@timurproko/a1 0.2.7-dev.1249 → 0.2.7-dev.1255

package/dist/foundation/resident-tabs/runtime-control.js

@@ -1,74 +0,0 @@
-import { sameBootIdentity } from "./boot-identity.js";
-import { runTerminalHostMaintenance } from "./maintenance.js";
-/** Mandatory native control semantics; optional methods never establish source authority. */
-export const RUNTIME_CONTROL_API = "resident-control-v1";
-export const RUNTIME_CONTROL_CORE = Object.freeze([
-    "attach", "tab.list", "tab.view", "input", "resize", "detach", "controller-boundary",
-]);
-/**
- * Validates an authenticated source's descriptor against separately verified source custody.
- * This is not an activation verdict: the caller must also reconcile every live tab and fence
- * changes to that topology before committing a client selection.
- */
-export function assessRuntimeControl(value, expected) {
-    if (!isRecord(value))
-        return blocked("invalid-contract");
-    if (value.api !== RUNTIME_CONTROL_API || value.generation !== 1)
-        return blocked("unsupported-api");
-    if (!identityValid(value) || !identityValid(expected)
-        || !boundedStrings(value.core) || typeof value.retryInput !== "boolean"
-        || !positiveInteger(value.frameLimit, 2 * 1024 * 1024)
-        || !positiveInteger(value.inputLimit, 1024 * 1024) || value.inputLimit > value.frameLimit) {
-        return blocked("invalid-contract");
-    }
-    if (value.releaseId !== expected.releaseId || value.scope !== expected.scope
-        || !sameBootIdentity(value.bootId, expected.bootId) || value.osSessionId !== expected.osSessionId)
-        return blocked("source-mismatch");
-    if (value.epoch !== expected.epoch)
-        return blocked("stale-epoch");
-    const core = value.core;
-    if (value.retryInput || RUNTIME_CONTROL_CORE.some(method => !core.includes(method)))
-        return blocked("missing-core");
-    // Security: retain only allowlisted metadata, never arbitrary optional source data.
-    return { status: "compatible", contract: Object.freeze({
-            api: RUNTIME_CONTROL_API, generation: 1, releaseId: value.releaseId, scope: value.scope,
-            epoch: value.epoch, bootId: value.bootId, osSessionId: value.osSessionId,
-            core: Object.freeze([...value.core]), frameLimit: value.frameLimit, inputLimit: value.inputLimit,
-            retryInput: false,
-        }) };
-}
-/** A bounded read-only authenticated exchange; it never starts a host or substitutes a release. */
-export async function readRuntimeControl(options) {
-    const { expected, maintain = runTerminalHostMaintenance, ...maintenance } = options;
-    try {
-        const report = await maintain({ ...maintenance, action: "runtime-control" });
-        if (report.schema !== "a1-tabs-maintenance-v1" || report.exitCode !== 0
-            || report.host !== "running" || report.command !== "runtime-control")
-            return blocked("unavailable");
-        return assessRuntimeControl(report.result, expected);
-    }
-    catch {
-        return blocked("unavailable");
-    }
-}
-function blocked(reason) {
-    return { status: "blocked", reason };
-}
-function isRecord(value) {
-    return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function positiveInteger(value, maximum = Number.MAX_SAFE_INTEGER) {
-    return typeof value === "number" && Number.isSafeInteger(value) && value > 0 && value <= maximum;
-}
-function boundedStrings(value) {
-    return Array.isArray(value) && value.length <= 64 && new Set(value).size === value.length
-        && value.every(entry => typeof entry === "string" && entry.length > 0 && entry.length <= 64);
-}
-function identityValid(value) {
-    const record = value;
-    return typeof record.releaseId === "string" && /^[a-f0-9]{64}$/u.test(record.releaseId)
-        && typeof record.scope === "string" && /^[a-f0-9]{20}$/u.test(record.scope)
-        && positiveInteger(record.epoch)
-        && [record.bootId, record.osSessionId].every(entry => typeof entry === "string" && entry.length > 0
-            && entry.length <= 256 && !/[\x00-\x1f\x7f]/u.test(entry));
-}

