@songsid/agend 2.3.5-alpha.4 → 2.3.5-beta.1

package/dist/ui/shared/settings-width.js

@@ -1,31 +0,0 @@
-// #2936 (Settings content width, from app-shell.js) — #2978 merge: a module of its own, imported by the shell (which
-// restores the choice at load) and by Settings' Look section. A tab opened before an upgrade has the old shell, without
-// these names; the new Settings panel imports them from here instead, a module that tab loads fresh, so Settings still
-// opens (the width then applies from the first change on, and at the next load).
-import { createStore } from "./app-store.js";
-
-/** Settings' reading space is this device's layout choice, never a host-kept or staged preference. */
-export const SETTINGS_CONTENT_WIDTH_KEY = "agend_settings_content_width";
-export const SETTINGS_CONTENT_WIDTHS = Object.freeze([1000, 1200, 1440]);
-export const DEFAULT_SETTINGS_CONTENT_WIDTH = 1200;
-export const settingsContentWidthStore = createStore({ width: DEFAULT_SETTINGS_CONTENT_WIDTH });
-function storedSettingsContentWidth() {
-  try {
-    const value = globalThis.localStorage.getItem(SETTINGS_CONTENT_WIDTH_KEY);
-    return SETTINGS_CONTENT_WIDTHS.find((width) => String(width) === value) ?? DEFAULT_SETTINGS_CONTENT_WIDTH;
-  } catch { return DEFAULT_SETTINGS_CONTENT_WIDTH; }
-}
-function showSettingsContentWidth(width) {
-  // The property is consumed only by Settings' content maximum; CSS still fits a narrower window or form.
-  if (typeof document !== "undefined") document.documentElement.style.setProperty("--settings-width", `${width}px`);
-  settingsContentWidthStore.set({ width });
-}
-/** A page load restores this device's choice. Unreadable or invalid storage keeps the normal 1200 px maximum. */
-export function initSettingsContentWidth() { showSettingsContentWidth(storedSettingsContentWidth()); }
-/** Apply immediately even when storage is unavailable; then the choice lasts for this page only. */
-export function setSettingsContentWidth(width) {
-  if (!SETTINGS_CONTENT_WIDTHS.includes(width)) return;
-  try { globalThis.localStorage.setItem(SETTINGS_CONTENT_WIDTH_KEY, String(width)); } catch { /* this page only */ }
-  showSettingsContentWidth(width);
-}
-

package/dist/ui/shared/vendor/qrcode-generator.LICENSE

@@ -1,27 +0,0 @@
-The MIT License (MIT)
-
-Copyright (c) 2009 Kazuhiko Arase
-
-URL: http://www.d-project.com/
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-The word "QR Code" is a registered trademark of DENSO WAVE INCORPORATED.
-(The package ships this licence in its source header — "Licensed under the MIT license" — and no separate file;
-this is the MIT licence text with that header's copyright line.)

package/dist/ui/windows-agents-nav.js

@@ -1,2 +0,0 @@
-// Compatibility export for a cached app entry. The common InstanceNav owns every runtime.
-export function WindowsAgentsNav() { return null; }

