@nodetool-ai/pack-manager 0.0.0-stage → 0.8.9-beta.2

package/dist/packs/install-tree.js

@@ -0,0 +1,253 @@
+import { readFile, readdir, realpath, rm } from "node:fs/promises";
+import { join, relative, resolve, sep, dirname } from "node:path";
+import { createRequire } from "node:module";
+import { z } from "zod";
+const manifestSchema = z.object({ name: z.string(), version: z.string() });
+const lockSchema = z.object({ packages: z.record(z.string(), z.object({
+        version: z.string().optional(), integrity: z.string().optional()
+    })) });
+/** Inspect every nested package, including entries omitted by an invalid hidden lock. */
+export async function readInstallTree(root, allowMissingGlobalLock = false) {
+    let lock;
+    let raw;
+    try {
+        raw = await readFile(join(root, "node_modules/.package-lock.json"), "utf8");
+    }
+    catch (error) {
+        if (!(allowMissingGlobalLock && error instanceof Error && "code" in error && error.code === "ENOENT")) {
+            throw error;
+        }
+    }
+    if (raw !== undefined) {
+        lock = lockSchema.parse(JSON.parse(raw));
+    }
+    const result = [];
+    const pending = [join(root, "node_modules")];
+    while (pending.length) {
+        const modules = pending.pop();
+        let entries;
+        try {
+            entries = await readdir(modules, { withFileTypes: true });
+        }
+        catch (error) {
+            if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+                continue;
+            }
+            throw error;
+        }
+        const directories = [];
+        for (const entry of entries) {
+            if (entry.name.startsWith(".")) {
+                continue;
+            }
+            if (entry.name.startsWith("@")) {
+                for (const scoped of await readdir(join(modules, entry.name))) {
+                    directories.push(join(modules, entry.name, scoped));
+                }
+            }
+            else if (entry.isDirectory() || entry.isSymbolicLink()) {
+                directories.push(join(modules, entry.name));
+            }
+        }
+        for (const directory of directories) {
+            const actual = await realpath(directory);
+            if (actual !== resolve(directory)) {
+                throw new Error(`Installer refuses linked package ${directory}`);
+            }
+            const manifest = manifestSchema.parse(JSON.parse(await readFile(join(directory, "package.json"), "utf8")));
+            const path = relative(root, directory).replaceAll("\\", "/");
+            const pinned = lock?.packages[path];
+            if (lock && (!pinned || pinned.version !== manifest.version)) {
+                throw new Error(`Hidden lock is missing or stale for ${path}`);
+            }
+            result.push({ path, name: manifest.name, version: manifest.version, integrity: pinned?.integrity, realPath: actual });
+            pending.push(join(directory, "node_modules"));
+        }
+    }
+    return { packages: result.sort((a, b) => a.path.localeCompare(b.path)), missingLock: lock === undefined };
+}
+export async function snapshotInstallTree(root) {
+    return (await readInstallTree(root)).packages;
+}
+const planEntry = z.object({ name: z.string(), version: z.string() });
+const jsonPlan = z.object({ add: z.array(planEntry), change: z.array(z.unknown()), remove: z.array(z.unknown()) });
+export function parseInstallPlan(output, npmVersion) {
+    if (Number(npmVersion.split(".")[0]) >= 11) {
+        // npm prints individual dry-run actions before its JSON summary.
+        const start = output.indexOf("{");
+        if (start < 0) {
+            throw new Error("Missing npm dry-run JSON plan");
+        }
+        return jsonPlan.parse(JSON.parse(output.slice(start)));
+    }
+    const add = [];
+    const change = [];
+    const remove = [];
+    for (const line of output.split(/\r?\n/)) {
+        const match = /^\s*(add|change|remove)\s+(\S+)\s+(\S+)/.exec(line);
+        if (match?.[1] === "add") {
+            add.push({ name: match[2], version: match[3] });
+        }
+        else if (match?.[1] === "change") {
+            change.push(line);
+        }
+        else if (match?.[1] === "remove") {
+            remove.push(line);
+        }
+    }
+    if (!/\b(?:added|changed|removed|up to date)\b/.test(output) && add.length + change.length + remove.length === 0) {
+        throw new Error("Unrecognized npm dry-run output");
+    }
+    for (const [verb, entries] of [["added", add], ["changed", change], ["removed", remove]]) {
+        const count = new RegExp(`\\b${verb} (\\d+) packages?\\b`).exec(output);
+        if (count && Number(count[1]) !== entries.length) {
+            throw new Error(`Incomplete npm dry-run ${verb} plan`);
+        }
+    }
+    const jsonStart = output.indexOf("{");
+    if (jsonStart >= 0) {
+        const counts = z.object({ added: z.number(), changed: z.number(), removed: z.number() }).parse(JSON.parse(output.slice(jsonStart)));
+        if (counts.added !== add.length || counts.changed !== change.length || counts.removed !== remove.length) {
+            throw new Error("Incomplete npm 10 dry-run action plan");
+        }
+    }
+    return { add, change, remove };
+}
+export function assertAdditivePlan(plan, before, coreNames, shared, coreVersion) {
+    if (plan.change.length || plan.remove.length) {
+        throw new Error(`npm plan changes or removes installed packages: ${JSON.stringify({ change: plan.change, remove: plan.remove })}`);
+    }
+    const identities = new Set(shared.map((pin) => pin.name));
+    const existing = new Set(before.map((entry) => entry.name));
+    const added = new Set();
+    for (const entry of plan.add) {
+        if (coreNames.has(entry.name) || entry.name === "@nodetool-ai/cli" || (identities.has(entry.name) && (existing.has(entry.name) || added.has(entry.name)))) {
+            throw new Error(`npm plan adds another core or shared identity package: ${entry.name}`);
+        }
+        if (entry.name.startsWith("@nodetool-ai/") && entry.version !== coreVersion) {
+            throw new Error(`Wrong NodeTool version in npm plan: ${entry.name}`);