package/dist/foundation/resident-tabs/session-sync.d.ts

@@ -1,14 +0,0 @@
-import type { PromptJournal } from "./prompt-journal.js";
-import { ResidentTabFaultInjection } from "./fault-injection.js";
-export declare function synchronizeSessionFile(path: string, faults?: ResidentTabFaultInjection): Promise<void>;
-/** Serializes settled-turn sync and journal ordering off the input path. */
-export declare class SettledTurnSynchronizer {
-    #private;
-    constructor(journal: PromptJournal, faults?: ResidentTabFaultInjection);
-    settle(sessionFile: string, submissionId: string, entryId: string): Promise<void>;
-    settleMany(sessionFile: string, entries: readonly {
-        readonly id: string;
-        readonly entryId: string;
-    }[]): Promise<void>;
-    flush(): Promise<void>;
-}

package/dist/foundation/resident-tabs/session-sync.js

@@ -1,37 +0,0 @@
-import { open } from "node:fs/promises";
-import { ResidentTabFaultInjection } from "./fault-injection.js";
-export async function synchronizeSessionFile(path, faults = new ResidentTabFaultInjection()) {
-    const handle = await open(path, "r+");
-    try {
-        faults.at("session-before-sync");
-        await handle.sync();
-        faults.at("session-after-sync");
-    }
-    finally {
-        await handle.close();
-    }
-}
-/** Serializes settled-turn sync and journal ordering off the input path. */
-export class SettledTurnSynchronizer {
-    #journal;
-    #faults;
-    #queue = Promise.resolve();
-    constructor(journal, faults = new ResidentTabFaultInjection()) {
-        this.#journal = journal;
-        this.#faults = faults;
-    }
-    settle(sessionFile, submissionId, entryId) {
-        return this.settleMany(sessionFile, [{ id: submissionId, entryId }]);
-    }
-    settleMany(sessionFile, entries) {
-        const operation = this.#queue.then(async () => {
-            await synchronizeSessionFile(sessionFile, this.#faults);
-            this.#faults.at("journal-after-settle-sync");
-            for (const entry of entries)
-                await this.#journal.settle(entry.id, entry.entryId);
-        });
-        this.#queue = operation.catch(() => undefined);
-        return operation;
-    }
-    flush() { return this.#queue; }
-}

package/dist/foundation/resident-tabs/settings.d.ts

@@ -1,16 +0,0 @@
-import { OWNED_SETTING_DECLARATIONS } from "../../ui/settings/index.js";
-export declare const RESIDENT_TABS_MAX_CONCURRENT_STARTS = 2;
-export declare const RESIDENT_TABS_MAX_CONCURRENT_STARTS_CAP = 8;
-export declare const RESIDENT_TABS_PREWARM_COUNT = 1;
-export declare const RESIDENT_TABS_PREWARM_CAP = 1;
-type ResidentAccentColor = (typeof OWNED_SETTING_DECLARATIONS.accentColor.allowedValues)[number];
-export interface ResidentTabLaunchSettings {
-    readonly accentColor: ResidentAccentColor;
-    readonly tabsAutoName: boolean;
-    readonly maxConcurrentStarts: number;
-    readonly prewarmCount: number;
-    readonly unresponsiveRestartSeconds: number;
-}
-/** Read only resident-launch values before any UI or extension module is loaded. */
-export declare function readResidentTabLaunchSettings(profileDir: string, namespace?: string, legacyConfigDir?: string, profileId?: string): Promise<ResidentTabLaunchSettings>;
-export {};

