@bendyline/docblocks 2.0.0 → 2.1.0

package/dist/vscode/index.js

@@ -1,3 +1,383 @@
-/** Runtime-validated VS Code host/webview wire protocol. */
-export * from './messages.js';
+import {
+  HOST_WIRE_LIMITS,
+  isBoundedString
+} from "../chunk-FNW556FN.js";
+
+// src/vscode/messages.ts
+var MAX_REQUEST_ID = 2147483647;
+var DOCBLOCKS_ACCENT_COLORS = [
+  "brown",
+  "green",
+  "blue",
+  "purple",
+  "maroon",
+  "orange",
+  "gray"
+];
+var DOCBLOCKS_WRITE_CANVAS_TEXT_SIZE_MIN = 12;
+var DOCBLOCKS_WRITE_CANVAS_TEXT_SIZE_MAX = 32;
+var DOCBLOCKS_WRITE_CANVAS_LINE_SPACING_MIN = 1.2;
+var DOCBLOCKS_WRITE_CANVAS_LINE_SPACING_MAX = 2.4;
+var DEFAULT_VSCODE_WRITE_CANVAS_SETTINGS = {
+  textSize: 16,
+  lineSpacing: 1.7
+};
+function parseWebviewToExtensionMessage(value) {
+  if (!isRecord(value) || typeof value.type !== "string") return null;
+  switch (value.type) {
+    case "ready":
+      return hasOnlyKeys(value, ["type"]) ? { type: "ready" } : null;
+    case "setAutoSave":
+      return hasOnlyKeys(value, ["type", "enabled"]) && typeof value.enabled === "boolean" ? { type: "setAutoSave", enabled: value.enabled } : null;
+    case "setAccentColor":
+      return hasOnlyKeys(value, ["type", "accentColor"]) && isDocBlocksAccentColor(value.accentColor) ? { type: "setAccentColor", accentColor: value.accentColor } : null;
+    case "setWriteCanvasSettings": {
+      if (!hasOnlyKeys(value, ["type", "settings"])) return null;
+      const settings = parseVscodeWriteCanvasSettings(value.settings);
+      return settings ? { type: "setWriteCanvasSettings", settings } : null;
+    }
+    case "edit":
+      return hasOnlyKeys(value, [
+        "type",
+        "content",
+        "sessionId",
+        "clientRevision",
+        "baseDocumentVersion"
+      ]) && hasBoundedString(value, "content", HOST_WIRE_LIMITS.documentCharacters) && isSessionEnvelope(value) ? {
+        type: "edit",
+        content: value.content,
+        sessionId: value.sessionId,
+        clientRevision: value.clientRevision,
+        baseDocumentVersion: value.baseDocumentVersion
+      } : null;
+    case "save":
+      return hasOnlyKeys(value, [
+        "type",
+        "sessionId",
+        "requestId",
+        "clientRevision",
+        "baseDocumentVersion"
+      ]) && isSessionEnvelope(value) && hasRequestId(value) ? {
+        type: "save",
+        sessionId: value.sessionId,
+        requestId: value.requestId,
+        clientRevision: value.clientRevision,
+        baseDocumentVersion: value.baseDocumentVersion
+      } : null;
+    case "resolveConflict":
+      return hasOnlyKeys(value, ["type", "sessionId", "choice"]) && hasBoundedString(value, "sessionId", HOST_WIRE_LIMITS.identifierCharacters, 1) && (value.choice === "use-local" || value.choice === "use-external") ? { type: "resolveConflict", sessionId: value.sessionId, choice: value.choice } : null;
+    case "resolveMedia":
+      return hasOnlyKeys(value, ["type", "requestId", "ref"]) && hasRequestId(value) && hasBoundedString(value, "ref", HOST_WIRE_LIMITS.pathCharacters, 1) ? { type: "resolveMedia", requestId: value.requestId, ref: value.ref } : null;
+    case "listMedia":
+      return hasOnlyKeys(value, ["type", "requestId"]) && hasRequestId(value) ? { type: "listMedia", requestId: value.requestId } : null;
+    case "addMedia":
+      return hasOnlyKeys(value, ["type", "requestId", "name", "dataBase64", "mimeType"]) && hasRequestId(value) && hasBoundedString(value, "name", HOST_WIRE_LIMITS.pathCharacters, 1) && hasBoundedString(value, "dataBase64", HOST_WIRE_LIMITS.base64Characters) && hasMimeType(value, "mimeType") ? {
+        type: "addMedia",
+        requestId: value.requestId,
+        name: value.name,
+        dataBase64: value.dataBase64,
+        mimeType: value.mimeType
+      } : null;
+    case "removeMedia":
+      return hasOnlyKeys(value, ["type", "requestId", "ref"]) && hasRequestId(value) && hasBoundedString(value, "ref", HOST_WIRE_LIMITS.pathCharacters, 1) ? { type: "removeMedia", requestId: value.requestId, ref: value.ref } : null;
+    case "saveExport":
+      return hasOnlyKeys(value, [
+        "type",
+        "requestId",
+        "filename",
+        "dataBase64",
+        "mimeType",
+        "grantId"
+      ]) && hasRequestId(value) && hasSafeFilename(value, "filename") && hasBoundedString(value, "dataBase64", HOST_WIRE_LIMITS.base64Characters) && hasMimeType(value, "mimeType") && hasNullableBoundedString(value, "grantId", HOST_WIRE_LIMITS.identifierCharacters, 1) ? {
+        type: "saveExport",
+        requestId: value.requestId,
+        filename: value.filename,
+        dataBase64: value.dataBase64,
+        mimeType: value.mimeType,
+        grantId: value.grantId
+      } : null;
+    case "resolveExportTarget":
+      return hasOnlyKeys(value, ["type", "requestId", "filename"]) && hasRequestId(value) && hasSafeFilename(value, "filename") ? { type: "resolveExportTarget", requestId: value.requestId, filename: value.filename } : null;
+    case "pickExportTarget":
+      return hasOnlyKeys(value, ["type", "requestId", "filename", "currentGrantId"]) && hasRequestId(value) && hasSafeFilename(value, "filename") && hasNullableBoundedString(value, "currentGrantId", HOST_WIRE_LIMITS.identifierCharacters, 1) ? {
+        type: "pickExportTarget",
+        requestId: value.requestId,
+        filename: value.filename,
+        currentGrantId: value.currentGrantId
+      } : null;
+    case "readWorkspaceFile":
+      return hasOnlyKeys(value, ["type", "requestId", "path"]) && hasRequestId(value) && hasBoundedString(value, "path", HOST_WIRE_LIMITS.pathCharacters, 1) ? { type: "readWorkspaceFile", requestId: value.requestId, path: value.path } : null;
+    default:
+      return null;
+  }
+}
+function parseExtensionToWebviewMessage(value) {
+  if (!isRecord(value) || typeof value.type !== "string") return null;
+  switch (value.type) {
+    case "setContent":
+      return hasOnlyKeys(value, [
+        "type",
+        "content",
+        "documentVersion",
+        "fileName",
+        "sessionId",
+        "sessionRevision",
+        "acknowledgedClientRevision"
+      ]) && hasBoundedString(value, "content", HOST_WIRE_LIMITS.documentCharacters) && hasNonNegativeInteger(value, "documentVersion") && hasBoundedString(value, "fileName", HOST_WIRE_LIMITS.pathCharacters, 1) && hasBoundedString(value, "sessionId", HOST_WIRE_LIMITS.identifierCharacters, 1) && hasNonNegativeInteger(value, "sessionRevision") && hasNonNegativeInteger(value, "acknowledgedClientRevision") ? {
+        type: "setContent",
+        content: value.content,
+        documentVersion: value.documentVersion,
+        fileName: value.fileName,
+        sessionId: value.sessionId,
+        sessionRevision: value.sessionRevision,
+        acknowledgedClientRevision: value.acknowledgedClientRevision
+      } : null;
+    case "editAcknowledged":
+      return hasOnlyKeys(value, [
+        "type",
+        "sessionId",
+        "clientRevision",
+        "sessionRevision",
+        "accepted",
+        "message"
+      ]) && hasBoundedString(value, "sessionId", HOST_WIRE_LIMITS.identifierCharacters, 1) && hasNonNegativeInteger(value, "clientRevision") && hasNonNegativeInteger(value, "sessionRevision") && typeof value.accepted === "boolean" && hasNullableBoundedString(value, "message", HOST_WIRE_LIMITS.messageCharacters) ? {
+        type: "editAcknowledged",
+        sessionId: value.sessionId,
+        clientRevision: value.clientRevision,
+        sessionRevision: value.sessionRevision,
+        accepted: value.accepted,
+        message: value.message
+      } : null;
+    case "sessionState": {
+      if (!hasOnlyKeys(value, [
+        "type",
+        "sessionId",
+        "status",
+        "revision",
+        "persistedRevision",
+        "acknowledgedClientRevision",
+        "documentVersion",
+        "error",
+        "conflict"
+      ]) || !hasBoundedString(value, "sessionId", HOST_WIRE_LIMITS.identifierCharacters, 1) || !isDocumentSessionMessageStatus(value.status) || !hasNonNegativeInteger(value, "revision") || !hasNonNegativeInteger(value, "persistedRevision") || value.persistedRevision > value.revision || !hasNonNegativeInteger(value, "acknowledgedClientRevision") || !hasNonNegativeInteger(value, "documentVersion") || !hasNullableBoundedString(value, "error", HOST_WIRE_LIMITS.messageCharacters)) {
