@agentdock/wire 0.0.90 → 0.0.91

package/dist/events.js

@@ -1,107 +1 @@
-/**
- * Session event schemas.
- *
- * Event types: text, service, tool-call-start, tool-call-end,
- * file, turn-start, turn-end, start, stop.
- */
-import { z } from 'zod';
-import { SessionQuestionEventSchema, SessionPermissionRequestEventSchema, SessionAnswerEventSchema, SessionPermissionResolvedEventSchema, } from './interactionEvents.js';
-export const SessionTextEventSchema = z.object({
-    t: z.literal('text'),
-    text: z.string(),
-    thinking: z.boolean().optional(),
-    images: z
-        .array(z.object({
-        data: z.string(),
-        mediaType: z.string(),
-    }))
-        .optional(),
-});
-export const SessionServiceEventSchema = z.object({
-    t: z.literal('service'),
-    text: z.string(),
-});
-export const SessionToolCallStartEventSchema = z.object({
-    t: z.literal('tool-call-start'),
-    call: z.string(),
-    name: z.string(),
-    title: z.string(),
-    description: z.string(),
-    args: z.record(z.string(), z.unknown()),
-});
-export const SessionToolCallEndEventSchema = z.object({
-    t: z.literal('tool-call-end'),
-    call: z.string(),
-    /** Tool output text (may be truncated at source). */
-    result: z.string().optional(),
-    /** True when the tool returned an error result. */
-    error: z.boolean().optional(),
-});
-export const SessionFileEventSchema = z.object({
-    t: z.literal('file'),
-    ref: z.string(),
-    name: z.string(),
-    size: z.number(),
-    image: z
-        .object({
-        width: z.number(),
-        height: z.number(),
-        thumbhash: z.string(),
-    })
-        .optional(),
-});
-export const SessionTurnStartEventSchema = z.object({
-    t: z.literal('turn-start'),
-});
-export const SessionTurnEndStatusSchema = z.enum(['completed', 'failed', 'cancelled']);
-/** Token usage stats reported at turn end. */
-export const TurnUsageSchema = z.object({
-    inputTokens: z.number().int().nonnegative(),
-    outputTokens: z.number().int().nonnegative(),
-    cacheReadTokens: z.number().int().nonnegative().optional(),
-    cacheWriteTokens: z.number().int().nonnegative().optional(),
-});
-export const SessionTurnEndEventSchema = z.object({
-    t: z.literal('turn-end'),
-    status: SessionTurnEndStatusSchema,
-    usage: TurnUsageSchema.optional(),
-    model: z.string().optional(),
-    /** Wall-clock duration of the turn in milliseconds (Date.now() diff). */
-    durationMs: z.number().int().nonnegative().optional(),
-});
-export const SessionStartEventSchema = z.object({
-    t: z.literal('start'),
-    title: z.string().optional(),
-    /** Claude background task ID for cancellation (RFC-058 Phase 2). */
-    taskId: z.string().optional(),
-});
-export const SessionStopEventSchema = z.object({
-    t: z.literal('stop'),
-});
-/** User-sent image stored inline in envelope (base64). */
-export const SessionImageEventSchema = z.object({
-    t: z.literal('image'),
-    /** Base64-encoded image data. */
-    data: z.string(),
-    /** MIME type: image/jpeg, image/png, image/gif, image/webp. */
-    mediaType: z.string(),
-});
-export const SessionEventSchema = z.discriminatedUnion('t', [
-    SessionTextEventSchema,
-    SessionServiceEventSchema,
-    SessionToolCallStartEventSchema,
-    SessionToolCallEndEventSchema,
-    SessionFileEventSchema,
-    SessionTurnStartEventSchema,
-    SessionTurnEndEventSchema,
-    SessionStartEventSchema,
-    SessionStopEventSchema,
-    SessionQuestionEventSchema,
-    SessionPermissionRequestEventSchema,
-    SessionAnswerEventSchema,
-    SessionPermissionResolvedEventSchema,
-    SessionImageEventSchema,
-]);
-// Re-export interaction event schemas for convenience
-export { SessionQuestionEventSchema, SessionPermissionRequestEventSchema, SessionAnswerEventSchema, SessionPermissionResolvedEventSchema, PermissionActionSchema, ImageAttachmentSchema, } from './interactionEvents.js';
