@nocobase/app-cli-distribution 0.0.0-stage → 0.1.0-beta.1

package/dist/download-tokens.d.ts

@@ -0,0 +1,57 @@
+export interface DownloadToken {
+    readonly token: string;
+    readonly expiresAt: string;
+    readonly maxDownloads: number;
+}
+export interface Clock {
+    now(): Date;
+}
+/** How long a download token stays usable. */
+export declare const DOWNLOAD_TOKEN_TTL_MS: number;
+/** How many tarball downloads one token allows, so a failed download can be retried. */
+export declare const DOWNLOAD_TOKEN_MAX_DOWNLOADS = 3;
+export interface DownloadTokenRecord {
+    readonly id: string;
+    readonly tokenHash: string;
+    readonly createdById: string | null;
+    readonly target: string | null;
+    readonly downloads: number;
+    readonly expiresAt: string;
+    readonly createdAt: string;
+}
+/** Storage operations within the host's transaction. Updates must compare the stored download count atomically. */
+export interface DownloadTokenTransaction {
+    insert(record: DownloadTokenRecord): Promise<void>;
+    findByHash(hash: string): Promise<DownloadTokenRecord | null | undefined>;
+    updateIfDownloads(id: string, expected: number, values: {
+        target: string | null;
+        downloads: number;
+    }): Promise<boolean>;
+}
+export interface DownloadTokenStore {
+    transaction<T>(fn: (store: DownloadTokenTransaction) => Promise<T>): Promise<T>;
+}
+/** What a request with a download token asks for. */
+export interface DownloadRequest {
+    readonly product?: string;
+    /** The platform it resolves or downloads for; absent for the manifest, and for the universal tarball. */
+    readonly target?: string;
+    /** A tarball download, which counts against the token. */
+    readonly download?: boolean;
+}
+export interface DownloadTokenService {
+    create(createdById: string | null): Promise<DownloadToken>;
+    /** Lets `request` through with `token`, binding its platform and counting a download; `DOWNLOAD_TOKEN_INVALID` otherwise. */
+    admit(token: string, request: DownloadRequest): Promise<void>;
+}
+export interface DownloadTokenServiceDeps {
+    /** The one product a download token downloads: the application's CLI (`agents.cli.name`). */
+    readonly product: string;
+    readonly store: DownloadTokenStore;
+    readonly ids: {
+        next(): string;
+    };
+    readonly clock: Clock;
+}
+export declare function createDownloadTokenService(deps: DownloadTokenServiceDeps): DownloadTokenService;
+//# sourceMappingURL=download-tokens.d.ts.map

package/dist/download-tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"download-tokens.d.ts","sourceRoot":"","sources":["../src/download-tokens.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AACD,MAAM,WAAW,KAAK;IACpB,GAAG,IAAI,IAAI,CAAC;CACb;AACD,8CAA8C;AAC9C,eAAO,MAAM,qBAAqB,EAAE,MAAoB,CAAC;AAEzD,wFAAwF;AACxF,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,mHAAmH;AACnH,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAC1E,iBAAiB,CACf,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GACnD,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AACD,MAAM,WAAW,kBAAkB;IACjC,WAAW,CAAC,CAAC,EACX,EAAE,EAAE,CAAC,KAAK,EAAE,wBAAwB,KAAK,OAAO,CAAC,CAAC,CAAC,GAClD,OAAO,CAAC,CAAC,CAAC,CAAC;CACf;AAED,qDAAqD;AACrD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,yGAAyG;IACzG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3D,6HAA6H;IAC7H,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,wBAAwB;IACvC,6FAA6F;IAC7F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,GAAG,EAAE;QAAE,IAAI,IAAI,MAAM,CAAA;KAAE,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,wBAAwB,GAC7B,oBAAoB,CAsEtB"}

