@volter/browser-toolbelt 0.1.5 → 0.1.6

package/dist/install.js

@@ -1,19 +1,51 @@
-import { BrowserGit } from "./browser-git.js";
+import { BrowserGitRemoteHttps } from "./browser-git-remote-https.js";
+import { BrowserGitHttp } from "./browser-git-http.js";
 import { BrowserShareCommand } from "./browser-share-command.js";
 import { BrowserShell } from "./browser-shell.js";
+import { interactiveShell } from "./browser-interactive-shell.js";
 /** Installs the optional development command set on an existing runtime. */
 export function installBrowserToolbelt(runtime, options = {}) {
     const shell = new BrowserShell(runtime.filesystem);
+    shell.setProcessTable(() => runtime.processes());
     runtime.processHost.registerShell(shell);
-    const git = options.git === false ? undefined : new BrowserGit(runtime.filesystem, options.git);
-    if (git)
-        runtime.registerProgram("git", git.run);
+    // `git` itself is a pack, the program Git publishes; what belongs to the
+    // page is the helper Git invokes to reach a remote. It is registered here
+    // and seeded on PATH, because Git's `execvp` searches PATH for it.
+    const remote = new BrowserGitRemoteHttps({
+        http: options.gitHttp ? { request: (request) => {
+                runtime.policy.assertWorldEgress("git", request.url);
+                return options.gitHttp.request(request);
+            } } : new BrowserGitHttp({ authorize: (url) => runtime.policy.assertWorldEgress("git", url) }).client,
+        spawn: runtime.processHost,
+    });
+    runtime.registerProgram("git-remote-https", remote.run);
+    const bin = "/opt/programs/bin";
+    const marker = `${bin}/git-remote-https`;
+    runtime.filesystem.mkdirSync(bin, { recursive: true });
+    if (!runtime.filesystem.existsSync(marker)) {
+        runtime.filesystem.writeFileSync(marker, "#!/bin/sh\n# git-remote-https: runtime-registered program\n");
+        runtime.filesystem.chmodSync?.(marker, 0o755);
+    }
     const share = options.share === false ? undefined : new BrowserShareCommand(runtime);
     if (share)
         runtime.registerProgram("share", share.run);
+    // `sh` and `bash` as programs: an exec of either with a TTY is the
+    // interactive shell a terminal attaches to (ADR-0026 §2); each line runs
+    // the way the process host runs any command.
+    const shellProgram = interactiveShell((command, runOptions) => runtime.spawn(command, runOptions), (path) => runtime.filesystem.readFile(path, "utf8").catch(() => undefined));
+    runtime.filesystem.mkdirSync("/bin", { recursive: true });
+    for (const name of ["sh", "bash"]) {
+        runtime.registerProgram(name, shellProgram);
+        // Registered executables must also be discoverable by stat/access,
+        // before a caller chooses to spawn them. Dispatch remains the host's.
+        const executable = `/bin/${name}`;
+        if (!runtime.filesystem.existsSync(executable)) {
+            runtime.filesystem.writeFileSync(executable, `#!/bin/sh\n# ${name}: runtime-registered program\n`);
+            runtime.filesystem.chmodSync?.(executable, 0o755);
+        }
+    }
     return {
         shell,
-        ...(git ? { git } : {}),
         ...(share ? { share } : {}),
         dispose: () => share?.close(),
     };

package/dist/install.js.map

@@ -1 +1 @@
-{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAA0B,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAclD,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CACpC,OAAuB,EACvB,UAAkC,EAAE;IAEpC,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAChG,IAAI,GAAG;QAAE,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrF,IAAI,KAAK;QAAE,OAAO,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,OAAO;QACL,KAAK;QACL,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE;KAC9B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAsB,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAmBlE,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CACpC,OAAuB,EACvB,UAAkC,EAAE;IAEpC,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACnD,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,yEAAyE;IACzE,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,MAAM,GAAG,IAAI,qBAAqB,CAAC;QACvC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE;gBAC7C,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;gBACrD,OAAO,OAAO,CAAC,OAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3C,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM;QACrG,KAAK,EAAE,OAAO,CAAC,WAAW;KAC3B,CAAC,CAAC;IACH,OAAO,CAAC,eAAe,CAAC,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,mBAAmB,CAAC;IAChC,MAAM,MAAM,GAAG,GAAG,GAAG,mBAAmB,CAAC;IACzC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,6DAA6D,CAAC,CAAC;QACvG,OAAO,CAAC,UAA+D,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrF,IAAI,KAAK;QAAE,OAAO,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,mEAAmE;IACnE,yEAAyE;IACzE,6CAA6C;IAC7C,MAAM,YAAY,GAAG,gBAAgB,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/K,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC5C,mEAAmE;QACnE,sEAAsE;QACtE,MAAM,UAAU,GAAG,QAAQ,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,UAAU,EAAE,gBAAgB,IAAI,gCAAgC,CAAC,CAAC;YACnG,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE;KAC9B,CAAC;AACJ,CAAC"}

