dsh-plugin-upgrader 1.0.0 → 1.0.2

package/lib/host/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/host/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAyC,MAAM,WAAW,CAAA;AAE9E,mDAAmD;AACnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;AAE7C,oDAAoD;AACpD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,IAAI,CAAA;AAE7C,yEAAyE;AACzE,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAA;AAE9B;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEzC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;AAE1C,+CAA+C;AAC/C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,CAAA;AAkDvC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,WAAmB,EACnB,KAAkC,EAClC,KAAc;IAEd,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,WAAW,EAAE,CAAA;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAA;IAC3B,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAA;IACvI,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,oBAAoB,CAAC;SAClD,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,KAAK,EAAE,YAAY,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAA;QACjG,CAAC;QACD,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAC3C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,OAAO,EAAE,IAAI,EAAE,CAAA;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,OAAO,EAAE,KAAK,EAAE,yBAAyB,OAAO,EAAE,EAAE,CAAA;IACtD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,EAAU;IACzD,MAAM,KAAK,GAAG,4DAA4D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACxF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,CAAA;IACnE,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,CAAA;IAC7B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,gCAAgC,KAAK,IAAI,IAAI,oBAAoB,EACjE;YACE,OAAO,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,YAAY,EAAE,qBAAqB,EAAE;YACvF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC;SAC7C,CACF,CAAA;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAA;YAC1F,OAAO,EAAE,KAAK,EAAE,UAAU,QAAQ,CAAC,MAAM,GAAG,MAAM,EAAE,EAAE,EAAE,EAAE,CAAA;QAC5D,CAAC;QACD,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,6BAA6B,EAAE,EAAE,EAAE,CAAA;QAC7E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,KAAK,MAAM,KAAK,IAAI,IAA4B,EAAE,CAAC;YACjD,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ;gBAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC3D,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,OAAO,EAAE,KAAK,EAAE,uBAAuB,OAAO,EAAE,EAAE,EAAE,EAAE,CAAA;IACxD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAe,EACf,KAA4B,EAC5B,KAAc;IAEd,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAA;QAChE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG;YAAE,OAAO,GAAG,CAAC,IAAI,CAAA;IAChD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACpD,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC3B,OAAO,OAAO,CAAC,IAAI,CAAA;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,SAAoC,EACpC,gBAAoC,EACpC,QAAyC;IAEzC,MAAM,cAAc,GAAG,SAAS,EAAE,QAAQ,CAAA;IAC1C,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,SAAS,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QAClG,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,+BAA+B,EAAE,CAAA;IAClF,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,WAAW,CAAC,CAAA;IACxC,MAAM,IAAI,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;QACnF,CAAC,CAAE,OAAmC;QACtC,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IAC1B,MAAM,UAAU,GAAG,SAAS,EAAE,IAAI,KAAK,IAAI,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;QAChH,CAAC,CAAE,SAAS,CAAC,IAAgC;QAC7C,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IACzC,MAAM,cAAc,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACtF,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IACtD,MAAM,IAAI,GAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC/C,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;QAC9C,MAAM,MAAM,GAAG,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAA;QACpE,OAAO;YACL,OAAO;YACP,IAAI,EAAE,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,UAAU,CAAC,OAAO,CAAY,CAAC,CAAC,CAAC,SAAS;YAC3F,UAAU,EAAE,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YACrF,MAAM,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACvD,OAAO,EAAE,OAAO,KAAK,gBAAgB;YACrC,MAAM,EAAE,OAAO,KAAK,MAAM;YAC1B,GAAG,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC;SAC1E,CAAA;IACH,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;IACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACjF,OAAO;QACL,MAAM,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACvD,OAAO;QACP,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,MAAM,CAAC,WAAW,CACtB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAW,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CACpD;QAC3B,aAAa,EAAE,IAAI,CAAC,MAAM;KAC3B,CAAA;AACH,CAAC"}

