ryco-cli 0.1.23 → 0.1.24

package/dist/bin.cjs

@@ -2494,9 +2494,14 @@ const INLINE_ATTACHMENT_EXTENSIONS = /* @__PURE__ */ new Set([
 	".webp"
 ]);
 const STATIC_CONTENT_TYPES = {
+	".avif": "image/avif",
+	".bmp": "image/bmp",
 	".css": "text/css; charset=utf-8",
 	".html": "text/html; charset=utf-8",
+	".gif": "image/gif",
 	".ico": "image/x-icon",
+	".jpeg": "image/jpeg",
+	".jpg": "image/jpeg",
 	".js": "text/javascript; charset=utf-8",
 	".json": "application/json; charset=utf-8",
 	".map": "application/json; charset=utf-8",
@@ -2504,7 +2509,8 @@ const STATIC_CONTENT_TYPES = {
 	".svg": "image/svg+xml; charset=utf-8",
 	".txt": "text/plain; charset=utf-8",
 	".wasm": "application/wasm",
-	".webmanifest": "application/manifest+json; charset=utf-8"
+	".webmanifest": "application/manifest+json; charset=utf-8",
+	".webp": "image/webp"
 };
 const browserApiCorsLayer = effect_unstable_http.HttpRouter.cors({
 	allowedMethods: [
@@ -2823,16 +2829,17 @@ const projectFaviconRouteLayer = effect_unstable_http.HttpRouter.add("GET", "/ap
 	if (effect.Option.isNone(url)) return effect_unstable_http.HttpServerResponse.text("Bad Request", { status: 400 });
 	const projectCwd = url.value.searchParams.get("cwd");
 	if (!projectCwd) return effect_unstable_http.HttpServerResponse.text("Missing cwd parameter", { status: 400 });
-	const faviconFilePath = yield* (yield* ProjectFaviconResolver).resolvePath(projectCwd);
-	if (!faviconFilePath) return effect_unstable_http.HttpServerResponse.text(FALLBACK_PROJECT_FAVICON_SVG, {
+	const favicon = yield* (yield* ProjectFaviconResolver).readIcon(projectCwd);
+	if (!favicon) return effect_unstable_http.HttpServerResponse.text(FALLBACK_PROJECT_FAVICON_SVG, {
 		status: 200,
 		contentType: "image/svg+xml",
 		headers: inlineImageResponseHeaders("fallback.svg")
 	});
-	return yield* effect_unstable_http.HttpServerResponse.file(faviconFilePath, {
+	return effect_unstable_http.HttpServerResponse.uint8Array(favicon.bytes, {
 		status: 200,
-		headers: inlineImageResponseHeaders(faviconFilePath)
-	}).pipe(effect.Effect.catch(() => effect.Effect.succeed(effect_unstable_http.HttpServerResponse.text("Internal Server Error", { status: 500 }))));
+		contentType: resolveStaticContentType(favicon.path, yield* effect.Path.Path),
+		headers: inlineImageResponseHeaders(favicon.path)
+	});
 }).pipe(effect.Effect.catchTag("AuthError", respondToAuthError)));
 const AvatarFormSchema = effect_Schema.Struct({ avatar: effect_unstable_http.Multipart.SingleFileSchema });
 const PROJECT_ID_PATTERN = /^[A-Za-z0-9_-]+$/;
@@ -34793,7 +34800,7 @@ const scopedSafeTeardown = (label) => (effect$28) => effect.Effect.gen(function*
 });
 //#endregion
 //#region package.json
-var version$1 = "0.1.23";
+var version$1 = "0.1.24";
 //#endregion
 //#region src/provider/Layers/CodexProvider.ts
 const PROVIDER_PROBE_TIMEOUT_MS = 8e3;
@@ -49264,7 +49271,7 @@ async function readResourceTelemetryHistory(input) {
 //#endregion
 //#region src/diagnostics/ProcessDiagnostics.ts
 const QUERY_TIMEOUT_MS = 3e3;
-const MAX_OUTPUT_BYTES = 4194304;
+const MAX_OUTPUT_BYTES$1 = 4194304;
 const MAX_PROCESSES = 2e4;
 /** Parse fixed numeric columns; never capture command-line arguments. */
 function parseProcessTable(output) {
@@ -49345,7 +49352,7 @@ async function queryProcessTable(fresh = false) {
