workoffdesk 0.0.0-stage → 1.0.0

package/dist/server/system/tmux.js

@@ -0,0 +1,198 @@
+import { execFile } from 'node:child_process';
+import { randomBytes } from 'node:crypto';
+import { writeFileAtomic } from './paths.js';
+export const TMUX_CONF = `# Managed by workoffdesk. Edits are overwritten on start.
+set -g mouse on
+set -g history-limit 50000
+set -sg escape-time 0
+set -g status off
+setw -g window-size latest
+set -g set-titles on
+set -g default-terminal xterm-256color
+set -g focus-events on
+`;
+export function writeTmuxConf(path) {
+    writeFileAtomic(path, TMUX_CONF);
+}
+// The server also exits on its own once its last session ends, while a command is talking to it.
+const NOT_RUNNING = /no server running|error connecting|No such file or directory|server exited unexpectedly/;
+const NO_SESSION = /can't find session|session not found/;
+const stderrOf = (e) => String(e?.stderr ?? '');
+// Long enough for a loaded Mac; a client still waiting then is killed rather than left behind.
+const TIMEOUT_MS = 10_000;
+// A command tmux did not answer in time. Its server may still carry it out, so a paste may have gone in.
+export class TmuxTimeout extends Error {
+    mayHaveRun = true;
+    constructor(command) {
+        super(`tmux ${command ?? ''} did not answer in time`);
+    }
+}
+export class Tmux {
+    bin;
+    base;
+    baseEnv;
+    timeoutMs;
+    constructor(opts) {
+        this.bin = opts.bin ?? 'tmux';
+        this.base = ['-L', opts.socket, '-f', opts.conf];
+        this.baseEnv = opts.env ?? process.env;
+        this.timeoutMs = opts.timeoutMs ?? TIMEOUT_MS;
+    }
+    // tmux escapes every non-ASCII byte, tabs in -F output included, unless the
+    // locale says UTF-8; launchd starts processes with no locale at all.
+    env() {
+        const env = { ...this.baseEnv };
+        delete env.TMUX;
+        if (!/utf-?8/i.test(env.LC_ALL || env.LC_CTYPE || env.LANG || '')) {
+            delete env.LC_ALL;
+            env.LC_CTYPE = 'en_US.UTF-8';
+        }
+        return env;
+    }
+    run(args) {
+        return new Promise((resolve, reject) => {
+            let late = false;
+            const child = execFile(this.bin, [...this.base, ...args], { env: this.env(), maxBuffer: 64 * 1024 * 1024 }, (err, stdout, stderr) => {
+                clearTimeout(deadline);
+                if (late)
+                    reject(new TmuxTimeout(args[0]));
+                else if (err)
+                    reject(Object.assign(err, { stderr: String(stderr) }));
+                else
+                    resolve(String(stdout));
+            });
+            const deadline = setTimeout(() => {
+                late = true;
+                child.kill('SIGKILL');
+            }, this.timeoutMs);
+        });
+    }
+    async newSession(name, opts) {
+        const envArgs = Object.entries(opts.env).flatMap(([k, v]) => ['-e', `${k}=${v}`]);
+        const { cols, rows } = opts.size ?? { cols: 200, rows: 50 };
+        await this.run([
+            'new-session', '-d', '-s', name, '-c', opts.cwd, '-x', String(cols), '-y', String(rows),
+            ...envArgs,
+            ...(opts.command ? [opts.command] : []),
+        ]);
+    }
+    async listSessions() {
+        let out;
+        try {
+            out = await this.run([
+                'list-sessions', '-F', '#{session_name}\t#{session_created}\t#{session_activity}\t#{session_attached}\t#{pane_pid}',
+            ]);
+        }
+        catch (e) {
+            if (NOT_RUNNING.test(stderrOf(e)))
+                return [];
+            throw e;
+        }
+        return out
+            .split('\n')
+            .filter(Boolean)
+            .map((line) => {
+            const [name, created, activity, attached, pane] = line.split('\t');
+            return { name, created: +created * 1000, activity: +activity * 1000, attached: +attached, panePid: Number(pane) || undefined };
+        });
+    }
+    // The process the session's pane runs; undefined when the session is gone.
+    async panePid(name) {
+        try {
+            return Number(await this.run(['display-message', '-p', '-t', `=${name}:`, '#{pane_pid}'])) || undefined;
+        }
+        catch (e) {
+            if (NOT_RUNNING.test(stderrOf(e)) || NO_SESSION.test(stderrOf(e)))
+                return undefined;
+            throw e;
+        }
+    }
+    // Ends what the session's pane runs and starts `command` there instead, in the same session.