package/lib/host/repo.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Repository-URL normalisation.
+ *
+ * A registry packument can declare its `repository` in half a dozen shapes, and
+ * the tab only ever wants one thing out of it: the https URL of the project
+ * page. Turning that into data is pure work, so it lives here rather than in
+ * the request handler.
+ *
+ * @module dsh-plugin-upgrader/lib/repo
+ */
+/** The manifest fields this module reads. */
+export interface RepoManifest {
+    repository?: unknown;
+    homepage?: unknown;
+    bugs?: unknown;
+}
+/** The shape of the registry document this module reads. */
+export interface PackumentLike {
+    'dist-tags'?: {
+        latest?: unknown;
+    } | undefined;
+    versions?: Record<string, RepoManifest | undefined> | undefined;
+    repository?: unknown;
+    homepage?: unknown;
+    bugs?: unknown;
+}
+/**
+ * Turn any of the shapes npm allows for `repository` into an https URL.
+ *
+ * Handles `owner/repo`, `github:owner/repo`, `git@host:owner/repo.git`,
+ * `git+https://…`, and plain URLs; returns `undefined` for anything else.
+ *
+ * @param raw - the manifest field.
+ * @returns an https URL without a trailing slash.
+ */
+export declare function normalizeRepoUrl(raw: unknown): string | undefined;
+/**
+ * Is this a github.com URL?
+ *
+ * @param url - an absolute URL.
+ * @returns whether the host is GitHub.
+ */
+export declare function isGithubUrl(url: string): boolean;
+/**
+ * The project page a user would recognise as "the plugin's GitHub".
+ *
+ * `repository` wins; `homepage`/`bugs` are only used when they point at GitHub,
+ * so a marketing site never stands in for the source link.
+ *
+ * @param packument - the registry document.
+ * @param manifest - one version manifest.
+ * @returns an https GitHub URL.
+ */
+export declare function githubUrlOf(packument: PackumentLike | undefined, manifest: RepoManifest | undefined): string | undefined;
+/**
+ * The repository a packument points at, independent of any version row.
+ *
+ * @param packument - the registry document.
+ * @returns an https GitHub URL.
+ */
+export declare function repoUrlOf(packument: PackumentLike | undefined): string | undefined;
+//# sourceMappingURL=repo.d.ts.map

package/lib/host/repo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.d.ts","sourceRoot":"","sources":["../../src/host/repo.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAED,4DAA4D;AAC5D,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC,GAAG,SAAS,CAAA;IAC/D,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CA0BjE;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAMhD;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,SAAS,EAAE,aAAa,GAAG,SAAS,EACpC,QAAQ,EAAE,YAAY,GAAG,SAAS,GACjC,MAAM,GAAG,SAAS,CAYpB;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,SAAS,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAIlF"}

package/lib/host/repo.js

@@ -0,0 +1,102 @@
+/**
+ * Repository-URL normalisation.
+ *
+ * A registry packument can declare its `repository` in half a dozen shapes, and
+ * the tab only ever wants one thing out of it: the https URL of the project
+ * page. Turning that into data is pure work, so it lives here rather than in
+ * the request handler.
+ *
+ * @module dsh-plugin-upgrader/lib/repo
+ */
+/**
+ * Turn any of the shapes npm allows for `repository` into an https URL.
+ *
+ * Handles `owner/repo`, `github:owner/repo`, `git@host:owner/repo.git`,
+ * `git+https://…`, and plain URLs; returns `undefined` for anything else.
+ *
+ * @param raw - the manifest field.
+ * @returns an https URL without a trailing slash.
+ */
+export function normalizeRepoUrl(raw) {
+    const text = typeof raw === 'string'
+        ? raw
+        : raw !== null && typeof raw === 'object' && typeof raw.url === 'string'
+            ? raw.url
+            : undefined;
+    if (text === undefined)
+        return undefined;
+    let value = text.trim();
+    if (value === '')
+        return undefined;
+    const shorthand = /^(?:github:)?([\w.-]+\/[\w.-]+)$/.exec(value);
+    if (shorthand !== null)
+        value = `https://github.com/${shorthand[1]}`;
+    else if (value.startsWith('git@'))
+        value = `https://${value.slice(4).replace(':', '/')}`;
+    else if (value.startsWith('ssh://git@'))
+        value = `https://${value.slice('ssh://git@'.length)}`;
+    else
+        value = value.replace(/^git\+/, '');
+    value = value.replace(/\.git$/, '').replace(/\/+$/, '');
+    try {
+        const parsed = new URL(value);
+        if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:')
+            return undefined;
+        parsed.hash = '';
+        parsed.search = '';
+        return parsed.toString().replace(/\/+$/, '');
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Is this a github.com URL?
+ *
+ * @param url - an absolute URL.
+ * @returns whether the host is GitHub.
+ */
+export function isGithubUrl(url) {
+    try {
+        return /^(www\.)?github\.com$/.test(new URL(url).hostname);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The project page a user would recognise as "the plugin's GitHub".
+ *
+ * `repository` wins; `homepage`/`bugs` are only used when they point at GitHub,
+ * so a marketing site never stands in for the source link.
+ *
+ * @param packument - the registry document.
+ * @param manifest - one version manifest.
+ * @returns an https GitHub URL.
+ */
+export function githubUrlOf(packument, manifest) {
+    const direct = [
+        normalizeRepoUrl(manifest?.repository),
+        normalizeRepoUrl(packument?.repository),
+    ].find((url) => url !== undefined && isGithubUrl(url));
+    if (direct !== undefined)
+        return direct;
+    const fallbacks = [
+        normalizeRepoUrl(packument?.homepage),
+        normalizeRepoUrl(manifest?.homepage),
+        normalizeRepoUrl(packument?.bugs),
+    ];
+    return fallbacks.find((url) => url !== undefined && isGithubUrl(url));
+}
+/**
+ * The repository a packument points at, independent of any version row.
+ *
+ * @param packument - the registry document.
+ * @returns an https GitHub URL.
+ */
+export function repoUrlOf(packument) {
+    const latest = packument?.['dist-tags']?.latest;
+    const manifest = typeof latest === 'string' ? packument?.versions?.[latest] : undefined;
+    return githubUrlOf(packument, manifest);
+}
+//# sourceMappingURL=repo.js.map