+        }
+        added.add(entry.name);
+    }
+}
+export function assertTreePins(before, after, pins, coreNames, coreVersion, initialGlobalLockMissing = false) {
+    const paths = new Map(after.map((entry) => [entry.path, entry]));
+    for (const previous of before) {
+        const next = paths.get(previous.path);
+        if (!next || next.name !== previous.name || next.version !== previous.version ||
+            (!(initialGlobalLockMissing && previous.integrity === undefined) && next.integrity !== previous.integrity) || next.realPath !== previous.realPath) {
+            throw new Error(`Install changed an existing package: ${previous.path}`);
+        }
+    }
+    const names = new Map();
+    for (const entry of after) {
+        const values = names.get(entry.name) ?? [];
+        values.push(entry);
+        names.set(entry.name, values);
+        if (entry.name.startsWith("@nodetool-ai/") && entry.version !== coreVersion) {
+            throw new Error(`Wrong NodeTool version: ${entry.path}`);
+        }
+    }
+    for (const name of coreNames) {
+        if (names.get(name)?.length !== 1) {
+            throw new Error(`Core package must exist exactly once: ${name}`);
+        }
+    }
+    for (const pin of pins) {
+        const values = (names.get(pin.name) ?? []).filter((entry) => (!pin.installPath || entry.path === pin.installPath) &&
+            (!pin.installName || entry.path.endsWith(`/node_modules/${pin.installName}`) || entry.path === `node_modules/${pin.installName}`));
+        if (!pin.integrity || !values.length || values.some((entry) => entry.version !== pin.version || entry.integrity !== pin.integrity)) {
+            throw new Error(`Package integrity or version does not match pin: ${pin.name}`);
+        }
+    }
+}
+export function installTreeRestored(before, after, initialGlobalLockMissing = false) {
+    if (before.length !== after.length) {
+        return false;
+    }
+    const paths = new Map(after.map((entry) => [entry.path, entry]));
+    return before.every((old) => {
+        const entry = paths.get(old.path);
+        return entry && entry.name === old.name && entry.version === old.version && entry.realPath === old.realPath &&
+            ((initialGlobalLockMissing && old.integrity === undefined) || entry.integrity === old.integrity);
+    });
+}
+export async function assertSharedIdentities(tree, shared) {
+    for (const pin of shared) {
+        const entries = tree.filter((entry) => entry.name === pin.name);
+        if (entries.length !== 1) {
+            throw new Error(`Shared library must exist exactly once: ${pin.name}`);
+        }
+        for (const dependent of tree) {
+            const manifest = z.object({ dependencies: z.record(z.string(), z.string()).optional(),
+                optionalDependencies: z.record(z.string(), z.string()).optional(), peerDependencies: z.record(z.string(), z.string()).optional()
+            }).parse(JSON.parse(await readFile(join(dependent.realPath, "package.json"), "utf8")));
+            if (!(manifest.dependencies?.[pin.name] || manifest.optionalDependencies?.[pin.name] || manifest.peerDependencies?.[pin.name])) {
+                continue;
+            }
+            const resolver = createRequire(join(dependent.realPath, "package.json"));
+            const locations = resolver.resolve.paths(pin.name) ?? [];
+            let found;
+            for (const location of locations) {
+                try {
+                    found = await realpath(join(location, pin.name));
+                    break;
+                }
+                catch (error) {
+                    if (!(error instanceof Error && "code" in error && error.code === "ENOENT")) {
+                        throw error;
+                    }
+                }
+            }
+            if (found !== entries[0].realPath) {
+                throw new Error(`Shared library identity differs from ${dependent.name}: ${pin.name}`);
+            }
+        }
+    }
+}
+/** npm may retain extraneous --no-save additions even after uninstall. */
+export async function removeSnapshotAdditions(root, admittedModules, before) {
+    const modules = await realpath(admittedModules);
+    if (modules !== resolve(root, "node_modules")) {
+        throw new Error("Rollback node_modules root differs from admitted tree");
+    }
+    const current = await snapshotInstallTree(root);
+    const previous = new Set(before.map((entry) => entry.path));
+    const protectedAncestors = new Set();
+    for (const entry of before) {
+        let prefix = "";
+        for (const segment of entry.path.split("/").slice(0, -1)) {
+            prefix = prefix ? `${prefix}/${segment}` : segment;
+            protectedAncestors.add(prefix);
+        }
+    }
+    const additions = current.filter((entry) => !previous.has(entry.path)).sort((a, b) => a.path.length - b.path.length);
+    const removed = new Set();
+    for (const entry of additions) {
+        const segments = entry.path.split("/");
+        let ancestor = "";
+        let covered = false;
+        for (const segment of segments) {
+            ancestor = ancestor ? `${ancestor}/${segment}` : segment;
+            if (removed.has(ancestor)) {
+                covered = true;
+                break;
+            }
+        }
+        if (covered) {
+            continue;
+        }
+        if (protectedAncestors.has(entry.path)) {
+            throw new Error(`Rollback addition contains a preexisting package: ${entry.path}`);
+        }
+        const target = resolve(root, entry.path);
+        const parent = await realpath(dirname(target));
+        const within = relative(modules, target);
+        if (!within || within === ".." || within.startsWith(`..${sep}`) || target !== await realpath(target) || parent !== dirname(target)) { // key-boundary-ok: sep anchors the parent path component on this platform.
+            throw new Error(`Rollback addition escapes admitted tree: ${entry.path}`);
+        }
+        await rm(target, { recursive: true });
+        removed.add(entry.path);
+    }
+}
+//# sourceMappingURL=install-tree.js.map

