@tiangong-lca/cli 0.1.8 → 0.1.10

package/dist/src/lib/runtime/managed-command.js

@@ -0,0 +1,99 @@
+import { parseArgs } from 'node:util';
+import fs from 'node:fs';
+import path from 'node:path';
+import { CliError } from '../errors.js';
+import { loadTrustedRuntimeManifest } from './manifest.js';
+import { ensureRuntimeComponents, inspectRuntimeComponents, pruneRuntimeComponents, } from './manager.js';
+import { releaseRuntimeLease } from './leases.js';
+import { defaultRuntimeCache, openRuntimeCache } from './storage.js';
+export async function runManagedRuntimeCommand(operation, args, fetchImpl) {
+    let values;
+    try {
+        values = parseArgs({
+            args,
+            strict: true,
+            allowPositionals: false,
+            options: {
+                help: { type: 'boolean', short: 'h' },
+                json: { type: 'boolean' },
+                manifest: { type: 'string' },
+                'manifest-sha256': { type: 'string' },
+                'cache-dir': { type: 'string' },
+                lease: { type: 'string' },
+                'lease-owner': { type: 'string' },
+                apply: { type: 'boolean' },
+            },
+        }).values;
+    }
+    catch {
+        throw new CliError('Invalid runtime management arguments.', {
+            code: 'RUNTIME_ARGUMENT_INVALID',
+            exitCode: 2,
+        });
+    }
+    if (values.help)
+        return {
+            exitCode: 0,
+            stdout: 'Usage: tiangong-lca runtime ensure|status|prune --manifest <file> --manifest-sha256 <trusted-sha256> [--cache-dir <absolute-dir>] [--json]\nensure accepts --lease <id> --lease-owner <non-secret-owner>. prune requires --apply.\nlease-release requires --lease and --lease-owner. No authentication or task state is created.\n',
+            stderr: '',
+        };
+    const cacheDir = values['cache-dir'] ?? defaultRuntimeCache();
+    if (operation === 'lease-release') {
+        if (!values.lease ||
+            !values['lease-owner'] ||
+            values.manifest ||
+            values['manifest-sha256'] ||
+            values.apply)
+            throw new CliError('Lease release requires only cache, lease id and owner.', {
+                code: 'RUNTIME_ARGUMENT_INVALID',
+                exitCode: 2,
+            });
+        const root = openRuntimeCache(cacheDir, false);
+        const released = fs.existsSync(path.join(root, '.runtime-cache.json'))
+            ? await releaseRuntimeLease(root, values.lease, values['lease-owner'])
+            : false;
+        return {
+            exitCode: 0,
+            stdout: JSON.stringify({ schema: 'tiangong-lca.runtime-lease-release.v1', released }) + '\n',
+            stderr: '',
+        };
+    }
+    if (!values.manifest ||
+        !values['manifest-sha256'] ||
+        Boolean(values.lease) !== Boolean(values['lease-owner']) ||
+        ((values.lease || values['lease-owner']) && operation !== 'ensure') ||
+        (values.apply && operation !== 'prune'))
+        throw new CliError('Select an explicit manifest and independent digest; lease options apply only to ensure.', { code: 'RUNTIME_ARGUMENT_INVALID', exitCode: 2 });
+    const trusted = loadTrustedRuntimeManifest(values.manifest, values['manifest-sha256']);
+    const options = {
+        cacheDir,
+        fetchImpl,
+        ...(values.lease ? { lease: { id: values.lease, owner: values['lease-owner'] } } : {}),
+    };
+    if (operation === 'prune') {
+        if (!values.apply)
+            throw new CliError('Pruning requires an explicit --apply for this manifest component set.', {
+                code: 'RUNTIME_PRUNE_APPLY_REQUIRED',
+                exitCode: 2,
+            });
+        return {
+            exitCode: 0,
+            stdout: JSON.stringify({
+                schema: 'tiangong-lca.runtime-prune.v1',
+                ...(await pruneRuntimeComponents(trusted, options)),
+            }) + '\n',
+            stderr: '',
+        };
+    }
+    const report = operation === 'ensure'
+        ? await ensureRuntimeComponents(trusted, options)
+        : inspectRuntimeComponents(trusted, options);
+    return {
+        exitCode: report.status === 'ready' ? 0 : 69,
+        stdout: values.json
+            ? JSON.stringify(report) + '\n'
+            : `Runtime ${report.status}: ${report.components.map((item) => `${item.id}@${item.version} ${item.status}`).join(', ')}\n`,
+        stderr: '',
+    };
+}
+//# sourceMappingURL=managed-command.js.map

