@bitmagic/cli 0.1.70-dev.1 → 0.1.70-dev.2

package/dist/ios/local-server.js

@@ -1,88 +1,3 @@
-/**
- * A minimal static server over the staged payload directory, for the record and offline
- * validation passes. GET only, no caching, path-traversal guarded. The MIME table is exported
- * because the Swift scheme handler (xcode-template.ts) is generated from the SAME table — the
- * validation browser and the shipped app must answer identically or the validation proves
- * nothing.
- */
-import * as fs from 'fs';
-import * as http from 'http';
-import * as path from 'path';
-/** Extension → content type, shared by this server and the generated Swift handler. */
-export const MIME_TYPES = new Map([
-    ['html', 'text/html; charset=utf-8'],
-    ['js', 'text/javascript; charset=utf-8'],
-    ['mjs', 'text/javascript; charset=utf-8'],
-    ['css', 'text/css; charset=utf-8'],
-    ['json', 'application/json'],
-    ['wasm', 'application/wasm'],
-    ['glb', 'model/gltf-binary'],
-    ['gltf', 'model/gltf+json'],
-    ['png', 'image/png'],
-    ['webp', 'image/webp'],
-    ['jpg', 'image/jpeg'],
-    ['jpeg', 'image/jpeg'],
-    ['gif', 'image/gif'],
-    ['svg', 'image/svg+xml'],
-    ['ico', 'image/png'],
-    ['opus', 'audio/ogg'],
-    ['ogg', 'audio/ogg'],
-    ['mp3', 'audio/mpeg'],
-    ['wav', 'audio/wav'],
-    ['mp4', 'video/mp4'],
-    ['webm', 'video/webm'],
-    ['txt', 'text/plain; charset=utf-8'],
-]);
-export const FALLBACK_MIME = 'application/octet-stream';
-export function mimeTypeFor(filePath) {
-    const ext = filePath.split('?')[0].split('.').pop()?.toLowerCase() ?? '';
-    return MIME_TYPES.get(ext) ?? FALLBACK_MIME;
-}
-/** Serve `dir` on an ephemeral localhost port. */
-export function startPayloadServer(dir) {
-    const rootDir = path.resolve(dir);
-    const server = http.createServer((req, res) => {
-        if (req.method !== 'GET' && req.method !== 'HEAD') {
-            res.writeHead(405).end();
-            return;
-        }
-        const requestPath = decodeURIComponent((req.url ?? '/').split('?')[0]);
-        const resolved = path.resolve(rootDir, `.${requestPath}`);
-        if (resolved !== rootDir && !resolved.startsWith(rootDir + path.sep)) {
-            res.writeHead(403).end();
-            return;
-        }
-        let filePath = resolved;
-        try {
-            if (fs.statSync(filePath).isDirectory())
-                filePath = path.join(filePath, 'index.html');
-            const bytes = fs.readFileSync(filePath);
-            res
-                .writeHead(200, { 'Content-Type': mimeTypeFor(filePath), 'Cache-Control': 'no-store' })
-                .end(req.method === 'HEAD' ? undefined : bytes);
-        }
-        catch {
-            res.writeHead(404, { 'Content-Type': 'text/plain' }).end('not found');
-        }
-    });
-    return new Promise((resolve, reject) => {
-        server.once('error', reject);
-        server.listen(0, '127.0.0.1', () => {
-            const address = server.address();
-            if (address === null || typeof address === 'string') {
-                reject(new Error('The payload server did not report a port.'));
-                return;
-            }
-            resolve({
-                port: address.port,
-                origin: `http://127.0.0.1:${address.port}`,
-                close: () => new Promise((resolveClose) => {
-                    server.close(() => resolveClose());
-                    // Sockets Chrome keeps alive would otherwise hold close() open past the command.
-                    server.closeAllConnections();
-                }),
-            });
-        });
-    });
-}
+// Compatibility entry point for the iOS packager.
+export * from '../package/local-server.js';
 //# sourceMappingURL=local-server.js.map

