borgmcp-server 0.1.7 → 0.1.9

package/dist/portable-credential-store.d.ts

@@ -0,0 +1,16 @@
+export interface PortableServerCredential {
+    readonly version: 2;
+    readonly origin: string;
+    readonly trustIdentity: string;
+    readonly credential: string;
+    readonly clientId: string;
+    readonly serverCapabilities: readonly ["create_cube"];
+}
+export interface PortableCredentialLockOptions {
+    readonly attempts?: number;
+    readonly waitMs?: number;
+    readonly onAcquired?: (lockPath: string) => Promise<void>;
+}
+export declare function portableCredentialAccount(origin: string, trustIdentity: string): string;
+export declare function writePortableServerCredential(path: string, record: PortableServerCredential, lockOptions?: PortableCredentialLockOptions): Promise<void>;
+export declare function readPortableServerCredential(path: string, origin: string, trustIdentity: string): Promise<PortableServerCredential>;

package/dist/portable-credential-store.js

@@ -0,0 +1,305 @@
+import { createHash, randomBytes } from "node:crypto";
+import { constants } from "node:fs";
+import { link, lstat, mkdir, open, realpath, rename, unlink } from "node:fs/promises";
+import { dirname, join, resolve } from "node:path";
+import { isIP } from "node:net";
+const credentialPattern = /^[A-Za-z0-9_-]{43}$/u;
+const uuidPattern = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u;
+const trustPattern = /^spki-sha256:[0-9a-f]{64}$/u;
+const defaultLockAttempts = 500;
+const defaultLockWaitMs = 10;
+export function portableCredentialAccount(origin, trustIdentity) {
+    return `borg-server-credential:${createHash("sha256").update(origin).update("\0").update(trustIdentity).digest("hex")}`;
+}
+export async function writePortableServerCredential(path, record, lockOptions = {}) {
+    validateRecord(record);
+    const target = await credentialPath(path);
+    const canonicalRoot = dirname(target);
+    const lock = `${target}.lock`;
+    await withCredentialLock(lock, lockOptions, async () => {
+        const original = await readPrivateBytesIfPresent(target);
+        const document = parseDocument(original);
+        const account = portableCredentialAccount(record.origin, record.trustIdentity);
+        const next = {
+            version: 1,
+            accounts: { ...document.accounts, [account]: JSON.stringify(record) },
+        };
+        const temporary = join(canonicalRoot, `.credentials.json.${process.pid}.${Date.now()}.tmp`);
+        const handle = await open(temporary, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY, 0o600);
+        try {
+            await handle.writeFile(`${JSON.stringify(next)}\n`, "utf8");
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        try {
+            await assertPrivateFile(temporary);
+            const current = await readPrivateBytesIfPresent(target);
+            if (current === null ? original !== null : original === null || !current.equals(original)) {
+                throw new Error("Portable credential store changed during update.");
+            }
+            await rename(temporary, target);
+        }
+        catch (error) {
+            await unlink(temporary).catch(() => undefined);
+            throw error;
+        }
+        const directory = await open(canonicalRoot, constants.O_RDONLY);
+        try {
+            await directory.sync();
+        }
+        finally {
+            await directory.close();
+        }
+        await assertPrivateFile(target);
+    });
+}
+export async function readPortableServerCredential(path, origin, trustIdentity) {
+    const target = await credentialPath(path);
+    await assertPrivateFile(target);
+    const document = parseDocument(await readPrivateBytes(target));
+    const value = document.accounts[portableCredentialAccount(origin, trustIdentity)];
+    if (value === undefined)
+        throw new Error("Local owner credential is unavailable.");
+    const parsed = JSON.parse(value);
+    validateRecord(parsed);
+    if (parsed.origin !== origin || parsed.trustIdentity !== trustIdentity) {
+        throw new Error("Local owner credential binding is invalid.");
+    }
+    return Object.freeze(parsed);
+}
+async function credentialPath(path) {
+    if (path !== resolve(path))
+        throw new Error("Portable credential path is unsafe.");
+    const target = path;
+    const parent = dirname(target);
+    let parentMetadata;
+    try {
