@cuna_labs/cli 0.1.0

package/dist/platform/adapter.js

@@ -0,0 +1,240 @@
+import { randomBytes } from "node:crypto";
+import { constants as fileConstants } from "node:fs";
+import { chmod, lstat, mkdir, open, rename, unlink } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, posix, win32 } from "node:path";
+import { EXIT_CODES, CunaError } from "../core/errors.js";
+export function resolvePlatformKind(platform) {
+    if (platform === "win32")
+        return "windows";
+    if (platform === "darwin")
+        return "macos";
+    if (platform === "linux")
+        return "linux";
+    throw new CunaError({
+        code: "cuna.platform.unsupported",
+        hint: "Run `cuna doctor` to see which runtime features this platform provides.",
+        message: `The ${platform} operating system is not supported.`,
+        exitCode: EXIT_CODES.unsupported,
+        details: { platform },
+    });
+}
+export function resolvePlatformPaths(input) {
+    const kind = resolvePlatformKind(input.platform);
+    if (kind === "windows") {
+        const appData = input.env.APPDATA ?? win32.join(input.homeDirectory, "AppData", "Roaming");
+        const localAppData = input.env.LOCALAPPDATA ?? win32.join(input.homeDirectory, "AppData", "Local");
+        return Object.freeze({
+            configDirectory: win32.join(appData, "Cuna"),
+            stateDirectory: win32.join(localAppData, "Cuna", "State"),
+            runtimeDirectory: win32.join(localAppData, "Cuna", "Runtime"),
+        });
+    }
+    if (kind === "macos") {
+        return Object.freeze({
+            configDirectory: posix.join(input.homeDirectory, "Library", "Application Support", "Cuna"),
+            stateDirectory: posix.join(input.homeDirectory, "Library", "Application Support", "Cuna", "State"),
+            runtimeDirectory: posix.join(input.env.TMPDIR ?? "/tmp", `cuna-${input.userId ?? "user"}`),
+        });
+    }
+    const configRoot = input.env.XDG_CONFIG_HOME ?? posix.join(input.homeDirectory, ".config");
+    const stateRoot = input.env.XDG_STATE_HOME ?? posix.join(input.homeDirectory, ".local", "state");
+    const runtimeRoot = input.env.XDG_RUNTIME_DIR ?? posix.join(input.homeDirectory, ".local", "run");
+    return Object.freeze({
+        configDirectory: posix.join(configRoot, "cuna"),
+        stateDirectory: posix.join(stateRoot, "cuna"),
+        runtimeDirectory: posix.join(runtimeRoot, "cuna"),
+    });
+}
+async function readSafeConfig(kind, expectedUserId, path, maximumBytes) {
+    let handle;
+    try {
+        handle = await open(path, fileConstants.O_RDONLY | fileConstants.O_NOFOLLOW);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return Object.freeze({ exists: false });
+        throw configFileError("unreadable", error);
+    }
+    try {
+        const metadata = await handle.stat();
+        if (!metadata.isFile())
+            throw configFileError("unsafe_type");
+        if (metadata.size > maximumBytes)
+            throw configFileError("oversized");
+        if (kind !== "windows") {
+            if (expectedUserId !== undefined && metadata.uid !== expectedUserId) {
+                throw configFileError("wrong_owner");
+            }
+            if ((metadata.mode & 0o022) !== 0)
+                throw configFileError("unsafe_permissions");
+        }
+        const text = await handle.readFile({ encoding: "utf8" });
+        if (Buffer.byteLength(text, "utf8") > maximumBytes)
+            throw configFileError("oversized");
+        return Object.freeze({ exists: true, text });
+    }
+    catch (error) {
+        if (error instanceof CunaError)
+            throw error;
+        throw configFileError("unreadable", error);
+    }
+    finally {
+        await handle.close();
+    }
+}
+/**
+ * The predicates `readSafeConfig` enforces, applied to a file that is about to
+ * be replaced rather than read. Written once so the two sides cannot drift:
+ * a file the CLI would refuse to read must never be a file it silently
+ * overwrites. Windows is excluded from the ownership and mode checks here for
+ * the same reason it is excluded there — `st_uid` and the POSIX mode bits carry
+ * no ACL meaning on that platform, and the encrypted session store owns the
+ * only ACL authority in this codebase.
+ */
+async function assertReplaceableConfigFile(kind, expectedUserId, path) {
+    let metadata;
+    try {
+        metadata = await lstat(path);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return;
+        throw configFileError("unwritable", error);
+    }
+    if (metadata.isSymbolicLink() || !metadata.isFile())
+        throw configFileError("unsafe_type");
+    if (kind !== "windows") {
+        if (expectedUserId !== undefined && metadata.uid !== expectedUserId)
+            throw configFileError("wrong_owner");
+        if ((metadata.mode & 0o022) !== 0)
+            throw configFileError("unsafe_permissions");
+    }
+}
+async function writeSafeConfig(kind, expectedUserId, path, text, maximumBytes) {
