@jingyi0605/codingns4dsh 0.2.1-beta.12 → 0.2.1-beta.14

package/data/build/dist/host/modules/quick-apps/file-api.d.ts

@@ -0,0 +1,30 @@
+import type { QuickAppLaunch, QuickAppLaunches } from './launches.js';
+export declare function readVersionedText(path: string): Promise<{
+    content: string;
+    version: string;
+}>;
+export declare function tooLarge(): never;
+/** Global physical-file ordering with per-service pending work for lifecycle cleanup. */
+export declare class QuickAppFileApi {
+    private readonly launches;
+    private readonly mutations;
+    constructor(launches: QuickAppLaunches);
+    private target;
+    read(launch: QuickAppLaunch, path: string): Promise<{
+        content: string;
+        version: string;
+    }>;
+    list(launch: QuickAppLaunch, path: string): Promise<{
+        items: readonly {
+            name: string;
+            kind: string;
+        }[];
+    }>;
+    mutate(launch: QuickAppLaunch, method: 'PUT' | 'DELETE', path: string, content: string, ifMatch?: string, ifNoneMatch?: string, signal?: AbortSignal): Promise<{
+        ok: true;
+        version?: string;
+    }>;
+    drain(): Promise<void>;
+    get pending(): number;
+}
+//# sourceMappingURL=file-api.d.ts.map

package/data/build/dist/host/modules/quick-apps/file-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-api.d.ts","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/file-api.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAMrE,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAqBnG;AAED,wBAAgB,QAAQ,IAAI,KAAK,CAAoF;AAErH,yFAAyF;AACzF,qBAAa,eAAe;IAEd,OAAO,CAAC,QAAQ,CAAC,QAAQ;IADrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8B;gBAC3B,QAAQ,EAAE,gBAAgB;YAEzC,MAAM;IAQd,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAKzF,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,SAAS;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,CAAC;IAUzG,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAgD9L,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAC5B,IAAI,OAAO,IAAI,MAAM,CAA+B;CACrD"}