package/dist/ios/local-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"local-server.js","sourceRoot":"","sources":["../../src/ios/local-server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,uFAAuF;AACvF,MAAM,CAAC,MAAM,UAAU,GAAgC,IAAI,GAAG,CAAC;IAC7D,CAAC,MAAM,EAAE,0BAA0B,CAAC;IACpC,CAAC,IAAI,EAAE,gCAAgC,CAAC;IACxC,CAAC,KAAK,EAAE,gCAAgC,CAAC;IACzC,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAClC,CAAC,MAAM,EAAE,kBAAkB,CAAC;IAC5B,CAAC,MAAM,EAAE,kBAAkB,CAAC;IAC5B,CAAC,KAAK,EAAE,mBAAmB,CAAC;IAC5B,CAAC,MAAM,EAAE,iBAAiB,CAAC;IAC3B,CAAC,KAAK,EAAE,WAAW,CAAC;IACpB,CAAC,MAAM,EAAE,YAAY,CAAC;IACtB,CAAC,KAAK,EAAE,YAAY,CAAC;IACrB,CAAC,MAAM,EAAE,YAAY,CAAC;IACtB,CAAC,KAAK,EAAE,WAAW,CAAC;IACpB,CAAC,KAAK,EAAE,eAAe,CAAC;IACxB,CAAC,KAAK,EAAE,WAAW,CAAC;IACpB,CAAC,MAAM,EAAE,WAAW,CAAC;IACrB,CAAC,KAAK,EAAE,WAAW,CAAC;IACpB,CAAC,KAAK,EAAE,YAAY,CAAC;IACrB,CAAC,KAAK,EAAE,WAAW,CAAC;IACpB,CAAC,KAAK,EAAE,WAAW,CAAC;IACpB,CAAC,MAAM,EAAE,YAAY,CAAC;IACtB,CAAC,KAAK,EAAE,2BAA2B,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,0BAA0B,CAAC;AAExD,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACzE,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC;AAC9C,CAAC;AAQD,kDAAkD;AAClD,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAClD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC,CAAC;QAC1D,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,GAAG,QAAQ,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;gBAAE,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACtF,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACxC,GAAG;iBACA,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;iBACtF,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,OAAO,CAAC;gBACN,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE;gBAC1C,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,EAAE;oBACjC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;oBACnC,iFAAiF;oBACjF,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBAC/B,CAAC,CAAC;aACL,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"local-server.js","sourceRoot":"","sources":["../../src/ios/local-server.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,cAAc,4BAA4B,CAAC"}

package/dist/ios/transform.d.ts

@@ -1,47 +1,6 @@
-/**
- * The pure HTML surgery of §4d (docs/ios-export-design.md): given the pro-lane bundle, produce
- * the payload page. Two deliberately redundant mechanisms:
- *
- *  - the `bm-bundled-assets` map (original URL → relative vendor path), which the engine's own
- *    ASSET_MAP mechanism resolves through — every three.js loader plus the explicit
- *    `ASSET_MAP.get` fetch sites;
- *  - a literal rewrite of every vendored URL AND the animation base-URL constants, which fixes
- *    the sites that bypass the map (raw fetch in PlacedObjectSystem/HeightmapSystem/physics2d/
- *    splat loaders, and the StartScreen/SelectionSteps/AchievementToast DOM urls): the world
- *    data is inlined in this HTML, so rewriting the literals fixes what those sites read.
- *
- * No DOM parser — the bundle is one multi-MB HTML string and the three edits are anchored on
- * markers the scaffold's own template guarantees (`<head>`, `</head>`).
- */
-export interface TransformOptions {
-    html: string;
-    /** Original absolute URL → document-relative vendor path (`vendor/<host>/<path>`). */
-    assetMap: ReadonlyMap<string, string>;
-    /** Base-URL constant → relative base (see vendor.ts vendorBasePathFor). */
-    baseRewrites: ReadonlyMap<string, string>;
-}
-export interface TransformResult {
-    html: string;
-    /** How many URL literals were rewritten, for the build's notes. */
-    rewrites: number;
-}
+import { type TransformOptions as PackageTransformOptions, type TransformResult } from '../package/transform.js';
+export { BUNDLED_ASSETS_ID, renderAssetMapJson, rewriteUrlLiterals } from '../package/transform.js';
+export type { TransformResult } from '../package/transform.js';
 export declare const DISTRIBUTION_META = "<meta name=\"bm:distribution\" content=\"ios\">";
-export declare const BUNDLED_ASSETS_ID = "bm-bundled-assets";
-/**
- * Rewrite every occurrence of the given URLs/bases in one pass. Longest key first, so an exact
- * asset URL wins over a base that prefixes it — both rewrite into the same vendor layout, but
- * the ordering keeps the replacement deterministic.
- */
-export declare function rewriteUrlLiterals(html: string, replacements: ReadonlyMap<string, string>): {
-    html: string;
-    rewrites: number;
-};
-/** Serialize the asset map for the inline block. `<` is escaped so no URL can ever terminate
- *  the script element early — standard inline-JSON hygiene, and still valid JSON. */
-export declare function renderAssetMapJson(assetMap: ReadonlyMap<string, string>): string;
-/**
- * The full §4d transform. Throws when the bundle carries no `<head>`/`</head>` markers — that
- * is not a page this lane understands, and silently skipping the injection would ship an app
- * that fetches from the network.
- */
+export type TransformOptions = Omit<PackageTransformOptions, 'distribution'>;
 export declare function transformBundleHtml(options: TransformOptions): TransformResult;