+        return null;
+      }
+      const conflict = parseDocumentConflictDetails(value.conflict);
+      if (conflict === void 0 || value.status === "conflict" && conflict === null || value.status !== "conflict" && conflict !== null) {
+        return null;
+      }
+      return {
+        type: "sessionState",
+        sessionId: value.sessionId,
+        status: value.status,
+        revision: value.revision,
+        persistedRevision: value.persistedRevision,
+        acknowledgedClientRevision: value.acknowledgedClientRevision,
+        documentVersion: value.documentVersion,
+        error: value.error,
+        conflict
+      };
+    }
+    case "saveResult":
+      return hasOnlyKeys(value, [
+        "type",
+        "sessionId",
+        "requestId",
+        "ok",
+        "revision",
+        "persistedRevision",
+        "documentVersion",
+        "message"
+      ]) && hasBoundedString(value, "sessionId", HOST_WIRE_LIMITS.identifierCharacters, 1) && hasRequestId(value) && typeof value.ok === "boolean" && hasNonNegativeInteger(value, "revision") && hasNonNegativeInteger(value, "persistedRevision") && value.persistedRevision <= value.revision && hasNonNegativeInteger(value, "documentVersion") && hasNullableBoundedString(value, "message", HOST_WIRE_LIMITS.messageCharacters) ? {
+        type: "saveResult",
+        sessionId: value.sessionId,
+        requestId: value.requestId,
+        ok: value.ok,
+        revision: value.revision,
+        persistedRevision: value.persistedRevision,
+        documentVersion: value.documentVersion,
+        message: value.message
+      } : null;
+    case "themeChange":
+      return hasOnlyKeys(value, ["type", "theme"]) && (value.theme === "light" || value.theme === "dark") ? { type: "themeChange", theme: value.theme } : null;
+    case "editorSettings": {
+      if (!hasOnlyKeys(value, ["type", "settings"])) return null;
+      const settings = parseVscodeEditorSettings(value.settings);
+      return settings ? { type: "editorSettings", settings } : null;
+    }
+    case "mediaResolved":
+      return hasOnlyKeys(value, ["type", "requestId", "url"]) && hasRequestId(value) && isBoundedMediaDataUrl(value.url) ? { type: "mediaResolved", requestId: value.requestId, url: value.url } : null;
+    case "mediaListed": {
+      if (!hasOnlyKeys(value, ["type", "requestId", "entries"]) || !hasRequestId(value)) {
+        return null;
+      }
+      const entries = parseMediaEntries(value.entries);
+      return entries ? { type: "mediaListed", requestId: value.requestId, entries } : null;
+    }
+    case "mediaAdded":
+      return hasOnlyKeys(value, ["type", "requestId", "path"]) && hasRequestId(value) && hasBoundedString(value, "path", HOST_WIRE_LIMITS.pathCharacters, 1) ? { type: "mediaAdded", requestId: value.requestId, path: value.path } : null;
+    case "mediaRemoved":
+      return hasOnlyKeys(value, ["type", "requestId"]) && hasRequestId(value) ? { type: "mediaRemoved", requestId: value.requestId } : null;
+    case "mediaError":
+    case "exportError":
+    case "workspaceFileError":
+      return hasOnlyKeys(value, ["type", "requestId", "message"]) && hasRequestId(value) && hasBoundedString(value, "message", HOST_WIRE_LIMITS.messageCharacters, 1) ? { type: value.type, requestId: value.requestId, message: value.message } : null;
+    case "exportSaved":
+    case "exportTargetResolved":
+    case "exportTargetPicked": {
+      if (!hasOnlyKeys(value, ["type", "requestId", "target"]) || !hasRequestId(value)) {
+        return null;
+      }
+      const target = parseExportTargetGrant(value.target);
+      return target !== void 0 ? { type: value.type, requestId: value.requestId, target } : null;
+    }
+    case "workspaceFileRead":
+      return hasOnlyKeys(value, ["type", "requestId", "dataBase64"]) && hasRequestId(value) && hasNullableBoundedString(value, "dataBase64", HOST_WIRE_LIMITS.base64Characters) ? { type: "workspaceFileRead", requestId: value.requestId, dataBase64: value.dataBase64 } : null;
+    default:
+      return null;
+  }
+}
+function parseExportTargetGrant(value) {
+  if (value === null) return null;
+  if (!isRecord(value) || !hasOnlyKeys(value, ["grantId", "displayLabel"]) || !hasBoundedString(value, "grantId", HOST_WIRE_LIMITS.identifierCharacters, 1) || !hasBoundedString(value, "displayLabel", HOST_WIRE_LIMITS.pathCharacters, 1)) {
+    return void 0;
+  }
+  return { grantId: value.grantId, displayLabel: value.displayLabel };
+}
+function parseDocumentConflictDetails(value) {
+  if (value === null) return null;
+  if (!isRecord(value) || !hasOnlyKeys(value, [
+    "localBaseDocumentVersion",
+    "externalDocumentVersion",
+    "localBytes",
+    "externalBytes",
+    "localEditedAt",
+    "externalObservedAt",
+    "externalIsDirty"
+  ]) || !hasNonNegativeInteger(value, "localBaseDocumentVersion") || !hasNonNegativeInteger(value, "externalDocumentVersion") || !hasNonNegativeInteger(value, "localBytes") || !isNullableNonNegativeInteger(value.externalBytes) || !isNullableNonNegativeInteger(value.localEditedAt) || !isNullableNonNegativeInteger(value.externalObservedAt) || value.externalIsDirty !== null && typeof value.externalIsDirty !== "boolean") {
+    return void 0;
+  }
+  return {
+    localBaseDocumentVersion: value.localBaseDocumentVersion,
+    externalDocumentVersion: value.externalDocumentVersion,
+    localBytes: value.localBytes,
+    externalBytes: value.externalBytes,
+    localEditedAt: value.localEditedAt,
+    externalObservedAt: value.externalObservedAt,
+    externalIsDirty: value.externalIsDirty
+  };
+}
+function parseVscodeEditorSettings(value) {
+  if (!isRecord(value) || !hasOnlyKeys(value, ["autoSave", "accentColor", "writeCanvasSettings"]) || typeof value.autoSave !== "boolean" || !isDocBlocksAccentColor(value.accentColor)) {
+    return null;
+  }
+  const writeCanvasSettings = parseVscodeWriteCanvasSettings(value.writeCanvasSettings);
+  return writeCanvasSettings ? { autoSave: value.autoSave, accentColor: value.accentColor, writeCanvasSettings } : null;
+}
+function isDocBlocksAccentColor(value) {
+  return DOCBLOCKS_ACCENT_COLORS.some((color) => color === value);
+}
+function isDocBlocksWriteCanvasTextSize(value) {
+  return numberInRange(
+    value,
+    DOCBLOCKS_WRITE_CANVAS_TEXT_SIZE_MIN,
+    DOCBLOCKS_WRITE_CANVAS_TEXT_SIZE_MAX
+  );
+}
+function isDocBlocksWriteCanvasLineSpacing(value) {
+  return numberInRange(
+    value,
+    DOCBLOCKS_WRITE_CANVAS_LINE_SPACING_MIN,
+    DOCBLOCKS_WRITE_CANVAS_LINE_SPACING_MAX
+  );
+}
+function parseVscodeWriteCanvasSettings(value) {
+  return isRecord(value) && hasOnlyKeys(value, ["textSize", "lineSpacing"]) && isDocBlocksWriteCanvasTextSize(value.textSize) && isDocBlocksWriteCanvasLineSpacing(value.lineSpacing) ? { textSize: value.textSize, lineSpacing: value.lineSpacing } : null;
+}
+function numberInRange(value, min, max) {
+  return typeof value === "number" && Number.isFinite(value) && value >= min && value <= max;
+}
+function parseMediaEntries(value) {
+  if (!Array.isArray(value) || value.length > HOST_WIRE_LIMITS.arrayEntries) return null;
+  const entries = [];
+  for (const entry of value) {
+    if (!isRecord(entry) || !hasOnlyKeys(entry, ["name", "mimeType", "size"]) || !hasBoundedString(entry, "name", HOST_WIRE_LIMITS.pathCharacters, 1) || !hasMimeType(entry, "mimeType") || !hasNonNegativeInteger(entry, "size") || entry.size > HOST_WIRE_LIMITS.binaryBytes) {
+      return null;
+    }
+    entries.push({ name: entry.name, mimeType: entry.mimeType, size: entry.size });
+  }
+  return entries;
+}
+function isBoundedMediaDataUrl(value) {
+  if (!isBoundedString(value, HOST_WIRE_LIMITS.base64Characters + 512, 1)) return false;
+  if (!value.startsWith("data:")) return false;
+  const separator = value.indexOf(";base64,");
+  return separator > 5 && separator <= HOST_WIRE_LIMITS.identifierCharacters;
+}
