@openma/common 0.0.0-stage → 0.9.0

package/dist/acp-artifacts/binary.js

@@ -0,0 +1,120 @@
+import { createHash } from "node:crypto";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { access, chmod, mkdir, realpath, rm, stat, writeFile } from "node:fs/promises";
+import { constants } from "node:fs";
+import { dirname, isAbsolute, join, relative } from "node:path";
+import { unzipSync } from "fflate";
+import * as tar from "tar";
+import { digest, identity, safeRelative, url, launchOptions, platformKey, download, installAtomically, childEnvironment } from "./shared.js";
+export function binaryFormat(address) {
+    const path = new URL(address).pathname.toLowerCase();
+    if (/\.(dmg|pkg|deb|rpm|msi|appimage)$/.test(path))
+        throw new Error("Installer packages are not ACP binary distributions");
+    if (/\.(tar\.gz|tgz)$/.test(path))
+        return "tar.gz";
+    if (/\.(tar\.bz2|tbz2)$/.test(path))
+        return "tar.bz2";
+    if (/\.(tar\.xz|txz)$/.test(path))
+        return "tar.xz";
+    if (path.endsWith(".tar"))
+        return "tar";
+    if (path.endsWith(".zip"))
+        return "zip";
+    return "raw";
+}
+export function resolveBinaryAcpRelease(input) {
+    identity(input.id, input.version);
+    if (typeof input.platform !== "string" || !/^[a-z0-9_-]+$/.test(input.platform))
+        throw new Error("Invalid binary platform");
+    url(input.archive);
+    if (typeof input.sha256 !== "string" || !/^[a-fA-F0-9]{64}$/.test(input.sha256))
+        throw new Error("Binary releases require a SHA-256 checksum");
+    const format = input.format ?? binaryFormat(input.archive);
+    if (!["raw", "zip", "tar", "tar.gz", "tar.bz2", "tar.xz"].includes(format))
+        throw new Error("Unsupported binary archive format");
+    const record = { schema: "openma.acp.binary.v1", id: input.id, version: input.version,
+        platform: input.platform, archive: input.archive, sha256: input.sha256.toLowerCase(), format: format,
+        command: safeRelative(input.command), ...launchOptions(input) };
+    return { ...record, digest: digest(record) };
+}
+export function validateBinaryAcpRelease(value) {
+    if (!value || typeof value !== "object")
+        throw new Error("Invalid binary release");
+    const input = value;
+    const result = resolveBinaryAcpRelease(input);
+    if (input.schema !== result.schema || input.digest !== result.digest)
+        throw new Error("Invalid binary release digest");
+    return result;
+}
+export async function prepareBinaryAcpRelease(input, options) {
+    const release = validateBinaryAcpRelease(input);
+    if (release.platform !== platformKey())
+        throw new Error(`Binary platform ${release.platform} does not match ${platformKey()}`);
+    return installAtomically(join(options.root, platformKey()), release, async (directory) => {
+        const bytes = await download(release.archive, options);
+        if (createHash("sha256").update(bytes).digest("hex") !== release.sha256)
+            throw new Error("Binary artifact integrity mismatch");
+        const payload = join(directory, "payload");
+        await mkdir(payload);
+        if (release.format === "raw") {
+            await mkdir(dirname(join(payload, release.command)), { recursive: true });
+            await writeFile(join(payload, release.command), bytes);
+        }
+        else if (release.format === "zip") {
+            const entries = Object.entries(unzipSync(bytes));
+            for (const [name] of entries)
+                safeRelative(name);
+            for (const [name, data] of entries) {
+                const target = join(payload, safeRelative(name));
+                if (name.endsWith("/"))
+                    await mkdir(target, { recursive: true });
+                else {
+                    await mkdir(dirname(target), { recursive: true });
+                    await writeFile(target, data);
+                }
+            }
+        }
+        else {
+            const archive = join(directory, "archive.tar");
+            if (release.format === "tar.bz2" || release.format === "tar.xz") {
+                const compressed = join(directory, "compressed");
+                await writeFile(compressed, bytes);
+                const decoded = await promisify(execFile)(release.format === "tar.bz2" ? "bzip2" : "xz", ["-dc", compressed], {
+                    encoding: "buffer", maxBuffer: 1024 * 1024 * 1024, timeout: 120_000, signal: options.signal, env: childEnvironment(),
+                });
+                await writeFile(archive, decoded.stdout);
+            }
+            else
+                await writeFile(archive, bytes);
+            let invalid;
+            await tar.t({ file: archive, strict: true, onReadEntry(entry) {
+                    try {
+                        if (entry.type === "Directory" && [".", "./"].includes(entry.path))
+                            return;
+                        safeRelative(entry.path);
+                        if (!["File", "OldFile", "Directory"].includes(entry.type))
+                            throw new Error("Binary archives cannot contain links or special files");
+                    }
+                    catch (error) {
+                        invalid = error;
+                    }
+                } });
+            if (invalid)
+                throw invalid;
+            await tar.x({ file: archive, cwd: payload, strict: true, preserveOwner: false, chmod: true });
+            await rm(archive);
+            await rm(join(directory, "compressed"), { force: true });
+        }
+        await chmod(join(payload, release.command), 0o755);
+    }, async (directory) => {
+        const payload = await realpath(join(directory, "payload"));
+        const command = await realpath(join(payload, release.command));
+        const rel = relative(payload, command);
+        if (rel.startsWith("..") || isAbsolute(rel) || !(await stat(command)).isFile())
+            throw new Error("Binary executable path escapes the artifact");
+        await access(command, constants.X_OK);
+        return { command, args: release.args, env: release.env };
+    }, options.signal);
+}
+//# sourceMappingURL=binary.js.map

