@w3kits-com/plugin-opendesign 0.1.8 → 0.1.10

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/legacy-data-migrator.js

@@ -0,0 +1,340 @@
+/**
+ * One-shot legacy `.od/` data migrator.
+ *
+ * Open Design 0.3.x ran from the repo and wrote runtime state to
+ * `<repo>/.od/` (SQLite at `app.sqlite`, agent CWDs under `projects/`,
+ * saved renders under `artifacts/`, credentials at `media-config.json`).
+ * The 0.4.x packaged Desktop app moved the data root to a per-namespace
+ * directory under the OS user-data location (Electron's `userData`).
+ *
+ * Users upgrading from 0.3.x to the packaged 0.4.x app pointed the new
+ * binary at a fresh, empty data root and watched their chats and designs
+ * disappear. The data was never lost (the 0.3.x `.od/` folder is still
+ * on disk wherever they used to run from), but the new daemon had no
+ * way to know about it. See https://github.com/nexu-io/open-design/issues/710.
+ *
+ * This module gives operators a recovery path. When `OD_LEGACY_DATA_DIR`
+ * is set on daemon boot, the migrator:
+ *
+ *   1. Refuses if the legacy dir doesn't have `app.sqlite` (typo / wrong
+ *      path: throws so the daemon surfaces a visible error rather than
+ *      silently launching into an empty workspace).
+ *   2. Refuses if the new dataDir already has any payload entry
+ *      (`app.sqlite`, `projects/`, `artifacts/`, ...): we never merge
+ *      old and new state, since SQLite/WAL pairs and project trees are
+ *      not safely interleavable.
+ *   3. Refuses if a `.migrated-from` marker is already present
+ *      (idempotent re-runs).
+ *   4. Walks the legacy payload, rejecting any symlink (avoids escape
+ *      out of the data root via crafted .od/ symlinks).
+ *   5. Copies into a sibling staging directory first, then renames each
+ *      payload entry into place atomically. On any error the staging
+ *      directory is removed and no `.migrated-from` marker is written,
+ *      so the next boot retries cleanly.
+ *
+ * Sync by design: this runs at module import time in server.ts, before
+ * `openDatabase` opens SQLite. Doing it async would race the DB open
+ * and either silently lose the migration or corrupt the new file.
+ *
+ * @see specs/current/spec.md (storage section)
+ * @see https://github.com/nexu-io/open-design/issues/710
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+/**
+ * Daemon startup throws this when OD_LEGACY_DATA_DIR is explicitly set
+ * but the path is not a usable legacy data dir, or the new dataDir is
+ * already populated and would be merged into. Failing loud here is the
+ * point: silent skips trained users to assume migration ran when it
+ * didn't (#710 again).
+ */
+export class LegacyMigrationError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'LegacyMigrationError';
+    }
+}
+const MARKER_FILE = '.migrated-from';
+// Directories and files that are part of the OD runtime payload. Anything
+// outside this list (logs, sockets, lockfiles, OS scratch) is intentionally
+// left behind so we don't drag in legacy state the new release wouldn't
+// recognize.
+const PAYLOAD_ENTRIES = [
+    'app.sqlite',
+    'app.sqlite-shm',
+    'app.sqlite-wal',
+    'app-config.json',
+    'media-config.json',
+    'projects',
+    'artifacts',
+    'connectors',
+    'composio',
+];
+function isExistingDir(p) {
+    try {
+        return fs.statSync(p).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+function isExistingFile(p) {
+    try {
+        return fs.statSync(p).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Returns true when `dataDir` looks like a fresh / never-used data root:
+ * either the directory does not exist, or it exists but does not contain
+ * a real OD SQLite database. We deliberately do NOT just check for an
+ * empty directory: a packaged install creates an empty `dataDir` before
+ * the daemon ever boots, so emptiness is the common case rather than a
+ * proof of "no prior data."