package/lib/host/repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.js","sourceRoot":"","sources":["../../src/host/repo.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAkBH;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ;QAClC,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAQ,GAAyB,CAAC,GAAG,KAAK,QAAQ;YAC7F,CAAC,CAAE,GAAuB,CAAC,GAAG;YAC9B,CAAC,CAAC,SAAS,CAAA;IACf,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACxC,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IACvB,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IAElC,MAAM,SAAS,GAAG,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAChE,IAAI,SAAS,KAAK,IAAI;QAAE,KAAK,GAAG,sBAAsB,SAAS,CAAC,CAAC,CAAC,EAAE,CAAA;SAC/D,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,KAAK,GAAG,WAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAA;SACnF,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,KAAK,GAAG,WAAW,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAA;;QACzF,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IAExC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QAC7B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,SAAS,CAAA;QACjF,MAAM,CAAC,IAAI,GAAG,EAAE,CAAA;QAChB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAA;QAClB,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,OAAO,uBAAuB,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CACzB,SAAoC,EACpC,QAAkC;IAElC,MAAM,MAAM,GAAG;QACb,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC;QACtC,gBAAgB,CAAC,SAAS,EAAE,UAAU,CAAC;KACxC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IACrE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IACvC,MAAM,SAAS,GAAG;QAChB,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC;QACrC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC;KAClC,CAAA;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;AACtF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,SAAoC;IAC5D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC/C,MAAM,QAAQ,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACvF,OAAO,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;AACzC,CAAC"}

