@intentic/keyring 0.0.1-bootstrap.0 → 1.339.0

package/dist/service/remote.js

@@ -0,0 +1,83 @@
+import { randomBytes } from "node:crypto";
+import { serialLock } from "@intentic/base/async";
+import { z } from "zod";
+import { helloSigned } from "./hello-verify.js";
+import { InspectedSchema, SignedSchema, TypedPassphraseSchema, TypedSchema } from "./wire.js";
+const PROMPT_DEADLINE_MS = 130_000;
+const TYPING_DEADLINE_MS = 70_000;
+export class HelperLink {
+    #helper;
+    #next = 1;
+    #one = serialLock();
+    attach(helper) {
+        this.#helper?.end();
+        this.#helper = helper;
+    }
+    get ready() {
+        return this.#helper !== undefined && !this.#helper.closed;
+    }
+    async call(body, schema, deadlineMs) {
+        return await this.#one(async () => {
+            const helper = this.#helper;
+            if (helper === undefined || helper.closed) {
+                return undefined;
+            }
+            const id = this.#next++;
+            const envelope = z.object({ id: z.number(), reply: schema });
+            helper.send({ id, ...body });
+            for (;;) {
+                const reply = await helper.nextOf(envelope, deadlineMs);
+                if (reply === undefined) {
+                    return undefined;
+                }
+                if (reply.id === id) {
+                    return reply.reply;
+                }
+            }
+        });
+    }
+}
+const NO_SESSION = "nobody is signed in to Windows to ask: the keyring's session helper starts at sign-in";
+export const remoteHello = (link, pin) => {
+    const sign = async (credential, challenge, title, message) => {
+        const reply = await link.call({ call: "sign", credential, challenge, title, message }, SignedSchema, PROMPT_DEADLINE_MS);
+        if (reply === undefined) {
+            return { ok: false, cancelled: false, reason: link.ready ? "the session helper did not answer" : NO_SESSION };
+        }
+        return reply.ok ? { ok: true, value: Buffer.from(reply.signature, "base64") } : { ok: false, cancelled: reply.cancelled, reason: reply.reason };
+    };
+    return {
+        available: async () => link.ready && (await pin()) !== undefined,
+        enrol: () => Promise.resolve({ ok: false, cancelled: false, reason: "a hardened keyring keeps the Windows Hello key it was set up with" }),
+        sign: async (credential, challenge, notice) => await sign(credential, challenge, notice.title, notice.message),
+        verify: async (notice) => {
+            const pinned = await pin();
+            if (pinned === undefined) {
+                return { ok: false, cancelled: false, reason: "this keyring has no Windows Hello key" };
+            }
+            const challenge = randomBytes(32).toString("base64url");
+            const signed = await sign(pinned.credential, challenge, notice.title, notice.message);
+            if (!signed.ok) {
+                return signed;
+            }
+            return helloSigned(pinned.publicKey, challenge, signed.value.toString("base64"))
+                ? { ok: true, value: true }
+                : { ok: false, cancelled: false, reason: "the signature was not this keyring's Windows Hello key" };
+        },
+    };
+};
+export const remotePassphrasePrompt = (link) => async (notice) => {
+    const reply = await link.call({ call: "passphrase", title: notice.title, message: notice.message }, TypedPassphraseSchema, PROMPT_DEADLINE_MS);
+    return reply ?? { kind: "unavailable", reason: link.ready ? "the session helper did not answer" : NO_SESSION };
+};
+export const remoteTypist = (link) => ({
+    inspect: async (place) => {
+        const reply = await link.call({ call: "inspect", place }, InspectedSchema, TYPING_DEADLINE_MS);
+        return reply ?? { ok: false, reason: link.ready ? "the session helper did not answer" : "no one is signed in to Windows to type in" };
+    },
+    type: async (place, seen, value) => {
+        const reply = await link.call({ call: "type", place, seen, value }, TypedSchema, TYPING_DEADLINE_MS);
+        return reply ?? { ok: false, reason: "the session helper did not say whether it typed", partly: true };
+    },
+});
+//# sourceMappingURL=remote.js.map

