waterplane 0.1.25 → 0.1.26

package/packages/host/dist/extensions/links/host/index.mjs

@@ -0,0 +1,72 @@
+/**
+ * The links extension's host half: the methods the phone's sheet calls (`shared/wire.mts`) over the
+ * engine (`engine.mts`). Contributed through the same `HostPluginApi` an external plugin gets.
+ *
+ * Spends nothing: `lsof`, `tailscale serve status`, `gcloud … list`, `git grep` and one HEAD per pin,
+ * each with a time bound and no shell. Nothing runs until the phone asks — no poller.
+ */
+import { access, constants } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { BRAND, handleAll, makeEnvReader } from "@waterplane/shared";
+import { PUSH_CHANGED } from "../shared/wire.mjs";
+import { createEngine } from "./engine.mjs";
+import { run } from "./run.mjs";
+export { createEngine } from "./engine.mjs";
+const { env } = makeEnvReader(process.env, (text) => console.warn(text));
+async function firstExe(places) {
+    for (const p of places) {
+        try {
+            await access(p, constants.X_OK);
+            return p;
+        }
+        catch { /* next */ }
+    }
+    return null;
+}
+/** `PATH` first (the launchd plist sets one), then the usual install places. */
+async function findBin(name, extra) {
+    const path = (process.env.PATH || "").split(":").filter(Boolean).map((d) => join(d, name));
+    return firstExe([...path, ...extra]);
+}
+/** This desktop's roots. The pins file sits in the config dir next to `plugin-paths.json`. */
+export async function defaultRoots() {
+    const home = homedir();
+    const configDir = (env("CONFIG_DIR") || "").trim()
+        || join((process.env.XDG_CONFIG_HOME || "").trim() || join(home, ".config"), BRAND.configDirName);
+    return {
+        root: (env("ROOT") || "").trim() || join(home, "dev"),
+        file: join(configDir, "links.json"),
+        lsofBin: (await findBin("lsof", ["/usr/sbin/lsof", "/usr/bin/lsof"])) ?? "lsof",
+        tailscaleBin: await findBin("tailscale", ["/opt/homebrew/bin/tailscale", "/usr/local/bin/tailscale", "/Applications/Tailscale.app/Contents/MacOS/Tailscale"]),
+        gcloudBin: await findBin("gcloud", ["/opt/homebrew/bin/gcloud", "/usr/local/bin/gcloud", join(home, "google-cloud-sdk", "bin", "gcloud")]),
+        gitBin: (await findBin("git", ["/usr/bin/git", "/opt/homebrew/bin/git"])) ?? "git",
+        run,
+        fetch: globalThis.fetch,
+        now: () => Date.now(),
+        selfPid: process.pid,
+        probeTimeoutMs: 6_000,
+    };
+}
+/** Wire an engine to `api`'s methods. Exported so the tests drive the real handlers. */
+export function serve(api, engine) {
+    return handleAll(api, {
+        state: () => engine.state(),
+        discover: (a) => engine.discover({ cloud: a?.cloud === true }),
+        probe: () => engine.probe(),
+        pin: (a) => engine.pin(String(a?.key ?? "")),
+        add: (a) => engine.add((a ?? {})),
+        edit: (a) => engine.edit((a ?? {})),
+        unpin: (a) => engine.unpin(a?.id),
+    });
+}
+let off = null;
+export async function activate(api) {
+    const engine = createEngine(await defaultRoots(), () => { api.push(PUSH_CHANGED, { at: Date.now() }); });
+    off = serve(api, engine);
+}
+export function deactivate() {
+    off?.();
+    off = null;
+}
+//# sourceMappingURL=index.mjs.map

