vana-cli 0.24.5 → 0.25.0

package/dist/pdpp/host.js

@@ -0,0 +1,283 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import fsp from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { execFile, execFileSync } from "node:child_process";
+import { createRequire } from "node:module";
+import { promisify } from "node:util";
+import * as tar from "tar";
+import { getVanaHome } from "../core/paths.js";
+import { getSystemChromePath } from "../runtime/playwright/index.js";
+const execFileAsync = promisify(execFile);
+const require = createRequire(import.meta.url);
+/** Everything the CLI keeps for Collection Profile connectors. */
+export function getPdppHome() {
+    return path.join(getVanaHome(), "pdpp");
+}
+/**
+ * The Node release installed when no compatible one is found. It matches the
+ * runtime Vana Desktop bundles, and the checksums are the official
+ * SHASUMS256.txt values, so a download is checked against a hash that
+ * shipped with the CLI rather than one fetched next to the tarball.
+ */
+export const PDPP_NODE_VERSION = "24.21.0";
+const PDPP_NODE_SHA256 = {
+    "darwin-arm64": "bed7eea5325e1108f32ce5228ddd6a5f0f08a499ee42aa7442aea583702f6057",
+    "darwin-x64": "1462cb3b3046b815cf8ea436d3da450ec1a9f11dac7e5a46b0ada5305d7e8097",
+    "linux-arm64": "724282c3b43aec998aa9527380465b45d229e021b58035f5f4f63095eabfe5d5",
+    "linux-x64": "6e1db87ef58b8819e5d5402eff1536491b18edd8eb7bee5ef7897876e88dc5ff",
+};
+function parseVersion(value) {
+    const match = /^v?(\d+)(?:\.(\d+))?(?:\.(\d+))?$/.exec(value.trim());
+    if (!match)
+        return null;
+    return [Number(match[1]), Number(match[2] ?? 0), Number(match[3] ?? 0)];
+}
+function compareVersions(left, right) {
+    for (let index = 0; index < 3; index += 1) {
+        const difference = left[index] - right[index];
+        if (difference !== 0)
+            return difference;
+    }
+    return 0;
+}
+/**
+ * Whether `version` satisfies a space-separated comparator range such as
+ * `>=24.15.0 <25`, the only form artifact provenance uses. Anything the
+ * parser does not understand fails closed.
+ */
+export function satisfiesNodeRange(version, range) {
+    const actual = parseVersion(version);
+    if (!actual)
+        return false;
+    const comparators = range.trim().split(/\s+/).filter(Boolean);
+    if (comparators.length === 0)
+        return false;
+    return comparators.every((comparator) => {
+        const match = /^(>=|<=|>|<|=)?(.+)$/.exec(comparator);
+        const bound = match ? parseVersion(match[2]) : null;
+        if (!match || !bound)
+            return false;
+        const order = compareVersions(actual, bound);
+        switch (match[1] ?? "=") {
+            case ">=":
+                return order >= 0;
+            case "<=":
+                return order <= 0;
+            case ">":
+                return order > 0;
+            case "<":
+                return order < 0;
+            default:
+                return order === 0;
+        }
+    });
+}
+async function readNodeVersion(binary) {
+    try {
+        const { stdout } = await execFileAsync(binary, ["--version"], {
+            timeout: 10_000,
+            windowsHide: true,
+        });
+        // A standalone vana binary answers --version with its own version, which
+        // parses but is not a Node release; only a `v`-prefixed line is Node.
+        const line = stdout.trim();
+        return /^v\d+\.\d+\.\d+$/.test(line) ? line.slice(1) : null;
+    }
+    catch {
+        return null;
+    }
+}
+function nodeBinaryName() {
+    return process.platform === "win32" ? "node.exe" : "node";
+}
+function managedNodeDir() {
+    return path.join(getPdppHome(), "node", PDPP_NODE_VERSION);
+}
+function managedNodeBinary() {
+    return process.platform === "win32"
+        ? path.join(managedNodeDir(), nodeBinaryName())
+        : path.join(managedNodeDir(), "bin", nodeBinaryName());
+}
+function candidateNodeBinaries() {
+    const candidates = [];
+    if (process.env.VANA_PDPP_NODE)
+        candidates.push(process.env.VANA_PDPP_NODE);
+    candidates.push(managedNodeBinary());
+    candidates.push(process.execPath);
+    for (const dir of (process.env.PATH ?? "").split(path.delimiter)) {
+        if (dir)
+            candidates.push(path.join(dir, nodeBinaryName()));
+    }
+    // nvm installs are usually not on PATH for a version other than the
+    // current default, which is exactly the version a connector may need.
+    const nvmVersions = path.join(process.env.NVM_DIR ?? path.join(os.homedir(), ".nvm"), "versions", "node");
+    try {
+        for (const entry of fs.readdirSync(nvmVersions).sort().reverse()) {
+            candidates.push(path.join(nvmVersions, entry, "bin", nodeBinaryName()));
+        }
+    }
+    catch {
+        // No nvm.
+    }
+    return [...new Set(candidates.map((candidate) => path.resolve(candidate)))];
+}
+function readNodeVersionSync(binary) {
+    try {
+        const line = execFileSync(binary, ["--version"], {
+            encoding: "utf8",
+            timeout: 5_000,
+            windowsHide: true,
+            stdio: ["ignore", "pipe", "ignore"],
+        }).trim();
+        return /^v\d+\.\d+\.\d+$/.test(line) ? line.slice(1) : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Synchronous {@link findCompatibleNode}, for status checks that cannot await. */
+export function findCompatibleNodeSync(range) {
+    for (const candidate of candidateNodeBinaries()) {
+        if (!fs.existsSync(candidate))
+            continue;
+        const version = readNodeVersionSync(candidate);
+        if (version && satisfiesNodeRange(version, range)) {
+            return { path: candidate, version };
+        }
+    }
+    return null;
+}
+/**
+ * A Node binary on this machine that satisfies `range`, or null.
+ *
+ * `VANA_PDPP_NODE` wins when it satisfies the range; a standalone vana
+ * binary's own Node cannot run a script, so every candidate is asked for its