+    async respawnPane(name, opts) {
+        const envArgs = Object.entries(opts.env).flatMap(([k, v]) => ['-e', `${k}=${v}`]);
+        await this.run(['respawn-pane', '-k', '-t', `=${name}:`, '-c', opts.cwd, ...envArgs, opts.command]);
+    }
+    async hasSession(name) {
+        return (await this.listSessions()).some((s) => s.name === name);
+    }
+    async killSession(name) {
+        try {
+            await this.run(['kill-session', '-t', `=${name}`]);
+        }
+        catch (e) {
+            if (!NOT_RUNNING.test(stderrOf(e)) && !NO_SESSION.test(stderrOf(e)))
+                throw e;
+        }
+    }
+    async sendKeys(name, text) {
+        await this.run(['send-keys', '-t', `=${name}:`, '-l', text]);
+        await this.run(['send-keys', '-t', `=${name}:`, 'Enter']);
+    }
+    // One tmux command, so nothing can slip in between the check and the cancel.
+    async leaveCopyMode(name) {
+        await this.run(['if-shell', '-F', '-t', `=${name}:`, '#{pane_in_mode}', 'send-keys -X cancel']);
+    }
+    async capture(name, lines) {
+        return this.run(['capture-pane', '-p', '-e', '-J', '-t', `=${name}:`, '-S', `-${lines}`]);
+    }
+    // The screen as it is now, as plain text, without the scrollback.
+    async screen(name) {
+        return this.run(['capture-pane', '-p', '-t', `=${name}:`]);
+    }
+    // The screen as plain text and up to `lines` of the scrollback above it.
+    async screenWithHistory(name, lines) {
+        return this.run(['capture-pane', '-p', '-t', `=${name}:`, '-S', `-${lines}`]);
+    }
+    // The screen as plain text with each wrapped line joined back into one.
+    async screenJoined(name) {
+        return this.run(['capture-pane', '-p', '-J', '-t', `=${name}:`]);
+    }
+    // The screen with its colours and dimming as escape sequences.
+    async screenStyled(name) {
+        return this.run(['capture-pane', '-p', '-e', '-t', `=${name}:`]);
+    }
+    // The screen as `screen` does, and the scrollback lines just above it, from one capture.
+    async screenAndAbove(name, lines) {
+        const [text, height] = await Promise.all([
+            this.run(['capture-pane', '-p', '-t', `=${name}:`, '-S', `-${lines}`]),
+            this.run(['display-message', '-p', '-t', `=${name}:`, '#{pane_height}']),
+        ]);
+        const all = text.replace(/\n$/, '').split('\n');
+        const rows = Number(height.trim());
+        return { above: all.slice(0, -rows).join('\n'), screen: `${all.slice(-rows).join('\n')}\n` };
+    }
+    // Text as a terminal pastes it, bracketed for a program that asked for that, then Enter as a key.
+    async paste(name, text) {
+        const buffer = `workoffdesk-${randomBytes(6).toString('hex')}`;
+        const target = `=${name}:`;
+        await this.run(['set-buffer', '-b', buffer, '--', text, ';', 'paste-buffer', '-p', '-r', '-d', '-b', buffer, '-t', target, ';', 'send-keys', '-t', target, 'Enter']);
+    }
+    async sendRaw(name, keys) {
+        await this.run(['send-keys', '-t', `=${name}:`, '-l', '--', keys]);
+    }
+    async alternateOn(name) {
+        return (await this.run(['display-message', '-p', '-t', `=${name}:`, '#{alternate_on}'])).trim() === '1';
+    }
+    // Resizing makes the window's size manual; it is set back to follow whichever terminal attaches next.
+    async resizeWindow(name, size) {
+        await this.run(['resize-window', '-t', `=${name}:`, '-x', String(size.cols), '-y', String(size.rows)]);
+        await this.run(['set-option', '-w', '-t', `=${name}:`, 'window-size', 'latest']);
+    }
+    async windowSize(name) {
+        const out = await this.run(['display-message', '-p', '-t', `=${name}:`, '#{window_width} #{window_height}']);
+        const [cols, rows] = out.trim().split(' ').map(Number);
+        return { cols, rows };
+    }
+    async killServer() {
+        try {
+            await this.run(['kill-server']);
+        }
+        catch (e) {
+            if (!NOT_RUNNING.test(stderrOf(e)))
+                throw e;
+        }
+    }
+    attachArgs(name) {
+        return [...this.base, 'attach-session', '-t', `=${name}`];
+    }
+}

package/dist/server/system/version.js

@@ -0,0 +1,16 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+// The package this file is part of, found by walking up, as in the source and in a build it sits at a different depth.
