@sortedyuan/maybecode 0.3.2 → 0.5.0

package/dist/cli/{web-server-FOMNPY7Q.js → web-server-SXMH6FGA.js}

@@ -1,11 +1,14 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   UiError
-} from "./chunk-HOU5ITUK.js";
+} from "./chunk-XTEMRAQW.js";
 import {
   __name
 } from "./chunk-E732GDOI.js";
 
+// apps/maybecode/src/web-server.ts
+import { omitUndefined } from "@sortedyuan/may/core";
+
 // packages/ui/client/dist/server.js
 import { timingSafeEqual } from "node:crypto";
 
@@ -70,7 +73,11 @@ function createUiRouter(host, exit) {
           if (!selected || selected.length > 256 || !/^[a-f0-9]{64}$/.test(id))
             throw new UiError(400, "\u56FE\u7247\u53C2\u6570\u65E0\u6548\u3002");
           const media = await host.media(selected, id);
-          res.writeHead(200, { "content-type": media.mediaType, "content-length": media.data.byteLength, "content-disposition": `inline; filename="${id}.${media.mediaType.slice(6)}"` });
+          res.writeHead(200, {
+            "content-type": media.mediaType,
+            "content-length": media.data.byteLength,
+            "content-disposition": `inline; filename="${id}.${media.mediaType.slice(6)}"`
+          });
           res.end(media.data);
         } else if (req.method === "GET" && url.pathname === "/api/ui/snapshot") {
           const selected = url.searchParams.get("selected") ?? void 0;
@@ -96,7 +103,7 @@ function createUiRouter(host, exit) {
           else if (url.pathname.endsWith("/field") && selected && host.field) {
             const blockId = url.searchParams.get("block") ?? "", field = url.searchParams.get("field");
             const offset = Number(url.searchParams.get("offset") ?? 0), version = url.searchParams.get("version");
-            if (!blockId || blockId.length > 512 || !["input", "text", "reasoning", "diagnostic", "presentation"].includes(field) || !Number.isSafeInteger(offset) || offset < 0 || (version?.length ?? 0) > 128)
+            if (!blockId || blockId.length > 512 || !["input", "text", "reasoning", "diagnostic", "presentation", "request"].includes(field) || !Number.isSafeInteger(offset) || offset < 0 || (version?.length ?? 0) > 128)
               throw new UiError(400, "\u8BE6\u60C5\u53C2\u6570\u4E0D\u6B63\u786E\u3002");
             sendJson(res, 200, await host.field(selected, { blockId, field, offset, ...version ? { version } : {} }));
           } else
@@ -105,7 +112,11 @@ function createUiRouter(host, exit) {
           if (streams.size >= 16)
             throw new UiError(429, "\u8FDE\u63A5\u7A97\u53E3\u8FC7\u591A\u3002");
           streams.add(res);
-          res.writeHead(200, { "content-type": "text/event-stream; charset=utf-8", "cache-control": "no-store", "x-accel-buffering": "no" });
+          res.writeHead(200, {
+            "content-type": "text/event-stream; charset=utf-8",
+            "cache-control": "no-store",
+            "x-accel-buffering": "no"
+          });
           res.write("event: invalidate\ndata: {}\n\n");
           let pending;
           const invalidate = /* @__PURE__ */ __name(() => {
@@ -130,7 +141,10 @@ function createUiRouter(host, exit) {
           const command = validateCommand(await readJson(req));
           if (command.hostId !== host.hostId)
             throw new UiError(409, "\u5BBF\u4E3B\u5DF2\u91CD\u542F\u3002\u8BF7\u68C0\u67E5\u6700\u65B0\u72B6\u6001\u540E\u91CD\u65B0\u64CD\u4F5C\u3002");
-          const key = JSON.stringify({ ...command, args: Object.fromEntries(Object.entries(command.args).sort(([a], [b]) => a.localeCompare(b))) });
+          const key = JSON.stringify({
+            ...command,
+            args: Object.fromEntries(Object.entries(command.args).sort(([a], [b]) => a.localeCompare(b)))
+          });
           let receipt = receipts.get(command.requestId);
           if (receipt && receipt.key !== key)
             throw new UiError(409, "\u8BF7\u6C42 ID \u5DF2\u88AB\u5176\u5B83\u547D\u4EE4\u4F7F\u7528\u3002");
@@ -148,7 +162,9 @@ function createUiRouter(host, exit) {
           throw new UiError(404, "\u63A5\u53E3\u4E0D\u5B58\u5728\u3002");
       } catch (error) {
         if (!res.headersSent)
-          sendJson(res, error instanceof UiError ? error.status : 400, { error: error instanceof UiError ? error.message : "\u64CD\u4F5C\u5931\u8D25\u3002\u8BF7\u68C0\u67E5\u5BBF\u4E3B\u65E5\u5FD7\u3001\u914D\u7F6E\u6216\u5F53\u524D\u72B6\u6001\u3002" });
+          sendJson(res, error instanceof UiError ? error.status : 400, {
+            error: error instanceof UiError ? error.message : "\u64CD\u4F5C\u5931\u8D25\u3002\u8BF7\u68C0\u67E5\u5BBF\u4E3B\u65E5\u5FD7\u3001\u914D\u7F6E\u6216\u5F53\u524D\u72B6\u6001\u3002"
+          });
         else
           res.destroy();
       }
@@ -172,7 +188,7 @@ async function startUiServer(options) {
     if (options.exit)
       options.exit();
     else
-      void close();
+      close().catch(rejectClosed);
   });
   const login = options.browserLogin ? new BrowserLogin(options.token) : void 0;
   let origin = "";
@@ -230,21 +246,36 @@ async function startUiServer(options) {
   });
   origin = `http://127.0.0.1:${server.address().port}`;
   let closing;
-  const closed = new Promise((resolve) => server.once("close", resolve));
+  let rejectClosed;
+  const closed = new Promise((resolve, reject) => {
+    rejectClosed = reject;
+    server.once("close", () => {
+      if (closing)
+        closing.then(resolve, reject);
+      else
+        resolve();
+    });
+  });
   const close = /* @__PURE__ */ __name(() => closing ??= (async () => {
     login?.clear();
     router.close();
     const stopped = new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));
     server.closeAllConnections();
-    await options.close?.();
-    await Promise.allSettled([...requests]);
-    await stopped;
+    const results = await Promise.allSettled([Promise.resolve().then(() => options.close?.()), ...requests, stopped]);
+    const errors = results.filter((result) => result.status === "rejected").map((result) => result.reason);
+    if (errors.length)
+      throw new AggregateError(errors, "UI server shutdown failed");
   })(), "close");
-  return { url: origin, closed, createLoginUrl: /* @__PURE__ */ __name(() => {
