@oxprotocol/cli 0.1.0

package/dist/commands/install-url.js

@@ -0,0 +1,236 @@
+/**
+ * `oxp install-url <url>` — install a raw `.wasm` component from a URL into
+ * the shared host store, so any installed IDE host (VS Code, JetBrains)
+ * can list and activate it without re-downloading.
+ *
+ * Source schemes:
+ *   https://…wasm     always allowed
+ *   file://…wasm      always allowed
+ *   http://…wasm      only when --insecure-http (or host is localhost / 127.0.0.1 / ::1)
+ *
+ * Storage:
+ *   $OXP_HOME/host-store/url-installs/<sha256>/bundle.wasm
+ *   $OXP_HOME/host-store/url-installs/<sha256>/meta.json
+ *
+ * This sidesteps the registry / signature pipeline; the caller is trusting
+ * the URL. Hosts still gate activation with the permission prompt before
+ * loading the bytes into the runtime.
+ */
+import * as path from "node:path";
+import * as os from "node:os";
+import { mkdir, mkdtemp, readFile, rm } from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { fetchBundle, FetchBundleError, recordUrlInstall, listUrlInstalls, urlInstallRoot, } from "@oxprotocol/host-core";
+import { unpackBundle } from "@oxprotocol/bundle";
+import { fail, info, oxpHome } from "../util.js";
+const HELP = `oxp install-url <url>     Install an OXP extension from a URL
+
+Accepts either:
+  - a raw .wasm component (Phase A; sha256 = wasm sha256), or
+  - a signed .oxp registry bundle (zstd-tar; the inner main.wasm is
+    extracted and stored, and the manifest's @publisher/slug@version
+    becomes the suggested id).
+
+Arguments:
+  <url>                       https://, file:// (http:// requires --insecure-http
+                              or a localhost host name)
+
+Flags:
+  --list                      List previously URL-installed extensions and exit
+  --insecure-http             Permit http:// URLs (auto-enabled for localhost)
+  --id <@scope/name>          Override the suggested extension id
+  --json                      Emit a single JSON line on success
+
+The wasm component is written to:
+  \$OXP_HOME/host-store/url-installs/<sha256>/
+
+Installed IDEs detect new URL installs the next time their OXP runtime panel
+is opened. Cancel-safe: SIGINT before write leaves the store untouched.
+`;
+function parseArgs(args) {
+    let url;
+    let list = false;
+    let json = false;
+    let insecureHttp = false;
+    let id;
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a === undefined)
+            continue;
+        if (a === "--list")
+            list = true;
+        else if (a === "--json")
+            json = true;
+        else if (a === "--insecure-http")
+            insecureHttp = true;
+        else if (a === "--id") {
+            const v = args[++i];
+            if (!v)
+                fail("--id requires a value");
+            id = v;
+        }
+        else if (a.startsWith("--id="))
+            id = a.slice("--id=".length);
+        else if (a === "-h" || a === "--help") {
+            process.stdout.write(HELP);
+            process.exit(0);
+        }
+        else if (a.startsWith("-"))
+            fail(`unknown flag: ${a}`);
+        else if (!url)
+            url = a;
+        else
+            fail(`unexpected argument: ${a}`);
+    }
+    return { url, list, json, insecureHttp, id };
+}
+function isLocalhost(u) {
+    return (u.hostname === "localhost" ||
+        u.hostname === "127.0.0.1" ||
+        u.hostname === "::1");
+}
+const WASM_MAGIC = [0x00, 0x61, 0x73, 0x6d];
+const ZSTD_MAGIC = [0x28, 0xb5, 0x2f, 0xfd];
+function startsWith(bytes, magic) {
+    if (bytes.length < magic.length)
+        return false;
+    for (let i = 0; i < magic.length; i++) {
+        if (bytes[i] !== magic[i])
+            return false;
+    }
+    return true;
+}
+function detectKind(bytes) {
+    if (startsWith(bytes, WASM_MAGIC))
+        return "wasm";
+    if (startsWith(bytes, ZSTD_MAGIC))
