@earendil-works/chord 1.5.0 → 1.5.1

package/dist/node/tui/actions.d.ts

@@ -0,0 +1,49 @@
+import type { BridgeRequest } from "../../tui/bridge.ts";
+/**
+ * The launcher's prompt on the real terminal, `columns` wide: `ask` shows `lines` (the question last) and resolves
+ * with the user's answer, yes or no; `write` writes to the terminal past the output filter (the launcher's own
+ * sequences).
+ */
+export type PromptTerminal = {
+    readonly columns: number;
+    ask(lines: readonly string[]): Promise<boolean>;
+    write(data: string): void;
+};
+/** The prompt's rows for `lines` at `columns` wide: control characters removed, each line wrapped, never cut. */
+export declare function promptLines(lines: readonly string[], columns: number): string[];
+/**
+ * `line` with control characters removed, in rows of at most `width` columns, counting every character but printable
+ * ASCII as two (wide characters never push text past the edge, where the next row would cover it).
+ */
+export declare function wrap(line: string, width: number): string[];
+/**
+ * Does the sandbox's `request` (`copy`, `open`) once the user confirmed it: whether it was done. Throws (the request
+ * refused) for text it will not copy and URLs it will not open. `opener` opens a URL (the platform's by default).
+ */
+export declare function act(request: Extract<BridgeRequest, {
+    kind: "copy" | "open";
+}>, terminal: PromptTerminal, opener?: (url: string) => Promise<void>): Promise<boolean>;
+/** The largest file the sandbox may be given: 16 MiB. */
+export declare const MAX_ATTACHMENT: number;
+/**
+ * Reads the file at `path` (as the sandbox gave it; `~/` the home directory) for the sandbox once the user confirmed
+ * it: its name and bytes, or `null` when declined. Refused at once: a path with control, format or unusual whitespace
+ * characters, and on Windows a UNC, device or `//host` path or a reserved device name. Nothing on the machine is looked
+ * at before the user's yes (Opus E9: on Windows a lookup of `\\host\share` alone sends the user's credentials): the
+ * prompt shows the path resolved by its text (`~`, `.` and `..`); after the yes its links are resolved, and a path
+ * that leads elsewhere is asked about again, showing where; what is opened must be the file confirmed (its device and
+ * inode as when the last prompt was shown). Then it is opened without blocking (a FIFO waits for no
+ * writer: Opus E12) and read only when it is a regular file of at most `MAX_ATTACHMENT` bytes; one refusal for anything
+ * else (no hint what is there).
+ */
+export declare function attach(path: string, terminal: PromptTerminal, platform?: NodeJS.Platform): Promise<{
+    readonly name: string;
+    readonly bytes: Uint8Array;
+} | null>;
+/**
+ * The command and arguments opening `url` on `platform`, as the coding agent opens a browser (`open-browser.ts`): never
+ * a shell (on Windows not `cmd /c start`, whose parsing runs what follows a `&`): `rundll32
+ * url.dll,FileProtocolHandler <url>` on Windows, `open` on macOS, `xdg-open` elsewhere, the URL one argument.
+ */
+export declare function openerCommand(url: string, platform?: NodeJS.Platform): [string, string[]];
+//# sourceMappingURL=actions.d.ts.map

package/dist/node/tui/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../../src/node/tui/actions.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,iHAAiH;AACjH,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAE/E;AAOD;;;GAGG;AACH,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAgB1D;AAKD;;;GAGG;AACH,wBAAsB,GAAG,CACxB,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE;IAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,CAAC,EAC1D,QAAQ,EAAE,cAAc,EACxB,MAAM,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAkB,GACrD,OAAO,CAAC,OAAO,CAAC,CAyBlB;AAED,yDAAyD;AACzD,eAAO,MAAM,cAAc,QAAmB,CAAC;AAE/C;;;;;;;;;;GAUG;AACH,wBAAsB,MAAM,CAC3B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,cAAc,EACxB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC1C,OAAO,CAAC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG,IAAI,CAAC,CAmCvE;AAyCD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAG3G"}