package/data/build/dist/host/modules/quick-apps/file-api.js

@@ -0,0 +1,149 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { constants } from 'node:fs';
+import { link, open, opendir, rename, stat, unlink } from 'node:fs/promises';
+import { basename, dirname, join } from 'node:path';
+import { QUICK_APP_LIMITS } from '../../../shared/contracts/quick-apps.js';
+import { appPath, publicPath, resolveAppPath, withinScope } from './paths.js';
+import { conflict, deny, QuickAppError } from './errors.js';
+import { serializeWorkspaceMutation } from '../../workspace-file-mutations.js';
+export async function readVersionedText(path) {
+    const file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const info = await file.stat();
+        if (!info.isFile())
+            deny('Only regular text files are supported.');
+        if (info.size > QUICK_APP_LIMITS.textBytes)
+            tooLarge();
+        const bytes = Buffer.alloc(QUICK_APP_LIMITS.textBytes + 1);
+        let length = 0;
+        while (length < bytes.length) {
+            const read = await file.read(bytes, length, bytes.length - length, length);
+            if (!read.bytesRead)
+                break;
+            length += read.bytesRead;
+        }
+        if (length > QUICK_APP_LIMITS.textBytes)
+            tooLarge();
+        const after = await file.stat();
+        if (after.mtimeMs !== info.mtimeMs || after.ctimeMs !== info.ctimeMs || after.size !== info.size)
+            conflict();
+        let content;
+        try {
+            content = new TextDecoder('utf-8', { fatal: true }).decode(bytes.subarray(0, length));
+        }
+        catch {
+            deny('The file is not UTF-8 text.');
+        }
+        const version = `"${createHash('sha256').update(bytes.subarray(0, length)).update(`${info.ino}:${info.mtimeMs}:${info.ctimeMs}`).digest('hex')}"`;
+        return { content, version };
+    }
+    finally {
+        await file.close();
+    }
+}
+export function tooLarge() { throw new QuickAppError(413, 'QUICK_APP_TOO_LARGE', 'The text limit is 4 MiB.'); }
+/** Global physical-file ordering with per-service pending work for lifecycle cleanup. */
+export class QuickAppFileApi {
+    launches;
+    mutations = new Set();
+    constructor(launches) {
+        this.launches = launches;
+    }
+    async target(launch, operation, path, missing = false) {
+        await this.launches.validateWorkspace(launch);
+        await launch.validateCode?.();
+        this.launches.authorize(launch);
+        const normalized = appPath(path);
+        if (!publicPath(normalized) || !launch.permissions[operation].some(scope => withinScope(scope, normalized)))
+            deny();
+        return resolveAppPath(launch.workspaceRoot, normalized, missing);
+    }
+    async read(launch, path) {
+        const result = await readVersionedText(await this.target(launch, 'read', path));
+        this.launches.authorize(launch);
+        return result;
+    }
+    async list(launch, path) {
+        const directory = await opendir(await this.target(launch, 'read', path));
+        const items = [];
+        for await (const item of directory) {
+            this.launches.authorize(launch);
+            if (items.length >= 1000)
+                throw new QuickAppError(413, 'QUICK_APP_TOO_LARGE', 'Directory listing exceeds 1000 entries.');
+            if (!item.isSymbolicLink() && publicPath(item.name) && (item.isFile() || item.isDirectory()))
+                items.push({ name: item.name, kind: item.isFile() ? 'file' : 'directory' });
+        }
+        return { items };
+    }
+    async mutate(launch, method, path, content, ifMatch, ifNoneMatch, signal) {
+        if (Buffer.byteLength(content) > QUICK_APP_LIMITS.textBytes)
+            tooLarge();
+        const create = method === 'PUT' && ifNoneMatch === '*';
+        if ((create && ifMatch !== undefined) || (!create && (!ifMatch || ifMatch === '*' || ifNoneMatch !== undefined))) {
+            throw new QuickAppError(428, 'QUICK_APP_PRECONDITION_REQUIRED', 'Use the exact If-Match version, or If-None-Match: * to create a new file.');
+        }
+        const operation = method === 'DELETE' ? 'delete' : 'write';
+        const key = await this.target(launch, operation, path, create);
+        const next = serializeWorkspaceMutation(key, async () => {
+            signal?.throwIfAborted();
+            const target = await this.target(launch, operation, path, create);
+            if (target !== key)
+                deny();
+            if (!create && (await readVersionedText(target)).version !== ifMatch)
+                conflict();
+            if (method === 'DELETE') {
+                await this.target(launch, operation, path);
+                if ((await readVersionedText(target)).version !== ifMatch)
+                    conflict();
+                signal?.throwIfAborted();
+                this.launches.authorize(launch);
+                await unlink(target);
+                return { ok: true };
+            }
+            // Parent directories must already exist. Never recursively create through an unvalidated ancestor.
+            const temporary = join(dirname(target), `.${basename(target)}.quickapp-${randomUUID()}`);
+            const mode = create ? 0o600 : (await stat(target)).mode & 0o777;
+            const file = await open(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, mode);
+            try {
+                await file.writeFile(content, 'utf8');
+                await file.sync();
+                await file.close();
+                await this.target(launch, operation, path, create);
+                if (!create && (await readVersionedText(target)).version !== ifMatch)
+                    conflict();
+                signal?.throwIfAborted();
+                this.launches.authorize(launch);
+                if (create) {
+                    try {
+                        await link(temporary, target);
+                    }
+                    catch (error) {
+                        if (error.code === 'EEXIST')
+                            conflict();
+                        throw error;
+                    }
+                    // Removing the temporary hard link changes ctime. Return the version only after that cleanup.
+                    await unlink(temporary);
+                }
+                else
+                    await rename(temporary, target);
+                return { ok: true, version: (await readVersionedText(target)).version };
+            }
+            finally {
+                await file.close().catch(() => undefined);
+                await unlink(temporary).catch(error => { if (error.code !== 'ENOENT')
+                    throw error; });
+            }
+        });
+        this.mutations.add(next);
+        try {
+            return await next;
+        }
+        finally {
+            this.mutations.delete(next);
+        }
+    }
+    async drain() { await Promise.allSettled(this.mutations); }
+    get pending() { return this.mutations.size; }
+}
+//# sourceMappingURL=file-api.js.map