+        return "oxp";
+    return "unknown";
+}
+export async function installUrl(args) {
+    const opts = parseArgs(args);
+    const root = path.join(oxpHome(), "host-store");
+    if (opts.list) {
+        const records = await listUrlInstalls(root);
+        if (opts.json) {
+            process.stdout.write(JSON.stringify(records, null, 2) + "\n");
+        }
+        else if (records.length === 0) {
+            info(`(no URL installs yet — try: oxp install-url https://…wasm)`);
+        }
+        else {
+            info(`URL installs in ${urlInstallRoot(root)}:`);
+            for (const r of records) {
+                info(`  ${r.suggestedId}  ${r.sha256.slice(0, 12)}…  ${r.size}b  ${r.installedAt}`);
+                info(`    ← ${r.sourceUrl}`);
+            }
+        }
+        return 0;
+    }
+    if (!opts.url) {
+        process.stderr.write(HELP);
+        return 2;
+    }
+    let parsedUrl;
+    try {
+        parsedUrl = new URL(opts.url);
+    }
+    catch {
+        fail(`not a valid URL: ${opts.url}`);
+    }
+    const allowInsecureHttp = opts.insecureHttp ||
+        (parsedUrl.protocol === "http:" && isLocalhost(parsedUrl));
+    await mkdir(root, { recursive: true });
+    const fetchCacheDir = path.join(oxpHome(), "cache", "url-installs");
+    await mkdir(fetchCacheDir, { recursive: true });
+    if (!opts.json)
+        info(`↓ fetching ${opts.url} …`);
+    let fetched;
+    try {
+        fetched = await fetchBundle(opts.url, {
+            cacheDir: fetchCacheDir,
+            allowInsecureHttp,
+            accept: "any",
+            onProgress: opts.json
+                ? undefined
+                : (received, total) => {
+                    if (total != null && total > 0) {
+                        const pct = Math.round((received / total) * 100);
+                        process.stderr.write(`\r  ${received}/${total} (${pct}%)`);
+                    }
+                },
+        });
+        if (!opts.json)
+            process.stderr.write("\n");
+    }
+    catch (err) {
+        if (err instanceof FetchBundleError) {
+            fail(`fetch failed (${err.code}): ${err.message}`);
+        }
+        throw err;
+    }
+    // Detect what we got: raw .wasm component or .oxp (zstd-tar) registry bundle?
+    const rawBytes = await readFile(fetched.componentPath);
+    const kind = detectKind(rawBytes);
+    if (kind === "unknown") {
+        fail(`downloaded ${rawBytes.length} bytes but could not detect format (expected wasm or .oxp bundle)`);
+    }
+    let wasmBytes;
+    let suggestedId = opts.id;
+    let kindLabel;
+    if (kind === "wasm") {
+        wasmBytes = rawBytes;
+        kindLabel = "wasm";
+    }
+    else {
+        // .oxp bundle: unpack to a temp dir, locate manifest.main.wasm.
+        if (!opts.json)
+            info(`◇ unpacking .oxp bundle …`);
+        const tmp = await mkdtemp(path.join(os.tmpdir(), "oxp-install-"));
+        try {
+            const { manifest } = await unpackBundle(Buffer.from(rawBytes), tmp);
+            const wasmRel = manifest.main?.wasm;
+            if (!wasmRel) {
+                fail(`bundle ${manifest.id}@${manifest.version} has no main.wasm (declarative-only bundles are not yet installable via install-url)`);
+            }
+            wasmBytes = new Uint8Array(await readFile(path.join(tmp, wasmRel)));
+            // Prefer manifest's authoritative id over --id or @url/<basename>.
+            suggestedId = opts.id ?? `${manifest.id}@${manifest.version}`;
+            kindLabel = `bundle ${manifest.id}@${manifest.version}`;
+        }
+        finally {
+            await rm(tmp, { recursive: true, force: true });
+        }
+    }
+    // sha256 stored in the host-store entry is the *wasm* sha — that's the
+    // unit hosts load. The original `.oxp` URL is preserved as sourceUrl.