-    if (!login || closing)
-      throw new Error("\u5F53\u524D\u670D\u52A1\u4E0D\u63A5\u53D7\u6D4F\u89C8\u5668\u8FDE\u63A5\u51ED\u636E\u3002");
-    return `${origin}/#may-connect=${login.issue()}`;
-  }, "createLoginUrl"), close };
+  return {
+    url: origin,
+    closed,
+    createLoginUrl: /* @__PURE__ */ __name(() => {
+      if (!login || closing)
+        throw new Error("\u5F53\u524D\u670D\u52A1\u4E0D\u63A5\u53D7\u6D4F\u89C8\u5668\u8FDE\u63A5\u51ED\u636E\u3002");
+      return `${origin}/#may-connect=${login.issue()}`;
+    }, "createLoginUrl"),
+    close
+  };
 }
 __name(startUiServer, "startUiServer");
 function secureHeaders(res) {
@@ -302,12 +333,17 @@ __name(validateCommand, "validateCommand");
 import { webUiAssets } from "@sortedyuan/web-ui/assets";
 import { readFile } from "node:fs/promises";
 async function startMaybeCodeWebServer(host, options) {
-  const extensionModule = await readFile(new URL("./web-extension.js", import.meta.resolve("@sortedyuan/maybecode")), "utf8");
+  const extensionModule = await readFile(
+    new URL("./web-extension.js", import.meta.resolve("@sortedyuan/maybecode")),
+    "utf8"
+  );
   const diffBundle = await readFile(new URL("./dist/diff.js", import.meta.resolve("diff/package.json")), "utf8");
   const diffEsm = `${diffBundle}
 export const { parsePatch } = globalThis.Diff;
 `;
-  const assets = new Map(await webUiAssets("MaybeCode", "session", { extensionModule, ...options.browserLogin === void 0 ? {} : { browserLogin: options.browserLogin } }));
+  const assets = new Map(
+    await webUiAssets("MaybeCode", "session", omitUndefined({ extensionModule, browserLogin: options.browserLogin }))
+  );
   assets.set("/vendor-diff.js", { type: "text/javascript; charset=utf-8", body: diffEsm });
   return startUiServer({ host, assets, ...options, close: /* @__PURE__ */ __name(() => host.close(), "close") });
 }
@@ -315,4 +351,4 @@ __name(startMaybeCodeWebServer, "startMaybeCodeWebServer");
 export {
   startMaybeCodeWebServer
 };
-//# sourceMappingURL=web-server-FOMNPY7Q.js.map
+//# sourceMappingURL=web-server-SXMH6FGA.js.map

package/dist/cli/web-server-SXMH6FGA.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/web-server.ts", "../../../../packages/ui/client/src/server.ts", "../../../../packages/ui/client/src/browser-login.ts"],
+  "sourcesContent": ["import { omitUndefined } from \"@sortedyuan/may/core\";\nimport type { ApplicationUiHost } from \"@sortedyuan/ui-client/application\";\nimport { startUiServer } from \"@sortedyuan/ui-client/server\";\nimport { webUiAssets } from \"@sortedyuan/web-ui/assets\";\nimport { readFile } from \"node:fs/promises\";\n\nexport async function startMaybeCodeWebServer(\n  host: ApplicationUiHost,\n  options: { token: string; port?: number; browserLogin?: boolean; exit?: () => void },\n) {\n  const extensionModule = await readFile(\n    new URL(\"./web-extension.js\", import.meta.resolve(\"@sortedyuan/maybecode\")),\n    \"utf8\",\n  );\n  const diffBundle = await readFile(new URL(\"./dist/diff.js\", import.meta.resolve(\"diff/package.json\")), \"utf8\");\n  const diffEsm = `${diffBundle}\\nexport const { parsePatch } = globalThis.Diff;\\n`;\n  const assets = new Map(\n    await webUiAssets(\"MaybeCode\", \"session\", omitUndefined({ extensionModule, browserLogin: options.browserLogin })),\n  );\n  assets.set(\"/vendor-diff.js\", { type: \"text/javascript; charset=utf-8\", body: diffEsm });\n  return startUiServer({ host, assets, ...options, close: () => host.close() });\n}\n", "import { timingSafeEqual } from \"node:crypto\";\nimport { BrowserLogin } from \"./browser-login.js\";\nexport { BrowserLogin } from \"./browser-login.js\";\nimport { createServer, type IncomingMessage, type ServerResponse } from \"node:http\";\nimport type { AddressInfo } from \"node:net\";\nimport { UiError, type UiCommand, type UiHost, type UiReceipt, type UiField } from \"./protocol.js\";\n\n/** @experimental */\nexport type UiAssets = ReadonlyMap<string, { readonly type: string; readonly body: string }>;\n\n/**\n * Mount behind the host's authentication/origin checks. GET assets contain no secrets.\n * @experimental\n */\nexport function createUiRouter(host: UiHost, exit?: () => void) {\n  const receipts = new Map<string, { key: string; result: Promise<UiReceipt> }>();\n  const streams = new Set<ServerResponse>();\n  let closed = false;\n  return {\n    async route(req: IncomingMessage, res: ServerResponse): Promise<boolean> {\n      const url = new URL(req.url ?? \"/\", \"http://localhost\");\n      if (!url.pathname.startsWith(\"/api/ui/\")) return false;\n      try {\n        if (closed) throw new UiError(503, \"\u5BBF\u4E3B\u6B63\u5728\u5173\u95ED\u3002\");\n        if (req.method === \"GET\" && url.pathname === \"/api/ui/media\" && host.media) {\n          const selected = url.searchParams.get(\"selected\") ?? \"\",\n            id = url.searchParams.get(\"id\") ?? \"\";\n          if (url.searchParams.get(\"hostId\") !== host.hostId) throw new UiError(409, \"\u5BBF\u4E3B\u5DF2\u6539\u53D8\u3002\");\n          if (!selected || selected.length > 256 || !/^[a-f0-9]{64}$/.test(id))\n            throw new UiError(400, \"\u56FE\u7247\u53C2\u6570\u65E0\u6548\u3002\");\n          const media = await host.media(selected, id);\n          res.writeHead(200, {\n            \"content-type\": media.mediaType,\n            \"content-length\": media.data.byteLength,\n            \"content-disposition\": `inline; filename=\"${id}.${media.mediaType.slice(6)}\"`,\n          });\n          res.end(media.data);\n        } else if (req.method === \"GET\" && url.pathname === \"/api/ui/snapshot\") {\n          const selected = url.searchParams.get(\"selected\") ?? undefined;\n          if (selected && selected.length > 256) throw new UiError(400, \"\u65E0\u6548\u7684\u8D44\u6E90 ID\u3002\");\n          sendJson(res, 200, await host.snapshot(selected));\n        } else if (req.method === \"GET\" && url.pathname === \"/api/ui/complete\" && host.complete) {\n          const selected = url.searchParams.get(\"selected\") ?? \"\",\n            text = url.searchParams.get(\"text\") ?? \"\";\n          if (\n            url.searchParams.get(\"hostId\") !