termdock 1.4.258 → 1.4.260

package/dist/client/sw-notifications.js

@@ -0,0 +1,228 @@
+self.addEventListener('push', (event) => {
+  let payload = {};
+  try {
+    payload = event.data ? event.data.json() : {};
+  } catch {
+    payload = { title: 'Termdock', body: event.data ? event.data.text() : '' };
+  }
+  const alertStyle = payload.alertStyle || 'normal';
+  const notificationOptions = {
+    body: payload.body,
+    tag: payload.tag,
+    icon: '/pwa-192x192.png',
+    badge: '/maskable-icon-512x512.png',
+    silent: alertStyle === 'quiet',
+    requireInteraction: alertStyle === 'persistent',
+    renotify: alertStyle === 'persistent' && Boolean(payload.tag),
+    data: {
+      url: payload.url || '/',
+      sessionId: payload.sessionId,
+      targetPeerId: payload.targetPeerId,
+    },
+  };
+  event.waitUntil((async () => {
+    // iOS Safari treats a push that never produces a visible notification as
+    // an "invisible push" and revokes the site's permission, and it requires
+    // the notification to be posted immediately (not after async work). So
+    // the SW always shows it; open windows only get the postMessage so the
+    // app could react in place (click focus goes through notificationclick).
+    try {
+      await self.registration.showNotification(payload.title || 'Termdock', notificationOptions);
+    } catch (error) {
+      // Safari throws NotSupportedError when renotify:true but no prior
+      // notification with the same tag exists.  Retry without renotify —
+      // tag-based replacement still works regardless.
+      if (error.name === 'NotSupportedError' && notificationOptions.renotify) {
+        await self.registration.showNotification(payload.title || 'Termdock', {
+          ...notificationOptions,
+          renotify: false,
+        });
+      } else {
+        throw error;
+      }
+    }
+    const windows = await self.clients.matchAll({ type: 'window', includeUncontrolled: true });
+    for (const client of windows) {
+      if (client.visibilityState === 'visible') {
+        client.postMessage({ type: 'termdock:push-received', payload });
+      }
+    }
+    if ('setAppBadge' in self.navigator) {
+      try {
+        const notifications = await self.registration.getNotifications();
+        await self.navigator.setAppBadge(notifications.length);
+      } catch {
+        // Badge accounting is best-effort (iOS lacks getNotifications).
+      }
+    }
+  })());
+});
+
+self.addEventListener('pushsubscriptionchange', (event) => {
+  event.waitUntil((async () => {
+    try {
+      let subscription = event.newSubscription || await self.registration.pushManager.getSubscription();
+      if (!subscription && event.oldSubscription?.options) {
+        subscription = await self.registration.pushManager.subscribe(event.oldSubscription.options);
+      }
+      if (subscription) await self.termdockBackground?.renewSubscriptions(subscription.toJSON());
+    } catch (error) {
+      console.warn('Background encrypted subscription sync failed', error);
+    }
+    const windows = await self.clients.matchAll({ type: 'window', includeUncontrolled: true });
+    for (const client of windows) {
+      client.postMessage({ type: 'termdock:push-subscription-changed' });
+    }
+  })());
+});
+
+async function reportNotificationClick(stage, traceId, data = {}) {
+  try { await self.termdockBackground?.reportClick(stage, traceId, data); }
+  catch { console.debug(`PWA_NOTIFICATION_CLICK ${stage}`, { traceId, ...data }); }
+}
+
+const NOTIFICATION_TARGET_CACHE = 'termdock-notification-target-v1';
+const NOTIFICATION_TARGET_KEY = '/__termdock-notification-target';
+
+async function storeNotificationTarget(sessionId, traceId, targetPeerId) {
+  if (!sessionId || typeof caches === 'undefined') return false;
+  try {
+    const cache = await caches.open(NOTIFICATION_TARGET_CACHE);
+    await cache.put(NOTIFICATION_TARGET_KEY, new Response(JSON.stringify({
+      sessionId,
+      targetPeerId,
+      traceId,
+      clickedAt: Date.now(),
+    }), { headers: { 'Content-Type': 'application/json' } }));
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+async function clearStoredNotificationTarget() {
+  if (typeof caches === 'undefined') return;
+  try {
+    const cache = await caches.open(NOTIFICATION_TARGET_CACHE);
+    await cache.delete(NOTIFICATION_TARGET_KEY);
+  } catch {
+    // The page-side consumer remains the fallback.
