@aigne/aos 0.2.0-beta

package/dist/dsl-shared.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dsl-shared.mjs","names":["start","startColumn"],"sources":["../src/dsl-shared.ts"],"sourcesContent":["export type DslTokenType = \"word\" | \"string\" | \"brace\";\n\nexport interface DslToken {\n  type: DslTokenType;\n  value: string;\n  line: number;\n  column: number;\n}\n\nexport interface DslField {\n  children?: DslField[];\n  name: DslToken;\n  values: DslToken[];\n}\n\nexport interface DslDeclaration {\n  headValues?: DslToken[];\n  kind: string;\n  id: string;\n  idToken: DslToken;\n  shorthand?: DslToken;\n  title?: string;\n  titleToken?: DslToken;\n  fields: DslField[];\n}\n\nexport type DslErrorFactory = (message: string, line: number, column?: number) => Error;\n\nexport interface ParseDslDeclarationOptions {\n  allowHeadValues?: boolean;\n  allowMissingId?: boolean;\n  allowQuotedId?: boolean;\n  allowQuotedTitle?: boolean;\n  allowShorthandString?: boolean;\n  error: DslErrorFactory;\n  expected?: string;\n  fieldContinuationPreceders?: string[];\n  fieldContinuationPairs?: Record<string, string[]>;\n  fieldInlineContinuationKeywords?: Record<string, string[]>;\n  fieldKeywords: string[];\n  kind: string;\n  nestedFieldKeywords?: string[];\n  wildcardNestedFieldKeywords?: string[];\n}\n\nexport interface DslDeclarationSchema extends ParseDslDeclarationOptions {\n  /**\n   * Declarative head-shape alias for new DSL parsers. Legacy callers may still\n   * pass the lower-level allow* flags directly through ParseDslDeclarationOptions.\n   */\n  idShape?: \"bare\" | \"quoted\" | \"bare-or-quoted\" | \"none\";\n  takesInlineTitle?: boolean;\n}\n\nexport function parseDeclaration(source: string, schema: DslDeclarationSchema): DslDeclaration {\n  const { idShape, takesInlineTitle, ...options } = schema;\n  return parseDslDeclaration(source, {\n    ...options,\n    ...(idShape === \"none\" ? { allowMissingId: true } : {}),\n    ...(idShape === \"quoted\" || idShape === \"bare-or-quoted\" ? { allowQuotedId: true } : {}),\n    ...(takesInlineTitle ? { allowQuotedTitle: true } : {}),\n  });\n}\n\nexport function parseDslDeclaration(\n  source: string,\n  options: ParseDslDeclarationOptions,\n): DslDeclaration {\n  const tokens = tokenizeDsl(source, options.error);\n  const expected = options.expected ?? `Expected ${options.kind} <id> {`;\n  let index = 0;\n\n  const kindToken = tokens[index];\n  if (kindToken?.type !== \"word\" || kindToken.value !== options.kind) {\n    throw options.error(expected, kindToken?.line ?? 1, kindToken?.column ?? 1);\n  }\n  index += 1;\n\n  let idToken = tokens[index];\n  if (options.allowMissingId && idToken?.type === \"brace\" && idToken.value === \"{\") {\n    idToken = kindToken;\n  } else if (\n    !idToken ||\n    (idToken.type !== \"word\" && (!options.allowQuotedId || idToken.type !== \"string\"))\n  ) {\n    throw options.error(\n      expected,\n      idToken?.line ?? kindToken.line,\n      idToken?.column ?? kindToken.column,\n    );\n  } else {\n    index += 1;\n  }\n  const id =\n    idToken === kindToken && options.allowMissingId\n      ? \"\"\n      : idToken.type === \"string\"\n        ? parseDslStringToken(idToken, options.error)\n        : idToken.value;\n\n  let next = tokens[index];\n  let title: string | undefined;\n  let titleToken: DslToken | undefined;\n  if (options.allowQuotedTitle && next?.type === \"string\" && tokens[index + 1]?.value === \"{\") {\n    title = parseDslStringToken(next, options.error);\n    titleToken = next;\n    index += 1;\n    next = tokens[index];\n  }\n\n  if (options.allowShorthandString && next?.type === \"string\") {\n    index += 1;\n    if (index < tokens.length) {\n      const trailing = tokens[index]!;\n      throw options.error(\n        `Unexpected content after ${options.kind} shorthand`,\n        trailing.line,\n        trailing.column,\n      );\n    }\n    return { kind: options.kind, id, idToken, shorthand: next, fields: [] };\n  }\n\n  const headValues: DslToken[] = [];\n  if (options.allowHeadValues) {\n    while (next && (next.type !== \"brace\" || next.value !== \"{\")) {\n      if (next.type === \"brace\") {\n        throw options.error(expected, next.line, next.column);\n      }\n      headValues.push(next);\n      index += 1;\n      next = tokens[index];\n    }\n  }\n\n  if (next?.type !== \"brace\" || next.value !== \"{\") {\n    throw options.error(expected, next?.line ?? idToken.line, next?.column ?? idToken.column);\n  }\n  index += 1;\n\n  const fieldKeywords = new Set(options.fieldKeywords);\n  const fieldContinuationPreceders = new Set(options.fieldContinuationPreceders ?? []);\n  const fieldContinuationPairs = new Map(\n    Object.entries(options.fieldContinuationPairs ?? {}).map(([key, values]) => [\n      key,\n      new Set(values),\n    ]),\n  );\n  const fieldInlineContinuationKeywords = new Map(\n    Object.entries(options.fieldInlineContinuationKeywords ?? {}).map(([key, values]) => [\n      key,\n      new Set(values),\n    ]),\n  );\n  const nestedFieldKeywords = new Set(options.nestedFieldKeywords ?? []);\n  const wildcardNestedFieldKeywords = new Set(options.wildcardNestedFieldKeywords ?? []);\n  const parsed = parseDslFields(tokens, index, {\n    allowAnyFieldNames: false,\n    error: options.error,\n    fieldInlineContinuationKeywords,\n    fieldContinuationPairs,\n    fieldContinuationPreceders,\n    fieldKeywords,\n    kind: options.kind,\n    nestedFieldKeywords,\n    wildcardNestedFieldKeywords,\n  });\n  index = parsed.next;\n  const close = tokens[index];\n  if (close?.type === \"brace\" && close.value === \"}\") {\n    index += 1;\n    if (index < tokens.length) {\n      const trailing = tokens[index]!;\n      throw options.error(\n        `Unexpected content after ${options.kind} block`,\n        trailing.line,\n        trailing.column,\n      );\n    }\n    return {\n      kind: options.kind,\n      id,\n      idToken,\n      ...(title ? { title, titleToken } : {}),\n      ...(headValues.length > 0 ? { headValues } : {}),\n      fields: parsed.fields,\n    };\n  }\n\n  const last = tokens[tokens.length - 1];\n  throw options.error(`Unclosed ${options.kind} block`, last?.line ?? 1, last?.column ?? 1);\n}\n\ninterface ParseDslFieldsOptions {\n  allowAnyFieldNames: boolean;\n  error: DslErrorFactory;\n  fieldContinuationPairs: Map<string, Set<string>>;\n  fieldContinuationPreceders: Set<string>;\n  fieldInlineContinuationKeywords: Map<string, Set<string>>;\n  fieldKeywords: Set<string>;\n  kind: string;\n  nestedFieldKeywords: Set<string>;\n  wildcardNestedFieldKeywords: Set<string>;\n}\n\nfunction parseDslFields(\n  tokens: DslToken[],\n  start: number,\n  options: ParseDslFieldsOptions,\n): { fields: DslField[]; next: number } {\n  const fields: DslField[] = [];\n  let index = start;\n\n  while (index < tokens.length) {\n    const token = tokens[index]!;\n    if (token.type === \"brace\" && token.value === \"}\") {\n      return { fields, next: index };\n    }\n    if (\n      token.type !