+ * version rather than trusted from `process.version`.
+ */
+export async function findCompatibleNode(range) {
+    for (const candidate of candidateNodeBinaries()) {
+        if (!fs.existsSync(candidate))
+            continue;
+        const version = await readNodeVersion(candidate);
+        if (version && satisfiesNodeRange(version, range)) {
+            return { path: candidate, version };
+        }
+    }
+    return null;
+}
+/** Whether the pinned Node release this CLI can install satisfies `range`. */
+export function canInstallNodeFor(range) {
+    return (satisfiesNodeRange(PDPP_NODE_VERSION, range) &&
+        Boolean(PDPP_NODE_SHA256[`${process.platform}-${process.arch}`]));
+}
+/**
+ * Download the pinned Node release into ~/.vana/pdpp/node and check it
+ * against the checksum compiled into the CLI before anything is unpacked.
+ */
+export async function installManagedNode(logPath) {
+    const platformKey = `${process.platform}-${process.arch}`;
+    const expected = PDPP_NODE_SHA256[platformKey];
+    if (!expected) {
+        throw new Error(`No Node ${PDPP_NODE_VERSION} build is pinned for ${platformKey}. Install Node 24 yourself and set VANA_PDPP_NODE to its path.`);
+    }
+    const archiveName = `node-v${PDPP_NODE_VERSION}-${platformKey}.tar.gz`;
+    const url = `https://nodejs.org/dist/v${PDPP_NODE_VERSION}/${archiveName}`;
+    await fsp.appendFile(logPath, `Downloading ${url}\n`, "utf8");
+    const response = await fetch(url, { headers: { "User-Agent": "vana-cli" } });
+    if (!response.ok) {
+        throw new Error(`Could not download Node ${PDPP_NODE_VERSION}: ${response.status}`);
+    }
+    const archive = Buffer.from(await response.arrayBuffer());
+    const actual = crypto.createHash("sha256").update(archive).digest("hex");
+    if (actual !== expected) {
+        throw new Error(`Node ${PDPP_NODE_VERSION} download failed its checksum (expected ${expected}, got ${actual}).`);
+    }
+    const parent = path.dirname(managedNodeDir());
+    await fsp.mkdir(parent, { recursive: true });
+    const staging = await fsp.mkdtemp(path.join(parent, ".staging-"));
+    try {
+        const archivePath = path.join(staging, archiveName);
+        await fsp.writeFile(archivePath, archive);
+        await tar.x({ file: archivePath, cwd: staging, strip: 1 });
+        await fsp.rm(archivePath, { force: true });
+        await fsp.rm(managedNodeDir(), { recursive: true, force: true });
+        await fsp.rename(staging, managedNodeDir());
+    }
+    catch (error) {
+        await fsp.rm(staging, { recursive: true, force: true });
+        throw error;
+    }
+    await fsp.appendFile(logPath, `Installed Node into ${managedNodeDir()}\n`, "utf8");
+    const version = await readNodeVersion(managedNodeBinary());
+    if (!version) {
+        throw new Error(`Installed Node at ${managedNodeBinary()} does not run.`);
+    }
+    return { path: managedNodeBinary(), version };
+}
+/**
+ * Make each host package an artifact declares resolvable from its install
+ * root, at exactly the declared version.
+ *
+ * A signed artifact leaves its browser driver out and loads it by dynamic
+ * import, and ESM resolution ignores NODE_PATH, so the package has to sit in
+ * a `node_modules` directory above the artifact. The CLI ships the pinned
+ * version and links it there rather than installing a second copy.
+ */
+export async function linkHostPackages(installRoot, contract) {
+    const nodeModules = path.join(installRoot, "node_modules");
+    await fsp.mkdir(nodeModules, { recursive: true });
+    for (const declared of contract.packages) {
+        let packageRoot;
+        try {
+            packageRoot = path.dirname(require.resolve(`${declared.package}/package.json`));
+        }
+        catch {
+            throw new Error(`This connector needs ${declared.package} ${declared.declared_version}, which this build of vana does not include.`);
+        }
+        const { version } = JSON.parse(await fsp.readFile(path.join(packageRoot, "package.json"), "utf8"));
+        if (version !== declared.declared_version) {
+            throw new Error(`This connector needs ${declared.package} ${declared.declared_version}, but vana includes ${version}. Update vana.`);
+        }
+        const link = path.join(nodeModules, declared.package);
+        await fsp.rm(link, { recursive: true, force: true });
+        await fsp.symlink(packageRoot, link, process.platform === "win32" ? "junction" : "dir");
+    }
+}
+/** Where connector browser profiles live; owned by the CLI, never shared. */
+export function getPdppProfileRoot() {
+    return path.join(getPdppHome(), "profiles");
+}
+function patchrightBrowsersDir() {
+    return path.join(getPdppHome(), "browsers");
+}
+/**
+ * Environment that decides which browser a connector launches.
+ *
+ * System Chrome is preferred for the same reason the legacy runtime prefers
+ * it: sites treat it as a normal browser. Without it the connector's own
+ * patchright Chromium is used, installed once under ~/.vana/pdpp/browsers.
+ */
+export function browserEnvironment() {
+    if (getSystemChromePath()) {
+        return { PDPP_BROWSER_CHANNEL: "chrome" };
+    }
+    return { PLAYWRIGHT_BROWSERS_PATH: patchrightBrowsersDir() };
+}
+export async function ensureConnectorBrowser(node, logPath) {
+    if (getSystemChromePath())
+        return;
+    const cliPath = path.join(path.dirname(require.resolve("patchright/package.json")), "cli.js");
+    await fsp.appendFile(logPath, "Installing Chromium for patchright\n", "utf8");
+    const { stdout, stderr } = await execFileAsync(node.path, [cliPath, "install", "chromium"], {
+        env: {
+            ...process.env,
+            PLAYWRIGHT_BROWSERS_PATH: patchrightBrowsersDir(),
+        },
+        windowsHide: true,
+        maxBuffer: 16 * 1024 * 1024,
+    });
+    await fsp.appendFile(logPath, `${stdout}${stderr}`, "utf8");
+}
+//# sourceMappingURL=host.js.map