package/dist/node/tui/actions.js

@@ -0,0 +1,195 @@
+// The launcher's actions (slice 11 §4; fix rounds 1 to 4: Fable's H1, H2, M1, L4, L6 and Opus's M1, M3, L2, L3, E5,
+// E6, E9, E12, R1): what the sandbox may ask of the machine, each confirmed by the user on the launcher's own prompt
+// before it touches it. Every line the prompt shows is wrapped to the terminal's width, never cut. Copying writes the
+// text to the terminal's clipboard (OSC 52, which the output filter refuses to sandboxed code) and shows it first (up
+// to five rows, then how many more characters); text with control characters (a newline and a tab aside) or
+// bidirectional controls is refused. Opening a URL (http or https, no user info) names its host first and runs the
+// platform's opener without a shell (as the coding agent's `open-browser.ts`). Attaching refuses a path with control,
+// format or unusual whitespace characters (and on Windows UNC and device paths), shows the path resolved by its text
+// (its name on its own line) without looking at the machine, after the user's yes resolves its links and asks again
+// when they lead elsewhere, and reads the very file confirmed (its device and inode), a regular file of at most 16 MiB,
+// exactly at the size its open handle has.
+import { spawn } from "node:child_process";
+import { constants } from "node:fs";
+import { open, realpath, stat } from "node:fs/promises";
+import { homedir } from "node:os";
+import { posix, win32 } from "node:path";
+/** The prompt's rows for `lines` at `columns` wide: control characters removed, each line wrapped, never cut. */
+export function promptLines(lines, columns) {
+    return lines.flatMap((line) => wrap(line, promptWidth(columns)));
+}
+/** The text width of a prompt row (one column of padding each side). */
+function promptWidth(columns) {
+    return Math.max(10, columns - 2);
+}
+/**
+ * `line` with control characters removed, in rows of at most `width` columns, counting every character but printable
+ * ASCII as two (wide characters never push text past the edge, where the next row would cover it).
+ */
+export function wrap(line, width) {
+    const rows = [];
+    let row = "";
+    let used = 0;
+    for (const character of visible(line)) {
+        const cells = character >= " " && character <= "~" ? 1 : 2;
+        if (used + cells > width) {
+            rows.push(row);
+            row = "";
+            used = 0;
+        }
+        row += character;
+        used += cells;
+    }
+    rows.push(row);
+    return rows;
+}
+/** How many rows of a copied text the prompt shows before "and N more characters". */
+const SHOWN_ROWS = 5;
+/**
+ * Does the sandbox's `request` (`copy`, `open`) once the user confirmed it: whether it was done. Throws (the request
+ * refused) for text it will not copy and URLs it will not open. `opener` opens a URL (the platform's by default).
+ */
+export async function act(request, terminal, opener = platformOpener) {
+    if (request.kind === "copy") {
+        const { text } = request;
+        // Control characters (but newlines and tabs) and bidirectional controls could hide what a paste runs.
+        if (/[\u0000-\u0008\u000b-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/.test(text)) {
+            throw new Error("copy: the text holds control characters");
+        }
+        const lines = text.split("\n");
+        // Wrapped, never cut: a long line's end is where a pasted command would hide (Opus E6).
+        const rows = lines.flatMap((line) => wrap(line, promptWidth(terminal.columns) - 2));
+        const hidden = rows.slice(SHOWN_ROWS).reduce((sum, row) => sum + row.length, 0);
+        const question = `Copy these ${text.length} characters (${lines.length} line${lines.length === 1 ? "" : "s"})? [y/N]`;
+        const shown = [
+            ...rows.slice(0, SHOWN_ROWS).map((row) => `  ${row}`),
+            ...(hidden > 0 ? [`  … and ${hidden} more characters`] : []),
+        ];
+        if (!(await terminal.ask([...shown, question])))
+            return false;
+        terminal.write(`\x1b]52;c;${Buffer.from(text).toString("base64")}\x07`);
+        return true;
+    }
+    const url = openable(request.url);
+    if (url === undefined)
+        throw new Error("open: only http and https URLs without user info open");
+    if (!(await terminal.ask([`  ${url.href}`, `Open ${url.host} in the browser? [y/N]`])))
+        return false;
+    await opener(url.href);
+    return true;
+}
+/** The largest file the sandbox may be given: 16 MiB. */
+export const MAX_ATTACHMENT = 16 * 1024 * 1024;
+/**
+ * Reads the file at `path` (as the sandbox gave it; `~/` the home directory) for the sandbox once the user confirmed
+ * it: its name and bytes, or `null` when declined. Refused at once: a path with control, format or unusual whitespace
+ * characters, and on Windows a UNC, device or `//host` path or a reserved device name. Nothing on the machine is looked
+ * at before the user's yes (Opus E9: on Windows a lookup of `\\host\share` alone sends the user's credentials): the
+ * prompt shows the path resolved by its text (`~`, `.` and `..`); after the yes its links are resolved, and a path
+ * that leads elsewhere is asked about again, showing where; what is opened must be the file confirmed (its device and
+ * inode as when the last prompt was shown). Then it is opened without blocking (a FIFO waits for no
+ * writer: Opus E12) and read only when it is a regular file of at most `MAX_ATTACHMENT` bytes; one refusal for anything
+ * else (no hint what is there).
+ */
+export async function attach(path, terminal, platform = process.platform) {
+    if (!attachable(path, platform))
+        throw cannotAttach();
+    const paths = platform === "win32" ? win32 : posix;
+    const home = /^~(?:$|[\\/])/.test(path) ? paths.join(homedir(), path.slice(1)) : path;
+    const named = paths.resolve(home);
+    if (!(await terminal.ask(fileLines(named, paths, "Attach this file? [y/N]"))))
+        return null;
+    const file = await realpath(named).catch(() => undefined);
+    if (file === undefined)
+        throw cannotAttach();
+    // The file the user confirms, by identity: what is read must be it (Opus R1: a parent directory swapped for a link
+    // after the yes would lead elsewhere, past `O_NOFOLLOW`, which guards the last step only).
+    const shown = await stat(file, { bigint: true }).catch(() => undefined);
+    if (shown === undefined)
+        throw cannotAttach();
+    if (file !== named && !(await terminal.ask(fileLines(file, paths, "It links here. Attach this file? [y/N]")))) {
+        return null;
+    }
+    // No waiting on a FIFO or device, and no link swapped in at the last step since the user saw the path.
+    const flags = constants.O_RDONLY | (constants.O_NONBLOCK ?? 0) | (constants.O_NOFOLLOW ?? 0);
+    const handle = await open(file, flags).catch(() => undefined);
+    if (handle === undefined)
+        throw cannotAttach();
+    try {
+        const info = await handle.stat({ bigint: true });
+        if (info.dev !== shown.dev || info.ino !== shown.ino)
+            throw cannotAttach();
+        if (!info.isFile() || info.size > BigInt(MAX_ATTACHMENT))
+            throw cannotAttach();
+        // Exactly its size now: a file growing meanwhile is read up to what was checked.
+        const bytes = new Uint8Array(Number(info.size));
+        let read = 0;
+        while (read < bytes.length) {
+            const { bytesRead } = await handle.read(bytes, read, bytes.length - read, read);
+            if (bytesRead === 0)
+                break;
+            read += bytesRead;
+        }
+        return { name: paths.basename(file), bytes: bytes.subarray(0, read) };
+    }
+    finally {
+        await handle.close();
+    }
+}
+/**
+ * Whether `path` may be shown and, once confirmed, opened on `platform`: no character that hides or moves what the
+ * prompt shows (controls, format characters such as bidirectional and zero-width ones, whitespace but single spaces
+ * between words: Opus E5), and on Windows no UNC, device or `//host` path and no reserved device name (Opus E9).
+ */
+function attachable(path, platform) {
+    if (/[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]|[^\S ]| {2}|^ | $/u.test(path))
+        return false;
+    if (platform !== "win32")
+        return true;
+    if (/^[\\/]{2}/.test(path))
+        return false;
+    return !path
+        .split(/[\\/]/)
+        .some((segment) => /^(?:con|prn|aux|nul|com\d|lpt\d|conin\$|conout\$)(?:\..*)?$/i.test(segment));
+}
+/** The prompt's lines for the file at `file`: its name, its directory, then `question`. */
+function fileLines(file, paths, question) {
+    return [`File: ${paths.basename(file)}`, `In:   ${paths.dirname(file)}`, question];
+}
+function cannotAttach() {
+    return new Error("attach: that file cannot be attached");
+}
+/** `text` with control and format characters (bidirectional, zero width) removed: sandboxed text in the prompt. */
+function visible(text) {
+    return text.replace(/[\p{Cc}\p{Cf}]/gu, "");
+}
+/** `url` when it is an http or https URL without user info; else `undefined`. */
+function openable(url) {
+    try {
+        const value = new URL(url);
+        const web = value.protocol === "http:" || value.protocol === "https:";
+        return web && value.username === "" && value.password === "" ? value : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * The command and arguments opening `url` on `platform`, as the coding agent opens a browser (`open-browser.ts`): never
+ * a shell (on Windows not `cmd /c start`, whose parsing runs what follows a `&`): `rundll32
+ * url.dll,FileProtocolHandler <url>` on Windows, `open` on macOS, `xdg-open` elsewhere, the URL one argument.
+ */
+export function openerCommand(url, platform = process.platform) {
+    if (platform === "win32")
+        return ["rundll32", ["url.dll,FileProtocolHandler", url]];
+    return [platform === "darwin" ? "open" : "xdg-open", [url]];
+}
+/** Opens `url` with the platform's opener (`openerCommand`), detached, best effort: a missing opener is no crash. */
+async function platformOpener(url) {
+    const [command, args] = openerCommand(url);
+    // The root as its directory: no opener needs the launcher's (a WSL path too long for explorer.exe, pi #11592).
+    spawn(command, args, { stdio: "ignore", detached: true, cwd: "/", shell: false })
+        .on("error", () => { })
+        .unref();
+}
+//# sourceMappingURL=actions.js.map

