@dopame/acde-linux-x64 0.0.0-stage → 0.0.10

package/lib/acde-api/src/types/permissions.d.ts

@@ -0,0 +1,50 @@
+export type ApprovalCapability = 'camera' | 'microphone' | 'idleDetection'
+
+export type FolderCapability = `fs.folder-${string}`
+
+export interface PermissionPrompt {
+  readonly id: number
+  readonly app: string
+  readonly label: string
+  readonly capability: ApprovalCapability
+  readonly reason: 'request'
+}
+
+export interface PermissionPromptEvent extends PermissionPrompt {
+  readonly type: 'permissionprompt'
+}
+
+export interface PermissionAnsweredEvent {
+  readonly type: 'permissionanswered'
+  readonly id: number
+  readonly app: string
+  readonly capability: ApprovalCapability
+  readonly allowed: boolean
+}
+
+export interface PermissionEventMap {
+  readonly prompt: PermissionPromptEvent
+  readonly answered: PermissionAnsweredEvent
+}
+
+export interface PermissionDecision {
+  readonly app: string
+  readonly label: string | null
+  readonly capability: ApprovalCapability | FolderCapability
+  readonly decision: 'granted' | 'denied'
+  readonly folder?: { readonly label: string; readonly exists: boolean }
+}
+
+export interface AcdePermissions {
+  pending(): Promise<PermissionPrompt[]>
+  answer(id: number, allow: boolean): Promise<void>
+  list(app?: string): Promise<PermissionDecision[]>
+  revoke(app: string, capability: ApprovalCapability | FolderCapability): Promise<boolean>
+  on<K extends keyof PermissionEventMap>(type: K, handler: (event: PermissionEventMap[K]) => void): () => boolean
+}
+
+export interface AcdePermissionError extends Error {
+  readonly status: 403
+  readonly code: 'denied' | 'not_asked' | 'asking'
+  readonly capability: string
+}

package/lib/acde-api/src/types/service.d.ts

@@ -0,0 +1,35 @@
+export interface ServiceContext {
+  readonly name: string
+  readonly package: string
+  readonly state: string
+  readonly native: Readonly<Record<string, unknown>> | null
+  readonly env: Readonly<Record<string, string | undefined>>
+  readonly inspect?: import('./page').AcdeInspect
+  log(line: string): void
+  spawn(argv: readonly string[], options?: SpawnOptions): ServiceProcess
+  import<K extends keyof import('./page').ServiceModuleTypes>(
+    specifier: `acde:${K}`,
+  ): Promise<{ readonly default: import('./page').ServiceModuleTypes[K] } & { readonly [N in K]: import('./page').ServiceModuleTypes[K] }>
+}
+
+export interface SpawnOptions {
+  readonly cwd?: string
+  readonly env?: Readonly<Record<string, string>>
+  onLine?(line: string): void
+  onExit?(code: number | null, signal: number | null): void
+}
+
+export interface ServiceProcess {
+  readonly pid: number
+  write(text: string): boolean
+  end(): void
+  kill(signal?: 'SIGTERM' | 'SIGKILL' | 'SIGINT' | 'SIGHUP'): boolean
+}
+
+export interface ServiceInstance {
+  readonly api: Readonly<Record<string, object>>
+  readonly sync?: readonly string[]
+  close?(): unknown
+}
+
+export type ServiceFactory = (context: ServiceContext) => ServiceInstance | Promise<ServiceInstance>