package/dist/packs/install-tree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-tree.js","sourceRoot":"","sources":["../../src/packs/install-tree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC3E,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;QACpE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACjE,CAAC,CAAC,EAAE,CAAC,CAAC;AAEP,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,sBAAsB,GAAG,KAAK;IAChF,IAAI,IAA4C,CAAC;IACjD,IAAI,GAAuB,CAAC;IAC5B,IAAI,CAAC;QAAC,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,iCAAiC,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IACpF,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,sBAAsB,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACzH,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QAAC,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAAC,CAAC;IACpE,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QAC/B,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAClE,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAAC,SAAS;YAAC,CAAC;YACvF,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,KAAK,MAAM,MAAM,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC9D,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBACzD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;YAAC,CAAC;YACxG,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3G,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YACjI,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACtH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;AAC5G,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY;IACpD,OAAO,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AAChD,CAAC;AAGD,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACtE,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AACnH,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,UAAkB;IACjE,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,iEAAiE;QACjE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAAC,CAAC;QACpE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,GAAG,GAAwC,EAAE,CAAC;IACpD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;aACzE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;aACnD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,0CAA0C,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjH,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAU,EAAE,CAAC;QAClG,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,sBAAsB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxE,IAAI,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,OAAO,CAAC,CAAC;QAAC,CAAC;IAC/G,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACpI,IAAI,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YACxG,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAiB,EAAE,MAA8B,EAAE,SAA8B,EAAE,MAAgC,EAAE,WAAmB;IACzK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IACrL,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1J,MAAM,IAAI,KAAK,CAAC,0DAA0D,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QACtJ,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAA8B,EAAE,KAA6B,EAAE,IAAgC,EAAE,SAA8B,EAAE,WAAmB,EAAE,wBAAwB,GAAG,KAAK;IACnN,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YAC3E,CAAC,CAAC,CAAC,wBAAwB,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpJ,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9F,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC5I,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC1G,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1D,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,WAAW,CAAC;YACpD,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACrI,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACnI,MAAM,IAAI,KAAK,CAAC,oDAAoD,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;AACH,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,MAA8B,EAAE,KAA6B,EAAE,wBAAwB,GAAG,KAAK;IACjI,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ;YACzG,CAAC,CAAC,wBAAwB,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAA4B,EAAE,MAAgC;IACzG,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,2CAA2C,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QACrG,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;gBACnF,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;aACjI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACvF,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,oBAAoB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC7I,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACzD,IAAI,KAAyB,CAAC;YAC9B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC;oBAAC,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;gBAChE,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;wBAAC,MAAM,KAAK,CAAC;oBAAC,CAAC;gBAAC,CAAC;YACjH,CAAC;YACD,IAAI,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,wCAAwC,SAAS,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;QAChI,CAAC;IACH,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAY,EAAE,eAAuB,EAAE,MAA8B;IACjH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAAC,CAAC;IAC5H,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACnD,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrH,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,MAAM;YAAC,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1B,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,qDAAqD,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAC/H,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,MAAM,KAAK,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,2EAA2E;YAC/M,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC"}