package/dist/service/remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../../src/service/remote.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAO9F,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAIlC,MAAM,OAAO,UAAU;IACnB,OAAO,CAAyB;IAChC,KAAK,GAAG,CAAC,CAAC;IACD,IAAI,GAAG,UAAU,EAAE,CAAC;IAG7B,MAAM,CAAC,MAAkB;QACrB,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IAC1B,CAAC;IAED,IAAI,KAAK;QACL,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9D,CAAC;IAGD,KAAK,CAAC,IAAI,CAAI,IAA0B,EAAE,MAAoB,EAAE,UAAkB;QAC9E,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;YAC5B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACxC,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;YAC7B,SAAS,CAAC;gBACN,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBACxD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACtB,OAAO,SAAS,CAAC;gBACrB,CAAC;gBAED,IAAI,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;oBAClB,OAAO,KAAK,CAAC,KAAK,CAAC;gBACvB,CAAC;YACL,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AAED,MAAM,UAAU,GAAG,uFAAuF,CAAC;AAQ3G,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAgB,EAAE,GAAwC,EAAe,EAAE;IACnG,MAAM,IAAI,GAAG,KAAK,EAAE,UAAkB,EAAE,SAAiB,EAAE,KAAa,EAAE,OAAe,EAAgC,EAAE;QACvH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC;QACzH,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QAClH,CAAC;QACD,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACpJ,CAAC,CAAC;IACF,OAAO;QACH,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,KAAK,SAAS;QAChE,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mEAAmE,EAAE,CAAC;QAC1I,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;QAE9G,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACrB,MAAM,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;YAC3B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;YAC5F,CAAC;YACD,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YACtF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC;YAClB,CAAC;YACD,OAAO,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC5E,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;gBAC3B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;QAC5G,CAAC;KACJ,CAAC;AACN,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,sBAAsB,GAC/B,CAAC,IAAgB,EAAoB,EAAE,CACvC,KAAK,EAAE,MAAM,EAAyB,EAAE;IACpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;IAC/I,OAAO,KAAK,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;AACnH,CAAC,CAAC;AAEN,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAgB,EAAU,EAAE,CAAC,CAAC;IACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAsB,EAAE;QACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;QAC/F,OAAO,KAAK,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,2CAA2C,EAAE,CAAC;IAC1I,CAAC;IACD,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAkB,EAAE;QAC/C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAErG,OAAO,KAAK,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iDAAiD,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC3G,CAAC;CACJ,CAAC,CAAC"}

package/dist/service/service-run.d.ts

@@ -0,0 +1,3 @@
+import { type Runner } from "../run.js";
+export declare const runService: (sid: string, runner?: Runner) => Promise<void>;
+//# sourceMappingURL=service-run.d.ts.map

package/dist/service/service-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-run.d.ts","sourceRoot":"","sources":["../../src/service/service-run.ts"],"names":[],"mappings":"AAWA,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAYpD,eAAO,MAAM,UAAU,QAAe,MAAM,WAAU,MAAM,KAAgB,OAAO,CAAC,IAAI,CAyDvF,CAAC"}

package/dist/service/service-run.js

@@ -0,0 +1,77 @@
+import { randomBytes } from "node:crypto";
+import { appendFile } from "node:fs/promises";
+import { sleep } from "@intentic/base/async";
+import { writeFileAtomic } from "@intentic/base/fs";
+import { keyringPaths } from "../address.js";
+import { fileAudit } from "../audit.js";
+import { BackendReader } from "../backends.js";
+import { helloConsent, passphraseConsent, serialConsent } from "../consent/consent.js";
+import { Keyring } from "../core.js";
+import { fetchSandboxKeys } from "../keyring-fetch.js";
+import { loadKeys, saveKeys } from "../keys.js";
+import { realRunner } from "../run.js";
+import { helloWrapOf, readVaultFile, unwrapPassphrase, writeVaultFile } from "../vault.js";
+import { KEYRING_VERSION } from "../version.js";
+import { doorAcl } from "./acl.js";
+import { serveDoor } from "./channel.js";
+import { helloSigned } from "./hello-verify.js";
+import { hardenedPaths } from "./paths.js";
+import { HelperLink, remoteHello, remotePassphrasePrompt, remoteTypist } from "./remote.js";
+export const runService = async (sid, runner = realRunner) => {
+    const paths = hardenedPaths(sid);
+    const files = keyringPaths(paths.vaultDir, "linux");
+    const log = (message) => {
+        void appendFile(files.log, `${new Date().toISOString()} service: ${message}\n`).catch(() => undefined);
+    };
+    const pin = async () => {
+        const wrap = helloWrapOf((await readVaultFile(files.vault))?.wraps ?? []);
+        return wrap?.publicKey === undefined ? undefined : { credential: wrap.credential, publicKey: wrap.publicKey };
+    };
+    const link = new HelperLink();
+    const keyring = new Keyring({
+        vault: { read: async () => await readVaultFile(files.vault), write: async (file) => await writeVaultFile(files.vault, files.dir, file) },
+        keys: { read: async () => await loadKeys(files.keys, files.dir), write: async (keys) => await saveKeys(files.keys, files.dir, keys) },
+        consent: serialConsent(helloConsent(remoteHello(link, pin), passphraseConsent(remotePassphrasePrompt(link)))),
+        typist: remoteTypist(link),
+        backends: new BackendReader(runner),
+        fetchKeys: async (sandbox) => await fetchSandboxKeys(sandbox),
+        audit: fileAudit(files.audit, files.dir),
+        now: Date.now,
+        sleep: async (ms) => await sleep(ms),
+        version: KEYRING_VERSION,
+        helloCredential: (await pin())?.credential ?? "intentic-keyring",
+    });
+    const token = randomBytes(32).toString("base64url");
+    const { port } = await serveDoor({
+        handler: keyring,
+        link,
+        token,
+        challenge: async () => {
+            const pinned = await pin();
+            return pinned === undefined ? { method: "passphrase" } : { method: "hello", credential: pinned.credential, challenge: randomBytes(32).toString("base64url") };
+        },
+        proven: async (challenge, proof) => {
+            if (challenge.method === "hello" && proof.method === "hello") {
+                const pinned = await pin();
+                return pinned !== undefined && helloSigned(pinned.publicKey, challenge.challenge, proof.signature);
+            }
+            if (proof.method === "passphrase") {
+                const file = await readVaultFile(files.vault);
+                const key = file === undefined ? undefined : await unwrapPassphrase(file.wraps, proof.passphrase);
+                key?.fill(0);
+                return key !== undefined;
+            }
+            return false;
+        },
+        log,
+    });
+    await writeFileAtomic(paths.door, `${JSON.stringify({ port, token, pid: process.pid })}\n`, 0o600);
+    const acl = doorAcl(paths.door, sid);
+    const set = await runner({ command: "icacls", args: [acl.path, ...acl.args], timeoutMs: 20_000 });
+    if (set.exitCode !== 0) {
+        log(`icacls on the door file failed (exit ${String(set.exitCode)}): the session helper cannot read it`);
+    }
+    log(`keyring ${KEYRING_VERSION} listening on 127.0.0.1:${String(port)}`);
+    await new Promise(() => undefined);
+};
+//# sourceMappingURL=service-run.js.map

