@nocobase/app-plugin-agents 0.0.0-stage → 0.1.0-beta.10

package/dist/server/routes/runners/dist.js

@@ -0,0 +1,217 @@
+/**
+ * `/api/agents/dist`: the runner and the application's CLI as standalone tarballs (`DIST_ROUTES` of
+ * `@nocobase/agent-protocol`, served from `distribution/`).
+ *
+ * Who may download: a runner by its key (self-update, and the CLI a run names), the install script by the one-time
+ * registration token it was given (`HEADERS.registrationToken`; the token stays unused until the script registers
+ * with it) or by a download token (`HEADERS.downloadToken`: the CLI for one platform, a few downloads within 30
+ * minutes), or a signed-in person. Nothing here is public: the install script itself is, from `install.ts`.
+ *
+ * `POST /downloadTokens` mints a download token for any signed-in person (a session or a personal API key; scoped
+ * keys are refused): it reaches nothing the person could not download themselves, and lets a machine where nobody is
+ * signed in yet install the CLI, after which `acme login` signs it in as that person.
+ */
+import { Readable } from 'node:stream';
+import { DIST_ACCEPT_NPM, DIST_TARGET_PATTERN, distAccepts, DistArtifactSchema, DistManifestSchema, DistNpmPackageSchema, DistResolutionSchema, HEADERS, isDistNpmPackage, ProtocolError, UNIVERSAL_TARGET, } from '@nocobase/agent-protocol';
+import { apiErrorResponse, apiErrorResponses, apiValidator, dataResponse, cliRoute, describeRoute, resolver, } from '@nocobase/app-server/router';
+import { z } from 'zod';
+import { domainRouter } from '../../kernel/http.js';
+import { downloadSecurity, tags } from '../openapi.js';
+import { DistFileParams, DistTargetParams, DistTargetQuery, DownloadTokenSchema, } from '../schemas.js';
+/** `key=value` lines a POSIX shell reads without a JSON parser. Values never contain a newline. */
+export function artifactEnv(artifact) {
+    const parsed = DistArtifactSchema.parse(artifact);
+    return [
+        `product=${parsed.product}`,
+        `version=${parsed.version}`,
+        `target=${parsed.target}`,
+        `url=${parsed.url}`,
+        `sha256=${parsed.sha256}`,
+        `size=${parsed.size}`,
+        `channel=${parsed.channel}`,
+        // Only for the universal tarball, so the answer for a tarball built for the platform stays as it was.
+        ...(parsed.universal === true ? ['universal=true'] : []),
+        '',
+    ].join('\n');
+}
+/** The same lines for an npm answer, led by `kind=npm`; only a caller that sent `accept=npm` reads them. */
+export function npmPackageEnv(npm) {
+    const parsed = DistNpmPackageSchema.parse(npm);
+    return [
+        `kind=${parsed.kind}`,
+        `product=${parsed.product}`,
+        `version=${parsed.version}`,
+        `package=${parsed.package}`,
+        `channel=${parsed.channel}`,
+        '',
+    ].join('\n');
+}
+/** `artifactEnv` or `npmPackageEnv`, whichever the answer is. */
+export function resolutionEnv(resolution) {
+    return isDistNpmPackage(resolution)
+        ? npmPackageEnv(resolution)
+        : artifactEnv(resolution);
+}
+export function createDistRoutes(services, options = {}) {
+    const router = domainRouter();
+    /** What a download token is asked for on this request: the manifest, a platform, or a tarball (which counts). */
+    const admitDownloadToken = async (context, token) => {
+        const { product, target, version, file } = context.req.param();
+        if (version !== undefined && file !== undefined && product !== undefined) {
+            // Checked before the file is looked up, so an invalid token learns nothing about which files there are.
+            await services.downloadTokens.admit(token, { product });
+            const found = await services.dist.file(product, version, file);
+            // The universal tarball serves every platform, so it downloads under whichever one the token is bound to.
+            await services.downloadTokens.admit(token, {
+                product,
+                ...(found.target === UNIVERSAL_TARGET ? {} : { target: found.target }),
+                download: true,
+            });
+            return;
+        }
+        await services.downloadTokens.admit(token, {
+            ...(product === undefined ? {} : { product }),
+            ...(target === undefined ? {} : { target }),
+        });
+    };
+    // Downloads read only: a runner key is checked without counting as the runner being seen.
