agent-tower 0.5.3-beta.7 → 0.5.3-beta.9

package/dist/services/agent-cli/__tests__/manifest-downloader.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=manifest-downloader.test.d.ts.map

package/dist/services/agent-cli/__tests__/manifest-downloader.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-downloader.test.d.ts","sourceRoot":"","sources":["../../../../src/services/agent-cli/__tests__/manifest-downloader.test.ts"],"names":[],"mappings":""}

package/dist/services/agent-cli/__tests__/manifest-downloader.test.js

@@ -0,0 +1,127 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { AgentCliDownloader } from '../downloader.js';
+import { AgentCliEnvironmentService } from '../environment.service.js';
+import { validateAgentCliManifestItem } from '../manifest-validator.js';
+import { getAgentCliManifestItem } from '../manifest.js';
+let tempDir = '';
+const install = {
+    kind: 'downloaded-script',
+    downloadUrl: 'https://example.com/install.sh',
+    allowedRedirectHosts: ['example.com', 'cdn.example.com'],
+    allowedExactPaths: ['/install.sh', '/scripts/install.sh'],
+    allowedPathPrefixes: [],
+    interpreters: {
+        darwin: { command: '/bin/sh', args: [] },
+    },
+    fixedArgs: [],
+    maxBytes: 1024,
+    riskNotes: ['test installer'],
+    verifyCommand: {
+        command: 'tool',
+        args: ['--version'],
+        timeoutMs: 5000,
+    },
+};
+function makeResponse(body, init = {}) {
+    return new Response(body, init);
+}
+describe('Agent CLI manifest validator and downloader', () => {
+    beforeEach(() => {
+        tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'agent-cli-downloader-test-'));
+    });
+    afterEach(() => {
+        fs.rmSync(tempDir, { recursive: true, force: true });
+    });
+    it('rejects manifest shell metacharacters instead of accepting curl pipe strings', () => {
+        const codex = getAgentCliManifestItem('codex');
+        expect(codex).toBeTruthy();
+        const invalid = {
+            ...codex,
+            install: {
+                ...install,
+                fixedArgs: ['| bash'],
+            },
+        };
+        expect(() => validateAgentCliManifestItem(invalid)).toThrow(/shell metacharacters/);
+    });
+    it('returns public manifest items without internal verify commands', () => {
+        const service = new AgentCliEnvironmentService({ platform: 'darwin' });
+        const manifest = service.getManifest();
+        const codex = manifest.find((item) => item.id === 'codex');
+        expect(codex).toBeTruthy();
+        expect(codex?.install.kind).toBe('downloaded-script');
+        expect(codex?.install).toMatchObject({
+            kind: 'downloaded-script',
+            downloadUrl: expect.any(String),
+            allowedRedirectHosts: expect.any(Array),
+            allowedExactPaths: expect.any(Array),
+            allowedPathPrefixes: expect.any(Array),
+            interpreters: expect.any(Object),
+            fixedArgs: expect.any(Array),
+            maxBytes: expect.any(Number),
+            riskNotes: expect.any(Array),
+        });
+        expect(JSON.stringify(manifest)).not.toContain('verifyCommand');
+    });
+    it('downloads through validated HTTPS redirect chain and writes a 0600 temp file', async () => {
+        const fetchCalls = [];
+        const downloader = new AgentCliDownloader({
+            tmpDir: tempDir,
+            fetchImpl: (async (input) => {
+                const url = input.toString();
+                fetchCalls.push(url);
+                if (url === 'https://example.com/install.sh') {
+                    return makeResponse('', {
+                        status: 302,
+                        headers: { location: 'https://cdn.example.com/scripts/install.sh' },
+                    });
+                }
+                return makeResponse('#!/bin/sh\necho ok\n');
+            }),
+        });
+        const preview = await downloader.createPreview('codex', 'darwin', install);
+        expect(fetchCalls).toEqual([
+            'https://example.com/install.sh',
+            'https://cdn.example.com/scripts/install.sh',
+        ]);
+        expect(preview.redirectChain).toHaveLength(2);
+        expect(preview.finalUrl).toBe('https://cdn.example.com/scripts/install.sh');
+        expect(preview.sha256).toMatch(/^[a-f0-9]{64}$/);
+        expect(fs.existsSync(preview.tempFilePath)).toBe(true);
+        expect((fs.statSync(preview.tempFilePath).mode & 0o777)).toBe(0o600);
+    });
+    it('rejects redirects to non-allowlisted hosts', async () => {
+        const downloader = new AgentCliDownloader({
+            tmpDir: tempDir,
+            fetchImpl: (async () => makeResponse('', {
+                status: 302,
+                headers: { location: 'https://evil.example/install.sh' },
+            })),
+        });
+        await expect(downloader.createPreview('codex', 'darwin', install))
+            .rejects.toThrow(/host is not allowlisted/);
+    });
+    it('rejects redirects with userinfo', async () => {
+        const downloader = new AgentCliDownloader({
+            tmpDir: tempDir,
+            fetchImpl: (async () => makeResponse('', {
+                status: 302,
+                headers: { location: 'https://user:pass@example.com/install.sh' },
+            })),
+        });
+        await expect(downloader.createPreview('codex', 'darwin', install))
+            .rejects.toThrow(/userinfo/);
+    });
+    it('rejects scripts above the configured size limit', async () => {
+        const downloader = new AgentCliDownloader({
+            tmpDir: tempDir,
+            fetchImpl: (async () => makeResponse('x'.repeat(1025))),
+        });
+        await expect(downloader.createPreview('codex', 'darwin', install))
+            .rejects.toThrow(/size limit/);
+    });
+});
+//# sourceMappingURL=manifest-downloader.test.js.map