package/dist/service/service-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-run.js","sourceRoot":"","sources":["../../src/service/service-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,UAAU,EAAe,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAiB,WAAW,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAK3G,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,GAAW,EAAE,MAAM,GAAW,UAAU,EAAiB,EAAE;IACxF,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,CAAC,OAAe,EAAQ,EAAE;QAElC,KAAK,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,aAAa,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3G,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,KAAK,IAAmC,EAAE;QAClD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1E,OAAO,IAAI,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAClH,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QACxB,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE;QACxI,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE;QACrI,OAAO,EAAE,aAAa,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,iBAAiB,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7G,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC;QAC1B,QAAQ,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC;QACnC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC;QAC7D,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;QACxC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,eAAe;QACxB,eAAe,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE,UAAU,IAAI,kBAAkB;KACnE,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC;QAC7B,OAAO,EAAE,OAAO;QAChB,IAAI;QACJ,KAAK;QACL,SAAS,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;YAC3B,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAClK,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;YAC/B,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC3D,MAAM,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;gBAC3B,OAAO,MAAM,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YACvG,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC9C,MAAM,GAAG,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;gBAClG,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO,GAAG,KAAK,SAAS,CAAC;YAC7B,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,GAAG;KACN,CAAC,CAAC;IACH,MAAM,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnG,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAClG,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrB,GAAG,CAAC,wCAAwC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;IAC5G,CAAC;IACD,GAAG,CAAC,WAAW,eAAe,2BAA2B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzE,MAAM,IAAI,OAAO,CAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC9C,CAAC,CAAC"}

package/dist/service/sid.d.ts

@@ -0,0 +1,3 @@
+import type { Runner } from "../run.js";
+export declare const currentSid: (runner: Runner) => Promise<string>;
+//# sourceMappingURL=sid.d.ts.map

package/dist/service/sid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sid.d.ts","sourceRoot":"","sources":["../../src/service/sid.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAKxC,eAAO,MAAM,UAAU,WAAkB,MAAM,KAAG,OAAO,CAAC,MAAM,CAO/D,CAAC"}

package/dist/service/sid.js

@@ -0,0 +1,10 @@
+import { SID_RE } from "./paths.js";
+export const currentSid = async (runner) => {
+    const answer = await runner({ command: "whoami", args: ["/user", "/fo", "csv", "/nh"], timeoutMs: 10_000 });
+    const sid = /"(?<sid>S-1-[\d-]+)"/u.exec(answer.stdout)?.groups?.["sid"];
+    if (sid === undefined || !SID_RE.test(sid)) {
+        throw new Error("Windows did not say who this user is (`whoami /user`)");
+    }
+    return sid;
+};
+//# sourceMappingURL=sid.js.map

package/dist/service/sid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sid.js","sourceRoot":"","sources":["../../src/service/sid.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAIpC,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,MAAc,EAAmB,EAAE;IAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5G,MAAM,GAAG,GAAG,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;IACzE,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC,CAAC"}

