@nocobase/app-installer 0.0.0-stage → 0.1.0-beta.10

package/dist/lib/ecosystem.js

@@ -0,0 +1,82 @@
+/**
+ * Builds `ecosystem.config.cjs`, the pm2 configuration every start goes through.
+ *
+ * pm2 runs `node launcher.mjs` rather than the application's entry file. The file names nothing that changes: which
+ * release runs and with which variables is decided by `launcher.mjs` each time the process starts, so a plain
+ * `pm2 restart` picks up a switched `current` and an edited `app.env`.
+ *
+ * pm2 runs `node` itself, with the script as its argument. Pointing `script` at a module instead has pm2's fork mode
+ * load it through `ProcessContainerFork.js`, where `import.meta.main` is false, so `standalone.js` never calls
+ * `startServer()` and the application silently never starts.
+ */
+export function buildEcosystemConfig(options) {
+    return `// Written by app-installer. Starting the application always goes through this file.
+const path = require('node:path');
+
+const root = __dirname;
+
+module.exports = {
+  apps: [
+    {
+      name: ${JSON.stringify(options.name)},
+      // Run node itself, so launcher.mjs, and the application after it, are the main module (import.meta.main).
+      script: ${JSON.stringify(options.nodePath)},
+      // launcher.mjs reads app.env and resolves \`current\` on every start, so \`pm2 restart\` applies changes to either.
+      args: [path.join(root, 'launcher.mjs')],
+      interpreter: 'none',
+      cwd: root,
+      autorestart: true,
+      min_uptime: '30s',
+      max_restarts: 10,
+      exp_backoff_restart_delay: 1000,
+      // pm2 sends SIGKILL 1.6s after SIGINT by default; the application finishes what it is doing first.
+      kill_timeout: 60000,
+      out_file: path.join(root, 'logs/app.out.log'),
+      error_file: path.join(root, 'logs/app.err.log'),
+      time: true,
+    },
+  ],
+};
+`;
+}
+/**
+ * Builds `launcher.mjs`, the script pm2 runs. On every start it reads `app.env`, resolves `current`, and replaces itself
+ * with `node <release>/dist/server/standalone.js` through `process.execve`.
+ *
+ * Replacing the process rather than starting a child keeps the application on the pid pm2 watches, receiving pm2's
+ * signals itself and running as the main module. A child would need its signals forwarded, and would outlive a
+ * launcher that pm2 kills, holding the port the next start needs. Node flags given to the launcher, such as
+ * `--max-old-space-size` in `args`, pass on to the application; pm2's `node_args` does not apply to an
+ * `interpreter: 'none'` process.
+ *
+ * pm2 gives the launcher an IPC channel, but the channel does not survive `process.execve`: the application starts
+ * without `process.send`, and pm2 options that rely on it, such as `wait_ready` and `shutdown_with_message`, are not
+ * available.
+ *
+ * The entry is resolved to its real path, so a running application keeps loading its modules from the release it
+ * started from even after `current` moves on.
+ */
+export function buildLauncher() {
+    return `// Written by app-installer. pm2 runs this file; it starts the release \`current\` points at, with app.env applied.
+import { readFileSync, realpathSync } from 'node:fs';
+import path from 'node:path';
+import { parseEnv } from 'node:util';
+
+const root = import.meta.dirname;
+const env = {
+  ...process.env,
+  ...parseEnv(readFileSync(path.join(root, 'app.env'), 'utf8')),
+};
+const entry = realpathSync(path.join(root, 'current/dist/server/standalone.js'));
+
+// Become the application rather than start it as a child: same pid for pm2, signals delivered directly, and
+// standalone.js is the main module, which is what makes it start the server. Node flags and arguments pass on
+// unchanged.
+process.execve(
+  process.execPath,
+  [process.execPath, ...process.execArgv, entry, ...process.argv.slice(2)],
+  env,
+);
+`;
+}
+//# sourceMappingURL=ecosystem.js.map