package/dist/src/lib/runtime/managed-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-command.js","sourceRoot":"","sources":["../../../../src/lib/runtime/managed-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,SAAiB,EACjB,IAAc,EACd,SAAqB;IAErB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC;YACjB,IAAI;YACJ,MAAM,EAAE,IAAI;YACZ,gBAAgB,EAAE,KAAK;YACvB,OAAO,EAAE;gBACP,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;gBACrC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACrC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;aAC3B;SACF,CAAC,CAAC,MAAM,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,uCAAuC,EAAE;YAC1D,IAAI,EAAE,0BAA0B;YAChC,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,IAAI;QACb,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,MAAM,EACJ,oUAAoU;YACtU,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,mBAAmB,EAAE,CAAC;IAC9D,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;QAClC,IACE,CAAC,MAAM,CAAC,KAAK;YACb,CAAC,MAAM,CAAC,aAAa,CAAC;YACtB,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,iBAAiB,CAAC;YACzB,MAAM,CAAC,KAAK;YAEZ,MAAM,IAAI,QAAQ,CAAC,wDAAwD,EAAE;gBAC3E,IAAI,EAAE,0BAA0B;gBAChC,QAAQ,EAAE,CAAC;aACZ,CAAC,CAAC;QACL,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;YACpE,CAAC,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;YACtE,CAAC,CAAC,KAAK,CAAC;QACV,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,uCAAuC,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI;YAC5F,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,QAAQ;QAChB,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACxD,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,SAAS,KAAK,QAAQ,CAAC;QACnE,CAAC,MAAM,CAAC,KAAK,IAAI,SAAS,KAAK,OAAO,CAAC;QAEvC,MAAM,IAAI,QAAQ,CAChB,yFAAyF,EACzF,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,EAAE,CAAC,EAAE,CAClD,CAAC;IACJ,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG;QACd,QAAQ;QACR,SAAS;QACT,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxF,CAAC;IACF,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,KAAK;YACf,MAAM,IAAI,QAAQ,CAAC,uEAAuE,EAAE;gBAC1F,IAAI,EAAE,8BAA8B;gBACpC,QAAQ,EAAE,CAAC;aACZ,CAAC,CAAC;QACL,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,MAAM,EACJ,IAAI,CAAC,SAAS,CAAC;gBACb,MAAM,EAAE,+BAA+B;gBACvC,GAAG,CAAC,MAAM,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;aACpD,CAAC,GAAG,IAAI;YACX,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GACV,SAAS,KAAK,QAAQ;QACpB,CAAC,CAAC,MAAM,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC;QACjD,CAAC,CAAC,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjD,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;QAC5C,MAAM,EAAE,MAAM,CAAC,IAAI;YACjB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI;YAC/B,CAAC,CAAC,WAAW,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QAC5H,MAAM,EAAE,EAAE;KACX,CAAC;AACJ,CAAC","sourcesContent":["import { parseArgs } from 'node:util';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { CliError } from '../errors.js';\nimport type { FetchLike } from '../http.js';\nimport { loadTrustedRuntimeManifest } from './manifest.js';\nimport {\n  ensureRuntimeComponents,\n  inspectRuntimeComponents,\n  pruneRuntimeComponents,\n} from './manager.js';\nimport { releaseRuntimeLease } from './leases.js';\nimport { defaultRuntimeCache, openRuntimeCache } from './storage.js';\n\nexport async function runManagedRuntimeCommand(\n  operation: string,\n  args: string[],\n  fetchImpl?: FetchLike,\n): Promise<{ exitCode: number; stdout: string; stderr: string }> {\n  let values;\n  try {\n    values = parseArgs({\n      args,\n      strict: true,\n      allowPositionals: false,\n      options: {\n        help: { type: 'boolean', short: 'h' },\n        json: { type: 'boolean' },\n        manifest: { type: 'string' },\n        'manifest-sha256': { type: 'string' },\n        'cache-dir': { type: 'string' },\n        lease: { type: 'string' },\n        'lease-owner': { type: 'string' },\n        apply: { type: 'boolean' },\n      },\n    }).values;\n  } catch {\n    throw new CliError('Invalid runtime management arguments.', {\n      code: 'RUNTIME_ARGUMENT_INVALID',\n      exitCode: 2,\n    });\n  }\n  if (values.help)\n    return {\n      exitCode: 0,\n      stdout:\n        'Usage: tiangong-lca runtime ensure|status|prune --manifest <file> --manifest-sha256 <trusted-sha256> [--cache-dir <absolute-dir>] [--json]\\nensure accepts --lease <id> --lease-owner <non-secret-owner>. prune requires --apply.\\nlease-release requires --lease and --lease-owner. No authentication or task state is created.\\n',\n      stderr: '',\n    };\n  const cacheDir = values['cache-dir'] ?? defaultRuntimeCache();\n  if (operation === 'lease-release') {\n    if (\n      !values.lease ||\n      !values['lease-owner'] ||\n      values.manifest ||\n      values['manifest-sha256'] ||\n      values.apply\n    )\n      throw new CliError('Lease release requires only cache, lease id and owner.', {\n        code: 'RUNTIME_ARGUMENT_INVALID',\n        exitCode: 2,\n      });\n    const root = openRuntimeCache(cacheDir, false);\n    const released = fs.existsSync(path.join(root, '.runtime-cache.json'))\n      ? await releaseRuntimeLease(root, values.lease, values['lease-owner'])\n      : false;\n    return {\n      exitCode: 0,\n      stdout: JSON.stringify({ schema: 'tiangong-lca.runtime-lease-release.v1', released }) + '\\n',\n      stderr: '',\n    };\n  }\n  if (\n    !values.manifest ||\n    !values['manifest-sha256'] ||\n    Boolean(values.lease) !== Boolean(values['lease-owner']) ||\n    ((values.lease || values['lease-owner']) && operation !== 'ensure') ||\n    (values.apply && operation !== 'prune')\n  )\n    throw new CliError(\n      'Select an explicit manifest and independent digest; lease options apply only to ensure.',\n      { code: 'RUNTIME_ARGUMENT_INVALID', exitCode: 2 },\n    );\n  const trusted = loadTrustedRuntimeManifest(values.manifest, values['manifest-sha256']);\n  const options = {\n    cacheDir,\n    fetchImpl,\n    ...(values.lease ? { lease: { id: values.lease, owner: values['lease-owner']! } } : {}),\n  };\n  if (operation === 'prune') {\n    if (!values.apply)\n      throw new CliError('Pruning requires an explicit --apply for this manifest component set.', {\n        code: 'RUNTIME_PRUNE_APPLY_REQUIRED',\n        exitCode: 2,\n      });\n    return {\n      exitCode: 0,\n      stdout:\n        JSON.stringify({\n          schema: 'tiangong-lca.runtime-prune.v1',\n          ...(await pruneRuntimeComponents(trusted, options)),\n        }) + '\\n',\n      stderr: '',\n    };\n  }\n  const report =\n    operation === 'ensure'\n      ? await ensureRuntimeComponents(trusted, options)\n      : inspectRuntimeComponents(trusted, options);\n  return {\n    exitCode: report.status === 'ready' ? 0 : 69,\n    stdout: values.json\n      ? JSON.stringify(report) + '\\n'\n      : `Runtime ${report.status}: ${report.components.map((item) => `${item.id}@${item.version} ${item.status}`).join(', ')}\\n`,\n    stderr: '',\n  };\n}\n"]}

package/dist/src/lib/runtime/manager.d.ts

@@ -0,0 +1,33 @@
+import { type DownloadOptions } from './download.js';
+import type { RuntimeComponent, RuntimeHost, TrustedRuntimeManifest } from './manifest-types.js';
+export type RuntimeManagerOptions = DownloadOptions & {
+    cacheDir?: string;
+    host?: RuntimeHost;
+    lease?: {
+        id: string;
+        owner: string;
+    };
+    archiveSeeds?: Readonly<Record<string, string>>;
+};
+export type RuntimeComponentStatus = {
+    id: string;
+    version: string;
+    key: string;
+    status: 'ready' | 'missing' | 'unverified' | 'corrupt';
+    root: string;
+    reason: string | null;
+};
+export type RuntimeManagerReport = {
+    schema: 'tiangong-lca.runtime-status.v1';
+    manifest_sha256: string;
+    platform: string;
+    status: 'ready' | 'missing' | 'blocked';
+    components: RuntimeComponentStatus[];
+};
+export declare function verifyRuntimeComponent(root: string, component: RuntimeComponent, platform: string): void;
+export declare function inspectRuntimeComponents(value: TrustedRuntimeManifest, options?: RuntimeManagerOptions): RuntimeManagerReport;
+export declare function ensureRuntimeComponents(value: TrustedRuntimeManifest, options?: RuntimeManagerOptions): Promise<RuntimeManagerReport>;
+export declare function pruneRuntimeComponents(value: TrustedRuntimeManifest, options?: RuntimeManagerOptions): Promise<{
+    removed: string[];
+    retained: string[];
+}>;