== \"word\" ||\n      (!options.allowAnyFieldNames && !options.fieldKeywords.has(token.value))\n    ) {\n      throw options.error(\n        `Unknown ${options.kind} DSL statement: ${token.value}${formatSuggestion(\n          didYouMean(token.value, options.fieldKeywords),\n        )}`,\n        token.line,\n        token.column,\n      );\n    }\n\n    const name = token;\n    index += 1;\n    const values: DslToken[] = [];\n    let children: DslField[] | undefined;\n    let braceDepth = 0;\n    while (index < tokens.length) {\n      const value = tokens[index]!;\n      const previous = values.at(-1);\n      if (value.type === \"brace\") {\n        if (\n          value.value === \"{\" &&\n          braceDepth === 0 &&\n          options.nestedFieldKeywords.has(name.value) &&\n          !previous?.value.endsWith(\"=\") &&\n          tokens[index + 1]?.type === \"word\"\n        ) {\n          const parsed = parseDslFields(tokens, index + 1, {\n            ...options,\n            allowAnyFieldNames: options.wildcardNestedFieldKeywords.has(name.value),\n          });\n          children = parsed.fields;\n          index = parsed.next;\n          const close = tokens[index];\n          if (close?.type !== \"brace\" || close.value !== \"}\") {\n            throw options.error(`Unclosed ${name.value} block`, value.line, value.column);\n          }\n          index += 1;\n          break;\n        }\n        if (value.value === \"}\" && braceDepth === 0) break;\n        if (value.value === \"{\") braceDepth += 1;\n        if (value.value === \"}\") braceDepth -= 1;\n        values.push(value);\n        index += 1;\n        continue;\n      }\n      const continuesField =\n        previous?.type === \"word\" &&\n        (options.fieldContinuationPreceders.has(previous.value) ||\n          (value.type === \"word\" &&\n            (options.fieldContinuationPairs.get(previous.value)?.has(value.value) ?? false)));\n      const continuesInlineFieldKeyword =\n        previous !== undefined &&\n        value.type === \"word\" &&\n        previous.line === value.line &&\n        (options.fieldInlineContinuationKeywords.get(name.value)?.has(value.value) ?? false);\n      const startsWildcardSibling =\n        options.allowAnyFieldNames &&\n        value.type === \"word\" &&\n        value.line > name.line &&\n        braceDepth === 0;\n      if (startsWildcardSibling) break;\n      if (\n        value.type === \"word\" &&\n        options.fieldKeywords.has(value.value) &&\n        !continuesField &&\n        !continuesInlineFieldKeyword &&\n        braceDepth === 0\n      ) {\n        break;\n      }\n      values.push(value);\n      index += 1;\n    }\n    fields.push({ name, values, ...(children ? { children } : {}) });\n  }\n\n  return { fields, next: index };\n}\n\nexport function tokenizeDsl(source: string, error: DslErrorFactory): DslToken[] {\n  const tokens: DslToken[] = [];\n  let line = 1;\n  let column = 1;\n  let index = 0;\n\n  while (index < source.length) {\n    const char = source[index];\n    if (char === \"\\n\") {\n      line += 1;\n      column = 1;\n      index += 1;\n      continue;\n    }\n    if (/\\s/.test(char ?? \"\")) {\n      column += 1;\n      index += 1;\n      continue;\n    }\n    if (char === \"#\") {\n      while (index < source.length && source[index] !== \"\\n\") {\n        index += 1;\n        column += 1;\n      }\n      continue;\n    }\n    if (char === \"/\" && source[index + 1] === \"/\") {\n      while (index < source.length && source[index] !== \"\\n\") {\n        index += 1;\n        column += 1;\n      }\n      continue;\n    }\n    if (char === \"{\" || char === \"}\") {\n      tokens.push({ type: \"brace\", value: char, line, column });\n      index += 1;\n      column += 1;\n      continue;\n    }\n    if (char === '\"') {\n      const start = index;\n      const startColumn = column;\n      index += 1;\n      column += 1;\n      let escaped = false;\n      while (index < source.length) {\n        const current = source[index];\n        if (current === \"\\n\") throw error(\"Unclosed string literal\", line, startColumn);\n        index += 1;\n        column += 1;\n        if (escaped) {\n          escaped = false;\n        } else if (current === \"\\\\\") {\n          escaped = true;\n        } else if (current === '\"') {\n          break;\n        }\n      }\n      tokens.push({ type: \"string\", value: source.slice(start, index), line, column: startColumn });\n      continue;\n    }\n\n    const start = index;\n    const startColumn = column;\n    while (\n      index < source.length &&\n      !/\\s/.test(source[index] ?? \"\") &&\n      source[index] !== \"{\" &&\n      source[index] !== \"}\" &&\n      // Break on `\"` so the next iteration enters string mode. Without this,\n      // `value=\"...\"` would consume the `\"` as part of the word, leaving `{`\n      // and `}` inside the user's JSON string to be mis-parsed as braces.\n      source[index] !== '\"'\n    ) {\n      index += 1;\n      column += 1;\n    }\n    tokens.push({ type: \"word\", value: source.slice(start, index), line, column: startColumn });\n  }\n\n  return tokens;\n}\n\nexport function parseDslStringToken(token: DslToken, error: DslErrorFactory): string {\n  if (token.type !== \"string\") throw error(\"Expected string\", token.line, token.column);\n  try {\n    const value = JSON.parse(token.value);\n    if (typeof value !== \"string\") throw new Error(\"expected string\");\n    return value;\n  } catch (err) {\n    throw error(\n      `Invalid string literal: ${err instanceof Error ? err.message : String(err)}`,\n      token.line,\n      token.column,\n    );\n  }\n}\n\nexport function parseDslScalarToken(token: DslToken, error: DslErrorFactory): unknown {\n  if (token.type === \"string\") return parseDslStringToken(token, error);\n  if (token.type !== \"word\") throw error(\"Expected value\", token.line, token.column);\n  if (token.value === \"true\") return true;\n  if (token.value === \"false\") return false;\n  const number = Number(token.value);\n  if (Number.isFinite(number) && String(number) === token.value) return number;\n  return token.value;\n}\n\nfunction formatSuggestion(suggestion?: string): string {\n  return suggestion ? `. Did you mean \"${suggestion}\"?` : \"\";\n}\n\nfunction didYouMean(value: string, candidates: Iterable<string>): string | undefined {\n  const normalized = value.toLowerCase();\n  let best: { distance: number; value: string } | undefined;\n  for (const candidate of candidates) {\n    const distance = levenshtein(normalized, candidate.toLowerCase());\n    if (!best || distance < best.distance) best = { distance, value: candidate };\n  }\n  if (!best) return undefined;\n  const threshold = Math.max(2, Math.floor(Math.max(value.length, best.value.length) / 3));\n  return best.distance <= threshold ? best.value : undefined;\n}\n\nfunction levenshtein(a: string, b: string): number {\n  if (a === b) return 0;\n  if (a.length === 0) return b.length;\n  if (b.length === 0) return a.length;\n\n  const previous = Array.from({ length: b.length + 1 }, (_, index) => index);\n  const current = Array.from({ length: b.length + 1 }, () => 0);\n\n  for (let i = 1; i <= a.length; i += 1) {\n    current[0] = i;\n    for (let j = 1; j <= b.length; j += 1) {\n      const cost = a[i - 1] === b[j - 1] ? 