@earendil-works/chord 1.5.0 → 1.5.1

package/dist/tui/bridge.d.ts

@@ -0,0 +1,112 @@
+/** What the launcher tells the sandbox at its start. */
+export type BridgeStart = {
+    /** The base bundle's hash (the sandbox runs it). */
+    readonly base: string;
+    /** The text of the combined plugin scripts at start. */
+    readonly combined: string;
+    readonly columns: number;
+    readonly rows: number;
+    /** How many colours the terminal shows. */
+    readonly colors: "truecolor" | "256";
+    /** The terminal's background: which of the user's two themes applies. */
+    readonly mode: "dark" | "light";
+    /** The user's languages, from the system's locale (`de-DE`), most preferred first. */
+    readonly locales: readonly string[];
+};
+/** A request of the sandbox the launcher answers. */
+export type BridgeRequest = {
+    readonly kind: "fetch";
+    readonly path: string;
+} | {
+    readonly kind: "base";
+} | {
+    readonly kind: "copy";
+    readonly text: string;
+} | {
+    readonly kind: "open";
+    readonly url: string;
+}
+/** A file of the machine the user names (`path`): its name and bytes once confirmed, else `null`. */
+ | {
+    readonly kind: "attach";
+    readonly path: string;
+};
+/** What the sandbox sends. */
+export type SandboxMessage = {
+    readonly kind: "write";
+    readonly data: string;
+} | {
+    readonly kind: "socket_open";
+    readonly socket: number;
+} | {
+    readonly kind: "socket_send";
+    readonly socket: number;
+    readonly bytes: Uint8Array;
+} | {
+    readonly kind: "socket_close";
+    readonly socket: number;
+} | {
+    readonly kind: "request";
+    readonly id: number;
+    readonly request: BridgeRequest;
+}
+/** The sandbox's code is outdated (a new base bundle): the launcher starts a new one. */
+ | {
+    readonly kind: "outdated";
+}
+/** The base bundle failed to start (its message; the launcher shows none of the sandbox's own output). */
+ | {
+    readonly kind: "failed";
+    readonly message: string;
+} | {
+    readonly kind: "exit";
+    readonly code: number;
+};
+/** What the launcher sends. */
+export type LauncherMessage = {
+    readonly kind: "input";
+    readonly data: string;
+} | {
+    readonly kind: "resize";
+    readonly columns: number;
+    readonly rows: number;
+} | {
+    readonly kind: "socket_opened";
+    readonly socket: number;
+} | {
+    readonly kind: "socket_message";
+    readonly socket: number;
+    readonly bytes: Uint8Array;
+} | {
+    readonly kind: "socket_closed";
+    readonly socket: number;
+} | {
+    readonly kind: "reply";
+    readonly id: number;
+    readonly value: unknown;
+}
+/** An attach request's answer: the file the user confirmed. */
+ | {
+    readonly kind: "attached";
+    readonly id: number;
+    readonly name: string;
+    readonly bytes: Uint8Array;
+} | {
+    readonly kind: "refused";
+    readonly id: number;
+    readonly message: string;
+};
+/** The bridge as the sandbox's code gets it from the bootstrap (once: it is taken off `globalThis`). */
+export type Bridge = {
+    readonly start: BridgeStart;
+    send(message: SandboxMessage): void;
+    onMessage(listener: (message: LauncherMessage) => void): void;
+    /**
+     * Runs `source` (registered plugin scripts) in the sandbox's context, as the bootstrap ran the base bundle: with no
+     * dynamic import callback (`import()` throws).
+     */
+    evaluate(source: string, filename: string): void;
+};
+/** The global the sandbox's bootstrap leaves the bridge on, for the base bundle's runtime to take. */
+export declare const BRIDGE = "chordBridge";
+//# sourceMappingURL=bridge.d.ts.map

package/dist/tui/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/tui/bridge.ts"],"names":[],"mappings":"AAOA,wDAAwD;AACxD,MAAM,MAAM,WAAW,GAAG;IACzB,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,KAAK,CAAC;IACrC,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAChC,sFAAsF;IACtF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC,CAAC;AAEF,qDAAqD;AACrD,MAAM,MAAM,aAAa,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AACjD,qGAAqG;GACnG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD,8BAA8B;AAC9B,MAAM,MAAM,cAAc,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACrF;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;CAAE;AACpF,yFAAyF;GACvF;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AAC/B,0GAA0G;GACxG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpD,+BAA+B;AAC/B,MAAM,MAAM,eAAe,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACxF;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE;AAC1E,+DAA+D;GAC7D;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACrG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E,wGAAwG;AACxG,MAAM,MAAM,MAAM,GAAG;IACpB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IACpC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,GAAG,IAAI,CAAC;IAC9D;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACjD,CAAC;AAEF,sGAAsG;AACtG,eAAO,MAAM,MAAM,gBAAgB,CAAC"}

package/dist/tui/bridge.js

@@ -0,0 +1,9 @@
+// The terminal's bridge (slice 11 §4, decision "Slice 11, P8"): the only way between the sandbox, where the app's
+// terminal code and the plugins run, and the trusted launcher outside it. The launcher sends input, resizes and the
+// relayed bytes of the Chord link; the sandbox sends frames for the terminal, opens and feeds link sockets through the
+// launcher, asks for plugin scripts and the server's base hash, and asks for actions on the machine (copy, open a URL,
+// attach a file the user names), which the launcher confirms with the user. Messages are plain data, framed over the
+// sandbox's pipes (`src/node/tui/pipe.ts`); requests carry an id their reply has.
+/** The global the sandbox's bootstrap leaves the bridge on, for the base bundle's runtime to take. */
+export const BRIDGE = "chordBridge";
+//# sourceMappingURL=bridge.js.map