package/packages/host/dist/extensions/links/host/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../../../../extensions/links/host/index.mts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAsB,MAAM,oBAAoB,CAAC;AACzF,OAAO,EAAE,YAAY,EAAqB,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,YAAY,EAA2B,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAG5C,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAEzE,KAAK,UAAU,QAAQ,CAAC,MAAgB;IACtC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IACnG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,KAAe;IAClD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3F,OAAO,QAAQ,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;WAC7C,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACpG,OAAO;QACL,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QACrD,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;QACnC,OAAO,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,MAAM;QAC/E,YAAY,EAAE,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,6BAA6B,EAAE,0BAA0B,EAAE,sDAAsD,CAAC,CAAC;QAC7J,SAAS,EAAE,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,0BAA0B,EAAE,uBAAuB,EAAE,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1I,MAAM,EAAE,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC,CAAC,IAAI,KAAK;QAClF,GAAG;QACH,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;QACrB,OAAO,EAAE,OAAO,CAAC,GAAG;QACpB,cAAc,EAAE,KAAK;KACtB,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,KAAK,CAAC,GAA2C,EAAE,MAAc;IAC/E,OAAO,SAAS,CAAe,GAAG,EAAE;QAClC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QAC3B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAG,CAAgC,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9F,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QAC3B,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAE,CAA8B,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QAC1E,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAiC,CAAC;QACjE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAkC,CAAC;QACpE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAE,CAA6B,EAAE,EAAE,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC;AAED,IAAI,GAAG,GAAwB,IAAI,CAAC;AAEpC,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAkB;IAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,YAAY,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,GAAG,EAAE,EAAE,CAAC;IACR,GAAG,GAAG,IAAI,CAAC;AACb,CAAC"}

package/packages/host/dist/extensions/links/host/parse.d.mts

@@ -0,0 +1,61 @@
+/**
+ * The links extension's readers: pure functions over what `lsof`, `tailscale serve status --json`,
+ * `gcloud run services list --format=json` and the Firebase Hosting API print. No I/O here, so the
+ * tests feed them recorded output. A line or field that does not parse is skipped, never guessed.
+ */
+import type { FoundLink, LinkEnv } from "../shared/wire.mjs";
+export interface Listener {
+    pid: number;
+    proc: string;
+    addr: string;
+    port: number;
+}
+/** `lsof -nP -iTCP -sTCP:LISTEN -Fpcn` → one row per (pid, address). */
+export declare function parseLsofListen(out: string): Listener[];
+/** `lsof -a -d cwd -p <pids> -Fpn` → pid → working directory. */
+export declare function parseLsofCwd(out: string): Map<number, string>;
+/** A repo under the code root: its folder name (what core calls `repoName`) and where it is. A repo
+ *  may sit one folder down (`~/dev/watch/watch-monorepo`), so the name is not the first segment. */
+export interface RepoDir {
+    name: string;
+    path: string;
+}
+/** The repo a path is in: the deepest repo folder holding it, or null outside every one. */
+export declare function repoOf(path: string, repos: readonly RepoDir[]): string | null;
+/** `tailscale serve status --json` → local port → the https front door that proxies to it. */
+export declare function parseServeStatus(json: string): Map<number, string>;
+/** The https ports a serve config already uses, so a suggestion does not collide. */
+export declare function servePortsInUse(json: string): Set<number>;
+/** The first free front-door port from 8781 up. */
+export declare function suggestServePort(used: Set<number>, from?: number): number;
+export declare const guessEnv: (name: string) => LinkEnv;
+/** Ports at or above this are an OS-picked port: an IDE's helper, a dev server's HMR socket. */
+export declare const EPHEMERAL_FROM = 32768;
+/** Processes that listen in a repo but never serve a page: emulators, adb, VM helpers, databases. */
+export declare const NOT_WEB_RE: RegExp;
+export interface LocalInputs {
+    listeners: Listener[];
+    cwd: Map<number, string>;
+    repos: readonly RepoDir[];
+    serve: Map<number, string>;
+    servePorts: Set<number>;
+    tailnetIp: string | null;
+    tailscale: string;
+    selfPid: number;
+}
+/**
+ * Listening ports whose process works inside a repo under the code root, one row per port.
+ * The phone URL is the serve front door if there is one, else the tailnet address when the port is
+ * bound to it (or to every interface), else none — with the serve command that would make one.
+ */
+export declare function localFound(i: LocalInputs): FoundLink[];
+/** `gcloud run services list --format=json` for one project → found rows (repo filled in later). */
+export declare function parseRunServices(json: string, project: string): FoundLink[];
+/** Firebase Hosting `GET v1beta1/projects/<p>/sites` → one row per site. */
+export declare function parseHostingSites(json: string, project: string): FoundLink[];
+/**
+ * `git grep -I -o -h -F -e <id1> -e <id2> …` per repo → id → repo with the most mentions. Used for
+ * project ids and for Firebase site ids alike.
+ * A tie between repos is left unassigned (null): a wrong repo is worse than none.
+ */
+export declare function assignProjects(hits: Map<string, string>, projects: readonly string[]): Map<string, string | null>;