+    const allowed = async (context, next) => {
+        const runnerKey = context.req.header(HEADERS.runnerKey);
+        if (runnerKey) {
+            await services.runners.authenticate(runnerKey, { touch: false });
+            return next();
+        }
+        const downloadToken = context.req.header(HEADERS.downloadToken);
+        if (downloadToken) {
+            await admitDownloadToken(context, downloadToken);
+            return next();
+        }
+        const token = context.req.header(HEADERS.registrationToken);
+        if (token) {
+            if (!(await services.runners.isRegistrationTokenUsable(token)))
+                throw new ProtocolError('REGISTRATION_TOKEN_INVALID', 'The registration token is unknown, used or expired. Create a new one with "Add runtime".');
+            return next();
+        }
+        if (options.authenticatePerson)
+            return options.authenticatePerson(context, next);
+        throw new ProtocolError('UNAUTHORIZED', 'Send a runner key, a registration token, a download token, or sign in.');
+    };
+    const downloadErrors = {
+        401: apiErrorResponse(401, 'No runner key, registration token, download token or signed-in person, or one that is not valid (`UNAUTHORIZED`, `REGISTRATION_TOKEN_INVALID`, `DOWNLOAD_TOKEN_INVALID`, `RUNNER_KEY_INVALID`).'),
+        500: apiErrorResponse(500),
+    };
+    const credentials = 'A runner (its key), the install script (an unused registration token, or a download token for its platform) or a signed-in person may download.';
+    if (options.person !== undefined) {
+        const person = options.person;
+        router.post('/downloadTokens', person, describeRoute({
+            tags,
+            summary: 'Create a CLI download token',
+            operationId: 'agentsCreateDistDownloadToken',
+            // Minted by the page that shows the install prompt; a signed-in CLI has no use for one.
+            ...cliRoute(false),
+            description: 'A short-lived token the install script downloads the application CLI with (`curl -fsSL <server>/api/agents/dist/installScript | sh -s -- --token <token>`) on a machine where nobody is signed in yet; it is shown only in this answer. It downloads only the CLI, for the platform of its first request, a few times within 30 minutes, and registers no runner. Any signed-in person may create one: it reaches nothing they could not download themselves. Scoped API keys are refused (`SCOPED_KEY_FORBIDDEN`).',
+            responses: {
+                201: dataResponse(DownloadTokenSchema, 'Created.'),
+                ...apiErrorResponses,
+            },
+        }), async (context) => {
+            const caller = context.get('caller');
+            return context.json({ data: await services.downloadTokens.create(caller.userId) }, 201);
+        });
+    }
+    router.get('/manifest', allowed, describeRoute({
+        tags,
+        summary: 'Get the distribution manifest',
+        operationId: 'agentsGetDistManifest',
+        // Plumbing: the runner, its install script and `acme` itself download from here.
+        ...cliRoute(false),
+        description: `Every version of the runner and the CLI the application serves, per platform. ${credentials}`,
+        security: downloadSecurity,
+        responses: {
+            200: dataResponse(DistManifestSchema),
+            ...downloadErrors,
+        },
+    }), async (context) => context.json({ data: await services.dist.manifest() }));
+    router.get('/products/:product/targets/:target', allowed, describeRoute({
+        tags,
+        summary: "Resolve a product's current artifact for a platform",
+        operationId: 'agentsResolveDistArtifact',
+        // Plumbing: the runner, its install script and `acme` itself download from here.
