@aexhq/sdk 0.46.4-canary → 0.50.0

package/dist/fetch-archive.js

@@ -1,252 +0,0 @@
-import { unzipSync } from "fflate";
-import { SKILL_BUNDLE_LIMITS } from "./_contracts/index.js";
-import { splitSkillBundleMetadata } from "./bundle.js";
-/**
- * Fetch a zip-archived skill from a URL and reduce it to the same in-memory
- * `SkillFiles` map that `Skill.fromDir` consumes.
- *
- * This runs in the SDK process (the caller's own app), so the URL is
- * caller-controlled — there is no SSRF surface here. Host the skill yourself
- * and hand the SDK a temporary signed URL (e.g. an S3 presigned URL); it only
- * needs to be valid for this fetch, because the workspace publisher snapshots
- * the bytes afterwards.
- *
- * Signed URLs carry secrets in their query string, so the query is never echoed
- * in error messages.
- */
-const DEFAULT_TIMEOUT_MS = 30_000;
-const MAX_SKILL_ARCHIVE_DOWNLOAD_BYTES = SKILL_BUNDLE_LIMITS.maxCompressedBytes;
-class SkillArchiveDownloadError extends Error {
-}
-export async function fetchSkillArchive(url, opts = {}) {
-    if (typeof url !== "string" || url.length === 0) {
-        throw new Error("Skill.fromUrl: url is required");
-    }
-    const fetchImpl = opts.fetch ?? globalThis.fetch;
-    if (typeof fetchImpl !== "function") {
-        throw new Error("Skill.fromUrl: global fetch is unavailable; pass args.fetch " +
-            "(Bun, Node 18+, or a fetch-capable runtime is required)");
-    }
-    const bytes = await download(url, fetchImpl, opts.timeoutMs ?? DEFAULT_TIMEOUT_MS);
-    if (opts.sha256) {
-        await verifySha256(bytes, opts.sha256, url);
-    }
-    const entries = unzip(bytes, url);
-    return splitSkillBundleMetadata(resolveSkillRoot(entries, url), "Skill.fromUrl");
-}
-// ---------------------------------------------------------------------------
-// Download + integrity
-// ---------------------------------------------------------------------------
-async function download(url, fetchImpl, timeoutMs) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), timeoutMs);
-    try {
-        const res = await fetchImpl(url, { signal: controller.signal });
-        if (!res.ok) {
-            throw new SkillArchiveDownloadError(`Skill.fromUrl: fetch for ${redactUrl(url)} returned HTTP ${res.status}`);
-        }
-        // Early guard on a declared size so a clearly-too-big archive fails before
-        // we buffer it. The authoritative caps are re-checked by bundleSkillFiles.
-        const declaredRaw = res.headers.get("content-length");
-        const declared = declaredRaw !== null && /^\d+$/.test(declaredRaw) ? Number(declaredRaw) : undefined;
-        if (declared !== undefined && declared > MAX_SKILL_ARCHIVE_DOWNLOAD_BYTES) {
-            throw new SkillArchiveDownloadError(`Skill.fromUrl: archive at ${redactUrl(url)} declares ${declared} bytes, ` +
-                `exceeding the ${MAX_SKILL_ARCHIVE_DOWNLOAD_BYTES}-byte compressed cap`);
-        }
-        const bytes = await readResponseBytes(res, url, controller.signal);
-        if (bytes.byteLength === 0) {
-            throw new SkillArchiveDownloadError(`Skill.fromUrl: archive at ${redactUrl(url)} is empty`);
-        }
-        return bytes;
-    }
-    catch (err) {
-        if (err instanceof SkillArchiveDownloadError)
-            throw err;
-        throw new Error(`Skill.fromUrl: fetch failed for ${redactUrl(url)}: ${errMessage(err)}`);
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
-async function readResponseBytes(res, url, signal) {
-    if (!res.body) {
-        const bytes = new Uint8Array(await withAbort(res.arrayBuffer(), signal));
-        ensureWithinCompressedCap(bytes.byteLength, url);
-        return bytes;
-    }
-    const reader = res.body.getReader();
-    const chunks = [];
-    let total = 0;
-    try {
-        while (true) {
-            const { done, value } = await withAbort(reader.read(), signal);
-            if (done)
-                break;
-            if (!value || value.byteLength === 0)
-                continue;
-            total += value.byteLength;
