agent-tower 0.5.3-beta.6 → 0.5.3-beta.8

package/dist/services/agent-cli/downloader.js

@@ -0,0 +1,152 @@
+import { createHash, randomUUID } from 'node:crypto';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { ValidationError } from '../../errors.js';
+const DEFAULT_PREVIEW_TTL_MS = 10 * 60 * 1000;
+const DEFAULT_MAX_REDIRECTS = 3;
+function normalizeHost(host) {
+    return host.toLowerCase();
+}
+function assertAllowedUrl(url, install) {
+    if (url.protocol !== 'https:') {
+        throw new ValidationError('Installer download URL must use HTTPS');
+    }
+    if (url.username || url.password) {
+        throw new ValidationError('Installer download URL must not include userinfo');
+    }
+    const allowedHosts = new Set(install.allowedRedirectHosts.map(normalizeHost));
+    if (!allowedHosts.has(normalizeHost(url.hostname))) {
+        throw new ValidationError(`Installer download host is not allowlisted: ${url.hostname}`);
+    }
+    const exact = install.allowedExactPaths.includes(url.pathname);
+    const prefixed = install.allowedPathPrefixes.some((prefix) => (prefix !== '' && url.pathname.startsWith(prefix)));
+    if (!exact && !prefixed) {
+        throw new ValidationError(`Installer download path is not allowlisted: ${url.pathname}`);
+    }
+}
+async function readLimitedBody(response, maxBytes) {
+    const contentLength = response.headers.get('content-length');
+    if (contentLength && Number(contentLength) > maxBytes) {
+        throw new ValidationError('Installer script exceeds configured size limit');
+    }
+    const chunks = [];
+    let total = 0;
+    if (!response.body) {
+        const buffer = Buffer.from(await response.arrayBuffer());
+        if (buffer.byteLength > maxBytes) {
+            throw new ValidationError('Installer script exceeds configured size limit');
+        }
+        return buffer;
+    }
+    const reader = response.body.getReader();
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            const chunk = Buffer.from(value);
+            total += chunk.byteLength;
+            if (total > maxBytes) {
+                throw new ValidationError('Installer script exceeds configured size limit');
+            }
+            chunks.push(chunk);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    return Buffer.concat(chunks, total);
+}
+export class AgentCliDownloader {
+    fetchImpl;
+    tmpDir;
+    now;
+    ttlMs;
+    maxRedirects;
+    constructor(options = {}) {
+        this.fetchImpl = options.fetchImpl ?? fetch;
+        this.tmpDir = options.tmpDir ?? os.tmpdir();
+        this.now = options.now ?? (() => new Date());
+        this.ttlMs = options.ttlMs ?? DEFAULT_PREVIEW_TTL_MS;
+        this.maxRedirects = options.maxRedirects ?? DEFAULT_MAX_REDIRECTS;
+    }
+    async createPreview(toolId, platform, install) {
+        let current = new URL(install.downloadUrl);
+        const redirectChain = [];
+        let response = null;
+        for (let index = 0; index <= this.maxRedirects; index += 1) {
+            assertAllowedUrl(current, install);
+            response = await this.fetchImpl(current, {
+                method: 'GET',
+                redirect: 'manual',
+            });
+            redirectChain.push({
+                url: current.toString(),
+                host: current.hostname,
+                path: current.pathname,
+                statusCode: response.status,
+            });
+            if (response.status >= 300 && response.status < 400) {
+                const location = response.headers.get('location');
+                if (!location) {
+                    throw new ValidationError('Installer redirect missing location header');
+                }
+                current = new URL(location, current);
+                if (index === this.maxRedirects) {
+                    throw new ValidationError('Installer download exceeded redirect limit');
+                }
+                continue;
+            }
+            break;
+        }
+        if (!response || !response.ok) {
+            throw new ValidationError(`Installer download failed with status ${response?.status ?? 'unknown'}`);
+        }
+        assertAllowedUrl(current, install);
+        const script = await readLimitedBody(response, install.maxBytes);
+        const sha256 = createHash('sha256').update(script).digest('hex');
+        const tempDir = await fs.promises.mkdtemp(path.join(this.tmpDir, 'agent-tower-agent-cli-'));
+        const tempFilePath = path.join(tempDir, `${toolId}-${randomUUID()}.sh`);
+        await fs.promises.writeFile(tempFilePath, script, { mode: 0o600 });
+        await fs.promises.chmod(tempFilePath, 0o600);
+        const now = this.now();
+        const expiresAt = new Date(now.getTime() + this.ttlMs);
+        const interpreter = install.interpreters[platform];
+        if (!interpreter) {
+            await removePreviewFile(tempFilePath);
+            throw new ValidationError(`Installer is unsupported on platform: ${platform}`);
+        }
+        return {
+            id: `agent-cli-preview-${randomUUID()}`,
+            toolId,
+            platform,
+            status: 'ready',
+            finalUrl: current.toString(),
+            redirectChain,
+            sizeBytes: script.byteLength,
+            sha256,
+            interpreter: {
+                command: interpreter.command,
+                args: [...interpreter.args],
+            },
+            fixedArgs: [...install.fixedArgs],
+            riskNotes: [...install.riskNotes],
+            createdAt: now.toISOString(),
+            expiresAt: expiresAt.toISOString(),
+            tempFilePath,
+            verifyCommand: {
+                ...install.verifyCommand,
+                args: [...install.verifyCommand.args],
+            },
+        };
+    }
+}
+export async function removePreviewFile(tempFilePath) {
+    await fs.promises.rm(path.dirname(tempFilePath), { recursive: true, force: true });
+}
+export function toPublicPreview(preview) {
+    const { tempFilePath: _tempFilePath, verifyCommand: _verifyCommand, ...publicPreview } = preview;
+    return publicPreview;
+}
+//# sourceMappingURL=downloader.js.map

