warp-runtime 1.4.0

//! System signals (notes/system_signals.md): handlers of events from outside the program, exported functions the
//! runtime calls at check points: `signal_poll()` (at the start and end of main and at each loop start of a program
//! with such handlers) and `sleep`, which wakes for them. `on interrupt {…}` is `on·interrupt`, run after a ctrl-c:
//! the first poll installs the ctrl-c handler (Unix SIGINT, Windows SetConsoleCtrlHandler), which only sets a flag; a
//! second ctrl-c within a second, or before the handler ran, ends the run at once (exit code 130), so a handler that
//! ignores ctrl-c never makes a program unstoppable. `on every 5 seconds {…}` is `on·every·0`, started by `signal_listen(0, 0, 5000)` where the handler is
//! declared. `on file "notes.txt" change {…}` is `on·file·0`, started by `signal_watch(0, "notes.txt")`: a timer of
//! FILE_CHECK_PERIOD that fires only when the file's modification time or size changed (it appeared, was written, or went).
//! `users := fetch url` runs on·fetch·0 once the reply arrived (await_ready, src/web/fetches.rs).
//! A run that allows it (`warp run`, built executables) stays after main while a timer or watch lives.
use crate::host_words::{
	CLOCK_WEEKDAYS, EXIT_HANDLER, FILE_HANDLER_PREFIX, INTERRUPT_HANDLER, LISTEN_CLOCK, LISTEN_FRAME, SHARED_HANDLER,
	TIMER_HANDLER_PREFIX,
};
use std::cell::{Cell, RefCell};
use std::path::PathBuf;
use std::sync::atomic::{AtomicBool, Ordering};
use std::time::SystemTime;
use std::time::{Duration, Instant};
use wasmtime::{AsContextMut, Func, Instance, Result, Store, Val};

/// The constructors a handler's `event` is built with: exports the stub calls besides the handlers
pub const NEW_EMPTY: &str = "new_empty";
pub const NEW_INT: &str = "new_int";
/// How often a watched file's modification time is read: polling, no file-system events yet
const FILE_CHECK_PERIOD: Duration = Duration::from_millis(100);
/// How often an awaited thing (await_ready) is looked at
const AWAIT_CHECK_PERIOD: Duration = Duration::from_millis(10);
/// How often a sleeping program with listeners on shared values (on·shared) looks at them
const SHARED_CHECK_PERIOD: Duration = Duration::from_millis(10);

struct Timer {
	handler: String,
	repeat: Repeat,
	/// None once a one-shot timer fired
	due: Option<Instant>,
	trigger: Trigger,
}

/// What must hold, besides the time, for a due timer to run its handler
enum Trigger {
	Always,
	/// a watched file and its stamp when last read: the handler runs only when that changed
	FileChange(PathBuf, Option<FileStamp>),
	/// something awaited (a fetch's reply), described for "listening: …": the handler runs once, when `ready()`
	Ready(String, Box<dyn FnMut() -> bool>),
	/// the paint window shows (frames): the handler runs while it does and the timer ends as it closes; without a
	/// window it runs once (`ran`), as a single paint would, so a headless run ends
	WindowShows {
		ran: bool,
	},
}

impl Trigger {
	/// Whether the handler runs now: a changed file, an awaited thing ready (which ends the timer)
	fn holds(&mut self, due: &mut Option<Instant>) -> bool {
		match self {
			Trigger::Always => true,
			Trigger::FileChange(path, seen) => {
				let current = stamp(path);
				let changed = current != *seen;
				*seen = current;
				changed
			}
			Trigger::Ready(_, ready) => {
				let holds = ready();
				if holds {
					*due = None;
				}
				holds
			}
			Trigger::WindowShows { ran } => {
				let holds = crate::system_values::window_shows() || !*ran;
				*ran = true;
				if !holds {
					*due = None;
				}
				holds
			}
		}
	}
}

#[derive(Clone, Copy)]
enum Repeat {
	Every(Duration),
	/// a local time of day on the weekdays of the mask (bit 0 Sunday), every week or only `once`
	Clock {
		minute_of_day: i64,
		weekdays: i64,
		once: bool,
	},
}

impl Repeat {
	/// The first time from `now`: a clock is read anew each time, so a change of the local time (summer time) counts
	fn first(self, now: Instant) -> Instant {
		match self {
			Repeat::Every(period) => now + period,
			Repeat::Clock { minute_of_day, weekdays, .. } => {
				let (weekday, second_of_day) = local_time();
				now + Duration::from_secs(seconds_until_on(minute_of_day, weekdays, weekday, second_of_day) as u64)
			}
		}
	}

