curses 1.6.0 → 1.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c6c663a808bf8a6c76299105512ed71e57db768054d26ffd51527b254b6fed9f
-  data.tar.gz: 6c088c90e25573f398d2051b84be37c394acace504948ed831d039e1e625efe2
+  metadata.gz: bce2cc2d00b7299cd7bce7fd1beec80d8e1a9d69975cbe98df7a1ff870d71322
+  data.tar.gz: 52a52cf8d0a0850739f146df7fb2039aedcd8803acb75e54ed999a0d9c4f4a42
 SHA512:
-  metadata.gz: e4404453e5b9c2d2db0697131c1253f3363d553e51f7427822e4ec7d5c70b3959a457cb4791c694be979d54bf0dec13dbf2b7904bab6115a0b7722979982829c
-  data.tar.gz: 5a6e4d31948c5808601fec0e34633b185586657af4e6bb8d95e07b9144991e0ff3e5f15584985997e9847232510d55c99b9b9821a052ef7784607a1aa2f8214b
+  metadata.gz: 7cd45410964125fc4690f4d3cfc7733b7c9c26caafb828513633225220239dff11048ebb42168d160933c1759d12731e3a2def46f8c63f37925537322a6106c6
+  data.tar.gz: 10c571dec82a7197c7150c7eb805112e31256e71d07b59cc2dc7ae807056a122fcfe6e11507f7f3d97836fe9acc704b25b43abd4158eae21fe7779da896dbb91

data/.devcontainer/Dockerfile

@@ -0,0 +1,132 @@
+FROM node:20
+
+ARG TZ
+ENV TZ="$TZ"
+
+ARG CLAUDE_CODE_VERSION=latest
+
+# Install GitHub CLI from official repository
+RUN curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
+  | dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg \
+  && chmod go+r /usr/share/keyrings/githubcli-archive-keyring.gpg \
+  && echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
+  > /etc/apt/sources.list.d/github-cli.list
+
+# Install basic development tools and iptables/ipset
+RUN apt-get update && apt-get install -y --no-install-recommends \
+  less \
+  git \
+  procps \
+  sudo \
+  fzf \
+  zsh \
+  man-db \
+  unzip \
+  gnupg2 \
+  gh \
+  iptables \
+  ipset \
+  iproute2 \
+  dnsutils \
+  aggregate \
+  jq \
+  nano \
+  vim \
+  locales \
+  # Ruby build dependencies
+  build-essential \
+  libssl-dev \
+  libreadline-dev \
+  zlib1g-dev \
+  libyaml-dev \
+  libffi-dev \
+  libncurses-dev \
+  aspell \
+  aspell-en \
+  aspell-fr \
+  && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+# Configure locale
+RUN sed -i '/en_US.UTF-8/s/^# //g' /etc/locale.gen && \
+  locale-gen en_US.UTF-8
+
+ENV LANG=en_US.UTF-8
+ENV LC_ALL=en_US.UTF-8
+
+# Ensure default node user has access to /usr/local/share
+RUN mkdir -p /usr/local/share/npm-global && \
+  chown -R node:node /usr/local/share
+
+ARG USERNAME=node
+
+# Persist bash history.
+RUN SNIPPET="export PROMPT_COMMAND='history -a' && export HISTFILE=/commandhistory/.bash_history" \
+  && mkdir /commandhistory \
+  && touch /commandhistory/.bash_history \
+  && chown -R $USERNAME /commandhistory
+
+# Set `DEVCONTAINER` environment variable to help with orientation
+ENV DEVCONTAINER=true
+
+# Create workspace and config directories and set permissions
+RUN mkdir -p /workspace /home/node/.claude /home/node/.config/gh && \
+  chown -R node:node /workspace /home/node/.claude /home/node/.config/gh
+
+WORKDIR /workspace
+
+ARG GIT_DELTA_VERSION=0.18.2
+RUN ARCH=$(dpkg --print-architecture) && \
+  wget "https://github.com/dandavison/delta/releases/download/${GIT_DELTA_VERSION}/git-delta_${GIT_DELTA_VERSION}_${ARCH}.deb" && \
+  sudo dpkg -i "git-delta_${GIT_DELTA_VERSION}_${ARCH}.deb" && \
+  rm "git-delta_${GIT_DELTA_VERSION}_${ARCH}.deb"
+
+# Set up non-root user
+USER node
+
+# Install rbenv and ruby-build
+ARG RUBY_VERSION=4.0.1
+RUN git clone https://github.com/rbenv/rbenv.git ~/.rbenv && \
+  git clone https://github.com/rbenv/ruby-build.git ~/.rbenv/plugins/ruby-build && \
+  echo 'export PATH="$HOME/.rbenv/bin:$PATH"' >> ~/.zshrc && \
+  echo 'eval "$(rbenv init - zsh)"' >> ~/.zshrc && \
+  echo 'export PATH="$HOME/.rbenv/bin:$PATH"' >> ~/.bashrc && \
+  echo 'eval "$(rbenv init - bash)"' >> ~/.bashrc
+
+# Install Ruby
+ENV PATH="/home/node/.rbenv/bin:/home/node/.rbenv/shims:$PATH"
+RUN rbenv install ${RUBY_VERSION} && \
+  rbenv global ${RUBY_VERSION} && \
+  gem install bundler
+
+# Install global packages
+ENV NPM_CONFIG_PREFIX=/usr/local/share/npm-global
+ENV PATH=$PATH:/usr/local/share/npm-global/bin
+
+# Set the default shell to zsh rather than sh
+ENV SHELL=/bin/zsh
+
+# Set the default editor and visual
+ENV EDITOR=nano
+ENV VISUAL=nano
+
+# Default powerline10k theme
+ARG ZSH_IN_DOCKER_VERSION=1.2.0
+RUN sh -c "$(wget -O- https://github.com/deluan/zsh-in-docker/releases/download/v${ZSH_IN_DOCKER_VERSION}/zsh-in-docker.sh)" -- \
+  -p git \
+  -p fzf \
+  -a "source /usr/share/doc/fzf/examples/key-bindings.zsh" \
+  -a "source /usr/share/doc/fzf/examples/completion.zsh" \
+  -a "export PROMPT_COMMAND='history -a' && export HISTFILE=/commandhistory/.bash_history" \
+  -x
+
+# Install Claude
+RUN curl -fsSL https://claude.ai/install.sh | bash
+
+
+# Copy and set up firewall script
+COPY init-firewall.sh /usr/local/bin/
+USER root
+RUN chmod +x /usr/local/bin/init-firewall.sh && \
+  echo "node ALL=(root) NOPASSWD: /usr/local/bin/init-firewall.sh" > /etc/sudoers.d/node-firewall && \
+  chmod 0440 /etc/sudoers.d/node-firewall
+USER node