package/lib/host/version.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Version ordering and release-link helpers.
+ *
+ * Everything here is pure: no I/O, no clock, no ambient state. The host half
+ * uses it to sort published versions and to decide which GitHub page a version
+ * line opens, and the test suite exercises it directly.
+ *
+ * @module dsh-plugin-upgrader/lib/version
+ */
+/** A semver split into comparable parts. */
+export interface VersionParts {
+    major: number;
+    minor: number;
+    patch: number;
+    /** Prerelease identifiers, empty for a stable release. */
+    pre: string[];
+}
+/**
+ * Parse a semver string into comparable parts.
+ *
+ * @param value - a version like `1.2.3-rc.1`.
+ * @returns parts, or `null` when the string is not semver.
+ */
+export declare function parseVersion(value: string | undefined | null): VersionParts | null;
+/**
+ * Compare two prerelease identifier lists, semver order.
+ *
+ * @param left - identifiers of the left version.
+ * @param right - identifiers of the right version.
+ * @returns negative, zero, or positive.
+ */
+export declare function comparePre(left: readonly string[], right: readonly string[]): number;
+/**
+ * Compare two versions, semver order; unparsable pairs compare equal.
+ *
+ * @param left - left version.
+ * @param right - right version; an absent value compares equal to anything.
+ * @returns negative when left is older.
+ */
+export declare function compareVersions(left: string | undefined | null, right: string | undefined | null): number;
+/**
+ * The tag a published version was released under.
+ *
+ * @param version - the published version.
+ * @returns `v<version>` unless the version already carries the `v`.
+ */
+export declare function tagOf(version: string): string;
+/**
+ * The GitHub path a version line opens.
+ *
+ * Users read a version line as "what did this release change", so the target is
+ * the release page. That only resolves when the repository actually tagged the
+ * version — `dsh-pet` publishes 59 versions with 8 tags — so the tag list
+ * decides, and a version without a tag of its own falls back to the repository's
+ * release feed rather than to a page GitHub would answer with 404. When the tag
+ * list cannot be read at all (rate limit, offline) the same feed is the only
+ * honest answer: guessing a tag would make one link in six a dead end.
+ *
+ * The result is the `releases` tail only: the row already carries the project
+ * URL, and repeating it on all ~80 rows costs tens of kilobytes.
+ *
+ * @param tags - the repository's tag names, when known.
+ * @param version - the published version.
+ * @returns a path such as `/releases/tag/v1.2.3`.
+ */
+export declare function releasePathOf(tags: ReadonlySet<string> | undefined, version: string): string;
+//# sourceMappingURL=version.d.ts.map

package/lib/host/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/host/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,4CAA4C;AAC5C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,0DAA0D;IAC1D,GAAG,EAAE,MAAM,EAAE,CAAA;CACd;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,YAAY,GAAG,IAAI,CAWlF;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAsBpF;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAUzG;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAG5F"}

package/lib/host/version.js

@@ -0,0 +1,114 @@
+/**
+ * Version ordering and release-link helpers.
+ *
+ * Everything here is pure: no I/O, no clock, no ambient state. The host half
+ * uses it to sort published versions and to decide which GitHub page a version
+ * line opens, and the test suite exercises it directly.
+ *
+ * @module dsh-plugin-upgrader/lib/version
+ */
+/**
+ * Parse a semver string into comparable parts.
+ *
+ * @param value - a version like `1.2.3-rc.1`.
+ * @returns parts, or `null` when the string is not semver.
+ */
+export function parseVersion(value) {
+    const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/.exec(String(value ?? '').trim());
+    if (match === null)
+        return null;
+    return {
+        major: Number(match[1]),
+        minor: Number(match[2]),
+        patch: Number(match[3]),
+        pre: match[4] === undefined ? [] : match[4].split('.'),
+    };
+}
+/**
+ * Compare two prerelease identifier lists, semver order.
+ *
+ * @param left - identifiers of the left version.
+ * @param right - identifiers of the right version.
+ * @returns negative, zero, or positive.
+ */
+export function comparePre(left, right) {
+    if (left.length === 0 && right.length === 0)
+        return 0;
+    if (left.length === 0)
+        return 1;
+    if (right.length === 0)
+        return -1;
+    const length = Math.max(left.length, right.length);
+    for (let index = 0; index < length; index += 1) {
+        const a = left[index];
+        const b = right[index];
+        if (a === undefined)
+            return -1;
+        if (b === undefined)
+            return 1;
+        const aNumeric = /^\d+$/.test(a);
+        const bNumeric = /^\d+$/.test(b);
+        if (aNumeric && bNumeric) {
+            const delta = Number(a) - Number(b);
+            if (delta !== 0)
+                return delta;
+            continue;
+        }
+        if (aNumeric)
+            return -1;
+        if (bNumeric)
+            return 1;
+        if (a !== b)
+            return a < b ? -1 : 1;
+    }
+    return 0;
+}
+/**
+ * Compare two versions, semver order; unparsable pairs compare equal.
+ *
+ * @param left - left version.
+ * @param right - right version; an absent value compares equal to anything.
+ * @returns negative when left is older.
+ */
+export function compareVersions(left, right) {
+    const a = parseVersion(left);
+    const b = parseVersion(right);
+    if (a === null || b === null)
+        return 0;
+    return (a.major - b.major ||
+        a.minor - b.minor ||
+        a.patch - b.patch ||
+        comparePre(a.pre, b.pre));
+}
+/**
+ * The tag a published version was released under.
+ *
+ * @param version - the published version.
+ * @returns `v<version>` unless the version already carries the `v`.
+ */
+export function tagOf(version) {
+    return version.startsWith('v') ? version : `v${version}`;
+}
+/**
+ * The GitHub path a version line opens.
+ *
+ * Users read a version line as "what did this release change", so the target is
+ * the release page. That only resolves when the repository actually tagged the
+ * version — `dsh-pet` publishes 59 versions with 8 tags — so the tag list
+ * decides, and a version without a tag of its own falls back to the repository's
+ * release feed rather than to a page GitHub would answer with 404. When the tag
+ * list cannot be read at all (rate limit, offline) the same feed is the only
+ * honest answer: guessing a tag would make one link in six a dead end.
+ *
+ * The result is the `releases` tail only: the row already carries the project
+ * URL, and repeating it on all ~80 rows costs tens of kilobytes.
+ *
+ * @param tags - the repository's tag names, when known.
+ * @param version - the published version.
+ * @returns a path such as `/releases/tag/v1.2.3`.
+ */
+export function releasePathOf(tags, version) {
+    const tag = tagOf(version);
+    return tags?.has(tag) === true ? `/releases/tag/${tag}` : '/releases';
+}
+//# sourceMappingURL=version.js.map

