aigent-hive 0.8.0-test.1 → 0.9.0-test

package/README.md

@@ -1,3 +1,3 @@
 # aigent-hive
 
-Aigent Hive 0.8.0 test package 0.8.0-test.1. Install the test CLI with `npm install -g aigent-hive@test`.
+Aigent Hive 0.9.0 package 0.9.0-test. Install the CLI with `npm install -g aigent-hive`.

package/install.cmd

@@ -1,6 +1,6 @@
 @echo off
 setlocal EnableExtensions DisableDelayedExpansion
-set "HIVE_INSTALL_PACKAGE_VERSION=0.8.0-test.1"
+set "HIVE_INSTALL_PACKAGE_VERSION=0.9.0-test"
 set "HIVE_INSTALL_URL=https://unpkg.com/aigent-hive@%HIVE_INSTALL_PACKAGE_VERSION%/install.ps1"
 set "HIVE_INSTALL_SCRIPT=%TEMP%\aigent-hive-install-%RANDOM%-%RANDOM%.ps1"
 

package/install.ps1

@@ -1,14 +1,14 @@
 param(
     [ValidatePattern('^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$')]
-    [string]$Version = "0.8.0",
-    [ValidatePattern('^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)-test\.[1-9][0-9]*$')]
-    [string]$PackageVersion = "0.8.0-test.1",
+    [string]$Version = "0.9.0",
+    [ValidatePattern('^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(-test(\.[1-9][0-9]*)?)?$')]
+    [string]$PackageVersion = "0.9.0-test",
     [string]$Prefix = "$env:LOCALAPPDATA\AigentHive"
 )
 
 $ErrorActionPreference = "Stop"
 $AuthorizedSignerThumbprint = ""
-$ExpectedArchiveSha256 = "219df7bf4c45be7a03b583755b6f063c07e4db953248c73776af1d33b488327e"
+$ExpectedArchiveSha256 = "704636aa62ec28c44e2dd9ed2799b5c4187645e589f3954c8a14dc5825b94d4e"
 if ($AuthorizedSignerThumbprint -like "__AIGENT_HIVE_*") {
     $AuthorizedSignerThumbprint = ""
 }
@@ -24,6 +24,12 @@ if ($ExpectedArchiveSha256 -notmatch '^[0-9a-f]{64}$') {
 if (-not [Environment]::Is64BitOperatingSystem) {
     throw "Aigent Hive supports Windows x86_64 only"
 }
+if (
+    $PackageVersion -ne $Version -and
+    $PackageVersion -notmatch ('^' + [regex]::Escape($Version) + '-test(\.[1-9][0-9]*)?$')
+) {
+    throw "PackageVersion must equal Version or use Version-test[.N]"
+}
 
 function Test-HiveVersionOutput {
     param(
@@ -39,6 +45,33 @@ function Test-HiveVersionOutput {
     )
 }
 
