@m4l-jweb/wrapper 0.5.0 → 0.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m4l-jweb/wrapper",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "m4l-jweb: the Max for Live glue layer connecting a device to LiveAPI.",
   "type": "module",
   "license": "MIT",

package/src/core.ts

@@ -91,6 +91,66 @@ function ui_ready(): void {
   if (typeof onUiReady === "function") onUiReady();
 }
 
+/* ------------------------------------------------------------------ *
+ * State persistence
+ *
+ * A declared `state` slot is a named [dict] in the patcher with a [pattr] bound
+ * to it (see applyPersistence in surface.mjs). The pattr is what SAVES: Live
+ * stores a pattr's value in the set, and restores it before this script runs.
+ * The dict is where the app's JSON lives while the set is open.
+ *
+ * The app never touches the dict directly - it cannot; it is in the patcher. It
+ * asks for a slot (`get_state <id>`) and writes one (`sync_state <id> <json>`),
+ * and BOTH selectors carry the id as an ARGUMENT, not in the selector name.
+ * That matters: Max dispatches a message on its first word, so an app emitting
+ * `sync_state_config` looks for a `function sync_state_config()` that no device
+ * has, lands in anything(), and is silently swallowed. It did exactly that -
+ * every write was dropped, and the read path worked, so the state looked like it
+ * simply never persisted. The app side is @m4l-jweb/surface's stateStore().
+ * ------------------------------------------------------------------ */
+
+/** The app asks for a slot. Reply on the inlet it binds: `state_<id> <json>`. */
+function get_state(id: string): void {
+  try {
+    var d = new Dict("obj-state-" + id);
+    var json = d.stringify();
+    // Logged, because this is the ONLY moment that can tell you whether Live actually
+    // restored the slot: the app asks for it once the page is up, and what the dict
+    // hands back is what came out of the set. An empty "{}" here after a reopen means
+    // the [pattr] did not save - which is a failure with no other symptom.
+    post("m4l-jweb: get_state " + id + " -> " + json + "\n");
+    outlet(0, "state_" + id, json);
+  } catch (e) {
+    post("m4l-jweb: get_state error for " + id + " - " + (e as Error).message + "\n");
+  }
+}
+
+/**
+ * The app writes a slot: `sync_state <id> <json...>`.
+ *
+ * The JSON arrives SPLIT: Max parses a message into atoms on whitespace, so
+ * anything the app stringified with spaces in it reaches us as several
+ * arguments. Join them back before parsing.
+ */
+function sync_state(id: string): void {
+  try {
+    var jsonParts: string[] = [];
+    for (var i = 1; i < arguments.length; i++) {
+      jsonParts.push(String(arguments[i]));
+    }
+    var json = jsonParts.join(" ");
+    var d = new Dict("obj-state-" + id);
+    d.parse(json);
+    // Read it straight back out. `parse` failing silently, or the dict box not
+    // existing at all (it was emitted with an invalid maxclass for a while, so [pattr]
+    // bound to nothing), both look exactly like a successful write from here. What the
+    // dict says it holds is the only evidence.
+    post("m4l-jweb: sync_state " + id + " <- " + json + " (dict now " + d.stringify() + ")\n");
+  } catch (e) {
+    post("m4l-jweb: sync_state error for " + id + " - " + (e as Error).message + "\n");
+  }
+}
+
 /* ------------------------------------------------------------------ *
  * The self-extracting UI payload
  *
@@ -107,11 +167,43 @@ function loadWebview(): void {
     if (!url) return;
     outlet(0, "url", url);
     post("m4l-jweb: sent url " + url + "\n");
+
+    loadWindows();
   } catch (e) {
     post("m4l-jweb: loadWebview error " + (e as Error).message + "\n");
   }
 }
 
