dsh-plugin-update 0.1.0

package/dist/service.js

@@ -0,0 +1,355 @@
+// AUTO-GENERATED by node packages/dsh-plugin-update/build.mjs — DO NOT EDIT. Source: packages/dsh-plugin-update/src/service.ts
+const PACKAGE_NAME = "dsh-mattpocock-skills-deck";
+const NPM_REGISTRY = "https://registry.npmjs.org/";
+const CHECK_TIMEOUT_MS = 1e4;
+const CONFIRMATION_TTL_MS = 10 * 6e4;
+const RECHECK_WINDOW_MS = 2e3;
+const MAX_METADATA_BYTES = 256 * 1024;
+const INTEGRITY_PATTERN = "^sha512-[A-Za-z0-9+/]{86}==$";
+function validRequestId(v) {
+  return typeof v === "string" && v.trim().length >= 1 && v.trim().length <= 128;
+}
+function updateError(code) {
+  return Object.assign(new Error(code), { code });
+}
+function validVersion(v) {
+  return typeof v === "string" && /^\d+\.\d+\.\d+$/.test(v);
+}
+function parseTriple(v) {
+  const parts = String(v).split(".");
+  if (parts.length > 3) return null;
+  const nums = [];
+  for (const p of parts) {
+    if (!/^\d+$/.test(p)) return null;
+    const n = Number(p);
+    if (!Number.isSafeInteger(n)) return null;
+    nums.push(n);
+  }
+  while (nums.length < 3) nums.push(0);
+  return [nums[0], nums[1], nums[2]];
+}
+function compareVersions(a, b) {
+  const pa = parseTriple(a);
+  const pb = parseTriple(b);
+  if (!pa || !pb) throw updateError("invalid-release");
+  for (let i = 0; i < 3; i++) {
+    if (pa[i] < pb[i]) return -1;
+    if (pa[i] > pb[i]) return 1;
+  }
+  return 0;
+}
+function compareOne(node, op, target) {
+  const order = compareTriple(node, target);
+  if (op === "=" || op === "") return order === 0;
+  if (op === ">") return order === 1;
+  if (op === ">=") return order >= 0;
+  if (op === "<") return order === -1;
+  if (op === "<=") return order <= 0;
+  return true;
+}
+function compareTriple(a, b) {
+  for (let i = 0; i < 3; i++) {
+    if (a[i] < b[i]) return -1;
+    if (a[i] > b[i]) return 1;
+  }
+  return 0;
+}
+function upperBound(t, kind, kept) {
+  if (kind === "^") {
+    if (kept >= 1) return [t[0] + 1, 0, 0];
+    return [0, t[1] + 1, 0];
+  }
+  if (kept >= 2) return [t[0], t[1] + 1, 0];
+  return [t[0] + 1, 0, 0];
+}
+function satisfiesNodeRange(nodeVersion, range) {
+  if (range === void 0 || range === null) return true;
+  const text = String(range).trim();
+  if (text === "" || text === "*") return true;
+  const node = parseTriple(String(nodeVersion).replace(/^v/, ""));
+  if (!node) return true;
+  if (text.includes("||")) return true;
+  const parts = text.split(/\s+/).filter(Boolean);
+  if (parts.length === 0) return true;
+  for (const part of parts) {
+    const m = part.match(/^(\^|~|>=|<=|>|<|=)?(.+)$/);
+    if (!m) return true;
+    const op = m[1] || "";
+    const target = parseTriple(m[2]);
+    if (!target) return true;
+    if (op === "^" || op === "~") {
+      const kept = m[2].split(".").length;
+      if (compareTriple(node, target) < 0) return false;
+      if (compareTriple(node, upperBound(target, op, kept)) >= 0) return false;
+      continue;
+    }
+    if (!compareOne(node, op, target)) return false;
+  }
+  return true;
+}
+function byteLength(text) {
+  try {
+    return new TextEncoder().encode(text).length;
+  } catch {
+    return text.length;
+  }
+}
+function timeoutSignal(ms) {
+  try {
+    const ctor = globalThis.AbortSignal;
+    if (ctor && typeof ctor.timeout === "function") return ctor.timeout(ms);
+  } catch {
+  }
+  return void 0;
+}
+async function fetchNpmRelease(fetchImpl, timeoutMs = CHECK_TIMEOUT_MS, opts) {
+  const targetName = opts?.targetPackageName ?? PACKAGE_NAME;
+  const registry = opts?.registryUrl ?? NPM_REGISTRY;
