@tetsuo-ai/agenc 0.16.0 → 0.16.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
{
|
|
2
2
|
"manifestVersion": 2,
|
|
3
|
-
"runtimeVersion": "0.16.
|
|
3
|
+
"runtimeVersion": "0.16.1",
|
|
4
4
|
"releaseRepository": "tetsuo-ai/agenc-releases",
|
|
5
|
-
"releaseTag": "agenc-v0.16.
|
|
5
|
+
"releaseTag": "agenc-v0.16.1",
|
|
6
6
|
"build": {
|
|
7
|
-
"sourceCommit": "
|
|
8
|
-
"sourceRef": "refs/tags/agenc-v0.16.
|
|
9
|
-
"sourceDateEpoch":
|
|
10
|
-
"lockfileSha256": "
|
|
7
|
+
"sourceCommit": "f9d902f93abe29b524de0f9c3dfef7ac2069422b",
|
|
8
|
+
"sourceRef": "refs/tags/agenc-v0.16.1",
|
|
9
|
+
"sourceDateEpoch": 1786809977,
|
|
10
|
+
"lockfileSha256": "175a73e50451792a9d6d800015d7bf4c0e508bcb1dcd1448e91387afeb5f284e",
|
|
11
11
|
"nodeVersion": "v26.5.0",
|
|
12
12
|
"nodeMajor": 26,
|
|
13
13
|
"nodeModuleAbi": "147",
|
|
@@ -16,32 +16,32 @@
|
|
|
16
16
|
"artifactProfile": "release",
|
|
17
17
|
"releaseCandidate": {
|
|
18
18
|
"workflow": "release-runtime.yml",
|
|
19
|
-
"runId":
|
|
19
|
+
"runId": 31895922248,
|
|
20
20
|
"runAttempt": 1,
|
|
21
|
-
"runUrl": "https://github.com/tetsuo-ai/agenc-core/actions/runs/
|
|
21
|
+
"runUrl": "https://github.com/tetsuo-ai/agenc-core/actions/runs/31895922248",
|
|
22
22
|
"phase": "candidate",
|
|
23
23
|
"sourceRef": "refs/heads/main",
|
|
24
|
-
"evidenceSha256": "
|
|
24
|
+
"evidenceSha256": "3c2c87f106cb9c601a3c1e797e85415e5ed5922f6cc5cc7f8b36ff2628398b49"
|
|
25
25
|
}
|
|
26
26
|
},
|
|
27
27
|
"artifacts": [
|
|
28
28
|
{
|
|
29
29
|
"platform": "darwin",
|
|
30
30
|
"arch": "arm64",
|
|
31
|
-
"runtimeVersion": "0.16.
|
|
31
|
+
"runtimeVersion": "0.16.1",
|
|
32
32
|
"nodeMajor": 26,
|
|
33
33
|
"nodeModuleAbi": "147",
|
|
34
34
|
"nodeApiVersion": "10",
|
|
35
|
-
"url": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
36
|
-
"sha256": "
|
|
37
|
-
"bytes":
|
|
38
|
-
"attestationUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
39
|
-
"attestationSha256": "
|
|
40
|
-
"attestationBytes":
|
|
41
|
-
"buildProvenanceUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
42
|
-
"buildProvenanceSha256": "
|
|
43
|
-
"buildProvenanceBytes":
|
|
44
|
-
"metadataSha256": "
|
|
35
|
+
"url": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-darwin-arm64-node26-abi147.tar.gz",
|
|
36
|
+
"sha256": "69ba1ed240ae573144f373f2978ff667654f9ad749538989e54598b3a8e2e798",
|
|
37
|
+
"bytes": 114850789,
|
|
38
|
+
"attestationUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-darwin-arm64-node26-abi147.tar.gz.sigstore.json",
|
|
39
|
+
"attestationSha256": "69e1610f27ca04463e4a60035ed4b35e0957a62466115d6dc3232491f80129ef",
|
|
40
|
+
"attestationBytes": 11307,
|
|
41
|
+
"buildProvenanceUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-darwin-arm64-node26-abi147.tar.gz.build.sigstore.json",
|
|
42
|
+
"buildProvenanceSha256": "0f4e6405e9ed537f96651be9a143c8d5b529ffee714a90b0f4052fd7011d1100",
|
|
43
|
+
"buildProvenanceBytes": 11060,
|
|
44
|
+
"metadataSha256": "d61b656b6d9b3334d14b7bc2663e6fd8fba45cf2bd72917f871362f867997c61",
|
|
45
45
|
"nativeToolchain": {
|
|
46
46
|
"schemaVersion": 1,
|
|
47
47
|
"builder": "github-hosted:macos-15:macos15:20260727.0256.1:ARM64",
|
|