+function Get-FileSha256 {
+    param(
+        [Parameter(Mandatory = $true)]
+        [string]$Path
+    )
+
+    $stream = [IO.File]::Open(
+        $Path,
+        [IO.FileMode]::Open,
+        [IO.FileAccess]::Read,
+        [IO.FileShare]::Read
+    )
+    try {
+        $algorithm = [Security.Cryptography.SHA256]::Create()
+        try {
+            $digest = $algorithm.ComputeHash($stream)
+        }
+        finally {
+            $algorithm.Dispose()
+        }
+    }
+    finally {
+        $stream.Dispose()
+    }
+    return [BitConverter]::ToString($digest).Replace("-", "").ToLowerInvariant()
+}
+
 function Assert-SafeDirectoryChain {
     param(
         [Parameter(Mandatory = $true)]
@@ -105,8 +138,11 @@ function Get-ValidatedDirectReceipt {
         $receipt.owner -ne "direct" -or
         $receipt.product -ne "aigent-hive" -or
         $receipt.version -notmatch '^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$' -or
-        $receipt.package_version -notmatch (
-            '^' + [regex]::Escape($receipt.version) + '-test\.[1-9][0-9]*$'
+        (
+            $receipt.package_version -ne $receipt.version -and
+            $receipt.package_version -notmatch (
+                '^' + [regex]::Escape($receipt.version) + '-test(\.[1-9][0-9]*)?$'
+            )
         ) -or
         $receipt.artifact_sha256 -notmatch '^sha256:[0-9a-f]{64}$'
     ) {
@@ -140,7 +176,7 @@ function Assert-ExistingDirectInstall {
         throw "existing hive binary is not owned by the direct installer"
     }
     $priorReceipt = Get-ValidatedDirectReceipt -ReceiptPath $ReceiptPath
-    $priorDigest = (Get-FileHash -LiteralPath $Destination -Algorithm SHA256).Hash.ToLowerInvariant()
+    $priorDigest = Get-FileSha256 -Path $Destination
     if (
         $priorReceipt.artifact_sha256 -ne "sha256:$priorDigest"
     ) {
@@ -227,9 +263,7 @@ function Repair-PendingDirectInstall {
         -not $destinationItem.PSIsContainer -and
         -not ($destinationItem.Attributes -band [IO.FileAttributes]::ReparsePoint)
     ) {
-        $destinationDigest = (
-            Get-FileHash -LiteralPath $Destination -Algorithm SHA256
-        ).Hash.ToLowerInvariant()
+        $destinationDigest = Get-FileSha256 -Path $Destination
         if ($pendingReceipt.artifact_sha256 -eq "sha256:$destinationDigest") {
             if ($null -ne $receiptItem) {
                 Get-ValidatedDirectReceipt -ReceiptPath $ReceiptPath | Out-Null
@@ -249,9 +283,7 @@ function Repair-PendingDirectInstall {
             -not $destinationItem.PSIsContainer -and
             -not ($destinationItem.Attributes -band [IO.FileAttributes]::ReparsePoint)
         ) {
-            $destinationDigest = (
-                Get-FileHash -LiteralPath $Destination -Algorithm SHA256
-            ).Hash.ToLowerInvariant()
+            $destinationDigest = Get-FileSha256 -Path $Destination
             if ($priorReceipt.artifact_sha256 -eq "sha256:$destinationDigest") {
                 Assert-SafeDirectoryChain -Path $destinationDirectory
                 Assert-SafeDirectoryChain -Path $receiptDirectory
@@ -298,7 +330,7 @@ $stagedReceipt = $null
 try {
     $archivePath = Join-Path $work $archive
     Invoke-WebRequest -UseBasicParsing -Uri "$base/$archive" -OutFile $archivePath
-    $actual = (Get-FileHash -LiteralPath $archivePath -Algorithm SHA256).Hash.ToLowerInvariant()
+    $actual = Get-FileSha256 -Path $archivePath
     if ($ExpectedArchiveSha256 -ne $actual) {
         throw "release archive SHA-256 verification failed"
     }
@@ -368,7 +400,7 @@ try {
     Assert-SafeDirectoryChain -Path $binDirectory
     Assert-SafeDirectoryChain -Path $shareDirectory
     [IO.File]::Copy($binary, $stagedBinary, $false)
-    $binaryDigest = (Get-FileHash -LiteralPath $binary -Algorithm SHA256).Hash.ToLowerInvariant()
+    $binaryDigest = Get-FileSha256 -Path $binary
     $receiptJson = @{
         schema_version = 1
         owner = "direct"

