpF,cAAsB,OAAgB,cAA8B;AAClE,MAAI,OAAO,UAAU,YAAY,OAAO,MAAM,MAAM,CAClD,OAAM,IAAI,MAAM,GAAG,UAAU,SAAS;AAExC,SAAO;;CAGT,eAAuB,OAAgB,cAA+B;AACpE,MAAI,OAAO,UAAU,UACnB,OAAM,IAAI,MAAM,GAAG,UAAU,UAAU;AAEzC,SAAO"}
+{"version":3,"file":"app-manifest.service.js","names":[],"sources":["../../src/services/app-manifest.service.ts"],"sourcesContent":["import { access, lstat, readFile } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { AppPlatformTargetService } from \"#app-runtime/services/app-platform-target.service.js\";\nimport type {\n  AppComponentManifest,\n  AppComponentManifestBundle,\n  AppComponentReference,\n  AppDocumentAccessScope,\n  AppManifest,\n  AppManifestBundle,\n  AppManifestSummary,\n  AppPermissions,\n  AppPlatformSecuritySummary,\n  AppResolvedComponent,\n  AppStandaloneManifest,\n  AppStandaloneManifestBundle,\n} from \"#app-runtime/types/app-manifest.types.js\";\n\nconst PACKAGE_ID_PATTERN = /^[a-z0-9]+(?:[.-][a-z0-9]+)*$/;\nconst COMPONENT_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\n\nexport class AppManifestService {\n  constructor(\n    private readonly platformTargetService = new AppPlatformTargetService(),\n  ) {}\n\n  load = async (appDirectory: string): Promise<AppManifestBundle> => {\n    const normalizedDirectory = path.resolve(appDirectory);\n    const manifestPath = path.join(normalizedDirectory, \"manifest.json\");\n    const rawManifest = JSON.parse(await readFile(manifestPath, \"utf-8\")) as unknown;\n    const manifest = this.parseManifest(rawManifest);\n    return manifest.schemaVersion === 1\n      ? await this.loadStandaloneBundle(normalizedDirectory, manifestPath, manifest)\n      : await this.loadComponentBundle(normalizedDirectory, manifestPath, manifest);\n  };\n\n  summarize = (bundle: AppManifestBundle): AppManifestSummary => {\n    if (bundle.manifest.schemaVersion === 2) {\n      const componentBundle = bundle as AppComponentManifestBundle;\n      return {\n        schemaVersion: 2,\n        id: componentBundle.manifest.id,\n        name: componentBundle.manifest.name,\n        version: componentBundle.manifest.version,\n        description: componentBundle.manifest.description,\n        manifestPath: componentBundle.manifestPath,\n        iconPath: componentBundle.iconPath,\n        primaryPanelId: componentBundle.primaryPanelId,\n        components: componentBundle.components,\n        distribution: this.platformTargetService.resolveDistribution(\n          componentBundle.manifest.distribution,\n        ),\n        security: this.resolvePlatformSecurity(componentBundle.manifest),\n      };\n    }\n    const standaloneBundle = bundle as AppStandaloneManifestBundle;\n    const permissions = standaloneBundle.manifest.permissions ?? {};\n    return {\n      schemaVersion: 1,\n      id: standaloneBundle.manifest.id,\n      name: standaloneBundle.manifest.name,\n      version: standaloneBundle.manifest.version,\n      description: standaloneBundle.manifest.description,\n      mainKind: standaloneBundle.manifest.main.kind,\n      action:\n        standaloneBundle.manifest.main.kind === \"wasm\"\n          ? standaloneBundle.manifest.main.action\n          : undefined,\n      manifestPath: standaloneBundle.manifestPath,\n      mainEntryPath: standaloneBundle.mainEntryPath,\n      uiEntryPath: standaloneBundle.uiEntryPath,\n      iconPath: standaloneBundle.iconPath,\n      permissions,\n    };\n  };\n\n  private loadStandaloneBundle = async (\n    appDirectory: string,\n    manifestPath: string,\n    manifest: AppStandaloneManifest,\n  ): Promise<AppStandaloneManifestBundle> => {\n    const mainEntryPath = await this.assertResolvedFile(\n      appDirectory,\n      manifest.main.entry,\n      \"main.entry\",\n    );\n    const uiEntryPath = await this.assertResolvedFile(\n      appDirectory,\n      manifest.ui.entry,\n      \"ui.entry\",\n    );\n    const iconPath = manifest.icon\n      ? await this.assertResolvedFile(appDirectory, manifest.icon, \"icon\")\n      : undefined;\n    return {\n      appDirectory,\n      manifestPath,\n      manifest,\n      mainEntryPath,\n      uiEntryPath,\n      uiDirectoryPath: path.dirname(uiEntryPath),\n      