package/lib/host/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/host/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAWH;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAgC;IAC3D,MAAM,KAAK,GAAG,oEAAoE,CAAC,IAAI,CACrF,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAC3B,CAAA;IACD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;KACvD,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,IAAuB,EAAE,KAAwB;IAC1E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IACrD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAClD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;QACrB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;QACtB,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAA;QAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAChC,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;YACnC,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAA;YAC7B,SAAQ;QACV,CAAC;QACD,IAAI,QAAQ;YAAE,OAAO,CAAC,CAAC,CAAA;QACvB,IAAI,QAAQ;YAAE,OAAO,CAAC,CAAA;QACtB,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAA+B,EAAE,KAAgC;IAC/F,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IAC7B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,CAAA;IACtC,OAAO,CACL,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK;QACjB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK;QACjB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK;QACjB,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CACzB,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,OAAe;IACnC,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAA;AAC1D,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAAC,IAAqC,EAAE,OAAe;IAClF,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1B,OAAO,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,CAAA;AACvE,CAAC"}

package/lib/index.d.ts

@@ -0,0 +1,12 @@
+import { type HostContext } from './host/manager.ts';
+/** Stable plugin name; matches the cordis.patch.yml insert id. */
+export declare const name = "plugin-upgrader";
+/** The web server is the only hard dependency; pluginManager is read lazily. */
+export declare const inject: string[];
+/**
+ * Mount the host half.
+ *
+ * @param ctx - the plugin context.
+ */
+export declare function apply(ctx: HostContext): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA2BA,OAAO,EAEL,KAAK,WAAW,EAIjB,MAAM,mBAAmB,CAAA;AAE1B,kEAAkE;AAClE,eAAO,MAAM,IAAI,oBAAoB,CAAA;AAErC,gFAAgF;AAChF,eAAO,MAAM,MAAM,UAAgB,CAAA;AA2DnC;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAkO5C"}