package/dist/pdpp/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../src/pdpp/host.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,GAAG,MAAM,kBAAkB,CAAC;AACnC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAE3B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,kEAAkE;AAClE,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAC3C,MAAM,gBAAgB,GAA2B;IAC/C,cAAc,EACZ,kEAAkE;IACpE,YAAY,EACV,kEAAkE;IACpE,aAAa,EACX,kEAAkE;IACpE,WAAW,EACT,kEAAkE;CACrE,CAAC;AAUF,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,eAAe,CAAC,IAAa,EAAE,KAAc;IACpD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,KAAa;IAC/D,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE;QACtC,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7C,QAAQ,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;YACxB,KAAK,IAAI;gBACP,OAAO,KAAK,IAAI,CAAC,CAAC;YACpB,KAAK,IAAI;gBACP,OAAO,KAAK,IAAI,CAAC,CAAC;YACpB,KAAK,GAAG;gBACN,OAAO,KAAK,GAAG,CAAC,CAAC;YACnB,KAAK,GAAG;gBACN,OAAO,KAAK,GAAG,CAAC,CAAC;YACnB;gBACE,OAAO,KAAK,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAc;IAC3C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;YAC5D,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;AAC5D,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO;QACjC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,CAAC;QAC/C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5E,UAAU,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACrC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,IAAI,GAAG;YAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,oEAAoE;IACpE,sEAAsE;IACtE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,EACtD,UAAU,EACV,MAAM,CACP,CAAC;IACF,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YACjE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAOD,SAAS,mBAAmB,CAAC,MAAc;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;YAC/C,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,KAAK,MAAM,SAAS,IAAI,qBAAqB,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACxC,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,OAAO,IAAI,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAa;IAEb,KAAK,MAAM,SAAS,IAAI,qBAAqB,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACxC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,OAAO,IAAI,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,CACL,kBAAkB,CAAC,iBAAiB,EAAE,KAAK,CAAC;QAC5C,OAAO,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe;IAEf,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,WAAW,iBAAiB,wBAAwB,WAAW,gEAAgE,CAChI,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,iBAAiB,IAAI,WAAW,SAAS,CAAC;IACvE,MAAM,GAAG,GAAG,4BAA4B,iBAAiB,IAAI,WAAW,EAAE,CAAC;IAC3E,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAE9D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,2BAA2B,iBAAiB,KAAK,QAAQ,CAAC,MAAM,EAAE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,QAAQ,iBAAiB,2CAA2C,QAAQ,SAAS,MAAM,IAAI,CAChG,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9C,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,GAAG,CAAC,UAAU,CAClB,OAAO,EACP,uBAAuB,cAAc,EAAE,IAAI,EAC3C,MAAM,CACP,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,qBAAqB,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,QAA6B;IAE7B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC3D,MAAM,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACzC,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,IAAI,CAAC,OAAO,CACxB,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,OAAO,eAAe,CAAC,CACpD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,gBAAgB,8CAA8C,CACpH,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAC5B,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAC5C,CAAC;QACzB,IAAI,OAAO,KAAK,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,gBAAgB,uBAAuB,OAAO,gBAAgB,CACpH,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,GAAG,CAAC,OAAO,CACf,WAAW,EACX,IAAI,EACJ,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAClD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,mBAAmB,EAAE,EAAE,CAAC;QAC1B,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAkB,EAClB,OAAe;IAEf,IAAI,mBAAmB,EAAE;QAAE,OAAO;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,EACxD,QAAQ,CACT,CAAC;IACF,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,sCAAsC,EAAE,MAAM,CAAC,CAAC;IAC9E,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAC5C,IAAI,CAAC,IAAI,EACT,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,EAChC;QACE,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,wBAAwB,EAAE,qBAAqB,EAAE;SAClD;QACD,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC5B,CACF,CAAC;IACF,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,MAAM,GAAG,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;AAC9D,CAAC"}

