@jingyi0605/codingns4dsh 0.2.1-beta.11 → 0.2.1-beta.13

package/data/build/dist/host/modules/quick-apps/browse.d.ts

@@ -0,0 +1,5 @@
+import type { WorkspaceDirectoryBrowser } from '../../../dsh-capabilities/host/workspace-directory-adapter.js';
+import type { QuickAppDirectory } from '../../../shared/contracts/quick-apps.js';
+/** Management-only browsing: the Host resolves identity before handing a root to its native browser. */
+export declare function browseQuickAppDirectory(workspaceRoot: (id: string) => string | null, browser: WorkspaceDirectoryBrowser | undefined, workspaceId: unknown, requestedPath: unknown, signal: AbortSignal): Promise<QuickAppDirectory>;
+//# sourceMappingURL=browse.d.ts.map

package/data/build/dist/host/modules/quick-apps/browse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browse.d.ts","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/browse.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAA;AAC9G,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAA;AAIhF,wGAAwG;AACxG,wBAAsB,uBAAuB,CAC3C,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,yBAAyB,GAAG,SAAS,EAC5F,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,GAChE,OAAO,CAAC,iBAAiB,CAAC,CAoB5B"}

package/data/build/dist/host/modules/quick-apps/browse.js

@@ -0,0 +1,37 @@
+import { realpath } from 'node:fs/promises';
+import { appPath, publicPath, resolveAppPath } from './paths.js';
+import { deny, QuickAppError } from './errors.js';
+/** Management-only browsing: the Host resolves identity before handing a root to its native browser. */
+export async function browseQuickAppDirectory(workspaceRoot, browser, workspaceId, requestedPath, signal) {
+    signal.throwIfAborted();
+    if (typeof workspaceId !== 'string' || !workspaceId)
+        deny();
+    const root = workspaceRoot(workspaceId);
+    if (!root)
+        throw new QuickAppError(404, 'QUICK_APP_WORKSPACE_UNAVAILABLE', 'The exact workspace is unavailable.');
+    const path = appPath(requestedPath ?? '');
+    if (!publicPath(path))
+        deny();
+    const canonical = await realpath(root);
+    const directory = await resolveAppPath(root, path);
+    if (!browser)
+        throw new QuickAppError(503, 'QUICK_APP_BROWSE_UNAVAILABLE', 'The native Host file browser is unavailable.');
+    const listing = await browser.list(canonical, path, signal);
+    signal.throwIfAborted();
+    // A removed/retargeted workspace or replaced directory must not publish an old listing.
+    if (workspaceRoot(workspaceId) !== root || await realpath(root) !== canonical || await resolveAppPath(root, path) !== directory)
+        deny();
+    const entries = listing.entries.slice(0, 1000).flatMap(entry => {
+        if (!['file', 'directory'].includes(entry.type) || entry.name.includes('/') || !publicPath(entry.name))
+            return [];
+        try {
+            appPath(entry.name, false);
+        }
+        catch {
+            return [];
+        }
+        return [{ name: entry.name, path: path ? `${path}/${entry.name}` : entry.name, kind: entry.type }];
+    });
+    return { path, entries, truncated: listing.truncated || listing.entries.length > 1000 };
+}
+//# sourceMappingURL=browse.js.map

package/data/build/dist/host/modules/quick-apps/browse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browse.js","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/browse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAG3C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEjD,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,aAA4C,EAAE,OAA8C,EAC5F,WAAoB,EAAE,aAAsB,EAAE,MAAmB;IAEjE,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW;QAAE,IAAI,EAAE,CAAA;IAC3D,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,CAAA;IACvC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,iCAAiC,EAAE,qCAAqC,CAAC,CAAA;IACjH,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAA;IACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,IAAI,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAClD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,8BAA8B,EAAE,8CAA8C,CAAC,CAAA;IAC1H,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3D,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,wFAAwF;IACxF,IAAI,aAAa,CAAC,WAAW,CAAC,KAAK,IAAI,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,SAAS;QAAE,IAAI,EAAE,CAAA;IACvI,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QAC7D,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAA;QACjH,IAAI,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAA;QAAC,CAAC;QACtD,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAA4B,EAAE,CAAC,CAAA;IAC5H,CAAC,CAAC,CAAA;IACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAA;AACzF,CAAC"}

package/data/build/dist/host/modules/quick-apps/code-revision.d.ts

@@ -0,0 +1,4 @@
+import type { QuickApp } from '../../../shared/contracts/quick-apps.js';
+/** Bounded, request-time trust check. No watcher or background workspace scan is installed. */
+export declare function quickAppCodeRevision(workspace: string, app: QuickApp): Promise<string>;
+//# sourceMappingURL=code-revision.d.ts.map

package/data/build/dist/host/modules/quick-apps/code-revision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-revision.d.ts","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/code-revision.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yCAAyC,CAAA;AAMvE,+FAA+F;AAC/F,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAwB5F"}