	/// The time after the one `due` fired at `now` (one call however late); None after a one-shot
	fn after(self, due: Instant, now: Instant) -> Option<Instant> {
		match self {
			Repeat::Every(period) => Some((due + period).max(now)),
			Repeat::Clock { once: true, .. } => None,
			Repeat::Clock { .. } => Some(self.first(now)),
		}
	}

	/// `every 5 seconds`, `every monday at 9:00`, `at 9:00`
	fn spoken(self) -> String {
		match self {
			Repeat::Every(period) => format!("every {}", spoken(period)),
			Repeat::Clock { minute_of_day, once: true, .. } => format!("at {}", clock_time(minute_of_day)),
			Repeat::Clock { minute_of_day, weekdays, once: false } => {
				format!("every {} at {}", spoken_days(weekdays), clock_time(minute_of_day))
			}
		}
	}
}

const WEEKDAY_NAMES: [&str; 7] = ["sunday", "monday", "tuesday", "wednesday", "thursday", "friday", "saturday"];
pub const EVERY_DAY: i64 = 0b111_1111;

fn spoken_days(weekdays: i64) -> String {
	if weekdays & EVERY_DAY == EVERY_DAY {
		return "day".to_string();
	}
	WEEKDAY_NAMES
		.iter()
		.enumerate()
		.filter(|(day, _)| weekdays & (1 << day) != 0)
		.map(|(_, name)| *name)
		.collect::<Vec<_>>()
		.join(" and ")
}

fn clock_time(minute_of_day: i64) -> String {
	format!("{}:{:02}", minute_of_day / 60, minute_of_day % 60)
}

fn add_timer(handler: String, repeat: Repeat, trigger: Trigger) {
	let timer = Timer { handler, repeat, due: Some(repeat.first(Instant::now())), trigger };
	TIMERS.with(|timers| timers.borrow_mut().push(timer));
}

thread_local! {
	/// the timers of the run on this thread
	static TIMERS: RefCell<Vec<Timer>> = const { RefCell::new(Vec::new()) };
	/// the handlers running now on this thread: a due one still running skips its turn, else its loop's signal poll
	/// would call it again inside itself, without end (card timer-handler)
	static RUNNING_HANDLERS: RefCell<Vec<String>> = const { RefCell::new(Vec::new()) };
}
static STAYING_ALLOWED: AtomicBool = AtomicBool::new(false);

thread_local! {
	/// the code of the `exit` that ended the last run on this thread
	static EXIT_CODE: Cell<Option<i32>> = const { Cell::new(None) };
	/// a prerender's run (until_first_frame): its first frame or sleep ends it
	static FIRST_FRAME_ENDS_RUN: Cell<bool> = const { Cell::new(false) };
}

/// The run of `warp build --site`'s prerender (src/web/site.rs, card site-build): an animation's first frame or sleep ends
/// main as `exit` does, so the page is read as it stands then, and an endless loop builds too
pub fn until_first_frame<T>(run: impl FnOnce() -> T) -> T {
	FIRST_FRAME_ENDS_RUN.set(true);
	let value = run();
	FIRST_FRAME_ENDS_RUN.set(false);
	value
}

/// Before a frame (paint) or a sleep: the end of a prerender's run (until_first_frame)
pub fn end_at_first_frame() -> Result<()> {
	match FIRST_FRAME_ENDS_RUN.get() {
		true => Err(wasmtime::Error::new(ExitRequest(0))),
		false => Ok(()),
	}
}

/// `exit(code)` (P121): the error that unwinds the run; the runner ends the run with ø and keeps the code
#[derive(Debug)]
pub struct ExitRequest(pub i32);

impl std::fmt::Display for ExitRequest {
	fn fmt(&self, formatter: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
		write!(formatter, "exit({})", self.0)
	}
}

impl std::error::Error for ExitRequest {}

/// Whether the run ended by `exit`: the code is kept for take_exit_code
pub fn ended_by_exit<R>(outcome: &Result<R>) -> bool {
	let code = outcome.as_ref().err().and_then(|error| error.downcast_ref::<ExitRequest>()).map(|request| request.0);
	code.inspect(|code| EXIT_CODE.with(|kept| kept.set(Some(*code)))).is_some()
}

/// The code of the `exit` that ended the last run on this thread (once)
pub fn take_exit_code() -> Option<i32> {
	EXIT_CODE.with(Cell::take)
}