+function isDocumentSessionMessageStatus(value) {
+  return value === "idle" || value === "saved" || value === "dirty" || value === "saving" || value === "error" || value === "conflict" || value === "closed";
+}
+function isSessionEnvelope(value) {
+  return hasBoundedString(value, "sessionId", HOST_WIRE_LIMITS.identifierCharacters, 1) && hasNonNegativeInteger(value, "clientRevision") && hasNonNegativeInteger(value, "baseDocumentVersion");
+}
+function hasRequestId(value) {
+  return hasNonNegativeInteger(value, "requestId") && value.requestId <= MAX_REQUEST_ID;
+}
+function hasBoundedString(value, key, maximumCharacters, minimumCharacters = 0) {
+  return isBoundedString(value[key], maximumCharacters, minimumCharacters);
+}
+function hasNullableBoundedString(value, key, maximumCharacters, minimumCharacters = 0) {
+  return value[key] === null || isBoundedString(value[key], maximumCharacters, minimumCharacters);
+}
+function hasNonNegativeInteger(value, key) {
+  const entry = value[key];
+  return typeof entry === "number" && Number.isSafeInteger(entry) && entry >= 0;
+}
+function isNullableNonNegativeInteger(value) {
+  return value === null || typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function hasOnlyKeys(value, keys) {
+  const expected = new Set(keys);
+  const actual = Object.keys(value);
+  return actual.length === expected.size && actual.every((key) => expected.has(key));
+}
+function hasSafeFilename(value, key) {
+  return isSafeExportFilename(value[key]);
+}
+function isSafeExportFilename(value) {
+  return isBoundedString(value, 255, 1) && value.trim() === value && !/[\\/:*?"<>|]/.test(value) && !hasControlCharacter(value) && value !== "." && value !== ".." && !value.endsWith(".") && !value.endsWith(" ");
+}
+function hasControlCharacter(value) {
+  for (let index = 0; index < value.length; index += 1) {
+    const code = value.charCodeAt(index);
+    if (code <= 31 || code === 127) return true;
+  }
+  return false;
+}
+function hasMimeType(value, key) {
+  return isSafeMimeType(value[key]);
+}
+function isSafeMimeType(value) {
+  return isBoundedString(value, HOST_WIRE_LIMITS.identifierCharacters, 1) && /^[A-Za-z0-9!#$&^_.+-]+\/[A-Za-z0-9!#$&^_.+-]+(?:\s*;\s*[A-Za-z0-9!#$&^_.+-]+=[^;\r\n]+)*$/.test(
+    value
+  );
+}
+export {
+  DEFAULT_VSCODE_WRITE_CANVAS_SETTINGS,
+  DOCBLOCKS_ACCENT_COLORS,
+  DOCBLOCKS_WRITE_CANVAS_LINE_SPACING_MAX,
+  DOCBLOCKS_WRITE_CANVAS_LINE_SPACING_MIN,
+  DOCBLOCKS_WRITE_CANVAS_TEXT_SIZE_MAX,
+  DOCBLOCKS_WRITE_CANVAS_TEXT_SIZE_MIN,
+  isDocBlocksAccentColor,
+  isDocBlocksWriteCanvasLineSpacing,
+  isDocBlocksWriteCanvasTextSize,
+  isSafeExportFilename,
+  isSafeMimeType,
+  parseExtensionToWebviewMessage,
+  parseWebviewToExtensionMessage
+};
 //# sourceMappingURL=index.js.map

package/dist/vscode/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/vscode/index.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,cAAc,eAAe,CAAC"}
+{"version":3,"sources":["../../src/vscode/messages.ts"],"sourcesContent":["/**\n * Typed message protocol between the extension host and webview.\n */\n\nimport { HOST_WIRE_LIMITS, isBoundedString } from '../host/wire-policy.js';\n\nconst MAX_REQUEST_ID = 2_147_483_647;\n\nexport type DocumentSessionMessageStatus =\n  | 'idle'\n  | 'saved'\n  | 'dirty'\n  | 'saving'\n  | 'error'\n  | 'conflict'\n  | 'closed';\n\nexport type DocumentConflictChoice = 'use-local' | 'use-external';\n\n/** Host-observed details that help a user distinguish two text branches. */\nexport interface DocumentConflictDetailsMessage {\n  /** VS Code document version on which the DocBlocks draft was based. */\n  localBaseDocumentVersion: number;\n  /** Current VS Code document version observed outside the DocBlocks edit pipeline. */\n  externalDocumentVersion: number;\n  /** UTF-8 encoded sizes of the complete text snapshots. */\n  localBytes: number;\n  externalBytes: number | null;\n  /** Times are extension-host observations, not filesystem-authoritative mtimes. */\n  localEditedAt: number | null;\n  externalObservedAt: number | null;\n  /** Whether VS Code reported the external document snapshot as not yet saved. */\n  externalIsDirty: boolean | null;\n}\n\nexport const DOCBLOCKS_ACCENT_COLORS = [\n  'brown',\n  'green',\n  'blue',\n  'purple',\n  'maroon',\n  'orange',\n  'gray',\n] as const;\n\nexport type DocBlocksAccentColor = (typeof DOCBLOCKS_ACCENT_COLORS)[number];\n\nexport const DOCBLOCKS_WRITE_CANVAS_TEXT_SIZE_MIN = 12;\nexport const DOCBLOCKS_WRITE_CANVAS_TEXT_SIZE_MAX = 32;\nexport const DOCBLOCKS_WRITE_CANVAS_LINE_SPACING_MIN = 1.2;\nexport const DOCBLOCKS_WRITE_CANVAS_LINE_SPACING_MAX = 2.4;\n\nexport interface VscodeWriteCanvasSettings {\n  textSize: number;\n  lineSpacing: number;\n}\n\nexport const DEFAULT_VSCODE_WRITE_CANVAS_SETTINGS: Readonly<VscodeWriteCanvasSettings> = {\n  textSize: 16,\n  lineSpacing: 1.7,\n};\n\nexport interface VscodeEditorSettings {\n  autoSave: boolean;\n  accentColor: DocBlocksAccentColor;\n  writeCanvasSettings: VscodeWriteCanvasSettings;\n}\n\n/**\n * An opaque, one-shot authority to write one host-owned export target.\n * The label is presentation-only and must never be interpreted as a path.\n */\nexport interface ExportTargetGrantMessage {\n  grantId: string;\n  displayLabel: string;\n}\n\n/** Messages sent from the extension host to the webview. */\nexport type ExtensionToWebviewMessage =\n  | {\n      type: 'setContent';\n      content: string;\n      documentVersion: number;\n      fileName: string;\n      sessionId: string;\n      sessionRevision: number;\n      acknowledgedClientRevision: number;\n    }\n  | {\n      type: 'editAcknowledged';\n      sessionId: string;\n      clientRevision: number;\n      sessionRevision: number;\n      accepted: boolean;\n      message: string | null;\n    }\n  | {\n      type: 'sessionState';\n      sessionId: string;\n      status: DocumentSessionMessageStatus;\n      revision: number;\n      persistedRevision: number;\n      acknowledgedClientRevision: number;\n      documentVersion: number;\n      error: string | null;\n      conflict: DocumentConflictDetailsMessage | null;\n    }\n  | {\n      type: 'saveResult';\n      sessionId: string;\n      requestId: number;\n      ok: boolean;\n      revision: number;\n      persistedRevision: number;\n      documentVersion: number;\n      message: string | null;\n    }\n  | { type: 'themeChange'; theme: 'light' | 'dark' }\n  | { type: 'editorSettings'; settings: VscodeEditorSettings }\n  | { type: 'mediaResolved'; requestId: number; url: string }\n  | { type: 'mediaListed'; requestId: number; entries: MediaEntryMessage[] }\n  | { type: 'mediaAdded'; requestId: number; path: string }\n  | { type: 'mediaRemoved'; requestId: number }\n  | { type: 'mediaError'; requestId: number; message: string }\n  | { type: 'exportSaved'; requestId: number; target: ExportTargetGrantMessage | null }\n  | { type: 'exportError'; requestId: number; message: string }\n  | { type: 'exportTargetResolved'; requestId: number; target: ExportTargetGrantMessage | null }\n  | { type: 'exportTargetPicked'; requestId: number; target: ExportTargetGrantMessage | null }\n  | { type: 'workspaceFileRead'; requestId: number; dataBase64: string | null }\n  | { type: 'workspaceFileError'; requestId: number; message: string };\n\n/** Messages sent from the webview to the extension host. */\nexport type WebviewToExtensionMessage =\n  | { type: 'ready' }\n  | { type: 'setAutoSave'; enabled: boolean }\n  | { type: 'setAccentColor'; accentColor: DocBlocksAccentColor }\n  | { type: 'setWriteCanvasSettings'; settings: VscodeWriteCanvasSettings }\n  | {\n      type: 'edit';\n      content: string;\n      sessionId: string;\n      clientRevision: number;\n      baseDocumentVersion: number;\n    }\n  | {\n      type: 'save';\n      sessionId: string;\n      requestId: number;\n      clientRevision: number;\n      baseDocumentVersion: number;\n    }\n  | { type: 'resolveConflict'; sessionId: string; choice: DocumentConflictChoice }\n  | { type: 'resolveMedia'; requestId: number; ref: string }\n  | { type: 'listMedia'; requestId: number }\n  | { type: 'addMedia'; requestId: number; name: string; dataBase64: string; mimeType: string }\n  | { type: 'removeMedia'; requestId: number; ref: string }\n  | {\n      type: 'saveExport';\n      requestId: number;\n      filename: string;\n      dataBase64: string;\n      mimeType: string;\n      grantId: string | null;\n    }\n  | { type: 'resolveExportTarget'; requestId: number; filename: string }\n  | {\n      type: 'pickExportTarget';\n      requestId: number;\n      filename: string;\n      currentGrantId: string | null;\n    }\n  | { type: 'readWorkspaceFile'; requestId: number; path: string };\n\nexport interface MediaEntryMessage {\n  name: string;\n  mimeType: string;\n  size: number;\n}\n\n/**\n * The webview boundary is untrusted at runtime. Keep malformed or stale\n * messages out of the document session instead of relying on a TypeScript\n * assertion in the extension host.