+    if (Buffer.byteLength(text, "utf8") > maximumBytes)
+        throw configFileError("oversized");
+    const directory = dirname(path);
+    try {
+        await mkdir(directory, { recursive: true, mode: 0o700 });
+    }
+    catch (error) {
+        throw configFileError("unwritable", error);
+    }
+    await assertReplaceableConfigFile(kind, expectedUserId, path);
+    // A sibling in the same directory, so the rename is a same-filesystem atomic
+    // replacement rather than a copy. `O_EXCL` means this process never writes
+    // through a name another process or a symlink already claimed.
+    const temporary = `${path}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`;
+    let handle;
+    try {
+        handle = await open(temporary, fileConstants.O_WRONLY | fileConstants.O_CREAT | fileConstants.O_EXCL, 0o600);
+        await handle.writeFile(text, { encoding: "utf8" });
+        await handle.sync();
+        await handle.close();
+        handle = undefined;
+        await chmod(temporary, 0o600);
+        await rename(temporary, path);
+        await chmod(path, 0o600);
+    }
+    catch (error) {
+        try {
+            await handle?.close();
+        }
+        catch { /* the replacement already failed */ }
+        try {
+            await unlink(temporary);
+        }
+        catch { /* the temporary may never have been created */ }
+        if (error instanceof CunaError)
+            throw error;
+        throw configFileError("unwritable", error);
+    }
+}
+/**
+ * The exclusive-create half of the pair above.
+ *
+ * Deliberately NOT built on `writeSafeConfig`: there is no sequence of replace
+ * plus check that is atomic, and adding a pre-read here would reintroduce the
+ * exact race this exists to close. The single `open` is the whole mechanism.
+ *
+ * `assertReplaceableConfigFile` is not called either, and its absence is the
+ * point — it returns quietly when the path does not exist, which is the only
+ * case that reaches the `open` at all, and it would otherwise leave a window
+ * between its own `lstat` and the create.
+ */
+async function createExclusiveConfig(path, text, maximumBytes) {
+    if (Buffer.byteLength(text, "utf8") > maximumBytes)
+        throw configFileError("oversized");
+    try {
+        await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    }
+    catch (error) {
+        throw configFileError("unwritable", error);
+    }
+    let handle;
+    try {
+        handle = await open(path, fileConstants.O_WRONLY | fileConstants.O_CREAT | fileConstants.O_EXCL | fileConstants.O_NOFOLLOW, 0o600);
+    }
+    catch (error) {
+        // The name was taken between this caller deciding to take it and trying to.
+        // That is the answer, not a failure.
+        if (error.code === "EEXIST")
+            return false;
+        throw configFileError("unwritable", error);
+    }
+    try {
+        await handle.writeFile(text, { encoding: "utf8" });
+        await handle.sync();
+        await handle.close();
+        handle = undefined;
+        await chmod(path, 0o600);
+        return true;
+    }
+    catch (error) {
+        try {
+            await handle?.close();
+        }
+        catch { /* the create already failed */ }
+        // A half-written slot would block this Machine forever with bytes nobody
+        // can read, so the failed create takes its own file with it.
+        try {
+            await unlink(path);
+        }
+        catch { /* it may never have been created */ }
+        throw configFileError("unwritable", error);
+    }
+}
+function configFileError(reason, cause) {
+    return new CunaError({
+        code: "cuna.config.unsafe_file",
+        message: "The Cuna configuration file is unavailable or unsafe.",
+        exitCode: EXIT_CODES.policy,
+        hint: "Fix the user-owned configuration file permissions or select a safe file explicitly.",
+        details: { reason },
+        ...(cause === undefined ? {} : { cause }),
+    });
+}
+export function createPlatformAdapter(input) {
+    const environment = {
+        platform: input?.platform ?? process.platform,
+        env: input?.env ?? process.env,
+        homeDirectory: input?.homeDirectory ?? homedir(),
+        ...(input?.userId === undefined
+            ? typeof process.getuid === "function"
+                ? { userId: process.getuid() }
+                : {}
+            : { userId: input.userId }),
+    };
+    const kind = resolvePlatformKind(environment.platform);
+    const paths = resolvePlatformPaths(environment);
+    const adapter = {
+        kind,
+        paths,
+        readSafeConfig: (path, maximumBytes) => readSafeConfig(kind, environment.userId, path, maximumBytes),
+        writeSafeConfig: (path, text, maximumBytes) => writeSafeConfig(kind, environment.userId, path, text, maximumBytes),
+        createExclusiveConfig: (path, text, maximumBytes) => createExclusiveConfig(path, text, maximumBytes),
+    };
+    return Object.freeze(adapter);
+}
+//# sourceMappingURL=adapter.js.map