/// A new run on this thread starts without timers
pub fn forget_timers() {
	TIMERS.with(|timers| timers.borrow_mut().clear());
}

/// `signal_listen(kind, id, argument)`: the handler on·every·id runs every `argument` milliseconds (LISTEN_EVERY), each
/// frame of that many milliseconds while the paint window shows, once without one (LISTEN_FRAME), or at a local time
/// of day (LISTEN_CLOCK: weekdays · CLOCK_WEEKDAYS + minute of day, weekdays a mask with bit 0 Sunday, 0 once)
pub fn listen(kind: i64, id: i64, argument: i64) {
	let every = Repeat::Every(Duration::from_millis(argument.max(1) as u64));
	let (repeat, trigger) = match kind {
		LISTEN_FRAME => (every, Trigger::WindowShows { ran: false }),
		LISTEN_CLOCK => {
			let weekdays = argument / CLOCK_WEEKDAYS;
			let clock = Repeat::Clock {
				minute_of_day: argument % CLOCK_WEEKDAYS,
				weekdays: if weekdays == 0 { EVERY_DAY } else { weekdays },
				once: weekdays == 0,
			};
			(clock, Trigger::Always)
		}
		_ => (every, Trigger::Always),
	};
	add_timer(format!("{TIMER_HANDLER_PREFIX}{id}"), repeat, trigger);
}

/// The handler `handler` runs once, at the first check point after `ready()` holds (a fetch's reply arrived); it
/// replaces a timer of that handler still waiting (a fetch started anew)
pub fn await_ready(handler: String, awaited: String, ready: impl FnMut() -> bool + 'static) {
	TIMERS.with(|timers| timers.borrow_mut().retain(|timer| timer.handler != handler));
	add_timer(handler, Repeat::Every(AWAIT_CHECK_PERIOD), Trigger::Ready(awaited, Box::new(ready)));
}

const DAY: Duration = Duration::from_secs(24 * 3600);
const WEEK_DAYS: i64 = 7;

/// Seconds from `second_of_day` to the next `minute_of_day` (a whole day when it is now)
pub fn seconds_until(minute_of_day: i64, second_of_day: i64) -> i64 {
	seconds_until_on(minute_of_day, EVERY_DAY, 0, second_of_day)
}

/// Seconds from `second_of_day` of `weekday` (0 Sunday) to the next `minute_of_day` on a weekday of the mask (a whole
/// week when that is now and the mask has only this day); an empty mask is every day
pub fn seconds_until_on(minute_of_day: i64, weekdays: i64, weekday: i64, second_of_day: i64) -> i64 {
	let day = DAY.as_secs() as i64;
	let weekdays = if weekdays & EVERY_DAY == 0 { EVERY_DAY } else { weekdays };
	let today = minute_of_day * 60 - second_of_day;
	(0..=WEEK_DAYS)
		.map(|days_ahead| (days_ahead, today + days_ahead * day))
		.find(|(days_ahead, seconds)| *seconds > 0 && weekdays & (1 << ((weekday + days_ahead) % WEEK_DAYS)) != 0)
		.map_or(WEEK_DAYS * day, |(_, seconds)| seconds)
}

/// The local weekday (0 Sunday) and seconds since local midnight (UTC where the platform gives no time zone)
fn local_time() -> (i64, i64) {
	local_time_at(SystemTime::now().duration_since(SystemTime::UNIX_EPOCH).unwrap_or_default())
}

/// The local time of day in milliseconds since midnight (system value "time of day", the word `time`)
pub fn millisecond_of_day() -> i64 {
	let since = SystemTime::now().duration_since(SystemTime::UNIX_EPOCH).unwrap_or_default();
	local_time_at(since).1 * 1000 + since.subsec_millis() as i64
}

fn local_time_at(since_epoch: Duration) -> (i64, i64) {
	let now = since_epoch.as_secs() as i64;
	let local = now + local_offset_at(now * 1000);
	let day = DAY.as_secs() as i64;
	const THURSDAY: i64 = 4; // 1970-01-01
	((local.div_euclid(day) + THURSDAY) % WEEK_DAYS, local.rem_euclid(day))
}

/// Seconds east of UTC in the environment's time zone (TZ, else the system's) at the instant `milliseconds` after
/// 1970: daylight saving included. UTC where the platform gives no time zone
pub fn local_offset_at(milliseconds: i64) -> i64 {
	#[cfg(unix)]
	{
		let time = milliseconds.div_euclid(1000) as libc::time_t;
		let mut local: libc::tm = unsafe { std::mem::zeroed() };
		if !unsafe { libc::localtime_r(&time, &mut local) }.is_null() {
			return local.tm_gmtoff as i64;
		}
	}
	let _ = milliseconds;
	0
}

