@openma/common 0.0.0-stage → 0.9.0

package/dist/acp-artifacts/registry.js

@@ -0,0 +1,206 @@
+import { resolveNpmAcpRelease, prepareNpmAcpRelease, validateNpmAcpRelease } from "./npm.js";
+import { resolveUvxAcpRelease, prepareUvxAcpRelease, validateUvxAcpRelease } from "./uvx.js";
+import { resolveBinaryAcpRelease, prepareBinaryAcpRelease, validateBinaryAcpRelease } from "./binary.js";
+import { digest, identity, record, url, launchOptions, platformKey, timeout, download } from "./shared.js";
+import { createHash } from "node:crypto";
+const official = "https://raw.githubusercontent.com/agentclientprotocol/registry";
+/** String entries are the backwards-compatible npm package catalog. */
+export function parseAcpReleaseSource(value) {
+    if (typeof value === "string")
+        value = { type: "npm", package: value };
+    if (!record(value))
+        throw new Error("Invalid ACP release source");
+    if (value.type === "npm" || value.type === "npx") {
+        if (typeof value.package !== "string" || !/^(?:@[a-z0-9._-]+\/)?[a-z0-9][a-z0-9._-]*$/.test(value.package))
+            throw new Error("Invalid npm package source");
+        return { type: "npm", package: value.package };
+    }
+    if (value.type === "uvx") {
+        if (typeof value.package !== "string" || !/^[A-Za-z0-9](?:[A-Za-z0-9._-]*[A-Za-z0-9])?$/.test(value.package))
+            throw new Error("Invalid uvx package source");
+        if (value.command !== undefined && (typeof value.command !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(value.command)))
+            throw new Error("Invalid uvx command");
+        if (value.python !== undefined && (typeof value.python !== "string" || !/^3(?:\.\d+){0,2}$/.test(value.python)))
+            throw new Error("Invalid Python interpreter version");
+        return { type: "uvx", package: value.package,
+            ...(value.command === undefined ? {} : { command: value.command }),
+            ...(value.python === undefined ? {} : { python: value.python }),
+            ...(value.indexUrl === undefined ? {} : { indexUrl: url(value.indexUrl, true) }), ...launchOptions(value) };
+    }
+    if (value.type === "registry") {
+        const preference = value.preference;
+        if (preference !== undefined && (!Array.isArray(preference) || preference.length === 0 || preference.some(p => !["binary", "npx", "uvx"].includes(p)) || new Set(preference).size !== preference.length))
+            throw new Error("Invalid ACP distribution preference");
+        return { type: "registry", ...(value.manifestUrl === undefined ? {} : { manifestUrl: url(value.manifestUrl) }),
+            ...(preference === undefined ? {} : { preference: [...preference] }) };
+    }
+    throw new Error("Unsupported ACP release source");
+}
+export function validateAcpRelease(value) {
+    if (!record(value))
+        throw new Error("Invalid ACP release");
+    if (value.schema === "openma.acp.npm.v1")
+        return validateNpmAcpRelease(value);
+    if (value.schema === "openma.acp.uvx.v1")
+        return validateUvxAcpRelease(value);
+    if (value.schema === "openma.acp.binary.v1")
+        return validateBinaryAcpRelease(value);
+    if (value.schema !== "openma.acp.registry.v1")
+        throw new Error("Unknown ACP release schema");
+    identity(value.id, value.version);
+    const artifact = validateAcpRelease(value.artifact);
+    if (artifact.schema === "openma.acp.registry.v1" || artifact.id !== value.id || artifact.version !== value.version)
+        throw new Error("Registry artifact identity mismatch");
+    const result = { schema: "openma.acp.registry.v1", id: value.id, version: value.version,
+        source: url(value.source), artifact, ...launchOptions(value) };
+    if (value.digest !== digest(result))
+        throw new Error("Invalid registry release digest");
+    return { ...result, digest: value.digest };
+}
+export function acpReleaseMatchesSource(release, input) {
+    const source = parseAcpReleaseSource(input);
+    if (source.type === "npm")
+        return release.schema === "openma.acp.npm.v1" && release.package === source.package;
+    if (source.type === "registry")
+        return release.schema === "openma.acp.registry.v1" && release.source === (source.manifestUrl ?? official);
+    if (release.schema !== "openma.acp.uvx.v1")
+        return false;
+    const name = source.package.toLowerCase().replace(/[-_.]+/g, "-");
+    return release.package === name && release.command === (source.command ?? name)
+        && release.python === (source.python ?? "3") && release.indexUrl === (source.indexUrl ?? "https://pypi.org/simple")
+        && JSON.stringify(launchOptions(release)) === JSON.stringify(launchOptions(source));
+}
+async function json(address, options) {
+    const response = await (options.fetch ?? fetch)(address, { signal: timeout(options.signal, 30_000), headers: { Accept: "application/json" } });
+    if (!response.ok)
+        throw new Error(`ACP registry HTTP ${response.status}`);
+    return response.json();
+}
+function exactManifest(value, selection) {
+    if (!record(value) || value.id !== selection.id)
+        throw new Error("ACP manifest identity mismatch");
+    if (value.version === selection.version)
+        return value;
+    if (record(value.preview) && value.preview.version === selection.version)
+        return { ...value, version: value.preview.version, distribution: value.preview.distribution };
+    return null;
+}
+async function registryManifest(selection, source, options) {
+    if (source.manifestUrl) {
+        const value = exactManifest(await json(source.manifestUrl.replaceAll("{version}", encodeURIComponent(selection.version)).replaceAll("{id}", encodeURIComponent(selection.id)), options), selection);
+        if (!value)
+            throw new Error("ACP manifest release identity mismatch");