package/dist/services/agent-cli/__tests__/manifest-downloader.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-downloader.test.js","sourceRoot":"","sources":["../../../../src/services/agent-cli/__tests__/manifest-downloader.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,IAAI,OAAO,GAAG,EAAE,CAAC;AAEjB,MAAM,OAAO,GAAoC;IAC/C,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,gCAAgC;IAC7C,oBAAoB,EAAE,CAAC,aAAa,EAAE,iBAAiB,CAAC;IACxD,iBAAiB,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC;IACzD,mBAAmB,EAAE,EAAE;IACvB,YAAY,EAAE;QACZ,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;KACzC;IACD,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,CAAC,gBAAgB,CAAC;IAC7B,aAAa,EAAE;QACb,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,WAAW,CAAC;QACnB,SAAS,EAAE,IAAI;KAChB;CACF,CAAC;AAEF,SAAS,YAAY,CAAC,IAAY,EAAE,OAAqB,EAAE;IACzD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG;YACd,GAAG,KAAM;YACT,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,SAAS,EAAE,CAAC,QAAQ,CAAC;aACtB;SACF,CAAC;QAEF,MAAM,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,OAAO,GAAG,IAAI,0BAA0B,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QAE3D,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC;YACnC,IAAI,EAAE,mBAAmB;YACzB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAC/B,oBAAoB,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YACvC,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YACpC,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YACtC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAChC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAC5B,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAC5B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,kBAAkB,CAAC;YACxC,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,CAAC,KAAK,EAAE,KAAwB,EAAE,EAAE;gBAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC7B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrB,IAAI,GAAG,KAAK,gCAAgC,EAAE,CAAC;oBAC7C,OAAO,YAAY,CAAC,EAAE,EAAE;wBACtB,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE,QAAQ,EAAE,4CAA4C,EAAE;qBACpE,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,YAAY,CAAC,sBAAsB,CAAC,CAAC;YAC9C,CAAC,CAAiB;SACnB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAE3E,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC;YACzB,gCAAgC;YAChC,4CAA4C;SAC7C,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC5E,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,UAAU,GAAG,IAAI,kBAAkB,CAAC;YACxC,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE;gBACvC,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,QAAQ,EAAE,iCAAiC,EAAE;aACzD,CAAC,CAAiB;SACpB,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;aAC/D,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,UAAU,GAAG,IAAI,kBAAkB,CAAC;YACxC,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE;gBACvC,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,QAAQ,EAAE,0CAA0C,EAAE;aAClE,CAAC,CAAiB;SACpB,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;aAC/D,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,UAAU,GAAG,IAAI,kBAAkB,CAAC;YACxC,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAiB;SACxE,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;aAC/D,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/agent-cli/detection.d.ts