\n */\nexport function parseWebviewToExtensionMessage(value: unknown): WebviewToExtensionMessage | null {\n  if (!isRecord(value) || typeof value.type !== 'string') return null;\n\n  switch (value.type) {\n    case 'ready':\n      return hasOnlyKeys(value, ['type']) ? { type: 'ready' } : null;\n    case 'setAutoSave':\n      return hasOnlyKeys(value, ['type', 'enabled']) && typeof value.enabled === 'boolean'\n        ? { type: 'setAutoSave', enabled: value.enabled }\n        : null;\n    case 'setAccentColor':\n      return hasOnlyKeys(value, ['type', 'accentColor']) &&\n        isDocBlocksAccentColor(value.accentColor)\n        ? { type: 'setAccentColor', accentColor: value.accentColor }\n        : null;\n    case 'setWriteCanvasSettings': {\n      if (!hasOnlyKeys(value, ['type', 'settings'])) return null;\n      const settings = parseVscodeWriteCanvasSettings(value.settings);\n      return settings ? { type: 'setWriteCanvasSettings', settings } : null;\n    }\n    case 'edit':\n      return hasOnlyKeys(value, [\n        'type',\n        'content',\n        'sessionId',\n        'clientRevision',\n        'baseDocumentVersion',\n      ]) &&\n        hasBoundedString(value, 'content', HOST_WIRE_LIMITS.documentCharacters) &&\n        isSessionEnvelope(value)\n        ? {\n            type: 'edit',\n            content: value.content,\n            sessionId: value.sessionId,\n            clientRevision: value.clientRevision,\n            baseDocumentVersion: value.baseDocumentVersion,\n          }\n        : null;\n    case 'save':\n      return hasOnlyKeys(value, [\n        'type',\n        'sessionId',\n        'requestId',\n        'clientRevision',\n        'baseDocumentVersion',\n      ]) &&\n        isSessionEnvelope(value) &&\n        hasRequestId(value)\n        ? {\n            type: 'save',\n            sessionId: value.sessionId,\n            requestId: value.requestId,\n            clientRevision: value.clientRevision,\n            baseDocumentVersion: value.baseDocumentVersion,\n          }\n        : null;\n    case 'resolveConflict':\n      return hasOnlyKeys(value, ['type', 'sessionId', 'choice']) &&\n        hasBoundedString(value, 'sessionId', HOST_WIRE_LIMITS.identifierCharacters, 1) &&\n        (value.choice === 'use-local' || value.choice === 'use-external')\n        ? { type: 'resolveConflict', sessionId: value.sessionId, choice: value.choice }\n        : null;\n    case 'resolveMedia':\n      return hasOnlyKeys(value, ['type', 'requestId', 'ref']) &&\n        hasRequestId(value) &&\n        hasBoundedString(value, 'ref', HOST_WIRE_LIMITS.pathCharacters, 1)\n        ? { type: 'resolveMedia', requestId: value.requestId, ref: value.ref }\n        : null;\n    case 'listMedia':\n      return hasOnlyKeys(value, ['type', 'requestId']) && hasRequestId(value)\n        ? { type: 'listMedia', requestId: value.requestId }\n        : null;\n    case 'addMedia':\n      return hasOnlyKeys(value, ['type', 'requestId', 'name', 'dataBase64', 'mimeType']) &&\n        hasRequestId(value) &&\n        hasBoundedString(value, 'name', HOST_WIRE_LIMITS.pathCharacters, 1) &&\n        hasBoundedString(value, 'dataBase64', HOST_WIRE_LIMITS.base64Characters) &&\n        hasMimeType(value, 'mimeType')\n        ? {\n            type: 'addMedia',\n            requestId: value.requestId,\n            name: value.name,\n            dataBase64: value.dataBase64,\n            mimeType: value.mimeType,\n          }\n        : null;\n    case 'removeMedia':\n      return hasOnlyKeys(value, ['type', 'requestId', 'ref']) &&\n        hasRequestId(value) &&\n        hasBoundedString(value, 'ref', HOST_WIRE_LIMITS.pathCharacters, 1)\n        ? { type: 'removeMedia', requestId: value.requestId, ref: value.ref }\n        : null;\n    case 'saveExport':\n      return hasOnlyKeys(value, [\n        'type',\n        'requestId',\n        'filename',\n        'dataBase64',\n        'mimeType',\n        'grantId',\n      ]) &&\n        hasRequestId(value) &&\n        hasSafeFilename(value, 'filename') &&\n        hasBoundedString(value, 'dataBase64', HOST_WIRE_LIMITS.base64Characters) &&\n        hasMimeType(value, 'mimeType') &&\n        hasNullableBoundedString(value, 'grantId', HOST_WIRE_LIMITS.identifierCharacters, 1)\n        ? {\n            type: 'saveExport',\n            requestId: value.requestId,\n            filename: value.filename,\n            dataBase64: value.dataBase64,\n            mimeType: value.mimeType,\n            grantId: value.grantId,\n          }\n        : null;\n    case 'resolveExportTarget':\n      return hasOnlyKeys(value, ['type', 'requestId', 'filename']) &&\n        hasRequestId(value) &&\n        hasSafeFilename(value, 'filename')\n        ? { type: 'resolveExportTarget', requestId: value.requestId, filename: value.filename }\n        : null;\n    case 'pickExportTarget':\n      return hasOnlyKeys(value, ['type', 'requestId', 'filename', 'currentGrantId']) &&\n        hasRequestId(value) &&\n        hasSafeFilename(value, 'filename') &&\n        hasNullableBoundedString(value, 'currentGrantId', HOST_WIRE_LIMITS.identifierCharacters, 1)\n        ? {\n            type: 'pickExportTarget',\n            requestId: value.requestId,\n            filename: value.filename,\n            currentGrantId: value.currentGrantId,\n          }\n        : null;\n    case 'readWorkspaceFile':\n      return hasOnlyKeys(value, ['type', 'requestId', 'path']) &&\n        hasRequestId(value) &&\n        hasBoundedString(value, 'path', HOST_WIRE_LIMITS.pathCharacters, 1)\n        ? { type: 'readWorkspaceFile', requestId: value.requestId, path: value.path }\n        : null;\n    default:\n      return null;\n  }\n}\n\n/**\n * Validate host responses before they influence webview state. This protects\n * the browser side from protocol drift and from messages injected by another\n * script in the webview document; a TypeScript MessageEvent annotation is not\n * runtime validation.\n */\nexport function parseExtensionToWebviewMessage(value: unknown): ExtensionToWebviewMessage | null {\n  if (!isRecord(value) || typeof value.type !