+function readVersion() {
+    for (let dir = dirname(fileURLToPath(import.meta.url)); dir !== dirname(dir); dir = dirname(dir)) {
+        const file = join(dir, 'package.json');
+        if (!existsSync(file))
+            continue;
+        const pkg = JSON.parse(readFileSync(file, 'utf8'));
+        if (pkg.name === 'workoffdesk')
+            return pkg.version ?? '0.0.0';
+    }
+    return '0.0.0';
+}
+export const VERSION = readVersion();

package/dist/server/uploads/fileUpload.js

@@ -0,0 +1,171 @@
+import { execFile } from 'node:child_process';
+import { randomBytes } from 'node:crypto';
+import { appendFile, chmod, mkdir, readdir, readFile, rename, rm, stat, writeFile } from 'node:fs/promises';
+import { extname, join } from 'node:path';
+import { promisify } from 'node:util';
+import { Conflict, InvalidRequest } from '../system/errors.js';
+import { pruneOld, stamp } from './media.js';
+const run = promisify(execFile);
+// A file from the phone (a video, a document) comes in parts, each appended where the Mac's copy ends, so a
+// line that drops picks up from there. What it is does not matter: it is kept as it came, under its own name.
+export const PART_MAX = 8 * 1024 * 1024;
+const FILE_MAX = 4 * 1024 * 1024 * 1024;
+const ID = /^[a-z0-9]{16,40}$/;
+// Where a file waits while it comes, and what became of one that is whole, for a finish asked again.
+const PARTS = '.parts';
+const PART_MAX_AGE_MS = 2 * 24 * 60 * 60 * 1000;
+// A video is also given as stills, which Claude can look at: this many at most, at least a second apart.
+const FRAMES_AT_MOST = 30;
+const FRAMES_AT_ONCE = 4;
+const FRAME_WIDTH = 1280;
+const PROBE_MS = 15_000;
+const NAME_MAX = 120;
+// One write at a time for each file, so a part sent again while the first is still being written cannot
+// land twice.
+const busy = new Map();
+function inTurn(id, work) {
+    const next = (busy.get(id) ?? Promise.resolve()).then(work, work);
+    const settled = next.catch(() => { });
+    busy.set(id, settled);
+    void settled.then(() => busy.get(id) === settled && busy.delete(id));
+    return next;
+}
+function partOf(dir, id) {
+    if (!ID.test(id))
+        throw new InvalidRequest('bad upload id');
+    return join(dir, PARTS, id);
+}
+const sizeOf = (file) => stat(file).then((s) => s.size, () => 0);
+// How much of the file the Mac has.
+export const partSize = (dir, id) => sizeOf(partOf(dir, id));
+// Adds bytes where the Mac's copy ends; `at` is where the phone thinks that is. The size after.
+export function appendPart(dir, id, at, bytes) {
+    const file = partOf(dir, id);
+    return inTurn(id, async () => {
+        const size = await sizeOf(file);
+        if (at !== size)
+            throw new Conflict(`the Mac has ${size} bytes of this file`, 'upload-offset');
+        if (size + bytes.length > FILE_MAX)
+            throw new InvalidRequest('the file is too large');
+        await mkdir(join(dir, PARTS), { recursive: true, mode: 0o700 });
+        await appendFile(file, bytes, { mode: 0o600 });
+        return size + bytes.length;
+    });
+}
+// What is safe as a file name: one path segment, no quotes (the path is quoted to Claude), no control
+// characters, not too long.
+export function fileName(name) {
+    const clean = [...name.replace(/[/\\"\p{Cc}]+/gu, '_').trim()].slice(-NAME_MAX).join('');
+    return clean && clean !== '.' && clean !== '..' && !clean.startsWith('.') ? clean : `file${clean}`;
+}
+// Moves a whole file to a folder of its own under its own name and returns its path, with stills when it is
+// a video. Asked again, it answers the same.
+export function finishPart(dir, id, name, size) {
+    const file = partOf(dir, id);
+    const record = `${file}.json`;
+    return inTurn(id, async () => {
+        const done = await readFile(record, 'utf8').then((r) => JSON.parse(r), () => null);
+        if (done)
+            return done;
+        const have = await sizeOf(file);
+        if (have !== size)
+            throw new Conflict(`the Mac has ${have} of ${size} bytes`, 'upload-incomplete');
+        // An empty file never had a part to start it.
