dsh-claude-style 0.13.2 → 0.14.0-dev.12

package/lib/host/brand.js

@@ -0,0 +1,136 @@
+// packages/contracts/src/brand.ts
+var BRAND_IMAGE_KINDS = ["mark", "wordmark"];
+var BRAND_IMAGE_TYPES = {
+  "image/png": "png",
+  "image/svg+xml": "svg",
+  "image/webp": "webp"
+};
+var BRAND_IMAGE_MAX_BYTES = 2 * 1024 * 1024;
+
+// packages/contracts/src/routes.ts
+var ROUTE_PREFIX = "/dsh-claude-style";
+var USERNAME_PATH = `${ROUTE_PREFIX}/username`;
+var HDSL_PATH = `${ROUTE_PREFIX}/hdsl`;
+var HDSL_SKIN_PATH = `${ROUTE_PREFIX}/hdsl-skin.png`;
+var SESSION_DELETE_PATH = `${ROUTE_PREFIX}/session-delete`;
+var USAGE_PATH = `${ROUTE_PREFIX}/usage`;
+var SESSION_SEARCH_PATH = `${ROUTE_PREFIX}/session-search`;
+var BRAND_PATH = `${ROUTE_PREFIX}/brand`;
+var BRAND_MARK_PATH = `${ROUTE_PREFIX}/brand/mark`;
+var BRAND_WORDMARK_PATH = `${ROUTE_PREFIX}/brand/wordmark`;
+var PEAKRATE_PATH = `${ROUTE_PREFIX}/peakrate`;
+
+// packages/host/src/brand.ts
+import { mkdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { harnessPath } from "./harness-home.js";
+import { fenceRefused, methodRefused, readRequestBody, sendJson } from "./http.js";
+var IMAGE_PATHS = { mark: BRAND_MARK_PATH, wordmark: BRAND_WORDMARK_PATH };
+var IMAGE_HEADERS = {
+  "cache-control": "no-cache",
+  "content-security-policy": "default-src 'none'; style-src 'unsafe-inline'; sandbox",
+  "x-content-type-options": "nosniff"
+};
+var SIGNATURES = {
+  "image/png": [{ offset: 0, bytes: Buffer.from([137, 80, 78, 71, 13, 10, 26, 10]) }],
+  "image/webp": [{ offset: 0, bytes: Buffer.from("RIFF", "latin1") }, { offset: 8, bytes: Buffer.from("WEBP", "latin1") }]
+};
+function createBrandStore(ctx) {
+  const dir = () => harnessPath(ctx, "dsh-claude-style", "brand");
+  const find = (kind) => {
+    for (const [type, extension] of Object.entries(BRAND_IMAGE_TYPES)) {
+      const path = join(dir(), `${kind}.${extension}`);
+      const stat = statSync(path, { throwIfNoEntry: false });
+      if (stat?.isFile() !== true) continue;
+      return { path, type, state: { type, version: `${Math.round(stat.mtimeMs)}-${stat.size}` } };
+    }
+    return null;
+  };
+  const answer = () => ({ ok: true, mark: find("mark")?.state ?? null, wordmark: find("wordmark")?.state ?? null });
+  const write = (kind, type, bytes) => {
+    const extension = BRAND_IMAGE_TYPES[type];
+    mkdirSync(dir(), { recursive: true });
+    const target = join(dir(), `${kind}.${extension}`);
+    const temporary = `${target}.${process.pid}.tmp`;
+    writeFileSync(temporary, bytes);
+    renameSync(temporary, target);
+    for (const other of Object.values(BRAND_IMAGE_TYPES)) {
+      if (other !== extension) rmSync(join(dir(), `${kind}.${other}`), { force: true });
+    }
+  };
+  const remove = (kind) => {
+    for (const extension of Object.values(BRAND_IMAGE_TYPES)) rmSync(join(dir(), `${kind}.${extension}`), { force: true });
+  };
+  return { find, answer, write, remove };
+}
+function matchesSignature(type, bytes) {
+  const marks = SIGNATURES[type];
+  if (marks === void 0) return true;
+  return marks.every(({ offset, bytes: expected }) => bytes.subarray(offset, offset + expected.length).equals(expected));
+}
+async function storeImage(store, kind, req, res) {
+  const type = (req.headers["content-type"] ?? "").split(";")[0].trim().toLowerCase();
+  if (BRAND_IMAGE_TYPES[type] === void 0) {
+    sendJson(res, 415, { ok: false, error: "unsupported image type" });
+    return;
+  }
+  const bytes = await readRequestBody(req, BRAND_IMAGE_MAX_BYTES);
+  if (bytes === null) {
+    res.once("finish", () => req.destroy());
+    sendJson(res, 413, { ok: false, error: "image too large" });
+    return;
+  }
+  if (bytes.length === 0 || !matchesSignature(type, bytes)) {
+    sendJson(res, 400, { ok: false, error: "not an image of the declared type" });
+    return;
+  }
+  store.write(kind, type, bytes);
+  sendJson(res, 200, store.answer());
+}
+function brandRoutes(ctx) {
+  const store = createBrandStore(ctx);
+  const status = {
+    kind: "exact",
+    path: BRAND_PATH,
+    handler: (req, res) => {
+      if (methodRefused(req, res, ["GET"])) return;
+      if (fenceRefused(ctx, req, res)) return;
+      sendJson(res, 200, store.answer());
+    }
+  };
+  const images = BRAND_IMAGE_KINDS.map((kind) => ({
+    label: `brand ${kind}`,
+    route: {
+      kind: "exact",
+      path: IMAGE_PATHS[kind],
+      handler: (req, res) => {
+        if (methodRefused(req, res, ["GET", "HEAD", "PUT", "DELETE"])) return;
+        if (fenceRefused(ctx, req, res)) return;
+        if (req.method === "PUT" || req.method === "DELETE") {
+          const done = req.method === "PUT" ? storeImage(store, kind, req, res) : Promise.resolve().then(() => {
+            store.remove(kind);
+            sendJson(res, 200, store.answer());
+          });
+          void done.catch((error) => {
+            if (res.headersSent) res.destroy();
+            else sendJson(res, 500, { ok: false, error: String(error?.message ?? String(error)) });
+          });
+          return;
+        }
+        const found = store.find(kind);
+        if (found === null) {
+          res.writeHead(404, { "cache-control": "no-store" });
+          res.end();
+          return;
+        }
+        const body = readFileSync(found.path);
+        res.writeHead(200, { ...IMAGE_HEADERS, "content-type": found.type, "content-length": String(body.byteLength) });
+        res.end(req.method === "HEAD" ? void 0 : body);
+      }
+    }
+  }));
+  return [{ label: "brand status", route: status }, ...images];
+}
+export {
+  brandRoutes
+};