package/dist/tui/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/tui/bridge.ts"],"names":[],"mappings":"AAAA,kHAAkH;AAClH,oHAAoH;AACpH,uHAAuH;AACvH,uHAAuH;AACvH,qHAAqH;AACrH,kFAAkF;AAgElF,sGAAsG;AACtG,MAAM,CAAC,MAAM,MAAM,GAAG,aAAa,CAAC","sourcesContent":["// The terminal's bridge (slice 11 §4, decision \"Slice 11, P8\"): the only way between the sandbox, where the app's\n// terminal code and the plugins run, and the trusted launcher outside it. The launcher sends input, resizes and the\n// relayed bytes of the Chord link; the sandbox sends frames for the terminal, opens and feeds link sockets through the\n// launcher, asks for plugin scripts and the server's base hash, and asks for actions on the machine (copy, open a URL,\n// attach a file the user names), which the launcher confirms with the user. Messages are plain data, framed over the\n// sandbox's pipes (`src/node/tui/pipe.ts`); requests carry an id their reply has.\n\n/** What the launcher tells the sandbox at its start. */\nexport type BridgeStart = {\n\t/** The base bundle's hash (the sandbox runs it). */\n\treadonly base: string;\n\t/** The text of the combined plugin scripts at start. */\n\treadonly combined: string;\n\treadonly columns: number;\n\treadonly rows: number;\n\t/** How many colours the terminal shows. */\n\treadonly colors: \"truecolor\" | \"256\";\n\t/** The terminal's background: which of the user's two themes applies. */\n\treadonly mode: \"dark\" | \"light\";\n\t/** The user's languages, from the system's locale (`de-DE`), most preferred first. */\n\treadonly locales: readonly string[];\n};\n\n/** A request of the sandbox the launcher answers. */\nexport type BridgeRequest =\n\t| { readonly kind: \"fetch\"; readonly path: string }\n\t| { readonly kind: \"base\" }\n\t| { readonly kind: \"copy\"; readonly text: string }\n\t| { readonly kind: \"open\"; readonly url: string }\n\t/** A file of the machine the user names (`path`): its name and bytes once confirmed, else `null`. */\n\t| { readonly kind: \"attach\"; readonly path: string };\n\n/** What the sandbox sends. */\nexport type SandboxMessage =\n\t| { readonly kind: \"write\"; readonly data: string }\n\t| { readonly kind: \"socket_open\"; readonly socket: number }\n\t| { readonly kind: \"socket_send\"; readonly socket: number; readonly bytes: Uint8Array }\n\t| { readonly kind: \"socket_close\"; readonly socket: number }\n\t| { readonly kind: \"request\"; readonly id: number; readonly request: BridgeRequest }\n\t/** The sandbox's code is outdated (a new base bundle): the launcher starts a new one. */\n\t| { readonly kind: \"outdated\" }\n\t/** The base bundle failed to start (its message; the launcher shows none of the sandbox's own output). */\n\t| { readonly kind: \"failed\"; readonly message: string }\n\t| { readonly kind: \"exit\"; readonly code: number };\n\n/** What the launcher sends. */\nexport type LauncherMessage =\n\t| { readonly kind: \"input\"; readonly data: string }\n\t| { readonly kind: \"resize\"; readonly columns: number; readonly rows: number }\n\t| { readonly kind: \"socket_opened\"; readonly socket: number }\n\t| { readonly kind: \"socket_message\"; readonly socket: number; readonly bytes: Uint8Array }\n\t| { readonly kind: \"socket_closed\"; readonly socket: number }\n\t| { readonly kind: \"reply\"; readonly id: number; readonly value: unknown }\n\t/** An attach request's answer: the file the user confirmed. */\n\t| { readonly kind: \"attached\"; readonly id: number; readonly name: string; readonly bytes: Uint8Array }\n\t| { readonly kind: \"refused\"; readonly id: number; readonly message: string };\n\n/** The bridge as the sandbox's code gets it from the bootstrap (once: it is taken off `globalThis`). */\nexport type Bridge = {\n\treadonly start: BridgeStart;\n\tsend(message: SandboxMessage): void;\n\tonMessage(listener: (message: LauncherMessage) => void): void;\n\t/**\n\t * Runs `source` (registered plugin scripts) in the sandbox's context, as the bootstrap ran the base bundle: with no\n\t * dynamic import callback (`import()` throws).\n\t */\n\tevaluate(source: string, filename: string): void;\n};\n\n/** The global the sandbox's bootstrap leaves the bridge on, for the base bundle's runtime to take. */\nexport const BRIDGE = \"chordBridge\";\n"]}

package/dist/tui/channel.d.ts

@@ -0,0 +1,44 @@
+import { LinkEnd } from "../link/link.ts";
+import type { Bridge, BridgeRequest, BridgeStart } from "./bridge.ts";
+/** What one relayed socket reports: it opened, a frame arrived. */
+export type RelayEvents = {
+    opened(): void;
+    received(): void;
+};
+/** The sandbox's bridge: requests, relayed sockets, and the terminal's input and resizes. */
+export declare class SandboxChannel {
+    #private;
+    constructor(bridge: Bridge);
+    /** What the launcher told at the start. */
+    get start(): BridgeStart;
+    /** Asks the launcher; rejects with its refusal. */
+    request(request: BridgeRequest): Promise<unknown>;
+    /** Runs the registered scripts `text` (named `filename` in stacks) through the sandbox's own evaluation. */
+    evaluate(text: string, filename: string): void;
+    /** Writes `data` to the terminal, in frames the launcher takes (`splitFrames`). */
+    write(data: string): void;
+    /** Tells the launcher this sandbox's code is outdated. */
+    outdated(): void;
+    /** Ends the terminal with `code`. */
+    exit(code: number): void;
+    /** Calls `listener` with each input (keys, pastes) until the returned removal. */
+    onInput(listener: (data: string) => void): () => void;
+    /** Calls `listener` at each resize until the returned removal. */
+    onResize(listener: (columns: number, rows: number) => void): () => void;
+    /** Opens a socket to the server's links endpoint through the launcher: its link, reporting to `events`. */
+    openSocket(events: RelayEvents): RelayLink;
+}
+/** A Chord link over a socket the launcher holds: bytes relayed both ways, buffered until the socket opened. */
+export declare class RelayLink extends LinkEnd {
+    #private;
+    constructor(socket: number, events: RelayEvents, bridge: Bridge, forget: () => void);
+    send(message: Uint8Array): void;
+    close(): void;
+    /** The launcher's socket opened: what was sent meanwhile goes out. */
+    opened(): void;
+    /** A frame arrived. */
+    received(bytes: Uint8Array): void;
+    /** The socket closed (either side): the link ends. */
+    dropped(): void;
+}
+//# sourceMappingURL=channel.d.ts.map

