@nextclaw/service 0.2.13 → 0.2.14

package/dist/services/runtime/npm-runtime-update-source.service.js

@@ -0,0 +1,61 @@
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+//#region src/services/runtime/npm-runtime-update-source.service.ts
+const DEFAULT_NPM_RUNTIME_UPDATE_BASE_URL = "https://Peiiii.github.io/nextclaw/npm-runtime-updates";
+function normalizeOptionalString(value) {
+	if (typeof value !== "string") return null;
+	const trimmed = value.trim();
+	return trimmed ? trimmed : null;
+}
+function normalizeChannel(value) {
+	return typeof value === "string" && value.trim().toLowerCase() === "beta" ? "beta" : "stable";
+}
+function inferDefaultNpmRuntimeReleaseChannel(launcherVersion) {
+	return typeof launcherVersion === "string" && launcherVersion.toLowerCase().includes("-beta") ? "beta" : "stable";
+}
+function resolvePackagedPublicKeyPath() {
+	const moduleDir = dirname(fileURLToPath(import.meta.url));
+	const candidates = [
+		resolve(moduleDir, "..", "resources", "update-bundle-public.pem"),
+		resolve(moduleDir, "../../..", "resources", "update-bundle-public.pem"),
+		resolve(moduleDir, "../../../..", "resources", "update-bundle-public.pem")
+	];
+	return candidates.find((candidate) => existsSync(candidate)) ?? candidates[0];
+}
+var NpmRuntimeUpdateSourceService = class {
+	env;
+	platform;
+	arch;
+	packagedPublicKeyPath;
+	constructor(options = {}) {
+		this.env = options.env ?? process.env;
+		this.platform = options.platform ?? process.platform;
+		this.arch = options.arch ?? process.arch;
+		this.packagedPublicKeyPath = options.packagedPublicKeyPath;
+	}
+	resolveChannel = (explicitChannel, launcherVersion) => {
+		if (explicitChannel !== void 0 || this.env.NEXTCLAW_UPDATE_CHANNEL !== void 0) return normalizeChannel(explicitChannel ?? this.env.NEXTCLAW_UPDATE_CHANNEL);
+		return inferDefaultNpmRuntimeReleaseChannel(launcherVersion);
+	};
+	resolveManifestUrl = (channel, explicitManifestUrl) => {
+		const manifestUrl = normalizeOptionalString(explicitManifestUrl) ?? normalizeOptionalString(this.env.NEXTCLAW_UPDATE_MANIFEST_URL);
+		if (manifestUrl) return manifestUrl;
+		const baseUrl = normalizeOptionalString(this.env.NEXTCLAW_UPDATE_MANIFEST_BASE_URL) ?? DEFAULT_NPM_RUNTIME_UPDATE_BASE_URL;
+		return new URL(`${channel}/manifest-${channel}-${this.platform}-${this.arch}.json`, `${baseUrl.replace(/\/+$/, "")}/`).toString();
+	};
+	resolveBundlePublicKey = () => {
+		const explicitPublicKey = normalizeOptionalString(this.env.NEXTCLAW_UPDATE_BUNDLE_PUBLIC_KEY);
+		if (explicitPublicKey) return explicitPublicKey;
+		const publicKeyPath = normalizeOptionalString(this.env.NEXTCLAW_UPDATE_BUNDLE_PUBLIC_KEY_PATH);
+		if (!publicKeyPath || !existsSync(publicKeyPath)) {
+			const packagedPublicKeyPath = this.packagedPublicKeyPath ?? resolvePackagedPublicKeyPath();
+			return existsSync(packagedPublicKeyPath) ? readFileSync(packagedPublicKeyPath, "utf8").trim() : null;
+		}
+		return readFileSync(publicKeyPath, "utf8").trim();
+	};
+};
+//#endregion
+export { NpmRuntimeUpdateSourceService, inferDefaultNpmRuntimeReleaseChannel };
+
+//# sourceMappingURL=npm-runtime-update-source.service.js.map