== host.hostId ||\n            !selected ||\n            selected.length > 256 ||\n            text.length > 16_384\n          )\n            throw new UiError(400, \"\u547D\u4EE4\u8865\u5168\u53C2\u6570\u65E0\u6548\u3002\");\n          sendJson(res, 200, await host.complete(selected, text));\n        } else if (\n          req.method === \"GET\" &&\n          [\"/api/ui/resources\", \"/api/ui/history\", \"/api/ui/field\"].includes(url.pathname)\n        ) {\n          if (url.searchParams.get(\"hostId\") !== host.hostId) throw new UiError(409, \"\u5BBF\u4E3B\u5DF2\u6539\u53D8\uFF0C\u8BF7\u5237\u65B0\u540E\u91CD\u8BFB\u3002\");\n          const selected = url.searchParams.get(\"selected\"),\n            query = url.searchParams.get(\"query\") ?? \"\",\n            cursor = url.searchParams.get(\"cursor\");\n          if (query.length > 256 || (cursor?.length ?? 0) > 4096 || (selected?.length ?? 0) > 256)\n            throw new UiError(400, \"\u8BFB\u53D6\u53C2\u6570\u8FC7\u957F\u3002\");\n          const request = { query, ...(cursor ? { cursor } : {}) };\n          if (url.pathname.endsWith(\"/resources\") && host.resources) sendJson(res, 200, await host.resources(request));\n          else if (url.pathname.endsWith(\"/history\") && selected && host.history)\n            sendJson(res, 200, await host.history(selected, request));\n          else if (url.pathname.endsWith(\"/field\") && selected && host.field) {\n            const blockId = url.searchParams.get(\"block\") ?? \"\",\n              field = url.searchParams.get(\"field\") as UiField;\n            const offset = Number(url.searchParams.get(\"offset\") ?? 0),\n              version = url.searchParams.get(\"version\");\n            if (\n              !blockId ||\n              blockId.length > 512 ||\n              ![\"input\", \"text\", \"reasoning\", \"diagnostic\", \"presentation\", \"request\"].includes(field) ||\n              !Number.isSafeInteger(offset) ||\n              offset < 0 ||\n              (version?.length ?? 0) > 128\n            )\n              throw new UiError(400, \"\u8BE6\u60C5\u53C2\u6570\u4E0D\u6B63\u786E\u3002\");\n            sendJson(res, 200, await host.field(selected, { blockId, field, offset, ...(version ? { version } : {}) }));\n          } else throw new UiError(400, \"\u5BBF\u4E3B\u4E0D\u652F\u6301\u6B64\u8BFB\u53D6\u6216\u672A\u6307\u5B9A\u8D44\u6E90\u3002\");\n        } else if (req.method === \"GET\" && url.pathname === \"/api/ui/events\") {\n          if (streams.size >= 16) throw new UiError(429, \"\u8FDE\u63A5\u7A97\u53E3\u8FC7\u591A\u3002\");\n          streams.add(res);\n          res.writeHead(200, {\n            \"content-type\": \"text/event-stream; charset=utf-8\",\n            \"cache-control\": \"no-store\",\n            \"x-accel-buffering\": \"no\",\n          });\n          res.write(\"event: invalidate\\ndata: {}\\n\\n\");\n          let pending: ReturnType<typeof setTimeout> | undefined;\n          const invalidate = () => {\n            if (pending || res.destroyed) return;\n            pending = setTimeout(() => {\n              pending = undefined;\n              if (!res.write(\"event: invalidate\\ndata: {}\\n\\n\")) res.destroy();\n            }, 120);\n          };\n          const unsubscribe = host.subscribe(invalidate);\n          // Repairs missed invalidations and observes changes from CLI/channel owners too.\n          const heartbeat = setInterval(invalidate, 2000);\n          res.once(\"close\", () => {\n            if (pending) clearTimeout(pending);\n            clearInterval(heartbeat);\n            unsubscribe();\n            streams.delete(res);\n          });\n        } else if (req.method === \"POST\" && url.pathname === \"/api/ui/commands\") {\n          const command = validateCommand(await readJson(req));\n          if (command.hostId !== host.hostId) throw new UiError(409, \"\u5BBF\u4E3B\u5DF2\u91CD\u542F\u3002\u8BF7\u68C0\u67E5\u6700\u65B0\u72B6\u6001\u540E\u91CD\u65B0\u64CD\u4F5C\u3002\");\n          const key = JSON.stringify({\n            ...command,\n            args: Object.fromEntries(Object.entries(command.args).sort(([a], [b]) => a.localeCompare(b))),\n          });\n          let receipt = receipts.get(command.requestId);\n          if (receipt && receipt.key !== key) throw new UiError(409, \"\u8BF7\u6C42 ID \u5DF2\u88AB\u5176\u5B83\u547D\u4EE4\u4F7F\u7528\u3002\");\n          if (!receipt) {\n            // Do not silently evict a receipt and later repeat a side effect.\n            if (receipts.size >= 4096) throw new UiError(429, \"\u672C\u6B21\u5BBF\u4E3B\u7684\u547D\u4EE4\u51ED\u636E\u5DF2\u6EE1\uFF0C\u8BF7\u5728\u7A7A\u95F2\u65F6\u91CD\u542F\u670D\u52A1\u3002\");\n            receipt = { key, result: Promise.resolve().then(() => host.execute(command)) };\n            receipts.set(command.requestId, receipt);\n          }\n          const result = await receipt.result;\n          if (result.disconnect && exit) res.once(\"finish\", exit);\n          sendJson(res, 200, result);\n        } else throw new UiError(404, \"\u63A5\u53E3\u4E0D\u5B58\u5728\u3002\");\n      } catch (error) {\n        if (!res.headersSent)\n          sendJson(res, error instanceof UiError ? error.status : 400, {\n            error: error instanceof UiError ? error.message : \"\u64CD\u4F5C\u5931\u8D25\u3002\u8BF7\u68C0\u67E5\u5BBF\u4E3B\u65E5\u5FD7\u3001\u914D\u7F6E\u6216\u5F53\u524D\u72B6\u6001\u3002\",\n          });\n        else res.destroy();\n      }\n      return true;\n    },\n    close() {\n      closed = true;\n      for (const stream of streams) stream.destroy();\n      streams.clear();\n    },\n  };\n}\n\n/** @experimental */\nexport async function startUiServer(options: {\n  host: UiHost;\n  assets: UiAssets;\n  token: string;\n  port?: number;\n  browserLogin?: boolean;\n  close?: () => Promise<void>;\n  exit?: () => void;\n}) {\n  validateToken(options.token);\n  const port = options.port ?? 