package/dist/pdpp/installer.d.ts

@@ -0,0 +1,17 @@
+import { type PdppPin } from "./pins.js";
+import { type PdppLaunch } from "./profile.js";
+export declare function artifactRootFor(pin: PdppPin, installRoot?: string): string;
+/**
+ * Read an installed artifact into a launch, refusing one whose manifest does
+ * not describe the pinned connector.
+ */
+export declare function readInstalledLaunch(pin: PdppPin, artifactRoot: string, installRoot: string): Promise<PdppLaunch>;
+/**
+ * Install the pinned artifact if needed and verify it, returning how to run
+ * it. Nothing unverified is ever returned: an existing install is re-checked
+ * against the registry's signed digest on every call, and a fresh one is
+ * unpacked into a staging directory and moved into place only after the
+ * installer has checked its signature and every file digest.
+ */
+export declare function ensurePinnedArtifact(pin: PdppPin, logPath: string, installRoot?: string): Promise<PdppLaunch>;
+//# sourceMappingURL=installer.d.ts.map

package/dist/pdpp/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../src/pdpp/installer.ts"],"names":[],"mappings":"AAKA,OAAO,EAAmB,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAA0B,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAgBvE,wBAAgB,eAAe,CAC7B,GAAG,EAAE,OAAO,EACZ,WAAW,SAAgB,GAC1B,MAAM,CAER;AA6BD;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,OAAO,EACZ,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,UAAU,CAAC,CAiCrB;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,EACf,WAAW,SAAgB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAiDrB"}