+        return value;
+    }
+    const path = `${selection.id}/agent.json`;
+    const latest = exactManifest(await json(`${official}/main/${path}`, options), selection);
+    if (latest)
+        return latest;
+    for (let page = 1;; page++) {
+        options.signal?.throwIfAborted();
+        const commits = await json(`https://api.github.com/repos/agentclientprotocol/registry/commits?path=${encodeURIComponent(path)}&per_page=100&page=${page}`, options);
+        if (!Array.isArray(commits))
+            throw new Error("Invalid ACP registry history");
+        if (commits.length === 0)
+            break;
+        for (const commit of commits) {
+            if (!record(commit) || typeof commit.sha !== "string" || !/^[a-f0-9]{40}$/.test(commit.sha))
+                throw new Error("Invalid ACP registry commit");
+            const found = exactManifest(await json(`${official}/${commit.sha}/${path}`, options), selection);
+            if (found)
+                return found;
+        }
+        if (commits.length < 100)
+            break;
+    }
+    throw new Error(`ACP registry release not found: ${selection.id}@${selection.version}`);
+}
+export async function resolveAcpReleaseFromManifest(selection, manifest, input = { type: "registry" }, options = {}) {
+    identity(selection.id, selection.version);
+    const source = parseAcpReleaseSource(input);
+    if (source.type !== "registry")
+        throw new Error("Manifest resolution requires a registry source");
+    if (!record(manifest.distribution))
+        throw new Error("ACP manifest has no distributions");
+    return resolveRegistryDistribution(selection, source, manifest.distribution, options);
+}
+export async function resolveAcpRelease(selection, input = { type: "registry" }, options = {}) {
+    identity(selection.id, selection.version);
+    const source = parseAcpReleaseSource(input);
+    if (source.type === "npm")
+        return resolveNpmAcpRelease({ ...selection, package: source.package }, options);
+    if (source.type === "uvx")
+        return resolveUvxAcpRelease({ ...source, ...selection }, options);
+    const manifest = await registryManifest(selection, source, options);
+    return resolveAcpReleaseFromManifest(selection, manifest, source, options);
+}
+async function resolveRegistryDistribution(selection, source, distribution, options) {
+    if (!record(distribution))
+        throw new Error("ACP manifest has no distributions");
+    for (const kind of source.preference ?? ["binary", "npx", "uvx"]) {
+        let artifact;
+        let launch;
+        if (kind === "binary") {
+            if (!record(distribution.binary))
+                continue;
+            const target = distribution.binary[platformKey()];
+            if (!record(target))
+                continue;
+            const archive = url(target.archive);
+            const sha256 = target.sha256 === undefined
+                ? createHash("sha256").update(await download(archive, options)).digest("hex")
+                : target.sha256;
+            artifact = resolveBinaryAcpRelease({
+                ...selection,
+                platform: platformKey(),
+                archive,
+                sha256: sha256,
+                command: target.cmd,
+            });
+            launch = launchOptions(target);
+        }
+        else {
+            const entry = distribution[kind];
+            if (!record(entry) || typeof entry.package !== "string")
+                continue;
+            launch = launchOptions(entry);
+            if (kind === "npx") {
+                const at = entry.package.lastIndexOf("@");
+                const name = at > 0 ? entry.package.slice(0, at) : entry.package;
+                if (at > 0 && entry.package.slice(at + 1) !== selection.version) {
+                    throw new Error("Registry npm package version does not match release");
+                }
+                artifact = await resolveNpmAcpRelease({ ...selection, package: name }, options);
+            }
+            else {
+                const parts = entry.package.split(/==|@/);
+                if (parts.length > 2 || parts.length === 2 && parts[1] !== selection.version) {
+                    throw new Error("Registry uvx package version does not match release");
+                }
+                artifact = await resolveUvxAcpRelease({ ...selection, package: parts[0] }, options);
+            }
+        }
+        const result = {
+            schema: "openma.acp.registry.v1",
+            ...selection,
+            source: source.manifestUrl ?? official,
+            artifact,
+            ...launch,
+        };
+        return { ...result, digest: digest(result) };
+    }
+    throw new Error(`No supported ACP distribution for ${platformKey()}`);
+}
+export async function prepareAcpRelease(input, options) {
+    const release = validateAcpRelease(input);
+    switch (release.schema) {
+        case "openma.acp.npm.v1": return prepareNpmAcpRelease(release, options);
+        case "openma.acp.uvx.v1": return prepareUvxAcpRelease(release, options);
+        case "openma.acp.binary.v1": return prepareBinaryAcpRelease(release, options);
+        case "openma.acp.registry.v1": {
+            const prepared = await prepareAcpRelease(release.artifact, options);
+            return { command: prepared.command, args: [...prepared.args ?? [], ...release.args], env: { ...prepared.env, ...release.env }, release };
+        }