package/dist/node/tui/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../../src/node/tui/actions.ts"],"names":[],"mappings":"AAAA,oHAAoH;AACpH,qHAAqH;AACrH,sHAAsH;AACtH,sHAAsH;AACtH,4GAA4G;AAC5G,mHAAmH;AACnH,sHAAsH;AACtH,qHAAqH;AACrH,oHAAoH;AACpH,wHAAwH;AACxH,2CAA2C;AAE3C,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAczC,iHAAiH;AACjH,MAAM,UAAU,WAAW,CAAC,KAAwB,EAAE,OAAe;IACpE,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,wEAAwE;AACxE,SAAS,WAAW,CAAC,OAAe;IACnC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,IAAI,CAAC,IAAY,EAAE,KAAa;IAC/C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,SAAS,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,IAAI,IAAI,GAAG,KAAK,GAAG,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,GAAG,GAAG,EAAE,CAAC;YACT,IAAI,GAAG,CAAC,CAAC;QACV,CAAC;QACD,GAAG,IAAI,SAAS,CAAC;QACjB,IAAI,IAAI,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,OAAO,IAAI,CAAC;AACb,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,GAAG,CAAC,CAAC;AAErB;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CACxB,OAA0D,EAC1D,QAAwB,EACxB,MAAM,GAAmC,cAAc;IAEvD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QACzB,sGAAsG;QACtG,IAAI,qEAAqE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,wFAAwF;QACxF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG,cAAc,IAAI,CAAC,MAAM,gBAAgB,KAAK,CAAC,MAAM,QAAQ,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC;QACtH,MAAM,KAAK,GAAG;YACb,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,MAAM,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC;QACF,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9D,QAAQ,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAChG,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,GAAG,CAAC,IAAI,wBAAwB,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrG,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC;AACb,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC3B,IAAY,EACZ,QAAwB,EACxB,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IAE5C,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC;QAAE,MAAM,YAAY,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACnD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,yBAAyB,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,YAAY,EAAE,CAAC;IAC7C,mHAAmH;IACnH,2FAA2F;IAC3F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxE,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,YAAY,EAAE,CAAC;IAC9C,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,wCAAwC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/G,OAAO,IAAI,CAAC;IACb,CAAC;IACD,uGAAuG;IACvG,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9D,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,YAAY,EAAE,CAAC;IAC/C,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YAAE,MAAM,YAAY,EAAE,CAAC;QAC3E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC;YAAE,MAAM,YAAY,EAAE,CAAC;QAC/E,iFAAiF;QACjF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,OAAO,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;YAChF,IAAI,SAAS,KAAK,CAAC;gBAAE,MAAM;YAC3B,IAAI,IAAI,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;IACvE,CAAC;YAAS,CAAC;QACV,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY,EAAE,QAAyB;IAC1D,IAAI,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,CAAC,IAAI;SACV,KAAK,CAAC,OAAO,CAAC;SACd,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,8DAA8D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,2FAA2F;AAC3F,SAAS,SAAS,CAAC,IAAY,EAAE,KAAmB,EAAE,QAAgB;IACrE,OAAO,CAAC,SAAS,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,YAAY;IACpB,OAAO,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;AAC1D,CAAC;AAED,mHAAmH;AACnH,SAAS,OAAO,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,iFAAiF;AACjF,SAAS,QAAQ,CAAC,GAAW;IAC5B,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC;QACtE,OAAO,GAAG,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IACtF,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,CAAC,UAAU,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,qHAAqH;AACrH,KAAK,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAC3C,+GAA+G;IAC/G,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;SAC/E,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC;SACrB,KAAK,EAAE,CAAC;AACX,CAAC","sourcesContent":["// The launcher's actions (slice 11 §4; fix rounds 1 to 4: Fable's H1, H2, M1, L4, L6 and Opus's M1, M3, L2, L3, E5,\n// E6, E9, E12, R1): what the sandbox may ask of the machine, each confirmed by the user on the launcher's own prompt\n// before it touches it. Every line the prompt shows is wrapped to the terminal's width, never cut. Copying writes the\n// text to the terminal's clipboard (OSC 52, which the output filter refuses to sandboxed code) and shows it first (up\n// to five rows, then how many more characters); text with control characters (a newline and a tab aside) or\n// bidirectional controls is refused. Opening a URL (http or https, no user info) names its host first and runs the\n// platform's opener without a shell (as the coding agent's `open-browser.ts`). Attaching refuses a path with control,\n// format or unusual whitespace characters (and on Windows UNC and device paths), shows the path resolved by its text\n// (its name on its own line) without looking at the machine, after the user's yes resolves its links and asks again\n// when they lead elsewhere, and reads the very file confirmed (its device and inode), a regular file of at most 16 MiB,\n// exactly at the size its open handle has.\n\nimport { spawn } from \"node:child_process\";\nimport { constants } from \"node:fs\";\nimport { open, realpath, stat } from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { posix, win32 } from \"node:path\";\nimport type { BridgeRequest } from \"../../tui/bridge.ts\";\n\n/**\n * The launcher's prompt on the real terminal, `columns` wide: `ask` shows `lines` (the question last) and resolves\n * with the user's answer, yes or no; `write` writes to the terminal past the output filter (the launcher's own\n * sequences).\n */\nexport type PromptTerminal = {\n\treadonly columns: number;\n\task(lines: readonly string[]): Promise<boolean>;\n\twrite(data: string): void;\n};\n\n/** The prompt's rows for `lines` at `columns` wide: control characters removed, each line wrapped, never cut. */\nexport function promptLines(lines: readonly string[], columns: number): string[] {\n\treturn lines.flatMap((line) => wrap(line, promptWidth(columns)));\n}\n\n/** The text width of a prompt row (one column of padding each side). */\nfunction promptWidth(columns: number): number {\n\treturn Math.max(10, columns - 2);\n}\n\n/**\n * `line` with control characters removed, in rows of at most `width` columns, counting every character but printable\n * ASCII as two (wide characters never push text past the edge, where the next row would cover it).\n */\nexport function wrap(line: string, width: number): string[] {\n\tconst rows: string[] = [];\n\tlet row = \"\";\n\tlet used = 0;\n\tfor (const character of visible(line)) {\n\t\tconst cells = character >= \" \" && character <= \"~\" ? 1 : 2;\n\t\tif (used + cells > width) {\n\t\t\trows.push(row);\n\t\t\trow = \"\";\n\t\t\tused = 0;\n\t\t}\n\t\trow += character;\n\t\tused += cells;\n\t}\n\trows.push(row);\n\treturn rows;\n}\n\n/** How many rows of a copied text the prompt shows before \"and N more characters\". */\nconst SHOWN_ROWS = 5;\n\n/**\n * Does the sandbox's `request` (`copy`, `open`) once the user confirmed it: whether it was done. Throws (the request\n * refused) for text it will not copy and URLs it will not open. `opener` opens a URL (the platform's by default).