@quickchatai/quickreview 0.0.0-stage → 1.1.0

package/dist/src/ipc/postshim.js

@@ -0,0 +1,137 @@
+// The Node post client behind scripts/post-review.sh, approve-pr.sh and
+// reply-thread.sh.
+//
+// On a host the daemon runs (a round worker, an answer worker, a debug pi) the
+// three scripts keep their seeded names and their arguments, and always hand
+// over to this client; without QCR_IPC_SOCKET and QCR_IPC_CAP_FD in env the
+// client refuses:
+//
+//     exec node dist/src/ipc/postshim.js review|approval|reply "$@"
+//
+// It holds no GitHub credential and builds no payload. It names the result
+// files the host wrote (absolute paths; the daemon checks they sit in the PR's
+// own directories) and sends the round's identity the host already carries in
+// env. The capability is read from the inherited fd with pread for EACH post,
+// never cached, so a revoked or replaced capability is never used twice.
+//
+// Exit code 0: the daemon posted, recorded the post in dry-run, found it
+// already confirmed, or took the delivery over (deferred). Anything else
+// prints the daemon's typed refusal and exits 1.
+import { resolve } from "node:path";
+import { connectFromEnv } from "./client.js";
+import { IpcError } from "./protocol.js";
+const KINDS = {
+    review: {
+        op: "post.review",
+        prefix: "post-review",
+        usage: "usage: post-review.sh <pr-number> <REQUEST_CHANGES|COMMENT> <body-file> [comments-json-file]",
+    },
+    approval: {
+        op: "post.approval",
+        prefix: "approve-pr",
+        usage: "usage: approve-pr.sh <pr-number> [review-body-file] [comments-json-file]",
+    },
+    reply: {
+        op: "post.reply",
+        prefix: "reply-thread",
+        usage: "usage: reply-thread.sh <pr-number> <comment-id> <body-file>",
+    },
+};
+const processIo = {
+    stdout: (t) => void process.stdout.write(t),
+    stderr: (t) => void process.stderr.write(t),
+};
+/** A posting call can include GitHub's own 60 s deadline and a marker read. */
+const POST_TIMEOUT_MS = 150_000;
+/** The round identity a keyed round's host carries in env. */
+function roundClaims(env) {
+    const out = {};
+    const round = env.QCR_ROUND_NO;
+    if (round !== undefined && round !== "") {
+        if (!/^\d+$/.test(round))
+            throw new IpcError("bad_request", "QCR_ROUND_NO must be an integer");
+        out.round_no = Number(round);
+    }
+    if (env.QCR_EXPECTED_HEAD)
+        out.expected_head = env.QCR_EXPECTED_HEAD;
+    if (env.QCR_POSTING_KEY)
+        out.posting_key = env.QCR_POSTING_KEY;
+    return out;
+}
+/** The request body for one script's arguments, or an IpcError naming the usage. */
+export function postRequest(kind, args, env) {
+    const usage = KINDS[kind].usage;
+    const pr = args[0] ?? "";
+    if (!/^\d+$/.test(pr))
+        throw new IpcError("bad_request", usage);
+    const prNo = Number(pr);
+    const file = (p) => p === undefined || p === "" ? undefined : resolve(p);
+    if (kind === "review") {
+        const event = args[1] ?? "";
+        if (event === "APPROVE")
+            throw new IpcError("bad_request", "APPROVE is not allowed here — use scripts/approve-pr.sh (it also clears the wake triggers)");
+        if (event !== "REQUEST_CHANGES" && event !== "COMMENT")
+            throw new IpcError("bad_request", usage);
+        const bodyFile = file(args[2]);
+        if (!bodyFile)
+            throw new IpcError("bad_request", `unreadable review body file: <missing>`);
+        return {
+            pr: prNo,
+            body: {
+                pr: prNo,
+                event,
+                body_file: bodyFile,
+                ...(file(args[3]) ? { comments_file: file(args[3]) } : {}),
+                ...roundClaims(env),
+            },
+        };
+    }
+    if (kind === "approval") {
+        return {
+            pr: prNo,
+            body: {
+                pr: prNo,
+                ...(file(args[1]) ? { body_file: file(args[1]) } : {}),
+                ...(file(args[2]) ? { comments_file: file(args[2]) } : {}),
+                ...roundClaims(env),
+            },
+        };
+    }
+    const cid = args[1] ?? "";
+    if (!/^\d+$/.test(cid))
+        throw new IpcError("bad_request", `${usage} (comment-id is the numeric databaseId, see pr-threads.sh)`);
+    const bodyFile = file(args[2]);
+    if (!bodyFile)
+        throw new IpcError("bad_request", `unreadable reply body file: <missing>`);
+    return { pr: prNo, body: { pr: prNo, comment_id: Number(cid), body_file: bodyFile } };
+}
+/** Run one post. Resolves to the process exit code. */