package/dist/platform/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/platform/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAiE1D,MAAM,UAAU,mBAAmB,CAAC,QAAyB;IAC3D,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC1C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACzC,MAAM,IAAI,SAAS,CAAC;QAClB,IAAI,EAAE,2BAA2B;QACjC,IAAI,EAAE,yEAAyE;QAC/E,OAAO,EAAE,OAAO,QAAQ,qCAAqC;QAC7D,QAAQ,EAAE,UAAU,CAAC,WAAW;QAChC,OAAO,EAAE,EAAE,QAAQ,EAAE;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAA0B;IAC7D,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3F,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACnG,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;YAC5C,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC;YACzD,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,CAAC;YAC1F,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,OAAO,CAAC;YAClG,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,MAAM,EAAE,QAAQ,KAAK,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjG,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC;QAC/C,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC;QAC7C,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;KAClD,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,IAAkB,EAClB,cAAkC,EAClC,IAAY,EACZ,YAAoB;IAEpB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAChG,MAAM,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;QAC7D,IAAI,QAAQ,CAAC,IAAI,GAAG,YAAY;YAAE,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;QACrE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,cAAc,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,cAAc,EAAE,CAAC;gBACpE,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,MAAM,eAAe,CAAC,oBAAoB,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,YAAY;YAAE,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;QACvF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS;YAAE,MAAM,KAAK,CAAC;QAC5C,MAAM,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,2BAA2B,CACxC,IAAkB,EAClB,cAAkC,EAClC,IAAY;IAEZ,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC/D,MAAM,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;IAC1F,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,cAAc,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,cAAc;YAAE,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;QAC1G,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,eAAe,CAAC,oBAAoB,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAkB,EAClB,cAAkC,EAClC,IAAY,EACZ,IAAY,EACZ,YAAoB;IAEpB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,YAAY;QAAE,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,2BAA2B,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC9D,6EAA6E;IAC7E,2EAA2E;IAC3E,+DAA+D;IAC/D,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IACjF,IAAI,MAAoD,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,QAAQ,GAAG,aAAa,CAAC,OAAO,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7G,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACnD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;QAC7E,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,+CAA+C,CAAC,CAAC;QAC1F,IAAI,KAAK,YAAY,SAAS;YAAE,MAAM,KAAK,CAAC;QAC5C,MAAM,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,qBAAqB,CAClC,IAAY,EACZ,IAAY,EACZ,YAAoB;IAEpB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,YAAY;QAAE,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACvF,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,MAAoD,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CACjB,IAAI,EACJ,aAAa,CAAC,QAAQ,GAAG,aAAa,CAAC,OAAO,GAAG,aAAa,CAAC,MAAM,GAAG,aAAa,CAAC,UAAU,EAChG,KAAK,CACN,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4EAA4E;QAC5E,qCAAqC;QACrC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACnD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;QACxE,yEAAyE;QACzE,6DAA6D;QAC7D,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;QAC1E,MAAM,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,KAAe;IACtD,OAAO,IAAI,SAAS,CAAC;QACnB,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,uDAAuD;QAChE,QAAQ,EAAE,UAAU,CAAC,MAAM;QAC3B,IAAI,EAAE,qFAAqF;QAC3F,OAAO,EAAE,EAAE,MAAM,EAAE;QACnB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAoC;IACxE,MAAM,WAAW,GAAwB;QACvC,QAAQ,EAAE,KAAK,EAAE,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC7C,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG;QAC9B,aAAa,EAAE,KAAK,EAAE,aAAa,IAAI,OAAO,EAAE;QAChD,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS;YAC7B,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;gBACpC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE;gBAC9B,CAAC,CAAC,EAAE;YACN,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;KAC9B,CAAC;IACF,MAAM,IAAI,GAAG,mBAAmB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,OAAO,GAAoB;QAC/B,IAAI;QACJ,KAAK;QACL,cAAc,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,CACrC,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC;QAC9D,eAAe,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,CAC5C,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC;QACrE,qBAAqB,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,CAClD,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC;KAClD,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC"}