package/dist/services/runtime/npm-runtime-update-source.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-runtime-update-source.service.js","names":[],"sources":["../../../src/services/runtime/npm-runtime-update-source.service.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nexport type NpmRuntimeReleaseChannel = \"stable\" | \"beta\";\n\nconst DEFAULT_NPM_RUNTIME_UPDATE_BASE_URL = \"https://Peiiii.github.io/nextclaw/npm-runtime-updates\";\n\ntype NpmRuntimeUpdateSourceServiceOptions = {\n  env?: NodeJS.ProcessEnv;\n  platform?: NodeJS.Platform;\n  arch?: string;\n  packagedPublicKeyPath?: string;\n};\n\nfunction normalizeOptionalString(value: unknown): string | null {\n  if (typeof value !== \"string\") {\n    return null;\n  }\n  const trimmed = value.trim();\n  return trimmed ? trimmed : null;\n}\n\nfunction normalizeChannel(value: unknown): NpmRuntimeReleaseChannel {\n  return typeof value === \"string\" && value.trim().toLowerCase() === \"beta\" ? \"beta\" : \"stable\";\n}\n\nexport function inferDefaultNpmRuntimeReleaseChannel(launcherVersion?: string | null): NpmRuntimeReleaseChannel {\n  return typeof launcherVersion === \"string\" && launcherVersion.toLowerCase().includes(\"-beta\") ? \"beta\" : \"stable\";\n}\n\nfunction resolvePackagedPublicKeyPath(): string {\n  const moduleDir = dirname(fileURLToPath(import.meta.url));\n  const candidates = [\n    resolve(moduleDir, \"..\", \"resources\", \"update-bundle-public.pem\"),\n    resolve(moduleDir, \"../../..\", \"resources\", \"update-bundle-public.pem\"),\n    resolve(moduleDir, \"../../../..\", \"resources\", \"update-bundle-public.pem\")\n  ];\n  return candidates.find((candidate) => existsSync(candidate)) ?? candidates[0];\n}\n\nexport class NpmRuntimeUpdateSourceService {\n  private readonly env: NodeJS.ProcessEnv;\n  private readonly platform: NodeJS.Platform;\n  private readonly arch: string;\n  private readonly packagedPublicKeyPath?: string;\n\n  constructor(options: NpmRuntimeUpdateSourceServiceOptions = {}) {\n    this.env = options.env ?? process.env;\n    this.platform = options.platform ?? process.platform;\n    this.arch = options.arch ?? process.arch;\n    this.packagedPublicKeyPath = options.packagedPublicKeyPath;\n  }\n\n  resolveChannel = (explicitChannel?: unknown, launcherVersion?: string | null): NpmRuntimeReleaseChannel => {\n    if (explicitChannel !== undefined || this.env.NEXTCLAW_UPDATE_CHANNEL !== undefined) {\n      return normalizeChannel(explicitChannel ?? this.env.NEXTCLAW_UPDATE_CHANNEL);\n    }\n    return inferDefaultNpmRuntimeReleaseChannel(launcherVersion);\n  };\n\n  resolveManifestUrl = (channel: NpmRuntimeReleaseChannel, explicitManifestUrl?: unknown): string | null => {\n    const manifestUrl = normalizeOptionalString(explicitManifestUrl) ?? normalizeOptionalString(this.env.NEXTCLAW_UPDATE_MANIFEST_URL);\n    if (manifestUrl) {\n      return manifestUrl;\n    }\n    const baseUrl = normalizeOptionalString(this.env.NEXTCLAW_UPDATE_MANIFEST_BASE_URL) ?? DEFAULT_NPM_RUNTIME_UPDATE_BASE_URL;\n    return new URL(`${channel}/manifest-${channel}-${this.platform}-${this.arch}.json`, `${baseUrl.replace(/\\/+$/, \"\")}/`).toString();\n  };\n\n  resolveBundlePublicKey = (): string | null => {\n    const explicitPublicKey = normalizeOptionalString(this.env.NEXTCLAW_UPDATE_BUNDLE_PUBLIC_KEY);\n    if (explicitPublicKey) {\n      return explicitPublicKey;\n    }\n    const publicKeyPath = normalizeOptionalString(this.env.NEXTCLAW_UPDATE_BUNDLE_PUBLIC_KEY_PATH);\n    if (!publicKeyPath || !existsSync(publicKeyPath)) {\n      const packagedPublicKeyPath = this.packagedPublicKeyPath ?? resolvePackagedPublicKeyPath();\n      return existsSync(packagedPublicKeyPath) ? readFileSync(packagedPublicKeyPath, \"utf8\").trim() : null;\n    }\n    return readFileSync(publicKeyPath, \"utf8\").trim();\n  };\n}\n"],"mappings":";;;;AAMA,MAAM,sCAAsC;AAS5C,SAAS,wBAAwB,OAA+B;AAC9D,KAAI,OAAO,UAAU,SACnB,QAAO;CAET,MAAM,UAAU,MAAM,MAAM;AAC5B,QAAO,UAAU,UAAU;;AAG7B,SAAS,iBAAiB,OAA0C;AAClE,QAAO,OAAO,UAAU,YAAY,MAAM,MAAM,CAAC,aAAa,KAAK,SAAS,SAAS;;AAGvF,SAAgB,qCAAqC,iBAA2D;AAC9G,QAAO,OAAO,oBAAoB,YAAY,gBAAgB,aAAa,CAAC,SAAS,QAAQ,GAAG,SAAS;;AAG3G,SAAS,+BAAuC;CAC9C,MAAM,YAAY,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC;CACzD,MAAM,aAAa;EACjB,QAAQ,WAAW,MAAM,aAAa,2BAA2B;EACjE,QAAQ,WAAW,YAAY,aAAa,2BAA2B;EACvE,QAAQ,WAAW,eAAe,aAAa,2BAA2B;EAC3E;AACD,QAAO,WAAW,MAAM,cAAc,WAAW,UAAU,CAAC,IAAI,WAAW;;AAG7E,IAAa,gCAAb,MAA2C;CACzC;CACA;CACA;CACA;CAEA,YAAY,UAAgD,EAAE,EAAE;AAC9D,OAAK,MAAM,QAAQ,OAAO,QAAQ;AAClC,OAAK,WAAW,QAAQ,YAAY,QAAQ;AAC5C,OAAK,OAAO,QAAQ,QAAQ,QAAQ;AACpC,OAAK,wBAAwB,QAAQ;;CAGvC,kBAAkB,iBAA2B,oBAA8D;AACzG,MAAI,oBAAoB,KAAA,KAAa,KAAK,IAAI,4BAA4B,KAAA,EACxE,QAAO,iBAAiB,mBAAmB,KAAK,IAAI,wBAAwB;AAE9E,SAAO,qCAAqC,gBAAgB;;CAG9D,sBAAsB,SAAmC,wBAAiD;EACxG,MAAM,cAAc,wBAAwB,oBAAoB,IAAI,wBAAwB,KAAK,IAAI,6BAA6B;AAClI,MAAI,YACF,QAAO;EAET,MAAM,UAAU,wBAAwB,KAAK,IAAI,kCAAkC,IAAI;AACvF,SAAO,IAAI,IAAI,GAAG,QAAQ,YAAY,QAAQ,GAAG,KAAK,SAAS,GAAG,KAAK,KAAK,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,GAAG,CAAC,GAAG,CAAC,UAAU;;CAGnI,+BAA8C;EAC5C,MAAM,oBAAoB,wBAAwB,KAAK,IAAI,kCAAkC;AAC7F,MAAI,kBACF,QAAO;EAET,MAAM,gBAAgB,wBAAwB,KAAK,IAAI,uCAAuC;AAC9F,MAAI,CAAC,iBAAiB,CAAC,WAAW,cAAc,EAAE;GAChD,MAAM,wBAAwB,KAAK,yBAAyB,8BAA8B;AAC1F,UAAO,WAAW,sBAAsB,GAAG,aAAa,uBAAuB,OAAO,CAAC,MAAM,GAAG;;AAElG,SAAO,aAAa,eAAe,OAAO,CAAC,MAAM"}

package/dist/services/runtime/npm-runtime-update.service.d.ts

@@ -0,0 +1,55 @@
+import { NpmRuntimeDownloadedUpdate, NpmRuntimeUpdateProgressReporter } from "../../types/npm-runtime-bundle.types.js";
+import { NpmRuntimeBundleLayoutStore } from "../../stores/npm-runtime-bundle-layout.store.js";
+import { NpmRuntimeBundleService } from "./npm-runtime-bundle.service.js";
+import { UpdateManifest, UpdateManifestReader } from "@nextclaw/kernel";
+
+//#region src/services/runtime/npm-runtime-update.service.d.ts
+type FetchLike = typeof fetch;
+type NpmRuntimeUpdateServiceOptions = {
+  layout: NpmRuntimeBundleLayoutStore;
+  bundleService: NpmRuntimeBundleService;
+  launcherVersion: string;
+  bundlePublicKey?: string;
+  fetchImpl?: FetchLike;
+  platform?: NodeJS.Platform;
+  arch?: string;
+  manifestReader?: UpdateManifestReader;
+  now?: () => number;
+};
+type NpmRuntimeAvailableUpdate = {
+  kind: "runtime-bundle-update";
+  manifest: UpdateManifest;
+} | {
+  kind: "host-update-required";
+  manifest: UpdateManifest;
+} | {
+  kind: "quarantined-bad-version";
+  manifest: UpdateManifest;
+};
+declare class NpmRuntimeUpdateService {
+  private readonly options;
+  private readonly platform;
+  private readonly arch;
+  private readonly fetchImpl;
+  private readonly manifestReader;
+  private readonly bundlePublicKey;
+  private readonly now;
+  constructor(options: NpmRuntimeUpdateServiceOptions);
+  hasSignatureVerifier: () => boolean;
+  checkForUpdate: (manifestUrl: string, currentVersion: string | null, badVersions?: string[]) => Promise<NpmRuntimeAvailableUpdate | null>;
+  downloadAndInstallUpdate: (manifest: UpdateManifest, reportProgress?: NpmRuntimeUpdateProgressReporter) => Promise<NpmRuntimeDownloadedUpdate>;
+  private downloadBundleBytes;
+  private fetchManifest;
+  private verifyManifest;
+  private fetchBundle;
+  private readResponseBytes;
+  private readContentLength;
+  private reportDownloadProgress;
+  private findBundleRoot;
+  private parseBundlePublicKey;
+  private assertManifestSignature;
+  private assertBundleSignature;
+}
+//#endregion
+export { NpmRuntimeAvailableUpdate, NpmRuntimeUpdateService };
+//# sourceMappingURL=npm-runtime-update.service.d.ts.map