package/dist/lib/ecosystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecosystem.js","sourceRoot":"","sources":["../../src/lib/ecosystem.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAyB;IAC5D,OAAO;;;;;;;;cAQK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;;gBAE1B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;CAiB/C,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO;;;;;;;;;;;;;;;;;;;;CAoBR,CAAC;AACF,CAAC"}

package/dist/lib/env-file.js

@@ -0,0 +1,87 @@
+import { readFile } from 'node:fs/promises';
+import { parseEnv } from 'node:util';
+/**
+ * Builds `app.env`, the one set of runtime variables both the application and the installer's own CLI calls read.
+ * `launcher.mjs` reads it on every start, so an edit takes effect with `pm2 restart`.
+ *
+ * `APP_CONFIG_FILE` and `APP_STORAGE_DIR` are absolute on purpose. A built server treats the directory above `dist/` as
+ * its deployment root and keeps `config.yml` and `storage/` there by default, which here is the release directory an
+ * upgrade replaces. `dist/.env` carries neither variable, so leaving one out silently moves the application's data into
+ * the release.
+ */
+export function buildAppEnv(layout, options) {
+    const entries = [
+        ['NODE_ENV', 'production'],
+        ...(options.basePath === undefined
+            ? []
+            : [['APP_BASE_PATH', options.basePath]]),
+        ['APP_CONFIG_FILE', layout.configFile],
+        ['APP_STORAGE_DIR', layout.storageDir],
+        ['APP_PUBLIC_ORIGIN', options.origin],
+        ['APP_SERVER_HOST', options.host],
+        ['APP_SERVER_PORT', String(options.port)],
+        // A failed start exits non-zero, so pm2 restarts it and the installer sees the failure.
+        ['NOCOBASE_STRICT_STARTUP', 'true'],
+    ];
+    return [
+        '# Written by app-installer. Read by launcher.mjs on every start and by every app-installer command.',
+        ...entries.map(([key, value]) => `${key}=${quote(value)}`),
+        '',
+    ].join('\n');
+}
+function quote(value) {
+    return /^[\w@%+=:,./-]*$/u.test(value) ? value : JSON.stringify(value);
+}
+export async function readAppEnv(layout) {
+    return parseEnv(await readFile(layout.appEnv, 'utf8'));
+}
+const DEFAULT_HOST = '127.0.0.1';
+const DEFAULT_PORT = '13000';
+// The server mounts an application that sets no APP_BASE_PATH at `DEFAULT_APP_BASE_PATH` from
+// `@nocobase/app-server/support`. app-installer runs as its own npx tool, without the server's code, so it repeats the
+// value only to tell where such an installation is reached; it never writes it.
+const DEFAULT_BASE_PATH = '/main';
+function parsePort(value) {
+    const port = Number(value.trim());
+    return value.trim() !== '' &&
+        Number.isInteger(port) &&
+        port >= 1 &&
+        port <= 65535
+        ? port
+        : null;
+}
+/** The path the application is mounted at, as a URL prefix: `/crm` stays, and the origin root is `''`. */
+export function mountPathOf(env) {
+    return basePrefix(env);
+}
+/** The base path as a URL prefix: `/crm` stays, and the root `/` contributes nothing. */
+function basePrefix(env) {
+    const trimmed = (env.APP_BASE_PATH ?? DEFAULT_BASE_PATH)
+        .trim()
+        .replace(/^\/+|\/+$/gu, '');
+    return trimmed ? `/${trimmed}` : '';
+}
+/**
+ * Where the application is reached and where it listens, as `app.env` says. The file is edited by hand to change
+ * either, so a trailing slash on the origin is dropped, as `install` drops it from `--origin`, and a port that is not
+ * one reads as `null` rather than as a number the application is not using.
+ */
+export function endpointsOf(env) {
+    const host = env.APP_SERVER_HOST ?? DEFAULT_HOST;
+    const rawPort = env.APP_SERVER_PORT ?? DEFAULT_PORT;
+    const origin = (env.APP_PUBLIC_ORIGIN ?? `http://${host}:${rawPort}`).replace(/\/+$/u, '');
+    return {
+        url: `${origin}${basePrefix(env)}/`,
+        origin,
+        host,
+        port: parsePort(rawPort),
+    };
+}
+/** The address the installer checks health on: the listening address, with a wildcard bind reached through loopback. */
+export function healthUrl(env) {
+    const { host, port } = endpointsOf(env);
+    const reachable = host === '0.0.0.0' || host === '::' || host === '' ? '127.0.0.1' : host;
+    const hostPart = reachable.includes(':') ? `[${reachable}]` : reachable;
+    return `http://${hostPart}:${port ?? env.APP_SERVER_PORT}${basePrefix(env)}/api/healthz`;
+}
+//# sourceMappingURL=env-file.js.map