package/packages/host/dist/extensions/links/host/parse.mjs

@@ -0,0 +1,225 @@
+/** `lsof -nP -iTCP -sTCP:LISTEN -Fpcn` → one row per (pid, address). */
+export function parseLsofListen(out) {
+    const rows = [];
+    const seen = new Set();
+    let pid = 0, proc = "";
+    for (const line of out.split("\n")) {
+        const tag = line[0], v = line.slice(1);
+        if (tag === "p") {
+            pid = Number(v) || 0;
+            proc = "";
+        }
+        else if (tag === "c")
+            proc = v.replace(/\\x20/g, " ");
+        else if (tag === "n" && pid) {
+            const m = /^(.*):(\d+)$/.exec(v);
+            if (!m)
+                continue;
+            const addr = m[1].replace(/^\[|\]$/g, ""), port = Number(m[2]);
+            const k = `${pid} ${addr} ${port}`;
+            if (seen.has(k))
+                continue;
+            seen.add(k);
+            rows.push({ pid, proc, addr, port });
+        }
+    }
+    return rows;
+}
+/** `lsof -a -d cwd -p <pids> -Fpn` → pid → working directory. */
+export function parseLsofCwd(out) {
+    const m = new Map();
+    let pid = 0;
+    for (const line of out.split("\n")) {
+        if (line[0] === "p")
+            pid = Number(line.slice(1)) || 0;
+        else if (line[0] === "n" && pid)
+            m.set(pid, line.slice(1));
+    }
+    return m;
+}
+/** The repo a path is in: the deepest repo folder holding it, or null outside every one. */
+export function repoOf(path, repos) {
+    let best = null;
+    for (const r of repos) {
+        const p = r.path.replace(/\/+$/, "");
+        if ((path === p || path.startsWith(p + "/")) && (!best || p.length > best.path.length))
+            best = { name: r.name, path: p };
+    }
+    return best?.name ?? null;
+}
+/** `tailscale serve status --json` → local port → the https front door that proxies to it. */
+export function parseServeStatus(json) {
+    const m = new Map();
+    let d;
+    try {
+        d = JSON.parse(json);
+    }
+    catch {
+        return m;
+    }
+    const web = d?.Web;
+    if (!web || typeof web !== "object")
+        return m;
+    for (const [hostPort, cfg] of Object.entries(web)) {
+        const root = cfg?.Handlers?.["/"]?.Proxy;
+        if (typeof root !== "string")
+            continue;
+        const target = /^https?:\/\/(?:127\.0\.0\.1|localhost|\[::1\]):(\d+)\/?$/.exec(root);
+        const hp = /^([^:]+):(\d+)$/.exec(hostPort);
+        if (!target || !hp)
+            continue;
+        const url = hp[2] === "443" ? `https://${hp[1]}` : `https://${hp[1]}:${hp[2]}`;
+        const port = Number(target[1]);
+        if (!m.has(port))
+            m.set(port, url);
+    }
+    return m;
+}
+/** The https ports a serve config already uses, so a suggestion does not collide. */
+export function servePortsInUse(json) {
+    const s = new Set();
+    try {
+        const tcp = JSON.parse(json)?.TCP;
+        for (const k of Object.keys(tcp ?? {}))
+            if (/^\d+$/.test(k))
+                s.add(Number(k));
+    }
+    catch { /* none */ }
+    return s;
+}
+/** The first free front-door port from 8781 up. */
+export function suggestServePort(used, from = 8781) {
+    let p = from;
+    while (used.has(p))
+        p++;
+    return p;
+}
+export const guessEnv = (name) => /(^|[^a-z0-9])(stg|staging|stage)([^a-z0-9]|$)/i.test(name) ? "staging" : "prod";
+const isLoopback = (a) => a === "127.0.0.1" || a === "::1" || a === "localhost";
+const isAny = (a) => a === "*" || a === "0.0.0.0" || a === "::";
+const isTailnet = (a) => /^100\.(6[4-9]|[7-9]\d|1[01]\d|12[0-7])\./.test(a) || /^fd7a:115c:a1e0:/i.test(a);
+/** Ports at or above this are an OS-picked port: an IDE's helper, a dev server's HMR socket. */
+export const EPHEMERAL_FROM = 32768;
+/** Processes that listen in a repo but never serve a page: emulators, adb, VM helpers, databases. */
+export const NOT_WEB_RE = /^(adb|qemu-system|netsimd|emulator|OrbStack|com\.docker|Docker|postgres|redis-server|mongod|mysqld)/i;
+/**
+ * Listening ports whose process works inside a repo under the code root, one row per port.
+ * The phone URL is the serve front door if there is one, else the tailnet address when the port is
+ * bound to it (or to every interface), else none — with the serve command that would make one.
+ */
+export function localFound(i) {
+    const byPort = new Map();
+    for (const l of i.listeners) {
+        if (l.pid === i.selfPid)
+            continue;
+        const dir = i.cwd.get(l.pid);
+        const repo = dir ? repoOf(dir, i.repos) : null;