== 'string') return null;\n\n  switch (value.type) {\n    case 'setContent':\n      return hasOnlyKeys(value, [\n        'type',\n        'content',\n        'documentVersion',\n        'fileName',\n        'sessionId',\n        'sessionRevision',\n        'acknowledgedClientRevision',\n      ]) &&\n        hasBoundedString(value, 'content', HOST_WIRE_LIMITS.documentCharacters) &&\n        hasNonNegativeInteger(value, 'documentVersion') &&\n        hasBoundedString(value, 'fileName', HOST_WIRE_LIMITS.pathCharacters, 1) &&\n        hasBoundedString(value, 'sessionId', HOST_WIRE_LIMITS.identifierCharacters, 1) &&\n        hasNonNegativeInteger(value, 'sessionRevision') &&\n        hasNonNegativeInteger(value, 'acknowledgedClientRevision')\n        ? {\n            type: 'setContent',\n            content: value.content,\n            documentVersion: value.documentVersion,\n            fileName: value.fileName,\n            sessionId: value.sessionId,\n            sessionRevision: value.sessionRevision,\n            acknowledgedClientRevision: value.acknowledgedClientRevision,\n          }\n        : null;\n    case 'editAcknowledged':\n      return hasOnlyKeys(value, [\n        'type',\n        'sessionId',\n        'clientRevision',\n        'sessionRevision',\n        'accepted',\n        'message',\n      ]) &&\n        hasBoundedString(value, 'sessionId', HOST_WIRE_LIMITS.identifierCharacters, 1) &&\n        hasNonNegativeInteger(value, 'clientRevision') &&\n        hasNonNegativeInteger(value, 'sessionRevision') &&\n        typeof value.accepted === 'boolean' &&\n        hasNullableBoundedString(value, 'message', HOST_WIRE_LIMITS.messageCharacters)\n        ? {\n            type: 'editAcknowledged',\n            sessionId: value.sessionId,\n            clientRevision: value.clientRevision,\n            sessionRevision: value.sessionRevision,\n            accepted: value.accepted,\n            message: value.message,\n          }\n        : null;\n    case 'sessionState': {\n      if (\n        !hasOnlyKeys(value, [\n          'type',\n          'sessionId',\n          'status',\n          'revision',\n          'persistedRevision',\n          'acknowledgedClientRevision',\n          'documentVersion',\n          'error',\n          'conflict',\n        ]) ||\n        !hasBoundedString(value, 'sessionId', HOST_WIRE_LIMITS.identifierCharacters, 1) ||\n        !isDocumentSessionMessageStatus(value.status) ||\n        !hasNonNegativeInteger(value, 'revision') ||\n        !hasNonNegativeInteger(value, 'persistedRevision') ||\n        value.persistedRevision > value.revision ||\n        !hasNonNegativeInteger(value, 'acknowledgedClientRevision') ||\n        !hasNonNegativeInteger(value, 'documentVersion') ||\n        !hasNullableBoundedString(value, 'error', HOST_WIRE_LIMITS.messageCharacters)\n      ) {\n        return null;\n      }\n      const conflict = parseDocumentConflictDetails(value.conflict);\n      if (\n        conflict === undefined ||\n        (value.status === 'conflict' && conflict === null) ||\n        (value.status !== 'conflict' && conflict !== null)\n      ) {\n        return null;\n      }\n      return {\n        type: 'sessionState',\n        sessionId: value.sessionId,\n        status: value.status,\n        revision: value.revision,\n        persistedRevision: value.persistedRevision,\n        acknowledgedClientRevision: value.acknowledgedClientRevision,\n        documentVersion: value.documentVersion,\n        error: value.error,\n        conflict,\n      };\n    }\n    case 'saveResult':\n      return hasOnlyKeys(value, [\n        'type',\n        'sessionId',\n        'requestId',\n        'ok',\n        'revision',\n        'persistedRevision',\n        'documentVersion',\n        'message',\n      ]) &&\n        hasBoundedString(value, 'sessionId', HOST_WIRE_LIMITS.identifierCharacters, 1) &&\n        hasRequestId(value) &&\n        typeof value.ok === 'boolean' &&\n        hasNonNegativeInteger(value, 'revision') &&\n        hasNonNegativeInteger(value, 'persistedRevision') &&\n        value.persistedRevision <= value.revision &&\n        hasNonNegativeInteger(value, 'documentVersion') &&\n        hasNullableBoundedString(value, 'message', HOST_WIRE_LIMITS.messageCharacters)\n        ? {\n            type: 'saveResult',\n            sessionId: value.sessionId,\n            requestId: value.requestId,\n            ok: value.ok,\n            revision: value.revision,\n            persistedRevision: value.persistedRevision,\n            documentVersion: value.documentVersion,\n            message: value.message,\n          }\n        : null;\n    case 'themeChange':\n      return hasOnlyKeys(value, ['type', 'theme']) &&\n        (value.theme === 'light' || value.theme === 'dark')\n        ? { type: 'themeChange', theme: value.theme }\n        : null;\n    case 'editorSettings': {\n      if (!hasOnlyKeys(value, ['type', 'settings'])) return null;\n      const settings = parseVscodeEditorSettings(value.settings);\n      return settings ? { type: 'editorSettings', settings } : null;\n    }\n    case 'mediaResolved':\n      return hasOnlyKeys(value, ['type', 'requestId', 'url']) &&\n        hasRequestId(value) &&\n        isBoundedMediaDataUrl(value.url)\n        ? { type: 'mediaResolved', requestId: value.requestId, url: value.url }\n        : null;\n    case 'mediaListed': {\n      if (!hasOnlyKeys(value, ['type', 'requestId', 'entries']) || !hasRequestId(value)) {\n        return null;\n      }\n      const entries = parseMediaEntries(value.entries);\n      return entries ? { type: 'mediaListed', requestId: value.requestId, entries } : null;\n    }\n    case 'mediaAdded':\n      return hasOnlyKeys(value, ['type', 'requestId', 'path']) &&\n        hasRequestId(value) &&\n        hasBoundedString(value, 'path', HOST_WIRE_LIMITS.pathCharacters, 1)\n        ? { type: 'mediaAdded', requestId: value.requestId, path: value.path }\n        : null;\n    case 'mediaRemoved':\n      return hasOnlyKeys(value, ['type', 'requestId']) && hasRequestId(value)\n        ? { type: 'mediaRemoved', requestId: value.requestId }\n        : null;\n    case 'mediaError':\n    case 'exportError':\n    case 'workspaceFileError':\n      return hasOnlyKeys(value, ['type', 'requestId', 'message']) &&\n        hasRequestId(value) &&\n        hasBoundedString(value, 'message', HOST_WIRE_LIMITS.messageCharacters, 1)\n        ? { type: value.type, requestId: value.requestId, message: value.message }\n        : null;\n    case 'exportSaved':\n    case 'exportTargetResolved':\n    case 'exportTargetPicked': {\n      if (!hasOnlyKeys(value, ['type', 'requestId', 'target']) || !hasRequestId(value)) {\n        return null;\n      }\n      const target = parseExportTargetGrant(value.target);\n      return target !== undefined ? { type: value.type, requestId: value.requestId, target } : null;\n    }\n    case 'workspaceFileRead':\n      return hasOnlyKeys(value, ['type', 'requestId', 'dataBase64']) &&\n        hasRequestId(value) &&\n        hasNullableBoundedString(value, 'dataBase64', HOST_WIRE_LIMITS.base64Characters)\n        ? { type: 'workspaceFileRead', requestId: value.requestId, dataBase64: value.dataBase64 }\n        : null;\n    default:\n      return null;\n  }\n}\n\nfunction parseExportTargetGrant(value: unknown): ExportTargetGrantMessage | null | undefined {\n  if (value === null) return null;\n  if (\n    !isRecord(value) ||\n    !hasOnlyKeys(value, ['grantId', 'displayLabel']) ||\n    !hasBoundedString(value, 'grantId', HOST_WIRE_LIMITS.identifierCharacters, 1) ||\n    !hasBoundedString(value, 'displayLabel', HOST_WIRE_LIMITS.pathCharacters, 1)\n  ) {\n    return undefined;\n  }\n  return { grantId: value.grantId, displayLabel: value.displayLabel };\n}\n\nfunction parseDocumentConflictDetails(\n  value: unknown,\n): DocumentConflictDetailsMessage | null | undefined {\n  if (value === null) return null;\n  if (\n    !isRecord(value) ||\n    !hasOnlyKeys(value, [\n      'localBaseDocumentVersion',\n      'externalDocumentVersion',\n      'localBytes',\n      'externalBytes',\n      'localEditedAt',\n      'externalObservedAt',\n      'externalIsDirty',\n    ]) ||\n    !hasNonNegativeInteger(value, 'localBaseDocumentVersion') ||\n    !hasNonNegativeInteger(value, 'externalDocumentVersion') ||\n    !hasNonNegativeInteger(value, 'localBytes') ||\n    !isNullableNonNegativeInteger(value.externalBytes) ||\n    !isNullableNonNegativeInteger(value.localEditedAt) ||\n    !isNullableNonNegativeInteger(value.externalObservedAt) ||\n    (value.externalIsDirty !== null && typeof value.externalIsDirty !== 'boolean')\n  ) {\n    return undefined;\n  }\n  return {\n    localBaseDocumentVersion: value.localBaseDocumentVersion,\n    externalDocumentVersion: value.externalDocumentVersion,\n    localBytes: value.localBytes,\n    externalBytes: value.externalBytes,\n    localEditedAt: value.localEditedAt,\n    externalObservedAt: value.externalObservedAt,\n    externalIsDirty: value.externalIsDirty,\n  };\n}\n\nfunction parseVscodeEditorSettings(value: unknown): VscodeEditorSettings | null {\n  if (\n    !isRecord(value) ||\n    !hasOnlyKeys(value, ['autoSave', 'accentColor', 'writeCanvasSettings']) ||\n    typeof value.autoSave !