package/data/build/dist/host/modules/quick-apps/file-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-api.js","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/file-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAC5E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7E,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAA;AAE9E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IACxE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,wCAAwC,CAAC,CAAA;QAClE,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC,SAAS;YAAE,QAAQ,EAAE,CAAA;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;QAC1D,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAA;YAC1E,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,MAAK;YAC1B,MAAM,IAAI,IAAI,CAAC,SAAS,CAAA;QAC1B,CAAC;QACD,IAAI,MAAM,GAAG,gBAAgB,CAAC,SAAS;YAAE,QAAQ,EAAE,CAAA;QACnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC/B,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;YAAE,QAAQ,EAAE,CAAA;QAC5G,IAAI,OAAe,CAAA;QACnB,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;QAAC,CAAC;QAC3I,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAA;QACjJ,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;IAC7B,CAAC;YAAS,CAAC;QAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;IAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,QAAQ,KAAY,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,qBAAqB,EAAE,0BAA0B,CAAC,CAAA,CAAC,CAAC;AAErH,yFAAyF;AACzF,MAAM,OAAO,eAAe;IAEG;IADZ,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAA;IACxD,YAA6B,QAA0B;QAA1B,aAAQ,GAAR,QAAQ,CAAkB;IAAG,CAAC;IAEnD,KAAK,CAAC,MAAM,CAAC,MAAsB,EAAE,SAAsC,EAAE,IAAY,EAAE,OAAO,GAAG,KAAK;QAChH,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAC7C,MAAM,MAAM,CAAC,YAAY,EAAE,EAAE,CAAA;QAC7B,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAAE,IAAI,EAAE,CAAA;QACnH,OAAO,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAClE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAsB,EAAE,IAAY;QAC7C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;QAC/E,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC/B,OAAO,MAAM,CAAA;IACf,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAsB,EAAE,IAAY;QAC7C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;QACxE,MAAM,KAAK,GAAqC,EAAE,CAAA;QAClD,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YAC/B,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,qBAAqB,EAAE,yCAAyC,CAAC,CAAA;YACxH,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;QAC3K,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,CAAA;IAClB,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,MAAsB,EAAE,MAAwB,EAAE,IAAY,EAAE,OAAe,EAAE,OAAgB,EAAE,WAAoB,EAAE,MAAoB;QACxJ,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,gBAAgB,CAAC,SAAS;YAAE,QAAQ,EAAE,CAAA;QACvE,MAAM,MAAM,GAAG,MAAM,KAAK,KAAK,IAAI,WAAW,KAAK,GAAG,CAAA;QACtD,IAAI,CAAC,MAAM,IAAI,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,IAAI,WAAW,KAAK,SAAS,CAAC,CAAC,EAAE,CAAC;YACjH,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,iCAAiC,EAAE,2EAA2E,CAAC,CAAA;QAC9I,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAA;QAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAC9D,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,EAAE,cAAc,EAAE,CAAA;YACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;YACjE,IAAI,MAAM,KAAK,GAAG;gBAAE,IAAI,EAAE,CAAA;YAC1B,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO;gBAAE,QAAQ,EAAE,CAAA;YAChF,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;gBAC1C,IAAI,CAAC,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO;oBAAE,QAAQ,EAAE,CAAA;gBACrE,MAAM,EAAE,cAAc,EAAE,CAAA;gBACxB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;gBAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;gBACpB,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAA;YAC9B,CAAC;YACD,mGAAmG;YACnG,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,aAAa,UAAU,EAAE,EAAE,CAAC,CAAA;YACxF,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAA;YAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YAC1H,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBACrC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;gBACjB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;gBAClB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;gBAClD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO;oBAAE,QAAQ,EAAE,CAAA;gBAChF,MAAM,EAAE,cAAc,EAAE,CAAA;gBACxB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;gBAC/B,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC;wBAAC,MAAM,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;oBAAC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;4BAAE,QAAQ,EAAE,CAAC;wBAAC,MAAM,KAAK,CAAA;oBAAC,CAAC;oBACvI,8FAA8F;oBAC9F,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;gBACzB,CAAC;;oBACI,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;gBACpC,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,OAAO,EAAE,CAAC,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;YAClF,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBACzC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAA,CAAC,CAAC,CAAC,CAAA;YACjH,CAAC;QACH,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACxB,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;IACnE,CAAC;IACD,KAAK,CAAC,KAAK,KAAoB,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC;IACzE,IAAI,OAAO,KAAa,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAA,CAAC,CAAC;CACrD"}