package/dist/acp-artifacts/binary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary.js","sourceRoot":"","sources":["../../src/acp-artifacts/binary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAC3B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,gBAAgB,EAAwB,MAAM,aAAa,CAAC;AAanK,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC3H,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnD,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,KAA4B;IAClE,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC5H,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/I,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACjI,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,sBAA+B,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;QAC5F,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAsB;QACpH,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;IAClE,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AAC/C,CAAC;AACD,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,KAAyB,CAAC;IACxC,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACvH,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAAuB,EAAE,OAA2C;IAChH,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,CAAC,QAAQ,mBAAmB,WAAW,EAAE,EAAE,CAAC,CAAC;IAC/H,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE;QACrF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC/H,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1E,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACjD,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO;gBAAE,YAAY,CAAC,IAAI,CAAC,CAAC;YACjD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC5D,CAAC;oBAAC,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAAC,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;YAC5F,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAChE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;gBAAC,MAAM,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBACrF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE;oBAC5G,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE;iBACrH,CAAC,CAAC;gBACH,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3C,CAAC;;gBAAM,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACvC,IAAI,OAA0B,CAAC;YAC/B,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK;oBAC1D,IAAI,CAAC;wBACH,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;4BAAE,OAAO;wBAC3E,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBACzB,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;oBACvI,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAAC,OAAO,GAAG,KAAc,CAAC;oBAAC,CAAC;gBAC/C,CAAC,EAAE,CAAC,CAAC;YACL,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC;YAC3B,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9F,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;YAClB,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE;QACnB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC/I,MAAM,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IAC3D,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AACrB,CAAC"}

package/dist/acp-artifacts/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./npm.js";
+export * from "./uvx.js";
+export * from "./binary.js";
+export * from "./registry.js";
+export { resolveAcpReleaseFromManifest } from "./registry.js";
+export { pinnedVersion as isPinnedAcpVersion, type ArtifactOptions, type ArtifactInstallerOptions, } from "./shared.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/acp-artifacts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/acp-artifacts/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,OAAO,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EACL,aAAa,IAAI,kBAAkB,EACnC,KAAK,eAAe,EACpB,KAAK,wBAAwB,GAC9B,MAAM,aAAa,CAAC"}

