@iowarp/clio-coder 0.4.7 → 0.4.8

package/dist/{chunk-KAFMW7WM.js → chunk-6R5MBXBJ.js}

@@ -383,4 +383,4 @@ export {
   isSessionHeader,
   isSessionEntry
 };
-//# sourceMappingURL=chunk-KAFMW7WM.js.map
+//# sourceMappingURL=chunk-6R5MBXBJ.js.map

package/dist/{chunk-24S3DN22.js → chunk-6TKOFFGE.js}

@@ -7,12 +7,12 @@ import {
 import {
   require_dist
 } from "./chunk-B5GGDIHT.js";
-import {
-  safeResourceWrite
-} from "./chunk-ZZFWWYLX.js";
 import {
   clioConfigDir
 } from "./chunk-CTTI7G3T.js";
+import {
+  safeResourceWrite
+} from "./chunk-ZZFWWYLX.js";
 import {
   __toESM,
   init_esm_shims
@@ -1055,4 +1055,4 @@ export {
   disableExtension,
   removeExtension
 };
-//# sourceMappingURL=chunk-24S3DN22.js.map
+//# sourceMappingURL=chunk-6TKOFFGE.js.map

package/dist/{chunk-YKRJTYNP.js → chunk-6UJ7RDI7.js}

@@ -11,12 +11,12 @@ import {
 import {
   require_dist
 } from "./chunk-B5GGDIHT.js";
-import {
-  safeResourceWrite
-} from "./chunk-ZZFWWYLX.js";
 import {
   clioConfigDir
 } from "./chunk-CTTI7G3T.js";
+import {
+  safeResourceWrite
+} from "./chunk-ZZFWWYLX.js";
 import {
   __toESM,
   init_esm_shims
@@ -1140,4 +1140,4 @@ export {
   resolvePackagePathReference,
   parseFrontmatter
 };
-//# sourceMappingURL=chunk-YKRJTYNP.js.map
+//# sourceMappingURL=chunk-6UJ7RDI7.js.map

package/dist/{chunk-GXIWHXDB.js → chunk-6X7VOCDY.js}

@@ -1,11 +1,11 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   inspectEvidence
-} from "./chunk-WN552PKN.js";
+} from "./chunk-5W4FRA5Q.js";
 import {
   TRUST_STATUS_AXES,
   trustVerdict
-} from "./chunk-IQCNVLO6.js";
+} from "./chunk-FB3KTE2J.js";
 import {
   clioDataDir
 } from "./chunk-CTTI7G3T.js";
@@ -41,4 +41,4 @@ export {
   EVIDENCE_DETAIL_MAX_RUNS,
   evidenceDetailSnapshot
 };
-//# sourceMappingURL=chunk-GXIWHXDB.js.map
+//# sourceMappingURL=chunk-6X7VOCDY.js.map

package/dist/{chunk-KKEYGFX4.js → chunk-7QQRPB2E.js}

@@ -4,28 +4,28 @@ import {
   parseFrontmatter,
   resolvePackagePathReference,
   resolvePackageReferences
-} from "./chunk-YKRJTYNP.js";
-import {
-  value_exports
-} from "./chunk-SER7RRAE.js";
-import {
-  typebox_exports
-} from "./chunk-GH5ZR6JP.js";
+} from "./chunk-6UJ7RDI7.js";
 import {
   PATH_BOUNDARY_MAX_ENTRIES,
   normalizePathBoundary,
   normalizePathBoundaryEntry,
   pathBoundaryCovers
 } from "./chunk-R2P2U3ZS.js";
-import {
-  resolvePackageRoot
-} from "./chunk-E3LEPLQ2.js";
 import {
   require_dist
 } from "./chunk-B5GGDIHT.js";
+import {
+  value_exports
+} from "./chunk-SER7RRAE.js";
+import {
+  typebox_exports
+} from "./chunk-GH5ZR6JP.js";
 import {
   clioConfigDir
 } from "./chunk-CTTI7G3T.js";
+import {
+  resolvePackageRoot
+} from "./chunk-E3LEPLQ2.js";
 import {
   __toESM,
   init_esm_shims
@@ -912,4 +912,4 @@ export {
   listFleetContracts,
   renderFleetPrompt
 };
-//# sourceMappingURL=chunk-KKEYGFX4.js.map
+//# sourceMappingURL=chunk-7QQRPB2E.js.map