package/dist/tui/channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../../src/tui/channel.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAmB,MAAM,aAAa,CAAC;AAGvF,mEAAmE;AACnE,MAAM,MAAM,WAAW,GAAG;IAAE,MAAM,IAAI,IAAI,CAAC;IAAC,QAAQ,IAAI,IAAI,CAAA;CAAE,CAAC;AAE/D,6FAA6F;AAC7F,qBAAa,cAAc;;IAQ1B,YAAY,MAAM,EAAE,MAAM,EAGzB;IAED,2CAA2C;IAC3C,IAAI,KAAK,IAAI,WAAW,CAEvB;IAED,mDAAmD;IACnD,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAMhD;IAED,4GAA4G;IAC5G,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAE7C;IAED,mFAAmF;IACnF,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAExB;IAED,0DAA0D;IAC1D,QAAQ,IAAI,IAAI,CAEf;IAED,qCAAqC;IACrC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAEvB;IAED,kFAAkF;IAClF,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAGpD;IAED,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAGtE;IAED,2GAA2G;IAC3G,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAMzC;CAmCD;AAED,gHAAgH;AAChH,qBAAa,SAAU,SAAQ,OAAO;;IAQrC,YAAY,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,EAMlF;IAED,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAI9B;IAED,KAAK,IAAI,IAAI,CAIZ;IAED,sEAAsE;IACtE,MAAM,IAAI,IAAI,CAKb;IAED,uBAAuB;IACvB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAGhC;IAED,sDAAsD;IACtD,OAAO,IAAI,IAAI,CAGd;CACD"}

package/dist/tui/channel.js

@@ -0,0 +1,150 @@
+// The sandbox's side of the bridge (slice 11 §4): one dispatcher of the launcher's messages (input, resizes, link
+// sockets, replies), requests with their replies, and Chord links whose bytes the launcher relays to the server.
+import { LinkEnd } from "../link/link.js";
+import { splitFrames } from "./frames.js";
+/** The sandbox's bridge: requests, relayed sockets, and the terminal's input and resizes. */
+export class SandboxChannel {
+    #bridge;
+    #replies = new Map();
+    #sockets = new Map();
+    #input = new Set();
+    #resize = new Set();
+    #next = 0;
+    constructor(bridge) {
+        this.#bridge = bridge;
+        bridge.onMessage((message) => this.#dispatch(message));
+    }
+    /** What the launcher told at the start. */
+    get start() {
+        return this.#bridge.start;
+    }
+    /** Asks the launcher; rejects with its refusal. */
+    request(request) {
+        const id = ++this.#next;
+        return new Promise((resolve, reject) => {
+            this.#replies.set(id, { resolve, reject });
+            this.#bridge.send({ kind: "request", id, request });
+        });
+    }
+    /** Runs the registered scripts `text` (named `filename` in stacks) through the sandbox's own evaluation. */
+    evaluate(text, filename) {
+        this.#bridge.evaluate(text, filename);
+    }
+    /** Writes `data` to the terminal, in frames the launcher takes (`splitFrames`). */
+    write(data) {
+        for (const frame of splitFrames(data))
+            this.#bridge.send({ kind: "write", data: frame });
+    }
+    /** Tells the launcher this sandbox's code is outdated. */
+    outdated() {
+        this.#bridge.send({ kind: "outdated" });
+    }
+    /** Ends the terminal with `code`. */
+    exit(code) {
+        this.#bridge.send({ kind: "exit", code });
+    }
+    /** Calls `listener` with each input (keys, pastes) until the returned removal. */
+    onInput(listener) {
+        this.#input.add(listener);
+        return () => this.#input.delete(listener);
+    }
+    /** Calls `listener` at each resize until the returned removal. */
+    onResize(listener) {
+        this.#resize.add(listener);
+        return () => this.#resize.delete(listener);
+    }
+    /** Opens a socket to the server's links endpoint through the launcher: its link, reporting to `events`. */
+    openSocket(events) {
+        const socket = ++this.#next;
+        const link = new RelayLink(socket, events, this.#bridge, () => this.#sockets.delete(socket));
+        this.#sockets.set(socket, link);
+        this.#bridge.send({ kind: "socket_open", socket });
+        return link;
+    }
+    /** One message of the launcher, to whom it is for. */
+    #dispatch(message) {
+        switch (message.kind) {
+            case "input":
+                for (const listener of this.#input)
+                    listener(message.data);
+                return;
+            case "resize":
+                for (const listener of this.#resize)
+                    listener(message.columns, message.rows);
+                return;
+            case "socket_opened":
+                this.#sockets.get(message.socket)?.opened();
+                return;
+            case "socket_message":
+                this.#sockets.get(message.socket)?.received(message.bytes);
+                return;
+            case "socket_closed":
+                this.#sockets.get(message.socket)?.dropped();
+                return;
+            case "reply":
+            case "attached":
+            case "refused":
+                this.#settle(message);
+        }
+    }
+    /** Settles the request a reply or refusal answers. */
+    #settle(message) {
+        const waiting = this.#replies.get(message.id);
+        this.#replies.delete(message.id);
+        if (message.kind === "reply")
+            waiting?.resolve(message.value);
+        else if (message.kind === "attached")
+            waiting?.resolve({ name: message.name, bytes: message.bytes });
+        else
+            waiting?.reject(new Error(message.message));
+    }
+}
+/** A Chord link over a socket the launcher holds: bytes relayed both ways, buffered until the socket opened. */
+export class RelayLink extends LinkEnd {
+    #socket;
+    #events;
+    #bridge;
+    #forget;
+    /** Messages sent while the socket connects; `undefined` once open. */
+    #connecting = [];
+    constructor(socket, events, bridge, forget) {
+        super();
+        this.#socket = socket;
+        this.#events = events;
+        this.#bridge = bridge;
+        this.#forget = forget;
+    }
+    send(message) {
+        if (this.closed)
+            return;
+        if (this.#connecting !== undefined)
+            this.#connecting.push(message);
+        else
+            this.#bridge.send({ kind: "socket_send", socket: this.#socket, bytes: message });
+    }
+    close() {
+        if (this.closed)
+            return;
+        this.#bridge.send({ kind: "socket_close", socket: this.#socket });
+        this.dropped();
+    }
+    /** The launcher's socket opened: what was sent meanwhile goes out. */
+    opened() {
+        const queued = this.#connecting ?? [];
+        this.#connecting = undefined;
+        this.#events.opened();
+        for (const message of queued)
+            this.send(message);
+    }
+    /** A frame arrived. */
+    received(bytes) {
+        this.#events.received();
+        this.deliver(bytes);
+    }
+    /** The socket closed (either side): the link ends. */
+    dropped() {
+        this.#forget();
+        this.ended();
+    }
+}
+//# sourceMappingURL=channel.js.map

