@rndmjoker/proton-mcp 0.4.13 → 0.5.1

package/dist/browser/host.js

@@ -0,0 +1,258 @@
+/**
+ * The connector Chrome starts for the extension (#59), in Chrome's words a
+ * native messaging host.
+ *
+ * Chrome starts it when the extension asks for it, hands it the extension's
+ * origin as the first argument, and talks to it over standard input and
+ * output. Chrome starts it only for the extension named in its manifest, and
+ * only from that extension: a web page cannot reach it.
+ *
+ * The connector opens a socket file for this server and relays between the two.
+ * It holds nothing and decides nothing about filters. What it does decide is
+ * who gets through:
+ *
+ * - Chrome's origin has to be the extension's fixed id.
+ * - A connection on the socket has to prove it knows the secret from the
+ *   setup before it may send anything, and the connector proves the same back.
+ * - Every request has to be one of the three kinds in messages.ts, in exactly
+ *   that shape, and every answer from the extension as well.
+ *
+ * It stops when Chrome closes the channel, which happens when the extension
+ * is switched off, reloaded or removed, or when Chrome quits.
+ *
+ * The setup copies this file, with connector.ts, paths.ts, channel.ts and
+ * messages.ts, into the user's configuration directory, and connector.ts
+ * starts it with the Node the setup ran under. So it imports nothing but Node
+ * and those files.
+ */
+import { createServer, connect } from 'node:net';
+import { existsSync, unlinkSync, chmodSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { EXTENSION_ID, PROTOCOL_VERSION, parseRequest, parseResponse, isRequestId } from './messages.js';
+import { encodeNative, NativeReader, LineReader, MAX_REQUEST_LINE, parseLine, newNonce, proof, proofMatches, isNonce, readSecret, ensurePrivateDir, } from './channel.js';
+/** How long a request may wait for the extension. Filling in a confirmation is not waited for. */
+export const REQUEST_TIMEOUT_MS = 60_000;
+/** How long a new connection has to prove the secret. */
+const AUTH_TIMEOUT_MS = 3_000;
+const MAX_PENDING_PER_CONNECTION = 4;
+const MAX_PENDING = 16;
+/** True when something already answers on the socket: a connector of another Chrome profile. */
+function answers(path) {
+    return new Promise((resolve) => {
+        const probe = connect(path);
+        const timer = setTimeout(() => {
+            probe.destroy();
+            resolve(false);
+        }, 500);
+        probe.once('connect', () => {
+            clearTimeout(timer);
+            probe.destroy();
+            resolve(true);
+        });
+        probe.once('error', () => {
+            clearTimeout(timer);
+            resolve(false);
+        });
+    });
+}
+export async function runHost(options) {
+    const { input, output, paths } = options;
+    const log = options.log ?? (() => undefined);
+    const timeoutMs = options.requestTimeoutMs ?? REQUEST_TIMEOUT_MS;
+    const isPipe = paths.platform === 'win32';
+    const toChrome = (message) => new Promise((resolve) => {
+        try {
+            output.write(encodeNative(message), () => resolve());
+        }
+        catch (error) {
+            log(`could not pass a message to Chrome: ${error.message}`);
+            resolve();
+        }
+    });
+    // Reported to the extension, which shows it in its popup, and then the
+    // connector ends: Chrome sees the channel close and the extension knows why.
+    const giveUp = async (failure) => {
+        log(failure);
+        await toChrome({ type: 'host-error', message: failure });
+        return { done: Promise.resolve(), failure, close: async () => undefined };
+    };
+    if (options.origin !== `chrome-extension://${EXTENSION_ID}/`) {
+        return giveUp('The connector was started for an extension it does not serve.');
+    }
+    const secret = readSecret(paths.secretFile);
+    if (!secret) {
+        return giveUp('The connector is not set up: the secret is missing. Run the setup again.');
+    }
+    if (!isPipe) {
+        try {
+            ensurePrivateDir(dirname(paths.socket));
+        }
+        catch (error) {
+            return giveUp(error.message);
+        }
+    }
+    if ((isPipe || existsSync(paths.socket)) && (await answers(paths.socket))) {
+        return giveUp('Another Chrome profile already runs the connector. Only one profile at a time can serve the server; ' +
+            'switch the extension off in the other one.');
+    }
+    if (!isPipe && existsSync(paths.socket)) {
+        // Left behind by a connector that did not get to clean up.