+  let response = null;
+  try {
+    response = await fetchImpl(`${registry}${encodeURIComponent(targetName)}/latest`, {
+      headers: { accept: "application/json" },
+      redirect: "error",
+      signal: timeoutSignal(timeoutMs)
+    });
+  } catch {
+    throw updateError("check-failed");
+  }
+  try {
+    if (!response.ok) throw updateError("check-failed");
+    const declared = Number(response.headers.get("content-length"));
+    if (Number.isFinite(declared) && declared > MAX_METADATA_BYTES) throw updateError("invalid-release");
+    const text = await response.text();
+    if (byteLength(text) > MAX_METADATA_BYTES) throw updateError("invalid-release");
+    const value = JSON.parse(text);
+    if (value.name !== targetName || !validVersion(value.version)) throw updateError("invalid-release");
+    const version = value.version;
+    const nodeRange = value.engines?.node;
+    if (nodeRange !== void 0 && typeof nodeRange !== "string") throw updateError("invalid-release");
+    const tarballText = value.dist?.tarball;
+    const integrity = value.dist?.integrity;
+    let tarball;
+    try {
+      tarball = new URL(String(tarballText));
+    } catch {
+      throw updateError("invalid-release");
+    }
+    const registryOrigin = new URL(registry).origin;
+    const shapeOk = tarball.origin === registryOrigin && !tarball.username && !tarball.password && !tarball.search && !tarball.hash && tarball.pathname === `/${targetName}/-/${targetName}-${version}.tgz` && typeof integrity === "string" && new RegExp(INTEGRITY_PATTERN).test(integrity);
+    if (!shapeOk) throw updateError("invalid-release");
+    return { version, nodeRange: typeof nodeRange === "string" ? nodeRange : "*", integrity, tarball: tarball.href };
+  } catch (error) {
+    if (error?.code === "check-failed") throw error;
+    if (error?.code === "invalid-release") throw error;
+    if (response !== null && response.ok) throw updateError("invalid-release");
+    throw updateError("check-failed");
+  }
+}
+function createUpdateCore(ports) {
+  const checkTimeoutMs = ports.checkTimeoutMs ?? CHECK_TIMEOUT_MS;
+  const confirmationTtlMs = ports.confirmationTtlMs ?? CONFIRMATION_TTL_MS;
+  const targetPackageName = ports.targetPackageName ?? PACKAGE_NAME;
+  const registryUrl = ports.registryUrl ?? NPM_REGISTRY;
+  function fetchRelease() {
+    return fetchNpmRelease(ports.fetchImpl, checkTimeoutMs, { targetPackageName, registryUrl });
+  }
+  let checked = null;
+  let checking = null;
+  let lastCheckAt = -Infinity;
+  let activeJobId = null;
+  let memJob = null;
+  let memLock = null;
+  async function loadJob() {
+    try {
+      return ports.readJob ? await ports.readJob() ?? null : memJob;
+    } catch {
+      throw updateError("install-failed");
+    }
+  }
+  async function saveJob(job) {
+    try {
+      if (ports.writeJob) await ports.writeJob(job);
+      else memJob = job;
+    } catch {
+      throw updateError("install-failed");
+    }
+  }
+  async function acquire(lockId) {
+    try {
+      if (ports.tryAcquireLock) return await ports.tryAcquireLock(lockId);
+    } catch {
+      return false;
+    }
+    if (memLock !== null) return false;
+    memLock = lockId;
+    return true;
+  }
+  async function release(lockId) {
+    try {
+      if (ports.releaseLock) await ports.releaseLock(lockId);
+      else if (memLock === lockId) memLock = null;
+    } catch {
+    }
+  }
+  function healJob(job, env) {
+    if (!job) return null;
+    if (job.state === "installing" || job.state === "verifying") {