package/dist/src/lib/runtime/manager.js

@@ -0,0 +1,196 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { withBatchRunLock } from '../../batch.js';
+import { contentHash, hashRuntimeFile, runtimeError } from './files.js';
+import { assertTrustedManifest, componentKey } from './manifest.js';
+import { assertRuntimeHost, inspectRuntimeHost } from './host.js';
+import { cachePath, defaultRuntimeCache, ensureRuntimeCache, openRuntimeCache, readCacheJson, writeOnce, } from './storage.js';
+import { downloadRuntimeArchive } from './download.js';
+import { extractRuntimeArchive } from './archive.js';
+import { acquireRuntimeLease, leasedRuntimeKeys, withRuntimeLeaseLock } from './leases.js';
+function receipt(component) {
+    return {
+        schema: 'tiangong-lca.runtime-component.v1',
+        key: componentKey(component),
+        archive_sha256: component.archive.sha256,
+        content_sha256: component.content_sha256,
+    };
+}
+export function verifyRuntimeComponent(root, component, platform) {
+    const expected = new Map(component.files.map((file) => [file.path, file]));
+    let count = 0;
+    const walk = (relative) => {
+        const directory = relative ? cachePath(root, relative) : root;
+        const stat = fs.lstatSync(directory);
+        if (stat.isSymbolicLink() || !stat.isDirectory())
+            runtimeError('RUNTIME_COMPONENT_PATH', 'Component directories cannot be links.');
+        for (const name of fs.readdirSync(directory)) {
+            const file = relative ? `${relative}/${name}` : name;
+            const target = cachePath(root, file);
+            const item = fs.lstatSync(target);
+            if (item.isDirectory())
+                walk(file);
+            else {
+                const expectedFile = expected.get(file);
+                if (!expectedFile)
+                    runtimeError('RUNTIME_COMPONENT_EXTRA', 'Component contains an unregistered file.');
+                const actual = hashRuntimeFile(target, file);
+                if (actual.bytes !== expectedFile.bytes ||
+                    actual.sha256 !== expectedFile.sha256 ||
+                    (platform !== 'win32-x64' && (item.mode & 0o777) !== expectedFile.mode))
+                    runtimeError('RUNTIME_COMPONENT_CHANGED', 'Component file bytes, digest or executable mode changed.');
+                count++;
+            }
+        }
+    };
+    walk('');
+    if (count !== component.files.length)
+        runtimeError('RUNTIME_COMPONENT_MISSING', 'Component inventory is incomplete.');
+}
+function inspectComponent(cache, component, platform) {
+    const key = componentKey(component), relative = `components/${key}`, root = cachePath(cache, `${relative}/root`);
+    const base = { id: component.id, version: component.version, key, root };
+    if (!fs.existsSync(cachePath(cache, relative)))
+        return { ...base, status: 'missing', reason: null };
+    try {
+        if (fs
+            .readdirSync(cachePath(cache, relative))
+            .some((name) => !['root', 'receipt.json'].includes(name)))
+            runtimeError('RUNTIME_COMPONENT_EXTRA', 'Component installation directory contains unknown data.');
+        if (!fs.existsSync(cachePath(cache, `${relative}/receipt.json`)))
+            return { ...base, status: 'unverified', reason: 'runtime_install_incomplete' };
+        if (contentHash(readCacheJson(cache, `${relative}/receipt.json`)) !==
+            contentHash(receipt(component)))
+            runtimeError('RUNTIME_RECEIPT_CHANGED', 'Component installation receipt does not match the selected manifest.');
+        verifyRuntimeComponent(root, component, platform);
+        return { ...base, status: 'ready', reason: null };
+    }
+    catch (error) {
+        return {
+            ...base,
+            status: 'corrupt',
+            reason: typeof error.code === 'string'
+                ? error.code
+                : 'runtime_component_invalid',
+        };
+    }
+}
+function selected(value, options) {
+    assertTrustedManifest(value);
+    const host = options.host ?? inspectRuntimeHost();
+    assertRuntimeHost(value, host);
+    return {
+        host,
+        components: value.manifest.components.filter((component) => component.platform === host.platform),
+    };
+}
+export function inspectRuntimeComponents(value, options = {}) {
+    const { host, components } = selected(value, options), cache = openRuntimeCache(options.cacheDir ?? defaultRuntimeCache(), false);
+    const states = components.map((component) => inspectComponent(cache, component, host.platform));
+    return {
+        schema: 'tiangong-lca.runtime-status.v1',
+        manifest_sha256: value.sha256,
+        platform: host.platform,
+        status: states.every((item) => item.status === 'ready')
+            ? 'ready'
+            : states.some((item) => item.status === 'corrupt' || item.status === 'unverified')
+                ? 'blocked'
+                : 'missing',
+        components: states,
+    };
+}
+async function installComponent(cache, component, options, platform) {
+    const key = componentKey(component);
+    await withBatchRunLock({
+        runPath: cachePath(cache, `locks/${key}.json`),
+        identity: { schema: 'runtime-component-lock.v1', key },
+        reason: 'Runtime component installation',
+    }, async () => {
+        const state = inspectComponent(cache, component, platform);
+        if (state.status === 'ready')
+            return;
+        const target = cachePath(cache, `components/${key}`);
+        if (state.status === 'unverified') {
+            // Bootstrap may publish a complete tree before Node can produce the CLI receipt.
+            // It is cache data only: adopt after every declared byte/mode and absence of extra files is proved.
+            verifyRuntimeComponent(state.root, component, platform);
+            writeOnce(cache, `components/${key}/receipt.json`, Buffer.from(JSON.stringify(receipt(component)) + '\n'));
+            return;
+        }
+        if (state.status === 'corrupt')
+            runtimeError('RUNTIME_CACHE_CORRUPT', 'A selected cached component is corrupt; preserve active leases and prune it explicitly.');
+        const staging = cachePath(cache, `tmp/${key}-${randomUUID()}`);
+        fs.mkdirSync(staging, { recursive: true, mode: 0o700 });
+        try {
+            const archive = path.join(staging, 'component.tar.gz'), seed = options.archiveSeeds?.[key];
+            if (seed) {
+                const fact = hashRuntimeFile(seed, 'archive');
+                if (fact.bytes !== component.archive.bytes || fact.sha256 !== component.archive.sha256)
+                    runtimeError('RUNTIME_ARCHIVE_SEED', 'Supplied archive seed differs from the trusted component.');
+                fs.copyFileSync(seed, archive, fs.constants.COPYFILE_EXCL);
+            }
+            else
+                await downloadRuntimeArchive(component.archive, archive, options);
+            await extractRuntimeArchive(archive, path.join(staging, 'root'), component, options.signal);
+            verifyRuntimeComponent(path.join(staging, 'root'), component, platform);
+            fs.unlinkSync(archive);
+            writeOnce(staging, 'receipt.json', Buffer.from(JSON.stringify(receipt(component)) + '\n'));
+            fs.mkdirSync(path.dirname(target), { recursive: true, mode: 0o700 });
+            cachePath(cache, `components/${key}`);
+            if (fs.existsSync(target))
+                runtimeError('RUNTIME_INSTALL_CONFLICT', 'Another component tree appeared outside the installation lock.');
+            fs.renameSync(staging, target);
+        }
+        finally {
+            if (fs.existsSync(staging))
+                fs.rmSync(staging, { recursive: true, force: true });
+        }
+    });
+}
+export async function ensureRuntimeComponents(value, options = {}) {
+    const { host, components } = selected(value, options);
+    options.signal?.throwIfAborted();
+    const cache = await ensureRuntimeCache(options.cacheDir ?? defaultRuntimeCache());
+    if (options.lease)
+        await acquireRuntimeLease(cache, options.lease.id, options.lease.owner, components.map(componentKey));
+    for (const component of components) {
+        options.signal?.throwIfAborted();
+        await installComponent(cache, component, options, host.platform);
+    }
+    return inspectRuntimeComponents(value, { ...options, cacheDir: cache, host });
+}
+export async function pruneRuntimeComponents(value, options = {}) {
+    const { components } = selected(value, options);
+    const cache = openRuntimeCache(options.cacheDir ?? defaultRuntimeCache(), false);
+    if (!fs.existsSync(cachePath(cache, '.runtime-cache.json')))
+        return { removed: [], retained: [] };
+    return withRuntimeLeaseLock(cache, async () => {
+        const pinned = leasedRuntimeKeys(cache), removed = [], retained = [];
+        for (const component of components) {
+            const key = componentKey(component);
+            if (pinned.has(key)) {
+                retained.push(key);
+                continue;
+            }
+            await withBatchRunLock({
+                runPath: cachePath(cache, `locks/${key}.json`),
+                identity: { schema: 'runtime-component-lock.v1', key },
+                reason: 'Explicit unused runtime pruning',
+            }, () => {
+                const target = cachePath(cache, `components/${key}`);
+                if (!fs.existsSync(target))
+                    return;
+                if (fs.readdirSync(target).some((name) => !['root', 'receipt.json'].includes(name)))
+                    runtimeError('RUNTIME_PRUNE_UNOWNED', 'Unknown files must be preserved instead of pruned.');
+                if (contentHash(readCacheJson(cache, `components/${key}/receipt.json`)) !==
+                    contentHash(receipt(component)))
+                    runtimeError('RUNTIME_PRUNE_UNOWNED', 'Only an installation with its exact ownership receipt can be pruned.');
+                fs.rmSync(target, { recursive: true, force: false });
+                removed.push(key);
+            });
+        }
+        return { removed, retained };
+    });
+}
+//# sourceMappingURL=manager.js.map