package/dist/{chunk-34XHRVKG.js → chunk-ARRUMZ7X.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   classify
-} from "./chunk-HOX4YZ2K.js";
+} from "./chunk-YXFKLMX2.js";
 import {
   ToolNames,
   isBuiltinToolName
@@ -1374,4 +1374,4 @@ export {
   parseResultContract,
   parseWorkerResultContract
 };
-//# sourceMappingURL=chunk-34XHRVKG.js.map
+//# sourceMappingURL=chunk-ARRUMZ7X.js.map

package/dist/{chunk-3T4DXWP6.js → chunk-ATB3Q7YO.js}

@@ -521,10 +521,6 @@ function printOk(message) {
   process.stdout.write(`${source_default.green("ok:")} ${message}
 `);
 }
-function printHeader(message) {
-  process.stdout.write(`${source_default.cyan(message)}
-`);
-}
 function columnWidths(rows) {
   const widths = [];
   for (const row of rows) {
@@ -657,7 +653,6 @@ export {
   printError,
   printNote,
   printOk,
-  printHeader,
   columnWidths,
   formatColumnRow,
   formatColumns,
@@ -665,4 +660,4 @@ export {
   globalFlagPositionHint,
   extractGlobalFlags
 };
-//# sourceMappingURL=chunk-3T4DXWP6.js.map
+//# sourceMappingURL=chunk-ATB3Q7YO.js.map

package/dist/chunk-AUHVBIDW.js

@@ -0,0 +1,19 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// apps/clio-coder-web/server/network-policy.ts
+init_esm_shims();
+function restrictNetwork() {
+  const download = globalThis.fetch;
+  globalThis.fetch = async () => {
+    throw new Error("Web server network requests must use the pinned toolchain downloader.");
+  };
+  return download;
+}
+
+export {
+  restrictNetwork
+};
+//# sourceMappingURL=chunk-AUHVBIDW.js.map

package/dist/{chunk-L3Z5ANCV.js → chunk-BE4I3UJ2.js}

@@ -4,23 +4,23 @@ import {
   listChecks,
   runProjectCheck,
   runScriptCheck
-} from "./chunk-TLTGZTXI.js";
+} from "./chunk-RKFNU5UA.js";
 import {
   BROWSER_MODES,
   prepareVerifyArguments,
   verifyToolSurface
-} from "./chunk-MZHXENL7.js";
+} from "./chunk-2U2U5POA.js";
 import {
   prepareBoundedImage
 } from "./chunk-YGDMBK7O.js";
+import {
+  maxOutputArg,
+  timeoutArg
+} from "./chunk-MEHBW2SP.js";
 import {
   escapeRegExp,
   resolveReadPath
 } from "./chunk-V552WL53.js";
-import {
-  maxOutputArg,
-  timeoutArg
-} from "./chunk-BAU36233.js";
 import {
   truncateUtf8
 } from "./chunk-MYI32N4R.js";
@@ -665,4 +665,4 @@ var verifyTool = {
 export {
   verifyTool
 };
-//# sourceMappingURL=chunk-L3Z5ANCV.js.map
+//# sourceMappingURL=chunk-BE4I3UJ2.js.map