package/dist/acp-artifacts/index.js

@@ -0,0 +1,7 @@
+export * from "./npm.js";
+export * from "./uvx.js";
+export * from "./binary.js";
+export * from "./registry.js";
+export { resolveAcpReleaseFromManifest } from "./registry.js";
+export { pinnedVersion as isPinnedAcpVersion, } from "./shared.js";
+//# sourceMappingURL=index.js.map

package/dist/acp-artifacts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/acp-artifacts/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,OAAO,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EACL,aAAa,IAAI,kBAAkB,GAGpC,MAAM,aAAa,CAAC"}

package/dist/acp-artifacts/node-abi.d.ts

@@ -0,0 +1,3 @@
+/** Cache directory segment that isolates npm installs by Node module ABI. */
+export declare function nodeModulesCacheKey(nodePath?: string): Promise<string>;
+//# sourceMappingURL=node-abi.d.ts.map

package/dist/acp-artifacts/node-abi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-abi.d.ts","sourceRoot":"","sources":["../../src/acp-artifacts/node-abi.ts"],"names":[],"mappings":"AAKA,6EAA6E;AAC7E,wBAAsB,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS5E"}

package/dist/acp-artifacts/node-abi.js

@@ -0,0 +1,17 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+const exec = promisify(execFile);
+/** Cache directory segment that isolates npm installs by Node module ABI. */
+export async function nodeModulesCacheKey(nodePath) {
+    if (!nodePath)
+        return `node${process.versions.modules}`;
+    const { stdout } = await exec(nodePath, ["-p", "process.versions.modules"], {
+        timeout: 30_000,
+        maxBuffer: 1024,
+    });
+    const modules = stdout.trim();
+    if (!/^\d+$/.test(modules))
+        throw new Error("Invalid Node module ABI from nodePath");
+    return `node${modules}`;
+}
+//# sourceMappingURL=node-abi.js.map

package/dist/acp-artifacts/node-abi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-abi.js","sourceRoot":"","sources":["../../src/acp-artifacts/node-abi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEjC,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAiB;IACzD,IAAI,CAAC,QAAQ;QAAE,OAAO,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IACxD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,0BAA0B,CAAC,EAAE;QAC1E,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACrF,OAAO,OAAO,OAAO,EAAE,CAAC;AAC1B,CAAC"}

package/dist/acp-artifacts/npm-cli.d.ts

@@ -0,0 +1,3 @@
+/** Path to the npm CLI entry script shipped with the `npm` dependency. */
+export declare function defaultNpmCliPath(): string;
+//# sourceMappingURL=npm-cli.d.ts.map

package/dist/acp-artifacts/npm-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-cli.d.ts","sourceRoot":"","sources":["../../src/acp-artifacts/npm-cli.ts"],"names":[],"mappings":"AAKA,0EAA0E;AAC1E,wBAAgB,iBAAiB,IAAI,MAAM,CAG1C"}

package/dist/acp-artifacts/npm-cli.js

@@ -0,0 +1,9 @@
+import { createRequire } from "node:module";
+import { dirname, join } from "node:path";
+const require = createRequire(import.meta.url);
+/** Path to the npm CLI entry script shipped with the `npm` dependency. */
+export function defaultNpmCliPath() {
+    const packageJson = require.resolve("npm/package.json");
+    return join(dirname(packageJson), "bin/npm-cli.js");
+}
+//# sourceMappingURL=npm-cli.js.map

package/dist/acp-artifacts/npm-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-cli.js","sourceRoot":"","sources":["../../src/acp-artifacts/npm-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,0EAA0E;AAC1E,MAAM,UAAU,iBAAiB;IAC/B,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACtD,CAAC"}