0 : 1;\n      current[j] = Math.min(current[j - 1]! + 1, previous[j]! + 1, previous[j - 1]! + cost);\n    }\n    for (let j = 0; j <= b.length; j += 1) previous[j] = current[j]!;\n  }\n\n  return previous[b.length]!;\n}\n"],"mappings":";AAsDA,SAAgB,iBAAiB,QAAgB,QAA8C;CAC7F,MAAM,EAAE,SAAS,kBAAkB,GAAG,YAAY;AAClD,QAAO,oBAAoB,QAAQ;EACjC,GAAG;EACH,GAAI,YAAY,SAAS,EAAE,gBAAgB,MAAM,GAAG,EAAE;EACtD,GAAI,YAAY,YAAY,YAAY,mBAAmB,EAAE,eAAe,MAAM,GAAG,EAAE;EACvF,GAAI,mBAAmB,EAAE,kBAAkB,MAAM,GAAG,EAAE;EACvD,CAAC;;AAGJ,SAAgB,oBACd,QACA,SACgB;CAChB,MAAM,SAAS,YAAY,QAAQ,QAAQ,MAAM;CACjD,MAAM,WAAW,QAAQ,YAAY,YAAY,QAAQ,KAAK;CAC9D,IAAI,QAAQ;CAEZ,MAAM,YAAY,OAAO;AACzB,KAAI,WAAW,SAAS,UAAU,UAAU,UAAU,QAAQ,KAC5D,OAAM,QAAQ,MAAM,UAAU,WAAW,QAAQ,GAAG,WAAW,UAAU,EAAE;AAE7E,UAAS;CAET,IAAI,UAAU,OAAO;AACrB,KAAI,QAAQ,kBAAkB,SAAS,SAAS,WAAW,QAAQ,UAAU,IAC3E,WAAU;UAEV,CAAC,WACA,QAAQ,SAAS,WAAW,CAAC,QAAQ,iBAAiB,QAAQ,SAAS,UAExE,OAAM,QAAQ,MACZ,UACA,SAAS,QAAQ,UAAU,MAC3B,SAAS,UAAU,UAAU,OAC9B;KAED,UAAS;CAEX,MAAM,KACJ,YAAY,aAAa,QAAQ,iBAC7B,KACA,QAAQ,SAAS,WACf,oBAAoB,SAAS,QAAQ,MAAM,GAC3C,QAAQ;CAEhB,IAAI,OAAO,OAAO;CAClB,IAAI;CACJ,IAAI;AACJ,KAAI,QAAQ,oBAAoB,MAAM,SAAS,YAAY,OAAO,QAAQ,IAAI,UAAU,KAAK;AAC3F,UAAQ,oBAAoB,MAAM,QAAQ,MAAM;AAChD,eAAa;AACb,WAAS;AACT,SAAO,OAAO;;AAGhB,KAAI,QAAQ,wBAAwB,MAAM,SAAS,UAAU;AAC3D,WAAS;AACT,MAAI,QAAQ,OAAO,QAAQ;GACzB,MAAM,WAAW,OAAO;AACxB,SAAM,QAAQ,MACZ,4BAA4B,QAAQ,KAAK,aACzC,SAAS,MACT,SAAS,OACV;;AAEH,SAAO;GAAE,MAAM,QAAQ;GAAM;GAAI;GAAS,WAAW;GAAM,QAAQ,EAAE;GAAE;;CAGzE,MAAM,aAAyB,EAAE;AACjC,KAAI,QAAQ,gBACV,QAAO,SAAS,KAAK,SAAS,WAAW,KAAK,UAAU,MAAM;AAC5D,MAAI,KAAK,SAAS,QAChB,OAAM,QAAQ,MAAM,UAAU,KAAK,MAAM,KAAK,OAAO;AAEvD,aAAW,KAAK,KAAK;AACrB,WAAS;AACT,SAAO,OAAO;;AAIlB,KAAI,MAAM,SAAS,WAAW,KAAK,UAAU,IAC3C,OAAM,QAAQ,MAAM,UAAU,MAAM,QAAQ,QAAQ,MAAM,MAAM,UAAU,QAAQ,OAAO;AAE3F,UAAS;CAET,MAAM,gBAAgB,IAAI,IAAI,QAAQ,cAAc;CACpD,MAAM,6BAA6B,IAAI,IAAI,QAAQ,8BAA8B,EAAE,CAAC;CACpF,MAAM,yBAAyB,IAAI,IACjC,OAAO,QAAQ,QAAQ,0BAA0B,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,CAC1E,KACA,IAAI,IAAI,OAAO,CAChB,CAAC,CACH;CACD,MAAM,kCAAkC,IAAI,IAC1C,OAAO,QAAQ,QAAQ,mCAAmC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,CACnF,KACA,IAAI,IAAI,OAAO,CAChB,CAAC,CACH;CACD,MAAM,sBAAsB,IAAI,IAAI,QAAQ,uBAAuB,EAAE,CAAC;CACtE,MAAM,8BAA8B,IAAI,IAAI,QAAQ,+BAA+B,EAAE,CAAC;CACtF,MAAM,SAAS,eAAe,QAAQ,OAAO;EAC3C,oBAAoB;EACpB,OAAO,QAAQ;EACf;EACA;EACA;EACA;EACA,MAAM,QAAQ;EACd;EACA;EACD,CAAC;AACF,SAAQ,OAAO;CACf,MAAM,QAAQ,OAAO;AACrB,KAAI,OAAO,SAAS,WAAW,MAAM,UAAU,KAAK;AAClD,WAAS;AACT,MAAI,QAAQ,OAAO,QAAQ;GACzB,MAAM,WAAW,OAAO;AACxB,SAAM,QAAQ,MACZ,4BAA4B,QAAQ,KAAK,SACzC,SAAS,MACT,SAAS,OACV;;AAEH,SAAO;GACL,MAAM,QAAQ;GACd;GACA;GACA,GAAI,QAAQ;IAAE;IAAO;IAAY,GAAG,EAAE;GACtC,GAAI,WAAW,SAAS,IAAI,EAAE,YAAY,GAAG,EAAE;GAC/C,QAAQ,OAAO;GAChB;;CAGH,MAAM,OAAO,OAAO,OAAO,SAAS;AACpC,OAAM,QAAQ,MAAM,YAAY,QAAQ,KAAK,SAAS,MAAM,QAAQ,GAAG,MAAM,UAAU,EAAE;;AAe3F,SAAS,eACP,QACA,OACA,SACsC;CACtC,MAAM,SAAqB,EAAE;CAC7B,IAAI,QAAQ;AAEZ,QAAO,QAAQ,OAAO,QAAQ;EAC5B,MAAM,QAAQ,OAAO;AACrB,MAAI,MAAM,SAAS,WAAW,MAAM,UAAU,IAC5C,QAAO;GAAE;GAAQ,MAAM;GAAO;AAEhC,MACE,MAAM,SAAS,UACd,CAAC,QAAQ,sBAAsB,CAAC,QAAQ,cAAc,IAAI,MAAM,MAAM,CAEvE,OAAM,QAAQ,MACZ,WAAW,QAAQ,KAAK,kBAAkB,MAAM,QAAQ,iBACtD,WAAW,MAAM,OAAO,QAAQ,cAAc,CAC/C,IACD,MAAM,MACN,MAAM,OACP;EAGH,MAAM,OAAO;AACb,WAAS;EACT,MAAM,SAAqB,EAAE;EAC7B,IAAI;EACJ,IAAI,aAAa;AACjB,SAAO,QAAQ,OAAO,QAAQ;GAC5B,MAAM,QAAQ,OAAO;GACrB,MAAM,WAAW,OAAO,GAAG,GAAG;AAC9B,OAAI,MAAM,SAAS,SAAS;AAC1B,QACE,MAAM,UAAU,OAChB,eAAe,KACf,QAAQ,oBAAoB,IAAI,KAAK,MAAM,IAC3C,CAAC,UAAU,MAAM,SAAS,IAAI,IAC9B,OAAO,QAAQ,IAAI,SAAS,QAC5B;KACA,MAAM,SAAS,eAAe,QAAQ,QAAQ,GAAG;MAC/C,GAAG;MACH,oBAAoB,QAAQ,4BAA4B,IAAI,KAAK,MAAM;MACxE,CAAC;AACF,gBAAW,OAAO;AAClB,aAAQ,OAAO;KACf,MAAM,QAAQ,OAAO;AACrB,SAAI,OAAO,SAAS,WAAW,MAAM,UAAU,IAC7C,OAAM,QAAQ,MAAM,YAAY,KAAK,MAAM,SAAS,MAAM,MAAM,MAAM,OAAO;AAE/E,cAAS;AACT;;AAEF,QAAI,MAAM,UAAU,OAAO,eAAe,EAAG;AAC7C,QAAI,MAAM,UAAU,IAAK,eAAc;AACvC,QAAI,MAAM,UAAU,IAAK,eAAc;AACvC,WAAO,KAAK,MAAM;AAClB,aAAS;AACT;;GAEF,MAAM,iBACJ,UAAU,SAAS,WAClB,QAAQ,2BAA2B,IAAI,SAAS,MAAM,IACpD,MAAM,SAAS,WACb,QAAQ,uBAAuB,IAAI,SAAS,MAAM,EAAE,IAAI,MAAM,MAAM,IAAI;GAC/E,MAAM,8BACJ,aAAa,UACb,MAAM,SAAS,UACf,SAAS,SAAS,MAAM,SACvB,QAAQ,gCAAgC,IAAI,KAAK,MAAM,EAAE,IAAI,MAAM,MAAM,IAAI;AAMhF,OAJE,QAAQ,sBACR,MAAM,SAAS,UACf,MAAM,OAAO,KAAK,QAClB,eAAe,EACU;AAC3B,OACE,MAAM,SAAS,UACf,QAAQ,cAAc,IAAI,MAAM,MAAM,IACtC,CAAC,kBACD,CAAC,+BACD,eAAe,EAEf;AAEF,UAAO,KAAK,MAAM;AAClB,YAAS;;AAEX,SAAO,KAAK;GAAE;GAAM;GAAQ,GAAI,WAAW,EAAE,UAAU,GAAG,EAAE;GAAG,CAAC;;AAGlE,QAAO;EAAE;EAAQ,MAAM;EAAO;;AAGhC,SAAgB,YAAY,QAAgB,OAAoC;CAC9E,MAAM,SAAqB,EAAE;CAC7B,IAAI,OAAO;CACX,IAAI,SAAS;CACb,IAAI,QAAQ;AAEZ,QAAO,QAAQ,OAAO,QAAQ;EAC5B,MAAM,OAAO,OAAO;AACpB,MAAI,SAAS,MAAM;AACjB,WAAQ;AACR,YAAS;AACT,YAAS;AACT;;AAEF,MAAI,KAAK,KAAK,QAAQ,GAAG,EAAE;AACzB,aAAU;AACV,YAAS;AACT;;AAEF,MAAI,SAAS,KAAK;AAChB,UAAO,QAAQ,OAAO,UAAU,OAAO,WAAW,MAAM;AACtD,aAAS;AACT,cAAU;;AAEZ;;AAEF,MAAI,SAAS,OAAO,OAAO,QAAQ,OAAO,KAAK;AAC7C,UAAO,QAAQ,OAAO,UAAU,OAAO,WAAW,MAAM;AACtD,aAAS;AACT,cAAU;;AAEZ;;AAEF,MAAI,SAAS,OAAO,SAAS,KAAK;AAChC,UAAO,KAAK;IAAE,MAAM;IAAS,OAAO;IAAM;IAAM;IAAQ,CAAC;AACzD,YAAS;AACT,aAAU;AACV;;AAEF,MAAI,SAAS,MAAK;GAChB,MAAMA,UAAQ;GACd,MAAMC,gBAAc;AACpB,YAAS;AACT,aAAU;GACV,IAAI,UAAU;AACd,UAAO,QAAQ,OAAO,QAAQ;IAC5B,MAAM,UAAU,OAAO;AACvB,QAAI,YAAY,KAAM,OAAM,MAAM,2BAA2B,MAAMA,cAAY;AAC/E,aAAS;AACT,cAAU;AACV,QAAI,QACF,WAAU;aACD,YAAY,KACrB,WAAU;aACD,YAAY,KACrB;;AAGJ,UAAO,KAAK;IAAE,MAAM;IAAU,OAAO,OAAO,MAAMD,SAAO,MAAM;IAAE;IAAM,QAAQC;IAAa,CAAC;AAC7F;;EAGF,MAAM,QAAQ;EACd,MAAM,cAAc;AACpB,SACE,QAAQ,OAAO,UACf,CAAC,KAAK,KAAK,OAAO,UAAU,GAAG,IAC/B,OAAO,WAAW,OAClB,OAAO,WAAW,OAIlB,OAAO,WAAW,MAClB;AACA,YAAS;AACT,aAAU;;AAEZ,SAAO,KAAK;GAAE,MAAM;GAAQ,OAAO,OAAO,MAAM,OAAO,MAAM;GAAE;GAAM,QAAQ;GAAa,CAAC;;AAG7F,QAAO;;AAGT,SAAgB,oBAAoB,OAAiB,OAAgC;AACnF,KAAI,MAAM,SAAS,SAAU,OAAM,MAAM,mBAAmB,MAAM,MAAM,MAAM,OAAO;AACrF,KAAI;EACF,MAAM,QAAQ,KAAK,MAAM,MAAM,MAAM;AACrC,MAAI,OAAO,UAAU,SAAU,OAAM,IAAI,MAAM,kBAAkB;AACjE,SAAO;UACA,KAAK;AACZ,QAAM,MACJ,2BAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAC3E,MAAM,MACN,MAAM,OACP;;;AAIL,SAAgB,oBAAoB,OAAiB,OAAiC;AACpF,KAAI,MAAM,SAAS,SAAU,QAAO,oBAAoB,OAAO,MAAM;AACrE,KAAI,MAAM,SAAS,OAAQ,OAAM,MAAM,kBAAkB,MAAM,MAAM,MAAM,OAAO;AAClF,KAAI,MAAM,UAAU,OAAQ,QAAO;AACnC,KAAI,MAAM,UAAU,QAAS,QAAO;CACpC,MAAM,SAAS,OAAO,MAAM,MAAM;AAClC,KAAI,OAAO,SAAS,OAAO,IAAI,OAAO,OAAO,KAAK,MAAM,MAAO,QAAO;AACtE,QAAO,MAAM;;AAGf,SAAS,iBAAiB,YAA6B;AACrD,QAAO,aAAa,mBAAmB,WAAW,MAAM;;AAG1D,SAAS,WAAW,OAAe,YAAkD;CACnF,MAAM,aAAa,MAAM,aAAa;CACtC,IAAI;AACJ,MAAK,MAAM,aAAa,YAAY;EAClC,MAAM,WAAW,YAAY,YAAY,UAAU,aAAa,CAAC;AACjE,MAAI,CAAC,QAAQ,WAAW,KAAK,SAAU,QAAO;GAAE;GAAU,OAAO;GAAW;;AAE9E,KAAI,CAAC,KAAM,QAAO;CAClB,MAAM,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,IAAI,MAAM,QAAQ,KAAK,MAAM,OAAO,GAAG,EAAE,CAAC;AACxF,QAAO,KAAK,YAAY,YAAY,KAAK,QAAQ;;AAGnD,SAAS,YAAY,GAAW,GAAmB;AACjD,KAAI,MAAM,EAAG,QAAO;AACpB,KAAI,EAAE,WAAW,EAAG,QAAO,EAAE;AAC7B,KAAI,EAAE,WAAW,EAAG,QAAO,EAAE;CAE7B,MAAM,WAAW,MAAM,KAAK,EAAE,QAAQ,EAAE,SAAS,GAAG,GAAG,GAAG,UAAU,MAAM;CAC1E,MAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,EAAE,SAAS,GAAG,QAAQ,EAAE;AAE7D,MAAK,IAAI,IAAI,GAAG,KAAK,EAAE,QAAQ,KAAK,GAAG;AACrC,UAAQ,KAAK;AACb,OAAK,IAAI,IAAI,GAAG,KAAK,EAAE,QAAQ,KAAK,GAAG;GACrC,MAAM,OAAO,EAAE,IAAI,OAAO,EAAE,IAAI,KAAK,IAAI;AACzC,WAAQ,KAAK,KAAK,IAAI,QAAQ,IAAI,KAAM,GAAG,SAAS,KAAM,GAAG,SAAS,IAAI,KAAM,KAAK;;AAEvF,OAAK,IAAI,IAAI,GAAG,KAAK,EAAE,QAAQ,KAAK,EAAG,UAAS,KAAK,QAAQ;;AAG/D,QAAO,SAAS,EAAE"}