package/dist/service/task.d.ts

@@ -0,0 +1,11 @@
+import type { HardenedPaths } from "./paths.js";
+export declare const REGISTER_TASK_SCRIPT = "\n$ErrorActionPreference = 'Stop'\ntry {\n  $account = (New-Object System.Security.Principal.SecurityIdentifier('S-1-5-19')).Translate([System.Security.Principal.NTAccount]).Value\n  $action = New-ScheduledTaskAction -Execute $KeyringInput.exe -Argument ('service run --user ' + $KeyringInput.sid)\n  $trigger = New-ScheduledTaskTrigger -AtStartup\n  $principal = New-ScheduledTaskPrincipal -UserId $account -LogonType ServiceAccount -RunLevel Limited\n  $settings = New-ScheduledTaskSettingsSet -RestartCount 999 -RestartInterval (New-TimeSpan -Minutes 1) -ExecutionTimeLimit ([TimeSpan]::Zero) -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -StartWhenAvailable -MultipleInstances IgnoreNew\n  Register-ScheduledTask -TaskPath $KeyringInput.taskPath -TaskName $KeyringInput.taskName -Action $action -Trigger $trigger -Principal $principal -Settings $settings -Force | Out-Null\n  Stop-ScheduledTask -TaskPath $KeyringInput.taskPath -TaskName $KeyringInput.taskName -ErrorAction SilentlyContinue\n  Start-ScheduledTask -TaskPath $KeyringInput.taskPath -TaskName $KeyringInput.taskName\n  [Console]::Out.WriteLine('intentic-keyring>' + (@{ ok = $true } | ConvertTo-Json -Compress))\n} catch {\n  [Console]::Out.WriteLine('intentic-keyring>' + (@{ ok = $false; error = $_.Exception.Message } | ConvertTo-Json -Compress))\n}\n";
+export declare const STOP_TASK_SCRIPT = "\ntry {\n  Stop-ScheduledTask -TaskPath $KeyringInput.taskPath -TaskName $KeyringInput.taskName -ErrorAction SilentlyContinue\n} catch {\n  # A task that is not there, or not running, has nothing to stop; said on stderr for the install's own record.\n  [Console]::Error.WriteLine('stop: ' + $_.Exception.Message)\n}\n[Console]::Out.WriteLine('intentic-keyring>' + (@{ ok = $true } | ConvertTo-Json -Compress))\n";
+export declare const UNREGISTER_TASK_SCRIPT = "\n$ErrorActionPreference = 'Stop'\ntry {\n  Stop-ScheduledTask -TaskPath $KeyringInput.taskPath -TaskName $KeyringInput.taskName -ErrorAction SilentlyContinue\n  Unregister-ScheduledTask -TaskPath $KeyringInput.taskPath -TaskName $KeyringInput.taskName -Confirm:$false -ErrorAction SilentlyContinue\n  [Console]::Out.WriteLine('intentic-keyring>' + (@{ ok = $true } | ConvertTo-Json -Compress))\n} catch {\n  [Console]::Out.WriteLine('intentic-keyring>' + (@{ ok = $false; error = $_.Exception.Message } | ConvertTo-Json -Compress))\n}\n";
+export declare const taskInput: (paths: HardenedPaths, sid: string) => {
+    exe: string;
+    sid: string;
+    taskPath: string;
+    taskName: string;
+};
+//# sourceMappingURL=task.d.ts.map

package/dist/service/task.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task.d.ts","sourceRoot":"","sources":["../../src/service/task.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAQhD,eAAO,MAAM,oBAAoB,szCAehC,CAAC;AAGF,eAAO,MAAM,gBAAgB,gaAQ5B,CAAC;AAEF,eAAO,MAAM,sBAAsB,8hBASlC,CAAC;AAEF,eAAO,MAAM,SAAS,UAAW,aAAa,OAAO,MAAM;;;;;CAAkF,CAAC"}