+export async function runPostShim(kind, args, env = process.env, io = processIo) {
+    if (!Object.hasOwn(KINDS, kind)) {
+        io.stderr(`postshim: unknown kind ${kind} (review, approval or reply)\n`);
+        return 2;
+    }
+    const k = KINDS[kind];
+    let client;
+    try {
+        const { pr, body } = postRequest(kind, args, env);
+        client = await connectFromEnv("shim", env, { timeoutMs: POST_TIMEOUT_MS });
+        const out = await client.request(k.op, body, { pr });
+        for (const line of Array.isArray(out?.lines) ? out.lines : [])
+            io.stdout(`${String(line)}\n`);
+        return 0;
+    }
+    catch (e) {
+        const err = e instanceof IpcError ? e : new IpcError("internal", String(e));
+        io.stderr(`${k.prefix}: ${err.code}: ${err.message}\n`);
+        return 1;
+    }
+    finally {
+        client?.close();
+    }
+}
+// Run only as the entry point, not when a test imports runPostShim.
+if (process.argv[1]?.endsWith("postshim.js")) {
+    void runPostShim(process.argv[2] ?? "", process.argv.slice(3)).then((code) => process.exit(code));
+}
+//# sourceMappingURL=postshim.js.map

package/dist/src/ipc/postshim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postshim.js","sourceRoot":"","sources":["../../../src/ipc/postshim.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,mBAAmB;AACnB,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,4EAA4E;AAC5E,kBAAkB;AAClB,EAAE;AACF,oEAAoE;AACpE,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,yEAAyE;AACzE,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,iDAAiD;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAe,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,KAAK,GAAG;IACZ,MAAM,EAAE;QACN,EAAE,EAAE,aAAa;QACjB,MAAM,EAAE,aAAa;QACrB,KAAK,EACH,8FAA8F;KACjG;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,eAAe;QACnB,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,0EAA0E;KAClF;IACD,KAAK,EAAE;QACL,EAAE,EAAE,YAAY;QAChB,MAAM,EAAE,cAAc;QACtB,KAAK,EAAE,6DAA6D;KACrE;CACO,CAAC;AAeX,MAAM,SAAS,GAAW;IACxB,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;CAC5C,CAAC;AAEF,+EAA+E;AAC/E,MAAM,eAAe,GAAG,OAAO,CAAC;AAEhC,8DAA8D;AAC9D,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC;IAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;QAC/F,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,GAAG,CAAC,iBAAiB;QAAE,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACrE,IAAI,GAAG,CAAC,eAAe;QAAE,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,eAAe,CAAC;IAC/D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,WAAW,CACzB,IAAkB,EAClB,IAAuB,EACvB,GAAW;IAEX,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;IAChC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,CAAC,CAAqB,EAAsB,EAAE,CACzD,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YACrB,MAAM,IAAI,QAAQ,CAChB,aAAa,EACb,4FAA4F,CAC7F,CAAC;QACJ,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK,KAAK,SAAS;YACpD,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,wCAAwC,CAAC,CAAC;QAC3F,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE;gBACJ,EAAE,EAAE,IAAI;gBACR,KAAK;gBACL,SAAS,EAAE,QAAQ;gBACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,WAAW,CAAC,GAAG,CAAC;aACpB;SACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE;gBACJ,EAAE,EAAE,IAAI;gBACR,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,WAAW,CAAC,GAAG,CAAC;aACpB;SACF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QACpB,MAAM,IAAI,QAAQ,CAChB,aAAa,EACb,GAAG,KAAK,4DAA4D,CACrE,CAAC;IACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,uCAAuC,CAAC,CAAC;IAC1F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC;AACxF,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,IAAuB,EACvB,MAAc,OAAO,CAAC,GAAG,EACzB,KAAa,SAAS;IAEtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QAChC,EAAE,CAAC,MAAM,CAAC,0BAA0B,IAAI,gCAAgC,CAAC,CAAC;QAC1E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAoB,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,IAAoB,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAClE,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAU,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YAAE,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9F,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,KAAK,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;IAC7C,KAAK,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACpG,CAAC"}

package/dist/src/ipc/protocol.js

@@ -0,0 +1,239 @@
+// The worker-daemon wire protocol: one JSON object per line over a Unix
+// socket, a `v` field on every message, typed errors.