+        parentMetadata = await lstat(parent);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+        await mkdir(parent, { mode: 0o700 }).catch((mkdirError) => {
+            if (mkdirError.code !== "EEXIST")
+                throw mkdirError;
+        });
+        parentMetadata = await lstat(parent);
+    }
+    if (!parentMetadata.isDirectory() || parentMetadata.isSymbolicLink() ||
+        (parentMetadata.mode & 0o022) !== 0 ||
+        (typeof process.getuid === "function" && parentMetadata.uid !== process.getuid()) ||
+        await realpath(parent) !== parent) {
+        throw new Error("Portable credential parent directory is unsafe.");
+    }
+    return target;
+}
+async function withCredentialLock(lockPath, options, operation) {
+    const attempts = options.attempts ?? defaultLockAttempts;
+    const waitMs = options.waitMs ?? defaultLockWaitMs;
+    if (!Number.isSafeInteger(attempts) || attempts < 1 || attempts > 10_000 ||
+        !Number.isSafeInteger(waitMs) || waitMs < 0 || waitMs > 1_000) {
+        throw new Error("Portable credential lock options are invalid.");
+    }
+    await credentialPath(lockPath.slice(0, -".lock".length));
+    const stage = `${lockPath}.${process.pid}.${randomBytes(6).toString("hex")}.acq`;
+    const payload = Buffer.from(JSON.stringify({
+        pid: process.pid,
+        startTime: new Date(Date.now() - Math.round(process.uptime() * 1_000)).toISOString(),
+    }));
+    const stageHandle = await open(stage, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY, 0o600);
+    try {
+        try {
+            await stageHandle.writeFile(payload);
+            await stageHandle.sync();
+        }
+        finally {
+            await stageHandle.close();
+        }
+    }
+    catch (error) {
+        await unlink(stage).catch(() => undefined);
+        throw error;
+    }
+    let acquired = false;
+    try {
+        await assertPrivateFile(stage);
+        for (let attempt = 0; attempt < attempts; attempt += 1) {
+            try {
+                await link(stage, lockPath);
+                acquired = true;
+                break;
+            }
+            catch (error) {
+                if (error.code !== "EEXIST")
+                    throw error;
+            }
+            const state = await inspectContendedLock(lockPath);
+            if (state === "missing")
+                continue;
+            if (state === "stale")
+                throw new Error(`Borg credential lock is stale: ${lockPath}`);
+            if (waitMs > 0)
+                await new Promise((resolve) => setTimeout(resolve, waitMs));
+        }
+        if (!acquired)
+            throw new Error("Borg seat store is busy");
+        await options.onAcquired?.(lockPath);
+        return await operation();
+    }
+    finally {
+        let releaseError;
+        if (acquired) {
+            try {
+                await unlink(lockPath);
+            }
+            catch (error) {
+                if (error.code !== "ENOENT")
+                    releaseError = error;
+            }
+        }
+        await unlink(stage).catch(() => undefined);
+        if (releaseError !== undefined)
+            throw releaseError;
+    }
+}
+async function inspectContendedLock(lockPath) {
+    try {
+        await credentialPath(lockPath.slice(0, -".lock".length));
+        const before = await lstat(lockPath);
+        if (!before.isFile() || before.isSymbolicLink() || (before.mode & 0o777) !== 0o600 ||
+            (typeof process.getuid === "function" && before.uid !== process.getuid())) {
+            throw new Error("Portable credential lock is unsafe.");
+        }
+        const handle = await open(lockPath, constants.O_RDONLY | constants.O_NOFOLLOW);
+        let bytes;
+        try {
+            const opened = await handle.stat();
+            if (!opened.isFile() || opened.dev !== before.dev || opened.ino !== before.ino ||
+                opened.size !== before.size || opened.size > 4_096) {
+                throw new Error("Portable credential lock is unsafe.");
+            }
+            bytes = await handle.readFile();
+            const after = await handle.stat();
+            if (after.dev !== opened.dev || after.ino !== opened.ino || after.size !== opened.size) {
+                throw new Error("Portable credential lock is unsafe.");
+            }
+        }
+        finally {
+            await handle.close();
+        }
+        await credentialPath(lockPath.slice(0, -".lock".length));
+        let parsed;
+        try {