@@ -71,13 +71,13 @@
|
|
|
71
71
|
"xcode": "Xcode 16.4\nBuild version 16F6",
|
|
72
72
|
"sdk": "15.5"
|
|
73
73
|
},
|
|
74
|
-
"dependencyTreeSha256": "
|
|
74
|
+
"dependencyTreeSha256": "3397b17e5915a217ced27d6963f66f967901d7777ebd0aa3c2e125be9ce88032",
|
|
75
75
|
"dependencyPackages": 467,
|
|
76
76
|
"archiveFormat": "tar+gzip; portable; utf8-byte-order; normalized-mtime",
|
|
77
77
|
"archiveValidation": {
|
|
78
78
|
"policy": "agenc-runtime-archive-v1",
|
|
79
79
|
"entries": 29425,
|
|
80
|
-
"uncompressedBytes":
|
|
80
|
+
"uncompressedBytes": 468167168
|
|
81
81
|
},
|
|
82
82
|
"minimumMacosVersion": "13.5",
|
|
83
83
|
"bins": {
|
|
@@ -88,20 +88,20 @@
|
|
|
88
88
|
{
|
|
89
89
|
"platform": "darwin",
|
|
90
90
|
"arch": "x64",
|
|
91
|
-
"runtimeVersion": "0.16.
|
|
91
|
+
"runtimeVersion": "0.16.1",
|
|
92
92
|
"nodeMajor": 26,
|
|
93
93
|
"nodeModuleAbi": "147",
|
|
94
94
|
"nodeApiVersion": "10",
|
|
95
|
-
"url": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
96
|
-
"sha256": "
|
|
97
|
-
"bytes":
|
|
98
|
-
"attestationUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
99
|
-
"attestationSha256": "
|
|
100
|
-
"attestationBytes":
|
|
101
|
-
"buildProvenanceUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
102
|
-
"buildProvenanceSha256": "
|
|
103
|
-
"buildProvenanceBytes":
|
|
104
|
-
"metadataSha256": "
|
|
95
|
+
"url": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-darwin-x64-node26-abi147.tar.gz",
|
|
96
|
+
"sha256": "bd6f5463ca4c59f8919b2a0199fb9f336bfa80f156359b680d88d62e0a2a1fbe",
|
|
97
|
+
"bytes": 116581935,
|
|
98
|
+
"attestationUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-darwin-x64-node26-abi147.tar.gz.sigstore.json",
|
|
99
|
+
"attestationSha256": "029b175e43c9951bc28f42efa9339687560ab1638ef5682c33ddc3b2b83596d4",
|
|
100
|
+
"attestationBytes": 11405,
|
|
101
|
+
"buildProvenanceUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-darwin-x64-node26-abi147.tar.gz.build.sigstore.json",
|
|
102
|
+
"buildProvenanceSha256": "cf94ab10350928f5301eda6d919f58e6308125582585ae6d103f029fbba36099",
|
|
103
|
+
"buildProvenanceBytes": 11103,
|
|
104
|
+
"metadataSha256": "c526e31d9fc2618d400e455e606b90adcc7e96d00ff56f977871a5ae4c39b1ee",
|
|
105
105
|
"nativeToolchain": {
|
|
106
106
|
"schemaVersion": 1,
|
|
107
107
|
"builder": "github-hosted:macos-15-intel:macos15:20260727.0377.1:X64",
|
|
@@ -131,13 +131,13 @@
|
|
|
131
131
|
"xcode": "Xcode 16.4\nBuild version 16F6",
|
|
132
132
|
"sdk": "15.5"
|
|
133
133
|
},
|
|
134
|
-
"dependencyTreeSha256": "
|
|
134
|
+
"dependencyTreeSha256": "6ac9e7fff7fa8adff3a7a472953c36e57a338fd21980475f562eabc86bc83440",
|
|
135
135
|
"dependencyPackages": 467,
|
|
136
136
|
"archiveFormat": "tar+gzip; portable; utf8-byte-order; normalized-mtime",
|
|
137
137
|
"archiveValidation": {
|
|
138
138
|
"policy": "agenc-runtime-archive-v1",
|
|
139
139
|
"entries": 29425,
|
|
140
|
-
"uncompressedBytes":
|
|
140
|
+
"uncompressedBytes": 472162304
|
|
141
141
|
},
|
|
142
142
|
"minimumMacosVersion": "13.5",
|
|
143
143
|
"bins": {
|
|
@@ -148,20 +148,20 @@
|
|
|
148
148
|
{
|
|
149
149
|
"platform": "linux",
|
|
150
150
|
"arch": "arm64",
|
|
151
|
-
"runtimeVersion": "0.16.