+//
+// This directory is NEUTRAL by fence (tests/fences-ipc.test.ts): it imports
+// nothing from src/engine/ or pi, so the daemon can serve it and a worker, a
+// post shim or a debug pi can speak it without either side dragging the
+// other's closure in. The daemon-side facts the server needs (which PR a
+// command belongs to, its live generation, its lease) arrive through the
+// `CommandLookup` port, never by importing the state store.
+/** `<major>.<minor>`. A different MAJOR is refused; a newer minor is accepted
+ * (it may only add fields and kinds, which a reader ignores). */
+export const IPC_PROTOCOL_MAJOR = 1;
+export const IPC_PROTOCOL_MINOR = 0;
+export const IPC_VERSION = `${IPC_PROTOCOL_MAJOR}.${IPC_PROTOCOL_MINOR}`;
+/** The wire name of the GitHub read op: the daemon registers it
+ * (src/ghread.ts) and the read shim requests it. */
+export const GH_READ_OP = "github.read";
+/** The longest line, in bytes without the newline. A result file travels by
+ * PATH, never inline, so nothing legitimate comes near this. */
+export const MAX_LINE_BYTES = 1024 * 1024;
+/** `worker` is the round's host process; `shim` is a post shim run from the
+ * model's bash, which inherits the capability fd. */
+export const IPC_ROLES = ["worker", "shim"];
+/** What the worker reports, in the order a round normally emits them. */
+export const IPC_EVENT_KINDS = [
+    "ready",
+    "accepted",
+    "progress",
+    "usage",
+    "posted",
+    "verdict_written",
+    "compacted",
+    "done",
+    "failed",
+];
+export const IPC_ERROR_CODES = [
+    "bad_frame", // not a JSON object line
+    "bad_request", // a field is missing or has the wrong shape
+    "line_too_long",
+    "unsupported_version", // a major this build does not speak
+    "unauthorized", // unknown command or wrong capability (never says which)
+    "no_hello", // a request before the connection said who it is
+    "stale_generation",
+    "command_inactive", // the command has no active session_commands row
+    "wrong_pr", // the request names another PR than the command's
+    "unknown_op",
+    "forbidden", // the role may not call this op
+    "lease_takeover", // the PR is under a takeover lease: it can post nothing
+    "may_post_required", // an answer worker whose message did not carry may_post
+    "bad_path", // a result file outside the PR's own dir, or not a plain readable file
+    "cancelled", // a permit wait ended by a release or by the command ending
+    "blocked", // the gate or a guard refused the mutation: nothing was posted
+    "post_failed", // GitHub answered the post with a refusal
+    "rate_limited", // too many reads in flight or in the last minute for this PR (github.read)
+    "internal",
+    "closed", // client side: the connection ended
+    "timeout", // client side
+];
+export class IpcError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "IpcError";
+    }
+}
+const VERSION_RE = /^(\d{1,4})\.(\d{1,4})$/;
+export const COMMAND_ID_RE = /^[A-Za-z0-9_.:-]{1,128}$/;
+export const CAPABILITY_RE = /^[0-9a-f]{32}$/;
+export function parseVersion(v) {
+    if (typeof v !== "string")
+        return null;
+    const m = VERSION_RE.exec(v);
+    return m ? { major: Number(m[1]), minor: Number(m[2]) } : null;
+}
+function isRecord(x) {
+    return typeof x === "object" && x !== null && !Array.isArray(x);
+}
+function str(o, key, max = 256) {
+    const x = o[key];
+    if (typeof x !== "string" || x === "" || x.length > max)
+        throw new IpcError("bad_request", `\`${key}\` must be a non-empty string`);
+    return x;
+}
+function nat(o, key) {
+    const x = o[key];
+    if (typeof x !== "number" || !Number.isSafeInteger(x) || x < 0)
+        throw new IpcError("bad_request", `\`${key}\` must be a non-negative integer`);
+    return x;
+}
+function wireError(x) {
+    if (!isRecord(x))
+        throw new IpcError("bad_request", "`error` must be an object");
+    const code = x.code;
+    if (!IPC_ERROR_CODES.includes(code))
+        throw new IpcError("bad_request", "`error.code` is not a known code");
+    return { code: code, message: typeof x.message === "string" ? x.message : "" };