package/dist/pdpp/installer.js

@@ -0,0 +1,117 @@
+import fs from "node:fs";
+import fsp from "node:fs/promises";
+import path from "node:path";
+import { getPdppHome } from "./host.js";
+import { pinOciReference } from "./pins.js";
+import { parseCollectionProfile } from "./profile.js";
+// Loaded on first use: sigstore and its dependencies are not worth paying for
+// on every CLI start, and legacy sources never need them.
+async function loadInstallerCore() {
+    return (await import("../vendor/pdpp-connector-manager/index.mjs"));
+}
+const PROFILE_PATH = "profile/collection-profile.json";
+const ENTRYPOINT_PATH = "dist/collection-profile.mjs";
+const PROVENANCE_PATH = "provenance.json";
+export function artifactRootFor(pin, installRoot = getPdppHome()) {
+    return path.join(installRoot, "collection-profiles", pin.id);
+}
+function lockFor(core, pin) {
+    const reference = core.parseConnectorOciReference(pinOciReference(pin));
+    return {
+        lockVersion: "2.0",
+        connectors: [
+            {
+                connectorId: pin.id,
+                connectorKey: reference.connectorKey,
+                version: pin.version,
+                artifactKind: "pdpp-collection-profile",
+                manifestPath: PROFILE_PATH,
+                entrypointPath: ENTRYPOINT_PATH,
+                provenancePath: PROVENANCE_PATH,
+                oci: {
+                    registry: reference.registry,
+                    repository: reference.repository,
+                    digest: reference.digest,
+                },
+            },
+        ],
+    };
+}
+async function readJson(file) {
+    return JSON.parse(await fsp.readFile(file, "utf8"));
+}
+/**
+ * Read an installed artifact into a launch, refusing one whose manifest does
+ * not describe the pinned connector.
+ */
+export async function readInstalledLaunch(pin, artifactRoot, installRoot) {
+    const profile = parseCollectionProfile(await readJson(path.join(artifactRoot, PROFILE_PATH)), `${pin.name} profile`);
+    if (profile.connector_key !== pin.id || profile.version !== pin.version) {
+        throw new Error(`The installed ${pin.name} connector is ${profile.connector_key} ${profile.version}, not the pinned ${pin.id} ${pin.version}.`);
+    }
+    const provenance = (await readJson(path.join(artifactRoot, PROVENANCE_PATH)));
+    const contract = provenance.host_runtime_contract;
+    if (!contract || typeof contract.node !== "string") {
+        throw new Error(`The ${pin.name} connector does not say which Node it needs.`);
+    }
+    return {
+        source: pin.id,
+        displayName: profile.display_name ?? pin.name,
+        version: profile.version,
+        profile,
+        args: [path.join(artifactRoot, ENTRYPOINT_PATH)],
+        cwd: artifactRoot,
+        nodeRange: contract.node,
+        installRoot,
+        hostPackages: Array.isArray(contract.packages) ? contract.packages : [],
+        origin: "pinned",
+    };
+}
+/**
+ * Install the pinned artifact if needed and verify it, returning how to run
+ * it. Nothing unverified is ever returned: an existing install is re-checked
+ * against the registry's signed digest on every call, and a fresh one is
+ * unpacked into a staging directory and moved into place only after the
+ * installer has checked its signature and every file digest.
+ */
+export async function ensurePinnedArtifact(pin, logPath, installRoot = getPdppHome()) {
+    const core = await loadInstallerCore();
+    const lock = lockFor(core, pin);
+    const artifactRoot = artifactRootFor(pin, installRoot);
+    await fsp.mkdir(installRoot, { recursive: true });
+    if (fs.existsSync(artifactRoot)) {
+        const verified = await core.verifyInstalled({
+            lock,
+            source: null,
+            installRoot,
+            layout: "snapshot",
+        });
+        if (verified.ok) {
+            await fsp.appendFile(logPath, `Verified ${pinOciReference(pin)}\n`, "utf8");
+            return readInstalledLaunch(pin, artifactRoot, installRoot);
+        }
+        await fsp.appendFile(logPath, `Installed ${pin.id} failed verification (missing: ${verified.missing.join(", ") || "none"}; changed: ${verified.mismatched.join(", ") || "none"}); reinstalling.\n`, "utf8");
+    }
+    const staging = await fsp.mkdtemp(path.join(installRoot, ".staging-"));
+    try {
+        await core.installFromLock({
+            lock,
+            source: null,
+            installRoot: staging,
+            layout: "snapshot",
+            allowTagResolution: false,
+        });
+        const stagedArtifact = artifactRootFor(pin, staging);
+        // Validate before the swap so a bad artifact never replaces a good one.
+        await readInstalledLaunch(pin, stagedArtifact, installRoot);
+        await fsp.mkdir(path.dirname(artifactRoot), { recursive: true });
+        await fsp.rm(artifactRoot, { recursive: true, force: true });
+        await fsp.rename(stagedArtifact, artifactRoot);
+    }
+    finally {
+        await fsp.rm(staging, { recursive: true, force: true });
+    }
+    await fsp.appendFile(logPath, `Installed ${pinOciReference(pin)}\n`, "utf8");
+    return readInstalledLaunch(pin, artifactRoot, installRoot);
+}
+//# sourceMappingURL=installer.js.map