|
|
151
|
+
"runtimeVersion": "0.16.1",
|
|
152
152
|
"nodeMajor": 26,
|
|
153
153
|
"nodeModuleAbi": "147",
|
|
154
154
|
"nodeApiVersion": "10",
|
|
155
|
-
"url": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
156
|
-
"sha256": "
|
|
157
|
-
"bytes":
|
|
158
|
-
"attestationUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
159
|
-
"attestationSha256": "
|
|
160
|
-
"attestationBytes":
|
|
161
|
-
"buildProvenanceUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
162
|
-
"buildProvenanceSha256": "
|
|
163
|
-
"buildProvenanceBytes":
|
|
164
|
-
"metadataSha256": "
|
|
155
|
+
"url": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-linux-arm64-node26-abi147.tar.gz",
|
|
156
|
+
"sha256": "e594fd2b41a37df68387cf076a970283ecf6cda39cd0a9e074edc42097647369",
|
|
157
|
+
"bytes": 128429307,
|
|
158
|
+
"attestationUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-linux-arm64-node26-abi147.tar.gz.sigstore.json",
|
|
159
|
+
"attestationSha256": "030288e9d223bbbdb4414f2ca3de56cae75aba46f5558810a0389218987e5d73",
|
|
160
|
+
"attestationBytes": 11405,
|
|
161
|
+
"buildProvenanceUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-linux-arm64-node26-abi147.tar.gz.build.sigstore.json",
|
|
162
|
+
"buildProvenanceSha256": "6105a58862eab06d200b2ec1ca019e1d18b4040f8aece79067df2480d84e380c",
|
|
163
|
+
"buildProvenanceBytes": 11150,
|
|
164
|
+
"metadataSha256": "e5005e0e3ab83794fd47b100d06bf2532b90efe4e1c9bc48c2f38dcbe323434b",
|
|
165
165
|
"nativeToolchain": {
|
|
166
166
|
"schemaVersion": 1,
|
|
167
167
|
"builder": "rockylinux@sha256:9794037624aaa6212aeada1d28861ef5e0a935adaf93e4ef79837119f2a2d04c+rpm-content-sha256:98d1259fca66152fb91e739a15a4fa7f76b0a222369cb34ba853d7d72f02239f",
|
|
@@ -202,13 +202,13 @@
|
|
|
202
202
|
"tar-1.30-11.el8_10"
|
|
203
203
|
]
|
|
204
204
|
},
|
|
205
|
-
"dependencyTreeSha256": "
|
|
205
|
+
"dependencyTreeSha256": "c37e6be550e6aee0f61ad3bbcc2f285a7d1855819666254ca5cf77da098c9ef9",
|
|
206
206
|
"dependencyPackages": 469,
|
|
207
207
|
"archiveFormat": "tar+gzip; portable; utf8-byte-order; normalized-mtime",
|
|
208
208
|
"archiveValidation": {
|
|
209
209
|
"policy": "agenc-runtime-archive-v1",
|
|
210
210
|
"entries": 29445,
|
|
211
|
-
"uncompressedBytes":
|
|
211
|
+
"uncompressedBytes": 490510848
|
|
212
212
|
},
|
|
213
213
|
"libcFamily": "glibc",
|
|
214
214
|
"minimumGlibcVersion": "2.28",
|
|
@@ -223,20 +223,20 @@
|
|
|
223
223
|
{
|
|
224
224
|
"platform": "linux",
|
|
225
225
|
"arch": "x64",
|
|
226
|
-
"runtimeVersion": "0.16.
