@nocobase/app-plugin-agents 0.0.0-stage → 0.1.0-beta.10

package/dist/server/distribution/dist.service.js

@@ -0,0 +1,237 @@
+/**
+ * Distribution: the runner (`nocobase-runner`) and the application's CLI (such as `acme`), served by the application
+ * itself as tarballs, so nothing is published to a registry: one per target, each bundling Node, or one for every
+ * target (`UNIVERSAL_TARGET`, `nocobase cli build --universal`) that runs on the machine's own Node.js 24 or newer.
+ *
+ * `nocobase cli build` of `@nocobase/app-cli` (`--runner` for the runner) builds each product into a directory of its
+ * own, with its own manifest, so the products are built and mounted apart (in CI, one artifact each):
+ *
+ *   <dir>/<channel>/<product>/manifest.json
+ *   <dir>/<channel>/<product>/<version>/<product>-v<version>-<target>.tar.gz
+ *
+ * where a product's manifest lists its versions with each target's file (relative to the product's directory),
+ * SHA-256 and size. A target without a file of its own gets the version's universal one, if it has one, answered with
+ * `universal: true`; a file built for the target wins over it. The application serves one channel (`agents.dist.channel`, `stable` by default); a product's
+ * current version is the one `agents.dist.versions` pins, or the highest the channel has. Only files a manifest lists
+ * are ever served.
+ *
+ * A product the directory has no current version of may instead be named on the npm registry (`agents.dist.npm`: its
+ * package and exact version), answered only to callers that understand it (`npmPackage`). The directory always wins.
+ */
+import { createReadStream } from 'node:fs';
+import { readdir, readFile, stat } from 'node:fs/promises';
+import path from 'node:path';
+import { compareVersions, DIST_PRODUCT_PATTERN, DIST_ROUTES, DIST_TARGET_PATTERN, EXACT_VERSION_PATTERN, NPM_PACKAGE_PATTERN, ProtocolError, routePath, UNIVERSAL_TARGET, } from '@nocobase/agent-protocol';
+import { z } from 'zod';
+import { notFound } from '../kernel/errors.js';
+const DistNpmConfigSchema = z.record(z.string().regex(DIST_PRODUCT_PATTERN), z.object({
+    package: z.string().max(214).regex(NPM_PACKAGE_PATTERN),
+    version: z.string().max(64).regex(EXACT_VERSION_PATTERN),
+}));
+export const DEFAULT_CHANNEL = 'stable';
+const StoredTargetSchema = z.object({
+    file: z.string().min(1),
+    sha256: z.string().regex(/^[0-9a-f]{64}$/u),
+    size: z.number().int().nonnegative(),
+});
+const StoredVersionsSchema = z.record(z.string(), z.object({ targets: z.record(z.string(), StoredTargetSchema) }));
+/** The manifest of one product, `<channel>/<product>/manifest.json`, with files relative to the product's directory. */
+const ProductManifestSchema = z.object({
+    schema: z.literal(1),
+    product: z.string().regex(DIST_PRODUCT_PATTERN),
+    bin: z.string().optional(),
+    versions: StoredVersionsSchema,
+});
+export function createDistService(config = {}) {
+    const channel = config.channel ?? DEFAULT_CHANNEL;
+    const npmSources = parseNpmSources(config.npm);
+    const channelDir = config.dir === undefined ? null : path.resolve(config.dir, channel);
+    let cache;
+    /** Each product's manifest file with its modification time, or nothing when there is none. */
+    const manifestFiles = async () => {
+        if (channelDir === null)
+            return [];
+        const found = [];
+        let entries;
+        try {
+            entries = (await readdir(channelDir)).sort();
+        }
+        catch {
+            return found;
+        }
+        for (const product of entries) {
+            if (!DIST_PRODUCT_PATTERN.test(product))
+                continue;
+            const file = path.join(channelDir, product, 'manifest.json');
+            try {
+                found.push({ file, product, mtimeMs: (await stat(file)).mtimeMs });
+            }
+            catch {
+                // A product not built yet.
+            }
+        }
+        return found;
+    };
+    const readManifest = async (file) => {
+        try {
+            return JSON.parse(await readFile(file, 'utf8'));
+        }
+        catch {
+            return undefined;
+        }
+    };
+    const load = async () => {
+        const files = await manifestFiles();
+        if (files.length === 0) {
+            cache = undefined;
+            return null;
+        }
+        const key = files
+            .map((entry) => `${entry.file}:${entry.mtimeMs}`)
+            .join('|');
+        if (cache?.key === key)
+            return cache.manifest;
+        const merged = { products: {} };
+        for (const entry of files) {
+            const raw = await readManifest(entry.file);
+            const product = entry.product;
+            const parsed = ProductManifestSchema.safeParse(raw);
+            if (!parsed.success || parsed.data.product !== product) {
+                console.error(`Agents: ${entry.file} is not the distribution manifest of ${product}.`);
+                continue;
+            }
+            // Its files are relative to the product's directory; the merged ones are relative to the channel's.
+            const versions = {};
+            for (const [version, stored] of Object.entries(parsed.data.versions))
+                versions[version] = {
+                    targets: Object.fromEntries(Object.entries(stored.targets).map(([target, file]) => [
+                        target,
+                        { ...file, file: path.posix.join(product, file.file) },