-            ensureWithinCompressedCap(total, url);
-            chunks.push(value);
-        }
-    }
-    finally {
-        await reader.cancel().catch(() => { });
-    }
-    return concatBytes(chunks, total);
-}
-function ensureWithinCompressedCap(bytes, url) {
-    if (bytes > MAX_SKILL_ARCHIVE_DOWNLOAD_BYTES) {
-        throw new SkillArchiveDownloadError(`Skill.fromUrl: archive at ${redactUrl(url)} is ${bytes} bytes, ` +
-            `exceeding the ${MAX_SKILL_ARCHIVE_DOWNLOAD_BYTES}-byte compressed cap`);
-    }
-}
-function concatBytes(chunks, total) {
-    if (chunks.length === 1)
-        return chunks[0];
-    const out = new Uint8Array(total);
-    let offset = 0;
-    for (const chunk of chunks) {
-        out.set(chunk, offset);
-        offset += chunk.byteLength;
-    }
-    return out;
-}
-function withAbort(promise, signal) {
-    if (signal.aborted)
-        return Promise.reject(abortError());
-    return new Promise((resolve, reject) => {
-        const onAbort = () => reject(abortError());
-        signal.addEventListener("abort", onAbort, { once: true });
-        promise.then(resolve, reject).finally(() => signal.removeEventListener("abort", onAbort));
-    });
-}
-function abortError() {
-    if (typeof DOMException === "function") {
-        return new DOMException("The operation was aborted", "AbortError");
-    }
-    const err = new Error("The operation was aborted");
-    err.name = "AbortError";
-    return err;
-}
-async function verifySha256(bytes, expected, url) {
-    const want = (expected.startsWith("sha256:") ? expected.slice("sha256:".length) : expected).toLowerCase();
-    if (!/^[0-9a-f]{64}$/.test(want)) {
-        throw new Error(`Skill.fromUrl: sha256 must be 64 hex chars (optionally prefixed "sha256:"), ` +
-            `got ${JSON.stringify(expected)}`);
-    }
-    const got = await sha256Hex(bytes);
-    if (got !== want) {
-        throw new Error(`Skill.fromUrl: archive integrity check failed for ${redactUrl(url)}: ` +
-            `expected sha256:${want} but downloaded bytes hash to sha256:${got}`);
-    }
-}
-// ---------------------------------------------------------------------------
-// Unzip + skill-root resolution
-// ---------------------------------------------------------------------------
-function unzip(bytes, url) {
-    let fileCount = 0;
-    let declaredTotal = 0;
-    try {
-        return unzipSync(bytes, {
-            filter: (file) => {
-                if (/[\\/]$/.test(file.name))
-                    return false;
-                fileCount += 1;
-                if (fileCount > SKILL_BUNDLE_LIMITS.maxFiles + 1) {
-                    throw new SkillArchiveDownloadError(`Skill.fromUrl: archive at ${redactUrl(url)} exceeds the ` +
-                        `${SKILL_BUNDLE_LIMITS.maxFiles}-entry cap plus one control record`);
-                }
-                declaredTotal += file.originalSize;
-                if (declaredTotal > SKILL_BUNDLE_LIMITS.maxDecompressedBytes) {
-                    throw new SkillArchiveDownloadError(`Skill.fromUrl: archive at ${redactUrl(url)} declares more than ` +
-                        `${SKILL_BUNDLE_LIMITS.maxDecompressedBytes} decompressed bytes`);
-                }
-                return true;
-            }
-        });
-    }
-    catch (err) {
-        if (err instanceof SkillArchiveDownloadError)
-            throw err;
-        throw new Error(`Skill.fromUrl: could not unzip the archive at ${redactUrl(url)} ` +
-            `(expected a .zip): ${errMessage(err)}`);
-    }
-}
-/**
- * Resolve the skill root from unzipped entries:
- *
- *  1. drop directory entries,
- *  2. if `SKILL.md` is already at root, use entries as-is,
- *  3. else if there is exactly one common top-level directory AND it contains
- *     `SKILL.md`, strip that single prefix,
- *  4. otherwise throw, listing the archive's actual top-level entries.
- *
- * We only ever strip a single level, and only when it demonstrably exposes a
- * root `SKILL.md` — never speculatively. `bundleSkillFiles` re-asserts the
- * SKILL.md-at-root invariant as the authoritative check.
