@earendil-works/chord 1.5.0 → 1.5.1

package/dist/node/tui/launcher.js

@@ -0,0 +1,439 @@
+// `startTerminal` (slice 11 §4, decision "Slice 11, P8"): the trusted launcher of a terminal client. It signs in with
+// its token (given, from a file, or by pairing), downloads the terminal kind's base bundle and plugin scripts, and
+// runs them in the sandbox, always. It keeps the credentials, the real terminal and the user's choices: the sandbox
+// gets input and resizes, its frames pass the output filter, its Chord link is a socket the launcher opens and relays,
+// its plugin script fetches go only to the terminal surface's files, and its actions on the machine (copy, open a URL,
+// attach a file) are confirmed by the launcher's own prompt. A new base bundle on the server starts a new sandbox.
+// Nothing the sandbox sends can end the launcher (fix round 2, Opus E3): its messages are checked (`pipe.ts`), a send
+// on a socket not yet open is dropped, every buffer and the requests in flight are bounded, a signal cannot open the
+// launcher's inspector, and however the launcher's process ends the terminal is given back (fix round 3, Opus E8,
+// E10, E11). During a prompt Ctrl-C ends the client: its keys are the launcher's; and three Ctrl-C within a second
+// always end it (Opus R2).
+import { WebSocket } from "ws";
+import { act, attach, promptLines } from "./actions.js";
+import { tokenOf } from "./credentials.js";
+import { filterOutput } from "./filter.js";
+import { MAX_BUNDLE, requireSandboxNode, Sandbox } from "./sandbox.js";
+/** The terminal surface's files (the server's `TUI_PREFIX`). */
+const PREFIX = "/_chord/tui/";
+/**
+ * `path` resolved on the server `server` when it names one of the terminal surface's files (dot segments and encodings
+ * resolved first: Opus M2, Fable L1); throws otherwise: the sandbox reaches nothing else of the server through the
+ * launcher's token.
+ */
+export function terminalFile(path, server) {
+    const target = typeof path === "string" ? new URL(path, server) : undefined;
+    if (target === undefined ||
+        target.origin !== server.origin ||
+        target.search !== "" ||
+        !TERMINAL_FILE.test(target.pathname)) {
+        throw new Error("terminal: no terminal file");
+    }
+    return target.pathname;
+}
+/** A terminal surface file's path, as the sandbox may ask for it. */
+const TERMINAL_FILE = /^\/_chord\/tui\/(?:plugin\/)?[\w.~@-]+$/;
+/** The most frames held while a prompt is open: 1 MiB (characters); later ones are dropped. */
+const MAX_HELD = 1024 * 1024;
+/** The most link sockets the sandbox may have open at once. */
+const MAX_SOCKETS = 4;
+/** The most bytes a link socket may have waiting to go out; a sandbox sending more loses the socket. */
+const MAX_SOCKET_BUFFER = 16 * 1024 * 1024;
+/** How long after a prompt appears its keys are ignored: a key typed for the sandbox does not answer it (Opus E4). */
+const PROMPT_GUARD_MS = 300;
+/**
+ * The terminal modes the sandbox may have set, back to the shell's: sync, mouse, focus, paste, cursor, the scroll region
+ * (the cursor kept where it was) and autowrap (Opus E11), screen, colours.
+ */
+const RESET_MODES = "\x1b[?2026l\x1b[?1000l\x1b[?1002l\x1b[?1006l\x1b[?1004l\x1b[?2004l\x1b[?25h\x1b7\x1b[r\x1b8\x1b[?7h\x1b[?1049l\x1b[0m";
+/** The most requests of one sandbox the launcher answers at once; more are refused at once (Opus E10). */
+const MAX_REQUESTS = 8;
+/**
+ * Ctrl-C: during a prompt it ends the client, so a sandbox asking again and again can always be left (Opus E11); and
+ * three within a second always end it, whatever the sandbox does with them (Opus R2).
+ */
+const INTERRUPT = "\x03";
+/** How many Ctrl-C within `INTERRUPT_WINDOW_MS` end the client however the sandbox takes them. */
+const INTERRUPTS_TO_END = 3;
+const INTERRUPT_WINDOW_MS = 1000;
+/** Starts a terminal client; rejects when it cannot sign in or download, or Node is too old for the sandbox. */
+export async function startTerminal(options) {
+    requireSandboxNode();
+    const output = options.output ?? process.stdout;
+    const url = new URL(options.url);
+    const abort = new AbortController();
+    // What the launcher prints of the server's (the pairing's code) passes the output filter too.
+    const token = await tokenOf(options.credentials, url, (line) => output.write(`${filterOutput(line)}\r\n`), abort.signal);
+    const launcher = new Launcher(url, token, options);
+    await launcher.start();
+    return { exited: launcher.exited, stop: () => launcher.finish(0) };
+}
+/** One terminal client's launcher. */
+class Launcher {
+    #url;
+    #headers;
+    #options;
+    #input;
+    #output;
+    #sockets = new Map();
+    #sandbox;
+    /** The running base bundle's hash: an `outdated` sandbox restarts only for another. */
+    #base = "";
+    /**
+     * Whether an action is being confirmed (one at a time), from its request to its end: meanwhile the sandbox's frames
+     * are held (`#held`, at most `MAX_HELD` bytes), so nothing draws over the prompt, even before it appears.
+     */
+    #confirming = false;
+    /** The running sandbox's requests being answered (at most `MAX_REQUESTS`). */
+    #requests = 0;
+    /** The prompt open: its lines, its answer, and when its keys start to count. Keys go to it, not the sandbox. */
+    #prompt;
+    #held = [];
+    #heldBytes = 0;
+    #finished = false;
+    #exit;
+    exited = new Promise((resolve) => {
+        this.#exit = resolve;
+    });
+    #onInput = (data) => {
+        const text = data.toString();
+        if (this.#interrupted(text)) {
+            void this.finish(130);
+            return;
+        }
+        if (this.#prompt === undefined)
+            this.#sandbox?.post({ kind: "input", data: text });
+        else if (text.includes(INTERRUPT))
+            void this.finish(130);
+        else if (Date.now() >= this.#prompt.ready)
+            this.#answered(text === "y" || text === "Y");
+    };
+    #onResize = () => {
+        if (this.#prompt !== undefined)
+            this.#drawPrompt();
+        this.#sandbox?.post({ kind: "resize", columns: this.#columns, rows: this.#rows });
+    };
+    /** When the last Ctrl-C keys came: three within a second end the client. */
+    #interrupts = [];
+    /** The terminal given back if the launcher's process ends without `finish` (a crash). */
+    #onExit = () => {
+        this.#output.write(RESET_MODES);
+        if (this.#input.isTTY === true)
+            this.#input.setRawMode?.(false);
+    };
+    constructor(url, token, options) {
+        this.#url = url;
+        this.#headers = { authorization: `Bearer ${token}` };
+        this.#options = options;
+        this.#input = options.input ?? process.stdin;
+        this.#output = options.output ?? process.stdout;
+    }
+    /** Whether `text` brings the third Ctrl-C within a second (each still goes to the sandbox otherwise). */
+    #interrupted(text) {
+        const now = Date.now();
+        for (const character of text)
+            if (character === INTERRUPT)
+                this.#interrupts.push(now);
+        this.#interrupts = this.#interrupts.filter((at) => now - at < INTERRUPT_WINDOW_MS);
+        return this.#interrupts.length >= INTERRUPTS_TO_END;
+    }
+    // A pseudo-terminal may report 0 (Opus E4).