package/dist/services/runtime/npm-runtime-update.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-runtime-update.service.d.ts","names":[],"sources":["../../../src/services/runtime/npm-runtime-update.service.ts"],"mappings":";;;;;;KAkBK,SAAA,UAAmB,KAAA;AAAA,KAEnB,8BAAA;EACH,MAAA,EAAQ,2BAAA;EACR,aAAA,EAAe,uBAAA;EACf,eAAA;EACA,eAAA;EACA,SAAA,GAAY,SAAA;EACZ,QAAA,GAAW,MAAA,CAAO,QAAA;EAClB,IAAA;EACA,cAAA,GAAiB,oBAAA;EACjB,GAAA;AAAA;AAAA,KAGU,yBAAA;EACN,IAAA;EAA+B,QAAA,EAAU,cAAA;AAAA;EACzC,IAAA;EAA8B,QAAA,EAAU,cAAA;AAAA;EACxC,IAAA;EAAiC,QAAA,EAAU,cAAA;AAAA;AAAA,cAEpC,uBAAA;EAAA,iBAQkB,OAAA;EAAA,iBAPZ,QAAA;EAAA,iBACA,IAAA;EAAA,iBACA,SAAA;EAAA,iBACA,cAAA;EAAA,iBACA,eAAA;EAAA,iBACA,GAAA;cAEY,OAAA,EAAS,8BAAA;EAStC,oBAAA;EAEA,cAAA,GAAwB,WAAA,UAAqB,cAAA,iBAA+B,WAAA,gBAA6B,OAAA,CAAQ,yBAAA;EAcjH,wBAAA,GACE,QAAA,EAAU,cAAA,EACV,cAAA,GAAiB,gCAAA,KAChB,OAAA,CAAQ,0BAAA;EAAA,QAmCH,mBAAA;EAAA,QAcA,aAAA;EAAA,QAaA,cAAA;EAAA,QAiBA,WAAA;EAAA,QAiBA,iBAAA;EAAA,QA0BA,iBAAA;EAAA,QASA,sBAAA;EAAA,QAYA,cAAA;EAAA,QAYA,oBAAA;EAAA,QAgBA,uBAAA;EAAA,QAWA,qBAAA;AAAA"}

package/dist/services/runtime/npm-runtime-update.service.js

@@ -0,0 +1,185 @@
+import { compareNpmRuntimeVersions } from "./npm-runtime-bundle.service.js";
+import { UpdateManifestReader, serializeUnsignedUpdateManifest } from "@nextclaw/kernel";
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
+import { dirname, join, resolve, sep } from "node:path";
+import { fileURLToPath } from "node:url";
+import { rm } from "node:fs/promises";
+import { createHash, createPublicKey, verify } from "node:crypto";
+import JSZip from "jszip";
+//#region src/services/runtime/npm-runtime-update.service.ts
+var NpmRuntimeUpdateService = class {
+	platform;
+	arch;
+	fetchImpl;
+	manifestReader;
+	bundlePublicKey;
+	now;
+	constructor(options) {
+		this.options = options;
+		this.platform = options.platform ?? process.platform;
+		this.arch = options.arch ?? process.arch;
+		this.fetchImpl = options.fetchImpl ?? fetch;
+		this.manifestReader = options.manifestReader ?? new UpdateManifestReader();
+		this.bundlePublicKey = this.parseBundlePublicKey(options.bundlePublicKey);
+		this.now = options.now ?? Date.now;
+	}
+	hasSignatureVerifier = () => Boolean(this.bundlePublicKey);
+	checkForUpdate = async (manifestUrl, currentVersion, badVersions = []) => {
+		const manifest = await this.fetchManifest(manifestUrl);
+		if (currentVersion && compareNpmRuntimeVersions(manifest.latestVersion, currentVersion) <= 0) return null;
+		if (compareNpmRuntimeVersions(this.options.launcherVersion, manifest.minimumLauncherVersion) < 0) return {
+			kind: "host-update-required",
+			manifest
+		};
+		if (badVersions.includes(manifest.latestVersion)) return {
+			kind: "quarantined-bad-version",
+			manifest
+		};
+		return {
+			kind: "runtime-bundle-update",
+			manifest
+		};
+	};
+	downloadAndInstallUpdate = async (manifest, reportProgress) => {
+		const bytes = await this.downloadBundleBytes(manifest, reportProgress);
+		const stagingRoot = join(this.options.layout.getStagingDir(), `download-${manifest.latestVersion}-${this.now()}`);
+		await rm(stagingRoot, {
+			recursive: true,
+			force: true
+		});
+		mkdirSync(stagingRoot, { recursive: true });
+		try {
+			const zip = await JSZip.loadAsync(bytes);
+			const entries = Object.values(zip.files);
+			await Promise.all(entries.map(async (entry) => {
+				const targetPath = resolve(stagingRoot, entry.name);
+				const resolvedStagingRoot = resolve(stagingRoot);
+				if (targetPath !== resolvedStagingRoot && !targetPath.startsWith(`${resolvedStagingRoot}${sep}`)) throw new Error(`runtime bundle archive contains invalid path: ${entry.name}`);
+				if (entry.dir) {
+					mkdirSync(targetPath, { recursive: true });
+					return;
+				}
+				mkdirSync(dirname(targetPath), { recursive: true });
+				writeFileSync(targetPath, Buffer.from(await entry.async("uint8array")));
+			}));
+			const bundleRoot = this.findBundleRoot(stagingRoot);
+			const installedBundle = await this.options.bundleService.installFromDirectory(bundleRoot);
+			return {
+				manifest,
+				downloadedVersion: installedBundle.manifest.bundleVersion,
+				bundleDirectory: installedBundle.bundleDirectory
+			};
+		} catch (error) {
+			await rm(stagingRoot, {
+				recursive: true,
+				force: true
+			});
+			throw error;
+		}
+	};
+	downloadBundleBytes = async (manifest, reportProgress) => {
+		const response = await this.fetchBundle(manifest.bundleUrl);
+		const bytes = await this.readResponseBytes(response, reportProgress);
+		const sha256 = createHash("sha256").update(bytes).digest("hex");
+		if (sha256 !== manifest.bundleSha256) throw new Error(`runtime bundle sha256 mismatch: expected ${manifest.bundleSha256} but got ${sha256}`);
+		this.assertBundleSignature(manifest, bytes);
+		return bytes;
+	};
+	fetchManifest = async (manifestUrl) => {
+		if (manifestUrl.startsWith("file://")) {
