@wjarka/cezarion 0.14.8 → 0.14.9-dev.842

package/dist/application-update/npm-process.js

@@ -0,0 +1,133 @@
+import { execFileSync, spawn } from 'node:child_process';
+import { readFileSync, realpathSync, statSync } from 'node:fs';
+import { basename, dirname, isAbsolute, join, delimiter } from 'node:path';
+/** Only npm's declared CLI, reached through the Node toolchain or a canonical npm shim. */
+function verifiedCli(candidate) {
+    try {
+        const cli = realpathSync(candidate);
+        if (basename(cli) !== 'npm-cli.js' || basename(dirname(cli)) !== 'bin' || !statSync(cli).isFile())
+            return;
+        const root = dirname(dirname(cli));
+        const manifest = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8'));
+        if (manifest.name === 'npm' && manifest.bin?.npm === 'bin/npm-cli.js')
+            return cli;
+    }
+    catch { /* Missing or unreadable npm means manual updates, never a boot failure. */ }
+    return undefined;
+}
+export function resolveNpmInvocation(command = 'npm', options = {}) {
+    const node = options.nodeExecutable ?? process.execPath;
+    const platform = options.platform ?? process.platform;
+    const invoke = (cli) => ({ command: node, args: [cli] });
+    if (basename(command) === 'npm-cli.js') {
+        const cli = verifiedCli(command);
+        if (!cli)
+            throw new Error('npm CLI could not be verified');
+        return invoke(cli);
+    }
+    // Explicit executables are used by embedders and isolated lifecycle fixtures.
+    // A Windows command script is never sent to spawn/execFile as an executable.
+    if (!['npm', 'npm.cmd'].includes(basename(command).toLowerCase())) {
+        if (/\.(cmd|bat)$/i.test(command))
+            throw new Error('npm command script is unsupported');
+        return { command, args: [] };
+    }
+    if (!isAbsolute(command)) {
+        const nodeDir = dirname(realpathSync(node));
+        const cli = verifiedCli(platform === 'win32'
+            ? join(nodeDir, 'node_modules/npm/bin/npm-cli.js')
+            : join(nodeDir, '../lib/node_modules/npm/bin/npm-cli.js'));
+        if (cli)
+            return invoke(cli);
+    }
+    const searchPath = options.searchPath ?? process.env[Object.keys(process.env).find(key => key.toLowerCase() === 'path') ?? 'PATH'] ?? '';
+    const candidates = isAbsolute(command) ? [command] : searchPath.split(platform === 'win32' ? ';' : delimiter)
+        .map(part => part.replace(/^"(.*)"$/, '$1')).filter(isAbsolute)
+        .map(part => join(part, platform === 'win32' ? 'npm.cmd' : 'npm'));
+    for (const shim of candidates) {
+        const linked = verifiedCli(shim);
+        if (linked)
+            return invoke(linked);
+        if (platform !== 'win32' && !/\.cmd$/i.test(shim))
+            continue;
+        const cli = verifiedCli(join(dirname(shim), 'node_modules/npm/bin/npm-cli.js'));
+        if (!cli)
+            continue;
+        try {
+            const content = readFileSync(shim, 'utf8');
+            // npm ships its installer shim; npm install -g npm emits cmd-shim's
+            // equivalent. Only their fixed adjacent CLI target is recognized.
+            const vendor = readFileSync(join(dirname(cli), 'npm.cmd'), 'utf8');
+            if (content === vendor)
+                return invoke(cli);
+        }
+        catch { /* Fall through to the generated shim's fixed target. */ }
+        try {
+            const content = readFileSync(shim, 'utf8');
+            if (content.includes('SET dp0=%~dp0') && content.includes('"%dp0%\\node_modules\\npm\\bin\\npm-cli.js"'))
+                return invoke(cli);
+        }
+        catch { /* Keep looking; never execute an unrecognized wrapper. */ }
+    }
+    throw new Error('npm CLI could not be verified');
+}
+/** Discovery and both mutating phases use the exact same shell-free invocation. */
+export function readNpmConfiguration(command = 'npm') {
+    try {
+        const invocation = resolveNpmInvocation(command);
+        const value = (args) => execFileSync(invocation.command, [...invocation.args, ...args], {
+            encoding: 'utf8', timeout: 5000, stdio: ['ignore', 'pipe', 'ignore'], shell: false,
+        }).trim();
+        const prefix = value(['prefix', '-g']);
+        const cache = value(['config', 'get', 'cache']);
+        return prefix && cache ? { npmBin: invocation.args[0] ?? invocation.command, prefix, cache } : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** A lock abort is complete only after the npm process has actually exited. */
+export async function runOwnedNpm(command, args, env, signal) {
+    if (signal?.aborted)
+        throw new Error('update lock ownership changed');
+    const invocation = resolveNpmInvocation(command);
+    const child = spawn(invocation.command, [...invocation.args, ...args], { env, stdio: 'ignore', shell: false });
+    await new Promise((resolve, reject) => {
+        let cancelled = false;
+        let timedOut = false;
+        let spawnError;
+        let escalation;
+        const cancel = () => {
+            if (cancelled)
+                return;
+            cancelled = true;
+            child.kill('SIGTERM');
+            escalation = setTimeout(() => child.kill('SIGKILL'), 2_000);
+        };
+        const deadline = setTimeout(() => { timedOut = true; cancel(); }, 120_000);
+        const onAbort = () => cancel();
+        signal?.addEventListener('abort', onAbort, { once: true });
+        if (signal?.aborted)
+            cancel();
+        child.once('error', (error) => { spawnError = error; });
+        child.once('close', (code) => {
+            clearTimeout(deadline);
+            if (escalation)
+                clearTimeout(escalation);
+            signal?.removeEventListener('abort', onAbort);
+            if (signal?.aborted)
+                reject(new Error('update lock ownership changed'));
+            else if (spawnError)
+                reject(new Error('npm could not start'));
+            else if (timedOut)
+                reject(new Error('npm operation timed out'));
+            else if (cancelled)
+                reject(new Error('npm operation cancelled'));
+            else if (code !== 0)
+                reject(new Error('npm operation failed'));
+            else
+                resolve();
+        });
+    });
+}
+//# sourceMappingURL=npm-process.js.map