package/dist/download-tokens.js

@@ -0,0 +1,66 @@
+import { ProtocolError } from '@nocobase/agent-protocol';
+import { createHash, randomBytes } from 'node:crypto';
+import { CREDENTIAL_PREFIXES } from '@nocobase/agent-protocol';
+/** How long a download token stays usable. */
+export const DOWNLOAD_TOKEN_TTL_MS = 30 * 60_000;
+/** How many tarball downloads one token allows, so a failed download can be retried. */
+export const DOWNLOAD_TOKEN_MAX_DOWNLOADS = 3;
+export function createDownloadTokenService(deps) {
+    const { store, ids, clock, product } = deps;
+    const invalid = (message) => new ProtocolError('DOWNLOAD_TOKEN_INVALID', message);
+    const spent = () => invalid('The download token is unknown, expired or used up. Get a new one where you copied it.');
+    return {
+        create: (createdById) => store.transaction(async (tokens) => {
+            const now = clock.now();
+            const token = `${CREDENTIAL_PREFIXES.download}${randomBytes(32).toString('base64url')}`;
+            const expiresAt = new Date(now.getTime() + DOWNLOAD_TOKEN_TTL_MS).toISOString();
+            await tokens.insert({
+                id: ids.next(),
+                tokenHash: hashCredential(token),
+                createdById,
+                target: null,
+                downloads: 0,
+                expiresAt,
+                createdAt: now.toISOString(),
+            });
+            return {
+                token,
+                expiresAt,
+                maxDownloads: DOWNLOAD_TOKEN_MAX_DOWNLOADS,
+            };
+        }),
+        admit: (token, request) => store.transaction(async (tokens) => {
+            if (request.product !== undefined && request.product !== product)
+                throw invalid(`A download token downloads only ${product}.`);
+            const record = token
+                ? await tokens.findByHash(hashCredential(token))
+                : undefined;
+            const downloads = Number(record?.downloads ?? 0);
+            if (!record ||
+                Date.parse(record.expiresAt) <= clock.now().getTime() ||
+                downloads >= DOWNLOAD_TOKEN_MAX_DOWNLOADS)
+                throw spent();
+            const { target } = request;
+            if (target === undefined && !request.download)
+                return;
+            if (target !== undefined &&
+                record.target !== null &&
+                record.target !== target)
+                throw invalid(`This download token is for ${record.target}, not ${target}.`);
+            if ((target === undefined || record.target === target) &&
+                !request.download)
+                return;
+            // Binds the platform and counts the download; a concurrent request that changed the row first wins.
+            const updated = await tokens.updateIfDownloads(record.id, downloads, {
+                target: target ?? record.target,
+                downloads: request.download ? downloads + 1 : downloads,
+            });
+            if (!updated)
+                throw spent();
+        }),
+    };
+}
+function hashCredential(value) {
+    return createHash('sha256').update(value, 'utf8').digest('hex');
+}
+//# sourceMappingURL=download-tokens.js.map

package/dist/download-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"download-tokens.js","sourceRoot":"","sources":["../src/download-tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAU/D,8CAA8C;AAC9C,MAAM,CAAC,MAAM,qBAAqB,GAAW,EAAE,GAAG,MAAM,CAAC;AAEzD,wFAAwF;AACxF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAmD9C,MAAM,UAAU,0BAA0B,CACxC,IAA8B;IAE9B,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC5C,MAAM,OAAO,GAAG,CAAC,OAAe,EAAiB,EAAE,CACjD,IAAI,aAAa,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,GAAkB,EAAE,CAChC,OAAO,CACL,uFAAuF,CACxF,CAAC;IAEJ,OAAO;QACL,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CACtB,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACjC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,GAAG,mBAAmB,CAAC,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACxF,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,GAAG,CAAC,OAAO,EAAE,GAAG,qBAAqB,CACtC,CAAC,WAAW,EAAE,CAAC;YAChB,MAAM,MAAM,CAAC,MAAM,CAAC;gBAClB,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE;gBACd,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC;gBAChC,WAAW;gBACX,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,CAAC;gBACZ,SAAS;gBACT,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;aAC7B,CAAC,CAAC;YACH,OAAO;gBACL,KAAK;gBACL,SAAS;gBACT,YAAY,EAAE,4BAA4B;aAC3C,CAAC;QACJ,CAAC,CAAC;QAEJ,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CACxB,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACjC,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO;gBAC9D,MAAM,OAAO,CAAC,mCAAmC,OAAO,GAAG,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,KAAK;gBAClB,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAChD,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC,CAAC,CAAC;YACjD,IACE,CAAC,MAAM;gBACP,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE;gBACrD,SAAS,IAAI,4BAA4B;gBAEzC,MAAM,KAAK,EAAE,CAAC;YAChB,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;YAC3B,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAAE,OAAO;YACtD,IACE,MAAM,KAAK,SAAS;gBACpB,MAAM,CAAC,MAAM,KAAK,IAAI;gBACtB,MAAM,CAAC,MAAM,KAAK,MAAM;gBAExB,MAAM,OAAO,CACX,8BAA8B,MAAM,CAAC,MAAM,SAAS,MAAM,GAAG,CAC9D,CAAC;YACJ,IACE,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC;gBAClD,CAAC,OAAO,CAAC,QAAQ;gBAEjB,OAAO;YACT,oGAAoG;YACpG,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE;gBACnE,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM;gBAC/B,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;aACxD,CAAC,CAAC;YACH,IAAI,CAAC,OAAO;gBAAE,MAAM,KAAK,EAAE,CAAC;QAC9B,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,3 @@
+import { Hono } from 'hono';
+export declare function distributionRouter(): Hono;
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,wBAAgB,kBAAkB,IAAI,IAAI,CAmBzC"}