@@ -0,0 +1,27 @@
+import type { AgentCliCommandSpec, AgentCliEnvironmentStatus, AgentCliInstallManifestItem, AgentCliPlatform } from '@agent-tower/shared';
+export interface AgentCliExecFileResult {
+    stdout: string;
+    stderr: string;
+}
+export type AgentCliExecFile = (command: string, args: string[], options: {
+    timeout: number;
+    maxBuffer: number;
+    env: NodeJS.ProcessEnv;
+    shell: false;
+    windowsHide: true;
+    encoding: 'utf8';
+}) => Promise<AgentCliExecFileResult>;
+export declare class AgentCliDetector {
+    private readonly execFileImpl;
+    private readonly platform;
+    private cache;
+    constructor(execFileImpl: AgentCliExecFile | undefined, platform: AgentCliPlatform | null);
+    getCachedStatus(manifest: AgentCliInstallManifestItem[]): AgentCliEnvironmentStatus;
+    refresh(manifest: AgentCliInstallManifestItem[]): Promise<AgentCliEnvironmentStatus>;
+    runCommand(spec: AgentCliCommandSpec): Promise<AgentCliExecFileResult>;
+    private detectTool;
+    private findSuccessfulCommand;
+    private readVersion;
+    private readAuthStatus;
+}
+//# sourceMappingURL=detection.d.ts.map

package/dist/services/agent-cli/detection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detection.d.ts","sourceRoot":"","sources":["../../../src/services/agent-cli/detection.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,EAC3B,gBAAgB,EAEjB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,MAAM,gBAAgB,GAAG,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE;IACP,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,WAAW,EAAE,IAAI,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;CACjB,KACE,OAAO,CAAC,sBAAsB,CAAC,CAAC;AA6BrC,qBAAa,gBAAgB;IAIzB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAJ3B,OAAO,CAAC,KAAK,CAA0C;gBAGpC,YAAY,EAAE,gBAAgB,YAAkB,EAChD,QAAQ,EAAE,gBAAgB,GAAG,IAAI;IAGpD,eAAe,CAAC,QAAQ,EAAE,2BAA2B,EAAE,GAAG,yBAAyB;IAiB7E,OAAO,CAAC,QAAQ,EAAE,2BAA2B,EAAE,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAgBpF,UAAU,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC;YAW9D,UAAU;YAiDV,qBAAqB;YAkBrB,WAAW;YASX,cAAc;CAQ7B"}