- */
-function resolveSkillRoot(entries, url) {
-    const files = {};
-    for (const [rawPath, bytes] of Object.entries(entries)) {
-        const path = rawPath.replace(/\\/g, "/");
-        if (path.endsWith("/")) {
-            continue; // directory entry
-        }
-        files[path] = bytes;
-    }
-    const paths = Object.keys(files);
-    if (paths.length === 0) {
-        throw new Error(`Skill.fromUrl: archive at ${redactUrl(url)} contains no files`);
-    }
-    if (Object.prototype.hasOwnProperty.call(files, "SKILL.md")) {
-        return files;
-    }
-    const topSegments = new Set(paths.map((p) => p.split("/")[0]));
-    if (topSegments.size === 1) {
-        const prefix = `${[...topSegments][0]}/`;
-        if (Object.prototype.hasOwnProperty.call(files, `${prefix}SKILL.md`)) {
-            const stripped = {};
-            for (const [p, b] of Object.entries(files)) {
-                stripped[p.slice(prefix.length)] = b;
-            }
-            return stripped;
-        }
-    }
-    const roots = [...new Set(paths.map((p) => (p.includes("/") ? `${p.split("/")[0]}/` : p)))].sort();
-    throw new Error(`Skill.fromUrl: fetched archive at ${redactUrl(url)} must contain SKILL.md at its root, ` +
-        `or inside a single top-level folder. Found top-level entries: ${roots.join(", ")}`);
-}
-// ---------------------------------------------------------------------------
-// Helpers
-// ---------------------------------------------------------------------------
-/** Strip the query string so signed-URL secrets never reach error text/logs. */
-function redactUrl(url) {
-    try {
-        const u = new URL(url);
-        return u.search ? `${u.origin}${u.pathname}?…` : `${u.origin}${u.pathname}`;
-    }
-    catch {
-        const q = url.indexOf("?");
-        return q >= 0 ? `${url.slice(0, q)}?…` : url;
-    }
-}
-function errMessage(err) {
-    return err instanceof Error ? err.message : String(err);
-}
-async function sha256Hex(bytes) {
-    const subtle = globalThis.crypto?.subtle;
-    if (!subtle) {
-        throw new Error("Skill.fromUrl: globalThis.crypto.subtle is unavailable; " +
-            "Bun, Node 18+, or a Web-Crypto-capable runtime is required");
-    }
-    const copy = new Uint8Array(bytes.byteLength);
-    copy.set(bytes);
-    const digest = await subtle.digest("SHA-256", copy.buffer);
-    const view = new Uint8Array(digest);
-    let out = "";
-    for (let i = 0; i < view.length; i++) {
-        out += view[i].toString(16).padStart(2, "0");
-    }
-    return out;
-}
-//# sourceMappingURL=fetch-archive.js.map

package/dist/fetch-archive.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fetch-archive.js","sourceRoot":"","sources":["../src/fetch-archive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAkB,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAA0B,MAAM,aAAa,CAAC;AAE/E;;;;;;;;;;;;GAYG;AAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,gCAAgC,GAAG,mBAAmB,CAAC,kBAAkB,CAAC;AAEhF,MAAM,yBAA0B,SAAQ,KAAK;CAAG;AAgBhD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAW,EACX,OAAiC,EAAE;IAEnC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAK,UAAoC,CAAC,KAAK,CAAC;IAC5E,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,8DAA8D;YAC5D,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IACnF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,wBAAwB,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,eAAe,CAAC,CAAC;AACnF,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,SAAoB,EAAE,SAAiB;IAC1E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,yBAAyB,CAAC,4BAA4B,SAAS,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,2EAA2E;QAC3E,2EAA2E;QAC3E,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,WAAW,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrG,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,gCAAgC,EAAE,CAAC;YAC1E,MAAM,IAAI,yBAAyB,CACjC,6BAA6B,SAAS,CAAC,GAAG,CAAC,aAAa,QAAQ,UAAU;gBACxE,iBAAiB,gCAAgC,sBAAsB,CAC1E,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,yBAAyB,CAAC,6BAA6B,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,yBAAyB;YAAE,MAAM,GAAG,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,mCAAmC,SAAS,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAa,EAAE,GAAW,EAAE,MAAmB;IAC9E,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACzE,yBAAyB,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACpC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;YAC/D,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;gBAAE,SAAS;YAC/C,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,yBAAyB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAa,EAAE,GAAW;IAC3D,IAAI,KAAK,GAAG,gCAAgC,EAAE,CAAC;QAC7C,MAAM,IAAI,yBAAyB,CACjC,6BAA6B,SAAS,CAAC,GAAG,CAAC,OAAO,KAAK,UAAU;YAC/D,iBAAiB,gCAAgC,sBAAsB,CAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAA6B,EAAE,KAAa;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAI,OAAmB,EAAE,MAAmB;IAC5D,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACxD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,OAAO,YAAY,KAAK,UAAU,EAAE,CAAC;QACvC,OAAO,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACnD,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;IACxB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,KAAiB,EAAE,QAAgB,EAAE,GAAW;IAC1E,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1G,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,8EAA8E;YAC5E,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