package/dist/packs/install-verification.d.ts

@@ -0,0 +1,12 @@
+import type { InstallSelection } from "./install-selection.js";
+import { type VerificationPin } from "./install-tree.js";
+export declare function prepareTreeVerification(selection: InstallSelection, cliRoot: string): Promise<{
+    pins: readonly VerificationPin[];
+    provided: VerificationPin[];
+    runtimePins: VerificationPin[];
+    shared: VerificationPin[];
+    coreNames: Set<string>;
+    libraryPins: (id: string) => readonly VerificationPin[];
+    pinByFolder: Map<string, VerificationPin>;
+}>;
+//# sourceMappingURL=install-verification.d.ts.map

package/dist/packs/install-verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-verification.d.ts","sourceRoot":"","sources":["../../src/packs/install-verification.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzE,wBAAsB,uBAAuB,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM;;;;;;sBAI/D,MAAM,KAAG,SAAS,eAAe,EAAE;;GAgD7D"}

package/dist/packs/install-verification.js

@@ -0,0 +1,75 @@
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { z } from "zod";
+import { RUNTIME_NPM_PACKAGES, isRuntimeNpmPackageId } from "@nodetool-ai/protocol/runtime-npm-packages";
+import { assertTreePins } from "./install-tree.js";
+export async function prepareTreeVerification(selection, cliRoot) {
+    const { before, packs, catalog, initialGlobalLockMissing } = selection;
+    const installPins = catalog.installPins ?? [];
+    const pinByFolder = new Map(installPins.map((pin) => [pin.installName ?? pin.name, pin]));
+    const libraryPins = (id) => {
+        if (!isRuntimeNpmPackageId(id)) {
+            throw new Error(`Unknown runtime library: ${id}`);
+        }
+        return RUNTIME_NPM_PACKAGES[id].packageNames.map((name, index) => {
+            const pin = pinByFolder.get(name);
+            if (!pin) {
+                throw new Error(`Runtime library ${id} has no integrity pins; installation is unavailable until catalog pins are supplied.`);
+            }
+            const spec = pin.installName && pin.installName !== pin.name ? `${pin.installName}@npm:${pin.name}@${pin.version}` : `${pin.name}@${pin.version}`;
+            if (spec !== RUNTIME_NPM_PACKAGES[id].npmPackages[index]) {
+                throw new Error(`Runtime library ${id} pin differs from its exact runtime spec: ${name}`);
+            }
+            return { ...pin, installPath: `node_modules/${name}` };
+        });
+    };
+    const runtimePins = selection.runtimeLibraries.flatMap((id) => {
+        return libraryPins(id);
+    });
+    const provided = packs.flatMap((pack) => pack.provides.map((name) => {
+        const pin = pinByFolder.get(name);
+        if (!pin) {
+            throw new Error(`Provided package ${name} has no integrity pin`);
+        }
+        return pin;
+    }));
+    const shared = installPins.filter((pin) => pin.shared);
+    for (const name of ["mediabunny", "@mediabunny/server"]) {
+        if (before.some((entry) => entry.name === name) && !shared.some((pin) => pin.name === name)) {
+            throw new Error(`Shared library ${name} has no integrity pin`);
+        }
+    }
+    const pins = [...packs.map((pack) => pack.npm), ...provided, ...runtimePins, ...packs.flatMap((pack) => pack.scriptAllowlist),
+        ...shared.filter((pin) => before.some((entry) => entry.name === pin.name))];
+    if (pins.some((pin) => !pin.integrity || pin.integrity === "PENDING")) {
+        throw new Error("Installation requires published integrity pins");
+    }
+    const packNames = new Set(catalog.packs.flatMap((pack) => [pack.npm.name, ...pack.provides]));
+    const coreNames = new Set([...before.filter((entry) => entry.name.startsWith("@nodetool-ai/") && !packNames.has(entry.name)).map((entry) => entry.name)]);
+    const dependencySchema = z.object({ name: z.string().optional(), dependencies: z.record(z.string(), z.string()).optional(),
+        optionalDependencies: z.record(z.string(), z.string()).optional(), peerDependencies: z.record(z.string(), z.string()).optional(),
+        peerDependenciesMeta: z.record(z.string(), z.object({ optional: z.boolean().optional() })).optional() });
+    for (const directory of [cliRoot, ...before.filter((entry) => coreNames.has(entry.name)).map((entry) => entry.realPath)]) {
+        const manifest = dependencySchema.parse(JSON.parse(await readFile(join(directory, "package.json"), "utf8")));
+        const requiredPeers = Object.keys(manifest.peerDependencies ?? {}).filter((name) => !manifest.peerDependenciesMeta?.[name]?.optional);
+        for (const name of [...Object.keys({ ...manifest.dependencies, ...manifest.optionalDependencies }), ...requiredPeers]) {
+            if (name.startsWith("@nodetool-ai/") && ((directory === cliRoot && manifest.name === "@nodetool-ai/cli") || !packNames.has(name))) {
+                coreNames.add(name);
+            }
+        }
+    }
+    if (initialGlobalLockMissing) {
+        for (const pin of pins) {
+            const existing = before.filter((entry) => entry.name === pin.name && (!pin.installPath || entry.path === pin.installPath));
+            if (existing.some((entry) => entry.version !== pin.version)) {
+                throw new Error(`Global baseline package version differs from pin: ${pin.name}`);
+            }
+            if (shared.some((identity) => identity.name === pin.name) && existing.length !== 1) {
+                throw new Error(`Shared library must exist exactly once: ${pin.name}`);
+            }
+        }
+    }
+    assertTreePins(before, before, pins.filter((pin) => before.some((entry) => entry.name === pin.name && (!pin.installPath || entry.path === pin.installPath) && (!initialGlobalLockMissing || entry.integrity !== undefined))), coreNames, selection.coreVersion);
+    return { pins, provided, runtimePins, shared, coreNames, libraryPins, pinByFolder };
+}
+//# sourceMappingURL=install-verification.js.map