package/data/build/dist/host/modules/quick-apps/code-revision.js

@@ -0,0 +1,39 @@
+import { createHash } from 'node:crypto';
+import { lstat, opendir, realpath } from 'node:fs/promises';
+import { extname, join } from 'node:path';
+import { publicPath, resolveAppPath } from './paths.js';
+import { QuickAppError } from './errors.js';
+const codeExtensions = new Set(['.html', '.htm', '.js', '.mjs', '.css', '.svg', '.wasm']);
+/** Bounded, request-time trust check. No watcher or background workspace scan is installed. */
+export async function quickAppCodeRevision(workspace, app) {
+    const root = await realpath(workspace);
+    const entries = [];
+    const visited = new Set();
+    let count = 0;
+    const visit = async (path, depth) => {
+        if (visited.has(path))
+            return;
+        visited.add(path);
+        if (++count > 4096 || depth > 32)
+            throw new QuickAppError(413, 'QUICK_APP_TOO_LARGE', 'File permissions require an application folder with at most 4096 entries and 32 directory levels.');
+        const physical = join(root, path);
+        const info = await lstat(physical);
+        if (info.isSymbolicLink())
+            return; // Such paths cannot be served by the HTTP handler.
+        if (info.isDirectory()) {
+            const directory = await opendir(physical);
+            for await (const entry of directory)
+                if (publicPath(entry.name))
+                    await visit([path, entry.name].filter(Boolean).join('/'), depth + 1);
+        }
+        else if (info.isFile() && codeExtensions.has(extname(path).toLowerCase())) {
+            entries.push(JSON.stringify([path, info.dev, info.ino, info.size, info.mtimeMs, info.ctimeMs]));
+        }
+    };
+    for (const path of [app.documentRoot, ...app.mounts.map(mount => mount.workspacePath)]) {
+        await resolveAppPath(root, path);
+        await visit(path, 0);
+    }
+    return createHash('sha256').update(entries.sort().join('\n')).digest('hex');
+}
+//# sourceMappingURL=code-revision.js.map

package/data/build/dist/host/modules/quick-apps/code-revision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-revision.js","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/code-revision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEzC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AAEzF,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,GAAa;IACzE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAA;IACtC,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAE,KAAa,EAAiB,EAAE;QACjE,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAM;QAC7B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACjB,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,qBAAqB,EAAE,mGAAmG,CAAC,CAAA;QAC1L,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAA;QAClC,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,OAAM,CAAC,mDAAmD;QACrF,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;YACzC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS;gBAAE,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,MAAM,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;QACvI,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC5E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACjG,CAAC;IACH,CAAC,CAAA;IACD,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAChC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC"}

package/data/build/dist/host/modules/quick-apps/documents.d.ts

@@ -0,0 +1,14 @@
+import type { QuickAppDocument } from '../../../shared/contracts/quick-apps.js';
+import type { QuickAppFileApi } from './file-api.js';
+import type { QuickAppLaunch, QuickAppLaunches } from './launches.js';
+/** Trusted UI document operations. HTML pages cannot use this authenticated management channel. */
+export declare class QuickAppDocuments {
+    private readonly launches;
+    private readonly files;
+    private active;
+    constructor(launches: QuickAppLaunches, files: QuickAppFileApi);
+    handle(id: string, principal: string, input: Record<string, unknown>): Promise<unknown>;
+    read(launch: QuickAppLaunch, path: string): Promise<QuickAppDocument>;
+    private image;
+}
+//# sourceMappingURL=documents.d.ts.map

package/data/build/dist/host/modules/quick-apps/documents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.d.ts","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/documents.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAC/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAMrE,mGAAmG;AACnG,qBAAa,iBAAiB;IAEhB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAAoB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAD/E,OAAO,CAAC,MAAM,CAAI;gBACW,QAAQ,EAAE,gBAAgB,EAAmB,KAAK,EAAE,eAAe;IAE1F,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IA4BvF,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAK7D,KAAK;CAsBpB"}