\n */\nexport async function act(\n\trequest: Extract<BridgeRequest, { kind: \"copy\" | \"open\" }>,\n\tterminal: PromptTerminal,\n\topener: (url: string) => Promise<void> = platformOpener,\n): Promise<boolean> {\n\tif (request.kind === \"copy\") {\n\t\tconst { text } = request;\n\t\t// Control characters (but newlines and tabs) and bidirectional controls could hide what a paste runs.\n\t\tif (/[\\u0000-\\u0008\\u000b-\\u001f\\u007f-\\u009f\\u202a-\\u202e\\u2066-\\u2069]/.test(text)) {\n\t\t\tthrow new Error(\"copy: the text holds control characters\");\n\t\t}\n\t\tconst lines = text.split(\"\\n\");\n\t\t// Wrapped, never cut: a long line's end is where a pasted command would hide (Opus E6).\n\t\tconst rows = lines.flatMap((line) => wrap(line, promptWidth(terminal.columns) - 2));\n\t\tconst hidden = rows.slice(SHOWN_ROWS).reduce((sum, row) => sum + row.length, 0);\n\t\tconst question = `Copy these ${text.length} characters (${lines.length} line${lines.length === 1 ? \"\" : \"s\"})? [y/N]`;\n\t\tconst shown = [\n\t\t\t...rows.slice(0, SHOWN_ROWS).map((row) => `  ${row}`),\n\t\t\t...(hidden > 0 ? [`  … and ${hidden} more characters`] : []),\n\t\t];\n\t\tif (!(await terminal.ask([...shown, question]))) return false;\n\t\tterminal.write(`\\x1b]52;c;${Buffer.from(text).toString(\"base64\")}\\x07`);\n\t\treturn true;\n\t}\n\tconst url = openable(request.url);\n\tif (url === undefined) throw new Error(\"open: only http and https URLs without user info open\");\n\tif (!(await terminal.ask([`  ${url.href}`, `Open ${url.host} in the browser? [y/N]`]))) return false;\n\tawait opener(url.href);\n\treturn true;\n}\n\n/** The largest file the sandbox may be given: 16 MiB. */\nexport const MAX_ATTACHMENT = 16 * 1024 * 1024;\n\n/**\n * Reads the file at `path` (as the sandbox gave it; `~/` the home directory) for the sandbox once the user confirmed\n * it: its name and bytes, or `null` when declined. Refused at once: a path with control, format or unusual whitespace\n * characters, and on Windows a UNC, device or `//host` path or a reserved device name. Nothing on the machine is looked\n * at before the user's yes (Opus E9: on Windows a lookup of `\\\\host\\share` alone sends the user's credentials): the\n * prompt shows the path resolved by its text (`~`, `.` and `..`); after the yes its links are resolved, and a path\n * that leads elsewhere is asked about again, showing where; what is opened must be the file confirmed (its device and\n * inode as when the last prompt was shown). Then it is opened without blocking (a FIFO waits for no\n * writer: Opus E12) and read only when it is a regular file of at most `MAX_ATTACHMENT` bytes; one refusal for anything\n * else (no hint what is there).\n */\nexport async function attach(\n\tpath: string,\n\tterminal: PromptTerminal,\n\tplatform: NodeJS.Platform = process.platform,\n): Promise<{ readonly name: string; readonly bytes: Uint8Array } | null> {\n\tif (!attachable(path, platform)) throw cannotAttach();\n\tconst paths = platform === \"win32\" ? win32 : posix;\n\tconst home = /^~(?:$|[\\\\/])/.test(path) ? paths.join(homedir(), path.slice(1)) : path;\n\tconst named = paths.resolve(home);\n\tif (!(await terminal.ask(fileLines(named, paths, \"Attach this file? [y/N]\")))) return null;\n\tconst file = await realpath(named).catch(() => undefined);\n\tif (file === undefined) throw cannotAttach();\n\t// The file the user confirms, by identity: what is read must be it (Opus R1: a parent directory swapped for a link\n\t// after the yes would lead elsewhere, past `O_NOFOLLOW`, which guards the last step only).\n\tconst shown = await stat(file, { bigint: true }).catch(() => undefined);\n\tif (shown === undefined) throw cannotAttach();\n\tif (file !== named && !(await terminal.ask(fileLines(file, paths, \"It links here. Attach this file? [y/N]\")))) {\n\t\treturn null;\n\t}\n\t// No waiting on a FIFO or device, and no link swapped in at the last step since the user saw the path.\n\tconst flags = constants.O_RDONLY | (constants.O_NONBLOCK ?? 0) | (constants.O_NOFOLLOW ?? 0);\n\tconst handle = await open(file, flags).catch(() => undefined);\n\tif (handle === undefined) throw cannotAttach();\n\ttry {\n\t\tconst info = await handle.stat({ bigint: true });\n\t\tif (info.dev !== shown.dev || info.ino !== shown.ino) throw cannotAttach();\n\t\tif (!info.isFile() || info.size > BigInt(MAX_ATTACHMENT)) throw cannotAttach();\n\t\t// Exactly its size now: a file growing meanwhile is read up to what was checked.\n\t\tconst bytes = new Uint8Array(Number(info.size));\n\t\tlet read = 0;\n\t\twhile (read < bytes.length) {\n\t\t\tconst { bytesRead } = await handle.read(bytes, read, bytes.length - read, read);\n\t\t\tif (bytesRead === 0) break;\n\t\t\tread += bytesRead;\n\t\t}\n\t\treturn { name: paths.basename(file), bytes: bytes.subarray(0, read) };\n\t} finally {\n\t\tawait handle.close();\n\t}\n}\n\n/**\n * Whether `path` may be shown and, once confirmed, opened on `platform`: no character that hides or moves what the\n * prompt shows (controls, format characters such as bidirectional and zero-width ones, whitespace but single spaces\n * between words: Opus E5), and on Windows no UNC, device or `//host` path and no reserved device name (Opus E9).\n */\nfunction attachable(path: string, platform: NodeJS.Platform): boolean {\n\tif (/[\\p{Cc}\\p{Cf}\\p{Zl}\\p{Zp}]|[^\\S ]| {2}|^ | $/u.test(path)) return false;\n\tif (platform !== \"win32\") return true;\n\tif (/^[\\\\/]{2}/.test(path)) return false;\n\treturn !path\n\t\t.split(/[\\\\/]/)\n\t\t.some((segment) => /^(?:con|prn|aux|nul|com\\d|lpt\\d|conin\\$|conout\\$)(?:\\..*)?$/i.test(segment));\n}\n\n/** The prompt's lines for the file at `file`: its name, its directory, then `question`. */\nfunction fileLines(file: string, paths: typeof posix, question: string): string[] {\n\treturn [`File: ${paths.basename(file)}`, `In:   ${paths.dirname(file)}`, question];\n}\n\nfunction cannotAttach(): Error {\n\treturn new Error(\"attach: that file cannot be attached\");\n}\n\n/** `text` with control and format characters (bidirectional, zero width) removed: sandboxed text in the prompt. */\nfunction visible(text: string): string {\n\treturn text.replace(/[\\p{Cc}\\p{Cf}]/gu, \"\");\n}\n\n/** `url` when it is an http or https URL without user info; else `undefined`. */\nfunction openable(url: string): URL | undefined {\n\ttry {\n\t\tconst value = new URL(url);\n\t\tconst web = value.protocol === \"http:\" || value.protocol === \"https:\";\n\t\treturn web && value.username === \"\" && value.password === \"\" ? value : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/**\n * The command and arguments opening `url` on `platform`, as the coding agent opens a browser (`open-browser.ts`): never\n * a shell (on Windows not `cmd /c start`, whose parsing runs what follows a `&`): `rundll32\n * url.dll,FileProtocolHandler <url>` on Windows, `open` on macOS, `xdg-open` elsewhere, the URL one argument.\n */\nexport function openerCommand(url: string, platform: NodeJS.Platform = process.platform): [string, string[]] {\n\tif (platform === \"win32\") return [\"rundll32\", [\"url.dll,FileProtocolHandler\", url]];\n\treturn [platform === \"darwin\" ? \"open\" : \"xdg-open\", [url]];\n}\n\n/** Opens `url` with the platform's opener (`openerCommand`), detached, best effort: a missing opener is no crash. */\nasync function platformOpener(url: string): Promise<void> {\n\tconst [command, args] = openerCommand(url);\n\t// The root as its directory: no opener needs the launcher's (a WSL path too long for explorer.exe, pi #11592).\n\tspawn(command, args, { stdio: \"ignore\", detached: true, cwd: \"/\", shell: false })\n\t\t.on(\"error\", () => {})\n\t\t.unref();\n}\n"]}