+ */
+export function dataDirIsEmptyOrFresh(dataDir) {
+    if (!isExistingDir(dataDir))
+        return true;
+    return !isExistingFile(path.join(dataDir, 'app.sqlite'));
+}
+/**
+ * Returns true when `legacyDir` contains a payload worth migrating. The
+ * presence of `app.sqlite` is treated as proof: every 0.3.x install that
+ * shipped chat history wrote one, and a stray empty `.od/` folder won't
+ * have it.
+ */
+export function legacyDirHasPayload(legacyDir) {
+    if (!isExistingDir(legacyDir))
+        return false;
+    return isExistingFile(path.join(legacyDir, 'app.sqlite'));
+}
+/**
+ * Returns the list of payload entries that already exist under `dataDir`.
+ * We refuse to merge on top of any of them: SQLite/WAL pairs and project
+ * trees are not safely interleavable, and a partial overlay would yield
+ * a hybrid state SQLite cannot reason about.
+ */
+export function dataDirHasExistingPayload(dataDir) {
+    if (!isExistingDir(dataDir))
+        return [];
+    const present = [];
+    for (const entry of PAYLOAD_ENTRIES) {
+        if (fs.existsSync(path.join(dataDir, entry)))
+            present.push(entry);
+    }
+    return present;
+}
+/**
+ * Walk a payload subtree and refuse to copy if any node is a symlink.
+ * fs.cpSync would otherwise preserve the link and downstream readers
+ * (projects.ts) would follow it, escaping the data root.
+ */
+function assertNoSymlinks(srcRoot, displayPath = srcRoot) {
+    const stat = fs.lstatSync(srcRoot);
+    if (stat.isSymbolicLink()) {
+        throw new LegacyMigrationError('symlink_in_payload', `legacy payload contains a symlink at "${displayPath}"; refusing to migrate`);
+    }
+    if (!stat.isDirectory())
+        return;
+    for (const child of fs.readdirSync(srcRoot)) {
+        assertNoSymlinks(path.join(srcRoot, child), path.join(displayPath, child));
+    }
+}
+/**
+ * Stage every present payload entry into `stagingDir`. Returns the list
+ * of entries that were copied. We use cpSync with verbatimSymlinks not
+ * set; the lstat walk above already rejected any symlink, so a non-link
+ * tree is what cpSync sees.
+ */
+function stagePayload(legacyDir, stagingDir) {
+    fs.mkdirSync(stagingDir, { recursive: true });
+    const copied = [];
+    for (const entry of PAYLOAD_ENTRIES) {
+        const src = path.join(legacyDir, entry);
+        if (!fs.existsSync(src))
+            continue;
+        assertNoSymlinks(src);
+        const dst = path.join(stagingDir, entry);
+        fs.cpSync(src, dst, {
+            recursive: true,
+            force: true,
+            errorOnExist: false,
+        });
+        copied.push(entry);
+    }
+    return copied;
+}
+/**
+ * Move staged payload entries into the final dataDir. Each entry is
+ * moved with renameSync (atomic on the same filesystem); if rename
+ * fails (cross-device, etc.) we fall back to copy + remove.
+ *
+ * Promotion is rollback-safe in two layers:
+ *
+ *   1. The cpSync fallback is wrapped in its own try/catch and removes
+ *      whatever was partially written at dst before bubbling up. Without
+ *      this, a partial dst would survive the outer rollback because the
+ *      entry never makes it into the `promoted` array.
+ *   2. The outer try/catch tracks every entry that has been fully moved
+ *      into dataDir and removes them all before rethrowing. Without it,
+ *      a mid-loop failure after app.sqlite was already promoted would
+ *      leave the real dataDir with app.sqlite but no marker, and the
+ *      next boot would refuse the retry under data_dir_not_empty,
+ *      stranding the user mid-migration.
+ *
+ * Returns the list of entries that were placed into dataDir so the
+ * caller can roll them back if a *subsequent* step (e.g. writing the
+ * .migrated-from marker) fails after promotion has already succeeded.
+ */
+export function promoteStaged(stagingDir, dataDir, entries) {
+    fs.mkdirSync(dataDir, { recursive: true });
+    const promoted = [];
+    try {
+        for (const entry of entries) {
+            const src = path.join(stagingDir, entry);
+            const dst = path.join(dataDir, entry);
+            try {
+                fs.renameSync(src, dst);
+            }
+            catch {
+                // EXDEV (cross-device) or similar: fall back to copy + remove.