package/dist/lib/env-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.js","sourceRoot":"","sources":["../../src/lib/env-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAcrC;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,OAAsB;IAChE,MAAM,OAAO,GAAuB;QAClC,CAAC,UAAU,EAAE,YAAY,CAAC;QAC1B,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS;YAChC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAqB,CAAC,CAAC;QAC9D,CAAC,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC;QACtC,CAAC,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC;QACtC,CAAC,mBAAmB,EAAE,OAAO,CAAC,MAAM,CAAC;QACrC,CAAC,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC;QACjC,CAAC,iBAAiB,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,wFAAwF;QACxF,CAAC,yBAAyB,EAAE,MAAM,CAAC;KACpC,CAAC;IACF,OAAO;QACL,qGAAqG;QACrG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc;IAEd,OAAO,QAAQ,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGpD,CAAC;AACJ,CAAC;AAaD,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,8FAA8F;AAC9F,uHAAuH;AACvH,gFAAgF;AAChF,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAElC,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QACxB,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;QACtB,IAAI,IAAI,CAAC;QACT,IAAI,IAAI,KAAK;QACb,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,WAAW,CAAC,GAA2B;IACrD,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CAAC,GAA2B;IAC7C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,iBAAiB,CAAC;SACrD,IAAI,EAAE;SACN,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAA2B;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,IAAI,YAAY,CAAC;IACjD,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,IAAI,YAAY,CAAC;IACpD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,UAAU,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,OAAO,CAC3E,OAAO,EACP,EAAE,CACH,CAAC;IACF,OAAO;QACL,GAAG,EAAE,GAAG,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG;QACnC,MAAM;QACN,IAAI;QACJ,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,wHAAwH;AACxH,MAAM,UAAU,SAAS,CAAC,GAA2B;IACnD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,SAAS,GACb,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,OAAO,UAAU,QAAQ,IAAI,IAAI,IAAI,GAAG,CAAC,eAAe,GAAG,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC;AAC3F,CAAC"}

package/dist/lib/errors.js

@@ -0,0 +1,32 @@
+/**
+ * Exit codes are part of the contract: CI and agents branch on them.
+ *
+ * - `0` success, including a run that found nothing to do
+ * - `1` the operation failed, and the running application was not touched
+ * - `2` invalid usage or a failed precheck, before anything was written
+ * - `3` an upgrade failed after the switch and was rolled back; the previous release is running again
+ * - `4` rolling back failed too; the application needs a person, and the error says what to do
+ */
+export const EXIT_OK = 0;
+export const EXIT_FAILED = 1;
+export const EXIT_INVALID = 2;
+export const EXIT_ROLLED_BACK = 3;
+export const EXIT_ROLLBACK_FAILED = 4;
+export class InstallerError extends Error {
+    code;
+    exitCode;
+    suggestions;
+    details;
+    constructor(code, message, options = {}) {
+        super(message, { cause: options.cause });
+        this.name = 'InstallerError';
+        this.code = code;
+        this.exitCode = options.exitCode ?? EXIT_FAILED;
+        this.suggestions = options.suggestions ?? [];
+        this.details = options.details;
+    }
+}
+export function isInstallerError(error) {
+    return error instanceof InstallerError;
+}
+//# sourceMappingURL=errors.js.map