package/dist/http/afs-mcp.cjs

@@ -0,0 +1,85 @@
+const require_server = require('../mcp/server.cjs');
+const require_auth_context = require('./auth-context.cjs');
+const require_request_context = require('./request-context.cjs');
+let _modelcontextprotocol_sdk_inMemory_js = require("@modelcontextprotocol/sdk/inMemory.js");
+
+//#region src/http/afs-mcp.ts
+const JSON_HEADERS = { "Content-Type": "application/json; charset=utf-8" };
+function jsonResponse(status, body) {
+	return new Response(JSON.stringify(body), {
+		status,
+		headers: { ...JSON_HEADERS }
+	});
+}
+/**
+* A JSON-RPC message is a *notification* (or a response) when it carries no
+* `id`; such messages produce no reply. Per the MCP Streamable HTTP spec, a POST
+* whose payload is solely notifications/responses MUST be answered with 202
+* Accepted and no body. A single message or a batch (array) is accepted.
+*
+* This matters because the standard handshake sends `notifications/initialized`
+* immediately after `initialize`. Without this guard the stateless round-trip
+* below `await`s a response message that never arrives, so the request hangs
+* until the runtime kills it (on CF: ~11s → a 1101 exception) and the client
+* reports "failed to connect".
+*/
+function isNotificationOnly(body) {
+	const isNotif = (m) => typeof m === "object" && m !== null && m.id === void 0;
+	return Array.isArray(body) ? body.length > 0 && body.every(isNotif) : isNotif(body);
+}
+function createAfsMcpHandler(options) {
+	const { globalAFS, name, version } = options;
+	const ctx = require_request_context.createAfsRequestContext(options);
+	return async (request) => {
+		if (request.method !== "POST") return jsonResponse(405, { error: "Method Not Allowed" });
+		let scopedAFS = globalAFS;
+		let opContext;
+		if (options.resolveCaller) {
+			const caller = await ctx.resolveCaller(request);
+			if (!caller) return jsonResponse(401, { error: "Unauthorized" });
+			const blocklet = await ctx.resolveBlocklet(request);
+			if (blocklet) try {
+				const scoped = await ctx.resolveScoped(request, {
+					blocklet,
+					sessionId: null,
+					caller
+				});
+				scopedAFS = scoped.afs;
+				opContext = scoped.context;
+			} catch {
+				return jsonResponse(500, { error: "Internal Server Error" });
+			}
+			else opContext = require_auth_context.mergeCallerContext({}, caller, { callerOrigin: "network" });
+		}
+		try {
+			const body = await request.json();
+			if (isNotificationOnly(body)) return new Response(null, { status: 202 });
+			const mcpServer = require_server.createArcMcpServer(scopedAFS, {
+				name,
+				version,
+				context: opContext
+			});
+			const [clientTransport, serverTransport] = _modelcontextprotocol_sdk_inMemory_js.InMemoryTransport.createLinkedPair();
+			const responsePromise = new Promise((resolve) => {
+				clientTransport.onmessage = (msg) => resolve(msg);
+			});
+			await mcpServer.connect(serverTransport);
+			await clientTransport.send(body);
+			const response = await responsePromise;
+			await Promise.all([clientTransport.close(), serverTransport.close()]);
+			return jsonResponse(200, response);
+		} catch (error) {
+			return jsonResponse(200, {
+				jsonrpc: "2.0",
+				error: {
+					code: -32603,
+					message: error instanceof Error ? error.message : "Internal error"
+				},
+				id: null
+			});
+		}
+	};
+}
+
+//#endregion
+exports.createAfsMcpHandler = createAfsMcpHandler;