3940;\n  if (!Number.isSafeInteger(port) || port < 0 || port > 65535) throw new Error(\"Invalid port\");\n  const router = createUiRouter(options.host, () => {\n    if (options.exit) options.exit();\n    else close().catch(rejectClosed);\n  });\n  const login = options.browserLogin ? new BrowserLogin(options.token) : undefined;\n  let origin = \"\";\n  const requests = new Set<Promise<void>>();\n  const server = createServer((req, res) => {\n    const work = (async () => {\n      secureHeaders(res);\n      if (!trustedRequest(req, origin)) {\n        sendJson(res, 403, { error: \"Untrusted origin or host\" });\n        return;\n      }\n      if (login && req.method === \"POST\" && req.url === \"/api/ui/connect\") {\n        try {\n          const body = await readJson(req);\n          if (\n            !body ||\n            typeof body !== \"object\" ||\n            Array.isArray(body) ||\n            Object.keys(body).length !== 1 ||\n            !(\"ticket\" in body)\n          )\n            throw new UiError(400, \"\u8FDE\u63A5\u8BF7\u6C42\u65E0\u6548\u3002\");\n          sendJson(res, 200, { token: login.redeem(body.ticket) });\n        } catch (error) {\n          if (!(error instanceof UiError)) throw error;\n          sendJson(res, error.status, { error: error.message });\n        }\n        return;\n      }\n      const asset = options.assets.get(req.url ?? \"/\");\n      if (req.method === \"GET\" && asset) {\n        res.writeHead(200, { \"content-type\": asset.type });\n        res.end(asset.body);\n        return;\n      }\n      if (!authorized(req, options.token)) {\n        sendJson(res, 401, { error: \"\u8BF7\u8F93\u5165\u63A7\u5236\u4EE4\u724C\u3002\" });\n        return;\n      }\n      if (!(await router.route(req, res))) sendJson(res, 404, { error: \"Not found\" });\n    })()\n      .catch(() => {\n        if (!res.headersSent) sendJson(res, 500, { error: \"Host unavailable\" });\n        else res.destroy();\n      })\n      .finally(() => requests.delete(work));\n    requests.add(work);\n  });\n  server.requestTimeout = 15_000;\n  server.headersTimeout = 10_000;\n  server.keepAliveTimeout = 3000;\n  server.maxConnections = 64;\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(port, \"127.0.0.1\", () => {\n      server.removeListener(\"error\", reject);\n      resolve();\n    });\n  });\n  origin = `http://127.0.0.1:${(server.address() as AddressInfo).port}`;\n  let closing: Promise<void> | undefined;\n  let rejectClosed: (error: unknown) => void;\n  const closed = new Promise<void>((resolve, reject) => {\n    rejectClosed = reject;\n    server.once(\"close\", () => {\n      if (closing) closing.then(resolve, reject);\n      else resolve();\n    });\n  });\n  const close = () =>\n    (closing ??= (async () => {\n      login?.clear();\n      router.close();\n      const stopped = new Promise<void>((resolve, reject) =>\n        server.close((error) => (error ? reject(error) : resolve())),\n      );\n      server.closeAllConnections();\n      const results = await Promise.allSettled([Promise.resolve().then(() => options.close?.()), ...requests, stopped]);\n      const errors = results.filter((result) => result.status === \"rejected\").map((result) => result.reason as unknown);\n      if (errors.length) throw new AggregateError(errors, \"UI server shutdown failed\");\n    })());\n  return {\n    url: origin,\n    closed,\n    createLoginUrl: () => {\n      if (!login || closing) throw new Error(\"\u5F53\u524D\u670D\u52A1\u4E0D\u63A5\u53D7\u6D4F\u89C8\u5668\u8FDE\u63A5\u51ED\u636E\u3002\");\n      return `${origin}/#may-connect=${login.issue()}`;\n    },\n    close,\n  };\n}\n\n/** @experimental */\nexport function secureHeaders(res: ServerResponse): void {\n  res.setHeader(\"cache-control\", \"no-store\");\n  res.setHeader(\"x-content-type-options\", \"nosniff\");\n  res.setHeader(\"referrer-policy\", \"no-referrer\");\n  res.setHeader(\n    \"content-security-policy\",\n    \"default-src 'none'; script-src 'self'; style-src 'self'; connect-src 'self'; img-src 'self' blob: https: http:; base-uri 'none'; frame-ancestors 'none'; form-action 'self'\",\n  );\n}\n/** @experimental */\nexport function validateToken(token: string): void {\n  if (!/^[\\x21-\\x7e]{32,256}$/.test(token))\n    throw new Error(\"Control token must be 32..256 printable non-space ASCII characters\");\n}\n/** @experimental */\nexport function trustedRequest(req: IncomingMessage, origin: string): boolean {\n  return (\n    Boolean(origin) &&\n    req.headers.host === new URL(origin).host &&\n    (req.headers.origin === undefined || req.headers.origin === origin)\n  );\n}\n/** @experimental */\nexport function authorized(req: IncomingMessage, token: string): boolean {\n  const supplied = req.headers.authorization ?? \"\",\n    expected = `Bearer ${token}`;\n  return (\n    Buffer.byteLength(supplied) === Buffer.byteLength(expected) &&\n    timingSafeEqual(Buffer.from(supplied), Buffer.from(expected))\n  );\n}\n/** @experimental */\nexport function sendJson(res: ServerResponse, status: number, data: unknown): void {\n  res.writeHead(status, { \"content-type\": \"application/json; charset=utf-8\" });\n  res.end(JSON.stringify(data));\n}\nasync function readJson(req: IncomingMessage): Promise<unknown> {\n  if (req.headers[\"content-type\"]?.split(\";\")[0]?.trim() !== \"application/json\") throw new UiError(400, \"\u9700\u8981 JSON\u3002\");\n  let size = 0;\n  const chunks: Buffer[] = [];\n  for await (const chunk of req) {\n    const bytes = Buffer.from(chunk as Uint8Array);\n    size += bytes.length;\n    if (size > 256 * 1024) throw new UiError(413, \"\u8BF7\u6C42\u8FC7\u5927\u3002\");\n    chunks.push(bytes);\n  }\n  return JSON.parse(Buffer.concat(chunks).toString(\"utf8\"));\n}\nfunction validateCommand(value: unknown): UiCommand {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) throw new UiError(400, \"\u65E0\u6548\u7684\u547D\u4EE4\u3002\");\n  const c = value as UiCommand;\n  if (\n    Object.keys(c).some(\n      (key) => ![\"version\", \"hostId\", \"requestId\", \"name\", \"targetId\", \"expectedActiveId\", \"args\"].includes(key),\n    ) ||\n    c.version !== 1 ||\n    typeof c.hostId !== \"string\" ||\n    c.hostId.length > 128 ||\n    typeof c.requestId !== \"string\" ||\n    !/^[a-zA-Z0-9._:-]{1,100}$/.test(c.requestId) ||\n    (c.expectedActiveId !== undefined &&\n      (typeof c.expectedActiveId !== \"string\" || !c.expectedActiveId || c.expectedActiveId.length > 256)) ||\n    typeof c.name !