 		(0, node_child_process.execFile)("/bin/ps", ["-axo", "pid=,ppid=,lstart=,pcpu=,rss=,stat=,etime=,comm="], {
 			encoding: "utf8",
 			timeout: QUERY_TIMEOUT_MS,
-			maxBuffer: MAX_OUTPUT_BYTES,
+			maxBuffer: MAX_OUTPUT_BYTES$1,
 			env: {
 				...process.env,
 				LC_ALL: "C"
@@ -73603,6 +73610,8 @@ var RelayConnectionSession = class {
 	#frameDeliveryActive = false;
 	#settled = false;
 	#closed = false;
+	#authenticationStarted = false;
+	#rejectAuthentication;
 	#listeners;
 	constructor(options) {
 		this.#identity = options.identity;
@@ -73618,8 +73627,21 @@ var RelayConnectionSession = class {
 	get ready() {
 		return this.#ready;
 	}
-	async authenticate() {
-		if (this.#socket !== void 0) throw new RelayConnectionError("internal_error");
+	authenticate() {
+		if (this.#authenticationStarted || this.#closed) return Promise.reject(new RelayConnectionError("internal_error"));
+		this.#authenticationStarted = true;
+		return new Promise((resolve, reject) => {
+			this.#rejectAuthentication = reject;
+			this.#authenticate().then((ready) => {
+				this.#rejectAuthentication = void 0;
+				resolve(ready);
+			}, (error) => {
+				this.#rejectAuthentication = void 0;
+				reject(error);
+			});
+		});
+	}
+	async #authenticate() {
 		let auth;
 		try {
 			auth = await this.#identity.createRelayAuthenticationFrame(this.#hubOrigin, {
@@ -73668,6 +73690,7 @@ var RelayConnectionSession = class {
 			};
 			const onOpen = () => {
 				if (this.#closed) return;
+				if (this.#timer !== void 0) this.#scheduler.clearTimeout(this.#timer);
 				try {
 					socket.send(authBytes);
 				} catch {
@@ -73741,6 +73764,7 @@ var RelayConnectionSession = class {
 			socket.addEventListener("message", onMessage);
 			socket.addEventListener("error", onError);
 			socket.addEventListener("close", onClose);
+			this.#timer = this.#scheduler.setTimeout(() => fail(new RelayConnectionError("network")), require_collectUint8StreamText.RELAY_AUTHENTICATION_DEADLINE_MS);
 		});
 	}
 	/**
@@ -73772,6 +73796,11 @@ var RelayConnectionSession = class {
 	close() {
 		if (this.#closed) return;
 		this.#closed = true;
+		if (!this.#settled) {
+			this.#settled = true;
+			this.#rejectAuthentication?.(new RelayConnectionError("network"));
+		}
+		this.#rejectAuthentication = void 0;
 		for (const frame of this.#pendingPostReadyFrames) clearRelayFrameBytes(frame);
 		this.#pendingPostReadyFrames = [];
 		this.#clearPendingAuthentication();
@@ -89730,83 +89759,173 @@ const ProviderRegistryLive = effect.Layer.effect(ProviderRegistry, effect.Effect
 	};
 }));
 //#endregion
-//#region src/project/Layers/ProjectFaviconResolver.ts
-const FAVICON_CANDIDATES = [
-	"favicon.svg",
-	"favicon.ico",
-	"favicon.png",
-	"public/favicon.svg",
-	"public/favicon.ico",
-	"public/favicon.png",
-	"app/favicon.ico",
-	"app/favicon.png",
-	"app/icon.svg",
-	"app/icon.png",
-	"app/icon.ico",
-	"src/favicon.ico",
-	"src/favicon.svg",
-	"src/app/favicon.ico",
-	"src/app/icon.svg",
-	"src/app/icon.png",
-	"assets/icon.svg",
-	"assets/icon.png",
-	"assets/logo.svg",
-	"assets/logo.png",
-	".idea/icon.svg"
-];
-const ICON_SOURCE_FILES = [
-	"index.html",
-	"public/index.html",
-	"app/routes/__root.tsx",
-	"src/routes/__root.tsx",
-	"app/root.tsx",
-	"src/root.tsx",
-	"src/index.html"
-];
-const LINK_ICON_HTML_RE = /<link\b(?=[^>]*\brel=["'](?:icon|shortcut icon)["'])(?=[^>]*\bhref=["']([^"'?]+))[^>]*>/i;
