muon-ui 0.9.0 → 0.10.0

package/dist/cli.cjs

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 /*!
 * name: muon-ui
-* version: 0.9.0
+* version: 0.10.0
 * description: A multi-platform GUI application framework that uses CEF as its backend
 * author: Kouji Matsui (@kekyo@mi.kekyo.net)
 * license: MIT
 * repository.url: https://github.com/kekyo/muon-ui.git
-* git.commit.hash: 3437b522a51d8772713b72722b109c5ff30fc711
+* git.commit.hash: 7bf3c14f4ebc9ae604525ea66a10289463c086ab
 */
-const require_vite_internals = require("./vite-internals-HXgH7b5M.cjs");
+const require_vite_internals = require("./vite-internals-DnxA6RxV.cjs");
 let commander = require("commander");
 let node_child_process = require("node:child_process");
 let node_fs = require("node:fs");
@@ -274,8 +274,13 @@ var supportedPackTypes = [
 	"deb",
 	"nsis"
 ];
+var supportedLinuxSandboxModes = ["disabled", "setuid"];
 var defaultArtifactsDirectory = "artifacts";
 var defaultPackageBuildDirectory = ".muon/pack";
+var systemRuntimeRoot = "/var/lib/muon/apps";
+var systemCefCacheRoot = "/var/cache/muon/cef";
+var runtimeHelperExecutableName = "muon-runtime-helper";
+var debGtk3RuntimeDependency = "libgtk-3-0t64 | libgtk-3-0";
 var isJsonObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var readJsonObjectFile = async (path) => {
 	const parsed = (0, import_dist.parse)(await (0, node_fs_promises.readFile)(path, "utf8"));
@@ -319,6 +324,12 @@ var normalizePackTypes = (types) => {
 	for (const type of normalized) if (!supportedPackTypes.includes(type)) throw new Error(`Unsupported muon pack type: ${type}`);
 	return [...new Set(normalized)];
 };
+var normalizeLinuxSandboxMode = (mode) => {
+	if (mode === void 0) return "disabled";
+	const normalized = mode.trim().toLowerCase();
+	if (supportedLinuxSandboxModes.includes(normalized)) return normalized;
+	throw new Error(`Unsupported Linux sandbox mode: ${mode}`);
+};
 var packTargetSelectorTargets = {
 	linux: [
 		"linux-amd64",
@@ -366,6 +377,10 @@ var createPackTargetPlan = (types, targets) => {
 	if (plan.length === 0) throw new Error("No valid muon pack target and type combinations.");
 	return plan;
 };
+var validateLinuxSandboxModeForPlan = (mode, plan) => {
+	if (mode === "disabled") return;
+	for (const entry of plan) if (require_vite_internals.getMuonTargetDescriptor(entry.target).os !== "linux" || entry.types.length !== 1 || entry.types[0] !== "deb") throw new Error("--linux-sandbox=setuid is supported only for Linux deb packages. Specify --type deb with Linux targets.");
+};
 var runTool = async (executable, args, cwd, environment) => {
 	const child = (0, node_child_process.spawn)(executable, [...args], {
 		cwd,
@@ -451,7 +466,7 @@ var packageTarGz = async (target, metadata, artifactsRoot) => {
 		path: outputPath
 	};
 };
-var packageDeb = async (root, target, metadata, artifactsRoot, packageBuildRoot, environment) => {
+var packageDeb = async (root, target, metadata, artifactsRoot, packageBuildRoot, environment, linuxSandbox, progress) => {
 	const descriptor = require_vite_internals.getMuonTargetDescriptor(target.target);
 	if (descriptor.os !== "linux") throw new Error(`Unsupported deb target: ${target.target}`);
 	const architecture = descriptor.arch;
@@ -461,12 +476,23 @@ var packageDeb = async (root, target, metadata, artifactsRoot, packageBuildRoot,
 		force: true
 	});
 	const installedDist = (0, node_path.join)((0, node_path.join)(packageRoot, "usr", "lib", metadata.packageName), target.distributionDirectoryName);
+	const privilegedPreparePath = `/usr/lib/${metadata.packageName}/${target.distributionDirectoryName}/${runtimeHelperExecutableName}`;
+	const systemRuntimePath = `${systemRuntimeRoot}/${metadata.packageName}/${target.target}/runtime`;
 	await (0, node_fs_promises.mkdir)(installedDist, { recursive: true });
 	await (0, node_fs_promises.cp)(target.outputPath, installedDist, { recursive: true });
+	if (linuxSandbox === "setuid") {