CACpC,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,qDAAqD,SAAS,CAAC,GAAG,CAAC,IAAI;YACrE,mBAAmB,IAAI,wCAAwC,GAAG,EAAE,CACvE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E,SAAS,KAAK,CAAC,KAAiB,EAAE,GAAW;IAC3C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,KAAK,EAAE;YACtB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACf,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC3C,SAAS,IAAI,CAAC,CAAC;gBACf,IAAI,SAAS,GAAG,mBAAmB,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBACjD,MAAM,IAAI,yBAAyB,CACjC,6BAA6B,SAAS,CAAC,GAAG,CAAC,eAAe;wBACxD,GAAG,mBAAmB,CAAC,QAAQ,oCAAoC,CACtE,CAAC;gBACJ,CAAC;gBACD,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC;gBACnC,IAAI,aAAa,GAAG,mBAAmB,CAAC,oBAAoB,EAAE,CAAC;oBAC7D,MAAM,IAAI,yBAAyB,CACjC,6BAA6B,SAAS,CAAC,GAAG,CAAC,sBAAsB;wBAC/D,GAAG,mBAAmB,CAAC,oBAAoB,qBAAqB,CACnE,CAAC;gBACJ,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,yBAAyB;YAAE,MAAM,GAAG,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,iDAAiD,SAAS,CAAC,GAAG,CAAC,GAAG;YAChE,sBAAsB,UAAU,CAAC,GAAG,CAAC,EAAE,CAC1C,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,gBAAgB,CAAC,OAAmC,EAAE,GAAW;IACxE,MAAM,KAAK,GAA+B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,SAAS,CAAC,kBAAkB;QAC9B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACzC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC;YACrE,MAAM,QAAQ,GAA+B,EAAE,CAAC;YAChD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3C,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnG,MAAM,IAAI,KAAK,CACb,qCAAqC,SAAS,CAAC,GAAG,CAAC,sCAAsC;QACvF,iEAAiE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,gFAAgF;AAChF,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAiB;IACxC,MAAM,MAAM,GAAI,UAAqD,CAAC,MAAM,EAAE,MAAM,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,0DAA0D;YACxD,4DAA4D,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,GAAG,IAAK,IAAI,CAAC,CAAC,CAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/file.d.ts

@@ -1,96 +0,0 @@
-import { type ByteSink } from "./canonical-zip.js";
-import { type IgnoreOptions } from "./node-walk.js";
-/**
- * File — arbitrary bytes (single file or zipped folder) delivered to
- * the agent as a mounted runtime resource. The managed runtime UNZIPS the
- * snapshotted bytes into the `mountPath` DIRECTORY during workspace
- * materialization, preserving the real filename + extension.
- *
- *   const settings = await File.fromPath("./settings.json");
- *   const dataset = await File.fromPath("./data/");
- *   const input = await client.workspace.files.publish(settings);
- *   await client.start({ assets: { files: [input] }, message: "..." });
- *
- * `mountPath` is the absolute container directory the file unzips into; it
- * defaults to `/workspace` (the agent's default working directory), so a file
- * handed with no `mountPath` lands directly in the agent's cwd — a single file
- * `subtitles.srt` becomes `/workspace/subtitles.srt`, a folder lands its entries
- * under `/workspace/`. The resolved path is surfaced back on the Session record.
- *
- * FIDELITY: a directory walk captures executable bits and symlinks into a
- * `.aexmeta.json` sidecar (emitted only when such metadata exists, so a
- * pure-content bundle stays byte-identical → dedup continuity), and honors
- * `.aexignore` (gitignore-compatible) plus always-on defaults (`.git/`,
- * `node_modules/`). SCALE: a large input (total raw size over the streaming
- * threshold, `File.fromPath` only) is uploaded via a streaming two-pass
- * multipart flow that holds only one entry + one part in memory within the
- * runtime asset archive envelope.
- *
- * Publish drafts through `aex.workspace.files.publish(file)`, then pin the
- * returned immutable ref in `assets.files`.
- */
-export declare class File {
-    #private;
-    private constructor();
-    get ref(): DraftFileRef;
-    get isDraft(): boolean;
-    /**
-     * Build a draft File from raw bytes. `name` is the REAL filename (with its
-     * extension, e.g. `"subtitles.srt"`) — it is preserved as the single zip
-     * entry so the agent finds it at `<mountPath>/<name>` after unzip. The bytes
-     * are wrapped in a single-entry canonical zip so storage stays uniform across
-     * all file uploads. `mountPath` is the absolute container directory the file
-     * unzips into; it defaults to `/workspace`.
-     */
-    static fromBytes(args: {
-        readonly name: string;
-        readonly bytes: Uint8Array;
-        readonly mountPath?: string;
-    }): Promise<File>;
-    /**
-     * Read a local file or directory and build a draft File. A single file
-     * preserves its real basename (with extension) as the sole zip entry, so the
-     * agent finds it at `<mountPath>/<basename>` after unzip. Directories walk
-     * recursively into a canonical zip (sorted relative paths, deterministic
-     * mtime), landing each entry under `<mountPath>/`. Executable bits + symlinks
-     * are captured into a `.aexmeta.json` sidecar; `.aexignore` (+ defaults) prune
-     * the walk. `mountPath` defaults to `/workspace`. The optional `name` is only
-     * the storage slug (dedup label); it never affects the on-disk filename.
-     */
-    static fromPath(path: string, args?: {
-        readonly name?: string;
-        readonly mountPath?: string;
-        readonly ignore?: IgnoreOptions;
-    }): Promise<File>;
-    /**
-     * Internal: yield the draft's zipped bytes and metadata to the workspace publisher.