+        if (!size)
+            await mkdir(join(dir, PARTS), { recursive: true, mode: 0o700 }).then(() => writeFile(file, '', { mode: 0o600, flag: 'a' }));
+        await pruneOld(dir);
+        await pruneParts(dir);
+        const home = join(dir, `${stamp(new Date())}-${randomBytes(3).toString('hex')}`);
+        await mkdir(home, { mode: 0o700 });
+        const path = join(home, fileName(name));
+        await rename(file, path);
+        await chmod(path, 0o600);
+        const sent = { path, frames: await videoFrames(path, join(home, 'frames')) };
+        await writeFile(record, JSON.stringify(sent), { mode: 0o600 });
+        return sent;
+    });
+}
+async function pruneParts(dir) {
+    const parts = join(dir, PARTS);
+    const cutoff = Date.now() - PART_MAX_AGE_MS;
+    for (const name of await readdir(parts).catch(() => [])) {
+        const file = join(parts, name);
+        const at = (await stat(file).catch(() => null))?.mtimeMs ?? Infinity;
+        if (at < cutoff)
+            await rm(file, { force: true });
+    }
+}
+// Stills spread over a video, named by when they are (at-01m05s.jpg); null for what is not a video, or when
+// ffmpeg is not there.
+async function videoFrames(file, out) {
+    let seconds;
+    try {
+        const { stdout } = await run('ffprobe', ['-v', 'error', '-select_streams', 'v:0', '-show_entries', 'stream=codec_type:format=duration', '-of', 'json', file], {
+            timeout: PROBE_MS,
+        });
+        const info = JSON.parse(stdout);
+        seconds = Number(info.format?.duration);
+        if (!info.streams?.length || !(seconds >= 1))
+            return null;
+    }
+    catch {
+        return null;
+    }
+    const every = Math.max(1, Math.ceil(seconds / FRAMES_AT_MOST));
+    const times = [];
+    for (let at = 0; at < seconds; at += every)
+        times.push(at);
+    await mkdir(out, { mode: 0o700 });
+    let count = 0;
+    const still = async (at) => {
+        const name = `at-${String(Math.floor(at / 60)).padStart(2, '0')}m${String(at % 60).padStart(2, '0')}s.jpg`;
+        await run('ffmpeg', ['-v', 'error', '-ss', String(at), '-i', file, '-frames:v', '1', '-vf', `scale='min(${FRAME_WIDTH},iw)':-2`, '-q:v', '4', join(out, name)], {
+            timeout: PROBE_MS,
+        }).then(() => count++, () => { });
+    };
+    for (let i = 0; i < times.length; i += FRAMES_AT_ONCE)
+        await Promise.all(times.slice(i, i + FRAMES_AT_ONCE).map(still));
+    if (!count) {
+        await rm(out, { recursive: true, force: true });
+        return null;
+    }
+    return { dir: out, count, every };
+}
+// A file's folder in uploads, as finishPart names it.
+const FOLDER = /^\d{4}-\d{2}-\d{2}-\d{6}-[0-9a-f]{6}$/;
+const FRAMES = 'frames';
+function folderOf(dir, folder) {
+    if (!FOLDER.test(folder))
+        throw new InvalidRequest('bad folder');
+    return join(dir, folder);
+}
+// The first still of a video, which stands for it where it is shown; null for what has none.
+export async function videoCover(dir, folder) {
+    const frames = join(folderOf(dir, folder), FRAMES);
+    const first = (await readdir(frames).catch(() => [])).filter((n) => n.endsWith('.jpg')).sort()[0];
+    return first ? readFile(join(frames, first)) : null;
+}
+// The file a folder was made for: the one thing in it besides the stills.
+async function keptFile(dir, folder) {
+    const home = folderOf(dir, folder);
+    const name = (await readdir(home).catch(() => [])).find((n) => n !== FRAMES);
+    return name ? join(home, name) : null;
+}
+const VIDEO_TYPES = { '.mov': 'video/quicktime', '.mp4': 'video/mp4', '.m4v': 'video/mp4' };
+export async function videoFile(dir, folder) {
+    const file = await keptFile(dir, folder);
+    if (!file)
+        return null;
+    const size = await stat(file).then((s) => s.size, () => null);
+    return size === null ? null : { file, type: VIDEO_TYPES[extname(file).toLowerCase()] ?? 'application/octet-stream', size };
+}
+// The bytes a Range header asks for, as a video player asks for them; null for the whole file, and
+// 'unsatisfiable' for a range outside it.
+export function byteRange(range, size) {
+    const m = /^bytes=(\d*)-(\d*)$/.exec(range ?? '');
+    if (!m || (!m[1] && !m[2]))
+        return null;
+    const start = m[1] ? Number(m[1]) : Math.max(0, size - Number(m[2]));
+    const end = m[1] && m[2] ? Math.min(Number(m[2]), size - 1) : size - 1;
+    return start <= end && start < size ? { start, end } : 'unsatisfiable';
+}

package/dist/server/uploads/media.js

@@ -0,0 +1,139 @@
+import { execFile } from 'node:child_process';
+import { randomBytes } from 'node:crypto';
+import { chmod, mkdir, mkdtemp, open, readdir, readFile, realpath, rm, stat, writeFile, } from 'node:fs/promises';
+import { homedir, tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { promisify } from 'node:util';
+import { UnsupportedMedia } from '../system/errors.js';
+const run = promisify(execFile);
+export class NotAnImage extends UnsupportedMedia {
+}
+const HEIF_BRANDS = new Set([
+    'heic',
+    'heix',
+    'heim',
+    'heis',
+    'hevc',
+    'hevx',
+    'mif1',
+    'msf1',
+]);
+const UPLOAD_MAX_AGE_MS = 30 * 24 * 60 * 60 * 1000;
+// Judged by the bytes, never by what the client says the file is.