package/dist/shell-buffer-global.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=shell-buffer-global.d.ts.map

package/dist/shell-buffer-global.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-buffer-global.d.ts","sourceRoot":"","sources":["../src/shell-buffer-global.ts"],"names":[],"mappings":""}

package/dist/shell-buffer-global.js

@@ -0,0 +1,10 @@
+// just-bash, the page's shell, writes `Buffer` as a Node program would in a
+// few commands: gzip's read of a gzipped file and curl's basic auth take it
+// unguarded. A page whose engine runs in a worker has no such global
+// (ADR-0042), so the shell's host gives the realm the `buffer` package's,
+// Node's API without Node's library, where it has none.
+import { Buffer } from "buffer";
+if (!Object.getOwnPropertyDescriptor(globalThis, "Buffer")) {
+    Object.defineProperty(globalThis, "Buffer", { configurable: true, enumerable: false, writable: true, value: Buffer });
+}
+//# sourceMappingURL=shell-buffer-global.js.map

package/dist/shell-buffer-global.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-buffer-global.js","sourceRoot":"","sources":["../src/shell-buffer-global.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,4EAA4E;AAC5E,qEAAqE;AACrE,0EAA0E;AAC1E,wDAAwD;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;IAC3D,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AACxH,CAAC"}

package/dist/volter-sign-in.d.ts

@@ -0,0 +1,62 @@
+import type { BrowserByteVault } from "@volter/browser-runtime/browser-byte-vault.js";
+/** What a gateway's `/api/ready` says about identity: absent, this deployment signs no one in. */
+export interface VolterIdentityCapability {
+    issuer: string;
+    clientId: string;
+}
+/** A signed-in person, as this tab holds them. */
+export interface VolterSession {
+    accessToken: string;
+    refreshToken?: string;
+    /** Epoch milliseconds. */
+    expiresAt: number;
+    subject: string;
+    name?: string;
+    email?: string;
+    /** The login of the GitHub account linked to this identity, when one is. */
+    githubLogin?: string;
+}
+/** Whether the gateway at `gateway` signs people in, and with which issuer. */
+export declare function volterIdentityOf(gateway?: string): Promise<VolterIdentityCapability | undefined>;
+/**
+ * Opens Volter's sign-in and resolves with the session it grants. Asking
+ * again while a request is open re-shows the same window instead of racing it.
+ */
+export declare function signInWithVolter(identity: VolterIdentityCapability, options?: {
+    gateway?: string;
+}): Promise<VolterSession>;
+/** Shows the sign-in window again when one is waiting for an answer; false when nothing is. */
+export declare function reopenVolterSignIn(): boolean;
+/**
+ * The window the gateway sent back to this loopback page with the answer in
+ * its fragment: it tells this origin's waiting tab and closes. A page calls it
+ * first thing and stops when it answers true.
+ */
+export declare function completeVolterSignIn(): boolean;
+/** Trades a refresh token at the gateway for a new session; the old refresh token is spent. */
+export declare function refreshVolterSession(session: VolterSession, options?: {
+    gateway?: string;
+}): Promise<VolterSession>;
+/**
+ * Keeps the session outside the workspace and serializes refresh: a refresh
+ * token is single-use, so the vault marks a rotation before the old token
+ * leaves the tab, and a rotation that never finished is a sign-in to do again,
+ * never a refresh token to retry.
+ */
+export declare class VolterSessionVault {
+    private readonly vault;
+    private readonly options;
+    constructor(vault: BrowserByteVault, options?: {
+        gateway?: string;
+        lock?: <T>(operation: () => Promise<T>) => Promise<T>;
+    });
+    load(): Promise<VolterSession | undefined>;
+    /** The session to send now, renewed first when it is about to expire; undefined when there is none or it cannot be renewed. */
+    current(): Promise<VolterSession | undefined>;
+    save(session: VolterSession): Promise<void>;
+    clear(): Promise<void>;
+    private read;
+    private write;
+    private lock;
+}
+//# sourceMappingURL=volter-sign-in.d.ts.map