+}
+/**
+ * One line to one message. The version is judged FIRST, before any other field
+ * is read, so a future major whose shapes differ is refused as such rather than
+ * as a malformed request.
+ */
+export function decodeMessage(line) {
+    let raw;
+    try {
+        raw = JSON.parse(line);
+    }
+    catch {
+        throw new IpcError("bad_frame", "the line is not JSON");
+    }
+    if (!isRecord(raw))
+        throw new IpcError("bad_frame", "the line is not a JSON object");
+    const ver = parseVersion(raw.v);
+    if (ver === null)
+        throw new IpcError("bad_request", '`v` must be "<major>.<minor>"');
+    if (ver.major !== IPC_PROTOCOL_MAJOR)
+        throw new IpcError("unsupported_version", `protocol major ${ver.major} is not supported (this build speaks ${IPC_PROTOCOL_MAJOR})`);
+    const v = raw.v;
+    switch (raw.type) {
+        case "hello": {
+            const role = raw.role;
+            if (!IPC_ROLES.includes(role))
+                throw new IpcError("bad_request", "`role` must be worker or shim");
+            const command_id = str(raw, "command_id", 128);
+            if (!COMMAND_ID_RE.test(command_id))
+                throw new IpcError("bad_request", "`command_id` has an invalid shape");
+            const capability = str(raw, "capability", 64);
+            if (!CAPABILITY_RE.test(capability))
+                throw new IpcError("unauthorized", "the capability is not accepted");
+            return { v, type: "hello", role: role, command_id, capability };
+        }
+        case "hello_ok":
+            return {
+                v,
+                type: "hello_ok",
+                command_id: str(raw, "command_id", 128),
+                pr: nat(raw, "pr"),
+                generation: nat(raw, "generation"),
+            };
+        case "request": {
+            const msg = {
+                v,
+                type: "request",
+                id: str(raw, "id", 128),
+                op: str(raw, "op", 128),
+                generation: nat(raw, "generation"),
+            };
+            if (raw.pr !== undefined)
+                msg.pr = nat(raw, "pr");
+            if (raw.body !== undefined)
+                msg.body = raw.body;
+            return msg;
+        }
+        case "response": {
+            const id = str(raw, "id", 128);
+            if (typeof raw.ok !== "boolean")
+                throw new IpcError("bad_request", "`ok` must be a boolean");
+            const msg = { v, type: "response", id, ok: raw.ok };
+            if (raw.ok)
+                msg.body = raw.body;
+            else
+                msg.error = wireError(raw.error);
+            return msg;
+        }
+        case "event": {
+            const kind = raw.kind;
+            if (!IPC_EVENT_KINDS.includes(kind))
+                throw new IpcError("bad_request", "`kind` is not a known event kind");
+            return {
+                v,
+                type: "event",
+                kind: kind,
+                generation: nat(raw, "generation"),
+                body: raw.body,
+            };
+        }
+        case "control":
+            return { v, type: "control", kind: str(raw, "kind", 64), body: raw.body };
+        case "error":
+            return { v, type: "error", error: wireError(raw.error) };
+        default:
+            throw new IpcError("bad_request", "`type` is not a known message type");
+    }
+}
+/** One message to one line, newline included. Refuses to SEND an oversize line,
+ * so the sender learns of it instead of the peer dropping the connection. */
+export function encodeMessage(msg, maxBytes = MAX_LINE_BYTES) {
+    const line = JSON.stringify(msg);
+    if (Buffer.byteLength(line) > maxBytes)
+        throw new IpcError("line_too_long", `the message is over ${maxBytes} bytes`);
+    return `${line}\n`;
+}
+/**
+ * Splits a byte stream into lines, bounded. A line over `maxBytes` throws
+ * `line_too_long` as soon as the bound is crossed, even before its newline
+ * arrives, so a peer that never sends one cannot grow the buffer.