+    const wasmSha = createHash("sha256").update(wasmBytes).digest("hex");
+    const { dir, bundlePath, record } = await recordUrlInstall(root, Buffer.from(wasmBytes), {
+        sha256: wasmSha,
+        sourceUrl: fetched.sourceUrl,
+        suggestedId,
+    });
+    if (opts.json) {
+        process.stdout.write(JSON.stringify({
+            ok: true,
+            kind: kind === "oxp" ? "oxp" : "wasm",
+            suggestedId: record.suggestedId,
+            sha256: record.sha256,
+            size: record.size,
+            sourceUrl: record.sourceUrl,
+            bundlePath,
+            dir,
+        }) + "\n");
+    }
+    else {
+        info(`✓ installed ${record.suggestedId}  (${kindLabel})`);
+        info(`  sha256:  ${record.sha256}`);
+        info(`  size:    ${record.size} bytes`);
+        info(`  bundle:  ${bundlePath}`);
+        info(``);
+        info(`Open the OXP runtime panel in VS Code or your JetBrains IDE`);
+        info(`to activate it (it will appear in the URL-installs list).`);
+    }
+    return 0;
+}
+//# sourceMappingURL=install-url.js.map

package/dist/commands/install-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-url.js","sourceRoot":"","sources":["../../src/commands/install-url.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAUjD,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBZ,CAAC;AAEF,SAAS,SAAS,CAAC,IAAc;IAC/B,IAAI,GAAuB,CAAC;IAC5B,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,EAAsB,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,IAAI,CAAC,KAAK,QAAQ;YAAE,IAAI,GAAG,IAAI,CAAC;aAC3B,IAAI,CAAC,KAAK,QAAQ;YAAE,IAAI,GAAG,IAAI,CAAC;aAChC,IAAI,CAAC,KAAK,iBAAiB;YAAE,YAAY,GAAG,IAAI,CAAC;aACjD,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,CAAC;gBAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACtC,EAAE,GAAG,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;aAC1D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;aACpD,IAAI,CAAC,GAAG;YAAE,GAAG,GAAG,CAAC,CAAC;;YAClB,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,CAAM;IACzB,OAAO,CACL,CAAC,CAAC,QAAQ,KAAK,WAAW;QAC1B,CAAC,CAAC,QAAQ,KAAK,WAAW;QAC1B,CAAC,CAAC,QAAQ,KAAK,KAAK,CACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC5C,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAE5C,SAAS,UAAU,CAAC,KAAiB,EAAE,KAAe;IACpD,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,IAAI,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;QAAE,OAAO,MAAM,CAAC;IACjD,IAAI,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc;IAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;IAEhD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAChE,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,mBAAmB,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CACF,KAAK,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAC9E,CAAC;gBACF,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,SAAc,CAAC;IACnB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,oBAAoB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,iBAAiB,GACrB,IAAI,CAAC,YAAY;QACjB,CAAC,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IAE7D,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IACpE,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhD,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,IAAI,CAAC,cAAc,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAEjD,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE;YACpC,QAAQ,EAAE,aAAa;YACvB,iBAAiB;YACjB,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,IAAI,CAAC,IAAI;gBACnB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;oBAClB,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;wBAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;wBACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,QAAQ,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC;oBAC7D,CAAC;gBACH,CAAC;SACN,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;YACpC,IAAI,CAAC,iBAAiB,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CACF,cAAc,QAAQ,CAAC,MAAM,mEAAmE,CACjG,CAAC;IACJ,CAAC;IAED,IAAI,SAAqB,CAAC;IAC1B,IAAI,WAAW,GAAuB,IAAI,CAAC,EAAE,CAAC;IAC9C,IAAI,SAAiB,CAAC;IAEtB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,GAAG,QAAQ,CAAC;QACrB,SAAS,GAAG,MAAM,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,gEAAgE;QAChE,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;YACpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CACF,UAAU,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,OAAO,sFAAsF,CAChI,CAAC;YACJ,CAAC;YACD,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;YACpE,mEAAmE;YACnE,WAAW,GAAG,IAAI,CAAC,EAAE,IAAI,GAAG,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC9D,SAAS,GAAG,UAAU,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC1D,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,sEAAsE;IACtE,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CACxD,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EACtB;QACE,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW;KACZ,CACF,CAAC;IAEF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;YACrC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU;YACV,GAAG;SACJ,CAAC,GAAG,IAAI,CACV,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,eAAe,MAAM,CAAC,WAAW,MAAM,SAAS,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,cAAc,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,cAAc,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,cAAc,UAAU,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,IAAI,CAAC,6DAA6D,CAAC,CAAC;QACpE,IAAI,CAAC,2DAA2D,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/install.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `oxp install <id>` — non-VS-Code install path.