package/dist/service/task.js

@@ -0,0 +1,38 @@
+import { LOCAL_SERVICE_SID } from "./paths.js";
+export const REGISTER_TASK_SCRIPT = `
+$ErrorActionPreference = 'Stop'
+try {
+  $account = (New-Object System.Security.Principal.SecurityIdentifier('${LOCAL_SERVICE_SID}')).Translate([System.Security.Principal.NTAccount]).Value
+  $action = New-ScheduledTaskAction -Execute $KeyringInput.exe -Argument ('service run --user ' + $KeyringInput.sid)
+  $trigger = New-ScheduledTaskTrigger -AtStartup
+  $principal = New-ScheduledTaskPrincipal -UserId $account -LogonType ServiceAccount -RunLevel Limited
+  $settings = New-ScheduledTaskSettingsSet -RestartCount 999 -RestartInterval (New-TimeSpan -Minutes 1) -ExecutionTimeLimit ([TimeSpan]::Zero) -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -StartWhenAvailable -MultipleInstances IgnoreNew
+  Register-ScheduledTask -TaskPath $KeyringInput.taskPath -TaskName $KeyringInput.taskName -Action $action -Trigger $trigger -Principal $principal -Settings $settings -Force | Out-Null
+  Stop-ScheduledTask -TaskPath $KeyringInput.taskPath -TaskName $KeyringInput.taskName -ErrorAction SilentlyContinue
+  Start-ScheduledTask -TaskPath $KeyringInput.taskPath -TaskName $KeyringInput.taskName
+  [Console]::Out.WriteLine('intentic-keyring>' + (@{ ok = $true } | ConvertTo-Json -Compress))
+} catch {
+  [Console]::Out.WriteLine('intentic-keyring>' + (@{ ok = $false; error = $_.Exception.Message } | ConvertTo-Json -Compress))
+}
+`;
+export const STOP_TASK_SCRIPT = `
+try {
+  Stop-ScheduledTask -TaskPath $KeyringInput.taskPath -TaskName $KeyringInput.taskName -ErrorAction SilentlyContinue
+} catch {
+  # A task that is not there, or not running, has nothing to stop; said on stderr for the install's own record.
+  [Console]::Error.WriteLine('stop: ' + $_.Exception.Message)
+}
+[Console]::Out.WriteLine('intentic-keyring>' + (@{ ok = $true } | ConvertTo-Json -Compress))
+`;
+export const UNREGISTER_TASK_SCRIPT = `
+$ErrorActionPreference = 'Stop'
+try {
+  Stop-ScheduledTask -TaskPath $KeyringInput.taskPath -TaskName $KeyringInput.taskName -ErrorAction SilentlyContinue
+  Unregister-ScheduledTask -TaskPath $KeyringInput.taskPath -TaskName $KeyringInput.taskName -Confirm:$false -ErrorAction SilentlyContinue
+  [Console]::Out.WriteLine('intentic-keyring>' + (@{ ok = $true } | ConvertTo-Json -Compress))
+} catch {
+  [Console]::Out.WriteLine('intentic-keyring>' + (@{ ok = $false; error = $_.Exception.Message } | ConvertTo-Json -Compress))
+}
+`;
+export const taskInput = (paths, sid) => ({ exe: paths.exe, sid, taskPath: paths.taskPath, taskName: paths.taskName });
+//# sourceMappingURL=task.js.map

package/dist/service/task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task.js","sourceRoot":"","sources":["../../src/service/task.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAO/C,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;yEAGqC,iBAAiB;;;;;;;;;;;;CAYzF,CAAC;AAGF,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;CAQ/B,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;CASrC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAoB,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC"}

package/dist/service/wire.d.ts

@@ -0,0 +1,53 @@
+import { z } from "zod";
+export declare const FocusSchema: z.ZodObject<{
+    program: z.ZodString;
+    path: z.ZodString;
+    field: z.ZodEnum<{
+        password: "password";
+        text: "text";
+        unknown: "unknown";
+    }>;
+}, z.core.$strict>;
+export declare const InspectedSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    seen: z.ZodObject<{
+        focus: z.ZodObject<{
+            program: z.ZodString;
+            path: z.ZodString;
+            field: z.ZodEnum<{
+                password: "password";
+                text: "text";
+                unknown: "unknown";
+            }>;
+        }, z.core.$strict>;
+        handle: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    reason: z.ZodString;
+}, z.core.$strip>], "ok">;
+export declare const TypedSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    reason: z.ZodString;
+    partly: z.ZodBoolean;
+}, z.core.$strip>], "ok">;
+export declare const SignedSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    signature: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    cancelled: z.ZodBoolean;
+    reason: z.ZodString;
+}, z.core.$strip>], "ok">;
+export declare const TypedPassphraseSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"answered">;
+    passphrase: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"cancelled">;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"unavailable">;
+    reason: z.ZodString;
+}, z.core.$strip>], "kind">;
+//# sourceMappingURL=wire.d.ts.map

package/dist/service/wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../src/service/wire.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,WAAW;;;;;;;;kBAA+G,CAAC;AAExI,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;yBAG1B,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;yBAA+I,CAAC;AAExK,eAAO,MAAM,YAAY;;;;;;;yBAGvB,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;2BAIhC,CAAC"}

package/dist/service/wire.js

@@ -0,0 +1,17 @@
+import { z } from "zod";
+export const FocusSchema = z.object({ program: z.string(), path: z.string(), field: z.enum(["password", "text", "unknown"]) }).strict();
+export const InspectedSchema = z.discriminatedUnion("ok", [
+    z.object({ ok: z.literal(true), seen: z.object({ focus: FocusSchema, handle: z.string() }) }),
+    z.object({ ok: z.literal(false), reason: z.string() }),
+]);
+export const TypedSchema = z.discriminatedUnion("ok", [z.object({ ok: z.literal(true) }), z.object({ ok: z.literal(false), reason: z.string(), partly: z.boolean() })]);
+export const SignedSchema = z.discriminatedUnion("ok", [
+    z.object({ ok: z.literal(true), signature: z.string() }),
+    z.object({ ok: z.literal(false), cancelled: z.boolean(), reason: z.string() }),
+]);
+export const TypedPassphraseSchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("answered"), passphrase: z.string() }),
+    z.object({ kind: z.literal("cancelled") }),
+    z.object({ kind: z.literal("unavailable"), reason: z.string() }),
+]);
+//# sourceMappingURL=wire.js.map