+                // The fallback is its own protected unit so a partial dst
+                // (cpSync started writing then failed on ENOSPC, permissions,
+                // an interrupted handle, etc.) does not survive into dataDir
+                // unrecorded.
+                try {
+                    fs.cpSync(src, dst, {
+                        recursive: true,
+                        force: true,
+                        errorOnExist: false,
+                    });
+                    fs.rmSync(src, { recursive: true, force: true });
+                }
+                catch (cpErr) {
+                    fs.rmSync(dst, { recursive: true, force: true });
+                    throw cpErr;
+                }
+            }
+            promoted.push(entry);
+        }
+    }
+    catch (err) {
+        rollbackPromoted(dataDir, promoted);
+        throw err;
+    }
+    return promoted;
+}
+function rollbackPromoted(dataDir, promoted) {
+    for (const entry of promoted) {
+        fs.rmSync(path.join(dataDir, entry), { recursive: true, force: true });
+    }
+}
+function writeMarker(dataDir, legacyDir) {
+    const marker = path.join(dataDir, MARKER_FILE);
+    // Write to a sibling tmp path then atomically rename into place.
+    // Without this, a writeFileSync that gets partway through and then
+    // fails (ENOSPC mid-write, EIO on flush, etc.) would leave a partial
+    // .migrated-from at marker. The next boot's fs.existsSync(marker)
+    // returns true, the migrator short-circuits as `skipped`, and the
+    // user is stranded with an empty dataDir. Temp + rename guarantees
+    // the marker either fully exists or does not.
+    const temp = `${marker}.tmp-${process.pid}-${Date.now()}`;
+    const payload = JSON.stringify({
+        legacyDir: path.resolve(legacyDir),
+        migratedAt: new Date().toISOString(),
+    }, null, 2);
+    try {
+        fs.writeFileSync(temp, payload + '\n', 'utf8');
+        fs.renameSync(temp, marker);
+    }
+    catch (err) {
+        fs.rmSync(temp, { force: true });
+        throw err;
+    }
+}
+/**
+ * One-shot, idempotent legacy data migrator. Synchronous so it can run
+ * at module import time before SQLite opens. Throws LegacyMigrationError
+ * on operator-actionable failures (env set but path invalid; dataDir
+ * already populated; symlink in payload).
+ */
+export function migrateLegacyDataDirSync(options) {
+    const log = options.logger ?? {
+        info: (m) => console.log(`[od-migrate] ${m}`),
+        warn: (m) => console.warn(`[od-migrate] ${m}`),
+    };
+    const raw = options.legacyDir;
+    if (raw === undefined || raw.length === 0) {
+        return { status: 'noop', reason: 'OD_LEGACY_DATA_DIR not set' };
+    }
+    const legacyDir = path.resolve(raw);
+    const dataDir = path.resolve(options.dataDir);
+    if (legacyDir === dataDir) {
+        return { status: 'noop', reason: 'OD_LEGACY_DATA_DIR equals OD_DATA_DIR' };
+    }
+    // Marker check runs before legacyDirHasPayload on purpose: once a
+    // migration has succeeded, the marker is the canonical "do not
+    // touch" signal. The user may leave OD_LEGACY_DATA_DIR set and then
+    // delete or move the old repo `.od/` later; without this ordering
+    // the next boot would re-validate a source that is no longer needed
+    // and throw legacy_dir_invalid, breaking the marker contract that
+    // says "after success, future boots no-op."
+    const markerPath = path.join(dataDir, MARKER_FILE);
+    if (fs.existsSync(markerPath)) {
+        return { status: 'skipped', reason: 'migration marker already present' };
+    }
+    if (!legacyDirHasPayload(legacyDir)) {
+        // Loud: env was set but the path doesn't look like an OD data dir.