assetsDirectoryPath: path.join(appDirectory, \"assets\"),\n      iconPath,\n    };\n  };\n\n  private loadComponentBundle = async (\n    appDirectory: string,\n    manifestPath: string,\n    manifest: AppComponentManifest,\n  ): Promise<AppComponentManifestBundle> => {\n    const components: AppResolvedComponent[] = [];\n    for (const [index, component] of manifest.components.entries()) {\n      const componentDirectory = await this.assertResolvedDirectory(\n        appDirectory,\n        component.path,\n        `components[${index}].path`,\n      );\n      const componentId = await this.readComponentId(component, componentDirectory);\n      const expectedPrefix = `${manifest.id.replace(/[^a-z0-9]+/g, \"-\")}-`;\n      if (!componentId.startsWith(expectedPrefix)) {\n        throw new Error(\n          `组件 ${componentId} 必须使用包前缀 ${expectedPrefix}。`,\n        );\n      }\n      components.push({\n        ...component,\n        id: componentId,\n        componentDirectory,\n        manifestPath: path.join(\n          componentDirectory,\n          component.kind === \"panel\" ? \"panel-app.json\" : \"service-app.json\",\n        ),\n      });\n    }\n    const duplicateId = components.find(\n      (component, index) => components.findIndex((entry) => entry.id === component.id) !== index,\n    );\n    if (duplicateId) {\n      throw new Error(`components 包含重复组件 id：${duplicateId.id}`);\n    }\n    const panelIds = components\n      .filter((component) => component.kind === \"panel\")\n      .map((component) => component.id);\n    const declaredPrimaryPanel = manifest.presentation?.primaryPanel;\n    if (declaredPrimaryPanel && !panelIds.includes(declaredPrimaryPanel)) {\n      throw new Error(\"presentation.primaryPanel 必须引用真实 Panel component id。\");\n    }\n    if (panelIds.length > 1 && !declaredPrimaryPanel) {\n      throw new Error(\"包含多个 Panel 时必须声明 presentation.primaryPanel。\");\n    }\n    if (panelIds.length === 0 && declaredPrimaryPanel) {\n      throw new Error(\"不含 Panel 的包不能声明 presentation.primaryPanel。\");\n    }\n    const iconPath = manifest.icon\n      ? await this.assertResolvedFile(appDirectory, manifest.icon, \"icon\")\n      : undefined;\n    return {\n      appDirectory,\n      manifestPath,\n      manifest,\n      components,\n      assetsDirectoryPath: path.join(appDirectory, \"assets\"),\n      iconPath,\n      primaryPanelId: declaredPrimaryPanel ?? panelIds[0],\n    };\n  };\n\n  private parseManifest = (rawManifest: unknown): AppManifest => {\n    const candidate = this.assertObject(rawManifest, \"manifest.json\");\n    const schemaVersion = this.readNumber(candidate.schemaVersion, \"schemaVersion\");\n    if (schemaVersion !== 1 && schemaVersion !== 2) {\n      throw new Error(\"当前只支持 schemaVersion = 1 或 2。\");\n    }\n    const common = this.parseCommonManifest(candidate);\n    if (schemaVersion === 1) {\n      return {\n        schemaVersion: 1,\n        ...common,\n        main: this.parseMain(candidate.main),\n        ui: this.parseUi(candidate.ui),\n        permissions: this.parsePermissions(candidate.permissions),\n      };\n    }\n    const components = this.parseComponents(candidate.components);\n    const runtime = this.parseRuntime(candidate.runtime);\n    this.assertRuntimeMatchesComponents(runtime, components);\n    return {\n      schemaVersion: 2,\n      ...common,\n      engines: this.parseEngines(candidate.engines),\n      presentation: this.parsePresentation(candidate.presentation),\n      runtime,\n      distribution: this.platformTargetService.parseDistribution(candidate.distribution),\n      storage: this.parseAppStorage(candidate.storage),\n      permissions: this.parsePermissions(candidate.permissions),\n      components,\n    };\n  };\n\n  resolvePlatformSecurity = (\n    manifest: AppComponentManifest,\n  ): AppPlatformSecuritySummary => {\n    const hasServiceComponents = manifest.components.some(\n      (component) => component.kind === \"service\",\n    );\n    const runtimeProfile = manifest.runtime?.profile ?? (\n      hasServiceComponents ? \"native-process\" : \"panel-only\"\n    );\n    const isolation = runtimeProfile === \"panel-only\"\n      ? \"sandboxed\"\n      : runtimeProfile === \"wasi\"\n        ? \"host-mediated\"\n        : \"full-user\";\n    const declaredPermissions = manifest.permissions ?? {};\n    const permissions: AppPermissions = runtimeProfile === \"native-process\"\n      ? {\n          ...declaredPermissions,\n          storage: declaredPermissions.storage ?? true,\n          capabilities: {\n            ...declaredPermissions.capabilities,\n            nativeProcess: true,\n          },\n        }\n      : declaredPermissions;\n    return {\n      runtimeProfile,\n      isolation,\n      hasServiceComponents,\n      inferred: manifest.runtime === undefined,\n      permissions,\n    };\n  };\n\n  private parseCommonManifest = (candidate: Record<string, unknown>) => {\n    const id = this.readRequiredString(candidate.id, \"id\");\n    if (!PACKAGE_ID_PATTERN.test(id)) {\n      throw new Error(\"id 必须由小写字母、数字、点或连字符组成。\");\n    }\n    return {\n      id,\n      name: this.readRequiredString(candidate.name, \"name\"),\n      version: this.readRequiredString(candidate.version, \"version\"),\n      description: this.readOptionalString(candidate.description, \"description\"),\n      icon: this.readOptionalString(candidate.icon, \"icon\"),\n    };\n  };\n\n  private parseMain = (rawMain: unknown): AppStandaloneManifest[\"main\"] => {\n    const candidate = this.assertObject(rawMain, \"main\");\n    const kind = this.readRequiredString(candidate.kind, \"main.kind\");\n    if (kind === \"wasm\") {\n      return {\n        kind,\n        entry: this.readRequiredString(candidate.entry, \"main.entry\"),\n        export: this.readRequiredString(candidate.export, \"main.export\"),\n        action: this.readRequiredString(candidate.action, \"main.action\"),\n      };\n    }\n    if (kind === \"wasi-http-component\") {\n      return {\n        kind,\n        entry: this.readRequiredString(candidate.entry, \"main.entry\"),\n      };\n    }\n    throw new Error(\"当前 main.kind 只支持 wasm 或 wasi-http-component。\");\n  };\n\n  private parseUi = (rawUi: unknown): AppStandaloneManifest[\"ui\"] => {\n    const candidate = this.assertObject(rawUi, \"ui\");\n    return { entry: this.readRequiredString(candidate.entry, \"ui.entry\") };\n  };\n\n  private parseComponents = (rawComponents: unknown): AppComponentReference[] => {\n    if (!Array.isArray(rawComponents) || rawComponents.length === 0) {\n      throw new Error(\"components 必须是非空数组。\");\n    }\n    const components = rawComponents.map((rawComponent, index) => {\n      const candidate = this.assertObject(rawComponent, `components[${index}]`);\n      const kind = this.readRequiredString(candidate.kind, `components[${index}].kind`);\n      if (kind !== \"panel\" && kind !== \"service\") {\n        throw new Error(`components[${index}].kind 只支持 panel 或 service。`);\n      }\n      const normalizedKind: AppComponentReference[\"kind\"] = kind;\n      return {\n        kind: normalizedKind,\n        path: this.normalizeRelativePath(\n          this.readRequiredString(candidate.path, `components[${index}].path`),\n          `components[${index}].path`,\n        ),\n      };\n    });\n    for (let leftIndex = 0; leftIndex < components.length; leftIndex += 1) {\n      for (let rightIndex = leftIndex + 1; rightIndex < components.length; rightIndex += 1) {\n        const left = components[leftIndex]?.path;\n        const right = components[rightIndex]?.path;\n        if (left && right && (left === right || left.startsWith(`${right}/`) || right.startsWith(`${left}/`))) {\n          throw new Error(`components path 不能重复或重叠：${left} / ${right}`);\n        }\n      }\n    }\n    return components;\n  };\n\n  private parseEngines = (\n    rawEngines: unknown,\n  ): AppComponentManifest[\"engines\"] => {\n    if (rawEngines === undefined) {\n      return undefined;\n    }\n    const candidate = this.assertObject(rawEngines, \"engines\");\n    return { nextclaw: this.readOptionalString(candidate.nextclaw, \"engines.nextclaw\") };\n  };\n\n  private parsePresentation = (\n    rawPresentation: unknown,\n  ): AppComponentManifest[\"presentation\"] => {\n    if (rawPresentation === undefined) {\n      return undefined;\n    }\n    const candidate = this.assertObject(rawPresentation, \"presentation\");\n    return {\n      primaryPanel: this.readOptionalString(\n        candidate.primaryPanel,\n        \"presentation.primaryPanel\",\n      ),\n    };\n  };\n\n  private parseRuntime = (\n    rawRuntime: unknown,\n  ): AppComponentManifest[\"runtime\"] => {\n    if (rawRuntime === undefined) {\n      return undefined;\n    }\n    const candidate = this.assertObject(rawRuntime, \"runtime\");\n    const profile = this.readRequiredString(candidate.profile, \"runtime.profile\");\n    if (profile !