package/dist/platform/support.d.ts

@@ -0,0 +1,12 @@
+export interface RuntimeSupport {
+    readonly nodeRuntime: boolean;
+    readonly platform: boolean;
+    readonly architecture: boolean;
+}
+export declare function evaluateRuntimeSupport(input: {
+    readonly nodeVersion: string;
+    readonly platform: NodeJS.Platform;
+    readonly architecture: NodeJS.Architecture;
+}): RuntimeSupport;
+export declare function isSupportedNodeVersion(version: string): boolean;
+//# sourceMappingURL=support.d.ts.map

package/dist/platform/support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"support.d.ts","sourceRoot":"","sources":["../../src/platform/support.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC;AAKD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC;CAC5C,GAAG,cAAc,CAMjB;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAU/D"}

package/dist/platform/support.js

@@ -0,0 +1,25 @@
+const SUPPORTED_PLATFORMS = new Set(["win32", "darwin", "linux"]);
+const SUPPORTED_ARCHITECTURES = new Set(["x64", "arm64"]);
+export function evaluateRuntimeSupport(input) {
+    return Object.freeze({
+        nodeRuntime: isSupportedNodeVersion(input.nodeVersion),
+        platform: SUPPORTED_PLATFORMS.has(input.platform),
+        architecture: SUPPORTED_ARCHITECTURES.has(input.architecture),
+    });
+}
+export function isSupportedNodeVersion(version) {
+    const match = /^(\d+)\.(\d+)\.(\d+)(?:[-+].*)?$/u.exec(version);
+    if (match === null)
+        return false;
+    const major = Number(match[1]);
+    const minor = Number(match[2]);
+    const patch = Number(match[3]);
+    if (![major, minor, patch].every(Number.isSafeInteger))
+        return false;
+    if (major === 22)
+        return minor > 17 || (minor === 17 && patch >= 1);
+    if (major === 24)
+        return minor > 4 || (minor === 4 && patch >= 1);
+    return false;
+}
+//# sourceMappingURL=support.js.map

package/dist/platform/support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"support.js","sourceRoot":"","sources":["../../src/platform/support.ts"],"names":[],"mappings":"AAMA,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AACnF,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAE/E,MAAM,UAAU,sBAAsB,CAAC,KAItC;IACC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,sBAAsB,CAAC,KAAK,CAAC,WAAW,CAAC;QACtD,QAAQ,EAAE,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;QACjD,YAAY,EAAE,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;IACpE,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/pty/contracts.d.ts