package/data/build/dist/host/modules/quick-apps/documents.js

@@ -0,0 +1,87 @@
+import { constants } from 'node:fs';
+import { open } from 'node:fs/promises';
+import { extname } from 'node:path';
+import { appPath, publicPath, resolveAppPath, withinScope } from './paths.js';
+import { deny, QuickAppError } from './errors.js';
+const imageTypes = { '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg', '.gif': 'image/gif', '.webp': 'image/webp', '.avif': 'image/avif' };
+/** Trusted UI document operations. HTML pages cannot use this authenticated management channel. */
+export class QuickAppDocuments {
+    launches;
+    files;
+    active = 0;
+    constructor(launches, files) {
+        this.launches = launches;
+        this.files = files;
+    }
+    async handle(id, principal, input) {
+        if (this.active >= 8)
+            throw new QuickAppError(429, 'QUICK_APP_LIMIT', 'Too many document requests.');
+        this.active++;
+        try {
+            const launch = this.launches.requireOwner(id, principal);
+            if (launch.app.kind !== 'text')
+                deny();
+            await this.launches.validateWorkspace(launch);
+            const path = appPath(input.path ?? launch.app.entryPath, false);
+            if (!publicPath(path) || !withinScope(launch.app.documentRoot, path))
+                deny();
+            if (input.operation === 'image')
+                return await this.image(launch, path);
+            if (input.operation === 'read')
+                return await this.read(launch, path);
+            if (input.operation === 'allow-edit') {
+                await this.files.read(launch, path);
+                this.launches.authorize(launch);
+                // Explicit user approval grants this file only, for this launch's lifetime. No delete/create grant.
+                launch.permissions = { ...launch.permissions, write: [...new Set([...launch.permissions.write, path])] };
+                return { ok: true };
+            }
+            if (input.operation === 'save') {
+                if (typeof input.content !== 'string')
+                    deny();
+                if (Buffer.from(input.content, 'utf8').toString('utf8') !== input.content)
+                    deny('The document must contain valid Unicode text.');
+                const result = await this.files.mutate(launch, 'PUT', path, input.content, typeof input.version === 'string' ? input.version : undefined, undefined, launch.abort.signal);
+                return { path, content: input.content, version: result.version, canWrite: true };
+            }
+            throw new QuickAppError(404, 'CODINGNS_RPC_NOT_FOUND', 'Unknown document operation.');
+        }
+        finally {
+            this.active--;
+        }
+    }
+    async read(launch, path) {
+        const result = await this.files.read(launch, path);
+        return { ...result, path, canWrite: launch.permissions.write.some(scope => withinScope(scope, path)) };
+    }
+    async image(launch, path) {
+        const mime = imageTypes[extname(path).toLowerCase()];
+        if (!mime)
+            deny('Only raster document images are supported.');
+        const file = await open(await resolveAppPath(launch.workspaceRoot, path), constants.O_RDONLY | constants.O_NOFOLLOW);
+        try {
+            const info = await file.stat();
+            const limit = 2 * 1024 * 1024;
+            if (!info.isFile() || info.size > limit)
+                throw new QuickAppError(413, 'QUICK_APP_TOO_LARGE', 'Document images must be at most 2 MiB.');
+            const bytes = Buffer.alloc(limit + 1);
+            let length = 0;
+            while (length < bytes.length) {
+                const result = await file.read(bytes, length, bytes.length - length, length);
+                if (!result.bytesRead)
+                    break;
+                length += result.bytesRead;
+            }
+            if (length > limit)
+                throw new QuickAppError(413, 'QUICK_APP_TOO_LARGE', 'Document images must be at most 2 MiB.');
+            await this.launches.validateWorkspace(launch);
+            await resolveAppPath(launch.workspaceRoot, path);
+            this.launches.authorize(launch);
+            return { url: `data:${mime};base64,${bytes.subarray(0, length).toString('base64')}` };
+        }
+        finally {
+            await file.close();
+        }
+    }
+}
+//# sourceMappingURL=documents.js.map

package/data/build/dist/host/modules/quick-apps/documents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.js","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/documents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAInC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7E,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEjD,MAAM,UAAU,GAA2B,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,CAAA;AAElL,mGAAmG;AACnG,MAAM,OAAO,iBAAiB;IAEC;IAA6C;IADlE,MAAM,GAAG,CAAC,CAAA;IAClB,YAA6B,QAA0B,EAAmB,KAAsB;QAAnE,aAAQ,GAAR,QAAQ,CAAkB;QAAmB,UAAK,GAAL,KAAK,CAAiB;IAAG,CAAC;IAEpG,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,SAAiB,EAAE,KAA8B;QACxE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,6BAA6B,CAAC,CAAA;QACpG,IAAI,CAAC,MAAM,EAAE,CAAA;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;YACxD,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM;gBAAE,IAAI,EAAE,CAAA;YACtC,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAC/D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC;gBAAE,IAAI,EAAE,CAAA;YAC5E,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO;gBAAE,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YACtE,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM;gBAAE,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YACpE,IAAI,KAAK,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;gBACnC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;gBAC/B,oGAAoG;gBACpG,MAAM,CAAC,WAAW,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;gBACxG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrB,CAAC;YACD,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;gBAC/B,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;oBAAE,IAAI,EAAE,CAAA;gBAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,OAAO;oBAAE,IAAI,CAAC,+CAA+C,CAAC,CAAA;gBAChI,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBACzK,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAQ,EAAE,QAAQ,EAAE,IAAI,EAA6B,CAAA;YAC9G,CAAC;YACD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,wBAAwB,EAAE,6BAA6B,CAAC,CAAA;QACvF,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,MAAM,EAAE,CAAA;QAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAsB,EAAE,IAAY;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAClD,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAA;IACxG,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,MAAsB,EAAE,IAAY;QACtD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;QACpD,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,4CAA4C,CAAC,CAAA;QAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACpH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;YAC9B,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;YAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK;gBAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,qBAAqB,EAAE,wCAAwC,CAAC,CAAA;YACtI,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;YACrC,IAAI,MAAM,GAAG,CAAC,CAAA;YACd,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAA;gBAC5E,IAAI,CAAC,MAAM,CAAC,SAAS;oBAAE,MAAK;gBAC5B,MAAM,IAAI,MAAM,CAAC,SAAS,CAAA;YAC5B,CAAC;YACD,IAAI,MAAM,GAAG,KAAK;gBAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,qBAAqB,EAAE,wCAAwC,CAAC,CAAA;YACjH,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YAC7C,MAAM,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;YAChD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YAC/B,OAAO,EAAE,GAAG,EAAE,QAAQ,IAAI,WAAW,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAA;QACvF,CAAC;gBAAS,CAAC;YAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IAClC,CAAC;CACF"}

