dsh-vscode-mode 0.12.0 → 0.13.1

package/assets/shell/dsh-open.mjs

@@ -0,0 +1,241 @@
+#!/usr/bin/env node
+// Shared OPEN REQUEST/ACK producer. No HTTP/RPC or browser credentials.
+import { constants } from 'node:fs';
+import { lstat, open, readFile, realpath, rename, unlink } from 'node:fs/promises';
+import { dirname, isAbsolute, join, resolve } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+
+const MAX_BYTES = 64 * 1024;
+const TTL = 60_000;
+
+/** @author ddj 2026-09-28 @param {string} file INI path @returns {Promise<object>} Validated bridge metadata. */
+export async function readConfig(file) {
+  if (!isAbsolute(file)) throw new Error('Bridge configuration must be an absolute path.');
+  const stat = await lstat(file);
+  if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_BYTES) throw new Error('Invalid bridge configuration.');
+  const config = Object.create(null);
+  for (const line of (await readFile(file, 'utf8')).split(/\r?\n/)) {
+    const match = /^\s*([a-zA-Z]+)\s*=(.*)$/.exec(line);
+    if (match) config[match[1].toLowerCase()] = match[2].trim();
+  }
+  for (const key of ['profile', 'inbox']) {
+    if (!config[key] || !isAbsolute(config[key]) || config[key].length > 8192) throw new Error('Missing absolute ' + key + ' in bridge configuration.');
+  }
+  if (!['desktop', 'web'].includes(config.mode)) throw new Error('Bridge mode must be desktop or web.');
+  if (config.mode === 'web') webTarget(config.base);
+  return config;
+}
+
+/** @author ddj 2026-09-28 @param {string} value Selected base URL @returns {string} Safe, unchanged wake target. */
+export function webTarget(value) {
+  const url = new URL(value);
+  if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.search || url.hash) {
+    throw new Error('Invalid selected Web base URL.');
+  }
+  return value;
+}
+
+/** @author ddj 2026-09-28 @param {string} path Filesystem path @returns {Promise<void>} Reject linked ancestors. */
+async function noLinks(path) {
+  let cursor = resolve(path);
+  while (true) {
+    const info = await lstat(cursor);
+    if (info.isSymbolicLink()) throw new Error('Linked bridge paths are not allowed: ' + cursor);
+    const parent = dirname(cursor);
+    if (parent === cursor) break;
+    cursor = parent;
+  }
+  const physical = await realpath(path);
+  const equal = process.platform === 'win32'
+    ? physical.toLowerCase() === resolve(path).toLowerCase()
+    : physical === resolve(path);
+  if (!equal) throw new Error('Bridge path escapes its physical location.');
+}
+
+/** @author ddj 2026-09-28 @param {string} path Private directory or file @returns {Promise<void>} Validate Windows owner and ACL. */
+async function windowsAcl(path) {
+  const script = "$ErrorActionPreference='Stop'; $p=$env:DSH_OPEN_CHECK; " +
+    "$sid=[Security.Principal.WindowsIdentity]::GetCurrent().User; " +
+    "if([IO.Directory]::Exists($p)) { $a=[IO.Directory]::GetAccessControl($p);$f=[IO.DirectoryInfo]::new($p) } " +
+    "else { $a=[IO.File]::GetAccessControl($p);$f=[IO.FileInfo]::new($p) }; " +
+    "if ($a.GetOwner([Security.Principal.SecurityIdentifier]).Value -ne $sid.Value) { exit 4 }; " +
+    "$rules=$a.GetAccessRules($true,$true,[Security.Principal.SecurityIdentifier]); $allow=$false; " +
+    "foreach($r in $rules) { if($r.AccessControlType -eq 'Allow' -and $r.FileSystemRights -ne 0) { " +
+    "if($r.IdentityReference.Value -ne $sid.Value) { exit 5 }; $allow=$true } }; " +
+    "if(-not $allow) { exit 6 }; " +
+    "while($null -ne $f) { if(($f.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { exit 7 }; " +