-const LINK_ICON_OBJ_RE = /(?=[^}]*\brel\s*:\s*["'](?:icon|shortcut icon)["'])(?=[^}]*\bhref\s*:\s*["']([^"'?]+))[^}]*/i;
-function extractIconHref(source) {
-	const htmlMatch = source.match(LINK_ICON_HTML_RE);
-	if (htmlMatch?.[1]) return htmlMatch[1];
-	const objMatch = source.match(LINK_ICON_OBJ_RE);
-	if (objMatch?.[1]) return objMatch[1];
-	return null;
-}
-const makeProjectFaviconResolver = effect.Effect.gen(function* () {
-	const fileSystem = yield* effect.FileSystem.FileSystem;
-	const path = yield* effect.Path.Path;
-	const resolveIconHref = (projectCwd, href) => {
-		const clean = href.replace(/^\//, "");
-		return [path.join(projectCwd, "public", clean), path.join(projectCwd, clean)];
-	};
-	const isPathWithinProject = (projectCwd, candidatePath) => {
-		const relative = path.relative(path.resolve(projectCwd), path.resolve(candidatePath));
-		return relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative);
-	};
-	const findExistingFile = effect.Effect.fn("ProjectFaviconResolver.findExistingFile")(function* (projectCwd, candidates) {
+//#region src/project/projectFaviconWorker.ts
+/**
+* Serialized into a short-lived Node/Bun child. Keep this function self-contained:
+* opening a cloud-backed file can block in the kernel even after an async read
+* is cancelled. A separate process keeps optional icons out of the node's shared
+* filesystem/DNS worker pool, and lets the parent terminate a stalled read.
+*/
+function projectFaviconWorkerMain() {
+	const fs = process.getBuiltinModule("node:fs");
+	const path = process.getBuiltinModule("node:path");
+	const iconLimit = 524288;
+	const sourceLimit = 262144;
+	const candidates = [
+		"favicon.svg",
+		"favicon.ico",
+		"favicon.png",
+		"public/favicon.svg",
+		"public/favicon.ico",
+		"public/favicon.png",
+		"app/favicon.ico",
+		"app/favicon.png",
+		"app/icon.svg",
+		"app/icon.png",
+		"app/icon.ico",
+		"src/favicon.ico",
+		"src/favicon.svg",
+		"src/app/favicon.ico",
+		"src/app/icon.svg",
+		"src/app/icon.png",
+		"assets/icon.svg",
+		"assets/icon.png",
+		"assets/logo.svg",
+		"assets/logo.png",
+		".idea/icon.svg"
+	];
+	const sources = [
+		"index.html",
+		"public/index.html",
+		"app/routes/__root.tsx",
+		"src/routes/__root.tsx",
+		"app/root.tsx",
+		"src/root.tsx",
+		"src/index.html"
+	];
+	try {
+		const root = fs.realpathSync(process.argv[1]);
+		const read = (relative, limit) => {
+			let fd;
+			try {
+				const filename = fs.realpathSync(path.resolve(root, relative));
+				const within = path.relative(root, filename);
+				if (within === ".." || within.startsWith(`..${path.sep}`) || path.isAbsolute(within)) return null;
+				fd = fs.openSync(filename, fs.constants.O_RDONLY | fs.constants.O_NONBLOCK);
+				const stats = fs.fstatSync(fd);
+				if (!stats.isFile() || stats.size > limit) return null;
+				const bytes = Buffer.alloc(limit + 1);
+				let length = 0;
+				while (length < bytes.length) {
+					const count = fs.readSync(fd, bytes, length, bytes.length - length, null);
+					if (count === 0) break;
+					length += count;
+				}
+				return length > limit ? null : {
+					path: filename,
+					bytes: bytes.subarray(0, length)
+				};
+			} catch {
+				return null;
+			} finally {
+				if (fd !== void 0) fs.closeSync(fd);
+			}
+		};
+		const send = (icon) => {
