@jungjaehoon/mama-os 0.78.0 → 0.79.1

package/dist/cli/runtime/setup-page.js

@@ -0,0 +1,266 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultOpenRun = exports.SETUP_PAGE_MS = void 0;
+exports.openSetupPage = openSetupPage;
+const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_http_1 = require("node:http");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const node_url_1 = require("node:url");
+const viewer_request_security_js_1 = require("../../api/viewer-request-security.js");
+const prompt_js_1 = require("../prompt.js");
+/**
+ * The setup page (install.md, W2.4.5b): a page on this machine, served by the running command,
+ * where the person enters what must not pass through the conversation or a command line, one
+ * named field after another. It listens on 127.0.0.1 at a path of 32 random bytes. Loopback is
+ * shared by every account on the machine and `ps` shows every process's arguments, so the URL
+ * goes only into a redirect file this account alone can read, which the browser opens: it is
+ * never printed and never an argument.
+ */
+/** As long as /bind's wait (telegram-pairing.ts) and Codex's device code. */
+exports.SETUP_PAGE_MS = 15 * 60_000;
+/** One form holds one field; the page reads a body into memory, and a larger one is not a form. */
+const BODY_LIMIT = 16 * 1024;
+const defaultOpenRun = (command, args) => new Promise((resolve, reject) => {
+    const child = (0, node_child_process_1.spawn)(command, args, { stdio: 'ignore' });
+    child.once('error', reject);
+    child.once('spawn', () => {
+        // A browser left running does not keep setup from exiting.
+        child.unref();
+        resolve({
+            exit: new Promise((exited) => child.once('exit', (status) => exited(status ?? 1))),
+        });
+    });
+});
+exports.defaultOpenRun = defaultOpenRun;
+/** HH:MM on this machine's clock, as the person reads it. */
+function clock(ms) {
+    return new Date(ms).toTimeString().slice(0, 5);
+}
+function escape(text) {
+    return text.replace(/[&<>"']/g, (character) => `&#${character.charCodeAt(0)};`);
+}
+/** The whole page, with nothing loaded from anywhere else. */
+function html(body) {
+    return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>MAMA setup</title>
+<style>
+body { font: 16px/1.5 system-ui, sans-serif; max-width: 34rem; margin: 3rem auto; padding: 0 1rem; color: #1f1f1f; background: #fff; }
+input { font: inherit; width: 100%; box-sizing: border-box; padding: 0.5rem; margin: 0.25rem 0 0.75rem; }
+button { font: inherit; padding: 0.5rem 1rem; }
+.refused { color: #a40000; }
+</style>
+</head>
+<body>
+<h1>MAMA setup</h1>
+${body}
+</body>
+</html>
+`;
+}
+/**
+ * The body as text; `too long` past BODY_LIMIT, whose body is read through and dropped; `gone`
+ * when the client went away before sending all of it, which leaves the page as it was.
+ */
+function readBody(req) {
+    return new Promise((resolve) => {
+        const chunks = [];
+        let size = 0;
+        req.on('data', (chunk) => {
+            size += chunk.length;
+            if (size <= BODY_LIMIT)
+                chunks.push(chunk);
+        });
+        req.on('end', () => resolve(size > BODY_LIMIT ? 'too long' : Buffer.concat(chunks).toString('utf8')));
+        req.on('error', () => resolve('gone'));
+        req.on('close', () => {
+            if (!req.complete)
+                resolve('gone');
+        });
+    });
+}
+/**
+ * Serve the page for `fields`, in order, and open it in the browser. Each field is taken once its
+ * check accepts it; after the last, the page shows what that check said and stops.
+ */
+async function openSetupPage(options) {
+    const { fields, write } = options;
+    const nonce = (0, node_crypto_1.randomBytes)(32).toString('base64url');
+    const path = Buffer.from(`/${nonce}`);
+    const lifetimeMs = options.lifetimeMs ?? exports.SETUP_PAGE_MS;
+    const deadline = Date.now() + lifetimeMs;
+    const until = clock(deadline);
+    let index = 0;
+    /** What the page said when the last field was taken, shown above the next one. */
+    let notice;
+    let checking = false;
+    let closed = false;
+    let folder;
+    const sockets = new Set();
+    /** Connections whose request reached a check: their answer comes once the check settles. */
+    const answering = new Set();
+    let stop;
+    const stopped = new Promise((_resolve, reject) => {
+        stop = reject;
+    });
+    // The caller awaits it while it waits on the page; once nothing does, a stop is no unhandled
+    // rejection.
+    stopped.catch(() => { });
+    const close = () => {
+        if (closed)
+            return;
+        closed = true;
+        clearTimeout(timer);
+        server.close();
+        // Any other connection goes now, a half-sent request included: server.close() would wait
+        // for it, and setup would never exit.