+			const manifest = this.manifestReader.parse(JSON.parse(readFileSync(fileURLToPath(manifestUrl), "utf8")), manifestUrl);
+			return this.verifyManifest(manifest, manifestUrl);
+		}
+		const response = await this.fetchImpl(manifestUrl);
+		if (!response.ok) throw new Error(`runtime update manifest request failed with status ${response.status}`);
+		const manifest = this.manifestReader.parse(await response.json(), manifestUrl);
+		return this.verifyManifest(manifest, manifestUrl);
+	};
+	verifyManifest = (manifest, _manifestUrl) => {
+		if (manifest.hostKind && manifest.hostKind !== "npm-runtime-bundle") throw new Error(`runtime update manifest hostKind mismatch: expected npm-runtime-bundle but got ${manifest.hostKind}`);
+		if (manifest.channel !== "stable" && manifest.channel !== "beta") throw new Error(`runtime update manifest channel is unsupported: ${manifest.channel}`);
+		if (manifest.platform !== this.platform) throw new Error(`runtime update manifest platform mismatch: expected ${this.platform} but got ${manifest.platform}`);
+		if (manifest.arch !== this.arch) throw new Error(`runtime update manifest arch mismatch: expected ${this.arch} but got ${manifest.arch}`);
+		this.assertManifestSignature(manifest);
+		return manifest;
+	};
+	fetchBundle = async (bundleUrl) => {
+		if (bundleUrl.startsWith("file://")) {
+			const bytes = readFileSync(fileURLToPath(bundleUrl));
+			return new Response(bytes, {
+				status: 200,
+				headers: { "content-length": String(bytes.byteLength) }
+			});
+		}
+		const response = await this.fetchImpl(bundleUrl);
+		if (!response.ok) throw new Error(`runtime bundle download failed with status ${response.status}`);
+		return response;
+	};
+	readResponseBytes = async (response, reportProgress) => {
+		const totalBytes = this.readContentLength(response);
+		if (!response.body) {
+			const bytes = Buffer.from(await response.arrayBuffer());
+			this.reportDownloadProgress(reportProgress, bytes.byteLength, totalBytes ?? bytes.byteLength);
+			return bytes;
+		}
+		const reader = response.body.getReader();
+		const chunks = [];
+		let downloadedBytes = 0;
+		this.reportDownloadProgress(reportProgress, downloadedBytes, totalBytes);
+		while (true) {
+			const next = await reader.read();
+			if (next.done) break;
+			chunks.push(next.value);
+			downloadedBytes += next.value.byteLength;
+			this.reportDownloadProgress(reportProgress, downloadedBytes, totalBytes);
+		}
+		return Buffer.concat(chunks.map((chunk) => Buffer.from(chunk)));
+	};
+	readContentLength = (response) => {
+		const raw = response.headers.get("content-length");
+		if (!raw) return null;
+		const parsed = Number(raw);
+		return Number.isFinite(parsed) && parsed >= 0 ? parsed : null;
+	};
+	reportDownloadProgress = (reportProgress, downloadedBytes, totalBytes) => {
+		reportProgress?.({
+			downloadedBytes,
+			totalBytes,
+			percent: totalBytes && totalBytes > 0 ? Math.min(100, Math.round(downloadedBytes / totalBytes * 100)) : null
+		});
+	};
+	findBundleRoot = (stagingRoot) => {
+		if (existsSync(join(stagingRoot, "manifest.json"))) return stagingRoot;
+		const entries = readDirectoryNames(stagingRoot).filter((entry) => existsSync(join(stagingRoot, entry, "manifest.json")));
+		if (entries.length === 1) return join(stagingRoot, entries[0]);
+		throw new Error(`runtime bundle archive does not contain exactly one manifest root under ${stagingRoot}`);
+	};
+	parseBundlePublicKey = (publicKey) => {
+		const normalizedKey = publicKey?.trim();
+		if (!normalizedKey) return null;
+		const pemOrEscapedPem = normalizedKey.replaceAll("\\n", "\n");
+		if (pemOrEscapedPem.includes("BEGIN PUBLIC KEY")) return createPublicKey(pemOrEscapedPem);
+		return createPublicKey({
+			key: Buffer.from(normalizedKey, "base64"),
+			format: "der",
+			type: "spki"
+		});
+	};
+	assertManifestSignature = (manifest) => {
+		if (!this.bundlePublicKey) throw new Error("runtime update manifest signature verification requires bundlePublicKey");
+		const signature = Buffer.from(manifest.manifestSignature, "base64");
+		if (!verify(null, Buffer.from(serializeUnsignedUpdateManifest(manifest)), this.bundlePublicKey, signature)) throw new Error(`runtime update manifest signature verification failed for ${manifest.latestVersion}`);
+	};
+	assertBundleSignature = (manifest, bytes) => {
+		if (!this.bundlePublicKey) throw new Error("runtime bundle signature verification requires bundlePublicKey");
+		const signature = Buffer.from(manifest.bundleSignature, "base64");
+		if (!verify(null, bytes, this.bundlePublicKey, signature)) throw new Error(`runtime bundle signature verification failed for ${manifest.latestVersion}`);
+	};
+};
+function readDirectoryNames(directory) {
+	return readdirSync(directory, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+}
+//#endregion
+export { NpmRuntimeUpdateService };
+
+//# sourceMappingURL=npm-runtime-update.service.js.map