+        ...cliRoute(false),
+        description: `The current version of \`product\` (the application's CLI, which carries the runner, or \`nocobase-runner\`) for \`target\` (such as \`darwin-arm64\` or \`linux-x64\`), with its download path and SHA-256: the tarball built for that platform, else the universal one (\`universal: true\`), which carries no Node and needs Node.js 24 or newer on the machine. \`format=env\` answers the same as \`key=value\` lines a POSIX shell reads, as the install script does. With \`accept=npm\`, a product the application has no tarball of but names on npm (\`agents.dist.npm\`) is answered as \`{ kind: 'npm', product, version, package, channel }\`, the package and exact version to install with Node.js 24 or later, for every platform; without it such a product is 404 as before. A product with a tarball is answered the same either way. Never cached. ${credentials}`,
+        security: downloadSecurity,
+        responses: {
+            200: {
+                description: "The artifact: `{ data }` in JSON, or with `format=env` the lines `product=`, `version=`, `target=`, `url=`, `sha256=`, `size=` and `channel=` as `text/plain`, and `universal=true` when the platform gets the universal tarball, which needs Node.js 24 or newer on the machine. An npm answer (only with `accept=npm`) is `{ data: { kind: 'npm', ... } }`, or the lines `kind=npm`, `product=`, `version=`, `package=` and `channel=`.",
+                content: {
+                    'application/json': {
+                        schema: resolver(z.object({ data: DistResolutionSchema })),
+                    },
+                    'text/plain': {
+                        schema: {
+                            type: 'string',
+                            description: 'One `key=value` line per field.',
+                        },
+                    },
+                },
+            },
+            404: apiErrorResponse(404, 'The product is not served, or not for this platform (`PRODUCT_NOT_FOUND`, `PLATFORM_UNSUPPORTED`).'),
+            ...downloadErrors,
+        },
+    }), apiValidator('param', DistTargetParams), apiValidator('query', DistTargetQuery), async (context) => {
+        const { product, target } = context.req.valid('param');
+        const query = context.req.valid('query');
+        // An npm answer only to a caller that asked for it: everyone else is answered exactly as before it existed.
+        const npm = distAccepts(query.accept, DIST_ACCEPT_NPM) &&
+            DIST_TARGET_PATTERN.test(target)
+            ? await services.dist.npmPackage(product)
+            : null;
+        const resolution = npm ?? (await services.dist.resolve(product, target));
+        if (query.format === 'env')
+            return context.text(resolutionEnv(resolution), 200, {
+                'cache-control': 'no-store',
+            });
+        return context.json({ data: resolution }, 200, {
+            'cache-control': 'no-store',
+        });
+    });
+    router.get('/products/:product/versions/:version/files/:file', allowed, describeRoute({
+        tags,
+        summary: 'Download a distribution file',
+        operationId: 'agentsDownloadDistFile',
+        // Plumbing: the runner, its install script and `acme` itself download from here.
+        ...cliRoute(false),
+        description: `A tarball the manifest lists, as \`application/gzip\`, with its SHA-256 in \`x-checksum-sha256\`. Immutable, so it may be cached. ${credentials}`,
+        security: downloadSecurity,
+        responses: {
+            200: {
+                description: 'The file.',
+                headers: {
+                    'x-checksum-sha256': {
+                        description: "The file's SHA-256, in hex.",
+                        schema: { type: 'string' },
+                    },
+                },
+                content: {
+                    'application/gzip': {
+                        schema: { type: 'string', format: 'binary' },
+                    },
+                },
+            },
+            404: apiErrorResponse(404, 'The manifest lists no such file (`DIST_FILE_NOT_FOUND`).'),
+            ...downloadErrors,
+        },
+    }), apiValidator('param', DistFileParams), async (context) => {
+        const { product, version, file: name } = context.req.valid('param');
+        const file = await services.dist.file(product, version, name);