package/lib/host/http.js

@@ -0,0 +1,74 @@
+// packages/host/src/http.ts
+function refusalOf(ctx, req) {
+  const connection = ctx.get("connection");
+  if (typeof connection?.requestRejection === "function") return connection.requestRejection(req);
+  if (!isLoopbackPeer(req.socket.remoteAddress)) return 403;
+  const host = req.headers.host;
+  if (host !== void 0) {
+    if (!URL.canParse(`http://${host}`)) return 403;
+    const name = new URL(`http://${host}`).hostname;
+    if (name !== "localhost" && name !== "[::1]" && !/^127\.\d+\.\d+\.\d+$/.test(name)) return 403;
+  }
+  const site = req.headers["sec-fetch-site"];
+  if (site !== void 0 && site !== "same-origin" && site !== "none") return 403;
+  const origin = req.headers.origin;
+  if (origin === void 0) return void 0;
+  if (!URL.canParse(origin)) return 403;
+  return new URL(origin).host === host ? void 0 : 403;
+}
+function isLoopbackPeer(address) {
+  if (address === void 0) return false;
+  const plain = address.startsWith("::ffff:") ? address.slice("::ffff:".length) : address;
+  return plain === "::1" || /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(plain);
+}
+function sendJson(res, status, payload) {
+  const body = Buffer.from(JSON.stringify(payload));
+  res.writeHead(status, {
+    "content-type": "application/json; charset=utf-8",
+    "content-length": String(body.byteLength),
+    "cache-control": "no-store"
+  });
+  res.end(body);
+}
+function methodRefused(req, res, methods) {
+  if (req.method !== void 0 && methods.includes(req.method)) return false;
+  res.writeHead(405, { allow: methods.join(", ") });
+  res.end();
+  return true;
+}
+function fenceRefused(ctx, req, res) {
+  const refused = refusalOf(ctx, req);
+  if (refused === void 0) return false;
+  sendJson(res, refused, { ok: false, error: refused === 401 ? "unauthorized" : "forbidden" });
+  return true;
+}
+function readRequestBody(req, limit) {
+  return new Promise((settle) => {
+    const chunks = [];
+    let size = 0;
+    let over = false;
+    req.on("data", (chunk) => {
+      if (over) return;
+      size += chunk.length;
+      if (size > limit) {
+        over = true;
+        settle(null);
+        return;
+      }
+      chunks.push(Buffer.from(chunk));
+    });
+    req.on("end", () => {
+      if (!over) settle(Buffer.concat(chunks));
+    });
+    req.on("error", () => {
+      if (!over) settle(null);
+    });
+  });
+}
+export {
+  fenceRefused,
+  methodRefused,
+  readRequestBody,
+  refusalOf,
+  sendJson
+};