package/data/build/dist/host/modules/quick-apps/launches.d.ts

@@ -0,0 +1,35 @@
+import type { QuickApp, QuickAppPermissions } from '../../../shared/contracts/quick-apps.js';
+import { type QuickAppRegistry } from './registry.js';
+export interface QuickAppLaunch {
+    readonly id: string;
+    readonly app: QuickApp;
+    readonly principal: string;
+    readonly workspaceRoot: string;
+    readonly workspaceReference: string;
+    permissions: QuickAppPermissions;
+    readonly expiresAt: number;
+    readonly credentialDigest: Buffer;
+    readonly abort: AbortController;
+    dispose: () => Promise<void>;
+    validateCode?: () => Promise<void>;
+}
+export declare class QuickAppLaunches {
+    private readonly registry;
+    private readonly now;
+    private readonly launches;
+    private stopped;
+    constructor(registry: QuickAppRegistry, now?: () => number);
+    create(app: QuickApp, principal: string, permissions: QuickAppPermissions): Promise<{
+        launch: QuickAppLaunch;
+        credential: string;
+    }>;
+    authorize(launch: QuickAppLaunch, credential?: string): void;
+    validateWorkspace(launch: QuickAppLaunch): Promise<void>;
+    requireOwner(id: string, principal: string): QuickAppLaunch;
+    revoke(id: string): Promise<void>;
+    revokeApp(id: string): Promise<void>;
+    prune(): Promise<void>;
+    dispose(): Promise<void>;
+    get size(): number;
+}
+//# sourceMappingURL=launches.d.ts.map

package/data/build/dist/host/modules/quick-apps/launches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launches.d.ts","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/launches.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAE5F,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAG5E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,WAAW,EAAE,mBAAmB,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CACnC;AAED,qBAAa,gBAAgB;IAGf,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAAoB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAF7E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,OAAO,CAAQ;gBACM,QAAQ,EAAE,gBAAgB,EAAmB,GAAG,eAAW;IAElF,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,cAAc,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAazI,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IActD,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9D,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,cAAc;IAKrD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOjC,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IACtB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAC9B,IAAI,IAAI,IAAI,MAAM,CAA8B;CACjD"}

package/data/build/dist/host/modules/quick-apps/launches.js

@@ -0,0 +1,80 @@
+import { createHash, randomBytes, randomUUID, timingSafeEqual } from 'node:crypto';
+import { realpath } from 'node:fs/promises';
+import { QUICK_APP_LIMITS } from '../../../shared/contracts/quick-apps.js';
+import { quickAppDefinitionKey } from './registry.js';
+import { deny, QuickAppError } from './errors.js';
+export class QuickAppLaunches {
+    registry;
+    now;
+    launches = new Map();
+    stopped = false;
+    constructor(registry, now = Date.now) {
+        this.registry = registry;
+        this.now = now;
+    }
+    async create(app, principal, permissions) {
+        const workspaceReference = this.registry.root(app);
+        const workspaceRoot = await realpath(workspaceReference);
+        await this.prune();
+        if (this.stopped)
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'Quick Apps is disabled.');
+        if (this.launches.size >= QUICK_APP_LIMITS.launches)
+            throw new QuickAppError(429, 'QUICK_APP_LIMIT', 'Too many active launches.');
+        const credential = randomBytes(32).toString('base64url');
+        const launch = { id: randomUUID(), app: structuredClone(app), principal, workspaceRoot, workspaceReference,
+            permissions: structuredClone(permissions), expiresAt: this.now() + QUICK_APP_LIMITS.lifetimeMs,
+            credentialDigest: digest(credential), abort: new AbortController(), dispose: async () => undefined };
+        this.launches.set(launch.id, launch);
+        return { launch, credential };
+    }
+    authorize(launch, credential) {
+        if (credential !== undefined && !timingSafeEqual(launch.credentialDigest, digest(credential)))
+            throw new QuickAppError(401, 'QUICK_APP_UNAUTHENTICATED', 'App authentication required.');
+        if (this.stopped || this.launches.get(launch.id) !== launch || launch.abort.signal.aborted)
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'This launch has been revoked.');
+        if (launch.expiresAt <= this.now()) {
+            void this.revoke(launch.id).catch(() => undefined);
+            throw new QuickAppError(410, 'QUICK_APP_LAUNCH_EXPIRED', 'This launch has expired.');
+        }
+        let current;
+        try {
+            current = this.registry.get(launch.app.id);
+            this.registry.root(current);
+        }
+        catch {
+            void this.revoke(launch.id).catch(() => undefined);
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'The shortcut was removed.');
+        }
+        if (quickAppDefinitionKey(current) !== quickAppDefinitionKey(launch.app) || this.registry.root(current) !== launch.workspaceReference) {
+            void this.revoke(launch.id).catch(() => undefined);
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'The shortcut or workspace changed.');
+        }
+    }
+    async validateWorkspace(launch) {
+        this.authorize(launch);
+        if (await realpath(launch.workspaceReference) !== launch.workspaceRoot) {
+            void this.revoke(launch.id).catch(() => undefined);
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'The workspace location changed.');
+        }
+    }
+    requireOwner(id, principal) {
+        const launch = this.launches.get(id);
+        if (!launch || launch.principal !== principal)
+            deny();
+        return launch;
+    }
+    async revoke(id) {
+        const launch = this.launches.get(id);
+        if (!launch)
+            return;
+        this.launches.delete(id);
+        launch.abort.abort();
+        await launch.dispose();
+    }
+    async revokeApp(id) { await Promise.all([...this.launches.values()].filter(launch => launch.app.id === id).map(launch => this.revoke(launch.id))); }
+    async prune() { await Promise.all([...this.launches.values()].filter(launch => launch.expiresAt <= this.now()).map(launch => this.revoke(launch.id))); }
+    async dispose() { this.stopped = true; await Promise.all([...this.launches.keys()].map(id => this.revoke(id))); }
+    get size() { return this.launches.size; }
+}
+function digest(value) { return createHash('sha256').update(value).digest(); }
+//# sourceMappingURL=launches.js.map