package/dist/services/agent-cli/downloader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"downloader.js","sourceRoot":"","sources":["../../../src/services/agent-cli/downloader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAS7B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAelD,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9C,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAQ,EAAE,OAAwC;IAC1E,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,eAAe,CAAC,uCAAuC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CAAC,kDAAkD,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,eAAe,CAAC,+CAA+C,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAC5D,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CACjD,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CAAC,+CAA+C,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB,EAAE,QAAgB;IACjE,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7D,IAAI,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,OAAO,kBAAkB;IACZ,SAAS,CAAe;IACxB,MAAM,CAAS;IACf,GAAG,CAAa;IAChB,KAAK,CAAS;IACd,YAAY,CAAS;IAEtC,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAAC;QACrD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,MAAsB,EACtB,QAA0B,EAC1B,OAAwC;QAExC,IAAI,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,aAAa,GAA2B,EAAE,CAAC;QACjD,IAAI,QAAQ,GAAoB,IAAI,CAAC;QAErC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3D,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnC,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;gBACvC,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;YAEH,aAAa,CAAC,IAAI,CAAC;gBACjB,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE;gBACvB,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,UAAU,EAAE,QAAQ,CAAC,MAAM;aAC5B,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,eAAe,CAAC,4CAA4C,CAAC,CAAC;gBAC1E,CAAC;gBACD,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACrC,IAAI,KAAK,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;oBAChC,MAAM,IAAI,eAAe,CAAC,4CAA4C,CAAC,CAAC;gBAC1E,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM;QACR,CAAC;QAED,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,eAAe,CAAC,yCAAyC,QAAQ,EAAE,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACtG,CAAC;QAED,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAC5F,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,IAAI,UAAU,EAAE,KAAK,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAE7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAC;YACtC,MAAM,IAAI,eAAe,CAAC,yCAAyC,QAAQ,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,OAAO;YACL,EAAE,EAAE,qBAAqB,UAAU,EAAE,EAAE;YACvC,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;YAC5B,aAAa;YACb,SAAS,EAAE,MAAM,CAAC,UAAU;YAC5B,MAAM;YACN,WAAW,EAAE;gBACX,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;aAC5B;YACD,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;YACjC,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;YACjC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;YAC5B,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,YAAY;YACZ,aAAa,EAAE;gBACb,GAAG,OAAO,CAAC,aAAa;gBACxB,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC;aACtC;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,YAAoB;IAC1D,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAA8B;IAC5D,MAAM,EACJ,YAAY,EAAE,aAAa,EAC3B,aAAa,EAAE,cAAc,EAC7B,GAAG,aAAa,EACjB,GAAG,OAAO,CAAC;IACZ,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/dist/services/agent-cli/environment.service.d.ts

@@ -0,0 +1,35 @@
+import type { AgentCliCreateInstallTaskResponse, AgentCliEnvironmentStatus, AgentCliInstallLogResponse, AgentCliInstallPreview, AgentCliInstallTask, AgentCliPublicInstallManifestItem, AgentCliToolId } from '@agent-tower/shared';
+import { AgentCliDetector, type AgentCliExecFile } from './detection.js';
+import { AgentCliDownloader, type AgentCliDownloadOptions } from './downloader.js';
+import { AgentCliInstallTaskManager, type AgentCliRunner } from './task-manager.js';
+export interface AgentCliEnvironmentServiceOptions {
+    downloader?: AgentCliDownloader;
+    downloaderOptions?: AgentCliDownloadOptions;
+    detector?: AgentCliDetector;
+    execFileImpl?: AgentCliExecFile;
+    taskManager?: AgentCliInstallTaskManager;
+    runner?: AgentCliRunner;
+    platform?: NodeJS.Platform;
+    now?: () => Date;
+}
+export declare class AgentCliEnvironmentService {
+    private readonly manifest;
+    private readonly downloader;
+    private readonly detector;
+    private readonly taskManager;
+    private readonly previews;
+    private readonly platform;
+    private readonly now;
+    constructor(options?: AgentCliEnvironmentServiceOptions);
+    getManifest(): AgentCliPublicInstallManifestItem[];
+    getStatus(): AgentCliEnvironmentStatus;
+    refreshStatus(): Promise<AgentCliEnvironmentStatus>;
+    createPreview(toolId: AgentCliToolId): Promise<AgentCliInstallPreview>;
+    getPreview(previewId: string): Promise<AgentCliInstallPreview>;
+    createTask(previewId: string): Promise<AgentCliCreateInstallTaskResponse>;
+    getTask(taskId: string): AgentCliInstallTask;
+    getLogs(taskId: string, afterSeq?: number): AgentCliInstallLogResponse;
+    cancelTask(taskId: string): AgentCliInstallTask;
+    cleanupExpiredPreviews(): Promise<void>;
+}
+//# sourceMappingURL=environment.service.d.ts.map