== \"panel-only\" && profile !== \"wasi\" && profile !== \"native-process\") {\n      throw new Error(\"runtime.profile 只支持 panel-only、wasi 或 native-process。\");\n    }\n    return { profile };\n  };\n\n  private parseAppStorage = (\n    rawStorage: unknown,\n  ): AppComponentManifest[\"storage\"] => {\n    if (rawStorage === undefined) {\n      return undefined;\n    }\n    const candidate = this.assertObject(rawStorage, \"storage\");\n    const scope = this.readRequiredString(candidate.scope, \"storage.scope\");\n    if (scope !== \"global\") {\n      throw new Error(\"当前 storage.scope 只支持 global。\");\n    }\n    const schemaVersion = this.readNumber(candidate.schemaVersion, \"storage.schemaVersion\");\n    if (!Number.isSafeInteger(schemaVersion) || schemaVersion < 1) {\n      throw new Error(\"storage.schemaVersion 必须是正整数。\");\n    }\n    return { scope, schemaVersion };\n  };\n\n  private assertRuntimeMatchesComponents = (\n    runtime: AppComponentManifest[\"runtime\"],\n    components: AppComponentReference[],\n  ): void => {\n    if (!runtime) {\n      return;\n    }\n    const hasService = components.some((component) => component.kind === \"service\");\n    if (runtime.profile === \"panel-only\" && hasService) {\n      throw new Error(\"runtime.profile=panel-only 不能包含 Service component。\");\n    }\n    if (runtime.profile === \"wasi\") {\n      throw new Error(\n        \"schema v2 Service component 尚不支持 WASI runtime；当前 Service App 合同会启动宿主进程，请使用 native-process，或改为 panel-only App。\",\n      );\n    }\n    if (runtime.profile !== \"panel-only\" && !hasService) {\n      throw new Error(`${runtime.profile} runtime 必须包含 Service component。`);\n    }\n  };\n\n  private readComponentId = async (\n    component: AppComponentReference,\n    componentDirectory: string,\n  ): Promise<string> => {\n    const manifestFile = component.kind === \"panel\" ? \"panel-app.json\" : \"service-app.json\";\n    const raw = JSON.parse(\n      await readFile(path.join(componentDirectory, manifestFile), \"utf-8\"),\n    ) as unknown;\n    const manifest = this.assertObject(raw, `${component.path}/${manifestFile}`);\n    const id = this.readRequiredString(manifest.id, `${component.path}/${manifestFile}.id`);\n    if (!COMPONENT_ID_PATTERN.test(id)) {\n      throw new Error(`组件 id 必须是 kebab-case：${id}`);\n    }\n    const directoryName = path.basename(componentDirectory);\n    const expectedId = component.kind === \"panel\"\n      ? directoryName.replace(/\\.panel$/, \"\")\n      : directoryName;\n    if (component.kind === \"panel\" && !directoryName.endsWith(\".panel\")) {\n      throw new Error(`Panel component 目录必须以 .panel 结尾：${component.path}`);\n    }\n    if (id !== expectedId) {\n      throw new Error(`组件 id 必须与目录名一致：期望 ${expectedId}，实际 ${id}`);\n    }\n    return id;\n  };\n\n  private parsePermissions = (rawPermissions: unknown): AppPermissions | undefined => {\n    if (rawPermissions === undefined) {\n      return undefined;\n    }\n    const candidate = this.assertObject(rawPermissions, \"permissions\");\n    return {\n      documentAccess: this.parseDocumentAccess(candidate.documentAccess),\n      allowedDomains: this.parseStringArray(candidate.allowedDomains, \"permissions.allowedDomains\"),\n      storage: this.parseStorage(candidate.storage),\n      capabilities: this.parseCapabilities(candidate.capabilities),\n    };\n  };\n\n  private parseDocumentAccess = (rawDocumentAccess: unknown): AppDocumentAccessScope[] | undefined => {\n    if (rawDocumentAccess === undefined) {\n      return undefined;\n    }\n    if (!Array.isArray(rawDocumentAccess)) {\n      throw new Error(\"permissions.documentAccess 必须是数组。