package/dist/ui/windows-cli-catalog.js

@@ -1,108 +0,0 @@
-// Page-lived Windows inventory. Panels share successful results and one in-flight read;
-// closing a dialog only removes its subscription, so a second consumer can finish the read.
-import { html, useEffect, useState } from "/assets/app-html.js";
-import { createStore, useStore } from "/assets/app-store.js";
-import { useLease } from "/assets/app-ctx.js";
-import { register, t } from "/assets/app-i18n.js";
-import { Icon } from "/assets/ui-icons.js";
-
-export const WINDOWS_CLI_CATALOG_TTL_MS = 60_000;
-const initial = () => ({ data:null, loading:false, error:"", checkedAt:0, startedAt:0 });
-
-/** Successful inventory only, in memory. No polling, localStorage, credential data or model tasks. A plain load reads the
- * server's last detection (which starts nothing, M-2239 P1-2); only `force` (Detect again) runs detection. */
-export function createWindowsCliCatalog({ fetcher = (...args) => fetch(...args), now = () => Date.now(), ttlMs = WINDOWS_CLI_CATALOG_TTL_MS, timeoutMs = 100_000, machineId = "" } = {}) {
-  const store = createStore(initial());
-  let pending = null, controller = null, generation = 0;
-  const load = ({ force = false } = {}) => {
-    if (pending) return pending;
-    const old = store.get();
-    if (!force && old.data && now()-old.checkedAt < ttlMs) return Promise.resolve(old.data);
-    const mine = generation;
-    const abort = controller = new AbortController();
-    let timedOut = false;
-    const timer = setTimeout(() => { timedOut = true; abort.abort(); },timeoutMs);
-    store.set({loading:true,error:"",startedAt:now()});
-    pending = Promise.resolve().then(async () => {
-      try {
-        if (mine !== generation) return null;
-        const base = machineId ? `/ui/runtimes/machines/${encodeURIComponent(machineId)}` : "/ui/windows-cli";
-        const response = await fetcher(`${base}/${machineId && !force ? "inventory" : "probe"}`,{credentials:"same-origin",...(machineId && !force ? {} : {method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(machineId ? {} : force ? {force:true} : {})}),signal:abort.signal});
-        const body = await response.json();
-        if (!response.ok) {
-          if (mine === generation && [401,403].includes(response.status)) store.set({data:null,checkedAt:0});
-          throw new Error(body?.error || `HTTP ${response.status}`);
-        }
-        const value = machineId ? body.inventory || { home:"", clis:[], probedAt:null } : body;
-        if (!value || !Array.isArray(value.clis) || typeof value.home !== "string") throw new Error("Invalid Windows CLI inventory response");
-        if (mine === generation) store.set({data:value,checkedAt:now(),error:""});
-        return value;
-      } catch(error) {
-        if (mine === generation) store.set({error:timedOut ? "Windows CLI detection timed out" : error?.message || "Windows CLI detection failed"});
-        return null;
-      } finally {
-        clearTimeout(timer);
-        if (mine === generation) { pending = null; controller = null; store.set({loading:false}); }
-      }
-    });
-    return pending;
-  };
-  return { get:store.get, subscribe:store.subscribe, load, clear() { generation++; controller?.abort(); controller = null; pending = null; store.set(initial()); } };
-}
-
-const catalog = createWindowsCliCatalog();
-const remoteCatalogs = new Map();
-function catalogFor(machineId) {
-  if (!machineId) return catalog;
-  if (!remoteCatalogs.has(machineId)) remoteCatalogs.set(machineId,createWindowsCliCatalog({machineId}));
-  return remoteCatalogs.get(machineId);
-}
-export const refreshWindowsCliCatalog = (machineId = "") => catalogFor(machineId).load({force:true});
-/** Subscribe to progress without starting a read; cards observe detection started in a dialog. */
-export const useWindowsCliCatalogSnapshot = (machineId = "") => useStore(catalogFor(machineId));
-export function forgetWindowsCliCatalog() { catalog.clear(); for (const remote of remoteCatalogs.values()) remote.clear(); remoteCatalogs.clear(); }
-export function useWindowsCliCatalog(enabled = true, machineId = "") {
-  const current = catalogFor(machineId);
-  const state = useStore(current);
-  useEffect(() => { if (enabled) void current.load(); },[enabled,current]);
-  return { ...(enabled ? state : initial()), refresh:() => current.load({force:true}) };