+ */
+export class LineDecoder {
+    maxBytes;
+    pending = [];
+    pendingBytes = 0;
+    constructor(maxBytes = MAX_LINE_BYTES) {
+        this.maxBytes = maxBytes;
+    }
+    // A socket's "data" is typed `string | Buffer` (a string once setEncoding is
+    // called). No socket here sets one, so a chunk is bytes; a string is still
+    // taken as its UTF-8 bytes rather than mis-split by character offsets.
+    push(data) {
+        const chunk = typeof data === "string" ? Buffer.from(data, "utf8") : data;
+        const lines = [];
+        let start = 0;
+        for (let nl = chunk.indexOf(0x0a, start); nl >= 0; nl = chunk.indexOf(0x0a, start)) {
+            const piece = chunk.subarray(start, nl);
+            if (this.pendingBytes + piece.length > this.maxBytes)
+                this.tooLong();
+            const line = Buffer.concat([...this.pending, piece]).toString("utf8");
+            this.pending = [];
+            this.pendingBytes = 0;
+            if (line.trim() !== "")
+                lines.push(line);
+            start = nl + 1;
+        }
+        const rest = chunk.subarray(start);
+        if (rest.length > 0) {
+            if (this.pendingBytes + rest.length > this.maxBytes)
+                this.tooLong();
+            this.pending.push(Buffer.from(rest));
+            this.pendingBytes += rest.length;
+        }
+        return lines;
+    }
+    tooLong() {
+        this.pending = [];
+        this.pendingBytes = 0;
+        throw new IpcError("line_too_long", `a line is over ${this.maxBytes} bytes`);
+    }
+}
+//# sourceMappingURL=protocol.js.map

package/dist/src/ipc/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../src/ipc/protocol.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,sDAAsD;AACtD,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,4DAA4D;AAE5D;iEACiE;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,kBAAkB,IAAI,kBAAkB,EAAE,CAAC;AAEzE;oDACoD;AACpD,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC;AAExC;gEACgE;AAChE,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1C;qDACqD;AACrD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAU,CAAC;AAGrD,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,OAAO;IACP,UAAU;IACV,UAAU;IACV,OAAO;IACP,QAAQ;IACR,iBAAiB;IACjB,WAAW;IACX,MAAM;IACN,QAAQ;CACA,CAAC;AAGX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,WAAW,EAAE,yBAAyB;IACtC,aAAa,EAAE,4CAA4C;IAC3D,eAAe;IACf,qBAAqB,EAAE,oCAAoC;IAC3D,cAAc,EAAE,yDAAyD;IACzE,UAAU,EAAE,iDAAiD;IAC7D,kBAAkB;IAClB,kBAAkB,EAAE,iDAAiD;IACrE,UAAU,EAAE,kDAAkD;IAC9D,YAAY;IACZ,WAAW,EAAE,gCAAgC;IAC7C,gBAAgB,EAAE,wDAAwD;IAC1E,mBAAmB,EAAE,wDAAwD;IAC7E,UAAU,EAAE,uEAAuE;IACnF,WAAW,EAAE,4DAA4D;IACzE,SAAS,EAAE,+DAA+D;IAC1E,aAAa,EAAE,0CAA0C;IACzD,cAAc,EAAE,2EAA2E;IAC3F,UAAU;IACV,QAAQ,EAAE,oCAAoC;IAC9C,SAAS,EAAE,cAAc;CACjB,CAAC;AAGX,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEtB;IADX,YACW,IAAkB,EAC3B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAc;QAI3B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AA6ED,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAC5C,MAAM,CAAC,MAAM,aAAa,GAAG,0BAA0B,CAAC;AACxD,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAE9C,MAAM,UAAU,YAAY,CAAC,CAAU;IACrC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,GAAG,CAAC,CAA0B,EAAE,GAAW,EAAE,GAAG,GAAG,GAAG;IAC7D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG;QACrD,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,KAAK,GAAG,+BAA+B,CAAC,CAAC;IAC7E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,GAAG,CAAC,CAA0B,EAAE,GAAW;IAClD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5D,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