+  }
+}
+
+function requestFocusAcknowledgement(client, sessionId, targetPeerId) {
+  return new Promise((resolve) => {
+    const channel = new MessageChannel();
+    let settled = false;
+    const finish = (acknowledged) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timeout);
+      channel.port1.close();
+      resolve(acknowledged);
+    };
+    const timeout = setTimeout(() => finish(false), 1000);
+    channel.port1.onmessage = (messageEvent) => {
+      finish(messageEvent.data?.type === 'termdock:focus-session-ack');
+    };
+    try {
+      client.postMessage(
+        { type: 'termdock:focus-session', sessionId, targetPeerId },
+        [channel.port2],
+      );
+    } catch {
+      finish(false);
+    }
+  });
+}
+
+self.addEventListener('notificationclick', (event) => {
+  event.notification.close();
+
+  const data = event.notification.data || {};
+  const traceId = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+
+  event.waitUntil((async () => {
+    await reportNotificationClick('sw-click-start', traceId, {
+      targetPeerId: data.targetPeerId,
+      sessionId: data.sessionId || null,
+      url: data.url || null,
+      tag: event.notification.tag || null,
+    });
+    const targetStored = await storeNotificationTarget(data.sessionId, traceId, data.targetPeerId);
+    await reportNotificationClick('sw-target-stored', traceId, { stored: targetStored });
+
+    // Badge cleanup is strictly best-effort. iOS may expose setAppBadge while
+    // ServiceWorkerRegistration.getNotifications is unavailable; allowing that
+    // TypeError to escape aborts the entire click handler before navigation.
+    try {
+      if (
+        'setAppBadge' in self.navigator
+        && typeof self.registration.getNotifications === 'function'
+      ) {
+        const notifications = await self.registration.getNotifications();
+        await self.navigator.setAppBadge(Math.max(0, notifications.length - 1));
+        await reportNotificationClick('sw-badge-updated', traceId, { count: notifications.length });
+      } else {
+        await reportNotificationClick('sw-badge-api-unavailable', traceId, {
+          hasSetAppBadge: 'setAppBadge' in self.navigator,
+          hasGetNotifications: typeof self.registration.getNotifications === 'function',
+        });
+      }
+    } catch (error) {
+      await reportNotificationClick('sw-badge-failed', traceId, {
+        error: error instanceof Error ? error.message : String(error),
+      });
+    }
+    const clients = await self.clients.matchAll({
+      type: 'window',
+      includeUncontrolled: true,
+    });
+    await reportNotificationClick('sw-clients-matched', traceId, {
+      count: clients.length,
+      clients: clients.map((client) => ({ url: client.url, visibilityState: client.visibilityState })),
+    });
+
+    // 已有窗口：focus + postMessage 原地切换。冷启动时 iOS 会先创建
+    // WindowClient，但页面监听器尚未挂载；此时不再 navigate（会生成
+    // 第二个页面），而由冷启动页从 Cache Storage 消费持久化的目标。
+    for (const client of clients) {
+      const clientUrl = new URL(client.url);
+      if (clientUrl.origin === self.location.origin && client.frameType === 'top-level' && 'focus' in client) {
+        // Queue the requested session before focus emits the page's resume
+        // event. This lets the connection scheduler promote the notification
+        // target instead of briefly reconnecting the previously active tab.