+                    ])),
+                };
+            merged.products[product] = {
+                ...(parsed.data.bin === undefined ? {} : { bin: parsed.data.bin }),
+                versions,
+            };
+        }
+        cache = { key, manifest: merged };
+        return merged;
+    };
+    const currentVersion = (stored, product) => {
+        const versions = Object.keys(stored.products[product]?.versions ?? {});
+        const pinned = config.versions?.[product];
+        if (pinned !== undefined)
+            return versions.includes(pinned) ? pinned : null;
+        return versions.sort(compareVersions).at(-1) ?? null;
+    };
+    const artifact = (stored, product, target) => {
+        const version = currentVersion(stored, product);
+        if (version === null)
+            return null;
+        const targets = stored.products[product]?.versions[version]?.targets;
+        const own = targets?.[target];
+        const entry = own ?? targets?.[UNIVERSAL_TARGET];
+        if (entry === undefined)
+            return null;
+        return {
+            product,
+            version,
+            target,
+            url: routePath(DIST_ROUTES.file, {
+                product,
+                version,
+                file: path.posix.basename(entry.file),
+            }),
+            sha256: entry.sha256,
+            size: entry.size,
+            channel,
+            ...(own === undefined ? { universal: true } : {}),
+        };
+    };
+    return {
+        channel,
+        async manifest() {
+            const stored = await load();
+            const products = {};
+            for (const product of Object.keys(stored?.products ?? {})) {
+                const version = stored && currentVersion(stored, product);
+                if (!stored || version === null)
+                    continue;
+                products[product] = {
+                    version,
+                    targets: Object.keys(stored.products[product]?.versions[version]?.targets ?? {}).sort(),
+                };
+            }
+            return { channel, products };
+        },
+        async find(product, target) {
+            const stored = await load();
+            return stored ? artifact(stored, product, target) : null;
+        },
+        async resolve(product, target) {
+            if (!DIST_PRODUCT_PATTERN.test(product))
+                throw notFound('Product');
+            if (!DIST_TARGET_PATTERN.test(target))
+                throw new ProtocolError('PLATFORM_UNSUPPORTED', `${target} is not a platform name such as darwin-arm64 or linux-x64.`);
+            const stored = await load();
+            const found = stored ? artifact(stored, product, target) : null;
+            if (found)
+                return found;
+            const version = stored ? currentVersion(stored, product) : null;
+            if (!stored || version === null)
+                throw new ProtocolError('NOT_FOUND', `This application serves no ${product} on the ${channel} channel. Build it with nocobase cli build.`);
+            const targets = Object.keys(stored.products[product]?.versions[version]?.targets ?? {}).sort();
+            throw new ProtocolError('PLATFORM_UNSUPPORTED', `${product} ${version} is not built for ${target}; it is for ${targets.join(', ') || 'no platform'}.`, { targets });
+        },
+        async file(product, version, name) {
+            const stored = await load();
+            const targets = stored?.products[product]?.versions[version]?.targets;
+            const found = Object.entries(targets ?? {}).find(([, candidate]) => path.posix.basename(candidate.file) === name);
+            if (!found || channelDir === null)
+                throw notFound('File');
+            const [target, entry] = found;
+            const file = path.resolve(channelDir, entry.file);
+            if (!file.startsWith(`${channelDir}${path.sep}`))
+                throw notFound('File');
+            let size;
+            try {
+                size = (await stat(file)).size;
+            }
+            catch {
+                throw notFound('File');
+            }
+            return {
+                target,
+                path: file,
+                sha256: entry.sha256,
+                size,
+                open: () => createReadStream(file),
+            };
+        },
+        async npmPackage(product) {
+            const source = npmSources[product];
+            if (source === undefined)
+                return null;
+            const stored = await load();
+            if (stored && currentVersion(stored, product) !== null)
+                return null;
+            return {
+                kind: 'npm',
+                product,
+                version: source.version,
+                package: source.package,
+                channel,
+            };
+        },
+    };
+}
+/** `agents.dist.npm`, checked when the service is created so a wrong entry fails the start rather than an install. */
+function parseNpmSources(npm) {
+    const parsed = DistNpmConfigSchema.safeParse(npm ?? {});
+    if (!parsed.success)
+        throw new Error(`agents.dist.npm names each product's npm package and exact version, such as { nocobase-runner: { package: '@nocobase/agent-runner', version: '1.0.0' } }: ${parsed.error.issues
+            .map((issue) => `${issue.path.join('.')}: ${issue.message}`)
+            .join('; ')}`);
+    return parsed.data;
+}
+//# sourceMappingURL=dist.service.js.map