+    get #columns() {
+        return this.#output.columns || 80;
+    }
+    get #rows() {
+        return this.#output.rows || 24;
+    }
+    /** Downloads the base bundle and the plugins, starts the sandbox and takes the terminal. */
+    async start() {
+        await this.#startSandbox();
+        if (this.#input.isTTY === true)
+            this.#input.setRawMode?.(true);
+        this.#input.on("data", this.#onInput);
+        this.#output.on("resize", this.#onResize);
+        process.once("exit", this.#onExit);
+        // Node opens its inspector on SIGUSR1 unless the signal has a listener: a sandbox may signal its launcher, and
+        // an inspector would give any local process the launcher's token and files (Opus E8). Windows has no SIGUSR1.
+        if (process.platform !== "win32")
+            process.on("SIGUSR1", ignoreSignal);
+    }
+    /** Ends the client with `code`: the terminal given back, the sockets closed, the sandbox ended. */
+    async finish(code) {
+        if (this.#finished)
+            return;
+        this.#finished = true;
+        this.#input.off("data", this.#onInput);
+        this.#output.off("resize", this.#onResize);
+        process.off("exit", this.#onExit);
+        if (process.platform !== "win32")
+            process.off("SIGUSR1", ignoreSignal);
+        if (this.#input.isTTY === true)
+            this.#input.setRawMode?.(false);
+        this.#prompt?.answer(false);
+        this.#prompt = undefined;
+        this.#output.write(RESET_MODES);
+        this.#closeSockets();
+        await this.#sandbox?.terminate();
+        this.#exit(code);
+    }
+    /** A new sandbox with what the server serves now. */
+    async #startSandbox() {
+        const start = JSON.parse(await this.#get(`${PREFIX}start`));
+        const [source, combined] = await Promise.all([this.#get(start.script), this.#get(start.combined)]);
+        this.#base = start.base;
+        const colors = this.#options.colors ?? (/truecolor|24bit/.test(process.env.COLORTERM ?? "") ? "truecolor" : "256");
+        const bridge = {
+            base: start.base,
+            combined,
+            columns: this.#columns,
+            rows: this.#rows,
+            colors,
+            mode: this.#options.mode ?? "dark",
+            locales: this.#options.locales ?? systemLocales(),
+        };
+        this.#requests = 0;
+        this.#sandbox = await Sandbox.start(source, bridge, (message) => this.#message(message), () => void this.finish(1));
+    }
+    /** One message of the sandbox; one the launcher fails on ends the client, never the launcher's process. */
+    #message(message) {
+        try {
+            this.#handle(message);
+        }
+        catch {
+            void this.finish(1);
+        }
+    }
+    #handle(message) {
+        switch (message.kind) {
+            case "write":
+                this.#write(message.data);
+                return;
+            case "socket_open":
+                this.#openSocket(message.socket);
+                return;
+            case "socket_send":
+                this.#send(message.socket, message.bytes);
+                return;
+            case "socket_close":
+                this.#sockets.get(message.socket)?.close();
+                return;
+            case "request":
+                void this.#answer(message.id, message.request);
+                return;
+            case "outdated":
+                void this.#outdated();
+                return;
+            case "failed":
+                this.#output.write("terminal: the terminal client failed to start\n");
+                void this.finish(1);
+                return;
+            case "exit":
+                void this.finish(message.code);
+        }
+    }
+    /** Writes the sandbox's frame through the output filter (held while a prompt is open); one over 64 KiB is dropped. */
+    #write(data) {
+        if (this.#confirming) {
+            if (typeof data === "string" && this.#heldBytes + data.length <= MAX_HELD) {
+                this.#held.push(data);
+                this.#heldBytes += data.length;
+            }
+            return;
+        }
+        try {
+            this.#output.write(filterOutput(data));
+        }
+        catch {
+            // Over 64 KiB (or no text): dropped, as an escape it could hide would be.
+        }
+    }
+    /** Opens socket `socket` to the links endpoint with the launcher's token, relaying it to the sandbox. */
+    #openSocket(socket) {
+        // A few at a time: the connection loop needs one; a runaway sandbox gets no more.
+        if (this.#sockets.size >= MAX_SOCKETS) {
+            this.#sandbox?.post({ kind: "socket_closed", socket });
+            return;
+        }
+        const target = new URL("/chord", this.#url);
+        target.protocol = target.protocol === "https:" ? "wss:" : "ws:";
+        const ws = new WebSocket(target, { headers: this.#headers });
+        this.#sockets.set(socket, ws);
+        ws.on("open", () => this.#sandbox?.post({ kind: "socket_opened", socket }));
+        ws.on("message", (data) => {
+            this.#sandbox?.post({ kind: "socket_message", socket, bytes: new Uint8Array(data) });
+        });
+        const closed = () => {
+            if (this.#sockets.get(socket) !== ws)
+                return;
+            this.#sockets.delete(socket);
+            this.#sandbox?.post({ kind: "socket_closed", socket });
+        };
+        ws.on("close", closed);
+        ws.on("error", closed);
+    }
+    /**
+     * Sends `bytes` on socket `socket` once it is open (before, the sandbox's link holds its messages; a send then is
+     * dropped: Opus E3); a socket with more than 16 MiB waiting is closed.
+     */
+    #send(socket, bytes) {
+        const ws = this.#sockets.get(socket);
+        if (ws?.readyState !== WebSocket.OPEN)
+            return;
+        if (ws.bufferedAmount + bytes.length > MAX_SOCKET_BUFFER)
+            ws.terminate();
+        else
+            ws.send(bytes);
+    }
+    /** Answers the sandbox's request `id`. */
+    async #answer(id, request) {
+        // The sandbox that asked: a reply never goes to the one a restart started meanwhile.