package/dist/http/afs-mcp.d.cts

@@ -0,0 +1,14 @@
+import { AfsRequestContextOptions } from "./request-context.cjs";
+
+//#region src/http/afs-mcp.d.ts
+interface AfsMcpHandlerOptions extends AfsRequestContextOptions {
+  /** MCP server name forwarded to createArcMcpServer. */
+  name: string;
+  /** MCP server version forwarded to createArcMcpServer. */
+  version: string;
+}
+type AfsMcpHandler = (request: Request) => Promise<Response>;
+declare function createAfsMcpHandler(options: AfsMcpHandlerOptions): AfsMcpHandler;
+//#endregion
+export { AfsMcpHandler, AfsMcpHandlerOptions, createAfsMcpHandler };
+//# sourceMappingURL=afs-mcp.d.cts.map

package/dist/http/afs-mcp.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"afs-mcp.d.cts","names":[],"sources":["../../src/http/afs-mcp.ts"],"mappings":";;;UAgDiB,oBAAA,SAA6B,wBAAA;EAOW;EALvD,IAAA;EAKoC;EAHpC,OAAA;AAAA;AAAA,KAGU,aAAA,IAAiB,OAAA,EAAS,OAAA,KAAY,OAAA,CAAQ,QAAA;AAAA,iBAE1C,mBAAA,CAAoB,OAAA,EAAS,oBAAA,GAAuB,aAAA"}

package/dist/http/afs-mcp.d.mts

@@ -0,0 +1,14 @@
+import { AfsRequestContextOptions } from "./request-context.mjs";
+
+//#region src/http/afs-mcp.d.ts
+interface AfsMcpHandlerOptions extends AfsRequestContextOptions {
+  /** MCP server name forwarded to createArcMcpServer. */
+  name: string;
+  /** MCP server version forwarded to createArcMcpServer. */
+  version: string;
+}
+type AfsMcpHandler = (request: Request) => Promise<Response>;
+declare function createAfsMcpHandler(options: AfsMcpHandlerOptions): AfsMcpHandler;
+//#endregion
+export { AfsMcpHandler, AfsMcpHandlerOptions, createAfsMcpHandler };
+//# sourceMappingURL=afs-mcp.d.mts.map

package/dist/http/afs-mcp.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"afs-mcp.d.mts","names":[],"sources":["../../src/http/afs-mcp.ts"],"mappings":";;;UAgDiB,oBAAA,SAA6B,wBAAA;EAOW;EALvD,IAAA;EAKoC;EAHpC,OAAA;AAAA;AAAA,KAGU,aAAA,IAAiB,OAAA,EAAS,OAAA,KAAY,OAAA,CAAQ,QAAA;AAAA,iBAE1C,mBAAA,CAAoB,OAAA,EAAS,oBAAA,GAAuB,aAAA"}

package/dist/http/afs-mcp.mjs

@@ -0,0 +1,86 @@
+import { createArcMcpServer } from "../mcp/server.mjs";
+import { mergeCallerContext } from "./auth-context.mjs";
+import { createAfsRequestContext } from "./request-context.mjs";
+import { InMemoryTransport } from "@modelcontextprotocol/sdk/inMemory.js";
+
+//#region src/http/afs-mcp.ts
+const JSON_HEADERS = { "Content-Type": "application/json; charset=utf-8" };
+function jsonResponse(status, body) {
+	return new Response(JSON.stringify(body), {
+		status,
+		headers: { ...JSON_HEADERS }
+	});
+}
+/**
+* A JSON-RPC message is a *notification* (or a response) when it carries no
+* `id`; such messages produce no reply. Per the MCP Streamable HTTP spec, a POST
+* whose payload is solely notifications/responses MUST be answered with 202
+* Accepted and no body. A single message or a batch (array) is accepted.
+*
+* This matters because the standard handshake sends `notifications/initialized`
+* immediately after `initialize`. Without this guard the stateless round-trip
+* below `await`s a response message that never arrives, so the request hangs
+* until the runtime kills it (on CF: ~11s → a 1101 exception) and the client
+* reports "failed to connect".
+*/
+function isNotificationOnly(body) {
+	const isNotif = (m) => typeof m === "object" && m !== null && m.id === void 0;
+	return Array.isArray(body) ? body.length > 0 && body.every(isNotif) : isNotif(body);
+}
+function createAfsMcpHandler(options) {
+	const { globalAFS, name, version } = options;
+	const ctx = createAfsRequestContext(options);
+	return async (request) => {
+		if (request.method !== "POST") return jsonResponse(405, { error: "Method Not Allowed" });
+		let scopedAFS = globalAFS;
+		let opContext;
+		if (options.resolveCaller) {
+			const caller = await ctx.resolveCaller(request);
+			if (!caller) return jsonResponse(401, { error: "Unauthorized" });
+			const blocklet = await ctx.resolveBlocklet(request);
+			if (blocklet) try {
+				const scoped = await ctx.resolveScoped(request, {
+					blocklet,
+					sessionId: null,
+					caller
+				});
+				scopedAFS = scoped.afs;
+				opContext = scoped.context;
+			} catch {
+				return jsonResponse(500, { error: "Internal Server Error" });
+			}
+			else opContext = mergeCallerContext({}, caller, { callerOrigin: "network" });
+		}
+		try {
+			const body = await request.json();
+			if (isNotificationOnly(body)) return new Response(null, { status: 202 });
+			const mcpServer = createArcMcpServer(scopedAFS, {
+				name,
+				version,
+				context: opContext
+			});
+			const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();
+			const responsePromise = new Promise((resolve) => {
+				clientTransport.onmessage = (msg) => resolve(msg);
+			});
+			await mcpServer.connect(serverTransport);
+			await clientTransport.send(body);
+			const response = await responsePromise;
+			await Promise.all([clientTransport.close(), serverTransport.close()]);
+			return jsonResponse(200, response);
+		} catch (error) {
+			return jsonResponse(200, {
+				jsonrpc: "2.0",
+				error: {
+					code: -32603,
+					message: error instanceof Error ? error.message : "Internal error"
+				},
+				id: null
+			});
+		}
+	};
+}
+
+//#endregion
+export { createAfsMcpHandler };
+//# sourceMappingURL=afs-mcp.mjs.map