+        // The user typo'd, deleted the source, or pointed at the wrong
+        // directory; silently launching empty trained users to think the
+        // migration ran when it hadn't (this is the original #710 footgun).
+        throw new LegacyMigrationError('legacy_dir_invalid', `OD_LEGACY_DATA_DIR="${legacyDir}" is not a usable legacy data dir (expected app.sqlite directly inside it). Quit Open Design, fix the path, and relaunch.`);
+    }
+    // Refuse to merge on top of any existing payload entry. SQLite/WAL
+    // pairs cannot be safely interleaved with foreign WAL pages, and a
+    // half-overlaid project tree is worse than no migration.
+    const existing = dataDirHasExistingPayload(dataDir);
+    if (existing.length > 0) {
+        throw new LegacyMigrationError('data_dir_not_empty', `OD_DATA_DIR="${dataDir}" already contains payload entries (${existing.join(', ')}); refusing to merge legacy data on top. Move the existing data aside or pick a fresh data root before re-running with OD_LEGACY_DATA_DIR.`);
+    }
+    log.info(`migrating legacy data from "${legacyDir}" to "${dataDir}"`);
+    // Stage into a sibling tmp dir first, then promote with renameSync.
+    // sibling-not-child so a partial copy never sits inside dataDir on
+    // any error path. Random suffix avoids collisions on retry.
+    fs.mkdirSync(path.dirname(dataDir), { recursive: true });
+    const stagingDir = path.join(path.dirname(dataDir), `${path.basename(dataDir)}.od-migrate-${process.pid}-${Date.now()}`);
+    let copied;
+    let promoted = [];
+    try {
+        copied = stagePayload(legacyDir, stagingDir);
+        promoted = promoteStaged(stagingDir, dataDir, copied);
+        // writeMarker is the last step that can fail (ENOSPC, read-only
+        // dataDir, permissions). If it does, the payload entries are
+        // already in dataDir but no marker was written; the next boot
+        // would hit dataDirHasExistingPayload() and throw data_dir_not_empty,
+        // making the migration un-retryable. Rolling back the promoted
+        // entries here keeps the failure as a unit with promotion.
+        (options.writeMarker ?? writeMarker)(dataDir, legacyDir);
+    }
+    catch (err) {
+        rollbackPromoted(dataDir, promoted);
+        // Defensive marker cleanup: even though the production writeMarker
+        // is atomic (temp + rename), a partial file at markerPath could
+        // still exist if some non-atomic variant ran. Without this, the
+        // next boot's fs.existsSync(markerPath) check would short-circuit
+        // as `skipped` and the user would be stranded.
+        fs.rmSync(markerPath, { force: true });
+        fs.rmSync(stagingDir, { recursive: true, force: true });
+        throw err;
+    }
+    // Whatever might be left of staging (already-promoted entries leave
+    // empty parents): drop it.
+    fs.rmSync(stagingDir, { recursive: true, force: true });
+    log.info(`migration complete: copied ${copied.length} entr${copied.length === 1 ? 'y' : 'ies'} (${copied.join(', ')})`);
+    return { status: 'migrated', reason: 'copied legacy payload', copied };
+}
+//# sourceMappingURL=legacy-data-migrator.js.map

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/legacy-data-migrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-data-migrator.js","sourceRoot":"","sources":["../src/legacy-data-migrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AA+BlC;;;;;;GAMG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,CAAS;IACtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,WAAW,GAAG,gBAAgB,CAAC;AACrC,0EAA0E;AAC1E,4EAA4E;AAC5E,wEAAwE;AACxE,aAAa;AACb,MAAM,eAAe,GAAsB;IACzC,YAAY;IACZ,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,mBAAmB;IACnB,UAAU;IACV,WAAW;IACX,YAAY;IACZ,UAAU;CACX,CAAC;AAEF,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,OAAe,EAAE,WAAW,GAAG,OAAO;IAC9D,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,oBAAoB,CAC5B,oBAAoB,EACpB,yCAAyC,WAAW,wBAAwB,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO;IAChC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,SAAiB,EAAE,UAAkB;IACzD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACzC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,IAAI;YACX,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAkB,EAClB,OAAe,EACf,OAA0B;IAE1B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACzC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;gBAC/D,0DAA0D;gBAC1D,8DAA8D;gBAC9D,6DAA6D;gBAC7D,cAAc;gBACd,IAAI,CAAC;oBACH,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE;wBAClB,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,IAAI;wBACX,YAAY,EAAE,KAAK;qBACpB,CAAC,CAAC;oBACH,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACjD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACpC,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe,EAAE,QAA2B;IACpE,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,SAAiB;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/C,iEAAiE;IACjE,mEAAmE;IACnE,qEAAqE;IACrE,kEAAkE;IAClE,kEAAkE;IAClE,mEAAmE;IACnE,8CAA8C;IAC9C,MAAM,IAAI,GAAG,GAAG,MAAM,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAClC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACZ,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAoC;IAEpC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI;QAC5B,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;KAC/C,CAAC;IAEF,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9C,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IAC7E,CAAC;IAED,kEAAkE;IAClE,+DAA+D;IAC/D,oEAAoE;IACpE,kEAAkE;IAClE,oEAAoE;IACpE,kEAAkE;IAClE,4CAA4C;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,mEAAmE;QACnE,+DAA+D;QAC/D,iEAAiE;QACjE,oEAAoE;QACpE,MAAM,IAAI,oBAAoB,CAC5B,oBAAoB,EACpB,uBAAuB,SAAS,2HAA2H,CAC5J,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,mEAAmE;IACnE,yDAAyD;IACzD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,oBAAoB,CAC5B,oBAAoB,EACpB,gBAAgB,OAAO,uCAAuC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,4IAA4I,CAC9N,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,+BAA+B,SAAS,SAAS,OAAO,GAAG,CAAC,CAAC;IAEtE,oEAAoE;IACpE,mEAAmE;IACnE,4DAA4D;IAC5D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAC1B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EACrB,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CACpE,CAAC;IAEF,IAAI,MAAgB,CAAC;IACrB,IAAI,QAAQ,GAAsB,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC7C,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtD,gEAAgE;QAChE,6DAA6D;QAC7D,8DAA8D;QAC9D,sEAAsE;QACtE,+DAA+D;QAC/D,2DAA2D;QAC3D,CAAC,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACpC,mEAAmE;QACnE,gEAAgE;QAChE,gEAAgE;QAChE,kEAAkE;QAClE,+CAA+C;QAC/C,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,oEAAoE;IACpE,2BAA2B;IAC3B,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAExD,GAAG,CAAC,IAAI,CACN,8BAA8B,MAAM,CAAC,MAAM,QAAQ,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC9G,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC;AACzE,CAAC"}

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/library-install.d.ts

@@ -0,0 +1,36 @@
+export declare function sanitizeRepoName(url: any): any;
+/**
+ * @param {InstallTarget} target
+ * @param {string} userDir - user-installed directory (e.g. ~/.open-design/skills)
+ * @param {'skill' | 'design-system'} kind
+ * @returns {Promise<{ok: true, dir: string} | {ok: false, error: string}>}
+ */
+export declare function installFromTarget(target: any, userDir: any, kind: any): Promise<{
+    ok: boolean;
+    error: string;
+    dir?: never;
+} | {
+    ok: boolean;
+    dir: string;
+    error?: never;
+}>;
+/**
+ * @param {string} id - skill or DS id to uninstall
+ * @param {string} userDir - user-installed directory
+ * @param {string} builtInDir - built-in directory
+ * @param {'skill' | 'design-system'} kind
+ * @returns {Promise<{ok: true} | {ok: false, error: string, status?: number}>}
+ */
+export declare function uninstallById(id: any, userDir: any, builtInDir: any, kind: any): Promise<{
+    ok: boolean;
+    error: string;
+    status: number;
+} | {
+    ok: boolean;
+    error: string;
+    status?: never;
+} | {
+    ok: boolean;
+    error?: never;
+    status?: never;
+}>;

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/library-install.js

@@ -0,0 +1,174 @@
+// @ts-nocheck
+// Install/uninstall logic for user-managed skills and design systems.