package/lib/index.js

@@ -0,0 +1,254 @@
+import { writeJson, isLoopbackRequest, readJsonBody } from './host/http.js';
+import { buildOverview } from './host/overview.js';
+import { runStep, validateStep } from './host/install.js';
+import { asPluginManager, } from './host/manager.js';
+/** Stable plugin name; matches the cordis.patch.yml insert id. */
+export const name = 'plugin-upgrader';
+/** The web server is the only hard dependency; pluginManager is read lazily. */
+export const inject = ['webServer'];
+/**
+ * Prefix every route this bundle owns. The prefix is registered without a
+ * trailing slash because the carrier matches `path` exactly or `path + '/'`;
+ * a trailing slash here would only ever match the bare prefix itself.
+ */
+const API_PREFIX = '/api/plugin-upgrader';
+/** Path segments are sliced off after the registered prefix. */
+const API_BASE = `${API_PREFIX}/`;
+/** Finished jobs are kept only long enough for the last poll to read them. */
+const JOB_RETENTION_MS = 10 * 60 * 1000;
+/**
+ * A job that stops reporting progress for this long is treated as abandoned
+ * and no longer blocks new work. Installs report progress per step, so a step
+ * that legitimately runs longer than this is a hung child process, not work.
+ */
+const STALE_JOB_MS = 15 * 60 * 1000;
+/** How many log lines one job keeps for the panel. */
+const JOB_LOG_LIMIT = 200;
+/** How many log lines the overview ships for a job the tab adopts. */
+const ADOPTED_LOG_LIMIT = 40;
+/**
+ * Mount the host half.
+ *
+ * @param ctx - the plugin context.
+ */
+export function apply(ctx) {
+    const packumentCache = new Map();
+    const tagCache = new Map();
+    const jobs = new Map();
+    let inFlight = null;
+    const pruneJobs = () => {
+        const cutoff = Date.now() - JOB_RETENTION_MS;
+        for (const [id, job] of jobs) {
+            if (job.finishedAt !== undefined && job.finishedAt < cutoff)
+                jobs.delete(id);
+        }
+    };
+    /** The manager, or a reason the request cannot be served. */
+    const requireManager = () => asPluginManager(ctx.get('pluginManager', false));
+    /**
+     * Run a batch job to completion in the background.
+     *
+     * @param job - the mutable job record.
+     * @param steps - the requested steps.
+     */
+    const runJob = async (job, steps) => {
+        const manager = requireManager();
+        if (manager === undefined) {
+            job.status = 'finished';
+            job.finishedAt = Date.now();
+            job.log.push('job failed: plugin manager unavailable');
+            return;
+        }
+        job.status = 'running';
+        job.heartbeatAt = Date.now();
+        for (const step of steps) {
+            if (job.cancelled)
+                break;
+            inFlight = { requestId: step.requestId ?? '' };
+            job.current = `${step.name}@${step.version}`;
+            job.log.push(`→ ${job.current}`);
+            const outcome = await runStep(manager, step, (message) => {
+                job.log.push(message);
+                if (job.log.length > JOB_LOG_LIMIT)
+                    job.log.splice(0, job.log.length - JOB_LOG_LIMIT);
+            });
+            inFlight = null;
+            job.heartbeatAt = Date.now();
+            job.results.push(outcome);
+            job.done = job.results.length;
+            if (!outcome.ok)
+                job.failed += 1;
+            job.log.push(outcome.ok
+                ? `✓ ${job.current} ${outcome.application ?? 'applied'}`
+                : `✗ ${job.current} ${outcome.message ?? 'failed'}`);
+        }
+        job.status = job.cancelled ? 'cancelled' : 'finished';
+        job.current = undefined;
+        job.finishedAt = Date.now();
+        job.cacheDirty = true;
+    };
+    /**
+     * A running job is only blocking while it is actually making progress.
+     *
+     * @returns the live job, if one is genuinely running.
+     */
+    const activeJob = () => {
+        for (const job of jobs.values()) {
+            if (job.status !== 'running' && job.status !== 'queued')
+                continue;
+            const seen = job.heartbeatAt ?? job.startedAt ?? 0;
+            if (Date.now() - seen < STALE_JOB_MS)
+                return job;
+            job.status = 'finished';
+            job.abandoned = true;
+            job.current = undefined;
+            job.finishedAt = Date.now();
+            job.log.push('! job abandoned: no progress for 15 minutes');
+        }
+        return undefined;
+    };
+    /**
+     * One dispatcher for every route under the prefix.
+     *
+     * @param req - the request.
+     * @param res - the response.
+     */
+    const handler = async (req, res) => {
+        if (!isLoopbackRequest(req)) {
+            writeJson(res, 403, { error: 'loopback-only' });
+            return;
+        }
+        const url = new URL(req.url ?? '/', 'http://localhost');
+        const pathname = url.pathname.endsWith('/') && url.pathname.length > API_BASE.length
+            ? url.pathname.slice(0, -1)
+            : url.pathname;
+        const route = pathname.startsWith(API_BASE) ? pathname.slice(API_BASE.length) : '';
+        try {
+            if (req.method === 'GET' && route === 'overview') {
+                const force = url.searchParams.get('refresh') === '1';
+                const locale = url.searchParams.get('locale') === 'zh' ? 'zh' : 'en';
+                pruneJobs();
+                const live = activeJob();