+ *
+ * Drives the same `resolveAndVerify` + Phase A.4 prompt + `Store.install`
+ * pipeline that the VS Code host uses, so signature, WIT pin, TOFU
+ * pinning, and capability gating are identical.
+ *
+ * Install root: `$OXP_HOME/host-store/` (default `~/.oxp/host-store/`).
+ * The on-disk layout is identical to a real host's globalStorage so a
+ * Piye / vscode host pointed at the same root can read the install.
+ */
+export declare function install(args: string[]): Promise<number>;
+//# sourceMappingURL=install.d.ts.map

package/dist/commands/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA0FH,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA8J7D"}

package/dist/commands/install.js

@@ -0,0 +1,411 @@
+/**
+ * `oxp install <id>` — non-VS-Code install path.
+ *
+ * Drives the same `resolveAndVerify` + Phase A.4 prompt + `Store.install`
+ * pipeline that the VS Code host uses, so signature, WIT pin, TOFU
+ * pinning, and capability gating are identical.
+ *
+ * Install root: `$OXP_HOME/host-store/` (default `~/.oxp/host-store/`).
+ * The on-disk layout is identical to a real host's globalStorage so a
+ * Piye / vscode host pointed at the same root can read the install.
+ */
+import { promises as fs } from "node:fs";
+import * as path from "node:path";
+import * as readline from "node:readline";
+import { Store, Grants, installWithConsent, VerifyError, } from "@oxprotocol/host-core";
+import { fail, info, oxpHome, registryUrl } from "../util.js";
+import { detectHosts } from "../lib/host-detect.js";
+import { ensureAdapters } from "../lib/host-adapter.js";
+import { broadcast } from "../lib/broadcast.js";
+import { parseOxpUrl, OxpUrlError } from "../lib/oxp-url.js";
+import { installVsx } from "../lib/vsx-install.js";
+function parseArgs(args) {
+    let id;
+    let yes = false;
+    let json = false;
+    let noDetect = false;
+    let noAdapter = false;
+    let fromUrl;
+    const hostFilter = [];
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a === undefined)
+            continue;
+        if (a === "-y" || a === "--yes")
+            yes = true;
+        else if (a === "--json")
+            json = true;
+        else if (a === "--no-detect")
+            noDetect = true;
+        else if (a === "--no-adapter")
+            noAdapter = true;
+        else if (a === "--host") {
+            const v = args[++i];
+            if (!v)
+                fail("--host requires a value");
+            hostFilter.push(v);
+        }
+        else if (a.startsWith("--host="))
+            hostFilter.push(a.slice("--host=".length));
+        else if (a === "--from") {
+            const v = args[++i];
+            if (!v)
+                fail("--from requires an oxp:// URL");
+            fromUrl = v;
+        }
+        else if (a.startsWith("--from="))
+            fromUrl = a.slice("--from=".length);
+        else if (a.startsWith("oxp://"))
+            fromUrl = a;
+        else if (a.startsWith("-"))
+            fail(`unknown flag: ${a}`);
+        else if (!id)
+            id = a;
+        else
+            fail(`unexpected argument: ${a}`);
+    }
+    return {
+        id,
+        yes,
+        json,
+        noDetect,
+        noAdapter,
+        hostFilter: hostFilter.length ? hostFilter : undefined,
+        fromUrl,
+    };
+}
+const HELP = `oxp install <id|oxp-url>     Install an extension from the registry
+
+Arguments:
+  <id>                @publisher/slug
+  oxp://install/...   Deep-link form (used by oxp.dev install buttons)
+
+Flags:
+  --from <url>        Install from an oxp:// URL
+  --host <id>         Limit smart-detect to a specific host id (repeatable)
+  --no-detect         Skip IDE detection (install to shared store only)
+  --no-adapter        Don't auto-install missing host adapters
+  -y, --yes           Approve every requested permission without prompting
+  --json              Emit a single JSON line on success (machine-readable)
+`;
+export async function install(args) {
+    if (args[0] === "-h" || args[0] === "--help") {
+        process.stdout.write(HELP);
+        return 0;
+    }
+    const opts = parseArgs(args);
+    // oxp:// URL takes precedence — parse it and merge into opts.