,KAAK,GAAG,mCAAmC,CAAC,CAAC;IACjF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACpB,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAoB,CAAC;QACjD,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,kCAAkC,CAAC,CAAC;IACxE,OAAO,EAAE,IAAI,EAAE,IAAoB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACjG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,IAAI;QAAE,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;IACrF,IAAI,GAAG,CAAC,KAAK,KAAK,kBAAkB;QAClC,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,kBAAkB,GAAG,CAAC,KAAK,wCAAwC,kBAAkB,GAAG,CACzF,CAAC;IACJ,MAAM,CAAC,GAAG,GAAG,CAAC,CAAW,CAAC;IAC1B,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YACtB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAe,CAAC;gBACtC,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;YACrE,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;gBACjC,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAC;YACzE,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;gBACjC,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;YACvE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAe,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QAC7E,CAAC;QACD,KAAK,UAAU;YACb,OAAO;gBACL,CAAC;gBACD,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC;gBACvC,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC;gBAClB,UAAU,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC;aACnC,CAAC;QACJ,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,GAAG,GAAmB;gBAC1B,CAAC;gBACD,IAAI,EAAE,SAAS;gBACf,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC;gBACvB,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC;gBACvB,UAAU,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC;aACnC,CAAC;YACF,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS;gBAAE,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAChD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/B,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,SAAS;gBAAE,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;YAC7F,MAAM,GAAG,GAAoB,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YACrE,IAAI,GAAG,CAAC,EAAE;gBAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;;gBAC3B,GAAG,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YACtB,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAoB,CAAC;gBACjD,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,kCAAkC,CAAC,CAAC;YACxE,OAAO;gBACL,CAAC;gBACD,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,IAAoB;gBAC1B,UAAU,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC;gBAClC,IAAI,EAAE,GAAG,CAAC,IAAI;aACf,CAAC;QACJ,CAAC;QACD,KAAK,SAAS;YACZ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5E,KAAK,OAAO;YACV,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D;YACE,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED;6EAC6E;AAC7E,MAAM,UAAU,aAAa,CAAC,GAAe,EAAE,QAAQ,GAAG,cAAc;IACtE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ;QACpC,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,uBAAuB,QAAQ,QAAQ,CAAC,CAAC;IAC/E,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,WAAW;IAIO;IAHrB,OAAO,GAAa,EAAE,CAAC;IACvB,YAAY,GAAG,CAAC,CAAC;IAEzB,YAA6B,WAAW,cAAc;QAAzB,aAAQ,GAAR,QAAQ,CAAiB;IAAG,CAAC;IAE1D,6EAA6E;IAC7E,2EAA2E;IAC3E,uEAAuE;IACvE,IAAI,CAAC,IAAqB;QACxB,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YACnF,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtE,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;YACtB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACpE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QACtB,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,kBAAkB,IAAI,CAAC,QAAQ,QAAQ,CAAC,CAAC;IAC/E,CAAC;CACF"}