+		if (target.runtimeHelperPath === void 0) throw new Error(`Muon runtime helper is unavailable for setuid deb target: ${target.target}`);
+		await (0, node_fs_promises.chmod)((0, node_path.join)(installedDist, runtimeHelperExecutableName), 2541);
+	}
 	await (0, node_fs_promises.writeFile)((0, node_path.join)(installedDist, "muon-install.json"), `${JSON.stringify({
 		type: "deb",
 		packageName: metadata.packageName,
-		launcherPath: `/usr/bin/${metadata.packageName}`
+		launcherPath: `/usr/bin/${metadata.packageName}`,
+		...linuxSandbox === "setuid" ? {
+			runtimeMode: "system-setuid",
+			systemRuntimePath,
+			privilegedPreparePath
+		} : {}
 	}, void 0, 2)}\n`);
 	const binPath = (0, node_path.join)(packageRoot, "usr", "bin", metadata.packageName);
 	const launcherName = (0, node_path.basename)(target.launcherPath);
@@ -497,12 +523,47 @@ var packageDeb = async (root, target, metadata, artifactsRoot, packageBuildRoot,
 		`Version: ${metadata.version}`,
 		`Architecture: ${architecture}`,
 		`Maintainer: ${metadata.author}`,
+		`Depends: ${debGtk3RuntimeDependency}`,
 		`Description: ${metadata.description}`,
 		""
 	].join("\n"));
+	if (linuxSandbox === "setuid") {
+		const postinstPath = (0, node_path.join)(packageRoot, "DEBIAN", "postinst");
+		await (0, node_fs_promises.writeFile)(postinstPath, [
+			"#!/bin/sh",
+			"set -e",
+			`helper=${JSON.stringify(privilegedPreparePath)}`,
+			"if [ ! -f \"$helper\" ]; then",
+			"  echo \"muon-runtime-helper is missing: $helper\" >&2",
+			"  exit 1",
+			"fi",
+			"chown root:root \"$helper\"",
+			"chmod 4755 \"$helper\"",
+			"exit 0",
+			""
+		].join("\n"));
+		await (0, node_fs_promises.chmod)(postinstPath, 493);
+		const postrmPath = (0, node_path.join)(packageRoot, "DEBIAN", "postrm");
+		await (0, node_fs_promises.writeFile)(postrmPath, [
+			"#!/bin/sh",
+			"set -e",
+			"if [ \"$1\" = \"purge\" ]; then",
+			`  rm -rf ${JSON.stringify(`${systemRuntimeRoot}/${metadata.packageName}`)}`,
+			`  # Shared CEF cache ${systemCefCacheRoot} is intentionally preserved.`,
+			"fi",
+			"exit 0",
+			""
+		].join("\n"));
+		await (0, node_fs_promises.chmod)(postrmPath, 493);
+	}
 	const outputPath = (0, node_path.join)(artifactsRoot, `${metadata.packageName}-${metadata.version}-${architecture}.deb`);
 	await (0, node_fs_promises.mkdir)((0, node_path.dirname)(outputPath), { recursive: true });
+	progress?.({
+		phase: "pack",
+		status: "Running dpkg-deb"
+	});
 	await runTool("dpkg-deb", [
+		"--root-owner-group",
 		"--build",
 		packageRoot,
 		outputPath
@@ -516,7 +577,7 @@ var packageDeb = async (root, target, metadata, artifactsRoot, packageBuildRoot,
 var escapeNsis = (value) => value.replaceAll("\\", "\\\\").replaceAll("\"", "$\\\"");
 var nsisUninstallRegistryRoot = "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall";
 var createNsisUninstallRegistryKey = (appId) => `${nsisUninstallRegistryRoot}\\${appId}`;
-var packageNsis = async (root, target, metadata, windowsResource, artifactsRoot, packageBuildRoot, environment) => {
+var packageNsis = async (root, target, metadata, windowsResource, artifactsRoot, packageBuildRoot, environment, progress) => {
 	const descriptor = require_vite_internals.getMuonTargetDescriptor(target.target);
 	if (descriptor.os !== "windows") throw new Error(`Unsupported nsis target: ${target.target}`);
 	const scriptPath = (0, node_path.join)(packageBuildRoot, "nsis", `${metadata.packageName}-${target.target}.nsi`);
@@ -569,6 +630,10 @@ var packageNsis = async (root, target, metadata, windowsResource, artifactsRoot,
 		"FunctionEnd",
 		""
 	].join("\n"));
+	progress?.({
+		phase: "pack",
+		status: "Running makensis"
+	});
 	await runTool("makensis", [scriptPath], root, environment);
 	if (await statOrUndefined(outputPath) === void 0) throw new Error(`makensis did not create installer: ${outputPath}`);
 	return {
@@ -617,6 +682,7 @@ var reapplyPackWindowsResources = async (targets, resource, root, environment) =
 * @returns Generated package artifacts.