+    "if($f -is [IO.FileInfo]) { $f=$f.Directory } else { $f=$f.Parent } }";
+  const executable = join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe');
+  await runProcess(executable, ['-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(script, 'utf16le').toString('base64')], {
+    env: { ...process.env, DSH_OPEN_CHECK: path }, windowsHide: true,
+  });
+}
+
+/** @author ddj 2026-09-28 @param {string} path Queue entry @param {boolean} directory Expected kind @returns {Promise<void>} Enforce current-user-only access. */
+export async function privatePath(path, directory = true) {
+  await noLinks(path);
+  const stat = await lstat(path);
+  if (directory ? !stat.isDirectory() : !stat.isFile() || stat.nlink !== 1) throw new Error('Invalid bridge entry type.');
+  if (!directory && stat.size > MAX_BYTES) throw new Error('Bridge entry exceeds 64 KiB.');
+  if (process.platform === 'win32') return windowsAcl(path);
+  if (stat.uid !== process.getuid() || (stat.mode & 0o777) !== (directory ? 0o700 : 0o600)) {
+    throw new Error('Bridge entry is not private to the current user: ' + path);
+  }
+}
+
+/** @author ddj 2026-09-28 @param {object} config Bridge metadata @returns {Promise<void>} Validate existing host-owned queue; never create directories. */
+async function checkQueue(config) {
+  await privatePath(config.inbox);
+  await privatePath(join(config.inbox, 'requests'));
+  await privatePath(join(config.inbox, 'acks'));
+}
+
+/** @author ddj 2026-09-28 @param {object} config Bridge metadata @param {string[]} paths Absolute inputs @param {object} position Optional line/column @returns {object} Validated request. */
+export function makeRequest(config, paths, position = {}) {
+  if (!config.profile || !isAbsolute(config.profile)) throw new Error('Missing absolute profile.');
+  if (!paths.length || paths.length > 20) throw new Error('Open requires between 1 and 20 paths.');
+  if (paths.some(path => typeof path !== 'string' || !isAbsolute(path) || path.length > 8192 || /[\u0000-\u001f]/.test(path))) {
+    throw new Error('Open paths must be absolute and at most 8192 characters.');
+  }
+  const request = { version: 1, requestId: randomUUID(), profile: config.profile, paths, createdAt: Date.now() };
+  for (const key of ['line', 'column']) {
+    if (position[key] === undefined) continue;
+    if (!Number.isSafeInteger(position[key]) || position[key] <= 0) throw new Error('Invalid ' + key + '.');
+    request[key] = position[key];
+  }
+  if (Buffer.byteLength(JSON.stringify(request)) > MAX_BYTES) throw new Error('Open request exceeds 64 KiB.');
+  return request;
+}
+
+/** @author ddj 2026-09-28 @param {object} config Bridge metadata @param {object} request Validated request @returns {Promise<void>} Exclusively publish an atomic JSON file. */
+async function publish(config, request) {
+  const folder = join(config.inbox, 'requests');
+  const temp = join(folder, request.requestId + '.tmp');
+  const target = join(folder, request.requestId + '.json');
+  await checkQueue(config);
+  let owned = false;
+  try {
+    const handle = await open(temp, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL, 0o600);
+    owned = true;
+    try { await handle.writeFile(JSON.stringify(request), 'utf8'); await handle.sync(); }
+    finally { await handle.close(); }
+    await privatePath(temp, false);
+    await checkQueue(config);
+    // UUID + exclusive temporary creation prevents competing producers sharing this destination.