package/dist/foundation/resident-tabs/settings.js

@@ -1,60 +0,0 @@
-import { readFile } from "node:fs/promises";
-import { resolve } from "node:path";
-import { OWNED_SETTING_DECLARATIONS, OWNED_UI_SETTINGS_MIGRATIONS, OWNED_UI_SETTINGS_VERSION, normalizeOwnedUiSettingsValues, parseOwnedUiSettingsDocument, readProfileSettingsNamespace, repairProfileSettingsDocument, resolveOwnedUiSettings, settingValue, } from "../../ui/settings/index.js";
-const MAX_SETTINGS_BYTES = 256 * 1024;
-export const RESIDENT_TABS_MAX_CONCURRENT_STARTS = 2;
-export const RESIDENT_TABS_MAX_CONCURRENT_STARTS_CAP = 8;
-export const RESIDENT_TABS_PREWARM_COUNT = 1;
-export const RESIDENT_TABS_PREWARM_CAP = 1;
-const DEFAULTS = Object.freeze({
-    accentColor: "blue",
-    tabsAutoName: true,
-    maxConcurrentStarts: RESIDENT_TABS_MAX_CONCURRENT_STARTS,
-    prewarmCount: RESIDENT_TABS_PREWARM_COUNT,
-    unresponsiveRestartSeconds: 120,
-});
-/** Read only resident-launch values before any UI or extension module is loaded. */
-export async function readResidentTabLaunchSettings(profileDir, namespace = "a1", legacyConfigDir, profileId = namespace) {
-    const sharedFile = resolve(profileDir, "settings.json");
-    try {
-        repairProfileSettingsDocument(sharedFile);
-    }
-    catch {
-        // Compatibility: recovery is opportunistic; resident launch falls back when bytes stay invalid.
-    }
-    const shared = readProfileSettingsNamespace(sharedFile, namespace);
-    if (shared.status === "invalid")
-        return DEFAULTS;
-    if (shared.status === "available") {
-        const compatibility = normalizeOwnedUiSettingsValues(shared.value);
-        return compatibility.values === null
-            ? DEFAULTS
-            : resolveLaunchValues({ version: OWNED_UI_SETTINGS_VERSION, values: compatibility.values }, []);
-    }
-    const file = resolve(legacyConfigDir ?? profileDir, "settings", `${profileId}.json`);
-    try {
-        const raw = await readFile(file, "utf8");
-        if (Buffer.byteLength(raw, "utf8") > MAX_SETTINGS_BYTES)
-            return DEFAULTS;
-        const document = parseOwnedUiSettingsDocument(raw);
-        return document === null ? DEFAULTS : resolveLaunchValues(document, OWNED_UI_SETTINGS_MIGRATIONS);
-    }
-    catch {
-        return DEFAULTS;
-    }
-}
-function resolveLaunchValues(document, migrations) {
-    const resolution = resolveOwnedUiSettings({
-        declarations: [OWNED_SETTING_DECLARATIONS.accentColor, OWNED_SETTING_DECLARATIONS.tabsAutoName],
-        migrations,
-        document,
-        currentVersion: OWNED_UI_SETTINGS_VERSION,
-    });
-    return {
-        accentColor: settingValue(resolution, "accentColor"),
-        tabsAutoName: settingValue(resolution, "tabsAutoName") === true,
-        maxConcurrentStarts: RESIDENT_TABS_MAX_CONCURRENT_STARTS,
-        prewarmCount: RESIDENT_TABS_PREWARM_COUNT,
-        unresponsiveRestartSeconds: DEFAULTS.unresponsiveRestartSeconds,
-    };
-}

package/dist/foundation/resident-tabs/terminal-host-artifact.d.ts

@@ -1,14 +0,0 @@
-export declare const TERMINAL_HOST_MANIFEST_FILENAME = "terminal-host.manifest.json";
-export type TerminalHostArtifactErrorCode = "TERMINAL_HOST_ARTIFACT_MISSING" | "TERMINAL_HOST_ARTIFACT_TAMPERED" | "TERMINAL_HOST_ARTIFACT_INCOMPATIBLE" | "TERMINAL_HOST_ARTIFACT_UNSUPPORTED";
-export declare class TerminalHostArtifactError extends Error {
-    readonly code: TerminalHostArtifactErrorCode;
-    readonly manifestPath: string;
-    constructor(code: TerminalHostArtifactErrorCode, manifestPath: string, message: string);
-}
-export interface VerifiedTerminalHostArtifact {
-    readonly addon: string;
-    readonly entry: string;
-    readonly generation: 1;
-}
-/** Verifies every runtime file certified by the terminal-host v2 manifest before Node loads it. */
-export declare function verifyTerminalHostArtifact(addonPath: string, platform?: NodeJS.Platform, architecture?: string): Promise<VerifiedTerminalHostArtifact>;