package/dist/http/afs-mcp.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"afs-mcp.mjs","names":[],"sources":["../../src/http/afs-mcp.ts"],"sourcesContent":["/**\n * Stateless MCP-over-HTTP handler for AFS (InMemoryTransport, CF-style).\n *\n * Companion to afs-rpc.ts: instead of AFS CRUD ops, this endpoint exposes an\n * MCP (Model Context Protocol) server so AI agents can call AFS tools over a\n * plain POST request — no WebSocket or SSE stream required.\n *\n * Key differences from afs-rpc:\n *   - Auth is required: null caller → 401. Unlike afs-rpc where null = anonymous,\n *     MCP always rejects unauthenticated callers when resolveCaller is configured.\n *   - Null blocklet → globalAFS (unlike afs-rpc → 400). MCP is a host-level API;\n *     if no blocklet context is resolvable, the global AFS topology is served.\n *   - Stateless: InMemoryTransport, one POST = one JSON-RPC exchange. No sessions.\n *   - Per-request McpServer: required because createArcMcpServer binds AFS at\n *     construction time; different callers need different scoped instances.\n */\n\nimport type { AFS, AFSContext, AFSRoot } from \"@aigne/afs\";\nimport { InMemoryTransport } from \"@modelcontextprotocol/sdk/inMemory.js\";\nimport { createArcMcpServer } from \"../mcp/server.js\";\nimport { mergeCallerContext } from \"./auth-context.js\";\nimport type { AfsRequestContextOptions } from \"./request-context.js\";\nimport { createAfsRequestContext } from \"./request-context.js\";\n\nconst JSON_HEADERS = { \"Content-Type\": \"application/json; charset=utf-8\" } as const;\n\nfunction jsonResponse(status: number, body: unknown): Response {\n  return new Response(JSON.stringify(body), { status, headers: { ...JSON_HEADERS } });\n}\n\n/**\n * A JSON-RPC message is a *notification* (or a response) when it carries no\n * `id`; such messages produce no reply. Per the MCP Streamable HTTP spec, a POST\n * whose payload is solely notifications/responses MUST be answered with 202\n * Accepted and no body. A single message or a batch (array) is accepted.\n *\n * This matters because the standard handshake sends `notifications/initialized`\n * immediately after `initialize`. Without this guard the stateless round-trip\n * below `await`s a response message that never arrives, so the request hangs\n * until the runtime kills it (on CF: ~11s → a 1101 exception) and the client\n * reports \"failed to connect\".\n */\nfunction isNotificationOnly(body: unknown): boolean {\n  const isNotif = (m: unknown): boolean =>\n    typeof m === \"object\" && m !== null && (m as { id?: unknown }).id === undefined;\n  return Array.isArray(body) ? body.length > 0 && body.every(isNotif) : isNotif(body);\n}\n\nexport interface AfsMcpHandlerOptions extends AfsRequestContextOptions {\n  /** MCP server name forwarded to createArcMcpServer. */\n  name: string;\n  /** MCP server version forwarded to createArcMcpServer. */\n  version: string;\n}\n\nexport type AfsMcpHandler = (request: Request) => Promise<Response>;\n\nexport function createAfsMcpHandler(options: AfsMcpHandlerOptions): AfsMcpHandler {\n  const { globalAFS, name, version } = options;\n  const ctx = createAfsRequestContext(options);\n\n  return async (request: Request): Promise<Response> => {\n    if (request.method !== \"POST\") {\n      return jsonResponse(405, { error: \"Method Not Allowed\" });\n    }\n\n    let scopedAFS: AFSRoot = globalAFS;\n    // Per-request op context threaded into every MCP tool call so the exec-effect\n    // and SessionUserAFS base-write gates engage (both key on\n    // callerOrigin === \"network\"). Undefined in local/open mode (no resolveCaller)\n    // — tools then run as trusted-internal, matching the pre-auth behaviour.\n    let opContext: AFSContext | undefined;\n\n    if (options.resolveCaller) {\n      // Auth gate: when resolveCaller is configured, null → 401.\n      // This is the deliberate contrast with afs-rpc where null = anonymous.\n      const caller = await ctx.resolveCaller(request);\n      if (!caller) {\n        return jsonResponse(401, { error: \"Unauthorized\" });\n      }\n\n      // Blocklet resolution: null → globalAFS (unlike afs-rpc → 400).\n      const blocklet = await ctx.resolveBlocklet(request);\n      if (blocklet) {\n        // Fail-closed: if scoped AFS construction fails (blocklet not found,\n        // resolver error, etc.), return 500 rather than silently degrading to\n        // globalAFS — degradation would expose a wider view than intended.\n        try {\n          const scoped = await ctx.resolveScoped(request, {\n            blocklet,\n            sessionId: null,\n            caller,\n          });\n          scopedAFS = scoped.afs;\n          opContext = scoped.context as AFSContext;\n        } catch {\n          return jsonResponse(500, { error: \"Internal Server Error\" });\n        }\n      } else {\n        // Root mode (no blocklet resolvable): still stamp a verified network\n        // caller context so mutations against the global AFS pass through the\n        // same gates a scoped call does (authenticated write allowed; anonymous\n        // / forbidden base writes rejected) instead of running trusted-internal.\n        opContext = mergeCallerContext({}, caller, { callerOrigin: \"network\" }) as AFSContext;\n      }\n    }\n\n    // Per-request McpServer + InMemoryTransport (one POST = one JSON-RPC round-trip).\n    try {\n      const body = await request.json();\n      // Notifications / responses (no `id`) produce no reply → 202, no body.\n      // Otherwise the `await responsePromise` below never resolves and the POST\n      // hangs — this is what broke the `notifications/initialized` handshake step.\n      if (isNotificationOnly(body)) {\n        return new Response(null, { status: 202 });\n      }\n      // Cast: AFSRoot is the interface; AFS is the implementing class that\n      // createArcMcpServer requires for getMounts(). All runtime instances are AFS.\n      const mcpServer = createArcMcpServer(scopedAFS as AFS, { name, version, context: opContext });\n      const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();\n      const responsePromise = new Promise<unknown>((resolve) => {\n        clientTransport.onmessage = (msg) => resolve(msg);\n      });\n      await mcpServer.connect(serverTransport);\n      await clientTransport.send(body as Parameters<typeof clientTransport.send>[0]);\n      const response = await responsePromise;\n      await Promise.all([clientTransport.close(), serverTransport.close()]);\n      return jsonResponse(200, response);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : \"Internal error\";\n      return jsonResponse(200, { jsonrpc: \"2.0\", error: { code: -32603, message }, id: null });\n    }\n  };\n}\n"],"mappings":";;;;;;AAwBA,MAAM,eAAe,EAAE,gBAAgB,mCAAmC;AAE1E,SAAS,aAAa,QAAgB,MAAyB;AAC7D,QAAO,IAAI,SAAS,KAAK,UAAU,KAAK,EAAE;EAAE;EAAQ,SAAS,EAAE,GAAG,cAAc;EAAE,CAAC;;;;;;;;;;;;;;AAerF,SAAS,mBAAmB,MAAwB;CAClD,MAAM,WAAW,MACf,OAAO,MAAM,YAAY,MAAM,QAAS,EAAuB,OAAO;AACxE,QAAO,MAAM,QAAQ,KAAK,GAAG,KAAK,SAAS,KAAK,KAAK,MAAM,QAAQ,GAAG,QAAQ,KAAK;;AAYrF,SAAgB,oBAAoB,SAA8C;CAChF,MAAM,EAAE,WAAW,MAAM,YAAY;CACrC,MAAM,MAAM,wBAAwB,QAAQ;AAE5C,QAAO,OAAO,YAAwC;AACpD,MAAI,QAAQ,WAAW,OACrB,QAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,CAAC;EAG3D,IAAI,YAAqB;EAKzB,IAAI;AAEJ,MAAI,QAAQ,eAAe;GAGzB,MAAM,SAAS,MAAM,IAAI,cAAc,QAAQ;AAC/C,OAAI,CAAC,OACH,QAAO,aAAa,KAAK,EAAE,OAAO,gBAAgB,CAAC;GAIrD,MAAM,WAAW,MAAM,IAAI,gBAAgB,QAAQ;AACnD,OAAI,SAIF,KAAI;IACF,MAAM,SAAS,MAAM,IAAI,cAAc,SAAS;KAC9C;KACA,WAAW;KACX;KACD,CAAC;AACF,gBAAY,OAAO;AACnB,gBAAY,OAAO;WACb;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,CAAC;;OAO9D,aAAY,mBAAmB,EAAE,EAAE,QAAQ,EAAE,cAAc,WAAW,CAAC;;AAK3E,MAAI;GACF,MAAM,OAAO,MAAM,QAAQ,MAAM;AAIjC,OAAI,mBAAmB,KAAK,CAC1B,QAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,KAAK,CAAC;GAI5C,MAAM,YAAY,mBAAmB,WAAkB;IAAE;IAAM;IAAS,SAAS;IAAW,CAAC;GAC7F,MAAM,CAAC,iBAAiB,mBAAmB,kBAAkB,kBAAkB;GAC/E,MAAM,kBAAkB,IAAI,SAAkB,YAAY;AACxD,oBAAgB,aAAa,QAAQ,QAAQ,IAAI;KACjD;AACF,SAAM,UAAU,QAAQ,gBAAgB;AACxC,SAAM,gBAAgB,KAAK,KAAmD;GAC9E,MAAM,WAAW,MAAM;AACvB,SAAM,QAAQ,IAAI,CAAC,gBAAgB,OAAO,EAAE,gBAAgB,OAAO,CAAC,CAAC;AACrE,UAAO,aAAa,KAAK,SAAS;WAC3B,OAAO;AAEd,UAAO,aAAa,KAAK;IAAE,SAAS;IAAO,OAAO;KAAE,MAAM;KAAQ,SADlD,iBAAiB,QAAQ,MAAM,UAAU;KACkB;IAAE,IAAI;IAAM,CAAC"}

