@character-foundry/character-foundry 0.1.5 → 0.1.6

package/dist/index.js

@@ -226,10 +226,14 @@ function alloc(size) {
   return new Uint8Array(size);
 }
 var isNode = typeof process !== "undefined" && process.versions != null && process.versions.node != null;
+var LARGE_BUFFER_THRESHOLD = 1024 * 1024;
 function encode(data) {
   if (isNode) {
     return Buffer.from(data).toString("base64");
   }
+  if (data.length > LARGE_BUFFER_THRESHOLD) {
+    return encodeChunked(data);
+  }
   let binary = "";
   for (let i = 0; i < data.length; i++) {
     binary += String.fromCharCode(data[i]);
@@ -248,6 +252,21 @@ function decode(base64) {
   return result;
 }
 var ENCODE_CHUNK_SIZE = 64 * 1024;
+function encodeChunked(data) {
+  if (isNode) {
+    return Buffer.from(data).toString("base64");
+  }
+  const chunks = [];
+  for (let i = 0; i < data.length; i += ENCODE_CHUNK_SIZE) {
+    const chunk = data.subarray(i, Math.min(i + ENCODE_CHUNK_SIZE, data.length));
+    let binary = "";
+    for (let j = 0; j < chunk.length; j++) {
+      binary += String.fromCharCode(chunk[j]);
+    }
+    chunks.push(binary);
+  }
+  return btoa(chunks.join(""));
+}
 var FOUNDRY_ERROR_MARKER = /* @__PURE__ */ Symbol.for("@character-foundry/core:FoundryError");
 var FoundryError = class extends Error {
   constructor(message, code) {
@@ -1287,12 +1306,69 @@ function matchAssetsToDescriptors(extractedAssets, descriptors) {
   }
   return matched;
 }
+var SAFE_ASSET_TYPES = /* @__PURE__ */ new Set([
+  "icon",
+  "user_icon",
+  "emotion",
+  "background",
+  "sound",
+  "video",
+  "custom",
+  "x-risu-asset",
+  "data",
+  "unknown"
+]);
+var SAFE_EXTENSIONS = /* @__PURE__ */ new Set([
+  // Images
+  "png",
+  "jpg",
+  "jpeg",
+  "webp",
+  "gif",
+  "avif",
+  "svg",
+  "bmp",
+  "ico",
+  // Audio
+  "mp3",
+  "wav",
+  "ogg",
+  "flac",
+  "m4a",
+  "aac",
+  "opus",
+  // Video
+  "mp4",
+  "webm",
+  "avi",
+  "mov",
+  "mkv",
+  // Data
+  "json",
+  "txt",
+  "bin"
+]);
 function getCharxCategory(mimetype) {
   if (mimetype.startsWith("image/")) return "images";
   if (mimetype.startsWith("audio/")) return "audio";
   if (mimetype.startsWith("video/")) return "video";
   return "other";
 }
+function sanitizeAssetType(type) {
+  const normalized = type.toLowerCase().replace(/[^a-z0-9-_]/g, "-");
+  if (SAFE_ASSET_TYPES.has(normalized)) {
+    return normalized;
+  }
+  const sanitized = normalized.replace(/[^a-z0-9]/g, "");
+  return sanitized || "custom";
+}
+function sanitizeExtension(ext) {
+  const normalized = ext.replace(/^\./, "").toLowerCase().replace(/[^a-z0-9]/g, "");
+  if (SAFE_EXTENSIONS.has(normalized)) {
+    return normalized;
+  }
+  return "bin";
+}
 function sanitizeName(name, ext) {
   let safeName = name;
   if (safeName.toLowerCase().endsWith(`.${ext.toLowerCase()}`)) {
@@ -1326,10 +1402,12 @@ Import this file into SillyTavern, RisuAI, or other compatible applications.
   let assetCount = 0;
   for (let i = 0; i < assets.length; i++) {
     const asset = assets[i];
-    const mimetype = getMimeTypeFromExt(asset.ext);
+    const safeType = sanitizeAssetType(asset.type);
+    const safeExt = sanitizeExtension(asset.ext);
+    const mimetype = getMimeTypeFromExt(safeExt);
     const category = getCharxCategory(mimetype);
-    const safeName = sanitizeName(asset.name, asset.ext);
-    const assetPath = `assets/${asset.type}/${category}/${safeName}.${asset.ext}`;
+    const safeName = sanitizeName(asset.name, safeExt);
+    const assetPath = `assets/${safeType}/${category}/${safeName}.${safeExt}`;
     zipEntries[assetPath] = [asset.data, { level: compressionLevel }];
     assetCount++;
     if (emitXMeta && mimetype.startsWith("image/")) {
@@ -1350,16 +1428,18 @@ Import this file into SillyTavern, RisuAI, or other compatible applications.
   };
 }
 function transformAssetUris(card, assets) {
-  const transformed = JSON.parse(JSON.stringify(card));
+  const transformed = typeof structuredClone === "function" ? structuredClone(card) : JSON.parse(JSON.stringify(card));
   transformed.data.assets = assets.map((asset) => {
-    const mimetype = getMimeTypeFromExt(asset.ext);
+    const safeType = sanitizeAssetType(asset.type);
+    const safeExt = sanitizeExtension(asset.ext);
+    const mimetype = getMimeTypeFromExt(safeExt);
     const category = getCharxCategory(mimetype);
-    const safeName = sanitizeName(asset.name, asset.ext);
+    const safeName = sanitizeName(asset.name, safeExt);
     return {
       type: asset.type,
-      uri: `embeded://assets/${asset.type}/${category}/${safeName}.${asset.ext}`,
+      uri: `embeded://assets/${safeType}/${category}/${safeName}.${safeExt}`,
       name: safeName,
-      ext: asset.ext
+      ext: safeExt
     };
   });
   return transformed;
@@ -7686,7 +7766,7 @@ function getExtension(format) {
 }
 