+        const sandbox = this.#sandbox;
+        if (sandbox === undefined)
+            return;
+        if (this.#requests >= MAX_REQUESTS) {
+            sandbox.post({ kind: "refused", id, message: "terminal: too many requests at once" });
+            return;
+        }
+        this.#requests++;
+        try {
+            let value;
+            if (request.kind === "fetch")
+                value = await this.#get(terminalFile(request.path, this.#url));
+            else if (request.kind === "base")
+                value = JSON.parse(await this.#get(`${PREFIX}base`));
+            else if (request.kind === "attach") {
+                const file = await this.#confirm(() => attach(request.path, this.#prompter()));
+                if (file !== null) {
+                    sandbox.post({ kind: "attached", id, name: file.name, bytes: file.bytes });
+                    return;
+                }
+                value = null;
+            }
+            else
+                value = await this.#confirm(() => act(request, this.#prompter(), this.#options.opener));
+            sandbox.post({ kind: "reply", id, value });
+        }
+        catch (error) {
+            sandbox.post({ kind: "refused", id, message: error instanceof Error ? error.message : String(error) });
+        }
+        finally {
+            if (this.#sandbox === sandbox)
+                this.#requests--;
+        }
+    }
+    /**
+     * Runs the action `run` (it asks the user), one at a time: a second is refused while one runs. Afterwards the held
+     * frames are written and the sandbox asked to redraw.
+     */
+    async #confirm(run) {
+        if (this.#confirming)
+            throw new Error("terminal: a prompt is open");
+        this.#confirming = true;
+        try {
+            return await run();
+        }
+        finally {
+            this.#confirming = false;
+            const held = this.#held;
+            this.#held = [];
+            this.#heldBytes = 0;
+            for (const frame of held)
+                this.#write(frame);
+            this.#sandbox?.post({ kind: "resize", columns: this.#columns, rows: this.#rows });
+        }
+    }
+    /** The launcher's own prompt on the real terminal, for the action being confirmed: its key not the sandbox's. */
+    #prompter() {
+        return {
+            columns: this.#columns,
+            ask: (lines) => {
+                // Shown whole or not at all: a prompt is never cut.
+                if (promptLines(lines, this.#columns).length >= this.#rows) {
+                    return Promise.reject(new Error("terminal: the prompt does not fit the terminal"));
+                }
+                return new Promise((answer) => {
+                    this.#prompt = { lines, answer, ready: Date.now() + PROMPT_GUARD_MS };
+                    this.#drawPrompt();
+                });
+            },
+            write: (data) => this.#output.write(data),
+        };
+    }
+    /**
+     * Draws the open prompt on the bottom lines after closing a synchronized update the sandbox began: its attributes
+     * reset and its colours explicit, black on white, so no state the sandbox left (concealed, black on black: Opus E4)
+     * applies to it.
+     */
+    #drawPrompt() {
+        const lines = promptLines(this.#prompt.lines, this.#columns);
+        const top = Math.max(1, this.#rows - lines.length + 1);
+        const drawn = lines.map((line, index) => `\x1b[${top + index};1H\x1b[0;30;47m\x1b[2K ${line} `);
+        this.#output.write(`\x1b[?2026l\x1b[s${drawn.join("")}\x1b[0m`);
+    }
+    /** The prompt answered: cleared, the cursor back where the sandbox had it. */
+    #answered(yes) {
+        const { lines, answer } = this.#prompt;
+        this.#prompt = undefined;
+        const rows = promptLines(lines, this.#columns);
+        const top = Math.max(1, this.#rows - rows.length + 1);
+        const cleared = rows.map((_row, index) => `\x1b[${top + index};1H\x1b[0m\x1b[2K`).join("");
+        this.#output.write(`${cleared}\x1b[u`);
+        answer(yes);
+    }
+    /** The sandbox says its code is outdated: a new sandbox only when the server's base bundle is another. */
+    async #outdated() {
+        const base = JSON.parse(await this.#get(`${PREFIX}base`).catch(() => "null"));
+        if (typeof base === "string" && base !== this.#base)
+            await this.#restart();
+    }
+    /** The server has a new base bundle: a new sandbox with it, the old one ended. */
+    async #restart() {
+        this.#closeSockets();
+        await this.#sandbox?.terminate();
+        this.#sandbox = undefined;
+        try {
+            await this.#startSandbox();
+            this.#onResize();
+        }
+        catch {
+            await this.finish(1);
+        }
+    }
+    #closeSockets() {
+        for (const ws of this.#sockets.values())
+            ws.close();
+        this.#sockets.clear();
+    }
+    /** The text at `path` on the server, signed in; at most 8 MiB, read no further. */
+    async #get(path) {
+        const response = await fetch(new URL(path, this.#url), { headers: this.#headers });
+        if (!response.ok || response.body === null)
+            throw new Error(`terminal: GET ${path} answered ${response.status}`);
+        if (Number(response.headers.get("content-length") ?? 0) > MAX_BUNDLE)
+            throw new Error(`terminal: ${path} exceeds 8 MiB`);
+        const chunks = [];
+        let size = 0;
+        for await (const chunk of response.body) {
+            size += chunk.length;
+            if (size > MAX_BUNDLE)
+                throw new Error(`terminal: ${path} exceeds 8 MiB`);
+            chunks.push(chunk);
+        }
+        return new TextDecoder().decode(Buffer.concat(chunks));
+    }
+}
+/** The launcher's SIGUSR1 listener: the signal does nothing. */
+function ignoreSignal() { }
+/**
+ * The system's languages: `LANGUAGE` (a colon list), then `LC_ALL`, `LC_MESSAGES`, `LANG` (`de_DE.UTF-8` is `de-DE`;
+ * `C` and `POSIX` name none), then the runtime's default locale.