== 'boolean' ||\n    !isDocBlocksAccentColor(value.accentColor)\n  ) {\n    return null;\n  }\n  const writeCanvasSettings = parseVscodeWriteCanvasSettings(value.writeCanvasSettings);\n  return writeCanvasSettings\n    ? { autoSave: value.autoSave, accentColor: value.accentColor, writeCanvasSettings }\n    : null;\n}\n\nexport function isDocBlocksAccentColor(value: unknown): value is DocBlocksAccentColor {\n  return DOCBLOCKS_ACCENT_COLORS.some((color) => color === value);\n}\n\nexport function isDocBlocksWriteCanvasTextSize(value: unknown): value is number {\n  return numberInRange(\n    value,\n    DOCBLOCKS_WRITE_CANVAS_TEXT_SIZE_MIN,\n    DOCBLOCKS_WRITE_CANVAS_TEXT_SIZE_MAX,\n  );\n}\n\nexport function isDocBlocksWriteCanvasLineSpacing(value: unknown): value is number {\n  return numberInRange(\n    value,\n    DOCBLOCKS_WRITE_CANVAS_LINE_SPACING_MIN,\n    DOCBLOCKS_WRITE_CANVAS_LINE_SPACING_MAX,\n  );\n}\n\nfunction parseVscodeWriteCanvasSettings(value: unknown): VscodeWriteCanvasSettings | null {\n  return isRecord(value) &&\n    hasOnlyKeys(value, ['textSize', 'lineSpacing']) &&\n    isDocBlocksWriteCanvasTextSize(value.textSize) &&\n    isDocBlocksWriteCanvasLineSpacing(value.lineSpacing)\n    ? { textSize: value.textSize, lineSpacing: value.lineSpacing }\n    : null;\n}\n\nfunction numberInRange(value: unknown, min: number, max: number): value is number {\n  return typeof value === 'number' && Number.isFinite(value) && value >= min && value <= max;\n}\n\nfunction parseMediaEntries(value: unknown): MediaEntryMessage[] | null {\n  if (!Array.isArray(value) || value.length > HOST_WIRE_LIMITS.arrayEntries) return null;\n  const entries: MediaEntryMessage[] = [];\n  for (const entry of value) {\n    if (\n      !isRecord(entry) ||\n      !hasOnlyKeys(entry, ['name', 'mimeType', 'size']) ||\n      !hasBoundedString(entry, 'name', HOST_WIRE_LIMITS.pathCharacters, 1) ||\n      !hasMimeType(entry, 'mimeType') ||\n      !hasNonNegativeInteger(entry, 'size') ||\n      entry.size > HOST_WIRE_LIMITS.binaryBytes\n    ) {\n      return null;\n    }\n    entries.push({ name: entry.name, mimeType: entry.mimeType, size: entry.size });\n  }\n  return entries;\n}\n\nfunction isBoundedMediaDataUrl(value: unknown): value is string {\n  if (!isBoundedString(value, HOST_WIRE_LIMITS.base64Characters + 512, 1)) return false;\n  if (!value.startsWith('data:')) return false;\n  const separator = value.indexOf(';base64,');\n  return separator > 5 && separator <= HOST_WIRE_LIMITS.identifierCharacters;\n}\n\nfunction isDocumentSessionMessageStatus(value: unknown): value is DocumentSessionMessageStatus {\n  return (\n    value === 'idle' ||\n    value === 'saved' ||\n    value === 'dirty' ||\n    value === 'saving' ||\n    value === 'error' ||\n    value === 'conflict' ||\n    value === 'closed'\n  );\n}\n\nfunction isSessionEnvelope(value: Record<string, unknown>): value is Record<string, unknown> & {\n  sessionId: string;\n  clientRevision: number;\n  baseDocumentVersion: number;\n} {\n  return (\n    hasBoundedString(value, 'sessionId', HOST_WIRE_LIMITS.identifierCharacters, 1) &&\n    hasNonNegativeInteger(value, 'clientRevision') &&\n    hasNonNegativeInteger(value, 'baseDocumentVersion')\n  );\n}\n\nfunction hasRequestId(\n  value: Record<string, unknown>,\n): value is Record<string, unknown> & { requestId: number } {\n  return hasNonNegativeInteger(value, 'requestId') && value.requestId <= MAX_REQUEST_ID;\n}\n\nfunction hasBoundedString<K extends string>(\n  value: Record<string, unknown>,\n  key: K,\n  maximumCharacters: number,\n  minimumCharacters = 0,\n): value is Record<string, unknown> & Record<K, string> {\n  return isBoundedString(value[key], maximumCharacters, minimumCharacters);\n}\n\nfunction hasNullableBoundedString<K extends string>(\n  value: Record<string, unknown>,\n  key: K,\n  maximumCharacters: number,\n  minimumCharacters = 0,\n): value is Record<string, unknown> & Record<K, string | null> {\n  return value[key] === null || isBoundedString(value[key], maximumCharacters, minimumCharacters);\n}\n\nfunction hasNonNegativeInteger<K extends string>(\n  value: Record<string, unknown>,\n  key: K,\n): value is Record<string, unknown> & Record<K, number> {\n  const entry = value[key];\n  return typeof entry === 'number' && Number.isSafeInteger(entry) && entry >= 0;\n}\n\nfunction isNullableNonNegativeInteger(value: unknown): value is number | null {\n  return value === null || (typeof value === 'number' && Number.isSafeInteger(value) && value >= 0);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction hasOnlyKeys(value: Record<string, unknown>, keys: readonly string[]): boolean {\n  const expected = new Set(keys);\n  const actual = Object.keys(value);\n  return actual.length === expected.size && actual.every((key) => expected.has(key));\n}\n\nfunction hasSafeFilename<K extends string>(\n  value: Record<string, unknown>,\n  key: K,\n): value is Record<string, unknown> & Record<K, string> {\n  return isSafeExportFilename(value[key]);\n}\n\nexport function isSafeExportFilename(value: unknown): value is string {\n  return (\n    isBoundedString(value, 255, 1) &&\n    value.trim() === value &&\n    !/[\\\\/:*?\"<>|]/.test(value) &&\n    !hasControlCharacter(value) &&\n    value !== '.' &&\n    value !== '..' &&\n    !value.endsWith('.') &&\n    !value.endsWith(' ')\n  );\n}\n\nfunction hasControlCharacter(value: string): boolean {\n  for (let index = 0; index < value.length; index += 1) {\n    const code = value.charCodeAt(index);\n    if (code <= 0x1f || code === 0x7f) return true;\n  }\n  return false;\n}\n\nfunction hasMimeType<K extends string>(\n  value: Record<string, unknown>,\n  key: K,\n): value is Record<string, unknown> & Record<K, string> {\n  return isSafeMimeType(value[key]);\n}\n\nexport function isSafeMimeType(value: unknown): value is string {\n  return (\n    isBoundedString(value, HOST_WIRE_LIMITS.identifierCharacters, 1) &&\n    /^[A-Za-z0-9!#$&^_.+-]+\\/[A-Za-z0-9!#$&^_.+-]+(?:\\s*;\\s*[A-Za-z0-9!#$&^_.+-]+=[^;\\r\\n]+)*$/.test(\n      value,\n    )\n  );\n}\n"],"mappings":";;;;;;AAMA,IAAM,iBAAiB;AA6BhB,IAAM,0BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIO,IAAM,uCAAuC;AAC7C,IAAM,uCAAuC;AAC7C,IAAM,0CAA0C;AAChD,IAAM,0CAA0C;AAOhD,IAAM,uCAA4E;AAAA,EACvF,UAAU;AAAA,EACV,aAAa;AACf;AA4HO,SAAS,+BAA+B,OAAkD;AAC/F,MAAI,CAAC,SAAS,KAAK,KAAK,OAAO,MAAM,SAAS,SAAU,QAAO;AAE/D,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,QAAQ,IAAI;AAAA,IAC5D,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,SAAS,CAAC,KAAK,OAAO,MAAM,YAAY,YACvE,EAAE,MAAM,eAAe,SAAS,MAAM,QAAQ,IAC9C;AAAA,IACN,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,aAAa,CAAC,KAC/C,uBAAuB,MAAM,WAAW,IACtC,EAAE,MAAM,kBAAkB,aAAa,MAAM,YAAY,IACzD;AAAA,IACN,KAAK,0BAA0B;AAC7B,UAAI,CAAC,YAAY,OAAO,CAAC,QAAQ,UAAU,CAAC,EAAG,QAAO;AACtD,YAAM,WAAW,+BAA+B,MAAM,QAAQ;AAC9D,aAAO,WAAW,EAAE,MAAM,0BAA0B,SAAS,IAAI;AAAA,IACnE;AAAA,IACA,KAAK;AACH,aAAO,YAAY,OAAO;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC,KACC,iBAAiB,OAAO,WAAW,iBAAiB,kBAAkB,KACtE,kBAAkB,KAAK,IACrB;AAAA,QACE,MAAM;AAAA,QACN,SAAS,MAAM;AAAA,QACf,WAAW,MAAM;AAAA,QACjB,gBAAgB,MAAM;AAAA,QACtB,qBAAqB,MAAM;AAAA,MAC7B,IACA;AAAA,IACN,KAAK;AACH,aAAO,YAAY,OAAO;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC,KACC,kBAAkB,KAAK,KACvB,aAAa,KAAK,IAChB;AAAA,QACE,MAAM;AAAA,QACN,WAAW,MAAM;AAAA,QACjB,WAAW,MAAM;AAAA,QACjB,gBAAgB,MAAM;AAAA,QACtB,qBAAqB,MAAM;AAAA,MAC7B,IACA;AAAA,IACN,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,aAAa,QAAQ,CAAC,KACvD,iBAAiB,OAAO,aAAa,iBAAiB,sBAAsB,CAAC,MAC5E,MAAM,WAAW,eAAe,MAAM,WAAW,kBAChD,EAAE,MAAM,mBAAmB,WAAW,MAAM,WAAW,QAAQ,MAAM,OAAO,IAC5E;AAAA,IACN,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,aAAa,KAAK,CAAC,KACpD,aAAa,KAAK,KAClB,iBAAiB,OAAO,OAAO,iBAAiB,gBAAgB,CAAC,IAC/D,EAAE,MAAM,gBAAgB,WAAW,MAAM,WAAW,KAAK,MAAM,IAAI,IACnE;AAAA,IACN,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,WAAW,CAAC,KAAK,aAAa,KAAK,IAClE,EAAE,MAAM,aAAa,WAAW,MAAM,UAAU,IAChD;AAAA,IACN,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,aAAa,QAAQ,cAAc,UAAU,CAAC,KAC/E,aAAa,KAAK,KAClB,iBAAiB,OAAO,QAAQ,iBAAiB,gBAAgB,CAAC,KAClE,iBAAiB,OAAO,cAAc,iBAAiB,gBAAgB,KACvE,YAAY,OAAO,UAAU,IAC3B;AAAA,QACE,MAAM;AAAA,QACN,WAAW,MAAM;AAAA,QACjB,MAAM,MAAM;AAAA,QACZ,YAAY,MAAM;AAAA,QAClB,UAAU,MAAM;AAAA,MAClB,IACA;AAAA,IACN,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,aAAa,KAAK,CAAC,KACpD,aAAa,KAAK,KAClB,iBAAiB,OAAO,OAAO,iBAAiB,gBAAgB,CAAC,IAC/D,EAAE,MAAM,eAAe,WAAW,MAAM,WAAW,KAAK,MAAM,IAAI,IAClE;AAAA,IACN,KAAK;AACH,aAAO,YAAY,OAAO;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC,KACC,aAAa,KAAK,KAClB,gBAAgB,OAAO,UAAU,KACjC,iBAAiB,OAAO,cAAc,iBAAiB,gBAAgB,KACvE,YAAY,OAAO,UAAU,KAC7B,yBAAyB,OAAO,WAAW,iBAAiB,sBAAsB,CAAC,IACjF;AAAA,QACE,MAAM;AAAA,QACN,WAAW,MAAM;AAAA,QACjB,UAAU,MAAM;AAAA,QAChB,YAAY,MAAM;AAAA,QAClB,UAAU,MAAM;AAAA,QAChB,SAAS,MAAM;AAAA,MACjB,IACA;AAAA,IACN,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,aAAa,UAAU,CAAC,KACzD,aAAa,KAAK,KAClB,gBAAgB,OAAO,UAAU,IAC/B,EAAE,MAAM,uBAAuB,WAAW,MAAM,WAAW,UAAU,MAAM,SAAS,IACpF;AAAA,IACN,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,aAAa,YAAY,gBAAgB,CAAC,KAC3E,aAAa,KAAK,KAClB,gBAAgB,OAAO,UAAU,KACjC,yBAAyB,OAAO,kBAAkB,iBAAiB,sBAAsB,CAAC,IACxF;AAAA,QACE,MAAM;AAAA,QACN,WAAW,MAAM;AAAA,QACjB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,IACA;AAAA,IACN,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,aAAa,MAAM,CAAC,KACrD,aAAa,KAAK,KAClB,iBAAiB,OAAO,QAAQ,iBAAiB,gBAAgB,CAAC,IAChE,EAAE,MAAM,qBAAqB,WAAW,MAAM,WAAW,MAAM,MAAM,KAAK,IAC1E;AAAA,IACN;AACE,aAAO;AAAA,EACX;AACF;AAQO,SAAS,+BAA+B,OAAkD;AAC/F,MAAI,CAAC,SAAS,KAAK,KAAK,OAAO,MAAM,SAAS,SAAU,QAAO;AAE/D,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO,YAAY,OAAO;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC,KACC,iBAAiB,OAAO,WAAW,iBAAiB,kBAAkB,KACtE,sBAAsB,OAAO,iBAAiB,KAC9C,iBAAiB,OAAO,YAAY,iBAAiB,gBAAgB,CAAC,KACtE,iBAAiB,OAAO,aAAa,iBAAiB,sBAAsB,CAAC,KAC7E,sBAAsB,OAAO,iBAAiB,KAC9C,sBAAsB,OAAO,4BAA4B,IACvD;AAAA,QACE,MAAM;AAAA,QACN,SAAS,MAAM;AAAA,QACf,iBAAiB,MAAM;AAAA,QACvB,UAAU,MAAM;AAAA,QAChB,WAAW,MAAM;AAAA,QACjB,iBAAiB,MAAM;AAAA,QACvB,4BAA4B,MAAM;AAAA,MACpC,IACA;AAAA,IACN,KAAK;AACH,aAAO,YAAY,OAAO;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC,KACC,iBAAiB,OAAO,aAAa,iBAAiB,sBAAsB,CAAC,KAC7E,sBAAsB,OAAO,gBAAgB,KAC7C,sBAAsB,OAAO,iBAAiB,KAC9C,OAAO,MAAM,aAAa,aAC1B,yBAAyB,OAAO,WAAW,iBAAiB,iBAAiB,IAC3E;AAAA,QACE,MAAM;AAAA,QACN,WAAW,MAAM;AAAA,QACjB,gBAAgB,MAAM;AAAA,QACtB,iBAAiB,MAAM;AAAA,QACvB,UAAU,MAAM;AAAA,QAChB,SAAS,MAAM;AAAA,MACjB,IACA;AAAA,IACN,KAAK,gBAAgB;AACnB,UACE,CAAC,YAAY,OAAO;AAAA,QAClB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC,KACD,CAAC,iBAAiB,OAAO,aAAa,iBAAiB,sBAAsB,CAAC,KAC9E,CAAC,+BAA+B,MAAM,MAAM,KAC5C,CAAC,sBAAsB,OAAO,UAAU,KACxC,CAAC,sBAAsB,OAAO,mBAAmB,KACjD,MAAM,oBAAoB,MAAM,YAChC,CAAC,sBAAsB,OAAO,4BAA4B,KAC1D,CAAC,sBAAsB,OAAO,iBAAiB,KAC/C,CAAC,yBAAyB,OAAO,SAAS,iBAAiB,iBAAiB,GAC5E;AACA,eAAO;AAAA,MACT;AACA,YAAM,WAAW,6BAA6B,MAAM,QAAQ;AAC5D,UACE,aAAa,UACZ,MAAM,WAAW,cAAc,aAAa,QAC5C,MAAM,WAAW,cAAc,aAAa,MAC7C;AACA,eAAO;AAAA,MACT;AACA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,WAAW,MAAM;AAAA,QACjB,QAAQ,MAAM;AAAA,QACd,UAAU,MAAM;AAAA,QAChB,mBAAmB,MAAM;AAAA,QACzB,4BAA4B,MAAM;AAAA,QAClC,iBAAiB,MAAM;AAAA,QACvB,OAAO,MAAM;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,IACA,KAAK;AACH,aAAO,YAAY,OAAO;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC,KACC,iBAAiB,OAAO,aAAa,iBAAiB,sBAAsB,CAAC,KAC7E,aAAa,KAAK,KAClB,OAAO,MAAM,OAAO,aACpB,sBAAsB,OAAO,UAAU,KACvC,sBAAsB,OAAO,mBAAmB,KAChD,MAAM,qBAAqB,MAAM,YACjC,sBAAsB,OAAO,iBAAiB,KAC9C,yBAAyB,OAAO,WAAW,iBAAiB,iBAAiB,IAC3E;AAAA,QACE,MAAM;AAAA,QACN,WAAW,MAAM;AAAA,QACjB,WAAW,MAAM;AAAA,QACjB,IAAI,MAAM;AAAA,QACV,UAAU,MAAM;AAAA,QAChB,mBAAmB,MAAM;AAAA,QACzB,iBAAiB,MAAM;AAAA,QACvB,SAAS,MAAM;AAAA,MACjB,IACA;AAAA,IACN,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,OAAO,CAAC,MACxC,MAAM,UAAU,WAAW,MAAM,UAAU,UAC1C,EAAE,MAAM,eAAe,OAAO,MAAM,MAAM,IAC1C;AAAA,IACN,KAAK,kBAAkB;AACrB,UAAI,CAAC,YAAY,OAAO,CAAC,QAAQ,UAAU,CAAC,EAAG,QAAO;AACtD,YAAM,WAAW,0BAA0B,MAAM,QAAQ;AACzD,aAAO,WAAW,EAAE,MAAM,kBAAkB,SAAS,IAAI;AAAA,IAC3D;AAAA,IACA,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,aAAa,KAAK,CAAC,KACpD,aAAa,KAAK,KAClB,sBAAsB,MAAM,GAAG,IAC7B,EAAE,MAAM,iBAAiB,WAAW,MAAM,WAAW,KAAK,MAAM,IAAI,IACpE;AAAA,IACN,KAAK,eAAe;AAClB,UAAI,CAAC,YAAY,OAAO,CAAC,QAAQ,aAAa,SAAS,CAAC,KAAK,CAAC,aAAa,KAAK,GAAG;AACjF,eAAO;AAAA,MACT;AACA,YAAM,UAAU,kBAAkB,MAAM,OAAO;AAC/C,aAAO,UAAU,EAAE,MAAM,eAAe,WAAW,MAAM,WAAW,QAAQ,IAAI;AAAA,IAClF;AAAA,IACA,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,aAAa,MAAM,CAAC,KACrD,aAAa,KAAK,KAClB,iBAAiB,OAAO,QAAQ,iBAAiB,gBAAgB,CAAC,IAChE,EAAE,MAAM,cAAc,WAAW,MAAM,WAAW,MAAM,MAAM,KAAK,IACnE;AAAA,IACN,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,WAAW,CAAC,KAAK,aAAa,KAAK,IAClE,EAAE,MAAM,gBAAgB,WAAW,MAAM,UAAU,IACnD;AAAA,IACN,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,aAAa,SAAS,CAAC,KACxD,aAAa,KAAK,KAClB,iBAAiB,OAAO,WAAW,iBAAiB,mBAAmB,CAAC,IACtE,EAAE,MAAM,MAAM,MAAM,WAAW,MAAM,WAAW,SAAS,MAAM,QAAQ,IACvE;AAAA,IACN,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK,sBAAsB;AACzB,UAAI,CAAC,YAAY,OAAO,CAAC,QAAQ,aAAa,QAAQ,CAAC,KAAK,CAAC,aAAa,KAAK,GAAG;AAChF,eAAO;AAAA,MACT;AACA,YAAM,SAAS,uBAAuB,MAAM,MAAM;AAClD,aAAO,WAAW,SAAY,EAAE,MAAM,MAAM,MAAM,WAAW,MAAM,WAAW,OAAO,IAAI;AAAA,IAC3F;AAAA,IACA,KAAK;AACH,aAAO,YAAY,OAAO,CAAC,QAAQ,aAAa,YAAY,CAAC,KAC3D,aAAa,KAAK,KAClB,yBAAyB,OAAO,cAAc,iBAAiB,gBAAgB,IAC7E,EAAE,MAAM,qBAAqB,WAAW,MAAM,WAAW,YAAY,MAAM,WAAW,IACtF;AAAA,IACN;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,uBAAuB,OAA6D;AAC3F,MAAI,UAAU,KAAM,QAAO;AAC3B,MACE,CAAC,SAAS,KAAK,KACf,CAAC,YAAY,OAAO,CAAC,WAAW,cAAc,CAAC,KAC/C,CAAC,iBAAiB,OAAO,WAAW,iBAAiB,sBAAsB,CAAC,KAC5E,CAAC,iBAAiB,OAAO,gBAAgB,iBAAiB,gBAAgB,CAAC,GAC3E;AACA,WAAO;AAAA,EACT;AACA,SAAO,EAAE,SAAS,MAAM,SAAS,cAAc,MAAM,aAAa;AACpE;AAEA,SAAS,6BACP,OACmD;AACnD,MAAI,UAAU,KAAM,QAAO;AAC3B,MACE,CAAC,SAAS,KAAK,KACf,CAAC,YAAY,OAAO;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,KACD,CAAC,sBAAsB,OAAO,0BAA0B,KACxD,CAAC,sBAAsB,OAAO,yBAAyB,KACvD,CAAC,sBAAsB,OAAO,YAAY,KAC1C,CAAC,6BAA6B,MAAM,aAAa,KACjD,CAAC,6BAA6B,MAAM,aAAa,KACjD,CAAC,6BAA6B,MAAM,kBAAkB,KACrD,MAAM,oBAAoB,QAAQ,OAAO,MAAM,oBAAoB,WACpE;AACA,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,0BAA0B,MAAM;AAAA,IAChC,yBAAyB,MAAM;AAAA,IAC/B,YAAY,MAAM;AAAA,IAClB,eAAe,MAAM;AAAA,IACrB,eAAe,MAAM;AAAA,IACrB,oBAAoB,MAAM;AAAA,IAC1B,iBAAiB,MAAM;AAAA,EACzB;AACF;AAEA,SAAS,0BAA0B,OAA6C;AAC9E,MACE,CAAC,SAAS,KAAK,KACf,CAAC,YAAY,OAAO,CAAC,YAAY,eAAe,qBAAqB,CAAC,KACtE,OAAO,MAAM,aAAa,aAC1B,CAAC,uBAAuB,MAAM,WAAW,GACzC;AACA,WAAO;AAAA,EACT;AACA,QAAM,sBAAsB,+BAA+B,MAAM,mBAAmB;AACpF,SAAO,sBACH,EAAE,UAAU,MAAM,UAAU,aAAa,MAAM,aAAa,oBAAoB,IAChF;AACN;AAEO,SAAS,uBAAuB,OAA+C;AACpF,SAAO,wBAAwB,KAAK,CAAC,UAAU,UAAU,KAAK;AAChE;AAEO,SAAS,+BAA+B,OAAiC;AAC9E,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,kCAAkC,OAAiC;AACjF,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,+BAA+B,OAAkD;AACxF,SAAO,SAAS,KAAK,KACnB,YAAY,OAAO,CAAC,YAAY,aAAa,CAAC,KAC9C,+BAA+B,MAAM,QAAQ,KAC7C,kCAAkC,MAAM,WAAW,IACjD,EAAE,UAAU,MAAM,UAAU,aAAa,MAAM,YAAY,IAC3D;AACN;AAEA,SAAS,cAAc,OAAgB,KAAa,KAA8B;AAChF,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,SAAS,OAAO,SAAS;AACzF;AAEA,SAAS,kBAAkB,OAA4C;AACrE,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,iBAAiB,aAAc,QAAO;AAClF,QAAM,UAA+B,CAAC;AACtC,aAAW,SAAS,OAAO;AACzB,QACE,CAAC,SAAS,KAAK,KACf,CAAC,YAAY,OAAO,CAAC,QAAQ,YAAY,MAAM,CAAC,KAChD,CAAC,iBAAiB,OAAO,QAAQ,iBAAiB,gBAAgB,CAAC,KACnE,CAAC,YAAY,OAAO,UAAU,KAC9B,CAAC,sBAAsB,OAAO,MAAM,KACpC,MAAM,OAAO,iBAAiB,aAC9B;AACA,aAAO;AAAA,IACT;AACA,YAAQ,KAAK,EAAE,MAAM,MAAM,MAAM,UAAU,MAAM,UAAU,MAAM,MAAM,KAAK,CAAC;AAAA,EAC/E;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,OAAiC;AAC9D,MAAI,CAAC,gBAAgB,OAAO,iBAAiB,mBAAmB,KAAK,CAAC,EAAG,QAAO;AAChF,MAAI,CAAC,MAAM,WAAW,OAAO,EAAG,QAAO;AACvC,QAAM,YAAY,MAAM,QAAQ,UAAU;AAC1C,SAAO,YAAY,KAAK,aAAa,iBAAiB;AACxD;AAEA,SAAS,+BAA+B,OAAuD;AAC7F,SACE,UAAU,UACV,UAAU,WACV,UAAU,WACV,UAAU,YACV,UAAU,WACV,UAAU,cACV,UAAU;AAEd;AAEA,SAAS,kBAAkB,OAIzB;AACA,SACE,iBAAiB,OAAO,aAAa,iBAAiB,sBAAsB,CAAC,KAC7E,sBAAsB,OAAO,gBAAgB,KAC7C,sBAAsB,OAAO,qBAAqB;AAEtD;AAEA,SAAS,aACP,OAC0D;AAC1D,SAAO,sBAAsB,OAAO,WAAW,KAAK,MAAM,aAAa;AACzE;AAEA,SAAS,iBACP,OACA,KACA,mBACA,oBAAoB,GACkC;AACtD,SAAO,gBAAgB,MAAM,GAAG,GAAG,mBAAmB,iBAAiB;AACzE;AAEA,SAAS,yBACP,OACA,KACA,mBACA,oBAAoB,GACyC;AAC7D,SAAO,MAAM,GAAG,MAAM,QAAQ,gBAAgB,MAAM,GAAG,GAAG,mBAAmB,iBAAiB;AAChG;AAEA,SAAS,sBACP,OACA,KACsD;AACtD,QAAM,QAAQ,MAAM,GAAG;AACvB,SAAO,OAAO,UAAU,YAAY,OAAO,cAAc,KAAK,KAAK,SAAS;AAC9E;AAEA,SAAS,6BAA6B,OAAwC;AAC5E,SAAO,UAAU,QAAS,OAAO,UAAU,YAAY,OAAO,cAAc,KAAK,KAAK,SAAS;AACjG;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,OAAgC,MAAkC;AACrF,QAAM,WAAW,IAAI,IAAI,IAAI;AAC7B,QAAM,SAAS,OAAO,KAAK,KAAK;AAChC,SAAO,OAAO,WAAW,SAAS,QAAQ,OAAO,MAAM,CAAC,QAAQ,SAAS,IAAI,GAAG,CAAC;AACnF;AAEA,SAAS,gBACP,OACA,KACsD;AACtD,SAAO,qBAAqB,MAAM,GAAG,CAAC;AACxC;AAEO,SAAS,qBAAqB,OAAiC;AACpE,SACE,gBAAgB,OAAO,KAAK,CAAC,KAC7B,MAAM,KAAK,MAAM,SACjB,CAAC,eAAe,KAAK,KAAK,KAC1B,CAAC,oBAAoB,KAAK,KAC1B,UAAU,OACV,UAAU,QACV,CAAC,MAAM,SAAS,GAAG,KACnB,CAAC,MAAM,SAAS,GAAG;AAEvB;AAEA,SAAS,oBAAoB,OAAwB;AACnD,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;AACpD,UAAM,OAAO,MAAM,WAAW,KAAK;AACnC,QAAI,QAAQ,MAAQ,SAAS,IAAM,QAAO;AAAA,EAC5C;AACA,SAAO;AACT;AAEA,SAAS,YACP,OACA,KACsD;AACtD,SAAO,eAAe,MAAM,GAAG,CAAC;AAClC;AAEO,SAAS,eAAe,OAAiC;AAC9D,SACE,gBAAgB,OAAO,iBAAiB,sBAAsB,CAAC,KAC/D,4FAA4F;AAAA,IAC1F;AAAA,EACF;AAEJ;","names":[]}