+            parsed = JSON.parse(bytes.toString("utf8"));
+        }
+        catch {
+            return "stale";
+        }
+        const pid = typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
+            ? parsed.pid
+            : undefined;
+        if (!Number.isSafeInteger(pid) || pid < 1)
+            return "stale";
+        try {
+            process.kill(pid, 0);
+            return "live";
+        }
+        catch (error) {
+            return error.code === "EPERM" ? "live" : "stale";
+        }
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return "missing";
+        throw error;
+    }
+}
+async function assertPrivateFile(path) {
+    const metadata = await lstat(path);
+    if (!metadata.isFile() || metadata.isSymbolicLink() || (metadata.mode & 0o777) !== 0o600 ||
+        metadata.nlink !== 1 ||
+        (typeof process.getuid === "function" && metadata.uid !== process.getuid())) {
+        throw new Error("Portable credential file is unsafe.");
+    }
+    if ((await realpath(dirname(path))) !== dirname(path) || await realpath(path) !== path) {
+        throw new Error("Portable credential file is unsafe.");
+    }
+}
+async function readPrivateBytes(path) {
+    const handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const metadata = await handle.stat();
+        if (!metadata.isFile() || (metadata.mode & 0o777) !== 0o600 || metadata.nlink !== 1 ||
+            (typeof process.getuid === "function" && metadata.uid !== process.getuid()) ||
+            metadata.size > 1024 * 1024)
+            throw new Error("Portable credential file is unsafe.");
+        return await handle.readFile();
+    }
+    finally {
+        await handle.close();
+    }
+}
+async function readPrivateBytesIfPresent(path) {
+    try {
+        await assertPrivateFile(path);
+        return await readPrivateBytes(path);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw error;
+    }
+}
+function parseDocument(bytes) {
+    if (bytes === null)
+        return { version: 1, accounts: {} };
+    const parsed = JSON.parse(bytes.toString("utf8"));
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed) ||
+        parsed.version !== 1)
+        throw new Error("Portable credential store is invalid.");
+    const accounts = parsed.accounts;
+    if (typeof accounts !== "object" || accounts === null || Array.isArray(accounts)) {
+        throw new Error("Portable credential store is invalid.");
+    }
+    if (Object.keys(accounts).length > 1_024)
+        throw new Error("Portable credential store is invalid.");
+    for (const [key, value] of Object.entries(accounts)) {
+        if (!/^[A-Za-z0-9._:-]{1,256}$/u.test(key) || typeof value !== "string" || value.length > 65_536) {
+            throw new Error("Portable credential store is invalid.");
+        }
+    }
+    return { version: 1, accounts: accounts };
+}
+function validateRecord(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        throw new Error("Portable credential is invalid.");
+    const record = value;
+    if (Object.keys(record).sort().join(",") !== "clientId,credential,origin,serverCapabilities,trustIdentity,version" ||
+        record["version"] !== 2 || typeof record["origin"] !== "string" ||
+        !isCanonicalHttpsIpOrigin(record["origin"]) ||
+        typeof record["trustIdentity"] !== "string" || !trustPattern.test(record["trustIdentity"]) ||
+        typeof record["credential"] !== "string" || !credentialPattern.test(record["credential"]) ||
+        typeof record["clientId"] !== "string" || !uuidPattern.test(record["clientId"]) ||
+        !Array.isArray(record["serverCapabilities"]) || record["serverCapabilities"].length !== 1 ||
+        record["serverCapabilities"][0] !== "create_cube") {
+        throw new Error("Portable credential is invalid.");
+    }
+}
+function isCanonicalHttpsIpOrigin(value) {
+    try {
+        const url = new URL(value);
+        const host = url.hostname.startsWith("[") && url.hostname.endsWith("]")
+            ? url.hostname.slice(1, -1)
+            : url.hostname;
+        const port = Number(url.port);
+        return url.protocol === "https:" && isIP(host) !== 0 && Number.isInteger(port) && port >= 1 &&
+            port <= 65_535 && url.username === "" && url.password === "" && url.pathname === "/" &&
+            url.search === "" && url.hash === "" && url.origin === value;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=portable-credential-store.js.map