-     * Returns undefined for a streaming (large) draft — use {@link _takeDraftStream}.
-     */
-    _takeDraftBundle(): {
-        name: string;
-        contentHash: string;
-        bytes: Uint8Array;
-        mountPath: string;
-    } | undefined;
-    /**
-     * Internal: yield the draft's canonical-zip stream driver so `client.start` can
-     * upload it via the streaming multipart flow. Returns undefined for the small
-     * (in-memory) draft — use {@link _takeDraftBundle}.
-     */
-    _takeDraftStream(): {
-        name: string;
-        mountPath: string;
-        drive: ZipStreamDriver;
-    } | undefined;
-    toJSON(): never;
-}
-export interface DraftFileRef {
-    readonly kind: "draft";
-    readonly name: string;
-    /** sha256 of the canonical zip (small path only); undefined for a streaming draft (hashed at upload). */
-    readonly contentHash?: string;
-    /** Absolute container directory the file unzips into (always set; defaults to /workspace). */
-    readonly mountPath: string;
-}
-/** A retryable driver that frames the canonical zip into `sink` (one call per upload pass). */
-export type ZipStreamDriver = (sink: ByteSink) => Promise<void>;

package/dist/file.js

@@ -1,272 +0,0 @@
-import { createReadStream } from "node:fs";
-import { readFile, stat } from "node:fs/promises";
-import { ASSET_ARCHIVE_LIMITS, DEFAULT_FILE_MOUNT_PATH, RESERVED_META_ENTRY, assertValidMountPath, bundleManifestIsEmpty, serializeBundleManifest } from "./_contracts/index.js";
-import { bundleSingleFile, hashSkillBundle } from "./_contracts/internal.js";
-import { frameCanonicalZipSync, streamBundleZip } from "./canonical-zip.js";
-import { walkDirectory } from "./node-walk.js";
-import { assertArchiveCompressedSize, assertArchiveEntryCount, assertArchiveExpandedSize } from "./archive-limits.js";
-import { crossPlatformBasename } from "./path-basename.js";
-/**
- * File — arbitrary bytes (single file or zipped folder) delivered to
- * the agent as a mounted runtime resource. The managed runtime UNZIPS the
- * snapshotted bytes into the `mountPath` DIRECTORY during workspace
- * materialization, preserving the real filename + extension.
- *
- *   const settings = await File.fromPath("./settings.json");
- *   const dataset = await File.fromPath("./data/");
- *   const input = await client.workspace.files.publish(settings);
- *   await client.start({ assets: { files: [input] }, message: "..." });
- *
- * `mountPath` is the absolute container directory the file unzips into; it
- * defaults to `/workspace` (the agent's default working directory), so a file
- * handed with no `mountPath` lands directly in the agent's cwd — a single file
- * `subtitles.srt` becomes `/workspace/subtitles.srt`, a folder lands its entries
- * under `/workspace/`. The resolved path is surfaced back on the Session record.
- *
- * FIDELITY: a directory walk captures executable bits and symlinks into a
- * `.aexmeta.json` sidecar (emitted only when such metadata exists, so a
- * pure-content bundle stays byte-identical → dedup continuity), and honors
- * `.aexignore` (gitignore-compatible) plus always-on defaults (`.git/`,
- * `node_modules/`). SCALE: a large input (total raw size over the streaming
- * threshold, `File.fromPath` only) is uploaded via a streaming two-pass
- * multipart flow that holds only one entry + one part in memory within the
- * runtime asset archive envelope.
- *
- * Publish drafts through `aex.workspace.files.publish(file)`, then pin the
- * returned immutable ref in `assets.files`.
- */
-export class File {
-    #ref;
-    #bytes;
-    /** Large-input streaming driver — re-runs the deterministic canonical-zip framer per pass. */
-    #drive;
-    constructor(ref, bytes, drive) {
-        this.#ref = ref;
-        this.#bytes = bytes;
-        this.#drive = drive;
-    }
-    get ref() {
-        return this.#ref;
-    }
-    get isDraft() {
-        return true;
-    }
-    /**
-     * Build a draft File from raw bytes. `name` is the REAL filename (with its
-     * extension, e.g. `"subtitles.srt"`) — it is preserved as the single zip
-     * entry so the agent finds it at `<mountPath>/<name>` after unzip. The bytes
-     * are wrapped in a single-entry canonical zip so storage stays uniform across
-     * all file uploads. `mountPath` is the absolute container directory the file
-     * unzips into; it defaults to `/workspace`.