package/dist/http.js

@@ -0,0 +1,19 @@
+import { ProtocolError } from '@nocobase/agent-protocol';
+import { ApiError, apiErrorHandler } from '@nocobase/app-server/router';
+import { Hono } from 'hono';
+export function distributionRouter() {
+    const router = new Hono();
+    router.onError((error, context) => apiErrorHandler(error instanceof ProtocolError
+        ? new ApiError({
+            status: error.apiStatus,
+            reason: error.code,
+            domain: error.domain,
+            message: error.message,
+            ...(error.details ? { metadata: error.details } : {}),
+            httpStatus: error.status,
+            cause: error,
+        })
+        : error, context));
+    return router;
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,MAAM,UAAU,kBAAkB;IAChC,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAChC,eAAe,CACb,KAAK,YAAY,aAAa;QAC5B,CAAC,CAAC,IAAI,QAAQ,CAAC;YACX,MAAM,EAAE,KAAK,CAAC,SAAS;YACvB,MAAM,EAAE,KAAK,CAAC,IAAI;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,UAAU,EAAE,KAAK,CAAC,MAA8B;YAChD,KAAK,EAAE,KAAK;SACb,CAAC;QACJ,CAAC,CAAC,KAAK,EACT,OAAO,CACR,CACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export * from './artifacts.js';
+export * from './download-tokens.js';
+export * from './routes.js';
+export * from './install.js';
+export { DistTargetParams, DistFileParams, DistTargetQuery, DownloadTokenSchema, } from './schemas.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,mBAAmB,GACpB,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export * from './artifacts.js';
+export * from './download-tokens.js';
+export * from './routes.js';
+export * from './install.js';
+export { DistTargetParams, DistFileParams, DistTargetQuery, DownloadTokenSchema, } from './schemas.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,mBAAmB,GACpB,MAAM,cAAc,CAAC"}

package/dist/install.d.ts

@@ -0,0 +1,41 @@
+import { type DescribeRouteOptions } from '@nocobase/app-server/router';
+import { Hono, type Context } from 'hono';
+/** Trusted host-authored shell fragments; never derive these from requests or configuration. */
+export interface InstallScriptExtensions {
+    readonly intro?: string;
+    readonly usage?: string;
+    readonly command?: string;
+    readonly name?: string;
+    readonly prefix?: string;
+    readonly variables?: string;
+    readonly parseServer?: string;
+    readonly parseRunner?: string;
+    readonly parsePrefix?: string;
+    readonly parseService?: string;
+    readonly validate?: string;
+    readonly defaultPrefix?: string;
+    readonly credentials?: string;
+    readonly pnpm?: string;
+    readonly registered?: string;
+    readonly resolveFailure?: string;
+    readonly afterCli?: string;
+    readonly next?: string;
+    readonly productComment?: string;
+    readonly npmInstallComment?: string;
+}
+export interface InstallScriptOptions {
+    readonly cli: string;
+    readonly server?: string;
+    readonly extensions?: InstallScriptExtensions;
+}
+export declare function installScript(options: InstallScriptOptions): string;
+export interface InstallRoutesOptions {
+    readonly cli: () => string;
+    readonly publicOrigin?: () => string | undefined;
+    readonly publicBasePath?: string;
+    readonly extensions?: InstallScriptExtensions;
+    readonly openapi?: DescribeRouteOptions;
+}
+export declare function requestedServer(context: Context, options?: Pick<InstallRoutesOptions, 'publicOrigin' | 'publicBasePath'>): string;
+export declare function createInstallRoutes(options: InstallRoutesOptions): Hono;
+//# sourceMappingURL=install.d.ts.map