+// Installed items live under ~/.open-design/skills/ and
+// ~/.open-design/design-systems/ respectively.
+import { execFile } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import { isBlocked } from './linked-dirs.js';
+import { listSkills } from './skills.js';
+import { listDesignSystems } from './design-systems.js';
+/** @typedef {{ source: 'github', url: string } | { source: 'local', path: string }} InstallTarget */
+const GITHUB_URL_RE = /^https:\/\/github\.com\/[a-zA-Z0-9_.-]+\/[a-zA-Z0-9_.-]+\/?$/;
+const SAFE_NAME_RE = /^[a-zA-Z0-9_.-]+$/;
+export function sanitizeRepoName(url) {
+    const trimmed = url.replace(/\/+$/, '');
+    const segments = trimmed.split('/');
+    const raw = segments[segments.length - 1] || 'unnamed';
+    // Strip .git suffix
+    const name = raw.replace(/\.git$/, '');
+    // Allow only safe characters, truncate to 64 chars
+    if (!SAFE_NAME_RE.test(name))
+        return 'skill-' + Date.now();
+    return name.slice(0, 64);
+}
+/**
+ * @param {InstallTarget} target
+ * @param {string} userDir - user-installed directory (e.g. ~/.open-design/skills)
+ * @param {'skill' | 'design-system'} kind
+ * @returns {Promise<{ok: true, dir: string} | {ok: false, error: string}>}
+ */
+export async function installFromTarget(target, userDir, kind) {
+    const manifest = kind === 'skill' ? 'SKILL.md' : 'DESIGN.md';
+    if (target.source === 'github') {
+        return installFromGithub(target.url, userDir, manifest);
+    }
+    if (target.source === 'local') {
+        return installFromLocal(target.path, userDir, manifest);
+    }
+    return { ok: false, error: 'Invalid install source' };
+}
+async function installFromGithub(url, userDir, manifest) {
+    if (!GITHUB_URL_RE.test(url)) {
+        return { ok: false, error: 'Invalid GitHub URL. Expected https://github.com/<owner>/<repo>' };
+    }
+    const dirName = sanitizeRepoName(url);
+    const dest = path.join(userDir, dirName);
+    // Check collision
+    try {
+        const stat = fs.statSync(dest);
+        if (stat.isDirectory()) {
+            return { ok: false, error: `A ${manifest === 'SKILL.md' ? 'skill' : 'design system'} named "${dirName}" is already installed` };
+        }
+    }
+    catch {
+        // Doesn't exist — good.
+    }
+    // Shallow clone
+    try {
+        await new Promise((resolve, reject) => {
+            const cp = execFile('git', ['clone', '--depth', '1', url, dest], {
+                timeout: 60_000,
+            }, (err, _stdout, stderr) => {
+                if (err) {
+                    // Clean up partial clone
+                    try {
+                        fs.rmSync(dest, { recursive: true, force: true });
+                    }
+                    catch { }
+                    reject(new Error(stderr || err.message));
+                }
+                else {
+                    resolve(undefined);
+                }
+            });
+        });
+    }
+    catch (err) {
+        return { ok: false, error: `git clone failed: ${String(err).split('\n')[0]}` };
+    }
+    // Verify manifest exists
+    if (!fs.existsSync(path.join(dest, manifest))) {
+        try {
+            fs.rmSync(dest, { recursive: true, force: true });
+        }
+        catch { }
+        return {
+            ok: false,
+            error: `Repository does not contain a ${manifest} file`,
+        };
+    }
+    return { ok: true, dir: dest };
+}
+async function installFromLocal(localPath, userDir, manifest) {
+    if (!path.isAbsolute(localPath)) {
+        return { ok: false, error: 'Path must be absolute' };
+    }
+    let realPath;
+    try {
+        realPath = fs.realpathSync.native(localPath);
+    }
+    catch {
+        return { ok: false, error: 'Directory does not exist or is not accessible' };
+    }
+    try {
+        const stat = fs.statSync(realPath);
+        if (!stat.isDirectory()) {
+            return { ok: false, error: 'Not a directory' };
+        }
+    }
+    catch {
+        return { ok: false, error: 'Directory does not exist or is not accessible' };
+    }
+    if (isBlocked(realPath)) {
+        return { ok: false, error: 'System directory not allowed' };
+    }
+    if (!fs.existsSync(path.join(realPath, manifest))) {
+        return { ok: false, error: `Directory does not contain a ${manifest} file` };
+    }
+    const dirName = path.basename(realPath);
+    const linkPath = path.join(userDir, dirName);
+    // Check collision
+    try {
+        fs.statSync(linkPath);
+        return { ok: false, error: `A ${manifest === 'SKILL.md' ? 'skill' : 'design system'} named "${dirName}" is already installed` };
+    }
+    catch {
+        // Doesn't exist — good.
