ugly-app 0.1.692 → 0.1.693

package/dist/cli/version.d.ts

@@ -1,2 +1,2 @@
-export declare const CLI_VERSION = "0.1.692";
+export declare const CLI_VERSION = "0.1.693";
 //# sourceMappingURL=version.d.ts.map

package/dist/cli/version.js

@@ -1,3 +1,3 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.692";
+export const CLI_VERSION = "0.1.693";
 //# sourceMappingURL=version.js.map

package/dist/native/index.d.ts

@@ -5,6 +5,7 @@ export { CHANNEL_FALLBACK, NAMESPACES, fallbackFor } from './contract-meta.js';
 export type { NativePlatform, UglyNative } from './protocol.js';
 export { NativeUnavailableError, PermissionDeniedError } from './protocol.js';
 export { installUglyNative } from './install.js';
+export { createNodeUglyNative } from './node.js';
 export { native, permissions, nativePlatform, isNativeAvailable } from './wrapper.js';
 export type { PermissionsFacade } from './permissions.js';
 export type { UglyProcess } from './facades/process.js';

package/dist/native/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/native/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,OAAO,EACP,WAAW,EACX,SAAS,EACT,QAAQ,EACR,MAAM,EACN,SAAS,EACT,cAAc,EACd,aAAa,EACb,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,aAAa,EACb,aAAa,EACb,cAAc,EACd,aAAa,EACb,aAAa,EACb,QAAQ,EACR,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,eAAe,EACf,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,QAAQ,GACT,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC/E,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtF,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC/D,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEhE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,YAAY,EACV,WAAW,EACX,eAAe,EACf,WAAW,EACX,QAAQ,EACR,UAAU,GACX,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACvI,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnF,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/native/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,OAAO,EACP,WAAW,EACX,SAAS,EACT,QAAQ,EACR,MAAM,EACN,SAAS,EACT,cAAc,EACd,aAAa,EACb,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,aAAa,EACb,aAAa,EACb,cAAc,EACd,aAAa,EACb,aAAa,EACb,QAAQ,EACR,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,eAAe,EACf,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,QAAQ,GACT,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC/E,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtF,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC/D,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEhE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,YAAY,EACV,WAAW,EACX,eAAe,EACf,WAAW,EACX,QAAQ,EACR,UAAU,GACX,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACvI,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnF,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/native/index.js

@@ -2,6 +2,9 @@ export { namespaceOf } from './contract.js';
 export { CHANNEL_FALLBACK, NAMESPACES, fallbackFor } from './contract-meta.js';
 export { NativeUnavailableError, PermissionDeniedError } from './protocol.js';
 export { installUglyNative } from './install.js';
+// Node-backed UglyNative for background-task children (a task bundle sets
+// globalThis.UglyNative = createNodeUglyNative() before importing the `native` facade).
+export { createNodeUglyNative } from './node.js';
 export { native, permissions, nativePlatform, isNativeAvailable } from './wrapper.js';
 // Background-task authoring SDK (used inside a task bundle, not the app shell).
 export { defineTask, taskContext } from './defineTask.js';

package/dist/native/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/native/index.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE/E,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAUtF,gFAAgF;AAChF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,mDAAmD;AACnD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAQnE,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEvI,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/native/index.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE/E,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,0EAA0E;AAC1E,wFAAwF;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAUtF,gFAAgF;AAChF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,mDAAmD;AACnD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAQnE,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEvI,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/native/node.d.ts