+        try {
+            unlinkSync(paths.socket);
+        }
+        catch {
+            // Listening fails below with the reason.
+        }
+    }
+    const pending = new Map();
+    const sockets = new Set();
+    let counter = 0;
+    const server = createServer((socket) => serve(socket));
+    try {
+        await new Promise((resolve, reject) => {
+            server.once('error', reject);
+            server.listen(paths.socket, () => {
+                server.off('error', reject);
+                resolve();
+            });
+        });
+    }
+    catch (error) {
+        return giveUp(`The connector could not open its socket: ${error.message}`);
+    }
+    if (!isPipe)
+        chmodSync(paths.socket, 0o600);
+    await toChrome({ type: 'host-ready', version: PROTOCOL_VERSION });
+    function serve(socket) {
+        sockets.add(socket);
+        const reader = new LineReader(MAX_REQUEST_LINE);
+        const nonce = newNonce();
+        let ready = false;
+        const send = (message) => {
+            if (!socket.destroyed)
+                socket.write(`${JSON.stringify(message)}\n`);
+        };
+        const answer = (clientId, body) => send({ type: 'response', id: clientId, body });
+        const authTimer = setTimeout(() => socket.destroy(), AUTH_TIMEOUT_MS);
+        send({ type: 'hello', version: PROTOCOL_VERSION, nonce });
+        socket.on('data', (chunk) => {
+            let lines;
+            try {
+                lines = reader.push(chunk);
+            }
+            catch {
+                socket.destroy();
+                return;
+            }
+            for (const line of lines) {
+                const message = parseLine(line);
+                if (!ready) {
+                    clearTimeout(authTimer);
+                    if (!message ||
+                        message.type !== 'auth' ||
+                        !isNonce(message.nonce) ||
+                        !proofMatches(secret, 'client', nonce, message.proof)) {
+                        log('refused a connection that could not prove the secret');
+                        socket.destroy();
+                        return;
+                    }
+                    ready = true;
+                    send({ type: 'ready', proof: proof(secret, 'host', message.nonce) });
+                    continue;
+                }
+                if (!message || message.type !== 'request' || !isRequestId(message.id)) {
+                    socket.destroy();
+                    return;
+                }
+                const clientId = message.id;
+                const body = parseRequest(message.body);
+                if (!body) {
+                    answer(clientId, { ok: false, error: 'unknown-request', message: 'The connector does not pass on this request.' });
+                    continue;
+                }
+                const mine = [...pending.values()].filter((entry) => entry.socket === socket).length;
+                if (mine >= MAX_PENDING_PER_CONNECTION || pending.size >= MAX_PENDING) {
+                    answer(clientId, { ok: false, error: 'busy', message: 'The extension is still working on earlier requests.' });
+                    continue;
+                }
+                const id = `h${++counter}`;
+                const timer = setTimeout(() => {
+                    pending.delete(id);
+                    answer(clientId, { ok: false, error: 'timeout', message: 'The extension did not answer in time.' });
+                }, timeoutMs);
+                pending.set(id, { socket, clientId, timer });
+                void toChrome({ type: 'request', id, body });
+            }
+        });
+        socket.on('close', () => {
+            clearTimeout(authTimer);
+            sockets.delete(socket);
+            for (const [id, entry] of pending) {
+                if (entry.socket === socket) {
+                    clearTimeout(entry.timer);
+                    pending.delete(id);
+                }
+            }
+        });
+        socket.on('error', () => undefined);
+    }
+    const native = new NativeReader();
+    input.on('data', (chunk) => {
+        let messages;
+        try {
+            messages = native.push(chunk);
+        }
+        catch (error) {
+            log(error.message);
+            void close();
+            return;
+        }
+        for (const message of messages) {
+            if (typeof message !== 'object' || message === null)
+                continue;
+            const { type, id, body } = message;
+            if (type !== 'response' || typeof id !== 'string')
+                continue;
+            const entry = pending.get(id);
+            if (!entry)
+                continue;
+            pending.delete(id);
+            clearTimeout(entry.timer);
+            const parsed = parseResponse(body) ?? {
+                ok: false,
+                error: 'internal',
+                message: 'The extension answered in a shape the connector does not pass on.',
+            };
+            if (!entry.socket.destroyed) {
+                entry.socket.write(`${JSON.stringify({ type: 'response', id: entry.clientId, body: parsed })}\n`);
+            }
+        }
+    });
+    let resolveDone;
+    const done = new Promise((resolve) => (resolveDone = resolve));
+    let closing;
+    function close() {
+        closing ??= (async () => {
+            for (const entry of pending.values())
+                clearTimeout(entry.timer);
+            pending.clear();
+            for (const socket of sockets)
+                socket.destroy();
+            await new Promise((resolve) => server.close(() => resolve()));
+            if (!isPipe) {
+                try {
+                    unlinkSync(paths.socket);
+                }
+                catch {
+                    // Already gone.