-}
-
-register("windetect", {
-  en: { remoteWindows:"Paired Windows Runtime" },
-  "zh-TW": { remoteWindows:"已配對的 Windows Runtime" },
-});
-register("windetect", {
-  "zh-TW": { loading:"正在偵測 Windows CLI…", refreshing:"正在更新 Windows CLI…", hint:"正在確認已安裝的 CLI、版本與登入狀態。完成後會重用結果，不必每次重新等待。", elapsed:"已等待 {0} 秒，仍在檢查中。", failed:"無法完成 Windows CLI 偵測", previous:"更新未完成，目前顯示上次成功偵測的結果。", retry:"重試偵測", refresh:"重新偵測", cached:"已載入最近的偵測結果", never:"尚未偵測 Windows CLI。偵測會逐一啟動已安裝的 CLI 一次，讀取版本與登入狀態；之後只在你按下「重新偵測」時再做。", detect:"偵測 Windows CLI" },
-  en: { loading:"Detecting Windows CLIs…", refreshing:"Updating Windows CLIs…", hint:"Checking installed CLIs, versions and sign-ins. Results are reused so reopening does not repeat the wait.", elapsed:"Still checking after {0} seconds.", failed:"Windows CLI detection failed", previous:"Refresh failed. Showing the last successful inventory.", retry:"Retry detection", refresh:"Detect again", cached:"Loaded the recent inventory", never:"Windows CLIs have not been detected yet. Detection starts each installed CLI once to read its version and sign-in; after that, only when you press Detect again.", detect:"Detect Windows CLIs" },
-});
-register("windetect", {
-  en: { computer:"Diagnostic computer", hostWindows:"Windows on the AgEnD host", hostHint:"Diagnostics and test tasks use this computer's CLIs and sign-ins.", hostUnknown:"Computer name not reported", hostRefresh:"Detect again to read the Windows computer name." },
-  "zh-TW": { computer:"診斷電腦", hostWindows:"AgEnD 主機的 Windows", hostHint:"診斷與測試任務使用這台電腦的 CLI 與登入。", hostUnknown:"電腦名稱尚未回報", hostRefresh:"重新偵測後可取得 Windows 電腦名稱。" },
-});
-export const detectionText = key => t(`windetect.${key}`);
-
-/** Show the execution computer's identity, independently of the computer opening the dashboard. */
-export function WindowsCliHostIdentity({ inventory, compact = false, machineId = "", machine }) {
-  const hostname = (inventory?.hostname || machine?.hostname || "").trim();
-  return html`<div class=${`windows-cli-target${compact ? " is-compact" : ""}`} aria-label=${detectionText("computer")}>
-    <${Icon} name="fleet" size=${compact ? 16 : 21} /><div><span class="windows-cli-target-label">${machineId ? t("windetect.remoteWindows") : detectionText("hostWindows")}</span><strong class="windows-cli-target-name">${machineId ? `${machine?.name || machineId}${hostname && hostname !== machine?.name ? ` · ${hostname}` : ""}` : hostname || detectionText("hostUnknown")}</strong>
-    ${!compact ? html`<p>${detectionText(hostname ? "hostHint" : "hostRefresh")}</p>` : null}</div>
-  </div>`;
-}
-
-export function WindowsCliDiscoveryStatus({ state, disabled = false }) {
-  const lease = useLease("windows-cli-discovery-status");
-  const [seconds,setSeconds] = useState(0);
-  useEffect(() => {
-    if (!state.loading) { setSeconds(0); return; }
-    const tick = () => setSeconds(Math.max(0,Math.floor((Date.now()-state.startedAt)/1000)));
-    tick(); const timer = lease.interval(tick,1000);
-    return () => lease.clear(timer);
-  },[lease,state.loading,state.startedAt]);
-  if (state.error) return html`<div class="cli-discovery-status is-error" role="alert"><${Icon} name="alert" size=${18} /><div><strong>${detectionText("failed")}</strong><p>${state.data ? detectionText("previous") : state.error}</p>${state.data ? html`<small>${state.error}</small>` : null}<button type="button" class="btn btn-sm" disabled=${disabled} onClick=${state.refresh}>${detectionText("retry")}</button></div></div>`;
-  // M-2239 P1-2: nothing is detected on its own — the first detection is the administrator's press too.
-  if (!state.loading && state.data && state.data.probedAt === null) return html`<div class="cli-discovery-status" role="status"><${Icon} name="info" size=${18} /><div><p>${detectionText("never")}</p><button type="button" class="btn btn-sm" disabled=${disabled} onClick=${state.refresh}>${detectionText("detect")}</button></div></div>`;
-  if (!state.loading && state.data) return null;
-  return html`<div class="cli-discovery-status" role="status" aria-live="polite" aria-busy="true"><span class="out-spin" aria-hidden="true"></span><div><strong>${detectionText(state.data ? "refreshing" : "loading")}</strong><p>${detectionText("hint")}</p>${seconds >= 8 ? html`<small>${t("windetect.elapsed",seconds)}</small>` : null}</div></div>`;
-}