-//# sourceMappingURL=events.js.map
+"use strict";import{z as e}from"zod";import{SessionQuestionEventSchema as o,SessionPermissionRequestEventSchema as s,SessionAnswerEventSchema as r,SessionPermissionResolvedEventSchema as a}from"./interactionEvents.js";export const SessionTextEventSchema=e.object({t:e.literal("text"),text:e.string(),thinking:e.boolean().optional(),images:e.array(e.object({data:e.string(),mediaType:e.string()})).optional()}).passthrough(),SessionServiceEventSchema=e.object({t:e.literal("service"),text:e.string()}).passthrough(),SessionToolCallStartEventSchema=e.object({t:e.literal("tool-call-start"),call:e.string(),name:e.string(),title:e.string(),description:e.string(),args:e.record(e.string(),e.unknown())}).passthrough(),SessionToolCallEndEventSchema=e.object({t:e.literal("tool-call-end"),call:e.string(),result:e.string().optional(),error:e.boolean().optional()}).passthrough(),SessionFileEventSchema=e.object({t:e.literal("file"),ref:e.string(),name:e.string(),size:e.number(),image:e.object({width:e.number(),height:e.number(),thumbhash:e.string()}).optional()}).passthrough(),SessionTurnStartEventSchema=e.object({t:e.literal("turn-start")}).passthrough(),SessionTurnEndStatusSchema=e.enum(["completed","failed","cancelled"]),TurnUsageSchema=e.object({inputTokens:e.number().int().nonnegative(),outputTokens:e.number().int().nonnegative(),cacheReadTokens:e.number().int().nonnegative().optional(),cacheWriteTokens:e.number().int().nonnegative().optional()}).passthrough(),SessionTurnEndEventSchema=e.object({t:e.literal("turn-end"),status:SessionTurnEndStatusSchema,usage:TurnUsageSchema.optional(),model:e.string().optional(),durationMs:e.number().int().nonnegative().optional(),compact:e.boolean().optional()}).passthrough(),SessionStartEventSchema=e.object({t:e.literal("start"),title:e.string().optional(),taskId:e.string().optional()}).passthrough(),SessionStopEventSchema=e.object({t:e.literal("stop")}).passthrough(),SessionImageEventSchema=e.object({t:e.literal("image"),data:e.string(),mediaType:e.string()}).passthrough(),SessionContextUsageEventSchema=e.object({t:e.literal("context-usage"),categories:e.array(e.object({name:e.string(),tokens:e.number(),color:e.string()}).passthrough()),totalTokens:e.number(),maxTokens:e.number(),percentage:e.number(),gridRows:e.array(e.array(e.object({color:e.string(),isFilled:e.boolean(),categoryName:e.string(),tokens:e.number(),percentage:e.number(),squareFullness:e.number()}).passthrough())),model:e.string(),memoryFiles:e.array(e.object({path:e.string(),type:e.string(),tokens:e.number()}).passthrough()),mcpTools:e.array(e.object({name:e.string(),serverName:e.string(),tokens:e.number(),isLoaded:e.boolean().optional()}).passthrough()),deferredBuiltinTools:e.array(e.object({name:e.string(),tokens:e.number(),isLoaded:e.boolean()}).passthrough()).optional(),systemTools:e.array(e.object({name:e.string(),tokens:e.number()}).passthrough()).optional(),systemPromptSections:e.array(e.object({name:e.string(),tokens:e.number()}).passthrough()).optional(),agents:e.array(e.object({agentType:e.string(),source:e.string(),tokens:e.number()})),slashCommands:e.object({totalCommands:e.number(),includedCommands:e.number(),tokens:e.number()}).passthrough().optional(),skills:e.object({totalSkills:e.number(),includedSkills:e.number(),tokens:e.number(),skillFrontmatter:e.array(e.record(e.unknown()))}).passthrough().optional(),messageBreakdown:e.object({toolCallTokens:e.number(),toolResultTokens:e.number(),attachmentTokens:e.number(),assistantMessageTokens:e.number(),userMessageTokens:e.number(),redirectedContextTokens:e.number().optional(),unattributedTokens:e.number().optional(),toolCallsByType:e.array(e.object({name:e.string(),callTokens:e.number(),resultTokens:e.number()}).passthrough()).optional(),attachmentsByType:e.