package/install.sh

@@ -1,16 +1,16 @@
 #!/bin/sh
 set -eu
 
-embedded_product_version='0.8.0'
-embedded_package_version='0.8.0-test.1'
+embedded_product_version='0.9.0'
+embedded_package_version='0.9.0-test'
 version=${AIGENT_HIVE_VERSION:-$embedded_product_version}
 package_version=${AIGENT_HIVE_PACKAGE_VERSION:-$embedded_package_version}
 prefix=${AIGENT_HIVE_PREFIX:-"${HOME:?HOME is required}/.local"}
 authorized_team_id=''
-sha_aarch64_apple_darwin='c07efa67c0423cb091fd01a7f33da5c0a567c400b39182858c1528de40aaa32e'
-sha_x86_64_apple_darwin='cc0398823a5fecdf3b660e02d5254f1e1c662d31ec2dcb67ea122d51af24539e'
-sha_aarch64_linux_musl='407ea1b99c48489226db28df1fc266c7f2d541dfb4df63e82814b8770b897fa7'
-sha_x86_64_linux_musl='85d91d38b9e8ac55df89ede59d962e13bae1a2effe11125eb73e97b670e7cc25'
+sha_aarch64_apple_darwin='8c9bdd5f24075564c9b7b6f6e4ba20381753fa6959d608867a8a8029bdfbaa36'
+sha_x86_64_apple_darwin='5cc69947abd97da375b939a03777fa7850a78fcbaccccebef422712b2d5cd3a2'
+sha_aarch64_linux_musl='ba0ce4c98ebe84177ec07524aab0eba399e32680ffe552009eeff2fe732bb5e6'
+sha_x86_64_linux_musl='fa9db846fc5f1b59e1e11e30f8888152eaed733e6f3fd23b73b97adc6373d46a'
 
 if ! printf '%s\n' "$version" | awk -F. '
   NF != 3 { exit 1 }
@@ -26,15 +26,17 @@ if ! printf '%s\n' "$version" | awk -F. '
   exit 2
 fi
 case "$package_version" in
+  "$version") ;;
+  "$version"-test) ;;
   "$version"-test.[1-9]*)
     if ! printf '%s\n' "${package_version#"$version-test."}" |
       awk '/^[1-9][0-9]*$/ { next } { exit 1 }'; then
-      echo "AIGENT_HIVE_PACKAGE_VERSION must be PRODUCT_VERSION-test.N" >&2
+      echo "AIGENT_HIVE_PACKAGE_VERSION must equal PRODUCT_VERSION or use PRODUCT_VERSION-test[.N]" >&2
       exit 2
     fi
     ;;
   *)
-    echo "AIGENT_HIVE_PACKAGE_VERSION must be PRODUCT_VERSION-test.N" >&2
+    echo "AIGENT_HIVE_PACKAGE_VERSION must equal PRODUCT_VERSION or use PRODUCT_VERSION-test[.N]" >&2
     exit 2
     ;;
 esac
@@ -193,6 +195,8 @@ parse_receipt() {
     return 1
   fi
   case "$parsed_package_version" in
+    "$parsed_version") ;;
+    "$parsed_version"-test) ;;
     "$parsed_version"-test.[1-9]*)
       if ! printf '%s\n' "${parsed_package_version#"$parsed_version-test."}" |
         awk '/^[1-9][0-9]*$/ { next } { exit 1 }'; then

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "aigent-hive",
-  "version": "0.8.0-test.1",
+  "version": "0.9.0-test",
   "aigentHive": {
-    "productVersion": "0.8.0"
+    "productVersion": "0.9.0"
   },
   "description": "Provider-neutral local agent harness for subscription-authenticated hosts",
   "license": "Apache-2.0",
@@ -31,10 +31,10 @@
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@aigent-hive/darwin-arm64": "0.8.0-test.1",
-    "@aigent-hive/darwin-x64": "0.8.0-test.1",
-    "@aigent-hive/linux-arm64": "0.8.0-test.1",
-    "@aigent-hive/linux-x64": "0.8.0-test.1",
-    "@aigent-hive/win32-x64": "0.8.0-test.1"
+    "@aigent-hive/darwin-arm64": "0.9.0-test",
+    "@aigent-hive/darwin-x64": "0.9.0-test",
+    "@aigent-hive/linux-arm64": "0.9.0-test",
+    "@aigent-hive/linux-x64": "0.9.0-test",
+    "@aigent-hive/win32-x64": "0.9.0-test"
   }
 }