+    if (opts.fromUrl) {
+        try {
+            const parsed = parseOxpUrl(opts.fromUrl);
+            if (!opts.id)
+                opts.id = parsed.id;
+            if (parsed.hosts && !opts.hostFilter)
+                opts.hostFilter = parsed.hosts;
+        }
+        catch (err) {
+            if (err instanceof OxpUrlError)
+                fail(err.message);
+            throw err;
+        }
+    }
+    if (!opts.id) {
+        process.stderr.write(HELP);
+        return 2;
+    }
+    if (!/^@[^/]+\/[^/]+$/.test(opts.id)) {
+        fail(`bad id ${opts.id} — expected @publisher/slug`);
+    }
+    const root = path.join(oxpHome(), "host-store");
+    await fs.mkdir(root, { recursive: true });
+    const hostFs = nodeHostFs();
+    const store = new Store(hostFs, root);
+    const grants = new Grants(hostFs, root);
+    // ── VSX-mirror short-circuit ────────────────────────────────────────────
+    // Ask the registry whether this id is an Open VSX mirror. If so, delegate
+    // to each detected IDE's `--install-extension` instead of running the
+    // wasm verify/install pipeline (VSX entries have no signed bundle).
+    const vsxMeta = await tryFetchVsxMeta(opts.id);
+    if (vsxMeta) {
+        let detected = [];
+        if (!opts.noDetect) {
+            detected = await detectHosts();
+            if (opts.hostFilter) {
+                detected = detected.filter((h) => opts.hostFilter.includes(h.id));
+            }
+        }
+        const reports = installVsx({
+            namespace: vsxMeta.namespace,
+            name: vsxMeta.name,
+            version: vsxMeta.version,
+        }, detected);
+        const okCount = reports.filter((r) => r.status === "ok").length;
+        const failed = reports.filter((r) => r.status === "failed");
+        if (opts.json) {
+            process.stdout.write(JSON.stringify({
+                ok: failed.length === 0,
+                kind: "vsx",
+                id: opts.id,
+                source: {
+                    namespace: vsxMeta.namespace,
+                    name: vsxMeta.name,
+                    version: vsxMeta.version,
+                },
+                installed: okCount,
+                hosts: reports.map((r) => ({
+                    id: r.host.id,
+                    name: r.host.displayName,
+                    status: r.status,
+                    reason: r.reason,
+                })),
+            }) + "\n");
+        }
+        else {
+            info(`✓ VSX install: ${vsxMeta.namespace}.${vsxMeta.name}@${vsxMeta.version}`);
+            info(`  source: open-vsx.org`);
+            printVsxSummary(reports);
+            if (okCount === 0 && reports.length > 0) {
+                info(`  (no hosts received the extension — see reasons above)`);
+            }
+            if (reports.length === 0) {
+                info(`  no VS Code-family IDE detected; nothing to install`);
+            }
+        }
+        return failed.length === 0 ? 0 : 1;
+    }
+    try {
+        const { record, prompted } = await installWithConsent({
+            registry: registryUrl(),
+            id: opts.id,
+            store,
+            grants,
+            prompt: opts.yes ? allowAllPrompt() : ttyPrompt(),
+        });
+        // Smart host detection — discover IDEs, ensure adapters, broadcast.