package/dist/packs/install-verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-verification.js","sourceRoot":"","sources":["../../src/packs/install-verification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAEzG,OAAO,EAAE,cAAc,EAAwB,MAAM,mBAAmB,CAAC;AAEzE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,SAA2B,EAAE,OAAe;IACxF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,wBAAwB,EAAE,GAAG,SAAS,CAAC;IACvE,MAAM,WAAW,GAA+B,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAC1E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,WAAW,GAAG,CAAC,EAAU,EAA8B,EAAE;QAC7D,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;QACtF,OAAO,oBAAoB,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC/D,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,mBAAmB,EAAE,sFAAsF,CAAC,CAAC;YAAC,CAAC;YAC3I,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,WAAW,QAAQ,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAClJ,IAAI,IAAI,KAAK,oBAAoB,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,mBAAmB,EAAE,6CAA6C,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YACxJ,OAAO,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,gBAAgB,IAAI,EAAE,EAAE,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;QAC5D,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAClE,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,uBAAuB,CAAC,CAAC;QAAC,CAAC;QAC/E,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,uBAAuB,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAA+B,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,WAAW,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC;QACvJ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAAC,CAAC;IAC7I,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1J,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxH,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAChI,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3G,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACzH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7G,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QACtI,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,YAAY,EAAE,GAAG,QAAQ,CAAC,oBAAoB,EAAE,CAAC,EAAE,GAAG,aAAa,CAAC,EAAE,CAAC;YACtH,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;QAC7J,CAAC;IACH,CAAC;IACD,IAAI,wBAAwB,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;YAC3H,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,qDAAqD,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAClJ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,2CAA2C,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;QACjK,CAAC;IACH,CAAC;IACD,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,wBAAwB,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;IAChQ,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AACtF,CAAC"}