package/dist/portable-credential-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portable-credential-store.js","sourceRoot":"","sources":["../src/portable-credential-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAgBhC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACjD,MAAM,WAAW,GAAG,4EAA4E,CAAC;AACjG,MAAM,YAAY,GAAG,6BAA6B,CAAC;AACnD,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAQ7B,MAAM,UAAU,yBAAyB,CAAC,MAAc,EAAE,aAAqB;IAC7E,OAAO,0BAA0B,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1H,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,IAAY,EACZ,MAAgC,EAChC,WAAW,GAAkC,EAAE;IAE/C,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,GAAG,MAAM,OAAO,CAAC;IAC9B,MAAM,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,yBAAyB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAC/E,MAAM,IAAI,GAA+B;YACvC,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;SACtE,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,qBAAqB,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvG,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;YACxD,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1F,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC;YAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QACpE,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAY,EACZ,MAAc,EACd,aAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,yBAAyB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IAClF,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACnF,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,cAAc,CAAC;IACnB,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,UAAmB,EAAE,EAAE;YACjE,IAAK,UAAoC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,UAAU,CAAC;QAChF,CAAC,CAAC,CAAC;QACH,cAAc,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,cAAc,CAAC,cAAc,EAAE;QAChE,CAAC,cAAc,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QACnC,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,cAAc,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACjF,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,QAAgB,EAChB,OAAsC,EACtC,SAA2B;IAE3B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,mBAAmB,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,MAAM;QACpE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,KAAK,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IACjF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QACzC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE;KACrF,CAAC,CAAC,CAAC;IACJ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxG,IAAI,CAAC;QACH,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YACtE,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAI,KAAK,KAAK,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;YACrF,IAAI,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC1D,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,IAAI,YAAqB,CAAC;QAC1B,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,YAAY,GAAG,KAAK,CAAC;YAC/E,CAAC;QACH,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,YAAY,KAAK,SAAS;YAAE,MAAM,YAAY,CAAC;IACrD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IAClD,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;YAC9E,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/E,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;gBAC1E,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,CAAC;YACD,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;gBACvF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,OAAO,CAAC;QAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACjF,CAAC,CAAE,MAA4B,CAAC,GAAG;YACnC,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAK,GAAc,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC;QACtE,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAa,EAAE,CAAC,CAAC,CAAC;YAC/B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9E,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;QACpF,QAAQ,CAAC,KAAK,KAAK,CAAC;QACpB,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,KAAK,KAAK,CAAC;YAC/E,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAC3E,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACxF,OAAO,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,IAAY;IACnD,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAoB;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACxD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrE,MAAgC,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC9G,MAAM,QAAQ,GAAI,MAAiC,CAAC,QAAQ,CAAC;IAC7D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACnG,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YACjG,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAkC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC5H,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,qEAAqE;QAC9G,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAC/D,CAAC,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC1F,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/E,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,MAAM,CAAC,oBAAoB,CAAC,CAAC,MAAM,KAAK,CAAC;QACzF,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YACrE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3B,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;YACzF,IAAI,IAAI,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG;YACpF,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/registry-artifact.d.ts