package/data/build/dist/host/modules/quick-apps/errors.d.ts

@@ -0,0 +1,8 @@
+import { CodingNsRpcError } from '../../rpc-table.js';
+export declare class QuickAppError extends CodingNsRpcError {
+    readonly status: number;
+    constructor(status: number, code: string, message: string);
+}
+export declare function deny(message?: string): never;
+export declare function conflict(): never;
+//# sourceMappingURL=errors.d.ts.map

package/data/build/dist/host/modules/quick-apps/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAErD,qBAAa,aAAc,SAAQ,gBAAgB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CACnE;AAED,wBAAgB,IAAI,CAAC,OAAO,SAAqD,GAAG,KAAK,CAExF;AAED,wBAAgB,QAAQ,IAAI,KAAK,CAEhC"}

package/data/build/dist/host/modules/quick-apps/errors.js

@@ -0,0 +1,15 @@
+import { CodingNsRpcError } from '../../rpc-table.js';
+export class QuickAppError extends CodingNsRpcError {
+    status;
+    constructor(status, code, message) {
+        super(code, message);
+        this.status = status;
+    }
+}
+export function deny(message = 'The requested path or operation is not approved.') {
+    throw new QuickAppError(403, 'QUICK_APP_ACCESS_DENIED', message);
+}
+export function conflict() {
+    throw new QuickAppError(412, 'QUICK_APP_CONFLICT', 'The file or shortcut changed. Reload it before retrying.');
+}
+//# sourceMappingURL=errors.js.map

package/data/build/dist/host/modules/quick-apps/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAErD,MAAM,OAAO,aAAc,SAAQ,gBAAgB;IAC5B;IAArB,YAAqB,MAAc,EAAE,IAAY,EAAE,OAAe;QAAI,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAArE,WAAM,GAAN,MAAM,CAAQ;IAAwD,CAAC;CAC7F;AAED,MAAM,UAAU,IAAI,CAAC,OAAO,GAAG,kDAAkD;IAC/E,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,0DAA0D,CAAC,CAAA;AAChH,CAAC"}

package/data/build/dist/host/modules/quick-apps/file-api.d.ts

@@ -0,0 +1,30 @@
+import type { QuickAppLaunch, QuickAppLaunches } from './launches.js';
+export declare function readVersionedText(path: string): Promise<{
+    content: string;
+    version: string;
+}>;
+export declare function tooLarge(): never;
+/** Global physical-file ordering with per-service pending work for lifecycle cleanup. */
+export declare class QuickAppFileApi {
+    private readonly launches;
+    private readonly mutations;
+    constructor(launches: QuickAppLaunches);
+    private target;
+    read(launch: QuickAppLaunch, path: string): Promise<{
+        content: string;
+        version: string;
+    }>;
+    list(launch: QuickAppLaunch, path: string): Promise<{
+        items: readonly {
+            name: string;
+            kind: string;
+        }[];
+    }>;
+    mutate(launch: QuickAppLaunch, method: 'PUT' | 'DELETE', path: string, content: string, ifMatch?: string, ifNoneMatch?: string, signal?: AbortSignal): Promise<{
+        ok: true;
+        version?: string;
+    }>;
+    drain(): Promise<void>;
+    get pending(): number;
+}
+//# sourceMappingURL=file-api.d.ts.map

package/data/build/dist/host/modules/quick-apps/file-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-api.d.ts","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/file-api.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAMrE,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAqBnG;AAED,wBAAgB,QAAQ,IAAI,KAAK,CAAoF;AAErH,yFAAyF;AACzF,qBAAa,eAAe;IAEd,OAAO,CAAC,QAAQ,CAAC,QAAQ;IADrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8B;gBAC3B,QAAQ,EAAE,gBAAgB;YAEzC,MAAM;IAQd,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAKzF,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,SAAS;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,CAAC;IAUzG,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAgD9L,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAC5B,IAAI,OAAO,IAAI,MAAM,CAA+B;CACrD"}