package/dist/service/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../src/service/wire.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAExI,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE;IACtD,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAC7F,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACzD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAExK,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE;IACnD,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACxD,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACjF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACjE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;IAC1C,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACnE,CAAC,CAAC"}

package/dist/typing/android.d.ts

@@ -0,0 +1,14 @@
+import { type Runner } from "../run.js";
+import type { Typist } from "./typist.js";
+export declare const adbPath: (env?: NodeJS.ProcessEnv, exists?: (path: string) => boolean, platform?: NodeJS.Platform) => string;
+export declare const foregroundPackage: (dumpsys: string) => string | undefined;
+export declare const focusedNode: (dump: string) => {
+    readonly password: boolean;
+    readonly pkg: string;
+} | undefined;
+export declare class UntypableValue extends Error {
+    constructor();
+}
+export declare const inputTextCommand: (text: string) => string;
+export declare const androidTypist: (runner: Runner, adb?: string) => Typist;
+//# sourceMappingURL=android.d.ts.map

package/dist/typing/android.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"android.d.ts","sourceRoot":"","sources":["../../src/typing/android.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,MAAM,EAAa,MAAM,WAAW,CAAC;AACnD,OAAO,KAAK,EAAiC,MAAM,EAAE,MAAM,aAAa,CAAC;AAUzE,eAAO,MAAM,OAAO,SAAS,MAAM,CAAC,UAAU,WAAwB,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,aAAyB,MAAM,CAAC,QAAQ,KAAsB,MAW5J,CAAC;AAMF,eAAO,MAAM,iBAAiB,YAAa,MAAM,KAAG,MAAM,GAAG,SAC8B,CAAC;AAG5F,eAAO,MAAM,WAAW,SAAU,MAAM,KAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAOjG,CAAC;AAeF,qBAAa,cAAe,SAAQ,KAAK;IACrC,cAGC;CACJ;AAmCD,eAAO,MAAM,gBAAgB,SAAU,MAAM,KAAG,MAG3B,CAAC;AAEtB,eAAO,MAAM,aAAa,WAAY,MAAM,QAAO,MAAM,KAAe,MA4CvE,CAAC"}

package/dist/typing/android.js

@@ -0,0 +1,117 @@
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { succeeded } from "../run.js";
+const TIMEOUT_MS = 20_000;
+export const adbPath = (env = process.env, exists = existsSync, platform = process.platform) => {
+    const executable = platform === "win32" ? "adb.exe" : "adb";
+    for (const root of [env["ANDROID_HOME"], env["ANDROID_SDK_ROOT"]]) {
+        if (root !== undefined && root !== "") {
+            const candidate = join(root, "platform-tools", executable);
+            if (exists(candidate)) {
+                return candidate;
+            }
+        }
+    }
+    return executable;
+};
+const FOCUS_LINE = /mCurrentFocus=Window\{[^}]*?\s(?<pkg>[A-Za-z][\w.]*)\/[^\s}]+/u;
+const FOCUSED_APP = /mFocusedApp=(?:ActivityRecord|AppWindowToken)\{[^}]*?\s(?<pkg>[A-Za-z][\w.]*)\/[^\s}]+/u;
+export const foregroundPackage = (dumpsys) => FOCUS_LINE.exec(dumpsys)?.groups?.["pkg"] ?? FOCUSED_APP.exec(dumpsys)?.groups?.["pkg"];
+export const focusedNode = (dump) => {
+    const nodes = dump.match(/<node\b[^>]*>/gu) ?? [];
+    const focused = nodes.findLast((node) => /\sfocused="true"/u.test(node));
+    if (focused === undefined) {
+        return undefined;
+    }
+    return { password: /\spassword="true"/u.test(focused), pkg: /\spackage="(?<pkg>[^"]*)"/u.exec(focused)?.groups?.["pkg"] ?? "" };
+};
+const shellQuote = (text) => `'${text.replace(/'/gu, `'\\''`)}'`;
+const KEY_FOR_CONTROL = new Map([
+    ["\n", "66"],
+    ["\r", "66"],
+    ["\t", "61"],
+]);
+export class UntypableValue extends Error {
+    constructor() {
+        super("Android's `input text` types plain ASCII only, and this value holds a character outside it: type it on the phone's own keyboard.");
+        this.name = "UntypableValue";
+    }
+}
+const typedParts = (text) => {
+    const parts = [];
+    let run = "";
+    const flush = () => {
+        if (run !== "") {
+            parts.push({ kind: "text", text: run });
+        }
+        run = "";
+    };
+    const chars = [...text.replace(/\r\n/gu, "\n")];
+    chars.forEach((char, index) => {
+        const code = KEY_FOR_CONTROL.get(char);
+        if (code !== undefined) {
+            flush();
+            parts.push({ kind: "key", code });
+            return;
+        }
+        if (char < " " || char > "~") {
+            throw new UntypableValue();
+        }
+        if (char === "s" && chars[index - 1] === "%") {
+            flush();
+        }
+        run += char;
+    });
+    flush();
+    return parts;
+};
+export const inputTextCommand = (text) => typedParts(text)
+    .map((part) => (part.kind === "key" ? `input keyevent ${part.code}` : `input text ${shellQuote(part.text.replace(/ /gu, "%s"))}`))
+    .join(" && ");
+export const androidTypist = (runner, adb = adbPath()) => {
+    const front = async (serial) => {
+        const answer = await runner({ command: adb, args: ["-s", serial, "shell", "dumpsys", "window"], timeoutMs: TIMEOUT_MS });
+        return succeeded(answer) ? foregroundPackage(answer.stdout) : undefined;
+    };
+    const serialOf = (place) => (place.kind === "android" ? place.serial : undefined);
+    return {
+        inspect: async (place) => {
+            const serial = serialOf(place);
+            if (serial === undefined) {
+                return { ok: false, reason: "No phone was named." };
+            }
+            const pkg = await front(serial);
+            if (pkg === undefined) {
+                return { ok: false, reason: `adb could not name the app in front on ${serial}: is the phone attached and unlocked, and adb installed?` };
+            }
+            const dumped = await runner({ command: adb, args: ["-s", serial, "exec-out", "uiautomator", "dump", "/dev/tty"], timeoutMs: TIMEOUT_MS });
+            const node = succeeded(dumped) ? focusedNode(dumped.stdout) : undefined;
+            const field = node === undefined || node.pkg !== pkg ? "unknown" : node.password ? "password" : "text";
+            return { ok: true, seen: { focus: { program: pkg, path: pkg, field }, handle: pkg } };
+        },
+        type: async (place, seen, value) => {
+            const serial = serialOf(place);
+            if (serial === undefined) {
+                return { ok: false, reason: "No phone was named.", partly: false };
+            }
+            let commands;
+            try {
+                commands = inputTextCommand(value);
+            }
+            catch (error) {
+                return { ok: false, reason: error instanceof UntypableValue ? error.message : "The value could not be put into typing commands.", partly: false };
+            }
+            if ((await front(serial)) !== seen.handle) {
+                return { ok: false, reason: "Another app came to the front before typing began; nothing was typed.", partly: false };
+            }
+            const typed = await runner({ command: adb, args: ["-s", serial, "shell"], input: `${commands}\nexit\n`, timeoutMs: TIMEOUT_MS + value.length * 100 });
+            if (!succeeded(typed)) {
+                return { ok: false, reason: "adb could not type on the phone; some of the value may have gone in.", partly: true };
+            }
+            return (await front(serial)) === seen.handle
+                ? { ok: true }
+                : { ok: false, reason: "Another app came to the front while typing: some of the value may have gone there.", partly: true };
+        },
+    };
+};
+//# sourceMappingURL=android.js.map