+    }
+    // Create symlink
+    try {
+        fs.symlinkSync(realPath, linkPath, 'junction');
+    }
+    catch (err) {
+        return { ok: false, error: `Failed to create symlink: ${err.message}` };
+    }
+    return { ok: true, dir: linkPath };
+}
+/**
+ * @param {string} id - skill or DS id to uninstall
+ * @param {string} userDir - user-installed directory
+ * @param {string} builtInDir - built-in directory
+ * @param {'skill' | 'design-system'} kind
+ * @returns {Promise<{ok: true} | {ok: false, error: string, status?: number}>}
+ */
+export async function uninstallById(id, userDir, builtInDir, kind) {
+    const listFn = kind === 'skill' ? listSkills : listDesignSystems;
+    // Check if it's a built-in item
+    const builtIn = await listFn(builtInDir);
+    if (builtIn.some((s) => s.id === id)) {
+        return { ok: false, error: 'Cannot uninstall built-in items', status: 403 };
+    }
+    // Find in user directory
+    const installed = await listFn(userDir);
+    const item = installed.find((s) => s.id === id);
+    if (!item) {
+        return { ok: false, error: 'Not found in user-installed items', status: 404 };
+    }
+    // item.dir points to the filesystem directory
+    const target = item.dir;
+    try {
+        const stat = fs.lstatSync(target);
+        if (stat.isSymbolicLink()) {
+            fs.unlinkSync(target);
+        }
+        else if (stat.isDirectory()) {
+            fs.rmSync(target, { recursive: true, force: true });
+        }
+    }
+    catch (err) {
+        return { ok: false, error: `Failed to remove: ${err.message}` };
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=library-install.js.map

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/library-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"library-install.js","sourceRoot":"","sources":["../src/library-install.ts"],"names":[],"mappings":"AAAA,cAAc;AACd,sEAAsE;AACtE,wDAAwD;AACxD,+CAA+C;AAE/C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAiB,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,qGAAqG;AAErG,MAAM,aAAa,GAAG,8DAA8D,CAAC;AACrF,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAEzC,MAAM,UAAU,gBAAgB,CAAC,GAAG;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC;IACvD,oBAAoB;IACpB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACvC,mDAAmD;IACnD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI;IAC3D,MAAM,QAAQ,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;IAE7D,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ;IACrD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gEAAgE,EAAE,CAAC;IAChG,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEzC,kBAAkB;IAClB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,WAAW,OAAO,wBAAwB,EAAE,CAAC;QAClI,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IAED,gBAAgB;IAChB,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE;gBAC/D,OAAO,EAAE,MAAM;aAChB,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1B,IAAI,GAAG,EAAE,CAAC;oBACR,yBAAyB;oBACzB,IAAI,CAAC;wBAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAA,CAAC;oBACnE,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC3C,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjF,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC;YAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACnE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,iCAAiC,QAAQ,OAAO;SACxD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ;IAC1D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;IAC/E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;IAC/E,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IAC9D,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,QAAQ,OAAO,EAAE,CAAC;IAC/E,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE7C,kBAAkB;IAClB,IAAI,CAAC;QACH,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,WAAW,OAAO,wBAAwB,EAAE,CAAC;IAClI,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IAED,iBAAiB;IACjB,IAAI,CAAC;QACH,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IAC1E,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI;IAC/D,MAAM,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAEjE,gCAAgC;IAChC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC9E,CAAC;IAED,yBAAyB;IACzB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAChF,CAAC;IAED,8CAA8C;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9B,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IAClE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/linked-dirs.d.ts