package/dist/services/agent-cli/detection.js

@@ -0,0 +1,144 @@
+import { execFile } from 'node:child_process';
+import { buildCleanAgentCliEnv, parseWhitelistedVersion } from './security.js';
+const DEFAULT_MAX_BUFFER = 256 * 1024;
+function defaultExecFile(command, args, options) {
+    return new Promise((resolve, reject) => {
+        execFile(command, args, options, (error, stdout, stderr) => {
+            if (error) {
+                reject(error);
+                return;
+            }
+            resolve({ stdout: String(stdout ?? ''), stderr: String(stderr ?? '') });
+        });
+    });
+}
+function isCommandMissing(error) {
+    return !!(error
+        && typeof error === 'object'
+        && 'code' in error
+        && error.code === 'ENOENT');
+}
+export class AgentCliDetector {
+    execFileImpl;
+    platform;
+    cache = null;
+    constructor(execFileImpl = defaultExecFile, platform) {
+        this.execFileImpl = execFileImpl;
+        this.platform = platform;
+    }
+    getCachedStatus(manifest) {
+        if (this.cache)
+            return this.cache;
+        return {
+            tools: manifest.map((item) => ({
+                toolId: item.id,
+                installStatus: 'unknown',
+                versionStatus: 'unknown',
+                version: null,
+                authStatus: 'unknown',
+                checkedAt: null,
+                stale: true,
+            })),
+            checkedAt: null,
+            stale: true,
+        };
+    }
+    async refresh(manifest) {
+        const checkedAt = new Date().toISOString();
+        const tools = [];
+        for (const item of manifest) {
+            tools.push(await this.detectTool(item, checkedAt));
+        }
+        this.cache = {
+            tools,
+            checkedAt,
+            stale: false,
+        };
+        return this.cache;
+    }
+    async runCommand(spec) {
+        return this.execFileImpl(spec.command, [...spec.args], {
+            timeout: spec.timeoutMs,
+            maxBuffer: DEFAULT_MAX_BUFFER,
+            env: buildCleanAgentCliEnv(),
+            shell: false,
+            windowsHide: true,
+            encoding: 'utf8',
+        });
+    }
+    async detectTool(item, checkedAt) {
+        if (!this.platform || !item.supportedPlatforms.includes(this.platform)) {
+            return {
+                toolId: item.id,
+                installStatus: 'unsupported',
+                versionStatus: 'unavailable',
+                version: null,
+                authStatus: 'unknown',
+                checkedAt,
+                stale: false,
+            };
+        }
+        const detection = await this.findSuccessfulCommand(item.detectionCommands);
+        if (!detection.success) {
+            return {
+                toolId: item.id,
+                installStatus: 'missing',
+                versionStatus: 'unavailable',
+                version: null,
+                authStatus: 'unknown',
+                checkedAt,
+                stale: false,
+                errorCode: detection.errorCode,
+            };
+        }
+        const version = item.versionCommand
+            ? await this.readVersion(item.versionCommand)
+            : parseWhitelistedVersion(`${detection.result.stdout}\n${detection.result.stderr}`);
+        const authStatus = item.authCommand
+            ? await this.readAuthStatus(item.authCommand)
+            : 'unknown';
+        return {
+            toolId: item.id,
+            installStatus: item.legacy ? 'legacy_detected' : 'installed',
+            versionStatus: version ? 'detected' : 'unknown',
+            version,
+            authStatus,
+            checkedAt,
+            stale: false,
+        };
+    }
+    async findSuccessfulCommand(specs) {
+        let nonMissingFailure = false;
+        for (const spec of specs) {
+            try {
+                const result = await this.runCommand(spec);
+                return { success: true, result };
+            }
+            catch (error) {
+                if (!isCommandMissing(error)) {
+                    nonMissingFailure = true;
+                }
+            }
+        }
+        return { success: false, errorCode: nonMissingFailure ? 'DETECTION_FAILED' : undefined };
+    }
+    async readVersion(spec) {
+        try {
+            const result = await this.runCommand(spec);
+            return parseWhitelistedVersion(`${result.stdout}\n${result.stderr}`, spec.versionPattern);
+        }
+        catch {
+            return null;
+        }
+    }
+    async readAuthStatus(spec) {
+        try {
+            await this.runCommand(spec);
+            return 'detected';
+        }
+        catch (error) {
+            return isCommandMissing(error) ? 'unknown' : 'needs_interactive_login';
+        }
+    }
+}
+//# sourceMappingURL=detection.js.map