package/dist/services/agent-cli/environment.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.service.d.ts","sourceRoot":"","sources":["../../../src/services/agent-cli/environment.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iCAAiC,EACjC,yBAAyB,EACzB,0BAA0B,EAE1B,sBAAsB,EACtB,mBAAmB,EACnB,iCAAiC,EACjC,cAAc,EACf,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EACL,kBAAkB,EAClB,KAAK,uBAAuB,EAI7B,MAAM,iBAAiB,CAAC;AAMzB,OAAO,EAAE,0BAA0B,EAAE,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEpF,MAAM,WAAW,iCAAiC;IAChD,UAAU,CAAC,EAAE,kBAAkB,CAAA;IAC/B,iBAAiB,CAAC,EAAE,uBAAuB,CAAA;IAC3C,QAAQ,CAAC,EAAE,gBAAgB,CAAA;IAC3B,YAAY,CAAC,EAAE,gBAAgB,CAAA;IAC/B,WAAW,CAAC,EAAE,0BAA0B,CAAA;IACxC,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;IAC1B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CACjB;AAoDD,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgC;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmB;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IACrE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAET,OAAO,GAAE,iCAAsC;IAS3D,WAAW,IAAI,iCAAiC,EAAE;IAIlD,SAAS,IAAI,yBAAyB;IAItC,aAAa,IAAI,OAAO,CAAC,yBAAyB,CAAC;IAI7C,aAAa,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAgBtE,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAO9D,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iCAAiC,CAAC;IAgB/E,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB;IAI5C,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,SAAI,GAAG,0BAA0B;IAIjE,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB;IAIzC,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;CAY9C"}

package/dist/services/agent-cli/environment.service.js

@@ -0,0 +1,127 @@
+import { NotFoundError, ServiceError, ValidationError } from '../../errors.js';
+import { AgentCliDetector } from './detection.js';
+import { AgentCliDownloader, removePreviewFile, toPublicPreview, } from './downloader.js';
+import { getAgentCliManifest, getAgentCliManifestItem, getServerAgentCliPlatform, } from './manifest.js';
+import { AgentCliInstallTaskManager } from './task-manager.js';
+function cloneCommandSpec(spec) {
+    return {
+        ...spec,
+        args: [...spec.args],
+    };
+}
+function toPublicManifestItem(item) {
+    const base = {
+        ...item,
+        officialSources: item.officialSources.map((source) => ({ ...source })),
+        supportedPlatforms: [...item.supportedPlatforms],
+        detectionCommands: item.detectionCommands.map(cloneCommandSpec),
+        versionCommand: item.versionCommand ? cloneCommandSpec(item.versionCommand) : undefined,
+        authCommand: item.authCommand ? cloneCommandSpec(item.authCommand) : undefined,
+    };
+    if (item.install.kind === 'detect-only') {
+        return {
+            ...base,
+            install: { ...item.install },
+        };
+    }
+    const { verifyCommand: _verifyCommand, ...install } = item.install;
+    return {
+        ...base,
+        install: {
+            ...install,
+            allowedRedirectHosts: [...install.allowedRedirectHosts],
+            allowedExactPaths: [...install.allowedExactPaths],
+            allowedPathPrefixes: [...install.allowedPathPrefixes],
+            interpreters: Object.fromEntries(Object.entries(install.interpreters).map(([platform, interpreter]) => [
+                platform,
+                interpreter ? { command: interpreter.command, args: [...interpreter.args] } : interpreter,
+            ])),
+            fixedArgs: [...install.fixedArgs],
+            riskNotes: [...install.riskNotes],
+        },
+    };
+}
+export class AgentCliEnvironmentService {
+    manifest;
+    downloader;
+    detector;
+    taskManager;
+    previews = new Map();
+    platform;
+    now;
+    constructor(options = {}) {
+        this.platform = getServerAgentCliPlatform(options.platform ?? process.platform);
+        this.now = options.now ?? (() => new Date());
+        this.manifest = getAgentCliManifest();
+        this.downloader = options.downloader ?? new AgentCliDownloader(options.downloaderOptions);
+        this.detector = options.detector ?? new AgentCliDetector(options.execFileImpl, this.platform);
+        this.taskManager = options.taskManager ?? new AgentCliInstallTaskManager(options.runner);
+    }
+    getManifest() {
+        return this.manifest.map(toPublicManifestItem);
+    }
+    getStatus() {
+        return this.detector.getCachedStatus(this.manifest);
+    }
+    refreshStatus() {
+        return this.detector.refresh(this.manifest);
+    }
+    async createPreview(toolId) {
+        await this.cleanupExpiredPreviews();
+        const item = getAgentCliManifestItem(toolId);
+        if (!item)
+            throw new NotFoundError('Agent CLI manifest item', toolId);
+        if (!this.platform || !item.supportedPlatforms.includes(this.platform)) {
+            throw new ServiceError('Agent CLI installer unsupported on this platform', 'AGENT_CLI_UNSUPPORTED_PLATFORM', 400);
+        }
+        if (item.install.kind !== 'downloaded-script') {
+            throw new ServiceError('Agent CLI tool is detect-only', 'AGENT_CLI_INSTALL_UNAVAILABLE', 400);
+        }
+        const preview = await this.downloader.createPreview(item.id, this.platform, item.install);
+        this.previews.set(preview.id, preview);
+        return toPublicPreview(preview);
+    }
+    async getPreview(previewId) {
+        await this.cleanupExpiredPreviews();
+        const preview = this.previews.get(previewId);
+        if (!preview)
+            throw new NotFoundError('Agent CLI install preview', previewId);
+        return toPublicPreview(preview);
+    }
+    async createTask(previewId) {
+        await this.cleanupExpiredPreviews();
+        const preview = this.previews.get(previewId);
+        if (!preview) {
+            throw new ServiceError('Agent CLI install preview expired or not found', 'AGENT_CLI_PREVIEW_EXPIRED', 409);
+        }
+        if (preview.status !== 'ready') {
+            throw new ValidationError('Agent CLI install preview is not ready');
+        }
+        preview.status = 'consumed';
+        const result = this.taskManager.createTask(preview);
+        this.previews.delete(previewId);
+        return result;
+    }
+    getTask(taskId) {
+        return this.taskManager.getTask(taskId);
+    }
+    getLogs(taskId, afterSeq = 0) {
+        return this.taskManager.getLogs(taskId, afterSeq);
+    }
+    cancelTask(taskId) {
+        return this.taskManager.cancel(taskId);
+    }
+    async cleanupExpiredPreviews() {
+        const nowMs = this.now().getTime();
+        const removals = [];
+        for (const [previewId, preview] of this.previews) {
+            if (preview.status !== 'ready' || new Date(preview.expiresAt).getTime() <= nowMs) {
+                preview.status = 'expired';
+                this.previews.delete(previewId);
+                removals.push(removePreviewFile(preview.tempFilePath));
+            }
+        }
+        await Promise.all(removals);
+    }
+}
+//# sourceMappingURL=environment.service.js.map