 */
 var packMuonApp = async (options) => {
+	const progress = options.progress;
 	const cwd = (0, node_path.resolve)(options.root ?? process.cwd());
 	const environment = options.environment ?? process.env;
 	const project = await require_vite_internals.loadMuonBuildSequenceProject(cwd);
@@ -626,12 +692,15 @@ var packMuonApp = async (options) => {
 	const artifactsRoot = (0, node_path.resolve)(root, options.artifactsDir ?? defaultArtifactsDirectory);
 	const packageBuildRoot = (0, node_path.resolve)(root, defaultPackageBuildDirectory);
 	const types = normalizePackTypes(options.types);
+	const linuxSandbox = normalizeLinuxSandboxMode(options.linuxSandbox);
 	const pluginBuildOptions = require_vite_internals.resolveMuonViteBuildOptions(project.pluginOptions);
 	const targetPlan = createPackTargetPlan(types, resolvePackTargetCandidates(options, pluginBuildOptions));
+	validateLinuxSandboxModeForPlan(linuxSandbox, targetPlan);
 	const buildOptions = {
 		root: cwd,
 		targets: targetPlan.map((entry) => entry.target),
-		allTargets: false
+		allTargets: false,
+		includeRuntimeHelper: linuxSandbox === "setuid"
 	};
 	const windowsResourceOptions = require_vite_internals.mergeMuonWindowsResourceOptions(options.windowsResource, pluginBuildOptions.windowsResource);
 	const linuxDesktopOptions = require_vite_internals.mergeMuonLinuxDesktopOptions(options.linuxDesktop, pluginBuildOptions.linuxDesktop);
@@ -643,6 +712,7 @@ var packMuonApp = async (options) => {
 	if (options.packageDirectory !== void 0) buildOptions.packageDirectory = options.packageDirectory;
 	if (windowsResourceOptions !== void 0) buildOptions.windowsResource = windowsResourceOptions;
 	if (linuxDesktopOptions !== void 0) buildOptions.linuxDesktop = linuxDesktopOptions;
+	if (progress !== void 0) buildOptions.progress = progress;
 	const windowsResourceConfig = await require_vite_internals.readMuonConfigForWindowsResource(root, options.configPath);
 	const windowsResource = await require_vite_internals.resolveMuonWindowsResource({
 		root,
@@ -660,6 +730,10 @@ var packMuonApp = async (options) => {
 			copyright: void 0
 		}
 	});
+	progress?.({
+		phase: "pack",
+		status: "Building distributions"
+	});
 	const build = await require_vite_internals.runMuonBuildSequence(buildOptions, project);
 	if (options.packageVersion !== void 0) await reapplyPackWindowsResources(build.targets, windowsResource, root, environment);
 	const typesByTarget = new Map(targetPlan.map((entry) => [entry.target, entry.types]));
@@ -677,10 +751,25 @@ var packMuonApp = async (options) => {
 	});
 	await (0, node_fs_promises.mkdir)(artifactsRoot, { recursive: true });
 	const artifacts = [];
-	for (const target of build.targets) for (const type of typesByTarget.get(target.target) ?? []) if (type === "zip") artifacts.push(await packageZip(target, metadata, artifactsRoot));
-	else if (type === "tar.gz") artifacts.push(await packageTarGz(target, metadata, artifactsRoot));
-	else if (type === "deb") artifacts.push(await packageDeb(root, target, metadata, artifactsRoot, packageBuildRoot, environment));
-	else artifacts.push(await packageNsis(root, target, metadata, windowsResource, artifactsRoot, packageBuildRoot, environment));
+	const totalArtifacts = targetPlan.reduce((sum, entry) => sum + entry.types.length, 0);
+	let artifactIndex = 0;
+	for (const target of build.targets) for (const type of typesByTarget.get(target.target) ?? []) {
+		artifactIndex += 1;
+		progress?.({
+			phase: "pack",
+			status: `Packaging ${type} ${target.target} (${artifactIndex}/${totalArtifacts})`
+		});
+		let artifact;
+		if (type === "zip") artifact = await packageZip(target, metadata, artifactsRoot);
+		else if (type === "tar.gz") artifact = await packageTarGz(target, metadata, artifactsRoot);
+		else if (type === "deb") artifact = await packageDeb(root, target, metadata, artifactsRoot, packageBuildRoot, environment, linuxSandbox, progress);
+		else artifact = await packageNsis(root, target, metadata, windowsResource, artifactsRoot, packageBuildRoot, environment, progress);
+		artifacts.push(artifact);
+		progress?.({
+			phase: "pack",
+			status: `Wrote ${artifact.path}`
+		});
+	}
 	return {
 		root,
 		packageName: metadata.packageName,
@@ -694,8 +783,8 @@ var packMuonApp = async (options) => {