package/dist/tui/channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.js","sourceRoot":"","sources":["../../src/tui/channel.ts"],"names":[],"mappings":"AAAA,kHAAkH;AAClH,iHAAiH;AAEjH,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK1C,6FAA6F;AAC7F,MAAM,OAAO,cAAc;IACjB,OAAO,CAAS;IAChB,QAAQ,GAAG,IAAI,GAAG,EAAyE,CAAC;IAC5F,QAAQ,GAAG,IAAI,GAAG,EAAqB,CAAC;IACxC,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC3C,OAAO,GAAG,IAAI,GAAG,EAA2C,CAAC;IACtE,KAAK,GAAG,CAAC,CAAC;IAEV,YAAY,MAAc;QACzB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,2CAA2C;IAC3C,IAAI,KAAK;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3B,CAAC;IAED,mDAAmD;IACnD,OAAO,CAAC,OAAsB;QAC7B,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC;QACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,4GAA4G;IAC5G,QAAQ,CAAC,IAAY,EAAE,QAAgB;QACtC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,IAAY;QACjB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,0DAA0D;IAC1D,QAAQ;QACP,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,qCAAqC;IACrC,IAAI,CAAC,IAAY;QAChB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,kFAAkF;IAClF,OAAO,CAAC,QAAgC;QACvC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,kEAAkE;IAClE,QAAQ,CAAC,QAAiD;QACzD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,2GAA2G;IAC3G,UAAU,CAAC,MAAmB;QAC7B,MAAM,MAAM,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7F,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,sDAAsD;IACtD,SAAS,CAAC,OAAwB;QACjC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,OAAO;gBACX,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM;oBAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC3D,OAAO;YACR,KAAK,QAAQ;gBACZ,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO;oBAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC7E,OAAO;YACR,KAAK,eAAe;gBACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;gBAC5C,OAAO;YACR,KAAK,gBAAgB;gBACpB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC3D,OAAO;YACR,KAAK,eAAe;gBACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;gBAC7C,OAAO;YACR,KAAK,OAAO,CAAC;YACb,KAAK,UAAU,CAAC;YAChB,KAAK,SAAS;gBACb,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACF,CAAC;IAED,sDAAsD;IACtD,OAAO,CAAC,OAA6E;QACpF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;aACzD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;;YAChG,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;CACD;AAED,gHAAgH;AAChH,MAAM,OAAO,SAAU,SAAQ,OAAO;IAC5B,OAAO,CAAS;IAChB,OAAO,CAAc;IACrB,OAAO,CAAS;IAChB,OAAO,CAAa;IAC7B,sEAAsE;IACtE,WAAW,GAA6B,EAAE,CAAC;IAE3C,YAAY,MAAc,EAAE,MAAmB,EAAE,MAAc,EAAE,MAAkB;QAClF,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,OAAmB;QACvB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;YAC9D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,KAAK;QACJ,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;IAChB,CAAC;IAED,sEAAsE;IACtE,MAAM;QACL,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,MAAM,OAAO,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,uBAAuB;IACvB,QAAQ,CAAC,KAAiB;QACzB,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,sDAAsD;IACtD,OAAO;QACN,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,EAAE,CAAC;IACd,CAAC;CACD","sourcesContent":["// The sandbox's side of the bridge (slice 11 §4): one dispatcher of the launcher's messages (input, resizes, link\n// sockets, replies), requests with their replies, and Chord links whose bytes the launcher relays to the server.\n\nimport { LinkEnd } from \"../link/link.ts\";\nimport type { Bridge, BridgeRequest, BridgeStart, LauncherMessage } from \"./bridge.ts\";\nimport { splitFrames } from \"./frames.ts\";\n\n/** What one relayed socket reports: it opened, a frame arrived. */\nexport type RelayEvents = { opened(): void; received(): void };\n\n/** The sandbox's bridge: requests, relayed sockets, and the terminal's input and resizes. */\nexport class SandboxChannel {\n\treadonly #bridge: Bridge;\n\treadonly #replies = new Map<number, { resolve(value: unknown): void; reject(error: Error): void }>();\n\treadonly #sockets = new Map<number, RelayLink>();\n\treadonly #input = new Set<(data: string) => void>();\n\treadonly #resize = new Set<(columns: number, rows: number) => void>();\n\t#next = 0;\n\n\tconstructor(bridge: Bridge) {\n\t\tthis.#bridge = bridge;\n\t\tbridge.onMessage((message) => this.#dispatch(message));\n\t}\n\n\t/** What the launcher told at the start. */\n\tget start(): BridgeStart {\n\t\treturn this.#bridge.start;\n\t}\n\n\t/** Asks the launcher; rejects with its refusal. */\n\trequest(request: BridgeRequest): Promise<unknown> {\n\t\tconst id = ++this.