+        if (!repo)
+            continue;
+        const cur = byPort.get(l.port);
+        if (cur)
+            cur.addrs.add(l.addr);
+        else
+            byPort.set(l.port, { l, addrs: new Set([l.addr]), repo });
+    }
+    const used = new Set(i.servePorts);
+    const rows = [];
+    for (const [port, { l, addrs, repo }] of [...byPort].sort((a, b) => a[0] - b[0])) {
+        const served = i.serve.get(port);
+        const reach = [...addrs].some((a) => isAny(a) || isTailnet(a));
+        const url = served ?? (reach && i.tailnetIp ? `http://${i.tailnetIp}:${port}` : null);
+        const notWeb = NOT_WEB_RE.test(l.proc);
+        const hidden = notWeb || port >= EPHEMERAL_FROM;
+        const row = { key: `local:${port}`, kind: "local", repo, label: `${l.proc} :${port}`, url, port, proc: l.proc, env: "dev", hidden };
+        if (notWeb)
+            row.note = "an emulator, VM helper or database — not a page";
+        else if (hidden)
+            row.note = "an OS-picked port — usually a helper socket, not a page";
+        if (!url && !hidden && [...addrs].every(isLoopback)) {
+            const front = suggestServePort(used);
+            used.add(front);
+            row.serveCmd = `${i.tailscale} serve --bg --https=${front} http://127.0.0.1:${port}`;
+            row.note = row.note ?? "listens on this desktop only — the phone cannot reach it until it has a front door";
+        }
+        rows.push(row);
+    }
+    return rows;
+}
+/** `gcloud run services list --format=json` for one project → found rows (repo filled in later). */
+export function parseRunServices(json, project) {
+    let d;
+    try {
+        d = JSON.parse(json);
+    }
+    catch {
+        return [];
+    }
+    if (!Array.isArray(d))
+        return [];
+    const rows = [];
+    for (const s of d) {
+        const name = s?.metadata?.name, url = s?.status?.url;
+        if (typeof name !== "string" || typeof url !== "string" || !/^https:\/\//.test(url))
+            continue;
+        const labels = s.metadata?.labels ?? {}, ann = s.metadata?.annotations ?? {};
+        const fn = labels["goog-managed-by"] === "cloudfunctions";
+        const ingress = ann["run.googleapis.com/ingress"];
+        const internal = ingress === "internal" || ingress === "internal-and-cloud-load-balancing";
+        const row = {
+            key: `run:${project}/${name}`, kind: fn ? "function" : "cloudrun", repo: null, label: name, url, project,
+            env: guessEnv(`${name} ${project}`), hidden: fn || internal,
+        };
+        if (fn)
+            row.note = "a Cloud Function — an endpoint, usually not a page";
+        else if (internal)
+            row.note = "internal ingress — not reachable from the internet";
+        rows.push(row);
+    }
+    return rows;
+}
+/** Firebase Hosting `GET v1beta1/projects/<p>/sites` → one row per site. */
+export function parseHostingSites(json, project) {
+    let d;
+    try {
+        d = JSON.parse(json);
+    }
+    catch {
+        return [];
+    }
+    const sites = d?.sites;
+    if (!Array.isArray(sites))
+        return [];
+    const rows = [];
+    for (const s of sites) {
+        const id = typeof s?.name === "string" ? s.name.split("/").pop() : null;
+        if (!id || typeof s.defaultUrl !== "string" || !/^https:\/\//.test(s.defaultUrl))
+            continue;
+        rows.push({ key: `fb:${id}`, kind: "firebase", repo: null, label: id, url: s.defaultUrl, project, env: guessEnv(`${id} ${project}`), hidden: false });
+    }
+    return rows;
+}
+/**
+ * `git grep -I -o -h -F -e <id1> -e <id2> …` per repo → id → repo with the most mentions. Used for
+ * project ids and for Firebase site ids alike.
+ * A tie between repos is left unassigned (null): a wrong repo is worse than none.
+ */
+export function assignProjects(hits, projects) {
+    const counts = new Map();
+    for (const [repo, out] of hits) {
+        for (const line of out.split("\n")) {
+            const p = line.trim();
+            if (!projects.includes(p))
+                continue;
+            const m = counts.get(p) ?? new Map();
+            m.set(repo, (m.get(repo) ?? 0) + 1);
+            counts.set(p, m);
+        }
+    }
+    const out = new Map();
+    for (const p of projects) {
+        const m = [...(counts.get(p) ?? new Map())].sort((a, b) => b[1] - a[1]);
+        out.set(p, m.length === 0 || (m.length > 1 && m[0][1] === m[1][1]) ? null : m[0][0]);
+    }
+    return out;
+}
+//# sourceMappingURL=parse.mjs.map