package/dist/services/agent-cli/environment.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.service.js","sourceRoot":"","sources":["../../../src/services/agent-cli/environment.service.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAyB,MAAM,gBAAgB,CAAC;AACzE,OAAO,EACL,kBAAkB,EAGlB,iBAAiB,EACjB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,0BAA0B,EAAuB,MAAM,mBAAmB,CAAC;AAapF,SAAS,gBAAgB,CACvB,IAAO;IAEP,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAiC;IAC7D,MAAM,IAAI,GAAG;QACX,GAAG,IAAI;QACP,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACtE,kBAAkB,EAAE,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAChD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC/D,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;QACvF,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;KAC/E,CAAC;IAEF,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACxC,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE;SAC7B,CAAC;IACJ,CAAC;IAED,MAAM,EACJ,aAAa,EAAE,cAAc,EAC7B,GAAG,OAAO,EACX,GAAG,IAAI,CAAC,OAAO,CAAC;IAEjB,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE;YACP,GAAG,OAAO;YACV,oBAAoB,EAAE,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC;YACvD,iBAAiB,EAAE,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC;YACjD,mBAAmB,EAAE,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC;YACrD,YAAY,EAAE,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC;gBACpE,QAAQ;gBACR,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW;aAC1F,CAAC,CACH;YACD,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;YACjC,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;SAClC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,0BAA0B;IACpB,QAAQ,CAAgC;IACxC,UAAU,CAAqB;IAC/B,QAAQ,CAAmB;IAC3B,WAAW,CAA6B;IACxC,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IACpD,QAAQ,CAAC;IACT,GAAG,CAAC;IAErB,YAAY,UAA6C,EAAE;QACzD,IAAI,CAAC,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChF,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,kBAAkB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC1F,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,gBAAgB,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9F,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3F,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACjD,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAsB;QACxC,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,aAAa,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,YAAY,CAAC,kDAAkD,EAAE,gCAAgC,EAAE,GAAG,CAAC,CAAC;QACpH,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC9C,MAAM,IAAI,YAAY,CAAC,+BAA+B,EAAE,+BAA+B,EAAE,GAAG,CAAC,CAAC;QAChG,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1F,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,2BAA2B,EAAE,SAAS,CAAC,CAAC;QAC9E,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,YAAY,CAAC,gDAAgD,EAAE,2BAA2B,EAAE,GAAG,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,CAAC,MAAc,EAAE,QAAQ,GAAG,CAAC;QAClC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAoB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,KAAK,EAAE,CAAC;gBACjF,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;gBAC3B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/dist/services/agent-cli/manifest-validator.d.ts