package/dist/pdpp/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../src/pdpp/installer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,GAAG,MAAM,kBAAkB,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAA4B,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,eAAe,EAAgB,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAmB,MAAM,cAAc,CAAC;AAMvE,8EAA8E;AAC9E,0DAA0D;AAC1D,KAAK,UAAU,iBAAiB;IAC9B,OAAO,CAAC,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAkB,CAAC;AACvF,CAAC;AAED,MAAM,YAAY,GAAG,iCAAiC,CAAC;AACvD,MAAM,eAAe,GAAG,6BAA6B,CAAC;AACtD,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAE1C,MAAM,UAAU,eAAe,CAC7B,GAAY,EACZ,WAAW,GAAG,WAAW,EAAE;IAE3B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,OAAO,CAAC,IAAmB,EAAE,GAAY;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,0BAA0B,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,OAAO;QACL,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE;YACV;gBACE,WAAW,EAAE,GAAG,CAAC,EAAE;gBACnB,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,YAAY,EAAE,yBAAyB;gBACvC,YAAY,EAAE,YAAY;gBAC1B,cAAc,EAAE,eAAe;gBAC/B,cAAc,EAAE,eAAe;gBAC/B,GAAG,EAAE;oBACH,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,UAAU,EAAE,SAAS,CAAC,UAAU;oBAChC,MAAM,EAAE,SAAS,CAAC,MAAM;iBACzB;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAY,EACZ,YAAoB,EACpB,WAAmB;IAEnB,MAAM,OAAO,GAAG,sBAAsB,CACpC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,EACrD,GAAG,GAAG,CAAC,IAAI,UAAU,CACtB,CAAC;IACF,IAAI,OAAO,CAAC,aAAa,KAAK,GAAG,CAAC,EAAE,IAAI,OAAO,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CACb,iBAAiB,GAAG,CAAC,IAAI,iBAAiB,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,OAAO,oBAAoB,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,OAAO,GAAG,CAC/H,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,MAAM,QAAQ,CAChC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CACzC,CAA6D,CAAC;IAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,qBAAqB,CAAC;IAClD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,OAAO,GAAG,CAAC,IAAI,8CAA8C,CAC9D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,EAAE;QACd,WAAW,EAAE,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC,IAAI;QAC7C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO;QACP,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QAChD,GAAG,EAAE,YAAY;QACjB,SAAS,EAAE,QAAQ,CAAC,IAAI;QACxB,WAAW;QACX,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;QACvE,MAAM,EAAE,QAAQ;KACjB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAY,EACZ,OAAe,EACf,WAAW,GAAG,WAAW,EAAE;IAE3B,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAElD,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC;YAC1C,IAAI;YACJ,MAAM,EAAE,IAAI;YACZ,WAAW;YACX,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,GAAG,CAAC,UAAU,CAClB,OAAO,EACP,YAAY,eAAe,CAAC,GAAG,CAAC,IAAI,EACpC,MAAM,CACP,CAAC;YACF,OAAO,mBAAmB,CAAC,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,GAAG,CAAC,UAAU,CAClB,OAAO,EACP,aAAa,GAAG,CAAC,EAAE,kCAAkC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,cAAc,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,oBAAoB,EACpK,MAAM,CACP,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,eAAe,CAAC;YACzB,IAAI;YACJ,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,OAAO;YACpB,MAAM,EAAE,UAAU;YAClB,kBAAkB,EAAE,KAAK;SAC1B,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACrD,wEAAwE;QACxE,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;QAE5D,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IACjD,CAAC;YAAS,CAAC;QACT,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7E,OAAO,mBAAmB,CAAC,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;AAC7D,CAAC"}

package/dist/pdpp/local.d.ts

@@ -0,0 +1,14 @@
+import { type PdppLaunch } from "./profile.js";
+/**
+ * Run a connector from a data-connectors checkout instead of a signed
+ * artifact, the way `connector-dev` does, so an author can test it before it
+ * is published.
+ *
+ * Both layouts are accepted: connectors at the repository root
+ * (`connectors/<key>/index.ts` with `connectors/<key>/manifest.json`), and
+ * the earlier `packages/polyfill-connectors/connectors/<key>/index.ts` with
+ * `manifests/<key>.json`. The checkout's own `node_modules` supplies tsx and
+ * the browser driver.
+ */
+export declare function resolveLocalLaunch(checkout: string, source: string): Promise<PdppLaunch>;
+//# sourceMappingURL=local.d.ts.map