package/dist/server/distribution/dist.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dist.service.js","sourceRoot":"","sources":["../../../server/distribution/dist.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,gBAAgB,EAAmB,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,WAAW,EACX,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,SAAS,EAGT,gBAAgB,GAEjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAyB/C,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,EACtC,CAAC,CAAC,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;CACzD,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AAExC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CACnC,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAChE,CAAC;AAEF,wHAAwH;AACxH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC;IAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,QAAQ,EAAE,oBAAoB;CAC/B,CAAC,CAAC;AAsCH,MAAM,UAAU,iBAAiB,CAAC,SAAqB,EAAE;IACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,eAAe,CAAC;IAClD,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,UAAU,GACd,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACtE,IAAI,KAA4D,CAAC;IAEjE,8FAA8F;IAC9F,MAAM,aAAa,GAAG,KAAK,IAEzB,EAAE;QACF,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QACnC,MAAM,KAAK,GAAyD,EAAE,CAAC;QACvE,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,SAAS;YAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;YAC7D,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAoB,EAAE;QAC5D,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,IAAoC,EAAE;QACtD,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,KAAK,GAAG,SAAS,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,KAAK;aACd,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;aAChD,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,IAAI,KAAK,EAAE,GAAG,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;QAC9C,MAAM,MAAM,GAAmB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAChD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC9B,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBACvD,OAAO,CAAC,KAAK,CACX,WAAW,KAAK,CAAC,IAAI,wCAAwC,OAAO,GAAG,CACxE,CAAC;gBACF,SAAS;YACX,CAAC;YACD,oGAAoG;YACpG,MAAM,QAAQ,GAAmD,EAAE,CAAC;YACpE,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAClE,QAAQ,CAAC,OAAO,CAAC,GAAG;oBAClB,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;wBACrD,MAAM;wBACN,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;qBACvD,CAAC,CACH;iBACF,CAAC;YACJ,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG;gBACzB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClE,QAAQ;aACT,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,CACrB,MAAsB,EACtB,OAAe,EACA,EAAE;QACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3E,OAAO,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACvD,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CACf,MAAsB,EACtB,OAAe,EACf,MAAc,EACO,EAAE;QACvB,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QACrE,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC,gBAAgB,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACrC,OAAO;YACL,OAAO;YACP,OAAO;YACP,MAAM;YACN,GAAG,EAAE,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE;gBAC/B,OAAO;gBACP,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;aACtC,CAAC;YACF,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO;YACP,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,OAAO;QAEP,KAAK,CAAC,QAAQ;YACZ,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;YAC5B,MAAM,QAAQ,GACZ,EAAE,CAAC;YACL,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC1D,MAAM,OAAO,GAAG,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC1D,IAAI,CAAC,MAAM,IAAI,OAAO,KAAK,IAAI;oBAAE,SAAS;gBAC1C,QAAQ,CAAC,OAAO,CAAC,GAAG;oBAClB,OAAO;oBACP,OAAO,EAAE,MAAM,CAAC,IAAI,CAClB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,IAAI,EAAE,CAC3D,CAAC,IAAI,EAAE;iBACT,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC/B,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM;YACxB,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3D,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM;YAC3B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;gBACnC,MAAM,IAAI,aAAa,CACrB,sBAAsB,EACtB,GAAG,MAAM,4DAA4D,CACtE,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAChE,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAChE,IAAI,CAAC,MAAM,IAAI,OAAO,KAAK,IAAI;gBAC7B,MAAM,IAAI,aAAa,CACrB,WAAW,EACX,8BAA8B,OAAO,WAAW,OAAO,6CAA6C,CACrG,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CACzB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,IAAI,EAAE,CAC3D,CAAC,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,aAAa,CACrB,sBAAsB,EACtB,GAAG,OAAO,IAAI,OAAO,qBAAqB,MAAM,eAAe,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,GAAG,EACrG,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;YACtE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAC9C,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAChE,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,UAAU,KAAK,IAAI;gBAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzE,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;YACD,OAAO;gBACL,MAAM;gBACN,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI;gBACJ,IAAI,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;aACnC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,OAAO;YACtB,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;YAC5B,IAAI,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACpE,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,OAAO;gBACP,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO;aACR,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,sHAAsH;AACtH,SAAS,eAAe,CACtB,GAAsB;IAEtB,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO;QACjB,MAAM,IAAI,KAAK,CACb,6JAA6J,MAAM,CAAC,KAAK,CAAC,MAAM;aAC7K,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC3D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/server/distribution/download-tokens.d.ts