@@ -0,0 +1,11 @@
+export interface RegistryRuntimeArtifact {
+    readonly tarballPath: string;
+    readonly version: string;
+    readonly integrity: string;
+    readonly sourceSha: string | null;
+    readonly cleanup: () => Promise<void>;
+}
+export interface RegistryArtifactSource {
+    readonly latest: (runtimeRoot: string, signal: AbortSignal) => Promise<RegistryRuntimeArtifact>;
+}
+export declare function createRegistryArtifactSource(request?: typeof fetch): RegistryArtifactSource;

package/dist/registry-artifact.js

@@ -0,0 +1,99 @@
+import { lstat, mkdir, mkdtemp, realpath, rm, writeFile } from "node:fs/promises";
+import { isAbsolute, join } from "node:path";
+const registryOrigin = "https://registry.npmjs.org";
+const exactVersion = /^[0-9]+\.[0-9]+\.[0-9]+(?:-[0-9A-Za-z.-]+)?$/u;
+const integrityPattern = /^sha512-[A-Za-z0-9+/]{86}==$/u;
+const sourceShaPattern = /^[0-9a-f]{40}$/u;
+export function createRegistryArtifactSource(request = fetch) {
+    return {
+        async latest(runtimeRoot, signal) {
+            if (!isAbsolute(runtimeRoot))
+                throw new Error("Runtime root must be absolute.");
+            try {
+                const existing = await lstat(runtimeRoot);
+                if (!existing.isDirectory() || existing.isSymbolicLink()) {
+                    throw new Error("Runtime root must be a private directory.");
+                }
+            }
+            catch (error) {
+                if (error.code !== "ENOENT")
+                    throw error;
+                await mkdir(runtimeRoot, { recursive: true, mode: 0o700 });
+            }
+            const root = await realpath(runtimeRoot);
+            const rootMetadata = await lstat(root);
+            if ((rootMetadata.mode & 0o077) !== 0)
+                throw new Error("Runtime root must be a private directory.");
+            const temporary = await mkdtemp(join(root, ".download-"));
+            try {
+                const metadataResponse = await request(`${registryOrigin}/borgmcp-server/latest`, {
+                    headers: { accept: "application/json" },
+                    redirect: "error",
+                    signal,
+                });
+                if (!metadataResponse.ok || metadataResponse.url !== `${registryOrigin}/borgmcp-server/latest`) {
+                    throw new Error("Server artifact metadata verification failed.");
+                }
+                const metadataBytes = await readBounded(metadataResponse, 64 * 1024);
+                const metadata = JSON.parse(metadataBytes.toString("utf8"));
+                if (metadata.name !== "borgmcp-server" || typeof metadata.version !== "string" ||
+                    !exactVersion.test(metadata.version) || typeof metadata.dist?.integrity !== "string" ||
+                    !integrityPattern.test(metadata.dist.integrity)) {
+                    throw new Error("Server artifact metadata verification failed.");
+                }
+                const canonicalTarball = `${registryOrigin}/borgmcp-server/-/borgmcp-server-${metadata.version}.tgz`;
+                if (metadata.dist.tarball !== canonicalTarball ||
+                    (metadata.gitHead !== undefined &&
+                        (typeof metadata.gitHead !== "string" || !sourceShaPattern.test(metadata.gitHead)))) {
+                    throw new Error("Server artifact metadata verification failed.");
+                }
+                const artifactResponse = await request(canonicalTarball, { redirect: "error", signal });
+                if (!artifactResponse.ok || artifactResponse.url !== canonicalTarball) {
+                    throw new Error("Server artifact download failed.");
+                }
+                const artifact = await readBounded(artifactResponse, 2 * 1024 * 1024);
+                const tarballPath = join(temporary, `borgmcp-server-${metadata.version}.tgz`);
+                await writeFile(tarballPath, artifact, { flag: "wx", mode: 0o600 });
+                return Object.freeze({
+                    tarballPath,
+                    version: metadata.version,
+                    integrity: metadata.dist.integrity,
+                    sourceSha: typeof metadata.gitHead === "string" ? metadata.gitHead : null,
+                    cleanup: () => rm(temporary, { recursive: true, force: true }),
+                });
+            }
+            catch (error) {
+                await rm(temporary, { recursive: true, force: true });
+                throw error;
+            }
+        },
+    };
+}
+async function readBounded(response, limit) {
+    const declared = response.headers.get("content-length");
+    if (declared !== null && (!/^[0-9]+$/u.test(declared) || Number(declared) > limit)) {
+        throw new Error("Server artifact response exceeded its bound.");
+    }
+    if (response.body === null)
+        throw new Error("Server artifact response is empty.");
+    const reader = response.body.getReader();
+    const chunks = [];
+    let bytes = 0;
+    try {
+        while (true) {
+            const next = await reader.read();
+            if (next.done)
+                break;
+            bytes += next.value.byteLength;
+            if (bytes > limit)
+                throw new Error("Server artifact response exceeded its bound.");
+            chunks.push(Buffer.from(next.value));
+        }
+    }
+    finally {
+        await reader.cancel().catch(() => undefined);
+        reader.releaseLock();
+    }
+    return Buffer.concat(chunks, bytes);
+}
+//# sourceMappingURL=registry-artifact.js.map