#next;\n\t\treturn new Promise((resolve, reject) => {\n\t\t\tthis.#replies.set(id, { resolve, reject });\n\t\t\tthis.#bridge.send({ kind: \"request\", id, request });\n\t\t});\n\t}\n\n\t/** Runs the registered scripts `text` (named `filename` in stacks) through the sandbox's own evaluation. */\n\tevaluate(text: string, filename: string): void {\n\t\tthis.#bridge.evaluate(text, filename);\n\t}\n\n\t/** Writes `data` to the terminal, in frames the launcher takes (`splitFrames`). */\n\twrite(data: string): void {\n\t\tfor (const frame of splitFrames(data)) this.#bridge.send({ kind: \"write\", data: frame });\n\t}\n\n\t/** Tells the launcher this sandbox's code is outdated. */\n\toutdated(): void {\n\t\tthis.#bridge.send({ kind: \"outdated\" });\n\t}\n\n\t/** Ends the terminal with `code`. */\n\texit(code: number): void {\n\t\tthis.#bridge.send({ kind: \"exit\", code });\n\t}\n\n\t/** Calls `listener` with each input (keys, pastes) until the returned removal. */\n\tonInput(listener: (data: string) => void): () => void {\n\t\tthis.#input.add(listener);\n\t\treturn () => this.#input.delete(listener);\n\t}\n\n\t/** Calls `listener` at each resize until the returned removal. */\n\tonResize(listener: (columns: number, rows: number) => void): () => void {\n\t\tthis.#resize.add(listener);\n\t\treturn () => this.#resize.delete(listener);\n\t}\n\n\t/** Opens a socket to the server's links endpoint through the launcher: its link, reporting to `events`. */\n\topenSocket(events: RelayEvents): RelayLink {\n\t\tconst socket = ++this.#next;\n\t\tconst link = new RelayLink(socket, events, this.#bridge, () => this.#sockets.delete(socket));\n\t\tthis.#sockets.set(socket, link);\n\t\tthis.#bridge.send({ kind: \"socket_open\", socket });\n\t\treturn link;\n\t}\n\n\t/** One message of the launcher, to whom it is for. */\n\t#dispatch(message: LauncherMessage): void {\n\t\tswitch (message.kind) {\n\t\t\tcase \"input\":\n\t\t\t\tfor (const listener of this.#input) listener(message.data);\n\t\t\t\treturn;\n\t\t\tcase \"resize\":\n\t\t\t\tfor (const listener of this.#resize) listener(message.columns, message.rows);\n\t\t\t\treturn;\n\t\t\tcase \"socket_opened\":\n\t\t\t\tthis.#sockets.get(message.socket)?.opened();\n\t\t\t\treturn;\n\t\t\tcase \"socket_message\":\n\t\t\t\tthis.#sockets.get(message.socket)?.received(message.bytes);\n\t\t\t\treturn;\n\t\t\tcase \"socket_closed\":\n\t\t\t\tthis.#sockets.get(message.socket)?.dropped();\n\t\t\t\treturn;\n\t\t\tcase \"reply\":\n\t\t\tcase \"attached\":\n\t\t\tcase \"refused\":\n\t\t\t\tthis.#settle(message);\n\t\t}\n\t}\n\n\t/** Settles the request a reply or refusal answers. */\n\t#settle(message: Extract<LauncherMessage, { kind: \"reply\" | \"attached\" | \"refused\" }>): void {\n\t\tconst waiting = this.#replies.get(message.id);\n\t\tthis.#replies.delete(message.id);\n\t\tif (message.kind === \"reply\") waiting?.resolve(message.value);\n\t\telse if (message.kind === \"attached\") waiting?.resolve({ name: message.name, bytes: message.bytes });\n\t\telse waiting?.reject(new Error(message.message));\n\t}\n}\n\n/** A Chord link over a socket the launcher holds: bytes relayed both ways, buffered until the socket opened. */\nexport class RelayLink extends LinkEnd {\n\treadonly #socket: number;\n\treadonly #events: RelayEvents;\n\treadonly #bridge: Bridge;\n\treadonly #forget: () => void;\n\t/** Messages sent while the socket connects; `undefined` once open. */\n\t#connecting: Uint8Array[] | undefined = [];\n\n\tconstructor(socket: number, events: RelayEvents, bridge: Bridge, forget: () => void) {\n\t\tsuper();\n\t\tthis.#socket = socket;\n\t\tthis.#events = events;\n\t\tthis.#bridge = bridge;\n\t\tthis.#forget = forget;\n\t}\n\n\tsend(message: Uint8Array): void {\n\t\tif (this.closed) return;\n\t\tif (this.#connecting !== undefined) this.#connecting.push(message);\n\t\telse this.#bridge.send({ kind: \"socket_send\", socket: this.#socket, bytes: message });\n\t}\n\n\tclose(): void {\n\t\tif (this.closed) return;\n\t\tthis.#bridge.send({ kind: \"socket_close\", socket: this.#socket });\n\t\tthis.dropped();\n\t}\n\n\t/** The launcher's socket opened: what was sent meanwhile goes out. */\n\topened(): void {\n\t\tconst queued = this.#connecting ?? [];\n\t\tthis.#connecting = undefined;\n\t\tthis.#events.opened();\n\t\tfor (const message of queued) this.send(message);\n\t}\n\n\t/** A frame arrived. */\n\treceived(bytes: Uint8Array): void {\n\t\tthis.#events.received();\n\t\tthis.deliver(bytes);\n\t}\n\n\t/** The socket closed (either side): the link ends. */\n\tdropped(): void {\n\t\tthis.#forget();\n\t\tthis.ended();\n\t}\n}\n"]}