+        const acknowledgement = data.sessionId && 'postMessage' in client
+          ? requestFocusAcknowledgement(client, data.sessionId, data.targetPeerId)
+          : Promise.resolve(false);
+        await client.focus();
+        const acknowledged = await acknowledgement;
+        await reportNotificationClick('sw-focus-ack-result', traceId, {
+          acknowledged,
+          clientUrl: client.url,
+          visibilityState: client.visibilityState,
+        });
+        if (acknowledged) await clearStoredNotificationTarget();
+        else await reportNotificationClick('sw-cache-fallback', traceId, { clientUrl: client.url });
+        return;
+      }
+    }
+
+    // 无已有窗口：打开新窗口并标记 _notif=1，前端检测到有其他实例在场时自动关闭。
+    if (self.clients.openWindow) {
+      const targetUrl = new URL(typeof data.targetPeerId === 'string' ? '/' : data.url || '/', self.location.origin);
+      if (data.sessionId) {
+        targetUrl.searchParams.set('session', data.sessionId);
+      }
+      if (typeof data.targetPeerId === 'string') targetUrl.searchParams.set('service', data.targetPeerId);
+      targetUrl.searchParams.set('_notif', '1');
+      targetUrl.searchParams.set('_notifTrace', traceId);
+      const openedClient = await self.clients.openWindow(targetUrl.href);
+      await reportNotificationClick('sw-open-window-result', traceId, {
+        targetUrl: targetUrl.href,
+        opened: Boolean(openedClient),
+        resultUrl: openedClient?.url || null,
+      });
+    }
+  })().finally(() => self.termdockBackground?.flushLogs().catch(() => {})));
+});

package/dist/client/sw-secure-api.js

@@ -0,0 +1,138 @@
+/* Native resource loads cannot use window.fetch hooks. Keep API traffic inside the
+ * requesting document's authenticated channel; never fall back to network. */
+(() => {
+  const MAX_BODY = 5 * 1024 * 1024;
+  const active = new Map();
+  const frameBindings = new Map();
+  const denied = () => new Response('Encrypted connection unavailable', {
+    status: 503, headers: { 'Content-Type': 'text/plain', 'Cache-Control': 'no-store' },
+  });
+  function canonicalPath(value) {
+    try {
+      if (!value.startsWith('/api/') || value.includes('//')) return null;
+      return value.split('/').map(segment => {
+        const decoded = decodeURIComponent(segment);
+        if (decoded === '.' || decoded === '..' || /[\\/\x00-\x1f\x7f]/.test(decoded) || /%[a-f0-9]{2}/i.test(decoded)) throw new Error('Invalid preview path');
+        return decoded;
+      }).join('/');
+    } catch { return null; }
+  }
+  function previewPrefix(requestUrl, location) {
+    const requested = new URL(requestUrl);
+    const final = new URL(location || requestUrl, requestUrl);
+    if (final.origin !== self.location.origin) return null;
+    const prefix = '/api/terminal/fs/preview/';
+    const source = canonicalPath(requested.pathname), target = canonicalPath(final.pathname);
+    if (!source?.startsWith(prefix) || !target?.startsWith(prefix)) return null;
+    const targetParts = target.slice(prefix.length).split('/');
+    if (!/^[a-f0-9]{32}$/.test(targetParts[0])) return null;
+    const sourceParts = source.slice(prefix.length).split('/');
+    if (/^[a-f0-9]{32}$/.test(sourceParts[0])) sourceParts.shift();
+    // The target may only tokenize the requested document/directory, not redirect
+    // a trusted navigation into an unrelated filesystem root.
+    if (sourceParts.join('/').replace(/\/$/, '') !== targetParts.slice(1).join('/').replace(/\/$/, '')) return null;
+    return target.endsWith('/') ? target : target.slice(0, target.lastIndexOf('/') + 1);
+  }
+  async function boundedBody(request) {
+    if (!request.body) return undefined;
+    const reader = request.body.getReader();
+    const chunks = []; let size = 0;
+    try {
+      while (true) {
+        const result = await reader.read(); if (result.done) break;
+        size += result.value.byteLength;
+        if (size > MAX_BODY) throw new Error('Request budget exceeded');
+        chunks.push(result.value);
+      }
+      const bytes = new Uint8Array(size); let offset = 0;
+      for (const chunk of chunks) { bytes.set(chunk, offset); offset += chunk.byteLength; }
+      return bytes.buffer;
+    } catch (error) { await reader.cancel().catch(() => {}); throw error; }
+    finally { reader.releaseLock(); }
+  }
+  async function proxy(event) {
+    // No arbitrary "first matching window" fallback: another tab may access a different target.