+			process.stdout.write(JSON.stringify({
+				path: icon.path,
+				base64: icon.bytes.toString("base64")
+			}));
+		};
 		for (const candidate of candidates) {
-			if (!isPathWithinProject(projectCwd, candidate)) continue;
-			if ((yield* fileSystem.stat(candidate).pipe(effect.Effect.catch(() => effect.Effect.succeed(null))))?.type === "File") return candidate;
+			const icon = read(candidate, iconLimit);
+			if (icon) {
+				send(icon);
+				return;
+			}
 		}
-		return null;
-	});
-	return { resolvePath: effect.Effect.fn("ProjectFaviconResolver.resolvePath")(function* (cwd) {
-		for (const candidate of FAVICON_CANDIDATES) {
-			const resolved = path.join(cwd, candidate);
-			const existing = yield* findExistingFile(cwd, [resolved]);
-			if (existing) return existing;
-		}
-		for (const sourceFile of ICON_SOURCE_FILES) {
-			const sourcePath = path.join(cwd, sourceFile);
-			const source = yield* fileSystem.readFileString(sourcePath).pipe(effect.Effect.catch(() => effect.Effect.succeed(null)));
-			if (!source) continue;
-			const href = extractIconHref(source);
+		for (const source of sources) {
+			const text = read(source, sourceLimit)?.bytes.toString("utf8");
+			if (!text) continue;
+			const href = text.match(/<link\b(?=[^>]*\brel=["'](?:icon|shortcut icon)["'])(?=[^>]*\bhref=["']([^"'?]+))[^>]*>/i)?.[1] ?? text.match(/(?=[^}]*\brel\s*:\s*["'](?:icon|shortcut icon)["'])(?=[^}]*\bhref\s*:\s*["']([^"'?]+))[^}]*/i)?.[1];
 			if (!href) continue;
-			const existing = yield* findExistingFile(cwd, resolveIconHref(cwd, href));
-			if (existing) return existing;
+			const clean = href.replace(/^\//, "");
+			for (const candidate of [path.join("public", clean), clean]) {
+				const icon = read(candidate, iconLimit);
+				if (icon) {
+					send(icon);
+					return;
+				}
+			}
 		}
-		return null;
-	}) };
+	} catch {}
+	process.stdout.write("null");
+}
+const MAX_OUTPUT_BYTES = 786432;
+const WORKER_SCRIPT = `(${projectFaviconWorkerMain.toString()})()`;
+function readProjectFavicon(cwd, options = {}) {
+	return new Promise((resolve) => {
+		if (options.signal?.aborted) {
+			resolve(null);
+			return;
+		}
+		let child;
+		const abort = () => {
+			child?.kill("SIGKILL");
+		};
+		const cleanup = () => options.signal?.removeEventListener("abort", abort);
+		options.signal?.addEventListener("abort", abort, { once: true });
+		try {
+			child = (options.execFile ?? node_child_process.execFile)(process.execPath, [
+				"--eval",
+				WORKER_SCRIPT,
+				"--",
+				cwd
+			], {
+				env: {
+					...process.env,
+					ELECTRON_RUN_AS_NODE: "1",
+					NODE_OPTIONS: void 0,
+					NODE_PATH: void 0
+				},
+				encoding: "utf8",
+				timeout: options.timeoutMs ?? 1500,
+				killSignal: "SIGKILL",
+				maxBuffer: MAX_OUTPUT_BYTES,
+				windowsHide: true
+			}, (error, stdout) => {
+				cleanup();
+				if (error) {
+					resolve(null);
+					return;
+				}
+				try {
+					const result = JSON.parse(stdout);
+					if (typeof result !== "object" || result === null || !("path" in result) || !("base64" in result) || typeof result.path !== "string" || typeof result.base64 !== "string") {
+						resolve(null);
+						return;
+					}
+					const bytes = Buffer.from(result.base64, "base64");
+					resolve(bytes.length <= 524288 ? {
+						path: result.path,
+						bytes
+					} : null);