package/dist/src/lib/runtime/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../../src/lib/runtime/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,SAAS,GACV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,sBAAsB,EAAwB,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAwB3F,SAAS,OAAO,CAAC,SAA2B;IAC1C,OAAO;QACL,MAAM,EAAE,mCAAmC;QAC3C,GAAG,EAAE,YAAY,CAAC,SAAS,CAAC;QAC5B,cAAc,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM;QACxC,cAAc,EAAE,SAAS,CAAC,cAAc;KACzC,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,SAA2B,EAC3B,QAAgB;IAEhB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,CAAC,QAAgB,EAAQ,EAAE;QACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAC9C,YAAY,CAAC,wBAAwB,EAAE,wCAAwC,CAAC,CAAC;QACnF,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACrD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC;iBAC9B,CAAC;gBACJ,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,CAAC,YAAY;oBACf,YAAY,CAAC,yBAAyB,EAAE,0CAA0C,CAAC,CAAC;gBACtF,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC7C,IACE,MAAM,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK;oBACnC,MAAM,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;oBACrC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC;oBAEvE,YAAY,CACV,2BAA2B,EAC3B,0DAA0D,CAC3D,CAAC;gBACJ,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,IAAI,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM;QAClC,YAAY,CAAC,2BAA2B,EAAE,oCAAoC,CAAC,CAAC;AACpF,CAAC;AACD,SAAS,gBAAgB,CACvB,KAAa,EACb,SAA2B,EAC3B,QAAgB;IAEhB,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,EACjC,QAAQ,GAAG,cAAc,GAAG,EAAE,EAC9B,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACzE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5C,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC;QACH,IACE,EAAE;aACC,WAAW,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;aACvC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAE3D,YAAY,CACV,yBAAyB,EACzB,yDAAyD,CAC1D,CAAC;QACJ,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,QAAQ,eAAe,CAAC,CAAC;YAC9D,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QACjF,IACE,WAAW,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,QAAQ,eAAe,CAAC,CAAC;YAC7D,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAE/B,YAAY,CACV,yBAAyB,EACzB,sEAAsE,CACvE,CAAC;QACJ,sBAAsB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,SAAS;YACjB,MAAM,EACJ,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ;gBACpD,CAAC,CAAE,KAA0B,CAAC,IAAI;gBAClC,CAAC,CAAC,2BAA2B;SAClC,CAAC;IACJ,CAAC;AACH,CAAC;AACD,SAAS,QAAQ,CAAC,KAA6B,EAAE,OAA8B;IAC7E,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,kBAAkB,EAAE,CAAC;IAClD,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO;QACL,IAAI;QACJ,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAC1C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CACpD;KACF,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,wBAAwB,CACtC,KAA6B,EAC7B,OAAO,GAA0B,EAAE;IAEnC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,EACnD,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,IAAI,mBAAmB,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChG,OAAO;QACL,MAAM,EAAE,gCAAgC;QACxC,eAAe,EAAE,KAAK,CAAC,MAAM;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC;YACrD,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,CAAC;gBAChF,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS;QACf,UAAU,EAAE,MAAM;KACnB,CAAC;AACJ,CAAC;AACD,KAAK,UAAU,gBAAgB,CAC7B,KAAa,EACb,SAA2B,EAC3B,OAA8B,EAC9B,QAAgB;IAEhB,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,gBAAgB,CACpB;QACE,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC;QAC9C,QAAQ,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,GAAG,EAAE;QACtD,MAAM,EAAE,gCAAgC;KACzC,EACD,KAAK,IAAI,EAAE;QACT,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO;QACrC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,EAAE,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAClC,iFAAiF;YACjF,oGAAoG;YACpG,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YACxD,SAAS,CACP,KAAK,EACL,cAAc,GAAG,eAAe,EAChC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,CACvD,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAC5B,YAAY,CACV,uBAAuB,EACvB,yFAAyF,CAC1F,CAAC;QACJ,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;QAC/D,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,EACpD,IAAI,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC9C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,OAAO,CAAC,MAAM;oBACpF,YAAY,CACV,sBAAsB,EACtB,2DAA2D,CAC5D,CAAC;gBACJ,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YAC7D,CAAC;;gBAAM,MAAM,sBAAsB,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACzE,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5F,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YACxE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACvB,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YAC3F,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,EAAE,CAAC,CAAC;YACtC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;gBACvB,YAAY,CACV,0BAA0B,EAC1B,gEAAgE,CACjE,CAAC;YACJ,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAA6B,EAC7B,OAAO,GAA0B,EAAE;IAEnC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACtD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,QAAQ,IAAI,mBAAmB,EAAE,CAAC,CAAC;IAClF,IAAI,OAAO,CAAC,KAAK;QACf,MAAM,mBAAmB,CACvB,KAAK,EACL,OAAO,CAAC,KAAK,CAAC,EAAE,EAChB,OAAO,CAAC,KAAK,CAAC,KAAK,EACnB,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAC7B,CAAC;IACJ,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,MAAM,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,wBAAwB,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAChF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAA6B,EAC7B,OAAO,GAA0B,EAAE;IAEnC,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,IAAI,mBAAmB,EAAE,EAAE,KAAK,CAAC,CAAC;IACjF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAClG,OAAO,oBAAoB,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,EACrC,OAAO,GAAa,EAAE,EACtB,QAAQ,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,MAAM,gBAAgB,CACpB;gBACE,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC;gBAC9C,QAAQ,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,GAAG,EAAE;gBACtD,MAAM,EAAE,iCAAiC;aAC1C,EACD,GAAG,EAAE;gBACH,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,EAAE,CAAC,CAAC;gBACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,OAAO;gBACnC,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;oBACjF,YAAY,CACV,uBAAuB,EACvB,oDAAoD,CACrD,CAAC;gBACJ,IACE,WAAW,CAAC,aAAa,CAAC,KAAK,EAAE,cAAc,GAAG,eAAe,CAAC,CAAC;oBACnE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBAE/B,YAAY,CACV,uBAAuB,EACvB,sEAAsE,CACvE,CAAC;gBACJ,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC,CACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport { randomUUID } from 'node:crypto';\nimport { withBatchRunLock } from '../../batch.js';\nimport { contentHash, hashRuntimeFile, runtimeError } from './files.js';\nimport { assertTrustedManifest, componentKey } from './manifest.js';\nimport { assertRuntimeHost, inspectRuntimeHost } from './host.js';\nimport {\n  cachePath,\n  defaultRuntimeCache,\n  ensureRuntimeCache,\n  openRuntimeCache,\n  readCacheJson,\n  writeOnce,\n} from './storage.js';\nimport { downloadRuntimeArchive, type DownloadOptions } from './download.js';\nimport { extractRuntimeArchive } from './archive.js';\nimport { acquireRuntimeLease, leasedRuntimeKeys, withRuntimeLeaseLock } from './leases.js';\nimport type { RuntimeComponent, RuntimeHost, TrustedRuntimeManifest } from './manifest-types.js';\n\nexport type RuntimeManagerOptions = DownloadOptions & {\n  cacheDir?: string;\n  host?: RuntimeHost;\n  lease?: { id: string; owner: string };\n  archiveSeeds?: Readonly<Record<string, string>>;\n};\nexport type RuntimeComponentStatus = {\n  id: string;\n  version: string;\n  key: string;\n  status: 'ready' | 'missing' | 'unverified' | 'corrupt';\n  root: string;\n  reason: string | null;\n};\nexport type RuntimeManagerReport = {\n  schema: 'tiangong-lca.runtime-status.v1';\n  manifest_sha256: string;\n  platform: string;\n  status: 'ready' | 'missing' | 'blocked';\n  components: RuntimeComponentStatus[];\n};\nfunction receipt(component: RuntimeComponent) {\n  return {\n    schema: 'tiangong-lca.runtime-component.v1',\n    key: componentKey(component),\n    archive_sha256: component.archive.sha256,\n    content_sha256: component.content_sha256,\n  };\n}\nexport function verifyRuntimeComponent(\n  root: string,\n  component: RuntimeComponent,\n  platform: string,\n): void {\n  const expected = new Map(component.files.map((file) => [file.path, file]));\n  let count = 0;\n  const walk = (relative: string): void => {\n    const directory = relative ? cachePath(root, relative) : root;\n    const stat = fs.lstatSync(directory);\n    if (stat.isSymbolicLink() || !stat.isDirectory())\n      runtimeError('RUNTIME_COMPONENT_PATH', 'Component directories cannot be links.');\n    for (const name of fs.readdirSync(directory)) {\n      const file = relative ? `${relative}/${name}` : name;\n      const target = cachePath(root, file);\n      const item = fs.lstatSync(target);\n      if (item.isDirectory()) walk(file);\n      else {\n        const expectedFile = expected.get(file);\n        if (!expectedFile)\n          runtimeError('RUNTIME_COMPONENT_EXTRA', 'Component contains an unregistered file.');\n        const actual = hashRuntimeFile(target, file);\n        if (\n          actual.bytes !== expectedFile.bytes ||\n          actual.sha256 !== expectedFile.sha256 ||\n          (platform !== 'win32-x64' && (item.mode & 0o777) !== expectedFile.mode)\n        )\n          runtimeError(\n            'RUNTIME_COMPONENT_CHANGED',\n            'Component file bytes, digest or executable mode changed.',\n          );\n        count++;\n      }\n    }\n  };\n  walk('');\n  if (count !== component.files.length)\n    runtimeError('RUNTIME_COMPONENT_MISSING', 'Component inventory is incomplete.');\n}\nfunction inspectComponent(\n  cache: string,\n  component: RuntimeComponent,\n  platform: string,\n): RuntimeComponentStatus {\n  const key = componentKey(component),\n    relative = `components/${key}`,\n    root = cachePath(cache, `${relative}/root`);\n  const base = { id: component.id, version: component.version, key, root };\n  if (!fs.existsSync(cachePath(cache, relative)))\n    return { ...base, status: 'missing', reason: null };\n  try {\n    if (\n      fs\n        .readdirSync(cachePath(cache, relative))\n        .some((name) => !['root', 'receipt.json'].includes(name))\n    )\n      runtimeError(\n        'RUNTIME_COMPONENT_EXTRA',\n        'Component installation directory contains unknown data.',\n      );\n    if (!fs.existsSync(cachePath(cache, `${relative}/receipt.json`)))\n      return { ...base, status: 'unverified', reason: 'runtime_install_incomplete' };\n    if (\n      contentHash(readCacheJson(cache, `${relative}/receipt.json`)) !==\n      contentHash(receipt(component))\n    )\n      runtimeError(\n        'RUNTIME_RECEIPT_CHANGED',\n        'Component installation receipt does not match the selected manifest.',\n      );\n    verifyRuntimeComponent(root, component, platform);\n    return { ...base, status: 'ready', reason: null };\n  } catch (error) {\n    return {\n      ...base,\n      status: 'corrupt',\n      reason:\n        typeof (error as { code?: unknown }).code === 'string'\n          ? (error as { code: string }).code\n          : 'runtime_component_invalid',\n    };\n  }\n}\nfunction selected(value: TrustedRuntimeManifest, options: RuntimeManagerOptions) {\n  assertTrustedManifest(value);\n  const host = options.host ?? inspectRuntimeHost();\n  assertRuntimeHost(value, host);\n  return {\n    host,\n    components: value.manifest.components.filter(\n      (component) => component.platform === host.platform,\n    ),\n  };\n}\nexport function inspectRuntimeComponents(\n  value: TrustedRuntimeManifest,\n  options: RuntimeManagerOptions = {},\n): RuntimeManagerReport {\n  const { host, components } = selected(value, options),\n    cache = openRuntimeCache(options.cacheDir ?? defaultRuntimeCache(), false);\n  const states = components.map((component) => inspectComponent(cache, component, host.platform));\n  return {\n    schema: 'tiangong-lca.runtime-status.v1',\n    manifest_sha256: value.sha256,\n    platform: host.platform,\n    status: states.every((item) => item.status === 'ready')\n      ? 