package/dist/volter-sign-in.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"volter-sign-in.d.ts","sourceRoot":"","sources":["../src/volter-sign-in.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AAoBtF,kGAAkG;AAClG,MAAM,WAAW,wBAAwB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AAE9E,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAKD,+EAA+E;AAC/E,wBAAsB,gBAAgB,CAAC,OAAO,GAAE,MAAwB,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAKvH;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,wBAAwB,EAAE,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAqC/H;AAED,+FAA+F;AAC/F,wBAAgB,kBAAkB,IAAI,OAAO,CAI5C;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAa9C;AAED,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAGvH;AAoDD;;;;;GAKG;AACH,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAoB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAjD,KAAK,EAAE,gBAAgB,EAAmB,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;KAAO;IAEhK,IAAI,IAAI,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAQ1C,+HAA+H;IAC/H,OAAO,IAAI,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAiB7C,IAAI,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAIR,IAAI;YAUJ,KAAK;YAOL,IAAI;CAKnB"}

package/dist/volter-sign-in.js

@@ -0,0 +1,255 @@
+// Signing in with Volter (ADR-0041): the identity service's sign-in page in a
+// popup, code flow with PKCE, opened through the gateway so the page never
+// reaches the issuer itself. The gateway is the registered client: its
+// callback hands the code back to this tab over a BroadcastChannel of the
+// gateway's origin (or in the fragment to a loopback page), and the tab trades
+// code and verifier at the gateway, which adds the client secret. The tokens
+// stay in this origin's vault; the access token's audience is the gateway.
+const CHANNEL = "browser-substrate-volter-sign-in";
+const AUTHORIZE = "/api/auth/volter/authorize";
+const CALLBACK = "/api/auth/volter/callback";
+const TOKEN = "/api/auth/volter/token";
+const REFRESH = "/api/auth/volter/refresh";
+const SCOPE = "openid profile email offline_access";
+/** Refresh a little before the hour is up, so a request never carries a token that expires in flight. */
+const REFRESH_MARGIN_MS = 5 * 60 * 1000;
+const MAXIMUM_SESSION_BYTES = 16 * 1024;
+let pending;
+/** Whether the gateway at `gateway` signs people in, and with which issuer. */
+export async function volterIdentityOf(gateway = location.origin) {
+    const response = await fetch(new URL("/api/ready", gateway), { credentials: "omit" });
+    const ready = await response.json().catch(() => ({}));
+    const identity = ready.capabilities?.identity;
+    return typeof identity?.issuer === "string" && typeof identity.clientId === "string" ? { issuer: identity.issuer, clientId: identity.clientId } : undefined;
+}
+/**
+ * Opens Volter's sign-in and resolves with the session it grants. Asking
+ * again while a request is open re-shows the same window instead of racing it.
+ */
+export function signInWithVolter(identity, options = {}) {
+    if (pending) {
+        openWindow(pending.url);
+        return pending.done;
+    }
+    const gateway = new URL(options.gateway ?? location.origin).origin;
+    const here = `${location.origin}${location.pathname}`;
+    const state = gateway === location.origin ? crypto.randomUUID() : `${crypto.randomUUID()}.${base64url(new TextEncoder().encode(here))}`;
+    const verifier = base64url(crypto.getRandomValues(new Uint8Array(48)));
+    // The window opens now, while the click that asked still counts; it is sent on once the address is known.
+    const popup = openWindow("about:blank");
+    const channel = new BroadcastChannel(CHANNEL);
+    const done = (async () => {
+        // The gateway sends the window on to the issuer: this page reads nothing from it.
+        const challenge = await sha256(verifier);
+        const authorize = new URL(AUTHORIZE, gateway);
+        authorize.search = new URLSearchParams({
+            client_id: identity.clientId,
+            response_type: "code",
+            redirect_uri: new URL(CALLBACK, gateway).href,
+            scope: SCOPE,
+            state,
+            code_challenge: challenge,
+            code_challenge_method: "S256",
+        }).toString();
+        const answered = new Promise((resolve) => {
+            channel.onmessage = (event) => {
+                if (event.data?.state === state)
+                    resolve(event.data);
+            };
+        });
+        pending.url = authorize.href;
+        popup.location.href = authorize.href;
+        const answer = await answered;
+        if (!answer.code)
+            throw new Error(answer.error ?? "Volter returned no code");
+        return trade(gateway, TOKEN, { code: answer.code, code_verifier: verifier });
+    })().finally(() => { channel.close(); pending = undefined; });
+    // A sign-in that failed before the window left this page closes it; one at Volter is the person's to close.
+    done.catch(() => { try {
+        if (popup.location.href === "about:blank")
+            popup.close();
+    }
+    catch { /* at Volter now */ } });
+    pending = { state, url: "", done };
+    return done;
+}
+/** Shows the sign-in window again when one is waiting for an answer; false when nothing is. */
+export function reopenVolterSignIn() {
+    if (!pending?.url)
+        return false;
+    openWindow(pending.url);
+    return true;
+}
+/**
+ * The window the gateway sent back to this loopback page with the answer in
+ * its fragment: it tells this origin's waiting tab and closes. A page calls it
+ * first thing and stops when it answers true.
+ */
+export function completeVolterSignIn() {
+    const prefix = "#volter-sign-in=";
+    if (!location.hash.startsWith(prefix))
+        return false;
+    let outcome;
+    try {
+        outcome = JSON.parse(decodeURIComponent(location.hash.slice(prefix.length)));
+    }
+    catch {
+        return false;
+    }
+    history.replaceState(null, "", `${location.pathname}${location.search}`);
+    const channel = new BroadcastChannel(CHANNEL);
+    channel.postMessage(outcome);
+    channel.close();
+    document.body.textContent = outcome.error ? `Sign-in did not complete: ${outcome.error}` : "Signed in. You can close this window.";