+ */
+function systemLocales() {
+    const { LANGUAGE, LC_ALL, LC_MESSAGES, LANG } = process.env;
+    const named = [...(LANGUAGE ?? "").split(":"), LC_ALL, LC_MESSAGES, LANG].flatMap((value) => {
+        const tag = value?.replace(/[.@].*$/, "").replace(/_/g, "-");
+        return tag === undefined || tag === "" || tag === "C" || tag === "POSIX" ? [] : [tag];
+    });
+    return [...new Set([...named, Intl.DateTimeFormat().resolvedOptions().locale])];
+}
+//# sourceMappingURL=launcher.js.map

package/dist/node/tui/launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../../../src/node/tui/launcher.ts"],"names":[],"mappings":"AAAA,sHAAsH;AACtH,mHAAmH;AACnH,oHAAoH;AACpH,uHAAuH;AACvH,uHAAuH;AACvH,mHAAmH;AACnH,sHAAsH;AACtH,qHAAqH;AACrH,kHAAkH;AAClH,mHAAmH;AACnH,2BAA2B;AAG3B,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAI/B,OAAO,EAAE,GAAG,EAAE,MAAM,EAAuB,WAAW,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAA4B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAuBvE,gEAAgE;AAChE,MAAM,MAAM,GAAG,cAAc,CAAC;AAE9B;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAa,EAAE,MAAW;IACtD,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IACC,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAC/B,MAAM,CAAC,MAAM,KAAK,EAAE;QACpB,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EACnC,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC;AACxB,CAAC;AAED,qEAAqE;AACrE,MAAM,aAAa,GAAG,yCAAyC,CAAC;AAEhE,+FAA+F;AAC/F,MAAM,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC;AAE7B,+DAA+D;AAC/D,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,wGAAwG;AACxG,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,sHAAsH;AACtH,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B;;;GAGG;AACH,MAAM,WAAW,GAChB,uHAAuH,CAAC;AAEzH,0GAA0G;AAC1G,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB;;;GAGG;AACH,MAAM,SAAS,GAAG,MAAM,CAAC;AAEzB,kGAAkG;AAClG,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,gHAAgH;AAChH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAwB;IAC3D,kBAAkB,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,8FAA8F;IAC9F,MAAM,KAAK,GAAG,MAAM,OAAO,CAC1B,OAAO,CAAC,WAAW,EACnB,GAAG,EACH,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EACnD,KAAK,CAAC,MAAM,CACZ,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,sCAAsC;AACtC,MAAM,QAAQ;IACJ,IAAI,CAAM;IACV,QAAQ,CAAmC;IAC3C,QAAQ,CAAkB;IAC1B,MAAM,CAAwC;IAC9C,OAAO,CAAyC;IAChD,QAAQ,GAAG,IAAI,GAAG,EAAqB,CAAC;IACjD,QAAQ,CAAsB;IAC9B,uFAAuF;IACvF,KAAK,GAAG,EAAE,CAAC;IACX;;;OAGG;IACH,WAAW,GAAG,KAAK,CAAC;IACpB,8EAA8E;IAC9E,SAAS,GAAG,CAAC,CAAC;IACd,gHAAgH;IAChH,OAAO,CAEM;IACb,KAAK,GAAa,EAAE,CAAC;IACrB,UAAU,GAAG,CAAC,CAAC;IACf,SAAS,GAAG,KAAK,CAAC;IAClB,KAAK,CAA0B;IACtB,MAAM,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACjD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC;IACtB,CAAC,CAAC,CAAC;IACM,QAAQ,GAAG,CAAC,IAAqB,EAAQ,EAAE;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO;QACR,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;aAC9E,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACpD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;IACzF,CAAC,CAAC;IACO,SAAS,GAAG,GAAS,EAAE;QAC/B,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC;IACF,4EAA4E;IAC5E,WAAW,GAAa,EAAE,CAAC;IAC3B,yFAAyF;IAChF,OAAO,GAAG,GAAS,EAAE;QAC7B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,YAAY,GAAQ,EAAE,KAAa,EAAE,OAAwB;QAC5D,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,QAAQ,GAAG,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IACjD,CAAC;IAED,yGAAyG;IACzG,YAAY,CAAC,IAAY;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,SAAS,IAAI,IAAI;YAAE,IAAI,SAAS,KAAK,SAAS;gBAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtF,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,mBAAmB,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,iBAAiB,CAAC;IACrD,CAAC;IAED,4CAA4C;IAC5C,IAAI,QAAQ;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,IAAI,KAAK;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,KAAK;QACV,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,+GAA+G;QAC/G,8GAA8G;QAC9G,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACvE,CAAC;IAED,mGAAmG;IACnG,KAAK,CAAC,MAAM,CAAC,IAAY;QACxB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,aAAa;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,CAAa,CAAC;QACxE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACnG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,MAAM,MAAM,GACX,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACrG,MAAM,MAAM,GAAG;YACd,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,MAAM;YACN,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,MAAM;YAClC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,aAAa,EAAE;SACxC,CAAC;QACX,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAClC,MAAM,EACN,MAAM,EACN,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EACnC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CACzB,CAAC;IACH,CAAC;IAED,2GAA2G;IAC3G,QAAQ,CAAC,OAAuB;QAC/B,IAAI,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACR,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACF,CAAC;IAED,OAAO,CAAC,OAAuB;QAC9B,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,OAAO;gBACX,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC1B,OAAO;YACR,KAAK,aAAa;gBACjB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjC,OAAO;YACR,KAAK,aAAa;gBACjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC1C,OAAO;YACR,KAAK,cAAc;gBAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;gBAC3C,OAAO;YACR,KAAK,SAAS;gBACb,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC/C,OAAO;YACR,KAAK,UAAU;gBACd,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBACtB,OAAO;YACR,KAAK,QAAQ;gBACZ,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACtE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACpB,OAAO;YACR,KAAK,MAAM;gBACV,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;IACF,CAAC;IAED,sHAAsH;IACtH,MAAM,CAAC,IAAY;QAClB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC3E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;YAChC,CAAC;YACD,OAAO;QACR,CAAC;QACD,IAAI,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACR,0EAA0E;QAC3E,CAAC;IACF,CAAC;IAED,yGAAyG;IACzG,WAAW,CAAC,MAAc;QACzB,kFAAkF;QAClF,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;YACvD,OAAO;QACR,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QAChE,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9B,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5E,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE;YACjC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,GAAS,EAAE;YACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE;gBAAE,OAAO;YAC7C