package/lib/acde-api/src/validate.d.ts

@@ -0,0 +1,64 @@
+import type { AppBackend, AppManifest as AppEntry, Capabilities, PackageManifest } from './types/manifest.js';
+import { API_LEVEL } from './runtime/level.js';
+import { SHARED_PLACES } from './runtime/places.js';
+export type { Capabilities, PackageManifest } from './types/manifest.js';
+export type { CapabilityState, CapabilityStatus, PlatformSupport, RunningMode, WindowFeatures } from './types/capabilities.js';
+export { API_LEVEL, SHARED_PLACES };
+export type { PlaceCapability, SharedPlace } from './runtime/places.js';
+export { FrameThemes, type FrameThemeWire } from './frame.js';
+export { PLATFORM_SUPPORT, RUNNING_MODES, platformSupport } from './runtime/platforms.js';
+export declare const ICON_NAMES: readonly ["files", "browser", "editor", "office", "term", "projects", "dash", "team", "dopa", "settings", "store", "app", "timer", "cards", "list", "chart", "calc", "music", "video", "photo", "paint", "game", "chat", "mail", "calendar", "code", "book", "map", "weather"];
+export type IconName = (typeof ICON_NAMES)[number];
+export declare const SHELL_MODULES: readonly ["windows", "packages", "session", "desktops", "inspect", "desktop", "setDefault", "permissions"];
+export declare const APP_MODULES: readonly ["launch", "apps", "open", "openPath", "handlers", "window"];
+export type ShellModule = (typeof SHELL_MODULES)[number];
+export declare const SYSTEM_CAPABILITIES: readonly ["fs", "terminal", "network", "system", "bluetooth", "audio", "devices", "power", "input", "display", "office", "launch", "slots", "open", "openFiles", "camera", "microphone", "idleDetection"];
+export declare const WEB_CAPABILITIES: readonly ["notifications"];
+export declare const CAPABILITY_MODULES: readonly ["fs", "terminal", "network", "system", "bluetooth", "audio", "devices", "power", "input", "display", "office"];
+export declare const APPROVAL_CAPABILITIES: readonly ["camera", "microphone", "idleDetection"];
+export interface ImportRule {
+    readonly allowed: boolean;
+    readonly missing: string | null;
+    readonly reason: string | null;
+    readonly unverified: string | null;
+}
+export declare const RESERVED_NAMES: ReadonlySet<string>;
+export interface DesktopServiceGrant {
+    readonly name: string;
+    readonly modules: ShellModule[];
+}
+export interface ConfiguredService extends DesktopServiceGrant {
+    readonly module: string;
+}
+export type AppManifest = Required<Omit<AppEntry, 'backend' | 'size'>> & {
+    readonly backend: Required<AppBackend> | null;
+    readonly size: readonly [number, number] | null;
+};
+export interface Findings {
+    readonly errors: string[];
+    readonly warnings: string[];
+}
+export declare class Manifest {
+    #private;
+    static readonly HEAP_MB = 256;
+    static readonly MIN_HEAP_MB = 32;
+    static readonly CAPABILITIES: ReadonlySet<string>;
+    static places(caps: Capabilities): string[];
+    static place(capability: string): string | null;
+    static iconName(icon: string): icon is IconName;
+    static iconImage(icon: string): boolean;
+    static apiLevel(raw: unknown): number | null | string;
+    static shellModules(caps: Capabilities): ShellModule[];
+    static desktopServices(raw: unknown): DesktopServiceGrant[] | null | string;
+    static configServices(raw: unknown): ConfiguredService[] | string;
+    static readonly UNVERSIONED: string;
+    static refusal(level: number): string | null;
+    static heapMb(value: unknown, fallback: number): number;
+    static app(raw: unknown): AppManifest | string;
+    static importRule(name: string, app: AppManifest | null, origin: {
+        readonly system: boolean;
+    }): ImportRule;
+    static reserved(name: string): string | null;
+    static check(manifest: PackageManifest, isDir: (path: string) => boolean, resolve: (url: string) => boolean): Findings;
+    static readonly SYSTEM_REQUESTS: readonly string[];
+}