+    const source = event.clientId ? await self.clients.get(event.clientId) : undefined;
+    if (!source || source.type !== 'window' || new URL(source.url).origin !== self.location.origin) return denied();
+    const isApplication = client => {
+      if (!client || new URL(client.url).origin !== self.location.origin) return false;
+      const url = new URL(client.url);
+      return client.frameType === 'top-level' || (url.pathname === '/workspace.html'
+        && /^12D3KooW[1-9A-HJ-NP-Za-km-z]{44}$/.test(url.searchParams.get('termdock-workspace') || ''));
+    };
+    const binding = isApplication(source) ? undefined : frameBindings.get(source.id);
+    const client = isApplication(source) ? source : binding ? await self.clients.get(binding.ownerId) : undefined;
+    if (!isApplication(client)) {
+      frameBindings.delete(source.id); return denied();
+    }
+    if (binding && (!['GET', 'HEAD'].includes(event.request.method) || !canonicalPath(new URL(event.request.url).pathname)?.startsWith(binding.previewPrefix))) return denied();
+    if ((active.get(client.id) || 0) >= 32) return denied();
+    active.set(client.id, (active.get(client.id) || 0) + 1);
+    const channel = new MessageChannel();
+    const port = channel.port1;
+    let ended = false, pending, timer;
+    const cleanup = () => {
+      if (ended) return; ended = true; clearTimeout(timer);
+      const count = (active.get(client.id) || 1) - 1;
+      if (count > 0) active.set(client.id, count); else active.delete(client.id);
+      port.postMessage({ type: 'cancel' }); port.close();
+    };
+    const wait = () => new Promise((resolve, reject) => {
+      if (ended) { reject(new Error('Closed')); return; }
+      pending = { resolve, reject };
+      timer = setTimeout(() => { pending = undefined; reject(new Error('Bridge timeout')); cleanup(); }, 30000);
+    });
+    port.onmessage = message => {
+      if (!pending) { cleanup(); return; }
+      const next = pending; pending = undefined; clearTimeout(timer);
+      if (message.data?.type === 'error') { next.reject(new Error('Bridge failed')); cleanup(); }
+      else next.resolve(message.data);
+    };
+    port.onmessageerror = () => { pending?.reject(new Error('Bridge invalid')); pending = undefined; cleanup(); };
+    port.start();
+    try {
+      const request = event.request;
+      const body = await boundedBody(request);
+      const headers = {}; request.headers.forEach((value, key) => { headers[key] = value; });
+      const url = new URL(request.url);
+      const headPromise = wait();
+      client.postMessage({ type: 'termdock-secure-fetch', path: url.pathname + url.search,
+        method: request.method, headers, body, expectedTargetPeerId: binding?.targetPeerId || new URL(client.url).searchParams.get('termdock-workspace'), previewPrefix: binding?.previewPrefix }, [channel.port2, ...(body ? [body] : [])]);
+      const head = await headPromise;
+      if (head?.type !== 'head' || !Number.isInteger(head.status)) throw new Error('Invalid bridge header');
+      if (event.resultingClientId && request.mode === 'navigate' && typeof head.targetPeerId === 'string') {
+        const scope = binding?.previewPrefix || previewPrefix(request.url, head.headers?.location || head.headers?.Location);
+        if (!scope) throw new Error('Preview capability unavailable');
+        // The browser supplies the new frame ID and its initiating client; bind only
+        // that proven relationship, never a matching origin or an arbitrary window.