data/.devcontainer/devcontainer.json

@@ -0,0 +1,58 @@
+{
+  "name": "Claude Code Sandbox",
+  "build": {
+    "dockerfile": "Dockerfile",
+    "args": {
+      "TZ": "${localEnv:TZ:America/Los_Angeles}",
+      "CLAUDE_CODE_VERSION": "latest",
+      "GIT_DELTA_VERSION": "0.18.2",
+      "ZSH_IN_DOCKER_VERSION": "1.2.0"
+    }
+  },
+  "runArgs": [
+    "--cap-add=NET_ADMIN",
+    "--cap-add=NET_RAW"
+  ],
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "anthropic.claude-code",
+        "dbaeumer.vscode-eslint",
+        "esbenp.prettier-vscode",
+        "eamodio.gitlens"
+      ],
+      "settings": {
+        "editor.formatOnSave": true,
+        "editor.defaultFormatter": "esbenp.prettier-vscode",
+        "editor.codeActionsOnSave": {
+          "source.fixAll.eslint": "explicit"
+        },
+        "terminal.integrated.defaultProfile.linux": "zsh",
+        "terminal.integrated.profiles.linux": {
+          "bash": {
+            "path": "bash",
+            "icon": "terminal-bash"
+          },
+          "zsh": {
+            "path": "zsh"
+          }
+        }
+      }
+    }
+  },
+  "remoteUser": "node",
+  "mounts": [
+    "source=claude-code-bashhistory-${devcontainerId},target=/commandhistory,type=volume",
+    "source=claude-code-config,target=/home/node/.claude,type=volume",
+    "source=claude-code-gh-config,target=/home/node/.config/gh,type=volume"
+  ],
+  "containerEnv": {
+    "NODE_OPTIONS": "--max-old-space-size=4096",
+    "CLAUDE_CONFIG_DIR": "/home/node/.claude",
+    "POWERLEVEL9K_DISABLE_GITSTATUS": "true"
+  },
+  "workspaceMount": "source=${localWorkspaceFolder},target=/workspace,type=bind,consistency=delegated",
+  "workspaceFolder": "/workspace",
+  "postStartCommand": "sudo /usr/local/bin/init-firewall.sh",
+  "waitFor": "postStartCommand"
+}