+/**
+ * Point every floating window's [jweb] at its own extracted page.
+ *
+ * A window's [jweb] lives inside a subpatcher, so there is no cord from this
+ * [js] to it. `messnamed` reaches the [r window-read-<id>] the build put next to
+ * it - naming the receiver instead of the cord.
+ *
+ * The window payloads are the extra payloads whose name is `<device>_<id>.html`
+ * (packageDevices names them; the device's own UI is UI_PAYLOAD and is not in
+ * this list). Strip that prefix EXPLICITLY: a regex like /^.*_/ is greedy, so a
+ * window id with an underscore in it - `edit_grid` - would arrive as `grid`, and
+ * the page would then load into a receiver nobody is listening on.
+ */
+function loadWindows(): void {
+  if (typeof EXTRA_PAYLOAD_NAMES === "undefined") return;
+  var folder = deviceFolder();
+  if (!folder) return;
+
+  var prefix = typeof UI_PAYLOAD_NAME !== "undefined" ? UI_PAYLOAD_NAME.replace(/\.html$/, "") + "_" : "";
+  for (var i = 0; i < EXTRA_PAYLOAD_NAMES.length; i++) {
+    var name = EXTRA_PAYLOAD_NAMES[i];
+    if (name.slice(-5) !== ".html") continue; // a sample, a preset, ...: not a window
+    if (prefix && name.slice(0, prefix.length) !== prefix) continue;
+    var winId = name.slice(prefix.length, name.length - 5);
+    var winUrl = encodeURI("file:///" + folder + "/" + name) + "?v=" + encodeURIComponent(buildStamp());
+    messnamed("window-read-" + winId, "url", winUrl);
+    post("m4l-jweb: window " + winId + " -> " + winUrl + "\n");
+  }
+}
+
 function resolveUiUrl(): string | null {
   var folder = deviceFolder();
   if (!folder) {
@@ -265,3 +357,318 @@ function b64decode(s: string): number[] {
   }
   return out;
 }
+
+/* ------------------------------------------------------------------ *
+ * Fetch-to-disk
+ *
+ * `fetchToFile(url, path)` in the app, [maxurl] in the patcher (the "download"
+ * chain), and this, orchestrating between them. Bulk data must never cross the
+ * Max message bridge, so the bytes go from libcurl STRAIGHT to disk and only the
+ * result comes back as a message.
+ *
+ * ------------------------------------------------------------------------------
+ * THE THREE THINGS THAT MADE THIS LOOK IMPOSSIBLE, all in maxurl's request dict:
+ *
+ *   1. THE KEY IS `filename_out`. It was `downloadfilename` here, which is not a
+ *      key maxurl has - and an unknown key in a request dict is IGNORED, not
+ *      rejected. So the request succeeded (HTTP 200, every time), the body went
+ *      into the response dict, and nothing was ever written to disk. A perfect
+ *      success and an empty folder. It is `filename_out` in Max's own reference
+ *      (docs/refpages/max-ref/maxurl.maxref.xml, the `dictionary` message) and in
+ *      the maxurl.maxhelp that ships with Live. Do not guess these names.
+ *
+ *   2. `overwrite_output_file` DEFAULTS TO 0. maxurl refuses to overwrite a file
+ *      that already exists - so even with the right key, the download works once
+ *      and then silently stops working. Set it to 1.
+ *
+ *   3. THE PATH IS AN OS PATH. maxurl is libcurl, not a Max file object: it does
+ *      not know `~/`, and it does not know Max's `Desktop:/` style. It needs an
+ *      absolute path, which is why a relative one is resolved against the device
+ *      folder below.
+ *
+ * `response_dict` names the reply dict, so what comes back on maxurl's outlets is
+ * identifiable rather than a dict called "output" shared with anyone else's request.
+ *
+ * ------------------------------------------------------------------------------
+ * DOWNLOAD, THEN PLACE - why every fetch is TWO maxurl requests.
+ *
+ * A 404 is a RESPONSE, and maxurl writes it: point `filename_out` at a file you
+ * already rely on and a missing URL replaces it with the error page. Measured, not
+ * feared - see doc/ARCHITECTURE.md, where a 404 destroyed a good 1.2 MB cached .wav
+ * and reported status 404 while doing it. `overwrite_output_file` does not care what
+ * the status was.
+ *
+ * Everywhere else in computing the answer is "write to a temp path and move it into
+ * place on success". Max's [js] cannot: its `File` object has open, close, and the
+ * read/write family, and NOTHING ELSE. No rename. No delete. (Confirmed twice - in
+ * Cycling '74's reference, and by asking the live object what members it has.)
+ *
+ * So MAXURL DOES THE MOVE. It is libcurl, and libcurl speaks `file://`: a GET of
+ * `file:///<temp>` with `filename_out` set to the destination is a native, streaming
+ * file copy, on maxurl's own thread, with not one byte passing through [js]. Measured
+ * at 6 ms for 1 MB. The download therefore goes:
+ *
+ *   1. GET <url>          -> filename_out <dest>.part     (a bad response lands HERE)
+ *   2. validate           status 2xx, no `error` key, bytes on disk > 0
+ *   3. GET file://<part>  -> filename_out <dest>          (only now is <dest> touched)
+ *
+ * A failure at 1 or 2 leaves the destination UNTOUCHED, which is the entire point.
+ *
+ * TWO TRAPS IN STEP 3, both of which look like success:
+ *
+ *   - A file:// reply has NO HTTP STATUS. It comes back `status 0`, which the 2xx
+ *     check in step 2 would reject as a failure. The copy is validated on BYTES - the
+ *     destination is the same size as the part file - which is the honest check anyway
