@mostra/cli 0.3.0 → 0.5.0

package/dist/{run-BJaRnz-Q.js → run-BpVu5uQ8.js}

@@ -1,15 +1,14 @@
-import { a as catalogCodes, c as detectHarness, d as truthy, f as cliVersion, i as TelemetryEvent, l as buildEndpoint, m as packageRoot, n as startFlusher, o as durationBucket, p as fromSource, r as TelemetryStore, s as minute, u as decide } from "./flush-BCuWs0Zh.js";
+import { a as detachedEnvironment, c as durationBucket, d as buildEndpoint, f as decide, g as packageRoot, h as fromSource, i as detachedDirectory, l as minute, m as cliVersion, n as startFlusher, o as TelemetryEvent, p as truthy, r as TelemetryStore, s as catalogCodes, u as detectHarness } from "./flush-CFJkvi2R.js";
 import { n as exitCodeFor, t as EXIT } from "./exit-CBIf8nAU.js";
 import { spawn } from "node:child_process";
-import { existsSync, lstatSync, mkdtempSync, readFileSync, readdirSync, readlinkSync, rmSync, statSync, writeFileSync } from "node:fs";
-import { isAbsolute, join, resolve } from "node:path";
+import { existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, readlinkSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { isAbsolute, join, resolve, win32 } from "node:path";
 import { ARTIFACT_PROGRESS, CLI_CLIENT_NAME, DEFAULT_DOCS_BASE, DEV_NOTIFY, FieldOp, HOST_PROTOCOL_REVISIONS, LineSplitter, MutationId, RpcError, RpcPeer, artifactCreateMethod, artifactGetMethod, artifactListMethod, artifactPublishMethod, artifactVerifyMethod, createDiagnostic, depsAddMethod, devStartMethod, devStopMethod, diagnosticCatalog, encodeLine, gcRunMethod, instanceCheckMethod, instanceStatusMethod, livePushMethod, mostraInitializeMethod, mostraShutdownMethod, resultsGetMethod, secretDeleteMethod, secretListMethod, secretSetMethod, stateGetMethod, statePatchMethod, viewDefaultMethod, viewLaunchMethod, viewRevokeMethod, viewRotateMethod, viewUrlMethod, waitMethod } from "@mostra/protocol";
-import { checkBrowser, checkFiles, enclosingBundle, readBundle, readSetup, resolveRuntime } from "@mostra/sdk";
+import { checkBrowser, checkFiles, connectControl, enclosingBundle, readBundle, readSetup, resolveRuntime } from "@mostra/sdk";
 import { homedir, tmpdir } from "node:os";
 import { parseArgs } from "node:util";
 import { randomUUID } from "node:crypto";
 import { createInterface } from "node:readline";
-import { createConnection } from "node:net";
 //#region src/command.ts
 /** Defines a command; the identity function, for types. */
 function defineCommand(command) {
@@ -115,24 +114,35 @@ function distance(a, b) {
 const nonEmpty = (value) => value === void 0 || value === "" ? void 0 : value;
 /**
 * The home, in D84's order: `--home`, then `MOSTRA_HOME`, then the platform default (`~/.mostra`
-* on macOS, `${XDG_DATA_HOME:-~/.local/share}/mostra` on Linux), the same order the runtime uses.
+* on macOS, `${XDG_DATA_HOME:-~/.local/share}/mostra` on Linux, `%LOCALAPPDATA%\mostra` on
+* Windows), the same order and defaults the runtime uses (its `platform` module).
 */
 function resolveHome(options) {
 	const chosen = nonEmpty(options.home) ?? nonEmpty(options.env["MOSTRA_HOME"]);
 	if (chosen !== void 0) return resolve(options.cwd, chosen);
+	const platform = options.platform ?? process.platform;
+	if (platform === "win32") {
+		const local = nonEmpty(options.env["LOCALAPPDATA"]);
+		return win32.join(local !== void 0 && win32.isAbsolute(local) ? local : win32.join(homedir(), "AppData", "Local"), "mostra");
+	}
 	const user = nonEmpty(options.env["HOME"]) ?? homedir();
-	if ((options.platform ?? process.platform) === "darwin") return join(user, ".mostra");
+	if (platform === "darwin") return join(user, ".mostra");
 	const data = nonEmpty(options.env["XDG_DATA_HOME"]);
 	return join(data !== void 0 && isAbsolute(data) ? data : join(user, ".local", "share"), "mostra");
 }
 /**
 * The CLI's config directory (D140 item 5): `MOSTRA_CONFIG_DIR`, else
-* `${XDG_CONFIG_HOME:-~/.config}/mostra`, on both platforms. It holds telemetry's choice and
-* queue, per operating-system user, never per home.