data/.devcontainer/init-firewall.sh

@@ -0,0 +1,139 @@
+#!/bin/bash
+set -euo pipefail  # Exit on error, undefined vars, and pipeline failures
+IFS=$'\n\t'       # Stricter word splitting
+
+# 1. Extract Docker DNS info BEFORE any flushing
+DOCKER_DNS_RULES=$(iptables-save -t nat | grep "127\.0\.0\.11" || true)
+
+# Flush existing rules and delete existing ipsets
+iptables -F
+iptables -X
+iptables -t nat -F
+iptables -t nat -X
+iptables -t mangle -F
+iptables -t mangle -X
+ipset destroy allowed-domains 2>/dev/null || true
+
+# 2. Selectively restore ONLY internal Docker DNS resolution
+if [ -n "$DOCKER_DNS_RULES" ]; then
+    echo "Restoring Docker DNS rules..."
+    iptables -t nat -N DOCKER_OUTPUT 2>/dev/null || true
+    iptables -t nat -N DOCKER_POSTROUTING 2>/dev/null || true
+    echo "$DOCKER_DNS_RULES" | xargs -L 1 iptables -t nat
+else
+    echo "No Docker DNS rules to restore"
+fi
+
+# First allow DNS and localhost before any restrictions
+# Allow outbound DNS
+iptables -A OUTPUT -p udp --dport 53 -j ACCEPT
+# Allow inbound DNS responses
+iptables -A INPUT -p udp --sport 53 -j ACCEPT
+# Allow outbound SSH
+iptables -A OUTPUT -p tcp --dport 22 -j ACCEPT
+# Allow inbound SSH responses
+iptables -A INPUT -p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT
+# Allow localhost
+iptables -A INPUT -i lo -j ACCEPT
+iptables -A OUTPUT -o lo -j ACCEPT
+
+# Create ipset with CIDR support
+ipset create allowed-domains hash:net
+
+# Fetch GitHub meta information and aggregate + add their IP ranges
+echo "Fetching GitHub IP ranges..."
+gh_ranges=$(curl -s https://api.github.com/meta)
+if [ -z "$gh_ranges" ]; then
+    echo "ERROR: Failed to fetch GitHub IP ranges"
+    exit 1
+fi
+
+if ! echo "$gh_ranges" | jq -e '.web and .api and .git' >/dev/null; then
+    echo "ERROR: GitHub API response missing required fields"
+    exit 1
+fi
+
+echo "Processing GitHub IPs..."
+while read -r cidr; do
+    if [[ ! "$cidr" =~ ^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/[0-9]{1,2}$ ]]; then
+        echo "ERROR: Invalid CIDR range from GitHub meta: $cidr"
+        exit 1
+    fi
+    echo "Adding GitHub range $cidr"
+    ipset add allowed-domains "$cidr"
+done < <(echo "$gh_ranges" | jq -r '(.web + .api + .git)[]' | aggregate -q)
+
+# Resolve and add other allowed domains
+for domain in \
+    "storage.googleapis.com" \
+    "registry.npmjs.org" \
+    "api.anthropic.com" \
+    "sentry.io" \
+    "statsig.anthropic.com" \
+    "statsig.com" \
+    "marketplace.visualstudio.com" \
+    "vscode.blob.core.windows.net" \
+    "update.code.visualstudio.com" \
+    "rubygems.org"; do
+    echo "Resolving $domain..."
+    ips=$(dig +noall +answer A "$domain" | awk '$4 == "A" {print $5}')
+    if [ -z "$ips" ]; then
+        echo "ERROR: Failed to resolve $domain"
+        exit 1
+    fi
+    
+    while read -r ip; do
+        if [[ ! "$ip" =~ ^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$ ]]; then
+            echo "ERROR: Invalid IP from DNS for $domain: $ip"
+            exit 1
+        fi
+        echo "Adding $ip for $domain"
+        ipset add allowed-domains "$ip"
+    done < <(echo "$ips")
+done
+
+# Get host IP from default route
+HOST_IP=$(ip route | grep default | cut -d" " -f3)
+if [ -z "$HOST_IP" ]; then
+    echo "ERROR: Failed to detect host IP"
+    exit 1
+fi
+
+HOST_NETWORK=$(echo "$HOST_IP" | sed "s/\.[0-9]*$/.0\/24/")
+echo "Host network detected as: $HOST_NETWORK"
+
+# Set up remaining iptables rules
+iptables -A INPUT -s "$HOST_NETWORK" -j ACCEPT
+iptables -A OUTPUT -d "$HOST_NETWORK" -j ACCEPT
+
+# Set default policies to DROP first
+iptables -P INPUT DROP
+iptables -P FORWARD DROP
+iptables -P OUTPUT DROP
+
+# First allow established connections for already approved traffic
+iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
+iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
+
+# Then allow only specific outbound traffic to allowed domains
+iptables -A OUTPUT -m set --match-set allowed-domains dst -j ACCEPT
+
+# Explicitly REJECT all other outbound traffic for immediate feedback
+iptables -A OUTPUT -j REJECT --reject-with icmp-admin-prohibited
+
+echo "Firewall configuration complete"
+echo "Verifying firewall rules..."
+if curl --connect-timeout 5 https://example.com >/dev/null 2>&1; then
+    echo "ERROR: Firewall verification failed - was able to reach https://example.com"
+    exit 1
+else
+    echo "Firewall verification passed - unable to reach https://example.com as expected"
+fi
+
+# Verify GitHub API access
+if ! curl --connect-timeout 5 https://api.github.com/zen >/dev/null 2>&1; then
+    echo "ERROR: Firewall verification failed - unable to reach https://api.github.com"
+    exit 1
+else
+    echo "Firewall verification passed - able to reach https://api.github.com as expected"
+fi