+    if (!outcome.error)
+        setTimeout(() => window.close(), 300);
+    return true;
+}
+/** Trades a refresh token at the gateway for a new session; the old refresh token is spent. */
+export function refreshVolterSession(session, options = {}) {
+    if (!session.refreshToken)
+        return Promise.reject(new Error("The sign-in cannot be renewed; sign in again."));
+    return trade(new URL(options.gateway ?? location.origin).origin, REFRESH, { refresh_token: session.refreshToken });
+}
+async function trade(gateway, route, body) {
+    const response = await fetch(new URL(route, gateway), {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+        credentials: "omit",
+        signal: AbortSignal.timeout(30_000),
+    });
+    const answer = await response.json().catch(() => ({}));
+    if (!response.ok || !answer.access_token)
+        throw new Error(answer.error?.message ?? `The gateway answered ${response.status}.`);
+    // Who the person is, for this tab's display; the gateway verifies the access token itself.
+    const claims = readClaims(answer.id_token ?? answer.access_token);
+    if (typeof claims.sub !== "string")
+        throw new Error("The sign-in named no one.");
+    const access = readClaims(answer.access_token);
+    const text = (name) => typeof claims[name] === "string" ? claims[name]
+        : typeof access[name] === "string" ? access[name] : undefined;
+    return {
+        accessToken: answer.access_token,
+        ...(answer.refresh_token ? { refreshToken: answer.refresh_token } : {}),
+        expiresAt: Date.now() + (answer.expires_in ?? 3600) * 1000,
+        subject: claims.sub,
+        ...(text("name") ? { name: text("name") } : {}),
+        ...(text("email") ? { email: text("email") } : {}),
+        ...(text("https://volter.ai/github_login") ? { githubLogin: text("https://volter.ai/github_login") } : {}),
+    };
+}
+function readClaims(jwt) {
+    try {
+        const part = jwt.split(".")[1] ?? "";
+        return JSON.parse(new TextDecoder().decode(Uint8Array.from(atob(part.replace(/-/gu, "+").replace(/_/gu, "/")), (character) => character.charCodeAt(0))));
+    }
+    catch {
+        return {};
+    }
+}
+async function sha256(text) {
+    return base64url(new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(text))));
+}
+function base64url(bytes) {
+    return btoa(String.fromCharCode(...bytes)).replace(/\+/gu, "-").replace(/\//gu, "_").replace(/=+$/u, "");
+}
+function openWindow(url) {
+    const opened = window.open(url, "browser-substrate-volter-sign-in", "popup,width=520,height=720");
+    if (!opened)
+        throw new Error("the browser blocked the sign-in window; allow pop-ups for this page and press Sign in again");
+    return opened;
+}
+/**
+ * Keeps the session outside the workspace and serializes refresh: a refresh
+ * token is single-use, so the vault marks a rotation before the old token
+ * leaves the tab, and a rotation that never finished is a sign-in to do again,
+ * never a refresh token to retry.
+ */
+export class VolterSessionVault {
+    vault;
+    options;
+    constructor(vault, options = {}) {
+        this.vault = vault;
+        this.options = options;
+    }
+    load() {
+        return this.lock(async () => {
+            const stored = await this.read();
+            if (stored?.rotationId) {
+                await this.vault.clear();
+                return;
+            }
+            return stored && publicSession(stored);
+        });
+    }
+    /** The session to send now, renewed first when it is about to expire; undefined when there is none or it cannot be renewed. */
+    current() {
+        return this.lock(async () => {
+            const stored = await this.read();
+            if (!stored)
+                return;
+            if (stored.rotationId) {
+                await this.vault.clear();
+                return;
+            }
+            const session = publicSession(stored);
+            if (session.expiresAt - REFRESH_MARGIN_MS > Date.now())
+                return session;
+            if (!session.refreshToken) {
+                await this.vault.clear();
+                return;
+            }
+            await this.write(session, crypto.randomUUID());
+            let next;
+            try {
+                next = await refreshVolterSession(session, this.options.gateway ? { gateway: this.options.gateway } : {});
+            }
+            catch {
+                await this.vault.clear();
+                return;
+            }
+            await this.write(next);
+            return next;
+        });
+    }
+    save(session) {
+        return this.lock(() => this.write(session));
+    }
+    clear() {
+        return this.lock(() => this.vault.clear());
+    }
+    async read() {
+        const bytes = await this.vault.load();
+        if (!bytes)
+            return;
+        try {
+            const stored = JSON.parse(new TextDecoder().decode(bytes));
+            if (stored.version !== 1 || typeof stored.accessToken !== "string" || typeof stored.subject !== "string" || typeof stored.expiresAt !== "number")
+                return;
+            return stored;
+        }
+        catch {
+            return;
+        }
+    }
+    async write(session, rotationId) {
+        const stored = { ...session, version: 1, savedAt: Date.now(), ...(rotationId ? { rotationId } : {}) };
+        const bytes = new TextEncoder().encode(JSON.stringify(stored));
+        if (bytes.byteLength > MAXIMUM_SESSION_BYTES)
+            throw new Error("The Volter session record is unexpectedly large.");
+        await this.vault.save(bytes, { backup: "current" });
+    }
+    async lock(operation) {
+        if (this.options.lock)
+            return this.options.lock(operation);
+        if (!globalThis.navigator?.locks)
+            throw new Error("Volter session storage requires browser Web Locks.");
+        return await navigator.locks.request("browser-substrate-volter-session", operation);
+    }
+}
+function publicSession(stored) {
+    const { version: _version, savedAt: _savedAt, rotationId: _rotationId, ...session } = stored;
+    return session;
+}
+//# sourceMappingURL=volter-sign-in.js.map