+* `${XDG_CONFIG_HOME:-~/.config}/mostra` on macOS and Linux, and `%APPDATA%\mostra` on Windows,
+* where per-user settings live (D151). It holds telemetry's choice and queue, per
+* operating-system user, never per home.
 */
-function configDir(env, cwd) {
+function configDir(env, cwd, platform = process.platform) {
 	const override = nonEmpty(env["MOSTRA_CONFIG_DIR"]);
 	if (override !== void 0) return resolve(cwd, override);
+	if (platform === "win32") {
+		const roaming = nonEmpty(env["APPDATA"]);
+		return win32.join(roaming !== void 0 && win32.isAbsolute(roaming) ? roaming : win32.join(homedir(), "AppData", "Roaming"), "mostra");
+	}
 	const xdg = nonEmpty(env["XDG_CONFIG_HOME"]);
 	const base = xdg !== void 0 && isAbsolute(xdg) ? xdg : join(nonEmpty(env["HOME"]) ?? homedir(), ".config");
 	return join(base, "mostra");
@@ -147,7 +157,8 @@ async function locateRuntime(env) {
 	const runtime = await resolveRuntime({ env });
 	return {
 		node: runtime.node,
-		entry: runtime.runtimeEntry
+		entry: runtime.runtimeEntry,
+		runtime
 	};
 }
 /**
@@ -380,6 +391,23 @@ function parseCommandLine(commands, argv) {
 	};
 }
 //#endregion
+//#region src/platform.ts
+/**
+* The CLI's platform gate (D35, D146, RT-07), the runtime's rule (`home/platform.ts` in
+* `@mostra/runtime`) repeated where the CLI must decide before it reaches any runtime: macOS and
+* Linux on x64 and arm64; Windows on x64 and arm64 only behind the development switch
+* `MOSTRA_DEV_WINDOWS=1`, which only Mostra's CI sets until WP-W3; everything else fails closed.
+*/
+/** `MOSTRA_PLATFORM_UNSUPPORTED` for a platform Mostra doesn't run on, else `undefined`. */
+function checkPlatform(platform, arch, env) {
+	if (arch === "x64" || arch === "arm64") {
+		if (platform === "darwin" || platform === "linux") return void 0;
+		if (platform === "win32" && env["MOSTRA_DEV_WINDOWS"] === "1") return void 0;
+	}
+	const name = platform === "win32" ? `Windows (${platform}-${arch})` : `${platform}-${arch}`;
+	return createDiagnostic("MOSTRA_PLATFORM_UNSUPPORTED", { message: `Mostra doesn't run on ${name}; it supports macOS and Linux on x64 and arm64.` });
+}
+//#endregion
 //#region src/telemetry/zones.generated.ts
 /** The time zones where Mostra asks before sending telemetry (D140 item 10), matched as given. */
 const ASK_FIRST_ZONES = [
@@ -1321,7 +1349,7 @@ function telemetrySession(options) {
 				at: minute(new Date(now())),
 				installId: id.id,
 				version: cliVersion(),
-				os: process.platform === "darwin" ? "darwin" : "linux",
+				os: process.platform === "darwin" || process.platform === "win32" ? process.platform : "linux",
 				arch: process.arch,
 				node: Number(process.versions.node.split(".")[0]),
 				harness,
@@ -1635,7 +1663,7 @@ async function service(context, action) {
 const noStart = {
 	name: "no-start",
 	kind: "boolean",
-	summary: "Write or remove the service's file without asking launchd or systemd to load it."
+	summary: "Write or remove the service's definition without asking launchd, systemd or Task Scheduler to load it."
 };
 /** `mostra daemon start`. */
 const daemonStartCommand = defineCommand({
@@ -1747,7 +1775,7 @@ const daemonStatusCommand = defineCommand({
 /** `mostra daemon install`. */
 const daemonInstallCommand = defineCommand({
 	path: ["daemon", "install"],
-	summary: "Run the home's daemon as a login service (launchd or systemd), so links answer at any hour.",
+	summary: "Run the home's daemon as a login service (launchd, systemd or Task Scheduler), so links answer at any hour.",
 	flags: [noStart],
 	output: {
 		type: "ServiceStatus",
@@ -1881,6 +1909,14 @@ const gcCommand = defineCommand({
 	}
 });
 /** `mostra doctor`. */
+/**
+* The check that fails `mostra doctor`: the first whose status isn't one this CLI knows is no
+* failure, so a newer instance's status it doesn't know counts as an error (Opus review of MT-01,
+* 2), never as passing.