package/lib/acde-api/src/validate.js

@@ -0,0 +1 @@
+import{API_LEVEL as S}from"./runtime/level.js";import{SHARED_PLACES as v}from"./runtime/places.js";import{FrameThemes as j}from"./frame.js";import{PLATFORM_SUPPORT as T,RUNNING_MODES as J,platformSupport as B}from"./runtime/platforms.js";const k=["files","browser","editor","office","term","projects","dash","team","dopa","settings","store","app","timer","cards","list","chart","calc","music","video","photo","paint","game","chat","mail","calendar","code","book","map","weather"],b=["windows","packages","session","desktops","inspect","desktop","setDefault","permissions"],A=["launch","apps","open","openPath","handlers","window"],E=["fs","terminal","network","system","bluetooth","audio","devices","power","input","display","office","launch","slots","open","openFiles","camera","microphone","idleDetection"],N=["notifications"],I=["fs","terminal","network","system","bluetooth","audio","devices","power","input","display","office"],P=["camera","microphone","idleDetection"],O=new Set([...E,...N,...b,...A,"capabilities"]);class r{static HEAP_MB=256;static MIN_HEAP_MB=32;static CAPABILITIES=new Set([...E,...b]);static#s=new Set(b);static#e=new Set(v);static#t=/^[\w.+-]+\/([\w.+-]+|\*)$/;static#n=new Set(k);static#i=/^\/(?!\/)[^\s\0?#]*\.(svg|png)$/i;static places(e){const s=e.fs;return typeof s=="object"&&s&&Array.isArray(s.roots)?s.roots.filter(t=>r.#e.has(t)):[]}static place(e){const s=e.startsWith("fs.")?e.slice(3):"";return r.#e.has(s)?s:null}static#r(e){if(typeof e!="object"||!e)return[];const s=v.join(", "),t=e.roots;return Array.isArray(t)?t.filter(i=>!r.#e.has(i)).map(i=>{const n=r.#o(i),u=n?`: write "${n}", the runtime finds that folder through the system (also when it was moved)`:` (${s}); any other folder is one the user picks (showDirectoryPicker() with "fs": true)`;return`fs.roots ${JSON.stringify(i)} is not a shared place${u}`}):[`fs.roots lists shared places (${s})`]}static#o(e){if(typeof e!="string")return null;const s=e.split(/[\\/]+/).filter(Boolean).at(-1)?.toLowerCase()??"";return r.#e.has(s)?s:null}static iconName(e){return r.#n.has(e)}static iconImage(e){return r.#i.test(e)}static apiLevel(e){return e===void 0?null:Number.isInteger(e)&&e>0?e:"acde.apiLevel must be a positive whole number (the contract level)"}static shellModules(e){return b.filter(s=>!!e[s])}static desktopServices(e){if(e==null)return null;if(!Array.isArray(e))return"services lists service names or {name, modules}";const s=[];for(const t of e){if(typeof t=="string"&&t){s.push({name:t,modules:[]});continue}const{name:i,modules:n=[]}=typeof t=="object"&&t!==null?t:{};if(typeof i!="string"||!i)return"services lists service names or {name, modules}";if(!Array.isArray(n)||n.some(u=>!r.#s.has(u)))return`service ${JSON.stringify(i)}: modules lists shell modules (${b.join(", ")})`;s.push({name:i,modules:[...n]})}return s}static configServices(e){if(e==null)return[];if(typeof e!="object"||Array.isArray(e))return"services maps each service name to its module or {module, modules}";const s=[];for(const[t,i]of Object.entries(e)){const n=`service ${JSON.stringify(t)}`;if(typeof i=="string"&&i){s.push({name:t,module:i,modules:[]});continue}const u=typeof i=="object"&&i!==null&&!Array.isArray(i)?i:{},{module:p,modules:c,...f}=u;if(typeof p!="string"||!p)return`${n}: a service is its module or {module, modules}`;const[m]=Object.keys(f);if(m!==void 0)return`${n}: ${JSON.stringify(m)} is not a field of a service (module, modules)`;const y=r.desktopServices([{name:t,modules:c}]);if(!Array.isArray(y))return y??`${n}: a service is its module or {module, modules}`;s.push({name:t,module:p,modules:y[0].modules})}return s}static UNVERSIONED=`no acde.apiLevel: a package built before contract levels; rebuild it with the current acde (level ${S})`;static refusal(e){return e===S?null:`needs level ${e}, runtime is level ${S}`}static heapMb(e,s){const t=Number(e);return Number.isFinite(t)&&t>=r.MIN_HEAP_MB?t:s}static app(e){const s="an app needs id, label, icon and entry";if(typeof e!="object"||e===null)return s;const t=g=>e[g],i=g=>typeof t(g)=="string"&&t(g)?t(g):null,n=i("id"),u=i("label"),p=i("icon"),c=i("entry");if(!n||!u||!p||!c||!/^[\w-]+$/.test(n)||!c.startsWith("/"))return s;const f=r.#d(t("backend"));if(typeof f=="string")return`app ${n}: ${f}`;if(c.endsWith("/")&&!f)return`app ${n}: an entry ending in / is a page the backend renders: it needs a backend`;const m=typeof t("capabilities")=="object"&&t("capabilities")!==null?t("capabilities"):{},y=t("mimeTypes");if(y!==void 0&&(!Array.isArray(y)||y.some(g=>typeof g!="string"||!r.#t.test(g))))return`app ${n}: mimeTypes must be MIME types (type/subtype, or type/* for all of a type)`;const $=y??[],a=r.#l(t("schemes"));if(typeof a=="string")return`app ${n}: ${a}`;const o=r.#a(t("requests"));if(typeof o=="string")return`app ${n}: ${o}`;const l=r.#p(t("size"));if(l===void 0)return`app ${n}: size must be [width, height] in whole logical pixels`;const d=r.#c(t("services"));if(typeof d=="string")return`app ${n}: ${d}`;const h=r.#u(t("optional"),m);return typeof h=="string"?`app ${n}: ${h}`:{id:n,label:u,icon:p,entry:c,capabilities:m,heapMb:r.heapMb(t("heapMb"),r.HEAP_MB),multiple:t("multiple")===!0,frame:t("frame")!==!1,mimeTypes:$,schemes:a,requests:o,backend:f,size:l,optional:h,services:d}}static importRule(e,s,t){const i={allowed:!0,missing:null,reason:null,unverified:null};if(!s)return i;const n=s.capabilities,u=`the capabilities of ${s.label}`,p=(c,f)=>({allowed:!1,missing:c,reason:f,unverified:null});if(r.