@@ -0,0 +1,4 @@
+import type { AgentCliInstallManifestItem } from '@agent-tower/shared';
+export declare function validateAgentCliManifestItem(item: AgentCliInstallManifestItem): void;
+export declare function validateAgentCliManifest(items: readonly AgentCliInstallManifestItem[]): void;
+//# sourceMappingURL=manifest-validator.d.ts.map

package/dist/services/agent-cli/manifest-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-validator.d.ts","sourceRoot":"","sources":["../../../src/services/agent-cli/manifest-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAsBvE,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,2BAA2B,GAAG,IAAI,CAgCpF;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,2BAA2B,EAAE,GAAG,IAAI,CAS5F"}

package/dist/services/agent-cli/manifest-validator.js

@@ -0,0 +1,56 @@
+import { ValidationError } from '../../errors.js';
+const SHELL_META_PATTERN = /(?:\||&&|\|\||;|`|\$\(|<\(|>\()/;
+function assertNoShellString(value, field) {
+    if (SHELL_META_PATTERN.test(value)) {
+        throw new ValidationError(`Agent CLI manifest contains shell metacharacters in ${field}`);
+    }
+}
+function assertHttpsUrl(value, field) {
+    const url = new URL(value);
+    if (url.protocol !== 'https:') {
+        throw new ValidationError(`Agent CLI manifest ${field} must use HTTPS`);
+    }
+    if (url.username || url.password) {
+        throw new ValidationError(`Agent CLI manifest ${field} must not include userinfo`);
+    }
+    return url;
+}
+export function validateAgentCliManifestItem(item) {
+    if (item.install.kind === 'detect-only')
+        return;
+    const downloadUrl = assertHttpsUrl(item.install.downloadUrl, `${item.id}.install.downloadUrl`);
+    const allowedHosts = new Set(item.install.allowedRedirectHosts.map((host) => host.toLowerCase()));
+    if (!allowedHosts.has(downloadUrl.hostname.toLowerCase())) {
+        throw new ValidationError(`Agent CLI manifest ${item.id} download host is not allowlisted`);
+    }
+    if (item.install.allowedExactPaths.length === 0 && item.install.allowedPathPrefixes.length === 0) {
+        throw new ValidationError(`Agent CLI manifest ${item.id} must allow at least one path`);
+    }
+    if (item.install.maxBytes <= 0 || item.install.maxBytes > 10 * 1024 * 1024) {
+        throw new ValidationError(`Agent CLI manifest ${item.id} has invalid maxBytes`);
+    }
+    for (const [platform, interpreter] of Object.entries(item.install.interpreters)) {
+        assertNoShellString(interpreter.command, `${item.id}.install.interpreters.${platform}.command`);
+        for (const [index, arg] of interpreter.args.entries()) {
+            assertNoShellString(arg, `${item.id}.install.interpreters.${platform}.args.${index}`);
+        }
+    }
+    for (const [index, arg] of item.install.fixedArgs.entries()) {
+        assertNoShellString(arg, `${item.id}.install.fixedArgs.${index}`);
+    }
+    assertNoShellString(item.install.verifyCommand.command, `${item.id}.install.verifyCommand.command`);
+    for (const [index, arg] of item.install.verifyCommand.args.entries()) {
+        assertNoShellString(arg, `${item.id}.install.verifyCommand.args.${index}`);
+    }
+}
+export function validateAgentCliManifest(items) {
+    const seen = new Set();
+    for (const item of items) {
+        if (seen.has(item.id)) {
+            throw new ValidationError(`Duplicate Agent CLI manifest id: ${item.id}`);
+        }
+        seen.add(item.id);
+        validateAgentCliManifestItem(item);
+    }
+}
+//# sourceMappingURL=manifest-validator.js.map

package/dist/services/agent-cli/manifest-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-validator.js","sourceRoot":"","sources":["../../../src/services/agent-cli/manifest-validator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,kBAAkB,GAAG,iCAAiC,CAAC;AAE7D,SAAS,mBAAmB,CAAC,KAAa,EAAE,KAAa;IACvD,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,uDAAuD,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,KAAa;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,eAAe,CAAC,sBAAsB,KAAK,iBAAiB,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CAAC,sBAAsB,KAAK,4BAA4B,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAiC;IAC5E,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO;IAEhD,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC/F,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,eAAe,CAAC,sBAAsB,IAAI,CAAC,EAAE,mCAAmC,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,eAAe,CAAC,sBAAsB,IAAI,CAAC,EAAE,+BAA+B,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QAC3E,MAAM,IAAI,eAAe,CAAC,sBAAsB,IAAI,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAChF,mBAAmB,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE,yBAAyB,QAAQ,UAAU,CAAC,CAAC;QAChG,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,mBAAmB,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,yBAAyB,QAAQ,SAAS,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5D,mBAAmB,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,sBAAsB,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACpG,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACrE,mBAAmB,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,+BAA+B,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAA6C;IACpF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,eAAe,CAAC,oCAAoC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClB,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/services/agent-cli/manifest.d.ts