@@ -0,0 +1,30 @@
+import type { DownloadToken } from '../../shared/runners.js';
+import { type Clock } from '../kernel/clock.js';
+import type { IdSource } from '../kernel/ids.js';
+import type { TxRunner } from '../kernel/tx.js';
+/** How long a download token stays usable. */
+export declare const DOWNLOAD_TOKEN_TTL_MS: number;
+/** How many tarball downloads one token allows, so a failed download can be retried. */
+export declare const DOWNLOAD_TOKEN_MAX_DOWNLOADS = 3;
+/** What a request with a download token asks for. */
+export interface DownloadRequest {
+    readonly product?: string;
+    /** The platform it resolves or downloads for; absent for the manifest, and for the universal tarball. */
+    readonly target?: string;
+    /** A tarball download, which counts against the token. */
+    readonly download?: boolean;
+}
+export interface DownloadTokenService {
+    create(createdById: string | null): Promise<DownloadToken>;
+    /** Lets `request` through with `token`, binding its platform and counting a download; `DOWNLOAD_TOKEN_INVALID` otherwise. */
+    admit(token: string, request: DownloadRequest): Promise<void>;
+}
+export interface DownloadTokenServiceDeps {
+    /** The one product a download token downloads: the application's CLI (`agents.cli.name`). */
+    readonly product: string;
+    readonly tx: TxRunner;
+    readonly ids: IdSource;
+    readonly clock: Clock;
+}
+export declare function createDownloadTokenService(deps: DownloadTokenServiceDeps): DownloadTokenService;
+//# sourceMappingURL=download-tokens.d.ts.map