package/dist/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAMA,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,KAAK,OAAO,EAAE,MAAM,MAAM,CAAC;AAE1C,gGAAgG;AAChG,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,uBAAuB,CAAC;CAC/C;AACD,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,MAAM,CAkBnE;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,uBAAuB,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC;CACzC;AACD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE,IAAI,CAAC,oBAAoB,EAAE,cAAc,GAAG,gBAAgB,CAAM,GAC1E,MAAM,CA2BR;AA0PD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAmCvE"}

package/dist/install.js

@@ -0,0 +1,318 @@
+import { DIST_PRODUCT_PATTERN, DIST_ROUTES, HEADERS, } from '@nocobase/agent-protocol';
+import { npmLauncherScript } from '@nocobase/app-cli-client/install';
+import { apiErrorResponse, cliRoute, describeRoute, } from '@nocobase/app-server/router';
+import { Hono } from 'hono';
+const SAFE_SERVER = /^https?:\/\/[A-Za-z0-9.:[\]_-]+(?:\/[A-Za-z0-9._~/-]*)?$/u;
+export function installScript(options) {
+    if (!DIST_PRODUCT_PATTERN.test(options.cli) ||
+        options.cli === 'nocobase-runner')
+        throw new Error(`Not a CLI command name: ${options.cli}`);
+    const server = options.server ?? '';
+    const fallback = SAFE_SERVER.test(server) ? server.replace(/\/+$/u, '') : '';
+    const extensions = { ...DEFAULT_EXTENSIONS, ...options.extensions };
+    return INSTALL_SCRIPT_TEMPLATE.replace(/@([A-Za-z]+)@/gu, (marker, key) => key in extensions
+        ? (extensions[key] ?? '')
+        : marker)
+        .replaceAll('@CLI@', options.cli)
+        .replace('@DEFAULT_SERVER@', fallback);
+}
+export function requestedServer(context, options = {}) {
+    const url = new URL(context.req.url);
+    const configured = options.publicOrigin?.();
+    let origin;
+    if (configured)
+        origin = configured.replace(/\/+$/u, '');
+    else {
+        const proto = context.req
+            .header('x-forwarded-proto')
+            ?.split(',')[0]
+            ?.trim();
+        const host = context.req.header('x-forwarded-host')?.split(',')[0]?.trim() ??
+            context.req.header('host') ??
+            url.host;
+        const protocol = proto === 'https' || proto === 'http'
+            ? proto
+            : url.protocol.replace(/:$/u, '');
+        origin = `${protocol}://${host}`;
+    }
+    const base = options.publicBasePath !== undefined
+        ? options.publicBasePath.replace(/\/+$/u, '')
+        : url.pathname.endsWith(DIST_ROUTES.installScript)
+            ? url.pathname.slice(0, -DIST_ROUTES.installScript.length)
+            : '';
+    return `${origin}${base}`;
+}
+const DEFAULT_EXTENSIONS = {
+    intro: `# Installs the @CLI@ CLI this application serves.
+#   curl -fsSL <server>/api/agents/dist/installScript | sh -s -- --token <download token> [options]
+`,
+    usage: `Usage: install.sh --token <token> [--server <url>] [options]
+
+  --token <token>         A download token for the CLI
+  --server <url>          The application (defaults to the script's application)
+  --prefix <dir>          Where to install @CLI@ (default: ~/.local/share/@CLI@, or NOCOBASE_CLI_INSTALL_DIR)
+  --bin-dir <dir>         Where to link the command (default: ~/.local/bin, or NOCOBASE_CLI_BIN_DIR)