+ *     and the only one that survives both schemes.
+ *   - The .part file cannot be DELETED afterwards (no unlink, see above), so it is
+ *     TRUNCATED to zero bytes instead. It costs an inode, not a megabyte, and the next
+ *     fetch to the same destination overwrites it.
+ * ------------------------------------------------------------------ */
+
+/** The reply dicts. Named, so nothing else can be mistaken for them - and so the two phases cannot be mistaken for each other. */
+var FETCH_RESPONSE_DICT = "m4ljweb_fetch_response";
+var PLACE_RESPONSE_DICT = "m4ljweb_place_response";
+
+/** Where a download lands before it has earned its destination. */
+function partPath(destPath: string): string {
+  return destPath + ".part";
+}
+
+interface ActiveFetch {
+  requestId: string;
+  url: string;
+  destPath: string;
+  /** Bytes in the .part file, carried from the download phase into the place phase. */
+  partBytes: number;
+}
+
+// One at a time: [maxurl] can run several, but a queue keeps `currentFetch`
+// unambiguous, and a device downloading its samples wants them in order anyway.
+var fetchQueue: ActiveFetch[] = [];
+var currentFetch: ActiveFetch | null = null;
+
+/**
+ * An absolute OS path for libcurl, from whatever the app asked for.
+ *
+ * A relative path is resolved against the DEVICE's folder - the one place a
+ * device can always write, and the same folder the UI payload is extracted into.
+ * An absolute path (POSIX `/...`, or Windows `C:/...`) is passed through.
+ */
+function resolveFetchPath(destPath: string): string {
+  var isAbsolute = destPath.indexOf("/") === 0 || destPath.indexOf(":") === 1;
+  if (isAbsolute) return destPath;
+  var folder = deviceFolder();
+  return folder ? folder + "/" + destPath : destPath;
+}
+
+/** PHASE 1: download the URL to `<dest>.part`. Nothing touches `<dest>` yet. */
+function processNextFetch(): void {
+  if (currentFetch || fetchQueue.length === 0) return;
+  var next = fetchQueue.shift();
+  if (!next) return;
+  currentFetch = next;
+  next.destPath = resolveFetchPath(next.destPath);
+
+  var reqDict = new Dict();
+  reqDict.set("url", next.url);
+  reqDict.set("http_method", "get");
+  reqDict.set("filename_out", partPath(next.destPath)); // NOT the destination - see above
+  reqDict.set("overwrite_output_file", 1); // ...or it downloads exactly once, ever
+  reqDict.set("response_dict", FETCH_RESPONSE_DICT);
+
+  post("m4l-jweb: fetch " + next.url + " -> " + next.destPath + "\n");
+  // Outlet 1 is the aux outlet; the "download" chain routes `maxurl` off it.
+  outlet(1, "maxurl", "dictionary", reqDict.name);
+}
+
+/**
+ * PHASE 3: ask libcurl to copy the validated .part file over the destination.
+ *
+ * This is the "move" that [js] cannot do. `file://` is a scheme libcurl handles, so
+ * maxurl streams the file on its own thread and nothing crosses the message bridge.
+ */
+function placeFetch(fetched: ActiveFetch): void {
+  var reqDict = new Dict();
+  reqDict.set("url", encodeURI("file:///" + partPath(fetched.destPath)));
+  reqDict.set("http_method", "get");
+  reqDict.set("filename_out", fetched.destPath);
+  reqDict.set("overwrite_output_file", 1);
+  reqDict.set("response_dict", PLACE_RESPONSE_DICT);
+  outlet(1, "maxurl", "dictionary", reqDict.name);
+}
+
+/* ------------------------------------------------------------------ *
+ * Samples - the `samples` chain
+ * ------------------------------------------------------------------ */
+
+/**
+ * The app: `buffer_load <slot> <path>` - read a file into that slot's [buffer~].
+ *
+ * WHY THIS GOES THROUGH [js] AT ALL, when the chain could route it straight to the
+ * buffer: because the path the app wrote is not a path [buffer~] can open, and it
+ * fails in the two ways this file exists to prevent.
+ *
+ * A RELATIVE path is resolved against the device's folder - the same resolution
+ * `fetch_to_file` does, and it has to be the same one or the app downloads a file to
+ * one place and loads it from another. [buffer~] does not resolve it that way: a bare
+ * name is looked up in MAX's SEARCH PATH, which does not contain the device's folder,
+ * so `preview.wav` - freshly downloaded, right there next to the .amxd - reports
+ * "can't open" and the promise times out.
+ *
+ * ...and the resolved path CONTAINS SPACES on a normal Live install ("Ableton
+ * Library", "Max For Live"). A message travelling through the patcher as text would
+ * split there into three atoms and [buffer~] would open the first one. Handed out of
+ * [js] as a string, it stays ONE symbol all the way to `replace`.
+ *
+ * The file is checked before the buffer is asked for it, because a missing file makes
+ * [buffer~] print to the Max console and stay silent - there is no failure bang to
+ * bind to, and the app would learn nothing until the timeout. `buffer_error` says so
+ * at once.
+ */
+function buffer_load(slot: string, path: string): void {
+  var resolved = resolveFetchPath(path); // the same folder the download wrote to
+  var f: File | null = null;
+  try {
+    f = new File(resolved, "read");
+  } catch (e) {
+    f = null;
+  }
+  if (!f || !f.isopen) {
+    outlet(0, "buffer_error", slot, "no file at " + resolved);
+    return;
+  }
+  var bytes = f.eof;
+  f.close();
+  if (!bytes) {