+        const stream = Readable.toWeb(file.open());
+        return context.body(stream, 200, {
+            'content-type': 'application/gzip',
+            'content-length': String(file.size),
+            'x-checksum-sha256': file.sha256,
+            'cache-control': 'private, max-age=31536000, immutable',
+        });
+    });
+    return router;
+}
+//# sourceMappingURL=dist.js.map

package/dist/server/routes/runners/dist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dist.js","sourceRoot":"","sources":["../../../../server/routes/runners/dist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,OAAO,EACP,gBAAgB,EAChB,aAAa,EAEb,gBAAgB,GAGjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,QAAQ,GACT,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAgBvB,mGAAmG;AACnG,MAAM,UAAU,WAAW,CAAC,QAAsB;IAChD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClD,OAAO;QACL,WAAW,MAAM,CAAC,OAAO,EAAE;QAC3B,WAAW,MAAM,CAAC,OAAO,EAAE;QAC3B,UAAU,MAAM,CAAC,MAAM,EAAE;QACzB,OAAO,MAAM,CAAC,GAAG,EAAE;QACnB,UAAU,MAAM,CAAC,MAAM,EAAE;QACzB,QAAQ,MAAM,CAAC,IAAI,EAAE;QACrB,WAAW,MAAM,CAAC,OAAO,EAAE;QAC3B,sGAAsG;QACtG,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,aAAa,CAAC,GAAmB;IAC/C,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,OAAO;QACL,QAAQ,MAAM,CAAC,IAAI,EAAE;QACrB,WAAW,MAAM,CAAC,OAAO,EAAE;QAC3B,WAAW,MAAM,CAAC,OAAO,EAAE;QAC3B,WAAW,MAAM,CAAC,OAAO,EAAE;QAC3B,WAAW,MAAM,CAAC,OAAO,EAAE;QAC3B,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,UAA0B;IACtD,OAAO,gBAAgB,CAAC,UAAU,CAAC;QACjC,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC;QAC3B,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,QAA6D,EAC7D,UAA6B,EAAE;IAE/B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAE9B,iHAAiH;IACjH,MAAM,kBAAkB,GAAG,KAAK,EAC9B,OAAgB,EAChB,KAAa,EACE,EAAE;QACjB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAE3D,CAAC;QACF,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACzE,wGAAwG;YACxG,MAAM,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YAC/D,0GAA0G;YAC1G,MAAM,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE;gBACzC,OAAO;gBACP,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;gBACtE,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE;YACzC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;YAC7C,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,0FAA0F;IAC1F,MAAM,OAAO,GAAsB,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACzD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAChE,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACjD,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC5D,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;gBAC5D,MAAM,IAAI,aAAa,CACrB,4BAA4B,EAC5B,0FAA0F,CAC3F,CAAC;YACJ,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,CAAC,kBAAkB;YAC5B,OAAO,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,IAAI,aAAa,CACrB,cAAc,EACd,wEAAwE,CACzE,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG;QACrB,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,iMAAiM,CAClM;QACD,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC;KAC3B,CAAC;IACF,MAAM,WAAW,GACf,iJAAiJ,CAAC;IAEpJ,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,MAAsC,EACtC,aAAa,CAAC;YACZ,IAAI;YACJ,OAAO,EAAE,6BAA6B;YACtC,WAAW,EAAE,+BAA+B;YAC5C,wFAAwF;YACxF,GAAG,QAAQ,CAAC,KAAK,CAAC;YAClB,WAAW,EACT,qfAAqf;YACvf,SAAS,EAAE;gBACT,GAAG,EAAE,YAAY,CAAC,mBAAmB,EAAE,UAAU,CAAC;gBAClD,GAAG,iBAAiB;aACrB;SACF,CAAC,EACF,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,MAAM,GAAI,OAAwC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvE,OAAO,OAAO,CAAC,IAAI,CACjB,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAC7D,GAAG,CACJ,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAG,CACR,WAAW,EACX,OAAO,EACP,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,+BAA+B;QACxC,WAAW,EAAE,uBAAuB;QACpC,iFAAiF;QACjF,GAAG,QAAQ,CAAC,KAAK,CAAC;QAClB,WAAW,EAAE,iFAAiF,WAAW,EAAE;QAC3G,QAAQ,EAAE,gBAAgB;QAC1B,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,kBAAkB,CAAC;YACrC,GAAG,cAAc;SAClB;KACF,CAAC,EACF,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAC1E,CAAC;IAEF,MAAM,CAAC,GAAG,CACR,oCAAoC,EACpC,OAAO,EACP,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,qDAAqD;QAC9D,WAAW,EAAE,2BAA2B;QACxC,iFAAiF;QACjF,GAAG,QAAQ,CAAC,KAAK,CAAC;QAClB,WAAW,EAAE,00BAA00B,WAAW,EAAE;QACp2B,QAAQ,EAAE,gBAAgB;QAC1B,SAAS,EAAE;YACT,GAAG,EAAE;gBACH,WAAW,EACT,2aAA2a;gBAC7a,OAAO,EAAE;oBACP,kBAAkB,EAAE;wBAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;qBAC3D;oBACD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iCAAiC;yBAC/C;qBACF;iBACF;aACF;YACD,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,oGAAoG,CACrG;YACD,GAAG,cAAc;SAClB;KACF,CAAC,EACF,YAAY,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACvC,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,EACtC,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,4GAA4G;QAC5G,MAAM,GAAG,GACP,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC;YAC1C,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9B,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YACzC,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,UAAU,GACd,GAAG,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK;YACxB,OAAO,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE;gBAClD,eAAe,EAAE,UAAU;aAC5B,CAAC,CAAC;QACL,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE;YAC7C,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,GAAG,CACR,kDAAkD,EAClD,OAAO,EACP,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,wBAAwB;QACrC,iFAAiF;QACjF,GAAG,QAAQ,CAAC,KAAK,CAAC;QAClB,WAAW,EAAE,qIAAqI,WAAW,EAAE;QAC/J,QAAQ,EAAE,gBAAgB;QAC1B,SAAS,EAAE;YACT,GAAG,EAAE;gBACH,WAAW,EAAE,WAAW;gBACxB,OAAO,EAAE;oBACP,mBAAmB,EAAE;wBACnB,WAAW,EAAE,6BAA6B;wBAC1C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC3B;iBACF;gBACD,OAAO,EAAE;oBACP,kBAAkB,EAAE;wBAClB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;qBAC7C;iBACF;aACF;YACD,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,0DAA0D,CAC3D;YACD,GAAG,cAAc;SAClB;KACF,CAAC,EACF,YAAY,CAAC,OAAO,EAAE,cAAc,CAAC,EACrC,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAA+B,CAAC;QACzE,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YAC/B,cAAc,EAAE,kBAAkB;YAClC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACnC,mBAAmB,EAAE,IAAI,CAAC,MAAM;YAChC,eAAe,EAAE,sCAAsC;SACxD,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/routes/runners/install.d.ts

@@ -0,0 +1,23 @@
+import { Hono, type Context } from 'hono';
+/** What the script installs, and where it was served from. */
+export interface InstallScriptOptions {
+    /** The application's CLI command (`agents.cli.name`), which is also the product it is served as. */
+    readonly cli: string;
+    /** A URL of plain characters, the default `--server`; nothing (then `--server` is required) otherwise. */
+    readonly server?: string;
+}
+/** The script for the application's CLI `cli`, with `server` as its default `--server`. */
+export declare function installScript(options: InstallScriptOptions): string;
+/** What the routes serve, and where the application is published when it knows. */
+export interface InstallRoutesOptions {
+    /** The application's CLI command, read per request (`agents.cli.name`). */
+    readonly cli: () => string;
+    /** `app.publicOrigin`, read per request; the request's own origin (or its forwarded one) otherwise. */
+    readonly publicOrigin?: () => string | undefined;
+    /** The base path the application is served under, such as `/main`; read from the request's path otherwise. */
+    readonly publicBasePath?: string;
+}
+/** The address the script was requested at: what the person's `curl` reached, base path included. */
+export declare function requestedServer(context: Context, options?: Pick<InstallRoutesOptions, 'publicOrigin' | 'publicBasePath'>): string;
+export declare function createInstallRoutes(options: InstallRoutesOptions): Hono;
+//# sourceMappingURL=install.d.ts.map

package/dist/server/routes/runners/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../../server/routes/runners/install.ts"],"names":[],"mappings":"AA2DA,OAAO,EAAE,IAAI,EAAE,KAAK,OAAO,EAAE,MAAM,MAAM,CAAC;AAO1C,8DAA8D;AAC9D,MAAM,WAAW,oBAAoB;IACnC,oGAAoG;IACpG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,0GAA0G;IAC1G,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,2FAA2F;AAC3F,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,MAAM,CASnE;AAED,mFAAmF;AACnF,MAAM,WAAW,oBAAoB;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,uGAAuG;IACvG,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACjD,8GAA8G;IAC9G,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,qGAAqG;AACrG,wBAAgB,eAAe,CAC7B,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE,IAAI,CAAC,oBAAoB,EAAE,cAAc,GAAG,gBAAgB,CAAM,GAC1E,MAAM,CA2BR;AA+TD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAuCvE"}