package/dist/services/agent-cli/detection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detection.js","sourceRoot":"","sources":["../../../src/services/agent-cli/detection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAQ9C,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAoB/E,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC;AAEtC,SAAS,eAAe,CACtB,OAAe,EACf,IAAc,EACd,OAAwC;IAExC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACzD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CAAC,CAAC,CACP,KAAK;WACF,OAAO,KAAK,KAAK,QAAQ;WACzB,MAAM,IAAI,KAAK;WACd,KAA4B,CAAC,IAAI,KAAK,QAAQ,CACnD,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAgB;IAIR;IACA;IAJX,KAAK,GAAqC,IAAI,CAAC;IAEvD,YACmB,eAAiC,eAAe,EAChD,QAAiC;QADjC,iBAAY,GAAZ,YAAY,CAAoC;QAChD,aAAQ,GAAR,QAAQ,CAAyB;IACjD,CAAC;IAEJ,eAAe,CAAC,QAAuC;QACrD,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC7B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,aAAa,EAAE,SAAS;gBACxB,aAAa,EAAE,SAAS;gBACxB,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;YACH,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAuC;QACnD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAyB,EAAE,CAAC;QAEvC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,KAAK,GAAG;YACX,KAAK;YACL,SAAS;YACT,KAAK,EAAE,KAAK;SACb,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAyB;QACxC,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE;YACrD,OAAO,EAAE,IAAI,CAAC,SAAS;YACvB,SAAS,EAAE,kBAAkB;YAC7B,GAAG,EAAE,qBAAqB,EAAE;YAC5B,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,IAAiC,EACjC,SAAiB;QAEjB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvE,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,aAAa,EAAE,aAAa;gBAC5B,aAAa,EAAE,aAAa;gBAC5B,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,SAAS;gBACrB,SAAS;gBACT,KAAK,EAAE,KAAK;aACb,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,aAAa,EAAE,SAAS;gBACxB,aAAa,EAAE,aAAa;gBAC5B,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,SAAS;gBACrB,SAAS;gBACT,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,SAAS,CAAC,SAAS;aAC/B,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc;YACjC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC;YAC7C,CAAC,CAAC,uBAAuB,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAEtF,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW;YACjC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW;YAC5D,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YAC/C,OAAO;YACP,UAAU;YACV,SAAS;YACT,KAAK,EAAE,KAAK;SACb,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,KAA4B;QAI9D,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC7B,iBAAiB,GAAG,IAAI,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC3F,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAyB;QACjD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO,uBAAuB,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAAyB;QACpD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC;QACzE,CAAC;IACH,CAAC;CACF"}

package/dist/services/agent-cli/downloader.d.ts

@@ -0,0 +1,24 @@
+import type { AgentCliCommandSpec, AgentCliDownloadedScriptInstall, AgentCliInstallPreview, AgentCliPlatform, AgentCliToolId } from '@agent-tower/shared';
+export interface AgentCliStoredPreview extends AgentCliInstallPreview {
+    tempFilePath: string;
+    verifyCommand: AgentCliCommandSpec;
+}
+export interface AgentCliDownloadOptions {
+    fetchImpl?: typeof fetch;
+    tmpDir?: string;
+    now?: () => Date;
+    ttlMs?: number;
+    maxRedirects?: number;
+}
+export declare class AgentCliDownloader {
+    private readonly fetchImpl;
+    private readonly tmpDir;
+    private readonly now;
+    private readonly ttlMs;
+    private readonly maxRedirects;
+    constructor(options?: AgentCliDownloadOptions);
+    createPreview(toolId: AgentCliToolId, platform: AgentCliPlatform, install: AgentCliDownloadedScriptInstall): Promise<AgentCliStoredPreview>;
+}
+export declare function removePreviewFile(tempFilePath: string): Promise<void>;
+export declare function toPublicPreview(preview: AgentCliStoredPreview): AgentCliInstallPreview;
+//# sourceMappingURL=downloader.d.ts.map

package/dist/services/agent-cli/downloader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"downloader.d.ts","sourceRoot":"","sources":["../../../src/services/agent-cli/downloader.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,mBAAmB,EACnB,+BAA+B,EAC/B,sBAAsB,EACtB,gBAAgB,EAEhB,cAAc,EACf,MAAM,qBAAqB,CAAC;AAG7B,MAAM,WAAW,qBAAsB,SAAQ,sBAAsB;IACnE,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,mBAAmB,CAAA;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAmED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,OAAO,GAAE,uBAA4B;IAQ3C,aAAa,CACjB,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,qBAAqB,CAAC;CA+ElC;AAED,wBAAsB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3E;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,qBAAqB,GAAG,sBAAsB,CAOtF"}