package/dist/tui/frames.d.ts

@@ -0,0 +1,5 @@
+/** The most UTF-16 units of one frame: at most 3 UTF-8 bytes each, so under the launcher's 64 KiB. */
+export declare const FRAME_UNITS: number;
+/** `data` as frames of at most `FRAME_UNITS` units, cut outside escape sequences (one longer is its own frame). */
+export declare function splitFrames(data: string): string[];
+//# sourceMappingURL=frames.d.ts.map

package/dist/tui/frames.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frames.d.ts","sourceRoot":"","sources":["../../src/tui/frames.ts"],"names":[],"mappings":"AAIA,sGAAsG;AACtG,eAAO,MAAM,WAAW,QAAY,CAAC;AAErC,mHAAmH;AACnH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAkBlD"}

package/dist/tui/frames.js

@@ -0,0 +1,52 @@
+// Frames for the terminal (slice 11 §4; fix round 1, Fable L9): the launcher drops a frame over 64 KiB whole (an escape
+// it could hide is never written in parts), so the sandbox splits a large write into frames, each cut only between
+// escape sequences and never inside a surrogate pair: a first paint of a large true-colour screen arrives whole.
+/** The most UTF-16 units of one frame: at most 3 UTF-8 bytes each, so under the launcher's 64 KiB. */
+export const FRAME_UNITS = 16 * 1024;
+/** `data` as frames of at most `FRAME_UNITS` units, cut outside escape sequences (one longer is its own frame). */
+export function splitFrames(data) {
+    if (data.length <= FRAME_UNITS)
+        return [data];
+    const frames = [];
+    let start = 0;
+    // The last place a frame may end: after a character or a whole sequence, never inside one.
+    let safe = 0;
+    let index = 0;
+    while (index < data.length) {
+        const end = data.charCodeAt(index) === 27 ? sequenceEnd(data, index) : unitEnd(data, index);
+        if (end - start > FRAME_UNITS && safe > start) {
+            frames.push(data.slice(start, safe));
+            start = safe;
+        }
+        index = end;
+        safe = end;
+    }
+    frames.push(data.slice(start));
+    return frames;
+}
+/** The index after the character at `index`, a surrogate pair kept together. */
+function unitEnd(data, index) {
+    const code = data.charCodeAt(index);
+    return code >= 0xd800 && code <= 0xdbff && index + 1 < data.length ? index + 2 : index + 1;
+}
+/** The index after the escape sequence at `index` (CSI to its final; OSC, DCS and the like to their terminator). */
+function sequenceEnd(data, index) {
+    const introducer = data[index + 1];
+    if (introducer === "[") {
+        let at = index + 2;
+        while (at < data.length && data.charCodeAt(at) >= 0x20 && data.charCodeAt(at) <= 0x3f)
+            at++;
+        return Math.min(at + 1, data.length);
+    }
+    if (introducer !== undefined && "]PX^_".includes(introducer)) {
+        for (let at = index + 2; at < data.length; at++) {
+            if (data.charCodeAt(at) === 7)
+                return at + 1;
+            if (data[at] === "\x1b" && data[at + 1] === "\\")
+                return at + 2;
+        }
+        return data.length;
+    }
+    return Math.min(index + 2, data.length);
+}
+//# sourceMappingURL=frames.js.map

package/dist/tui/frames.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frames.js","sourceRoot":"","sources":["../../src/tui/frames.ts"],"names":[],"mappings":"AAAA,wHAAwH;AACxH,mHAAmH;AACnH,iHAAiH;AAEjH,sGAAsG;AACtG,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC;AAErC,mHAAmH;AACnH,MAAM,UAAU,WAAW,CAAC,IAAY;IACvC,IAAI,IAAI,CAAC,MAAM,IAAI,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,2FAA2F;IAC3F,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5F,IAAI,GAAG,GAAG,KAAK,GAAG,WAAW,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;YACrC,KAAK,GAAG,IAAI,CAAC;QACd,CAAC;QACD,KAAK,GAAG,GAAG,CAAC;QACZ,IAAI,GAAG,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,SAAS,OAAO,CAAC,IAAY,EAAE,KAAa;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,IAAI,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;AAC5F,CAAC;AAED,oHAAoH;AACpH,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACnC,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACxB,IAAI,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC;QACnB,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,IAAI;YAAE,EAAE,EAAE,CAAC;QAC5F,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9D,KAAK,IAAI,EAAE,GAAG,KAAK,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;YACjD,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC","sourcesContent":["// Frames for the terminal (slice 11 §4; fix round 1, Fable L9): the launcher drops a frame over 64 KiB whole (an escape\n// it could hide is never written in parts), so the sandbox splits a large write into frames, each cut only between\n// escape sequences and never inside a surrogate pair: a first paint of a large true-colour screen arrives whole.\n\n/** The most UTF-16 units of one frame: at most 3 UTF-8 bytes each, so under the launcher's 64 KiB. */\nexport const FRAME_UNITS = 16 * 1024;\n\n/** `data` as frames of at most `FRAME_UNITS` units, cut outside escape sequences (one longer is its own frame). */\nexport function splitFrames(data: string): string[] {\n\tif (data.length <= FRAME_UNITS) return [data];\n\tconst frames: string[] = [];\n\tlet start = 0;\n\t// The last place a frame may end: after a character or a whole sequence, never inside one.\n\tlet safe = 0;\n\tlet index = 0;\n\twhile (index < data.length) {\n\t\tconst end = data.charCodeAt(index) === 27 ? sequenceEnd(data, index) : unitEnd(data, index);\n\t\tif (end - start > FRAME_UNITS && safe > start) {\n\t\t\tframes.push(data.slice(start, safe));\n\t\t\tstart = safe;\n\t\t}\n\t\tindex = end;\n\t\tsafe = end;\n\t}\n\tframes.push(data.slice(start));\n\treturn frames;\n}\n\n/** The index after the character at `index`, a surrogate pair kept together. */\nfunction unitEnd(data: string, index: number): number {\n\tconst code = data.charCodeAt(index);\n\treturn code >= 0xd800 && code <= 0xdbff && index + 1 < data.length ? index + 2 : index + 1;\n}\n\n/** The index after the escape sequence at `index` (CSI to its final; OSC, DCS and the like to their terminator). */\nfunction sequenceEnd(data: string, index: number): number {\n\tconst introducer = data[index + 1];\n\tif (introducer === \"[\") {\n\t\tlet at = index + 2;\n\t\twhile (at < data.length && data.charCodeAt(at) >= 0x20 && data.charCodeAt(at) <= 0x3f) at++;\n\t\treturn Math.min(at + 1, data.length);\n\t}\n\tif (introducer !== undefined && \"]PX^_\".includes(introducer)) {\n\t\tfor (let at = index + 2; at < data.length; at++) {\n\t\t\tif (data.charCodeAt(at) === 7) return at + 1;\n\t\t\tif (data[at] === \"\\x1b\" && data[at + 1] === \"\\\\\") return at + 2;\n\t\t}\n\t\treturn data.length;\n\t}\n\treturn Math.min(index + 2, data.length);\n}\n"]}