+				} catch {
+					resolve(null);
+				}
+			});
+			if (options.signal?.aborted) abort();
+		} catch {
+			cleanup();
+			resolve(null);
+		}
+	});
+}
+//#endregion
+//#region src/project/Layers/ProjectFaviconResolver.ts
+const makeProjectFaviconResolver = effect.Effect.gen(function* () {
+	const workers = yield* effect_Semaphore.make(2);
+	return { readIcon: (cwd) => workers.withPermit(effect.Effect.promise((signal) => readProjectFavicon(cwd, { signal }))).pipe(effect.Effect.timeout("5 seconds"), effect.Effect.catch(() => effect.Effect.succeed(null))) };
 });
 const ProjectFaviconResolverLive = effect.Layer.effect(ProjectFaviconResolver, makeProjectFaviconResolver);
 //#endregion
@@ -92052,6 +92171,23 @@ const makeTraceSink = effect.Effect.fn("makeTraceSink")(function* (options) {
 	};
 });
 //#endregion
+//#region src/observability/HttpHeaderRedaction.ts
+/** Capture policy before HTTP tracing defers span completion outside its request context. */
+function makeHttpHeaderRedactor(names) {
+	const redactedNames = [
+		...names,
+		require_collectUint8StreamText.LOCAL_INTRODUCTION_CONTROL_HEADER,
+		"dpop",
+		"dpop-nonce"
+	];
+	return (key, value) => {
+		const match = /^http\.(?:request|response)\.header\.(.+)$/iu.exec(key);
+		if (!match) return value;
+		const name = match[1].toLowerCase();
+		return String(effect_unstable_http.Headers.redact(effect_unstable_http.Headers.fromInput({ [name]: String(value) }), redactedNames)[name]);
+	};
+}
+//#endregion
 //#region src/observability/LocalFileTracer.ts
 var LocalFileSpan = class {
 	_tag = "Span";
@@ -92068,9 +92204,11 @@ var LocalFileSpan = class {
 	events;
 	delegate;
 	push;
-	constructor(options, delegate, push) {
+	redactAttribute;
+	constructor(options, delegate, push, redactAttribute) {
 		this.delegate = delegate;
 		this.push = push;
+		this.redactAttribute = redactAttribute;
 		this.name = delegate.name;
 		this.spanId = delegate.spanId;
 		this.traceId = delegate.traceId;
@@ -92097,8 +92235,9 @@ var LocalFileSpan = class {
 		if (this.sampled) this.push(spanToTraceRecord(this));
 	}
 	attribute(key, value) {
-		this.attributes.set(key, value);
-		this.delegate.attribute(key, value);
+		const redacted = this.redactAttribute(key, value);
+		this.attributes.set(key, redacted);
+		this.delegate.attribute(key, redacted);
 	}
 	event(name, startTime, attributes) {
 		const nextAttributes = attributes ?? {};
@@ -92115,6 +92254,7 @@ var LocalFileSpan = class {
 	}
 };
 const makeLocalFileTracer = effect.Effect.fn("makeLocalFileTracer")(function* (options) {
+	const redactAttribute = makeHttpHeaderRedactor(yield* effect.Effect.service(effect_unstable_http.Headers.CurrentRedactedNames));
 	const sink = options.sink ?? (yield* makeTraceSink({
 		filePath: options.filePath,
 		maxBytes: options.maxBytes,
@@ -92124,7 +92264,7 @@ const makeLocalFileTracer = effect.Effect.fn("makeLocalFileTracer")(function* (o
 	const delegate = options.delegate ?? effect.Tracer.make({ span: (spanOptions) => new effect.Tracer.NativeSpan(spanOptions) });
 	return effect.Tracer.make({
 		span(spanOptions) {
-			return new LocalFileSpan(spanOptions, delegate.span(spanOptions), sink.push);
+			return new LocalFileSpan(spanOptions, delegate.span(spanOptions), sink.push, redactAttribute);
 		},
 		...delegate.context ? { context: delegate.context } : {}
 	});