package/dist/services/runtime/npm-runtime-update.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-runtime-update.service.js","names":[],"sources":["../../../src/services/runtime/npm-runtime-update.service.ts"],"sourcesContent":["import { createHash, createPublicKey, verify, type KeyObject } from \"node:crypto\";\nimport { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { rm } from \"node:fs/promises\";\nimport { fileURLToPath } from \"node:url\";\nimport { dirname, join, resolve, sep } from \"node:path\";\nimport JSZip from \"jszip\";\nimport {\n  serializeUnsignedUpdateManifest,\n  UpdateManifestReader,\n  type UpdateManifest\n} from \"@nextclaw/kernel\";\nimport type { NpmRuntimeBundleLayoutStore } from \"@nextclaw-service/stores/npm-runtime-bundle-layout.store.js\";\nimport { compareNpmRuntimeVersions, type NpmRuntimeBundleService } from \"@nextclaw-service/services/runtime/npm-runtime-bundle.service.js\";\nimport type {\n  NpmRuntimeDownloadedUpdate,\n  NpmRuntimeUpdateProgressReporter\n} from \"@nextclaw-service/types/npm-runtime-bundle.types.js\";\n\ntype FetchLike = typeof fetch;\n\ntype NpmRuntimeUpdateServiceOptions = {\n  layout: NpmRuntimeBundleLayoutStore;\n  bundleService: NpmRuntimeBundleService;\n  launcherVersion: string;\n  bundlePublicKey?: string;\n  fetchImpl?: FetchLike;\n  platform?: NodeJS.Platform;\n  arch?: string;\n  manifestReader?: UpdateManifestReader;\n  now?: () => number;\n};\n\nexport type NpmRuntimeAvailableUpdate =\n  | { kind: \"runtime-bundle-update\"; manifest: UpdateManifest }\n  | { kind: \"host-update-required\"; manifest: UpdateManifest }\n  | { kind: \"quarantined-bad-version\"; manifest: UpdateManifest };\n\nexport class NpmRuntimeUpdateService {\n  private readonly platform: NodeJS.Platform;\n  private readonly arch: string;\n  private readonly fetchImpl: FetchLike;\n  private readonly manifestReader: UpdateManifestReader;\n  private readonly bundlePublicKey: KeyObject | null;\n  private readonly now: () => number;\n\n  constructor(private readonly options: NpmRuntimeUpdateServiceOptions) {\n    this.platform = options.platform ?? process.platform;\n    this.arch = options.arch ?? process.arch;\n    this.fetchImpl = options.fetchImpl ?? fetch;\n    this.manifestReader = options.manifestReader ?? new UpdateManifestReader();\n    this.bundlePublicKey = this.parseBundlePublicKey(options.bundlePublicKey);\n    this.now = options.now ?? Date.now;\n  }\n\n  hasSignatureVerifier = (): boolean => Boolean(this.bundlePublicKey);\n\n  checkForUpdate = async (manifestUrl: string, currentVersion: string | null, badVersions: string[] = []): Promise<NpmRuntimeAvailableUpdate | null> => {\n    const manifest = await this.fetchManifest(manifestUrl);\n    if (currentVersion && compareNpmRuntimeVersions(manifest.latestVersion, currentVersion) <= 0) {\n      return null;\n    }\n    if (compareNpmRuntimeVersions(this.options.launcherVersion, manifest.minimumLauncherVersion) < 0) {\n      return { kind: \"host-update-required\", manifest };\n    }\n    if (badVersions.includes(manifest.latestVersion)) {\n      return { kind: \"quarantined-bad-version\", manifest };\n    }\n    return { kind: \"runtime-bundle-update\", manifest };\n  };\n\n  downloadAndInstallUpdate = async (\n    manifest: UpdateManifest,\n    reportProgress?: NpmRuntimeUpdateProgressReporter\n  ): Promise<NpmRuntimeDownloadedUpdate> => {\n    const bytes = await this.downloadBundleBytes(manifest, reportProgress);\n    const stagingRoot = join(this.options.layout.getStagingDir(), `download-${manifest.latestVersion}-${this.now()}`);\n    await rm(stagingRoot, { recursive: true, force: true });\n    mkdirSync(stagingRoot, { recursive: true });\n\n    try {\n      const zip = await JSZip.loadAsync(bytes);\n      const entries = Object.values(zip.files) as JSZip.JSZipObject[];\n      await Promise.all(entries.map(async (entry) => {\n        const targetPath = resolve(stagingRoot, entry.name);\n        const resolvedStagingRoot = resolve(stagingRoot);\n        if (targetPath !== resolvedStagingRoot && !targetPath.startsWith(`${resolvedStagingRoot}${sep}`)) {\n          throw new Error(`runtime bundle archive contains invalid path: ${entry.name}`);\n        }\n        if (entry.dir) {\n          mkdirSync(targetPath, { recursive: true });\n          return;\n        }\n        mkdirSync(dirname(targetPath), { recursive: true });\n        writeFileSync(targetPath, Buffer.from(await entry.async(\"uint8array\")));\n      }));\n      const bundleRoot = this.findBundleRoot(stagingRoot);\n      const installedBundle = await this.options.bundleService.installFromDirectory(bundleRoot);\n      return {\n        manifest,\n        downloadedVersion: installedBundle.manifest.bundleVersion,\n        bundleDirectory: installedBundle.bundleDirectory\n      };\n    } catch (error) {\n      await rm(stagingRoot, { recursive: true, force: true });\n      throw error;\n    }\n  };\n\n  private downloadBundleBytes = async (\n    manifest: UpdateManifest,\n    reportProgress?: NpmRuntimeUpdateProgressReporter\n  ): Promise<Buffer> => {\n    const response = await this.fetchBundle(manifest.bundleUrl);\n    const bytes = await this.readResponseBytes(response, reportProgress);\n    const sha256 = createHash(\"sha256\").update(bytes).digest(\"hex\");\n    if (sha256 !