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7B,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC;QACF,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvB,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAc,EAAE,KAAiB;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,EAAE,EAAE,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,OAAO;QAC9C,IAAI,EAAE,CAAC,cAAc,GAAG,KAAK,CAAC,MAAM,GAAG,iBAAiB;YAAE,EAAE,CAAC,SAAS,EAAE,CAAC;;YACpE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,OAAsB;QAC/C,qFAAqF;QACrF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,IAAI,IAAI,CAAC,SAAS,IAAI,YAAY,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAC;YACtF,OAAO;QACR,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,IAAI,CAAC;YACJ,IAAI,KAAc,CAAC;YACnB,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gBAAE,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;iBACxF,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;gBAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC;iBAClF,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;gBAC/E,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBACnB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC3E,OAAO;gBACR,CAAC;gBACD,KAAK,GAAG,IAAI,CAAC;YACd,CAAC;;gBAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/F,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxG,CAAC;gBAAS,CAAC;YACV,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;gBAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACjD,CAAC;IACF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAI,GAAqB;QACtC,IAAI,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACJ,OAAO,MAAM,GAAG,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,IAAI;gBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,CAAC;IACF,CAAC;IAED,iHAAiH;IACjH,SAAS;QACR,OAAO;YACN,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE;gBACd,oDAAoD;gBACpD,IAAI,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC5D,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC,CAAC;gBACpF,CAAC;gBACD,OAAO,IAAI,OAAO,CAAU,CAAC,MAAM,EAAE,EAAE;oBACtC,IAAI,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,EAAE,CAAC;oBACtE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACpB,CAAC,CAAC,CAAC;YACJ,CAAC;YACD,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;SACzC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,WAAW;QACV,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,GAAG,GAAG,KAAK,2BAA2B,IAAI,GAAG,CAAC,CAAC;QAChG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;IAED,8EAA8E;IAC9E,SAAS,CAAC,GAAY;QACrB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAQ,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,GAAG,GAAG,KAAK,mBAAmB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,QAAQ,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC;IACb,CAAC;IAED,0GAA0G;IAC1G,KAAK,CAAC,SAAS;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAY,CAAC;QACzF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC5E,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,QAAQ;QACb,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC1B,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,EAAE,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IAED,aAAa;QACZ,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,EAAE,CAAC,KAAK,EAAE,CAAC;QACpD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,IAAI,CAAC,IAAY;QACtB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACjH,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,UAAU;YACnE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,gBAAgB,CAAC,CAAC;QACpD,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,gBAAgB,CAAC,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,CAAC;CACD;AAED,gEAAgE;AAChE,SAAS,YAAY,KAAU,CAAC;AAEhC;;;GAGG;AACH,SAAS,aAAa;IACrB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAC5D,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3F,MAAM,GAAG,GAAG,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC","sourcesContent":["// `startTerminal` (slice 11 §4, decision \"Slice 11, P8\"): the trusted launcher of a terminal client. It signs in with\n// its token (given, from a file, or by pairing), downloads the terminal kind's base bundle and plugin scripts, and\n// runs them in the sandbox, always. It keeps the credentials, the real terminal and the user's choices: the sandbox\n// gets input and resizes, its frames pass the output filter, its Chord link is a socket the launcher opens and relays,\n// its plugin script fetches go only to the terminal surface's files, and its actions on the machine (copy, open a URL,\n// attach a file) are confirmed by the launcher's own prompt. A new base bundle on the server starts a new sandbox.\n// Nothing the sandbox sends can end the launcher (fix round 2, Opus E3): its messages are checked (`pipe.ts`), a send\n// on a socket not yet open is dropped, every buffer and the requests in flight are bounded, a signal cannot open the\n// launcher's inspector, and however the launcher's process ends the terminal is given back (fix round 3, Opus E8,\n// E10, E11). During a prompt Ctrl-C ends the client: its keys are the launcher's; and three Ctrl-C within a second\n// always end it (Opus R2).\n\nimport type { Readable, Writable } from \"node:stream\";\nimport { WebSocket } from \"ws\";\nimport type { ColorDepth } from \"../../surfaces/index.ts\";\nimport type { BridgeRequest, SandboxMessage } from \"../../tui/bridge.ts\";\nimport type { TuiStart } from \"../surfaces/tui.ts\";\nimport { act, attach, type PromptTerminal, promptLines } from \"./actions.ts\";\nimport { type TerminalCredentials, tokenOf } from \"./credentials.ts\";\nimport { filterOutput } from \"./filter.ts\";\nimport { MAX_BUNDLE, requireSandboxNode, Sandbox } from \"./sandbox.ts\";\n\n/** What `startTerminal` takes. */\nexport type TerminalOptions = {\n\t/** The app's server (`http://127.0.0.1:8788`). */\n\treadonly url: string;\n\treadonly credentials: TerminalCredentials;\n\t/** The terminal's input and output: the process's by default (raw mode while running, when a TTY). */\n\treadonly input?: Readable & { setRawMode?