@@ -0,0 +1,6 @@
+import type { AgentCliInstallManifestItem, AgentCliPlatform, AgentCliToolId } from '@agent-tower/shared';
+export declare const AGENT_CLI_MANIFEST: readonly AgentCliInstallManifestItem[];
+export declare function getAgentCliManifest(): AgentCliInstallManifestItem[];
+export declare function getAgentCliManifestItem(toolId: AgentCliToolId): AgentCliInstallManifestItem | null;
+export declare function getServerAgentCliPlatform(platform?: NodeJS.Platform): AgentCliPlatform | null;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/services/agent-cli/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/services/agent-cli/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,2BAA2B,EAC3B,gBAAgB,EAChB,cAAc,EACf,MAAM,qBAAqB,CAAC;AAkB7B,eAAO,MAAM,kBAAkB,EAAE,SAAS,2BAA2B,EA8H3D,CAAC;AAIX,wBAAgB,mBAAmB,IAAI,2BAA2B,EAAE,CA+BnE;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,cAAc,GAAG,2BAA2B,GAAG,IAAI,CAElG;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,gBAAgB,GAAG,IAAI,CAKzB"}

package/dist/services/agent-cli/manifest.js

@@ -0,0 +1,180 @@
+import { validateAgentCliManifest } from './manifest-validator.js';
+const DEFAULT_COMMAND_TIMEOUT_MS = 5000;
+function command(name, args = ['--version'], versionPattern = String.raw `\d+(?:\.\d+){1,3}`) {
+    return {
+        command: name,
+        args,
+        timeoutMs: DEFAULT_COMMAND_TIMEOUT_MS,
+        versionPattern,
+    };
+}
+export const AGENT_CLI_MANIFEST = [
+    {
+        id: 'codex',
+        displayName: 'Codex',
+        description: 'OpenAI Codex CLI',
+        legacy: false,
+        officialSources: [
+            { label: 'Codex installer', url: 'https://chatgpt.com/codex/install.sh' },
+        ],
+        supportedPlatforms: ['darwin', 'linux'],
+        install: {
+            kind: 'downloaded-script',
+            downloadUrl: 'https://chatgpt.com/codex/install.sh',
+            allowedRedirectHosts: ['chatgpt.com'],
+            allowedExactPaths: ['/codex/install.sh'],
+            allowedPathPrefixes: [],
+            interpreters: {
+                darwin: { command: '/bin/sh', args: [] },
+                linux: { command: '/bin/sh', args: [] },
+            },
+            fixedArgs: [],
+            maxBytes: 1024 * 1024,
+            riskNotes: [
+                '将从 chatgpt.com 下载官方安装脚本并在本机用户环境执行。',
+                '安装器可能修改 PATH、shell profile 或用户目录下的 CLI 配置。',
+            ],
+            verifyCommand: command('codex'),
+        },
+        detectionCommands: [command('codex')],
+        versionCommand: command('codex'),
+        authCommand: {
+            command: 'codex',
+            args: ['login', 'status'],
+            timeoutMs: DEFAULT_COMMAND_TIMEOUT_MS,
+        },
+        lastVerifiedAt: '2026-06-18',
+    },
+    {
+        id: 'claude-code',
+        displayName: 'Claude Code',
+        description: 'Anthropic Claude Code CLI',
+        legacy: false,
+        officialSources: [
+            { label: 'Claude Code installer', url: 'https://claude.ai/install.sh' },
+        ],
+        supportedPlatforms: ['darwin', 'linux'],
+        install: {
+            kind: 'downloaded-script',
+            downloadUrl: 'https://claude.ai/install.sh',
+            allowedRedirectHosts: ['claude.ai'],
+            allowedExactPaths: ['/install.sh'],
+            allowedPathPrefixes: [],
+            interpreters: {
+                darwin: { command: '/bin/bash', args: [] },
+                linux: { command: '/bin/bash', args: [] },
+            },
+            fixedArgs: [],
+            maxBytes: 1024 * 1024,
+            riskNotes: [
+                '将从 claude.ai 下载官方安装脚本并在本机用户环境执行。',
+                '安装器可能修改 PATH、shell profile 或用户目录下的 Claude Code 配置。',
+            ],
+            verifyCommand: command('claude'),
+        },
+        detectionCommands: [command('claude')],
+        versionCommand: command('claude'),
+        authCommand: {
+            command: 'claude',