package/dist/lib/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC;AACzB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAC7B,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAatC,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvB,IAAI,CAAS;IACb,QAAQ,CAAS;IACjB,WAAW,CAAe;IAC1B,OAAO,CAAsC;IAE7D,YACE,IAAY,EACZ,OAAe,EACf,UAAiC,EAAE;QAEnC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,KAAK,YAAY,cAAc,CAAC;AACzC,CAAC"}

package/dist/lib/health.js

@@ -0,0 +1,55 @@
+import { interruptError, takeInterrupt } from "./interrupt.js";
+/** One request to the application's health route; true only for a response whose body says `ok: true`. */
+export async function checkHealth(url, fetchImpl = fetch) {
+    try {
+        const response = await fetchImpl(url, {
+            signal: AbortSignal.timeout(3_000),
+        });
+        if (!response.ok)
+            return false;
+        const body = (await response.json());
+        return body.ok === true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Polls the health route until it answers, the timeout passes, or `failed` says there is no point waiting. The server
+ * listens only once startup, migrations included, has finished, so a healthy answer means the application is ready.
+ */
+export async function waitForHealthy(url, options) {
+    const now = options.now ?? Date.now;
+    const sleep = options.sleep ??
+        ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+    const deadline = now() + options.timeoutMs;
+    for (;;) {
+        if (takeInterrupt())
+            throw interruptError();
+        if (await checkHealth(url, options.fetchImpl))
+            return true;
+        if (now() >= deadline)
+            return false;
+        if (options.failed && (await options.failed()))
+            return false;
+        await sleep(options.intervalMs ?? 1_000);
+    }
+}
+/**
+ * Restarts pm2 has made before the application answered, beyond which a start counts as failed.
+ * `NOCOBASE_STRICT_STARTUP` makes a failed start exit, so a crash during startup is a real failure rather than a slow
+ * start.
+ */
+const MAX_STARTUP_RESTARTS = 2;
+/** A `failed` probe for `waitForHealthy`: the pm2 process has crashed repeatedly, or pm2 has given up on it. */
+export function pm2StartFailed(pm2, name) {
+    return async () => {
+        const process = await pm2.describe(name).catch(() => undefined);
+        if (!process)
+            return false;
+        return (process.status === 'errored' ||
+            process.status === 'stopped' ||
+            process.restarts > MAX_STARTUP_RESTARTS);
+    };
+}
+//# sourceMappingURL=health.js.map

package/dist/lib/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/lib/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAc/D,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,YAAuB,KAAK;IAE5B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;QACzD,OAAO,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,OAAsB;IAEtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,KAAK,GACT,OAAO,CAAC,KAAK;QACb,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAC3C,SAAS,CAAC;QACR,IAAI,aAAa,EAAE;YAAE,MAAM,cAAc,EAAE,CAAC;QAC5C,IAAI,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC;QACpC,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7D,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,gHAAgH;AAChH,MAAM,UAAU,cAAc,CAAC,GAAQ,EAAE,IAAY;IACnD,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,OAAO,CACL,OAAO,CAAC,MAAM,KAAK,SAAS;YAC5B,OAAO,CAAC,MAAM,KAAK,SAAS;YAC5B,OAAO,CAAC,QAAQ,GAAG,oBAAoB,CACxC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/initial-admin.js

@@ -0,0 +1,39 @@
+import { readFile } from 'node:fs/promises';
+import { parse } from 'yaml';
+/** The `config.yml` section the application creates its first administrator from. */
+export const INITIAL_ADMIN_KEY = 'users.initialAdmin';
+async function readSection(file) {
+    try {
+        const document = parse(await readFile(file, 'utf8'), {
+            logLevel: 'silent',
+        });
+        return document?.users?.initialAdmin ?? undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function text(value) {
+    return typeof value === 'string' || typeof value === 'number'
+        ? String(value)
+        : null;
+}
+/**
+ * Reads the first administrator from `config.yml`, and compares its password with the one in the release's
+ * `config.example.yml`, which `config init` copies unless `--set` replaced it. The password itself never leaves here.
+ */
+export async function readInitialAdmin(configFile, exampleFile) {
+    const configured = await readSection(configFile);
+    const example = await readSection(exampleFile);
+    const password = text(configured?.password);
+    const examplePassword = text(example?.password);
+    return {
+        key: INITIAL_ADMIN_KEY,
+        username: text(configured?.username),
+        email: text(configured?.email),
+        defaultPassword: password === null || examplePassword === null
+            ? null
+            : password === examplePassword,
+    };
+}
+//# sourceMappingURL=initial-admin.js.map