package/dist/node/tui/credentials.d.ts

@@ -0,0 +1,17 @@
+/** Where the launcher's token comes from. */
+export type TerminalCredentials = {
+    readonly kind: "token";
+    readonly token: string;
+} | {
+    readonly kind: "file";
+    readonly path: string;
+}
+/** Pairing with the server, the device named `label`; the token saved to `save` (created, mode 0600) when given. */
+ | {
+    readonly kind: "pairing";
+    readonly label: string;
+    readonly save?: string;
+};
+/** The launcher's token for the server at `url`; pairing shows its code through `say`. */
+export declare function tokenOf(credentials: TerminalCredentials, url: URL, say: (line: string) => void, signal: AbortSignal): Promise<string>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/node/tui/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../src/node/tui/credentials.ts"],"names":[],"mappings":"AAQA,6CAA6C;AAC7C,MAAM,MAAM,mBAAmB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAClD,oHAAoH;GAClH;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAKhF,0FAA0F;AAC1F,wBAAsB,OAAO,CAC5B,WAAW,EAAE,mBAAmB,EAChC,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAC3B,MAAM,EAAE,WAAW,GACjB,OAAO,CAAC,MAAM,CAAC,CASjB"}

package/dist/node/tui/credentials.js

@@ -0,0 +1,54 @@
+// The launcher's credentials (slice 11 §4, decision "The app kit, point 3" (c)): a device token the launcher keeps,
+// never the sandbox. It is given, read from a token file (the owner token file on the server's machine, slice 13), or
+// got by device pairing: the launcher asks for a code, shows it, and polls until the owner approved it in a browser;
+// a paired token may be saved to a file (mode 0600) for the next start.
+import { readFile } from "node:fs/promises";
+import { writeSecret } from "../app/secrets.js";
+/** How often a pairing is polled. */
+const POLL_MS = 2000;
+/** The launcher's token for the server at `url`; pairing shows its code through `say`. */
+export async function tokenOf(credentials, url, say, signal) {
+    switch (credentials.kind) {
+        case "token":
+            return credentials.token;
+        case "file":
+            return (await readFile(credentials.path, "utf8")).trim();
+        case "pairing":
+            return pair(credentials, url, say, signal);
+    }
+}
+/** Pairs this device: a code shown, the approval polled for, the token returned (and saved when asked). */
+async function pair(credentials, url, say, signal) {
+    const asked = await post(new URL("/_chord/pair", url), { label: credentials.label }, signal);
+    if (!asked.ok)
+        throw new Error(`terminal: the server refused to pair (${asked.status})`);
+    const { code, poll } = (await asked.json());
+    // A trust boundary: the server's answer is shown on the terminal and sent back.
+    if (typeof code !== "string" || !/^[A-Za-z0-9-]{4,32}$/.test(code) || typeof poll !== "string") {
+        throw new Error("terminal: the server's pairing answer is malformed");
+    }
+    say(`Pairing code ${code}: approve it at ${new URL(`/_chord/pair/${code}`, url)} (signed in as the owner).`);
+    for (;;) {
+        await new Promise((resolve) => setTimeout(resolve, POLL_MS));
+        signal.throwIfAborted();
+        const polled = await post(new URL("/_chord/pair/poll", url), { poll }, signal);
+        if (!polled.ok)
+            throw new Error("terminal: the pairing ended without approval");
+        const answer = (await polled.json());
+        if (answer.status !== "approved" || answer.token === undefined)
+            continue;
+        if (credentials.save !== undefined)
+            await writeSecret(credentials.save, answer.token, "create");
+        return answer.token;
+    }
+}
+/** A JSON post. */
+function post(url, body, signal) {
+    return fetch(url, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(body),
+        signal,
+    });
+}
+//# sourceMappingURL=credentials.js.map