@@ -0,0 +1,3 @@
+import type { UglyNative } from './protocol.js';
+export declare function createNodeUglyNative(): UglyNative;
+//# sourceMappingURL=node.d.ts.map

package/dist/native/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/native/node.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAYhD,wBAAgB,oBAAoB,IAAI,UAAU,CAwFjD"}

package/dist/native/node.js

@@ -0,0 +1,129 @@
+// Node-backed UglyNative for background-task children. A task bundle runs in a plain Node
+// child process (full Node API, OS-confined by the host), so inside it `native.fs.*` /
+// `native.process.*` resolve to node:fs / child_process here — no host round-trip and no
+// permission gate (the process boundary IS the boundary). A task bundle installs it before
+// importing the framework facade:  globalThis.UglyNative = createNodeUglyNative().
+// Device caps + other desktop namespaces (net/serve/workers/browse/mcp/...) aren't provided
+// and reject with NativeUnavailableError.
+import { promises as fsp, realpathSync } from 'node:fs';
+import { spawn } from 'node:child_process';
+import { NativeUnavailableError } from './protocol.js';
+// node = full local access, so every gated namespace reports granted (the facade's
+// permissions.ensure() reads this before fs/process calls).
+const ALL_GRANTED = {
+    granted: {
+        fs: 'full', process: 'full', net: 'granted', serve: 'granted', workers: 'granted',
+        secrets: 'granted', browse: 'granted', mcp: 'granted', terminal: 'granted', task: 'full',
+    },
+};
+export function createNodeUglyNative() {
+    const listeners = new Map();
+    const emit = (event, data) => {
+        const s = listeners.get(event);
+        if (s)
+            for (const cb of s) {
+                try {
+                    cb(data);
+                }
+                catch { /* best-effort */ }
+            }
+    };
+    const procs = new Map();
+    let seq = 0;
+    function spawnProc(cmd, args, opts) {
+        const id = `n${seq++}`;
+        const env = opts?.replaceEnv ? (opts.env ?? {}) : { ...process.env, ...(opts?.env ?? {}) };
+        const child = spawn(cmd, args, { cwd: opts?.cwd, env, detached: opts?.detached ?? false });
+        procs.set(id, child);
+        child.stdout?.on('data', (d) => emit(`process.stdout:${id}`, { chunk: d.toString() }));
+        child.stderr?.on('data', (d) => emit(`process.stderr:${id}`, { chunk: d.toString() }));
+        child.on('error', (e) => emit(`process.error:${id}`, { err: e.message }));
+        child.on('exit', (code) => { emit(`process.exit:${id}`, { code }); procs.delete(id); });
+        return { id, pid: child.pid ?? null };
+    }
+    async function invoke(channel, payload) {
+        const p = (payload ?? {});
+        const str = (k) => String(p[k] ?? '');
+        switch (channel) {
+            // permissions — node grants everything (process isolation is the boundary)
+            case 'permissions.query':
+            case 'permissions.request':
+                return ALL_GRANTED;
+            case 'permissions.revoke':
+                return undefined;
+            // fs (text)
+            case 'fs.readFile':
+                return { content: await fsp.readFile(str('path'), 'utf8') };
+            case 'fs.writeFile':
+                await fsp.writeFile(str('path'), String(p.content ?? ''));
+                return undefined;
+            case 'fs.mkdir':
+                await fsp.mkdir(str('path'), { recursive: p.recursive === true });
+                return undefined;
+            case 'fs.rm':
+                await fsp.rm(str('path'), { recursive: p.recursive === true, force: p.force === true });
+                return undefined;
+            case 'fs.rename':
+                await fsp.rename(str('from'), str('to'));
+                return undefined;
+            case 'fs.readdir': {
+                const ents = await fsp.readdir(str('path'), { withFileTypes: true });
+                const entries = ents.map((e) => ({ name: e.name, isDirectory: e.isDirectory(), isFile: e.isFile() }));
+                return { entries };
+            }
+            case 'fs.stat': {
+                const st = await fsp.stat(str('path'));
+                const r = { size: st.size, isDirectory: st.isDirectory(), isFile: st.isFile(), mtimeMs: st.mtimeMs };
+                return r;
+            }
+            case 'fs.exists':
+                try {
+                    await fsp.access(str('path'));
+                    return { exists: true };
+                }
+                catch {
+                    return { exists: false };
+                }
+            case 'fs.realpath':
+                return { path: realpathSync(str('path')) };
+            // fs (bytes ride as a latin1 binary string, one char per byte)
+            case 'fs.readFileBytes':
+                return { data: (await fsp.readFile(str('path'))).toString('latin1') };
+            case 'fs.writeFileBytes':
+                await fsp.writeFile(str('path'), Buffer.from(str('data'), 'latin1'));
+                return undefined;
+            // process (id-stream; stdout/stderr/exit/error arrive as process.<kind>:<id> events)
+            case 'process.spawn':
+                return spawnProc(str('cmd'), p.args ?? [], p.opts);
+            case 'process.write':
+                procs.get(str('id'))?.stdin?.write(String(p.data ?? ''));
+                return undefined;
+            case 'process.closeStdin':
+                procs.get(str('id'))?.stdin?.end();
+                return undefined;
+            case 'process.kill':
+                try {
+                    procs.get(str('id'))?.kill(p.signal);
+                }
+                catch { /* dead */ }
+                return undefined;
+            default:
+                throw new NativeUnavailableError(channel);
+        }
+    }
+    return {
+        platform: 'desktop',
+        invoke: ((channel, payload) => invoke(channel, payload)),
+        subscribe: ((event, cb) => {
+            const key = event;
+            let s = listeners.get(key);
+            if (!s) {
+                s = new Set();
+                listeners.set(key, s);
+            }
+            s.add(cb);
+            return () => { listeners.get(key)?.delete(cb); };
+        }),
+    };
+}
+//# sourceMappingURL=node.js.map