package/dist/http/afs-raw.cjs

@@ -0,0 +1,264 @@
+const require_request_context = require('./request-context.cjs');
+const require_afs_rpc = require('./afs-rpc.cjs');
+const require_raw_url = require('./raw-url.cjs');
+let _aigne_afs = require("@aigne/afs");
+let _aigne_afs_provider_utils = require("@aigne/afs-provider-utils");
+
+//#region src/http/afs-raw.ts
+/**
+* `GET /api/afs/raw` — raw-bytes endpoint (afs-preview T2.1, design §3).
+*
+* Lets `<img>` / `<iframe>` / `<video>` reference AFS content that is too
+* large to inline as a data URL. AFS-Only I/O: the handler speaks ONLY the
+* scoped AFS API (`stat` + `read`) — never CAS/R2/disk.
+*
+* TWO auth modes (afs-raw cookie mode):
+*   - SIGNED (sig query present): a bearer URL whose HMAC binds
+*     path+sid+caller+blocklet (raw-url.ts). The ONLY mode that can serve an
+*     anonymous caller or a cookie-less context — sandboxed PDF iframe (no
+*     `allow-same-origin` ⇒ null origin ⇒ no cookie), cross-origin embeds,
+*     public share links. Issued server-side because signing needs the secret.
+*   - COOKIE (no sig): a same-origin AUTHENTICATED GET — feed/list `<img>`
+*     cards. Identity is the verified session cookie (resolveCaller); the
+*     scoped `/user` overlay grants the SAME read authz as afs-rpc, so no
+*     bearer URL is minted. `SameSite=Lax` on the session cookie means a
+*     cross-site subresource (`<img>` from another origin) carries NO cookie ⇒
+*     401/403, so this can't be hotlinked/CSRF'd; and the only cross-site case
+*     Lax DOES allow (top-level nav) only ever exposes the caller's OWN `/user`
+*     space to themselves. Anonymous (no cookie) is refused here — an
+*     unauthenticated reader must use a signed URL. No per-render server
+*     pre-signing, no `exp` churn ⇒ the URL is stable (cacheable later).
+*
+* Processing order (the contract — every step fail-closed):
+*   1. method gate (GET) → 405
+*   2. signing secret present? → else 503 (no signing = no endpoint)
+*   3. cookie caller resolution (anonymous OK in SIGNED mode — symmetry is
+*      enforced by the signature, see raw-url.ts)
+*   4. auth: SIGNED → `verifyRawUrl` (sig/exp/caller-binding/anonymous-
+*      private-path) any failure → 403; COOKIE → require non-anonymous caller
+*      (else 403) + `?path=` (else 400)
+*   5. `sanitizeAfsPath` (single shared entry — no local normalize/reorder)
+*      → 400
+*   6. blocklet resolution (query/host alias/first-label) → 400
+*   7. scoped AFS via the shared request-context helper. SIGNED passes the
+*      EXPLICIT signature-verified sessionId (never a `rpc-<blocklet>`-style
+*      fallback); COOKIE passes null (the `/user` overlay keys on caller.did)
+*   8a. media-302 (preview-r2-direct): MEDIA (image/video/audio) over
+*       `RAW_REDIRECT_MIN_BYTES` with a presign-capable scoped AFS → 302 to a
+*       presigned R2 GET. Runs AFTER the size-validity check but BEFORE the
+*       `maxBytes` cap (cap-exempt — R2's ceiling is the object size); the
+*       worker never buffers these bytes. Falls through to 8b on null.
+*   8b. `afs.stat` size cap — over `maxBytes` → 413 BEFORE any read; size
+*      missing → conservative 413 (read-after-judge would defeat the memory
+*      guardrail)
+*   9. `afs.read` → bytes → response with `Content-Type` (meta.mimeType,
+*      fallback shared detectMimeType), `X-Content-Type-Options: nosniff`
+*      (mandatory — binary serving endpoint), `Cache-Control: private,
+*      no-store`. #818: a CLIENT-DECLARED browser-scriptable type
+*      (`isScriptableMimeType`: text/html, image/svg+xml, xml, JS variants) is
+*      NEVER served inline — forced to `application/octet-stream` +
+*      `Content-Disposition: attachment` + CSP sandbox + `X-Frame-Options: DENY`
+*      (nosniff alone can't stop a genuinely-declared scriptable type executing).
+*
+* Cache semantics: this handler owns its OWN request-context instance —
+* code shared with afs-rpc, runtime state (projection cache) NOT shared.
+*/
+/**
+* Default max served size — 100 MiB (413 above; streaming/Range is a separate
+* project). upload-limits Phase 6 (D4 interim): raised 50→100 MiB to ALIGN with
+* the grant upload cap (`AFS_DID_SPACE_UPLOAD_MAX_BYTES`, 100 MiB) so a file the
+* upload plane accepts can be raw-served, closing the G4 upload/serve asymmetry
+* for the worker-serve path. This is the NODE/default ceiling (Node can buffer
+* 100 MiB once). It is NOT runtime-uniform: the CF Worker passes a much smaller
+* `maxBytes` (~4 MiB, preview-r2-direct's runtime-aware clean-413) because a
+* one-shot read of ≳8 MiB OOMs the worker (Error 1102 → 503); CF non-media over
+* that gets a CLEAN 413 (never a crash), and CF MEDIA over the gate is exempt via
+* the 302→R2-direct path above. The 50→100 doubling of one-shot read memory on
+* Node is the known interim cost; true large serve needs streaming/Range.
+*/
+const RAW_MAX_BYTES_DEFAULT = 100 * 1024 * 1024;
+/**
+* Media over this size redirect (302) to a presigned object-store GET instead of
+* being served by the worker (preview-r2-direct §4 / Review-B). v1 = 32 KB, locked
+* equal to `PREVIEW_IMAGE_INLINE_MAX` (the user-locked "> 32 KB → R2-direct"
+* decision; maximizes worker-offload). The correctness floor is the worker cliff
+* (~4–8 MiB); anything below is a worker-offload-vs-first-byte-latency CHOICE, and
+* a future raise is a measurement-gated, OPTIONAL post-ship activity — NOT a gate.
+*/
+const RAW_REDIRECT_MIN_BYTES = 32 * 1024;
+/**
+* The 302 path is MEDIA-ONLY (preview-r2-direct §5 / Review-1): only `image/*`,
+* `video/*`, `audio/*` are script-safe to redirect cross-origin to R2 (the
+* presigned URL drops `nosniff`; a media element never executes mislabeled
+* bytes). SVG (`image/svg+xml`) matches `image/*` here but is EXCLUDED from the
+* redirect at the call site via `isScriptableMimeType` (#818 supersedes the old
+* Review-A "SVG rides image/*" behavior): a scripted SVG is browser-scriptable,
+* so it falls through to worker-serve, which forces a safe attachment. PDF/HTML/
+* text MUST stay on the worker (iframe `noSandbox`/`_isSameOriginUrl` depends on
+* same-origin + nosniff; text is client-rendered → `fetch` → CORS-gated).
+*/
+function isRedirectableMediaType(mime) {
+	const m = mime.toLowerCase();
+	return m.startsWith("image/") || m.startsWith("video/") || m.startsWith("audio/");
+}
+/**
+* Browser-scriptable MIME types (#818). `meta.mimeType` is CLIENT-CONTROLLED —
+* any writer can declare it, there is no write-side allowlist, and this endpoint
+* serves anonymous bearer URLs (public share links). If we echo a declared
+* scriptable type as an inline `Content-Type`, the bytes execute in the serving
+* origin → stored XSS. `X-Content-Type-Options: nosniff` does NOT help here: it
+* only stops sniffing of MIS-labeled bytes; a GENUINELY-declared `text/html`
+* (or scripted `image/svg+xml`) still runs. So at the serve boundary — the
+* provider-agnostic place — these are forced to a non-executing disposition
+* (octet-stream + `Content-Disposition: attachment`) and can never render inline.
+*
+* SVG is included: rendered inline (top-level nav / `<embed>`/`<object>`) a
+* scripted SVG executes same-origin. It is ALSO excluded from the 302→R2 media
+* redirect below (falls through to worker-serve, which forces attachment).
+*/
+const SCRIPTABLE_MIME_TYPES = new Set([
+	"text/html",
+	"application/xhtml+xml",
+	"image/svg+xml",
+	"text/xml",
+	"application/xml",
+	"text/javascript",
+	"application/javascript",
+	"application/x-javascript",
+	"text/ecmascript",
+	"application/ecmascript",
+	"application/x-ecmascript"
+]);
+/** True when a MIME type can execute script if rendered inline (#818). */
+function isScriptableMimeType(mime) {
+	const base = mime.toLowerCase().split(";", 1)[0]?.trim() ?? "";
+	return SCRIPTABLE_MIME_TYPES.has(base);
+}
+/**
+* A header-safe `filename` for `Content-Disposition: attachment` (#818). The
+* path is already `sanitizeAfsPath`-clean (no traversal), but strip quotes /
+* backslashes / CR-LF defensively so the value can never break out of the
+* header or inject a second directive.
+*/
+function attachmentFilename(path) {
+	return (path.split("/").pop() || "download").replace(/["\\\r\n]/g, "_") || "download";
+}
+const RAW_HEADERS_BASE = {
+	"X-Content-Type-Options": "nosniff",
+	"Cache-Control": "private, no-store"
+};
+function deny(status, text) {
+	return new Response(text, {
+		status,
+		headers: {
+			...RAW_HEADERS_BASE,
+			"Content-Type": "text/plain; charset=utf-8"
+		}
+	});
+}
+/** Normalize an AFS read result's content to raw bytes. Null = no bytes. */
+function contentToBytes(content, encoding) {
+	if (content instanceof Uint8Array) return content;
+	if (content instanceof ArrayBuffer) return new Uint8Array(content);
+	if (typeof content === "string") {
+		if (encoding === "base64") try {
+			return Uint8Array.from(atob(content), (c) => c.charCodeAt(0));
+		} catch {
+			return null;
+		}
+		return new TextEncoder().encode(content);
+	}
+	return null;
+}
+function createAfsRawHandler(options) {
+	const reqCtx = require_request_context.createAfsRequestContext(options);
+	const maxBytes = options.maxBytes ?? RAW_MAX_BYTES_DEFAULT;
+	return async function handleRaw(request) {
+		try {
+			return await handleInner(request);
+		} catch (err) {
+			return deny(require_afs_rpc.statusForError(err), "Internal error");
+		}
+	};
+	async function handleInner(request) {
+		if (request.method !== "GET") return deny(405, "Method Not Allowed (use GET)");
+		const secret = options.rawUrlSecret;
+		if (!secret || typeof secret === "string" && secret.length === 0) return deny(503, "raw endpoint unavailable (signing key not configured)");
+		const caller = await reqCtx.resolveCaller(request);
+		const callerDid = caller?.did ?? null;
+		const url = new URL(request.url);
+		const hasSignature = url.searchParams.has("sig");
+		let rawPath;
+		let sessionId;
+		let signedBlocklet;
+		if (hasSignature) {
+			const verdict = await require_raw_url.verifyRawUrl(request, callerDid, { secret });
+			if (!verdict.ok) return deny(403, "Forbidden");
+			rawPath = verdict.path;
+			sessionId = verdict.sessionId;
+			signedBlocklet = verdict.blocklet;
+		} else {
+			if (!callerDid) return deny(403, "Forbidden");
+			const qPath = url.searchParams.get("path");
+			if (!qPath) return deny(400, "Invalid path");
+			rawPath = qPath;
+			sessionId = null;
+			signedBlocklet = url.searchParams.get("blocklet");
+		}
+		const safePath = (0, _aigne_afs.sanitizeAfsPath)(rawPath);
+		if (safePath === null) return deny(400, "Invalid path");
+		const blocklet = await reqCtx.resolveBlocklet(request, signedBlocklet);
+		if (!blocklet) return deny(400, "Could not resolve blocklet");
+		const scoped = await reqCtx.resolveScoped(request, {
+			blocklet,
+			sessionId,
+			caller
+		});
+		if (!scoped.afs.stat || !scoped.afs.read) return deny(501, "stat/read not supported");
+		const statData = (await scoped.afs.stat(safePath, { context: scoped.context }))?.data ?? {};
+		const meta = statData.meta ?? {};
+		const size = typeof statData.size === "number" ? statData.size : typeof meta.size === "number" ? meta.size : void 0;
+		if (typeof size !== "number" || !Number.isFinite(size) || size < 0) return deny(413, "Content size unknown");
+		const statMimeType = typeof meta.mimeType === "string" && meta.mimeType || (0, _aigne_afs_provider_utils.detectMimeType)(safePath) || "application/octet-stream";
+		if (size > RAW_REDIRECT_MIN_BYTES && isRedirectableMediaType(statMimeType) && !isScriptableMimeType(statMimeType) && typeof scoped.afs.presignRead === "function") {
+			let grant = null;
+			try {
+				grant = await scoped.afs.presignRead(safePath, { responseContentType: statMimeType });
+			} catch {
+				grant = null;
+			}
+			if (grant) return new Response(null, {
+				status: 302,
+				headers: {
+					Location: grant.url,
+					"Cache-Control": "private, no-store",
+					"Referrer-Policy": "no-referrer"
+				}
+			});
+		}
+		if (size > maxBytes) return deny(413, "Content too large");
+		const data = (await scoped.afs.read(safePath, { context: scoped.context }))?.data ?? {};
+		const encoding = data.encoding ?? (data.meta?.contentType === "base64" || data.meta?.encoding === "base64" ? "base64" : void 0);
+		const bytes = contentToBytes(data.content, encoding);
+		if (!bytes) return deny(404, "No content");
+		const mimeType = typeof meta.mimeType === "string" && meta.mimeType || typeof data.meta?.mimeType === "string" && data.meta.mimeType || (0, _aigne_afs_provider_utils.detectMimeType)(safePath) || "application/octet-stream";
+		const headers = {
+			...RAW_HEADERS_BASE,
+			"Content-Length": String(bytes.length)
+		};
+		if (isScriptableMimeType(mimeType)) {
+			headers["Content-Type"] = "application/octet-stream";
+			headers["Content-Disposition"] = `attachment; filename="${attachmentFilename(safePath)}"`;
+			headers["Content-Security-Policy"] = "default-src 'none'; sandbox";
+			headers["X-Frame-Options"] = "DENY";
+		} else headers["Content-Type"] = mimeType;
+		return new Response(bytes, {
+			status: 200,
+			headers
+		});
+	}
+}
+
+//#endregion
+exports.RAW_MAX_BYTES_DEFAULT = RAW_MAX_BYTES_DEFAULT;
+exports.createAfsRawHandler = createAfsRawHandler;