+export function imageKind(b) {
+    const ascii = (from, to) => b.subarray(from, to).toString('latin1');
+    if (b.length >= 8 && b.readUInt32BE(0) === 0x89504e47)
+        return 'png';
+    if (b.length >= 3 && b[0] === 0xff && b[1] === 0xd8 && b[2] === 0xff)
+        return 'jpg';
+    if (ascii(0, 4) === 'GIF8')
+        return 'gif';
+    if (ascii(0, 4) === 'RIFF' && ascii(8, 12) === 'WEBP')
+        return 'webp';
+    if (ascii(4, 8) === 'ftyp' && HEIF_BRANDS.has(ascii(8, 12)))
+        return 'heic';
+    return null;
+}
+export const stamp = (d) => {
+    const p = (n) => String(n).padStart(2, '0');
+    return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())}-${p(d.getHours())}${p(d.getMinutes())}${p(d.getSeconds())}`;
+};
+export async function pruneOld(dir) {
+    const cutoff = Date.now() - UPLOAD_MAX_AGE_MS;
+    for (const name of await readdir(dir).catch(() => [])) {
+        const file = join(dir, name);
+        if (name !== '.parts' && ((await stat(file).catch(() => null))?.mtimeMs ?? Infinity) < cutoff)
+            await rm(file, { recursive: true, force: true });
+    }
+}
+// The name saveImage gives an upload; nothing else is ever read back.
+const UPLOAD_NAME = /^\d{4}-\d{2}-\d{2}-\d{6}-[0-9a-f]{6}\.(png|jpg|gif|webp)$/;
+const MIME = {
+    png: 'image/png',
+    jpg: 'image/jpeg',
+    gif: 'image/gif',
+    webp: 'image/webp',
+    heic: 'image/heic',
+};
+// An upload to show back on the phone, typed by its bytes; null for any other name or for what is not an image.
+export async function readUpload(dir, name) {
+    if (!UPLOAD_NAME.test(name))
+        return null;
+    const bytes = await readFile(join(dir, name)).catch(() => null);
+    const kind = bytes && imageKind(bytes);
+    return kind ? { bytes: bytes, type: MIME[kind] } : null;
+}
+// Saves an image sent from the phone and returns its path, for Claude to be pointed at.
+// iPhone photos can be HEIC, which Claude cannot read; those are kept as JPEG.
+export async function saveImage(dir, bytes) {
+    const kind = imageKind(bytes);
+    if (!kind)
+        throw new NotAnImage('only images can be uploaded (PNG, JPEG, GIF, WebP, HEIC)', 'not-an-image');
+    await mkdir(dir, { recursive: true, mode: 0o700 });
+    await chmod(dir, 0o700);
+    await pruneOld(dir);
+    const base = join(dir, `${stamp(new Date())}-${randomBytes(3).toString('hex')}`);
+    if (kind !== 'heic') {
+        await writeFile(`${base}.${kind}`, bytes, { mode: 0o600, flag: 'wx' });
+        return `${base}.${kind}`;
+    }
+    const work = await mkdtemp(join(tmpdir(), 'workoffdesk-heic-'));
+    try {
+        const src = join(work, 'in.heic');
+        await writeFile(src, bytes, { mode: 0o600 });
+        await run('sips', ['-s', 'format', 'jpeg', src, '--out', `${base}.jpg`]);
+        await chmod(`${base}.jpg`, 0o600);
+        return `${base}.jpg`;
+    }
+    finally {
+        await rm(work, { recursive: true, force: true });
+    }
+}
+const NAMED_IMAGE = /\.(png|jpe?g|gif|webp)$/i;
+const NAMED_IMAGE_MAX = 20 * 1024 * 1024;
+const SEARCH_CHUNK = 1024 * 1024;
+// Whether a transcript holds `text` as it is written into JSON, read a piece at a time.