package/dist/typing/android.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"android.js","sourceRoot":"","sources":["../../src/typing/android.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAe,SAAS,EAAE,MAAM,WAAW,CAAC;AAQnD,MAAM,UAAU,GAAG,MAAM,CAAC;AAG1B,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAE,MAAM,GAA8B,UAAU,EAAE,QAAQ,GAAoB,OAAO,CAAC,QAAQ,EAAU,EAAE;IAClK,MAAM,UAAU,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;QAChE,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpB,OAAO,SAAS,CAAC;YACrB,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,gEAAgE,CAAC;AACpF,MAAM,WAAW,GAAG,yFAAyF,CAAC;AAG9G,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAsB,EAAE,CACrE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;AAG5F,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAoE,EAAE;IAC1G,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;AACpI,CAAC,CAAC;AAKF,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC;AAEjF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC5B,CAAC,IAAI,EAAE,IAAI,CAAC;IACZ,CAAC,IAAI,EAAE,IAAI,CAAC;IACZ,CAAC,IAAI,EAAE,IAAI,CAAC;CACf,CAAC,CAAC;AAIH,MAAM,OAAO,cAAe,SAAQ,KAAK;IACrC;QACI,KAAK,CAAC,kIAAkI,CAAC,CAAC;QAC1I,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IACjC,CAAC;CACJ;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAe,EAAE;IAC7C,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,MAAM,KAAK,GAAG,GAAS,EAAE;QACrB,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,GAAG,GAAG,EAAE,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAChD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,KAAK,EAAE,CAAC;YACR,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,OAAO;QACX,CAAC;QACD,IAAI,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;YAC3B,MAAM,IAAI,cAAc,EAAE,CAAC;QAC/B,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3C,KAAK,EAAE,CAAC;QACZ,CAAC;QACD,GAAG,IAAI,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,KAAK,EAAE,CAAC;IACR,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAU,EAAE,CACrD,UAAU,CAAC,IAAI,CAAC;KACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;KACjI,IAAI,CAAC,MAAM,CAAC,CAAC;AAEtB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,GAAG,GAAW,OAAO,EAAE,EAAU,EAAE;IAC7E,MAAM,KAAK,GAAG,KAAK,EAAE,MAAc,EAA+B,EAAE;QAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QACzH,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,KAAY,EAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7G,OAAO;QACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAsB,EAAE;YACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;YACxD,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,MAAM,0DAA0D,EAAE,CAAC;YAC7I,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;YAC1I,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;YACvG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAC1F,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAU,EAAE,KAAa,EAAkB,EAAE;YAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YACvE,CAAC;YACD,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACD,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kDAAkD,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YACtJ,CAAC;YACD,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uEAAuE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YACzH,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,QAAQ,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC;YACtJ,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sEAAsE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACvH,CAAC;YACD,OAAO,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM;gBACxC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;gBACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oFAAoF,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACpI,CAAC;KACJ,CAAC;AACN,CAAC,CAAC"}