'ready'\n      : states.some((item) => item.status === 'corrupt' || item.status === 'unverified')\n        ? 'blocked'\n        : 'missing',\n    components: states,\n  };\n}\nasync function installComponent(\n  cache: string,\n  component: RuntimeComponent,\n  options: RuntimeManagerOptions,\n  platform: string,\n): Promise<void> {\n  const key = componentKey(component);\n  await withBatchRunLock(\n    {\n      runPath: cachePath(cache, `locks/${key}.json`),\n      identity: { schema: 'runtime-component-lock.v1', key },\n      reason: 'Runtime component installation',\n    },\n    async () => {\n      const state = inspectComponent(cache, component, platform);\n      if (state.status === 'ready') return;\n      const target = cachePath(cache, `components/${key}`);\n      if (state.status === 'unverified') {\n        // Bootstrap may publish a complete tree before Node can produce the CLI receipt.\n        // It is cache data only: adopt after every declared byte/mode and absence of extra files is proved.\n        verifyRuntimeComponent(state.root, component, platform);\n        writeOnce(\n          cache,\n          `components/${key}/receipt.json`,\n          Buffer.from(JSON.stringify(receipt(component)) + '\\n'),\n        );\n        return;\n      }\n      if (state.status === 'corrupt')\n        runtimeError(\n          'RUNTIME_CACHE_CORRUPT',\n          'A selected cached component is corrupt; preserve active leases and prune it explicitly.',\n        );\n      const staging = cachePath(cache, `tmp/${key}-${randomUUID()}`);\n      fs.mkdirSync(staging, { recursive: true, mode: 0o700 });\n      try {\n        const archive = path.join(staging, 'component.tar.gz'),\n          seed = options.archiveSeeds?.[key];\n        if (seed) {\n          const fact = hashRuntimeFile(seed, 'archive');\n          if (fact.bytes !== component.archive.bytes || fact.sha256 !== component.archive.sha256)\n            runtimeError(\n              'RUNTIME_ARCHIVE_SEED',\n              'Supplied archive seed differs from the trusted component.',\n            );\n          fs.copyFileSync(seed, archive, fs.constants.COPYFILE_EXCL);\n        } else await downloadRuntimeArchive(component.archive, archive, options);\n        await extractRuntimeArchive(archive, path.join(staging, 'root'), component, options.signal);\n        verifyRuntimeComponent(path.join(staging, 'root'), component, platform);\n        fs.unlinkSync(archive);\n        writeOnce(staging, 'receipt.json', Buffer.from(JSON.stringify(receipt(component)) + '\\n'));\n        fs.mkdirSync(path.dirname(target), { recursive: true, mode: 0o700 });\n        cachePath(cache, `components/${key}`);\n        if (fs.existsSync(target))\n          runtimeError(\n            'RUNTIME_INSTALL_CONFLICT',\n            'Another component tree appeared outside the installation lock.',\n          );\n        fs.renameSync(staging, target);\n      } finally {\n        if (fs.existsSync(staging)) fs.rmSync(staging, { recursive: true, force: true });\n      }\n    },\n  );\n}\nexport async function ensureRuntimeComponents(\n  value: TrustedRuntimeManifest,\n  options: RuntimeManagerOptions = {},\n): Promise<RuntimeManagerReport> {\n  const { host, components } = selected(value, options);\n  options.signal?.throwIfAborted();\n  const cache = await ensureRuntimeCache(options.cacheDir ?? defaultRuntimeCache());\n  if (options.lease)\n    await acquireRuntimeLease(\n      cache,\n      options.lease.id,\n      options.lease.owner,\n      components.map(componentKey),\n    );\n  for (const component of components) {\n    options.signal?.throwIfAborted();\n    await installComponent(cache, component, options, host.platform);\n  }\n  return inspectRuntimeComponents(value, { ...options, cacheDir: cache, host });\n}\nexport async function pruneRuntimeComponents(\n  value: TrustedRuntimeManifest,\n  options: RuntimeManagerOptions = {},\n): Promise<{ removed: string[]; retained: string[] }> {\n  const { components } = selected(value, options);\n  const cache = openRuntimeCache(options.cacheDir ?? defaultRuntimeCache(), false);\n  if (!fs.existsSync(cachePath(cache, '.runtime-cache.json'))) return { removed: [], retained: [] };\n  return withRuntimeLeaseLock(cache, async () => {\n    const pinned = leasedRuntimeKeys(cache),\n      removed: string[] = [],\n      retained: string[] = [];\n    for (const component of components) {\n      const key = componentKey(component);\n      if (pinned.has(key)) {\n        retained.push(key);\n        continue;\n      }\n      await withBatchRunLock(\n        {\n          runPath: cachePath(cache, `locks/${key}.json`),\n          identity: { schema: 'runtime-component-lock.v1', key },\n          reason: 'Explicit unused runtime pruning',\n        },\n        () => {\n          const target = cachePath(cache, `components/${key}`);\n          if (!fs.existsSync(target)) return;\n          if (fs.readdirSync(target).some((name) => !['root', 'receipt.json'].includes(name)))\n            runtimeError(\n              'RUNTIME_PRUNE_UNOWNED',\n              'Unknown files must be preserved instead of pruned.',\n            );\n          if (\n            contentHash(readCacheJson(cache, `components/${key}/receipt.json`)) !==\n            contentHash(receipt(component))\n          )\n            runtimeError(\n              'RUNTIME_PRUNE_UNOWNED',\n              'Only an installation with its exact ownership receipt can be pruned.',\n            );\n          fs.rmSync(target, { recursive: true, force: false });\n          removed.push(key);\n        },\n      );\n    }\n    return { removed, retained };\n  });\n}\n"]}