+    try { await lstat(target); throw new Error('Request ID already exists.'); }
+    catch (error) { if (error.code !== 'ENOENT') throw error; }
+    await rename(temp, target);
+    owned = false;
+  } finally {
+    if (owned) await unlink(temp).catch(() => {});
+  }
+}
+
+/** @author ddj 2026-09-28 @param {object} ack Untrusted receipt @param {object} request Submitted request @param {number} now Clock @returns {boolean} Matching, fresh success only. */
+export function validAck(ack, request, now = Date.now()) {
+  if (!ack || typeof ack !== 'object' || Array.isArray(ack)) return false;
+  const keys = ['version', 'requestId', 'profile', 'success', 'error', 'createdAt'];
+  if (Object.keys(ack).some(key => !keys.includes(key)) || (ack.error !== undefined && typeof ack.error !== 'string')) return false;
+  return ack.version === 1 && ack.requestId === request.requestId &&
+    ack.profile === request.profile && typeof ack.success === 'boolean' && Number.isSafeInteger(ack.createdAt) &&
+    ack.createdAt >= request.createdAt && ack.createdAt <= now + 5000 && now - ack.createdAt <= TTL;
+}
+
+/** @author ddj 2026-09-28 @param {number} ms Poll delay @returns {Promise<void>} Nonblocking timer. */
+function pause(ms) { return new Promise(resolveWait => setTimeout(resolveWait, ms)); }
+
+/** @author ddj 2026-09-28 @param {object} config Bridge metadata @param {object} request Submitted request @param {number} timeout Maximum ACK wait @param {Function} cancelWake Cancel deferred activation @returns {Promise<object>} Confirmed receipt, or throw. */
+async function waitAck(config, request, timeout, cancelWake) {
+  const file = join(config.inbox, 'acks', request.requestId + '.json');
+  const deadline = request.createdAt + Math.min(timeout, TTL);
+  while (Date.now() < deadline) {
+    try {
+      const stat = await lstat(file);
+      cancelWake();
+      if (stat.size > MAX_BYTES) throw new Error('ACK exceeds 64 KiB.');
+      await checkQueue(config);
+      await privatePath(file, false);
+      const handle = await open(file, constants.O_RDONLY | (constants.O_NOFOLLOW || 0));
+      let ack;
+      try {
+        const current = await handle.stat();
+        if (!current.isFile() || current.size > MAX_BYTES || current.nlink !== 1 || current.ino !== stat.ino || current.dev !== stat.dev) {
+          throw new Error('Invalid or replaced ACK file.');
+        }
+        const buffer = Buffer.alloc(MAX_BYTES + 1);
+        const { bytesRead } = await handle.read(buffer, 0, buffer.length, 0);
+        if (bytesRead > MAX_BYTES) throw new Error('ACK exceeds 64 KiB.');
+        ack = JSON.parse(buffer.subarray(0, bytesRead).toString('utf8'));
+      } finally { await handle.close(); }
+      if (!validAck(ack, request)) throw new Error('Invalid or mismatched OPEN ACK.');
+      if (!ack.success) throw new Error(typeof ack.error === 'string' ? ack.error : 'DSH rejected the open request.');
+      return ack;
+    } catch (error) { if (error.code !== 'ENOENT') throw error; }
+    await pause(100);
+  }
+  throw new Error('Timed out waiting for DSH OPEN ACK; opening was not confirmed.');
+}
+
+/** @author ddj 2026-09-28 @param {string} executable Program @param {string[]} args Arguments @param {object} options Spawn options @returns {Promise<void>} Require a successful process exit. */
+function runProcess(executable, args, options = {}) {
+  return new Promise((resolveExit, reject) => {
+    const child = spawn(executable, args, { stdio: 'ignore', timeout: 10_000, ...options });
+    child.once('error', reject);
+    child.once('exit', code => code === 0 ? resolveExit() : reject(new Error('Bridge process failed (' + code + ').')));
+  });
+}
+
+/** @author ddj 2026-09-28 @param {object} config Bridge metadata @returns {Promise<void>} Wake only the official desktop URI or selected Web base. */
+async function wake(config) {
+  const target = config.mode === 'desktop' ? 'dsh://open' : webTarget(config.base);
+  if (process.platform === 'win32') {
+    const executable = join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe');
+    const script = "$ErrorActionPreference='Stop';$s=[Diagnostics.ProcessStartInfo]::new($env:DSH_OPEN_WAKE);" +
+      "$s.UseShellExecute=$true;$s.WindowStyle=[Diagnostics.ProcessWindowStyle]::Normal;[Diagnostics.Process]::Start($s)|Out-Null";
+    await runProcess(executable, ['-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(script, 'utf16le').toString('base64')], {
+      env: { ...process.env, DSH_OPEN_WAKE: target }, windowsHide: true,
+    });
+  } else {
+    await runProcess(process.platform === 'darwin' ? '/usr/bin/open' : 'xdg-open', [target]);
+  }
+}
+
+/** @author ddj 2026-09-28 @param {object} config Bridge metadata @param {string[]} paths Absolute inputs @param {object} options Position, timeout, activation callback @returns {Promise<object>} Confirmed ACK. */
+export async function sendOpen(config, paths, options = {}) {
+  const request = makeRequest(config, paths, options);
+  await publish(config, request);
+  // Give an already running client a chance to finish without opening another Web tab.