@@ -0,0 +1,45 @@
+export declare const LOCAL_PTY_PROTOCOL: "cuna.local-pty.v1";
+export type PtyEvidenceStatus = "verified" | "unverified" | "unavailable";
+export interface PtyCapabilities {
+    readonly rawInput: boolean;
+    readonly resize: boolean;
+    readonly signals: boolean;
+    readonly utf8: boolean;
+}
+export interface PtyAdapterEvidence {
+    readonly status: PtyEvidenceStatus;
+    readonly adapterId: string;
+    readonly protocol: typeof LOCAL_PTY_PROTOCOL;
+    readonly platform: NodeJS.Platform;
+    readonly observedAt: number;
+    readonly expiresAt: number;
+    readonly artifactDigest: string;
+    readonly capabilities: PtyCapabilities;
+    readonly reason?: string;
+}
+export interface PtySpawnRequest {
+    readonly executable: string;
+    readonly args: readonly string[];
+    readonly cwd?: string;
+    readonly environment?: Readonly<Record<string, string>>;
+    readonly columns: number;
+    readonly rows: number;
+}
+export interface PtyExit {
+    readonly exitCode: number | null;
+    readonly signal: string | null;
+}
+export interface PtyHandle {
+    readonly pid: number;
+    readonly output: AsyncIterable<string>;
+    write(data: string): void;
+    resize(columns: number, rows: number): void;
+    signal(signal: "interrupt" | "terminate"): void;
+    wait(): Promise<PtyExit>;
+    close(): void;
+}
+export interface PtyAdapter {
+    probe(signal?: AbortSignal): Promise<PtyAdapterEvidence>;
+    spawn(request: PtySpawnRequest): PtyHandle;
+}
+//# sourceMappingURL=contracts.d.ts.map

package/dist/pty/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/pty/contracts.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kBAAkB,EAAG,mBAA4B,CAAC;AAE/D,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,YAAY,GAAG,aAAa,CAAC;AAE1E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,GAAG,IAAI,CAAC;IAChD,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACzD,KAAK,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,CAAC;CAC5C"}

package/dist/pty/contracts.js

@@ -0,0 +1,2 @@
+export const LOCAL_PTY_PROTOCOL = "cuna.local-pty.v1";
+//# sourceMappingURL=contracts.js.map

package/dist/pty/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/pty/contracts.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAA4B,CAAC"}

package/dist/pty/evidence-gate.d.ts

@@ -0,0 +1,14 @@
+import { type PtyAdapter, type PtyAdapterEvidence } from "./contracts.js";
+export interface VerifiedPtyAdapter {
+    readonly adapter: PtyAdapter;
+    readonly evidence: PtyAdapterEvidence & {
+        readonly status: "verified";
+    };
+}
+export declare function requireVerifiedPtyAdapter(input: {
+    readonly adapter: PtyAdapter | undefined;
+    readonly platform?: NodeJS.Platform;
+    readonly now?: number;
+    readonly signal?: AbortSignal;
+}): Promise<VerifiedPtyAdapter>;
+//# sourceMappingURL=evidence-gate.d.ts.map

package/dist/pty/evidence-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-gate.d.ts","sourceRoot":"","sources":["../../src/pty/evidence-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,UAAU,EAAE,KAAK,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAG9F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,GAAG;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC;CACzE;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA8B9B"}