package/dist/node/tui/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../../src/node/tui/credentials.ts"],"names":[],"mappings":"AAAA,oHAAoH;AACpH,sHAAsH;AACtH,qHAAqH;AACrH,wEAAwE;AAExE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAShD,qCAAqC;AACrC,MAAM,OAAO,GAAG,IAAI,CAAC;AAErB,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,OAAO,CAC5B,WAAgC,EAChC,GAAQ,EACR,GAA2B,EAC3B,MAAmB;IAEnB,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;QAC1B,KAAK,OAAO;YACX,OAAO,WAAW,CAAC,KAAK,CAAC;QAC1B,KAAK,MAAM;YACV,OAAO,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,KAAK,SAAS;YACb,OAAO,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;AACF,CAAC;AAED,2GAA2G;AAC3G,KAAK,UAAU,IAAI,CAClB,WAA8D,EAC9D,GAAQ,EACR,GAA2B,EAC3B,MAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACzF,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAyD,CAAC;IACpG,gFAAgF;IAChF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,GAAG,CAAC,gBAAgB,IAAI,mBAAmB,IAAI,GAAG,CAAC,gBAAgB,IAAI,EAAE,EAAE,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC7G,SAAS,CAAC;QACT,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAyD,CAAC;QAC7F,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS;QACzE,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChG,OAAO,MAAM,CAAC,KAAK,CAAC;IACrB,CAAC;AACF,CAAC;AAED,mBAAmB;AACnB,SAAS,IAAI,CAAC,GAAQ,EAAE,IAAa,EAAE,MAAmB;IACzD,OAAO,KAAK,CAAC,GAAG,EAAE;QACjB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,MAAM;KACN,CAAC,CAAC;AACJ,CAAC","sourcesContent":["// The launcher's credentials (slice 11 §4, decision \"The app kit, point 3\" (c)): a device token the launcher keeps,\n// never the sandbox. It is given, read from a token file (the owner token file on the server's machine, slice 13), or\n// got by device pairing: the launcher asks for a code, shows it, and polls until the owner approved it in a browser;\n// a paired token may be saved to a file (mode 0600) for the next start.\n\nimport { readFile } from \"node:fs/promises\";\nimport { writeSecret } from \"../app/secrets.ts\";\n\n/** Where the launcher's token comes from. */\nexport type TerminalCredentials =\n\t| { readonly kind: \"token\"; readonly token: string }\n\t| { readonly kind: \"file\"; readonly path: string }\n\t/** Pairing with the server, the device named `label`; the token saved to `save` (created, mode 0600) when given. */\n\t| { readonly kind: \"pairing\"; readonly label: string; readonly save?: string };\n\n/** How often a pairing is polled. */\nconst POLL_MS = 2000;\n\n/** The launcher's token for the server at `url`; pairing shows its code through `say`. */\nexport async function tokenOf(\n\tcredentials: TerminalCredentials,\n\turl: URL,\n\tsay: (line: string) => void,\n\tsignal: AbortSignal,\n): Promise<string> {\n\tswitch (credentials.kind) {\n\t\tcase \"token\":\n\t\t\treturn credentials.token;\n\t\tcase \"file\":\n\t\t\treturn (await readFile(credentials.path, \"utf8\")).trim();\n\t\tcase \"pairing\":\n\t\t\treturn pair(credentials, url, say, signal);\n\t}\n}\n\n/** Pairs this device: a code shown, the approval polled for, the token returned (and saved when asked). */\nasync function pair(\n\tcredentials: Extract<TerminalCredentials, { kind: \"pairing\" }>,\n\turl: URL,\n\tsay: (line: string) => void,\n\tsignal: AbortSignal,\n): Promise<string> {\n\tconst asked = await post(new URL(\"/_chord/pair\", url), { label: credentials.label }, signal);\n\tif (!asked.ok) throw new Error(`terminal: the server refused to pair (${asked.status})`);\n\tconst { code, poll } = (await asked.json()) as { readonly code?: unknown; readonly poll?: unknown };\n\t// A trust boundary: the server's answer is shown on the terminal and sent back.\n\tif (typeof code !== \"string\" || !/^[A-Za-z0-9-]{4,32}$/.test(code) || typeof poll !== \"string\") {\n\t\tthrow new Error(\"terminal: the server's pairing answer is malformed\");\n\t}\n\tsay(`Pairing code ${code}: approve it at ${new URL(`/_chord/pair/${code}`, url)} (signed in as the owner).`);\n\tfor (;;) {\n\t\tawait new Promise((resolve) => setTimeout(resolve, POLL_MS));\n\t\tsignal.throwIfAborted();\n\t\tconst polled = await post(new URL(\"/_chord/pair/poll\", url), { poll }, signal);\n\t\tif (!polled.ok) throw new Error(\"terminal: the pairing ended without approval\");\n\t\tconst answer = (await polled.json()) as { readonly status: string; readonly token?: string };\n\t\tif (answer.status !== \"approved\" || answer.token === undefined) continue;\n\t\tif (credentials.save !== undefined) await writeSecret(credentials.save, answer.token, \"create\");\n\t\treturn answer.token;\n\t}\n}\n\n/** A JSON post. */\nfunction post(url: URL, body: unknown, signal: AbortSignal): Promise<Response> {\n\treturn fetch(url, {\n\t\tmethod: \"POST\",\n\t\theaders: { \"content-type\": \"application/json\" },\n\t\tbody: JSON.stringify(body),\n\t\tsignal,\n\t});\n}\n"]}

package/dist/node/tui/filter.d.ts

@@ -0,0 +1,5 @@
+/** The longest frame the sandbox may write. */
+export declare const MAX_FRAME: number;
+/** `output` with only the allowed sequences; throws for a frame over `MAX_FRAME`. */
+export declare function filterOutput(output: string): string;
+//# sourceMappingURL=filter.d.ts.map

package/dist/node/tui/filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter.d.ts","sourceRoot":"","sources":["../../../src/node/tui/filter.ts"],"names":[],"mappings":"AAMA,+CAA+C;AAC/C,eAAO,MAAM,SAAS,QAAY,CAAC;AAOnC,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAgBnD"}