package/dist/registry-artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-artifact.js","sourceRoot":"","sources":["../src/registry-artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,cAAc,GAAG,4BAA4B,CAAC;AACpD,MAAM,YAAY,GAAG,+CAA+C,CAAC;AACrE,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AACzD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAc3C,MAAM,UAAU,4BAA4B,CAC1C,OAAO,GAAiB,KAAK;IAE7B,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM;YAC9B,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAChF,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC1C,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;oBACzD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;gBACpE,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;YACzC,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACpG,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;YAC1D,IAAI,CAAC;gBACH,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,GAAG,cAAc,wBAAwB,EAAE;oBAChF,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;oBACvC,QAAQ,EAAE,OAAO;oBACjB,MAAM;iBACP,CAAC,CAAC;gBACH,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,gBAAgB,CAAC,GAAG,KAAK,GAAG,cAAc,wBAAwB,EAAE,CAAC;oBAC/F,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,gBAAgB,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;gBACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAKzD,CAAC;gBACF,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;oBAC1E,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,QAAQ,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ;oBACpF,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBACpD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,gBAAgB,GAAG,GAAG,cAAc,oCAAoC,QAAQ,CAAC,OAAO,MAAM,CAAC;gBACrG,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,gBAAgB;oBAC1C,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS;wBAC7B,CAAC,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1F,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBACxF,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,gBAAgB,CAAC,GAAG,KAAK,gBAAgB,EAAE,CAAC;oBACtE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,gBAAgB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;gBACtE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,kBAAkB,QAAQ,CAAC,OAAO,MAAM,CAAC,CAAC;gBAC9E,MAAM,SAAS,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACpE,OAAO,MAAM,CAAC,MAAM,CAAC;oBACnB,WAAW;oBACX,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS;oBAClC,SAAS,EAAE,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;oBACzE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;iBAC/D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAkB,EAAE,KAAa;IAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,KAAK,GAAG,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YACnF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC"}

package/dist/runtime-identity.d.ts

@@ -0,0 +1,19 @@
+export declare const SERVER_PACKAGE_VERSION = "0.1.9";
+export declare const RUNTIME_INFO_PATH = "/api/runtime";
+export interface RuntimeBuildIdentity {
+    readonly package_version: string;
+    readonly source_sha: string | null;
+    readonly artifact_integrity: string | null;
+    readonly protocol_version: string;
+    readonly started_at: string;
+}
+export interface RuntimeBuildIdentityInput {
+    readonly sourceSha?: string;
+    readonly artifactIntegrity?: string;
+    readonly startedAt?: Date;
+}
+export interface LoadRuntimeBuildIdentityInput extends RuntimeBuildIdentityInput {
+    readonly artifactDescriptorPath?: string;
+}
+export declare function createRuntimeBuildIdentity(input?: RuntimeBuildIdentityInput): RuntimeBuildIdentity;
+export declare function loadRuntimeBuildIdentity(input?: LoadRuntimeBuildIdentityInput): Promise<RuntimeBuildIdentity>;