array(e.object({name:e.string(),tokens:e.number()}).passthrough()).optional()}).passthrough().optional(),apiUsage:e.object({input_tokens:e.number(),output_tokens:e.number(),cache_creation_input_tokens:e.number(),cache_read_input_tokens:e.number()}).passthrough().nullable()}).passthrough(),SessionCompactBoundaryEventSchema=e.object({t:e.literal("compact-boundary"),trigger:e.enum(["manual","auto"]),preTokens:e.number(),postTokens:e.number().optional(),durationMs:e.number().optional()}).passthrough(),SessionEventSchema=e.discriminatedUnion("t",[SessionTextEventSchema,SessionServiceEventSchema,SessionToolCallStartEventSchema,SessionToolCallEndEventSchema,SessionFileEventSchema,SessionTurnStartEventSchema,SessionTurnEndEventSchema,SessionStartEventSchema,SessionStopEventSchema,o,s,r,a,SessionImageEventSchema,SessionContextUsageEventSchema,SessionCompactBoundaryEventSchema]);export function emptyContextUsageSnapshot(t="",n=0){return{t:"context-usage",categories:[],totalTokens:0,maxTokens:n,percentage:0,gridRows:[],model:t,memoryFiles:[],mcpTools:[],agents:[],apiUsage:null}}export{SessionQuestionEventSchema,SessionPermissionRequestEventSchema,SessionAnswerEventSchema,SessionPermissionResolvedEventSchema,PermissionActionSchema,ImageAttachmentSchema}from"./interactionEvents.js";

package/dist/features.js

@@ -1,123 +1 @@
-/* Feature availability layer (RFC-035).
- *
- * Maps high-level features to the RPC methods they require.
- * Used by web to determine which features a daemon supports
- * based on the methods it has registered.
- */
-import { satisfiesMin } from './semver.js';
-/**
- * Registry of all known features and their RPC dependencies.
- * Add new entries here when introducing features that require new daemon RPC methods.
- */
-export const FEATURE_REGISTRY = [
-    {
-        id: 'agent-settings',
-        requiredMethods: ['get-agent-settings', 'set-agent-settings'],
-        sinceVersion: '0.0.4',
-        subFeatures: [{ id: 'startup-scripts', sinceVersion: '0.0.30' }],
-    },
-    {
-        id: 'labs-settings',
-        requiredMethods: ['get-labs-settings', 'set-labs-settings'],
-        sinceVersion: '0.0.12',
-    },
-    {
-        id: 'history-sync',
-        requiredMethods: ['backfill-history-session'],
-        sinceVersion: '0.0.12',
-    },
-    {
-        id: 'check-path',
-        requiredMethods: ['check-path'],
-        sinceVersion: '0.0.7',
-    },
-    {
-        id: 'remote-upgrade',
-        requiredMethods: ['trigger-upgrade'],
-        sinceVersion: '0.0.30',
-    },
-    {
-        id: 'checkpoint',
-        requiredMethods: ['checkpoint-list', 'checkpoint-diff', 'checkpoint-rollback'],
-        sinceVersion: '0.0.30',
-        subFeatures: [{ id: 'conversation-rollback', sinceVersion: '0.0.32' }],
-    },
-    {
-        id: 'scheduled-tasks',
-        requiredMethods: ['spawn-session'],
-        sinceVersion: '0.0.35',
-    },
-    {
-        id: 'auto-upgrade-daemon',
-        requiredMethods: ['set-auto-upgrade-daemon'],
-        sinceVersion: '0.0.31',
-    },
-    {
-        id: 'file-upload',
-        requiredMethods: ['file-relay-receive'],
-        sinceVersion: '0.0.36',
-        edition: 'personal',
-    },
-];
-/**
- * Check whether a specific feature is available given the set of supported methods.
- * A feature is available when ALL its required methods are present.
- */
-export function isFeatureAvailable(featureId, supportedMethods) {
-    const feature = FEATURE_REGISTRY.find((f) => f.id === featureId);
-    if (!feature)
-        return false;
-    const methodSet = new Set(supportedMethods);
-    return feature.requiredMethods.every((m) => methodSet.has(m));
-}
-/**
- * Check whether a sub-feature is available given supported methods and daemon version.
- * Requires the parent feature to be available AND the daemon version to satisfy the sub-feature minimum.