package/dist/acp-artifacts/npm.d.ts

@@ -0,0 +1,37 @@
+export interface NpmAcpRelease {
+    schema: "openma.acp.npm.v1";
+    id: string;
+    version: string;
+    package: string;
+    tarball: string;
+    integrity: string;
+    bin: string;
+    digest: string;
+}
+export interface NpmAcpReleaseSelection {
+    id: string;
+    version: string;
+    package: string;
+}
+export interface NpmAcpReleaseOptions {
+    fetch?: typeof fetch;
+    signal?: AbortSignal;
+    nodePath?: string;
+    npmCliPath?: string;
+    env?: Record<string, string>;
+}
+export interface PreparedAcpRelease {
+    command: string;
+    release: NpmAcpRelease;
+}
+export declare function quoteWindowsArg(value: string): string;
+/** Validate persisted release records before trusting their paths or digest. */
+export declare function validateNpmAcpRelease(value: unknown): NpmAcpRelease;
+/** Read the release's own identity and integrity from npm; never resolve latest. */
+export declare function resolveNpmAcpRelease(selection: NpmAcpReleaseSelection, options?: NpmAcpReleaseOptions): Promise<NpmAcpRelease>;
+/** Prepare inside the host/sandbox. Atomic publication prevents partial installs
+ * from becoming launchable. Version directories are never upgraded in place. */
+export declare function prepareNpmAcpRelease(input: NpmAcpRelease, options: NpmAcpReleaseOptions & {
+    root: string;
+}): Promise<PreparedAcpRelease>;
+//# sourceMappingURL=npm.d.ts.map

package/dist/acp-artifacts/npm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm.d.ts","sourceRoot":"","sources":["../../src/acp-artifacts/npm.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,sBAAsB;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACxF,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AACD,MAAM,WAAW,kBAAkB;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE;AAE/E,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIrD;AAoCD,gFAAgF;AAChF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAYnE;AAED,oFAAoF;AACpF,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,sBAAsB,EAAE,OAAO,GAAE,oBAAyB,GACpE,OAAO,CAAC,aAAa,CAAC,CAexB;AAKD;gFACgF;AAChF,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,oBAAoB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/C,OAAO,CAAC,kBAAkB,CAAC,CAoC7B"}