== \"string\" ||\n    !/^[a-z][a-z0-9.-]{1,80}$/.test(c.name) ||\n    !(c.targetId === null || (typeof c.targetId === \"string\" && c.targetId.length <= 256)) ||\n    !c.args ||\n    typeof c.args !== \"object\" ||\n    Array.isArray(c.args) ||\n    Object.keys(c.args).length > 12 ||\n    Object.values(c.args).some((v) => typeof v !== \"string\" || v.length > 64 * 1024)\n  )\n    throw new UiError(400, \"\u65E0\u6548\u7684\u547D\u4EE4\u3002\");\n  return c;\n}\n", "import { randomBytes } from \"node:crypto\";\nimport { UiError } from \"./protocol.js\";\n\n/** @experimental */\nexport class BrowserLogin {\n  private readonly tickets = new Map<string, number>();\n\n  constructor(\n    private readonly token: string,\n    private readonly lifetimeMs = 60_000,\n  ) {\n    if (!Number.isSafeInteger(lifetimeMs) || lifetimeMs <= 0) throw new Error(\"\u8FDE\u63A5\u51ED\u636E\u6709\u6548\u671F\u5FC5\u987B\u4E3A\u6B63\u6574\u6570\u3002\");\n  }\n\n  issue(): string {\n    const now = Date.now();\n    for (const [ticket, expiresAt] of this.tickets) if (expiresAt <= now) this.tickets.delete(ticket);\n    if (this.tickets.size >= 8) throw new UiError(429, \"\u5F85\u8FDE\u63A5\u9875\u9762\u8FC7\u591A\uFF0C\u8BF7\u7A0D\u540E\u91CD\u65B0\u6253\u5F00\u3002\");\n    const ticket = randomBytes(32).toString(\"base64url\");\n    this.tickets.set(ticket, now + this.lifetimeMs);\n    return ticket;\n  }\n\n  redeem(ticket: unknown): string {\n    if (typeof ticket !== \"string\") throw new UiError(401, \"\u8FDE\u63A5\u51ED\u636E\u65E0\u6548\u3002\");\n    const expiresAt = this.tickets.get(ticket);\n    this.tickets.delete(ticket);\n    if (expiresAt === undefined || expiresAt <= Date.now())\n      throw new UiError(401, \"\u8FDE\u63A5\u5DF2\u5931\u6548\uFF0C\u8BF7\u4ECE\u542F\u52A8\u7A0B\u5E8F\u91CD\u65B0\u6253\u5F00\u9875\u9762\u3002\");\n    return this.token;\n  }\n\n  clear(): void {\n    this.tickets.clear();\n  }\n}\n"],
+  "mappings": ";;;;;;;;;AAAA,SAAS,qBAAqB;;;ACA9B,SAAS,uBAAuB;;;ACAhC,SAAS,mBAAmB;AAItB,IAAO,eAAP,MAAmB;EAJzB,OAIyB;;;EAIJ;EACA;EAJF,UAAU,oBAAI,IAAG;EAElC,YACmB,OACA,aAAa,KAAM;iBADnB;sBACA;AAEjB,QAAI,CAAC,OAAO,cAAc,UAAU,KAAK,cAAc;AAAG,YAAM,IAAI,MAAM,sFAAgB;EAC5F;EAEA,QAAK;AACH,UAAM,MAAM,KAAK,IAAG;AACpB,eAAW,CAACA,SAAQ,SAAS,KAAK,KAAK;AAAS,UAAI,aAAa;AAAK,aAAK,QAAQ,OAAOA,OAAM;AAChG,QAAI,KAAK,QAAQ,QAAQ;AAAG,YAAM,IAAI,QAAQ,KAAK,kGAAkB;AACrE,UAAM,SAAS,YAAY,EAAE,EAAE,SAAS,WAAW;AACnD,SAAK,QAAQ,IAAI,QAAQ,MAAM,KAAK,UAAU;AAC9C,WAAO;EACT;EAEA,OAAO,QAAe;AACpB,QAAI,OAAO,WAAW;AAAU,YAAM,IAAI,QAAQ,KAAK,4CAAS;AAChE,UAAM,YAAY,KAAK,QAAQ,IAAI,MAAM;AACzC,SAAK,QAAQ,OAAO,MAAM;AAC1B,QAAI,cAAc,UAAa,aAAa,KAAK,IAAG;AAClD,YAAM,IAAI,QAAQ,KAAK,oHAAqB;AAC9C,WAAO,KAAK;EACd;EAEA,QAAK;AACH,SAAK,QAAQ,MAAK;EACpB;;;;AD/BF,SAAS,oBAA+D;AAWlE,SAAU,eAAe,MAAc,MAAiB;AAC5D,QAAM,WAAW,oBAAI,IAAG;AACxB,QAAM,UAAU,oBAAI,IAAG;AACvB,MAAI,SAAS;AACb,SAAO;IACL,MAAM,MAAM,KAAsB,KAAmB;AACnD,YAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB;AACtD,UAAI,CAAC,IAAI,SAAS,WAAW,UAAU;AAAG,eAAO;AACjD,UAAI;AACF,YAAI;AAAQ,gBAAM,IAAI,QAAQ,KAAK,4CAAS;AAC5C,YAAI,IAAI,WAAW,SAAS,IAAI,aAAa,mBAAmB,KAAK,OAAO;AAC1E,gBAAM,WAAW,IAAI,aAAa,IAAI,UAAU,KAAK,IACnD,KAAK,IAAI,aAAa,IAAI,IAAI,KAAK;AACrC,cAAI,IAAI,aAAa,IAAI,QAAQ,MAAM,KAAK;AAAQ,kBAAM,IAAI,QAAQ,KAAK,sCAAQ;AACnF,cAAI,CAAC,YAAY,SAAS,SAAS,OAAO,CAAC,iBAAiB,KAAK,EAAE;AACjE,kBAAM,IAAI,QAAQ,KAAK,4CAAS;AAClC,gBAAM,QAAQ,MAAM,KAAK,MAAM,UAAU,EAAE;AAC3C,cAAI,UAAU,KAAK;YACjB,gBAAgB,MAAM;YACtB,kBAAkB,MAAM,KAAK;YAC7B,uBAAuB,qBAAqB,EAAE,IAAI,MAAM,UAAU,MAAM,CAAC,CAAC;WAC3E;AACD,cAAI,IAAI,MAAM,IAAI;QACpB,WAAW,IAAI,WAAW,SAAS,IAAI,aAAa,oBAAoB;AACtE,gBAAM,WAAW,IAAI,aAAa,IAAI,UAAU,KAAK;AACrD,cAAI,YAAY,SAAS,SAAS;AAAK,kBAAM,IAAI,QAAQ,KAAK,yCAAW;AACzE,mBAAS,KAAK,KAAK,MAAM,KAAK,SAAS,QAAQ,CAAC;QAClD,WAAW,IAAI,WAAW,SAAS,IAAI,aAAa,sBAAsB,KAAK,UAAU;AACvF,gBAAM,WAAW,IAAI,aAAa,IAAI,UAAU,KAAK,IACnD,OAAO,IAAI,aAAa,IAAI,MAAM,KAAK;AACzC,cACE,IAAI,aAAa,IAAI,QAAQ,MAAM,KAAK,UACxC,CAAC,YACD,SAAS,SAAS,OAClB,KAAK,SAAS;AAEd,kBAAM,IAAI,QAAQ,KAAK,wDAAW;AACpC,mBAAS,KAAK,KAAK,MAAM,KAAK,SAAS,UAAU,IAAI,CAAC;QACxD,WACE,IAAI,WAAW,SACf,CAAC,qBAAqB,mBAAmB,eAAe,EAAE,SAAS,IAAI,QAAQ,GAC/E;AACA,cAAI,IAAI,aAAa,IAAI,QAAQ,MAAM,KAAK;AAAQ,kBAAM,IAAI,QAAQ,KAAK,gFAAe;AAC1F,gBAAM,WAAW,IAAI,aAAa,IAAI,UAAU,GAC9C,QAAQ,IAAI,aAAa,IAAI,OAAO,KAAK,IACzC,SAAS,IAAI,aAAa,IAAI,QAAQ;AACxC,cAAI,MAAM,SAAS,QAAQ,QAAQ,UAAU,KAAK,SAAS,UAAU,UAAU,KAAK;AAClF,kBAAM,IAAI,QAAQ,KAAK,4CAAS;AAClC,gBAAM,UAAU,EAAE,OAAO,GAAI,SAAS,EAAE,OAAM,IAAK,CAAA,EAAG;AACtD,cAAI,IAAI,SAAS,SAAS,YAAY,KAAK,KAAK;AAAW,qBAAS,KAAK,KAAK,MAAM,KAAK,UAAU,OAAO,CAAC;mBAClG,IAAI,SAAS,SAAS,UAAU,KAAK,YAAY,KAAK;AAC7D,qBAAS,KAAK,KAAK,MAAM,KAAK,QAAQ,UAAU,OAAO,CAAC;mBACjD,IAAI,SAAS,SAAS,QAAQ,KAAK,YAAY,KAAK,OAAO;AAClE,kBAAM,UAAU,IAAI,aAAa,IAAI,OAAO,KAAK,IAC/C,QAAQ,IAAI,aAAa,IAAI,OAAO;AACtC,kBAAM,SAAS,OAAO,IAAI,aAAa,IAAI,QAAQ,KAAK,CAAC,GACvD,UAAU,IAAI,aAAa,IAAI,SAAS;AAC1C,gBACE,CAAC,WACD,QAAQ,SAAS,OACjB,CAAC,CAAC,SAAS,QAAQ,aAAa,cAAc,gBAAgB,SAAS,EAAE,SAAS,KAAK,KACvF,CAAC,OAAO,cAAc,MAAM,KAC5B,SAAS,MACR,SAAS,UAAU,KAAK;AAEzB,oBAAM,IAAI,QAAQ,KAAK,kDAAU;AACnC,qBAAS,KAAK,KAAK,MAAM,KAAK,MAAM,UAAU,EAAE,SAAS,OAAO,QAAQ,GAAI,UAAU,EAAE,QAAO,IAAK,CAAA,EAAG,CAAE,CAAC;UAC5G;AAAO,kBAAM,IAAI,QAAQ,KAAK,4FAAiB;QACjD,WAAW,IAAI,WAAW,SAAS,IAAI,aAAa,kBAAkB;AACpE,cAAI,QAAQ,QAAQ;AAAI,kBAAM,IAAI,QAAQ,KAAK,4CAAS;AACxD,kBAAQ,IAAI,GAAG;AACf,cAAI,UAAU,KAAK;YACjB,gBAAgB;YAChB,iBAAiB;YACjB,qBAAqB;WACtB;AACD,cAAI,MAAM,iCAAiC;AAC3C,cAAI;AACJ,gBAAM,aAAa,6BAAK;AACtB,gBAAI,WAAW,IAAI;AAAW;AAC9B,sBAAU,WAAW,MAAK;AACxB,wBAAU;AACV,kBAAI,CAAC,IAAI,MAAM,iCAAiC;AAAG,oBAAI,QAAO;YAChE,GAAG,GAAG;UACR,GANmB;AAOnB,gBAAM,cAAc,KAAK,UAAU,UAAU;AAE7C,gBAAM,YAAY,YAAY,YAAY,GAAI;AAC9C,cAAI,KAAK,SAAS,MAAK;AACrB,gBAAI;AAAS,2BAAa,OAAO;AACjC,0BAAc,SAAS;AACvB,wBAAW;AACX,oBAAQ,OAAO,GAAG;UACpB,CAAC;QACH,WAAW,IAAI,WAAW,UAAU,IAAI,aAAa,oBAAoB;AACvE,gBAAM,UAAU,gBAAgB,MAAM,SAAS,GAAG,CAAC;AACnD,cAAI,QAAQ,WAAW,KAAK;AAAQ,kBAAM,IAAI,QAAQ,KAAK,oHAAqB;AAChF,gBAAM,MAAM,KAAK,UAAU;YACzB,GAAG;YACH,MAAM,OAAO,YAAY,OAAO,QAAQ,QAAQ,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;WAC7F;AACD,cAAI,UAAU,SAAS,IAAI,QAAQ,SAAS;AAC5C,cAAI,WAAW,QAAQ,QAAQ;AAAK,kBAAM,IAAI,QAAQ,KAAK,wEAAiB;AAC5E,cAAI,CAAC,SAAS;AAEZ,gBAAI,SAAS,QAAQ;AAAM,oBAAM,IAAI,QAAQ,KAAK,sIAAwB;AAC1E,sBAAU,EAAE,KAAK,QAAQ,QAAQ,QAAO,EAAG,KAAK,MAAM,KAAK,QAAQ,OAAO,CAAC,EAAC;AAC5E,qBAAS,IAAI,QAAQ,WAAW,OAAO;UACzC;AACA,gBAAM,SAAS,MAAM,QAAQ;AAC7B,cAAI,OAAO,cAAc;AAAM,gBAAI,KAAK,UAAU,IAAI;AACtD,mBAAS,KAAK,KAAK,MAAM;QAC3B;AAAO,gBAAM,IAAI,QAAQ,KAAK,sCAAQ;MACxC,SAAS,OAAO;AACd,YAAI,CAAC,IAAI;AACP,mBAAS,KAAK,iBAAiB,UAAU,MAAM,SAAS,KAAK;YAC3D,OAAO,iBAAiB,UAAU,MAAM,UAAU;WACnD;;AACE,cAAI,QAAO;MAClB;AACA,aAAO;IACT;IACA,QAAK;AACH,eAAS;AACT,iBAAW,UAAU;AAAS,eAAO,QAAO;AAC5C,cAAQ,MAAK;IACf;;AAEJ;AAhIgB;AAmIhB,eAAsB,cAAc,SAQnC;AACC,gBAAc,QAAQ,KAAK;AAC3B,QAAM,OAAO,QAAQ,QAAQ;AAC7B,MAAI,CAAC,OAAO,cAAc,IAAI,KAAK,OAAO,KAAK,OAAO;AAAO,UAAM,IAAI,MAAM,cAAc;AAC3F,QAAM,SAAS,eAAe,QAAQ,MAAM,MAAK;AAC/C,QAAI,QAAQ;AAAM,cAAQ,KAAI;;AACzB,YAAK,EAAG,MAAM,YAAY;EACjC,CAAC;AACD,QAAM,QAAQ,QAAQ,eAAe,IAAI,aAAa,QAAQ,KAAK,IAAI;AACvE,MAAI,SAAS;AACb,QAAM,WAAW,oBAAI,IAAG;AACxB,QAAM,SAAS,aAAa,CAAC,KAAK,QAAO;AACvC,UAAM,QAAQ,YAAW;AACvB,oBAAc,GAAG;AACjB,UAAI,CAAC,eAAe,KAAK,MAAM,GAAG;AAChC,iBAAS,KAAK,KAAK,EAAE,OAAO,2BAA0B,CAAE;AACxD;MACF;AACA,UAAI,SAAS,IAAI,WAAW,UAAU,IAAI,QAAQ,mBAAmB;AACnE,YAAI;AACF,gBAAM,OAAO,MAAM,SAAS,GAAG;AAC/B,cACE,CAAC,QACD,OAAO,SAAS,YAChB,MAAM,QAAQ,IAAI,KAClB,OAAO,KAAK,IAAI,EAAE,WAAW,KAC7B,EAAE,YAAY;AAEd,kBAAM,IAAI,QAAQ,KAAK,4CAAS;AAClC,mBAAS,KAAK,KAAK,EAAE,OAAO,MAAM,OAAO,KAAK,MAAM,EAAC,CAAE;QACzD,SAAS,OAAO;AACd,cAAI,EAAE,iBAAiB;AAAU,kBAAM;AACvC,mBAAS,KAAK,MAAM,QAAQ,EAAE,OAAO,MAAM,QAAO,CAAE;QACtD;AACA;MACF;AACA,YAAM,QAAQ,QAAQ,OAAO,IAAI,IAAI,OAAO,GAAG;AAC/C,UAAI,IAAI,WAAW,SAAS,OAAO;AACjC,YAAI,UAAU,KAAK,EAAE,gBAAgB,MAAM,KAAI,CAAE;AACjD,YAAI,IAAI,MAAM,IAAI;AAClB;MACF;AACA,UAAI,CAAC,WAAW,KAAK,QAAQ,KAAK,GAAG;AACnC,iBAAS,KAAK,KAAK,EAAE,OAAO,mDAAU,CAAE;AACxC;MACF;AACA,UAAI,CAAE,MAAM,OAAO,MAAM,KAAK,GAAG;AAAI,iBAAS,KAAK,KAAK,EAAE,OAAO,YAAW,CAAE;IAChF,GAAE,EACC,MAAM,MAAK;AACV,UAAI,CAAC,IAAI;AAAa,iBAAS,KAAK,KAAK,EAAE,OAAO,mBAAkB,CAAE;;AACjE,YAAI,QAAO;IAClB,CAAC,EACA,QAAQ,MAAM,SAAS,OAAO,IAAI,CAAC;AACtC,aAAS,IAAI,IAAI;EACnB,CAAC;AACD,SAAO,iBAAiB;AACxB,SAAO,iBAAiB;AACxB,SAAO,mBAAmB;AAC1B,SAAO,iBAAiB;AACxB,QAAM,IAAI,QAAc,CAAC,SAAS,WAAU;AAC1C,WAAO,KAAK,SAAS,MAAM;AAC3B,WAAO,OAAO,MAAM,aAAa,MAAK;AACpC,aAAO,eAAe,SAAS,MAAM;AACrC,cAAO;IACT,CAAC;EACH,CAAC;AACD,WAAS,oBAAqB,OAAO,QAAO,EAAmB,IAAI;AACnE,MAAI;AACJ,MAAI;AACJ,QAAM,SAAS,IAAI,QAAc,CAAC,SAAS,WAAU;AACnD,mBAAe;AACf,WAAO,KAAK,SAAS,MAAK;AACxB,UAAI;AAAS,gBAAQ,KAAK,SAAS,MAAM;;AACpC,gBAAO;IACd,CAAC;EACH,CAAC;AACD,QAAM,QAAQ,6BACX,aAAa,YAAW;AACvB,WAAO,MAAK;AACZ,WAAO,MAAK;AACZ,UAAM,UAAU,IAAI,QAAc,CAAC,SAAS,WAC1C,OAAO,MAAM,CAAC,UAAW,QAAQ,OAAO,KAAK,IAAI,QAAO,CAAG,CAAC;AAE9D,WAAO,oBAAmB;AAC1B,UAAM,UAAU,MAAM,QAAQ,WAAW,CAAC,QAAQ,QAAO,EAAG,KAAK,MAAM,QAAQ,QAAO,CAAE,GAAG,GAAG,UAAU,OAAO,CAAC;AAChH,UAAM,SAAS,QAAQ,OAAO,CAAC,WAAW,OAAO,WAAW,UAAU,EAAE,IAAI,CAAC,WAAW,OAAO,MAAiB;AAChH,QAAI,OAAO;AAAQ,YAAM,IAAI,eAAe,QAAQ,2BAA2B;EACjF,GAAE,GAXU;AAYd,SAAO;IACL,KAAK;IACL;IACA,gBAAgB,6BAAK;AACnB,UAAI,CAAC,SAAS;AAAS,cAAM,IAAI,MAAM,4FAAiB;AACxD,aAAO,GAAG,MAAM,iBAAiB,MAAM,MAAK,CAAE;IAChD,GAHgB;IAIhB;;AAEJ;AAzGsB;AA4GhB,SAAU,cAAc,KAAmB;AAC/C,MAAI,UAAU,iBAAiB,UAAU;AACzC,MAAI,UAAU,0BAA0B,SAAS;AACjD,MAAI,UAAU,mBAAmB,aAAa;AAC9C,MAAI,UACF,2BACA,6KAA6K;AAEjL;AARgB;AAUV,SAAU,cAAc,OAAa;AACzC,MAAI,CAAC,wBAAwB,KAAK,KAAK;AACrC,UAAM,IAAI,MAAM,oEAAoE;AACxF;AAHgB;AAKV,SAAU,eAAe,KAAsB,QAAc;AACjE,SACE,QAAQ,MAAM,KACd,IAAI,QAAQ,SAAS,IAAI,IAAI,MAAM,EAAE,SACpC,IAAI,QAAQ,WAAW,UAAa,IAAI,QAAQ,WAAW;AAEhE;AANgB;AAQV,SAAU,WAAW,KAAsB,OAAa;AAC5D,QAAM,WAAW,IAAI,QAAQ,iBAAiB,IAC5C,WAAW,UAAU,KAAK;AAC5B,SACE,OAAO,WAAW,QAAQ,MAAM,OAAO,WAAW,QAAQ,KAC1D,gBAAgB,OAAO,KAAK,QAAQ,GAAG,OAAO,KAAK,QAAQ,CAAC;AAEhE;AAPgB;AASV,SAAU,SAAS,KAAqB,QAAgB,MAAa;AACzE,MAAI,UAAU,QAAQ,EAAE,gBAAgB,kCAAiC,CAAE;AAC3E,MAAI,IAAI,KAAK,UAAU,IAAI,CAAC;AAC9B;AAHgB;AAIhB,eAAe,SAAS,KAAoB;AAC1C,MAAI,IAAI,QAAQ,cAAc,GAAG,MAAM,GAAG,EAAE,CAAC,GAAG,KAAI,MAAO;AAAoB,UAAM,IAAI,QAAQ,KAAK,yBAAU;AAChH,MAAI,OAAO;AACX,QAAM,SAAmB,CAAA;AACzB,mBAAiB,SAAS,KAAK;AAC7B,UAAM,QAAQ,OAAO,KAAK,KAAmB;AAC7C,YAAQ,MAAM;AACd,QAAI,OAAO,MAAM;AAAM,YAAM,IAAI,QAAQ,KAAK,gCAAO;AACrD,WAAO,KAAK,KAAK;EACnB;AACA,SAAO,KAAK,MAAM,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM,CAAC;AAC1D;AAXe;AAYf,SAAS,gBAAgB,OAAc;AACrC,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK;AAAG,UAAM,IAAI,QAAQ,KAAK,sCAAQ;AAChG,QAAM,IAAI;AACV,MACE,OAAO,KAAK,CAAC,EAAE,KACb,CAAC,QAAQ,CAAC,CAAC,WAAW,UAAU,aAAa,QAAQ,YAAY,oBAAoB,MAAM,EAAE,SAAS,GAAG,CAAC,KAE5G,EAAE,YAAY,KACd,OAAO,EAAE,WAAW,YACpB,EAAE,OAAO,SAAS,OAClB,OAAO,EAAE,cAAc,YACvB,CAAC,2BAA2B,KAAK,EAAE,SAAS,KAC3C,EAAE,qBAAqB,WACrB,OAAO,EAAE,qBAAqB,YAAY,CAAC,EAAE,oBAAoB,EAAE,iBAAiB,SAAS,QAChG,OAAO,EAAE,SAAS,YAClB,CAAC,0BAA0B,KAAK,EAAE,IAAI,KACtC,EAAE,EAAE,aAAa,QAAS,OAAO,EAAE,aAAa,YAAY,EAAE,SAAS,UAAU,QACjF,CAAC,EAAE,QACH,OAAO,EAAE,SAAS,YAClB,MAAM,QAAQ,EAAE,IAAI,KACpB,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,MAC7B,OAAO,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,OAAO,MAAM,YAAY,EAAE,SAAS,KAAK,IAAI;AAE/E,UAAM,IAAI,QAAQ,KAAK,sCAAQ;AACjC,SAAO;AACT;AAzBS;;;AD1ST,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AAEzB,eAAsB,wBACpB,MACA,SACA;AACA,QAAM,kBAAkB,MAAM;AAAA,IAC5B,IAAI,IAAI,sBAAsB,YAAY,QAAQ,uBAAuB,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,QAAM,aAAa,MAAM,SAAS,IAAI,IAAI,kBAAkB,YAAY,QAAQ,mBAAmB,CAAC,GAAG,MAAM;AAC7G,QAAM,UAAU,GAAG,UAAU;AAAA;AAAA;AAC7B,QAAM,SAAS,IAAI;AAAA,IACjB,MAAM,YAAY,aAAa,WAAW,cAAc,EAAE,iBAAiB,cAAc,QAAQ,aAAa,CAAC,CAAC;AAAA,EAClH;AACA,SAAO,IAAI,mBAAmB,EAAE,MAAM,kCAAkC,MAAM,QAAQ,CAAC;AACvF,SAAO,cAAc,EAAE,MAAM,QAAQ,GAAG,SAAS,OAAO,6BAAM,KAAK,MAAM,GAAjB,SAAmB,CAAC;AAC9E;AAfsB;",
+  "names": ["ticket"]
+}

package/dist/cli/{web-ui-COB6PKC5.js → web-ui-UWQUFE4W.js}

@@ -4,11 +4,12 @@ import {
   runMaybeCodeWebUI,
   startMaybeCodeWebServer,
   startMaybeCodeWebUI
-} from "./chunk-7ISOHFS7.js";
-import "./chunk-HOU5ITUK.js";
-import "./chunk-H7SNBFO4.js";
-import "./chunk-VAZMCNBB.js";
-import "./chunk-K5JWPNSY.js";
+} from "./chunk-WMSG5ZTR.js";
+import "./chunk-Z3BOPBVU.js";
+import "./chunk-XTEMRAQW.js";
+import "./chunk-MNBYXL5Y.js";
+import "./chunk-5SLWALZK.js";
+import "./chunk-UQDZ55LQ.js";
 import "./chunk-BSBNNF34.js";
 import "./chunk-E732GDOI.js";
 export {
@@ -17,4 +18,4 @@ export {
   startMaybeCodeWebServer,
   startMaybeCodeWebUI
 };
-//# sourceMappingURL=web-ui-COB6PKC5.js.map
+//# sourceMappingURL=web-ui-UWQUFE4W.js.map

package/dist/config-schema.json

@@ -0,0 +1,337 @@
+{
+    "type": "object",
+    "description": "MaybeCode settings.",