data/.github/workflows/gh-pages.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Setup Ruby
         uses: ruby/setup-ruby@a4effe49ee8ee5b8b5091268c473a4628afb5651 # v1.245.0
         with:
@@ -27,14 +27,14 @@ jobs:
           bundler-cache: true
       - name: Setup Pages
         id: pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@v6
       - name: Install dependencies
         run: gem install rdoc
       - name: Build with RDoc
         # Outputs to the './_site' directory by default
         run: rake rdoc
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@v5
 
   deploy:
     environment:
@@ -45,4 +45,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

data/.github/workflows/macos.yml

@@ -1,12 +1,15 @@
 name: macos
 
-on: [push]
+on:
+  push:
+    branches: [main]
+  pull_request:
 
 jobs:
   build:
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: ruby/setup-ruby@v1
       with:
         ruby-version: 3.4

data/.github/workflows/push_gem.yml

@@ -24,11 +24,11 @@ jobs:
     steps:
       # Set up
       - name: Harden Runner
-        uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           submodules: true
 
@@ -38,6 +38,11 @@ jobs:
           bundler-cache: true
           ruby-version: ruby
 
+      # Prevent `git fetch --tags` in release-gem from fetching submodule
+      # commits unreachable in the current submodule remote
+      - name: Disable submodule fetch recursion
+        run: git config fetch.recurseSubmodules false
+
       # Release
       - name: Publish to RubyGems
         uses: rubygems/release-gem@v1

data/.github/workflows/ubuntu.yml

@@ -1,6 +1,9 @@
 name: ubuntu
 
-on: [push]
+on:
+  push:
+    branches: [main]
+  pull_request:
 
 jobs:
   test:
@@ -9,7 +12,7 @@ jobs:
         ruby: [ head, 3.4, 3.3, 3.2 ]
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: ruby/setup-ruby@v1
       with:
         ruby-version: ${{ matrix.ruby }}

data/.github/workflows/windows.yml

@@ -1,6 +1,9 @@
 name: windows
 
-on: [push]
+on:
+  push:
+    branches: [main]
+  pull_request:
 
 jobs:
   build:
@@ -9,7 +12,7 @@ jobs:
       matrix:
         ruby: [ 'mingw', 'mswin', '3.4' ]
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         submodules: true
     - name: Set up Ruby

data/.gitmodules

@@ -1,3 +1,3 @@
-[submodule "vendor/PDCurses"]
-	path = vendor/PDCurses
-	url = https://github.com/shugo/PDCurses.git
+[submodule "vendor/PDCursesMod"]
+	path = vendor/PDCursesMod
+	url = https://github.com/Bill-Gray/PDCursesMod.git

data/README.md

@@ -68,9 +68,9 @@ To install this gem onto your local machine, run `bundle exec rake install`. To
 curses is released under the Ruby and 2-clause BSD licenses.  See COPYING for
 details.
 