\");\n    }\n    return rawDocumentAccess.map((scope, index) => {\n      const candidate = this.assertObject(scope, `permissions.documentAccess[${index}]`);\n      const mode = this.readRequiredString(candidate.mode, `permissions.documentAccess[${index}].mode`);\n      if (mode !== \"read\" && mode !== \"read-write\") {\n        throw new Error(`permissions.documentAccess[${index}].mode 只支持 read 或 read-write。`);\n      }\n      return {\n        id: this.readRequiredString(candidate.id, `permissions.documentAccess[${index}].id`),\n        mode,\n        description: this.readOptionalString(\n          candidate.description,\n          `permissions.documentAccess[${index}].description`,\n        ),\n      };\n    });\n  };\n\n  private parseStringArray = (rawValue: unknown, fieldName: string): string[] | undefined => {\n    if (rawValue === undefined) {\n      return undefined;\n    }\n    if (!Array.isArray(rawValue)) {\n      throw new Error(`${fieldName} 必须是字符串数组。`);\n    }\n    return rawValue.map((item, index) => this.readRequiredString(item, `${fieldName}[${index}]`));\n  };\n\n  private parseStorage = (rawStorage: unknown): AppPermissions[\"storage\"] | undefined => {\n    if (rawStorage === undefined || typeof rawStorage === \"boolean\") {\n      return rawStorage;\n    }\n    const candidate = this.assertObject(rawStorage, \"permissions.storage\");\n    return { namespace: this.readOptionalString(candidate.namespace, \"permissions.storage.namespace\") };\n  };\n\n  private parseCapabilities = (rawCapabilities: unknown): AppPermissions[\"capabilities\"] | undefined => {\n    if (rawCapabilities === undefined) {\n      return undefined;\n    }\n    const candidate = this.assertObject(rawCapabilities, \"permissions.capabilities\");\n    return {\n      hostBridge: candidate.hostBridge === undefined\n        ? undefined\n        : this.readBoolean(candidate.hostBridge, \"permissions.capabilities.hostBridge\"),\n      nativeProcess: candidate.nativeProcess === undefined\n        ? undefined\n        : this.readBoolean(candidate.nativeProcess, \"permissions.capabilities.nativeProcess\"),\n    };\n  };\n\n  private assertResolvedFile = async (\n    appDirectory: string,\n    relativePath: string,\n    fieldName: string,\n  ): Promise<string> => {\n    const resolvedPath = this.resolveInside(appDirectory, relativePath, fieldName);\n    const stats = await lstat(resolvedPath);\n    if (!stats.isFile() || stats.isSymbolicLink()) {\n      throw new Error(`${fieldName} 必须指向包内普通文件。`);\n    }\n    return resolvedPath;\n  };\n\n  private assertResolvedDirectory = async (\n    appDirectory: string,\n    relativePath: string,\n    fieldName: string,\n  ): Promise<string> => {\n    const resolvedPath = this.resolveInside(appDirectory, relativePath, fieldName);\n    const stats = await lstat(resolvedPath);\n    if (!stats.isDirectory() || stats.isSymbolicLink()) {\n      throw new Error(`${fieldName} 必须指向包内普通目录。`);\n    }\n    await access(resolvedPath);\n    return resolvedPath;\n  };\n\n  private resolveInside = (appDirectory: string, relativePath: string, fieldName: string): string => {\n    const normalizedPath = this.normalizeRelativePath(relativePath, fieldName);\n    const resolvedPath = path.resolve(appDirectory, normalizedPath);\n    const relative = path.relative(appDirectory, resolvedPath);\n    if (relative.startsWith(\"..\") || path.isAbsolute(relative)) {\n      throw new Error(`${fieldName} 不能指向应用目录之外。`);\n    }\n    return resolvedPath;\n  };\n\n  private normalizeRelativePath = (relativePath: string, fieldName: string): string => {\n    if (path.isAbsolute(relativePath) || relativePath.includes(\"\\0\")) {\n      throw new Error(`${fieldName} 必须使用包内相对路径。`);\n    }\n    const segments = relativePath.replace(/\\\\/g, \"/\").split(\"/\");\n    if (segments.some((segment) => !segment || segment === \".\" || segment === \"..\")) {\n      throw new Error(`${fieldName} 包含非法路径片段。