+  --dry-run               Print what would be done, and change nothing`,
+    command: ``,
+    name: ``,
+    prefix: ``,
+    variables: ``,
+    parseServer: `    --server) server="\${2:-}"; shift 2 ;;`,
+    parseRunner: ``,
+    parsePrefix: ``,
+    parseService: ``,
+    validate: ``,
+    defaultPrefix: ``,
+    credentials: `header="${HEADERS.downloadToken}"
+`,
+    pnpm: ``,
+    registered: ``,
+    resolveFailure: `  if [ "$status" = 401 ] && [ -x "$dir/current/bin/$product" ]; then
+    say "The token was not accepted (used up or expired), but $product is installed in $dir already; run \\"$product update\\" to update it."
+    installed=kept
+    return 0
+  elif [ "$status" != 200 ]; then
+    message="$(sed -n 's/.*"message":"\\([^"]*\\)".*/\\1/p' "$tmp/resolve")"
+    fail "$server answered $status: \${message:-$(cat "$tmp/resolve")}"
+  fi`,
+    afterCli: `say "$cli is installed: $bin_dir/$cli"
+`,
+    next: `say "Next: $cli login --server $server"`,
+    npmInstallComment: `    # Optional platform binaries are not needed by this installation.`,
+    productComment: `# Installs one product and records its installation.
+`,
+};
+const INSTALL_SCRIPT_TEMPLATE = `#!/bin/sh
+@intro@set -eu
+
+usage() {
+  cat <<'USAGE'
+@usage@
+USAGE
+}
+
+cli=@CLI@
+@command@
+server="@DEFAULT_SERVER@"
+server_explicit=0
+token=""
+@name@
+prefix="\${NOCOBASE_CLI_INSTALL_DIR:-}"
+@prefix@
+bin_dir="\${NOCOBASE_CLI_BIN_DIR:-}"
+@variables@
+dry_run=0
+while [ $# -gt 0 ]; do
+  case "$1" in
+@parseServer@
+    --token) token="\${2:-}"; shift 2 ;;
+@parseRunner@
+    --prefix) prefix="\${2:-}"; shift 2 ;;
+@parsePrefix@
+    --bin-dir) bin_dir="\${2:-}"; shift 2 ;;
+@parseService@
+    --dry-run) dry_run=1; shift ;;
+    -h|--help) usage; exit 0 ;;
+    *) echo "Unknown option: $1" >&2; usage >&2; exit 2 ;;
+  esac
+done
+@validate@
+if [ -z "$server" ] || [ -z "$token" ]; then
+  usage >&2
+  exit 2
+fi
+server="\${server%/}"
+prefix="\${prefix:-$HOME/.local/share/$cli}"
+@defaultPrefix@
+bin_dir="\${bin_dir:-$HOME/.local/bin}"
+
+say() { printf '%s\\n' "$*"; }
+fail() { printf '%s install: %s\\n' "$cli" "$*" >&2; exit 1; }
+run() {
+  if [ "$dry_run" = 1 ]; then
+    say "+ $*"
+  else
+    "$@"
+  fi
+}
+
+@credentials@
+case "$(uname -s)" in
+  Darwin) os=darwin ;;
+  Linux) os=linux ;;
+  *) fail "$cli runs on macOS and Linux, not on $(uname -s). On Windows, use WSL." ;;
+esac
+case "$(uname -m)" in
+  arm64|aarch64) arch=arm64 ;;
+  x86_64|amd64) arch=x64 ;;
+  *) fail "Unsupported processor: $(uname -m)." ;;
+esac
+target="\${NOCOBASE_CLI_TARGET:-$os-$arch}"
+
+command -v curl >/dev/null 2>&1 || fail "curl is required."
+command -v tar >/dev/null 2>&1 || fail "tar is required."
+if command -v sha256sum >/dev/null 2>&1; then
+  sha256() { sha256sum "$1" | cut -d ' ' -f 1; }
+elif command -v shasum >/dev/null 2>&1; then
+  sha256() { shasum -a 256 "$1" | cut -d ' ' -f 1; }
+else
+  fail "sha256sum or shasum is required to check the download."
+fi
+
+@pnpm@
+tmp="$(mktemp -d)"
+trap 'rm -rf "$tmp"' EXIT INT TERM
+@registered@
+field() { sed -n "s/^$1=//p" "$tmp/resolve" | head -n 1; }
+
+# A universal package carries no Node: sets node_bin to the node on PATH when it is Node.js 24 or newer, and fails