package/lib/host/peakrate.js

@@ -17,6 +17,7 @@ function createPeakRate(ctx) {
   let fetchedAt = 0;
   let loaded = false;
   let timer;
+  let inFlight = null;
   let lastAskedAt = 0;
   const warn = (message) => ctx.logger?.warn?.(message);
   function shippedCatalog() {
@@ -56,6 +57,7 @@ function createPeakRate(ctx) {
     let raw;
     try {
       const controller = new AbortController();
+      inFlight = controller;
       const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
       try {
         const response = await fetch(PEAKRATE_CATALOG_URL, { signal: controller.signal });
@@ -66,6 +68,7 @@ function createPeakRate(ctx) {
         raw = await response.json();
       } finally {
         clearTimeout(timeout);
+        if (inFlight === controller) inFlight = null;
       }
     } catch (error) {
       warn(`dsh-claude-style: peak rate source unreachable, keeping the current catalog: ${error.message}`);
@@ -119,6 +122,10 @@ function createPeakRate(ctx) {
     payload,
     dispose() {
       stopTimer();
+      if (inFlight !== null) {
+        inFlight.abort();
+        inFlight = null;
+      }
     }
   };
 }

package/lib/host/routes.js

@@ -6,6 +6,9 @@ var HDSL_SKIN_PATH = `${ROUTE_PREFIX}/hdsl-skin.png`;
 var SESSION_DELETE_PATH = `${ROUTE_PREFIX}/session-delete`;
 var USAGE_PATH = `${ROUTE_PREFIX}/usage`;
 var SESSION_SEARCH_PATH = `${ROUTE_PREFIX}/session-search`;
+var BRAND_PATH = `${ROUTE_PREFIX}/brand`;
+var BRAND_MARK_PATH = `${ROUTE_PREFIX}/brand/mark`;
+var BRAND_WORDMARK_PATH = `${ROUTE_PREFIX}/brand/wordmark`;
 var PEAKRATE_PATH = `${ROUTE_PREFIX}/peakrate`;
 