+*/
+function firstFailing(checks) {
+	return checks.find((check) => check.status !== "ok" && check.status !== "warning");
+}
 const doctorCommand = defineCommand({
 	path: ["doctor"],
 	summary: "Check the platform, the runtime, the home, its daemon and ledger, and the login service.",
@@ -1898,14 +1934,15 @@ const doctorCommand = defineCommand({
 	async run(context) {
 		const checks = [];
 		const node = Number(process.versions.node.split(".")[0]);
-		checks.push(process.platform === "darwin" || process.platform === "linux" ? {
+		const unsupported = checkPlatform(process.platform, process.arch, context.env);
+		checks.push(unsupported === void 0 ? {
 			name: "platform",
 			status: "ok",
 			detail: `${process.platform} ${process.arch}, Node ${process.versions.node}`
 		} : {
 			name: "platform",
 			status: "error",
-			diagnostic: createDiagnostic("MOSTRA_PLATFORM_UNSUPPORTED", { message: `Mostra runs on macOS and Linux; this is ${process.platform}.` })
+			diagnostic: unsupported
 		});
 		if (node < 24) checks.push({
 			name: "node",
@@ -1965,7 +2002,7 @@ const doctorCommand = defineCommand({
 			status: "ok",
 			detail: telemetry.text.split("\n")[0]
 		});
-		const firstError = checks.find((check) => check.status === "error");
+		const firstError = firstFailing(checks);
 		const human = checks.map((check) => {
 			const mark = check.status === "ok" ? "ok  " : check.status === "warning" ? "warn" : "FAIL";
 			const what = check.diagnostic ? `${check.diagnostic.code}: ${check.diagnostic.message}` : check.detail ?? "";
@@ -2344,7 +2381,7 @@ const verifyCommand = defineCommand({
 		return {
 			result: verdict,
 			human: verdictText(verdict),
-			...verdict.status === "fail" ? { exit: EXIT.failure } : {}
+			...verdict.status === "pass" ? {} : { exit: EXIT.failure }
 		};
 	}
 });
@@ -2523,14 +2560,17 @@ const devCommand = defineCommand({
 		}, `Development preview, not published: ${started.url}\nPress Ctrl-C to stop.\n`);
 		for (const event of early.splice(0)) if (event.sessionId === sessionId) show(event);
 		let stop = () => {};
+		const signals = [
+			"SIGINT",
+			"SIGTERM",
+			"SIGBREAK"
+		];
 		const ended = await new Promise((done) => {
 			stop = () => done("signal");
-			process.once("SIGINT", stop);
-			process.once("SIGTERM", stop);
+			for (const signal of signals) process.once(signal, stop);
 			connection?.closed.then(() => done("closed"));
 		});
-		process.off("SIGINT", stop);
-		process.off("SIGTERM", stop);
+		for (const signal of signals) process.off(signal, stop);
 		if (ended === "closed") throw new RpcError(createDiagnostic("MOSTRA_HOST_CONNECTION_CLOSED", {
 			message: "The instance ended the development preview (it stopped or restarted).",
 			hint: "Run mostra dev again."
@@ -2607,6 +2647,11 @@ const waitCommand = defineCommand({
 				result,
 				human: `${result.event.type} at cursor ${result.cursor}\n`
 			};
+			if (result.status !== "still_waiting") return {
+				result,
+				human: `wait ended with "${String(result.status)}", which this CLI doesn't know\n`,
+				exit: EXIT.failure
+			};
 			if (deadline === void 0) {
 				after = result.cursor;
 				continue;
@@ -2876,8 +2921,11 @@ const statePatchCommand = defineCommand({
 * review finding 4). A program's arguments are readable by every local user (`ps`,
 * `/proc/<pid>/cmdline`), so the opener gets the path of a page that redirects to the launch URL,
 * written mode 0600 in a fresh directory of mode 0700, as Jupyter's server does for its token.
-* The launch ticket in the page is single-use and lives a minute, so a page left behind is
-* harmless; each launch removes the ones older than that.