(raw: boolean): unknown; readonly isTTY?: boolean };\n\treadonly output?: Writable & { readonly columns?: number; readonly rows?: number };\n\t/** How many colours the terminal shows: true colour when `COLORTERM` says so, else 256. */\n\treadonly colors?: ColorDepth;\n\t/** The terminal's background, choosing between the user's dark and light theme: dark by default. */\n\treadonly mode?: \"dark\" | \"light\";\n\t/** The user's languages, most preferred first, until they choose one: the system's locale by default. */\n\treadonly locales?: readonly string[];\n\t/** Opens a URL the user confirmed: the platform's opener by default. */\n\treadonly opener?: (url: string) => Promise<void>;\n};\n\n/** A running terminal client: its exit code once it ends, and its stop. */\nexport type RunningTerminal = { readonly exited: Promise<number>; stop(): Promise<void> };\n\n/** The terminal surface's files (the server's `TUI_PREFIX`). */\nconst PREFIX = \"/_chord/tui/\";\n\n/**\n * `path` resolved on the server `server` when it names one of the terminal surface's files (dot segments and encodings\n * resolved first: Opus M2, Fable L1); throws otherwise: the sandbox reaches nothing else of the server through the\n * launcher's token.\n */\nexport function terminalFile(path: unknown, server: URL): string {\n\tconst target = typeof path === \"string\" ? new URL(path, server) : undefined;\n\tif (\n\t\ttarget === undefined ||\n\t\ttarget.origin !== server.origin ||\n\t\ttarget.search !== \"\" ||\n\t\t!TERMINAL_FILE.test(target.pathname)\n\t) {\n\t\tthrow new Error(\"terminal: no terminal file\");\n\t}\n\treturn target.pathname;\n}\n\n/** A terminal surface file's path, as the sandbox may ask for it. */\nconst TERMINAL_FILE = /^\\/_chord\\/tui\\/(?:plugin\\/)?[\\w.~@-]+$/;\n\n/** The most frames held while a prompt is open: 1 MiB (characters); later ones are dropped. */\nconst MAX_HELD = 1024 * 1024;\n\n/** The most link sockets the sandbox may have open at once. */\nconst MAX_SOCKETS = 4;\n\n/** The most bytes a link socket may have waiting to go out; a sandbox sending more loses the socket. */\nconst MAX_SOCKET_BUFFER = 16 * 1024 * 1024;\n\n/** How long after a prompt appears its keys are ignored: a key typed for the sandbox does not answer it (Opus E4). */\nconst PROMPT_GUARD_MS = 300;\n\n/**\n * The terminal modes the sandbox may have set, back to the shell's: sync, mouse, focus, paste, cursor, the scroll region\n * (the cursor kept where it was) and autowrap (Opus E11), screen, colours.\n */\nconst RESET_MODES =\n\t\"\\x1b[?2026l\\x1b[?1000l\\x1b[?1002l\\x1b[?1006l\\x1b[?1004l\\x1b[?2004l\\x1b[?25h\\x1b7\\x1b[r\\x1b8\\x1b[?7h\\x1b[?1049l\\x1b[0m\";\n\n/** The most requests of one sandbox the launcher answers at once; more are refused at once (Opus E10). */\nconst MAX_REQUESTS = 8;\n\n/**\n * Ctrl-C: during a prompt it ends the client, so a sandbox asking again and again can always be left (Opus E11); and\n * three within a second always end it, whatever the sandbox does with them (Opus R2).\n */\nconst INTERRUPT = \"\\x03\";\n\n/** How many Ctrl-C within `INTERRUPT_WINDOW_MS` end the client however the sandbox takes them. */\nconst INTERRUPTS_TO_END = 3;\nconst INTERRUPT_WINDOW_MS = 1000;\n\n/** Starts a terminal client; rejects when it cannot sign in or download, or Node is too old for the sandbox. */\nexport async function startTerminal(options: TerminalOptions): Promise<RunningTerminal> {\n\trequireSandboxNode();\n\tconst output = options.output ?? process.stdout;\n\tconst url = new URL(options.url);\n\tconst abort = new AbortController();\n\t// What the launcher prints of the server's (the pairing's code) passes the output filter too.\n\tconst token = await tokenOf(\n\t\toptions.credentials,\n\t\turl,\n\t\t(line) => output.write(`${filterOutput(line)}\\r\\n`),\n\t\tabort.signal,\n\t);\n\tconst launcher = new Launcher(url, token, options);\n\tawait launcher.start();\n\treturn { exited: launcher.exited, stop: () => launcher.finish(0) };\n}\n\n/** One terminal client's launcher. */\nclass Launcher {\n\treadonly #url: URL;\n\treadonly #headers: Readonly<Record<string, string>>;\n\treadonly #options: TerminalOptions;\n\treadonly #input: NonNullable<TerminalOptions[\"input\"]>;\n\treadonly #output: NonNullable<TerminalOptions[\"output\"]>;\n\treadonly #sockets = new Map<number, WebSocket>();\n\t#sandbox: Sandbox | undefined;\n\t/** The running base bundle's hash: an `outdated` sandbox restarts only for another. */\n\t#base = \"\";\n\t/**\n\t * Whether an action is being confirmed (one at a time), from its request to its end: meanwhile the sandbox's frames\n\t * are held (`#held`, at most `MAX_HELD` bytes), so nothing draws over the prompt, even before it appears.\n\t */\n\t#confirming = false;\n\t/** The running sandbox's requests being answered (at most `MAX_REQUESTS`). */\n\t#requests = 0;\n\t/** The prompt open: its lines, its answer, and when its keys start to count. Keys go to it, not the sandbox. */\n\t#prompt:\n\t\t| { readonly lines: readonly string[]; readonly answer: (yes: boolean) => void; readonly ready: number }\n\t\t| undefined;\n\t#held: string[] = [];\n\t#heldBytes = 0;\n\t#finished = false;\n\t#exit!: (code: number) => void;\n\treadonly exited = new Promise<number>((resolve) => {\n\t\tthis.#exit = resolve;\n\t});\n\treadonly #onInput = (data: Buffer | string): void => {\n\t\tconst text = data.toString();\n\t\tif (this.#interrupted(text)) {\n\t\t\tvoid this.finish(130);\n\t\t\treturn;\n\t\t}\n\t\tif (this.#prompt === undefined) this.#sandbox?.post({ kind: \"input\", data: text });\n\t\telse if (text.includes(INTERRUPT)) void this.finish(130);\n\t\telse if (Date.now() >= this.#prompt.ready) this.#answered(text === \"y\" || text === \"Y\");\n\t};\n\treadonly #onResize = (): void => {\n\t\tif (this.#prompt !== undefined) this.#drawPrompt();\n\t\tthis.#sandbox?.post({ kind: \"resize\", columns: this.#columns, rows: this.#rows });\n\t};\n\t/** When the last Ctrl-C keys came: three within a second end the client. */\n\t#interrupts: number[] = [];\n\t/** The terminal given back if the launcher's process ends without `finish` (a crash). */\n\treadonly #onExit = (): void => {\n\t\tthis.#output.write(RESET_MODES);\n\t\tif (this.#input.isTTY === true) this.#input.setRawMode?.(false);\n\t};\n\n\tconstructor(url: URL, token: string, options: TerminalOptions) {\n\t\tthis.#url = url;\n\t\tthis.#headers = { authorization: `Bearer ${token}` };\n\t\tthis.#options = options;\n\t\tthis.#input = options.input ?? process.stdin;\n\t\tthis.#output = options.output ?? process.stdout;\n\t}\n\n\t/** Whether `text` brings the third Ctrl-C within a second (each still goes to the sandbox otherwise). */\n\t#interrupted(text: string): boolean {\n\t\tconst now = Date.now();\n\t\tfor (const character of text) if (character === INTERRUPT) this.#interrupts.push(now);\n\t\tthis.#interrupts = this.#interrupts.filter((at) => now - at < INTERRUPT_WINDOW_MS);\n\t\treturn this.#interrupts.length >= INTERRUPTS_TO_END;\n\t}\n\n\t// A pseudo-terminal may report 0 (Opus E4).\n\tget #columns(): number {\n\t\treturn this.#output.columns || 80;\n\t}\n\n\tget #rows(): number {\n\t\treturn this.