package/data/build/dist/host/modules/quick-apps/file-api.js

@@ -0,0 +1,149 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { constants } from 'node:fs';
+import { link, open, opendir, rename, stat, unlink } from 'node:fs/promises';
+import { basename, dirname, join } from 'node:path';
+import { QUICK_APP_LIMITS } from '../../../shared/contracts/quick-apps.js';
+import { appPath, publicPath, resolveAppPath, withinScope } from './paths.js';
+import { conflict, deny, QuickAppError } from './errors.js';
+import { serializeWorkspaceMutation } from '../../workspace-file-mutations.js';
+export async function readVersionedText(path) {
+    const file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const info = await file.stat();
+        if (!info.isFile())
+            deny('Only regular text files are supported.');
+        if (info.size > QUICK_APP_LIMITS.textBytes)
+            tooLarge();
+        const bytes = Buffer.alloc(QUICK_APP_LIMITS.textBytes + 1);
+        let length = 0;
+        while (length < bytes.length) {
+            const read = await file.read(bytes, length, bytes.length - length, length);
+            if (!read.bytesRead)
+                break;
+            length += read.bytesRead;
+        }
+        if (length > QUICK_APP_LIMITS.textBytes)
+            tooLarge();
+        const after = await file.stat();
+        if (after.mtimeMs !== info.mtimeMs || after.ctimeMs !== info.ctimeMs || after.size !== info.size)
+            conflict();
+        let content;
+        try {
+            content = new TextDecoder('utf-8', { fatal: true }).decode(bytes.subarray(0, length));
+        }
+        catch {
+            deny('The file is not UTF-8 text.');
+        }
+        const version = `"${createHash('sha256').update(bytes.subarray(0, length)).update(`${info.ino}:${info.mtimeMs}:${info.ctimeMs}`).digest('hex')}"`;
+        return { content, version };
+    }
+    finally {
+        await file.close();
+    }
+}
+export function tooLarge() { throw new QuickAppError(413, 'QUICK_APP_TOO_LARGE', 'The text limit is 4 MiB.'); }
+/** Global physical-file ordering with per-service pending work for lifecycle cleanup. */
+export class QuickAppFileApi {
+    launches;
+    mutations = new Set();
+    constructor(launches) {
+        this.launches = launches;
+    }
+    async target(launch, operation, path, missing = false) {
+        await this.launches.validateWorkspace(launch);
+        await launch.validateCode?.();
+        this.launches.authorize(launch);
+        const normalized = appPath(path);
+        if (!publicPath(normalized) || !launch.permissions[operation].some(scope => withinScope(scope, normalized)))
+            deny();
+        return resolveAppPath(launch.workspaceRoot, normalized, missing);
+    }
+    async read(launch, path) {
+        const result = await readVersionedText(await this.target(launch, 'read', path));
+        this.launches.authorize(launch);
+        return result;
+    }
+    async list(launch, path) {
+        const directory = await opendir(await this.target(launch, 'read', path));
+        const items = [];
+        for await (const item of directory) {
+            this.launches.authorize(launch);
+            if (items.length >= 1000)
+                throw new QuickAppError(413, 'QUICK_APP_TOO_LARGE', 'Directory listing exceeds 1000 entries.');
+            if (!item.isSymbolicLink() && publicPath(item.name) && (item.isFile() || item.isDirectory()))
+                items.push({ name: item.name, kind: item.isFile() ? 'file' : 'directory' });
+        }
+        return { items };
+    }
+    async mutate(launch, method, path, content, ifMatch, ifNoneMatch, signal) {
+        if (Buffer.byteLength(content) > QUICK_APP_LIMITS.textBytes)
+            tooLarge();
+        const create = method === 'PUT' && ifNoneMatch === '*';
+        if ((create && ifMatch !== undefined) || (!create && (!ifMatch || ifMatch === '*' || ifNoneMatch !== undefined))) {
+            throw new QuickAppError(428, 'QUICK_APP_PRECONDITION_REQUIRED', 'Use the exact If-Match version, or If-None-Match: * to create a new file.');
+        }
+        const operation = method === 'DELETE' ? 'delete' : 'write';
+        const key = await this.target(launch, operation, path, create);
+        const next = serializeWorkspaceMutation(key, async () => {
+            signal?.throwIfAborted();
+            const target = await this.target(launch, operation, path, create);
+            if (target !== key)
+                deny();
+            if (!create && (await readVersionedText(target)).version !== ifMatch)
+                conflict();
+            if (method === 'DELETE') {
+                await this.target(launch, operation, path);
+                if ((await readVersionedText(target)).version !== ifMatch)
+                    conflict();
+                signal?.throwIfAborted();
+                this.launches.authorize(launch);
+                await unlink(target);
+                return { ok: true };
+            }
+            // Parent directories must already exist. Never recursively create through an unvalidated ancestor.
+            const temporary = join(dirname(target), `.${basename(target)}.quickapp-${randomUUID()}`);
+            const mode = create ? 0o600 : (await stat(target)).mode & 0o777;
+            const file = await open(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, mode);
+            try {
+                await file.writeFile(content, 'utf8');
+                await file.sync();
+                await file.close();
+                await this.target(launch, operation, path, create);
+                if (!create && (await readVersionedText(target)).version !== ifMatch)
+                    conflict();
+                signal?.throwIfAborted();
+                this.launches.authorize(launch);
+                if (create) {
+                    try {
+                        await link(temporary, target);
+                    }
+                    catch (error) {
+                        if (error.code === 'EEXIST')
+                            conflict();
+                        throw error;
+                    }
+                    // Removing the temporary hard link changes ctime. Return the version only after that cleanup.
+                    await unlink(temporary);
+                }
+                else
+                    await rename(temporary, target);
+                return { ok: true, version: (await readVersionedText(target)).version };
+            }
+            finally {
+                await file.close().catch(() => undefined);
+                await unlink(temporary).catch(error => { if (error.code !== 'ENOENT')
+                    throw error; });
+            }
+        });
+        this.mutations.add(next);
+        try {
+            return await next;
+        }
+        finally {
+            this.mutations.delete(next);
+        }
+    }
+    async drain() { await Promise.allSettled(this.mutations); }
+    get pending() { return this.mutations.size; }
+}
+//# sourceMappingURL=file-api.js.map