package/dist/lib/initial-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initial-admin.js","sourceRoot":"","sources":["../../src/lib/initial-admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAE7B,qFAAqF;AACrF,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAqBtD,KAAK,UAAU,WAAW,CACxB,IAAY;IAEZ,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YACnD,QAAQ,EAAE,QAAQ;SACnB,CAA8D,CAAC;QAChE,OAAO,QAAQ,EAAE,KAAK,EAAE,YAAY,IAAI,SAAS,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3D,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACf,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAkB,EAClB,WAAmB;IAEnB,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChD,OAAO;QACL,GAAG,EAAE,iBAAiB;QACtB,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC;QACpC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC;QAC9B,eAAe,EACb,QAAQ,KAAK,IAAI,IAAI,eAAe,KAAK,IAAI;YAC3C,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,QAAQ,KAAK,eAAe;KACnC,CAAC;AACJ,CAAC"}

package/dist/lib/interrupt.js

@@ -0,0 +1,50 @@
+import { EXIT_FAILED, InstallerError } from "./errors.js";
+/**
+ * SIGINT and SIGTERM stop the step that is running, not the installer. The step fails with `INTERRUPTED`, and the
+ * command's own failure handling runs as it would for any other failure: an install removes what it wrote, an upgrade
+ * after the switch rolls back. A second signal exits at once, whatever that leaves behind.
+ */
+let pending = false;
+let received = 0;
+const listeners = new Set();
+export function interruptError() {
+    return new InstallerError('INTERRUPTED', 'Interrupted; the step that was running was stopped.', { exitCode: EXIT_FAILED });
+}
+/** Reports a pending interrupt once. The step that sees it fails; the recovery steps after it run normally. */
+export function takeInterrupt() {
+    if (!pending)
+        return false;
+    pending = false;
+    return true;
+}
+export function throwIfInterrupted() {
+    if (takeInterrupt())
+        throw interruptError();
+}
+/** Called for each interrupt, so running child processes can be stopped. */
+export function onInterrupt(listener) {
+    listeners.add(listener);
+    return () => listeners.delete(listener);
+}
+export function installInterruptHandlers(stderr = process.stderr) {
+    const handler = (signal) => {
+        received += 1;
+        if (received > 1) {
+            stderr.write(`\n${signal} again; exiting now.\n`);
+            process.exit(130);
+        }
+        pending = true;
+        stderr.write(`\n${signal} received; stopping the current step and cleaning up. Send it again to exit immediately.\n`);
+        for (const listener of listeners)
+            listener();
+    };
+    process.on('SIGINT', handler);
+    process.on('SIGTERM', handler);
+    return () => {
+        process.off('SIGINT', handler);
+        process.off('SIGTERM', handler);
+        pending = false;
+        received = 0;
+    };
+}
+//# sourceMappingURL=interrupt.js.map

package/dist/lib/interrupt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interrupt.js","sourceRoot":"","sources":["../../src/lib/interrupt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE1D;;;;GAIG;AACH,IAAI,OAAO,GAAG,KAAK,CAAC;AACpB,IAAI,QAAQ,GAAG,CAAC,CAAC;AACjB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;AAExC,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,cAAc,CACvB,aAAa,EACb,qDAAqD,EACrD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;AACJ,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,IAAI,aAAa,EAAE;QAAE,MAAM,cAAc,EAAE,CAAC;AAC9C,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,WAAW,CAAC,QAAoB;IAC9C,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,SAAgC,OAAO,CAAC,MAAM;IAE9C,MAAM,OAAO,GAAG,CAAC,MAAsB,EAAE,EAAE;QACzC,QAAQ,IAAI,CAAC,CAAC;QACd,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,wBAAwB,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,CAAC,KAAK,CACV,KAAK,MAAM,4FAA4F,CACxG,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,SAAS;YAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,GAAG,EAAE;QACV,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,GAAG,KAAK,CAAC;QAChB,QAAQ,GAAG,CAAC,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/invocation.js