package/dist/ios/transform.js

@@ -1,63 +1,7 @@
-/**
- * The pure HTML surgery of §4d (docs/ios-export-design.md): given the pro-lane bundle, produce
- * the payload page. Two deliberately redundant mechanisms:
- *
- *  - the `bm-bundled-assets` map (original URL → relative vendor path), which the engine's own
- *    ASSET_MAP mechanism resolves through — every three.js loader plus the explicit
- *    `ASSET_MAP.get` fetch sites;
- *  - a literal rewrite of every vendored URL AND the animation base-URL constants, which fixes
- *    the sites that bypass the map (raw fetch in PlacedObjectSystem/HeightmapSystem/physics2d/
- *    splat loaders, and the StartScreen/SelectionSteps/AchievementToast DOM urls): the world
- *    data is inlined in this HTML, so rewriting the literals fixes what those sites read.
- *
- * No DOM parser — the bundle is one multi-MB HTML string and the three edits are anchored on
- * markers the scaffold's own template guarantees (`<head>`, `</head>`).
- */
+import { transformBundleHtml as transform } from '../package/transform.js';
+export { BUNDLED_ASSETS_ID, renderAssetMapJson, rewriteUrlLiterals } from '../package/transform.js';
 export const DISTRIBUTION_META = '<meta name="bm:distribution" content="ios">';
-export const BUNDLED_ASSETS_ID = 'bm-bundled-assets';
-function escapeRegExp(value) {
-    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
-/**
- * Rewrite every occurrence of the given URLs/bases in one pass. Longest key first, so an exact
- * asset URL wins over a base that prefixes it — both rewrite into the same vendor layout, but
- * the ordering keeps the replacement deterministic.
- */
-export function rewriteUrlLiterals(html, replacements) {
-    if (replacements.size === 0)
-        return { html, rewrites: 0 };
-    const keys = [...replacements.keys()].sort((a, b) => b.length - a.length);
-    const pattern = new RegExp(keys.map(escapeRegExp).join('|'), 'g');
-    let rewrites = 0;
-    const rewritten = html.replace(pattern, (match) => {
-        rewrites += 1;
-        // The alternation only matches keys of the map, so the lookup cannot miss.
-        return replacements.get(match) ?? match;
-    });
-    return { html: rewritten, rewrites };
-}
-/** Serialize the asset map for the inline block. `<` is escaped so no URL can ever terminate
- *  the script element early — standard inline-JSON hygiene, and still valid JSON. */
-export function renderAssetMapJson(assetMap) {
-    return JSON.stringify(Object.fromEntries(assetMap)).replace(/</g, '\\u003c');
-}
-/**
- * The full §4d transform. Throws when the bundle carries no `<head>`/`</head>` markers — that
- * is not a page this lane understands, and silently skipping the injection would ship an app
- * that fetches from the network.
- */
 export function transformBundleHtml(options) {
-    const combined = new Map([...options.assetMap, ...options.baseRewrites]);
-    const { html: rewritten, rewrites } = rewriteUrlLiterals(options.html, combined);
-    if (!rewritten.includes('<head>') || !rewritten.includes('</head>')) {
-        throw new Error('The built bundle has no <head> section to inject the asset map into.');
-    }
-    const mapBlock = `<script type="application/json" id="${BUNDLED_ASSETS_ID}">`
-        + renderAssetMapJson(options.assetMap)
-        + '</script>';
-    const html = rewritten
-        .replace('<head>', `<head>\n    ${DISTRIBUTION_META}`)
-        .replace('</head>', `    ${mapBlock}\n</head>`);
-    return { html, rewrites };
+    return transform({ ...options, distribution: 'ios' });
 }
 //# sourceMappingURL=transform.js.map