package/dist/pty/evidence-gate.js

@@ -0,0 +1,35 @@
+import { LOCAL_PTY_PROTOCOL } from "./contracts.js";
+import { runtimeFailure } from "../runtime/errors.js";
+export async function requireVerifiedPtyAdapter(input) {
+    if (input.adapter === undefined) {
+        throw runtimeFailure("pty_unavailable", "No PTY adapter is installed for this runtime.");
+    }
+    const evidence = await input.adapter.probe(input.signal);
+    const now = input.now ?? Date.now();
+    const platform = input.platform ?? process.platform;
+    if (evidence.status !== "verified" ||
+        evidence.protocol !== LOCAL_PTY_PROTOCOL ||
+        evidence.platform !== platform ||
+        !Number.isFinite(evidence.observedAt) ||
+        !Number.isFinite(evidence.expiresAt) ||
+        evidence.expiresAt <= now ||
+        evidence.expiresAt < evidence.observedAt ||
+        !/^sha256:[a-f0-9]{64}$/u.test(evidence.artifactDigest) ||
+        !evidence.capabilities.rawInput ||
+        !evidence.capabilities.resize ||
+        !evidence.capabilities.signals ||
+        !evidence.capabilities.utf8) {
+        throw runtimeFailure("pty_evidence_invalid", "The installed PTY adapter lacks current conformance evidence.", {
+            safeDetails: {
+                adapter_id: boundedIdentifier(evidence.adapterId),
+                evidence_status: evidence.status,
+                platform: evidence.platform,
+            },
+        });
+    }
+    return Object.freeze({ adapter: input.adapter, evidence: evidence });
+}
+function boundedIdentifier(value) {
+    return /^[A-Za-z0-9._-]{1,64}$/u.test(value) ? value : "invalid_adapter";
+}
+//# sourceMappingURL=evidence-gate.js.map

package/dist/pty/evidence-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-gate.js","sourceRoot":"","sources":["../../src/pty/evidence-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAA4C,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAOtD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAK/C;IACC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,cAAc,CAAC,iBAAiB,EAAE,+CAA+C,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACpD,IACE,QAAQ,CAAC,MAAM,KAAK,UAAU;QAC9B,QAAQ,CAAC,QAAQ,KAAK,kBAAkB;QACxC,QAAQ,CAAC,QAAQ,KAAK,QAAQ;QAC9B,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;QACrC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QACpC,QAAQ,CAAC,SAAS,IAAI,GAAG;QACzB,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC,UAAU;QACxC,CAAC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QACvD,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ;QAC/B,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM;QAC7B,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO;QAC9B,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAC3B,CAAC;QACD,MAAM,cAAc,CAAC,sBAAsB,EAAE,+DAA+D,EAAE;YAC5G,WAAW,EAAE;gBACX,UAAU,EAAE,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACjD,eAAe,EAAE,QAAQ,CAAC,MAAM;gBAChC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAgE,EAAE,CAAC,CAAC;AAC/H,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC;AAC3E,CAAC"}

package/dist/pty/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./contracts.js";
+export * from "./evidence-gate.js";
+export * from "./node-host-terminal.js";
+export * from "./node-process.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/pty/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/pty/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC"}

package/dist/pty/index.js

@@ -0,0 +1,5 @@
+export * from "./contracts.js";
+export * from "./evidence-gate.js";
+export * from "./node-host-terminal.js";
+export * from "./node-process.js";
+//# sourceMappingURL=index.js.map

package/dist/pty/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/pty/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC"}

package/dist/pty/node-host-terminal.d.ts

@@ -0,0 +1,14 @@
+import type { ReadStream, WriteStream } from "node:tty";
+import type { HostTerminalAdapter } from "../terminal/mode.js";
+import type { ForegroundTerminalHost } from "../terminal/foreground.js";
+export declare function createNodeHostTerminalAdapter(input?: {
+    readonly stdin?: ReadStream;
+    readonly stdout?: WriteStream;
+    readonly writeTimeoutMs?: number;
+}): HostTerminalAdapter;
+export declare function createNodeForegroundTerminalHost(input?: {
+    readonly stdin?: ReadStream;
+    readonly stdout?: WriteStream;
+    readonly writeTimeoutMs?: number;
+}): ForegroundTerminalHost;
+//# sourceMappingURL=node-host-terminal.d.ts.map

package/dist/pty/node-host-terminal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-host-terminal.d.ts","sourceRoot":"","sources":["../../src/pty/node-host-terminal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAExD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAmBxE,wBAAgB,6BAA6B,CAAC,KAAK,GAAE;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAC7B,GAAG,mBAAmB,CAiD3B;AAED,wBAAgB,gCAAgC,CAAC,KAAK,GAAE;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAC7B,GAAG,sBAAsB,CA6C9B"}