package/dist/foundation/resident-tabs/terminal-host-artifact.js

@@ -1,78 +0,0 @@
-import { createHash } from "node:crypto";
-import { readFile, stat } from "node:fs/promises";
-import { basename, dirname, resolve } from "node:path";
-import { PRODUCT_IDENTITY } from "../../product-identity.js";
-export const TERMINAL_HOST_MANIFEST_FILENAME = "terminal-host.manifest.json";
-const SCHEMA = "a1-terminal-host-artifact-v2";
-const GENERATION = 1;
-const NODE_API = 9;
-const NOTICES_NAME = "terminal-host-THIRD-PARTY-NOTICES.txt";
-export class TerminalHostArtifactError extends Error {
-    code;
-    manifestPath;
-    constructor(code, manifestPath, message) {
-        super(message);
-        this.name = "TerminalHostArtifactError";
-        this.code = code;
-        this.manifestPath = manifestPath;
-    }
-}
-/** Verifies every runtime file certified by the terminal-host v2 manifest before Node loads it. */
-export async function verifyTerminalHostArtifact(addonPath, platform = process.platform, architecture = process.arch) {
-    const directory = dirname(addonPath);
-    const releaseRoot = resolve(directory, "../../..");
-    const manifestPath = resolve(directory, TERMINAL_HOST_MANIFEST_FILENAME);
-    let manifest;
-    try {
-        const parsed = JSON.parse(await readFile(manifestPath, "utf8"));
-        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
-            throw new TypeError("terminal host manifest is not an object");
-        manifest = parsed;
-    }
-    catch (error) {
-        const code = error instanceof Error && "code" in error && error.code === "ENOENT"
-            ? "TERMINAL_HOST_ARTIFACT_MISSING"
-            : "TERMINAL_HOST_ARTIFACT_INCOMPATIBLE";
-        throw new TerminalHostArtifactError(code, manifestPath, "terminal host manifest is missing or invalid");
-    }
-    if (manifest.capability === "unsupported") {
-        throw new TerminalHostArtifactError("TERMINAL_HOST_ARTIFACT_UNSUPPORTED", manifestPath, "terminal host is unsupported on this platform");
-    }
-    if (manifest.schema !== SCHEMA || manifest.kind !== "node-addon" || manifest.nodeApi !== NODE_API
-        || manifest.protocolVersion !== 1 || manifest.generation !== GENERATION
-        || manifest.platform !== platform || manifest.architecture !== architecture || manifest.capability !== "supported"
-        || !validRecord(manifest.artifact) || !validRecord(manifest.entry) || !validRecord(manifest.notices)
-        || manifest.artifact.filename !== `${PRODUCT_IDENTITY.artifacts.terminalHostAddon}.node`
-        || manifest.entry.filename !== `dist/foundation/resident-tabs/${PRODUCT_IDENTITY.artifacts.terminalHostEntry}.js`
-        || manifest.notices.filename !== NOTICES_NAME
-        || basename(addonPath) !== manifest.artifact.filename) {
-        throw new TerminalHostArtifactError("TERMINAL_HOST_ARTIFACT_INCOMPATIBLE", manifestPath, "terminal host manifest is incompatible");
-    }
-    const entry = resolve(releaseRoot, manifest.entry.filename);
-    await verifyFile(addonPath, manifest.artifact, manifestPath);
-    await verifyFile(entry, manifest.entry, manifestPath);
-    await verifyFile(resolve(directory, manifest.notices.filename), manifest.notices, manifestPath);
-    return { addon: addonPath, entry, generation: 1 };
-}
-function validRecord(value) {
-    return typeof value === "object" && value !== null
-        && typeof value.filename === "string"
-        && /^[a-f0-9]{64}$/u.test(value.sha256)
-        && Number.isSafeInteger(value.size) && value.size >= 0;
-}
-async function verifyFile(path, record, manifestPath) {
-    let bytes;
-    let metadata;
-    try {
-        [bytes, metadata] = await Promise.all([readFile(path), stat(path)]);
-    }
-    catch (error) {
-        if (error instanceof Error && "code" in error && error.code === "ENOENT") {
-            throw new TerminalHostArtifactError("TERMINAL_HOST_ARTIFACT_MISSING", manifestPath, `certified terminal host file is missing: ${record.filename}`);
-        }
-        throw error;
-    }
-    if (!metadata.isFile() || bytes.byteLength !== record.size || createHash("sha256").update(bytes).digest("hex") !== record.sha256) {
-        throw new TerminalHostArtifactError("TERMINAL_HOST_ARTIFACT_TAMPERED", manifestPath, `certified terminal host file failed verification: ${record.filename}`);
-    }
-}

package/dist/foundation/resident-tabs/zip-archive.d.ts

@@ -1,9 +0,0 @@
-export interface ZipEntry {
-    readonly name: string;
-    readonly data: Buffer;
-}
-/**
- * Encodes a small deflated zip archive. Names are forward-slash relative paths; there are no
- * directories, extra fields, or encryption, so any standard unzip tool reads it.
- */
-export declare function encodeZip(entries: readonly ZipEntry[], modified?: Date): Buffer;