package/dist/node/tui/filter.js

@@ -0,0 +1,79 @@
+// The terminal's output filter (slice 11 §4; p2's `tui-filter.ts`): the only path from the sandbox to the real
+// terminal. A frame's text and the escape sequences a terminal UI needs to draw pass (cursor moves, erasing, colours,
+// the alternate screen, bracketed paste, synchronized output, mouse reporting); every other sequence is dropped, so
+// sandboxed code cannot set the clipboard (OSC 52), retitle or reconfigure the terminal, or smuggle a sequence across
+// frames: an unterminated one ends with its frame.
+/** The longest frame the sandbox may write. */
+export const MAX_FRAME = 64 * 1024;
+const ESC = "\x1b";
+/** DEC private modes output may set: cursor visibility, bracketed paste, sync, alternate screen, autowrap, mouse. */
+const MODES = new Set(["25", "2004", "2026", "1049", "7", "1000", "1002", "1006", "1004"]);
+/** `output` with only the allowed sequences; throws for a frame over `MAX_FRAME`. */
+export function filterOutput(output) {
+    if (output.length > MAX_FRAME || Buffer.byteLength(output) > MAX_FRAME) {
+        throw new RangeError("terminal: a frame over 64 KiB");
+    }
+    let kept = "";
+    for (let index = 0; index < output.length; index++) {
+        const code = output.charCodeAt(index);
+        if (code === 27 || (code >= 0x80 && code <= 0x9f)) {
+            const [next, sequence] = escapeAt(output, index);
+            index = next;
+            kept += sequence;
+            continue;
+        }
+        if (code === 9 || code === 10 || code === 13 || (code >= 0x20 && code !== 0x7f))
+            kept += output[index];
+    }
+    return kept;
+}
+/** The escape at `index`: the index of its last character, and the sequence kept (`""` when dropped). */
+function escapeAt(output, start) {
+    let index = start;
+    const code = output.charCodeAt(index);
+    const introducer = code === 27 ? (output[++index] ?? "") : output[index];
+    if (introducer === "[" || code === 0x9b) {
+        const body = index + 1;
+        while (index + 1 < output.length &&
+            output.charCodeAt(index + 1) >= 0x20 &&
+            output.charCodeAt(index + 1) <= 0x3f) {
+            index++;
+        }
+        const final = output[++index] ?? "";
+        const text = output.slice(body, index);
+        return [index, code === 27 && final !== "" && allowedCsi(text, final) ? `${ESC}[${text}${final}` : ""];
+    }
+    if ((introducer !== "" && "]PX^_".includes(introducer)) || [0x90, 0x98, 0x9d, 0x9e, 0x9f].includes(code)) {
+        // A control string (OSC, DCS, ...): dropped up to its terminator, or the end of the frame.
+        while (++index < output.length) {
+            if (output.charCodeAt(index) === 0x9c || output.charCodeAt(index) === 7)
+                break;
+            if (output[index] === ESC && output[index + 1] === "\\")
+                return [index + 1, ""];
+        }
+        return [index, ""];
+    }
+    // Any other ESC sequence with its intermediates (charset selection, ...): dropped.
+    while (index < output.length && output.charCodeAt(index) >= 0x20 && output.charCodeAt(index) <= 0x2f)
+        index++;
+    return [index, ""];
+}
+/** Whether the CSI sequence with parameters `body` and final `final` may reach the terminal. */
+function allowedCsi(body, final) {
+    if (body.length > 128)
+        return false;
+    if (final === "h" || final === "l")
+        return body.startsWith("?") && MODES.has(body.slice(1));
+    if (final === "m")
+        return /^[\d;:]*$/.test(body) && !/\d{5}/.test(body);
+    if (!/^[\d;]*$/.test(body) || /\d{5}/.test(body))
+        return false;
+    if ("ABCDEFGHfd".includes(final))
+        return body.split(";").length <= ("Hf".includes(final) ? 2 : 1);
+    if (final === "J" || final === "K")
+        return /^[012]?$/.test(body);
+    if (final === "r")
+        return /^(?:\d{1,4};\d{1,4})?$/.test(body);
+    return (final === "s" || final === "u") && body === "";
+}
+//# sourceMappingURL=filter.js.map

package/dist/node/tui/filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter.js","sourceRoot":"","sources":["../../../src/node/tui/filter.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAC/G,sHAAsH;AACtH,oHAAoH;AACpH,sHAAsH;AACtH,mDAAmD;AAEnD,+CAA+C;AAC/C,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnC,MAAM,GAAG,GAAG,MAAM,CAAC;AAEnB,qHAAqH;AACrH,MAAM,KAAK,GAAwB,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEhH,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,MAAc;IAC1C,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;QACxE,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACjD,KAAK,GAAG,IAAI,CAAC;YACb,IAAI,IAAI,QAAQ,CAAC;YACjB,SAAS;QACV,CAAC;QACD,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;YAAE,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,yGAAyG;AACzG,SAAS,QAAQ,CAAC,MAAc,EAAE,KAAa;IAC9C,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC;IAC1E,IAAI,UAAU,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC;QACvB,OACC,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM;YACzB,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,IAAI;YACpC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,IAAI,EACnC,CAAC;YACF,KAAK,EAAE,CAAC;QACT,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,CAAC,UAAU,KAAK,EAAE,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1G,2FAA2F;QAC3F,OAAO,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,MAAM;YAC/E,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpB,CAAC;IACD,mFAAmF;IACnF,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI;QAAE,KAAK,EAAE,CAAC;IAC9G,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACpB,CAAC;AAED,gGAAgG;AAChG,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa;IAC9C,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;AACxD,CAAC","sourcesContent":["// The terminal's output filter (slice 11 §4; p2's `tui-filter.ts`): the only path from the sandbox to the real\n// terminal. A frame's text and the escape sequences a terminal UI needs to draw pass (cursor moves, erasing, colours,\n// the alternate screen, bracketed paste, synchronized output, mouse reporting); every other sequence is dropped, so\n// sandboxed code cannot set the clipboard (OSC 52), retitle or reconfigure the terminal, or smuggle a sequence across\n// frames: an unterminated one ends with its frame.\n\n/** The longest frame the sandbox may write. */\nexport const MAX_FRAME = 64 * 1024;\n\nconst ESC = \"\\x1b\";\n\n/** DEC private modes output may set: cursor visibility, bracketed paste, sync, alternate screen, autowrap, mouse. */\nconst MODES: ReadonlySet<string> = new Set([\"25\", \"2004\", \"2026\", \"1049\", \"7\", \"1000\", \"1002\", \"1006\", \"1004\"]);\n\n/** `output` with only the allowed sequences; throws for a frame over `MAX_FRAME`. */\nexport function filterOutput(output: string): string {\n\tif (output.length > MAX_FRAME || Buffer.byteLength(output) > MAX_FRAME) {\n\t\tthrow new RangeError(\"terminal: a frame over 64 KiB\");\n\t}\n\tlet kept = \"\";\n\tfor (let index = 0; index < output.length; index++) {\n\t\tconst code = output.charCodeAt(index);\n\t\tif (code === 27 || (code >= 0x80 && code <= 0x9f)) {\n\t\t\tconst [next, sequence] = escapeAt(output, index);\n\t\t\tindex = next;\n\t\t\tkept += sequence;\n\t\t\tcontinue;\n\t\t}\n\t\tif (code === 9 || code === 10 || code === 13 || (code >= 0x20 && code !== 0x7f)) kept += output[index];\n\t}\n\treturn kept;\n}\n\n/** The escape at `index`: the index of its last character, and the sequence kept (`\"\"` when dropped). */\nfunction escapeAt(output: string, start: number): [number, string] {\n\tlet index = start;\n\tconst code = output.charCodeAt(index);\n\tconst introducer = code === 27 ? (output[++index] ?? \"\") : output[index]!;\n\tif (introducer === \"[\" || code === 0x9b) {\n\t\tconst body = index + 1;\n\t\twhile (\n\t\t\tindex + 1 < output.length &&\n\t\t\toutput.charCodeAt(index + 1) >= 0x20 &&\n\t\t\toutput.charCodeAt(index + 1) <= 0x3f\n\t\t) {\n\t\t\tindex++;\n\t\t}\n\t\tconst final = output[++index] ?? \"\";\n\t\tconst text = output.slice(body, index);\n\t\treturn [index, code === 27 && final !== \"\" && allowedCsi(text, final) ? `${ESC}[${text}${final}` : \"\"];\n\t}\n\tif ((introducer !== \"\" && \"]PX^_\".includes(introducer)) || [0x90, 0x98, 0x9d, 0x9e, 0x9f].includes(code)) {\n\t\t// A control string (OSC, DCS, ...): dropped up to its terminator, or the end of the frame.\n\t\twhile (++index < output.length) {\n\t\t\tif (output.charCodeAt(index) === 0x9c || output.charCodeAt(index) === 7) break;\n\t\t\tif (output[index] === ESC && output[index + 1] === \"\\\\\") return [index + 1, \"\"];\n\t\t}\n\t\treturn [index, \"\"];\n\t}\n\t// Any other ESC sequence with its intermediates (charset selection, ...): dropped.\n\twhile (index < output.length && output.charCodeAt(index) >= 0x20 && output.charCodeAt(index) <= 0x2f) index++;\n\treturn [index, \"\"];\n}\n\n/** Whether the CSI sequence with parameters `body` and final `final` may reach the terminal. */\nfunction allowedCsi(body: string, final: string): boolean {\n\tif (body.length > 128) return false;\n\tif (final === \"h\" || final === \"l\") return body.startsWith(\"?\") && MODES.has(body.slice(1));\n\tif (final === \"m\") return /^[\\d;:]*$/.test(body) && !/\\d{5}/.test(body);\n\tif (!/^[\\d;]*$/.test(body) || /\\d{5}/.test(body)) return false;\n\tif (\"ABCDEFGHfd\".includes(final)) return body.split(\";\").length <= (\"Hf\".includes(final) ? 2 : 1);\n\tif (final === \"J\" || final === \"K\") return /^[012]?$/.test(body);\n\tif (final === \"r\") return /^(?:\\d{1,4};\\d{1,4})?$/.test(body);\n\treturn (final === \"s\" || final === \"u\") && body === \"\";\n}\n"]}