package/dist/typing/index.d.ts

@@ -0,0 +1,9 @@
+import type { Runner } from "../run.js";
+import { type Typist } from "./typist.js";
+export { androidTypist, adbPath, focusedNode, foregroundPackage, inputTextCommand } from "./android.js";
+export { linuxSession, linuxTypist } from "./linux.js";
+export { keystrokeScript, macTypist } from "./mac.js";
+export { noTypist, type Inspected, type Place, type Seen, type Typed, type Typist, typistFor } from "./typist.js";
+export { windowsTypist } from "./windows.js";
+export declare const platformTypist: (runner: Runner, platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv) => Typist;
+//# sourceMappingURL=index.d.ts.map

package/dist/typing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/typing/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAIxC,OAAO,EAAY,KAAK,MAAM,EAAa,MAAM,aAAa,CAAC;AAG/D,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACxG,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,KAAK,EAAE,KAAK,IAAI,EAAE,KAAK,KAAK,EAAE,KAAK,MAAM,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,eAAO,MAAM,cAAc,WAAY,MAAM,aAAY,MAAM,CAAC,QAAQ,QAA0B,MAAM,CAAC,UAAU,KAAiB,MAUnI,CAAC"}

package/dist/typing/index.js

@@ -0,0 +1,21 @@
+import { androidTypist } from "./android.js";
+import { linuxTypist } from "./linux.js";
+import { macTypist } from "./mac.js";
+import { noTypist, typistFor } from "./typist.js";
+import { windowsTypist } from "./windows.js";
+export { androidTypist, adbPath, focusedNode, foregroundPackage, inputTextCommand } from "./android.js";
+export { linuxSession, linuxTypist } from "./linux.js";
+export { keystrokeScript, macTypist } from "./mac.js";
+export { noTypist, typistFor } from "./typist.js";
+export { windowsTypist } from "./windows.js";
+export const platformTypist = (runner, platform = process.platform, env = process.env) => {
+    const desktop = platform === "win32"
+        ? windowsTypist(runner)
+        : platform === "darwin"
+            ? macTypist(runner)
+            : platform === "linux"
+                ? linuxTypist(runner, env)
+                : noTypist(`The keyring cannot type on ${platform}.`);
+    return typistFor(desktop, androidTypist(runner));
+};
+//# sourceMappingURL=index.js.map

package/dist/typing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/typing/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAe,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACxG,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAkE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAc,EAAE,QAAQ,GAAoB,OAAO,CAAC,QAAQ,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAU,EAAE;IACzI,MAAM,OAAO,GACT,QAAQ,KAAK,OAAO;QAChB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;QACvB,CAAC,CAAC,QAAQ,KAAK,QAAQ;YACrB,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;YACnB,CAAC,CAAC,QAAQ,KAAK,OAAO;gBACpB,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC;gBAC1B,CAAC,CAAC,QAAQ,CAAC,8BAA8B,QAAQ,GAAG,CAAC,CAAC;IAClE,OAAO,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC"}

package/dist/typing/linux.d.ts

@@ -0,0 +1,6 @@
+import { type Runner } from "../run.js";
+import { type Typist } from "./typist.js";
+export type LinuxSession = "x11" | "wayland" | "none";
+export declare const linuxSession: (env: NodeJS.ProcessEnv) => LinuxSession;
+export declare const linuxTypist: (runner: Runner, env?: NodeJS.ProcessEnv, exeOf?: (pid: string) => Promise<string>) => Typist;
+//# sourceMappingURL=linux.d.ts.map

package/dist/typing/linux.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux.d.ts","sourceRoot":"","sources":["../../src/typing/linux.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,MAAM,EAAa,MAAM,WAAW,CAAC;AACnD,OAAO,EAAmD,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAY3F,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,SAAS,GAAG,MAAM,CAAC;AAEtD,eAAO,MAAM,YAAY,QAAS,MAAM,CAAC,UAAU,KAAG,YAMrD,CAAC;AAsDF,eAAO,MAAM,WAAW,WAAY,MAAM,QAAO,MAAM,CAAC,UAAU,UAAuB,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,KAAa,MASrI,CAAC"}