package/dist/volter-sign-in.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"volter-sign-in.js","sourceRoot":"","sources":["../src/volter-sign-in.ts"],"names":[],"mappings":"AAEA,8EAA8E;AAC9E,2EAA2E;AAC3E,uEAAuE;AACvE,0EAA0E;AAC1E,+EAA+E;AAC/E,6EAA6E;AAC7E,2EAA2E;AAE3E,MAAM,OAAO,GAAG,kCAAkC,CAAC;AACnD,MAAM,SAAS,GAAG,4BAA4B,CAAC;AAC/C,MAAM,QAAQ,GAAG,2BAA2B,CAAC;AAC7C,MAAM,KAAK,GAAG,wBAAwB,CAAC;AACvC,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAC3C,MAAM,KAAK,GAAG,qCAAqC,CAAC;AACpD,yGAAyG;AACzG,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACxC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC;AAmBxC,IAAI,OAA4B,CAAC;AAEjC,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB,QAAQ,CAAC,MAAM;IACtE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAwE,CAAC;IAC7H,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC;IAC9C,OAAO,OAAO,QAAQ,EAAE,MAAM,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9J,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAkC,EAAE,UAAgC,EAAE;IACrG,IAAI,OAAO,EAAE,CAAC;QAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAAC,OAAO,OAAO,CAAC,IAAI,CAAC;IAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACnE,MAAM,IAAI,GAAG,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,OAAO,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,IAAI,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACxI,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,0GAA0G;IAC1G,MAAM,KAAK,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;QACvB,kFAAkF;QAClF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC9C,SAAS,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC;YACrC,SAAS,EAAE,QAAQ,CAAC,QAAQ;YAC5B,aAAa,EAAE,MAAM;YACrB,YAAY,EAAE,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI;YAC7C,KAAK,EAAE,KAAK;YACZ,KAAK;YACL,cAAc,EAAE,SAAS;YACzB,qBAAqB,EAAE,MAAM;SAC9B,CAAC,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAoC,CAAC,OAAO,EAAE,EAAE;YAC1E,OAAO,CAAC,SAAS,GAAG,CAAC,KAAsE,EAAE,EAAE;gBAC7F,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,KAAK;oBAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvD,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAQ,CAAC,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC;QAC9B,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,yBAAyB,CAAC,CAAC;QAC7E,OAAO,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,4GAA4G;IAC5G,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,aAAa;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtH,OAAO,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC,OAAO,EAAE,GAAG;QAAE,OAAO,KAAK,CAAC;IAChC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAuB,CAAC;IAAC,CAAC;IAC3G,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IACvB,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,QAAQ,CAAC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,6BAA6B,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,uCAAuC,CAAC;IACnI,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,OAAsB,EAAE,UAAgC,EAAE;IAC7F,IAAI,CAAC,OAAO,CAAC,YAAY;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC;IAC7G,OAAO,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;AACrH,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,OAAe,EAAE,KAAa,EAAE,IAA4B;IAC/E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE;QACpD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA4H,CAAC;IAClL,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,wBAAwB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/H,2FAA2F;IAC3F,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC;IAClE,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,IAAY,EAAsB,EAAE,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAW;QAC1G,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,YAAY;QAChC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI;QAC1D,OAAO,EAAE,MAAM,CAAC,GAAG;QACnB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,gCAAgC,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5G,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAA4B,CAAC;IACtL,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,OAAO,SAAS,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,kCAAkC,EAAE,4BAA4B,CAAC,CAAC;IAClG,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAC;IAC5H,OAAO,MAAM,CAAC;AAChB,CAAC;AAID;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IACA;IAA0C;IAAvE,YAA6B,KAAuB,EAAmB,UAAuF,EAAE;QAAnI,UAAK,GAAL,KAAK,CAAkB;QAAmB,YAAO,GAAP,OAAO,CAAkF;IAAG,CAAC;IAEpK,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC7D,OAAO,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,+HAA+H;IAC/H,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,OAAO,CAAC,SAAS,GAAG,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE;gBAAE,OAAO,OAAO,CAAC;YACvE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAChE,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YAC/C,IAAI,IAAmB,CAAC;YACxB,IAAI,CAAC;gBAAC,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAClH,MAAM,CAAC;gBAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC3C,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAsB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAA2B,CAAC;YACrF,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;gBAAE,OAAO;YACzJ,OAAO,MAAuB,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,OAAsB,EAAE,UAAmB;QAC7D,MAAM,MAAM,GAAkB,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACrH,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,UAAU,GAAG,qBAAqB;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClH,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,SAA2B;QAC/C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxG,OAAO,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,kCAAkC,EAAE,SAAS,CAAC,CAAC;IACtF,CAAC;CACF;AAED,SAAS,aAAa,CAAC,MAAqB;IAC1C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;IAC7F,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/package.json