+async function mentions(transcript, text, chunk) {
+    const needle = Buffer.from(JSON.stringify(text).slice(1, -1));
+    const file = await open(transcript, 'r').catch(() => null);
+    if (!file)
+        return false;
+    try {
+        const buf = Buffer.alloc(chunk + needle.length);
+        let kept = 0;
+        for (;;) {
+            const { bytesRead } = await file.read(buf, kept, chunk, null);
+            if (!bytesRead)
+                return false;
+            const end = kept + bytesRead;
+            if (buf.subarray(0, end).includes(needle))
+                return true;
+            kept = Math.min(needle.length - 1, end);
+            buf.copy(buf, 0, end - kept, end);
+        }
+    }
+    finally {
+        await file.close();
+    }
+}
+// An image Claude named in a session (in what it said, or a file it read), to show in the chat. Only a
+// path written as such in the session's transcript is read, and only what is an image both by the name it
+// has once links are followed and by its bytes.
+export async function readMentionedImage(transcript, path, opts = {}) {
+    const absolute = path.startsWith('~/') ? join(opts.home ?? homedir(), path.slice(2)) : path;
+    if (!absolute.startsWith('/'))
+        return 'refused';
+    if (!(await mentions(transcript, path, opts.chunk ?? SEARCH_CHUNK)))
+        return 'refused';
+    const real = await realpath(absolute).catch((e) => (e?.code === 'ENOENT' ? null : undefined));
+    if (real === null)
+        return 'gone';
+    if (!real || !NAMED_IMAGE.test(real))
+        return 'refused';
+    const info = await stat(real);
+    if (!info.isFile() || info.size > (opts.maxBytes ?? NAMED_IMAGE_MAX))
+        return 'refused';
+    const bytes = await readFile(real);
+    const kind = imageKind(bytes);
+    return kind ? { bytes, type: MIME[kind] } : 'refused';
+}

package/dist/web/assets/Setup-DinzDcF1.js

@@ -0,0 +1 @@
+import{c as _,t,A as z,e as $,j as e,r as i,C as q,I as G}from"./main-w7i8PvU7.js";const k=["checks","account","address","service","phone"],O=["macos","node","tmux","claude"],R=s=>s.checks.filter(n=>O.includes(n.id)&&!n.ok);function L(s){return R(s).length?"checks":s.user?s.origin?s.checks.some(n=>n.id==="service"&&n.ok)?"phone":"service":"address":"account"}const P="setup-token";function M(s,n){const u=s.replace(/^#/,"");try{return u&&n.setItem(P,u),u||n.getItem(P)}catch{return u||null}}const F=12,W={getItem:s=>sessionStorage.getItem(s),setItem:(s,n)=>sessionStorage.setItem(s,n),removeItem:s=>sessionStorage.removeItem(s)},S=M(location.hash,W);location.hash&&history.replaceState(null,"",location.pathname);const{api:D}=_({base:()=>location.origin,headers:()=>S?{"x-setup-token":S}:{},onUnauthorized:()=>{}}),w=(s,n)=>D(s,{method:"POST",json:n}),v=s=>s instanceof z&&s.status===403?t.setupNoToken:$(s,t.failed,t.setupGone);function C({busy:s,children:n}){return s?e.jsx("span",{className:"spinner small"}):e.jsx(e.Fragment,{children:n})}function Y({state:s,reload:n,next:u}){const[a,r]=i.useState(!1),l=R(s),d=s.checks.filter(o=>O.includes(o.id)),x=async()=>{r(!0),await n(),r(!1)};return e.jsxs(e.Fragment,{children:[e.jsx("p",{className:"setup-note",children:l.length?t.setupChecksFix:t.setupChecksNote}),e.jsx("div",{className:"group",children:[...l,...d.filter(o=>o.ok)].map(o=>e.jsx(q,{check:o},o.id))}),e.jsx("div",{className:"setup-actions",children:l.length?e.jsx("button",{className:"btn primary",onClick:x,disabled:a,children:e.jsx(C,{busy:a,children:t.setupCheckAgain})}):e.jsx("button",{className:"btn primary",onClick:u,children:t.setupContinue})})]})}function J({state:s,reload:n,next:u}){const[a,r]=i.useState(!s.user),[l,d]=i.useState(""),[x,o]=i.useState(""),[b,N]=i.useState(""),[g,f]=i.useState(null),[c,p]=i.useState(!1);if(!a&&s.user)return e.jsxs(e.Fragment,{children:[e.jsx("p",{className:"setup-note",children:t.setupAccountHave(s.user)}),e.jsxs("div",{className:"setup-actions",children:[e.jsx("button",{className:"btn primary",onClick:u,children:t.setupKeep}),e.jsx("button",{className:"btn",onClick:()=>r(!0),children:t.setupReplace})]})]});const j=async h=>{if(h.preventDefault(),x!