@@ -0,0 +1,8 @@
+export declare function isBlocked(realPath: string): boolean;
+export declare function validateLinkedDirs(dirs: unknown): {
+    dirs: string[];
+    error?: undefined;
+} | {
+    error: string;
+    dirs?: undefined;
+};

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/linked-dirs.js

@@ -0,0 +1,62 @@
+import path from 'node:path';
+import fs from 'node:fs';
+const BLOCKED_CANONICAL = (() => {
+    const raw = process.platform === 'win32'
+        ? ['C:\\Windows', 'C:\\Program Files', 'C:\\Program Files (x86)']
+        : ['/etc', '/proc', '/sys', '/dev', '/boot'];
+    const set = new Set(raw);
+    for (const p of raw) {
+        try {
+            set.add(fs.realpathSync.native(p));
+        }
+        catch { /* not resolvable, keep as-is */ }
+    }
+    return [...set];
+})();
+const WIN_ROOT_RE = /^[A-Za-z]:\\?$/;
+function isFilesystemRoot(p) {
+    if (process.platform === 'win32')
+        return WIN_ROOT_RE.test(p);
+    return p === '/';
+}
+export function isBlocked(realPath) {
+    if (isFilesystemRoot(realPath))
+        return true;
+    return BLOCKED_CANONICAL.some((p) => realPath === p ||
+        realPath.startsWith(p + path.sep) ||
+        p.startsWith(realPath + path.sep));
+}
+export function validateLinkedDirs(dirs) {
+    if (!Array.isArray(dirs))
+        return { error: 'linkedDirs must be an array' };
+    const validated = [];
+    for (const d of dirs) {
+        if (typeof d !== 'string' || !d.trim()) {
+            return { error: 'each linked dir must be a non-empty string' };
+        }
+        if (!path.isAbsolute(d)) {
+            return { error: `linked dir must be an absolute path: ${d}` };
+        }
+        let realPath;
+        try {
+            realPath = fs.realpathSync.native(path.resolve(d));
+        }
+        catch {
+            return { error: `directory does not exist or is not accessible: ${d}` };
+        }
+        try {
+            const stat = fs.statSync(realPath);
+            if (!stat.isDirectory())
+                return { error: `not a directory: ${d}` };
+        }
+        catch {
+            return { error: `directory does not exist or is not accessible: ${d}` };
+        }
+        if (isBlocked(realPath)) {
+            return { error: `system directory not allowed: ${d}` };
+        }
+        validated.push(realPath);
+    }
+    return { dirs: [...new Set(validated)] };
+}
+//# sourceMappingURL=linked-dirs.js.map

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/linked-dirs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linked-dirs.js","sourceRoot":"","sources":["../src/linked-dirs.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE;IAC9B,MAAM,GAAG,GACP,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC1B,CAAC,CAAC,CAAC,aAAa,EAAE,mBAAmB,EAAE,yBAAyB,CAAC;QACjE,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,GAAG,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAErC,SAAS,gBAAgB,CAAC,CAAS;IACjC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,KAAK,GAAG,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,IAAI,gBAAgB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,iBAAiB,CAAC,IAAI,CAC3B,CAAC,CAAS,EAAE,EAAE,CACZ,QAAQ,KAAK,CAAC;QACd,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;QACjC,CAAC,CAAC,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAa;IAEb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC1E,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,OAAO,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,wCAAwC,CAAC,EAAE,EAAE,CAAC;QAChE,CAAC;QACD,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,kDAAkD,CAAC,EAAE,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,CAAC,EAAE,EAAE,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,kDAAkD,CAAC,EAAE,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,iCAAiC,CAAC,EAAE,EAAE,CAAC;QACzD,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC"}