@@ -1,27 +1,39 @@
 {
   "name": "@volter/browser-toolbelt",
-  "version": "0.1.5",
-  "description": "Shell, Git, and standard development commands for the Volter browser runtime",
+  "version": "0.1.6",
+  "description": "Shell, Git's remote helper, and standard development commands for the Volter browser runtime",
   "license": "MIT",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/volter-ai/browser-substrate.git",
     "directory": "packages/toolbelt"
   },
-  "publishConfig": { "access": "public" },
+  "publishConfig": {
+    "access": "public"
+  },
   "type": "module",
-  "files": ["dist", "README.md", "LICENSE"],
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
   "types": "./dist/index.d.ts",
   "exports": {
-    ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },
-    "./*.js": { "types": "./dist/*.d.ts", "import": "./dist/*.js" }
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./*.js": {
+      "types": "./dist/*.d.ts",
+      "import": "./dist/*.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json"
   },
-  "scripts": { "build": "tsc -p tsconfig.build.json" },
   "dependencies": {
     "@volter/browser-runtime": "^0.1.5",
-    "buffer": "^6.0.3",
-    "diff": "^8.0.4",
-    "isomorphic-git": "^1.41.9",
+    "buffer": "6.0.3",
     "just-bash": "^2.14.5"
   }
 }

package/dist/browser-git-filesystem.d.ts

@@ -1,18 +0,0 @@
-import type { BrowserFileSystem } from "@volter/browser-runtime/browser-filesystem.js";
-import type { FsClient } from "isomorphic-git";
-/** Promise-style Node fs subset backed directly by the shared browser VFS. */
-export declare class BrowserGitFileSystem {
-    private readonly filesystem;
-    readonly client: FsClient;
-    constructor(filesystem: BrowserFileSystem);
-    private readFile;
-    private writeFile;
-    private unlink;
-    private readdir;
-    private mkdir;
-    private rmdir;
-    private stat;
-    private chmod;
-    private unsupportedLink;
-}
-//# sourceMappingURL=browser-git-filesystem.d.ts.map