package/dist/server/distribution/download-tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"download-tokens.d.ts","sourceRoot":"","sources":["../../../server/distribution/download-tokens.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAS,KAAK,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAMvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEhD,8CAA8C;AAC9C,eAAO,MAAM,qBAAqB,EAAE,MAAoB,CAAC;AAEzD,wFAAwF;AACxF,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAkB9C,qDAAqD;AACrD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,yGAAyG;IACzG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3D,6HAA6H;IAC7H,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,wBAAwB;IACvC,6FAA6F;IAC7F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,wBAAwB,GAC7B,oBAAoB,CAgFtB"}

package/dist/server/distribution/download-tokens.js

@@ -0,0 +1,85 @@
+/**
+ * Download tokens: what a signed-in person hands to the install script (`HEADERS.downloadToken`) so that a machine
+ * where nobody is signed in yet can download the application's CLI (`agents.cli`, such as `acme`), for instance a coding
+ * agent following the prompt an application's home page copies. A token reaches the CLI's manifest, its current version for one platform and that tarball, for
+ * `DOWNLOAD_TOKEN_TTL_MS` and at most `DOWNLOAD_TOKEN_MAX_DOWNLOADS` downloads; the platform of its first request binds
+ * it. It grants nothing a signed-in person could not download anyway, and registers no runner. Like the other
+ * credentials only its hash is stored (`agDownloadTokens`); only this file reads or writes them.
+ */
+import { ProtocolError } from '@nocobase/agent-protocol';
+import { later } from '../kernel/clock.js';
+import { CREDENTIAL_PREFIX, createCredential, hashCredential, } from '../kernel/crypto.js';
+/** How long a download token stays usable. */
+export const DOWNLOAD_TOKEN_TTL_MS = 30 * 60_000;
+/** How many tarball downloads one token allows, so a failed download can be retried. */
+export const DOWNLOAD_TOKEN_MAX_DOWNLOADS = 3;
+function downloadTokensRepo(conn) {
+    return conn.repository('agDownloadTokens');
+}
+export function createDownloadTokenService(deps) {
+    const { tx, ids, clock, product } = deps;
+    const invalid = (message) => new ProtocolError('DOWNLOAD_TOKEN_INVALID', message);
+    const spent = () => invalid('The download token is unknown, expired or used up. Get a new one where you copied it.');
+    return {
+        create: (createdById) => tx.run(async ({ conn }) => {
+            const now = clock.now();
+            const token = createCredential(CREDENTIAL_PREFIX.download);
+            const expiresAt = later(now, DOWNLOAD_TOKEN_TTL_MS);
+            await downloadTokensRepo(conn).createOne({
+                values: {
+                    id: ids.next(),
+                    tokenHash: hashCredential(token),
+                    createdById,
+                    target: null,
+                    downloads: 0,
+                    expiresAt,
+                    createdAt: now.toISOString(),
+                },
+            });
+            return {
+                token,
+                expiresAt,
+                maxDownloads: DOWNLOAD_TOKEN_MAX_DOWNLOADS,
+            };
+        }),
+        admit: (token, request) => tx.run(async ({ conn }) => {
+            if (request.product !== undefined && request.product !== product)
+                throw invalid(`A download token downloads only ${product}.`);
+            const tokens = downloadTokensRepo(conn);
+            const record = token
+                ? await tokens.findOne({
+                    filter: { tokenHash: hashCredential(token) },
+                })
+                : undefined;
+            const downloads = Number(record?.downloads ?? 0);
+            if (!record ||
+                Date.parse(record.expiresAt) <= clock.now().getTime() ||
+                downloads >= DOWNLOAD_TOKEN_MAX_DOWNLOADS)
+                throw spent();
+            const { target } = request;
+            if (target === undefined && !request.download)
+                return;
+            if (target !== undefined &&
+                record.target !== null &&
+                record.target !== target)
+                throw invalid(`This download token is for ${record.target}, not ${target}.`);
+            if ((target === undefined || record.target === target) &&
+                !request.download)
+                return;
+            // Binds the platform and counts the download; a concurrent request that changed the row first wins.
+            const updated = await tokens.updateMany({
+                filter: (f) => f.and([
+                    f.string('id').eq(record.id),
+                    f.number('downloads').eq(downloads),
+                ]),
+                values: {
+                    target: target ?? record.target,
+                    downloads: request.download ? downloads + 1 : downloads,
+                },
+            });
+            if (updated.updatedCount !== 1)
+                throw spent();
+        }),
+    };
+}
+//# sourceMappingURL=download-tokens.js.map