+    "properties": {
+        "execution": {
+            "default": { "mode": "host" },
+            "oneOf": [
+                {
+                    "type": "object",
+                    "properties": { "mode": { "const": "host" } },
+                    "required": ["mode"],
+                    "additionalProperties": false
+                },
+                {
+                    "type": "object",
+                    "properties": {
+                        "mode": { "const": "container" },
+                        "image": { "$ref": "#/$defs/nonEmptyString" },
+                        "network": { "const": "none" },
+                        "memoryBytes": { "$ref": "#/$defs/positiveInteger" },
+                        "cpuCount": { "type": "number", "exclusiveMinimum": 0 }
+                    },
+                    "required": ["mode", "image", "network", "memoryBytes", "cpuCount"],
+                    "additionalProperties": false
+                }
+            ]
+        },
+        "fetch": {
+            "type": "object",
+            "properties": {
+                "allowedOrigins": {
+                    "type": "array",
+                    "uniqueItems": true,
+                    "items": { "type": "string", "pattern": "^https?://(?:[A-Za-z0-9.-]+|\\[[A-Fa-f0-9:]+\\])(?::[0-9]{1,5})?$" }
+                },
+                "maxBytes": { "$ref": "#/$defs/positiveInteger" },
+                "timeoutMs": { "$ref": "#/$defs/positiveInteger" },
+                "maxRedirects": { "type": "integer", "minimum": 0 }
+            },
+            "additionalProperties": false
+        },
+        "requestRecording": { "enum": ["off", "required"], "default": "required" },
+        "providerBodyRecording": { "type": "boolean", "default": false },
+        "git": {
+            "oneOf": [
+                { "const": false },
+                {
+                    "type": "object",
+                    "properties": {
+                        "autoCommit": { "type": "boolean", "default": true },
+                        "readOnly": { "type": "boolean", "default": false },
+                        "dataRoot": { "$ref": "#/$defs/nonEmptyString" },
+                        "worktreesRoot": { "$ref": "#/$defs/nonEmptyString" },
+                        "excludedPaths": { "type": "array", "items": { "$ref": "#/$defs/nonEmptyString" } }
+                    },
+                    "additionalProperties": false
+                }
+            ]
+        },
+        "plugins": { "$ref": "#/$defs/pluginSelections" },
+        "permissionMode": {
+            "enum": ["default", "yolo"],
+            "default": "default",
+            "description": "Tool approval mode. yolo auto-approves requests while preserving explicit policy denials."
+        },
+        "persistentRules": {
+            "type": "boolean",
+            "default": false,
+            "description": "Enable project-scoped persistent file permissions in .may/permission-rules.json."
+        },
+        "delegationNotifications": {
+            "type": "boolean",
+            "default": false,
+            "description": "Show a notice when a sub-agent task finishes."
+        },
+        "instructionsDirectory": { "$ref": "#/$defs/nonEmptyString" },
+        "skills": {
+            "oneOf": [
+                { "const": false },
+                {
+                    "type": "object",
+                    "properties": {
+                        "directories": { "type": "array", "maxItems": 32, "items": { "$ref": "#/$defs/nonEmptyString" } }
+                    },
+                    "additionalProperties": false
+                }
+            ]
+        },
+        "runBudget": { "$ref": "#/$defs/runBudget" },
+        "subagents": {
+            "oneOf": [
+                { "const": false },
+                {
+                    "type": "object",
+                    "properties": {
+                        "enabled": {
+                            "type": "boolean",
+                            "default": true,
+                            "description": "Sub-agent delegation for ordinary requests. Enabled by default."
+                        },
+                        "roles": {
+                            "type": "object",
+                            "minProperties": 1,
+                            "maxProperties": 8,
+                            "propertyNames": { "$ref": "#/$defs/subagentIdentifier" },
+                            "additionalProperties": { "$ref": "#/$defs/subagentRole" }
+                        },
+                        "defaultRole": { "$ref": "#/$defs/subagentIdentifier" },
+                        "limits": {
+                            "type": "object",
+                            "properties": {
+                                "maxConcurrent": { "type": "integer", "minimum": 1, "maximum": 8, "default": 2 },
+                                "maxTasks": { "type": "integer", "minimum": 1, "maximum": 128, "default": 24 },
+                                "maxDepth": { "type": "integer", "minimum": 2, "maximum": 4, "default": 3 },
+                                "maxTaskTurns": { "type": "integer", "minimum": 2, "maximum": 16, "default": 6 },
+                                "maxDurationMs": { "type": "integer", "minimum": 1, "maximum": 3600000, "default": 900000 },
+                                "maxInputBytes": { "type": "integer", "minimum": 1, "maximum": 65536, "default": 32768 },
+                                "maxOutputBytes": { "type": "integer", "minimum": 1, "maximum": 262144, "default": 65536 }
+                            },
+                            "additionalProperties": false
+                        },
+                        "runBudget": { "$ref": "#/$defs/runBudget", "description": "Per child Run budget." },
+                        "maxModelCalls": {
+                            "type": "integer",
+                            "minimum": 1,
+                            "maximum": 10000,
+                            "default": 128,
+                            "description": "Model calls reserved across the main Run, child Runs and compaction of one request."