package/dist/pty/node-host-terminal.js

@@ -0,0 +1,173 @@
+import { HostTerminalLease } from "../terminal/mode.js";
+import { runtimeFailure } from "../runtime/errors.js";
+const ENABLE_LOCAL_BRACKETED_PASTE = "\u001b[?2004h";
+// Rich mode renders cells locally: inherited mouse reporting must not steal
+// the host terminal's text selection and clipboard gestures.
+const DISABLE_MOUSE_REPORTING = "\u001b[?1000l\u001b[?1002l\u001b[?1003l\u001b[?1006l";
+const ENTER_ALTERNATE_SCREEN = `\u001b[?1049h${DISABLE_MOUSE_REPORTING}${ENABLE_LOCAL_BRACKETED_PASTE}\u001b[H`;
+const LEAVE_ALTERNATE_SCREEN = "\u001b[?1049l";
+const RESET_REMOTE_MODES = [
+    "\u001b[?1000l\u001b[?1002l\u001b[?1003l\u001b[?1004l\u001b[?1006l",
+    "\u001b[?2004l\u001b[?2026l",
+    "\u001b[?1l\u001b[?6l\u001b[4l\u001b[20l\u001b>",
+    "\u001b[?1049l\u001b[?1047l\u001b[?47l",
+    "\u001b[r\u001b[0m\u001b[?25h",
+].join("");
+const HOST_WRITE_TIMEOUT_MS = 5_000;
+const ACTIVE_HOST_INPUTS = new WeakSet();
+export function createNodeHostTerminalAdapter(input = {}) {
+    const stdin = input.stdin ?? process.stdin;
+    const stdout = input.stdout ?? process.stdout;
+    const writeTimeoutMs = input.writeTimeoutMs ?? HOST_WRITE_TIMEOUT_MS;
+    if (!Number.isSafeInteger(writeTimeoutMs) || writeTimeoutMs < 1 || writeTimeoutMs > 60_000) {
+        throw new RangeError("Host terminal write timeout must be between 1 and 60000 milliseconds.");
+    }
+    let shouldPauseAfterRawMode = false;
+    let ownsRawMode = false;
+    return Object.freeze({
+        enterRawMode() {
+            assertInteractive(stdin, stdout);
+            if (ACTIVE_HOST_INPUTS.has(stdin)) {
+                throw runtimeFailure("session_conflict", "This host terminal is already owned by another foreground session.");
+            }
+            ACTIVE_HOST_INPUTS.add(stdin);
+            ownsRawMode = true;
+            // `readableFlowing === null` is Node's initial no-consumer state. Calling
+            // resume() changes it to `true` and keeps the process alive, so restoration
+            // must pause both the initial and explicitly-paused states.
+            shouldPauseAfterRawMode = stdin.readableFlowing !== true;
+            stdin.setRawMode(true);
+            stdin.resume();
+        },
+        async enterAlternateScreen() {
+            assertInteractive(stdin, stdout);
+            await writeWithBackpressure(stdout, new TextEncoder().encode(ENTER_ALTERNATE_SCREEN), writeTimeoutMs);
+        },
+        async disableRemoteModes() {
+            if (stdout.isTTY)
+                await writeWithBackpressure(stdout, new TextEncoder().encode(RESET_REMOTE_MODES), writeTimeoutMs);
+        },
+        async leaveAlternateScreen() {
+            if (stdout.isTTY)
+                await writeWithBackpressure(stdout, new TextEncoder().encode(LEAVE_ALTERNATE_SCREEN), writeTimeoutMs);
+        },
+        async leaveRawMode() {
+            if (!ownsRawMode)
+                return;
+            if (shouldPauseAfterRawMode) {
+                stdin.pause();
+                // Node stops the native stdin read on the next tick after pause().
+                // Let Node issue that stop before changing Windows console input mode;
+                // changing mode during an active read also restarts the native read.
+                await new Promise((resolve) => process.nextTick(resolve));
+            }
+            if (stdin.isTTY && typeof stdin.setRawMode === "function")
+                stdin.setRawMode(false);
+            shouldPauseAfterRawMode = false;
+            ownsRawMode = false;
+            ACTIVE_HOST_INPUTS.delete(stdin);
+        },
+    });
+}
+export function createNodeForegroundTerminalHost(input = {}) {
+    const stdin = input.stdin ?? process.stdin;
+    const stdout = input.stdout ?? process.stdout;
+    const writeTimeoutMs = input.writeTimeoutMs ?? HOST_WRITE_TIMEOUT_MS;
+    if (!Number.isSafeInteger(writeTimeoutMs) || writeTimeoutMs < 1 || writeTimeoutMs > 60_000) {