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/acp-artifacts/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/acp-artifacts/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,qBAAqB,EAAsB,MAAM,UAAU,CAAC;AACjH,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,qBAAqB,EAA+C,MAAM,UAAU,CAAC;AAC1I,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,wBAAwB,EAAyB,MAAM,aAAa,CAAC;AAChI,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAqC,MAAM,aAAa,CAAC;AAC9I,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAazC,MAAM,QAAQ,GAAG,gEAAgE,CAAC;AAElF,uEAAuE;AACvE,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,KAAK,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACjD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,4CAA4C,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC1J,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5J,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACtK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvK,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;YAC1C,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAiB,EAAE,CAAC;YAC5E,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAgB,EAAE,CAAC;YACzE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;IAChH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACpC,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACjQ,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5G,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,UAAU,CAAiC,EAAE,CAAC,EAAE,CAAC;IAC3G,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;AACpD,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,mBAAmB;QAAE,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,MAAM,KAAK,mBAAmB;QAAE,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB;QAAE,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACpF,IAAI,KAAK,CAAC,MAAM,KAAK,wBAAwB;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC7F,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,wBAAwB,IAAI,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC3K,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,wBAAiC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAY,EAAE,OAAO,EAAE,KAAK,CAAC,OAAiB;QAClH,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;IACjE,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACxF,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAgB,EAAE,CAAC;AACvD,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,OAAmB,EAAE,KAAuB;IAClF,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,OAAO,CAAC,MAAM,KAAK,mBAAmB,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC;IAC/G,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,MAAM,KAAK,wBAAwB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,CAAC;IAC1I,IAAI,OAAO,CAAC,MAAM,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAC;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAClE,OAAO,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC;WAC1E,OAAO,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,yBAAyB,CAAC;WAChH,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AACxF,CAAC;AACD,KAAK,UAAU,IAAI,CAAC,OAAe,EAAE,OAAwB;IAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC/I,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AACD,SAAS,aAAa,CAAC,KAAc,EAAE,SAA0C;IAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACnG,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IACxK,OAAO,IAAI,CAAC;AACd,CAAC;AACD,KAAK,UAAU,gBAAgB,CAAC,SAA0C,EAAE,MAAuD,EAAE,OAAwB;IAC3J,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,EAAE,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;QACpM,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1C,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,IAAI,CAAC,GAAG,QAAQ,SAAS,IAAI,EAAE,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IACzF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,KAAK,IAAI,IAAI,GAAG,CAAC,GAAI,IAAI,EAAE,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,0EAA0E,kBAAkB,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;QACpK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC7E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;QAChC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC5I,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,IAAI,CAAC,GAAG,QAAQ,IAAI,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;YACjG,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM;IAClC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;AAC1F,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,SAA0C,EAC1C,QAAiC,EACjC,QAA0B,EAAE,IAAI,EAAE,UAAU,EAAE,EAC9C,UAA2B,EAAE;IAE7B,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAClG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzF,OAAO,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAA0C,EAAE,QAA0B,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,UAA2B,EAAE;IAC/J,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,oBAAoB,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;IAC3G,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,oBAAoB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACpE,OAAO,6BAA6B,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,SAA0C,EAC1C,MAAuD,EACvD,YAAqB,EACrB,OAAwB;IAExB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAChF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACjE,IAAI,QAA6B,CAAC;QAClC,IAAI,MAAuD,CAAC;QAC5D,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS;gBACxC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7E,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAClB,QAAQ,GAAG,uBAAuB,CAAC;gBACjC,GAAG,SAAS;gBACZ,QAAQ,EAAE,WAAW,EAAE;gBACvB,OAAO;gBACP,MAAM,EAAE,MAAgB;gBACxB,OAAO,EAAE,MAAM,CAAC,GAAa;aAC9B,CAAC,CAAC;YACH,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAAE,SAAS;YAClE,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBAC1C,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;gBACjE,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;oBAChE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;gBACzE,CAAC;gBACD,QAAQ,GAAG,MAAM,oBAAoB,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;YAClF,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;oBAC7E,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;gBACzE,CAAC;gBACD,QAAQ,GAAG,MAAM,oBAAoB,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