package/dist/pdpp/local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/pdpp/local.ts"],"names":[],"mappings":"AAIA,OAAO,EAA0B,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAqBvE;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CAsDrB"}

package/dist/pdpp/local.js

@@ -0,0 +1,76 @@
+import fs from "node:fs";
+import fsp from "node:fs/promises";
+import path from "node:path";
+import { parseCollectionProfile } from "./profile.js";
+/** The published artifacts' range, used when a checkout declares none. */
+const DEFAULT_NODE_RANGE = ">=24.15.0 <25";
+function firstExisting(candidates) {
+    return candidates.find((candidate) => fs.existsSync(candidate)) ?? null;
+}
+/** Nearest directory at or above `start`, up to `stop`, with tsx installed. */
+function findToolRoot(start, stop) {
+    let current = start;
+    while (true) {
+        if (fs.existsSync(path.join(current, "node_modules", "tsx"))) {
+            return current;
+        }
+        if (current === stop || path.dirname(current) === current)
+            return null;
+        current = path.dirname(current);
+    }
+}
+/**
+ * Run a connector from a data-connectors checkout instead of a signed
+ * artifact, the way `connector-dev` does, so an author can test it before it
+ * is published.
+ *
+ * Both layouts are accepted: connectors at the repository root
+ * (`connectors/<key>/index.ts` with `connectors/<key>/manifest.json`), and
+ * the earlier `packages/polyfill-connectors/connectors/<key>/index.ts` with
+ * `manifests/<key>.json`. The checkout's own `node_modules` supplies tsx and
+ * the browser driver.
+ */
+export async function resolveLocalLaunch(checkout, source) {
+    const root = path.resolve(checkout);
+    const key = source.toLowerCase();
+    const bases = [root, path.join(root, "packages", "polyfill-connectors")];
+    for (const base of bases) {
+        const entry = path.join(base, "connectors", key, "index.ts");
+        if (!fs.existsSync(entry))
+            continue;
+        const manifestPath = firstExisting([
+            path.join(base, "connectors", key, "manifest.json"),
+            path.join(base, "manifests", `${key}.json`),
+        ]);
+        if (!manifestPath) {
+            throw new Error(`Found ${entry} but no manifest for ${key}.`);
+        }
+        const profile = parseCollectionProfile(JSON.parse(await fsp.readFile(manifestPath, "utf8")), manifestPath);
+        const cwd = findToolRoot(path.dirname(entry), root);
+        if (!cwd) {
+            throw new Error(`tsx is not installed in ${root}. Run npm install there first.`);
+        }
+        let nodeRange = DEFAULT_NODE_RANGE;
+        try {
+            const pkg = JSON.parse(await fsp.readFile(path.join(cwd, "package.json"), "utf8"));
+            nodeRange = pkg.engines?.node ?? DEFAULT_NODE_RANGE;
+        }
+        catch {
+            // No package.json at the tool root; keep the default.
+        }
+        return {
+            source: key,
+            displayName: profile.display_name ?? key,
+            version: profile.version,
+            profile,
+            args: ["--import", "tsx", entry],
+            cwd,
+            nodeRange,
+            installRoot: null,
+            hostPackages: [],
+            origin: "local",
+        };
+    }
+    throw new Error(`No connector named ${key} in ${root}. Looked for connectors/${key}/index.ts at the root and under packages/polyfill-connectors.`);
+}
+//# sourceMappingURL=local.js.map

package/dist/pdpp/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/pdpp/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,GAAG,MAAM,kBAAkB,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAAmB,MAAM,cAAc,CAAC;AAEvE,0EAA0E;AAC1E,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAE3C,SAAS,aAAa,CAAC,UAAoB;IACzC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC;AAC1E,CAAC;AAED,+EAA+E;AAC/E,SAAS,YAAY,CAAC,KAAa,EAAE,IAAY;IAC/C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QACvE,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,MAAc;IAEd,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS;QAEpC,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,eAAe,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,GAAG,OAAO,CAAC;SAC5C,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,wBAAwB,GAAG,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,OAAO,GAAG,sBAAsB,CACpC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,EACpD,YAAY,CACb,CAAC;QAEF,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,gCAAgC,CAChE,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,GAAG,kBAAkB,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CACxB,CAAC;YACrC,SAAS,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,kBAAkB,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;QAED,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,OAAO,CAAC,YAAY,IAAI,GAAG;YACxC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO;YACP,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC;YAChC,GAAG;YACH,SAAS;YACT,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,EAAE;YAChB,MAAM,EAAE,OAAO;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CACb,sBAAsB,GAAG,OAAO,IAAI,2BAA2B,GAAG,+DAA+D,CAClI,CAAC;AACJ,CAAC"}