@@ -0,0 +1,33 @@
+import { formatCommandLine } from '@nocobase/cli-envelope';
+import { createRequire } from 'node:module';
+import { defaultRegistry, normalizeRegistry } from "./registry.js";
+export const INSTALLER_PACKAGE = '@nocobase/app-installer';
+/** This installer's own version; `src/lib` and `dist/lib` both sit two levels below the package root. */
+export const INSTALLER_VERSION = createRequire(import.meta.url)('../../package.json').version;
+/**
+ * An app-installer command as a suggestion's `run` names it: through npx, because nothing installs an `app-installer`
+ * binary on PATH, and with the registry named, because NocoBase 3 packages are not on the public npm registry. `--yes`
+ * answers npx's own install prompt, which would otherwise block an agent. The version is pinned to this installer's, so
+ * a recovery runs the same code that wrote the state it recovers from.
+ */
+export function installerCommandLine(args, options = {}) {
+    const registry = normalizeRegistry(options.registry ?? defaultRegistry());
+    const version = options.version ?? INSTALLER_VERSION;
+    return {
+        command: 'npx',
+        args: [
+            '--yes',
+            `--registry=${registry}`,
+            `${INSTALLER_PACKAGE}@${version}`,
+            ...args,
+        ],
+    };
+}
+/**
+ * The same command written into prose or help, where it is read rather than run: `args` is inserted as given, so it may
+ * hold a placeholder such as `<the copied archive>`, and anything a shell would split must already be quoted.
+ */
+export function installerCommand(args, options = {}) {
+    return `${formatCommandLine(installerCommandLine([], options))} ${args}`;
+}
+//# sourceMappingURL=invocation.js.map

package/dist/lib/invocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation.js","sourceRoot":"","sources":["../../src/lib/invocation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAoB,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAE3D,yGAAyG;AACzG,MAAM,CAAC,MAAM,iBAAiB,GAC5B,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,oBAAoB,CACpD,CAAC,OAAO,CAAC;AASV;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAuB,EACvB,UAAmC,EAAE;IAErC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,IAAI,eAAe,EAAE,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,iBAAiB,CAAC;IACrD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EAAE;YACJ,OAAO;YACP,cAAc,QAAQ,EAAE;YACxB,GAAG,iBAAiB,IAAI,OAAO,EAAE;YACjC,GAAG,IAAI;SACR;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,UAAmC,EAAE;IAErC,OAAO,GAAG,iBAAiB,CAAC,oBAAoB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;AAC3E,CAAC"}