+        for (const socket of sockets)
+            if (!answering.has(socket))
+                socket.destroy();
+        if (folder !== undefined)
+            (0, node_fs_1.rmSync)(folder, { recursive: true, force: true });
+        write('setup page closed');
+    };
+    const form = (field, said, refusal) => html([
+        said === undefined ? '' : `<p>${escape(said)}</p>`,
+        refusal === undefined ? '' : `<p class="refused" role="alert">${escape(refusal)}</p>`,
+        '<form method="post" autocomplete="off">',
+        `<label for="${escape(field.name)}">${escape(field.label)}</label>`,
+        `<input id="${escape(field.name)}" name="${escape(field.name)}" type="text" autocomplete="off" required autofocus${field.secret ? ' spellcheck="false" autocorrect="off" autocapitalize="off"' : ''}>`,
+        '<button type="submit">Continue</button>',
+        '</form>',
+        `<p>This page closes at ${until}.</p>`,
+    ]
+        .filter(Boolean)
+        .join('\n'));
+    const send = (res, status, body, headers = {}) => {
+        res.writeHead(status, {
+            'Content-Type': 'text/html; charset=utf-8',
+            // The browser keeps no copy once the server stops, and tells no other host the URL.
+            'Cache-Control': 'no-store',
+            'Referrer-Policy': 'no-referrer',
+            Connection: 'close',
+            ...headers,
+        });
+        res.end(body);
+    };
+    const handle = async (req, res) => {
+        // A rebinding site sends its own name; an SSH forward on another local port still works.
+        if (!(0, viewer_request_security_js_1.isAllowedHost)(req))
+            return send(res, 421, html('<p>This page answers only at 127.0.0.1 or localhost.</p>'));
+        // The nonce is what keeps other accounts on this machine out, so it is compared in constant
+        // time. A GET with a query is another path: nothing entered in a URL is taken.
+        const requested = Buffer.from(req.url ?? '');
+        if (closed || requested.length !== path.length || !(0, node_crypto_1.timingSafeEqual)(requested, path))
+            return send(res, 404, html('<p>Not found.</p>'));
+        const field = fields[index];
+        if (req.method === 'GET')
+            return send(res, 200, form(field, notice));
+        if (req.method !== 'POST')
+            return send(res, 405, html('<p>Not allowed.</p>'), { Allow: 'GET, POST' });
+        // A check can take seconds (the pairing code's answer waits for the bot's poll); a second
+        // submission meanwhile would answer a question nobody asks.
+        if (checking)
+            return send(res, 409, form(field, notice, 'The last entry is still being checked; wait for its answer.'));
+        checking = true;
+        try {
+            const body = await readBody(req);
+            if (body === 'gone')
+                return;
+            if (body === 'too long')
+                return send(res, 413, form(field, notice, 'That entry is too long for this page.'));
+            answering.add(req.socket);
+            res.once('close', () => answering.delete(req.socket));
+            let said;
+            try {
+                said = await field.check(new URLSearchParams(body).get(field.name) ?? '');
+            }
+            catch (error) {
+                if (!(error instanceof prompt_js_1.CliInputError))
+                    throw error;
+                // The setup stopped while this entry was checked: its sentence, and no form to send again.
+                if (closed)
+                    return send(res, 200, html(`<p>${escape(error.message)}</p><p>This page has closed.</p>`));
+                return send(res, 200, form(field, notice, error.message));
+            }
+            if (closed)
+                return send(res, 200, html(`<p>${escape(said)}</p><p>This page has closed.</p>`));
+            index += 1;
+            notice = said;
+            if (index < fields.length)
+                return send(res, 200, form(fields[index], said));
+            // One value per field, then the page stops: a later submission cannot change one.
+            send(res, 200, html(`<p>${escape(said)}</p>`));
+            close();
+        }
+        finally {
+            checking = false;
+        }
+    };
+    const server = (0, node_http_1.createServer)((req, res) => {
+        handle(req, res).catch((error) => {
+            if (!res.headersSent)
+                send(res, 500, html("<p>Setup stopped; the command's output says why.</p>"));
+            close();
+            stop(error);
+        });
+    });
+    server.on('connection', (socket) => {
+        sockets.add(socket);
+        socket.once('close', () => sockets.delete(socket));
+    });
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => {
+            server.off('error', reject);
+            resolve();
+        });
+    }).catch((error) => {
+        throw new prompt_js_1.CliInputError(`The setup page could not listen on 127.0.0.1 (${error.code ?? error.message}); a sandbox may forbid it. Let this command listen on localhost, or run it outside the sandbox.`);
+    });
+    const url = `http://127.0.0.1:${server.address().port}/${nonce}`;
+    let file;
+    try {
+        // mkdtemp makes the folder 0700 for this account; the file is 0600 in it.