package/dist/chunk-BFPHMSK7.js

@@ -0,0 +1,169 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// apps/clio-coder-web/server/launcher/install.ts
+init_esm_shims();
+import { createHash } from "node:crypto";
+import { constants } from "node:fs";
+import { access, lstat, mkdir, readFile, realpath, stat, unlink, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { isAbsolute as isAbsolute2, join } from "node:path";
+import { parseArgs } from "node:util";
+
+// apps/clio-coder-web/server/launcher/desktop-entry.ts
+init_esm_shims();
+import { isAbsolute } from "node:path";
+var launcherId = "io.iowarp.ClioCoder";
+var launcherUnsupported = "Desktop installation is currently supported on Linux only. Start the web server with --open, or open its printed URL, on this platform.";
+function desktopArgument(value) {
+  if ([...value].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127))
+    throw new Error("Desktop entry paths cannot contain control characters.");
+  return `"${value.replace(/\\/g, "\\\\\\\\").replace(/["`$]/g, "\\\\$&").replace(/%/g, "%%")}"`;
+}
+function desktopEntry(paths) {
+  if (!Object.values(paths).every(isAbsolute)) throw new Error("Launcher paths must be absolute.");
+  if (paths.background !== void 0 && !isAbsolute(paths.background))
+    throw new Error("Background directory must be absolute.");
+  if (paths.icon) desktopArgument(paths.icon);
+  const argv = [
+    paths.node,
+    ...paths.loader ? ["--import", paths.loader] : [],
+    paths.entry,
+    ...paths.background ? ["background", "open", "--directory", paths.background] : ["--open", "--idle-exit", "60000"]
+  ];
+  return [
+    "[Desktop Entry]",
+    "Type=Application",
+    "Name=Clio Coder",
+    "Comment=Build and explore with Clio Coder",
+    `Exec=${argv.map(desktopArgument).join(" ")}`,
+    `Icon=${paths.icon ? paths.icon.replace(/\\/g, "\\\\") : "applications-development"}`,
+    "Terminal=false",
+    "Categories=Development;",
+    "Keywords=Clio;AI;Coding;",
+    "StartupNotify=false",
+    ""
+  ].join("\n");
+}
+
+// apps/clio-coder-web/server/launcher/install.ts
+var hash = (value) => createHash("sha256").update(value).digest("hex");
+var names = { entry: `${launcherId}.desktop`, manifest: `${launcherId}.desktop.owner.json` };
+var missing = (error) => error.code === "ENOENT";
+async function contents(path) {
+  try {
+    const info = await lstat(path);
+    if (!info.isFile() || info.nlink !== 1 || info.size > 16384 || process.getuid && info.uid !== process.getuid())
+      throw new Error("Launcher file is not a small regular file owned by this user.");
+    return await readFile(path, "utf8");
+  } catch (error) {
+    if (missing(error)) return null;
+    throw error;
+  }
+}
+async function launcherFiles(prefix, platform = process.platform) {
+  if (platform !== "linux") throw new Error(launcherUnsupported);
+  if (!isAbsolute2(prefix)) throw new Error("--prefix must be an absolute XDG data directory.");
+  const directory = join(prefix, "applications");
+  try {
+    if (!(await lstat(directory)).isDirectory())
+      throw new Error("Launcher applications path must be a directory, not a symlink.");
+  } catch (error) {
+    if (!missing(error)) throw error;
+  }
+  return { directory, entry: join(directory, names.entry), manifest: join(directory, names.manifest) };
+}
+async function launcherStatus(prefix, platform = process.platform) {
+  const files = await launcherFiles(prefix, platform);
+  const entry = await contents(files.entry), manifest = await contents(files.manifest);
+  if (entry === null && manifest === null) return { status: "absent", ...files };
+  let owned = false, available = false;
+  try {
+    const value = JSON.parse(manifest ?? "null");
+    owned = entry !== null && value?.version === 1 && value?.owner === launcherId && value?.sha256 === hash(entry) && desktopEntry(value.launch) === entry;
+    if (owned) {