+            args: ['doctor'],
+            timeoutMs: DEFAULT_COMMAND_TIMEOUT_MS,
+        },
+        lastVerifiedAt: '2026-06-18',
+    },
+    {
+        id: 'cursor-agent',
+        displayName: 'Cursor CLI Agent',
+        description: 'Cursor Agent command line interface',
+        legacy: false,
+        officialSources: [
+            { label: 'Cursor installer', url: 'https://cursor.com/install' },
+        ],
+        supportedPlatforms: ['darwin', 'linux'],
+        install: {
+            kind: 'downloaded-script',
+            downloadUrl: 'https://cursor.com/install',
+            allowedRedirectHosts: ['cursor.com'],
+            allowedExactPaths: ['/install'],
+            allowedPathPrefixes: [],
+            interpreters: {
+                darwin: { command: '/bin/bash', args: [] },
+                linux: { command: '/bin/bash', args: [] },
+            },
+            fixedArgs: [],
+            maxBytes: 1024 * 1024,
+            riskNotes: [
+                '将从 cursor.com 下载官方安装脚本并在本机用户环境执行。',
+                '安装器可能修改 PATH、shell profile 或用户目录下的 Cursor 配置。',
+            ],
+            verifyCommand: command('agent'),
+        },
+        detectionCommands: [command('agent'), command('cursor-agent')],
+        versionCommand: command('agent'),
+        authCommand: {
+            command: 'agent',
+            args: ['--version'],
+            timeoutMs: DEFAULT_COMMAND_TIMEOUT_MS,
+        },
+        lastVerifiedAt: '2026-06-18',
+    },
+    {
+        id: 'gemini-cli',
+        displayName: 'Gemini CLI',
+        description: 'Legacy Gemini CLI detection only',
+        legacy: true,
+        officialSources: [
+            { label: 'Gemini CLI repository', url: 'https://github.com/google-gemini/gemini-cli' },
+        ],
+        supportedPlatforms: ['darwin', 'linux', 'win32'],
+        install: {
+            kind: 'detect-only',
+            reason: 'Gemini CLI 首版只检测已安装状态，不默认新装。',
+        },
+        detectionCommands: [command('gemini')],
+        versionCommand: command('gemini'),
+        lastVerifiedAt: '2026-06-18',
+    },
+];
+validateAgentCliManifest(AGENT_CLI_MANIFEST);
+export function getAgentCliManifest() {
+    return AGENT_CLI_MANIFEST.map((item) => ({
+        ...item,
+        officialSources: item.officialSources.map((source) => ({ ...source })),
+        supportedPlatforms: [...item.supportedPlatforms],
+        detectionCommands: item.detectionCommands.map((spec) => ({
+            ...spec,
+            args: [...spec.args],
+        })),
+        versionCommand: item.versionCommand
+            ? { ...item.versionCommand, args: [...item.versionCommand.args] }
+            : undefined,
+        authCommand: item.authCommand
+            ? { ...item.authCommand, args: [...item.authCommand.args] }
+            : undefined,
+        install: item.install.kind === 'downloaded-script'
+            ? {
+                ...item.install,
+                allowedRedirectHosts: [...item.install.allowedRedirectHosts],
+                allowedExactPaths: [...item.install.allowedExactPaths],
+                allowedPathPrefixes: [...item.install.allowedPathPrefixes],
+                fixedArgs: [...item.install.fixedArgs],
+                riskNotes: [...item.install.riskNotes],
+                interpreters: { ...item.install.interpreters },
+                verifyCommand: {
+                    ...item.install.verifyCommand,
+                    args: [...item.install.verifyCommand.args],
+                },
+            }
+            : { ...item.install },
+    }));
+}
+export function getAgentCliManifestItem(toolId) {
+    return getAgentCliManifest().find((item) => item.id === toolId) ?? null;
+}
+export function getServerAgentCliPlatform(platform = process.platform) {
+    if (platform === 'darwin' || platform === 'linux' || platform === 'win32') {
+        return platform;
+    }
+    return null;
+}
+//# sourceMappingURL=manifest.js.map