+        folder = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'mama-setup-'));
+        file = (0, node_path_1.join)(folder, 'open.html');
+        (0, node_fs_1.writeFileSync)(file, `<!doctype html>\n<meta charset="utf-8">\n<meta name="referrer" content="no-referrer">\n<meta http-equiv="refresh" content="0;url=${url}">\n<title>MAMA setup</title>\n<p><a href="${url}">Open the MAMA setup page</a></p>\n`, { flag: 'wx', mode: 0o600 });
+    }
+    catch (error) {
+        server.close();
+        if (folder !== undefined)
+            (0, node_fs_1.rmSync)(folder, { recursive: true, force: true });
+        throw error;
+    }
+    // A forgotten setup does not keep a page that takes a secret. Nothing calls close() before this
+    // line runs: a request is handled only once this function awaits the opener.
+    const timer = setTimeout(() => {
+        close();
+        stop(new prompt_js_1.CliInputError(`the setup page expired at ${until}; nothing was written`));
+    }, lifetimeMs);
+    const command = options.platform === 'darwin' ? 'open' : 'xdg-open';
+    // The file's path holds no secret: it is the way in when no browser opened.
+    const wayIn = `open ${(0, node_url_1.pathToFileURL)(file).href} in the browser; it closes at ${until}`;
+    try {
+        const { exit } = await (options.openRun ?? exports.defaultOpenRun)(command, [file]);
+        write(`setup page: opened in the browser from ${file}; it closes at ${until}`);
+        void exit.then((status) => {
+            if (status !== 0 && !closed)
+                write(`setup page: ${command} exited ${status}, so the browser may not have opened; ${wayIn}`);
+        });
+    }
+    catch (error) {
+        const failure = error.code === 'ENOENT'
+            ? `${command} is not installed`
+            : `${command} failed: ${error.message}`;
+        write(`setup page: the browser did not open (${failure}); ${wayIn}`);
+    }
+    return { stopped, close };
+}
+//# sourceMappingURL=setup-page.js.map

package/dist/cli/runtime/setup-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-page.js","sourceRoot":"","sources":["../../../src/cli/runtime/setup-page.ts"],"names":[],"mappings":";;;AAoIA,sCAoMC;AAxUD,2DAA2C;AAC3C,6CAA2D;AAC3D,qCAA6D;AAC7D,yCAAoF;AAEpF,qCAAiC;AACjC,yCAAiC;AACjC,uCAAyC;AACzC,qFAAqE;AACrE,4CAA6C;AAE7C;;;;;;;GAOG;AAEH,6EAA6E;AAChE,QAAA,aAAa,GAAG,EAAE,GAAG,MAAM,CAAC;AAEzC,mGAAmG;AACnG,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC;AA2BtB,MAAM,cAAc,GAAY,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CACvD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;QACvB,2DAA2D;QAC3D,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,CAAC;YACN,IAAI,EAAE,IAAI,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;SACnF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAXQ,QAAA,cAAc,kBAWtB;AAYL,6DAA6D;AAC7D,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAClF,CAAC;AAED,8DAA8D;AAC9D,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO;;;;;;;;;;;;;;;EAeP,IAAI;;;CAGL,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,GAAoB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,IAAI,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CACjB,OAAO,CAAC,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CACjF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACvC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,IAAI,CAAC,GAAG,CAAC,QAAQ;gBAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,aAAa,CAAC,OAMnC;IACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAClC,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,qBAAa,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,kFAAkF;IAClF,IAAI,MAA0B,CAAC;IAC/B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,MAA0B,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,4FAA4F;IAC5F,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,IAA+B,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtD,IAAI,GAAG,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,6FAA6F;IAC7F,aAAa;IACb,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAExB,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,yFAAyF;QACzF,sCAAsC;QACtC,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAC3E,IAAI,MAAM,KAAK,SAAS;YAAE,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC7B,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,KAAiB,EAAE,IAAwB,EAAE,OAAgB,EAAE,EAAE,CAC7E,IAAI,CACF;QACE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM;QAClD,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,mCAAmC,MAAM,CAAC,OAAO,CAAC,MAAM;QACrF,yCAAyC;QACzC,eAAe,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU;QACnE,cAAc,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,sDAAsD,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC,EAAE,GAAG;QACtM,yCAAyC;QACzC,SAAS;QACT,0BAA0B,KAAK,OAAO;KACvC;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;IAEJ,MAAM,IAAI,GAAG,CACX,GAAmB,EACnB,MAAc,EACd,IAAY,EACZ,UAAkC,EAAE,EACpC,EAAE;QACF,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;YACpB,cAAc,EAAE,0BAA0B;YAC1C,oFAAoF;YACpF,eAAe,EAAE,UAAU;YAC3B,iBAAiB,EAAE,aAAa;YAChC,UAAU,EAAE,OAAO;YACnB,GAAG,OAAO;SACX,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACjE,yFAAyF;QACzF,IAAI,CAAC,IAAA,0CAAa,EAAC,GAAG,CAAC;YACrB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,0DAA0D,CAAC,CAAC,CAAC;QAC1F,4FAA4F;QAC5F,+EAA+E;QAC/E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