,OAAO,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG;YACb,MAAM,EAAE,wBAAiC;YACzC,GAAG,SAAS;YACZ,MAAM,EAAE,MAAM,CAAC,WAAW,IAAI,QAAQ;YACtC,QAAQ;YACR,GAAG,MAAM;SACV,CAAC;QACF,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/C,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,WAAW,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAiB,EAAE,OAA2C;IACpG,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1C,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,mBAAmB,CAAC,CAAC,OAAO,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxE,KAAK,mBAAmB,CAAC,CAAC,OAAO,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxE,KAAK,sBAAsB,CAAC,CAAC,OAAO,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9E,KAAK,wBAAwB,CAAC,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC;QAC3I,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/acp-artifacts/shared.d.ts

@@ -0,0 +1,45 @@
+export interface ArtifactInstallerOptions {
+    /** Node-compatible executable used to run the bundled npm CLI during npm installs. */
+    nodePath?: string;
+    /** Override path to `npm-cli.js`; defaults to the copy from the `npm` package. */
+    npmCliPath?: string;
+    /** Host-provided environment merged onto the minimal installer environment. */
+    env?: Record<string, string>;
+}
+export interface ArtifactOptions extends ArtifactInstallerOptions {
+    fetch?: typeof fetch;
+    signal?: AbortSignal;
+}
+export interface Launch {
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+}
+export declare function digest(value: unknown): string;
+export declare function record(value: unknown): value is Record<string, unknown>;
+export declare function pinnedVersion(value: unknown): value is string;
+export declare function identity(id: unknown, version: unknown): void;
+export declare function safeRelative(value: unknown): string;
+export declare function url(value: unknown, loopback?: boolean): string;
+export declare function launchOptions(value: {
+    args?: unknown;
+    env?: unknown;
+}): {
+    args: string[];
+    env: Record<string, string>;
+};
+export declare function installerEnvironment(overlay?: Record<string, string>): NodeJS.ProcessEnv;
+export declare function childEnvironment(): NodeJS.ProcessEnv;
+export declare function timeout(signal?: AbortSignal, ms?: number): AbortSignal;
+export declare function download(address: string, options: ArtifactOptions): Promise<Buffer>;
+export declare function platformKey(): string;
+/** Move a finished install into place. Windows MoveFileEx returns EPERM when the
+ * destination directory already exists, and briefly while a scanner holds a new file. */
+export declare function publishDirectory(staging: string, destination: string): Promise<void>;
+export declare function discardStaging(staging: string, destination: string): Promise<void>;
+export declare function installAtomically<R extends {
+    digest: string;
+}>(root: string, release: R, build: (directory: string) => Promise<void>, inspect: (directory: string) => Promise<Launch>, signal?: AbortSignal): Promise<Launch & {
+    release: R;
+}>;
+//# sourceMappingURL=shared.d.ts.map

package/dist/acp-artifacts/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/acp-artifacts/shared.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,wBAAwB;IACvC,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AACD,MAAM,WAAW,eAAgB,SAAQ,wBAAwB;IAC/D,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AACD,MAAM,WAAW,MAAM;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE;AAC1F,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAA6E;AAC3H,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAiF;AACzJ,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE7D;AACD,wBAAgB,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAE5D;AACD,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAOnD;AACD,wBAAgB,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,UAAQ,GAAG,MAAM,CAK5D;AACD,wBAAgB,aAAa,CAAC,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAIvH;AACD,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAIxF;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAAC,UAAU,CASpD;AACD,wBAAgB,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,EAAE,SAAU,GAAG,WAAW,CAAkG;AAC1K,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAIzF;AACD,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAID;yFACyF;AACzF,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB1F;AACD,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAaxF;AACD,wBAAsB,iBAAiB,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAClE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAC3I,OAAO,CAAC,MAAM,GAAG;IAAE,OAAO,EAAE,CAAC,CAAA;CAAE,CAAC,CAwBlC"}

package/dist/acp-artifacts/shared.js

@@ -0,0 +1,157 @@
+import { createHash } from "node:crypto";
+import { mkdir, mkdtemp, readFile, realpath, rename, rm, writeFile } from "node:fs/promises";
+import { join, posix, resolve } from "node:path";
+export function digest(value) { return createHash("sha256").update(JSON.stringify(value)).digest("hex"); }
+export function record(value) { return value !== null && typeof value === "object" && !Array.isArray(value); }
+export function pinnedVersion(value) {
+    return typeof value === "string" && /^\d+(?:\.\d+)*(?:(?:a|b|rc|\.post|\.dev)\d+)*(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/.test(value);
+}
+export function identity(id, version) {
+    if (typeof id !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(id) || !pinnedVersion(version))
+        throw new Error("ACP release requires an id and exact version");
+}
+export function safeRelative(value) {
+    if (typeof value !== "string" || value.includes("\0") || /^[A-Za-z]:/.test(value))
+        throw new Error("Unsafe artifact path");
+    const path = value.replaceAll("\\", "/");
+    if (path.startsWith("/") || path.split("/").includes(".."))