package/dist/runtime-identity.js

@@ -0,0 +1,61 @@
+import { PROTOCOL_VERSION } from "borgmcp-shared/protocol";
+import { lstat, readFile } from "node:fs/promises";
+export const SERVER_PACKAGE_VERSION = "0.1.9";
+export const RUNTIME_INFO_PATH = "/api/runtime";
+const sourceShaPattern = /^[0-9a-f]{40}$/u;
+const artifactIntegrityPattern = /^sha512-[A-Za-z0-9+/]{86}==$/u;
+export function createRuntimeBuildIdentity(input = {}) {
+    const sourceSha = input.sourceSha;
+    const artifactIntegrity = input.artifactIntegrity;
+    if (sourceSha !== undefined && !sourceShaPattern.test(sourceSha)) {
+        throw new Error("Server source identity is invalid.");
+    }
+    if (artifactIntegrity !== undefined && !artifactIntegrityPattern.test(artifactIntegrity)) {
+        throw new Error("Server artifact identity is invalid.");
+    }
+    const startedAt = input.startedAt ?? new Date();
+    if (!Number.isFinite(startedAt.getTime()))
+        throw new Error("Server start time is invalid.");
+    return Object.freeze({
+        package_version: SERVER_PACKAGE_VERSION,
+        source_sha: sourceSha ?? null,
+        artifact_integrity: artifactIntegrity ?? null,
+        protocol_version: PROTOCOL_VERSION,
+        started_at: startedAt.toISOString(),
+    });
+}
+export async function loadRuntimeBuildIdentity(input = {}) {
+    if (input.artifactDescriptorPath === undefined)
+        return createRuntimeBuildIdentity(input);
+    let descriptor;
+    try {
+        const metadata = await lstat(input.artifactDescriptorPath);
+        if (!metadata.isFile() || metadata.isSymbolicLink() || metadata.size > 4 * 1024) {
+            throw new Error("invalid descriptor");
+        }
+        descriptor = JSON.parse(await readFile(input.artifactDescriptorPath, "utf8"));
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return createRuntimeBuildIdentity(input);
+        throw new Error("Runtime artifact descriptor is invalid.");
+    }
+    if (descriptor.version !== SERVER_PACKAGE_VERSION ||
+        typeof descriptor.integrity !== "string" || !artifactIntegrityPattern.test(descriptor.integrity) ||
+        (descriptor.source_sha !== null &&
+            (typeof descriptor.source_sha !== "string" || !sourceShaPattern.test(descriptor.source_sha)))) {
+        throw new Error("Runtime artifact descriptor is invalid.");
+    }
+    if (input.artifactIntegrity !== undefined && input.artifactIntegrity !== descriptor.integrity) {
+        throw new Error("Runtime artifact identity conflicts with the activated artifact.");
+    }
+    if (input.sourceSha !== undefined && input.sourceSha !== descriptor.source_sha) {
+        throw new Error("Runtime source identity conflicts with the activated artifact.");
+    }
+    return createRuntimeBuildIdentity({
+        artifactIntegrity: descriptor.integrity,
+        ...(descriptor.source_sha === null ? {} : { sourceSha: descriptor.source_sha }),
+        ...(input.startedAt === undefined ? {} : { startedAt: input.startedAt }),
+    });
+}
+//# sourceMappingURL=runtime-identity.js.map