+      return job.id === activeJobId ? job : { ...job, state: "interrupted", message: "recovery-required", requestId: job.requestId ?? null };
+    }
+    if (job.state === "restart-required" || job.state === "completed") {
+      if (!job.targetVersion || env.installedVersion !== job.targetVersion) {
+        return { ...job, state: "interrupted", message: "installation-changed", requestId: job.requestId ?? null };
+      }
+      const runningVersion = ports.readRunningVersion();
+      return { ...job, state: runningVersion === job.targetVersion ? "completed" : "restart-required", requestId: job.requestId ?? null };
+    }
+    return job;
+  }
+  function buildSnapshot(env, job) {
+    let blockedReason = env.blockedReason ?? checked?.blockedReason ?? null;
+    if (job?.state === "interrupted" || job?.state === "failed") {
+      if (env.installedVersion !== ports.readRunningVersion()) blockedReason = "recovery-required";
+    } else if (job?.state === "restart-required" || env.installedVersion && env.installedVersion !== ports.readRunningVersion()) {
+      blockedReason = "pending-restart";
+    }
+    const busy = job?.state === "installing" || job?.state === "verifying";
+    const fresh = checked !== null && checked.checkId !== null && ports.now() < checked.expiresAt;
+    const runningVersion = ports.readRunningVersion();
+    const canInstall = Boolean(
+      env.eligible && !blockedReason && !busy && fresh && checked?.installationKey === env.installationKey && validVersion(runningVersion) && checked?.release && compareVersions(checked.release.version, runningVersion) === 1
+    );
+    return {
+      runningVersion,
+      installedVersion: env.installedVersion ?? null,
+      latestVersion: checked?.release.version ?? null,
+      canInstall,
+      blockedReason,
+      job
+    };
+  }
+  async function status() {
+    const env = await ports.readInstalled();
+    const job = healJob(await loadJob(), env);
+    return buildSnapshot(env, job);
+  }
+  async function check() {
+    if (checking) return checking;
+    if (checked?.checkId && ports.now() - lastCheckAt < RECHECK_WINDOW_MS) {
+      const env = await ports.readInstalled();
+      const snapshot = buildSnapshot(env, healJob(await loadJob(), env));
+      return { snapshot, receipt: snapshot.canInstall ? toReceipt() : null };
+    }
+    lastCheckAt = ports.now();
+    checking = (async () => {
+      try {
+        const env = await ports.readInstalled();
+        const release2 = await fetchRelease();
+        checked = {
+          release: release2,
+          checkId: ports.randomId(),
+          checkedAt: ports.now(),
+          expiresAt: ports.now() + confirmationTtlMs,
+          installationKey: env.installationKey,
+          blockedReason: satisfiesNodeRange(ports.nodeVersion, release2.nodeRange) ? null : "incompatible-node"
+        };
+        const snapshot = buildSnapshot(env, healJob(await loadJob(), env));
+        return { snapshot, receipt: snapshot.canInstall ? toReceipt() : null };
+      } catch (error) {
+        if (checked) checked = { ...checked, checkId: null, expiresAt: 0 };
+        throw error;
+      } finally {
+        checking = null;
+      }
+    })();
+    return checking;
+  }
+  function toReceipt() {
+    if (!checked?.checkId) return null;
+    return { checkId: checked.checkId, checkedAt: checked.checkedAt, expiresAt: checked.expiresAt };
+  }
+  async function runBackground(job, envAtStart) {
+    try {
+      if (ports.runInstall) await ports.runInstall({ version: job.targetVersion, profileName: envAtStart.profileName, environmentKind: envAtStart.environmentKind });