package/data/build/dist/host/modules/quick-apps/file-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-api.js","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/file-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAC5E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7E,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAA;AAE9E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IACxE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,wCAAwC,CAAC,CAAA;QAClE,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC,SAAS;YAAE,QAAQ,EAAE,CAAA;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;QAC1D,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAA;YAC1E,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,MAAK;YAC1B,MAAM,IAAI,IAAI,CAAC,SAAS,CAAA;QAC1B,CAAC;QACD,IAAI,MAAM,GAAG,gBAAgB,CAAC,SAAS;YAAE,QAAQ,EAAE,CAAA;QACnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC/B,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;YAAE,QAAQ,EAAE,CAAA;QAC5G,IAAI,OAAe,CAAA;QACnB,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;QAAC,CAAC;QAC3I,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAA;QACjJ,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;IAC7B,CAAC;YAAS,CAAC;QAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;IAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,QAAQ,KAAY,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,qBAAqB,EAAE,0BAA0B,CAAC,CAAA,CAAC,CAAC;AAErH,yFAAyF;AACzF,MAAM,OAAO,eAAe;IAEG;IADZ,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAA;IACxD,YAA6B,QAA0B;QAA1B,aAAQ,GAAR,QAAQ,CAAkB;IAAG,CAAC;IAEnD,KAAK,CAAC,MAAM,CAAC,MAAsB,EAAE,SAAsC,EAAE,IAAY,EAAE,OAAO,GAAG,KAAK;QAChH,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAC7C,MAAM,MAAM,CAAC,YAAY,EAAE,EAAE,CAAA;QAC7B,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAAE,IAAI,EAAE,CAAA;QACnH,OAAO,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAClE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAsB,EAAE,IAAY;QAC7C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;QAC/E,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC/B,OAAO,MAAM,CAAA;IACf,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAsB,EAAE,IAAY;QAC7C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;QACxE,MAAM,KAAK,GAAqC,EAAE,CAAA;QAClD,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YAC/B,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,qBAAqB,EAAE,yCAAyC,CAAC,CAAA;YACxH,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;QAC3K,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,CAAA;IAClB,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,MAAsB,EAAE,MAAwB,EAAE,IAAY,EAAE,OAAe,EAAE,OAAgB,EAAE,WAAoB,EAAE,MAAoB;QACxJ,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,gBAAgB,CAAC,SAAS;YAAE,QAAQ,EAAE,CAAA;QACvE,MAAM,MAAM,GAAG,MAAM,KAAK,KAAK,IAAI,WAAW,KAAK,GAAG,CAAA;QACtD,IAAI,CAAC,MAAM,IAAI,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,IAAI,WAAW,KAAK,SAAS,CAAC,CAAC,EAAE,CAAC;YACjH,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,iCAAiC,EAAE,2EAA2E,CAAC,CAAA;QAC9I,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAA;QAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAC9D,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,EAAE,cAAc,EAAE,CAAA;YACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;YACjE,IAAI,MAAM,KAAK,GAAG;gBAAE,IAAI,EAAE,CAAA;YAC1B,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO;gBAAE,QAAQ,EAAE,CAAA;YAChF,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;gBAC1C,IAAI,CAAC,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO;oBAAE,QAAQ,EAAE,CAAA;gBACrE,MAAM,EAAE,cAAc,EAAE,CAAA;gBACxB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;gBAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;gBACpB,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAA;YAC9B,CAAC;YACD,mGAAmG;YACnG,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,aAAa,UAAU,EAAE,EAAE,CAAC,CAAA;YACxF,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAA;YAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YAC1H,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBACrC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;gBACjB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;gBAClB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;gBAClD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO;oBAAE,QAAQ,EAAE,CAAA;gBAChF,MAAM,EAAE,cAAc,EAAE,CAAA;gBACxB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;gBAC/B,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC;wBAAC,MAAM,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;oBAAC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;4BAAE,QAAQ,EAAE,CAAC;wBAAC,MAAM,KAAK,CAAA;oBAAC,CAAC;oBACvI,8FAA8F;oBAC9F,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;gBACzB,CAAC;;oBACI,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;gBACpC,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,OAAO,EAAE,CAAC,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;YAClF,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBACzC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAA,CAAC,CAAC,CAAC,CAAA;YACjH,CAAC;QACH,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACxB,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;IACnE,CAAC;IACD,KAAK,CAAC,KAAK,KAAoB,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC;IACzE,IAAI,OAAO,KAAa,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAA,CAAC,CAAC;CACrD"}