package/dist/tui/index.d.ts

@@ -0,0 +1,7 @@
+export type { PageState } from "../surfaces/page-state.ts";
+export type { Bridge, BridgeRequest, BridgeStart, LauncherMessage, SandboxMessage } from "./bridge.ts";
+export { type AttachedFile, startTerminalRuntime, type TerminalRuntime, type TerminalRuntimeOptions, } from "./runtime.ts";
+export { type OptimisticAdd, TuiScope } from "./scope.ts";
+export { BridgeTerminal } from "./terminal.ts";
+export { TerminalTheme } from "./theme.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/tui/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tui/index.ts"],"names":[],"mappings":"AAIA,YAAY,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACvG,OAAO,EACN,KAAK,YAAY,EACjB,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,sBAAsB,GAC3B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,aAAa,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/dist/tui/index.js

@@ -0,0 +1,8 @@
+// Chord v2's terminal surface, the sandbox side (`@earendil-works/chord/tui`; slice 11 §4): `startTerminalRuntime` in
+// the app's terminal entry, the bridged terminal, the theme lookup and `TuiScope`. The launcher and the server side are
+// `/tui/launcher` and `/surfaces`'s `tuiSurface`.
+export { startTerminalRuntime, } from "./runtime.js";
+export { TuiScope } from "./scope.js";
+export { BridgeTerminal } from "./terminal.js";
+export { TerminalTheme } from "./theme.js";
+//# sourceMappingURL=index.js.map

package/dist/tui/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tui/index.ts"],"names":[],"mappings":"AAAA,sHAAsH;AACtH,wHAAwH;AACxH,kDAAkD;AAIlD,OAAO,EAEN,oBAAoB,GAGpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAsB,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC","sourcesContent":["// Chord v2's terminal surface, the sandbox side (`@earendil-works/chord/tui`; slice 11 §4): `startTerminalRuntime` in\n// the app's terminal entry, the bridged terminal, the theme lookup and `TuiScope`. The launcher and the server side are\n// `/tui/launcher` and `/surfaces`'s `tuiSurface`.\n\nexport type { PageState } from \"../surfaces/page-state.ts\";\nexport type { Bridge, BridgeRequest, BridgeStart, LauncherMessage, SandboxMessage } from \"./bridge.ts\";\nexport {\n\ttype AttachedFile,\n\tstartTerminalRuntime,\n\ttype TerminalRuntime,\n\ttype TerminalRuntimeOptions,\n} from \"./runtime.ts\";\nexport { type OptimisticAdd, TuiScope } from \"./scope.ts\";\nexport { BridgeTerminal } from \"./terminal.ts\";\nexport { TerminalTheme } from \"./theme.ts\";\n"]}

package/dist/tui/runtime.d.ts

@@ -0,0 +1,46 @@
+import type { Principal } from "../data/index.ts";
+import type { PluginFacet } from "../host/index.ts";
+import { type Client, type ClientError, type ClientModules, type ConnectionState } from "../surfaces/index.ts";
+import { BridgeTerminal } from "./terminal.ts";
+import { TerminalTheme } from "./theme.ts";
+/** What `startTerminalRuntime` takes. */
+export type TerminalRuntimeOptions<P extends Principal> = {
+    /** The modules the terminal plugins import, by specifier: the app's API modules for the kind, its components. */
+    readonly modules: ClientModules;
+    /** The app's own terminal facets. */
+    readonly core?: readonly PluginFacet<P>[];
+    readonly canRetry?: () => Promise<boolean>;
+    readonly onConnection?: (state: ConnectionState) => void;
+    /** Draws the app, once its plugins are loaded. */
+    readonly render: (runtime: TerminalRuntime<P>) => void;
+    /**
+     * Plugins left out or kept old, a failed update, the host's errors, messages' reports; dropped by default (stderr
+     * is the launcher's).
+     */
+    readonly onError?: (error: ClientError) => void;
+};
+/** A file the launcher read for the sandbox: its name (the path's last segment) and its bytes. */
+export type AttachedFile = {
+    readonly name: string;
+    readonly bytes: Uint8Array;
+};
+/** What the app's terminal code gets. */
+export type TerminalRuntime<P extends Principal> = {
+    readonly host: Client<P>["host"];
+    readonly terminal: BridgeTerminal;
+    readonly theme: TerminalTheme;
+    /** Asks the launcher to copy `text` to the machine's clipboard; it asks the user. Whether it was done. */
+    copy(text: string): Promise<boolean>;
+    /** Asks the launcher to open `url` (http or https) in a browser; it asks the user. Whether it was done. */
+    open(url: string): Promise<boolean>;
+    /**
+     * Asks the launcher for the file at `path` on the machine (at most 16 MiB); it asks the user. Its name and bytes, or
+     * `undefined` when declined.
+     */
+    attach(path: string): Promise<AttachedFile | undefined>;
+    /** Ends the terminal client with `code`. */
+    exit(code: number): void;
+};
+/** Starts the terminal client inside the sandbox; resolves with its runtime once rendered. */
+export declare function startTerminalRuntime<P extends Principal>(options: TerminalRuntimeOptions<P>): Promise<TerminalRuntime<P>>;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/tui/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/tui/runtime.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EACN,KAAK,MAAM,EACX,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,eAAe,EAWpB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,yCAAyC;AACzC,MAAM,MAAM,sBAAsB,CAAC,CAAC,SAAS,SAAS,IAAI;IACzD,iHAAiH;IACjH,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,qCAAqC;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IACzD,kDAAkD;IAClD,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IACvD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;CAChD,CAAC;AAEF,kGAAkG;AAClG,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC;AAEjF,yCAAyC;AACzC,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,SAAS,IAAI;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,0GAA0G;IAC1G,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,2GAA2G;IAC3G,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;IACxD,4CAA4C;IAC5C,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,CAAC;AAEF,8FAA8F;AAC9F,wBAAsB,oBAAoB,CAAC,CAAC,SAAS,SAAS,EAC7D,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC,GAChC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CA0D7B"}