package/dist/services/agent-cli/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/services/agent-cli/manifest.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,MAAM,0BAA0B,GAAG,IAAI,CAAC;AAExC,SAAS,OAAO,CACd,IAAY,EACZ,OAAiB,CAAC,WAAW,CAAC,EAC9B,cAAc,GAAG,MAAM,CAAC,GAAG,CAAA,mBAAmB;IAE9C,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,SAAS,EAAE,0BAA0B;QACrC,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAA2C;IACxE;QACE,EAAE,EAAE,OAAO;QACX,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE,KAAK;QACb,eAAe,EAAE;YACf,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,sCAAsC,EAAE;SAC1E;QACD,kBAAkB,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QACvC,OAAO,EAAE;YACP,IAAI,EAAE,mBAAmB;YACzB,WAAW,EAAE,sCAAsC;YACnD,oBAAoB,EAAE,CAAC,aAAa,CAAC;YACrC,iBAAiB,EAAE,CAAC,mBAAmB,CAAC;YACxC,mBAAmB,EAAE,EAAE;YACvB,YAAY,EAAE;gBACZ,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;gBACxC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;aACxC;YACD,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,IAAI,GAAG,IAAI;YACrB,SAAS,EAAE;gBACT,oCAAoC;gBACpC,4CAA4C;aAC7C;YACD,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC;SAChC;QACD,iBAAiB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC;QAChC,WAAW,EAAE;YACX,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;YACzB,SAAS,EAAE,0BAA0B;SACtC;QACD,cAAc,EAAE,YAAY;KAC7B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,2BAA2B;QACxC,MAAM,EAAE,KAAK;QACb,eAAe,EAAE;YACf,EAAE,KAAK,EAAE,uBAAuB,EAAE,GAAG,EAAE,8BAA8B,EAAE;SACxE;QACD,kBAAkB,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QACvC,OAAO,EAAE;YACP,IAAI,EAAE,mBAAmB;YACzB,WAAW,EAAE,8BAA8B;YAC3C,oBAAoB,EAAE,CAAC,WAAW,CAAC;YACnC,iBAAiB,EAAE,CAAC,aAAa,CAAC;YAClC,mBAAmB,EAAE,EAAE;YACvB,YAAY,EAAE;gBACZ,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;gBAC1C,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;aAC1C;YACD,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,IAAI,GAAG,IAAI;YACrB,SAAS,EAAE;gBACT,kCAAkC;gBAClC,oDAAoD;aACrD;YACD,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC;SACjC;QACD,iBAAiB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC;QACjC,WAAW,EAAE;YACX,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,SAAS,EAAE,0BAA0B;SACtC;QACD,cAAc,EAAE,YAAY;KAC7B;IACD;QACE,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,kBAAkB;QAC/B,WAAW,EAAE,qCAAqC;QAClD,MAAM,EAAE,KAAK;QACb,eAAe,EAAE;YACf,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,4BAA4B,EAAE;SACjE;QACD,kBAAkB,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QACvC,OAAO,EAAE;YACP,IAAI,EAAE,mBAAmB;YACzB,WAAW,EAAE,4BAA4B;YACzC,oBAAoB,EAAE,CAAC,YAAY,CAAC;YACpC,iBAAiB,EAAE,CAAC,UAAU,CAAC;YAC/B,mBAAmB,EAAE,EAAE;YACvB,YAAY,EAAE;gBACZ,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;gBAC1C,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;aAC1C;YACD,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,IAAI,GAAG,IAAI;YACrB,SAAS,EAAE;gBACT,mCAAmC;gBACnC,+CAA+C;aAChD;YACD,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC;SAChC;QACD,iBAAiB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QAC9D,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC;QAChC,WAAW,EAAE;YACX,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,SAAS,EAAE,0BAA0B;SACtC;QACD,cAAc,EAAE,YAAY;KAC7B;IACD;QACE,EAAE,EAAE,YAAY;QAChB,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,kCAAkC;QAC/C,MAAM,EAAE,IAAI;QACZ,eAAe,EAAE;YACf,EAAE,KAAK,EAAE,uBAAuB,EAAE,GAAG,EAAE,6CAA6C,EAAE;SACvF;QACD,kBAAkB,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;QAChD,OAAO,EAAE;YACP,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,8BAA8B;SACvC;QACD,iBAAiB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC;QACjC,cAAc,EAAE,YAAY;KAC7B;CACO,CAAC;AAEX,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;AAE7C,MAAM,UAAU,mBAAmB;IACjC,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvC,GAAG,IAAI;QACP,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACtE,kBAAkB,EAAE,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAChD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvD,GAAG,IAAI;YACP,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;SACrB,CAAC,CAAC;QACH,cAAc,EAAE,IAAI,CAAC,cAAc;YACjC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE;YACjE,CAAC,CAAC,SAAS;QACb,WAAW,EAAE,IAAI,CAAC,WAAW;YAC3B,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;YAC3D,CAAC,CAAC,SAAS;QACb,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB;YAChD,CAAC,CAAC;gBACA,GAAG,IAAI,CAAC,OAAO;gBACf,oBAAoB,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC;gBAC5D,iBAAiB,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;gBACtD,mBAAmB,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;gBAC1D,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtC,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtC,YAAY,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE;gBAC9C,aAAa,EAAE;oBACb,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa;oBAC7B,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC;iBAC3C;aACF;YACD,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE;KACxB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAsB;IAC5D,OAAO,mBAAmB,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1E,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/services/agent-cli/security.d.ts

@@ -0,0 +1,28 @@
+import type { AgentCliInstallLogEntry } from '@agent-tower/shared';
+export declare const SENSITIVE_ENV_KEY_PATTERN: RegExp;
+export declare function redactAgentCliLog(data: string): string;
+export declare function buildCleanAgentCliEnv(env?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export declare function parseWhitelistedVersion(output: string, versionPattern?: string): string | null;
+export declare class AgentCliLogRingBuffer {
+    private readonly maxEntries;
+    private readonly maxBytes;
+    private entries;
+    private next;
+    private totalBytes;
+    constructor(maxEntries?: number, maxBytes?: number);
+    push(source: AgentCliInstallLogEntry['source'], data: string): AgentCliInstallLogEntry;
+    pushRedacted(source: AgentCliInstallLogEntry['source'], data: string): AgentCliInstallLogEntry;
+    list(afterSeq?: number): {
+        entries: AgentCliInstallLogEntry[];
+        nextSeq: number;
+        truncated: boolean;
+    };
+    private trim;
+}
+export declare class AgentCliStreamingLogRedactor {
+    private carry;
+    private overflowed;
+    push(data: string): string[];
+    flush(): string[];
+}
+//# sourceMappingURL=security.d.ts.map