 };
 //#endregion
 //#region src/generated/packageMetadata.ts
-var version = "0.9.0";
-var git_commit_hash = "3437b522a51d8772713b72722b109c5ff30fc711";
+var version = "0.10.0";
+var git_commit_hash = "7bf3c14f4ebc9ae604525ea66a10289463c086ab";
 //#endregion
 //#region src/cli.ts
 var readTargetValues = (value) => {
@@ -761,7 +850,15 @@ var runBuildCommand = async (commandOptions) => {
 	if (commandOptions.name !== void 0) buildOptions.appName = commandOptions.name;
 	if (commandOptions.appId !== void 0) buildOptions.appId = commandOptions.appId;
 	if (commandOptions.packageDirectory !== void 0) buildOptions.packageDirectory = commandOptions.packageDirectory;
-	const result = await require_vite_internals.runMuonBuildSequence(buildOptions);
+	const progressRenderer = require_vite_internals.createMuonProgressRenderer();
+	buildOptions.progress = progressRenderer.report;
+	const result = await (async () => {
+		try {
+			return await require_vite_internals.runMuonBuildSequence(buildOptions);
+		} finally {
+			progressRenderer.flush();
+		}
+	})();
 	if (commandOptions.json === true) console.log(JSON.stringify(result, null, 2));
 	else for (const target of result.targets) console.log(target.outputPath);
 };
@@ -781,6 +878,7 @@ var runPackCommand = async (commandOptions) => {
 	if (windowsResource !== void 0) packOptions.windowsResource = windowsResource;
 	const linuxDesktop = createLinuxDesktopOptions(commandOptions);
 	if (linuxDesktop !== void 0) packOptions.linuxDesktop = linuxDesktop;
+	if (commandOptions.linuxSandbox !== void 0) packOptions.linuxSandbox = commandOptions.linuxSandbox;
 	if (commandOptions.name !== void 0) packOptions.appName = commandOptions.name;
 	if (commandOptions.appId !== void 0) packOptions.appId = commandOptions.appId;
 	if (commandOptions.packageDirectory !== void 0) packOptions.packageDirectory = commandOptions.packageDirectory;
@@ -789,7 +887,15 @@ var runPackCommand = async (commandOptions) => {
 	if (commandOptions.packageVersion !== void 0) packOptions.packageVersion = commandOptions.packageVersion;
 	if (commandOptions.description !== void 0) packOptions.description = commandOptions.description;
 	if (commandOptions.author !== void 0) packOptions.author = commandOptions.author;
-	const result = await packMuonApp(packOptions);
+	const progressRenderer = require_vite_internals.createMuonProgressRenderer();
+	packOptions.progress = progressRenderer.report;
+	const result = await (async () => {
+		try {
+			return await packMuonApp(packOptions);
+		} finally {
+			progressRenderer.flush();
+		}
+	})();
 	if (commandOptions.json === true) console.log(JSON.stringify(result, null, 2));
 	else for (const artifact of result.artifacts) console.log(artifact.path);
 };
@@ -871,7 +977,7 @@ var createCliCommand = () => {
 	program.command("build").description("Build CEF-free Muon app distribution directories").option("--target <target>", "public target or comma-separated public targets", appendTargetValues, []).option("--all", "build all supported targets").option("--assets <path>", "asset root path").option("--config <path>", "muon config path").option("--icon <path>", "static application PNG icon path").option("--windows-icon <path>", "Windows PNG icon resource path").option("--windows-product-name <name>", "Windows product name").option("--windows-file-description <text>", "Windows file description").option("--windows-company-name <name>", "Windows company name").option("--windows-version <version>", "Windows resource version").option("--windows-copyright <text>", "Windows legal copyright").option("--linux-desktop-id <id>", "Linux desktop entry identifier").option("--linux-name <name>", "Linux desktop display name").option("--linux-comment <text>", "Linux desktop comment").option("--linux-icon <path>", "Linux desktop PNG icon path").option("--linux-categories <list>", "Linux desktop categories").option("--linux-startup-notify <boolean>", "Linux startup notification").option("--out-dir <path>", "output root directory").option("--name <name>", "launcher file name").option("--app-id <id>", "stable application identifier").option("--package-directory <path>", "Muon package dist directory").option("--json", "write result as JSON").action(async (options) => {