-     */
-    static async fromBytes(args) {
-        if (!args || typeof args.name !== "string") {
-            throw new Error("File.fromBytes: name must be a string");
-        }
-        const filename = sanitiseFilename(args.name);
-        if (filename === undefined) {
-            throw new Error(`File.fromBytes: name ${JSON.stringify(args.name)} is not a valid filename ` +
-                "(no '/', '\\\\', NUL, or path traversal; 1..255 chars)");
-        }
-        if (!(args.bytes instanceof Uint8Array) || args.bytes.byteLength === 0) {
-            throw new Error("File.fromBytes: bytes must be a non-empty Uint8Array");
-        }
-        const mountPath = resolveMountPath(args.mountPath, "File.fromBytes");
-        const zip = bundleSingleFile(filename, args.bytes, "File.fromBytes");
-        const contentHash = await hashSkillBundle(zip);
-        const ref = {
-            kind: "draft",
-            name: slugFromFilename(filename),
-            contentHash,
-            mountPath
-        };
-        return new File(ref, zip);
-    }
-    /**
-     * Read a local file or directory and build a draft File. A single file
-     * preserves its real basename (with extension) as the sole zip entry, so the
-     * agent finds it at `<mountPath>/<basename>` after unzip. Directories walk
-     * recursively into a canonical zip (sorted relative paths, deterministic
-     * mtime), landing each entry under `<mountPath>/`. Executable bits + symlinks
-     * are captured into a `.aexmeta.json` sidecar; `.aexignore` (+ defaults) prune
-     * the walk. `mountPath` defaults to `/workspace`. The optional `name` is only
-     * the storage slug (dedup label); it never affects the on-disk filename.
-     */
-    static async fromPath(path, args) {
-        const stats = await stat(path);
-        const mountPath = resolveMountPath(args?.mountPath, "File.fromPath");
-        // `name` is only the storage slug (dedup label), never the on-disk filename.
-        const slug = args?.name !== undefined ? slugFromFilename(args.name) : inferNameFromPath(path);
-        return stats.isDirectory()
-            ? File.#fromDirectory(path, slug, mountPath, args?.ignore)
-            : File.#fromSingleFile(path, slug, mountPath, stats.size, (stats.mode & 0o111) !== 0);
-    }
-    /** Directory branch: walk + fidelity sidecar + small/streaming path selection. */
-    static async #fromDirectory(path, slug, mountPath, ignore) {
-        const walk = await walkDirectory(path, ignore);
-        if (walk.entries.length === 0 && walk.symlinks.length === 0) {
-            throw new Error(`File.fromPath: directory ${JSON.stringify(path)} is empty (no regular files or symlinks)`);
-        }
-        const meta = { exec: walk.exec, symlinks: walk.symlinks };
-        const sidecar = bundleManifestIsEmpty(meta)
-            ? undefined
-            : serializeBundleManifest({ v: 1, exec: walk.exec, symlinks: walk.symlinks });
-        assertArchiveExpandedSize(walk.totalSize + (sidecar?.byteLength ?? 0), "File.fromPath");
-        assertArchiveEntryCount(walk.entries.length + walk.symlinks.length, "File.fromPath");
-        if (walk.totalSize <= SMALL_UPLOAD_THRESHOLD_BYTES) {
-            // Small: read all bytes and build the canonical zip in memory (single PUT).
-            const ordered = [];
-            for (const entry of walk.entries) {
-                ordered.push([entry.rel, new Uint8Array(await readFile(entry.absPath))]);
-            }
-            if (sidecar)
-                ordered.push([RESERVED_META_ENTRY, sidecar]);
-            const zip = frameCanonicalZipSync(ordered);
-            assertArchiveCompressedSize(zip.byteLength, "File.fromPath");
-            const contentHash = await hashSkillBundle(zip);
-            return new File({ kind: "draft", name: slug, contentHash, mountPath }, zip);
-        }
-        // Large: stream the canonical zip (never materialize the whole bundle).
-        const sources = buildEntrySources(walk.entries, sidecar);
-        const drive = (sink) => streamBundleZip(sources, sink);
-        return new File({ kind: "draft", name: slug, mountPath }, undefined, drive);
-    }
-    /** Single-file branch: preserve the basename; capture the +x bit; small/streaming by size. */
-    static async #fromSingleFile(path, slug, mountPath, size, isExecutable) {
-        const basename = crossPlatformBasename(path);
-        const filename = sanitiseFilename(basename) ?? `${slug}`;
-        const sidecar = isExecutable
-            ? serializeBundleManifest({ v: 1, exec: [filename], symlinks: [] })
-            : undefined;
-        assertArchiveExpandedSize(size + (sidecar?.byteLength ?? 0), "File.fromPath");
-        if (size <= SMALL_UPLOAD_THRESHOLD_BYTES) {
-            const bytes = new Uint8Array(await readFile(path));
-            const ordered = [[filename, bytes]];
-            if (sidecar)
-                ordered.push([RESERVED_META_ENTRY, sidecar]);
-            const zip = frameCanonicalZipSync(ordered);
-            assertArchiveCompressedSize(zip.byteLength, "File.fromPath");
-            const contentHash = await hashSkillBundle(zip);
-            return new File({ kind: "draft", name: slug, contentHash, mountPath }, zip);
-        }
-        const sources = [
-            {
-                name: filename,
-                size,
-                read: async () => new Uint8Array(await readFile(path)),
-                openStream: () => fileByteStream(path)
-            }
-        ];
-        if (sidecar)
-            sources.push({ name: RESERVED_META_ENTRY, size: sidecar.length, read: () => sidecar });
-        const drive = (sink) => streamBundleZip(sources, sink);
-        return new File({ kind: "draft", name: slug, mountPath }, undefined, drive);
-    }
-    /**
-     * Internal: yield the draft's zipped bytes and metadata to the workspace publisher.