package/dist/lib/layout.js

@@ -0,0 +1,48 @@
+import path from 'node:path';
+/** The directory inside `releases/<id>/` holding a release's deployment root: `dist/` and `config.example.yml`. */
+export const RELEASE_APP_DIR = 'app';
+export function layoutOf(root) {
+    return {
+        root,
+        appEnv: path.join(root, 'app.env'),
+        configFile: path.join(root, 'config.yml'),
+        storageDir: path.join(root, 'storage'),
+        logsDir: path.join(root, 'logs'),
+        outLog: path.join(root, 'logs/app.out.log'),
+        errorLog: path.join(root, 'logs/app.err.log'),
+        releasesDir: path.join(root, 'releases'),
+        backupsDir: path.join(root, 'backups'),
+        current: path.join(root, 'current'),
+        stateFile: path.join(root, 'installer.json'),
+        lockFile: path.join(root, '.installer.lock'),
+        ecosystemFile: path.join(root, 'ecosystem.config.cjs'),
+        launcherFile: path.join(root, 'launcher.mjs'),
+    };
+}
+/**
+ * A release's identity: its version and when it was built, as in `1.2.0_20260927T005500Z`. Two builds of the same
+ * version are two releases, so a project that deploys without bumping its version still gets a release of its own
+ * each time. Neither `-`, which would make the id read as a semantic-version prerelease, nor `+`, which is awkward in a
+ * directory name and a shell command, separates the parts.
+ */
+export function releaseId(version, builtAt) {
+    const compact = new Date(builtAt)
+        .toISOString()
+        .replace(/\.\d+Z$/u, 'Z')
+        .replaceAll('-', '')
+        .replaceAll(':', '');
+    return `${version}_${compact}`;
+}
+/** A release's deployment root: the directory holding `dist/` and `config.example.yml`. */
+export function releaseDir(layout, id) {
+    return path.join(layout.releasesDir, id, RELEASE_APP_DIR);
+}
+/** The path `current` points at, relative to the root so the whole root can be moved. */
+export function releaseLinkTarget(id) {
+    return path.join('releases', id, RELEASE_APP_DIR);
+}
+/** Where an archive is unpacked before its manifest names the release it is. */
+export function stagingDir(layout) {
+    return path.join(layout.releasesDir, `.staging-${process.pid}`);
+}
+//# sourceMappingURL=layout.js.map

package/dist/lib/layout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout.js","sourceRoot":"","sources":["../../src/lib/layout.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,mHAAmH;AACnH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC;AAuBrC,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAClC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;QACzC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QACtC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QAChC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC;QAC3C,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC;QAC7C,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QACxC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QACtC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QACnC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAC5C,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;QAC5C,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC;QACtD,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,OAAe;IACxD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC;SAC9B,WAAW,EAAE;SACb,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC;SACnB,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvB,OAAO,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,EAAU;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;AAC5D,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;AACpD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAClE,CAAC"}

package/dist/lib/lock.js

@@ -0,0 +1,59 @@
+import { link, readFile, rm, writeFile } from 'node:fs/promises';
+import { EXIT_INVALID, InstallerError } from "./errors.js";
+function isAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        // EPERM means the process exists but belongs to someone else.
+        return error.code === 'EPERM';
+    }
+}
+/**
+ * Takes the root's lock so two installers never run against the same installation. The file holds the owner's pid; a lock whose
+ * owner is gone is stale and is taken over rather than blocking every later run.
+ *
+ * The pid is written to a private file first and linked into place, so the lock never exists without its owner in it:
+ * with `open('wx')` followed by a write, a second installer could read the still-empty file, take it for stale, and
+ * proceed alongside the first.
+ */
+export async function acquireLock(file) {
+    const candidate = `${file}.${process.pid}`;
+    await writeFile(candidate, `${process.pid}\n`);
+    try {
+        for (let attempt = 0; attempt < 2; attempt += 1) {
+            try {
+                await link(candidate, file);
+                return async () => {
+                    await rm(file, { force: true });
+                };
+            }
+            catch (error) {
+                if (error.code !== 'EEXIST')
+                    throw error;
+                const owner = Number.parseInt((await readFile(file, 'utf8').catch(() => '')).trim(), 10);
+                if (Number.isInteger(owner) &&
+                    owner !== process.pid &&
+                    isAlive(owner)) {
+                    throw new InstallerError('LOCKED', `Another app-installer (pid ${owner}) is working on this installation.`, {
+                        exitCode: EXIT_INVALID,
+                        suggestions: [
+                            {
+                                message: 'Wait for it to finish, then run the command again.',
+                            },
+                        ],
+                    });
+                }
+                await rm(file, { force: true });
+            }
+        }
+        throw new InstallerError('LOCKED', `Could not take the lock at ${file}.`, {
+            exitCode: EXIT_INVALID,
+        });
+    }
+    finally {
+        await rm(candidate, { force: true });
+    }
+}
+//# sourceMappingURL=lock.js.map