+        throw new RangeError("Host terminal write timeout must be between 1 and 60000 milliseconds.");
+    }
+    return Object.freeze({
+        dimensions() {
+            assertInteractive(stdin, stdout);
+            return Object.freeze({ columns: stdout.columns, rows: stdout.rows });
+        },
+        async acquire(mode = "rich") {
+            const adapter = createNodeHostTerminalAdapter({ stdin, stdout, writeTimeoutMs });
+            if (mode === "rich")
+                return await HostTerminalLease.acquire(adapter);
+            if (mode !== "plain")
+                throw new RangeError("Host terminal mode must be rich or plain.");
+            return await HostTerminalLease.acquire({
+                enterRawMode: () => adapter.enterRawMode(),
+                // Passthrough yields the current screen to the remote program. It must
+                // not claim alternate-screen ownership or paint trusted chrome.
+                enterAlternateScreen: async () => {
+                    assertInteractive(stdin, stdout);
+                    await writeWithBackpressure(stdout, new TextEncoder().encode(ENABLE_LOCAL_BRACKETED_PASTE), writeTimeoutMs);
+                },
+                disableRemoteModes: () => adapter.disableRemoteModes(),
+                leaveAlternateScreen: () => undefined,
+                leaveRawMode: () => adapter.leaveRawMode(),
+            });
+        },
+        async write(bytes) {
+            assertInteractive(stdin, stdout);
+            await writeWithBackpressure(stdout, bytes, writeTimeoutMs);
+        },
+        onInput(listener) {
+            const receive = (chunk) => listener(typeof chunk === "string" ? new TextEncoder().encode(chunk) : new Uint8Array(chunk));
+            stdin.on("data", receive);
+            return () => stdin.removeListener("data", receive);
+        },
+        onResize(listener) {
+            stdout.on("resize", listener);
+            return () => stdout.removeListener("resize", listener);
+        },
+    });
+}
+function assertInteractive(stdin, stdout) {
+    if (!stdin.isTTY || !stdout.isTTY || typeof stdin.setRawMode !== "function") {
+        throw runtimeFailure("pty_unavailable", "The current streams do not provide an interactive host terminal.");
+    }
+}
+async function writeWithBackpressure(stdout, bytes, timeoutMs) {
+    await new Promise((resolve, reject) => {
+        let callbackComplete = false;
+        let drainComplete = false;
+        let settled = false;
+        const timeout = setTimeout(() => finish(new Error("The host terminal output sink exceeded its bounded deadline.")), timeoutMs);
+        timeout.unref();
+        const cleanup = () => {
+            clearTimeout(timeout);
+            stdout.removeListener("error", onError);
+            stdout.removeListener("drain", onDrain);
+        };
+        const finish = (error) => {
+            if (settled)
+                return;
+            if (error === undefined || error === null) {
+                if (!callbackComplete || !drainComplete)
+                    return;
+                settled = true;
+                cleanup();
+                resolve();
+                return;
+            }
+            settled = true;
+            cleanup();
+            reject(error);
+        };
+        const onError = (error) => finish(error);
+        const onDrain = () => {
+            drainComplete = true;
+            finish();
+        };
+        stdout.once("error", onError);
+        let accepted;
+        try {
+            accepted = stdout.write(Buffer.from(bytes), (error) => {
+                callbackComplete = true;
+                finish(error);
+            });
+        }
+        catch (error) {
+            finish(error instanceof Error ? error : new Error("The host terminal output sink failed."));
+            return;
+        }
+        drainComplete = accepted;
+        if (!accepted)
+            stdout.once("drain", onDrain);
+        finish();
+    });
+}
+//# sourceMappingURL=node-host-terminal.js.map