package/dist/src/lib/runtime/manifest-types.d.ts

@@ -0,0 +1,73 @@
+import type { RuntimePlatform } from './types.js';
+export declare const RUNTIME_MANIFEST_SCHEMA: 'tiangong-lca.runtime-manifest.v1';
+export declare const RUNTIME_BOOTSTRAP_PROTOCOL: 'tiangong-lca.runtime-bootstrap.v1';
+export declare const RUNTIME_ARCHIVE_FORMAT: 'tar-gzip-ustar-v1';
+export type ComponentFile = Readonly<{
+    path: string;
+    bytes: number;
+    sha256: string;
+    mode: 420 | 493;
+}>;
+export type RuntimeComponent = Readonly<{
+    id: string;
+    version: string;
+    platform: RuntimePlatform;
+    archive: Readonly<{
+        format: typeof RUNTIME_ARCHIVE_FORMAT;
+        url: string;
+        bytes: number;
+        sha256: string;
+    }>;
+    files: readonly ComponentFile[];
+    content_sha256: string;
+    production_lock: string;
+    sbom: string;
+    licenses: readonly string[];
+    provenance: readonly string[];
+    protocols: readonly string[];
+    asset_fingerprints: Readonly<Record<string, string>>;
+}>;
+export type ComponentPath = Readonly<{
+    component: string;
+    path: string;
+}>;
+export type RuntimeLaunch = Readonly<{
+    id: string;
+    platform: RuntimePlatform;
+    executable: ComponentPath;
+    environment: 'isolated' | 'cli-auth';
+    argv: readonly (ComponentPath | Readonly<{
+        literal: string;
+    }>)[];
+}>;
+export type WorkspaceCompatibility = Readonly<{
+    schema: string;
+    features: readonly string[];
+}>;
+export type RuntimeManifest = Readonly<{
+    schema: typeof RUNTIME_MANIFEST_SCHEMA;
+    bootstrap_protocol: typeof RUNTIME_BOOTSTRAP_PROTOCOL;
+    product: Readonly<{
+        id: string;
+        version: string;
+    }>;
+    minimum_hosts: Readonly<Partial<Record<RuntimePlatform, Readonly<{
+        os_release: string;
+        glibc: string | null;
+    }>>>>;
+    workspace: Readonly<{
+        read: readonly WorkspaceCompatibility[];
+        write: readonly WorkspaceCompatibility[];
+    }>;
+    components: readonly RuntimeComponent[];
+    launches: readonly RuntimeLaunch[];
+}>;
+export type TrustedRuntimeManifest = Readonly<{
+    sha256: string;
+    manifest: RuntimeManifest;
+}>;
+export type RuntimeHost = Readonly<{
+    platform: RuntimePlatform;
+    osRelease: string;
+    glibc: string | null;
+}>;

package/dist/src/lib/runtime/manifest-types.js

@@ -0,0 +1,4 @@
+export const RUNTIME_MANIFEST_SCHEMA = 'tiangong-lca.runtime-manifest.v1';
+export const RUNTIME_BOOTSTRAP_PROTOCOL = 'tiangong-lca.runtime-bootstrap.v1';
+export const RUNTIME_ARCHIVE_FORMAT = 'tar-gzip-ustar-v1';
+//# sourceMappingURL=manifest-types.js.map

package/dist/src/lib/runtime/manifest-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-types.js","sourceRoot":"","sources":["../../../../src/lib/runtime/manifest-types.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,uBAAuB,GAAG,kCAA2C,CAAC;AACnF,MAAM,CAAC,MAAM,0BAA0B,GAAG,mCAA4C,CAAC;AACvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAA4B,CAAC","sourcesContent":["import type { RuntimePlatform } from './types.js';\n\nexport const RUNTIME_MANIFEST_SCHEMA = 'tiangong-lca.runtime-manifest.v1' as const;\nexport const RUNTIME_BOOTSTRAP_PROTOCOL = 'tiangong-lca.runtime-bootstrap.v1' as const;\nexport const RUNTIME_ARCHIVE_FORMAT = 'tar-gzip-ustar-v1' as const;\nexport type ComponentFile = Readonly<{\n  path: string;\n  bytes: number;\n  sha256: string;\n  mode: 420 | 493;\n}>;\nexport type RuntimeComponent = Readonly<{\n  id: string;\n  version: string;\n  platform: RuntimePlatform;\n  archive: Readonly<{\n    format: typeof RUNTIME_ARCHIVE_FORMAT;\n    url: string;\n    bytes: number;\n    sha256: string;\n  }>;\n  files: readonly ComponentFile[];\n  content_sha256: string;\n  production_lock: string;\n  sbom: string;\n  licenses: readonly string[];\n  provenance: readonly string[];\n  protocols: readonly string[];\n  asset_fingerprints: Readonly<Record<string, string>>;\n}>;\nexport type ComponentPath = Readonly<{ component: string; path: string }>;\nexport type RuntimeLaunch = Readonly<{\n  id: string;\n  platform: RuntimePlatform;\n  executable: ComponentPath;\n  environment: 'isolated' | 'cli-auth';\n  argv: readonly (ComponentPath | Readonly<{ literal: string }>)[];\n}>;\nexport type WorkspaceCompatibility = Readonly<{ schema: string; features: readonly string[] }>;\nexport type RuntimeManifest = Readonly<{\n  schema: typeof RUNTIME_MANIFEST_SCHEMA;\n  bootstrap_protocol: typeof RUNTIME_BOOTSTRAP_PROTOCOL;\n  product: Readonly<{ id: string; version: string }>;\n  minimum_hosts: Readonly<\n    Partial<Record<RuntimePlatform, Readonly<{ os_release: string; glibc: string | null }>>>\n  >;\n  workspace: Readonly<{\n    read: readonly WorkspaceCompatibility[];\n    write: readonly WorkspaceCompatibility[];\n  }>;\n  components: readonly RuntimeComponent[];\n  launches: readonly RuntimeLaunch[];\n}>;\nexport type TrustedRuntimeManifest = Readonly<{ sha256: string; manifest: RuntimeManifest }>;\nexport type RuntimeHost = Readonly<{\n  platform: RuntimePlatform;\n  osRelease: string;\n  glibc: string | null;\n}>;\n"]}