#s.has(e)){if(!t.system){const c=`only the desktop, its services and system apps may import it, and ${s.label} is not a system app`;return p(null,`acde:${e} is a shell module: ${c}`)}return n[e]?i:p(e,`acde:${e} is a shell module: declare "${e}" in ${u}`)}if(e==="launch")return n.launch||n.slots?i:p("launch",`acde:launch needs "launch" or "slots" in ${u}`);if(e==="openPath"||e==="handlers")return n.openFiles?i:p("openFiles",`acde:${e} needs "openFiles" in ${u}`);if(I.includes(e))return n[e]?i:p(e,`acde:${e} needs "${e}" in ${u}`);if(A.includes(e)||e==="capabilities"||s.services.includes(e))return i;if(s.services.length>0){const c=s.services.map(m=>JSON.stringify(m)).join(", "),f=s.services.length===1?"the service":"one of the services";return{...i,unverified:`acde:${e} resolves only if ${f} ${s.label} lists (${c}) provides the "${e}" namespace`}}return p(null,`acde:${e} is not a system module; if a desktop service provides it, list that service's name in the services of ${s.label}`)}static reserved(e){return O.has(e)?`service ${JSON.stringify(e)} has the name of a system module (acde:${e}); system module names are reserved`:null}static check(e,s,t){const i={errors:[],warnings:[]},{errors:n,warnings:u}=i,p=e.apps??[],c=r.apiLevel(e.apiLevel);c===null?n.push(r.UNVERSIONED):typeof c=="string"?n.push(c):r.refusal(c)&&n.push(`acde.apiLevel ${c}: ${r.refusal(c)}`),p.length===0&&(e.desktops??[]).length===0&&n.push("acde.apps is empty: no app");for(const[a,o]of Object.entries(e.assets??{})){(!a.startsWith("/")||!a.endsWith("/"))&&n.push(`assets ${JSON.stringify(a)}: a prefix is /\u2026/`);for(const l of o.filter(d=>!s(d)))n.push(`assets ${JSON.stringify(a)}: no directory ${JSON.stringify(l)}`)}const f=new Set((e.services??[]).map(a=>a.name));for(const a of f){const o=r.reserved(a);o&&n.push(o)}for(const a of e.desktops??[]){const o=`desktop ${JSON.stringify(a?.id)}`;a&&typeof a=="object"&&"frame"in a&&n.push(`${o}: frame is not a desktop field (only apps have a frame)`);const l=r.desktopServices(a?.services);typeof l=="string"&&n.push(`${o}: ${l}`);for(const d of Array.isArray(l)?l:[])f.has(d.name)||u.push(`${o}: no service ${JSON.stringify(d.name)} in acde.services`)}const m=(e.desktops??[]).length>0,y=n,$=new Set;for(const a of p){const o=r.app(a);if(typeof o=="string"){n.push(o);continue}const l=`app ${JSON.stringify(o.id)}`;if($.has(o.id)&&n.push(`${l}: twice`),$.add(o.id),!o.entry.endsWith("/")&&!t(o.entry)&&n.push(`${l}: entry ${JSON.stringify(o.entry)} is in no assets directory`),o.backend&&!t(o.backend.entry)&&n.push(`${l}: backend.entry ${JSON.stringify(o.backend.entry)} is in no assets directory`),r.iconImage(o.icon)?t(o.icon)||n.push(`${l}: icon ${JSON.stringify(o.icon)} is in no assets directory`):r.iconName(o.icon)||u.push(`${l}: icon ${JSON.stringify(o.icon)} is neither an icon name (${k.join(", ")}) nor an image (.svg or .png) under the assets, such as /app/${o.id}/icon.svg`),a.heapMb!==void 0&&r.heapMb(a.heapMb,0)===0&&u.push(`${l}: heapMb below ${r.MIN_HEAP_MB} is ignored (${r.HEAP_MB} then)`),!m)for(const d of r.shellModules(o.capabilities))y.push(`${l}: acde:${d} is a shell module: only apps of a desktop package (system apps) may declare it`);for(const d of r.#r(o.capabilities.fs))y.push(`${l}: ${d}`);for(const d of Object.keys(o.capabilities).filter(h=>!r.CAPABILITIES.has(h)))f.has(d)?n.push(`${l}: capability ${JSON.stringify(d)} is a desktop service: list it under services`):y.push(`${l}: capability ${JSON.stringify(d)} is not a system capability; list desktop services under services`)}return i}static SYSTEM_REQUESTS=["open-file","open-link"];static#a(e){if(e==null)return[];const s=i=>typeof i=="string"&&/^[a-z][a-z0-9-]*$/.test(i)&&!r.SYSTEM_REQUESTS.includes(i),t=r.SYSTEM_REQUESTS.join(" and ");return!Array.isArray(e)||!e.every(s)?`requests lists private request kinds (lower-case words such as task); ${t} are system requests`:[...e]}static#l(e){if(e==null)return[];const s=t=>typeof t=="string"&&/^[a-z][a-z0-9+.-]*$/.test(t)&&t!=="file";return!Array.isArray(e)||!e.every(s)?"schemes lists lower-case URL schemes without the colon (https, mailto); file is not one":[...e]}static#c(e){if(e==null)return[];if(!Array.isArray(e)||e.some(s=>typeof s!="string"||!s))return"services lists desktop service names";for(const s of e){const t=r.reserved(s);if(t)return t}return[...e]}static#u(e,s){if(e==null)return[];if(!Array.isArray(e)||e.some(i=>typeof i!="string"||!i))return"optional lists capability names";const t=e.find(i=>!s[i]);return t?`optional ${JSON.stringify(t)} is not in capabilities (optional lists declared capabilities that the app can run without)`:[...e]}static#p(e){return e==null?null:Array.isArray(e)&&e.length===2&&e.every(s=>Number.isInteger(s)&&s>0)?[e[0],e[1]]:void 0}static#d(e){if(e==null)return null;if(typeof e!="object"||Array.isArray(e))return"backend must be an object {entry, port?}";const{entry:s,port:t=3e3}=e;return typeof s!="string"||!s.startsWith("/")||s.startsWith("//")||/[\s\0?#]/.test(s)||!/\.m?js$/.test(s)?"backend.entry must be a same-origin URL of a .js module under the assets (/app/<id>/backend/server.js)":typeof t!="number"||!Number.isInteger(t)||t<0||t>65535?"backend.port must be a port number (0 to 65535)":{entry:s,port:t}}}export{S as API_LEVEL,P as APPROVAL_CAPABILITIES,A as APP_MODULES,I as CAPABILITY_MODULES,j as FrameThemes,k as ICON_NAMES,r as Manifest,T as PLATFORM_SUPPORT,O as RESERVED_NAMES,J as RUNNING_MODES,v as SHARED_PLACES,b as SHELL_MODULES,E as SYSTEM_CAPABILITIES,N as WEB_CAPABILITIES,B as platformSupport};