 		await runBuildCommand(options);
 	});
-	program.command("pack").description("Build and package a Muon app").option("--type <type>", "package type or comma-separated package types: zip, tar.gz, tgz, deb, nsis (default: all)", appendPackTypeValues).option("--target <target>", "public target, platform, arch, or comma-separated selectors", appendTargetValues, []).option("--all", "build all supported targets").option("--config <path>", "muon config path").option("--icon <path>", "static application PNG icon path").option("--windows-icon <path>", "Windows PNG icon resource path").option("--windows-product-name <name>", "Windows product name").option("--windows-file-description <text>", "Windows file description").option("--windows-company-name <name>", "Windows company name").option("--windows-version <version>", "Windows resource version").option("--windows-copyright <text>", "Windows legal copyright").option("--linux-desktop-id <id>", "Linux desktop entry identifier").option("--linux-name <name>", "Linux desktop display name").option("--linux-comment <text>", "Linux desktop comment").option("--linux-icon <path>", "Linux desktop PNG icon path").option("--linux-categories <list>", "Linux desktop categories").option("--linux-startup-notify <boolean>", "Linux startup notification").option("--name <name>", "launcher file name").option("--app-id <id>", "stable application identifier").option("--package-directory <path>", "Muon package dist directory").option("--artifacts-dir <path>", "package artifact output directory").option("--package-name <name>", "package name override").option("--package-version <version>", "package version override").option("--description <text>", "package description override").option("--author <text>", "package author override").option("--json", "write result as JSON").action(async (options) => {
+	program.command("pack").description("Build and package a Muon app").option("--type <type>", "package type or comma-separated package types: zip, tar.gz, tgz, deb, nsis (default: all)", appendPackTypeValues).option("--target <target>", "public target, platform, arch, or comma-separated selectors", appendTargetValues, []).option("--all", "build all supported targets").option("--config <path>", "muon config path").option("--icon <path>", "static application PNG icon path").option("--windows-icon <path>", "Windows PNG icon resource path").option("--windows-product-name <name>", "Windows product name").option("--windows-file-description <text>", "Windows file description").option("--windows-company-name <name>", "Windows company name").option("--windows-version <version>", "Windows resource version").option("--windows-copyright <text>", "Windows legal copyright").option("--linux-desktop-id <id>", "Linux desktop entry identifier").option("--linux-name <name>", "Linux desktop display name").option("--linux-comment <text>", "Linux desktop comment").option("--linux-icon <path>", "Linux desktop PNG icon path").option("--linux-categories <list>", "Linux desktop categories").option("--linux-startup-notify <boolean>", "Linux startup notification").option("--linux-sandbox <mode>", "Linux deb CEF sandbox mode: disabled, setuid").option("--name <name>", "launcher file name").option("--app-id <id>", "stable application identifier").option("--package-directory <path>", "Muon package dist directory").option("--artifacts-dir <path>", "package artifact output directory").option("--package-name <name>", "package name override").option("--package-version <version>", "package version override").option("--description <text>", "package description override").option("--author <text>", "package author override").option("--json", "write result as JSON").action(async (options) => {
 		await runPackCommand(options);
 	});
 	const devCommand = program.command("run").description("Launch Muon directly with local development assets").option("--muon-path <path>", "Muon runtime file root").option("--cef-path <path>", "CEF file root").option("--stage-dir <path>", "prepared runtime output directory").option("--config <path>", "muon config path").option("--assets <path>", "development asset directory").option("--no-debugger", "disable Muon debugger defaults").option("--json", "write result as JSON").action(async (options) => {