+                writeJson(res, 200, {
+                    ...(await buildOverview(ctx, packumentCache, tagCache, { force, locale })),
+                    /**
+                     * The tab is remounted whenever the Plugins page is reopened, and the
+                     * job map only lives in this process. Reporting the live job lets a
+                     * fresh tab adopt work that is still running instead of firing a
+                     * second batch into a 409.
+                     */
+                    active: live === undefined
+                        ? null
+                        : {
+                            id: live.id,
+                            status: live.status,
+                            total: live.total,
+                            done: live.done,
+                            failed: live.failed,
+                            current: live.current,
+                            startedAt: live.startedAt,
+                            log: live.log.slice(-ADOPTED_LOG_LIMIT),
+                        },
+                    jobs: [...jobs.entries()]
+                        .filter(([, job]) => job.finishedAt !== undefined)
+                        .map(([id, job]) => ({
+                        id,
+                        status: job.status,
+                        failed: job.failed,
+                        done: job.done,
+                        total: job.total,
+                        finishedAt: job.finishedAt,
+                    })),
+                });
+                return;
+            }
+            if (req.method === 'POST' && route === 'job') {
+                const body = await readJsonBody(req);
+                const rawSteps = body?.steps;
+                const steps = Array.isArray(rawSteps) ? rawSteps : [];
+                if (steps.length === 0) {
+                    writeJson(res, 400, { error: 'no-steps' });
+                    return;
+                }
+                for (const step of steps) {
+                    const problem = validateStep(step);
+                    if (problem !== undefined) {
+                        writeJson(res, 400, { error: problem });
+                        return;
+                    }
+                }
+                const running = activeJob();
+                if (running !== undefined) {
+                    writeJson(res, 409, {
+                        error: 'busy',
+                        id: running.id,
+                        current: running.current,
+                        done: running.done,
+                        total: running.total,
+                    });
+                    return;
+                }
+                const id = globalThis.crypto?.randomUUID?.() ??
+                    `job-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+                const job = {
+                    id,
+                    status: 'queued',
+                    total: steps.length,
+                    done: 0,
+                    failed: 0,
+                    results: [],
+                    log: [],
+                    cancelled: false,
+                    startedAt: Date.now(),
+                };
+                jobs.set(id, job);
+                void runJob(job, steps).catch((error) => {
+                    job.status = 'finished';
+                    job.finishedAt = Date.now();
+                    job.log.push(`job failed: ${error instanceof Error ? error.message : String(error)}`);
+                });
+                writeJson(res, 202, { id });
+                return;
+            }
+            if (req.method === 'GET' && route === 'job') {
+                const id = url.searchParams.get('id');
+                const job = id === null ? undefined : jobs.get(id);
+                if (job === undefined) {
+                    writeJson(res, 404, { error: 'unknown-job' });
+                    return;
+                }
+                writeJson(res, 200, job);
+                return;
+            }
+            if (req.method === 'POST' && route === 'cancel') {
+                const running = [...jobs.values()].find((job) => job.status === 'running');
+                if (running === undefined) {
+                    writeJson(res, 200, { status: 'not-running' });
+                    return;
+                }
+                running.cancelled = true;
+                const manager = requireManager();
+                const target = inFlight;
+                if (manager !== undefined && target !== null && target.requestId !== '') {
+                    try {
+                        await manager.cancelInstall(target.requestId);
+                    }
+                    catch {
+                        /* the step settles on its own; the flag above already stops the batch */
+                    }
+                }
+                writeJson(res, 200, { status: 'cancelling' });
+                return;
+            }
+            writeJson(res, 404, { error: 'not-found' });
+        }
+        catch (error) {
+            const status = typeof error?.status === 'number'
+                ? error.status
+                : 500;
+            writeJson(res, status, { error: error instanceof Error ? error.message : String(error) });
+        }
+    };
+    ctx.effect(() => ctx.webServer.register({ kind: 'prefix', path: API_PREFIX, handler }), 'plugin-upgrader: routes');
+}
+//# sourceMappingURL=index.js.map