+# saying how to install one otherwise. require_node <command>.
+require_node() {
+  node_hint="Install Node.js 24 or newer (https://nodejs.org/en/download, or with a version manager: nvm install 24), open a new shell so that node is on PATH, and run this command again."
+  node_bin="$(command -v node 2>/dev/null || true)"
+  [ -n "$node_bin" ] || fail "$1 needs Node.js 24 or newer, and node is not on PATH. $node_hint"
+  node_version="$("$node_bin" -p 'process.versions.node' 2>/dev/null || true)"
+  case "$node_version" in
+    ''|*[!0-9.]*) fail "$1 needs Node.js 24 or newer, and $node_bin does not say its version. $node_hint" ;;
+  esac
+  [ "\${node_version%%.*}" -ge 24 ] || fail "$1 needs Node.js 24 or newer; $node_bin is $node_version. $node_hint"
+}
+
+# A package the application names on npm is installed with npm: sets npm_bin to NOCOBASE_NPM or the npm on PATH, and
+# fails saying how to get one otherwise. require_npm <command>.
+require_npm() {
+  npm_bin="\${NOCOBASE_NPM:-$(command -v npm 2>/dev/null || true)}"
+  if [ -z "$npm_bin" ] || [ ! -x "$npm_bin" ]; then
+    fail "$1 is installed from npm, and npm is not on PATH. npm comes with Node.js: install Node.js 24 or newer from https://nodejs.org/en/download (a version manager such as nvm installs npm too), or set NOCOBASE_NPM to its path, and run this command again."
+  fi
+}
+
+# The launcher of a version installed from npm: <version>/bin/<command> starts node_modules/.bin/<command> with the
+# first Node.js 24 or newer it finds, as the universal tarball's launcher does.
+write_npm_launcher() {
+  cat <<'LAUNCHER'
+${npmLauncherScript()}LAUNCHER
+}
+
+@productComment@install_product() {
+  product="$1"
+  dir="$2"
+  mode="$3"
+  installed=new
+  status="$(curl -sS -o "$tmp/resolve" -w '%{http_code}' \\
+    -H "$header: $token" \\
+    "$server/api/agents/dist/products/$product/targets/$target?format=env&accept=npm")" ||
+    fail "Could not reach $server."
+@resolveFailure@
+  kind="$(field kind)"
+  version="$(field version)"
+  case "$version" in
+    ''|*[!0-9A-Za-z.+-]*) fail "The server named an unexpected version: $version" ;;
+  esac
+  universal=""
+  if [ "$kind" = npm ]; then
+    package="$(field package)"
+    case "$package" in
+      ''|*[!0-9a-z@/._~-]*) fail "The server named an unexpected npm package: $package" ;;
+    esac
+    require_node "$product"
+    require_npm "$product"
+    say "$product $version comes from npm ($package@$version) and runs on this machine's Node.js $node_version ($node_bin)."
+  else
+    url="$(field url)"
+    checksum="$(field sha256)"
+    case "$url" in
+      /*) ;;
+      *) fail "The server named an unexpected download: $url" ;;
+    esac
+    case "$checksum" in
+      *[!0-9a-f]*|'') fail "The server named an unexpected checksum: $checksum" ;;
+    esac
+    universal="$(field universal)"
+    if [ "$universal" = true ]; then
+      require_node "$product"
+      say "$product $version runs on this machine's Node.js $node_version ($node_bin)."
+    fi
+  fi
+
+  dest="$dir/versions/$version"
+  if [ -x "$dest/bin/$product" ]; then
+    say "$product $version for $target is already installed in $dest."
+  elif [ "$kind" = npm ]; then
+    say "Installing $package@$version with npm ..."