/// `signal_watch(id, path)`: the handler on·file·id runs when the file changes from now on
pub fn watch_file(id: i64, path: String) {
	let path = PathBuf::from(path);
	let seen = stamp(&path);
	add_timer(format!("{FILE_HANDLER_PREFIX}{id}"), Repeat::Every(FILE_CHECK_PERIOD), Trigger::FileChange(path, seen));
}

/// Modification time and size: a rewrite within one tick of a coarse clock still changes the size, mostly
type FileStamp = (SystemTime, u64);

fn stamp(path: &PathBuf) -> Option<FileStamp> {
	let metadata = std::fs::metadata(path).ok()?;
	Some((metadata.modified().ok()?, metadata.len()))
}

fn next_due() -> Option<Instant> {
	TIMERS.with(|timers| timers.borrow().iter().filter_map(|timer| timer.due).min())
}

/// The handlers to run now: on·interrupt after a ctrl-c (watched only by a program with that handler: any other
/// ends at a ctrl-c as usual), then each due timer's (rescheduled; one call however late)
fn due_handlers(handles_interrupt: bool) -> Vec<String> {
	let mut due = vec![];
	if handles_interrupt && interrupt::take() {
		due.push(INTERRUPT_HANDLER.to_string());
	}
	let now = Instant::now();
	TIMERS.with(|timers| {
		let mut timers = timers.borrow_mut();
		for timer in timers.iter_mut() {
			let Some(when) = timer.due.filter(|when| *when <= now) else {
				continue;
			};
			timer.due = timer.repeat.after(when, now);
			if !timer.trigger.holds(&mut timer.due) {
				continue;
			}
			due.push(timer.handler.clone());
		}
		timers.retain(|timer| timer.due.is_some());
	});
	due
}

/// Run the due handlers, then the checks of the listeners on shared values (each check point looks at them);
/// `export` finds a function of the instance by name
pub fn run_due_handlers<S: AsContextMut>(
	store: &mut S,
	mut export: impl FnMut(&mut S, &str) -> Option<Func>,
) -> Result<()> {
	let handles_interrupt = export(store, INTERRUPT_HANDLER).is_some();
	let shared_checks = export(store, SHARED_HANDLER).map(|_| SHARED_HANDLER.to_string());
	for name in due_handlers(handles_interrupt).into_iter().chain(shared_checks) {
		let running = RUNNING_HANDLERS.with(|running| running.borrow().contains(&name));
		let Some(handler) = export(store, &name).filter(|_| !running) else { continue };
		RUNNING_HANDLERS.with(|running| running.borrow_mut().push(name.clone()));
		let outcome = call_handler(store, handler, None, &mut export);
		RUNNING_HANDLERS.with(|running| running.borrow_mut().retain(|other| *other != name));
		outcome?;
	}
	Ok(())
}

fn call_handler<S: AsContextMut>(
	store: &mut S,
	handler: Func,
	event: Option<i64>,
	export: &mut impl FnMut(&mut S, &str) -> Option<Func>,
) -> Result<()> {
	let mut arguments = vec![];
	// a handler that reads `event` gets it (the exit code of `on exit`, P134), as a number or a Node; else ø
	if let Some(parameter) = handler.ty(&*store).params().next() {
		arguments.push(match (parameter, event) {
			(wasmtime::ValType::I64, event) => Val::I64(event.unwrap_or(0)),
			(_, Some(event)) => node_of(store, export, NEW_INT, &[Val::I64(event)])?,
			(_, None) => node_of(store, export, NEW_EMPTY, &[])?,
		});
	}
	let mut results = vec![Val::I64(0); handler.ty(&*store).results().len()];
	handler.call(&mut *store, &arguments, &mut results)
}

/// The Node a constructor export of the program builds (`new_empty()`, `new_int(n)`)
fn node_of<S: AsContextMut>(
	store: &mut S,
	export: &mut impl FnMut(&mut S, &str) -> Option<Func>,
	constructor: &str,
	arguments: &[Val],
) -> Result<Val> {
	let function = export(store, constructor).ok_or_else(|| wasmtime::Error::msg(format!("no {constructor}")))?;
	let mut built = [Val::AnyRef(None)];
	function.call(&mut *store, arguments, &mut built)?;
	Ok(built[0])
}