+        const stale = await Promise.all([...frameBindings.keys()].map(async id => !await self.clients.get(id) ? id : null));
+        for (const id of stale) if (id) frameBindings.delete(id);
+        if (frameBindings.size >= 128) frameBindings.delete(frameBindings.keys().next().value);
+        frameBindings.set(event.resultingClientId, { ownerId: client.id, targetPeerId: head.targetPeerId, previewPrefix: scope });
+      }
+      if (head.bodyless || request.method === 'HEAD' || [204, 205, 304].includes(head.status)) {
+        cleanup(); return new Response(null, { status: head.status, headers: head.headers });
+      }
+      const stream = new ReadableStream({
+        async pull(controller) {
+          try {
+            const response = wait(); port.postMessage({ type: 'pull' });
+            const packet = await response;
+            if (packet?.type === 'end') { controller.close(); cleanup(); return; }
+            if (packet?.type !== 'chunk' || !(packet.data instanceof ArrayBuffer) || packet.data.byteLength > 64 * 1024) throw new Error('Invalid bridge chunk');
+            controller.enqueue(new Uint8Array(packet.data));
+          } catch (error) { controller.error(error); cleanup(); }
+        },
+        cancel() { cleanup(); },
+      }, { highWaterMark: 0 });
+      return new Response(stream, { status: head.status, headers: head.headers });
+    } catch { cleanup(); return denied(); }
+  }
+  self.addEventListener('fetch', event => {
+    const url = new URL(event.request.url);
+    if (url.origin !== self.location.origin || !url.pathname.startsWith('/api/')) return;
+    if (event.request.method === 'GET' && ['/api/meta', '/api/auth/status', '/api/auth/password/parameters', '/api/auth/open/parameters'].includes(url.pathname)) return;
+    if (event.request.method === 'POST' && ['/api/auth/password/start', '/api/auth/password/finish'].includes(url.pathname)) return;
+    event.respondWith(proxy(event));
+  });
+})();

package/dist/client/sw.js

@@ -1 +1 @@
-if(!self.define){let e,s={};const n=(n,i)=>(n=new URL(n+".js",i).href,s[n]||new Promise(s=>{if("document"in self){const e=document.createElement("script");e.src=n,e.onload=s,document.head.appendChild(e)}else e=n,importScripts(n),s()}).then(()=>{let e=s[n];if(!e)throw new Error(`Module ${n} didn’t register its module`);return e}));self.define=(i,a)=>{const o=e||("document"in self?document.currentScript.src:"")||location.href;if(s[o])return;let r={};const t=e=>n(e,o),c={module:{uri:o},exports:r,require:t};s[o]=Promise.all(i.map(e=>c[e]||t(e))).then(e=>(a(...e),r))}}define(["./workbox-9845bf53"],function(e){"use strict";importScripts("sw-encrypted-background.js","sw-notifications.js","sw-secure-api.js","sw-downloads.js"),self.addEventListener("message",e=>{e.data&&"SKIP_WAITING"===e.data.type&&self.skipWaiting()}),e.clientsClaim(),e.precacheAndRoute([{url:"index.html",revision:"d1a48c2095db386bf7a1a5c1a971f0dc"},{url:"assets/app-CAES0OPd.js",revision:null},{url:"assets/react-XDCjal2T.js",revision:null},{url:"assets/dnd-BCFAPC0L.js",revision:null},{url:"assets/terminal-C7X98Amf.js",revision:null},{url:"assets/index-mZxreyvP.css",revision:null},{url:"apple-touch-icon-180x180.png",