-     * Returns undefined for a streaming (large) draft — use {@link _takeDraftStream}.
-     */
-    _takeDraftBundle() {
-        if (this.#ref.kind !== "draft" || !this.#bytes || this.#ref.contentHash === undefined) {
-            return undefined;
-        }
-        return {
-            name: this.#ref.name,
-            contentHash: this.#ref.contentHash,
-            bytes: this.#bytes,
-            mountPath: this.#ref.mountPath
-        };
-    }
-    /**
-     * Internal: yield the draft's canonical-zip stream driver so `client.start` can
-     * upload it via the streaming multipart flow. Returns undefined for the small
-     * (in-memory) draft — use {@link _takeDraftBundle}.
-     */
-    _takeDraftStream() {
-        if (this.#ref.kind !== "draft" || !this.#drive)
-            return undefined;
-        return { name: this.#ref.name, mountPath: this.#ref.mountPath, drive: this.#drive };
-    }
-    toJSON() {
-        throw new Error("File drafts cannot be submitted directly; publish with aex.workspace.files.publish(...)");
-    }
-}
-const ZIP_EPOCH = new Date(Date.UTC(1980, 0, 1));
-// Private compatibility rule for a filename-derived storage slug. This is not
-// the persisted workspace file/instruction resource-name admission contract.
-const DERIVED_FILE_STORAGE_SLUG_PATTERN = /^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$/;
-/**
- * Total raw input size (via `stat`, before reading bytes) above which
- * `File.fromPath` streams the upload instead of building the whole zip in
- * memory. A pure performance/simplicity switch, NOT a correctness boundary — the
- * streaming framer is byte-identical to the in-memory `zipSync` for Canonical A,
- * so a bundle at the threshold dedups either way.
- */
-const SMALL_UPLOAD_THRESHOLD_BYTES = ASSET_ARCHIVE_LIMITS.maxCompressedBytes;
-/** Build lazy zip entry sources from walked descriptors, appending the sidecar LAST. */
-function buildEntrySources(entries, sidecar) {
-    const sources = entries.map((entry) => ({
-        name: entry.rel,
-        size: entry.size,
-        read: async () => new Uint8Array(await readFile(entry.absPath)),
-        openStream: () => fileByteStream(entry.absPath)
-    }));
-    if (sidecar) {
-        sources.push({ name: RESERVED_META_ENTRY, size: sidecar.length, read: () => sidecar });
-    }
-    return sources;
-}
-/** Async-iterate a file's bytes in native stream chunks (for Canonical-B giant entries). */
-async function* fileByteStream(absPath) {
-    const stream = createReadStream(absPath);
-    for await (const chunk of stream) {
-        yield chunk;
-    }
-}
-/**
- * Resolve + validate a caller-supplied `mountPath`, defaulting to `/workspace`.
- * Shares {@link assertValidMountPath} with the contracts parser so the SDK and
- * the BFF reject the same malformed paths.
- */
-function resolveMountPath(mountPath, fn) {
-    if (mountPath === undefined)
-        return DEFAULT_FILE_MOUNT_PATH;
-    if (typeof mountPath !== "string") {
-        throw new Error(`${fn}: mountPath must be a string`);
-    }
-    assertValidMountPath(mountPath, `${fn}: mountPath`);
-    return mountPath;
-}
-/**
- * Validate a real on-disk filename (a single path SEGMENT — no separators,
- * traversal, NUL, or control chars; 1..255 bytes). Returns the trimmed name, or
- * `undefined` when it cannot be a filename. Used to preserve the real filename +
- * extension inside the single-entry zip.
- */
-function sanitiseFilename(name) {
-    const trimmed = name.trim();
-    if (trimmed.length === 0 || trimmed.length > 255)
-        return undefined;
-    if (trimmed === "." || trimmed === "..")
-        return undefined;
-    if (/[/\\]/.test(trimmed))
-        return undefined;
-    // Reject NUL + C0/C1/DEL control chars (filename must stay a printable segment).