`);\n    }\n    return segments.join(\"/\");\n  };\n\n  private assertObject = (value: unknown, fieldName: string): Record<string, unknown> => {\n    if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n      throw new Error(`${fieldName} 必须是对象。`);\n    }\n    return value as Record<string, unknown>;\n  };\n\n  private readRequiredString = (value: unknown, fieldName: string): string => {\n    if (typeof value !== \"string\" || !value.trim()) {\n      throw new Error(`${fieldName} 必须是非空字符串。`);\n    }\n    return value.trim();\n  };\n\n  private readOptionalString = (value: unknown, fieldName: string): string | undefined => {\n    return value === undefined ? undefined : this.readRequiredString(value, fieldName);\n  };\n\n  private readNumber = (value: unknown, fieldName: string): number => {\n    if (typeof value !== \"number\" || Number.isNaN(value)) {\n      throw new Error(`${fieldName} 必须是数字。`);\n    }\n    return value;\n  };\n\n  private readBoolean = (value: unknown, fieldName: string): boolean => {\n    if (typeof value !== \"boolean\") {\n      throw new Error(`${fieldName} 必须是布尔值。`);\n    }\n    return value;\n  };\n}\n"],"mappings":";;;;AAkBA,MAAM,qBAAqB;AAC3B,MAAM,uBAAuB;AAE7B,IAAa,qBAAb,MAAgC;CAC9B,YACE,wBAAyC,IAAI,0BAA0B,EACvE;AADiB,OAAA,wBAAA;;CAGnB,OAAO,OAAO,iBAAqD;EACjE,MAAM,sBAAsB,KAAK,QAAQ,aAAa;EACtD,MAAM,eAAe,KAAK,KAAK,qBAAqB,gBAAgB;EACpE,MAAM,cAAc,KAAK,MAAM,MAAM,SAAS,cAAc,QAAQ,CAAC;EACrE,MAAM,WAAW,KAAK,cAAc,YAAY;AAChD,SAAO,SAAS,kBAAkB,IAC9B,MAAM,KAAK,qBAAqB,qBAAqB,cAAc,SAAS,GAC5E,MAAM,KAAK,oBAAoB,qBAAqB,cAAc,SAAS;;CAGjF,aAAa,WAAkD;AAC7D,MAAI,OAAO,SAAS,kBAAkB,GAAG;GACvC,MAAM,kBAAkB;AACxB,UAAO;IACL,eAAe;IACf,IAAI,gBAAgB,SAAS;IAC7B,MAAM,gBAAgB,SAAS;IAC/B,SAAS,gBAAgB,SAAS;IAClC,aAAa,gBAAgB,SAAS;IACtC,cAAc,gBAAgB;IAC9B,UAAU,gBAAgB;IAC1B,gBAAgB,gBAAgB;IAChC,YAAY,gBAAgB;IAC5B,cAAc,KAAK,sBAAsB,oBACvC,gBAAgB,SAAS,aAC1B;IACD,UAAU,KAAK,wBAAwB,gBAAgB,SAAS;IACjE;;EAEH,MAAM,mBAAmB;EACzB,MAAM,cAAc,iBAAiB,SAAS,eAAe,EAAE;AAC/D,SAAO;GACL,eAAe;GACf,IAAI,iBAAiB,SAAS;GAC9B,MAAM,iBAAiB,SAAS;GAChC,SAAS,iBAAiB,SAAS;GACnC,aAAa,iBAAiB,SAAS;GACvC,UAAU,iBAAiB,SAAS,KAAK;GACzC,QACE,iBAAiB,SAAS,KAAK,SAAS,SACpC,iBAAiB,SAAS,KAAK,SAC/B,KAAA;GACN,cAAc,iBAAiB;GAC/B,eAAe,iBAAiB;GAChC,aAAa,iBAAiB;GAC9B,UAAU,iBAAiB;GAC3B;GACD;;CAGH,uBAA+B,OAC7B,cACA,cACA,aACyC;EACzC,MAAM,gBAAgB,MAAM,KAAK,mBAC/B,cACA,SAAS,KAAK,OACd,aACD;EACD,MAAM,cAAc,MAAM,KAAK,mBAC7B,cACA,SAAS,GAAG,OACZ,WACD;EACD,MAAM,WAAW,SAAS,OACtB,MAAM,KAAK,mBAAmB,cAAc,SAAS,MAAM,OAAO,GAClE,KAAA;AACJ,SAAO;GACL;GACA;GACA;GACA;GACA;GACA,iBAAiB,KAAK,QAAQ,YAAY;GAC1C,qBAAqB,KAAK,KAAK,cAAc,SAAS;GACtD;GACD;;CAGH,sBAA8B,OAC5B,cACA,cACA,aACwC;EACxC,MAAM,aAAqC,EAAE;AAC7C,OAAK,MAAM,CAAC,OAAO,cAAc,SAAS,WAAW,SAAS,EAAE;GAC9D,MAAM,qBAAqB,MAAM,KAAK,wBACpC,cACA,UAAU,MACV,cAAc,MAAM,QACrB;GACD,MAAM,cAAc,MAAM,KAAK,gBAAgB,WAAW,mBAAmB;GAC7E,MAAM,iBAAiB,GAAG,SAAS,GAAG,QAAQ,eAAe,IAAI,CAAC;AAClE,OAAI,CAAC,YAAY,WAAW,eAAe,CACzC,OAAM,IAAI,MACR,MAAM,YAAY,WAAW,eAAe,GAC7C;AAEH,cAAW,KAAK;IACd,GAAG;IACH,IAAI;IACJ;IACA,cAAc,KAAK,KACjB,oBACA,UAAU,SAAS,UAAU,mBAAmB,mBACjD;IACF,CAAC;;EAEJ,MAAM,cAAc,WAAW,MAC5B,WAAW,UAAU,WAAW,WAAW,UAAU,MAAM,OAAO,UAAU,GAAG,KAAK,MACtF;AACD,MAAI,YACF,OAAM,IAAI,MAAM,wBAAwB,YAAY,KAAK;EAE3D,MAAM,WAAW,WACd,QAAQ,cAAc,UAAU,SAAS,QAAQ,CACjD,KAAK,cAAc,UAAU,GAAG;EACnC,MAAM,uBAAuB,SAAS,cAAc;AACpD,MAAI,wBAAwB,CAAC,SAAS,SAAS,qBAAqB,CAClE,OAAM,IAAI,MAAM,uDAAuD;AAEzE,MAAI,SAAS,SAAS,KAAK,CAAC,qBAC1B,OAAM,IAAI,MAAM,8CAA8C;AAEhE,MAAI,SAAS,WAAW,KAAK,qBAC3B,OAAM,IAAI,MAAM,6CAA6C;EAE/D,MAAM,WAAW,SAAS,OACtB,MAAM,KAAK,mBAAmB,cAAc,SAAS,MAAM,OAAO,GAClE,KAAA;AACJ,SAAO;GACL;GACA;GACA;GACA;GACA,qBAAqB,KAAK,KAAK,cAAc,SAAS;GACtD;GACA,gBAAgB,wBAAwB,SAAS;GAClD;;CAGH,iBAAyB,gBAAsC;EAC7D,MAAM,YAAY,KAAK,aAAa,aAAa,gBAAgB;EACjE,MAAM,gBAAgB,KAAK,WAAW,UAAU,eAAe,gBAAgB;AAC/E,MAAI,kBAAkB,KAAK,kBAAkB,EAC3C,OAAM,IAAI,MAAM,+BAA+B;EAEjD,MAAM,SAAS,KAAK,oBAAoB,UAAU;AAClD,MAAI,kBAAkB,EACpB,QAAO;GACL,eAAe;GACf,GAAG;GACH,MAAM,KAAK,UAAU,UAAU,KAAK;GACpC,IAAI,KAAK,QAAQ,UAAU,GAAG;GAC9B,aAAa,KAAK,iBAAiB,UAAU,YAAY;GAC1D;EAEH,MAAM,aAAa,KAAK,gBAAgB,UAAU,WAAW;EAC7D,MAAM,UAAU,KAAK,aAAa,UAAU,QAAQ;AACpD,OAAK,+BAA+B,SAAS,WAAW;AACxD,SAAO;GACL,eAAe;GACf,GAAG;GACH,SAAS,KAAK,aAAa,UAAU,QAAQ;GAC7C,cAAc,KAAK,kBAAkB,UAAU,aAAa;GAC5D;GACA,cAAc,KAAK,sBAAsB,kBAAkB,UAAU,aAAa;GAClF,SAAS,KAAK,gBAAgB,UAAU,QAAQ;GAChD,aAAa,KAAK,iBAAiB,UAAU,YAAY;GACzD;GACD;;CAGH,2