+        throw new Error("Unsafe artifact path");
+    const normalized = posix.normalize(path).replace(/\/$/, "");
+    if (normalized === "." || normalized === "")
+        throw new Error("Unsafe artifact path");
+    return normalized;
+}
+export function url(value, loopback = false) {
+    if (typeof value !== "string")
+        throw new Error("Invalid artifact URL");
+    const parsed = new URL(value);
+    if (parsed.username || parsed.password || !(parsed.protocol === "https:" || loopback && parsed.protocol === "http:" && ["127.0.0.1", "localhost", "[::1]"].includes(parsed.hostname)))
+        throw new Error("Artifact URL requires HTTPS");
+    return value;
+}
+export function launchOptions(value) {
+    if (value.args !== undefined && (!Array.isArray(value.args) || value.args.some(a => typeof a !== "string" || a.includes("\0"))))
+        throw new Error("Invalid artifact launch args");
+    if (value.env !== undefined && (!record(value.env) || Object.entries(value.env).some(([k, v]) => !/^[A-Za-z_][A-Za-z0-9_]*$/.test(k) || typeof v !== "string" || v.includes("\0"))))
+        throw new Error("Invalid artifact launch env");
+    return { args: [...(value.args ?? [])], env: Object.fromEntries(Object.entries((value.env ?? {})).sort(([a], [b]) => a.localeCompare(b))) };
+}
+export function installerEnvironment(overlay) {
+    const base = childEnvironment();
+    if (!overlay)
+        return base;
+    return { ...base, ...overlay };
+}
+export function childEnvironment() {
+    // Windows installers need cmd/PATHEXT and the profile npm uses for its cache.
+    // Work tokens, model credentials, and other host variables stay excluded.
+    const keys = [
+        "PATH", "PATHEXT", "HOME", "USERPROFILE", "HOMEDRIVE", "HOMEPATH",
+        "TMPDIR", "TEMP", "TMP", "SystemRoot", "SystemDrive", "ComSpec",
+        "APPDATA", "LOCALAPPDATA", "SSL_CERT_FILE", "SSL_CERT_DIR", "NODE_EXTRA_CA_CERTS",
+    ];
+    return Object.fromEntries(keys.flatMap(key => process.env[key] === undefined ? [] : [[key, process.env[key]]]));
+}
+export function timeout(signal, ms = 120_000) { return signal ? AbortSignal.any([signal, AbortSignal.timeout(ms)]) : AbortSignal.timeout(ms); }
+export async function download(address, options) {
+    const response = await (options.fetch ?? fetch)(address, { signal: timeout(options.signal) });
+    if (!response.ok)
+        throw new Error(`Artifact download HTTP ${response.status}`);
+    return Buffer.from(await response.arrayBuffer());
+}
+export function platformKey() {
+    return `${process.platform === "win32" ? "windows" : process.platform}-${process.arch === "arm64" ? "aarch64" : process.arch === "x64" ? "x86_64" : process.arch}`;
+}
+async function pathExists(path) {
+    try {
+        await realpath(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Move a finished install into place. Windows MoveFileEx returns EPERM when the
+ * destination directory already exists, and briefly while a scanner holds a new file. */
+export async function publishDirectory(staging, destination) {
+    const retries = process.platform === "win32" ? 8 : 1;
+    let last;
+    for (let attempt = 0; attempt < retries; attempt++) {
+        try {
+            await rename(staging, destination);
+            return;
+        }
+        catch (error) {
+            last = error;
+            const code = error.code ?? "";
+            if (code === "EEXIST" || code === "ENOTEMPTY")
+                return;
+            if ((code === "EPERM" || code === "EBUSY") && await pathExists(destination))
+                return;
+            if (process.platform === "win32" && (code === "EPERM" || code === "EBUSY") && attempt < retries - 1) {
+                await new Promise(resolveDelay => setTimeout(resolveDelay, 50 * (attempt + 1)));
+                continue;
+            }
+            throw error;
+        }
+    }
+    throw last;
+}
+export async function discardStaging(staging, destination) {
+    if (await pathExists(staging) && await pathExists(destination)) {
+        const [stagingReal, destinationReal] = await Promise.all([realpath(staging), realpath(destination)]);
+        const same = process.platform === "win32"
+            ? stagingReal.toLowerCase() === destinationReal.toLowerCase()
+            : stagingReal === destinationReal;
+        if (same)
+            return;
+    }
+    else if (!await pathExists(staging))
+        return;
+    try {
+        await rm(staging, { recursive: true, force: true });
+    }
+    catch (error) {
+        const code = error.code;
+        if (code !== "ENOENT" && code !== "EPERM" && code !== "EBUSY")
+            throw error;
+    }
+}
+export async function installAtomically(root, release, build, inspect, signal) {
+    signal?.throwIfAborted();
+    const destination = join(resolve(root), release.digest);