+    run rm -rf "$dest.partial"
+    run mkdir -p "$dest.partial"
+@npmInstallComment@
+    run "$npm_bin" install --prefix "$dest.partial" --no-save --no-audit --no-fund --omit=optional "$package@$version"
+    if [ "$dry_run" = 0 ]; then
+      [ -e "$dest.partial/node_modules/.bin/$product" ] || fail "$package@$version provides no $product command."
+      mkdir -p "$dest.partial/bin"
+      write_npm_launcher >"$dest.partial/bin/$product"
+      chmod 755 "$dest.partial/bin/$product"
+    fi
+    run mv "$dest.partial" "$dest"
+  else
+    say "Downloading $product $version for $target from $server ..."
+    run curl -fSL --progress-bar -H "$header: $token" -o "$tmp/$product.tar.gz" "$server$url"
+    if [ "$dry_run" = 0 ]; then
+      actual="$(sha256 "$tmp/$product.tar.gz")"
+      [ "$actual" = "$checksum" ] || fail "The download does not match its SHA-256 (expected $checksum, got $actual)."
+      say "Checksum verified."
+    fi
+    run rm -rf "$dest.partial"
+    run mkdir -p "$dest.partial"
+    run tar -xzf "$tmp/$product.tar.gz" -C "$dest.partial" --strip-components=1
+    run mv "$dest.partial" "$dest"
+  fi
+  run ln -sfn "versions/$version" "$dir/current"
+  if [ "$universal" = true ] || [ "$kind" = npm ]; then
+    # The launcher's first choice, so a service that does not have this shell's PATH runs the same Node.
+    run ln -sfn "$node_bin" "$dir/node"
+  fi
+  run mkdir -p "$bin_dir"
+  run ln -sfn "$dir/current/bin/$product" "$bin_dir/$product"
+  if [ "$dry_run" = 0 ]; then
+    printf '{\\n  "prefix": "%s",\\n  "binLink": "%s",\\n  "mode": "%s"\\n}\\n' "$dir" "$bin_dir/$product" "$mode" >"$dir/install.json"
+  fi
+}
+
+# 1. The CLI.
+previous_cli="$(readlink "$prefix/current" 2>/dev/null || true)"
+install_product "$cli" "$prefix" cli
+# Reuse the saved ACP service definitions after switching current, including every profile.
+if [ "$installed" = new ] && [ "$previous_cli" != "$(readlink "$prefix/current" 2>/dev/null || true)" ]; then
+  run "$prefix/current/bin/$cli" acp service restart || say "Could not restart background connections. Run $cli acp service restart to retry."
+fi
+@afterCli@
+case ":$PATH:" in
+  *":$bin_dir:"*) ;;
+  *) say "Add $bin_dir to your PATH to run $cli from a shell: export PATH=\\"$bin_dir:\\$PATH\\"" ;;
+esac
+@next@
+`;
+export function createInstallRoutes(options) {
+    const router = new Hono();
+    router.get('/installScript', describeRoute(options.openapi ?? {
+        tags: ['CliDistribution'],
+        summary: 'Get the CLI install script',
+        operationId: 'cliDistributionInstallScript',
+        ...cliRoute(false),
+        security: [],
+        responses: {
+            200: {
+                description: 'A POSIX shell script.',
+                content: { 'text/x-shellscript': { schema: { type: 'string' } } },
+            },
+            500: apiErrorResponse(500),
+        },
+    }), (context) => context.body(installScript({
+        cli: options.cli(),
+        server: requestedServer(context, options),
+        ...(options.extensions ? { extensions: options.extensions } : {}),
+    }), 200, {
+        'content-type': 'text/x-shellscript; charset=utf-8',
+        'cache-control': 'no-cache',
+    }));
+    return router;
+}
+//# sourceMappingURL=install.js.map