+    outlet(0, "buffer_error", slot, "empty file at " + resolved);
+    return;
+  }
+
+  // Outlet 1 is the aux outlet; the `samples` chain routes `buffer_replace` off it,
+  // exactly as the `download` chain routes `maxurl`. Outlet 0 belongs to [jweb].
+  post("m4l-jweb: buffer_load " + slot + " -> " + resolved + "\n");
+  outlet(1, "buffer_replace", slot, resolved);
+}
+
+/** The app: `fetch_to_file <requestId> <url> <destPath>`. */
+function fetch_to_file(requestId: string, url: string, destPath: string): void {
+  fetchQueue.push({ requestId: requestId, url: url, destPath: destPath, partBytes: 0 });
+  processNextFetch();
+}
+
+/**
+ * maxurl finished: `maxurl_done dictionary <name>` (outlet 0, via [prepend]).
+ *
+ * Both phases land here, told apart by the response dict they asked for.
+ */
+function maxurl_done(msgType: string, dictName: string): void {
+  if (msgType !== "dictionary") return;
+  // A device's own wrapper/device.ts may drive [maxurl] itself (a cache, a spike) and
+  // its replies come back down this same cord. Offer it the reply first: without this
+  // hook, a request the device made lands here, finds no `currentFetch`, and is
+  // dropped in silence - which looks exactly like maxurl never answering.
+  if (typeof onMaxurlReply === "function" && onMaxurlReply(dictName)) return;
+  if (!currentFetch) return;
+  var fetched = currentFetch;
+
+  try {
+    if (dictName === PLACE_RESPONSE_DICT) finishPlace(fetched);
+    else finishDownload(fetched, dictName);
+  } catch (e) {
+    post("m4l-jweb: maxurl_done error - " + (e as Error).message + "\n");
+    failFetch(fetched, "wrapper error: " + (e as Error).message);
+  }
+}
+
+/**
+ * PHASE 2: did the download earn its destination?
+ *
+ * All three checks, and all three are load-bearing: a filesystem failure comes back as
+ * status 200 with an `error` key, and a `filename_out` maxurl ignored comes back as a
+ * clean 200 with nothing on disk. Only the file itself proves the file.
+ */
+function finishDownload(fetched: ActiveFetch, dictName: string): void {
+  var d = new Dict(dictName);
+  var status = Number(d.get("status"));
+  var errorMsg = d.get("error");
+  var bytes = fileSize(partPath(fetched.destPath));
+
+  if (errorMsg) return failFetch(fetched, String(errorMsg));
+  if (status < 200 || status >= 300) return failFetch(fetched, "HTTP " + status);
+  if (bytes <= 0) return failFetch(fetched, "HTTP " + status + " but nothing was written to disk");
+
+  fetched.partBytes = bytes;
+  placeFetch(fetched); // ...and only now does the destination get touched
+}
+
+/**
+ * PHASE 3 (reply): validate the copy ON BYTES, not on status.
+ *
+ * A `file://` request has no HTTP status - it comes back as `status 0`, measured - so
+ * the 2xx check that guards the download would reject a perfectly good copy here. The
+ * size is the honest check for both schemes anyway.
+ */
+function finishPlace(fetched: ActiveFetch): void {
+  var placed = fileSize(fetched.destPath);
+  if (placed !== fetched.partBytes) {
+    return failFetch(fetched, "could not place the download: " + placed + " bytes at the destination, expected " + fetched.partBytes);
+  }
+  truncate(partPath(fetched.destPath)); // [js] cannot DELETE it; zero it instead
+  post("m4l-jweb: fetched " + placed + " bytes to " + fetched.destPath + "\n");
+  outlet(0, "fetch_done", fetched.requestId, placed);
+  currentFetch = null;
+  processNextFetch();
+}
+
+/** The destination is untouched whenever this is called from phase 1 or 2. That is the point. */
+function failFetch(fetched: ActiveFetch, message: string): void {
+  post("m4l-jweb: fetch failed - " + message + "\n");
+  outlet(0, "fetch_error", fetched.requestId, message);
+  currentFetch = null;
+  processNextFetch();
+}
+
+/** Bytes on disk, or -1 if there is no readable file there. */
+function fileSize(p: string): number {
+  try {
+    var f = new File(p);
+    if (!f.isopen) return -1;
+    var n = f.eof;
+    f.close();
+    return n;
+  } catch (e) {
+    return -1;
+  }
+}
+
+/** Zero a file. The closest thing to `delete` that [js] has - it has no unlink. */
+function truncate(p: string): void {
+  try {
+    var f = new File(p, "write");
+    if (!f.isopen) f.open();
+    if (!f.isopen) return;
+    f.eof = 0;
+    f.close();
+  } catch (e) {
+    /* a leftover .part is untidy, not a failure */
+  }
+}
+
+/**
+ * maxurl's progress outlet, via [prepend maxurl_progress]:
+ *
+ *   maxurl_progress <response-dict-name> <dl total> <dl now> <ul total> <ul now>
+ *
+ * FIVE atoms, starting with the dict NAME - per the reference (outlet 1). This
+ * used to be read as `(downloaded, total, percent)`, so the "bytes downloaded"
+ * the UI showed was actually a symbol, and the total was the download total. And
+ * note the reference's warning: not every server sends a content length, so the
+ * TOTAL can legitimately be 0. Do not divide by it.
+ */
+function maxurl_progress(dictName: string, dlTotal: number, dlNow: number): void {
+  if (!currentFetch) return;
+  // The local file:// copy reports progress too. It is not the download, and a UI that
+  // showed it would run its progress bar twice - the second time in a few milliseconds.
+  if (dictName !== FETCH_RESPONSE_DICT) return;
+  outlet(0, "fetch_progress", currentFetch.requestId, dlNow, dlTotal);
+}