+      else throw updateError("unsupported");
+      const doing = { ...job, state: "verifying", message: null };
+      activeJobId = doing.id;
+      await saveJob(doing);
+      const env = await ports.readInstalled();
+      if (env.installedVersion !== job.targetVersion) throw updateError("install-failed");
+      if (env.blockedReason && env.blockedReason !== "pending-restart") throw updateError("install-failed");
+      const done = { ...doing, state: "restart-required", message: null };
+      await saveJob(done);
+    } catch (error) {
+      const code = error?.code;
+      const message = code === "installation-changed" || code === "registry-conflict" || code === "install-failed" ? String(code) : "install-failed";
+      const failedJob = { ...job, state: "failed", message, requestId: job.requestId ?? null };
+      try {
+        await saveJob(failedJob);
+      } catch {
+        memJob = failedJob;
+      }
+    } finally {
+      await release(job.id);
+      if (activeJobId === job.id) activeJobId = null;
+    }
+  }
+  async function install(args) {
+    const checkId = typeof args?.checkId === "string" ? args.checkId : "";
+    const requestId = typeof args?.requestId === "string" ? args.requestId : "";
+    if (!checkId || !validRequestId(requestId)) throw updateError("check-expired");
+    let env = await ports.readInstalled();
+    let previous = healJob(await loadJob(), env);
+    if (previous?.requestId === requestId) return buildSnapshot(env, previous);
+    if (previous?.state === "installing" || previous?.state === "verifying" || previous?.state === "restart-required") {
+      throw updateError("update-busy");
+    }
+    if (!checked || !checked.checkId || checked.checkId !== checkId || ports.now() >= checked.expiresAt) {
+      throw updateError("check-expired");
+    }
+    if (env.installationKey !== checked.installationKey) throw updateError("installation-changed");
+    if (!buildSnapshot(env, previous).canInstall) {
+      throw updateError(env.blockedReason ?? checked.blockedReason ?? "update-busy");
+    }
+    const job = {
+      id: ports.randomId(),
+      state: "installing",
+      targetVersion: checked.release.version,
+      message: null,
+      requestId
+    };
+    if (!await acquire(job.id)) throw updateError("update-busy");
+    try {
+      const current = await fetchRelease();
+      if (JSON.stringify(current) !== JSON.stringify(checked.release)) throw updateError("check-expired");
+      env = await ports.readInstalled();
+      if (env.installationKey !== checked.installationKey) throw updateError("installation-changed");
+      if (!env.eligible || env.blockedReason) throw updateError(env.blockedReason ?? "update-busy");
+      if (ports.backupJob) await ports.backupJob(job);
+      await saveJob(job);
+      activeJobId = job.id;
+    } catch (error) {
+      await release(job.id);
+      throw error;
+    }
+    void runBackground(job, env).catch(() => {
+    });
+    return buildSnapshot(env, job);
+  }
+  return { status, check, install };
+}
+export {
+  CHECK_TIMEOUT_MS,
+  CONFIRMATION_TTL_MS,
+  INTEGRITY_PATTERN,
+  MAX_METADATA_BYTES,
+  NPM_REGISTRY,
+  PACKAGE_NAME,
+  RECHECK_WINDOW_MS,
+  compareVersions,
+  createUpdateCore,
+  fetchNpmRelease,
+  satisfiesNodeRange,
+  updateError,
+  validRequestId,
+  validVersion
+};

package/dist/store.js

@@ -0,0 +1,346 @@
+// AUTO-GENERATED by node packages/dsh-plugin-update/build.mjs — DO NOT EDIT. Source: packages/dsh-plugin-update/src/store.ts
+import { createHash, randomUUID } from "node:crypto";