package/dist/src/lib/runtime/manifest-values.d.ts

@@ -0,0 +1,15 @@
+import { type RuntimePlatform } from './types.js';
+export declare function record(value: unknown, label: string): Record<string, unknown>;
+export declare function invalid(label: string): never;
+export declare function exact(value: Record<string, unknown>, keys: readonly string[], label: string): void;
+export declare function text(value: unknown, label: string, max?: number): string;
+export declare function id(value: unknown): string;
+export declare function version(value: unknown): string;
+export declare function sha(value: unknown): string;
+export declare function integer(value: unknown, max: number, minimum?: number): number;
+export declare function array(value: unknown, max: number, minimum?: number): unknown[];
+export declare function platform(value: unknown): RuntimePlatform;
+export declare function relativeFile(value: unknown): string;
+export declare function unique(values: readonly string[], label: string): void;
+export declare function distributionUrl(value: unknown, redirected?: boolean): string;
+export declare function deepFreeze<T>(value: T): T;

package/dist/src/lib/runtime/manifest-values.js

@@ -0,0 +1,124 @@
+import { runtimeError } from './files.js';
+import { RUNTIME_PLATFORMS } from './types.js';
+export function record(value, label) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        invalid(label);
+    return value;
+}
+export function invalid(label) {
+    return runtimeError('RUNTIME_MANIFEST_INVALID', `Runtime manifest has invalid ${label}.`);
+}
+export function exact(value, keys, label) {
+    if (Object.keys(value).length !== keys.length || keys.some((key) => !Object.hasOwn(value, key)))
+        invalid(label);
+}
+export function text(value, label, max = 256) {
+    if (typeof value !== 'string' ||
+        !value ||
+        value.length > max ||
+        value.split('').some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127))
+        invalid(label);
+    return value;
+}
+export function id(value) {
+    const result = text(value, 'identifier', 64);
+    if (!/^[a-z0-9][a-z0-9._-]*$/u.test(result) || result === '.' || result === '..')
+        invalid('identifier');
+    return result;
+}
+export function version(value) {
+    const result = text(value, 'version', 40);
+    if (!/^(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)$/u.test(result))
+        invalid('exact stable version');
+    return result;
+}
+export function sha(value) {
+    const result = text(value, 'SHA-256', 64);
+    if (!/^[0-9a-f]{64}$/u.test(result))
+        invalid('SHA-256');
+    return result;
+}
+export function integer(value, max, minimum = 0) {
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < minimum || value > max)
+        invalid('bounded integer');
+    return value;
+}
+export function array(value, max, minimum = 0) {
+    if (!Array.isArray(value) || value.length > max || value.length < minimum)
+        invalid('bounded array');
+    return value;
+}
+export function platform(value) {
+    if (!RUNTIME_PLATFORMS.includes(value))
+        invalid('platform');
+    return value;
+}
+export function relativeFile(value) {
+    const result = text(value, 'portable file path', 255);
+    if (Buffer.byteLength(result) > 255 ||
+        result.includes('\\') ||
+        result.includes(':') ||
+        result.startsWith('/') ||
+        result
+            .split('/')
+            .some((part) => !part ||
+            part === '.' ||
+            part === '..' ||
+            /^(?:\.env(?:\..*)?|\.git|\.npmrc|\.ssh)$/iu.test(part) ||
+            /[. ]$/u.test(part) ||
+            /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/iu.test(part)))
+        invalid('portable file path');
+    const segments = result.split('/');
+    if (segments.length > 32 ||
+        Buffer.byteLength(segments.at(-1)) > 100 ||
+        (Buffer.byteLength(result) > 100 &&
+            !segments
+                .slice(0, -1)
+                .some((_, i) => Buffer.byteLength(segments.slice(0, i + 1).join('/')) <= 155 &&
+                Buffer.byteLength(segments.slice(i + 1).join('/')) <= 100)))
+        invalid('USTAR path');
+    return result;
+}
+export function unique(values, label) {
+    if (new Set(values).size !== values.length)
+        invalid(`duplicate ${label}`);
+}
+export function distributionUrl(value, redirected = false) {
+    const input = text(value, 'distribution URL', 4096);
+    let url;
+    try {
+        url = new URL(input);
+    }
+    catch {
+        invalid('distribution URL');
+    }
+    if (url.protocol !== 'https:' || url.username || url.password || url.hash || url.port)
+        invalid('distribution URL');
+    const primary = ['github.com', 'nodejs.org', 'registry.npmjs.org'];
+    const redirects = ['release-assets.githubusercontent.com', 'objects.githubusercontent.com'];
+    if (!primary.includes(url.hostname) && !(redirected && redirects.includes(url.hostname)))
+        invalid('distribution origin');
+    if (!redirected) {
+        if (url.search || /\/(?:latest|heads)(?:\/|$)/u.test(url.pathname))
+            invalid('immutable distribution URL');
+        if (url.hostname === 'github.com' &&
+            !/^\/[^/]+\/[^/]+\/releases\/download\/[^/]+\/[^/]+$/u.test(url.pathname))
+            invalid('release asset URL');
+        if (url.hostname === 'nodejs.org' &&
+            !/^\/dist\/v[0-9]+\.[0-9]+\.[0-9]+\/[^/]+$/u.test(url.pathname))
+            invalid('Node release URL');
+        if (url.hostname === 'registry.npmjs.org' &&
+            !/\/-\/[^/]+-[0-9]+\.[0-9]+\.[0-9]+\.tgz$/u.test(url.pathname))
+            invalid('registry tarball URL');
+    }
+    return url.href;
+}
+export function deepFreeze(value) {
+    if (value && typeof value === 'object' && !Object.isFrozen(value)) {
+        for (const item of Object.values(value))
+            deepFreeze(item);
+        Object.freeze(value);
+    }
+    return value;
+}
+//# sourceMappingURL=manifest-values.js.map