package/dist/packs/installed.d.ts

@@ -0,0 +1,36 @@
+import { type MissingPackError, type NodeCatalogIndex } from "@nodetool-ai/pack-core";
+import { type InstallMode } from "./mode.js";
+export interface InstalledPackage {
+    readonly npm: string;
+    readonly version: string;
+    readonly packageRoot: string;
+    readonly realPackageRoot: string;
+}
+export interface InstalledPack extends InstalledPackage {
+    readonly id: string;
+    readonly providedPackages: readonly InstalledPackage[];
+}
+export interface WrongVersionPack {
+    readonly id: string;
+    readonly npm: string;
+    readonly version: string;
+    readonly expectedVersion: string;
+    readonly packageRoot: string;
+}
+export interface InvalidInstalledPackage {
+    readonly id: string;
+    readonly npm: string;
+    readonly packageRoot: string;
+    readonly reason: string;
+}
+export interface InstalledPackSnapshot {
+    readonly mode: InstallMode;
+    readonly packs: readonly InstalledPack[];
+    readonly wrongVersions: readonly WrongVersionPack[];
+    readonly invalidPackages: readonly InvalidInstalledPackage[];
+}
+/** Read the scoped tree once. Hosts retain this snapshot until an explicit reload. */
+export declare function readInstalledPacks(mode: InstallMode, catalog?: NodeCatalogIndex): InstalledPackSnapshot;
+/** Apply CLI layout guidance without changing library or server defaults. */
+export declare function createMissingPackErrorForMode(mode: InstallMode, packId: string, nodeTypes?: readonly string[]): MissingPackError;
+//# sourceMappingURL=installed.d.ts.map

package/dist/packs/installed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installed.d.ts","sourceRoot":"","sources":["../../src/packs/installed.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAyB,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAEpE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,aAAc,SAAQ,gBAAgB;IACrD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,gBAAgB,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACpD,QAAQ,CAAC,eAAe,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAC9D;AAID,sFAAsF;AACtF,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,WAAW,EACjB,OAAO,GAAE,gBAAqC,GAC7C,qBAAqB,CAwEvB;AAED,6EAA6E;AAC7E,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,SAAS,MAAM,EAAO,GAChC,gBAAgB,CAElB"}

package/dist/packs/installed.js

@@ -0,0 +1,87 @@
+import { readFileSync, readdirSync, realpathSync } from "node:fs";
+import { posix, win32 } from "node:path";
+import { z } from "zod";
+import { createMissingPackError, readCatalogIndex } from "@nodetool-ai/pack-core";
+import { installDetailsForMode } from "./mode.js";
+const installedManifestSchema = z.object({ name: z.string(), version: z.string().min(1) });
+/** Read the scoped tree once. Hosts retain this snapshot until an explicit reload. */
+export function readInstalledPacks(mode, catalog = readCatalogIndex()) {
+    if (mode.coreVersion !== catalog.coreVersion) {
+        throw new Error(`Node catalog core version ${catalog.coreVersion} differs from CLI core version ${mode.coreVersion}`);
+    }
+    const packs = [];
+    const wrongVersions = [];
+    const invalidPackages = [];
+    if (!mode.nodeModulesRoot) {
+        return { mode, packs, wrongVersions, invalidPackages };
+    }
+    const paths = mode.pathStyle === "win32" ? win32 : posix;
+    const scope = paths.join(mode.nodeModulesRoot, "@nodetool-ai");
+    let names;
+    try {
+        names = readdirSync(scope).sort();
+    }
+    catch (error) {
+        if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+            return { mode, packs, wrongVersions, invalidPackages };
+        }
+        throw error;
+    }
+    const byNpm = new Map();
+    for (const pack of catalog.packs) {
+        for (const npm of [pack.npm.name, ...pack.provides]) {
+            byNpm.set(npm, pack);
+        }
+    }
+    const installed = new Map();
+    const rejected = new Set();
+    for (const name of names) {
+        const npm = `@nodetool-ai/${name}`;
+        const pack = byNpm.get(npm);
+        if (!pack) {
+            continue;
+        }
+        const packageRoot = paths.join(scope, name);
+        try {
+            const manifest = installedManifestSchema.parse(JSON.parse(readFileSync(paths.join(packageRoot, "package.json"), "utf8")));
+            if (manifest.name !== npm) {
+                throw new Error(`Expected package name ${npm}, found ${manifest.name}`);
+            }
+            if (manifest.version !== mode.coreVersion) {
+                wrongVersions.push({ id: pack.id, npm, version: manifest.version, expectedVersion: mode.coreVersion, packageRoot });
+                rejected.add(pack.id);
+                continue;
+            }
+            installed.set(npm, { npm, version: manifest.version, packageRoot, realPackageRoot: realpathSync(packageRoot) });
+        }
+        catch (error) {
+            invalidPackages.push({ id: pack.id, npm, packageRoot, reason: error instanceof Error ? error.message : String(error) });
+            rejected.add(pack.id);
+        }
+    }
+    for (const pack of catalog.packs) {
+        const primary = installed.get(pack.npm.name);
+        if (!primary || rejected.has(pack.id)) {
+            continue;
+        }
+        const missingCompanions = pack.provides.filter((npm) => !installed.has(npm));
+        if (missingCompanions.length > 0) {
+            for (const npm of missingCompanions) {
+                invalidPackages.push({ id: pack.id, npm, packageRoot: paths.join(mode.nodeModulesRoot, npm), reason: `Missing companion package for node pack ${pack.id}` });
+            }
+            continue;
+        }
+        const providedPackages = pack.provides.flatMap((npm) => {
+            const companion = installed.get(npm);
+            return companion ? [companion] : [];
+        });
+        packs.push({ id: pack.id, ...primary, providedPackages });
+    }
+    packs.sort((a, b) => a.id.localeCompare(b.id));
+    return { mode, packs, wrongVersions, invalidPackages };
+}
+/** Apply CLI layout guidance without changing library or server defaults. */
+export function createMissingPackErrorForMode(mode, packId, nodeTypes = []) {
+    return createMissingPackError(packId, nodeTypes, installDetailsForMode(mode));
+}
+//# sourceMappingURL=installed.js.map