+import { mkdir, open, readFile, rename, realpath, stat, unlink, writeFile } from "node:fs/promises";
+import { dirname, isAbsolute, join, resolve } from "node:path";
+import { installRecipe } from "./commands.js";
+import { BACKUP_FILE, LEGACY_PLUGIN_ID, LOCK_FILE, STATE_FILE } from "./config.js";
+const LEGACY_SEGMENT = "updates";
+const LEGACY_DIR_PLUGIN = LEGACY_PLUGIN_ID;
+const JOB_STATES = ["installing", "verifying", "restart-required", "completed", "failed", "interrupted"];
+const SNAPSHOT_FILES = ["package.json", "pnpm-lock.yaml", "pnpm-workspace.yaml"];
+function fail(code) {
+  return Object.assign(new Error(code), { code });
+}
+function shortHash(text) {
+  try {
+    return createHash("sha256").update(String(text)).digest("hex").slice(0, 24);
+  } catch {
+    return "00000000";
+  }
+}
+function pathsForUpdate(homeDir, pluginId, profileDir) {
+  if (typeof homeDir !== "string" || !homeDir || typeof profileDir !== "string" || !profileDir) return null;
+  if (typeof pluginId !== "string" || !pluginId) return null;
+  const directory = join(homeDir, LEGACY_SEGMENT, pluginId, shortHash(profileDir));
+  return { directory, state: join(directory, STATE_FILE), lock: join(directory, LOCK_FILE), backup: join(directory, BACKUP_FILE) };
+}
+function legacyPathsForUpdate(homeDir, profileDir) {
+  if (typeof homeDir !== "string" || !homeDir || typeof profileDir !== "string" || !profileDir) return null;
+  const directory = join(homeDir, LEGACY_SEGMENT, LEGACY_DIR_PLUGIN, shortHash(profileDir));
+  return { directory, state: join(directory, STATE_FILE), lock: join(directory, LOCK_FILE), backup: join(directory, BACKUP_FILE) };
+}
+async function readJsonGuarded(filename, missing) {
+  try {
+    if ((await stat(filename)).size > 10 * 1024 * 1024) throw fail("install-failed");
+    return JSON.parse(await readFile(filename, "utf8"));
+  } catch (error) {
+    if (error && error.code === "ENOENT") return missing;
+    throw error && error.code ? error : fail("install-failed");
+  }
+}
+async function writeJsonAtomic(filename, value) {
+  const temporary = `${filename}.${randomUUID()}.tmp`;
+  try {
+    await writeFile(temporary, `${JSON.stringify(value, null, 2)}
+`, { mode: 384, flag: "wx" });
+    await rename(temporary, filename);
+  } catch {
+    throw fail("install-failed");
+  } finally {
+    await unlink(temporary).catch(() => {
+    });
+  }
+}
+function normalizeJob(job) {
+  return {
+    id: typeof job.id === "string" ? job.id : "corrupt",
+    state: JOB_STATES.includes(String(job.state)) ? job.state : "interrupted",
+    targetVersion: typeof job.targetVersion === "string" ? job.targetVersion : null,
+    message: typeof job.message === "string" ? job.message : null,
+    requestId: typeof job.requestId === "string" ? job.requestId : null
+  };
+}
+function createUpdateDiskPorts(homeDir, pluginId, profileDir, deps = {}) {
+  const paths = pathsForUpdate(homeDir, pluginId, profileDir);
+  const legacyPaths = pluginId === LEGACY_DIR_PLUGIN ? null : legacyPathsForUpdate(homeDir, profileDir);
+  const readText = deps.readFileImpl ?? ((filename, encoding) => readFile(filename, encoding));
+  const statFile = deps.statImpl ?? ((filename) => stat(filename));
+  async function readAt(p) {
+    if (!p) return null;
+    try {
+      if ((await statFile(p.state)).size > 10 * 1024 * 1024) throw fail("install-failed");
+      return JSON.parse(await readText(p.state, "utf8"));
+    } catch (error) {
+      if (error && error.code === "ENOENT") return null;
+      throw error && error.code ? error : fail("install-failed");
+    }
+  }
+  async function readJob() {