package/dist/browser-git-filesystem.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"browser-git-filesystem.d.ts","sourceRoot":"","sources":["../src/browser-git-filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAK/C,8EAA8E;AAC9E,qBAAa,oBAAoB;IAGnB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAFvC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAEG,UAAU,EAAE,iBAAiB;YAkB5C,QAAQ;YAcR,SAAS;YAUT,MAAM;YACN,OAAO;YACP,KAAK;YACL,KAAK;YAEL,IAAI;YAIJ,KAAK;YAKL,eAAe;CAG9B"}

package/dist/browser-git-filesystem.js

@@ -1,84 +0,0 @@
-/** Promise-style Node fs subset backed directly by the shared browser VFS. */
-export class BrowserGitFileSystem {
-    filesystem;
-    client;
-    constructor(filesystem) {
-        this.filesystem = filesystem;
-        this.client = {
-            promises: {
-                readFile: (path, options) => this.readFile(path, options),
-                writeFile: (path, data) => this.writeFile(path, data),
-                unlink: (path) => this.unlink(path),
-                readdir: (path) => this.readdir(path),
-                mkdir: (path) => this.mkdir(path),
-                rmdir: (path) => this.rmdir(path),
-                stat: (path) => this.stat(path),
-                lstat: (path) => this.stat(path),
-                readlink: (path) => this.unsupportedLink("readlink", path),
-                symlink: (_target, path) => this.unsupportedLink("symlink", path),
-                chmod: (path, mode) => this.chmod(path, mode),
-            },
-        };
-    }
-    async readFile(path, options) {
-        const bytes = this.filesystem.readFileSync(path);
-        const encoding = typeof options === "string" ? options : options?.encoding;
-        if (!encoding || encoding === "buffer")
-            return bytes;
-        if (encoding === "latin1" || encoding === "binary") {
-            let value = "";
-            for (let offset = 0; offset < bytes.byteLength; offset += 0x8000) {
-                value += String.fromCharCode(...bytes.subarray(offset, offset + 0x8000));
-            }
-            return value;
-        }
-        return new TextDecoder().decode(bytes);
-    }
-    async writeFile(path, data) {
-        const parent = dirname(path);
-        this.filesystem.mkdirSync(parent, { recursive: true });
-        if (typeof data === "string" || data instanceof Uint8Array) {
-            this.filesystem.writeFileSync(path, data);
-            return;
-        }
-        this.filesystem.writeFileSync(path, new Uint8Array(data.buffer, data.byteOffset, data.byteLength));
-    }
-    async unlink(path) { this.filesystem.unlinkSync(path); }
-    async readdir(path) { return this.filesystem.readdirSync(path); }
-    async mkdir(path) { this.filesystem.mkdirSync(path, { recursive: true }); }
-    async rmdir(path) { this.filesystem.rmdirSync(path); }
-    async stat(path) {
-        return gitStat(this.filesystem.statSync(path));
-    }
-    async chmod(path, mode) {
-        this.filesystem.statSync(path);
-        this.filesystem.chmodSync(path, mode);
-    }
-    async unsupportedLink(operation, path) {
-        throw Object.assign(new Error(`ENOSYS: ${operation} '${path}'`), { code: "ENOSYS", path });
-    }
-}
-function dirname(path) {
-    const normalized = path.replace(/\/+$/u, "");
-    const index = normalized.lastIndexOf("/");
-    return index <= 0 ? "/" : normalized.slice(0, index);
-}
-function gitStat(value) {
-    const mtimeMs = value.mtimeMs ?? Date.now();
-    return {
-        isFile: () => value.isFile(),
-        isDirectory: () => value.isDirectory(),
-        isSymbolicLink: () => false,
-        mode: value.mode ?? (value.isDirectory() ? 0o755 : 0o644),
-        size: value.size,
-        mtime: new Date(mtimeMs),
-        mtimeMs,
-        ctime: new Date(mtimeMs),
-        ctimeMs: mtimeMs,
-        uid: 1000,
-        gid: 1000,
-        ino: 0,
-        dev: 0,
-    };
-}
-//# sourceMappingURL=browser-git-filesystem.js.map