package/dist/http/afs-raw.d.cts

@@ -0,0 +1,31 @@
+import { AfsRequestContextOptions } from "./request-context.cjs";
+
+//#region src/http/afs-raw.d.ts
+/**
+ * Default max served size — 100 MiB (413 above; streaming/Range is a separate
+ * project). upload-limits Phase 6 (D4 interim): raised 50→100 MiB to ALIGN with
+ * the grant upload cap (`AFS_DID_SPACE_UPLOAD_MAX_BYTES`, 100 MiB) so a file the
+ * upload plane accepts can be raw-served, closing the G4 upload/serve asymmetry
+ * for the worker-serve path. This is the NODE/default ceiling (Node can buffer
+ * 100 MiB once). It is NOT runtime-uniform: the CF Worker passes a much smaller
+ * `maxBytes` (~4 MiB, preview-r2-direct's runtime-aware clean-413) because a
+ * one-shot read of ≳8 MiB OOMs the worker (Error 1102 → 503); CF non-media over
+ * that gets a CLEAN 413 (never a crash), and CF MEDIA over the gate is exempt via
+ * the 302→R2-direct path above. The 50→100 doubling of one-shot read memory on
+ * Node is the known interim cost; true large serve needs streaming/Range.
+ */
+declare const RAW_MAX_BYTES_DEFAULT: number;
+interface AfsRawHandlerOptions extends AfsRequestContextOptions {
+  /**
+   * HMAC secret for signed raw URLs (Node: vault-derived; CF: env secret).
+   * ABSENT → every request answers 503 (fail-closed: no key, no endpoint —
+   * never an unsigned/degraded mode).
+   */
+  rawUrlSecret?: string | Uint8Array;
+  /** Size cap in bytes (default 50MB). */
+  maxBytes?: number;
+}
+declare function createAfsRawHandler(options: AfsRawHandlerOptions): (request: Request) => Promise<Response>;
+//#endregion
+export { AfsRawHandlerOptions, RAW_MAX_BYTES_DEFAULT, createAfsRawHandler };
+//# sourceMappingURL=afs-raw.d.cts.map

package/dist/http/afs-raw.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"afs-raw.d.cts","names":[],"sources":["../../src/http/afs-raw.ts"],"mappings":";;;;;;;;;;;;;;;;cA8Ea,qBAAA;AAAA,UA2EI,oBAAA,SAA6B,wBAAA;;;;;;EAM5C,YAAA,YAAwB,UAAA;;EAExB,QAAA;AAAA;AAAA,iBAkCc,mBAAA,CACd,OAAA,EAAS,oBAAA,IACP,OAAA,EAAS,OAAA,KAAY,OAAA,CAAQ,QAAA"}

package/dist/http/afs-raw.d.mts

@@ -0,0 +1,31 @@
+import { AfsRequestContextOptions } from "./request-context.mjs";
+
+//#region src/http/afs-raw.d.ts
+/**
+ * Default max served size — 100 MiB (413 above; streaming/Range is a separate
+ * project). upload-limits Phase 6 (D4 interim): raised 50→100 MiB to ALIGN with
+ * the grant upload cap (`AFS_DID_SPACE_UPLOAD_MAX_BYTES`, 100 MiB) so a file the
+ * upload plane accepts can be raw-served, closing the G4 upload/serve asymmetry
+ * for the worker-serve path. This is the NODE/default ceiling (Node can buffer
+ * 100 MiB once). It is NOT runtime-uniform: the CF Worker passes a much smaller
+ * `maxBytes` (~4 MiB, preview-r2-direct's runtime-aware clean-413) because a
+ * one-shot read of ≳8 MiB OOMs the worker (Error 1102 → 503); CF non-media over
+ * that gets a CLEAN 413 (never a crash), and CF MEDIA over the gate is exempt via
+ * the 302→R2-direct path above. The 50→100 doubling of one-shot read memory on
+ * Node is the known interim cost; true large serve needs streaming/Range.
+ */
+declare const RAW_MAX_BYTES_DEFAULT: number;
+interface AfsRawHandlerOptions extends AfsRequestContextOptions {
+  /**
+   * HMAC secret for signed raw URLs (Node: vault-derived; CF: env secret).
+   * ABSENT → every request answers 503 (fail-closed: no key, no endpoint —
+   * never an unsigned/degraded mode).
+   */
+  rawUrlSecret?: string | Uint8Array;
+  /** Size cap in bytes (default 50MB). */
+  maxBytes?: number;
+}
+declare function createAfsRawHandler(options: AfsRawHandlerOptions): (request: Request) => Promise<Response>;
+//#endregion
+export { AfsRawHandlerOptions, RAW_MAX_BYTES_DEFAULT, createAfsRawHandler };
+//# sourceMappingURL=afs-raw.d.mts.map

package/dist/http/afs-raw.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"afs-raw.d.mts","names":[],"sources":["../../src/http/afs-raw.ts"],"mappings":";;;;;;;;;;;;;;;;cA8Ea,qBAAA;AAAA,UA2EI,oBAAA,SAA6B,wBAAA;;;;;;EAM5C,YAAA,YAAwB,UAAA;;EAExB,QAAA;AAAA;AAAA,iBAkCc,mBAAA,CACd,OAAA,EAAS,oBAAA,IACP,OAAA,EAAS,OAAA,KAAY,OAAA,CAAQ,QAAA"}