package/dist/server/distribution/download-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"download-tokens.js","sourceRoot":"","sources":["../../../server/distribution/download-tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAIzD,OAAO,EAAE,KAAK,EAAc,MAAM,oBAAoB,CAAC;AACvD,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,GACf,MAAM,qBAAqB,CAAC;AAI7B,8CAA8C;AAC9C,MAAM,CAAC,MAAM,qBAAqB,GAAW,EAAE,GAAG,MAAM,CAAC;AAEzD,wFAAwF;AACxF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAY9C,SAAS,kBAAkB,CACzB,IAAwB;IAExB,OAAO,IAAI,CAAC,UAAU,CAAsB,kBAAkB,CAAC,CAAC;AAClE,CAAC;AAyBD,MAAM,UAAU,0BAA0B,CACxC,IAA8B;IAE9B,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,OAAe,EAAiB,EAAE,CACjD,IAAI,aAAa,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,GAAkB,EAAE,CAChC,OAAO,CACL,uFAAuF,CACxF,CAAC;IAEJ,OAAO;QACL,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CACtB,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YACxB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,gBAAgB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;YACpD,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;gBACvC,MAAM,EAAE;oBACN,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE;oBACd,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC;oBAChC,WAAW;oBACX,MAAM,EAAE,IAAI;oBACZ,SAAS,EAAE,CAAC;oBACZ,SAAS;oBACT,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;iBAC7B;aACF,CAAC,CAAC;YACH,OAAO;gBACL,KAAK;gBACL,SAAS;gBACT,YAAY,EAAE,4BAA4B;aAC3C,CAAC;QACJ,CAAC,CAAC;QAEJ,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CACxB,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YACxB,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO;gBAC9D,MAAM,OAAO,CAAC,mCAAmC,OAAO,GAAG,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,KAAK;gBAClB,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC;oBACnB,MAAM,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE;iBAC7C,CAAC;gBACJ,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC,CAAC,CAAC;YACjD,IACE,CAAC,MAAM;gBACP,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE;gBACrD,SAAS,IAAI,4BAA4B;gBAEzC,MAAM,KAAK,EAAE,CAAC;YAChB,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;YAC3B,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAAE,OAAO;YACtD,IACE,MAAM,KAAK,SAAS;gBACpB,MAAM,CAAC,MAAM,KAAK,IAAI;gBACtB,MAAM,CAAC,MAAM,KAAK,MAAM;gBAExB,MAAM,OAAO,CACX,8BAA8B,MAAM,CAAC,MAAM,SAAS,MAAM,GAAG,CAC9D,CAAC;YACJ,IACE,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC;gBAClD,CAAC,OAAO,CAAC,QAAQ;gBAEjB,OAAO;YACT,oGAAoG;YACpG,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC;gBACtC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CACZ,CAAC,CAAC,GAAG,CAAC;oBACJ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5B,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC;iBACpC,CAAC;gBACJ,MAAM,EAAE;oBACN,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM;oBAC/B,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;iBACxD;aACF,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,YAAY,KAAK,CAAC;gBAAE,MAAM,KAAK,EAAE,CAAC;QAChD,CAAC,CAAC;KACL,CAAC;AACJ,CAAC"}