== manifest.bundleSha256) {\n      throw new Error(`runtime bundle sha256 mismatch: expected ${manifest.bundleSha256} but got ${sha256}`);\n    }\n    this.assertBundleSignature(manifest, bytes);\n    return bytes;\n  };\n\n  private fetchManifest = async (manifestUrl: string): Promise<UpdateManifest> => {\n    if (manifestUrl.startsWith(\"file://\")) {\n      const manifest = this.manifestReader.parse(JSON.parse(readFileSync(fileURLToPath(manifestUrl), \"utf8\")), manifestUrl);\n      return this.verifyManifest(manifest, manifestUrl);\n    }\n    const response = await this.fetchImpl(manifestUrl);\n    if (!response.ok) {\n      throw new Error(`runtime update manifest request failed with status ${response.status}`);\n    }\n    const manifest = this.manifestReader.parse(await response.json(), manifestUrl);\n    return this.verifyManifest(manifest, manifestUrl);\n  };\n\n  private verifyManifest = (manifest: UpdateManifest, _manifestUrl: string): UpdateManifest => {\n    if (manifest.hostKind && manifest.hostKind !== \"npm-runtime-bundle\") {\n      throw new Error(`runtime update manifest hostKind mismatch: expected npm-runtime-bundle but got ${manifest.hostKind}`);\n    }\n    if (manifest.channel !== \"stable\" && manifest.channel !== \"beta\") {\n      throw new Error(`runtime update manifest channel is unsupported: ${manifest.channel}`);\n    }\n    if (manifest.platform !== this.platform) {\n      throw new Error(`runtime update manifest platform mismatch: expected ${this.platform} but got ${manifest.platform}`);\n    }\n    if (manifest.arch !== this.arch) {\n      throw new Error(`runtime update manifest arch mismatch: expected ${this.arch} but got ${manifest.arch}`);\n    }\n    this.assertManifestSignature(manifest);\n    return manifest;\n  };\n\n  private fetchBundle = async (bundleUrl: string): Promise<Response> => {\n    if (bundleUrl.startsWith(\"file://\")) {\n      const bytes = readFileSync(fileURLToPath(bundleUrl));\n      return new Response(bytes, {\n        status: 200,\n        headers: {\n          \"content-length\": String(bytes.byteLength)\n        }\n      });\n    }\n    const response = await this.fetchImpl(bundleUrl);\n    if (!response.ok) {\n      throw new Error(`runtime bundle download failed with status ${response.status}`);\n    }\n    return response;\n  };\n\n  private readResponseBytes = async (\n    response: Response,\n    reportProgress?: NpmRuntimeUpdateProgressReporter\n  ): Promise<Buffer> => {\n    const totalBytes = this.readContentLength(response);\n    if (!response.body) {\n      const bytes = Buffer.from(await response.arrayBuffer());\n      this.reportDownloadProgress(reportProgress, bytes.byteLength, totalBytes ?? bytes.byteLength);\n      return bytes;\n    }\n    const reader = response.body.getReader();\n    const chunks: Uint8Array[] = [];\n    let downloadedBytes = 0;\n    this.reportDownloadProgress(reportProgress, downloadedBytes, totalBytes);\n    while (true) {\n      const next = await reader.read();\n      if (next.done) {\n        break;\n      }\n      chunks.push(next.value);\n      downloadedBytes += next.value.byteLength;\n      this.reportDownloadProgress(reportProgress, downloadedBytes, totalBytes);\n    }\n    return Buffer.concat(chunks.map((chunk) => Buffer.from(chunk)));\n  };\n\n  private readContentLength = (response: Response): number | null => {\n    const raw = response.headers.get(\"content-length\");\n    if (!raw) {\n      return null;\n    }\n    const parsed = Number(raw);\n    return Number.isFinite(parsed) && parsed >= 0 ? parsed : null;\n  };\n\n  private reportDownloadProgress = (\n    reportProgress: NpmRuntimeUpdateProgressReporter | undefined,\n    downloadedBytes: number,\n    totalBytes: number | null\n  ): void => {\n    reportProgress?.({\n      downloadedBytes,\n      totalBytes,\n      percent: totalBytes && totalBytes > 0 ? Math.min(100, Math.round((downloadedBytes / totalBytes) * 100)) : null\n    });\n  };\n\n  private findBundleRoot = (stagingRoot: string): string => {\n    const directManifestPath = join(stagingRoot, \"manifest.json\");\n    if (existsSync(directManifestPath)) {\n      return stagingRoot;\n    }\n    const entries = readDirectoryNames(stagingRoot).filter((entry) => existsSync(join(stagingRoot, entry, \"manifest.json\")));\n    if (entries.length === 1) {\n      return join(stagingRoot, entries[0]);\n    }\n    throw new Error(`runtime bundle archive does not contain exactly one manifest root under ${stagingRoot}`);\n  };\n\n  private parseBundlePublicKey = (publicKey: string | undefined): KeyObject | null => {\n    const normalizedKey = publicKey?.trim();\n    if (!normalizedKey) {\n      return null;\n    }\n    const pemOrEscapedPem = normalizedKey.replaceAll(\"\\\\n\", \"\\n\");\n    if (pemOrEscapedPem.includes(\"BEGIN PUBLIC KEY\")) {\n      return createPublicKey(pemOrEscapedPem);\n    }\n    return createPublicKey({\n      key: Buffer.from(normalizedKey, \"base64\"),\n      format: \"der\",\n      type: \"spki\"\n    });\n  };\n\n  private assertManifestSignature = (manifest: UpdateManifest): void => {\n    if (!this.bundlePublicKey) {\n      throw new Error(\"runtime update manifest signature verification requires bundlePublicKey\");\n    }\n    const signature = Buffer.from(manifest.manifestSignature, \"base64\");\n    const valid = verify(null, Buffer.from(serializeUnsignedUpdateManifest(manifest)), this.bundlePublicKey, signature);\n    if (!valid) {\n      throw new Error(`runtime update manifest signature verification failed for ${manifest.latestVersion}`);\n    }\n  };\n\n  private assertBundleSignature = (manifest: UpdateManifest, bytes: Buffer): void => {\n    if (!this.bundlePublicKey) {\n      throw new Error(\"runtime bundle signature verification requires bundlePublicKey\");\n    }\n    const signature = Buffer.from(manifest.bundleSignature, \"base64\");\n    const valid = verify(null, bytes, this.bundlePublicKey, signature);\n    if (!valid) {\n      throw new Error(`runtime bundle signature verification failed for ${manifest.latestVersion}`);\n    }\n  };\n}\n\nfunction readDirectoryNames(directory: string): string[] {\n  return readdirSync(directory, { withFileTypes: true })\n    .filter((entry) => entry.isDirectory())\n    .map((entry) => entry.name);\n}\n"],"mappings":";;;;;;;;;AAqCA,IAAa,0BAAb,MAAqC;CACnC;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,SAA0D;AAAzC,OAAA,UAAA;AAC3B,OAAK,WAAW,QAAQ,YAAY,QAAQ;AAC5C,OAAK,OAAO,QAAQ,QAAQ,QAAQ;AACpC,OAAK,YAAY,QAAQ,aAAa;AACtC,OAAK,iBAAiB,QAAQ,kBAAkB,IAAI,sBAAsB;AAC1E,OAAK,kBAAkB,KAAK,qBAAqB,QAAQ,gBAAgB;AACzE,OAAK,MAAM,QAAQ,OAAO,KAAK;;CAGjC,6BAAsC,QAAQ,KAAK,gBAAgB;CAEnE,iBAAiB,OAAO,aAAqB,gBAA+B,cAAwB,EAAE,KAAgD;EACpJ,MAAM,WAAW,MAAM,KAAK,cAAc,YAAY;AACtD,MAAI,kBAAkB,0BAA0B,SAAS,eAAe,eAAe,IAAI,EACzF,QAAO;AAET,MAAI,0BAA0B,KAAK,QAAQ,iBAAiB,SAAS,uBAAuB,GAAG,EAC7F,QAAO;GAAE,MAAM;GAAwB;GAAU;AAEnD,MAAI,YAAY,SAAS,SAAS,cAAc,CAC9C,QAAO;GAAE,MAAM;GAA2B;GAAU;AAEtD,SAAO;GAAE,MAAM;GAAyB;GAAU;;CAGpD,2BAA2B,OACzB,UACA,mBACwC;EACxC,MAAM,QAAQ,MAAM,KAAK,oBAAoB,UAAU,eAAe;EACtE,MAAM,cAAc,KAAK,KAAK,QAAQ,OAAO,eAAe,EAAE,YAAY,SAAS,cAAc,GAAG,KAAK,KAAK,GAAG;AACjH,QAAM,GAAG,aAAa;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;AACvD,YAAU,aAAa,EAAE,WAAW,MAAM,CAAC;AAE3C,MAAI;GACF,MAAM,MAAM,MAAM,MAAM,UAAU,MAAM;GACxC,MAAM,UAAU,OAAO,OAAO,IAAI,MAAM;AACxC,SAAM,QAAQ,IAAI,QAAQ,IAAI,OAAO,UAAU;IAC7C,MAAM,aAAa,QAAQ,aAAa,MAAM,KAAK;IACnD,MAAM,sBAAsB,QAAQ,YAAY;AAChD,QAAI,eAAe,uBAAuB,CAAC,WAAW,WAAW,GAAG,sBAAsB,MAAM,CAC9F,OAAM,IAAI,MAAM,iDAAiD,MAAM,OAAO;AAEhF,QAAI,MAAM,KAAK;AACb,eAAU,YAAY,EAAE,WAAW,MAAM,CAAC;AAC1C;;AAEF,cAAU,QAAQ,WAAW,EAAE,EAAE,WAAW,MAAM,CAAC;AACnD,kBAAc,YAAY,OAAO,KAAK,MAAM,MAAM,MAAM,aAAa,CAAC,CAAC;KACvE,CAAC;GACH,MAAM,aAAa,KAAK,eAAe,YAAY;GACnD,MAAM,kBAAkB,MAAM,KAAK,QAAQ,cAAc,qBAAqB,WAAW;AACzF,UAAO;IACL;IACA,mBAAmB,gBAAgB,SAAS;IAC5C,iBAAiB,gBAAgB;IAClC;WACM,OAAO;AACd,SAAM,GAAG,aAAa;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;AACvD,SAAM;;;CAIV,sBAA8B,OAC5B,UACA,mBACoB;EACpB,MAAM,WAAW,MAAM,KAAK,YAAY,SAAS,UAAU;EAC3D,MAAM,QAAQ,MAAM,KAAK,kBAAkB,UAAU,eAAe;EACpE,MAAM,SAAS,WAAW,SAAS,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;AAC/D,MAAI,WAAW,SAAS,aACtB,OAAM,IAAI,MAAM,4CAA4C,SAAS,aAAa,WAAW,SAAS;AAExG,OAAK,sBAAsB,UAAU,MAAM;AAC3C,SAAO;;CAGT,gBAAwB,OAAO,gBAAiD;AAC9E,MAAI,YAAY,WAAW,UAAU,EAAE;GACrC,MAAM,WAAW,KAAK,eAAe,MAAM,KAAK,MAAM,aAAa,cAAc,YAAY,EAAE,OAAO,CAAC,EAAE,YAAY;AACrH,UAAO,KAAK,eAAe,UAAU,YAAY;;EAEnD,MAAM,WAAW,MAAM,KAAK,UAAU,YAAY;AAClD,MAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MAAM,sDAAsD,SAAS,SAAS;EAE1F,MAAM,WAAW,KAAK,eAAe,MAAM,MAAM,SAAS,MAAM,EAAE,YAAY;AAC9E,SAAO,KAAK,eAAe,UAAU,YAAY;;CAGnD,kBAA0B,UAA0B,iBAAyC;AAC3F,MAAI,SAAS,YAAY,SAAS,aAAa,qBAC7C,OAAM,IAAI,MAAM,kFAAkF,SAAS,WAAW;AAExH,MAAI,SAAS,YAAY,YAAY,SAAS,YAAY,OACxD,OAAM,IAAI,MAAM,mDAAmD,SAAS,UAAU;AAExF,MAAI,SAAS,aAAa,KAAK,SAC7B,OAAM,IAAI,MAAM,uDAAuD,KAAK,SAAS,WAAW,SAAS,WAAW;AAEtH,MAAI,SAAS,SAAS,KAAK,KACzB,OAAM,IAAI,MAAM,mDAAmD,KAAK,KAAK,WAAW,SAAS,OAAO;AAE1G,OAAK,wBAAwB,SAAS;AACtC,SAAO;;CAGT,cAAsB,OAAO,cAAyC;AACpE,MAAI,UAAU,WAAW,UAAU,EAAE;GACnC,MAAM,QAAQ,aAAa,cAAc,UAAU,CAAC;AACpD,UAAO,IAAI,SAAS,OAAO;IACzB,QAAQ;IACR,SAAS,EACP,kBAAkB,OAAO,MAAM,WAAW,EAC3C;IACF,CAAC;;EAEJ,MAAM,WAAW,MAAM,KAAK,UAAU,UAAU;AAChD,MAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MAAM,8CAA8C,SAAS,SAAS;AAElF,SAAO;;CAGT,oBAA4B,OAC1B,UACA,mBACoB;EACpB,MAAM,aAAa,KAAK,kBAAkB,SAAS;AACnD,MAAI,CAAC,SAAS,MAAM;GAClB,MAAM,QAAQ,OAAO,KAAK,MAAM,SAAS,aAAa,CAAC;AACvD,QAAK,uBAAuB,gBAAgB,MAAM,YAAY,cAAc,MAAM,WAAW;AAC7F,UAAO;;EAET,MAAM,SAAS,SAAS,KAAK,WAAW;EACxC,MAAM,SAAuB,EAAE;EAC/B,IAAI,kBAAkB;AACtB,OAAK,uBAAuB,gBAAgB,iBAAiB,WAAW;AACxE,SAAO,MAAM;GACX,MAAM,OAAO,MAAM,OAAO,MAAM;AAChC,OAAI,KAAK,KACP;AAEF,UAAO,KAAK,KAAK,MAAM;AACvB,sBAAmB,KAAK,MAAM;AAC9B,QAAK,uBAAuB,gBAAgB,iBAAiB,WAAW;;AAE1E,SAAO,OAAO,OAAO,OAAO,KAAK,UAAU,OAAO,KAAK,MAAM,CAAC,CAAC;;CAGjE,qBAA6B,aAAsC;EACjE,MAAM,MAAM,SAAS,QAAQ,IAAI,iBAAiB;AAClD,MAAI,CAAC,IACH,QAAO;EAET,MAAM,SAAS,OAAO,IAAI;AAC1B,SAAO,OAAO,SAAS,OAAO,IAAI,UAAU,IAAI,SAAS;;CAG3D,0BACE,gBACA,iBACA,eACS;AACT,mBAAiB;GACf;GACA;GACA,SAAS,cAAc,aAAa,IAAI,KAAK,IAAI,KAAK,KAAK,MAAO,kBAAkB,aAAc,IAAI,CAAC,GAAG;GAC3G,CAAC;;CAGJ,kBAA0B,gBAAgC;AAExD,MAAI,WADuB,KAAK,aAAa,gBAAgB,CAC3B,CAChC,QAAO;EAET,MAAM,UAAU,mBAAmB,YAAY,CAAC,QAAQ,UAAU,WAAW,KAAK,aAAa,OAAO,gBAAgB,CAAC,CAAC;AACxH,MAAI,QAAQ,WAAW,EACrB,QAAO,KAAK,aAAa,QAAQ,GAAG;AAEtC,QAAM,IAAI,MAAM,2EAA2E,cAAc;;CAG3G,wBAAgC,cAAoD;EAClF,MAAM,gBAAgB,WAAW,MAAM;AACvC,MAAI,CAAC,cACH,QAAO;EAET,MAAM,kBAAkB,cAAc,WAAW,OAAO,KAAK;AAC7D,MAAI,gBAAgB,SAAS,mBAAmB,CAC9C,QAAO,gBAAgB,gBAAgB;AAEzC,SAAO,gBAAgB;GACrB,KAAK,OAAO,KAAK,eAAe,SAAS;GACzC,QAAQ;GACR,MAAM;GACP,CAAC;;CAGJ,2BAAmC,aAAmC;AACpE,MAAI,CAAC,KAAK,gBACR,OAAM,IAAI,MAAM,0EAA0E;EAE5F,MAAM,YAAY,OAAO,KAAK,SAAS,mBAAmB,SAAS;AAEnE,MAAI,CADU,OAAO,MAAM,OAAO,KAAK,gCAAgC,SAAS,CAAC,EAAE,KAAK,iBAAiB,UAAU,CAEjH,OAAM,IAAI,MAAM,6DAA6D,SAAS,gBAAgB;;CAI1G,yBAAiC,UAA0B,UAAwB;AACjF,MAAI,CAAC,KAAK,gBACR,OAAM,IAAI,MAAM,iEAAiE;EAEnF,MAAM,YAAY,OAAO,KAAK,SAAS,iBAAiB,SAAS;AAEjE,MAAI,CADU,OAAO,MAAM,OAAO,KAAK,iBAAiB,UAAU,CAEhE,OAAM,IAAI,MAAM,oDAAoD,SAAS,gBAAgB;;;AAKnG,SAAS,mBAAmB,WAA6B;AACvD,QAAO,YAAY,WAAW,EAAE,eAAe,MAAM,CAAC,CACnD,QAAQ,UAAU,MAAM,aAAa,CAAC,CACtC,KAAK,UAAU,MAAM,KAAK"}