+  const activate = options.activate || wake;
+  const timer = setTimeout(() => { Promise.resolve(activate(config)).catch(() => {}); }, 700);
+  try { return await waitAck(config, request, options.timeout ?? TTL, () => clearTimeout(timer)); }
+  finally { clearTimeout(timer); }
+}
+
+/** @author ddj 2026-09-28 @param {string[]} args CLI arguments @returns {Promise<void>} Run producer and expose errors through exit status. */
+async function main(args) {
+  let configFile = join(dirname(fileURLToPath(import.meta.url)), 'dsh-open.ini');
+  const options = {};
+  let unity = false;
+  let index = 0;
+  for (; index < args.length; index++) {
+    const arg = args[index];
+    if (arg === '--') { index++; break; }
+    if (arg === '--config') configFile = args[++index];
+    else if (arg === '--line' || arg === '--column') options[arg.slice(2)] = Number(args[++index]);
+    else if (arg === '--no-wake') unity = true;
+    else throw new Error('Unknown launcher option: ' + arg);
+  }
+  const paths = args.slice(index).map(path => resolve(path));
+  if (!paths.length) return;
+  const config = await readConfig(configFile);
+  if (unity) options.activate = async value => {
+    process.stdout.write('DSH_WAKE:' + (value.mode === 'desktop' ? 'dsh://open' : webTarget(value.base)) + '\n');
+  };
+  await sendOpen(config, paths, options);
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  main(process.argv.slice(2)).catch(error => { console.error('DSH OPEN: ' + error.message); process.exitCode = 1; });
+}

package/assets/shell/dsh-open.ps1

@@ -1,52 +1,33 @@
-# dsh-open.ps1 — DSH 文件编辑 shell launcher（csc 不可用时的降级版，轻微控制台闪窗）。
-# 行为与 dsh-open.cs 一致：读 dsh-open.ini base → 探测端口 → 投递待打开请求（有已打开
-# DSH 页面时由其就地执行，2s 未领取取回并回退开新页）。
-# 由 dsh-vscode-mode 设置页一键注册写入 HKCU\...\shell\DSHEditor\command。
-# 作者 ddj 2026-09-08
-param([string[]]$Path)
+# Windows fallback launcher. The shared helper validates the private queue and waits for ACK.
+# @author ddj 2026-09-28
+param([Parameter(ValueFromRemainingArguments = $true)][string[]]$Path)
 $ErrorActionPreference = 'Stop'
-$base = 'http://127.0.0.1:3080'
-$ini = Join-Path $PSScriptRoot 'dsh-open.ini'
-if (Test-Path $ini) {
-    foreach ($line in Get-Content $ini) {
-        if ($line -match '^\s*base\s*=\s*(.+?)\s*$') { $base = $Matches[1]; break }
-    }
-}
-
-$alive = $false
+if (-not $Path -or $Path.Count -eq 0) { exit 0 }
 try {
-    $uri = [Uri]$base
-    $port = if ($uri.IsDefaultPort) { if ($uri.Scheme -ieq 'https') { 443 } else { 80 } } else { $uri.Port }
-    $client = New-Object Net.Sockets.TcpClient
-    $alive = $client.ConnectAsync($uri.Host, $port).Wait(1000) -and $client.Connected
-    $client.Close()
-} catch { $alive = $false }
-
-if (-not $alive) {
+    $ini = Join-Path $PSScriptRoot 'dsh-open.ini'
+    $config = @{}
+    foreach ($line in [IO.File]::ReadAllLines($ini)) {
+        $equal = $line.IndexOf('=')
+        if ($equal -gt 0) { $config[$line.Substring(0, $equal).Trim()] = $line.Substring($equal + 1).Trim() }
+    }
+    foreach ($key in @('node', 'helper')) {
+        $value = $config[$key]
+        if (-not $value -or -not [IO.Path]::IsPathRooted($value) -or
+            [IO.Path]::GetFullPath($value) -ine $value -or -not [IO.File]::Exists($value)) {
+            throw "Missing absolute $key in DSH bridge configuration."