#output.rows || 24;\n\t}\n\n\t/** Downloads the base bundle and the plugins, starts the sandbox and takes the terminal. */\n\tasync start(): Promise<void> {\n\t\tawait this.#startSandbox();\n\t\tif (this.#input.isTTY === true) this.#input.setRawMode?.(true);\n\t\tthis.#input.on(\"data\", this.#onInput);\n\t\tthis.#output.on(\"resize\", this.#onResize);\n\t\tprocess.once(\"exit\", this.#onExit);\n\t\t// Node opens its inspector on SIGUSR1 unless the signal has a listener: a sandbox may signal its launcher, and\n\t\t// an inspector would give any local process the launcher's token and files (Opus E8). Windows has no SIGUSR1.\n\t\tif (process.platform !== \"win32\") process.on(\"SIGUSR1\", ignoreSignal);\n\t}\n\n\t/** Ends the client with `code`: the terminal given back, the sockets closed, the sandbox ended. */\n\tasync finish(code: number): Promise<void> {\n\t\tif (this.#finished) return;\n\t\tthis.#finished = true;\n\t\tthis.#input.off(\"data\", this.#onInput);\n\t\tthis.#output.off(\"resize\", this.#onResize);\n\t\tprocess.off(\"exit\", this.#onExit);\n\t\tif (process.platform !== \"win32\") process.off(\"SIGUSR1\", ignoreSignal);\n\t\tif (this.#input.isTTY === true) this.#input.setRawMode?.(false);\n\t\tthis.#prompt?.answer(false);\n\t\tthis.#prompt = undefined;\n\t\tthis.#output.write(RESET_MODES);\n\t\tthis.#closeSockets();\n\t\tawait this.#sandbox?.terminate();\n\t\tthis.#exit(code);\n\t}\n\n\t/** A new sandbox with what the server serves now. */\n\tasync #startSandbox(): Promise<void> {\n\t\tconst start = JSON.parse(await this.#get(`${PREFIX}start`)) as TuiStart;\n\t\tconst [source, combined] = await Promise.all([this.#get(start.script), this.#get(start.combined)]);\n\t\tthis.#base = start.base;\n\t\tconst colors =\n\t\t\tthis.#options.colors ?? (/truecolor|24bit/.test(process.env.COLORTERM ?? \"\") ? \"truecolor\" : \"256\");\n\t\tconst bridge = {\n\t\t\tbase: start.base,\n\t\t\tcombined,\n\t\t\tcolumns: this.#columns,\n\t\t\trows: this.#rows,\n\t\t\tcolors,\n\t\t\tmode: this.#options.mode ?? \"dark\",\n\t\t\tlocales: this.#options.locales ?? systemLocales(),\n\t\t} as const;\n\t\tthis.#requests = 0;\n\t\tthis.#sandbox = await Sandbox.start(\n\t\t\tsource,\n\t\t\tbridge,\n\t\t\t(message) => this.#message(message),\n\t\t\t() => void this.finish(1),\n\t\t);\n\t}\n\n\t/** One message of the sandbox; one the launcher fails on ends the client, never the launcher's process. */\n\t#message(message: SandboxMessage): void {\n\t\ttry {\n\t\t\tthis.#handle(message);\n\t\t} catch {\n\t\t\tvoid this.finish(1);\n\t\t}\n\t}\n\n\t#handle(message: SandboxMessage): void {\n\t\tswitch (message.kind) {\n\t\t\tcase \"write\":\n\t\t\t\tthis.#write(message.data);\n\t\t\t\treturn;\n\t\t\tcase \"socket_open\":\n\t\t\t\tthis.#openSocket(message.socket);\n\t\t\t\treturn;\n\t\t\tcase \"socket_send\":\n\t\t\t\tthis.#send(message.socket, message.bytes);\n\t\t\t\treturn;\n\t\t\tcase \"socket_close\":\n\t\t\t\tthis.#sockets.get(message.socket)?.close();\n\t\t\t\treturn;\n\t\t\tcase \"request\":\n\t\t\t\tvoid this.#answer(message.id, message.request);\n\t\t\t\treturn;\n\t\t\tcase \"outdated\":\n\t\t\t\tvoid this.#outdated();\n\t\t\t\treturn;\n\t\t\tcase \"failed\":\n\t\t\t\tthis.#output.write(\"terminal: the terminal client failed to start\\n\");\n\t\t\t\tvoid this.finish(1);\n\t\t\t\treturn;\n\t\t\tcase \"exit\":\n\t\t\t\tvoid this.finish(message.code);\n\t\t}\n\t}\n\n\t/** Writes the sandbox's frame through the output filter (held while a prompt is open); one over 64 KiB is dropped. */\n\t#write(data: string): void {\n\t\tif (this.#confirming) {\n\t\t\tif (typeof data === \"string\" && this.#heldBytes + data.length <= MAX_HELD) {\n\t\t\t\tthis.#held.push(data);\n\t\t\t\tthis.#heldBytes += data.length;\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\t\ttry {\n\t\t\tthis.#output.write(filterOutput(data));\n\t\t} catch {\n\t\t\t// Over 64 KiB (or no text): dropped, as an escape it could hide would be.\n\t\t}\n\t}\n\n\t/** Opens socket `socket` to the links endpoint with the launcher's token, relaying it to the sandbox. */\n\t#openSocket(socket: number): void {\n\t\t// A few at a time: the connection loop needs one; a runaway sandbox gets no more.\n\t\tif (this.#sockets.size >= MAX_SOCKETS) {\n\t\t\tthis.#sandbox?.post({ kind: \"socket_closed\", socket });\n\t\t\treturn;\n\t\t}\n\t\tconst target = new URL(\"/chord\", this.#url);\n\t\ttarget.protocol = target.protocol === \"https:\" ? \"wss:\" : \"ws:\";\n\t\tconst ws = new WebSocket(target, { headers: this.#headers });\n\t\tthis.#sockets.set(socket, ws);\n\t\tws.on(\"open\", () => this.#sandbox?.post({ kind: \"socket_opened\", socket }));\n\t\tws.on(\"message\", (data: Buffer) => {\n\t\t\tthis.#sandbox?.post({ kind: \"socket_message\", socket, bytes: new Uint8Array(data) });\n\t\t});\n\t\tconst closed = (): void => {\n\t\t\tif (this.#sockets.get(socket) !== ws) return;\n\t\t\tthis.#sockets.delete(socket);\n\t\t\tthis.#sandbox?.post({ kind: \"socket_closed\", socket });\n\t\t};\n\t\tws.on(\"close\", closed);\n\t\tws.on(\"error\", closed);\n\t}\n\n\t/**\n\t * Sends `bytes` on socket `socket` once it is open (before, the sandbox's link holds its messages; a send then is\n\t * dropped: Opus E3); a socket with more than 16 MiB waiting is closed.\n\t */\n\t#send(socket: number, bytes: Uint8Array): void {\n\t\tconst ws = this.#sockets.get(socket);\n\t\tif (ws?.readyState !== WebSocket.OPEN) return;\n\t\tif (ws.bufferedAmount + bytes.length > MAX_SOCKET_BUFFER) ws.terminate();\n\t\telse ws.send(bytes);\n\t}\n\n\t/** Answers the sandbox's request `id`. */\n\tasync #answer(id: number, request: BridgeRequest): Promise<void> {\n\t\t// The sandbox that asked: a reply never goes to the one a restart started meanwhile.\n\t\tconst sandbox = this.#sandbox;\n\t\tif (sandbox === undefined) return;\n\t\tif (this.#requests >= MAX_REQUESTS) {\n\t\t\tsandbox.post({ kind: \"refused\", id, message: \"terminal: too many requests at once\" });\n\t\t\treturn;\n\t\t}\n\t\tthis.#requests++;\n\t\ttry {\n\t\t\tlet value: unknown;\n\t\t\tif (request.kind === \"fetch\") value = await this.#get(terminalFile(request.path, this.#url));\n\t\t\telse if (request.kind === \"base\") value = JSON.parse(await this.#get(`${PREFIX}base`));\n\t\t\telse if (request.kind === \"attach\") {\n\t\t\t\tconst file = await this.#confirm(() => attach(request.path, this.#prompter()));\n\t\t\t\tif (file !== null) {\n\t\t\t\t\tsandbox.post({ kind: \"attached\", id, name: file.name, bytes: file.bytes });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tvalue = null;\n\t\t\t} else value = await this.#confirm(() => act(request, this.#prompter(), this.