,MAAM,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,IAAA,6BAAe,EAAC,SAAS,EAAE,IAAI,CAAC;YACjF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACrE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YACvB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,qBAAqB,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAC7E,0FAA0F;QAC1F,4DAA4D;QAC5D,IAAI,QAAQ;YACV,OAAO,IAAI,CACT,GAAG,EACH,GAAG,EACH,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,6DAA6D,CAAC,CACnF,CAAC;QACJ,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,IAAI,KAAK,MAAM;gBAAE,OAAO;YAC5B,IAAI,IAAI,KAAK,UAAU;gBACrB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,uCAAuC,CAAC,CAAC,CAAC;YACtF,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YACtD,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,yBAAa,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACnD,2FAA2F;gBAC3F,IAAI,MAAM;oBACR,OAAO,IAAI,CACT,GAAG,EACH,GAAG,EACH,IAAI,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,kCAAkC,CAAC,CACpE,CAAC;gBACJ,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,MAAM;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,CAAC;YAC9F,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAE,EAAE,IAAI,CAAC,CAAC,CAAC;YAC7E,kFAAkF;YAClF,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/C,KAAK,EAAE,CAAC;QACV,CAAC;gBAAS,CAAC;YACT,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAA,wBAAY,EAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxC,IAAI,CAAC,GAAG,CAAC,WAAW;gBAClB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,sDAAsD,CAAC,CAAC,CAAC;YAC/E,KAAK,EAAE,CAAC;YACR,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;QACjC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QACxC,MAAM,IAAI,yBAAa,CACrB,iDAAiD,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,kGAAkG,CAC/K,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,oBAAqB,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;IAClF,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,0EAA0E;QAC1E,MAAM,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,aAAa,CAAC,CAAC,CAAC;QACpD,IAAI,GAAG,IAAA,gBAAI,EAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACjC,IAAA,uBAAa,EACX,IAAI,EACJ,oIAAoI,GAAG,8CAA8C,GAAG,sCAAsC,EAC9N,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAC5B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,KAAK,SAAS;YAAE,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,KAAK,CAAC;IACd,CAAC;IACD,gGAAgG;IAChG,6EAA6E;IAC7E,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,IAAI,yBAAa,CAAC,6BAA6B,KAAK,uBAAuB,CAAC,CAAC,CAAC;IACrF,CAAC,EAAE,UAAU,CAAC,CAAC;IAEf,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;IACpE,4EAA4E;IAC5E,MAAM,KAAK,GAAG,QAAQ,IAAA,wBAAa,EAAC,IAAI,CAAC,CAAC,IAAI,iCAAiC,KAAK,EAAE,CAAC;IACvF,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,sBAAc,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,KAAK,CAAC,0CAA0C,IAAI,kBAAkB,KAAK,EAAE,CAAC,CAAC;QAC/E,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACxB,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM;gBACzB,KAAK,CACH,eAAe,OAAO,WAAW,MAAM,yCAAyC,KAAK,EAAE,CACxF,CAAC;QACN,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GACV,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAChD,CAAC,CAAC,GAAG,OAAO,mBAAmB;YAC/B,CAAC,CAAC,GAAG,OAAO,YAAa,KAAe,CAAC,OAAO,EAAE,CAAC;QACvD,KAAK,CAAC,yCAAyC,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC"}

package/dist/cli/runtime/source-tools.d.ts

@@ -0,0 +1,60 @@
+import type { AuthRequirement, SourceTool } from '../../connectors/framework/types.js';
+/** What the service runs a source's tool with. */
+export interface ServiceSight {
+    /** The folders its PATH names, in order. */
+    readonly path: string[];
+    /** The Node start.sh runs; `null` when its exec line names none. */
+    readonly nodePath: string | null;
+    /** What start.sh exports after loading auth.env; none before start.sh is written. */
+    readonly exports: Record<string, string>;
+}
+/**
+ * start.sh's PATH and Node when it exists; before it does (a setup whose service step has not
+ * run), what `mama service install` will write from this shell.
+ */
+export declare function serviceSight(root: string, home: string, platform: NodeJS.Platform, planned: () => {
+    nodePath: string;
+    executablePaths: string[];
+}, toolDirectoryExists?: (path: string) => boolean): ServiceSight;
+export interface SourceToolReport {
+    readonly tool: SourceTool;
+    /** The sources being enabled that run it. */
+    readonly sources: string[];
+    /** Where the service finds it; `null` when its PATH does not. */
+    readonly servicePath: string | null;
+    /** Where this shell finds it when the service does not: `mama service install` adds its folder. */
+    readonly shellPath: string | null;
+    /** Commands that install it, each one way to do it; empty when the service or this shell has it. */
+    readonly install: string[];
+    /** The command, from this shell, that runs the tool the service will run, with its login. */
+    readonly login: string;
+}
+type Source = {
+    readonly name: string;
+    readonly needs: readonly AuthRequirement[];
+};
+/**
+ * `enabled` is every source that will run, `sources` among them: one login serves every source
+ * that runs the tool, so it names the scopes all of them need, and logging in for a new source
+ * does not narrow what an earlier one was granted.