- */
-export function isSubFeatureAvailable(featureId, subFeatureId, supportedMethods, daemonVersion) {
-    const feature = FEATURE_REGISTRY.find((f) => f.id === featureId);
-    if (!feature)
-        return false;
-    if (!isFeatureAvailable(featureId, supportedMethods))
-        return false;
-    const sub = feature.subFeatures?.find((s) => s.id === subFeatureId);
-    if (!sub)
-        return false;
-    if (!daemonVersion || !satisfiesMin(daemonVersion, sub.sinceVersion))
-        return false;
-    if (sub.requiredMethods) {
-        const methodSet = new Set(supportedMethods);
-        return sub.requiredMethods.every((m) => methodSet.has(m));
-    }
-    return true;
-}
-/** Look up the minimum version required for a sub-feature. */
-export function getSubFeatureMinVersion(featureId, subFeatureId) {
-    const feature = FEATURE_REGISTRY.find((f) => f.id === featureId);
-    return feature?.subFeatures?.find((s) => s.id === subFeatureId)?.sinceVersion;
-}
-/**
- * Return all features (and sub-features) that are NOT available.
- * Sub-features are returned as "parentId/subId" when the parent is available
- * but the daemon version is too low for the sub-feature.
- */
-export function getUnavailableFeatures(supportedMethods, daemonVersion) {
-    const results = [];
-    const methodSet = new Set(supportedMethods);
-    for (const f of FEATURE_REGISTRY) {
-        if (!f.requiredMethods.every((m) => methodSet.has(m))) {
-            results.push({ id: f.id, sinceVersion: f.sinceVersion });
-        }
-        else if (f.subFeatures && daemonVersion) {
-            for (const sub of f.subFeatures) {
-                const versionLocked = !satisfiesMin(daemonVersion, sub.sinceVersion);
-                const methodsLocked = sub.requiredMethods != null && !sub.requiredMethods.every((m) => methodSet.has(m));
-                if (versionLocked || methodsLocked) {
-                    results.push({ id: `${f.id}/${sub.id}`, sinceVersion: sub.sinceVersion });
-                }
-            }
-        }
-    }
-    return results;
-}
-//# sourceMappingURL=features.js.map
+"use strict";import{satisfiesMin as u}from"./semver.js";export const FEATURE_REGISTRY=[{id:"agent-settings",requiredMethods:["get-agent-settings","set-agent-settings"],sinceVersion:"0.0.4",subFeatures:[{id:"startup-scripts",sinceVersion:"0.0.30"}]},{id:"labs-settings",requiredMethods:["get-labs-settings","set-labs-settings"],sinceVersion:"0.0.12"},{id:"history-sync",requiredMethods:["backfill-history-session"],sinceVersion:"0.0.12"},{id:"check-path",requiredMethods:["check-path"],sinceVersion:"0.0.7"},{id:"remote-upgrade",requiredMethods:["trigger-upgrade"],sinceVersion:"0.0.30"},{id:"checkpoint",requiredMethods:["checkpoint-list","checkpoint-diff","checkpoint-rollback"],sinceVersion:"0.0.30",subFeatures:[{id:"conversation-rollback",sinceVersion:"0.0.32"}]},{id:"scheduled-tasks",requiredMethods:["spawn-session"],sinceVersion:"0.0.35"},{id:"auto-upgrade-daemon",requiredMethods:["set-auto-upgrade-daemon"],sinceVersion:"0.0.31"},{id:"file-upload",requiredMethods:["file-relay-receive"],sinceVersion:"0.0.36",edition:"personal"},{id:"context-usage",requiredMethods:["get-context-usage"],sinceVersion:"0.0.71"}];export function isFeatureAvailable(r,n){const t=FEATURE_REGISTRY.find(e=>e.id===r);if(!t)return!1;const i=new Set(n);return t.requiredMethods.every(e=>i.has(e))}export function isSubFeatureAvailable(r,n,t,i){const e=FEATURE_REGISTRY.find(o=>o.id===r);if(!e||!isFeatureAvailable(r,t))return!1;const s=e.subFeatures?.find(o=>o.id===n);if(!s||!i||!u(i,s.sinceVersion))return!1;if(s.requiredMethods){const o=new Set(t);return s.requiredMethods.every(d=>o.has(d))}return!0}export function getSubFeatureMinVersion(r,n){return FEATURE_REGISTRY.find(i=>i.id===r)?.subFeatures?.find(i=>i.id===n)?.sinceVersion}export function getUnavailableFeatures(r,n){const t=[],i=new Set(r);for(const e of FEATURE_REGISTRY)if(!e.requiredMethods.every(s=>i.has(s)))t.push({id:e.id,sinceVersion:e.sinceVersion});else if(e.subFeatures&&n)for(const s of e.subFeatures){const o=!u(n,s.sinceVersion),d=s.requiredMethods!=null&&!s.requiredMethods.every(c=>i.has(c));(o||d)&&t.push({id:`${e.id}/${s.id}`,sinceVersion:s.sinceVersion})}return t}