==b)return f(t.setupPasswordsDiffer);p(!0),f(null);try{await w("/api/setup/account",{username:l,password:x}),await n(),u()}catch(y){f(v(y))}finally{p(!1)}};return e.jsxs("form",{className:"setup-form",onSubmit:j,children:[e.jsx("p",{className:"setup-note",children:t.setupAccountNote}),s.user&&e.jsx("p",{className:"setup-warn",children:t.setupReplaceNote}),e.jsxs("label",{className:"field",children:[t.username,e.jsx("input",{value:l,onChange:h=>d(h.target.value),autoComplete:"username",autoCapitalize:"none",spellCheck:!1,required:!0})]}),e.jsxs("label",{className:"field",children:[t.password,e.jsx("input",{type:"password",value:x,onChange:h=>o(h.target.value),autoComplete:"new-password",minLength:F,required:!0}),e.jsx("small",{children:t.setupPasswordRule(F)})]}),e.jsxs("label",{className:"field",children:[t.setupPasswordAgain,e.jsx("input",{type:"password",value:b,onChange:h=>N(h.target.value),autoComplete:"new-password",required:!0})]}),g&&e.jsx("div",{className:"alert",role:"alert",children:g}),e.jsxs("div",{className:"setup-actions",children:[e.jsx("button",{className:"btn primary",type:"submit",disabled:c,children:e.jsx(C,{busy:c,children:t.setupSaveAccount})}),s.user&&e.jsx("button",{className:"btn",type:"button",onClick:()=>r(!1),children:t.cancel})]})]})}function Q({state:s,reload:n,next:u}){const{tailscale:a,cloudflared:r}=s.remote,l=(r==null?void 0:r.tunnels)??[],[d,x]=i.useState(a!=null&&a.running?"tailscale":l.length?"cloudflare":"other"),[o,b]=i.useState(l[0]??""),[N,g]=i.useState(""),[f,c]=i.useState("https://"),[p,j]=i.useState(null),[h,y]=i.useState(null),H=async m=>{m.preventDefault();const E=d==="tailscale"?{kind:d}:d==="cloudflare"?{kind:d,tunnel:o,hostname:N.trim()}:{kind:d,origin:f.trim()};y("save"),j(null);try{await w("/api/setup/address",E),await n(),u()}catch(T){j(v(T))}finally{y(null)}},K=async()=>{y("check"),await n(),y(null)},A=(m,E,T,I,U)=>e.jsxs("label",{className:`setup-choice${d===m?" chosen":""}${I?"":" off"}`,children:[e.jsx("input",{type:"radio",name:"kind",checked:d===m,disabled:!I,onChange:()=>x(m)}),e.jsxs("span",{className:"setup-choice-text",children:[e.jsx("strong",{children:E}),e.jsx("span",{children:T}),d===m&&U]})]});return e.jsxs("form",{className:"setup-form",onSubmit:H,children:[e.jsx("p",{className:"setup-note",children:t.setupAddressNote}),s.origin&&e.jsxs("div",{className:"setup-now",children:[e.jsx("span",{children:t.setupAddressNow(s.origin)}),e.jsx("button",{className:"btn small",type:"button",onClick:u,children:t.setupKeep})]}),e.jsxs("div",{className:"setup-choices",children:[a&&A("tailscale",t.setupTailscale,a.running?t.setupTailscaleUse(a.dnsName):t.setupTailscaleDown,a.running),l.length>0&&A("cloudflare",t.setupCloudflare,t.setupCloudflareNote,!0,e.jsxs("span",{className:"setup-choice-fields",children:[e.jsxs("label",{className:"field",children:[t.setupTunnel,e.jsx("select",{value:o,onChange:m=>b(m.target.value),children:l.map(m=>e.jsx("option",{children:m},m))})]}),e.jsxs("label",{className:"field",children:[t.setupHostname,e.jsx("input",{value:N,onChange:m=>g(m.target.value),placeholder:"workoffdesk.example.com",autoCapitalize:"none",spellCheck:!1,required:!0})]})]})),A("other",t.setupOther,t.setupOtherNote(s.port),!0,e.jsx("span",{className:"setup-choice-fields",children:e.jsx("label",{className:"field",children:e.jsx("input",{value:f,onChange:m=>c(m.target.value),type:"url",autoCapitalize:"none",spellCheck:!1,required:!0,"aria-label":t.setupOther})})}))]}),!(a!