 // packages/host/src/routes.ts
@@ -13,7 +16,9 @@ import { existsSync, readFileSync, readdirSync, realpathSync, rmSync, statSync }
 import { userInfo } from "node:os";
 import { join, resolve, sep } from "node:path";
 import { brotliDecompressSync } from "node:zlib";
+import { brandRoutes } from "./brand.js";
 import { harnessPath } from "./harness-home.js";
+import { fenceRefused, methodRefused, readRequestBody, refusalOf, sendJson } from "./http.js";
 import { createHdslAccount } from "./hdsl.js";
 import { packageRoot } from "./package-root.js";
 import { createPeakRate } from "./peakrate.js";
@@ -33,37 +38,6 @@ var ASSETS_MANIFEST = "manifest.json";
 var USAGE_TTL_MS = 5 * 60 * 1e3;
 var SESSION_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,199}$/;
 var DELETE_BODY_MAX = 4096;
-function refusalOf(ctx, req) {
-  const connection = ctx.get("connection");
-  if (typeof connection?.requestRejection === "function") return connection.requestRejection(req);
-  if (!isLoopbackPeer(req.socket.remoteAddress)) return 403;
-  const host = req.headers.host;
-  if (host !== void 0) {
-    if (!URL.canParse(`http://${host}`)) return 403;
-    const name = new URL(`http://${host}`).hostname;
-    if (name !== "localhost" && name !== "[::1]" && !/^127\.\d+\.\d+\.\d+$/.test(name)) return 403;
-  }
-  const site = req.headers["sec-fetch-site"];
-  if (site !== void 0 && site !== "same-origin" && site !== "none") return 403;
-  const origin = req.headers.origin;
-  if (origin === void 0) return void 0;
-  if (!URL.canParse(origin)) return 403;
-  return new URL(origin).host === host ? void 0 : 403;
-}
-function isLoopbackPeer(address) {
-  if (address === void 0) return false;
-  const plain = address.startsWith("::ffff:") ? address.slice("::ffff:".length) : address;
-  return plain === "::1" || /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(plain);
-}
-function sendJson(res, status, payload) {
-  const body = Buffer.from(JSON.stringify(payload));
-  res.writeHead(status, {
-    "content-type": "application/json; charset=utf-8",
-    "content-length": String(body.byteLength),
-    "cache-control": "no-store"
-  });
-  res.end(body);
-}
 function sessionIsLive(ctx, sessionId) {
   const sessions = ctx.get("sessions");
   if (sessions === null || sessions === void 0) return false;
@@ -79,29 +53,6 @@ function sessionIsLive(ctx, sessionId) {
   }
   return true;
 }
-function readRequestBody(req, limit) {
-  return new Promise((settle) => {
-    const chunks = [];
-    let size = 0;
-    let over = false;
-    req.on("data", (chunk) => {
-      if (over) return;
-      size += chunk.length;
-      if (size > limit) {
-        over = true;
-        settle(null);
-        return;
-      }
-      chunks.push(Buffer.from(chunk));
-    });
-    req.on("end", () => {
-      if (!over) settle(Buffer.concat(chunks).toString("utf8"));
-    });
-    req.on("error", () => {
-      if (!over) settle(null);
-    });
-  });
-}
 async function unarchiveSession(ctx, sessionId) {
   const registry = ctx.get("workspaceRegistry");
   if (typeof registry?.unarchiveSession !== "function") return;
@@ -119,7 +70,7 @@ async function deleteSession(ctx, req, res) {
   }
   let request = null;
   try {
-    request = raw === null ? null : JSON.parse(raw);
+    request = raw === null ? null : JSON.parse(raw.toString("utf8"));
   } catch {
     request = null;
   }
@@ -217,18 +168,6 @@ function registerRoutes(ctx, scope) {
       return void 0;
     }
   };
-  const methodRefused = (req, res, methods) => {
-    if (req.method !== void 0 && methods.includes(req.method)) return false;
-    res.writeHead(405, { allow: methods.join(", ") });
-    res.end();
-    return true;
-  };
-  const fenceRefused = (req, res) => {
-    const refused = refusalOf(ctx, req);
-    if (refused === void 0) return false;
-    sendJson(res, refused, { ok: false, error: refused === 401 ? "unauthorized" : "forbidden" });
-    return true;
-  };
   scope.effect(() => {
     const disposers = [];
     const report = (message, error) => ctx.logger?.warn?.(`dsh-claude-style: ${message}: ${error?.message ?? String(error)}`);
@@ -249,6 +188,13 @@ function registerRoutes(ctx, scope) {
         report(`${label} route unavailable`, error);
       }
     };
+    const sendPayload = (res, answer) => {
+      void answer.then((value) => {
+        sendJson(res, 200, { ok: true, ...value });
+      }, (error) => {
+        sendJson(res, 500, { ok: false, error: String(error?.message ?? String(error)) });
+      });
+    };
     register("model copy", {
       kind: "prefix",
       path: ROUTE_PREFIX,
@@ -289,7 +235,7 @@ function registerRoutes(ctx, scope) {