package/dist/ios/transform.js.map

@@ -1 +1 @@
-{"version":3,"file":"transform.js","sourceRoot":"","sources":["../../src/ios/transform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAgBH,MAAM,CAAC,MAAM,iBAAiB,GAAG,6CAA6C,CAAC;AAC/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAErD,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,YAAyC;IAEzC,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAClE,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QAChD,QAAQ,IAAI,CAAC,CAAC;QACd,2EAA2E;QAC3E,OAAO,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED;qFACqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,QAAqC;IACtE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAC/E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAyB;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACzE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAEjF,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,QAAQ,GACZ,uCAAuC,iBAAiB,IAAI;UAC1D,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC;UACpC,WAAW,CAAC;IAEhB,MAAM,IAAI,GAAG,SAAS;SACnB,OAAO,CAAC,QAAQ,EAAE,eAAe,iBAAiB,EAAE,CAAC;SACrD,OAAO,CAAC,SAAS,EAAE,OAAO,QAAQ,WAAW,CAAC,CAAC;IAElD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"transform.js","sourceRoot":"","sources":["../../src/ios/transform.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,IAAI,SAAS,EAA0E,MAAM,yBAAyB,CAAC;AACnJ,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEpG,MAAM,CAAC,MAAM,iBAAiB,GAAG,6CAA6C,CAAC;AAE/E,MAAM,UAAU,mBAAmB,CAAC,OAAyB;IAC3D,OAAO,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;AACxD,CAAC"}

package/dist/ios/vendor.d.ts

@@ -1,29 +1 @@
-/**
- * The document-relative path a URL is vendored at, or null for a URL this lane cannot mirror
- * (unparseable, or a path that escapes the tree). The query string is dropped — asset URLs do
- * not carry meaningful queries, and a `?` cannot survive as a same-file request path anyway.
- */
-export declare function vendorPathFor(url: string): string | null;
-/** Where a BASE url's rewrite points: the same mapping, minus the appended 'index'. */
-export declare function vendorBasePathFor(baseUrl: string): string | null;
-export interface VendorFailure {
-    url: string;
-    error: string;
-}
-export interface VendorResult {
-    /** URL → document-relative vendor path, for every URL that is now on disk. */
-    entries: Map<string, string>;
-    failures: VendorFailure[];
-    /** How many came from the cache rather than the network. */
-    cacheHits: number;
-}
-export interface VendorOptions {
-    urls: Iterable<string>;
-    cacheDir: string;
-    payloadDir: string;
-    fetchImpl?: typeof globalThis.fetch;
-    log?: (message: string) => void;
-    concurrency?: number;
-}
-/** Download (or copy from cache) every URL into the payload's vendor tree. */
-export declare function vendorUrls(options: VendorOptions): Promise<VendorResult>;
+export * from '../package/vendor.js';