-It includes a forked version of PDCurses, which is in the public domain:
+It includes PDCursesMod, which is in the public domain:
 
-  https://github.com/Bill-Gray/PDCurses
+  https://github.com/Bill-Gray/PDCursesMod
 
 The version for Win32 console mode in the wincon subdirectory is used.
 

data/curses.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new { |s|
   s.name = "curses"
-  s.version = "1.6.0"
+  s.version = "1.7.0"
   s.author = ["Shugo Maeda", 'Eric Hodel']
   s.email = ["shugo@ruby-lang.org", 'drbrain@segment7.net']
   s.homepage = "https://github.com/ruby/curses"

data/ext/curses/extconf.rb

@@ -55,7 +55,7 @@ $use_bundled_pdcurses = !$use_system_libs && /mingw|mswin/ =~ RUBY_PLATFORM
 if $use_bundled_pdcurses
   $pdcurses_wide_default = true
   $curses_version_default = "function"
-  pdcurses_dir = File.expand_path("../../vendor/PDCurses", __dir__)
+  pdcurses_dir = File.expand_path("../../vendor/PDCursesMod", __dir__)
   $idefault = $ldefault = pdcurses_dir
   wincon_dir = File.expand_path("wincon", pdcurses_dir)
   old_dir = Dir.pwd
@@ -68,7 +68,7 @@ if $use_bundled_pdcurses
       $pdcurses_dll_default = true
     else
       w64 = $x64 ? "_w64=1" : ""
-      exec_command "make -f Makefile.mng clean all #{w64} WIDE=Y DLL=N CC=\"gcc -std=gnu17\""
+      exec_command "make -f Makefile clean libs #{w64} WIDE=Y DLL=N CC=\"gcc -std=gnu17\""
       FileUtils.cp("pdcurses.a", File.expand_path("libpdcurses.a", pdcurses_dir))
     end
   ensure
@@ -76,6 +76,9 @@ if $use_bundled_pdcurses
   end
   FileUtils.cp(File.expand_path("curses.h", pdcurses_dir),
                File.expand_path("pdcurses.h", pdcurses_dir))
+  # PDCursesMod calls PlaySound() in PDC_beep(), so the static library
+  # needs winmm at link time
+  have_library("winmm") if $mingw
   $library_candidates = [
     ["pdcurses.h", ["pdcurses"]]
   ]

data/lib/curses.rb

@@ -1,4 +1,4 @@
-pdcurses_dll = File.expand_path("../vendor/PDCurses/pdcurses.dll", __dir__)
+pdcurses_dll = File.expand_path("../vendor/PDCursesMod/pdcurses.dll", __dir__)
 if File.exist?(pdcurses_dll)
   path = ENV["PATH"]
   dir = File.dirname(pdcurses_dll)

data/vendor/PDCursesMod/.github/workflows/github_actions_build.yml

@@ -0,0 +1,42 @@
+name: Build
+
+on: [push, pull_request]
+
+jobs:
+  buildUbuntu:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@master
+    - name: make
+      run: |
+         cd vt
+         make demos tests
+         cd ../fb
+         make UTF8=Y demos tests
+
+  buildOSX:
+    runs-on: macOS-latest
+
+    steps:
+    - uses: actions/checkout@master
+    - name: make
+      run: |
+         cd vt
+         make CLANG=Y demos tests
+
+  buildWindows:
+    runs-on: windows-2022
+
+    steps:
+    - uses: actions/checkout@master
+    - name: make
+      run: |
+        call "C:\Program Files\Microsoft Visual Studio\2022\Enterprise\VC\Auxiliary\Build\vcvarsall.bat" x64
+        cd wingui
+        nmake UTF8=Y DLL=Y -f Makefile.vc demos tests
+        cd ..\wincon
+        nmake DLL=Y -f Makefile.vc demos tests
+        cd ..\vt
+        nmake CHTYPE_32=Y -f Makefile.vc demos tests
+      shell: cmd

data/vendor/PDCursesMod/.gitignore

@@ -0,0 +1,47 @@
+*.[oa]
+*.exe
+firework
+manext
+libXCurses.so
+ozdemo
+newtest
+ptest
+rain
+sdltest
+testcurs
+tuidemo
+worm
+xmas
+*.sho
+Makefile
+config.h
+config.log
+config.status
+PDCurses.md
+xcurses-config
+*.dll
+wingui.gif
+wingui.htm
+*.bat
+clock.c
+clock1.c
+fullscrn.c
+hello
+hello.c
+wingui/wcr*
+wingui/wct*
+wingui/wc_*
+wingui/wcw*
+wingui/z*
+wingui/scr2html.c
+wingui/newtest*
+wingui/*.sav
+wingui/*.def
+wincon/*.def
+*.obj
+*.bak
+*.map
+*.lib
+m
+.vscode
+build