+    async function cached() {
+        let saved;
+        try {
+            saved = await readFile(join(destination, "release.json"), "utf8");
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return null;
+            throw error;
+        }
+        if (JSON.stringify(JSON.parse(saved)) !== JSON.stringify(release))
+            throw new Error("Cached artifact release mismatch");
+        return { ...await inspect(destination), release };
+    }
+    const ready = await cached();
+    if (ready)
+        return ready;
+    await mkdir(resolve(root), { recursive: true });
+    const staging = await mkdtemp(join(resolve(root), ".install-"));
+    try {
+        await build(staging);
+        await inspect(staging);
+        await writeFile(join(staging, "release.json"), JSON.stringify(release));
+        signal?.throwIfAborted();
+        await publishDirectory(staging, destination);
+        const result = await cached();
+        if (!result)
+            throw new Error("Artifact installation was not published");
+        return result;
+    }
+    finally {
+        await discardStaging(staging, destination);
+    }
+}
+//# sourceMappingURL=shared.js.map

package/dist/acp-artifacts/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/acp-artifacts/shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7F,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAejD,MAAM,UAAU,MAAM,CAAC,KAAc,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3H,MAAM,UAAU,MAAM,CAAC,KAAc,IAAsC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzJ,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,yFAAyF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5I,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,EAAW,EAAE,OAAgB;IACpD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;AACrK,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC3H,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACpG,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5D,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrF,OAAO,UAAU,CAAC;AACpB,CAAC;AACD,MAAM,UAAU,GAAG,CAAC,KAAc,EAAE,QAAQ,GAAG,KAAK;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACtO,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAwC;IACpE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACjL,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACpO,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAgB,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAA2B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpL,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,OAAgC;IACnE,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,IAAI,GAAG;QACX,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU;QACjE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS;QAC/D,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,qBAAqB;KAClF,CAAC;IACF,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClH,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,MAAoB,EAAE,EAAE,GAAG,OAAO,IAAiB,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1K,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAe,EAAE,OAAwB;IACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9F,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,UAAU,WAAW;IACzB,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;AACrK,CAAC;AACD,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACpE,CAAC;AACD;yFACyF;AACzF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAe,EAAE,WAAmB;IACzE,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,IAAa,CAAC;IAClB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACnD,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,GAAG,KAAK,CAAC;YACb,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC;YACzD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,WAAW;gBAAE,OAAO;YACtD,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,MAAM,UAAU,CAAC,WAAW,CAAC;gBAAE,OAAO;YACpF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,OAAO,GAAG,OAAO,GAAG,CAAC,EAAE,CAAC;gBACpG,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChF,SAAS;YACX,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC;AACb,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,WAAmB;IACvE,IAAI,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,MAAM,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACrG,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;YACvC,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,WAAW,EAAE;YAC7D,CAAC,CAAC,WAAW,KAAK,eAAe,CAAC;QACpC,IAAI,IAAI;YAAE,OAAO;IACnB,CAAC;SAAM,IAAI,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO;IAC9C,IAAI,CAAC;QAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAC5D,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC;IAC7E,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EAAE,OAAU,EAAE,KAA2C,EAAE,OAA+C,EAAE,MAAoB;IAE5I,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,KAAK,UAAU,MAAM;QACnB,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YAAC,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAC1E,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QACnG,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACvH,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC;IAC7B,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QACrB,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACvB,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACxE,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QAAC,MAAM,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAAC,CAAC;AAC3D,CAAC"}