+* Windows has no modes: there the page goes under the user's own profile
+* (`%LOCALAPPDATA%\mostra-cli\open`), whose access list only the user, `SYSTEM` and
+* administrators pass, never under `%TEMP%`, which may name a folder other users can read (Opus
+* review of WP-W2, finding 1). The launch ticket in the page is single-use and lives a minute, so a
+* page left behind is harmless; each launch removes the ones older than that.
 */
 /** The prefix of the directories launch pages live in. */
 const PREFIX = "mostra-open-";
@@ -2975,17 +3023,49 @@ function splitCommand(command) {
 	if (inWord) words.push(word);
 	return words;
 }
+/** The program that opens a file with its default application, by platform. */
+function platformOpener(platform) {
+	if (platform === "darwin") return ["open"];
+	if (platform === "win32") return ["explorer.exe"];
+	return ["xdg-open"];
+}
 /**
-* The commands that may open `target`, in order: each entry of `$BROWSER` (separated by `:`, its
-* `%s` replaced by the target, else the target appended, `%%` a literal `%`, as `xdg-open` and
-* Python's `webbrowser` read it), else the platform's opener.
+* Splits a command as Windows programs read their command lines, for `$BROWSER` there: words
+* separated by spaces, double quotes grouping words with spaces (`"C:\Program Files\Firefox\
+* firefox.exe" %s`), and backslashes kept as they are.
+*/
+function splitWindowsCommand(command) {
+	const words = [];
+	let word = "";
+	let inWord = false;
+	let quoted = false;
+	for (const char of command) if (char === "\"") {
+		quoted = !quoted;
+		inWord = true;
+	} else if (!quoted && /\s/.test(char)) {
+		if (inWord) words.push(word);
+		word = "";
+		inWord = false;
+	} else {
+		word += char;
+		inWord = true;
+	}
+	if (inWord) words.push(word);
+	return words;
+}
+/**
+* The commands that may open `target`, in order: each entry of `$BROWSER` (separated by the
+* platform's path delimiter, `:` or `;` on Windows, its `%s` replaced by the target, else the
+* target appended, `%%` a literal `%`, as `xdg-open` and Python's `webbrowser` read it), else the
+* platform's opener.
 */
 function browserCommands(target, env, platform = process.platform) {
 	const chosen = env["BROWSER"];
-	const entries = chosen !== void 0 && chosen.trim() !== "" ? chosen.split(":").filter((entry) => entry.trim() !== "") : [platform === "darwin" ? "open" : "xdg-open"];
+	if (chosen === void 0 || chosen.trim() === "") return [[...platformOpener(platform), target]];
+	const entries = chosen.split(platform === "win32" ? ";" : ":").filter((entry) => entry.trim() !== "");
 	const commands = [];
 	for (const entry of entries) {
-		const words = splitCommand(entry);
+		const words = platform === "win32" ? splitWindowsCommand(entry) : splitCommand(entry);
 		if (words.length === 0) continue;
 		let substituted = false;
 		const argv = words.map((word) => word.replaceAll(/%%|%s/g, (match) => {
@@ -3017,11 +3097,26 @@ function start(argv) {
 		}
 	});
 }
+/**
+* Where launch pages go: the system's temporary directory on POSIX (the page's modes protect it),
+* the user's own profile on Windows, whatever `%TEMP%` names.
+*/
+function launchBase(env, platform = process.platform) {
+	if (platform !== "win32") return tmpdir();
+	const local = env["LOCALAPPDATA"];
+	const base = local !== void 0 && local !== "" && win32.isAbsolute(local) ? local : win32.join(homedir(), "AppData", "Local");
+	return win32.join(base, "mostra-cli", "open");
+}
 /** Opens `url` in a browser through a launch page; whether a browser command started. */
 async function openInBrowser(url, env) {
 	let page;
 	try {
-		page = writeLaunchPage(url);
+		const base = launchBase(env);
+		mkdirSync(base, {
+			recursive: true,
+			mode: 448
+		});
+		page = writeLaunchPage(url, base);
 	} catch {
 		return false;
 	}
@@ -3036,10 +3131,13 @@ async function openInBrowser(url, env) {
 * (`browser.ts`). A client of `view/default`, `view/url`,
 * `view/rotate`, `view/revoke` and `view/launch`.
 */
-/** Whether this session can show a browser: not over SSH without a display. */
+/**
+* Whether this session can show a browser: not over SSH without a display. On macOS and Windows a
+* local session always has the user's desktop; an SSH session there has none.