package/dist/feedback.d.ts

@@ -338,7 +338,7 @@ export declare const CreateFeedbackSchema: z.ZodObject<{
         actualBehavior?: string | undefined;
         errorMessages?: string | undefined;
     }>>;
-}, "strip", z.ZodTypeAny, {
+}, "strict", z.ZodTypeAny, {
     type: "BUG" | "FEATURE" | "OTHER";
     description: string;
     deviceInfo: {
@@ -415,7 +415,7 @@ export type CreateFeedback = z.infer<typeof CreateFeedbackSchema>;
 export declare const UpdateFeedbackSchema: z.ZodObject<{
     status: z.ZodOptional<z.ZodEnum<["READ", "ARCHIVED"]>>;
     reply: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
+}, "strict", z.ZodTypeAny, {
     status?: "READ" | "ARCHIVED" | undefined;
     reply?: string | undefined;
 }, {

package/dist/feedback.js

@@ -1,61 +1 @@
-// KNOWN-DEBT: feedback 模块导出类型零消费 + web 侧重复定义 (see docs/ops/KNOWN-DEBT.md)
-import { z } from 'zod';
-export const FeedbackTypeSchema = z.enum(['BUG', 'FEATURE', 'OTHER']);
-export const FeedbackStatusSchema = z.enum(['UNREAD', 'READ', 'ARCHIVED']);
-export const RunModeSchema = z.enum([
-    'web-session',
-    'cli-spawn',
-    'cli-run',
-    'scheduled',
-    'unknown',
-]);
-export const RunModesSchema = z.array(RunModeSchema).max(5);
-export const BugFieldsSchema = z.object({
-    reproSteps: z.string().max(2000).optional(),
-    expectedBehavior: z.string().max(1000).optional(),
-    actualBehavior: z.string().max(1000).optional(),
-    errorMessages: z.string().max(2000).optional(),
-});
-export const SettingsSnapshotSchema = z.object({
-    browser: z
-        .object({
-        userAgent: z.string(),
-        viewport: z.string(),
-        language: z.string(),
-    })
-        .optional(),
-    /** Per-machine diagnostics: platform, arch, daemonVersion, availableAgents, agentCliPaths */
-    machines: z.record(z.string(), z.record(z.unknown())).optional(),
-    preferences: z.record(z.unknown()).optional(),
-    labs: z.record(z.unknown()).optional(),
-});
-export const MachineSnapshotSchema = z.object({
-    machineId: z.string(),
-    platform: z.string().optional(),
-    arch: z.string().optional(),
-    hostname: z.string().optional(),
-    daemonVersion: z.string().optional(),
-    availableAgents: z.array(z.string()).optional(),
-    agentVersions: z.record(z.string()).optional(),
-    nodeVersion: z.string().optional(),
-});
-export const DeviceInfoSchema = z.object({
-    machines: z.array(MachineSnapshotSchema).optional(),
-    appVersion: z.string().optional(),
-    settingsSnapshot: SettingsSnapshotSchema.optional(),
-});
-export const CreateFeedbackSchema = z.object({
-    type: FeedbackTypeSchema,
-    description: z.string().min(0).max(5000),
-    screenshots: z.array(z.string().max(700_000)).max(3).optional(),
-    deviceInfo: DeviceInfoSchema,
-    affectedMachineIds: z.array(z.string()).max(20).optional(),
-    affectedAgents: z.array(z.string()).max(10).optional(),
-    runModes: RunModesSchema.optional(),
-    bugFields: BugFieldsSchema.optional(),
-});
-export const UpdateFeedbackSchema = z.object({
-    status: z.enum(['READ', 'ARCHIVED']).optional(),
-    reply: z.string().min(1).max(5000).optional(),
-});
-//# sourceMappingURL=feedback.js.map