revision:"628c2e2f28a9b545aa57be1352025643"},{url:"favicon.ico",revision:"2994debfa6f59a0898e24eb0c54d64b5"},{url:"maskable-icon-512x512.png",revision:"4d489331fd81f0713c400b26426442b9"},{url:"pwa-192x192.png",revision:"4d6f899888cfb8ccd7a1fd3c9e583ad2"},{url:"pwa-512x512.png",revision:"0885dd7ec8932e7f878b013d51a380a4"},{url:"robots.txt",revision:"d9339907142917dee4aac78494ac9cfe"},{url:"sw-downloads.js",revision:"48dab2e78bd93b4eee27fca487eccfde"},{url:"sw-notifications.js",revision:"fde578590ea8b0540d488ef448b48f45"},{url:"sw-secure-api.js",revision:"cf2bdbd03d41d66d60344c0b5a1075de"},{url:"manifest.webmanifest",revision:"83f9a43b74c236012adafb077fb6d774"}],{}),e.cleanupOutdatedCaches(),e.registerRoute(new e.NavigationRoute(e.createHandlerBoundToURL("index.html"),{denylist:[/^\/api\//,/^\/__termdock-download\//,/^\/health$/]})),e.registerRoute(/\/assets\/.*\.(?:js|css)$/,new e.CacheFirst({cacheName:"termdock-lazy-assets-v1",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:96,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/terminal\/[^/]+-[a-f0-9]{12}\.woff2$/,new e.CacheFirst({cacheName:"termdock-fonts-v2",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:384,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/.*\.(?:woff2|ttf)$/,new e.StaleWhileRevalidate({cacheName:"termdock-fonts-v1",plugins:[new e.ExpirationPlugin({maxEntries:24,maxAgeSeconds:2592e3})]}),"GET")});
+if(!self.define){let e,s={};const n=(n,i)=>(n=new URL(n+".js",i).href,s[n]||new Promise(s=>{if("document"in self){const e=document.createElement("script");e.src=n,e.onload=s,document.head.appendChild(e)}else e=n,importScripts(n),s()}).then(()=>{let e=s[n];if(!e)throw new Error(`Module ${n} didn’t register its module`);return e}));self.define=(i,a)=>{const o=e||("document"in self?document.currentScript.src:"")||location.href;if(s[o])return;let c={};const r=e=>n(e,o),d={module:{uri:o},exports:c,require:r};s[o]=Promise.all(i.map(e=>d[e]||r(e))).then(e=>(a(...e),c))}}define(["./workbox-9845bf53"],function(e){"use strict";importScripts("sw-encrypted-background.js","sw-notifications.js","sw-secure-api.js","sw-downloads.js"),self.addEventListener("message",e=>{e.data&&"SKIP_WAITING"===e.data.type&&self.skipWaiting()}),e.clientsClaim(),e.precacheAndRoute([{url:"index.html",revision:"7713829a2bb43fa958df10bea75287ca"},{url:"assets/app-B32WWSws.js",revision:null},{url:"assets/react-XDCjal2T.js",revision:null},{url:"assets/dnd-BCFAPC0L.js",revision:null},{url:"assets/terminal-C7X98Amf.js",revision:null},{url:"assets/index-mZxreyvP.css",revision:null},{url:"icons/agents/opencode.svg",revision:"851c2931d95821ba2b39b68587b48976"},{url:"icons/agents/kimi.svg",revision:"5366c710f4f763022fe159a69cf17409"},{url:"icons/agents/grok.svg",revision:"cd745b0b964545bc7a6b4f36021c3298"},{url:"icons/agents/goose.svg",revision:"c79b927278983c19098d77b4b0c11ab3"},{url:"icons/agents/gemini.svg",revision:"7a64f6d6f80a908255e9c0256903882e"},{url:"icons/agents/droid.svg",revision:"f28723b8c5c115e0908ba3c72613e256"},{url:"icons/agents/cursor.svg",revision:"a1528f3d3cda497f75a5db28defb19de"},{url:"icons/agents/copilot.svg",revision:"dd52e96c1eac0b6ec4bedcd0ddd3b52d"},{url:"icons/agents/codex.svg",