package/dist/web-remote-access.d.ts

@@ -1,152 +0,0 @@
-import type { LoginCodeOwner } from "./web-login.js";
-export declare const WEB_REMOTE_ACCESS_FILE = "web-remote-access.json";
-/** RFC 6238 as every common authenticator app shows it: SHA-1, 6 digits, 30-second steps. */
-export declare const TOTP_STEP_SECONDS = 30;
-export declare const TOTP_DIGITS = 6;
-/**
- * Steps accepted around now: one either side (#3008 C, the leader: this host is WSL2, whose clock drifts behind after
- * Windows sleeps — accepting only the current and previous code would refuse the phone's newest one).
- */
-export declare const TOTP_PAST_STEPS = 1;
-export declare const TOTP_FUTURE_STEPS = 1;
-/** Diagnosis only (#3008 C): a wrong code is also compared this many steps out, to log how far this clock is off. */
-export declare const TOTP_SKEW_PROBE_STEPS = 2;
-/** 5 wrong codes → a wait. */
-export declare const TOTP_WRONG_LIMIT = 5;
-/** The first wait; #3008 C(b): each further one doubles, up to TOTP_PAUSE_MAX_MS. A correct code resets it. */
-export declare const TOTP_PAUSE_MS: number;
-export declare const TOTP_PAUSE_MAX_MS: number;
-/** #3008 review (Prism P2 1): a state that could not be saved is written again this often until it is. */
-export declare const OUTSIDE_SAVE_RETRY_MS = 30000;
-/** How long a secret being set up waits for its first code. */
-export declare const TOTP_ENROLL_TTL_MS: number;
-export declare function base32Encode(bytes: Uint8Array): string;
-export declare function base32Decode(text: string): Buffer | null;
-/** RFC 4226 HOTP: the code for one counter, as `digits` decimal digits (left-padded). */
-export declare function hotp(secret: Uint8Array, counter: number, digits?: number): string;
-/** The RFC 6238 time step a wall-clock moment falls in. */
-export declare function totpStep(nowMs: number): number;
-/**
- * The step `code` is valid for — the current one or one within the accepted window, newer than `after` — or null. Six
- * digits only (spaces ignored); compared in constant time.
- */
-export declare function matchTotp(secret: Uint8Array, code: string, nowMs: number, after: number): number | null;
-/**
- * Diagnosis only, never acceptance: for a code that did not match, the step offset (beyond the accepted window, at most
- * TOTP_SKEW_PROBE_STEPS out) it would have matched — positive: the phone is ahead of this computer's clock. Else null.
- */
-export declare function totpSkew(secret: Uint8Array, code: string, nowMs: number): number | null;
-/** The `otpauth://` URI an authenticator app reads from the QR code (or the key typed in by hand). */
-export declare function otpauthUri(secretBase32: string, account: string): string;
-/** How many sessions from outside one generation remembers (each is a sign-in with a code; older ones read as revoked). */
-export declare const OUTSIDE_HANDLES_MAX = 64;
-export type TotpVerdict = {
-    kind: "ok";
-}
-/** `skewSteps`: the code would have matched that many steps out — this computer's clock is likely off (logged). */
- | {
-    kind: "wrong";
-    paused: false;
-    skewSteps: number | null;
-}
-/** This wrong code started a wait (a Notice says so): the `wrong` codes that led to it. */
- | {
-    kind: "wrong";
-    paused: true;
-    retryAfterMs: number;
-    wrong: number;
-    skewSteps: number | null;
-} | {
-    kind: "paused";
-    retryAfterMs: number;
-} | {
-    kind: "not_enrolled";
-}
-/** Right, but the step it used could not be saved: refused (else a restart would let it be used again). */
- | {
-    kind: "unavailable";
-};
-export interface RemoteAccessStatus {
-    enrolled: boolean;
-    enrolledAt: number | null;
-    outside: boolean;
-    /** A wait in force now (ms left), else 0. */
-    pausedForMs: number;
-}
-export declare class WebRemoteAccess {
-    private readonly path;
-    private readonly log;
-    private readonly now;
-    private readonly monotonic;