+ */
+export declare function sourceTools(sources: readonly Source[], service: ServiceSight, install: {
+    readonly root: string;
+    readonly home: string;
+}, find: {
+    /** Where a service whose PATH is `dirs` finds `name`. */
+    inDirs(name: string, dirs: readonly string[]): string | undefined;
+    /** Where this shell finds `name`. */
+    shell(name: string): string | undefined;
+}, enabled?: readonly Source[]): SourceToolReport[];
+/**
+ * What `mama init` and `init --section connectors` print for each report: the tool's login, after
+ * what it needs first. A tool the service cannot find also gets how to install it, and `next`
+ * last: the service does not start while a source's tool is missing from its PATH (the source's
+ * start fails boot).
+ */
+export declare function sourceToolLines(reports: readonly SourceToolReport[], next: string, 
+/** The command that runs this install's `mama`. */
+mama: string): string[];
+export {};
+//# sourceMappingURL=source-tools.d.ts.map

package/dist/cli/runtime/source-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-tools.d.ts","sourceRoot":"","sources":["../../../src/cli/runtime/source-tools.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AAwBvF,kDAAkD;AAClD,MAAM,WAAW,YAAY;IAC3B,4CAA4C;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ,EACzB,OAAO,EAAE,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAA;CAAE,EAC9D,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GAC9C,YAAY,CA4Bd;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,mGAAmG;IACnG,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,oGAAoG;IACpG,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,6FAA6F;IAC7F,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAoBD,KAAK,MAAM,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAA;CAAE,CAAC;AAWpF;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACzD,IAAI,EAAE;IACJ,yDAAyD;IACzD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAClE,qCAAqC;IACrC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACzC,EACD,OAAO,GAAE,SAAS,MAAM,EAAY,GACnC,gBAAgB,EAAE,CAoDpB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,gBAAgB,EAAE,EACpC,IAAI,EAAE,MAAM;AACZ,mDAAmD;AACnD,IAAI,EAAE,MAAM,GACX,MAAM,EAAE,CAwBV"}

package/dist/cli/runtime/source-tools.js

@@ -0,0 +1,170 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serviceSight = serviceSight;
+exports.sourceTools = sourceTools;
+exports.sourceToolLines = sourceToolLines;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const gws_utils_js_1 = require("../../connectors/framework/gws-utils.js");
+const launch_files_js_1 = require("../launch-files.js");
+const prompt_js_1 = require("../prompt.js");
+const secrets_js_1 = require("../secrets.js");
+const node_move_journal_js_1 = require("./node-move-journal.js");
+/**
+ * The tools sources run (docs/development/work/install.md, PR 3, I4): a source names its tool
+ * with a `type: 'cli'` requirement, and this says, for the sources being enabled, which of those
+ * tools the service cannot find, how to install each and how to log in. It reports; the caller
+ * decides: `init --section connectors` refuses a source whose tool the service cannot find
+ * (W2.4.5e), since that source's start would stop boot.
+ */
+/** Every tool a source runs, by its command. */
+const SOURCE_TOOLS = [gws_utils_js_1.gwsTool];
+/**
+ * start.sh's PATH and Node when it exists; before it does (a setup whose service step has not
+ * run), what `mama service install` will write from this shell.
+ */
+function serviceSight(root, home, platform, planned, toolDirectoryExists) {
+    const startPath = (0, node_path_1.join)(root, 'start.sh');
+    if ((0, node_fs_1.existsSync)(startPath)) {
+        // A read error (EACCES) is its own; only the parse is named as one.