+                }
+            }
+            resolveDone();
+        })();
+        return closing;
+    }
+    input.on('end', () => void close());
+    input.on('close', () => void close());
+    return { done, close };
+}
+//# sourceMappingURL=host.js.map

package/dist/browser/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../src/browser/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,YAAY,EAAE,OAAO,EAAe,MAAM,UAAU,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAwB,MAAM,eAAe,CAAA;AAE9H,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,SAAS,EACT,QAAQ,EACR,KAAK,EACL,YAAY,EACZ,OAAO,EACP,UAAU,EACV,gBAAgB,GACjB,MAAM,cAAc,CAAA;AAErB,kGAAkG;AAClG,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAA;AAExC,yDAAyD;AACzD,MAAM,eAAe,GAAG,KAAK,CAAA;AAE7B,MAAM,0BAA0B,GAAG,CAAC,CAAA;AACpC,MAAM,WAAW,GAAG,EAAE,CAAA;AAsBtB,gGAAgG;AAChG,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,OAAO,EAAE,CAAA;YACf,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,CAAC,EAAE,GAAG,CAAC,CAAA;QACP,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,KAAK,CAAC,OAAO,EAAE,CAAA;YACf,OAAO,CAAC,IAAI,CAAC,CAAA;QACf,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAoB;IAChD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,IAAI,kBAAkB,CAAA;IAChE,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAA;IAEzC,MAAM,QAAQ,GAAG,CAAC,OAAgB,EAAiB,EAAE,CACnD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACtB,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,uCAAwC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;YACtE,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC,CAAC,CAAA;IAEJ,uEAAuE;IACvE,6EAA6E;IAC7E,MAAM,MAAM,GAAG,KAAK,EAAE,OAAe,EAAwB,EAAE;QAC7D,GAAG,CAAC,OAAO,CAAC,CAAA;QACZ,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;QACxD,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAA;IAC3E,CAAC,CAAA;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,sBAAsB,YAAY,GAAG,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC,+DAA+D,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC,0EAA0E,CAAC,CAAA;IAC3F,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,MAAM,CACX,sGAAsG;YACpG,4CAA4C,CAC/C,CAAA;IACH,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,2DAA2D;QAC3D,IAAI,CAAC;YACH,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuE,CAAA;IAC9F,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,IAAI,OAAO,GAAG,CAAC,CAAA;IAEf,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;IACtD,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC5B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE;gBAC/B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBAC3B,OAAO,EAAE,CAAA;YACX,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,4CAA6C,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IACvF,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC3C,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAA;IAEjE,SAAS,KAAK,CAAC,MAAc;QAC3B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACnB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,gBAAgB,CAAC,CAAA;QAC/C,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAA;QACxB,IAAI,KAAK,GAAG,KAAK,CAAA;QACjB,MAAM,IAAI,GAAG,CAAC,OAAgB,EAAQ,EAAE;YACtC,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACrE,CAAC,CAAA;QACD,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAE,IAAqB,EAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QAChH,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAA;QAErE,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAA;QAEzD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,IAAI,KAAe,CAAA;YACnB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,OAAM;YACR,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;gBAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,YAAY,CAAC,SAAS,CAAC,CAAA;oBACvB,IACE,CAAC,OAAO;wBACR,OAAO,CAAC,IAAI,KAAK,MAAM;wBACvB,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;wBACvB,CAAC,YAAY,CAAC,MAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EACtD,CAAC;wBACD,GAAG,CAAC,sDAAsD,CAAC,CAAA;wBAC3D,MAAM,CAAC,OAAO,EAAE,CAAA;wBAChB,OAAM;oBACR,CAAC;oBACD,KAAK,GAAG,IAAI,CAAA;oBACZ,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAO,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;oBACrE,SAAQ;gBACV,CAAC;gBACD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;oBACvE,MAAM,CAAC,OAAO,EAAE,CAAA;oBAChB,OAAM;gBACR,CAAC;gBACD,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAA;gBAC3B,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBACvC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAA;oBAClH,SAAQ;gBACV,