package/dist/workspace/index.d.ts

@@ -1,4 +1,141 @@
-export type { WorkspaceDescriptor, TransientOrigin } from './types.js';
-export { listWorkspaces, getWorkspace, saveWorkspace, removeWorkspace, touchWorkspace, ensureDefaultWorkspace, registerTransientWorkspace, getTransientWorkspace, unregisterTransientWorkspace, } from './workspace-manager.js';
-export { reconcileElectronWorkspaceDescriptors, type ElectronWorkspaceReconciliation, } from './reconcile-electron.js';
-//# sourceMappingURL=index.d.ts.map
+import { q as FileSystemProvider } from '../types-BEg5SQ1_.js';
+import { k as ElectronWorkspaceInfo, B as HostEnvironment } from '../types-CueK0tvU.js';
+import '../workspace-path-CWVrcuPL.js';
+
+/**
+ * Origin of a transient workspace — records where its contents came from and
+ * how to save them back. Set only on `type: 'transient'` workspaces.
+ * - 'loose-file' — a single markdown file opened from the OS (Electron);
+ *   edits write back through an owner-scoped `resourceId` grant.
+ * - 'dbk' — a `.dbk`/zip bundle unpacked into memory (Electron); edits are
+ *   re-zipped and written back through an owner-scoped resource grant.
+ * - 'web-file' — a single markdown file launched into the installed web app
+ *   (File Handling API); edits write back through `handle`.
+ * - 'web-dbk' — a `.dbk`/zip bundle launched into the installed web app;
+ *   edits are re-zipped and written back through `handle`.
+ *
+ * The web variants hold a live `FileSystemFileHandle`. That is safe because
+ * transient descriptors are never persisted — they live only in the
+ * in-memory registry (see workspace-manager) for the current page session.
+ */
+type TransientOrigin = {
+    kind: 'loose-file';
+    resourceId: string;
+} | {
+    kind: 'dbk';
+    resourceId: string;
+    /** SHA-256 of the last bundle version acknowledged by the host. */
+    version: string | null;
+} | {
+    kind: 'web-file';
+    handle: FileSystemFileHandle;
+    name: string;
+} | {
+    kind: 'web-dbk';
+    handle: FileSystemFileHandle;
+    name: string;
+    /** SHA-256 of the last bundle version observed on disk. */
+    version: string | null;
+};
+/**
+ * Workspace — a named binding to a FileSystemProvider, representing
+ * the user's current working context (a folder of markdown files).
+ */
+interface WorkspaceDescriptor {
+    /** Unique stable identifier (persisted in IndexedDB). */
+    id: string;
+    /** User-visible label. */
+    name: string;
+    /**
+     * Provider kind:
+     * - 'indexeddb' — browser-local storage (web only)
+     * - 'native' — File System Access API (web Chrome/Edge only)
+     * - 'electron-native' — Electron main-process native filesystem
+     * - 'transient' — session-only, in-memory (a loose file/`.dbk` opened from
+     *   the OS, or a document copied from a shared URL). Never persisted; its
+     *   provider lives in an in-memory registry (see workspace-manager). An
+     *   `origin` is present only when changes can be saved back externally.
+     */
+    type: 'indexeddb' | 'native' | 'electron-native' | 'transient';
+    /** ISO timestamp of last access. */
+    lastOpened: string;
+    /** Absolute filesystem path for 'electron-native' workspaces. */
+    rootPath?: string;
+    /** For 'transient' workspaces: where the contents came from / save back to. */
+    origin?: TransientOrigin;
+    /**
+     * Per-workspace override for the global versioning preference. When
+     * `'inherit'` (or absent), the global preference applies. `'on'` /
+     * `'off'` force the corresponding behavior regardless of the global
+     * setting. See `resolveVersioningEnabled` in the preferences module.
+     */
+    versioningOverride?: 'inherit' | 'on' | 'off';
+}
+
+/** Parse the complete persisted workspace list before it reaches startup code. */
+declare function parsePersistedWorkspaceList(value: unknown): WorkspaceDescriptor[];
+
+/**
+ * WorkspaceManager — manages the list of known workspaces in IndexedDB
+ * and provides helpers for creating / switching / removing them.
+ *
+ * The actual FileSystemProvider instances are created by the caller
+ * (since native providers need a DirectoryHandle from user interaction).
+ */
+
+/** Register a transient workspace and its (already-built) provider. */
+declare function registerTransientWorkspace(descriptor: WorkspaceDescriptor, provider: FileSystemProvider): void;
+/** Look up a transient workspace (descriptor + provider) by id, if any. */
+declare function getTransientWorkspace(id: string): {
+    descriptor: WorkspaceDescriptor;
+    provider: FileSystemProvider;
+} | null;
+/** Forget a transient workspace (e.g. when it is closed). */
+declare function unregisterTransientWorkspace(id: string): Promise<void>;
+/**
+ * Get all known workspace descriptors — persisted plus any session-only
+ * transient ones (so they show in the picker and resolve for the session).
+ */
+declare function listWorkspaces(): Promise<WorkspaceDescriptor[]>;
+/**
+ * Get a specific workspace descriptor by id (transient or persisted).
+ */
+declare function getWorkspace(id: string): Promise<WorkspaceDescriptor | null>;
+/**
+ * Add or update a workspace descriptor. If a workspace with the same id
+ * already exists, it is replaced. Transient workspaces are never persisted.
+ */
+declare function saveWorkspace(workspace: WorkspaceDescriptor): Promise<void>;
+/**
+ * Remove a workspace descriptor by id (transient or persisted).
+ */
+declare function removeWorkspace(id: string): Promise<void>;
+/**
+ * Touch the lastOpened timestamp on a workspace. For transient workspaces this
+ * updates the in-memory descriptor only (nothing is persisted).
+ */
+declare function touchWorkspace(id: string): Promise<void>;
+/**
+ * Ensure a default IndexedDB workspace exists. Called on app startup.
+ * Returns the descriptor.
+ */
+declare function ensureDefaultWorkspace(): Promise<WorkspaceDescriptor>;
+
+interface ElectronWorkspaceReconciliation {
+    /** Obsolete renderer descriptors to remove before attempting restoration. */
+    readonly removeIds: readonly string[];
+    /** Canonical main-authorized descriptors to insert or replace. */
+    readonly upsert: readonly WorkspaceDescriptor[];
+    /** Safe navigation migration for a local descriptor matched by root. */
+    readonly idRemap: Readonly<Record<string, string>>;
+}
+/**
+ * Reconcile renderer IndexedDB metadata with the main process authority list.
+ * `hostWorkspaces` is authoritative: local Electron descriptors absent from
+ * it cannot be opened safely and are removed. Root-path matching carries user
+ * metadata across an id migration without treating that display path as
+ * authority.
+ */
+declare function reconcileElectronWorkspaceDescriptors(local: readonly WorkspaceDescriptor[], hostWorkspaces: readonly ElectronWorkspaceInfo[], platform: HostEnvironment['platform'], now: string): ElectronWorkspaceReconciliation;
+
+export { type ElectronWorkspaceReconciliation, type TransientOrigin, type WorkspaceDescriptor, ensureDefaultWorkspace, getTransientWorkspace, getWorkspace, listWorkspaces, parsePersistedWorkspaceList, reconcileElectronWorkspaceDescriptors, registerTransientWorkspace, removeWorkspace, saveWorkspace, touchWorkspace, unregisterTransientWorkspace };