|
|
226
|
+
"runtimeVersion": "0.16.1",
|
|
227
227
|
"nodeMajor": 26,
|
|
228
228
|
"nodeModuleAbi": "147",
|
|
229
229
|
"nodeApiVersion": "10",
|
|
230
|
-
"url": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
231
|
-
"sha256": "
|
|
232
|
-
"bytes":
|
|
233
|
-
"attestationUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
234
|
-
"attestationSha256": "
|
|
235
|
-
"attestationBytes":
|
|
236
|
-
"buildProvenanceUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
237
|
-
"buildProvenanceSha256": "
|
|
238
|
-
"buildProvenanceBytes":
|
|
239
|
-
"metadataSha256": "
|
|
230
|
+
"url": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-linux-x64-node26-abi147.tar.gz",
|
|
231
|
+
"sha256": "6bf75a7c0260c3f367e4369547e39e4fb85f2ee383fda7b53ecd9132e4a468ec",
|
|
232
|
+
"bytes": 128050014,
|
|
233
|
+
"attestationUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-linux-x64-node26-abi147.tar.gz.sigstore.json",
|
|
234
|
+
"attestationSha256": "6c1aecb4c8d93e69795d8f40dfe2a40684da0ec63c254edea8bcb20040c4860c",
|
|
235
|
+
"attestationBytes": 11311,
|
|
236
|
+
"buildProvenanceUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-linux-x64-node26-abi147.tar.gz.build.sigstore.json",
|
|
237
|
+
"buildProvenanceSha256": "558375e6d6a7b818105c5a5a383f325676d3ecd203656ba78f20614a30764306",
|
|
238
|
+
"buildProvenanceBytes": 11005,
|
|
239
|
+
"metadataSha256": "5263d5f17829533c69fc5c2de42273771acb79ab62d013d36213021620ede589",
|
|
240
240
|
"nativeToolchain": {
|
|
241
241
|
"schemaVersion": 1,
|
|
242
242
|
"builder": "rockylinux@sha256:9794037624aaa6212aeada1d28861ef5e0a935adaf93e4ef79837119f2a2d04c+rpm-content-sha256:20da0fd525fe8dbe596068bb896b949fe84c5ede3c2829e9481f6c2c97de0a5e",
|
|
@@ -277,13 +277,13 @@
|
|
|
277
277
|
"tar-1.30-11.el8_10"
|
|
278
278
|
]
|
|
279
279
|
},
|
|
280
|
-
"dependencyTreeSha256": "
|
|
280
|
+
"dependencyTreeSha256": "cf6894549b2998b3fa74af697fa955369bac25117e319bc3f15ada2fa9dff0bd",
|
|
281
281
|
"dependencyPackages": 469,
|
|
282
282
|
"archiveFormat": "tar+gzip; portable; utf8-byte-order; normalized-mtime",
|
|
283
283
|
"archiveValidation": {
|
|
284
284
|
"policy": "agenc-runtime-archive-v1",
|
|
285
285
|
"entries": 29445,
|
|
286
|
-
"uncompressedBytes":
|
|
286
|
+
"uncompressedBytes": 491629056
|
|
287
287
|
},
|
|
288
288
|
"libcFamily": "glibc",
|
|
289
289
|
"minimumGlibcVersion": "2.28",
|
|
@@ -298,20 +298,20 @@
|
|
|
298
298
|
{
|
|
299
299
|
"platform": "win",
|
|
300
300
|
"arch": "x64",
|
|
301
|
-
"runtimeVersion": "0.16.
|
|
301
|
+
"runtimeVersion": "0.16.1",
|
|
302
302
|
"nodeMajor": 26,
|
|
303
303
|
"nodeModuleAbi": "147",
|
|
304
304
|
"nodeApiVersion": "10",
|
|
305
|
-
"url": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
306
|
-
"sha256": "
|
|
307
|
-
"bytes":
|
|
308
|
-
"attestationUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
309
|
-
"attestationSha256": "
|
|
310
|
-
"attestationBytes":
|
|
311
|
-
"buildProvenanceUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.