package/dist/acp-artifacts/uvx.d.ts

@@ -0,0 +1,32 @@
+import { type ArtifactOptions } from "./shared.js";
+export interface UvxAcpRelease {
+    schema: "openma.acp.uvx.v1";
+    id: string;
+    version: string;
+    package: string;
+    command: string;
+    python: string;
+    indexUrl: string;
+    hashes: string[];
+    args: string[];
+    env: Record<string, string>;
+    digest: string;
+}
+export interface UvxAcpReleaseInput {
+    id: string;
+    version: string;
+    package: string;
+    command?: string;
+    python?: string;
+    indexUrl?: string;
+    args?: string[];
+    env?: Record<string, string>;
+}
+export declare function resolveUvxAcpRelease(input: UvxAcpReleaseInput, options?: ArtifactOptions): Promise<UvxAcpRelease>;
+export declare function validateUvxAcpRelease(value: unknown): UvxAcpRelease;
+export declare function prepareUvxAcpRelease(input: UvxAcpRelease, options: ArtifactOptions & {
+    root: string;
+}): Promise<import("./shared.js").Launch & {
+    release: UvxAcpRelease;
+}>;
+//# sourceMappingURL=uvx.d.ts.map

package/dist/acp-artifacts/uvx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uvx.d.ts","sourceRoot":"","sources":["../../src/acp-artifacts/uvx.ts"],"names":[],"mappings":"AAKA,OAAO,EAAsF,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvI,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAC9E,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;CACjG;AACD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClE;AAmCD,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAU3H;AACD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAMnE;AACD,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE;;GAuB3G"}

package/dist/acp-artifacts/uvx.js

@@ -0,0 +1,95 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { access, writeFile } from "node:fs/promises";
+import { constants } from "node:fs";
+import { join } from "node:path";
+import { childEnvironment, digest, identity, installAtomically, launchOptions, timeout, url } from "./shared.js";
+const exec = promisify(execFile);
+const normalize = (name) => name.toLowerCase().replace(/[-_.]+/g, "-");
+// uv's venv layout is bin/python on POSIX and Scripts\python.exe on Windows.
+function venvPython(venv) {
+    return process.platform === "win32" ? join(venv, "Scripts", "python.exe") : join(venv, "bin", "python");
+}
+function venvScriptCandidates(venv, command) {
+    if (process.platform !== "win32")
+        return [join(venv, "bin", command)];
+    const scripts = join(venv, "Scripts");
+    return [`${command}.exe`, `${command}.cmd`, command, `${command}.bat`].map(name => join(scripts, name));
+}
+async function venvCommand(venv, command) {
+    const candidates = venvScriptCandidates(venv, command);
+    for (const candidate of candidates) {
+        try {
+            await access(candidate, constants.F_OK);
+            return candidate;
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+    }
+    return candidates[0];
+}
+function releaseRecord(input, hashes) {
+    identity(input.id, input.version);
+    if (typeof input.package !== "string" || !/^[A-Za-z0-9](?:[A-Za-z0-9._-]*[A-Za-z0-9])?$/.test(input.package))
+        throw new Error("Invalid Python package name");
+    const command = input.command ?? normalize(input.package);
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(command))
+        throw new Error("Invalid uvx executable");
+    const python = input.python ?? "3";
+    if (!/^3(?:\.\d+){0,2}$/.test(python))
+        throw new Error("Invalid Python interpreter version");
+    if (!Array.isArray(hashes) || hashes.length === 0 || hashes.some(h => typeof h !== "string" || !/^[a-f0-9]{64}$/.test(h)))
+        throw new Error("Python releases require artifact SHA-256 hashes");
+    return { schema: "openma.acp.uvx.v1", id: input.id, version: input.version, package: normalize(input.package), command, python,
+        indexUrl: url(input.indexUrl ?? "https://pypi.org/simple", true), hashes: [...new Set(hashes)].sort(), ...launchOptions(input) };
+}
+export async function resolveUvxAcpRelease(input, options = {}) {
+    // Validate before placing untrusted package/version text into a URL.