package/dist/native/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../../src/native/node.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,uFAAuF;AACvF,yFAAyF;AACzF,2FAA2F;AAC3F,mFAAmF;AACnF,4FAA4F;AAC5F,0CAA0C;AAC1C,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAG9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,mFAAmF;AACnF,4DAA4D;AAC5D,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS;QACjF,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM;KACzF;CACF,CAAC;AAEF,MAAM,UAAU,oBAAoB;IAClC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC/D,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,IAAa,EAAQ,EAAE;QAClD,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC;YAAE,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAAC,CAAC;IAC9E,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,IAAI,GAAG,GAAG,CAAC,CAAC;IAEZ,SAAS,SAAS,CAAC,GAAW,EAAE,IAAc,EAAE,IAAgB;QAC9D,MAAM,EAAE,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3F,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC;QAC3F,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACrB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/F,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/F,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAmB,EAAE,EAAE,GAAG,IAAI,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvG,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,OAAe,EAAE,OAAgB;QACrD,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC;QACrD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,QAAQ,OAAO,EAAE,CAAC;YAChB,2EAA2E;YAC3E,KAAK,mBAAmB,CAAC;YACzB,KAAK,qBAAqB;gBACxB,OAAO,WAAW,CAAC;YACrB,KAAK,oBAAoB;gBACvB,OAAO,SAAS,CAAC;YACnB,YAAY;YACZ,KAAK,aAAa;gBAChB,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;YAC9D,KAAK,cAAc;gBACjB,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;gBAAC,OAAO,SAAS,CAAC;YAC9E,KAAK,UAAU;gBACb,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC,CAAC;gBAAC,OAAO,SAAS,CAAC;YACtF,KAAK,OAAO;gBACV,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC,CAAC;gBAAC,OAAO,SAAS,CAAC;YAC5G,KAAK,WAAW;gBACd,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAC,OAAO,SAAS,CAAC;YAC7D,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrE,MAAM,OAAO,GAAiB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;gBACpH,OAAO,EAAE,OAAO,EAAE,CAAC;YACrB,CAAC;YACD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;gBACvC,MAAM,CAAC,GAAa,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC;gBAC/G,OAAO,CAAC,CAAC;YACX,CAAC;YACD,KAAK,WAAW;gBACd,IAAI,CAAC;oBAAC,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;oBAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;gBAAC,CAAC;YACrG,KAAK,aAAa;gBAChB,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC7C,+DAA+D;YAC/D,KAAK,kBAAkB;gBACrB,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxE,KAAK,mBAAmB;gBACtB,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAAC,OAAO,SAAS,CAAC;YACzF,qFAAqF;YACrF,KAAK,eAAe;gBAClB,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAG,CAAC,CAAC,IAAiB,IAAI,EAAE,EAAE,CAAC,CAAC,IAA6B,CAAC,CAAC;YAC5F,KAAK,eAAe;gBAClB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;gBAAC,OAAO,SAAS,CAAC;YAC7E,KAAK,oBAAoB;gBACvB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;gBAAC,OAAO,SAAS,CAAC;YACvD,KAAK,cAAc;gBACjB,IAAI,CAAC;oBAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAE,CAAC,CAAC,MAAqC,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;gBAAC,OAAO,SAAS,CAAC;YACtH;gBACE,MAAM,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,CAAC,CAAoB,OAAU,EAAE,OAAqB,EAAE,EAAE,CAChE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAyB,CAAyB;QAC3E,SAAS,EAAE,CAAC,CAAwB,KAAQ,EAAE,EAA6B,EAAE,EAAE;YAC7E,MAAM,GAAG,GAAG,KAAe,CAAC;YAC5B,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,CAAC,EAAE,CAAC;gBAAC,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;gBAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YACjD,CAAC,CAAC,GAAG,CAAC,EAA0B,CAAC,CAAC;YAClC,OAAO,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,EAA0B,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,CAAC,CAA4B;KAC9B,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ugly-app",
-  "version": "0.1.692",
+  "version": "0.1.693",
   "type": "module",
   "comment:files": "Allowlist what ships to npm. dist = runtime; src = sourcemap targets (dist/*.js.map reference ../../src/); templates = CLI scaffold. Everything else at repo root (.pgdata local Postgres, coverage, assets/icons sources, test/, test-results/) is excluded by omission. The !negations strip the scaffold's installed deps + cruft (templates/node_modules is 200MB+ and must never ship). package.json/README/LICENSE ship automatically.",
   "files": [