+*/
 function hasDisplay(env, platform = process.platform) {
 	const ssh = env["SSH_CONNECTION"] !== void 0 || env["SSH_TTY"] !== void 0;
-	if (platform === "darwin") return !ssh;
+	if (platform === "darwin" || platform === "win32") return !ssh;
 	return env["DISPLAY"] !== void 0 || env["WAYLAND_DISPLAY"] !== void 0;
 }
 /** Whether `open` should launch a browser: a terminal without `--json`, or `--browser`. */
@@ -3398,6 +3496,19 @@ async function connect(options) {
 	}
 	return open(started.socket, options, started.status === "started");
 }
+/**
+* Opens the endpoint `instance.json` or a starting daemon named: a Unix socket, or on Windows the
+* owner-only pipe through the runtime's helper, which refuses a pipe another user created under
+* the name (D150, the SDK's `connectControl`). Only Windows needs the runtime resolved first.
+*/
+async function openEndpoint(endpoint, options) {
+	const runtime = process.platform === "win32" ? (await locateRuntime(options.env)).runtime : void 0;
+	return connectControl(endpoint, {
+		runtime,
+		env: options.env,
+		timeoutMs: ATTACH_TIMEOUT_MS
+	});
+}
 /** The socket `instance.json` records (D81), if the file exists and reads. */
 function readSocket(home) {
 	try {
@@ -3417,7 +3528,7 @@ async function startDaemon(options) {
 	const runtime = await locateRuntime(options.env);
 	if (Date.now() >= deadlineAt) throw timedOut();
 	const args = [
-		runtime.entry,
+		resolve(runtime.entry),
 		"daemon",
 		"--home",
 		options.home
@@ -3425,15 +3536,17 @@ async function startDaemon(options) {
 	return new Promise((resolve, reject) => {
 		const child = spawn(runtime.node, args, {
 			detached: true,
+			cwd: detachedDirectory(options.home),
+			windowsHide: true,
 			stdio: [
 				"ignore",
 				"pipe",
 				"ignore"
 			],
-			env: {
+			env: detachedEnvironment({
 				...process.env,
 				...options.env
-			}
+			})
 		});
 		const splitter = new LineSplitter();
 		let settled = false;
@@ -3468,21 +3581,7 @@ async function startDaemon(options) {
 	});
 }
 async function open(socketPath, options, started) {
-	const socket = await new Promise((resolve, reject) => {
-		const connection = createConnection(socketPath);
-		const timer = setTimeout(() => {
-			connection.destroy();
-			reject(closed(socketPath, "timed out"));
-		}, ATTACH_TIMEOUT_MS);
-		connection.once("error", (error) => {
-			clearTimeout(timer);
-			reject(closed(socketPath, error.code ?? "failed"));
-		});
-		connection.once("connect", () => {
-			clearTimeout(timer);
-			resolve(connection);
-		});
-	});
+	const socket = await openEndpoint(socketPath, options);
 	const handlers = /* @__PURE__ */ new Map();
 	const peer = new RpcPeer({
 		send: (message) => {
@@ -3543,9 +3642,6 @@ async function open(socketPath, options, started) {
 		}
 	};
 }
-function closed(path, why) {
-	return new RpcError(createDiagnostic("MOSTRA_HOST_CONNECTION_CLOSED", { message: `Couldn't reach the instance at ${path} (${why}).` }));
-}
 /** A limit as people write it: `250 ms`, `5 s`, `1.5 s`. */
 function formatDuration(ms) {
 	if (ms < 1e3) return `${ms} ms`;
@@ -3630,7 +3726,8 @@ async function run(io) {
 		return exitCodeFor(diagnostic.code);
 	};
 	const platform = io.platform ?? process.platform;
-	if (platform !== "darwin" && platform !== "linux") return fail(createDiagnostic("MOSTRA_PLATFORM_UNSUPPORTED", { message: `Mostra runs on macOS and Linux; this is ${platform}.` }));
+	const unsupported = checkPlatform(platform, io.arch ?? process.arch, io.env);
+	if (unsupported) return fail(unsupported);
 	let parsed;
 	try {
 		parsed = parseCommandLine(COMMANDS, io.argv);
@@ -3821,4 +3918,4 @@ async function runRuntime(io, args, stdio) {
 //#endregion
 export { COMMANDS as a, referenceMarkdown as i, commandDefinition as n, commandHelp as r, run as t };
 
-//# sourceMappingURL=run-BJaRnz-Q.js.map
+//# sourceMappingURL=run-BpVu5uQ8.js.map