package/dist/server/distribution/index.d.ts

@@ -0,0 +1,22 @@
+import { type HeartbeatResponse, type NpmUpgradeNotice, type UpgradeNotice } from '@nocobase/agent-protocol';
+import type { Runner } from '../../shared/runners.js';
+import type { DistService } from './dist.service.js';
+export { createDownloadTokenService, DOWNLOAD_TOKEN_MAX_DOWNLOADS, DOWNLOAD_TOKEN_TTL_MS, type DownloadRequest, type DownloadTokenService, } from './download-tokens.js';
+export { createDistService, DEFAULT_CHANNEL, type DistConfig, type DistFile, type DistNpmSource, type DistService, } from './dist.service.js';
+/** The platform a runner reported, as the tarballs name it. */
+export declare function runnerTarget(runner: Pick<Runner, 'os' | 'arch'>): string;
+/** An update for a runner: a tarball the application serves, or a package to install from npm. */
+export type RunnerUpgrade = UpgradeNotice | NpmUpgradeNotice;
+/**
+ * A newer version of the product `runner` runs as (`nocobase-runner`, or a CLI that carries the runner) that the
+ * application serves for its platform, if there is one. A runner that reported no product is offered none: it may be
+ * carried by a CLI that no longer carries it.
+ *
+ * The tarball is offered whenever there is one. Only when the application has none of the product, and names it on npm
+ * (`agents.dist.npm`), is the package offered, and then only to a runner with the `npm` feature: any other runner is
+ * offered nothing, as before.
+ */
+export declare function upgradeFor(dist: DistService, runner: Pick<Runner, 'os' | 'arch' | 'version' | 'product' | 'features'>): Promise<RunnerUpgrade | undefined>;
+/** Where an update goes in a heartbeat answer: a tarball in `upgrade`, an npm package in `npmUpgrade`. */
+export declare function upgradeFields(upgrade: RunnerUpgrade | undefined): Pick<HeartbeatResponse, 'upgrade' | 'npmUpgrade'>;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/distribution/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../server/distribution/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,oBAAoB,GAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,KAAK,UAAU,EACf,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,WAAW,GACjB,MAAM,mBAAmB,CAAC;AAE3B,+DAA+D;AAC/D,wBAAgB,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC,GAAG,MAAM,CAExE;AAED,kGAAkG;AAClG,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,gBAAgB,CAAC;AAE7D;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC,GACvE,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAwBpC;AAED,0GAA0G;AAC1G,wBAAgB,aAAa,CAC3B,OAAO,EAAE,aAAa,GAAG,SAAS,GACjC,IAAI,CAAC,iBAAiB,EAAE,SAAS,GAAG,YAAY,CAAC,CAGnD"}

package/dist/server/distribution/index.js

@@ -0,0 +1,51 @@
+import { compareVersions, NPM_UPGRADE_FEATURE, } from '@nocobase/agent-protocol';
+export { createDownloadTokenService, DOWNLOAD_TOKEN_MAX_DOWNLOADS, DOWNLOAD_TOKEN_TTL_MS, } from './download-tokens.js';
+export { createDistService, DEFAULT_CHANNEL, } from './dist.service.js';
+/** The platform a runner reported, as the tarballs name it. */
+export function runnerTarget(runner) {
+    return `${runner.os}-${runner.arch}`;
+}
+/**
+ * A newer version of the product `runner` runs as (`nocobase-runner`, or a CLI that carries the runner) that the
+ * application serves for its platform, if there is one. A runner that reported no product is offered none: it may be
+ * carried by a CLI that no longer carries it.
+ *
+ * The tarball is offered whenever there is one. Only when the application has none of the product, and names it on npm
+ * (`agents.dist.npm`), is the package offered, and then only to a runner with the `npm` feature: any other runner is
+ * offered nothing, as before.
+ */
+export async function upgradeFor(dist, runner) {
+    if (runner.product === null)
+        return undefined;
+    const latest = await dist.find(runner.product, runnerTarget(runner));
+    if (latest) {
+        if (compareVersions(latest.version, runner.version) <= 0)
+            return undefined;
+        return {
+            minVersion: '0.0.0',
+            latestVersion: latest.version,
+            downloadUrl: latest.url,
+            sha256: latest.sha256,
+            channel: latest.channel,
+            reason: `The application serves ${latest.product} ${latest.version} on the ${latest.channel} channel.`,
+        };
+    }
+    if (!runner.features.includes(NPM_UPGRADE_FEATURE))
+        return undefined;
+    const npm = await dist.npmPackage(runner.product);
+    if (!npm || compareVersions(npm.version, runner.version) <= 0)
+        return undefined;
+    return {
+        latestVersion: npm.version,
+        package: npm.package,
+        channel: npm.channel,
+        reason: `The application runs ${npm.product} ${npm.version}: install ${npm.package}@${npm.version} from npm.`,
+    };
+}
+/** Where an update goes in a heartbeat answer: a tarball in `upgrade`, an npm package in `npmUpgrade`. */
+export function upgradeFields(upgrade) {
+    if (upgrade === undefined)
+        return {};
+    return 'downloadUrl' in upgrade ? { upgrade } : { npmUpgrade: upgrade };
+}
+//# sourceMappingURL=index.js.map