package/data/build/dist/host/modules/quick-apps/launches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launches.js","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/launches.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,EAAE,qBAAqB,EAAyB,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAgBjD,MAAM,OAAO,gBAAgB;IAGE;IAA6C;IAFzD,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAA;IACrD,OAAO,GAAG,KAAK,CAAA;IACvB,YAA6B,QAA0B,EAAmB,MAAM,IAAI,CAAC,GAAG;QAA3D,aAAQ,GAAR,QAAQ,CAAkB;QAAmB,QAAG,GAAH,GAAG,CAAW;IAAG,CAAC;IAE5F,KAAK,CAAC,MAAM,CAAC,GAAa,EAAE,SAAiB,EAAE,WAAgC;QAC7E,MAAM,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAClD,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAA;QACxD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAClB,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,yBAAyB,CAAC,CAAA;QAC9F,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,gBAAgB,CAAC,QAAQ;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,2BAA2B,CAAC,CAAA;QACjI,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACxD,MAAM,MAAM,GAAmB,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB;YACxH,WAAW,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,UAAU;YAC9F,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,eAAe,EAAE,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAA;QACtG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACpC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IAC/B,CAAC;IACD,SAAS,CAAC,MAAsB,EAAE,UAAmB;QACnD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAA;QACxL,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,+BAA+B,CAAC,CAAA;QAC9K,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,0BAA0B,EAAE,0BAA0B,CAAC,CAAA;QAAC,CAAC;QAChL,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YACrF,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,2BAA2B,CAAC,CAAA;QAChF,CAAC;QACD,IAAI,qBAAqB,CAAC,OAAO,CAAC,KAAK,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACtI,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,oCAAoC,CAAC,CAAA;QACzF,CAAC;IACH,CAAC;IACD,KAAK,CAAC,iBAAiB,CAAC,MAAsB;QAC5C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACtB,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YACvE,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,iCAAiC,CAAC,CAAA;QACtF,CAAC;IACH,CAAC;IACD,YAAY,CAAC,EAAU,EAAE,SAAiB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,EAAE,CAAA;QACrD,OAAO,MAAM,CAAA;IACf,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACxB,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;QACpB,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;IACxB,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,EAAU,IAAmB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IAC1K,KAAK,CAAC,KAAK,KAAoB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IACtK,KAAK,CAAC,OAAO,KAAoB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IAC/H,IAAI,IAAI,KAAa,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAA,CAAC,CAAC;CACjD;AAED,SAAS,MAAM,CAAC,KAAa,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAA,CAAC,CAAC"}