BACE,aAC+B;EAC/B,MAAM,uBAAuB,SAAS,WAAW,MAC9C,cAAc,UAAU,SAAS,UACnC;EACD,MAAM,iBAAiB,SAAS,SAAS,YACvC,uBAAuB,mBAAmB;EAE5C,MAAM,YAAY,mBAAmB,eACjC,cACA,mBAAmB,SACjB,kBACA;EACN,MAAM,sBAAsB,SAAS,eAAe,EAAE;EACtD,MAAM,cAA8B,mBAAmB,mBACnD;GACE,GAAG;GACH,SAAS,oBAAoB,WAAW;GACxC,cAAc;IACZ,GAAG,oBAAoB;IACvB,eAAe;IAChB;GACF,GACD;AACJ,SAAO;GACL;GACA;GACA;GACA,UAAU,SAAS,YAAY,KAAA;GAC/B;GACD;;CAGH,uBAA+B,cAAuC;EACpE,MAAM,KAAK,KAAK,mBAAmB,UAAU,IAAI,KAAK;AACtD,MAAI,CAAC,mBAAmB,KAAK,GAAG,CAC9B,OAAM,IAAI,MAAM,yBAAyB;AAE3C,SAAO;GACL;GACA,MAAM,KAAK,mBAAmB,UAAU,MAAM,OAAO;GACrD,SAAS,KAAK,mBAAmB,UAAU,SAAS,UAAU;GAC9D,aAAa,KAAK,mBAAmB,UAAU,aAAa,cAAc;GAC1E,MAAM,KAAK,mBAAmB,UAAU,MAAM,OAAO;GACtD;;CAGH,aAAqB,YAAoD;EACvE,MAAM,YAAY,KAAK,aAAa,SAAS,OAAO;EACpD,MAAM,OAAO,KAAK,mBAAmB,UAAU,MAAM,YAAY;AACjE,MAAI,SAAS,OACX,QAAO;GACL;GACA,OAAO,KAAK,mBAAmB,UAAU,OAAO,aAAa;GAC7D,QAAQ,KAAK,mBAAmB,UAAU,QAAQ,cAAc;GAChE,QAAQ,KAAK,mBAAmB,UAAU,QAAQ,cAAc;GACjE;AAEH,MAAI,SAAS,sBACX,QAAO;GACL;GACA,OAAO,KAAK,mBAAmB,UAAU,OAAO,aAAa;GAC9D;AAEH,QAAM,IAAI,MAAM,+CAA+C;;CAGjE,WAAmB,UAAgD;EACjE,MAAM,YAAY,KAAK,aAAa,OAAO,KAAK;AAChD,SAAO,EAAE,OAAO,KAAK,mBAAmB,UAAU,OAAO,WAAW,EAAE;;CAGxE,mBAA2B,kBAAoD;AAC7E,MAAI,CAAC,MAAM,QAAQ,cAAc,IAAI,cAAc,WAAW,EAC5D,OAAM,IAAI,MAAM,sBAAsB;EAExC,MAAM,aAAa,cAAc,KAAK,cAAc,UAAU;GAC5D,MAAM,YAAY,KAAK,aAAa,cAAc,cAAc,MAAM,GAAG;GACzE,MAAM,OAAO,KAAK,mBAAmB,UAAU,MAAM,cAAc,MAAM,QAAQ;AACjF,OAAI,SAAS,WAAW,SAAS,UAC/B,OAAM,IAAI,MAAM,cAAc,MAAM,6BAA6B;AAGnE,UAAO;IAD+C;IAGpD,MAAM,KAAK,sBACT,KAAK,mBAAmB,UAAU,MAAM,cAAc,MAAM,QAAQ,EACpE,cAAc,MAAM,QACrB;IACF;IACD;AACF,OAAK,IAAI,YAAY,GAAG,YAAY,WAAW,QAAQ,aAAa,EAClE,MAAK,IAAI,aAAa,YAAY,GAAG,aAAa,WAAW,QAAQ,cAAc,GAAG;GACpF,MAAM,OAAO,WAAW,YAAY;GACpC,MAAM,QAAQ,WAAW,aAAa;AACtC,OAAI,QAAQ,UAAU,SAAS,SAAS,KAAK,WAAW,GAAG,MAAM,GAAG,IAAI,MAAM,WAAW,GAAG,KAAK,GAAG,EAClG,OAAM,IAAI,MAAM,2BAA2B,KAAK,KAAK,QAAQ;;AAInE,SAAO;;CAGT,gBACE,eACoC;AACpC,MAAI,eAAe,KAAA,EACjB;EAEF,MAAM,YAAY,KAAK,aAAa,YAAY,UAAU;AAC1D,SAAO,EAAE,UAAU,KAAK,mBAAmB,UAAU,UAAU,mBAAmB,EAAE;;CAGtF,qBACE,oBACyC;AACzC,MAAI,oBAAoB,KAAA,EACtB;EAEF,MAAM,YAAY,KAAK,aAAa,iBAAiB,eAAe;AACpE,SAAO,EACL,cAAc,KAAK,mBACjB,UAAU,cACV,4BACD,EACF;;CAGH,gBACE,eACoC;AACpC,MAAI,eAAe,KAAA,EACjB;EAEF,MAAM,YAAY,KAAK,aAAa,YAAY,UAAU;EAC1D,MAAM,UAAU,KAAK,mBAAmB,UAAU,SAAS,kBAAkB;AAC7E,MAAI,YAAY,gBAAgB,YAAY,UAAU,YAAY,iBAChE,OAAM,IAAI,MAAM,wDAAwD;AAE1E,SAAO,EAAE,SAAS;;CAGpB,mBACE,eACoC;AACpC,MAAI,eAAe,KAAA,EACjB;EAEF,MAAM,YAAY,KAAK,aAAa,YAAY,UAAU;EAC1D,MAAM,QAAQ,KAAK,mBAAmB,UAAU,OAAO,gBAAgB;AACvE,MAAI,UAAU,SACZ,OAAM,IAAI,MAAM,+BAA+B;EAEjD,MAAM,gBAAgB,KAAK,WAAW,UAAU,eAAe,wBAAwB;AACvF,MAAI,CAAC,OAAO,cAAc,cAAc,IAAI,gBAAgB,EAC1D,OAAM,IAAI,MAAM,gCAAgC;AAElD,SAAO;GAAE;GAAO;GAAe;;CAGjC,kCACE,SACA,eACS;AACT,MAAI,CAAC,QACH;EAEF,MAAM,aAAa,WAAW,MAAM,cAAc,UAAU,SAAS,UAAU;AAC/E,MAAI,QAAQ,YAAY,gBAAgB,WACtC,OAAM,IAAI,MAAM,qDAAqD;AAEvE,MAAI,QAAQ,YAAY,OACtB,OAAM,IAAI,MACR,gHACD;AAEH,MAAI,QAAQ,YAAY,gBAAgB,CAAC,WACvC,OAAM,IAAI,MAAM,GAAG,QAAQ,QAAQ,kCAAkC;;CAIzE,kBAA0B,OACxB,WACA,uBACoB;EACpB,MAAM,eAAe,UAAU,SAAS,UAAU,mBAAmB;EACrE,MAAM,MAAM,KAAK,MACf,MAAM,SAAS,KAAK,KAAK,oBAAoB,aAAa,EAAE,QAAQ,CACrE;EACD,MAAM,WAAW,KAAK,aAAa,KAAK,GAAG,UAAU,KAAK,GAAG,eAAe;EAC5E,MAAM,KAAK,KAAK,mBAAmB,SAAS,IAAI,GAAG,UAAU,KAAK,GAAG,aAAa,KAAK;AACvF,MAAI,CAAC,qBAAqB,KAAK,GAAG,CAChC,OAAM,IAAI,MAAM,wBAAwB,KAAK;EAE/C,MAAM,gBAAgB,KAAK,SAAS,mBAAmB;EACvD,MAAM,aAAa,UAAU,SAAS,UAClC,cAAc,QAAQ,YAAY,GAAG,GACrC;AACJ,MAAI,UAAU,SAAS,WAAW,CAAC,cAAc,SAAS,SAAS,CACjE,OAAM,IAAI,MAAM,mCAAmC,UAAU,OAAO;AAEtE,MAAI,OAAO,WACT,OAAM,IAAI,MAAM,qBAAqB,WAAW,MAAM,KAAK;AAE7D,SAAO;;CAGT,oBAA4B,mBAAwD;AAClF,MAAI,mBAAmB,KAAA,EACrB;EAEF,MAAM,YAAY,KAAK,aAAa,gBAAgB,cAAc;AAClE,SAAO;GACL,gBAAgB,KAAK,oBAAoB,UAAU,eAAe;GAClE,gBAAgB,KAAK,iBAAiB,UAAU,gBAAgB,6BAA6B;GAC7F,SAAS,KAAK,aAAa,UAAU,QAAQ;GAC7C,cAAc,KAAK,kBAAkB,UAAU,aAAa;GAC7D;;CAGH,uBAA+B,sBAAqE;AAClG,MAAI,sBAAsB,KAAA,EACxB;AAEF,MAAI,CAAC,MAAM,QAAQ,kBAAkB,CACnC,OAAM,IAAI,MAAM,oCAAoC;AAEtD,SAAO,kBAAkB,KAAK,OAAO,UAAU;GAC7C,MAAM,YAAY,KAAK,aAAa,OAAO,8BAA8B,MAAM,GAAG;GAClF,MAAM,OAAO,KAAK,mBAAmB,UAAU,MAAM,8BAA8B,MAAM,QAAQ;AACjG,OAAI,SAAS,UAAU,SAAS,aAC9B,OAAM,IAAI,MAAM,8BAA8B,MAAM,+BAA+B;AAErF,UAAO;IACL,IAAI,KAAK,mBAAmB,UAAU,IAAI,8BAA8B,MAAM,MAAM;IACpF;IACA,aAAa,KAAK,mBAChB,UAAU,aACV,8BAA8B,MAAM,eACrC;IACF;IACD;;CAGJ,oBAA4B,UAAmB,