revision:"608e55babb0b217e1f2da287342b46d3"},{url:"icons/agents/claude.svg",revision:"08af0225b7acdd8e8f573f3247e5e1c3"},{url:"icons/agents/amp.svg",revision:"af12f8b33faa81e4d46ea7b93c7e43f3"},{url:"apple-touch-icon-180x180.png",revision:"628c2e2f28a9b545aa57be1352025643"},{url:"favicon.ico",revision:"2994debfa6f59a0898e24eb0c54d64b5"},{url:"maskable-icon-512x512.png",revision:"4d489331fd81f0713c400b26426442b9"},{url:"pwa-192x192.png",revision:"4d6f899888cfb8ccd7a1fd3c9e583ad2"},{url:"pwa-512x512.png",revision:"0885dd7ec8932e7f878b013d51a380a4"},{url:"robots.txt",revision:"d9339907142917dee4aac78494ac9cfe"},{url:"sw-downloads.js",revision:"48dab2e78bd93b4eee27fca487eccfde"},{url:"sw-notifications.js",revision:"fde578590ea8b0540d488ef448b48f45"},{url:"sw-secure-api.js",revision:"cf2bdbd03d41d66d60344c0b5a1075de"},{url:"manifest.webmanifest",revision:"83f9a43b74c236012adafb077fb6d774"}],{}),e.cleanupOutdatedCaches(),e.registerRoute(new e.NavigationRoute(e.createHandlerBoundToURL("index.html"),{denylist:[/^\/api\//,/^\/__termdock-download\//,/^\/health$/]})),e.registerRoute(/\/assets\/.*\.(?:js|css)$/,new e.CacheFirst({cacheName:"termdock-lazy-assets-v1",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:96,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/terminal\/[^/]+-[a-f0-9]{12}\.woff2$/,new e.CacheFirst({cacheName:"termdock-fonts-v2",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:384,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/.*\.(?:woff2|ttf)$/,new e.StaleWhileRevalidate({cacheName:"termdock-fonts-v1",plugins:[new e.ExpirationPlugin({maxEntries:24,maxAgeSeconds:2592e3})]}),"GET")});

package/dist/client/third-party-notices.txt

@@ -0,0 +1,215 @@
+Termdock diff comparison includes code adapted from IntelliJ IDEA.
+Copyright (C) JetBrains s.r.o.
+https://www.jetbrains.com/idea/
+
+Adapted sources: ByWordRt.kt, LineFragmentSplitter.kt, ChunkOptimizer.kt
+Copyright 2000-2021 JetBrains s.r.o. and contributors.
+Source: https://github.com/JetBrains/intellij-community
+Reference revision: 3e1b6c548e1d267865221e3bd70053242f8afb06
+
+Termdock modifications: TypeScript adaptation, bounded LCS/patience matching,
+Git hunk offset projection and React split-view integration.
+These adapted portions are provided under the Apache License, Version 2.0.
+
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "termdock",
-  "version": "1.4.258",
+  "version": "1.4.260",
   "description": "A complete web-based terminal application with modern UI",
   "type": "module",
   "main": ".desktop-dist/main.js",

package/runtime-manifest.json

@@ -1,13 +1,13 @@
 {
   "schemaVersion": 1,
   "packageName": "termdock",
-  "version": "1.4.258",
+  "version": "1.4.260",
   "runtimeProtocolVersion": 1,
   "minimumDesktopVersion": "1.4.46",
   "nodeMajor": 22,
   "dependencyHash": "sha256-K4KyYJuVoQDpZsBM8ZX1Rw3MddOxAzVdp/cPm0iGZz0=",
   "serverBundleHash": "sha256-IgrnWiH2Y+b7jVZaD+sWKUT0O2YEpFUTc4LGRTgKg3M=",
-  "clientBundleHash": "sha256-t1htOzBrp1E6Fzvb7LlCYaTLMbPXHlZwHQTXvvaBjwI=",
+  "clientBundleHash": "sha256-eIj8Fc/sbzIRJVaMs95IizyTIdYjeBKx1DOGhOYYea8=",
   "entrypoint": "dist/server/cli.js",
   "clientEntrypoint": "dist/client/index.html"
 }