+"use strict";import{z as o}from"zod";export const FeedbackTypeSchema=o.enum(["BUG","FEATURE","OTHER"]),FeedbackStatusSchema=o.enum(["UNREAD","READ","ARCHIVED"]),RunModeSchema=o.enum(["web-session","cli-spawn","cli-run","scheduled","unknown"]),RunModesSchema=o.array(RunModeSchema).max(5),BugFieldsSchema=o.object({reproSteps:o.string().max(2e3).optional(),expectedBehavior:o.string().max(1e3).optional(),actualBehavior:o.string().max(1e3).optional(),errorMessages:o.string().max(2e3).optional()}),SettingsSnapshotSchema=o.object({browser:o.object({userAgent:o.string(),viewport:o.string(),language:o.string()}).optional(),machines:o.record(o.string(),o.record(o.unknown())).optional(),preferences:o.record(o.unknown()).optional(),labs:o.record(o.unknown()).optional()}),MachineSnapshotSchema=o.object({machineId:o.string(),platform:o.string().optional(),arch:o.string().optional(),hostname:o.string().optional(),daemonVersion:o.string().optional(),availableAgents:o.array(o.string()).optional(),agentVersions:o.record(o.string()).optional(),nodeVersion:o.string().optional()}),DeviceInfoSchema=o.object({machines:o.array(MachineSnapshotSchema).optional(),appVersion:o.string().optional(),settingsSnapshot:SettingsSnapshotSchema.optional()}),CreateFeedbackSchema=o.object({type:FeedbackTypeSchema,description:o.string().min(0).max(5e3),screenshots:o.array(o.string().max(7e5)).max(3).optional(),deviceInfo:DeviceInfoSchema,affectedMachineIds:o.array(o.string()).max(20).optional(),affectedAgents:o.array(o.string()).max(10).optional(),runModes:RunModesSchema.optional(),bugFields:BugFieldsSchema.optional()}).strict(),UpdateFeedbackSchema=o.object({status:o.enum(["READ","ARCHIVED"]).optional(),reply:o.string().min(1).max(5e3).optional()}).strict();

package/dist/fileWhitelist.js

@@ -1,189 +1 @@
-/**
- * File upload whitelist — single source of truth for personal-edition file
- * upload validation, shared across web (PWA client), server (relay preflight),
- * and daemon (receiver second-check).
- *
- * Contains ONLY isomorphic data + pure byte logic (no node:/DOM deps):
- *   - per-category extension lists and max sizes
- *   - blocked (executable) extensions
- *   - magic-byte signatures
- *   - category resolution + magic-byte verification over Uint8Array
- *
- * File reading differs per platform (File/FileReader on web, Buffer on
- * server/daemon), so callers read the head bytes themselves and pass a
- * Uint8Array in. Buffer is a Uint8Array subclass, so `verifyMagicBytes`
- * works unchanged on both.
- */
-/** All file categories in priority order (first match wins in resolveFileCategory). */
-const FILE_CATEGORIES = ['text', 'document', 'code', 'image'];
-export const TEXT_EXTS = [
-    '.txt',
-    '.md',
-    '.log',
-    '.csv',
-    '.json',
-    '.xml',
-    '.yaml',
-    '.yml',
-    '.toml',
-    '.env',
-];
-export const CODE_EXTS = [
-    '.ts',
-    '.tsx',
-    '.js',
-    '.jsx',
-    '.py',
-    '.rs',
-    '.go',
-    '.java',
-    '.c',
-    '.cpp',
-    '.h',
-    '.css',
-    '.html',
-    '.sql',
-    '.sh',
-];
-export const DOC_EXTS = [
-    '.pdf',
-    '.doc',
-    '.docx',
-    '.xls',
-    '.xlsx',
-    '.ppt',
-    '.pptx',
-];
-export const IMG_EXTS = [
-    '.png',
-    '.jpg',
-    '.jpeg',
-    '.gif',
-    '.webp',
-    '.svg',
-    '.bmp',
-];
-/** Per-category max upload size in bytes. */
-export const FILE_CATEGORY_MAX_SIZE = {
-    text: 1 * 1024 * 1024, // 1 MB
-    document: 2 * 1024 * 1024, // 2 MB
-    code: 1 * 1024 * 1024, // 1 MB
-    image: 1 * 1024 * 1024, // 1 MB
-};
-/** Executable / dangerous extensions — always rejected. */
-export const BLOCKED_EXTS = new Set([
-    '.exe',
-    '.bat',
-    '.cmd',
-    '.msi',
-    '.dmg',
-    '.app',
-    '.com',
-    '.scr',
-]);
-/** All allowed extensions across every category. */
-export const ALLOWED_EXTENSIONS = new Set([
-    ...TEXT_EXTS,
-    ...CODE_EXTS,
-    ...DOC_EXTS,
-    ...IMG_EXTS,
-]);
-const CATEGORY_EXTS = {
-    text: TEXT_EXTS,
-    code: CODE_EXTS,
-    document: DOC_EXTS,
-    image: IMG_EXTS,
-};
-/**
- * Binary magic-byte signatures keyed by extension. `subSig` is checked at an
- * offset immediately after `sig` (used by WEBP's RIFF...WEBP layout).
