@autohq/cli 0.1.94 → 0.1.96

package/dist/index.js

@@ -17096,6 +17096,59 @@ var init_trigger_router = __esm({
 });
 
 // ../../packages/schemas/src/sessions.ts
+function avatarAssetDimensions(bytes) {
+  return pngDimensions(bytes) ?? jpegDimensions(bytes);
+}
+function avatarAssetDimensionsProblem(bytes) {
+  const dimensions = avatarAssetDimensions(bytes);
+  if (!dimensions) {
+    return "image dimensions could not be read; asset must be a valid PNG or JPEG";
+  }
+  const { width, height } = dimensions;
+  if (width !== height || width < MIN_AVATAR_ASSET_DIMENSION_PX || width > MAX_AVATAR_ASSET_DIMENSION_PX) {
+    return `asset must be a square between ${MIN_AVATAR_ASSET_DIMENSION_PX}x${MIN_AVATAR_ASSET_DIMENSION_PX} and ${MAX_AVATAR_ASSET_DIMENSION_PX}x${MAX_AVATAR_ASSET_DIMENSION_PX} pixels, got ${width}x${height}`;
+  }
+  return null;
+}
+function pngDimensions(bytes) {
+  if (bytes.length < 24) return null;
+  for (let i = 0; i < PNG_SIGNATURE.length; i++) {
+    if (bytes[i] !== PNG_SIGNATURE[i]) return null;
+  }
+  if (bytes[12] !== 73 || bytes[13] !== 72 || bytes[14] !== 68 || bytes[15] !== 82) {
+    return null;
+  }
+  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  return { width: view.getUint32(16), height: view.getUint32(20) };
+}
+function jpegDimensions(bytes) {
+  if (bytes.length < 4 || bytes[0] !== 255 || bytes[1] !== 216) return null;
+  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  let offset = 2;
+  while (offset + 4 <= bytes.length) {
+    if (bytes[offset] !== 255) return null;
+    while (bytes[offset + 1] === 255 && offset + 2 < bytes.length) offset++;
+    const marker = bytes[offset + 1] ?? 0;
+    offset += 2;
+    if (marker === 1 || marker >= 208 && marker <= 215) continue;
+    if (marker === 217 || marker === 218) return null;
+    if (offset + 2 > bytes.length) return null;
+    const length = view.getUint16(offset);
+    if (length < 2) return null;
+    const isStartOfFrame = marker >= 192 && marker <= 207 && marker !== 196 && // DHT
+    marker !== 200 && // JPG (reserved)
+    marker !== 204;
+    if (isStartOfFrame) {
+      if (offset + 7 > bytes.length) return null;
+      return {
+        width: view.getUint16(offset + 5),
+        height: view.getUint16(offset + 3)
+      };
+    }
+    offset += length;
+  }
+  return null;
+}
 function sessionIdentityDescriptionLength(value) {
   let length = 0;
   for (const char of value) {
@@ -17243,7 +17296,7 @@ function isChatMessageEvent(trigger) {
 function hasFilterValue(trigger, path2, expected) {
   return trigger.where?.[path2] === expected;
 }
-var RESOURCE_KIND_SESSION, TriggerFilterScalarSchema, TriggerFilterPathSchema, TriggerFilterClauseSchema, TriggerFilterSchema, SessionTriggerCheckTimeoutSchema, TriggerEventSchema, TriggerEventsSchema, SessionTriggerSharedFields, SessionTriggerEventSourceFields, SessionTriggerBaseSchema, SessionTriggerDefinitionBaseSchema, SessionTriggerSchema, SessionApplyTriggerSchema, SessionHeartbeatTriggerBaseSchema, SessionHeartbeatTriggerSchema, SessionApplyHeartbeatTriggerSchema, SessionTriggerDefinitionSchema, SessionApplyTriggerDefinitionSchema, SessionTriggersSchema, SessionApplyTriggersSchema, AVATAR_ASSET_EXTENSIONS, MAX_AVATAR_ASSET_BYTES, SESSION_IDENTITY_DESCRIPTION_MAX_LENGTH, SHA256_HEX_PATTERN, SessionIdentitySchema, SessionSpecSchema, SessionApplySpecSchema, SessionStatusSchema, SessionResourceSchema, SessionApplyRequestSchema, SessionApplyTriggerReceiptSchema, SessionApplyResponseSchema, SESSION_TELEGRAM_IDENTITY_STATUSES, SessionTelegramIdentityStatusSchema, SessionPresenceIdentitySchema, SessionPresenceResponseSchema, SessionPresenceConnectRequestSchema, SessionPresenceConnectPendingSchema, SessionPresenceConnectResponseSchema, SessionPresenceIconRequestSchema, SessionPresenceIconResponseSchema, SessionPresenceCompleteResponseSchema;
+var RESOURCE_KIND_SESSION, TriggerFilterScalarSchema, TriggerFilterPathSchema, TriggerFilterClauseSchema, TriggerFilterSchema, SessionTriggerCheckTimeoutSchema, TriggerEventSchema, TriggerEventsSchema, SessionTriggerSharedFields, SessionTriggerEventSourceFields, SessionTriggerBaseSchema, SessionTriggerDefinitionBaseSchema, SessionTriggerSchema, SessionApplyTriggerSchema, SessionHeartbeatTriggerBaseSchema, SessionHeartbeatTriggerSchema, SessionApplyHeartbeatTriggerSchema, SessionTriggerDefinitionSchema, SessionApplyTriggerDefinitionSchema, SessionTriggersSchema, SessionApplyTriggersSchema, AVATAR_ASSET_EXTENSIONS, MAX_AVATAR_ASSET_BYTES, MIN_AVATAR_ASSET_DIMENSION_PX, MAX_AVATAR_ASSET_DIMENSION_PX, PNG_SIGNATURE, SESSION_IDENTITY_DESCRIPTION_MAX_LENGTH, SHA256_HEX_PATTERN, SessionIdentitySchema, SessionSpecSchema, SessionApplySpecSchema, SessionStatusSchema, SessionResourceSchema, SessionApplyRequestSchema, SessionApplyTriggerReceiptSchema, SessionApplyResponseSchema, SESSION_TELEGRAM_IDENTITY_STATUSES, SessionTelegramIdentityStatusSchema, SessionPresenceIdentitySchema, SessionPresenceResponseSchema, SessionPresenceConnectRequestSchema, SessionPresenceConnectPendingSchema, SessionPresenceConnectResponseSchema, SessionPresenceIconRequestSchema, SessionPresenceIconResponseSchema, SessionPresenceCompleteResponseSchema;
 var init_sessions = __esm({
   "../../packages/schemas/src/sessions.ts"() {
     "use strict";
@@ -17420,6 +17473,9 @@ var init_sessions = __esm({
     ).transform(expandSessionApplyTriggerDefinitions).superRefine(validateAttributedRunsTriggerPairing);
     AVATAR_ASSET_EXTENSIONS = [".png", ".jpg", ".jpeg"];
     MAX_AVATAR_ASSET_BYTES = 2 * 1024 * 1024;
+    MIN_AVATAR_ASSET_DIMENSION_PX = 512;
+    MAX_AVATAR_ASSET_DIMENSION_PX = 2e3;
+    PNG_SIGNATURE = [137, 80, 78, 71, 13, 10, 26, 10];
     SESSION_IDENTITY_DESCRIPTION_MAX_LENGTH = 140;
     SHA256_HEX_PATTERN = /^[a-f0-9]{64}$/;
     SessionIdentitySchema = external_exports.object({
@@ -20838,6 +20894,12 @@ function readApplyAssets(resources, projectRoot) {
       projectRoot
     });
     const bytes = readFileSync3(resolvedPath);
+    const dimensionsProblem = avatarAssetDimensionsProblem(bytes);
+    if (dimensionsProblem) {
+      throw new Error(
+        `Invalid session identity avatar asset for "${resource.metadata.name}": ${dimensionsProblem}`
+      );
+    }
     assets[avatarAsset] = {
       sha256: createHash2("sha256").update(bytes).digest("hex"),
       contentType: extname(resolvedPath).toLowerCase() === ".png" ? "image/png" : "image/jpeg",
@@ -21613,7 +21675,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.94",
+      version: "0.1.96",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.94",
+  "version": "0.1.96",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"