package/dist/packs/installed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installed.js","sourceRoot":"","sources":["../../src/packs/installed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAIjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAoB,MAAM,WAAW,CAAC;AAoCpE,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAE3F,sFAAsF;AACtF,MAAM,UAAU,kBAAkB,CAChC,IAAiB,EACjB,OAAO,GAAqB,gBAAgB,EAAE;IAE9C,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,WAAW,kCAAkC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACxH,CAAC;IACD,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,MAAM,aAAa,GAAuB,EAAE,CAAC;IAC7C,MAAM,eAAe,GAA8B,EAAE,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACzD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IAC/D,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;QACzD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,gBAAgB,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1H,IAAI,QAAQ,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,WAAW,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC1C,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAClH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACtC,SAAS;QACX,CAAC;QACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7E,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;gBACpC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,2CAA2C,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/J,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YACrD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;AACzD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,6BAA6B,CAC3C,IAAiB,EACjB,MAAc,EACd,SAAS,GAAsB,EAAE;IAEjC,OAAO,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/packs/installer-load-check.d.ts

@@ -0,0 +1,5 @@
+import { type InstalledPackSnapshot } from "./installed.js";
+import type { NodeCatalogIndex } from "@nodetool-ai/pack-core/types";
+/** Verify selected feature modules without importing a node registry in the lean host. */
+export declare function verifyPackLoads(snapshot: InstalledPackSnapshot, catalog: NodeCatalogIndex, ids: readonly string[]): Promise<void>;
+//# sourceMappingURL=installer-load-check.d.ts.map

package/dist/packs/installer-load-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer-load-check.d.ts","sourceRoot":"","sources":["../../src/packs/installer-load-check.ts"],"names":[],"mappings":"AASA,OAAO,EAAsB,KAAK,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEhF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAUrE,0FAA0F;AAC1F,wBAAsB,eAAe,CAAC,QAAQ,EAAE,qBAAqB,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAmDvI"}