       path: USERNAME_PATH,
       handler: (req, res) => {
         if (methodRefused(req, res, ["GET", "HEAD"])) return;
-        if (fenceRefused(req, res)) return;
+        if (fenceRefused(ctx, req, res)) return;
         const username = userInfo().username || "";
         const body = Buffer.from(JSON.stringify({ ok: true, username }));
         res.writeHead(200, {
@@ -305,13 +251,11 @@ function registerRoutes(ctx, scope) {
       path: HDSL_PATH,
       handler: (req, res) => {
         if (methodRefused(req, res, ["GET", "HEAD"])) return;
-        if (fenceRefused(req, res)) return;
-        hdsl.read().then((profile) => {
+        if (fenceRefused(ctx, req, res)) return;
+        sendPayload(res, hdsl.read().then((profile) => {
           const { skinFile, ...account } = profile;
-          sendJson(res, 200, { ok: true, ...account });
-        }, (error) => {
-          sendJson(res, 500, { ok: false, error: String(error?.message ?? String(error)) });
-        });
+          return account;
+        }));
       }
     });
     register("HDSL skin", {
@@ -319,7 +263,7 @@ function registerRoutes(ctx, scope) {
       path: HDSL_SKIN_PATH,
       handler: (req, res) => {
         if (methodRefused(req, res, ["GET", "HEAD"])) return;
-        if (fenceRefused(req, res)) return;
+        if (fenceRefused(ctx, req, res)) return;
         return hdsl.read().then((profile) => {
           if (typeof profile.skinFile !== "string" || !existsSync(profile.skinFile)) {
             res.writeHead(404, { "cache-control": "no-store" });
@@ -352,7 +296,7 @@ function registerRoutes(ctx, scope) {
       path: USAGE_PATH,
       handler: (req, res) => {
         if (methodRefused(req, res, ["GET", "HEAD"])) return;
-        if (fenceRefused(req, res)) return;
+        if (fenceRefused(ctx, req, res)) return;
         let snapshot = usage.snapshot();
         const stale = snapshot.value === null || snapshot.computing === true || Date.now() - (snapshot.value?.computedAt ?? 0) > USAGE_TTL_MS;
         if (stale) {
@@ -372,14 +316,10 @@ function registerRoutes(ctx, scope) {
       path: SESSION_SEARCH_PATH,
       handler: (req, res) => {
         if (methodRefused(req, res, ["GET"])) return;
-        if (fenceRefused(req, res)) return;
+        if (fenceRefused(ctx, req, res)) return;
         const query = (new URL(req.url ?? "/", "http://local").searchParams.get("q") ?? "").trim().slice(0, QUERY_MAX);
         const answer = query === "" ? sessionSearch.warm().then(() => ({ sessions: [] })) : sessionSearch.search(query);
-        void answer.then((value) => {
-          sendJson(res, 200, { ok: true, ...value });
-        }, (error) => {
-          sendJson(res, 500, { ok: false, error: String(error?.message ?? String(error)) });
-        });
+        sendPayload(res, answer);
       }
     });
     register("peak rate", {
@@ -387,19 +327,17 @@ function registerRoutes(ctx, scope) {
       path: PEAKRATE_PATH,
       handler: (req, res) => {
         if (methodRefused(req, res, ["GET", "POST"])) return;
-        if (fenceRefused(req, res)) return;
+        if (fenceRefused(ctx, req, res)) return;
         peakrate.ensure();
         const answer = req.method === "POST" ? peakrate.refresh().then(() => peakrate.payload()) : Promise.resolve(peakrate.payload());
-        void answer.then((payload) => {
-          sendJson(res, 200, { ok: true, ...payload });
-        }, (error) => {
-          sendJson(res, 500, { ok: false, error: String(error?.message ?? String(error)) });
-        });
+        sendPayload(res, answer);
       }
     });
+    for (const { label, route } of brandRoutes(ctx)) register(label, route);
     return () => {
       usage.dispose();
       peakrate.dispose();
+      sessionSearch.dispose();
       for (const dispose of disposers) {
         try {
           dispose();

package/lib/host/search.js

@@ -201,7 +201,14 @@ function createSessionSearch(ctx) {
     hits.sort((a, b) => b.time - a.time);
     return { sessions: hits.slice(0, SESSION_LIMIT), scanned: cache.size };
   }
-  return { search, warm: () => catchUp(true) };
+  function dispose() {
+    cache.clear();
+    lower.clear();
+    writtenAt.clear();
+    stored = null;
+    refreshing = null;
+  }
+  return { search, warm: () => catchUp(true), dispose };
 }
 export {
   QUERY_MAX,

package/lib/host/settings.js

@@ -1,7 +1,12 @@
 // packages/contracts/src/prefs.ts
 var PREFS_DEFAULT = Object.freeze({
   brand: "claude",
+  brandName: "",
+  brandInk: "original",
+  brandAccent: "",
   motion: "system",
+  statusMotion: "sweep",
+  statusDetail: "precise",
   collapseFooter: true,
   autoPopover: "all",
   composerScope: "all",