/// `on exit {…}`: the run ends (main returned, the timers stopped, or `exit(code)`), so on·exit runs once; an `exit`
/// inside it ends it with that code (ended_by_exit keeps it)
pub fn run_exit_handler<S: AsContextMut>(
	store: &mut S,
	mut export: impl FnMut(&mut S, &str) -> Option<Func>,
) -> Result<()> {
	let Some(handler) = export(store, EXIT_HANDLER) else {
		return Ok(());
	};
	let code = EXIT_CODE.with(Cell::get).unwrap_or(0);
	call_handler(store, handler, Some(code.into()), &mut export)
}

/// The outcome of a run and its exit handler: the handler runs after a normal end and after `exit(code)` (whose code
/// stays, unless the handler exits with its own), never after a failure
pub fn with_exit_handler<S: AsContextMut, R>(
	outcome: Result<R>,
	store: &mut S,
	export: impl FnMut(&mut S, &str) -> Option<Func>,
) -> Result<Option<R>> {
	let exited = ended_by_exit(&outcome);
	let value = match outcome {
		Ok(value) => Some(value),
		Err(_) if exited => None,
		Err(error) => return Err(error),
	};
	let handled = run_exit_handler(store, export);
	if ended_by_exit(&handled) {
		return Ok(None);
	}
	handled?;
	Ok(value)
}

/// Sleep for `duration`, running the handlers that come due on the way; a ctrl-c ends the sleep early
pub fn sleep_with_handlers<S: AsContextMut>(
	store: &mut S,
	duration: Duration,
	mut export: impl FnMut(&mut S, &str) -> Option<Func>,
) -> Result<()> {
	let end = Instant::now() + duration;
	let checks_shared = export(store, SHARED_HANDLER).is_some();
	loop {
		let wake = next_due().map_or(end, |due| due.min(end));
		let wake = if checks_shared { wake.min(Instant::now() + SHARED_CHECK_PERIOD) } else { wake };
		let interrupted = interrupt::wait_until(wake);
		run_due_handlers(store, &mut export)?;
		if interrupted || Instant::now() >= end {
			return Ok(());
		}
	}
}

/// `warp run` and built executables: a program may stay after main while it listens
pub fn allow_staying() {
	STAYING_ALLOWED.store(true, Ordering::SeqCst);
}

/// `5 seconds`, `1 second`, `200 ms`
fn spoken(period: Duration) -> String {
	match (period.as_millis(), period.as_millis() % 1000) {
		(1000, _) => "1 second".to_string(),
		(milliseconds, 0) => format!("{} seconds", milliseconds / 1000),
		(milliseconds, _) => format!("{milliseconds} ms"),
	}
}

/// After main: while a timer lives (and the run allows it), wait for the next due handler and run it
pub fn stay_while_listening<T>(store: &mut Store<T>, instance: &Instance) -> Result<()> {
	if !STAYING_ALLOWED.load(Ordering::SeqCst) || next_due().is_none() {
		return Ok(());
	}
	// a window's frames say nothing: the window shows that the program goes on, and closing it ends the run
	let listening: Vec<String> = TIMERS.with(|timers| {
		timers
			.borrow()
			.iter()
			.filter_map(|timer| match &timer.trigger {
				Trigger::FileChange(path, _) => Some(format!("file {} change", path.display())),
				Trigger::Ready(awaited, _) => Some(awaited.clone()),
				Trigger::WindowShows { .. } => None,
				Trigger::Always => Some(timer.repeat.spoken()),
			})
			.collect()
	});
	if !listening.is_empty() {
		eprintln!("listening: {} (ctrl-c to stop)", listening.join(", "));
	}
	while let Some(due) = next_due() {
		interrupt::wait_until(due);
		run_due_handlers(store, |store, name| instance.get_func(&mut *store, name))?;
	}
	Ok(())
}

/// A ctrl-c ends the run at once, instead of reaching `on interrupt`, when the one before is still `pending` (the
/// program did not take it yet) or came `last` (monotonic milliseconds, 0: none yet) less than a second before `now`
pub fn ctrl_c_ends_run(pending: bool, last: i64, now: i64) -> bool {
	const HARD_EXIT_WITHIN_MILLISECONDS: i64 = 1000;
	pending || (last != 0 && now - last < HARD_EXIT_WITHIN_MILLISECONDS)
}