package/data/build/dist/host/modules/quick-apps/launches.d.ts

@@ -0,0 +1,35 @@
+import type { QuickApp, QuickAppPermissions } from '../../../shared/contracts/quick-apps.js';
+import { type QuickAppRegistry } from './registry.js';
+export interface QuickAppLaunch {
+    readonly id: string;
+    readonly app: QuickApp;
+    readonly principal: string;
+    readonly workspaceRoot: string;
+    readonly workspaceReference: string;
+    permissions: QuickAppPermissions;
+    readonly expiresAt: number;
+    readonly credentialDigest: Buffer;
+    readonly abort: AbortController;
+    dispose: () => Promise<void>;
+    validateCode?: () => Promise<void>;
+}
+export declare class QuickAppLaunches {
+    private readonly registry;
+    private readonly now;
+    private readonly launches;
+    private stopped;
+    constructor(registry: QuickAppRegistry, now?: () => number);
+    create(app: QuickApp, principal: string, permissions: QuickAppPermissions): Promise<{
+        launch: QuickAppLaunch;
+        credential: string;
+    }>;
+    authorize(launch: QuickAppLaunch, credential?: string): void;
+    validateWorkspace(launch: QuickAppLaunch): Promise<void>;
+    requireOwner(id: string, principal: string): QuickAppLaunch;
+    revoke(id: string): Promise<void>;
+    revokeApp(id: string): Promise<void>;
+    prune(): Promise<void>;
+    dispose(): Promise<void>;
+    get size(): number;
+}
+//# sourceMappingURL=launches.d.ts.map

package/data/build/dist/host/modules/quick-apps/launches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launches.d.ts","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/launches.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAE5F,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAG5E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,WAAW,EAAE,mBAAmB,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CACnC;AAED,qBAAa,gBAAgB;IAGf,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAAoB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAF7E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,OAAO,CAAQ;gBACM,QAAQ,EAAE,gBAAgB,EAAmB,GAAG,eAAW;IAElF,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,cAAc,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAazI,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IActD,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9D,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,cAAc;IAKrD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOjC,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IACtB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAC9B,IAAI,IAAI,IAAI,MAAM,CAA8B;CACjD"}

package/data/build/dist/host/modules/quick-apps/launches.js

@@ -0,0 +1,80 @@
+import { createHash, randomBytes, randomUUID, timingSafeEqual } from 'node:crypto';
+import { realpath } from 'node:fs/promises';
+import { QUICK_APP_LIMITS } from '../../../shared/contracts/quick-apps.js';
+import { quickAppDefinitionKey } from './registry.js';
+import { deny, QuickAppError } from './errors.js';
+export class QuickAppLaunches {
+    registry;
+    now;
+    launches = new Map();
+    stopped = false;
+    constructor(registry, now = Date.now) {
+        this.registry = registry;
+        this.now = now;
+    }
+    async create(app, principal, permissions) {
+        const workspaceReference = this.registry.root(app);
+        const workspaceRoot = await realpath(workspaceReference);
+        await this.prune();
+        if (this.stopped)
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'Quick Apps is disabled.');
+        if (this.launches.size >= QUICK_APP_LIMITS.launches)
+            throw new QuickAppError(429, 'QUICK_APP_LIMIT', 'Too many active launches.');
+        const credential = randomBytes(32).toString('base64url');
+        const launch = { id: randomUUID(), app: structuredClone(app), principal, workspaceRoot, workspaceReference,
+            permissions: structuredClone(permissions), expiresAt: this.now() + QUICK_APP_LIMITS.lifetimeMs,
+            credentialDigest: digest(credential), abort: new AbortController(), dispose: async () => undefined };
+        this.launches.set(launch.id, launch);
+        return { launch, credential };
+    }
+    authorize(launch, credential) {
+        if (credential !== undefined && !timingSafeEqual(launch.credentialDigest, digest(credential)))
+            throw new QuickAppError(401, 'QUICK_APP_UNAUTHENTICATED', 'App authentication required.');
+        if (this.stopped || this.launches.get(launch.id) !== launch || launch.abort.signal.aborted)
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'This launch has been revoked.');
+        if (launch.expiresAt <= this.now()) {
+            void this.revoke(launch.id).catch(() => undefined);
+            throw new QuickAppError(410, 'QUICK_APP_LAUNCH_EXPIRED', 'This launch has expired.');
+        }
+        let current;
+        try {
+            current = this.registry.get(launch.app.id);
+            this.registry.root(current);
+        }
+        catch {
+            void this.revoke(launch.id).catch(() => undefined);
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'The shortcut was removed.');
+        }
+        if (quickAppDefinitionKey(current) !== quickAppDefinitionKey(launch.app) || this.registry.root(current) !== launch.workspaceReference) {
+            void this.revoke(launch.id).catch(() => undefined);
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'The shortcut or workspace changed.');
+        }
+    }
+    async validateWorkspace(launch) {
+        this.authorize(launch);
+        if (await realpath(launch.workspaceReference) !== launch.workspaceRoot) {
+            void this.revoke(launch.id).catch(() => undefined);
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'The workspace location changed.');
+        }
+    }
+    requireOwner(id, principal) {
+        const launch = this.launches.get(id);
+        if (!launch || launch.principal !== principal)
+            deny();
+        return launch;
+    }
+    async revoke(id) {
+        const launch = this.launches.get(id);
+        if (!launch)
+            return;
+        this.launches.delete(id);
+        launch.abort.abort();
+        await launch.dispose();
+    }
+    async revokeApp(id) { await Promise.all([...this.launches.values()].filter(launch => launch.app.id === id).map(launch => this.revoke(launch.id))); }
+    async prune() { await Promise.all([...this.launches.values()].filter(launch => launch.expiresAt <= this.now()).map(launch => this.revoke(launch.id))); }
+    async dispose() { this.stopped = true; await Promise.all([...this.launches.keys()].map(id => this.revoke(id))); }
+    get size() { return this.launches.size; }
+}
+function digest(value) { return createHash('sha256').update(value).digest(); }
+//# sourceMappingURL=launches.js.map