+    releaseRecord(input, ["0".repeat(64)]);
+    const response = await (options.fetch ?? fetch)(`https://pypi.org/pypi/${encodeURIComponent(input.package)}/${encodeURIComponent(input.version)}/json`, { signal: timeout(options.signal, 30_000) });
+    if (!response.ok)
+        throw new Error(`PyPI release HTTP ${response.status}`);
+    const data = await response.json();
+    if (typeof data.info?.name !== "string" || normalize(data.info.name) !== normalize(input.package) || data.info.version !== input.version)
+        throw new Error("Python release identity mismatch");
+    const hashes = (data.urls ?? []).filter(file => !file.yanked).map(file => file.digests?.sha256 ?? "");
+    const result = releaseRecord(input, hashes);
+    return { ...result, digest: digest(result) };
+}
+export function validateUvxAcpRelease(value) {
+    if (!value || typeof value !== "object")
+        throw new Error("Invalid uvx release");
+    const input = value;
+    const result = releaseRecord(input, input.hashes);
+    if (input.schema !== result.schema || input.digest !== digest(result))
+        throw new Error("Invalid uvx release digest");
+    return { ...result, digest: input.digest };
+}
+export async function prepareUvxAcpRelease(input, options) {
+    const release = validateUvxAcpRelease(input);
+    options.signal?.throwIfAborted();
+    const runOptions = { env: childEnvironment(), signal: options.signal, timeout: 600_000, maxBuffer: 1024 * 1024 };
+    const interpreter = (await exec("uv", ["python", "find", "--no-config", release.python], runOptions)).stdout.trim();
+    const runtime = (await exec(interpreter, ["-I", "-c", "import sys,sysconfig;print(sys.implementation.cache_tag+'-'+sysconfig.get_platform())"], runOptions)).stdout.trim();
+    // Include the interpreter location: a moved/removed interpreter cannot reuse its old venv.
+    const platform = `${process.platform}-${process.arch}-python-${digest([runtime, interpreter])}`;
+    return installAtomically(join(options.root, platform), release, async (directory) => {
+        const venv = join(directory, "venv");
+        await exec("uv", ["venv", "--no-config", "--no-project", "--relocatable", "--python", interpreter, venv], runOptions);
+        const requirements = join(directory, "requirements.txt");
+        await writeFile(requirements, `${release.package}==${release.version} ${release.hashes.map(hash => `--hash=sha256:${hash}`).join(" ")}\n`);
+        await exec("uv", ["pip", "install", "--no-config", "--native-tls", "--python", venvPython(venv), "--index-url", release.indexUrl, "-r", requirements], runOptions);
+    }, async (directory) => {
+        const venv = join(directory, "venv");
+        const command = await venvCommand(venv, release.command);
+        const inspect = "import importlib.metadata as m,json,sys,os;d=m.distribution(sys.argv[1]);\ndef owned(f):\n try: return os.path.samefile(d.locate_file(f), sys.argv[2])\n except OSError: return False\nprint(json.dumps({'name':d.metadata['Name'],'version':d.version,'owns_command':any(owned(f) for f in (d.files or []))}))";
+        const metadata = JSON.parse((await exec(venvPython(venv), ["-I", "-c", inspect, release.package, command], runOptions)).stdout);
+        if (normalize(metadata.name) !== release.package || metadata.version !== release.version || !metadata.owns_command)
+            throw new Error("Installed uvx package identity or entry point mismatch");
+        await access(command, constants.X_OK);
+        return { command, args: release.args, env: release.env };
+    }, options.signal);
+}
+//# sourceMappingURL=uvx.js.map

package/dist/acp-artifacts/uvx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uvx.js","sourceRoot":"","sources":["../../src/acp-artifacts/uvx.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAwB,MAAM,aAAa,CAAC;AAWvI,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC/E,6EAA6E;AAC7E,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC1G,CAAC;AACD,SAAS,oBAAoB,CAAC,IAAY,EAAE,OAAe;IACzD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,OAAO,MAAM,EAAE,GAAG,OAAO,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;AAC1G,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IACtD,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAE,CAAC;AACxB,CAAC;AACD,SAAS,aAAa,CAAC,KAAyB,EAAE,MAAgB;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC7J,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC;IACnC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC9L,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM;QAC5H,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,yBAAyB,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;AACrI,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAyB,EAAE,UAA2B,EAAE;IACjG,qEAAqE;IACrE,aAAa,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,yBAAyB,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACrM,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAkH,CAAC;IACnJ,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC9L,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AAC/C,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,KAAsB,CAAC;IACrC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACrH,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AAC7C,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAoB,EAAE,OAA2C;IAC1G,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC;IACjH,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpH,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,uFAAuF,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3K,2FAA2F;IAC3F,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,WAAW,MAAM,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;IAChG,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE;QAChF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;QACtH,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACzD,MAAM,SAAS,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3I,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,UAAU,CAAC,CAAC;IACrK,CAAC,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,iTAAiT,CAAC;QAClU,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAA6D,CAAC;QAC5L,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC9L,MAAM,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IAC3D,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AACrB,CAAC"}