package/dist/services/agent-cli/downloader.js

@@ -0,0 +1,152 @@
+import { createHash, randomUUID } from 'node:crypto';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { ValidationError } from '../../errors.js';
+const DEFAULT_PREVIEW_TTL_MS = 10 * 60 * 1000;
+const DEFAULT_MAX_REDIRECTS = 3;
+function normalizeHost(host) {
+    return host.toLowerCase();
+}
+function assertAllowedUrl(url, install) {
+    if (url.protocol !== 'https:') {
+        throw new ValidationError('Installer download URL must use HTTPS');
+    }
+    if (url.username || url.password) {
+        throw new ValidationError('Installer download URL must not include userinfo');
+    }
+    const allowedHosts = new Set(install.allowedRedirectHosts.map(normalizeHost));
+    if (!allowedHosts.has(normalizeHost(url.hostname))) {
+        throw new ValidationError(`Installer download host is not allowlisted: ${url.hostname}`);
+    }
+    const exact = install.allowedExactPaths.includes(url.pathname);
+    const prefixed = install.allowedPathPrefixes.some((prefix) => (prefix !== '' && url.pathname.startsWith(prefix)));
+    if (!exact && !prefixed) {
+        throw new ValidationError(`Installer download path is not allowlisted: ${url.pathname}`);
+    }
+}
+async function readLimitedBody(response, maxBytes) {
+    const contentLength = response.headers.get('content-length');
+    if (contentLength && Number(contentLength) > maxBytes) {
+        throw new ValidationError('Installer script exceeds configured size limit');
+    }
+    const chunks = [];
+    let total = 0;
+    if (!response.body) {
+        const buffer = Buffer.from(await response.arrayBuffer());
+        if (buffer.byteLength > maxBytes) {
+            throw new ValidationError('Installer script exceeds configured size limit');
+        }
+        return buffer;
+    }
+    const reader = response.body.getReader();
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            const chunk = Buffer.from(value);
+            total += chunk.byteLength;
+            if (total > maxBytes) {
+                throw new ValidationError('Installer script exceeds configured size limit');
+            }
+            chunks.push(chunk);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    return Buffer.concat(chunks, total);
+}
+export class AgentCliDownloader {
+    fetchImpl;
+    tmpDir;
+    now;
+    ttlMs;
+    maxRedirects;
+    constructor(options = {}) {
+        this.fetchImpl = options.fetchImpl ?? fetch;
+        this.tmpDir = options.tmpDir ?? os.tmpdir();
+        this.now = options.now ?? (() => new Date());
+        this.ttlMs = options.ttlMs ?? DEFAULT_PREVIEW_TTL_MS;
+        this.maxRedirects = options.maxRedirects ?? DEFAULT_MAX_REDIRECTS;
+    }
+    async createPreview(toolId, platform, install) {
+        let current = new URL(install.downloadUrl);
+        const redirectChain = [];
+        let response = null;
+        for (let index = 0; index <= this.maxRedirects; index += 1) {
+            assertAllowedUrl(current, install);
+            response = await this.fetchImpl(current, {
+                method: 'GET',
+                redirect: 'manual',
+            });
+            redirectChain.push({
+                url: current.toString(),
+                host: current.hostname,
+                path: current.pathname,
+                statusCode: response.status,
+            });
+            if (response.status >= 300 && response.status < 400) {
+                const location = response.headers.get('location');
+                if (!location) {
+                    throw new ValidationError('Installer redirect missing location header');
+                }
+                current = new URL(location, current);
+                if (index === this.maxRedirects) {
+                    throw new ValidationError('Installer download exceeded redirect limit');
+                }
+                continue;
+            }
+            break;
+        }
+        if (!response || !response.ok) {
+            throw new ValidationError(`Installer download failed with status ${response?.status ?? 'unknown'}`);
+        }
+        assertAllowedUrl(current, install);
+        const script = await readLimitedBody(response, install.maxBytes);
+        const sha256 = createHash('sha256').update(script).digest('hex');
+        const tempDir = await fs.promises.mkdtemp(path.join(this.tmpDir, 'agent-tower-agent-cli-'));
+        const tempFilePath = path.join(tempDir, `${toolId}-${randomUUID()}.sh`);
+        await fs.promises.writeFile(tempFilePath, script, { mode: 0o600 });
+        await fs.promises.chmod(tempFilePath, 0o600);
+        const now = this.now();
+        const expiresAt = new Date(now.getTime() + this.ttlMs);
+        const interpreter = install.interpreters[platform];
+        if (!interpreter) {
+            await removePreviewFile(tempFilePath);
+            throw new ValidationError(`Installer is unsupported on platform: ${platform}`);
+        }
+        return {
+            id: `agent-cli-preview-${randomUUID()}`,
+            toolId,
+            platform,
+            status: 'ready',
+            finalUrl: current.toString(),
+            redirectChain,
+            sizeBytes: script.byteLength,
+            sha256,
+            interpreter: {
+                command: interpreter.command,
+                args: [...interpreter.args],
+            },
+            fixedArgs: [...install.fixedArgs],
+            riskNotes: [...install.riskNotes],
+            createdAt: now.toISOString(),
+            expiresAt: expiresAt.toISOString(),
+            tempFilePath,
+            verifyCommand: {
+                ...install.verifyCommand,
+                args: [...install.verifyCommand.args],
+            },
+        };
+    }
+}
+export async function removePreviewFile(tempFilePath) {
+    await fs.promises.rm(path.dirname(tempFilePath), { recursive: true, force: true });
+}
+export function toPublicPreview(preview) {
+    const { tempFilePath: _tempFilePath, verifyCommand: _verifyCommand, ...publicPreview } = preview;
+    return publicPreview;
+}
+//# sourceMappingURL=downloader.js.map