package/dist/packs/installer-load-check.js

@@ -0,0 +1,98 @@
+import { fileURLToPath } from "node:url";
+import { join } from "node:path";
+import { realpath, readFile } from "node:fs/promises";
+import { createRequire } from "node:module";
+import { z } from "zod";
+import { readCatalogIndex } from "@nodetool-ai/pack-core/catalog-data";
+import { resolveInstalledPack } from "@nodetool-ai/pack-core/installed-resolver";
+import { setPackLoaderContext } from "@nodetool-ai/pack-core/loader-context";
+import { verifyCliFeature } from "../cli-feature.js";
+import { readInstalledPacks } from "./installed.js";
+import { loaderContextForSnapshot } from "./host.js";
+import { readInstallTree } from "./install-tree.js";
+const NODE_SDK_PACKAGE = "@nodetool-ai/node-sdk";
+const packageDependencies = z.object({
+    dependencies: z.record(z.string(), z.string()).optional(),
+    peerDependencies: z.record(z.string(), z.string()).optional()
+});
+/** Verify selected feature modules without importing a node registry in the lean host. */
+export async function verifyPackLoads(snapshot, catalog, ids) {
+    const context = loaderContextForSnapshot(snapshot);
+    setPackLoaderContext(context);
+    const nodePacks = [];
+    for (const id of ids) {
+        const pack = catalog.packs.find(candidate => candidate.id === id);
+        if (!pack || !snapshot.packs.some(candidate => candidate.id === id)) {
+            throw new Error(`Load check pack unavailable: ${id}`);
+        }
+        if (pack.kind === "cli-feature") {
+            const module = await import(resolveInstalledPack(pack, pack.npm.name, context));
+            verifyCliFeature(module, pack);
+        }
+        else {
+            nodePacks.push(pack);
+        }
+    }
+    if (nodePacks.length) {
+        if (snapshot.mode.kind !== "local" && snapshot.mode.kind !== "global") {
+            throw new Error(snapshot.mode.reason);
+        }
+        const tree = await readInstallTree(snapshot.mode.installRoot, snapshot.mode.kind === "global");
+        const copies = tree.packages.filter(entry => entry.name === NODE_SDK_PACKAGE);
+        const sdk = copies[0];
+        if (copies.length !== 1 || !sdk) {
+            throw new Error("Node packs require exactly one admitted node-sdk");
+        }
+        if (sdk.version !== context.coreVersion) {
+            throw new Error("Node SDK version differs from the admitted core version");
+        }
+        const sdkPin = catalog.installPins?.find(pin => pin.name === NODE_SDK_PACKAGE);
+        if (sdkPin && (sdkPin.version !== sdk.version || sdkPin.integrity !== sdk.integrity)) {
+            throw new Error("Node SDK integrity differs from its catalog pin");
+        }
+        const typesByPack = new Map();
+        for (const [nodeType, owner] of Object.entries(catalog.owners)) {
+            const types = typesByPack.get(owner) ?? [];
+            types.push(nodeType);
+            typesByPack.set(owner, types);
+        }
+        for (const pack of nodePacks) {
+            const installed = snapshot.packs.find(entry => entry.id === pack.id);
+            if (!installed) {
+                throw new Error(`Load check pack unavailable: ${pack.id}`);
+            }
+            const manifest = packageDependencies.parse(JSON.parse(await readFile(join(installed.realPackageRoot, "package.json"), "utf8")));
+            if (!manifest.dependencies?.[NODE_SDK_PACKAGE] && !manifest.peerDependencies?.[NODE_SDK_PACKAGE]) {
+                throw new Error(`Node pack ${pack.id} does not declare its SDK dependency`);
+            }
+            // The SDK is admitted through the selected pack's declared dependency and verified install tree.
+            const sdkPack = { ...pack, npm: { name: NODE_SDK_PACKAGE, version: sdk.version, integrity: sdk.integrity ?? "" }, provides: [] };
+            const sdkContext = { ...context, packs: [{ id: pack.id, packages: [{ npm: NODE_SDK_PACKAGE, version: sdk.version, realPackageRoot: sdk.realPath }] }] };
+            const expectedSdk = await realpath(fileURLToPath(resolveInstalledPack(sdkPack, NODE_SDK_PACKAGE, sdkContext)));
+            for (const entry of [installed, ...installed.providedPackages]) {
+                const resolved = await realpath(createRequire(join(entry.realPackageRoot, "package.json")).resolve(NODE_SDK_PACKAGE));
+                if (resolved !== expectedSdk) {
+                    throw new Error(`Pack resolves another node-sdk: ${entry.npm}`);
+                }
+            }
+            const verifierModule = await import(resolveInstalledPack(sdkPack, `${NODE_SDK_PACKAGE}/pack-verifier`, sdkContext));
+            const verifier = z.object({ verifyNodePackRegistration: z.custom(value => typeof value === "function") }).parse(verifierModule);
+            const module = await import(resolveInstalledPack(pack, pack.npm.name, context));
+            const registrar = z.record(z.string(), z.unknown()).parse(module)[pack.registrar];
+            verifier.verifyNodePackRegistration(pack.id, registrar, typesByPack.get(pack.id) ?? []);
+        }
+    }
+}
+async function main() {
+    const [cliRoot, installRoot, ...ids] = process.argv.slice(2);
+    if (!cliRoot || !installRoot) {
+        throw new Error("Pack load check requires CLI and install roots");
+    }
+    const catalog = readCatalogIndex();
+    const mode = { kind: "local", cliRoot, installRoot, nodeModulesRoot: join(installRoot, "node_modules"), coreVersion: catalog.coreVersion, pathStyle: process.platform === "win32" ? "win32" : "posix" };
+    await verifyPackLoads(readInstalledPacks(mode, catalog), catalog, ids);
+}
+if (process.argv[1] === fileURLToPath(import.meta.url)) {
+    main().catch((error) => { console.error(error); process.exitCode = 1; });
+}
+//# sourceMappingURL=installer-load-check.js.map