package/dist/acp-artifacts/npm.js

@@ -0,0 +1,167 @@
+/** Immutable npm releases for ACP hosts. No product settings or global installs. */
+import { execFile } from "node:child_process";
+import { createHash } from "node:crypto";
+import { access, mkdir, mkdtemp, readFile, realpath, writeFile } from "node:fs/promises";
+import { constants } from "node:fs";
+import { isAbsolute, join, relative, resolve } from "node:path";
+import { promisify } from "node:util";
+import { defaultNpmCliPath } from "./npm-cli.js";
+import { nodeModulesCacheKey } from "./node-abi.js";
+import { discardStaging, installerEnvironment, publishDirectory } from "./shared.js";
+const exec = promisify(execFile);
+export function quoteWindowsArg(value) {
+    if (value.length === 0)
+        return '""';
+    if (!/[\s"&|<>^]/.test(value))
+        return value;
+    return `"${value.replaceAll('"', '""')}"`;
+}
+/** npm is a `.cmd` shim on Windows, which CreateProcess refuses to start. */
+function runNpm(args, options) {
+    if (options.nodePath) {
+        const cli = options.npmCliPath ?? defaultNpmCliPath();
+        return exec(options.nodePath, [cli, ...args], options);
+    }
+    if (process.platform !== "win32")
+        return exec("npm", args, options);
+    const line = ["npm", ...args].map(quoteWindowsArg).join(" ");
+    return exec(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", line], options);
+}
+const exactVersion = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
+const packageName = /^(?:@[a-z0-9._-]+\/)?[a-z0-9][a-z0-9._-]*$/;
+const safeName = /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/;
+function validateSelection(value) {
+    if (!safeName.test(value.id) || !packageName.test(value.package))
+        throw new Error("Invalid ACP release identity");
+    if (!exactVersion.test(value.version))
+        throw new Error("ACP release requires an exact version (no tags or ranges)");
+}
+function fingerprint(value) {
+    return createHash("sha256").update(JSON.stringify([
+        value.schema, value.id, value.version, value.package, value.tarball, value.integrity, value.bin,
+    ])).digest("hex");
+}
+function httpsUrl(value) {
+    try {
+        const u = new URL(value);
+        return u.protocol === "https:" && !u.username && !u.password;
+    }
+    catch {
+        return false;
+    }
+}
+/** Validate persisted release records before trusting their paths or digest. */
+export function validateNpmAcpRelease(value) {
+    if (!value || typeof value !== "object")
+        throw new Error("Invalid ACP release record");
+    const r = value;
+    for (const key of ["id", "version", "package", "tarball", "integrity", "bin", "digest"]) {
+        if (typeof r[key] !== "string")
+            throw new Error("Invalid ACP release record");
+    }
+    validateSelection(r);
+    if (r.schema !== "openma.acp.npm.v1" || !httpsUrl(r.tarball)
+        || !/^sha512-[A-Za-z0-9+/]{86}==$/.test(r.integrity) || !safeName.test(r.bin)
+        || r.digest !== fingerprint(r))
+        throw new Error("Invalid ACP release digest or metadata");
+    return { schema: r.schema, id: r.id, version: r.version, package: r.package,
+        tarball: r.tarball, integrity: r.integrity, bin: r.bin, digest: r.digest };
+}
+/** Read the release's own identity and integrity from npm; never resolve latest. */
+export async function resolveNpmAcpRelease(selection, options = {}) {
+    validateSelection(selection);
+    const response = await (options.fetch ?? fetch)(`https://registry.npmjs.org/${encodeURIComponent(selection.package)}/${encodeURIComponent(selection.version)}`, { signal: signalWithTimeout(options.signal, 30_000) });
+    if (!response.ok)
+        throw new Error(`ACP release ${selection.id}@${selection.version}: registry HTTP ${response.status}`);
+    const data = await response.json();
+    if (data.name !== selection.package || data.version !== selection.version)
+        throw new Error("ACP registry release identity mismatch");
+    const unscoped = selection.package.split("/").at(-1);
+    const bins = typeof data.bin === "string" ? [unscoped] : Object.keys(data.bin ?? {});
+    const bin = bins.includes(selection.id) ? selection.id : bins.includes(unscoped) ? unscoped : bins.length === 1 ? bins[0] : "";
+    const record = { schema: "openma.acp.npm.v1", ...selection,
+        tarball: data.dist?.tarball ?? "", integrity: data.dist?.integrity ?? "", bin };
+    return validateNpmAcpRelease({ ...record, digest: fingerprint(record) });
+}
+function signalWithTimeout(signal, ms) {
+    return signal ? AbortSignal.any([signal, AbortSignal.timeout(ms)]) : AbortSignal.timeout(ms);
+}
+/** Prepare inside the host/sandbox. Atomic publication prevents partial installs
+ * from becoming launchable. Version directories are never upgraded in place. */
+export async function prepareNpmAcpRelease(input, options) {
+    const release = validateNpmAcpRelease(input);
+    options.signal?.throwIfAborted();
+    const abi = await nodeModulesCacheKey(options.nodePath);
+    const root = join(resolve(options.root), `${process.platform}-${process.arch}-${abi}`);
+    const destination = join(root, release.digest);
+    const cached = await readPrepared(destination, release);
+    if (cached)
+        return cached;
+    await mkdir(root, { recursive: true });
+    const staging = await mkdtemp(join(root, ".install-"));
+    try {
+        const response = await (options.fetch ?? fetch)(release.tarball, { signal: signalWithTimeout(options.signal, 120_000) });
+        if (!response.ok)
+            throw new Error(`ACP artifact download HTTP ${response.status}`);
+        const bytes = Buffer.from(await response.arrayBuffer());
+        const integrity = `sha512-${createHash("sha512").update(bytes).digest("base64")}`;
+        if (integrity !== release.integrity)
+            throw new Error("ACP artifact integrity mismatch");
+        const archive = join(staging, "release.tgz");
+        await writeFile(archive, bytes);
+        // Deliberately exclude Work tokens and model credentials from package scripts.
+        const env = installerEnvironment(options.env);
+        await runNpm(["install", "--prefix", staging, "--omit=dev", "--no-audit", "--no-fund", "--", archive], {
+            env,
+            timeout: 600_000,
+            maxBuffer: 1024 * 1024,
+            signal: options.signal,
+            nodePath: options.nodePath,
+            npmCliPath: options.npmCliPath,
+        });
+        await verifyInstalled(staging, release);
+        await writeFile(join(staging, "release.json"), JSON.stringify(release));
+        options.signal?.throwIfAborted();
+        await publishDirectory(staging, destination);
+        const prepared = await readPrepared(destination, release);
+        if (!prepared)
+            throw new Error("ACP release was not published");
+        return prepared;
+    }
+    finally {
+        await discardStaging(staging, destination);
+    }
+}
+async function verifyInstalled(directory, release) {
+    const packageDir = join(directory, "node_modules", release.package);
+    const metadata = JSON.parse(await readFile(join(packageDir, "package.json"), "utf8"));
+    if (metadata.name !== release.package || metadata.version !== release.version)
+        throw new Error("ACP installed package identity mismatch");
+    const binPath = typeof metadata.bin === "string" ? metadata.bin : metadata.bin?.[release.bin];
+    if (typeof binPath !== "string" || isAbsolute(binPath))
+        throw new Error("ACP release executable is invalid");
+    const target = await realpath(join(packageDir, binPath));
+    const path = relative(await realpath(packageDir), target);
+    if (path.startsWith("..") || isAbsolute(path))
+        throw new Error("ACP release executable escapes its package");
+    const command = join(directory, "node_modules", ".bin", process.platform === "win32" ? `${release.bin}.cmd` : release.bin);
+    await access(command, constants.X_OK);
+    if (process.platform !== "win32" && await realpath(command) !== target)
+        throw new Error("ACP release executable link mismatch");
+    return command;
+}
+async function readPrepared(directory, release) {
+    let saved;
+    try {
+        saved = await readFile(join(directory, "release.json"), "utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw error;
+    }
+    if (validateNpmAcpRelease(JSON.parse(saved)).digest !== release.digest)
+        throw new Error("ACP cached release identity mismatch");
+    return { command: await verifyInstalled(directory, release), release };
+}
+//# sourceMappingURL=npm.js.map