package/packages/host/dist/extensions/links/host/parse.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.mjs","sourceRoot":"","sources":["../../../../../extensions/links/host/parse.mts"],"names":[],"mappings":"AASA,wEAAwE;AACxE,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,GAAG,EAAE,CAAC;QAAC,CAAC;aAChD,IAAI,GAAG,KAAK,GAAG;YAAE,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;aACjD,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChE,MAAM,CAAC,GAAG,GAAG,GAAG,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC1B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aACjD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG;YAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAMD,4FAA4F;AAC5F,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,KAAyB;IAC5D,IAAI,IAAI,GAAmB,IAAI,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC3H,CAAC;IACD,OAAO,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IACjD,MAAM,GAAG,GAAI,CAAiF,EAAE,GAAG,CAAC;IACpG,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,GAAG,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;QACzC,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QACvC,MAAM,MAAM,GAAG,0DAA0D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,MAAM,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,CAAC,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuC,EAAE,GAAG,CAAC;QACzE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;YAAE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IACtB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,gBAAgB,CAAC,IAAiB,EAAE,IAAI,GAAG,IAAI;IAC7D,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,CAAC,EAAE,CAAC;IACxB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAEpI,MAAM,UAAU,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,WAAW,CAAC;AACxF,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC;AACxE,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,0CAA0C,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEnH,gGAAgG;AAChG,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AAEpC,qGAAqG;AACrG,MAAM,CAAC,MAAM,UAAU,GAAG,sGAAsG,CAAC;AAajI;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,CAAc;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6D,CAAC;IACpF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO;YAAE,SAAS;QAClC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,GAAG;YAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;;YAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,IAAI,IAAI,cAAc,CAAC;QAChD,MAAM,GAAG,GAAc,EAAE,GAAG,EAAE,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC/I,IAAI,MAAM;YAAE,GAAG,CAAC,IAAI,GAAG,iDAAiD,CAAC;aACpE,IAAI,MAAM;YAAE,GAAG,CAAC,IAAI,GAAG,yDAAyD,CAAC;QACtF,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,SAAS,uBAAuB,KAAK,qBAAqB,IAAI,EAAE,CAAC;YACrF,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,oFAAoF,CAAC;QAC9G,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAOD,oGAAoG;AACpG,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAC5D,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,CAAiB,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC;QACrD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9F,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,CAAC;QAC7E,MAAM,EAAE,GAAG,MAAM,CAAC,iBAAiB,CAAC,KAAK,gBAAgB,CAAC;QAC1D,MAAM,OAAO,GAAG,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,mCAAmC,CAAC;QAC3F,MAAM,GAAG,GAAc;YACrB,GAAG,EAAE,OAAO,OAAO,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO;YACxG,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,QAAQ;SAC5D,CAAC;QACF,IAAI,EAAE;YAAE,GAAG,CAAC,IAAI,GAAG,oDAAoD,CAAC;aACnE,IAAI,QAAQ;YAAE,GAAG,CAAC,IAAI,GAAG,oDAAoD,CAAC;QACnF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAe;IAC7D,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAClD,MAAM,KAAK,GAAI,CAA0D,EAAE,KAAK,CAAC;IACjF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,IAAI,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YAAE,SAAS;QAC3F,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACxJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAyB,EAAE,QAA2B;IACnF,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,SAAS;YACpC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAC;YACrD,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/packages/host/dist/extensions/links/host/run.d.mts