+    if (!paths) return null;
+    const job = await readAt(paths);
+    if (job) {
+      if (!JOB_STATES.includes(String(job.state)) || typeof job.id !== "string") {
+        return { id: "corrupt", state: "interrupted", message: "recovery-required", targetVersion: null, requestId: null };
+      }
+      return { requestId: null, message: null, ...job };
+    }
+    if (legacyPaths) {
+      const legacyJob = await readAt(legacyPaths);
+      if (legacyJob) {
+        if (!JOB_STATES.includes(String(legacyJob.state)) || typeof legacyJob.id !== "string") {
+          return { id: "corrupt", state: "interrupted", message: "recovery-required", targetVersion: null, requestId: null };
+        }
+        return { requestId: null, message: null, ...legacyJob };
+      }
+    }
+    const lock = await readJsonGuarded(paths.lock, null);
+    if (lock) return { id: "locked", state: "interrupted", message: "recovery-required", targetVersion: null, requestId: null };
+    if (legacyPaths) {
+      const legacyLock = await readJsonGuarded(legacyPaths.lock, null).catch(() => null);
+      if (legacyLock) return { id: "locked", state: "interrupted", message: "recovery-required", targetVersion: null, requestId: null };
+    }
+    return null;
+  }
+  async function writeJob(job) {
+    if (!paths) throw fail("install-failed");
+    if (job === null) {
+      await unlink(paths.state).catch((error) => {
+        if (!error || error.code !== "ENOENT") throw fail("install-failed");
+      });
+      return;
+    }
+    await mkdir(paths.directory, { recursive: true, mode: 448 });
+    await writeJsonAtomic(paths.state, job);
+  }
+  async function tryAcquireLock(lockId) {
+    if (!paths) return false;
+    try {
+      await mkdir(paths.directory, { recursive: true, mode: 448 });
+      const handle = await open(paths.lock, "wx", 384);
+      try {
+        await handle.writeFile(JSON.stringify({ id: lockId, pid: process.pid, startedAt: Date.now() }));
+      } finally {
+        await handle.close();
+      }
+      return true;
+    } catch (error) {
+      if (!error || error.code !== "EEXIST") return false;
+      try {
+        const current = await readJsonGuarded(paths.lock, null);
+        const job = await readJsonGuarded(paths.state, null);
+        if (!current || job && job.id === current.id) return false;
+        await unlink(paths.lock).catch(() => {
+        });
+        const handle = await open(paths.lock, "wx", 384);
+        try {
+          await handle.writeFile(JSON.stringify({ id: lockId, pid: process.pid, startedAt: Date.now() }));
+        } finally {
+          await handle.close();
+        }
+        return true;
+      } catch {
+        return false;
+      }
+    }
+  }
+  async function releaseLock(lockId) {
+    if (!paths) return;
+    try {
+      const current = await readJsonGuarded(paths.lock, null);
+      if (current && current.id === lockId) await unlink(paths.lock).catch(() => {
+      });
+    } catch {
+    }
+  }
+  async function backupJob(job) {
+    if (!paths) throw fail("install-failed");
+    const files = {};
+    for (const name of SNAPSHOT_FILES) {
+      try {
+        const filename = join(profileDir, name);
+        if ((await stat(filename)).size > 3 * 1024 * 1024) throw fail("install-failed");
+        files[name] = await readFile(filename, "utf8");
+      } catch (error) {
+        if (!error || error.code !== "ENOENT") throw fail("install-failed");
+      }
+    }
+    await mkdir(paths.directory, { recursive: true, mode: 448 });
+    await writeJsonAtomic(paths.backup, {