+      await access(value.launch.node, constants.X_OK);
+      for (const path of [
+        value.launch.node,
+        value.launch.entry,
+        ...value.launch.loader ? [value.launch.loader] : [],
+        ...value.launch.icon ? [value.launch.icon] : []
+      ]) {
+        await access(path, constants.R_OK);
+        if (!(await stat(path)).isFile()) throw new Error("Launcher target is not a file.");
+      }
+      available = true;
+    }
+  } catch {
+  }
+  return {
+    status: owned ? available ? "installed" : "unavailable" : "conflict",
+    ...files
+  };
+}
+async function installLauncher(prefix, paths) {
+  const launch = {
+    node: await realpath(paths.node),
+    ...paths.loader ? { loader: await realpath(paths.loader) } : {},
+    ...paths.icon ? { icon: await realpath(paths.icon) } : {},
+    entry: await realpath(paths.entry),
+    ...paths.background ? { background: await realpath(paths.background) } : {}
+  };
+  const entry = desktopEntry(launch);
+  const state = await launcherStatus(prefix);
+  if (state.status === "installed" && await contents(state.entry) === entry) return state;
+  if (state.status !== "absent")
+    throw new Error(
+      "Launcher files already exist or differ. Inspect status and uninstall the owned entry before installing again."
+    );
+  await mkdir(state.directory, { recursive: true });
+  await launcherFiles(prefix);
+  await writeFile(state.entry, entry, { flag: "wx", mode: 420 });
+  try {
+    await writeFile(
+      state.manifest,
+      `${JSON.stringify({ version: 1, owner: launcherId, sha256: hash(entry), launch })}
+`,
+      {
+        flag: "wx",
+        mode: 384
+      }
+    );
+  } catch (error) {
+    if (await contents(state.entry) === entry) await unlink(state.entry);
+    throw error;
+  }
+  return launcherStatus(prefix);
+}
+async function uninstallLauncher(prefix) {
+  const state = await launcherStatus(prefix);
+  if (state.status === "conflict") throw new Error("Launcher ownership could not be verified; no files were removed.");
+  if (state.status === "installed" || state.status === "unavailable") {
+    await unlink(state.entry);
+    await unlink(state.manifest);
+  }
+  return launcherStatus(prefix);
+}
+async function launcher(args, paths) {
+  const { values, positionals } = parseArgs({ args, allowPositionals: true, options: { prefix: { type: "string" } } });
+  const command = positionals[0];
+  if (positionals.length !== 1 || !["install", "status", "uninstall"].includes(command ?? ""))
+    throw new Error("Usage: launcher install|status|uninstall [--prefix <absolute XDG data directory>]");
+  const prefix = values.prefix ?? (process.env.XDG_DATA_HOME && isAbsolute2(process.env.XDG_DATA_HOME) ? process.env.XDG_DATA_HOME : join(homedir(), ".local/share"));
+  const result = command === "install" ? await installLauncher(prefix, paths) : command === "uninstall" ? await uninstallLauncher(prefix) : await launcherStatus(prefix);
+  console.log(JSON.stringify(result, null, 2));
+  if (result.status === "conflict" || result.status === "unavailable") process.exitCode = 1;
+}
+
+export {
+  desktopEntry,
+  contents,
+  launcherFiles,
+  launcherStatus,
+  installLauncher,
+  uninstallLauncher,
+  launcher
+};
+//# sourceMappingURL=chunk-BFPHMSK7.js.map

package/dist/{chunk-LVFANMOH.js → chunk-BHJMMCXS.js}

@@ -1,4 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  require_dist
+} from "./chunk-B5GGDIHT.js";
 import {
   createSlicer
 } from "./chunk-KPRLAMP4.js";
@@ -7,9 +10,6 @@ import {
   enumerateWorkspaceFiles,
   enumerateWorkspaceFilesAsync
 } from "./chunk-PPEZJWUG.js";
-import {
-  require_dist
-} from "./chunk-B5GGDIHT.js";
 import {
   safeResourceWrite
 } from "./chunk-ZZFWWYLX.js";
@@ -463,4 +463,4 @@ export {
   scopePlanForUpdate,
   pendingPages
 };
-//# sourceMappingURL=chunk-LVFANMOH.js.map
+//# sourceMappingURL=chunk-BHJMMCXS.js.map