package/dist/pdpp/pins.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Collection Profile connectors this CLI will install, each pinned to one
+ * signed artifact digest.
+ *
+ * The published catalog lists every connector the data-connectors repo
+ * builds, most of them untested against a real account and many sharing an
+ * id with a legacy connector. Pinning follows Vana Desktop's admission list:
+ * a connector appears here once it has been proven end to end, and the digest
+ * is what gets verified, so a catalog update cannot change what runs.
+ */
+export interface PdppPin {
+    /** Source id in `vana sources`, and the connector key in the registry. */
+    id: string;
+    name: string;
+    company: string;
+    description: string;
+    version: string;
+    digest: string;
+}
+export declare const PDPP_PINS: readonly PdppPin[];
+export declare function findPdppPin(source: string): PdppPin | null;
+export declare function pinOciReference(pin: PdppPin): string;
+//# sourceMappingURL=pins.d.ts.map

package/dist/pdpp/pins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pins.d.ts","sourceRoot":"","sources":["../../src/pdpp/pins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,WAAW,OAAO;IACtB,0EAA0E;IAC1E,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,SAAS,EAAE,SAAS,OAAO,EAWvC,CAAC;AAEF,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAG1D;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAEpD"}

package/dist/pdpp/pins.js

@@ -0,0 +1,18 @@
+export const PDPP_PINS = [
+    {
+        id: "whoop",
+        name: "WHOOP",
+        company: "WHOOP",
+        description: "Exports your WHOOP profile, body measurements, cycles, recoveries, sleeps and workouts.",
+        version: "0.1.0",
+        digest: "sha256:daafcf17033be65aac5acd6e106a3d25df370be09b8a6fdda5932ec069b0d114",
+    },
+];
+export function findPdppPin(source) {
+    const id = source.toLowerCase();
+    return PDPP_PINS.find((pin) => pin.id === id) ?? null;
+}
+export function pinOciReference(pin) {
+    return `ghcr.io/pdp-connect/connector/${pin.id}@${pin.digest}`;
+}
+//# sourceMappingURL=pins.js.map

package/dist/pdpp/pins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pins.js","sourceRoot":"","sources":["../../src/pdpp/pins.ts"],"names":[],"mappings":"AAoBA,MAAM,CAAC,MAAM,SAAS,GAAuB;IAC3C;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAO;QAChB,WAAW,EACT,yFAAyF;QAC3F,OAAO,EAAE,OAAO;QAChB,MAAM,EACJ,yEAAyE;KAC5E;CACF,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAChC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,OAAO,iCAAiC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;AACjE,CAAC"}

package/dist/pdpp/profile.d.ts

@@ -0,0 +1,49 @@
+/** The parts of a Collection Profile manifest a host reads. */
+export interface CollectionProfileStream {
+    name: string;
+    required?: boolean;
+    incremental?: boolean;
+    display?: {
+        label?: string;
+    };
+}
+export interface CollectionProfile {
+    connector_key: string;
+    version: string;
+    display_name?: string;
+    streams: CollectionProfileStream[];
+    capabilities?: {
+        human_interaction?: string[];
+    };
+    runtime_requirements?: {
+        bindings?: {
+            browser?: {
+                required?: boolean;
+            };
+        };
+    };
+}
+/**
+ * How to start one connector: the program arguments after `node`, where to
+ * run them, and what the host has to provide first.
+ */
+export interface PdppLaunch {
+    source: string;
+    displayName: string;
+    version: string;
+    profile: CollectionProfile;
+    args: string[];
+    cwd: string;
+    /** Node range from provenance; the connector refuses to run outside it. */
+    nodeRange: string;
+    /** Where host packages get linked, or null when the source tree has its own. */
+    installRoot: string | null;
+    hostPackages: Array<{
+        package: string;
+        declared_version: string;
+    }>;
+    /** `pinned` runs a verified artifact; `local` runs a checkout's source. */
+    origin: "pinned" | "local";
+}
+export declare function parseCollectionProfile(raw: unknown, where: string): CollectionProfile;
+//# sourceMappingURL=profile.d.ts.map