package/data/build/dist/host/modules/quick-apps/launches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launches.js","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/launches.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,EAAE,qBAAqB,EAAyB,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAgBjD,MAAM,OAAO,gBAAgB;IAGE;IAA6C;IAFzD,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAA;IACrD,OAAO,GAAG,KAAK,CAAA;IACvB,YAA6B,QAA0B,EAAmB,MAAM,IAAI,CAAC,GAAG;QAA3D,aAAQ,GAAR,QAAQ,CAAkB;QAAmB,QAAG,GAAH,GAAG,CAAW;IAAG,CAAC;IAE5F,KAAK,CAAC,MAAM,CAAC,GAAa,EAAE,SAAiB,EAAE,WAAgC;QAC7E,MAAM,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAClD,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAA;QACxD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAClB,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,yBAAyB,CAAC,CAAA;QAC9F,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,gBAAgB,CAAC,QAAQ;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,2BAA2B,CAAC,CAAA;QACjI,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACxD,MAAM,MAAM,GAAmB,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB;YACxH,WAAW,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,UAAU;YAC9F,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,eAAe,EAAE,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAA;QACtG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACpC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IAC/B,CAAC;IACD,SAAS,CAAC,MAAsB,EAAE,UAAmB;QACnD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAA;QACxL,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,+BAA+B,CAAC,CAAA;QAC9K,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,0BAA0B,EAAE,0BAA0B,CAAC,CAAA;QAAC,CAAC;QAChL,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YACrF,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,2BAA2B,CAAC,CAAA;QAChF,CAAC;QACD,IAAI,qBAAqB,CAAC,OAAO,CAAC,KAAK,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACtI,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,oCAAoC,CAAC,CAAA;QACzF,CAAC;IACH,CAAC;IACD,KAAK,CAAC,iBAAiB,CAAC,MAAsB;QAC5C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACtB,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YACvE,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,iCAAiC,CAAC,CAAA;QACtF,CAAC;IACH,CAAC;IACD,YAAY,CAAC,EAAU,EAAE,SAAiB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,EAAE,CAAA;QACrD,OAAO,MAAM,CAAA;IACf,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACxB,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;QACpB,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;IACxB,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,EAAU,IAAmB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IAC1K,KAAK,CAAC,KAAK,KAAoB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IACtK,KAAK,CAAC,OAAO,KAAoB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IAC/H,IAAI,IAAI,KAAa,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAA,CAAC,CAAC;CACjD;AAED,SAAS,MAAM,CAAC,KAAa,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAA,CAAC,CAAC"}

package/data/build/dist/host/modules/quick-apps/paths.d.ts

@@ -0,0 +1,14 @@
+/** Paths have one representation on every platform; no URL decoding in filesystem code. */
+export declare function appPath(value: unknown, allowRoot?: boolean): string;
+export declare function insidePath(root: string, path: string): boolean;
+export declare function withinScope(scope: string, path: string): boolean;
+export declare function publicPath(path: string): boolean;
+/** Reject all symlinks, including in-root aliases; this also keeps mutation queue keys unique. */
+export declare function resolveAppPath(workspace: string, path: string, allowMissingLeaf?: boolean): Promise<string>;
+/** Inspect the raw request target before WHATWG URL can erase traversal segments. */
+export declare function decodeResourceTarget(target: string): {
+    path: string;
+    query: string;
+    trailingSlash: boolean;
+};
+//# sourceMappingURL=paths.d.ts.map

package/data/build/dist/host/modules/quick-apps/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/paths.ts"],"names":[],"mappings":"AAIA,2FAA2F;AAC3F,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,UAAO,GAAG,MAAM,CAKhE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAG9D;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGhD;AAED,kGAAkG;AAClG,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,UAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAkB/G;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAU5G"}