-    // eslint-disable-next-line no-control-regex
-    if (/[\u0000-\u001f\u007f]/.test(trimmed))
-        return undefined;
-    return trimmed;
-}
-function slugFromFilename(filename) {
-    const stem = filename.replace(/\.[^.]+$/, "").toLowerCase();
-    const slug = stem.replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
-    if (slug.length >= 2 && DERIVED_FILE_STORAGE_SLUG_PATTERN.test(slug))
-        return slug;
-    if (slug.length === 1)
-        return `f-${slug}`;
-    return `file-${Date.now().toString(36)}`;
-}
-function inferNameFromPath(path) {
-    return slugFromFilename(crossPlatformBasename(path));
-}
-//# sourceMappingURL=file.js.map

package/dist/file.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"file.js","sourceRoot":"","sources":["../src/file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAmB,MAAM,2BAA2B,CAAC;AAC/F,OAAO,EACL,qBAAqB,EACrB,eAAe,EAGhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAsB,MAAM,gBAAgB,CAAC;AAEnE,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,yBAAyB,EAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,OAAO,IAAI;IACN,IAAI,CAAe;IACnB,MAAM,CAAyB;IACxC,8FAA8F;IACrF,MAAM,CAA8B;IAC7C,YAAoB,GAAiB,EAAE,KAAkB,EAAE,KAAuB;QAChF,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAItB;QACC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B;gBAC1E,wDAAwD,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAiB;YACxB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,gBAAgB,CAAC,QAAQ,CAAC;YAChC,WAAW;YACX,SAAS;SACV,CAAC;QACF,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CACnB,IAAY,EACZ,IAA+F;QAE/F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QACrE,6EAA6E;QAC7E,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC9F,OAAO,KAAK,CAAC,WAAW,EAAE;YACxB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC;YAC1D,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,kFAAkF;IAClF,MAAM,CAAC,KAAK,CAAC,cAAc,CACzB,IAAY,EACZ,IAAY,EACZ,SAAiB,EACjB,MAAiC;QAEjC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC9G,CAAC;QACD,MAAM,IAAI,GAAe,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC;YACzC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,uBAAuB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChF,yBAAyB,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QACxF,uBAAuB,CACrB,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAC1C,eAAe,CAChB,CAAC;QAEF,IAAI,IAAI,CAAC,SAAS,IAAI,4BAA4B,EAAE,CAAC;YACnD,4EAA4E;YAC5E,MAAM,OAAO,GAAgC,EAAE,CAAC;YAChD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1D,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAC3C,2BAA2B,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;YAC7D,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;YAC/C,OAAO,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9E,CAAC;QAED,wEAAwE;QACxE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,KAAK,GAAoB,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACxE,OAAO,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED,8FAA8F;IAC9F,MAAM,CAAC,KAAK,CAAC,eAAe,CAC1B,IAAY,EACZ,IAAY,EACZ,SAAiB,EACjB,IAAY,EACZ,YAAqB;QAErB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,YAAY;YAC1B,CAAC,CAAC,uBAAuB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACnE,CAAC,CAAC,SAAS,CAAC;QACd,yBAAyB,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QAE9E,IAAI,IAAI,IAAI,4BAA4B,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD,MAAM,OAAO,GAAgC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YACjE,IAAI,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1D,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAC3C,2BAA2B,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;YAC7D,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;YAC/C,OAAO,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,OAAO,GAAqB;YAChC;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACtD,UAAU,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC;aACvC;SACF,CAAC;QACF,IAAI,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACpG,MAAM,KAAK,GAAoB,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACxE,OAAO,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED;;;OAGG;IACH,gBAAgB;QAMd,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YAClC,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;SAC/B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,gBAAgB;QACd,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACtF,CAAC;IAED,MAAM;QACJ,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IAC7G,CAAC;CACF;AAcD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACjD,8EAA8E;AAC9E,6EAA6E;AAC7E,MAAM,iCAAiC,GAAG,mCAAmC,CAAC;AAE9E;;;;;;GAMG;AACH,MAAM,4BAA4B,GAAG,oBAAoB,CAAC,kBAAkB,CAAC;AAE7E,wFAAwF;AACxF,SAAS,iBAAiB,CACxB,OAAiG,EACjG,OAA+B;IAE/B,MAAM,OAAO,GAAqB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,EAAE,KAAK,CAAC,GAAG;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/D,UAAU,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;KAChD,CAAC,CAAC,CAAC;IACJ,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4FAA4F;AAC5F,KAAK,SAAS,CAAC,CAAC,cAAc,CAAC,OAAe;IAC5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAA+B,EAAE,CAAC;QAC1D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,SAA6B,EAAE,EAAU;IACjE,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,uBAAuB,CAAC;IAC5D,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;IACvD,CAAC;IACD,oBAAoB,CAAC,SAAS,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IACpD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IACnE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,iFAAiF;IACjF,4CAA4C;IAC5C,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACtE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,IAAI,EAAE,CAAC;IAC1C,OAAO,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,gBAAgB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC"}