=null&&a.running)&&!l.length&&e.jsx("p",{className:"setup-note",children:t.setupNoWayIn}),p&&e.jsx("div",{className:"alert",role:"alert",children:p}),e.jsxs("div",{className:"setup-actions",children:[e.jsx("button",{className:"btn primary",type:"submit",disabled:h!==null,children:e.jsx(C,{busy:h==="save",children:t.setupUseAddress})}),e.jsx("button",{className:"btn",type:"button",onClick:K,disabled:h!==null,children:e.jsx(C,{busy:h==="check",children:t.setupCheckAgain})})]})]})}function V({reload:s,next:n}){const[u,a]=i.useState(!1),[r,l]=i.useState(null),d=async()=>{a(!0),l(null);try{const x=await w("/api/setup/service",{});await s(),x.ok?n():l(x.message)}catch(x){l(v(x))}finally{a(!1)}};return e.jsxs(e.Fragment,{children:[e.jsx("p",{className:"setup-note",children:t.setupServiceNote}),u&&e.jsxs("div",{className:"setup-busy",role:"status",children:[e.jsx("span",{className:"spinner small"}),t.setupInstalling]}),r&&e.jsx("div",{className:"alert setup-pre",role:"alert",children:r}),e.jsx("div",{className:"setup-actions",children:e.jsx("button",{className:"btn primary",onClick:d,disabled:u,children:r?t.tryAgain:t.setupInstall})})]})}function B({state:s}){return e.jsxs(e.Fragment,{children:[s.qr&&e.jsx("div",{className:"setup-qr",dangerouslySetInnerHTML:{__html:s.qr}}),e.jsx("p",{className:"setup-origin",children:s.origin}),s.user&&e.jsx("p",{className:"setup-note centered",children:t.setupPhoneNote(s.user)})]})}function X({state:s,finish:n}){const[u,a]=i.useState(!1),r=s.checks.filter(l=>!l.ok);return e.jsxs(e.Fragment,{children:[e.jsx(B,{state:s}),e.jsx("div",{className:`mac-summary ${r.length?"bad":"ok"}`,children:r.length?t.macProblemCount(r.length):t.macAllGood}),r.length>0&&e.jsx("div",{className:"group",children:r.map(l=>e.jsx(q,{check:l},l.id))}),e.jsx("div",{className:"setup-actions",children:e.jsx("button",{className:"btn primary",disabled:u,onClick:async()=>{a(!0),await n(),a(!1)},children:t.setupFinish})})]})}const Z=(s,n)=>s==="account"?n.user:s==="address"?n.origin:s==="service"?t.macRunning:null,ee=["account","address"];function te(){const[s,n]=i.useState(null),[u,a]=i.useState(null),[r,l]=i.useState(S?null:t.setupNoToken),[d,x]=i.useState(!1),o=i.useCallback(async()=>{try{const c=await D("/api/setup/state");n(c),l(null),a(p=>p??L(c))}catch(c){l(v(c))}},[]);i.useEffect(()=>{document.title=t.setupTitle,S&&o()},[o]);const b=async()=>{try{await w("/api/setup/done",{}),x(!0)}catch(c){l(v(c))}},N=u?k.indexOf(u):-1,g=()=>a(k[Math.min(N+1,k.length-1)]),f=(c,p)=>c==="checks"?e.jsx(Y,{state:p,reload:o,next:g}):c==="account"?e.jsx(J,{state:p,reload:o,next:g}):c==="address"?e.jsx(Q,{state:p,reload:o,next:g}):c==="service"?e.jsx(V,{reload:o,next:g}):e.jsx(X,{state:p,finish:b});return e.jsxs("main",{className:"setup",children:[e.jsxs("header",{className:"brand setup-brand",children:[e.jsx("img",{src:"/icon.svg",alt:""}),e.jsx("h1",{children:t.setupTitle}),e.jsx("p",{children:t.setupSub})]}),d?e.jsxs("div",{className:"setup-done",children:[e.jsx("div",{className:"mac-summary ok",role:"status",children:t.setupFinished}),s&&e.jsx(B,{state:s})]}):e.jsxs(e.Fragment,{children:[r&&e.jsx("div",{className:"alert setup-gap",role:"alert",children:r}),!s&&!r&&e.jsx("div",{className:"mac-loading",children:e.jsx("span",{className:"spinner"})}),s&&u&&e.jsx("ol",{className:"setup-steps",children:k.map((c,p)=>{const j=p<N?"done":p===N?"now":"later",h=j==="done"?Z(c,s):null;return e.jsxs("li",{className:`setup-step ${j}`,"aria-current":j==="now"?"step":void 0,children:[e.jsxs("div",{className:"setup-step-head",children:[e.jsx("span",{className:"setup-num",children:j==="done"?e.jsx(G,{}):p+1}),e.jsx("strong",{children:t.setupSteps[c]}),h&&e.jsx("span",{className:"setup-summary",children:h}),j==="done"&&ee.includes(c)&&e.jsx("button",{className:"setup-change",onClick:()=>a(c),children:t.setupChange})]}),j==="now"&&e.jsx("div",{className:"setup-body",children:f(c,s)})]},c)})})]})]})}export{te as Setup};