package/dist/foundation/resident-tabs/zip-archive.js

@@ -1,56 +0,0 @@
-import { crc32, deflateRawSync } from "node:zlib";
-/**
- * Encodes a small deflated zip archive. Names are forward-slash relative paths; there are no
- * directories, extra fields, or encryption, so any standard unzip tool reads it.
- */
-export function encodeZip(entries, modified = new Date()) {
-    const time = ((modified.getHours() << 11) | (modified.getMinutes() << 5) | Math.floor(modified.getSeconds() / 2)) & 0xffff;
-    const date = (((modified.getFullYear() - 1980) << 9) | ((modified.getMonth() + 1) << 5) | modified.getDate()) & 0xffff;
-    const locals = [];
-    const centrals = [];
-    let offset = 0;
-    for (const entry of entries) {
-        const segments = entry.name.split("/");
-        if (segments.some(segment => !/^[A-Za-z0-9._-]+$/u.test(segment) || segment === "." || segment === "..")) {
-            throw new Error(`zip entry name is unsafe: ${entry.name}`);
-        }
-        const name = Buffer.from(entry.name, "utf8");
-        const compressed = deflateRawSync(entry.data);
-        const checksum = crc32(entry.data);
-        const local = Buffer.alloc(30);
-        local.writeUInt32LE(0x04034b50, 0);
-        local.writeUInt16LE(20, 4);
-        local.writeUInt16LE(0x0800, 6);
-        local.writeUInt16LE(8, 8);
-        local.writeUInt16LE(time, 10);
-        local.writeUInt16LE(date, 12);
-        local.writeUInt32LE(checksum, 14);
-        local.writeUInt32LE(compressed.length, 18);
-        local.writeUInt32LE(entry.data.length, 22);
-        local.writeUInt16LE(name.length, 26);
-        locals.push(local, name, compressed);
-        const central = Buffer.alloc(46);
-        central.writeUInt32LE(0x02014b50, 0);
-        central.writeUInt16LE(20, 4);
-        central.writeUInt16LE(20, 6);
-        central.writeUInt16LE(0x0800, 8);
-        central.writeUInt16LE(8, 10);
-        central.writeUInt16LE(time, 12);
-        central.writeUInt16LE(date, 14);
-        central.writeUInt32LE(checksum, 16);
-        central.writeUInt32LE(compressed.length, 20);
-        central.writeUInt32LE(entry.data.length, 24);
-        central.writeUInt16LE(name.length, 28);
-        central.writeUInt32LE(offset, 42);
-        centrals.push(central, name);
-        offset += local.length + name.length + compressed.length;
-    }
-    const directory = Buffer.concat(centrals);
-    const end = Buffer.alloc(22);
-    end.writeUInt32LE(0x06054b50, 0);
-    end.writeUInt16LE(entries.length, 8);
-    end.writeUInt16LE(entries.length, 10);
-    end.writeUInt32LE(directory.length, 12);
-    end.writeUInt32LE(offset, 16);
-    return Buffer.concat([...locals, directory, end]);
-}

package/dist/foundation/storage/control-store.d.ts

@@ -1,20 +0,0 @@
-import { DatabaseSync } from "node:sqlite";
-import type { LaunchInstance, LaunchInstanceId, LaunchInstanceOutcome, NativeProcessIdentity, ProcessContainmentIdentity } from "../lifecycle/index.js";
-/** Owns WAL-backed control persistence and reconciles prior-boot records before current use. */
-export declare class ControlStore {
-    #private;
-    readonly database: DatabaseSync;
-    readonly bootNonce: string | null;
-    constructor(path: string, bootNonce?: string | null, options?: {
-        readonly reconcileOnOpen?: boolean;
-    });
-    migrate(): void;
-    createLaunchInstance(instance: LaunchInstance): void;
-    activateLaunchInstance(instanceId: LaunchInstanceId, ownerClientId: string, rootIdentity: NativeProcessIdentity, containmentIdentity: ProcessContainmentIdentity, activatedAt: string): boolean;
-    beginLaunchInstanceStop(instanceId: LaunchInstanceId, ownerClientId: string, stoppingAt: string): boolean;
-    completeLaunchInstance(instanceId: LaunchInstanceId, ownerClientId: string, terminalState: "completed" | "interrupted", outcome: LaunchInstanceOutcome, completedAt: string): boolean;
-    loadActiveLaunchInstances(bootNonce?: string): LaunchInstance[];
-    loadLaunchInstance(instanceId: LaunchInstanceId): LaunchInstance | null;
-    reconcilePriorBootLaunchInstances(bootNonce: string, reconciledAt?: string, protectedBoots?: readonly string[]): number;
-    close(): void;
-}