package/data/build/dist/host/modules/quick-apps/paths.d.ts

@@ -0,0 +1,14 @@
+/** Paths have one representation on every platform; no URL decoding in filesystem code. */
+export declare function appPath(value: unknown, allowRoot?: boolean): string;
+export declare function insidePath(root: string, path: string): boolean;
+export declare function withinScope(scope: string, path: string): boolean;
+export declare function publicPath(path: string): boolean;
+/** Reject all symlinks, including in-root aliases; this also keeps mutation queue keys unique. */
+export declare function resolveAppPath(workspace: string, path: string, allowMissingLeaf?: boolean): Promise<string>;
+/** Inspect the raw request target before WHATWG URL can erase traversal segments. */
+export declare function decodeResourceTarget(target: string): {
+    path: string;
+    query: string;
+    trailingSlash: boolean;
+};
+//# sourceMappingURL=paths.d.ts.map

package/data/build/dist/host/modules/quick-apps/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/paths.ts"],"names":[],"mappings":"AAIA,2FAA2F;AAC3F,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,UAAO,GAAG,MAAM,CAKhE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAG9D;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGhD;AAED,kGAAkG;AAClG,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,UAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAkB/G;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAU5G"}

package/data/build/dist/host/modules/quick-apps/paths.js

@@ -0,0 +1,72 @@
+import { lstat, realpath } from 'node:fs/promises';
+import { isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { deny } from './errors.js';
+/** Paths have one representation on every platform; no URL decoding in filesystem code. */
+export function appPath(value, allowRoot = true) {
+    if (typeof value !== 'string' || value.length > 2048 || /[\\\x00-\x1f\x7f:%?#]/u.test(value))
+        deny('Invalid relative path.');
+    if (value === '.' || value === '') {
+        if (allowRoot)
+            return '';
+        deny();
+    }
+    if (value.startsWith('/') || value.endsWith('/') || value.split('/').some(part => part === '' || part === '.' || part === '..' || /[. ]$/u.test(part)))
+        deny('Invalid relative path.');
+    return value;
+}
+export function insidePath(root, path) {
+    const suffix = relative(root, path);
+    return suffix === '' || (!isAbsolute(suffix) && suffix !== '..' && !suffix.startsWith(`..${sep}`));
+}
+export function withinScope(scope, path) {
+    return scope === '' || path === scope || path.startsWith(`${scope}/`);
+}
+export function publicPath(path) {
+    return !path.split('/').some(part => part.startsWith('.') || /^(?:node_modules|id_rsa|id_ed25519)$/iu.test(part)
+        || /(?:\.(?:pem|key|p12|pfx)|(?:^|[-_.])(?:credentials|secrets?)(?:\.|$))/iu.test(part));
+}
+/** Reject all symlinks, including in-root aliases; this also keeps mutation queue keys unique. */
+export async function resolveAppPath(workspace, path, allowMissingLeaf = false) {
+    const root = await realpath(workspace);
+    const normalized = appPath(path);
+    let current = root;
+    const parts = normalized === '' ? [] : normalized.split('/');
+    for (let index = 0; index < parts.length; index++) {
+        current = join(current, parts[index]);
+        try {
+            const info = await lstat(current);
+            if (info.isSymbolicLink())
+                deny('Symbolic links are not served by Quick Apps.');
+            if (index < parts.length - 1 && !info.isDirectory())
+                deny();
+        }
+        catch (error) {
+            if (allowMissingLeaf && index === parts.length - 1 && error.code === 'ENOENT')
+                break;
+            throw error;
+        }
+    }
+    if (!insidePath(root, resolve(current)))
+        deny();
+    return current;
+}
+/** Inspect the raw request target before WHATWG URL can erase traversal segments. */
+export function decodeResourceTarget(target) {
+    if (!target.startsWith('/') || target.startsWith('//') || /[\\#\x00-\x20\x7f]/u.test(target))
+        deny('Invalid HTTP request target.');
+    const split = target.indexOf('?');
+    const raw = split < 0 ? target : target.slice(0, split);
+    const query = split < 0 ? '' : target.slice(split);
+    if (/%(?:2f|5c|25)/iu.test(raw))
+        deny('Ambiguous URL encoding.');
+    let decoded;
+    try {
+        decoded = decodeURIComponent(raw);
+    }
+    catch {
+        deny('Malformed URL encoding.');
+    }
+    const trailingSlash = decoded.endsWith('/');
+    return { path: appPath(decoded.slice(1, trailingSlash ? -1 : undefined)), query, trailingSlash };
+}
+//# sourceMappingURL=paths.js.map