@@ -0,0 +1,15 @@
+export interface RunResult {
+    code: number | null;
+    stdout: string;
+    stderr: string;
+    timedOut: boolean;
+    error?: string;
+}
+export type Runner = (bin: string, argv: string[], opts: {
+    timeoutMs: number;
+    cwd?: string;
+}) => Promise<RunResult>;
+/** Run `bin argv` with no shell, killed (SIGKILL) after `timeoutMs`. Resolves, never rejects. */
+export declare const run: Runner;
+/** Map `items` through `fn` with at most `limit` in flight. Order kept. */
+export declare function pool<T, R>(items: readonly T[], limit: number, fn: (t: T) => Promise<R>): Promise<R[]>;

package/packages/host/dist/extensions/links/host/run.mjs

@@ -0,0 +1,32 @@
+/**
+ * The links extension's process plumbing: async `execFile` with a hard time bound, no shell, and a
+ * small concurrency pool. Nothing here blocks the loop that pumps every PTY.
+ */
+import { execFile } from "node:child_process";
+/** Run `bin argv` with no shell, killed (SIGKILL) after `timeoutMs`. Resolves, never rejects. */
+export const run = (bin, argv, opts) => new Promise((resolve) => {
+    execFile(bin, argv, { timeout: opts.timeoutMs, killSignal: "SIGKILL", cwd: opts.cwd, maxBuffer: 16 * 1024 * 1024, encoding: "utf8" }, (err, stdout, stderr) => {
+        if (!err) {
+            resolve({ code: 0, stdout, stderr, timedOut: false });
+            return;
+        }
+        const e = err;
+        const timedOut = e.killed === true && e.signal === "SIGKILL";
+        const code = typeof e.code === "number" ? e.code : null;
+        resolve({ code, stdout: stdout ?? "", stderr: stderr ?? "", timedOut, error: typeof e.code === "string" ? `${e.code}` : e.message });
+    });
+});
+/** Map `items` through `fn` with at most `limit` in flight. Order kept. */
+export async function pool(items, limit, fn) {
+    const out = new Array(items.length);
+    let next = 0;
+    const worker = async () => { for (;;) {
+        const i = next++;
+        if (i >= items.length)
+            return;
+        out[i] = await fn(items[i]);
+    } };
+    await Promise.all(Array.from({ length: Math.min(limit, items.length) }, worker));
+    return out;
+}
+//# sourceMappingURL=run.mjs.map

package/packages/host/dist/extensions/links/host/run.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.mjs","sourceRoot":"","sources":["../../../../../extensions/links/host/run.mts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAK9C,iGAAiG;AACjG,MAAM,CAAC,MAAM,GAAG,GAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACtE,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAClI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACtB,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,GAA4F,CAAC;QACvG,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;QAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACvI,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,IAAI,CAAO,KAAmB,EAAE,KAAa,EAAE,EAAwB;IAC3F,MAAM,GAAG,GAAG,IAAI,KAAK,CAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE,GAAG,SAAS,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO;QAAC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IAC3H,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACjF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/packages/host/dist/extensions/links/host/store.d.mts

@@ -0,0 +1,11 @@
+import { type LinkEnv, type PinnedLink } from "../shared/wire.mjs";
+export declare const REPO_RE: RegExp;
+export declare const cleanLabel: (s: unknown) => string | null;
+export declare const isEnv: (e: unknown) => e is LinkEnv;
+export interface Loaded {
+    links: PinnedLink[];
+    problems: string[];
+    writable: boolean;
+}
+export declare function loadPins(file: string): Promise<Loaded>;
+export declare function savePins(file: string, links: readonly PinnedLink[]): Promise<void>;