package/dist/services/runtime/runtime-config-init.service.d.ts

@@ -0,0 +1,5 @@
+//#region src/services/runtime/runtime-config-init.service.d.ts
+declare function initializeConfigIfMissing(configPath?: string): boolean;
+//#endregion
+export { initializeConfigIfMissing };
+//# sourceMappingURL=runtime-config-init.service.d.ts.map

package/dist/services/runtime/runtime-config-init.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-config-init.service.d.ts","names":[],"sources":["../../../src/services/runtime/runtime-config-init.service.ts"],"mappings":";iBAGgB,yBAAA,CAA0B,UAAA"}

package/dist/services/runtime/runtime-config-init.service.js

@@ -0,0 +1,12 @@
+import { getConfigPath, loadConfig } from "@nextclaw/core";
+import { existsSync } from "node:fs";
+//#region src/services/runtime/runtime-config-init.service.ts
+function initializeConfigIfMissing(configPath = getConfigPath()) {
+	if (existsSync(configPath)) return false;
+	loadConfig(configPath);
+	return true;
+}
+//#endregion
+export { initializeConfigIfMissing };
+
+//# sourceMappingURL=runtime-config-init.service.js.map

package/dist/services/runtime/runtime-config-init.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-config-init.service.js","names":[],"sources":["../../../src/services/runtime/runtime-config-init.service.ts"],"sourcesContent":["import { existsSync } from \"node:fs\";\nimport { getConfigPath, loadConfig } from \"@nextclaw/core\";\n\nexport function initializeConfigIfMissing(configPath = getConfigPath()): boolean {\n  if (existsSync(configPath)) {\n    return false;\n  }\n  loadConfig(configPath);\n  return true;\n}\n"],"mappings":";;;AAGA,SAAgB,0BAA0B,aAAa,eAAe,EAAW;AAC/E,KAAI,WAAW,WAAW,CACxB,QAAO;AAET,YAAW,WAAW;AACtB,QAAO"}

package/dist/services/runtime/service-managed-startup.service.d.ts

@@ -0,0 +1,95 @@
+import { resolveManagedServiceReadySnapshot, resolveManagedServiceUiBinding, resolveSessionRouteCandidate } from "../../utils/runtime/managed-service-routing.utils.js";
+import * as NextclawCore from "@nextclaw/core";
+
+//#region src/services/runtime/service-managed-startup.service.d.ts
+type Config$1 = NextclawCore.Config;
+type StartServiceOptions = {
+  uiOverrides: Partial<Config$1["ui"]>;
+  open: boolean;
+  startupTimeoutMs?: number;
+};
+declare function waitForManagedServiceReadiness(params: {
+  appName: string;
+  childPid: number;
+  healthUrl: string;
+  logPath: string;
+  readinessTimeoutMs: number;
+  quickPhaseTimeoutMs: number;
+  extendedPhaseTimeoutMs: number;
+  appendStartupStage: (logPath: string, message: string) => void;
+  waitForBackgroundServiceReady: (params: {
+    pid: number;
+    healthUrl: string;
+    timeoutMs: number;
+  }) => Promise<{
+    ready: boolean;
+    lastProbeError: string | null;
+  }>;
+  isProcessRunning: (pid: number) => boolean;
+}): Promise<{
+  ready: boolean;
+  lastProbeError: string | null;
+}>;
+declare function reportManagedServiceStart(params: {
+  appName: string;
+  state: {
+    pid: number;
+    logPath: string;
+  };
+  uiConfig: {
+    host: string;
+    port: number;
+  };
+  uiUrl: string;
+  apiUrl: string;
+  readinessTimeoutMs: number;
+  readiness: {
+    ready: boolean;
+    lastProbeError: string | null;
+  };
+  printPublicUiUrls: (host: string, port: number) => Promise<void>;
+  printServiceControlHints: () => void;
+}): Promise<void>;
+declare class ManagedServiceCommandService {
+  private readonly deps;
+  private readonly loggingRuntime;
+  private readonly serviceLogger;
+  private readonly startupLogger;
+  private readonly supervisor;
+  constructor(deps: {
+    startGateway: (options: {
+      uiOverrides: Partial<Config$1["ui"]>;
+      uiStaticDir?: string | null;
+    }) => Promise<void>;
+    printPublicUiUrls: (host: string, port: number) => Promise<void>;
+    printServiceControlHints: () => void;
+    checkUiPortPreflight: (params: {
+      host: string;
+      port: number;
+      healthUrl: string;
+    }) => Promise<{
+      ok: true;
+      reusedExistingHealthyTarget: boolean;
+    } | {
+      ok: false;
+      message: string;
+    }>;
+    resolveUiStaticDir: () => string | null;
+  });
+  runForeground: (options: {
+    uiOverrides: Partial<Config$1["ui"]>;
+    open: boolean;
+  }) => Promise<void>;
+  startService: (options: StartServiceOptions) => Promise<void>;
+  stopService: () => Promise<void>;
+  private handleExistingManagedService;
+  private reuseExistingHealthyStartTarget;
+  private startNewManagedServiceTarget;
+  private waitForBackgroundServiceReady;
+  private resolveStartupTimeoutMs;
+  private appendStartupStage;
+  private printStartupFailureDiagnostics;
+}
+//#endregion
+export { ManagedServiceCommandService, StartServiceOptions, reportManagedServiceStart, resolveManagedServiceReadySnapshot, resolveManagedServiceUiBinding, resolveSessionRouteCandidate, waitForManagedServiceReadiness };
+//# sourceMappingURL=service-managed-startup.service.d.ts.map

package/dist/services/runtime/service-managed-startup.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-managed-startup.service.d.ts","names":[],"sources":["../../../src/services/runtime/service-managed-startup.service.ts"],"mappings":";;;;KAqBK,QAAA,GAAS,YAAA,CAAa,MAAA;AAAA,KAEf,mBAAA;EACV,WAAA,EAAa,OAAA,CAAQ,QAAA;EACrB,IAAA;EACA,gBAAA;AAAA;AAAA,iBAKoB,8BAAA,CAA+B,MAAA;EACnD,OAAA;EACA,QAAA;EACA,SAAA;EACA,OAAA;EACA,kBAAA;EACA,mBAAA;EACA,sBAAA;EACA,kBAAA,GAAqB,OAAA,UAAiB,OAAA;EACtC,6BAAA,GAAgC,MAAA;IAC9B,GAAA;IACA,SAAA;IACA,SAAA;EAAA,MACI,OAAA;IAAU,KAAA;IAAgB,cAAA;EAAA;EAChC,gBAAA,GAAmB,GAAA;AAAA,IACjB,OAAA;EAAU,KAAA;EAAgB,cAAA;AAAA;AAAA,iBA8BR,yBAAA,CAA0B,MAAA;EAC9C,OAAA;EACA,KAAA;IAAS,GAAA;IAAa,OAAA;EAAA;EACtB,QAAA;IAAY,IAAA;IAAc,IAAA;EAAA;EAC1B,KAAA;EACA,MAAA;EACA,kBAAA;EACA,SAAA;IAAa,KAAA;IAAgB,cAAA;EAAA;EAC7B,iBAAA,GAAoB,IAAA,UAAc,IAAA,aAAiB,OAAA;EACnD,wBAAA;AAAA,IACE,OAAA;AAAA,cAiBS,4BAAA;EAAA,iBAMkB,IAAA;EAAA,iBALZ,cAAA;EAAA,iBACA,aAAA;EAAA,iBACA,aAAA;EAAA,iBACA,UAAA;cAEY,IAAA;IAC3B,YAAA,GAAe,OAAA;MAAW,WAAA,EAAa,OAAA,CAAQ,QAAA;MAAe,WAAA;IAAA,MAAkC,OAAA;IAChG,iBAAA,GAAoB,IAAA,UAAc,IAAA,aAAiB,OAAA;IACnD,wBAAA;IACA,oBAAA,GAAuB,MAAA;MAAU,IAAA;MAAc,IAAA;MAAc,SAAA;IAAA,MAAwB,OAAA;MAAU,EAAA;MAAU,2BAAA;IAAA;MAA2C,EAAA;MAAW,OAAA;IAAA;IAC/J,kBAAA;EAAA;EAGF,aAAA,GAAuB,OAAA;IACrB,WAAA,EAAa,OAAA,CAAQ,QAAA;IACrB,IAAA;EAAA,MACE,OAAA;EAeJ,YAAA,GAAsB,OAAA,EAAS,mBAAA,KAAsB,OAAA;EAsDrD,WAAA,QAAwB,OAAA;EAAA,QA0DhB,4BAAA;EAAA,QAgCA,+BAAA;EAAA,QAuBA,4BAAA;EAAA,QA+FA,6BAAA;EAAA,QAuBA,uBAAA;EAAA,QAYA,kBAAA;EAAA,QASA,8BAAA;AAAA"}