package/data/build/dist/host/modules/quick-apps/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAElC,2FAA2F;AAC3F,MAAM,UAAU,OAAO,CAAC,KAAc,EAAE,SAAS,GAAG,IAAI;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA;IAC5H,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAAC,IAAI,SAAS;YAAE,OAAO,EAAE,CAAC;QAAC,IAAI,EAAE,CAAA;IAAC,CAAC;IACvE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA;IACtL,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACnC,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAA;AACpG,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,IAAY;IACrD,OAAO,KAAK,KAAK,EAAE,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;AACvE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC;WAC3G,yEAAyE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5F,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,IAAY,EAAE,gBAAgB,GAAG,KAAK;IAC5F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,OAAO,GAAG,IAAI,CAAA;IAClB,MAAM,KAAK,GAAG,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAE,CAAC,CAAA;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;YACjC,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,IAAI,CAAC,8CAA8C,CAAC,CAAA;YAC/E,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,IAAI,EAAE,CAAA;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,gBAAgB,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAK;YAC/G,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAAE,IAAI,EAAE,CAAA;IAC/C,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAClI,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACvD,MAAM,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAClD,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,yBAAyB,CAAC,CAAA;IAChE,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QAAC,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;IAAC,CAAC;IACnF,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC3C,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAA;AAClG,CAAC"}

package/data/build/dist/host/modules/quick-apps/registry.d.ts

@@ -0,0 +1,30 @@
+import type { QuickApp, QuickAppAvailability, QuickAppPermissions } from '../../../shared/contracts/quick-apps.js';
+export interface QuickAppStorage {
+    read(): readonly QuickApp[];
+    write(apps: readonly QuickApp[]): Promise<void>;
+}
+export declare class QuickAppRegistry {
+    readonly storage: QuickAppStorage;
+    readonly workspaceRoot: (id: string) => string | null;
+    readonly hostId: string;
+    private readonly remoteValidate?;
+    private pending;
+    private stopped;
+    constructor(storage: QuickAppStorage, workspaceRoot: (id: string) => string | null, hostId?: string, remoteValidate?: ((app: QuickApp) => Promise<void>) | undefined);
+    list(): readonly QuickApp[];
+    get(id: string): QuickApp;
+    root(app: QuickApp): string;
+    validate(app: QuickApp): Promise<void>;
+    availability(app: QuickApp, htmlAvailable: boolean): Promise<QuickAppAvailability>;
+    upsert(input: unknown, expectedRevision: number): Promise<QuickApp>;
+    remove(id: string, expectedRevision: number): Promise<void>;
+    reorder(input: unknown): Promise<readonly QuickApp[]>;
+    revokeWorkspaceAccess(id: string, expectedRevision: number): Promise<QuickApp>;
+    dispose(): Promise<void>;
+    private serialize;
+}
+/** Ordering revisions protect metadata writes without changing launch files or permissions. */
+export declare function quickAppDefinitionKey(app: QuickApp): string;
+export declare function parseDefinition(input: unknown): Omit<QuickApp, 'revision'>;
+export declare function parsePermissions(value: unknown): QuickAppPermissions;
+//# sourceMappingURL=registry.d.ts.map

package/data/build/dist/host/modules/quick-apps/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/registry.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAKlH,MAAM,WAAW,eAAe;IAC9B,IAAI,IAAI,SAAS,QAAQ,EAAE,CAAA;IAC3B,KAAK,CAAC,IAAI,EAAE,SAAS,QAAQ,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAChD;AAED,qBAAa,gBAAgB;IAGf,QAAQ,CAAC,OAAO,EAAE,eAAe;IAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI;IAAE,QAAQ,CAAC,MAAM;IACnH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAHlC,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,OAAO,CAAQ;gBACF,OAAO,EAAE,eAAe,EAAW,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,EAAW,MAAM,SAAU,EAC5G,cAAc,CAAC,GAAE,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,aAAA;IAEpE,IAAI,IAAI,SAAS,QAAQ,EAAE;IAC3B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ;IAKzB,IAAI,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM;IAMrB,QAAQ,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAQtC,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAMxF,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAanE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3D,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,QAAQ,EAAE,CAAC;IAoBrD,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAYxE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAC9B,OAAO,CAAC,SAAS;CAQlB;AAED,+FAA+F;AAC/F,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,CAG3D;AAOD,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAqB1E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAQpE"}