package/dist/browser-git-filesystem.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"browser-git-filesystem.js","sourceRoot":"","sources":["../src/browser-git-filesystem.ts"],"names":[],"mappings":"AAMA,8EAA8E;AAC9E,MAAM,OAAO,oBAAoB;IAGF;IAFpB,MAAM,CAAW;IAE1B,YAA6B,UAA6B;QAA7B,eAAU,GAAV,UAAU,CAAmB;QACxD,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE;gBACR,QAAQ,EAAE,CAAC,IAAY,EAAE,OAAwB,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;gBAClF,SAAS,EAAE,CAAC,IAAY,EAAE,IAA2C,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;gBACpG,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAC3C,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC7C,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACzC,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACzC,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvC,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACxC,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC;gBAClE,OAAO,EAAE,CAAC,OAAe,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC;gBACjF,KAAK,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;aAC9D;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,OAAwB;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC3E,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrD,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACnD,IAAI,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,MAAM,EAAE,CAAC;gBACjE,KAAK,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,IAA2C;QAC/E,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,YAAY,UAAU,EAAE,CAAC;YAC3D,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACrG,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,IAAY,IAAmB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,OAAO,CAAC,IAAY,IAAuB,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5F,KAAK,CAAC,KAAK,CAAC,IAAY,IAAmB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAClG,KAAK,CAAC,KAAK,CAAC,IAAY,IAAmB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE7E,KAAK,CAAC,IAAI,CAAC,IAAY;QAC7B,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,IAAY;QAC5C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,UAAqC,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,IAAY;QAC3D,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,SAAS,KAAK,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,CAAC;CACF;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,OAAO,CAAC,KAAgD;IAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5C,OAAO;QACL,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE;QAC5B,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;QACtC,cAAc,EAAE,GAAG,EAAE,CAAC,KAAK;QAC3B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QACzD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC;QACxB,OAAO;QACP,KAAK,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC;QACxB,OAAO,EAAE,OAAO;QAChB,GAAG,EAAE,IAAI;QACT,GAAG,EAAE,IAAI;QACT,GAAG,EAAE,CAAC;QACN,GAAG,EAAE,CAAC;KACP,CAAC;AACJ,CAAC"}

package/dist/browser-git.d.ts

@@ -1,38 +0,0 @@
-import type { BrowserFileSystem } from "@volter/browser-runtime/browser-filesystem.js";
-import type { HttpClient } from "isomorphic-git";
-import type { BrowserShellProgramRunner } from "./browser-shell.js";
-export interface BrowserGitOptions {
-    /** Supply an embedding-owned smart-HTTP transport instead of the default edge client. */
-    http?: HttpClient;
-}
-/** Local Git CLI surface operating entirely on the shared browser VFS. */
-export declare class BrowserGit {
-    private readonly filesystem;
-    readonly run: BrowserShellProgramRunner;
-    private readonly fs;
-    private readonly http;
-    constructor(filesystem: BrowserFileSystem, options?: BrowserGitOptions);
-    private execute;
-    private initialize;
-    private clone;
-    private status;
-    private add;
-    private remove;
-    private commit;
-    private config;
-    private log;
-    private branch;
-    private checkout;
-    private diff;
-    private entryContent;
-    private revParse;
-    private lsFiles;
-    private remote;
-    private fetch;
-    private pull;
-    private push;
-    private remoteUrl;
-    private repositoryRoot;
-    private removeTree;
-}
-//# sourceMappingURL=browser-git.d.ts.map

package/dist/browser-git.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"browser-git.d.ts","sourceRoot":"","sources":["../src/browser-git.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,gBAAgB,CAAC;AAG9D,OAAO,KAAK,EACV,yBAAyB,EAG1B,MAAM,oBAAoB,CAAC;AAW5B,MAAM,WAAW,iBAAiB;IAChC,yFAAyF;IACzF,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,0EAA0E;AAC1E,qBAAa,UAAU;IAKT,OAAO,CAAC,QAAQ,CAAC,UAAU;IAJvC,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC;IACxC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;gBAEL,UAAU,EAAE,iBAAiB,EAAE,OAAO,GAAE,iBAAsB;YAM7E,OAAO;YAsCP,UAAU;YAeV,KAAK;YA0BL,MAAM;YAaN,GAAG;YAeH,MAAM;YAYN,MAAM;YAwBN,MAAM;YAYN,GAAG;YAeH,MAAM;YAeN,QAAQ;YASR,IAAI;YA8CJ,YAAY;YAQZ,QAAQ;YASR,OAAO;YAKP,MAAM;YA8BN,KAAK;YAkBL,IAAI;YAkBJ,IAAI;YA2BJ,SAAS;IAIvB,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,UAAU;CAMnB"}