+        const text = (0, node_fs_1.readFileSync)(startPath, 'utf8');
+        try {
+            const reading = (0, launch_files_js_1.readStartScript)(text, home);
+            return {
+                path: (0, launch_files_js_1.startScriptPath)(reading, home, platform),
+                nodePath: (reading.exec === null ? undefined : (0, launch_files_js_1.shellWords)(reading.exec)[1]) ?? null,
+                exports: (0, launch_files_js_1.startExports)(reading),
+            };
+        }
+        catch (error) {
+            throw new prompt_js_1.CliInputError(`${startPath} does not parse (${error instanceof Error ? error.message : String(error)}); mama service install --replace rewrites it`, { cause: error });
+        }
+    }
+    const launch = planned();
+    return {
+        path: (0, launch_files_js_1.startPathEntries)({
+            ...launch,
+            ...(toolDirectoryExists ? { exists: toolDirectoryExists } : {}),
+        }),
+        nodePath: launch.nodePath,
+        exports: {},
+    };
+}
+/** `path` under `home` with nothing a shell reads specially in the rest of it. */
+function underHome(path, home) {
+    const rest = path.startsWith(`${home}/`) ? path.slice(home.length + 1) : null;
+    return rest !== null && /^[\w./-]+$/.test(rest) ? rest : null;
+}
+/** `path` for a shell: `~/...` under `home`, anything else quoted. */
+function shellPath(path, home) {
+    const rest = underHome(path, home);
+    return rest === null ? (0, secrets_js_1.shellQuote)(path) : `~/${rest}`;
+}
+/** A `PATH=` prefix that puts `folder` first: `$HOME/...` under `home`, anything else quoted. */
+function pathFirst(folder, home) {
+    const rest = underHome(folder, home);
+    return rest === null ? `PATH=${(0, secrets_js_1.shellQuote)(folder)}:"$PATH"` : `PATH="$HOME/${rest}:$PATH"`;
+}
+/** The tool a `type: 'cli'` requirement names; `undefined` for any other requirement. */
+function toolFor(source, need) {
+    if (need.type !== 'cli' || need.cli === undefined)
+        return undefined;
+    const tool = SOURCE_TOOLS.find(({ command }) => command === need.cli);
+    if (tool === undefined)
+        throw new Error(`${source} runs ${need.cli}, and nothing says how to install it`);
+    return tool;
+}
+/**
+ * `enabled` is every source that will run, `sources` among them: one login serves every source
+ * that runs the tool, so it names the scopes all of them need, and logging in for a new source
+ * does not narrow what an earlier one was granted.
+ */
+function sourceTools(sources, service, install, find, enabled = sources) {
+    const used = new Map();
+    for (const { name, needs } of sources) {
+        for (const need of needs) {
+            const tool = toolFor(name, need);
+            if (tool === undefined)
+                continue;
+            const names = used.get(tool) ?? [];
+            if (!names.includes(name))
+                used.set(tool, [...names, name]);
+        }
+    }
+    const scopes = new Map();
+    for (const { name, needs } of enabled) {
+        for (const need of needs) {
+            const tool = toolFor(name, need);
+            if (tool === undefined || need.scope === undefined)
+                continue;
+            scopes.set(tool, (scopes.get(tool) ?? new Set()).add(need.scope));
+        }
+    }
+    const { root, home } = install;
+    // An install the install command made (PR 2): start.sh runs ~/.mama/node, and its PATH names
+    // ~/.mama/npm/bin. A tool that is a Node script installs there with that Node.
+    const nodeBin = (0, node_path_1.dirname)((0, node_move_journal_js_1.managedNodePath)(root));
+    const prefix = (0, node_move_journal_js_1.nodeMovePlaces)(root).prefix;
+    const managed = service.nodePath === (0, node_move_journal_js_1.managedNodePath)(root) && service.path.includes((0, node_path_1.join)(prefix, 'bin'));
+    return [...used].map(([tool, names]) => {
+        const onService = find.inDirs(tool.command, service.path) ?? null;
+        const onShell = find.shell(tool.command) ?? null;
+        const shellOnly = onService === null ? onShell : null;
+        const target = onService ?? shellOnly;
+        let run;
+        if (managed) {
+            run = `${pathFirst(nodeBin, home)} ${shellPath(target ?? (0, node_path_1.join)(prefix, 'bin', tool.command), home)}`;
+        }
+        else {
+            run = target === null || target === onShell ? tool.command : shellPath(target, home);
+        }
+        return {
+            tool,
+            sources: names,
+            servicePath: onService,
+            shellPath: shellOnly,
+            install: target !== null
+                ? []
+                : managed
+                    ? [
+                        `${pathFirst(nodeBin, home)} ${shellPath((0, node_path_1.join)(nodeBin, 'npm'), home)} install -g --prefix ${shellPath(prefix, home)} ${tool.npmPackage}`,
+                    ]
+                    : [`npm install -g ${tool.npmPackage}`, `brew install ${tool.brewFormula}`],
+            login: `${run} ${tool.loginArgs}${scopes.has(tool) ? ` ${tool.scopeFlag} ${[...scopes.get(tool)].map(tool.loginScope).sort().join(',')}` : ''}`,
+        };
+    });
+}
+/**
+ * What `mama init` and `init --section connectors` print for each report: the tool's login, after
+ * what it needs first. A tool the service cannot find also gets how to install it, and `next`
+ * last: the service does not start while a source's tool is missing from its PATH (the source's
+ * start fails boot).