package/dist/runtime-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-identity.js","sourceRoot":"","sources":["../src/runtime-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAC9C,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAoBhD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAC3C,MAAM,wBAAwB,GAAG,+BAA+B,CAAC;AAEjE,MAAM,UAAU,0BAA0B,CACxC,KAAK,GAA8B,EAAE;IAErC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAClD,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,iBAAiB,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,eAAe,EAAE,sBAAsB;QACvC,UAAU,EAAE,SAAS,IAAI,IAAI;QAC7B,kBAAkB,EAAE,iBAAiB,IAAI,IAAI;QAC7C,gBAAgB,EAAE,gBAAgB;QAClC,UAAU,EAAE,SAAS,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAK,GAAkC,EAAE;IAEzC,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS;QAAE,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACzF,IAAI,UAA4E,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;YAChF,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAsB,CAAC;IACrG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACjG,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,KAAK,sBAAsB;QAC7C,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAChG,CAAC,UAAU,CAAC,UAAU,KAAK,IAAI;YAC7B,CAAC,OAAO,UAAU,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,KAAK,CAAC,iBAAiB,KAAK,UAAU,CAAC,SAAS,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,0BAA0B,CAAC;QAChC,iBAAiB,EAAE,UAAU,CAAC,SAAS;QACvC,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;QAC/E,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;KACzE,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime-lifecycle.d.ts

@@ -0,0 +1,56 @@
+import type { RuntimeBuildIdentity } from "./runtime-identity.js";
+export interface VerifiedRuntimeArtifact {
+    readonly artifactDirectory: string;
+    readonly packageDirectory: string;
+    readonly version: string;
+    readonly integrity: string;
+    readonly sourceSha: string | null;
+    readonly treeSha256: string;
+}
+export interface RuntimeLifecycleDependencies {
+    readonly unpack: (archive: Buffer, stagingDirectory: string, signal: AbortSignal) => Promise<void>;
+    readonly restart: (signal: AbortSignal) => Promise<void>;
+    readonly stop: (signal: AbortSignal) => Promise<void>;
+    readonly probe: (signal: AbortSignal) => Promise<RuntimeBuildIdentity>;
+}
+export interface StageRuntimeArtifactInput {
+    readonly runtimeRoot: string;
+    readonly tarballPath: string;
+    readonly expectedIntegrity: string;
+    readonly expectedVersion: string;
+    readonly sourceSha?: string;
+    readonly timeoutMs: number;
+}
+export interface ActivateRuntimeArtifactInput {
+    readonly runtimeRoot: string;
+    readonly artifact: VerifiedRuntimeArtifact;
+    readonly timeoutMs: number;
+}
+export interface RuntimeLifecycle {
+    readonly stage: (input: StageRuntimeArtifactInput) => Promise<VerifiedRuntimeArtifact>;
+    readonly prepare: (input: Omit<ActivateRuntimeArtifactInput, "timeoutMs">) => Promise<VerifiedRuntimeArtifact>;
+    readonly activate: (input: ActivateRuntimeArtifactInput) => Promise<RuntimeBuildIdentity>;
+}
+export type RuntimeRecoveryState = "restored" | "stopped" | "failed";
+export declare class RuntimeActivationError extends Error {
+    readonly recovery: RuntimeRecoveryState;
+    constructor(recovery: RuntimeRecoveryState);
+}
+export declare function createRuntimeLifecycle(dependencies: RuntimeLifecycleDependencies): RuntimeLifecycle;
+export declare function inspectActiveRuntimeArtifact(runtimeRoot: string): Promise<VerifiedRuntimeArtifact | null>;
+export interface RuntimeCommandResult {
+    readonly stdout: string;
+    readonly stderr: string;
+}
+export interface RuntimeCommandRunner {
+    (executable: string, args: readonly string[], options: {
+        readonly cwd?: string;
+        readonly signal: AbortSignal;
+        readonly stdin?: Buffer;
+    }): Promise<RuntimeCommandResult>;
+}
+export declare function createUnixNpmArtifactUnpacker(options?: {
+    readonly tarExecutable?: string;
+    readonly npmExecutable?: string;
+    readonly run?: RuntimeCommandRunner;
+}): RuntimeLifecycleDependencies["unpack"];