package/dist/lib/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../src/lib/lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAI3D,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,8DAA8D;QAC9D,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY;IAC5C,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC3C,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC5B,OAAO,KAAK,IAAI,EAAE;oBAChB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClC,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;gBACpE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAC3B,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EACrD,EAAE,CACH,CAAC;gBACF,IACE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;oBACvB,KAAK,KAAK,OAAO,CAAC,GAAG;oBACrB,OAAO,CAAC,KAAK,CAAC,EACd,CAAC;oBACD,MAAM,IAAI,cAAc,CACtB,QAAQ,EACR,8BAA8B,KAAK,oCAAoC,EACvE;wBACE,QAAQ,EAAE,YAAY;wBACtB,WAAW,EAAE;4BACX;gCACE,OAAO,EAAE,oDAAoD;6BAC9D;yBACF;qBACF,CACF,CAAC;gBACJ,CAAC;gBACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,8BAA8B,IAAI,GAAG,EAAE;YACxE,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC"}

package/dist/lib/mount-path.js

@@ -0,0 +1,34 @@
+import { EXIT_INVALID, InstallerError } from "./errors.js";
+import { rebuildCommandLine } from "./prechecks.js";
+/** A mount path as the server spells it: `/crm`, `/apps/crm`, or `''` for the origin root. */
+export function normalizeMountPath(value) {
+    const trimmed = value.trim().replace(/^\/+|\/+$/gu, '');
+    return trimmed ? `/${trimmed}` : '';
+}
+/** `--base-path`, checked and normalized; `undefined` when it was not given. */
+export function parseBasePathFlag(value) {
+    if (value === undefined)
+        return undefined;
+    if (/[\s?#\\]/u.test(value) || value.split('/').includes('..')) {
+        throw new InstallerError('INVALID_USAGE', `--base-path ${JSON.stringify(value)} is not a URL path; give one such as /crm, or / for the origin root.`, { exitCode: EXIT_INVALID });
+    }
+    return normalizeMountPath(value);
+}
+/**
+ * A release built before relocatable builds has its mount path compiled into its client, and serves pages whose asset
+ * URLs all miss anywhere else. It runs only where it was built for.
+ */
+export function assertFixedMountPath(subject, builtFor, mountedAt) {
+    if (normalizeMountPath(builtFor) === normalizeMountPath(mountedAt))
+        return;
+    throw new InstallerError('BASE_PATH_MISMATCH', `${subject} was built for the base path ${normalizeMountPath(builtFor) || '/'} and cannot be mounted at ${normalizeMountPath(mountedAt) || '/'}.`, {
+        exitCode: EXIT_INVALID,
+        suggestions: [
+            {
+                message: 'Upgrade @nocobase/app-cli in the application project and build the archive again; a current build runs at any path:',
+                run: rebuildCommandLine(),
+            },
+        ],
+    });
+}
+//# sourceMappingURL=mount-path.js.map

package/dist/lib/mount-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount-path.js","sourceRoot":"","sources":["../../src/lib/mount-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAC/B,KAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,eAAe,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,sEAAsE,EAC1G,EAAE,QAAQ,EAAE,YAAY,EAAE,CAC3B,CAAC;IACJ,CAAC;IACD,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,QAAgB,EAChB,SAAiB;IAEjB,IAAI,kBAAkB,CAAC,QAAQ,CAAC,KAAK,kBAAkB,CAAC,SAAS,CAAC;QAAE,OAAO;IAC3E,MAAM,IAAI,cAAc,CACtB,oBAAoB,EACpB,GAAG,OAAO,gCAAgC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,GAAG,6BAA6B,kBAAkB,CAAC,SAAS,CAAC,IAAI,GAAG,GAAG,EACjJ;QACE,QAAQ,EAAE,YAAY;QACtB,WAAW,EAAE;YACX;gBACE,OAAO,EACL,qHAAqH;gBACvH,GAAG,EAAE,kBAAkB,EAAE;aAC1B;SACF;KACF,CACF,CAAC;AACJ,CAAC"}