package/src/cli/version.ts

@@ -1,2 +1,2 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.692";
+export const CLI_VERSION = "0.1.693";

package/src/native/index.ts

@@ -39,6 +39,9 @@ export { CHANNEL_FALLBACK, NAMESPACES, fallbackFor } from './contract-meta.js';
 export type { NativePlatform, UglyNative } from './protocol.js';
 export { NativeUnavailableError, PermissionDeniedError } from './protocol.js';
 export { installUglyNative } from './install.js';
+// Node-backed UglyNative for background-task children (a task bundle sets
+// globalThis.UglyNative = createNodeUglyNative() before importing the `native` facade).
+export { createNodeUglyNative } from './node.js';
 export { native, permissions, nativePlatform, isNativeAvailable } from './wrapper.js';
 export type { PermissionsFacade } from './permissions.js';
 export type { UglyProcess } from './facades/process.js';

package/src/native/node.test.ts

@@ -0,0 +1,60 @@
+import { describe, it, expect, afterAll } from 'vitest';
+import { promises as fsp } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { createNodeUglyNative } from './node.js';
+import { NativeUnavailableError } from './protocol.js';
+
+const n = createNodeUglyNative();
+let dir = '';
+
+describe('createNodeUglyNative', () => {
+  it('platform is desktop and permissions report granted', async () => {
+    expect(n.platform).toBe('desktop');
+    const r = (await n.invoke('permissions.query', undefined)) as { granted: Record<string, string> };
+    expect(r.granted.fs).toBe('full');
+    expect(r.granted.process).toBe('full');
+  });
+
+  it('fs round-trips (write/read/readdir/stat/exists/rm)', async () => {
+    dir = await fsp.mkdtemp(path.join(os.tmpdir(), 'node-native-'));
+    const f = path.join(dir, 'a.txt');
+    await n.invoke('fs.writeFile', { path: f, content: 'hello' });
+    expect(await n.invoke('fs.readFile', { path: f })).toEqual({ content: 'hello' });
+    const ls = (await n.invoke('fs.readdir', { path: dir })) as { entries: { name: string; isFile: boolean }[] };
+    expect(ls.entries.find((e) => e.name === 'a.txt')?.isFile).toBe(true);
+    const st = (await n.invoke('fs.stat', { path: f })) as { size: number; isFile: boolean };
+    expect(st.isFile).toBe(true);
+    expect(st.size).toBe(5);
+    expect(await n.invoke('fs.exists', { path: f })).toEqual({ exists: true });
+    await n.invoke('fs.rm', { path: f });
+    expect(await n.invoke('fs.exists', { path: f })).toEqual({ exists: false });
+  });
+
+  it('byte ops round-trip binary via latin1', async () => {
+    const f = path.join(dir, 'bin');
+    const data = String.fromCharCode(0, 1, 2, 255, 128);
+    await n.invoke('fs.writeFileBytes', { path: f, data });
+    expect(await n.invoke('fs.readFileBytes', { path: f })).toEqual({ data });
+  });
+
+  it('process.spawn streams stdout + exit', async () => {
+    const r = (await n.invoke('process.spawn', { cmd: 'node', args: ['-e', 'process.stdout.write("hi")'] })) as { id: string; pid: number | null };
+    expect(typeof r.id).toBe('string');
+    const out: string[] = [];
+    n.subscribe(`process.stdout:${r.id}` as never, ((d: { chunk: string }) => out.push(d.chunk)) as never);
+    const code = await new Promise<number | null>((resolve) => {
+      n.subscribe(`process.exit:${r.id}` as never, ((d: { code: number | null }) => resolve(d.code)) as never);
+    });
+    expect(code).toBe(0);
+    expect(out.join('')).toBe('hi');
+  });
+
+  it('unsupported namespaces reject', async () => {
+    await expect(n.invoke('net.connect' as never, { host: 'x', port: 1 } as never)).rejects.toBeInstanceOf(NativeUnavailableError);
+  });
+
+  afterAll(async () => {
+    if (dir) await fsp.rm(dir, { recursive: true, force: true });
+  });
+});