package/dist/application-update/npm-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-process.js","sourceRoot":"","sources":["../../src/application-update/npm-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3E,2FAA2F;AAC3F,SAAS,WAAW,CAAC,SAAiB;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,YAAY,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO;QAC1G,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA8C,CAAC;QAC3H,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,gBAAgB;YAAE,OAAO,GAAG,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC,CAAC,2EAA2E,CAAC,CAAC;IACvF,OAAO,SAAS,CAAC;AACnB,CAAC;AAID,MAAM,UAAU,oBAAoB,CAAC,OAAO,GAAG,KAAK,EAAE,OAAO,GAEzD,EAAE;IACJ,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,QAAQ,CAAC;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,MAAM,GAAG,CAAC,GAAW,EAAiB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChF,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,YAAY,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,8EAA8E;IAC9E,6EAA6E;IAC7E,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAClE,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACxF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,KAAK,OAAO;YAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,iCAAiC,CAAC;YAClD,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,wCAAwC,CAAC,CAAC,CAAC;QAC7D,IAAI,GAAG;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IACzI,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;SAC1G,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;SAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5D,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,iCAAiC,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,oEAAoE;YACpE,kEAAkE;YAClE,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;YACnE,IAAI,OAAO,KAAK,MAAM;gBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC,CAAC,wDAAwD,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,6CAA6C,CAAC;gBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/H,CAAC;QAAC,MAAM,CAAC,CAAC,0DAA0D,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACnD,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,OAAO,GAAG,KAAK;IAClD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE;YAChG,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK;SACnF,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QAChD,OAAO,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3G,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,IAAc,EAAE,GAAsB,EAAE,MAAoB;IAC7G,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/G,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,UAA6B,CAAC;QAClC,IAAI,UAAqD,CAAC;QAC1D,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,GAAG,IAAI,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC3B,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,IAAI,UAAU;gBAAE,YAAY,CAAC,UAAU,CAAC,CAAC;YACzC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;iBACnE,IAAI,UAAU;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;iBACzD,IAAI,QAAQ;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;iBAC3D,IAAI,SAAS;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;iBAC5D,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;;gBAC1D,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/application-update/service.d.ts

@@ -0,0 +1,69 @@
+import { type ApplicationUpdateState } from '../contract/index.js';
+import { type Installation } from './discovery.ts';
+export declare class ApplicationUpdateConflictError extends Error {
+}
+export declare class ApplicationUpdateFailureError extends Error {
+    readonly status: 409 | 503;
+    constructor(message: string, status?: 409 | 503);
+}
+export interface ApplicationUpdateServiceLike {
+    snapshot(): ApplicationUpdateState;
+    apply(): Promise<ApplicationUpdateState>;
+    restart(): Promise<ApplicationUpdateState>;
+    afterResponse?(): void;
+    onStateChange?(listener: () => void): void;
+}
+export interface ApplicationUpdateOptions {
+    packageRoot: string;
+    launchEntry: string;
+    npmPrefix: string;
+    npmCache: string;
+    npmBin?: string;
+    home: string;
+    targetVersion: () => string | undefined;
+    runNpm?: (args: string[], signal?: AbortSignal) => Promise<void>;
+    armRestart?: (plan: RestartPlan) => Promise<number | void>;
+    handoff?: () => void;
+    onChange?: () => void;
+    dryRun?: boolean;
+    /** Test-only bounded contention override; normal operation waits 15 seconds. */
+    lockWaitMs?: number;
+}
+export interface RestartPlan {
+    installation: Exclude<Installation, {
+        kind: 'unsupported';
+    }>;
+    targetVersion: string;
+    oldVersion: string;
+    stage: string;
+    recovery: string;
+    recoveryPackage?: string;
+    binLinks?: string;
+    recordPath: string;
+    claimId: string;
+}
+/** Validate the npm result, not merely its exit code. */
+export declare function validateInstalledPackage(path: string, expectedVersion: string, installRoot?: string): void;
+export declare class ApplicationUpdateService implements ApplicationUpdateServiceLike {
+    private readonly options;
+    private readonly installation;
+    private readonly recordPath;
+    private readonly dir;
+    private readonly recoveryPackage;
+    private record;
+    private applying?;
+    private handoffArmed;
+    private armingRestart;
+    private listener?;
+    private lockLost;
+    constructor(options: ApplicationUpdateOptions);
+    private refreshRecord;
+    snapshot(): ApplicationUpdateState;
+    private persist;
+    onStateChange(listener: () => void): void;
+    apply(): Promise<ApplicationUpdateState>;
+    private prepare;
+    restart(): Promise<ApplicationUpdateState>;
+    afterResponse(): void;
+    private runNpm;
+}