CAAC;gBACD,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAA;gBACpF,IAAI,IAAI,IAAI,0BAA0B,IAAI,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;oBACtE,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC,CAAA;oBAC9G,SAAQ;gBACV,CAAC;gBACD,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAA;gBAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;oBAClB,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC,CAAA;gBACrG,CAAC,EAAE,SAAS,CAAC,CAAA;gBACb,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;gBAC5C,KAAK,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9C,CAAC;QACH,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,YAAY,CAAC,SAAS,CAAC,CAAA;YACvB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACtB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBAClC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC5B,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;oBACzB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBACpB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAA;IACjC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACjC,IAAI,QAAmB,CAAA;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAE,KAAe,CAAC,OAAO,CAAC,CAAA;YAC7B,KAAK,KAAK,EAAE,CAAA;YACZ,OAAM;QACR,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;gBAAE,SAAQ;YAC7D,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,OAAkC,CAAA;YAC7D,IAAI,IAAI,KAAK,UAAU,IAAI,OAAO,EAAE,KAAK,QAAQ;gBAAE,SAAQ;YAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC7B,IAAI,CAAC,KAAK;gBAAE,SAAQ;YACpB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAClB,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACzB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI;gBACpC,EAAE,EAAE,KAAc;gBAClB,KAAK,EAAE,UAAmB;gBAC1B,OAAO,EAAE,mEAAmE;aAC7E,CAAA;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC5B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,CAAA;YACnG,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,WAAwB,CAAA;IAC5B,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,GAAG,OAAO,CAAC,CAAC,CAAA;IACpE,IAAI,OAAkC,CAAA;IAEtC,SAAS,KAAK;QACZ,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;YACtB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE;gBAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC/D,OAAO,CAAC,KAAK,EAAE,CAAA;YACf,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,MAAM,CAAC,OAAO,EAAE,CAAA;YAC9C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YACnE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,gBAAgB;gBAClB,CAAC;YACH,CAAC;YACD,WAAW,EAAE,CAAA;QACf,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAA;IACnC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAA;IAErC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AACxB,CAAC"}

package/dist/browser/messages.d.ts

@@ -0,0 +1,163 @@
+/**
+ * What the server, the connector and the browser extension may say to each other
+ * (#59).
+ *
+ * Three programs pass messages along: this server asks, the connector Chrome
+ * starts relays, and the extension does the work in the signed-in Proton page.
+ * Each of them checks every message against the fixed list below and drops
+ * anything else, so a program that reaches one of the channels can ask for
+ * nothing beyond these seven things. Unknown fields are refused rather than
+ * ignored: a field nobody reads today is one somebody may read tomorrow.
+ *
+ * The limits here are about shape, not about what is allowed. Whether a script
+ * may be saved is decided by src/filters/sieve.ts, in this server and again in
+ * the extension.
+ *
+ * Nothing from Node in here: the extension imports this file as well.
+ */
+/** The name Chrome knows the connector by. It has to match the host manifest. */
+export declare const HOST_NAME = "com.rndmjoker.proton_mcp";
+/**
+ * The id of the extension, fixed by the public key in its manifest.
+ *
+ * Chrome starts the connector only for the extensions its manifest names, and
+ * the connector checks the origin Chrome hands it once more.
+ */
+export declare const EXTENSION_ID = "nfmconelbflppeoolebhcckbmffiokkd";
+/** Raised whenever a message changes shape, so an old connector and a new server notice each other. */
+export declare const PROTOCOL_VERSION = 1;
+export interface FilterProposal {
+    name: string;
+    sieve: string;
+    /** The id of the filter this one replaces. Absent for a new filter. */
+    replaces?: string;
+    /**
+     * Whether to apply it to the mail already there once it is saved. With a
+     * question, this only ticks the box in the window, and the user decides.