package/dist/acp-artifacts/npm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm.js","sourceRoot":"","sources":["../../src/acp-artifacts/npm.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAqBrF,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AAC5C,CAAC;AAUD,6EAA6E;AAC7E,SAAS,MAAM,CAAC,IAAc,EAAE,OAAsB;IACpD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;AACnF,CAAC;AACD,MAAM,YAAY,GAAG,qFAAqF,CAAC;AAC3G,MAAM,WAAW,GAAG,4CAA4C,CAAC;AACjE,MAAM,QAAQ,GAAG,8BAA8B,CAAC;AAEhD,SAAS,iBAAiB,CAAC,KAA6B;IACtD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClH,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;AACtH,CAAC;AACD,SAAS,WAAW,CAAC,KAAoC;IACvD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAChD,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG;KAChG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AACD,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACzH,CAAC;AACD,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACvF,MAAM,CAAC,GAAG,KAAsB,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAU,EAAE,CAAC;QACjG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChF,CAAC;IACD,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,CAAC,MAAM,KAAK,mBAAmB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;WACvD,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;WAC1E,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5F,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO;QACzE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC/E,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiC,EAAE,UAAgC,EAAE;IAErE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAC7C,8BAA8B,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAC9G,EAAE,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CACtD,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,OAAO,mBAAmB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACxH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAiI,CAAC;IAClK,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACrI,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChI,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,mBAA4B,EAAE,GAAG,SAAS;QACjE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC;IAClF,OAAO,qBAAqB,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC3E,CAAC;AACD,SAAS,iBAAiB,CAAC,MAA+B,EAAE,EAAU;IACpE,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED;gFACgF;AAChF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAoB,EACpB,OAAgD;IAEhD,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;IACvF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QACzH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClF,IAAI,SAAS,KAAK,OAAO,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC7C,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChC,+EAA+E;QAC/E,MAAM,GAAG,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,MAAM,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;YACrG,GAAG;YACH,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,IAAI,GAAG,IAAI;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,MAAM,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACxE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,MAAM,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAChE,OAAO,QAAQ,CAAC;IAClB,CAAC;YAAS,CAAC;QAAC,MAAM,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAAC,CAAC;AAC3D,CAAC;AACD,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,OAAsB;IACtE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA+E,CAAC;IACpK,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1I,MAAM,OAAO,GAAG,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9F,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC7G,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3H,MAAM,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAChI,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,OAAsB;IACnE,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QAAC,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IACxE,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACnG,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAChI,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;AACzE,CAAC"}