package/dist/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,OAAO,GACR,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EACL,gBAAgB,EAChB,QAAQ,EACR,aAAa,GAEd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAC1C,MAAM,WAAW,GAAG,2DAA2D,CAAC;AA6BhF,MAAM,UAAU,aAAa,CAAC,OAA6B;IACzD,IACE,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QACvC,OAAO,CAAC,GAAG,KAAK,iBAAiB;QAEjC,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,MAAM,UAAU,GAAG,EAAE,GAAG,kBAAkB,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IACpE,OAAO,uBAAuB,CAAC,OAAO,CACpC,iBAAiB,EACjB,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE,CACtB,GAAG,IAAI,UAAU;QACf,CAAC,CAAC,CAAC,UAAU,CAAC,GAAoC,CAAC,IAAI,EAAE,CAAC;QAC1D,CAAC,CAAC,MAAM,CACb;SACE,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC;SAChC,OAAO,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAQD,MAAM,UAAU,eAAe,CAC7B,OAAgB,EAChB,UAAyE,EAAE;IAE3E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;IAC5C,IAAI,MAAc,CAAC;IACnB,IAAI,UAAU;QAAE,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;SACpD,CAAC;QACJ,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG;aACtB,MAAM,CAAC,mBAAmB,CAAC;YAC5B,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACf,EAAE,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,GACR,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;YAC7D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC;QACX,MAAM,QAAQ,GACZ,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM;YACnC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,QAAQ,MAAM,IAAI,EAAE,CAAC;IACnC,CAAC;IACD,MAAM,IAAI,GACR,OAAO,CAAC,cAAc,KAAK,SAAS;QAClC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC;YAChD,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC;YAC1D,CAAC,CAAC,EAAE,CAAC;IACX,OAAO,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,kBAAkB,GAAsC;IAC5D,KAAK,EAAE;;CAER;IACC,KAAK,EAAE;;;;;;uEAM8D;IACrE,OAAO,EAAE,EAAE;IACX,IAAI,EAAE,EAAE;IACR,MAAM,EAAE,EAAE;IACV,SAAS,EAAE,EAAE;IACb,WAAW,EAAE,4CAA4C;IACzD,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,EAAE;IACf,YAAY,EAAE,EAAE;IAChB,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,EAAE;IACjB,WAAW,EAAE,WAAW,OAAO,CAAC,aAAa;CAC9C;IACC,IAAI,EAAE,EAAE;IACR,UAAU,EAAE,EAAE;IACd,cAAc,EAAE;;;;;;;KAOb;IACH,QAAQ,EAAE;CACX;IACC,IAAI,EAAE,yCAAyC;IAC/C,iBAAiB,EAAE,uEAAuE;IAC1F,cAAc,EAAE;CACjB;CACA,CAAC;AACF,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6G9B,iBAAiB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkGpB,CAAC;AACF,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,CACR,gBAAgB,EAChB,aAAa,CACX,OAAO,CAAC,OAAO,IAAI;QACjB,IAAI,EAAE,CAAC,iBAAiB,CAAC;QACzB,OAAO,EAAE,4BAA4B;QACrC,WAAW,EAAE,8BAA8B;QAC3C,GAAG,QAAQ,CAAC,KAAK,CAAC;QAClB,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE;YACT,GAAG,EAAE;gBACH,WAAW,EAAE,uBAAuB;gBACpC,OAAO,EAAE,EAAE,oBAAoB,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;aAClE;YACD,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC;SAC3B;KACF,CACF,EACD,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,IAAI,CACV,aAAa,CAAC;QACZ,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,EAAE,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC;QACzC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC,EACF,GAAG,EACH;QACE,cAAc,EAAE,mCAAmC;QACnD,eAAe,EAAE,UAAU;KAC5B,CACF,CACJ,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/public-install.d.ts

@@ -0,0 +1,17 @@
+import { type DescribeRouteOptions } from '@nocobase/app-server/router';
+import { Hono } from 'hono';
+export interface PublicInstallScriptOptions {
+    readonly cli: string;
+    readonly server?: string;
+}
+/** A separate CLI-only installer. It neither changes nor extends the protected installation protocol. */
+export declare function publicInstallScript(options: PublicInstallScriptOptions): string;
+export interface PublicInstallRoutesOptions {
+    readonly cli: () => string;
+    readonly publicOrigin?: () => string | undefined;
+    readonly publicBasePath?: string;
+    readonly openapi?: DescribeRouteOptions;
+}
+/** Mount explicitly alongside a host's independently configured public artifact admission. */
+export declare function createPublicInstallRoutes(options: PublicInstallRoutesOptions): Hono;
+//# sourceMappingURL=public-install.d.ts.map

package/dist/public-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-install.d.ts","sourceRoot":"","sources":["../src/public-install.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,yGAAyG;AACzG,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,0BAA0B,GAClC,MAAM,CAWR;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC;CACzC;AAED,8FAA8F;AAC9F,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,0BAA0B,GAClC,IAAI,CAgCN"}