package/dist/ios/vendor.js

@@ -1,113 +1,3 @@
-/**
- * Mirror remote assets into the payload's `vendor/` tree.
- *
- * The layout preserves `<host>/<pathname>` so that rewriting a BASE url in the bundle (see
- * transform.ts) makes runtime-constructed `${base}/${file}` URLs land on the mirrored file —
- * exact-URL map entries alone could never cover those.
- *
- * Downloads are cached under `.bitmagic/ios/cache` keyed by URL hash: generated-asset URLs are
- * immutable in practice (uuid/content-addressed paths), and a rebuild should not re-download a
- * hundred GLBs. Bytes are stored post-Content-Encoding (node fetch inflates); the engine's
- * gzip-sniffing loaders accept raw bytes unchanged (fetchVwld.ts).
- */
-import { createHash } from 'crypto';
-import * as fs from 'fs';
-import * as path from 'path';
-/**
- * The document-relative path a URL is vendored at, or null for a URL this lane cannot mirror
- * (unparseable, or a path that escapes the tree). The query string is dropped — asset URLs do
- * not carry meaningful queries, and a `?` cannot survive as a same-file request path anyway.
- */
-export function vendorPathFor(url) {
-    let parsed;
-    try {
-        parsed = new URL(url);
-    }
-    catch {
-        return null;
-    }
-    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
-        return null;
-    let pathname = parsed.pathname;
-    if (pathname.endsWith('/') || pathname === '')
-        pathname += 'index';
-    const segments = [];
-    for (const rawSegment of pathname.split('/')) {
-        if (rawSegment === '')
-            continue;
-        let segment;
-        try {
-            segment = decodeURIComponent(rawSegment);
-        }
-        catch {
-            segment = rawSegment;
-        }
-        if (segment === '.' || segment === '..')
-            return null;
-        segments.push(segment);
-    }
-    if (segments.length === 0)
-        return null;
-    return ['vendor', parsed.host, ...segments].join('/');
-}
-/** Where a BASE url's rewrite points: the same mapping, minus the appended 'index'. */
-export function vendorBasePathFor(baseUrl) {
-    const mapped = vendorPathFor(baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`);
-    if (mapped === null)
-        return null;
-    return mapped.replace(/\/index$/, '');
-}
-function cacheFileFor(cacheDir, url) {
-    return path.join(cacheDir, createHash('sha256').update(url).digest('hex'));
-}
-/** Download (or copy from cache) every URL into the payload's vendor tree. */
-export async function vendorUrls(options) {
-    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
-    const log = options.log ?? (() => { });
-    const entries = new Map();
-    const failures = [];
-    let cacheHits = 0;
-    fs.mkdirSync(options.cacheDir, { recursive: true });
-    const queue = [...new Set(options.urls)];
-    const worker = async () => {
-        for (;;) {
-            const url = queue.shift();
-            if (url === undefined)
-                return;
-            const relPath = vendorPathFor(url);
-            if (relPath === null) {
-                failures.push({ url, error: 'not a vendorable URL' });
-                continue;
-            }
-            const cacheFile = cacheFileFor(options.cacheDir, url);
-            try {
-                if (fs.existsSync(cacheFile)) {
-                    cacheHits += 1;
-                }
-                else {
-                    const response = await fetchImpl(url);
-                    if (!response.ok)
-                        throw new Error(`HTTP ${response.status}`);
-                    const bytes = Buffer.from(await response.arrayBuffer());
-                    // Write-then-rename so a crashed download never leaves a truncated cache entry that
-                    // every later build would trust.
-                    const tmp = `${cacheFile}.tmp-${process.pid}`;
-                    fs.writeFileSync(tmp, bytes);
-                    fs.renameSync(tmp, cacheFile);
-                    log(`  fetched ${url} (${bytes.byteLength} bytes)`);
-                }
-                const target = path.join(options.payloadDir, ...relPath.split('/'));
-                fs.mkdirSync(path.dirname(target), { recursive: true });
-                fs.copyFileSync(cacheFile, target);
-                entries.set(url, relPath);
-            }
-            catch (error) {
-                failures.push({ url, error: error instanceof Error ? error.message : String(error) });
-            }
-        }
-    };
-    const width = Math.max(1, Math.min(options.concurrency ?? 6, queue.length));
-    await Promise.all(Array.from({ length: width }, worker));
-    return { entries, failures, cacheHits };
-}
+// Compatibility entry point for the iOS packager.
+export * from '../package/vendor.js';
 //# sourceMappingURL=vendor.js.map