|
|
312
|
-
"buildProvenanceSha256": "
|
|
313
|
-
"buildProvenanceBytes":
|
|
314
|
-
"metadataSha256": "
|
|
305
|
+
"url": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-win-x64-node26-abi147.tar.gz",
|
|
306
|
+
"sha256": "f4a04bfa40f58f4e2e744b0b39624820da74c865740077c9c2e3fdd10a3f537f",
|
|
307
|
+
"bytes": 110962555,
|
|
308
|
+
"attestationUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-win-x64-node26-abi147.tar.gz.sigstore.json",
|
|
309
|
+
"attestationSha256": "e79ee2d5c0f8f21e7955807090a975dc1c1c207cddc091df033b3228619e1757",
|
|
310
|
+
"attestationBytes": 11209,
|
|
311
|
+
"buildProvenanceUrl": "https://github.com/tetsuo-ai/agenc-releases/releases/download/agenc-v0.16.1/agenc-runtime-0.16.1-win-x64-node26-abi147.tar.gz.build.sigstore.json",
|
|
312
|
+
"buildProvenanceSha256": "0ddb9071fcd2607a953240873f26c4feb1e7d4ee591079cf4dc0267084f3824e",
|
|
313
|
+
"buildProvenanceBytes": 11037,
|
|
314
|
+
"metadataSha256": "c1e9e93a844bc6358c94527db624ea5407b2aaff0d7112e2ead2b9d4514f4c0e",
|
|
315
315
|
"nativeToolchain": {
|
|
316
316
|
"schemaVersion": 1,
|
|
317
317
|
"builder": "github-hosted:windows-2025-vs2026:win25-vs2026:20260810.198.2:X64",
|
|
@@ -353,13 +353,13 @@
|
|
|
353
353
|
"msvcCompilerSha256": "c94cdac6a780142920110e5cb8b7339817029eead696e0e97700b45e03216a00",
|
|
354
354
|
"msvcLinkerSha256": "f233b8e337cec96a69868a8cde676808bfa81152493968d0b27b7cd0daac15be"
|
|
355
355
|
},
|
|
356
|
-
"dependencyTreeSha256": "
|
|
356
|
+
"dependencyTreeSha256": "e0a8ae098684e22ae8d758f8aa7d392a7b0e4ceb6b2e10c1b4b5d3f645d9012b",
|
|
357
357
|
"dependencyPackages": 466,
|
|
358
358
|
"archiveFormat": "tar+gzip; portable; utf8-byte-order; normalized-mtime",
|
|
359
359
|
"archiveValidation": {
|
|
360
360
|
"policy": "agenc-runtime-archive-v1",
|
|
361
361
|
"entries": 29464,
|
|
362
|
-
"uncompressedBytes":
|
|
362
|
+
"uncompressedBytes": 432419328
|
|
363
363
|
},
|
|
364
364
|
"bins": {
|
|
365
365
|
"agenc": "node_modules/@tetsuo-ai/runtime/bin/agenc",
|
package/lib/runtime-manager.mjs
CHANGED
|
@@ -1057,9 +1057,19 @@ async function download(
|
|
|
1057
1057
|
function assertRootOwnedSystemExecutable(path) {
|
|
1058
1058
|
const canonical = realpathSync.native(path);
|
|
1059
1059
|
const executable = lstatSync(canonical, { bigint: true });
|
|
1060
|
+
// Deliberately no link-count requirement, matching the shell installer's
|
|
1061
|
+
// resolve_system_tool. Stock system tools legitimately ship as several names
|
|
1062
|
+
// for one inode (macOS and Ubuntu both hardlink unzip/zipinfo; some
|
|
1063
|
+
// distributions link tar/gtar), and no user can change that under SIP.
|
|
1064
|
+
// Root ownership plus the fully root-owned, non-group/other-writable
|
|
1065
|
+
// ancestor chain below is what buys the guarantee: a non-root user can
|
|
1066
|
+
// neither add a link inside such a tree nor alter the root-owned inode
|
|
1067
|
+
// through a link made elsewhere. The nlink !== 1n checks on files this
|
|
1068
|
+
// launcher downloads into its own private tree stay, because there a second
|
|
1069
|
+
// link is a genuine TOCTOU signal.
|
|
1060
1070
|
if (
|
|
1061
1071
|
!executable.isFile() || executable.isSymbolicLink() ||
|
|
1062
|
-
executable.
|
|
1072
|
+
executable.uid !== 0n ||
|
|
1063
1073
|
(executable.mode & 0o022n) !== 0n
|
|
1064
1074
|
) {
|
|
1065
1075
|
throw new Error(`agenc: operating-system tar is not a trusted regular file: ${canonical}`);
|