+                        },
+                        "maxTotalTokens": {
+                            "$ref": "#/$defs/positiveInteger",
+                            "description": "Optional token ceiling checked against per-call reservations."
+                        },
+                        "reservationTokens": { "type": "integer", "minimum": 1, "maximum": 10000000, "default": 32768 }
+                    },
+                    "additionalProperties": false
+                }
+            ]
+        },
+        "autoCompaction": {
+            "type": "object",
+            "properties": {
+                "mode": {
+                    "enum": ["prune-summary", "history-reference", "provider-native"],
+                    "default": "prune-summary"
+                }
+            },
+            "additionalProperties": false
+        },
+        "retry": {
+            "oneOf": [
+                { "const": false },
+                {
+                    "type": "object",
+                    "properties": {
+                        "maxAttempts": { "$ref": "#/$defs/positiveInteger" },
+                        "baseDelayMs": { "type": "number", "minimum": 0 },
+                        "maxDelayMs": { "type": "number", "minimum": 0 },
+                        "jitterRatio": { "type": "number", "minimum": 0, "maximum": 1 }
+                    },
+                    "additionalProperties": false
+                }
+            ]
+        },
+        "observability": {
+            "oneOf": [
+                { "const": false },
+                {
+                    "type": "object",
+                    "properties": {
+                        "enabled": { "type": "boolean", "default": true },
+                        "exporter": { "const": "file", "default": "file" },
+                        "file": { "$ref": "#/$defs/nonEmptyString" },
+                        "samplingRatio": { "type": "number", "minimum": 0, "maximum": 1 },
+                        "retentionDays": { "$ref": "#/$defs/positiveInteger", "default": 60 },
+                        "batch": {
+                            "type": "object",
+                            "properties": {
+                                "maxQueueSize": { "$ref": "#/$defs/positiveInteger" },
+                                "maxExportBatchSize": { "$ref": "#/$defs/positiveInteger" },
+                                "scheduledDelayMs": { "type": "number", "minimum": 0 }
+                            },
+                            "additionalProperties": false
+                        }
+                    },
+                    "additionalProperties": false
+                }
+            ]
+        },
+        "mcpServers": {
+            "oneOf": [
+                { "const": false },
+                {
+                    "type": "object",
+                    "propertyNames": { "pattern": "^[A-Za-z0-9_-]+$" },
+                    "additionalProperties": {
+                        "oneOf": [{ "$ref": "#/$defs/mcpStdioServer" }, { "$ref": "#/$defs/mcpHttpServer" }]
+                    }
+                }
+            ]
+        }
+    },
+    "additionalProperties": false,
+    "$defs": {
+        "subagentIdentifier": {
+            "type": "string",
+            "pattern": "^[A-Za-z0-9][A-Za-z0-9_.-]{0,63}$",
+            "not": { "enum": ["constructor", "prototype"] }
+        },
+        "subagentRole": {
+            "type": "object",
+            "properties": {
+                "model": {
+                    "$ref": "#/$defs/subagentIdentifier",
+                    "description": "Model profile name. Without it the role inherits the main Session model and reasoning effort."
+                },
+                "reasoningEffort": { "type": "string", "pattern": "\\S", "maxLength": 64 },
+                "instructions": { "type": "string", "pattern": "^[^\\u0000]*\\S[^\\u0000]*$", "maxLength": 16384 },
+                "tools": {
+                    "type": "array",
+                    "maxItems": 7,
+                    "uniqueItems": true,
+                    "items": { "enum": ["read", "shell", "edit", "write", "glob", "grep", "fetch"] }
+                },
+                "delegateTo": {
+                    "type": "array",
+                    "maxItems": 8,
+                    "uniqueItems": true,
+                    "items": { "$ref": "#/$defs/subagentIdentifier" }
+                },
+                "runBudget": { "$ref": "#/$defs/runBudget" }
+            },
+            "additionalProperties": false
+        },
+        "mcpStdioServer": {
+            "type": "object",
+            "properties": {
+                "enabled": { "type": "boolean", "default": true },
+                "required": { "type": "boolean", "default": true },
+                "transport": { "const": "stdio", "default": "stdio" },
+                "protocolMode": { "enum": ["legacy", "auto"], "default": "legacy" },
+                "host": { "$ref": "#/$defs/mcpHostOptions" },
+                "tasks": {
+                    "type": "boolean",
+                    "default": false,
+                    "description": "Enable the modern Tasks extension with durable encrypted handles."
+                },
+                "command": { "$ref": "#/$defs/nonEmptyString" },
+                "args": {
+                    "type": "array",
+                    "items": { "type": "string" }
+                },
+                "cwd": { "$ref": "#/$defs/nonEmptyString" },
+                "env": {
+                    "type": "object",
+                    "propertyNames": { "minLength": 1 },
+                    "additionalProperties": { "type": "string" }
+                },
+                "requestTimeoutMs": { "$ref": "#/$defs/positiveInteger" },
+                "maxTotalTimeoutMs": { "$ref": "#/$defs/positiveInteger" },
+                "maxBufferSize": { "$ref": "#/$defs/positiveInteger" },
+                "stderrMaxBytes": {
+                    "$ref": "#/$defs/positiveInteger",
+                    "default": 16384
+                }
+            },
+            "anyOf": [
+                {
+                    "required": ["enabled"],
+                    "properties": { "enabled": { "const": false } }
+                },
+                { "required": ["command"] }
+            ],
+            "additionalProperties": false
+        },
+        "mcpHttpServer": {
+            "type": "object",
+            "required": ["transport"],
+            "properties": {
+                "enabled": { "type": "boolean", "default": true },
+                "required": { "type": "boolean", "default": true },
+                "transport": { "const": "streamable-http" },
+                "url": {
+                    "$ref": "#/$defs/nonEmptyString",
+                    "description": "HTTPS endpoint (HTTP only on loopback); redirects and URL credentials are refused at runtime."
+                },
+                "headers": {
+                    "type": "object",
+                    "propertyNames": { "minLength": 1 },
+                    "additionalProperties": { "type": "string" }
+                },
+                "auth": { "$ref": "#/$defs/mcpOAuthOptions" },
+                "protocolMode": { "enum": ["legacy", "auto"], "default": "auto" },
+                "host": { "$ref": "#/$defs/mcpHostOptions" },
+                "tasks": {
+                    "type": "boolean",
+                    "default": false,
+                    "description": "Enable the modern Tasks extension with durable encrypted handles."
+                },
+                "requestTimeoutMs": { "$ref": "#/$defs/positiveInteger" },
+                "maxTotalTimeoutMs": { "$ref": "#/$defs/positiveInteger" }
+            },
+            "anyOf": [{ "required": ["enabled"], "properties": { "enabled": { "const": false } } }, { "required": ["url"] }],
+            "additionalProperties": false
+        },
+        "mcpHostOptions": {
+            "type": "object",
+            "description": "Explicit compatibility options; an active interaction UI and host services are also required.",
+            "properties": {
+                "roots": { "type": "boolean", "default": false },
+                "sampling": { "type": "boolean", "default": false },
+                "legacyRequests": {
+                    "const": "isolated",
+                    "description": "Use a fresh process/session for each legacy interactive operation, never shared or reused."
+                }
+            },
+            "additionalProperties": false
+        },
+        "mcpOAuthOptions": {
+            "type": "object",
+            "required": ["type"],
+            "properties": {
+                "type": { "const": "oauth" },
+                "account": { "$ref": "#/$defs/nonEmptyString" },
+                "clientId": { "$ref": "#/$defs/nonEmptyString" },
+                "expectedIssuer": { "$ref": "#/$defs/nonEmptyString" },
+                "clientMetadataUrl": { "$ref": "#/$defs/nonEmptyString" },
+                "scopes": { "type": "array", "items": { "$ref": "#/$defs/nonEmptyString" } },
+                "authorizationOrigins": { "type": "array", "items": { "$ref": "#/$defs/nonEmptyString" } },
+                "callbackPort": { "type": "integer", "minimum": 0, "maximum": 65535 }
+            },
+            "dependentRequired": { "clientId": ["expectedIssuer"] },
+            "not": { "required": ["clientId", "clientMetadataUrl"] },
+            "additionalProperties": false
+        }
+    }
+}