cAA4C;AACzF,MAAI,aAAa,KAAA,EACf;AAEF,MAAI,CAAC,MAAM,QAAQ,SAAS,CAC1B,OAAM,IAAI,MAAM,GAAG,UAAU,YAAY;AAE3C,SAAO,SAAS,KAAK,MAAM,UAAU,KAAK,mBAAmB,MAAM,GAAG,UAAU,GAAG,MAAM,GAAG,CAAC;;CAG/F,gBAAwB,eAA+D;AACrF,MAAI,eAAe,KAAA,KAAa,OAAO,eAAe,UACpD,QAAO;EAET,MAAM,YAAY,KAAK,aAAa,YAAY,sBAAsB;AACtE,SAAO,EAAE,WAAW,KAAK,mBAAmB,UAAU,WAAW,gCAAgC,EAAE;;CAGrG,qBAA6B,oBAAyE;AACpG,MAAI,oBAAoB,KAAA,EACtB;EAEF,MAAM,YAAY,KAAK,aAAa,iBAAiB,2BAA2B;AAChF,SAAO;GACL,YAAY,UAAU,eAAe,KAAA,IACjC,KAAA,IACA,KAAK,YAAY,UAAU,YAAY,sCAAsC;GACjF,eAAe,UAAU,kBAAkB,KAAA,IACvC,KAAA,IACA,KAAK,YAAY,UAAU,eAAe,yCAAyC;GACxF;;CAGH,qBAA6B,OAC3B,cACA,cACA,cACoB;EACpB,MAAM,eAAe,KAAK,cAAc,cAAc,cAAc,UAAU;EAC9E,MAAM,QAAQ,MAAM,MAAM,aAAa;AACvC,MAAI,CAAC,MAAM,QAAQ,IAAI,MAAM,gBAAgB,CAC3C,OAAM,IAAI,MAAM,GAAG,UAAU,cAAc;AAE7C,SAAO;;CAGT,0BAAkC,OAChC,cACA,cACA,cACoB;EACpB,MAAM,eAAe,KAAK,cAAc,cAAc,cAAc,UAAU;EAC9E,MAAM,QAAQ,MAAM,MAAM,aAAa;AACvC,MAAI,CAAC,MAAM,aAAa,IAAI,MAAM,gBAAgB,CAChD,OAAM,IAAI,MAAM,GAAG,UAAU,cAAc;AAE7C,QAAM,OAAO,aAAa;AAC1B,SAAO;;CAGT,iBAAyB,cAAsB,cAAsB,cAA8B;EACjG,MAAM,iBAAiB,KAAK,sBAAsB,cAAc,UAAU;EAC1E,MAAM,eAAe,KAAK,QAAQ,cAAc,eAAe;EAC/D,MAAM,WAAW,KAAK,SAAS,cAAc,aAAa;AAC1D,MAAI,SAAS,WAAW,KAAK,IAAI,KAAK,WAAW,SAAS,CACxD,OAAM,IAAI,MAAM,GAAG,UAAU,cAAc;AAE7C,SAAO;;CAGT,yBAAiC,cAAsB,cAA8B;AACnF,MAAI,KAAK,WAAW,aAAa,IAAI,aAAa,SAAS,KAAK,CAC9D,OAAM,IAAI,MAAM,GAAG,UAAU,cAAc;EAE7C,MAAM,WAAW,aAAa,QAAQ,OAAO,IAAI,CAAC,MAAM,IAAI;AAC5D,MAAI,SAAS,MAAM,YAAY,CAAC,WAAW,YAAY,OAAO,YAAY,KAAK,CAC7E,OAAM,IAAI,MAAM,GAAG,UAAU,YAAY;AAE3C,SAAO,SAAS,KAAK,IAAI;;CAG3B,gBAAwB,OAAgB,cAA+C;AACrF,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,OAAM,IAAI,MAAM,GAAG,UAAU,SAAS;AAExC,SAAO;;CAGT,sBAA8B,OAAgB,cAA8B;AAC1E,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,MAAM,CAC5C,OAAM,IAAI,MAAM,GAAG,UAAU,YAAY;AAE3C,SAAO,MAAM,MAAM;;CAGrB,sBAA8B,OAAgB,cAA0C;AACtF,SAAO,UAAU,KAAA,IAAY,KAAA,IAAY,KAAK,mBAAmB,OAAO,UAAU;;CAGpF,cAAsB,OAAgB,cAA8B;AAClE,MAAI,OAAO,UAAU,YAAY,OAAO,MAAM,MAAM,CAClD,OAAM,IAAI,MAAM,GAAG,UAAU,SAAS;AAExC,SAAO;;CAGT,eAAuB,OAAgB,cAA+B;AACpE,MAAI,OAAO,UAAU,UACnB,OAAM,IAAI,MAAM,GAAG,UAAU,UAAU;AAEzC,SAAO"}

package/dist/services/app-platform-target.service.d.ts

@@ -0,0 +1,45 @@
+import { AppArtifactTarget, AppDistributionDeclaration, AppNativeArtifactTarget } from "../types/app-manifest.types.js";
+
+//#region src/services/app-platform-target.service.d.ts
+type AppTargetArtifact = {
+  target: AppArtifactTarget;
+};
+type AppTargetVersion<TArtifact extends AppTargetArtifact> = {
+  version: string;
+  artifacts: TArtifact[];
+};
+type AppPlatformTargetServiceOptions = {
+  platform?: NodeJS.Platform;
+  arch?: string;
+  linuxAbi?: "gnu" | "musl";
+};
+declare class AppPlatformTargetService {
+  private readonly platform?;
+  private readonly arch?;
+  private readonly linuxAbi?;
+  constructor(options?: AppPlatformTargetServiceOptions);
+  resolveDistribution: (distribution: AppDistributionDeclaration | undefined) => AppDistributionDeclaration;
+  parseDistribution: (rawDistribution: unknown) => AppDistributionDeclaration | undefined;
+  parseArtifactTarget: (rawTarget: unknown, fieldName?: string) => AppArtifactTarget;
+  parseTargetKey: (targetKey: string) => AppArtifactTarget;
+  toTargetKey: (target: AppArtifactTarget) => string;
+  readHostTarget: () => AppNativeArtifactTarget;
+  selectArtifact: <TArtifact extends AppTargetArtifact>(artifacts: readonly TArtifact[], hostTarget?: AppNativeArtifactTarget) => TArtifact | undefined;
+  selectLatestCompatibleVersion: <TArtifact extends AppTargetArtifact>(versions: readonly AppTargetVersion<TArtifact>[], hostTarget?: AppNativeArtifactTarget) => AppTargetVersion<TArtifact> | undefined;
+  assertExactTargetSet: (params: {
+    declared: readonly AppArtifactTarget[];
+    actual: readonly AppArtifactTarget[];
+    actualLabel?: string;
+  }) => void;
+  private parseNativeTarget;
+  private readArchitecture;
+  private detectLinuxAbi;
+  private readHostPlatform;
+  private readHostArchitecture;
+  compareVersions: (left: string, right: string) => number;
+  private parseVersion;
+  private assertObject;
+}
+//#endregion
+export { AppPlatformTargetService };
+//# sourceMappingURL=app-platform-target.service.d.ts.map