+     */
+    apply?: boolean;
+}
+/** One move of a filter in Proton's order: the filter and the position it ends up at, from 1. */
+export interface FilterMoveRequest {
+    id: string;
+    position: number;
+}
+export type BrowserRequest = {
+    kind: 'status';
+} | {
+    kind: 'list_filters';
+    account: string;
+} | {
+    kind: 'propose_filter';
+    account: string;
+    proposal: FilterProposal;
+    confirm: boolean;
+    /** Whether applying to the mail already there may be offered at all: apply_filter is not switched off. */
+    applyAllowed: boolean;
+} | {
+    kind: 'apply_filter';
+    account: string;
+    filterId: string;
+    confirm: boolean;
+} | {
+    kind: 'reorder_filters';
+    account: string;
+    moves: FilterMoveRequest[];
+    confirm: boolean;
+} | {
+    kind: 'delete_filter';
+    account: string;
+    filterId: string;
+    confirm: boolean;
+} | {
+    kind: 'set_filter_status';
+    account: string;
+    filterId: string;
+    enabled: boolean;
+    confirm: boolean;
+};
+export interface ProtonFilter {
+    id: string;
+    name: string;
+    enabled: boolean;
+    /** Proton runs filters in this order, lowest first. */
+    order: number;
+    version: number;
+    sieve: string;
+}
+export type BrowserErrorCode = 'no-proton-tab' | 'signed-out' | 'wrong-account' | 'refused' | 'proton-error' | 'app-version' | 'not-found' | 'busy' | 'timeout' | 'internal' | 'unknown-request';
+/** An action waiting in the extension's queue because Proton was busy with an earlier one. */
+export interface QueuedAction {
+    action: 'save' | 'apply' | 'reorder' | 'delete' | 'status';
+    name: string;
+    /** When it was queued, in milliseconds since 1970. */
+    since: number;
+    attempts: number;
+}
+/** A change the extension made or was asked to make, as its popup lists them. */
+export interface RecentChange {
+    at: number;
+    name: string;
+    outcome: 'added' | 'replaced' | 'applied' | 'reordered' | 'deleted' | 'enabled' | 'disabled' | 'rejected' | 'failed' | 'queued' | 'cancelled';
+    how: 'confirmed' | 'without asking';
+    detail?: string;
+}
+export type BrowserResponse = {
+    ok: true;
+    kind: 'status';
+    extensionVersion: string;
+    protonTabs: number;
+} | {
+    ok: true;
+    kind: 'list_filters';
+    filters: ProtonFilter[];
+    queue?: QueuedAction[];
+    recent?: RecentChange[];
+} | {
+    ok: true;
+    kind: 'propose_filter';
+    outcome: 'shown' | 'added' | 'replaced' | 'queued';
+    filterId?: string;
+    /** With a proposal to apply as well and no question: what became of applying it. */
+    apply?: 'done' | 'queued' | 'failed' | 'shown';
+} | {
+    ok: true;
+    kind: 'apply_filter';
+    outcome: 'shown' | 'applied' | 'queued';
+} | {
+    ok: true;
+    kind: 'reorder_filters';
+    outcome: 'shown' | 'reordered' | 'queued';
+} | {
+    ok: true;
+    kind: 'delete_filter';
+    outcome: 'shown' | 'deleted' | 'queued';
+} | {
+    ok: true;
+    kind: 'set_filter_status';
+    outcome: 'shown' | 'switched' | 'queued';
+} | {
+    ok: false;
+    error: BrowserErrorCode;
+    message: string;
+};
+/** Generous bounds on shape. The real limits on names and scripts are in sieve.ts. */
+export declare const LIMITS: {
+    readonly account: 320;
+    readonly name: 1000;
+    /** Above the longest script sieve.ts takes, so a stored filter just over it can still be read. */
+    readonly sieve: 60000;
+    readonly id: 256;
+    readonly message: 4000;
+    readonly version: 64;
+    readonly filters: 1000;
+    readonly moves: 50;
+    readonly queue: 100;
+    readonly recent: 50;
+};
+/** A request as one of the seven kinds, or nothing when it is anything else. */
+export declare function parseRequest(value: unknown): BrowserRequest | undefined;
+/** An answer as one of the known shapes, or nothing when it is anything else. */
+export declare function parseResponse(value: unknown): BrowserResponse | undefined;
+/** True for the ids the server and the connector put on a request: short and plain. */
+export declare function isRequestId(value: unknown): value is string;