/// `on interrupt`: the first poll installs the platform's ctrl-c handler (Unix SIGINT, Windows SetConsoleCtrlHandler),
/// which only sets a flag or ends the run (ctrl_c_ends_run)
mod interrupt {
	use std::sync::atomic::{AtomicBool, AtomicI64, Ordering};
	use std::sync::Once;
	use std::time::{Duration, Instant};

	const EXIT_INTERRUPTED: i32 = 130; // 128 + SIGINT, what a shell reports for a ctrl-c
	/// How often a sleep of a watching program looks for a ctrl-c
	const SLEEP_SLICE: Duration = Duration::from_millis(10);
	static INTERRUPTED: AtomicBool = AtomicBool::new(false);
	/// when the last ctrl-c came, monotonic milliseconds (0: none yet)
	static LAST_SIGNAL: AtomicI64 = AtomicI64::new(0);
	static WATCHING: Once = Once::new();

	/// Sleep until `wake`; a watching program wakes early at a ctrl-c: whether one came
	pub fn wait_until(wake: Instant) -> bool {
		if !WATCHING.is_completed() {
			std::thread::sleep(wake.saturating_duration_since(Instant::now()));
			return false;
		}
		while !INTERRUPTED.load(Ordering::SeqCst) {
			let left = wake.saturating_duration_since(Instant::now());
			if left.is_zero() {
				return false;
			}
			std::thread::sleep(left.min(SLEEP_SLICE));
		}
		true
	}

	/// Whether a ctrl-c came since the last call; the first call starts watching
	pub fn take() -> bool {
		WATCHING.call_once(platform::install);
		INTERRUPTED.swap(false, Ordering::SeqCst)
	}

	/// A ctrl-c at `now`: the flag set, or whether it ends the run (atomics only: async-signal-safe)
	fn interrupted_at(now: i64) -> bool {
		let last = LAST_SIGNAL.swap(now, Ordering::SeqCst);
		super::ctrl_c_ends_run(INTERRUPTED.swap(true, Ordering::SeqCst), last, now)
	}

	#[cfg(unix)]
	mod platform {
		pub fn install() {
			unsafe { libc::signal(libc::SIGINT, on_signal as extern "C" fn(libc::c_int) as libc::sighandler_t) };
		}

		/// async-signal-safe (atomics, clock_gettime, _exit)
		extern "C" fn on_signal(_: libc::c_int) {
			if super::interrupted_at(monotonic_milliseconds()) {
				unsafe { libc::_exit(super::EXIT_INTERRUPTED) }
			}
		}

		// time_t and c_long are i64 on 64-bit Linux, i32 on 32-bit targets: the casts are needed there
		#[allow(clippy::unnecessary_cast)]
		fn monotonic_milliseconds() -> i64 {
			let mut now = libc::timespec { tv_sec: 0, tv_nsec: 0 };
			unsafe { libc::clock_gettime(libc::CLOCK_MONOTONIC, &mut now) };
			now.tv_sec as i64 * 1000 + now.tv_nsec as i64 / 1_000_000
		}
	}

	/// Windows calls the handler on a thread of its own, so it may use std
	#[cfg(windows)]
	mod platform {
		use std::sync::OnceLock;
		use std::time::Instant;

		const CTRL_C_EVENT: u32 = 0;
		const CTRL_BREAK_EVENT: u32 = 1;
		const HANDLED: i32 = 1;
		const NOT_HANDLED: i32 = 0;
		static STARTED: OnceLock<Instant> = OnceLock::new();

		#[link(name = "kernel32")]
		extern "system" {
			fn SetConsoleCtrlHandler(handler: Option<unsafe extern "system" fn(u32) -> i32>, add: i32) -> i32;
		}

		pub fn install() {
			STARTED.get_or_init(Instant::now);
			unsafe { SetConsoleCtrlHandler(Some(on_control), 1) };
		}

		/// ctrl-c and ctrl-break set the flag; closing the console and the others keep Windows' default
		unsafe extern "system" fn on_control(event: u32) -> i32 {
			if event != CTRL_C_EVENT && event != CTRL_BREAK_EVENT {
				return NOT_HANDLED;
			}
			// +1: 0 means no ctrl-c yet
			let now = STARTED.get_or_init(Instant::now).elapsed().as_millis() as i64 + 1;
			if super::interrupted_at(now) {
				std::process::exit(super::EXIT_INTERRUPTED);
			}
			HANDLED
		}
	}

	/// no ctrl-c here (wasm): ctrl-c ends the run as before
	#[cfg(not(any(unix, windows)))]
	mod platform {
		pub fn install() {}
	}
}