+        let detected = [];
+        let adapters = [];
+        if (!opts.noDetect) {
+            detected = await detectHosts();
+            if (opts.hostFilter) {
+                detected = detected.filter((h) => opts.hostFilter.includes(h.id));
+            }
+            adapters = await ensureAdapters(detected, {
+                reportOnly: opts.noAdapter,
+            });
+        }
+        await broadcast({
+            kind: "installed",
+            id: record.id,
+            version: record.version,
+        });
+        if (opts.json) {
+            process.stdout.write(JSON.stringify({
+                ok: true,
+                id: record.id,
+                version: record.version,
+                path: store.resourcePath(record),
+                prompted,
+                hosts: adapters.map((a) => ({
+                    id: a.host.id,
+                    name: a.host.displayName,
+                    running: a.host.running,
+                    adapter: a.status,
+                })),
+            }) + "\n");
+        }
+        else {
+            info(`✓ installed ${record.id}@${record.version}`);
+            info(`  path: ${store.resourcePath(record)}`);
+            if (record.grantedPermissions?.length) {
+                info(`  granted: ${record.grantedPermissions.join(", ")}`);
+            }
+            if (!opts.noDetect)
+                printHostSummary(adapters);
+        }
+        return 0;
+    }
+    catch (err) {
+        const code = err instanceof VerifyError ? err.code : "INSTALL_FAILED";
+        const msg = err.message;
+        if (opts.json) {
+            process.stdout.write(JSON.stringify({ ok: false, code, error: msg }) + "\n");
+        }
+        else {
+            process.stderr.write(`oxp: ${code}: ${msg}\n`);
+        }
+        return 1;
+    }
+}
+function printHostSummary(adapters) {
+    if (adapters.length === 0) {
+        info(`  hosts: none detected (install lives in shared store only)`);
+        return;
+    }
+    info(`  hosts:`);
+    for (const a of adapters) {
+        const runTag = a.host.running ? " (running)" : "";
+        let tail;
+        switch (a.status) {
+            case "present":
+                tail = "adapter ✓";
+                break;
+            case "installed":
+                tail = "adapter installed now";
+                break;
+            case "unavailable":
+                tail = `adapter pending (${a.reason})`;
+                break;
+            case "failed":
+                tail = `adapter install failed: ${a.error}`;
+                break;
+            case "unsupported":
+                tail = "adapter not yet built for this host";
+                break;
+        }
+        info(`    - ${a.host.displayName}${runTag} — ${tail}`);
+    }
+}
+async function tryFetchVsxMeta(id) {
+    // id is `@publisher/slug` (validated upstream).
+    const m = /^@([^/]+)\/(.+)$/.exec(id);
+    if (!m)
+        return null;
+    const [, publisher, slug] = m;
+    const url = `${registryUrl()}/api/v1/extensions/${encodeURIComponent(publisher)}/${encodeURIComponent(slug)}`;
+    try {
+        const res = await fetch(url, {
+            headers: { accept: "application/json" },
+        });
+        if (!res.ok)
+            return null;
+        const j = (await res.json());
+        if (!j.vsx)
+            return null;
+        if (!j.vsx.namespace || !j.vsx.name)
+            return null;
+        return j.vsx;
+    }
+    catch {
+        // Network/DNS failure shouldn't poison the install — fall through to
+        // the normal native install path which has its own error handling.