package/dist/server/distribution/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../server/distribution/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,mBAAmB,GAIpB,MAAM,0BAA0B,CAAC;AAIlC,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,qBAAqB,GAGtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,iBAAiB,EACjB,eAAe,GAKhB,MAAM,mBAAmB,CAAC;AAE3B,+DAA+D;AAC/D,MAAM,UAAU,YAAY,CAAC,MAAmC;IAC9D,OAAO,GAAG,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAKD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAiB,EACjB,MAAwE;IAExE,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3E,OAAO;YACL,UAAU,EAAE,OAAO;YACnB,aAAa,EAAE,MAAM,CAAC,OAAO;YAC7B,WAAW,EAAE,MAAM,CAAC,GAAG;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,0BAA0B,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC,OAAO,WAAW;SACvG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAAE,OAAO,SAAS,CAAC;IACrE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAC3D,OAAO,SAAS,CAAC;IACnB,OAAO;QACL,aAAa,EAAE,GAAG,CAAC,OAAO;QAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,wBAAwB,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,aAAa,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,YAAY;KAC9G,CAAC;AACJ,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,aAAa,CAC3B,OAAkC;IAElC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,aAAa,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAC1E,CAAC"}

package/dist/server/index.d.ts

@@ -0,0 +1,4 @@
+export { default } from './plugin.js';
+/** What the plugin registers with the authorization plugin at boot, for an application or a test assembling it by hand. */
+export { registerBusinesses, registerSettings, } from './providers/authorization.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,2HAA2H;AAC3H,OAAO,EACL,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,8BAA8B,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,4 @@
+export { default } from './plugin.js';
+/** What the plugin registers with the authorization plugin at boot, for an application or a test assembling it by hand. */
+export { registerBusinesses, registerSettings, } from './providers/authorization.js';
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,2HAA2H;AAC3H,OAAO,EACL,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,8BAA8B,CAAC"}

package/dist/server/jobs/index.d.ts

@@ -0,0 +1,5 @@
+export { createJobService, jobFits, type EnqueueJobInput, type JobChange, type JobRunnerReports, type JobSecretSource, type JobService, type JobServiceDeps, type JobSweepReport, } from './job.service.js';
+export { activeJobsOn } from './job.store.js';
+export { createJobKindRegistry, type JobKindRegistration, type JobKindRegistry, type JobPrepareContext, type RegisteredJobKind, } from './registry.js';
+export { checkSpecInput, JobSecretsNotAllowed, runnerSpec, secretRefsOf, type BuildJobSpecInput, type JobEnvInput, type JobRepoInput, type JobSpecInput, type JobSpecInputs, type SecretRef, } from './spec.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/jobs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../server/jobs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,OAAO,EACP,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,UAAU,EACV,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,SAAS,GACf,MAAM,WAAW,CAAC"}

package/dist/server/jobs/index.js

@@ -0,0 +1,5 @@
+export { createJobService, jobFits, } from './job.service.js';
+export { activeJobsOn } from './job.store.js';
+export { createJobKindRegistry, } from './registry.js';
+export { checkSpecInput, JobSecretsNotAllowed, runnerSpec, secretRefsOf, } from './spec.js';
+//# sourceMappingURL=index.js.map

package/dist/server/jobs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../server/jobs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,OAAO,GAQR,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,qBAAqB,GAKtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,UAAU,EACV,YAAY,GAOb,MAAM,WAAW,CAAC"}