+        }
+    }
+    if ([IO.Path]::GetExtension($config.node) -ine '.exe') { throw 'A stored Node or Electron executable is required.' }
+    if ($config.nodeMode -notin @('node', 'electron')) { throw 'Missing nodeMode in DSH bridge configuration.' }
+    if ($config.nodeMode -eq 'electron') { $env:ELECTRON_RUN_AS_NODE = '1' }
+    else { Remove-Item Env:ELECTRON_RUN_AS_NODE -ErrorAction SilentlyContinue }
+    $absolute = @($Path | ForEach-Object { [IO.Path]::GetFullPath($_) })
+    & $config.node $config.helper --config $ini -- @absolute
+    if ($LASTEXITCODE -ne 0) { throw 'DSH OPEN was not confirmed. See the producer error above.' }
+    exit 0
+} catch {
+    [Console]::Error.WriteLine($_.Exception.Message)
     Add-Type -AssemblyName System.Windows.Forms
-    [System.Windows.Forms.MessageBox]::Show(
-        "DSH Web UI 未运行（$base）。`n请先启动 DSH，再使用「在 DSH 文件编辑中打开」。",
-        'DSH 文件编辑') | Out-Null
+    [System.Windows.Forms.MessageBox]::Show($_.Exception.Message, 'DSH 文件编辑') | Out-Null
     exit 1
 }
-
-$paths = @($Path | Where-Object { $_ } | ForEach-Object { [IO.Path]::GetFullPath($_) })
-if (-not $paths -or $paths.Count -eq 0) { exit 0 }
-
-# 复用已有页面：投递待打开请求，clients>0 表示有页面在（2s 后确认领取，未领取取回回退）
-$handoff = $null
-try {
-    $rpcBase = $base.TrimEnd('/') + '/edrv/rpc'
-    $body = @{ method = 'edrv.external.handoff'; args = @{ paths = $paths } } | ConvertTo-Json -Depth 4 -Compress
-    $handoff = Invoke-RestMethod -Uri $rpcBase -Method Post -ContentType 'application/json' -Body $body -TimeoutSec 4
-    if ($handoff.clients -gt 0) {
-        Start-Sleep -Milliseconds 2000
-        $stateBody = @{ method = 'edrv.external.pendingState'; args = @{ token = $handoff.token; take = $true } } | ConvertTo-Json -Depth 4 -Compress
-        $state = Invoke-RestMethod -Uri $rpcBase -Method Post -ContentType 'application/json' -Body $stateBody -TimeoutSec 4
-        if ($state.delivered) { exit 0 }
-    }
-} catch { # 移交失败回退开新页
-}
-
-$encoded = @($paths | ForEach-Object { [Uri]::EscapeDataString($_) }) -join ','
-Start-Process ($base.TrimEnd('/') + '/?edrvOpen=1&edrvPaths=' + $encoded)

package/assets/shell/dsh-open.sh

@@ -1,70 +1,29 @@
 #!/usr/bin/env bash
-# dsh-open.sh — DSH 文件编辑 shell launcher（Linux/macOS 通用，bash 3.2+）。
-# 由 dsh-vscode-mode 设置页注册写入：Nautilus 脚本 / Dolphin 服务菜单 / macOS 快速操作引用本脚本。
-# 行为：读同目录 dsh-open.ini 的 base 地址 → curl 探测（可用时，1s 超时）→ 深链打开默认浏览器。
-# 深链契约见插件 src/shared/externalOpen.ts（edrvOpen/edrvPaths/edrvLine/edrvColumn）。
-# 作者 ddj 2026-09-07
-set -u
-export LC_ALL=C
-
+# POSIX launcher; use the interpreter recorded by the selected DSH host.