-    private state;
-    private pending;
-    private warned;
-    /** The state in memory is not on disk yet (a write failed): written again, by the next change or the retry timer. */
-    private dirty;
-    private retry;
-    constructor(path: string, log: {
-        warn(obj: object, msg?: string): void;
-    }, now?: () => number, monotonic?: () => number);
-    status(): RemoteAccessStatus;
-    get enrolled(): boolean;
-    /** The sessions authorized from outside since the last revocation (their receipts hold). */
-    get admitted(): ReadonlySet<string>;
-    /**
-     * A session just signed in from outside: its handle is saved as admitted before it is authorized. False: not saved —
-     * the sign-in must not go on (a restart would not know it, and the next revocation could not be proven to end it).
-     */
-    admit(handle: string): boolean;
-    /** Undo a change whose write failed, keeping whatever was already owed to the disk before it (#3015 review r3, P2 1). */
-    private restore;
-    get outside(): boolean;
-    /**
-     * A new secret for the session `handle` to set up (it replaces nothing until confirmEnrollment). Returned once: the
-     * caller shows it to that session and forgets it.
-     */
-    beginEnrollment(handle: string, account: string): {
-        secret: string;
-        uri: string;
-        expiresInMs: number;
-    };
-    /**
-     * The first code from the app being set up, by the session that began it. "ok": it is now the one (a previous one is
-     * replaced; the limiter starts afresh). The caller then ends the sessions signed in with the old one.
-     */
-    confirmEnrollment(handle: string, code: string): "ok" | "wrong" | "expired" | "unsaved";
-    /**
-     * Forget the app; the outside switch goes off with it, and what was authorized from outside ends (handles). In force in
-     * memory at once; false: not saved yet (retried — a restart before that would read the old file).
-     */
-    remove(): boolean;
-    /**
-     * The switch. On only with an app set up. Off ends what was authorized from outside (handles). "unsaved": in force in
-     * memory, not on disk yet (retried; asking again writes it again).
-     */
-    setOutside(on: boolean): "ok" | "not_enrolled" | "unsaved";
-    /** A code typed at sign-in from outside. Each step is accepted once; wrong codes count toward a wait. */
-    verify(code: string): TotpVerdict;
-    /**
-     * Saved: true. Not saved: false (warned once until it works again) — memory keeps the new state, and it is written
-     * again by the next change or every OUTSIDE_SAVE_RETRY_MS until it is (#3008 review, Prism P2 1).
-     */
-    private flush;
-    /** Whether the state in memory is still waiting to be saved. */
-    get unsaved(): boolean;
-    /** Fleet stop: one last write of an unsaved state, then no timer left. */
-    close(): void;
-}
-/**
- * #3008: whose the outside link is — this computer's admin, not a chat account. Never matches a chat owner (those carry
- * a live adapter binding); FleetManager.publicOwnerCurrent permits it only while the switch is on, on a web-only fleet.
- */
-export declare const OUTSIDE_LINK_OWNER: LoginCodeOwner;
-export declare function isOutsideLinkOwner(owner: LoginCodeOwner): boolean;
-/** #3008 B: a dropped link is reopened twice at most — after 30 s, then 2 minutes. */
-export declare const OUTSIDE_LINK_RETRY_MS: readonly number[];
-/** Closes the switch itself made (or the fleet stopping, or its own failed start): nothing to reopen or announce. */
-export declare const OUTSIDE_OWN_CLOSES: ReadonlySet<string>;
-export declare function outsideTimer(fn: () => void, ms: number): {
-    cancel(): void;
-};
-/** A wait as words: "15 minutes" / 「15 分鐘」, "2 hours" / 「2 小時」 (whole minutes under an hour, else whole hours, rounded up). */
-export declare function outsideDuration(ms: number): string;