+        return null;
+    }
+}
+function printVsxSummary(reports) {
+    if (reports.length === 0)
+        return;
+    info(`  hosts:`);
+    for (const r of reports) {
+        const tag = r.status === "ok"
+            ? "installed ✓"
+            : r.status === "skipped"
+                ? `skipped (${r.reason ?? "unknown"})`
+                : `failed: ${r.reason ?? "unknown"}`;
+        info(`    - ${r.host.displayName} — ${tag}`);
+    }
+}
+/* -------------------------------------------------------------------------- */
+/* Node host-fs adapter                                                       */
+/* -------------------------------------------------------------------------- */
+function nodeHostFs() {
+    return {
+        async exists(p) {
+            try {
+                await fs.stat(p);
+                return true;
+            }
+            catch {
+                return false;
+            }
+        },
+        async mkdirp(p) {
+            await fs.mkdir(p, { recursive: true });
+        },
+        async readFile(p) {
+            return await fs.readFile(p);
+        },
+        async writeFile(p, bytes) {
+            await fs.mkdir(path.dirname(p), { recursive: true });
+            await fs.writeFile(p, bytes);
+        },
+        async rm(p) {
+            await fs.rm(p, { recursive: true, force: true });
+        },
+        join(...segments) {
+            return path.join(...segments);
+        },
+    };
+}
+/* -------------------------------------------------------------------------- */
+/* Permission prompts                                                         */
+/* -------------------------------------------------------------------------- */
+function allowAllPrompt() {
+    // Explicit `--yes` flag — user has acknowledged unattended install.
+    // Still echoed so non-interactive logs show what was granted.
+    return async (req) => {
+        process.stderr.write(headerLines(req).join("\n") + "\n");
+        for (const it of req.items)
+            process.stderr.write(itemLine(it) + "\n");
+        process.stderr.write("(--yes) granting all\n");
+        return { kind: "grant", grantedRaw: req.items.map((i) => i.raw) };
+    };
+}
+function ttyPrompt() {
+    return async (req) => {
+        if (!process.stdin.isTTY || !process.stdout.isTTY) {
+            return {
+                kind: "deny",
+                reason: "non-interactive shell: re-run with --yes to grant every requested permission",
+            };
+        }
+        const lines = headerLines(req);
+        for (const l of lines)
+            process.stdout.write(l + "\n");
+        process.stdout.write("\nThis extension is requesting:\n");
+        for (const it of req.items)
+            process.stdout.write("  " + itemLine(it) + "\n");
+        const choice = await ask("\nApprove? [a]ll / [c]ustomize / [d]eny: ", "d");
+        const c = choice.trim().toLowerCase();
+        if (c === "a" || c === "all" || c === "y" || c === "yes") {
+            return { kind: "grant", grantedRaw: req.items.map((i) => i.raw) };
+        }
+        if (c === "c" || c === "customize") {
+            const grantedRaw = [];
+            for (const it of req.items) {
+                const ans = await ask(`  ${it.raw}  — grant? [y/N]: `, it.previouslyGranted ? "y" : "n");
+                if (ans.trim().toLowerCase().startsWith("y"))
+                    grantedRaw.push(it.raw);
+            }
+            return { kind: "grant", grantedRaw };
+        }
+        return { kind: "deny", reason: "user denied at prompt" };
+    };
+}
+function headerLines(req) {
+    return [
+        "",
+        `OXP — install permission prompt`,
+        `  ${req.displayName} (${req.extensionId}@${req.version})`,
+        req.isUpgrade
+            ? `  ⚠ version upgrade — new permissions appeared since the last prompt`
+            : `  first-time install`,
+    ];
+}
+function itemLine(it) {
+    const tag = it.previouslyGranted ? " [previously granted]" : "";
+    const sens = `(${it.sensitivity})`;
+    return `${it.raw} ${sens} — ${it.description}${tag}`;
+}
+function ask(question, fallback) {
+    return new Promise((resolve) => {
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        });
+        rl.question(question, (ans) => {
+            rl.close();
+            resolve(ans || fallback);
+        });
+    });
+}
+//# sourceMappingURL=install.js.map