package/dist/services/agent-cli/downloader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"downloader.js","sourceRoot":"","sources":["../../../src/services/agent-cli/downloader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAS7B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAelD,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9C,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAQ,EAAE,OAAwC;IAC1E,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,eAAe,CAAC,uCAAuC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CAAC,kDAAkD,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,eAAe,CAAC,+CAA+C,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAC5D,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CACjD,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CAAC,+CAA+C,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB,EAAE,QAAgB;IACjE,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7D,IAAI,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,OAAO,kBAAkB;IACZ,SAAS,CAAe;IACxB,MAAM,CAAS;IACf,GAAG,CAAa;IAChB,KAAK,CAAS;IACd,YAAY,CAAS;IAEtC,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAAC;QACrD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,MAAsB,EACtB,QAA0B,EAC1B,OAAwC;QAExC,IAAI,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,aAAa,GAA2B,EAAE,CAAC;QACjD,IAAI,QAAQ,GAAoB,IAAI,CAAC;QAErC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3D,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnC,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;gBACvC,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;YAEH,aAAa,CAAC,IAAI,CAAC;gBACjB,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE;gBACvB,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,UAAU,EAAE,QAAQ,CAAC,MAAM;aAC5B,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,eAAe,CAAC,4CAA4C,CAAC,CAAC;gBAC1E,CAAC;gBACD,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACrC,IAAI,KAAK,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;oBAChC,MAAM,IAAI,eAAe,CAAC,4CAA4C,CAAC,CAAC;gBAC1E,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM;QACR,CAAC;QAED,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,eAAe,CAAC,yCAAyC,QAAQ,EAAE,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACtG,CAAC;QAED,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAC5F,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,IAAI,UAAU,EAAE,KAAK,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAE7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAC;YACtC,MAAM,IAAI,eAAe,CAAC,yCAAyC,QAAQ,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,OAAO;YACL,EAAE,EAAE,qBAAqB,UAAU,EAAE,EAAE;YACvC,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;YAC5B,aAAa;YACb,SAAS,EAAE,MAAM,CAAC,UAAU;YAC5B,MAAM;YACN,WAAW,EAAE;gBACX,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;aAC5B;YACD,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;YACjC,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;YACjC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;YAC5B,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,YAAY;YACZ,aAAa,EAAE;gBACb,GAAG,OAAO,CAAC,aAAa;gBACxB,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC;aACtC;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,YAAoB;IAC1D,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAA8B;IAC5D,MAAM,EACJ,YAAY,EAAE,aAAa,EAC3B,aAAa,EAAE,cAAc,EAC7B,GAAG,aAAa,EACjB,GAAG,OAAO,CAAC;IACZ,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/dist/services/agent-cli/environment.service.d.ts