- * Text-based formats (text/code/svg) are not here — they use UTF-8 validation.
- */
-export const FILE_SIGNATURES = {
-    '.pdf': { sig: [0x25, 0x50, 0x44, 0x46, 0x2d] },
-    '.doc': { sig: [0xd0, 0xcf, 0x11, 0xe0, 0xa1, 0xb1, 0x1a, 0xe1] },
-    '.xls': { sig: [0xd0, 0xcf, 0x11, 0xe0, 0xa1, 0xb1, 0x1a, 0xe1] },
-    '.ppt': { sig: [0xd0, 0xcf, 0x11, 0xe0, 0xa1, 0xb1, 0x1a, 0xe1] },
-    '.docx': { sig: [0x50, 0x4b, 0x03, 0x04] },
-    '.xlsx': { sig: [0x50, 0x4b, 0x03, 0x04] },
-    '.pptx': { sig: [0x50, 0x4b, 0x03, 0x04] },
-    '.png': { sig: [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a] },
-    '.jpg': { sig: [0xff, 0xd8, 0xff] },
-    '.jpeg': { sig: [0xff, 0xd8, 0xff] },
-    '.gif': { sig: [0x47, 0x49, 0x46, 0x38] }, // GIF8
-    '.webp': { sig: [0x52, 0x49, 0x46, 0x46], subSigAt: 8, subSig: [0x57, 0x45, 0x42, 0x50] }, // RIFF....WEBP
-    '.bmp': { sig: [0x42, 0x4d] }, // BM
-};
-/** Lowercased extension (including leading dot) or '' if none. */
-export function getFileExt(filename) {
-    const lastDot = filename.lastIndexOf('.');
-    return lastDot >= 0 ? filename.substring(lastDot).toLowerCase() : '';
-}
-/**
- * Resolve the whitelist category for an extension.
- * Returns null for blocked, unknown, or extension-less files.
- */
-export function resolveFileCategory(ext) {
-    if (ext === '' || BLOCKED_EXTS.has(ext))
-        return null;
-    for (const cat of FILE_CATEGORIES) {
-        if (CATEGORY_EXTS[cat].includes(ext))
-            return cat;
-    }
-    return null;
-}
-/** UTF-8 decode without throwing — returns null on invalid bytes. */
-function tryUtf8Decode(bytes) {
-    try {
-        return new TextDecoder('utf-8', { fatal: true }).decode(bytes);
-    }
-    catch {
-        // SILENT-CATCH-OK: tryUtf8Decode returns null on decode failure, caller handles
-        return null;
-    }
-}
-/** True if the head bytes look like SVG (XML text starting with <?xml/<svg/<!DOCTYPE svg). */
-function looksLikeSvg(head) {
-    const s = tryUtf8Decode(head.subarray(0, Math.min(head.length, 512)));
-    if (s === null)
-        return false;
-    const trimmed = (s.charCodeAt(0) === 0xfeff ? s.slice(1) : s).trimStart();
-    return (trimmed.startsWith('<?xml') || trimmed.startsWith('<svg') || trimmed.startsWith('<!DOCTYPE svg'));
-}
-/**
- * Verify head bytes match the expected type for `ext`.