package/dist/ios/vendor.js.map

@@ -1 +1 @@
-{"version":3,"file":"vendor.js","sourceRoot":"","sources":["../../src/ios/vendor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE7E,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC/B,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,EAAE;QAAE,QAAQ,IAAI,OAAO,CAAC;IAEnE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,IAAI,UAAU,KAAK,EAAE;YAAE,SAAS;QAChC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,UAAU,CAAC;QACvB,CAAC;QACD,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;IAC9E,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAwBD,SAAS,YAAY,CAAC,QAAgB,EAAE,GAAW;IACjD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAsB;IACrD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;QACvC,SAAS,CAAC;YACR,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO;YAC9B,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACtD,SAAS;YACX,CAAC;YACD,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACtD,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC7B,SAAS,IAAI,CAAC,CAAC;gBACjB,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;oBACtC,IAAI,CAAC,QAAQ,CAAC,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;oBACxD,oFAAoF;oBACpF,iCAAiC;oBACjC,MAAM,GAAG,GAAG,GAAG,SAAS,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;oBAC9C,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBAC7B,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;oBAC9B,GAAG,CAAC,aAAa,GAAG,KAAK,KAAK,CAAC,UAAU,SAAS,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBACpE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxD,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAEzD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"vendor.js","sourceRoot":"","sources":["../../src/ios/vendor.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,cAAc,sBAAsB,CAAC"}

package/dist/package/collect-urls.d.ts

@@ -0,0 +1,75 @@
+export interface CollectedUrls {
+    /** Every absolute URL to vendor. */
+    urls: Set<string>;
+    /**
+     * Base-URL constants the engine concatenates file names onto (`${base}/${file}`). Rewriting
+     * these in the bundle makes runtime-constructed URLs resolve into the mirrored vendor tree,
+     * which no exact-URL map entry could cover.
+     */
+    bases: Set<string>;
+    /** Creator-facing lines about what was (or could not be) collected. */
+    notes: string[];
+}
+/** Walk any JSON value, collecting remote-URL strings outside the deny-listed fields. */
+export declare function deepWalkUrls(value: unknown, out: Set<string>): void;
+/** The same compiled-code .glb scan the standalone lane runs, over the pro project's dist. */
+export declare function scanCompiledCodeUrls(compiledCode: string): Set<string>;
+/** All compiled game JS under dist/src/work, concatenated — for reference scans. */
+export declare function readCompiledGameCode(root: string): string;
+interface AnimationEntry {
+    file: string;
+    /** Absolute URL overriding `<base>/<file>` — the capture-backed default locomotion uses it. */
+    url?: string;
+    motionId: string;
+}
+interface WeaponAnimationEntry {
+    url: string;
+    motionId: string;
+}
+/** The shape of `animationAssets` this collector relies on — structural, checked at runtime. */
+export interface AnimationAssetsData {
+    activeLibrary: 'cdn' | 'generated';
+    animationBaseUrl: string;
+    generatedAnimationBaseUrl: string;
+    animalBaseUrl: string;
+    voxelAnimalBaseUrl: string;
+    voxelFishBaseUrl: string;
+    characterUrls: {
+        default: string;
+        defaultFallback: string;
+    };
+    coreAnimations: AnimationEntry[];
+    generatedAnimations: AnimationEntry[];
+    meleeWeaponAnimations: WeaponAnimationEntry[];
+    generatedMeleeWeaponAnimations: AnimationEntry[];
+    generatedRangedWeaponAnimations: AnimationEntry[];
+    generatedDirectionalAnimations: AnimationEntry[];
+    generatedPostureAnimations: AnimationEntry[];
+    animalSkeletons: Record<string, string>;
+}
+/**
+ * Import the vendored engine's compiled AnimationAssets — a pure data module with no imports,
+ * which is what makes this safe from plain node. Null (with the caller noting it) when the
+ * engine predates the module or the shape moved: the record pass still catches whatever the
+ * running game actually fetches.
+ */
+export declare function loadAnimationAssets(root: string): Promise<AnimationAssetsData | null>;
+interface WorldDataShape {
+    worldProfileData?: {
+        hasPlayerCharacter?: unknown;
+        animals?: unknown;
+    };
+}
+/**
+ * The built-in animation URLs this game can load. The ACTIVE library ships whole — its optional
+ * packs (melee/ranged/directional/posture) are loaded on demand by engine systems whose names
+ * game code never contains, so reference-scanning cannot bound them. The inactive library ships
+ * only clips the compiled game code names (`getBuiltinAnimationDef` resolves ids from either).
+ */
+export declare function collectAnimationUrls(assets: AnimationAssetsData, worldData: WorldDataShape, compiledCode: string): {
+    urls: Set<string>;
+    bases: Set<string>;
+};
+/** The full §4b collection: deep walk + compiled-code scan + built-in animation surface. */
+export declare function collectUrls(root: string): Promise<CollectedUrls>;
+export {};