#options.opener));\n\t\t\tsandbox.post({ kind: \"reply\", id, value });\n\t\t} catch (error) {\n\t\t\tsandbox.post({ kind: \"refused\", id, message: error instanceof Error ? error.message : String(error) });\n\t\t} finally {\n\t\t\tif (this.#sandbox === sandbox) this.#requests--;\n\t\t}\n\t}\n\n\t/**\n\t * Runs the action `run` (it asks the user), one at a time: a second is refused while one runs. Afterwards the held\n\t * frames are written and the sandbox asked to redraw.\n\t */\n\tasync #confirm<T>(run: () => Promise<T>): Promise<T> {\n\t\tif (this.#confirming) throw new Error(\"terminal: a prompt is open\");\n\t\tthis.#confirming = true;\n\t\ttry {\n\t\t\treturn await run();\n\t\t} finally {\n\t\t\tthis.#confirming = false;\n\t\t\tconst held = this.#held;\n\t\t\tthis.#held = [];\n\t\t\tthis.#heldBytes = 0;\n\t\t\tfor (const frame of held) this.#write(frame);\n\t\t\tthis.#sandbox?.post({ kind: \"resize\", columns: this.#columns, rows: this.#rows });\n\t\t}\n\t}\n\n\t/** The launcher's own prompt on the real terminal, for the action being confirmed: its key not the sandbox's. */\n\t#prompter(): PromptTerminal {\n\t\treturn {\n\t\t\tcolumns: this.#columns,\n\t\t\task: (lines) => {\n\t\t\t\t// Shown whole or not at all: a prompt is never cut.\n\t\t\t\tif (promptLines(lines, this.#columns).length >= this.#rows) {\n\t\t\t\t\treturn Promise.reject(new Error(\"terminal: the prompt does not fit the terminal\"));\n\t\t\t\t}\n\t\t\t\treturn new Promise<boolean>((answer) => {\n\t\t\t\t\tthis.#prompt = { lines, answer, ready: Date.now() + PROMPT_GUARD_MS };\n\t\t\t\t\tthis.#drawPrompt();\n\t\t\t\t});\n\t\t\t},\n\t\t\twrite: (data) => this.#output.write(data),\n\t\t};\n\t}\n\n\t/**\n\t * Draws the open prompt on the bottom lines after closing a synchronized update the sandbox began: its attributes\n\t * reset and its colours explicit, black on white, so no state the sandbox left (concealed, black on black: Opus E4)\n\t * applies to it.\n\t */\n\t#drawPrompt(): void {\n\t\tconst lines = promptLines(this.#prompt!.lines, this.#columns);\n\t\tconst top = Math.max(1, this.#rows - lines.length + 1);\n\t\tconst drawn = lines.map((line, index) => `\\x1b[${top + index};1H\\x1b[0;30;47m\\x1b[2K ${line} `);\n\t\tthis.#output.write(`\\x1b[?2026l\\x1b[s${drawn.join(\"\")}\\x1b[0m`);\n\t}\n\n\t/** The prompt answered: cleared, the cursor back where the sandbox had it. */\n\t#answered(yes: boolean): void {\n\t\tconst { lines, answer } = this.#prompt!;\n\t\tthis.#prompt = undefined;\n\t\tconst rows = promptLines(lines, this.#columns);\n\t\tconst top = Math.max(1, this.#rows - rows.length + 1);\n\t\tconst cleared = rows.map((_row, index) => `\\x1b[${top + index};1H\\x1b[0m\\x1b[2K`).join(\"\");\n\t\tthis.#output.write(`${cleared}\\x1b[u`);\n\t\tanswer(yes);\n\t}\n\n\t/** The sandbox says its code is outdated: a new sandbox only when the server's base bundle is another. */\n\tasync #outdated(): Promise<void> {\n\t\tconst base = JSON.parse(await this.#get(`${PREFIX}base`).catch(() => \"null\")) as unknown;\n\t\tif (typeof base === \"string\" && base !== this.#base) await this.#restart();\n\t}\n\n\t/** The server has a new base bundle: a new sandbox with it, the old one ended. */\n\tasync #restart(): Promise<void> {\n\t\tthis.#closeSockets();\n\t\tawait this.#sandbox?.terminate();\n\t\tthis.#sandbox = undefined;\n\t\ttry {\n\t\t\tawait this.#startSandbox();\n\t\t\tthis.#onResize();\n\t\t} catch {\n\t\t\tawait this.finish(1);\n\t\t}\n\t}\n\n\t#closeSockets(): void {\n\t\tfor (const ws of this.#sockets.values()) ws.close();\n\t\tthis.#sockets.clear();\n\t}\n\n\t/** The text at `path` on the server, signed in; at most 8 MiB, read no further. */\n\tasync #get(path: string): Promise<string> {\n\t\tconst response = await fetch(new URL(path, this.#url), { headers: this.#headers });\n\t\tif (!response.ok || response.body === null) throw new Error(`terminal: GET ${path} answered ${response.status}`);\n\t\tif (Number(response.headers.get(\"content-length\") ?? 0) > MAX_BUNDLE)\n\t\t\tthrow new Error(`terminal: ${path} exceeds 8 MiB`);\n\t\tconst chunks: Uint8Array[] = [];\n\t\tlet size = 0;\n\t\tfor await (const chunk of response.body) {\n\t\t\tsize += chunk.length;\n\t\t\tif (size > MAX_BUNDLE) throw new Error(`terminal: ${path} exceeds 8 MiB`);\n\t\t\tchunks.push(chunk);\n\t\t}\n\t\treturn new TextDecoder().decode(Buffer.concat(chunks));\n\t}\n}\n\n/** The launcher's SIGUSR1 listener: the signal does nothing. */\nfunction ignoreSignal(): void {}\n\n/**\n * The system's languages: `LANGUAGE` (a colon list), then `LC_ALL`, `LC_MESSAGES`, `LANG` (`de_DE.UTF-8` is `de-DE`;\n * `C` and `POSIX` name none), then the runtime's default locale.\n */\nfunction systemLocales(): readonly string[] {\n\tconst { LANGUAGE, LC_ALL, LC_MESSAGES, LANG } = process.env;\n\tconst named = [...(LANGUAGE ?? \"\").split(\":\"), LC_ALL, LC_MESSAGES, LANG].flatMap((value) => {\n\t\tconst tag = value?.replace(/[.@].*$/, \"\").replace(/_/g, \"-\");\n\t\treturn tag === undefined || tag === \"\" || tag === \"C\" || tag === \"POSIX\" ? [] : [tag];\n\t});\n\treturn [...new Set([...named, Intl.DateTimeFormat().resolvedOptions().locale])];\n}\n"]}

package/dist/node/tui/pipe.d.ts

@@ -0,0 +1,18 @@
+import type { LauncherMessage, SandboxMessage } from "../../tui/bridge.ts";
+/** The largest frame either side takes: 17 MiB (an attached file of 16 MiB and its header). */
+export declare const MAX_PIPE_FRAME: number;
+/** `message` as one frame for the sandbox. */
+export declare function launcherFrame(message: LauncherMessage): Buffer;
+/** The first frame: the bridge's start and the base bundle's text as body. */
+export declare function startFrame(start: unknown, source: string): Buffer;
+/**
+ * Cuts the sandbox's output into messages as chunks arrive; throws (the sandbox is ended) on a frame over
+ * `MAX_PIPE_FRAME`, a header over 1 MiB, or a message of no known shape. Each byte is copied in once, however small the
+ * chunks the sandbox writes.
+ */
+export declare class FrameReader {
+    #private;
+    /** The messages complete with `chunk`. */
+    push(chunk: Buffer): SandboxMessage[];
+}
+//# sourceMappingURL=pipe.d.ts.map

package/dist/node/tui/pipe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipe.d.ts","sourceRoot":"","sources":["../../../src/node/tui/pipe.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAiB,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1F,+FAA+F;AAC/F,eAAO,MAAM,cAAc,QAAmB,CAAC;AAK/C,8CAA8C;AAC9C,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CAM9D;AAED,8EAA8E;AAC9E,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEjE;AAWD;;;;GAIG;AACH,qBAAa,WAAW;;IAKvB,0CAA0C;IAC1C,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,EAAE,CAapC;CAmBD"}