package/src/native/node.ts

@@ -0,0 +1,111 @@
+// Node-backed UglyNative for background-task children. A task bundle runs in a plain Node
+// child process (full Node API, OS-confined by the host), so inside it `native.fs.*` /
+// `native.process.*` resolve to node:fs / child_process here — no host round-trip and no
+// permission gate (the process boundary IS the boundary). A task bundle installs it before
+// importing the framework facade:  globalThis.UglyNative = createNodeUglyNative().
+// Device caps + other desktop namespaces (net/serve/workers/browse/mcp/...) aren't provided
+// and reject with NativeUnavailableError.
+import { promises as fsp, realpathSync } from 'node:fs';
+import { spawn, type ChildProcess } from 'node:child_process';
+import type { Channel, DataOf, HostDirent, HostStat, NativeEvent, PayloadOf, ResultOf, SpawnOpts } from './contract.js';
+import type { UglyNative } from './protocol.js';
+import { NativeUnavailableError } from './protocol.js';
+
+// node = full local access, so every gated namespace reports granted (the facade's
+// permissions.ensure() reads this before fs/process calls).
+const ALL_GRANTED = {
+  granted: {
+    fs: 'full', process: 'full', net: 'granted', serve: 'granted', workers: 'granted',
+    secrets: 'granted', browse: 'granted', mcp: 'granted', terminal: 'granted', task: 'full',
+  },
+};
+
+export function createNodeUglyNative(): UglyNative {
+  const listeners = new Map<string, Set<(d: unknown) => void>>();
+  const emit = (event: string, data: unknown): void => {
+    const s = listeners.get(event);
+    if (s) for (const cb of s) { try { cb(data); } catch { /* best-effort */ } }
+  };
+
+  const procs = new Map<string, ChildProcess>();
+  let seq = 0;
+
+  function spawnProc(cmd: string, args: string[], opts?: SpawnOpts): { id: string; pid: number | null } {
+    const id = `n${seq++}`;
+    const env = opts?.replaceEnv ? (opts.env ?? {}) : { ...process.env, ...(opts?.env ?? {}) };
+    const child = spawn(cmd, args, { cwd: opts?.cwd, env, detached: opts?.detached ?? false });
+    procs.set(id, child);
+    child.stdout?.on('data', (d: Buffer) => emit(`process.stdout:${id}`, { chunk: d.toString() }));
+    child.stderr?.on('data', (d: Buffer) => emit(`process.stderr:${id}`, { chunk: d.toString() }));
+    child.on('error', (e: Error) => emit(`process.error:${id}`, { err: e.message }));
+    child.on('exit', (code: number | null) => { emit(`process.exit:${id}`, { code }); procs.delete(id); });
+    return { id, pid: child.pid ?? null };
+  }
+
+  async function invoke(channel: string, payload: unknown): Promise<unknown> {
+    const p = (payload ?? {}) as Record<string, unknown>;
+    const str = (k: string): string => String(p[k] ?? '');
+    switch (channel) {
+      // permissions — node grants everything (process isolation is the boundary)
+      case 'permissions.query':
+      case 'permissions.request':