package/dist/tui/runtime.js

@@ -0,0 +1,101 @@
+// `startTerminalRuntime` (slice 11 §4, decisions "Slice 11, P8" and "P9"): the terminal client inside the sandbox, in
+// the app's terminal entry (the base bundle the launcher downloaded). A client host like a page's: the plugin scripts
+// the launcher brought, loaded with the app's core facets and the kit's themes and translations; the language followed
+// from the user's pick and the system's locales the launcher read (scopes' messages redraw on a change); the link to
+// the server relayed by the launcher, kept by the same connection loop; `TuiScripts` followed to apply new plugin
+// scripts in place; a new base bundle hands over to the launcher, which starts the new one. The app gets the host, the
+// bridged terminal, the theme lookup and the launcher's actions.
+import { BACKGROUND_CONTEXT } from "../context/index.js";
+import { FALLBACK_THEMES, followActiveLanguage, followActiveTheme, REGISTER, startClient, TuiScripts, themesFacet, translationsFacet, } from "../surfaces/index.js";
+import { BRIDGE } from "./bridge.js";
+import { SandboxChannel } from "./channel.js";
+import { BridgeTerminal } from "./terminal.js";
+import { TerminalTheme } from "./theme.js";
+/** Starts the terminal client inside the sandbox; resolves with its runtime once rendered. */
+export async function startTerminalRuntime(options) {
+    const channel = new SandboxChannel(takeBridge());
+    const { start } = channel;
+    const scripts = new SandboxScripts(channel);
+    const core = [
+        { name: "chord.themes", facet: themesFacet() },
+        { name: "chord.translations", facet: translationsFacet() },
+        ...(options.core ?? []),
+    ];
+    const onError = options.onError ?? (() => { });
+    const client = await startClient({
+        scripts: TuiScripts,
+        base: start.base,
+        initial: scripts.run(start.combined),
+        modules: options.modules,
+        core,
+        open: (events) => channel.openSocket(events),
+        fetchScript: async (entry) => {
+            const text = (await channel.request({ kind: "fetch", path: entry.url }));
+            const registered = scripts
+                .run(text)
+                .find(({ plugin, digest }) => plugin === entry.name && digest === entry.digest);
+            if (registered === undefined)
+                throw new Error(`plugin "${entry.name}": ${entry.url} did not register`);
+            return registered;
+        },
+        serverBase: () => channel.request({ kind: "base" }).then((base) => base, () => undefined),
+        outdated: () => channel.outdated(),
+        ...(options.canRetry === undefined ? {} : { canRetry: options.canRetry }),
+        ...(options.onConnection === undefined ? {} : { onConnection: options.onConnection }),
+        environment: TERMINAL_ENVIRONMENT,
+        onError,
+    });
+    const theme = new TerminalTheme(FALLBACK_THEMES[start.mode], start.colors);
+    await followActiveTheme(client.host, start.mode, (active) => theme.set(active), BACKGROUND_CONTEXT);
+    await followActiveLanguage(client.host, start.locales, () => { }, (report) => onError({ kind: "messages", report }), BACKGROUND_CONTEXT);
+    const runtime = {
+        host: client.host,
+        terminal: new BridgeTerminal(channel),
+        theme,
+        copy: (text) => channel.request({ kind: "copy", text }).then(Boolean),
+        open: (url) => channel.request({ kind: "open", url }).then(Boolean),
+        // The launcher's reply: its own data, `null` when declined.
+        attach: (path) => channel.request({ kind: "attach", path }).then((file) => file ?? undefined),
+        exit: (code) => channel.exit(code),
+    };
+    options.render(runtime);
+    return runtime;
+}
+/** The bridge the bootstrap left on `globalThis`, taken off it (plugin code never finds it there). */
+function takeBridge() {
+    const scope = globalThis;
+    const bridge = scope[BRIDGE];
+    if (bridge === undefined)
+        throw new Error("startTerminalRuntime: not inside the terminal's sandbox (no bridge)");
+    delete scope[BRIDGE];
+    return bridge;
+}
+/** A terminal has no page wakes: the loop retries on its backoff alone. */
+const TERMINAL_ENVIRONMENT = {
+    now: () => Date.now(),
+    after: (ms, callback) => {
+        const timer = setTimeout(callback, ms);
+        return () => clearTimeout(timer);
+    },
+    online: () => true,
+    onWake: () => () => { },
+};
+/** Runs registered scripts' text in the sandbox and collects what registered (`chordFacet`). */
+class SandboxScripts {
+    #channel;
+    /** The scripts the text being run registers. */
+    #collected = [];
+    constructor(channel) {
+        this.#channel = channel;
+        globalThis[REGISTER] = (plugin, digest, run) => {
+            this.#collected.push({ plugin, digest, run });
+        };
+    }
+    /** Runs `text` (one or more registered scripts): what it registered. */
+    run(text) {
+        this.#collected = [];
+        this.#channel.evaluate(text, "chord-plugins.js");
+        return this.#collected;
+    }
+}
+//# sourceMappingURL=runtime.js.map