package/packages/host/dist/extensions/links/host/store.mjs

@@ -0,0 +1,76 @@
+/**
+ * The pins, on disk: `<config dir>/links.json`, `{ "links": PinnedLink[] }`. Hand-editable — a row
+ * that does not validate is kept out of the list and NAMED, never rewritten away: while the file has
+ * any problem it is not written at all (`writable: false`) — a pin or edit then refuses in words.
+ */
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { LINK_ENVS, PIN_ID_RE, isHttpUrl } from "../shared/wire.mjs";
+export const REPO_RE = /^[\w.-]{1,128}$/;
+export const cleanLabel = (s) => {
+    if (typeof s !== "string")
+        return null;
+    const t = s.replace(/\s+/g, " ").trim().slice(0, 120);
+    return t || null;
+};
+export const isEnv = (e) => typeof e === "string" && LINK_ENVS.includes(e);
+function valid(r) {
+    const o = r;
+    if (!o || typeof o !== "object" || typeof o.id !== "string" || !PIN_ID_RE.test(o.id))
+        return null;
+    const label = cleanLabel(o.label);
+    if (!label)
+        return null;
+    const hasUrl = isHttpUrl(o.url), hasPort = Number.isInteger(o.port) && o.port > 0 && o.port < 65536;
+    if (hasUrl === hasPort)
+        return null;
+    const repo = typeof o.repo === "string" && REPO_RE.test(o.repo) ? o.repo : null;
+    const p = { id: o.id, label, repo, env: isEnv(o.env) ? o.env : "dev" };
+    if (hasUrl)
+        p.url = o.url;
+    else
+        p.port = o.port;
+    if (typeof o.from === "string" && o.from.length < 300)
+        p.from = o.from;
+    return p;
+}
+export async function loadPins(file) {
+    let text;
+    try {
+        text = await readFile(file, "utf8");
+    }
+    catch (e) {
+        if (e.code === "ENOENT")
+            return { links: [], problems: [], writable: true };
+        return { links: [], problems: [`${file} could not be read: ${e.message}`], writable: false };
+    }
+    let d;
+    try {
+        d = JSON.parse(text);
+    }
+    catch {
+        return { links: [], problems: [`${file} is not JSON — nothing in it is shown, and nothing is written over it until it parses.`], writable: false };
+    }
+    const rows = Array.isArray(d?.links) ? d.links : null;
+    if (!rows)
+        return { links: [], problems: [`${file} has no "links" list — nothing is written over it until it has one.`], writable: false };
+    const links = [];
+    let bad = 0;
+    for (const r of rows) {
+        const v = valid(r);
+        if (v)
+            links.push(v);
+        else
+            bad++;
+    }
+    if (!bad)
+        return { links, problems: [], writable: true };
+    return { links, writable: false, problems: [`${bad} row${bad === 1 ? "" : "s"} in ${file} did not read as a link and ${bad === 1 ? "is" : "are"} not shown — pins are not changed from the phone until the file is fixed by hand.`] };
+}
+export async function savePins(file, links) {
+    await mkdir(dirname(file), { recursive: true });
+    const tmp = `${file}.${process.pid}.tmp`;
+    await writeFile(tmp, JSON.stringify({ links }, null, 2) + "\n", { mode: 0o600 });
+    await rename(tmp, file);
+}
+//# sourceMappingURL=store.mjs.map

package/packages/host/dist/extensions/links/host/store.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.mjs","sourceRoot":"","sources":["../../../../../extensions/links/host/store.mts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAiC,MAAM,oBAAoB,CAAC;AAEpG,MAAM,CAAC,MAAM,OAAO,GAAG,iBAAiB,CAAC;AACzC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAU,EAAiB,EAAE;IACtD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,IAAI,CAAC;AACnB,CAAC,CAAC;AACF,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgB,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAK,SAA+B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAEzH,SAAS,KAAK,CAAC,CAAU;IACvB,MAAM,CAAC,GAAG,CAA+B,CAAC;IAC1C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAClG,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAK,GAAG,CAAC,IAAI,CAAC,CAAC,IAAK,GAAG,KAAK,CAAC;IACtG,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,MAAM,CAAC,GAAe,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IACnF,IAAI,MAAM;QAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;;QAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IAChD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG;QAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACvE,OAAO,CAAC,CAAC;AACX,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACtD,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACvG,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,uBAAwB,CAAW,CAAC,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1G,CAAC;IACD,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,wFAAwF,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAAC,CAAC;IAC3L,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAE,CAAyB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAE,CAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACzG,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,qEAAqE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC3I,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YAAM,GAAG,EAAE,CAAC;IAAC,CAAC;IAC/E,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,GAAG,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,+BAA+B,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,mFAAmF,CAAC,EAAE,CAAC;AACxO,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,KAA4B;IACvE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjF,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC"}