+        return ALL_GRANTED;
+      case 'permissions.revoke':
+        return undefined;
+      // fs (text)
+      case 'fs.readFile':
+        return { content: await fsp.readFile(str('path'), 'utf8') };
+      case 'fs.writeFile':
+        await fsp.writeFile(str('path'), String(p.content ?? '')); return undefined;
+      case 'fs.mkdir':
+        await fsp.mkdir(str('path'), { recursive: p.recursive === true }); return undefined;
+      case 'fs.rm':
+        await fsp.rm(str('path'), { recursive: p.recursive === true, force: p.force === true }); return undefined;
+      case 'fs.rename':
+        await fsp.rename(str('from'), str('to')); return undefined;
+      case 'fs.readdir': {
+        const ents = await fsp.readdir(str('path'), { withFileTypes: true });
+        const entries: HostDirent[] = ents.map((e) => ({ name: e.name, isDirectory: e.isDirectory(), isFile: e.isFile() }));
+        return { entries };
+      }
+      case 'fs.stat': {
+        const st = await fsp.stat(str('path'));
+        const r: HostStat = { size: st.size, isDirectory: st.isDirectory(), isFile: st.isFile(), mtimeMs: st.mtimeMs };
+        return r;
+      }
+      case 'fs.exists':
+        try { await fsp.access(str('path')); return { exists: true }; } catch { return { exists: false }; }
+      case 'fs.realpath':
+        return { path: realpathSync(str('path')) };
+      // fs (bytes ride as a latin1 binary string, one char per byte)
+      case 'fs.readFileBytes':
+        return { data: (await fsp.readFile(str('path'))).toString('latin1') };
+      case 'fs.writeFileBytes':
+        await fsp.writeFile(str('path'), Buffer.from(str('data'), 'latin1')); return undefined;
+      // process (id-stream; stdout/stderr/exit/error arrive as process.<kind>:<id> events)
+      case 'process.spawn':
+        return spawnProc(str('cmd'), (p.args as string[]) ?? [], p.opts as SpawnOpts | undefined);
+      case 'process.write':
+        procs.get(str('id'))?.stdin?.write(String(p.data ?? '')); return undefined;
+      case 'process.closeStdin':
+        procs.get(str('id'))?.stdin?.end(); return undefined;
+      case 'process.kill':
+        try { procs.get(str('id'))?.kill((p.signal as NodeJS.Signals | undefined)); } catch { /* dead */ } return undefined;
+      default:
+        throw new NativeUnavailableError(channel);
+    }
+  }
+
+  return {
+    platform: 'desktop',
+    invoke: (<C extends Channel>(channel: C, payload: PayloadOf<C>) =>
+      invoke(channel, payload) as Promise<ResultOf<C>>) as UglyNative['invoke'],
+    subscribe: (<E extends NativeEvent>(event: E, cb: (data: DataOf<E>) => void) => {
+      const key = event as string;
+      let s = listeners.get(key);
+      if (!s) { s = new Set(); listeners.set(key, s); }
+      s.add(cb as (d: unknown) => void);
+      return () => { listeners.get(key)?.delete(cb as (d: unknown) => void); };
+    }) as UglyNative['subscribe'],
+  };
+}