- * - text/code: valid UTF-8
- * - svg: XML text sniff
- * - binary formats: magic-byte signature (+ optional sub-signature)
- *
- * `ext` must already be lowercased (use getFileExt). Buffer is a Uint8Array
- * subclass, so server/daemon can pass a Buffer directly.
- */
-export function verifyMagicBytes(head, ext) {
-    if (TEXT_EXTS.includes(ext) || CODE_EXTS.includes(ext)) {
-        return tryUtf8Decode(head) !== null;
-    }
-    if (ext === '.svg') {
-        return looksLikeSvg(head);
-    }
-    const rule = FILE_SIGNATURES[ext];
-    if (!rule)
-        return false;
-    if (head.length < rule.sig.length)
-        return false;
-    for (let i = 0; i < rule.sig.length; i++) {
-        if (head[i] !== rule.sig[i])
-            return false;
-    }
-    if (rule.subSig) {
-        const offset = rule.subSigAt ?? rule.sig.length;
-        if (head.length < offset + rule.subSig.length)
-            return false;
-        for (let i = 0; i < rule.subSig.length; i++) {
-            if (head[offset + i] !== rule.subSig[i])
-                return false;
-        }
-    }
-    return true;
-}
-//# sourceMappingURL=fileWhitelist.js.map
+"use strict";const i=["text","document","code","image"];export const TEXT_EXTS=[".txt",".md",".log",".csv",".json",".xml",".yaml",".yml",".toml",".env"],CODE_EXTS=[".ts",".tsx",".js",".jsx",".py",".rs",".go",".java",".c",".cpp",".h",".css",".html",".sql",".sh"],DOC_EXTS=[".pdf",".doc",".docx",".xls",".xlsx",".ppt",".pptx"],IMG_EXTS=[".png",".jpg",".jpeg",".gif",".webp",".svg",".bmp"],FILE_CATEGORY_MAX_SIZE={text:1048576,document:2097152,code:1048576,image:1048576},BLOCKED_EXTS=new Set([".exe",".bat",".cmd",".msi",".dmg",".app",".com",".scr"]),ALLOWED_EXTENSIONS=new Set([...TEXT_EXTS,...CODE_EXTS,...DOC_EXTS,...IMG_EXTS]);const o={text:TEXT_EXTS,code:CODE_EXTS,document:DOC_EXTS,image:IMG_EXTS};export const FILE_SIGNATURES={".pdf":{sig:[37,80,68,70,45]},".doc":{sig:[208,207,17,224,161,177,26,225]},".xls":{sig:[208,207,17,224,161,177,26,225]},".ppt":{sig:[208,207,17,224,161,177,26,225]},".docx":{sig:[80,75,3,4]},".xlsx":{sig:[80,75,3,4]},".pptx":{sig:[80,75,3,4]},".png":{sig:[137,80,78,71,13,10,26,10]},".jpg":{sig:[255,216,255]},".jpeg":{sig:[255,216,255]},".gif":{sig:[71,73,70,56]},".webp":{sig:[82,73,70,70],subSigAt:8,subSig:[87,69,66,80]},".bmp":{sig:[66,77]}};export function getFileExt(t){const x=t.lastIndexOf(".");return x>=0?t.substring(x).toLowerCase():""}export function resolveFileCategory(t){if(t===""||BLOCKED_EXTS.has(t))return null;for(const x of i)if(o[x].includes(t))return x;return null}function r(t){try{return new TextDecoder("utf-8",{fatal:!0}).decode(t)}catch{return null}}function g(t){const x=r(t.subarray(0,Math.min(t.length,512)));if(x===null)return!1;const e=(x.charCodeAt(0)===65279?x.slice(1):x).trimStart();return e.startsWith("<?xml")||e.startsWith("<svg")||e.startsWith("<!DOCTYPE svg")}export function verifyMagicBytes(t,x){if(TEXT_EXTS.includes(x)||CODE_EXTS.includes(x))return r(t)!==null;if(x===".svg")return g(t);const e=FILE_SIGNATURES[x];if(!e||t.length<e.sig.length)return!1;for(let s=0;s<e.sig.length;s++)if(t[s]!==e.sig[s])return!1;if(e.subSig){const s=e.subSigAt??e.sig.length;if(t.length<s+e.subSig.length)return!1;for(let n=0;n<e.subSig.length;n++)if(t[s+n]!==e.subSig[n])return!1}return!0}