+      jobId: job.id,
+      previousVersion: job.previousVersion ?? null,
+      files
+    });
+  }
+  return { paths, legacyPaths, readJob, writeJob, tryAcquireLock, releaseLock, backupJob };
+}
+const CLI_PACKAGE_NAME = "@deepseek-ai/dsh";
+const INSTALL_STDIO = { stdin: "ignore", stdout: { maxBytes: 64 * 1024 }, stderr: { maxBytes: 64 * 1024 } };
+const TERMINATION_GRACE_MS = 3e3;
+function part(value) {
+  return typeof value === "function" ? value() : value;
+}
+function withExit(error, exitCode) {
+  if (typeof exitCode === "number") error.exitCode = exitCode;
+  return error;
+}
+async function sameDir(a, b) {
+  if (typeof a !== "string" || typeof b !== "string" || !a || !b) return false;
+  try {
+    if (resolve(a) === resolve(b)) return true;
+  } catch {
+    return false;
+  }
+  try {
+    const pair = await Promise.all([realpath(a), realpath(b)]);
+    return pair[0] === pair[1];
+  } catch {
+    return false;
+  }
+}
+async function readManifestAt(directory) {
+  try {
+    return JSON.parse(await readFile(join(directory, "package.json"), "utf8"));
+  } catch {
+    return null;
+  }
+}
+async function resolveCliEntry(argv1, deps = {}) {
+  const readAt = typeof deps.readManifest === "function" ? deps.readManifest : readManifestAt;
+  const realpathImpl = typeof deps.realpath === "function" ? deps.realpath : realpath;
+  if (typeof argv1 !== "string" || !argv1 || argv1.includes("\0")) return null;
+  let entry = "";
+  try {
+    entry = await realpathImpl(argv1);
+  } catch {
+    return null;
+  }
+  if (typeof entry !== "string" || !entry) return null;
+  let directory = dirname(entry);
+  while (true) {
+    let manifest = null;
+    try {
+      manifest = await Promise.resolve().then(() => readAt(directory)).catch(() => null);
+    } catch {
+      manifest = null;
+    }
+    if (manifest && manifest.name === CLI_PACKAGE_NAME) {
+      const bin = manifest.bin;
+      const declared = typeof bin === "string" ? bin : bin && bin.dsh;
+      if (typeof declared !== "string" || !declared || isAbsolute(declared) || declared.includes("\0")) return null;
+      try {
+        return await realpathImpl(resolve(directory, declared)) === entry ? entry : null;
+      } catch {
+        return null;
+      }
+    }
+    const parent = dirname(directory);
+    if (parent === directory) return null;
+    directory = parent;
+  }
+}
+async function awaitOutcome(handle, timeoutMs) {
+  const settled = Promise.resolve(handle.done).then(
+    (value) => ({ exitCode: value && typeof value.exitCode === "number" ? value.exitCode : null, timedOut: false }),
+    () => ({ exitCode: null, timedOut: true })
+  );
+  if (!(typeof timeoutMs === "number" && timeoutMs > 0)) return await settled;
+  let timer = null;
+  const deadline = new Promise((settle) => {
+    timer = setTimeout(() => {
+      try {
+        if (handle && typeof handle.terminate === "function") handle.terminate();
+      } catch {
+      }
+      settle({ exitCode: null, timedOut: true });
+    }, timeoutMs);
+  });
+  try {
+    return await Promise.race([settled, deadline]);
+  } finally {
+    if (timer !== null) {
+      try {
+        clearTimeout(timer);
+      } catch {
+      }
+    }
+  }
+}
+function emitInstall(parts, recipe, ok, exitCode, durationMs) {
+  const log = parts.log;
+  if (typeof log !== "function") return;
+  try {
+    const pluginId = part(parts.pluginId ?? null);
+    log("info", "update.install.exec", {
+      route: recipe ? recipe.route : "none",
+      ok: ok === true,
+      exitCode: typeof exitCode === "number" ? exitCode : null,
+      durationMs,