+ */
+function sourceToolLines(reports, next, 
+/** The command that runs this install's `mama`. */
+mama) {
+    return reports.flatMap((report) => {
+        const { tool, sources } = report;
+        const who = sources.join(', ');
+        const s = sources.length > 1 ? '' : 's';
+        const stops = `MAMA's service does not start with ${who} until ${tool.command} is on its PATH.`;
+        if (report.servicePath !== null)
+            return [tool.beforeLogin, `Then log in to ${tool.command} for ${who}: ${report.login}`];
+        if (report.shellPath !== null)
+            return [
+                `${who} run${s} ${tool.command}; this shell finds ${report.shellPath}, but the service's PATH does not name ${(0, node_path_1.dirname)(report.shellPath)}. ${mama} service install adds it.`,
+                tool.beforeLogin,
+                `Then log in to ${tool.command} for ${who}: ${report.login}`,
+                `${stops} ${next}`,
+            ];
+        return [
+            `${who} run${s} ${tool.command}, which the service's PATH does not have. Install it${report.install.length > 1 ? ' with one of' : ''}:`,
+            ...report.install.map((command) => `  ${command}`),
+            tool.beforeLogin,
+            `Then log in to ${tool.command} for ${who}:`,
+            `  ${report.login}`,
+            `${stops} ${next}`,
+        ];
+    });
+}
+//# sourceMappingURL=source-tools.js.map

package/dist/cli/runtime/source-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-tools.js","sourceRoot":"","sources":["../../../src/cli/runtime/source-tools.ts"],"names":[],"mappings":";;AAwCA,oCAkCC;AAkDD,kCA+DC;AAQD,0CA6BC;AAhOD,qCAAmD;AACnD,yCAA0C;AAE1C,0EAAkE;AAClE,wDAM4B;AAC5B,4CAA6C;AAC7C,8CAA2C;AAC3C,iEAAyE;AAEzE;;;;;;GAMG;AAEH,gDAAgD;AAChD,MAAM,YAAY,GAA0B,CAAC,sBAAO,CAAC,CAAC;AAYtD;;;GAGG;AACH,SAAgB,YAAY,CAC1B,IAAY,EACZ,IAAY,EACZ,QAAyB,EACzB,OAA8D,EAC9D,mBAA+C;IAE/C,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzC,IAAI,IAAA,oBAAU,EAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,oEAAoE;QACpE,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAA,iCAAe,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5C,OAAO;gBACL,IAAI,EAAE,IAAA,iCAAe,EAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC;gBAC9C,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,4BAAU,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI;gBACnF,OAAO,EAAE,IAAA,8BAAY,EAAC,OAAO,CAAC;aAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,yBAAa,CACrB,GAAG,SAAS,oBAAoB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,EACrI,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;IACzB,OAAO;QACL,IAAI,EAAE,IAAA,kCAAgB,EAAC;YACrB,GAAG,MAAM;YACT,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC;QACF,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAgBD,kFAAkF;AAClF,SAAS,SAAS,CAAC,IAAY,EAAE,IAAY;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,OAAO,IAAI,KAAK,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,sEAAsE;AACtE,SAAS,SAAS,CAAC,IAAY,EAAE,IAAY;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAA,uBAAU,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;AACxD,CAAC;AAED,iGAAiG;AACjG,SAAS,SAAS,CAAC,MAAc,EAAE,IAAY;IAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAA,uBAAU,EAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,IAAI,SAAS,CAAC;AAC7F,CAAC;AAID,yFAAyF;AACzF,SAAS,OAAO,CAAC,MAAc,EAAE,IAAqB;IACpD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;IACtE,IAAI,IAAI,KAAK,SAAS;QACpB,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,SAAS,IAAI,CAAC,GAAG,sCAAsC,CAAC,CAAC;IACpF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CACzB,OAA0B,EAC1B,OAAqB,EACrB,OAAyD,EACzD,IAKC,EACD,UAA6B,OAAO;IAEpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC7C,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAClD,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;gBAAE,SAAS;YAC7D,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAC/B,6FAA6F;IAC7F,+EAA+E;IAC/E,MAAM,OAAO,GAAG,IAAA,mBAAO,EAAC,IAAA,sCAAe,EAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAA,qCAAc,EAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,KAAK,IAAA,sCAAe,EAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;QACjD,MAAM,SAAS,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,MAAM,MAAM,GAAG,SAAS,IAAI,SAAS,CAAC;QACtC,IAAI,GAAW,CAAC;QAChB,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,MAAM,IAAI,IAAA,gBAAI,EAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;QACtG,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvF,CAAC;QACD,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,SAAS;YACtB,SAAS,EAAE,SAAS;YACpB,OAAO,EACL,MAAM,KAAK,IAAI;gBACb,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,OAAO;oBACP,CAAC,CAAC;wBACE,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,IAAA,gBAAI,EAAC,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,wBAAwB,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE;qBACzI;oBACH,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,UAAU,EAAE,EAAE,gBAAgB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjF,KAAK,EAAE,GAAG,GAAG,IAAI,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;SACjJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAC7B,OAAoC,EACpC,IAAY;AACZ,mDAAmD;AACnD,IAAY;IAEZ,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QAChC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QACjC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACxC,MAAM,KAAK,GAAG,sCAAsC,GAAG,UAAU,IAAI,CAAC,OAAO,kBAAkB,CAAC;QAChG,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI;YAC7B,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,IAAI,CAAC,OAAO,QAAQ,GAAG,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1F,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;YAC3B,OAAO;gBACL,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,sBAAsB,MAAM,CAAC,SAAS,0CAA0C,IAAA,mBAAO,EAAC,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,2BAA2B;gBAC3K,IAAI,CAAC,WAAW;gBAChB,kBAAkB,IAAI,CAAC,OAAO,QAAQ,GAAG,KAAK,MAAM,CAAC,KAAK,EAAE;gBAC5D,GAAG,KAAK,IAAI,IAAI,EAAE;aACnB,CAAC;QACJ,OAAO;YACL,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,uDAAuD,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG;YACvI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC;YAClD,IAAI,CAAC,WAAW;YAChB,kBAAkB,IAAI,CAAC,OAAO,QAAQ,GAAG,GAAG;YAC5C,KAAK,MAAM,CAAC,KAAK,EAAE;YACnB,GAAG,KAAK,IAAI,IAAI,EAAE;SACnB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/runtime/telegram-pairing.d.ts

@@ -0,0 +1,73 @@
+/** One Telegram Bot API call, as doctor makes it; tests replace it. */
+export type TelegramCall = (token: string, method: string, params?: Record<string, string>) => Promise<Record<string, unknown>>;
+export interface Update {
+    update_id: number;
+    message?: {
+        chat?: {
+            id: number;
+            type?: string;
+        };
+        from?: {
+            id: number;
+            is_bot?: boolean;
+        };
+        /** Set when an anonymous administrator posts as the group itself. */
+        sender_chat?: {
+            id: number;
+        };
+        text?: string;
+        entities?: Array<{
+            type: string;
+            offset: number;
+            length: number;
+        }>;
+    };
+}
+interface PairingOptions {
+    token: string;
+    call: TelegramCall;
+    write: (line: string) => void;
+}
+/** The bot's @name, which the pairing instructions give. */
+export declare function botName(options: PairingOptions): Promise<string>;
+/**
+ * Make the person setting up the first owner without a typed user ID: everyone who messages the
+ * bot privately while init waits gets a code, and the code `ask` returns names the owner. A code
+ * reaches only the chat it was sent to, so entering it proves that chat is this person's.
+ * Messages the bot held from before are dropped first: they were not sent to this setup, and an
+ * old /bind would otherwise name a group without a new word from the owner.
+ */
+export declare function pairOwner(options: PairingOptions & {
+    botUsername: string;
+    /** Ends with a rejection once the signal aborts: a failed poll must not wait for typing. */
+    ask: (label: string, signal: AbortSignal) => Promise<string>;
+}): Promise<{
+    ownerId: string;
+    offset: number;
+    groupMessages: Update[];
+}>;
+/**
+ * The common channel without a typed chat ID: the paired owner sends /bind in the group, and
+ * that group becomes it. Anyone else's message, or a /bind in a private chat, is ignored.
+ */
+export declare function bindCommonGroup(options: PairingOptions & {
+    botUsername: string;
+    ownerId: string;
+    offset: number;
+    /** Group messages read before this step, checked first. */
+    earlier?: readonly Update[];
+    now?: () => number;
+    waitMs?: number;
+}): Promise<{
+    chatId: string;
+    offset: number;
+}>;
+/**
+ * Mark every update init read as handled, so the daemon's first poll does not take the pairing
+ * messages for an owner's questions.
+ */
+export declare function confirmUpdates(options: PairingOptions & {
+    offset: number;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=telegram-pairing.d.ts.map

package/dist/cli/runtime/telegram-pairing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telegram-pairing.d.ts","sourceRoot":"","sources":["../../../src/cli/runtime/telegram-pairing.ts"],"names":[],"mappings":"AAGA,uEAAuE;AACvE,MAAM,MAAM,YAAY,GAAG,CACzB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC5B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEtC,MAAM,WAAW,MAAM;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACrC,IAAI,CAAC,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QACxC,qEAAqE;QACrE,WAAW,CAAC,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACpE,CAAC;CACH;AAED,UAAU,cAAc;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AA+CD,4DAA4D;AAC5D,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAMtE;AAOD;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,cAAc,GAAG;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,4FAA4F;IAC5F,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9D,GACA,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAsEvE;AAaD;;;GAGG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,cAAc,GAAG;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACA,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAsC7C;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhG"}