package/src/max.d.ts

@@ -16,6 +16,16 @@ declare function outlet(n: number, ...args: unknown[]): void;
 /** Collect the `arguments` of a Max message handler into a real array. */
 declare function arrayfromargs(args: IArguments): unknown[];
 
+/**
+ * Send a message to every [receive <name>] / [r <name>] in the patcher - the
+ * only way [js] can reach a box it has no patch cord to.
+ *
+ * The wrapper uses it for what CANNOT be wired: a floating window's [jweb] lives
+ * inside a subpatcher, so there is no cord from here to there. `messnamed` names
+ * the receiver instead of the cord.
+ */
+declare function messnamed(receiveName: string, ...args: unknown[]): void;
+
 /** Arguments given to the object box, e.g. `js wrapper.js midi` -> ["midi"]. */
 declare const jsarguments: unknown[];
 
@@ -166,5 +176,14 @@ declare function onUiReady(): void;
 /** Every transport poll (20 Hz), after the packaged wrapper has sent its tick. */
 declare function onTick(playing: number, beats: number): void;
 
+/**
+ * A reply from [maxurl] arrived. Return true if it was YOURS.
+ *
+ * Only for a device that drives [maxurl] itself - its replies travel the same cord as
+ * `fetchToFile()`'s, and the wrapper would otherwise drop them (no `currentFetch`).
+ * Match on the `response_dict` name you asked for.
+ */
+declare function onMaxurlReply(responseDictName: string): boolean;
+
 /** Live's tempo changed (and once on attach). */
 declare function onTempoChange(bpm: number): void;