package/dist/node/tui/index.d.ts

@@ -0,0 +1,6 @@
+export type { PromptTerminal } from "./actions.ts";
+export type { TerminalCredentials } from "./credentials.ts";
+export { filterOutput } from "./filter.ts";
+export { type RunningTerminal, startTerminal, type TerminalOptions, terminalFile } from "./launcher.ts";
+export { requireSandboxNode } from "./sandbox.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/node/tui/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/node/tui/index.ts"],"names":[],"mappings":"AAGA,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,KAAK,eAAe,EAAE,aAAa,EAAE,KAAK,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC"}

package/dist/node/tui/index.js

@@ -0,0 +1,6 @@
+// Chord v2's terminal launcher (`@earendil-works/chord/tui/launcher`; slice 11 §4): the trusted Node side of a terminal
+// client, running the app's terminal code in the sandbox.
+export { filterOutput } from "./filter.js";
+export { startTerminal, terminalFile } from "./launcher.js";
+export { requireSandboxNode } from "./sandbox.js";
+//# sourceMappingURL=index.js.map

package/dist/node/tui/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/node/tui/index.ts"],"names":[],"mappings":"AAAA,wHAAwH;AACxH,0DAA0D;AAI1D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAwB,aAAa,EAAwB,YAAY,EAAE,MAAM,eAAe,CAAC;AACxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC","sourcesContent":["// Chord v2's terminal launcher (`@earendil-works/chord/tui/launcher`; slice 11 §4): the trusted Node side of a terminal\n// client, running the app's terminal code in the sandbox.\n\nexport type { PromptTerminal } from \"./actions.ts\";\nexport type { TerminalCredentials } from \"./credentials.ts\";\nexport { filterOutput } from \"./filter.ts\";\nexport { type RunningTerminal, startTerminal, type TerminalOptions, terminalFile } from \"./launcher.ts\";\nexport { requireSandboxNode } from \"./sandbox.ts\";\n"]}

package/dist/node/tui/launcher.d.ts

@@ -0,0 +1,40 @@
+import type { Readable, Writable } from "node:stream";
+import type { ColorDepth } from "../../surfaces/index.ts";
+import { type TerminalCredentials } from "./credentials.ts";
+/** What `startTerminal` takes. */
+export type TerminalOptions = {
+    /** The app's server (`http://127.0.0.1:8788`). */
+    readonly url: string;
+    readonly credentials: TerminalCredentials;
+    /** The terminal's input and output: the process's by default (raw mode while running, when a TTY). */
+    readonly input?: Readable & {
+        setRawMode?(raw: boolean): unknown;
+        readonly isTTY?: boolean;
+    };
+    readonly output?: Writable & {
+        readonly columns?: number;
+        readonly rows?: number;
+    };
+    /** How many colours the terminal shows: true colour when `COLORTERM` says so, else 256. */
+    readonly colors?: ColorDepth;
+    /** The terminal's background, choosing between the user's dark and light theme: dark by default. */
+    readonly mode?: "dark" | "light";
+    /** The user's languages, most preferred first, until they choose one: the system's locale by default. */
+    readonly locales?: readonly string[];
+    /** Opens a URL the user confirmed: the platform's opener by default. */
+    readonly opener?: (url: string) => Promise<void>;
+};
+/** A running terminal client: its exit code once it ends, and its stop. */
+export type RunningTerminal = {
+    readonly exited: Promise<number>;
+    stop(): Promise<void>;
+};
+/**
+ * `path` resolved on the server `server` when it names one of the terminal surface's files (dot segments and encodings
+ * resolved first: Opus M2, Fable L1); throws otherwise: the sandbox reaches nothing else of the server through the
+ * launcher's token.
+ */
+export declare function terminalFile(path: unknown, server: URL): string;
+/** Starts a terminal client; rejects when it cannot sign in or download, or Node is too old for the sandbox. */
+export declare function startTerminal(options: TerminalOptions): Promise<RunningTerminal>;
+//# sourceMappingURL=launcher.d.ts.map

package/dist/node/tui/launcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.d.ts","sourceRoot":"","sources":["../../../src/node/tui/launcher.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAI1D,OAAO,EAAE,KAAK,mBAAmB,EAAW,MAAM,kBAAkB,CAAC;AAIrE,kCAAkC;AAClC,MAAM,MAAM,eAAe,GAAG;IAC7B,kDAAkD;IAClD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAC1C,sGAAsG;IACtG,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG;QAAE,UAAU,CAAC,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7F,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,oGAAoG;IACpG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACjC,yGAAyG;IACzG,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD,CAAC;AAEF,2EAA2E;AAC3E,MAAM,MAAM,eAAe,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC;AAK1F;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAG,MAAM,CAW/D;AAqCD,gHAAgH;AAChH,wBAAsB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAetF"}