@@ -0,0 +1,35 @@
+import type { AgentCliCreateInstallTaskResponse, AgentCliEnvironmentStatus, AgentCliInstallLogResponse, AgentCliInstallPreview, AgentCliInstallTask, AgentCliPublicInstallManifestItem, AgentCliToolId } from '@agent-tower/shared';
+import { AgentCliDetector, type AgentCliExecFile } from './detection.js';
+import { AgentCliDownloader, type AgentCliDownloadOptions } from './downloader.js';
+import { AgentCliInstallTaskManager, type AgentCliRunner } from './task-manager.js';
+export interface AgentCliEnvironmentServiceOptions {
+    downloader?: AgentCliDownloader;
+    downloaderOptions?: AgentCliDownloadOptions;
+    detector?: AgentCliDetector;
+    execFileImpl?: AgentCliExecFile;
+    taskManager?: AgentCliInstallTaskManager;
+    runner?: AgentCliRunner;
+    platform?: NodeJS.Platform;
+    now?: () => Date;
+}
+export declare class AgentCliEnvironmentService {
+    private readonly manifest;
+    private readonly downloader;
+    private readonly detector;
+    private readonly taskManager;
+    private readonly previews;
+    private readonly platform;
+    private readonly now;
+    constructor(options?: AgentCliEnvironmentServiceOptions);
+    getManifest(): AgentCliPublicInstallManifestItem[];
+    getStatus(): AgentCliEnvironmentStatus;
+    refreshStatus(): Promise<AgentCliEnvironmentStatus>;
+    createPreview(toolId: AgentCliToolId): Promise<AgentCliInstallPreview>;
+    getPreview(previewId: string): Promise<AgentCliInstallPreview>;
+    createTask(previewId: string): Promise<AgentCliCreateInstallTaskResponse>;
+    getTask(taskId: string): AgentCliInstallTask;
+    getLogs(taskId: string, afterSeq?: number): AgentCliInstallLogResponse;
+    cancelTask(taskId: string): AgentCliInstallTask;
+    cleanupExpiredPreviews(): Promise<void>;
+}
+//# sourceMappingURL=environment.service.d.ts.map

package/dist/services/agent-cli/environment.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.service.d.ts","sourceRoot":"","sources":["../../../src/services/agent-cli/environment.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iCAAiC,EACjC,yBAAyB,EACzB,0BAA0B,EAE1B,sBAAsB,EACtB,mBAAmB,EACnB,iCAAiC,EACjC,cAAc,EACf,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EACL,kBAAkB,EAClB,KAAK,uBAAuB,EAI7B,MAAM,iBAAiB,CAAC;AAMzB,OAAO,EAAE,0BAA0B,EAAE,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEpF,MAAM,WAAW,iCAAiC;IAChD,UAAU,CAAC,EAAE,kBAAkB,CAAA;IAC/B,iBAAiB,CAAC,EAAE,uBAAuB,CAAA;IAC3C,QAAQ,CAAC,EAAE,gBAAgB,CAAA;IAC3B,YAAY,CAAC,EAAE,gBAAgB,CAAA;IAC/B,WAAW,CAAC,EAAE,0BAA0B,CAAA;IACxC,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;IAC1B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CACjB;AAoDD,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgC;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmB;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IACrE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAET,OAAO,GAAE,iCAAsC;IAS3D,WAAW,IAAI,iCAAiC,EAAE;IAIlD,SAAS,IAAI,yBAAyB;IAItC,aAAa,IAAI,OAAO,CAAC,yBAAyB,CAAC;IAI7C,aAAa,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAgBtE,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAO9D,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iCAAiC,CAAC;IAgB/E,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB;IAI5C,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,SAAI,GAAG,0BAA0B;IAIjE,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB;IAIzC,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;CAY9C"}