package/dist/acp-artifacts/registry.d.ts

@@ -0,0 +1,45 @@
+import { type NpmAcpRelease } from "./npm.js";
+import { type UvxAcpRelease, type UvxAcpReleaseInput } from "./uvx.js";
+import { type BinaryAcpRelease } from "./binary.js";
+import { type ArtifactOptions, type Launch } from "./shared.js";
+type DistributionRelease = NpmAcpRelease | UvxAcpRelease | BinaryAcpRelease;
+export interface RegistryAcpRelease {
+    schema: "openma.acp.registry.v1";
+    id: string;
+    version: string;
+    source: string;
+    artifact: DistributionRelease;
+    args: string[];
+    env: Record<string, string>;
+    digest: string;
+}
+export type AcpRelease = DistributionRelease | RegistryAcpRelease;
+export type AcpReleaseSource = {
+    type: "npm";
+    package: string;
+} | ({
+    type: "uvx";
+} & Omit<UvxAcpReleaseInput, "id" | "version">) | {
+    type: "registry";
+    manifestUrl?: string;
+    preference?: ("binary" | "npx" | "uvx")[];
+};
+/** String entries are the backwards-compatible npm package catalog. */
+export declare function parseAcpReleaseSource(value: unknown): AcpReleaseSource;
+export declare function validateAcpRelease(value: unknown): AcpRelease;
+export declare function acpReleaseMatchesSource(release: AcpRelease, input: AcpReleaseSource): boolean;
+export declare function resolveAcpReleaseFromManifest(selection: {
+    id: string;
+    version: string;
+}, manifest: Record<string, unknown>, input?: AcpReleaseSource, options?: ArtifactOptions): Promise<AcpRelease>;
+export declare function resolveAcpRelease(selection: {
+    id: string;
+    version: string;
+}, input?: AcpReleaseSource, options?: ArtifactOptions): Promise<AcpRelease>;
+export declare function prepareAcpRelease(input: AcpRelease, options: ArtifactOptions & {
+    root: string;
+}): Promise<Launch & {
+    release: AcpRelease;
+}>;
+export {};
+//# sourceMappingURL=registry.d.ts.map

package/dist/acp-artifacts/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/acp-artifacts/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AACjH,OAAO,EAAqE,KAAK,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC1I,OAAO,EAA8E,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAChI,OAAO,EAAgF,KAAK,eAAe,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAG9I,KAAK,mBAAmB,GAAG,aAAa,GAAG,aAAa,GAAG,gBAAgB,CAAC;AAC5E,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,wBAAwB,CAAC;IACjC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAC;IAC3E,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;CAC7D;AACD,MAAM,MAAM,UAAU,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AAClE,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAChC,CAAC;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,GAAG,IAAI,CAAC,kBAAkB,EAAE,IAAI,GAAG,SAAS,CAAC,CAAC,GAC9D;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,GAAG,KAAK,GAAG,KAAK,CAAC,EAAE,CAAA;CAAE,CAAC;AAG1F,uEAAuE;AACvE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAuBtE;AACD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAa7D;AACD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAS7F;AAmCD,wBAAsB,6BAA6B,CACjD,SAAS,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,KAAK,GAAE,gBAAuC,EAC9C,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,UAAU,CAAC,CAMrB;AAED,wBAAsB,iBAAiB,CAAC,SAAS,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,KAAK,GAAE,gBAAuC,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,UAAU,CAAC,CAOtL;AA0DD,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,GAAG;IAAE,OAAO,EAAE,UAAU,CAAA;CAAE,CAAC,CAWjJ"}