package/lib/acde-api/src/vite.d.ts

@@ -0,0 +1,3 @@
+import type { Plugin } from 'vite'
+
+export default function acde(): Plugin

package/lib/acde-api/src/vite.js

@@ -0,0 +1,9 @@
+const n="acde:",a="\0acde-stub:",r=t=>`const fail = (path) => Promise.reject(new Error(\`\${path}: only there when the app runs in acde\`))
+const make = (path) => new Proxy(function () {}, {
+  get: (_, key) => (key === 'then' || typeof key === 'symbol' ? undefined : key === 'on' ? () => () => false : make(\`\${path}.\${key}\`)),
+  apply: () => fail(path),
+})
+const value = make(${JSON.stringify(n+t)})
+export { value as ${JSON.stringify(t)} }
+export default value
+`;function s(){let t=!1;return{name:"acde",enforce:"pre",configResolved(e){t=e.command==="serve"},resolveId(e){return e.startsWith(n)?t?a+e.slice(n.length):{id:e,external:!0}:null},load(e){return e.startsWith(a)?r(e.slice(a.length)):null}}}export{s as default};

package/package.json

@@ -1,6 +1,13 @@
 {
   "name": "@dopame/acde-linux-x64",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.0.10",
+  "description": "acde for linux-x64: the acdebin-dbg runtime, the acde CLI and the host files",
+  "license": "UNLICENSED",
+  "os": [
+    "linux"
+  ],
+  "cpu": [
+    "x64"
+  ],
+  "preferUnplugged": true
+}

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.