+      pluginId: typeof pluginId === "string" ? pluginId : null
+    });
+  } catch {
+  }
+}
+async function runDesktopService(recipe, parts) {
+  const service = part(parts.desktopPnpm);
+  if (!service || typeof service.runPlugin !== "function") throw fail("install-failed");
+  const profiles = part(parts.desktopProfiles);
+  const active = profiles && profiles.current ? profiles.current : null;
+  const profileDir = part(parts.profileDir);
+  if (!active || !active.dir || !profileDir || !await sameDir(active.dir, profileDir)) throw fail("install-failed");
+  const handle = service.runPlugin(recipe.pluginArgs, profileDir, void 0);
+  if (!handle || !handle.done || typeof handle.done.then !== "function") throw fail("install-failed");
+  const outcome = await handle.done;
+  const code = outcome && typeof outcome.exitCode === "number" ? outcome.exitCode : null;
+  if (code !== 0) throw withExit(fail("install-failed"), code);
+  return code;
+}
+async function runCliProcess(recipe, parts) {
+  const executable = part(parts.runtimeExecutable) || (typeof process !== "undefined" ? process.execPath : "");
+  const execArgs = part(parts.runtimeExecArgs) ?? (typeof process !== "undefined" && Array.isArray(process.execArgv) ? process.execArgv : []);
+  const entry = part(parts.cliEntry) ?? await resolveCliEntry(typeof process !== "undefined" && process.argv ? process.argv[1] : "");
+  if (!executable || !entry) throw fail("install-failed");
+  const argv = [executable, ...execArgs, entry, "plugin", "--profile", recipe.profileName, ...recipe.pluginArgs];
+  const subprocess = part(parts.subprocess);
+  if (!subprocess || typeof subprocess.spawn !== "function") throw fail("install-failed");
+  const handle = subprocess.spawn({
+    argv,
+    cwd: part(parts.profileDir) || void 0,
+    stdio: INSTALL_STDIO,
+    graceMs: TERMINATION_GRACE_MS
+  });
+  if (!handle || !handle.done || typeof handle.done.then !== "function") throw fail("install-failed");
+  const outcome = await awaitOutcome(handle, recipe.timeoutMs);
+  if (outcome.timedOut || outcome.exitCode !== 0) throw withExit(fail("install-failed"), outcome.exitCode);
+  return outcome.exitCode;
+}
+function createUpdateExecutor(parts = {}) {
+  return async function runInstall(args = {}) {
+    const recipe = installRecipe({
+      profileName: args.profileName ?? part(parts.profileName ?? null),
+      version: String(args.version ?? ""),
+      environmentKind: args.environmentKind ?? part(parts.environmentKind ?? "cli"),
+      targetPackageName: parts.targetPackageName === void 0 ? void 0 : part(parts.targetPackageName),
+      registryUrl: parts.registryUrl === void 0 ? void 0 : part(parts.registryUrl),
+      timeoutMs: parts.installTimeoutMs === void 0 ? void 0 : part(parts.installTimeoutMs)
+    });
+    const startedAt = Date.now();
+    let exitCode = null;
+    try {
+      if (!recipe) throw fail("install-failed");
+      exitCode = recipe.route === "desktop-service" ? await runDesktopService(recipe, parts) : await runCliProcess(recipe, parts);
+      emitInstall(parts, recipe, true, exitCode, Date.now() - startedAt);
+    } catch (error) {
+      emitInstall(parts, recipe, false, error?.exitCode ?? exitCode, Date.now() - startedAt);
+      throw Object.assign(fail("install-failed"), { debug: String(error?.stack || error) });
+    }
+  };
+}
+const __executorInternals = { INSTALL_STDIO, TERMINATION_GRACE_MS, CLI_PACKAGE_NAME };
+export {
+  __executorInternals,
+  createUpdateDiskPorts,
+  createUpdateExecutor,
+  legacyPathsForUpdate,
+  pathsForUpdate,
+  resolveCliEntry
+};