+# @author ddj 2026-09-28
+set -eu
+[ "$#" -gt 0 ] || exit 0
 case "$0" in */*) ini_dir="${0%/*}" ;; *) ini_dir="." ;; esac
-base="http://127.0.0.1:3080"
+ini_dir=$(cd "$ini_dir" && pwd -P)
 ini="$ini_dir/dsh-open.ini"
-if [ -f "$ini" ]; then
-  parsed=$(sed -n 's/^[[:space:]]*[Bb]ase[[:space:]]*=[[:space:]]*//p' "$ini" | head -n 1)
-  [ -n "$parsed" ] && base="$parsed"
-fi
-
-# 逐字节 percent-encode：LC_ALL=C 下 ${s:i:1} 按字节迭代，多字节字符（中文等）安全；
-# unreserved 保留，其余全部 %XX（编码结果不含裸逗号/空白，逗号分隔契约安全）。
-urlencode() {
-  local s="$1" out="" i c hex
-  for ((i = 0; i < ${#s}; i++)); do
-    c="${s:i:1}"
-    case "$c" in
-      [A-Za-z0-9.~_-]) out+="$c" ;;
-      *) printf -v hex '%%%02X' "'$c" ; out+="$hex" ;;
-    esac
-  done
-  printf '%s' "$out"
-}
-
-alert() {
-  local msg="$1"
-  if [ "$(uname)" = "Darwin" ]; then
-    osascript -e "display dialog \"$msg\" with title \"DSH 文件编辑\"" >/dev/null 2>&1 || true
-  elif command -v notify-send >/dev/null 2>&1; then
-    notify-send "DSH 文件编辑" "$msg" || true
-  elif command -v zenity >/dev/null 2>&1; then
-    zenity --info --title "DSH 文件编辑" --text "$msg" >/dev/null 2>&1 || true
-  fi
-}
-
-# 无参数（如 Nautilus 空选）静默退出
-[ $# -gt 0 ] || exit 0
-
-# DSH 未运行提示（curl 缺失时跳过探测直接打开）
-if command -v curl >/dev/null 2>&1; then
-  if ! curl -s -o /dev/null --max-time 1 "$base"; then
-    alert "DSH Web UI 未运行（$base）。请先启动 DSH。"
-    exit 1
-  fi
-fi
-
-# 全部路径编码后合并为一个深链（多选一次打开）
-query=""
-for p in "$@"; do
-  [ -n "$p" ] || continue
-  abs=$(cd "$(dirname "$p")" 2>/dev/null && pwd)/$(basename "$p")
-  [ -e "$abs" ] || abs="$p"
-  seg=$(urlencode "$abs")
-  [ -n "$seg" ] || continue
-  if [ -z "$query" ]; then query="$seg"; else query="$query,$seg"; fi
-done
-[ -n "$query" ] || exit 0
-
-url="${base%/}/?edrvOpen=1&edrvPaths=$query"
-case "$(uname)" in
-  Darwin) exec open "$url" ;;
-  *) exec xdg-open "$url" ;;
+node=""
+node_mode=""
+helper=""
+# Read values as data; never source/eval an INI file.
+while IFS='=' read -r key value || [ -n "$key" ]; do
+  value=${value%$'\r'}
+  case "$key" in
+    node) node="$value" ;;
+    nodeMode) node_mode="$value" ;;
+    helper) helper="$value" ;;
+  esac
+done < "$ini"
+case "$node" in /*) ;; *) printf '%s\n' 'DSH: missing absolute node executable.' >&2; exit 1 ;; esac
+case "$helper" in /*) ;; *) printf '%s\n' 'DSH: missing absolute producer helper.' >&2; exit 1 ;; esac
+[ -x "$node" ] && [ -f "$helper" ] || { printf '%s\n' 'DSH: configured producer is unavailable.' >&2; exit 1; }
+case "$node_mode" in
+  electron) export ELECTRON_RUN_AS_NODE=1 ;;
+  node) unset ELECTRON_RUN_AS_NODE ;;
+  *) printf '%s\n' 'DSH: missing nodeMode.' >&2; exit 1 ;;
 esac
+exec "$node" "$helper" --config "$ini" -- "$@"