 // ../voxta/dist/index.js
-import { unzipSync, zipSync as zipSync22 } from "fflate";
+import { zipSync as zipSync22 } from "fflate";
 var DEFAULT_OPTIONS2 = {
   maxFileSize: 50 * 1024 * 1024,
   // 50MB
@@ -8450,8 +8530,16 @@ function detectExtension(buffer) {
   if (buffer[0] === 73 && buffer[1] === 68 && buffer[2] === 51) {
     return "mp3";
   }
-  if (buffer.length > 1 && buffer[0] === 255 && (buffer[1] & 224) === 224) {
-    return "mp3";
+  if (buffer.length >= 4 && buffer[0] === 255 && (buffer[1] & 224) === 224) {
+    const byte2 = buffer[1];
+    const byte3 = buffer[2];
+    const version = byte2 >> 3 & 3;
+    const layer = byte2 >> 1 & 3;
+    const bitrateIndex = byte3 >> 4 & 15;
+    const sampleRate = byte3 >> 2 & 3;
+    if (version !== 1 && layer !== 0 && bitrateIndex !== 15 && sampleRate !== 3) {
+      return "mp3";
+    }
   }
   if (buffer.length >= 12 && buffer[0] === 82 && buffer[1] === 73 && buffer[2] === 70 && buffer[3] === 70 && buffer[8] === 87 && buffer[9] === 65 && buffer[10] === 86 && buffer[11] === 69) {
     return "wav";
@@ -8485,6 +8573,17 @@ function parsePng(data, options) {
   }];
   if (extracted.extraChunks && options.extractAssets && card.data.assets) {
     const usedChunks = /* @__PURE__ */ new Set();
+    const chunkMap = /* @__PURE__ */ new Map();
+    for (const chunk of extracted.extraChunks) {
+      chunkMap.set(chunk.keyword, chunk);
+      if (chunk.keyword.startsWith("chara-ext-asset_")) {
+        const suffix = chunk.keyword.replace("chara-ext-asset_", "");
+        chunkMap.set(suffix, chunk);
+        if (suffix.startsWith(":")) {
+          chunkMap.set(suffix.substring(1), chunk);
+        }
+      }
+    }
     for (const descriptor of card.data.assets) {
       if (!descriptor.uri) continue;
       if (descriptor.uri.startsWith("__asset:") || descriptor.uri.startsWith("asset:") || descriptor.uri.startsWith("pngchunk:") || !descriptor.uri.includes(":")) {
@@ -8508,13 +8607,11 @@ function parsePng(data, options) {
           `chara-ext-asset_:${assetId}`
           // "chara-ext-asset_:0"
         ];
-        const chunk = extracted.extraChunks.find((c) => candidates.includes(c.keyword)) || extracted.extraChunks.find((c) => {
-          if (c.keyword.startsWith("chara-ext-asset_")) {
-            const suffix = c.keyword.replace("chara-ext-asset_", "");
-            return suffix === assetId || suffix === `:${assetId}` || suffix === descriptor.uri;
-          }
-          return false;
-        });
+        let chunk;
+        for (const candidate of candidates) {
+          chunk = chunkMap.get(candidate);
+          if (chunk) break;
+        }
         if (chunk) {
           try {
             const estimatedSize = estimateBase64DecodedSize(chunk.text.length);
@@ -8716,6 +8813,9 @@ function parseVoxta(data, options) {
   };
 }
 function parseJson(data, options) {
+  if (data.length > options.maxFileSize) {
+    throw new SizeLimitError(data.length, options.maxFileSize, "JSON file");
+  }
   let jsonStr;
   try {
     jsonStr = toString(data);
@@ -8734,6 +8834,9 @@ function parseJson(data, options) {
       "json"
     );
   }
+  return parseJsonFromParsed(parsed, jsonStr, data, options);
+}
+function parseJsonFromParsed(parsed, jsonStr, rawBuffer, options) {
   const spec = detectSpec(parsed);
   let card;
   let sourceFormat;
@@ -8758,7 +8861,7 @@ function parseJson(data, options) {
     sourceFormat,
     originalShape: parsed,
     rawJson: jsonStr,
-    rawBuffer: data
+    rawBuffer
   };
 }
 function parseCard(data, options = {}) {
@@ -8784,6 +8887,7 @@ function parseCard(data, options = {}) {
 async function parseCardAsync(data, options = {}) {
   return parseCard(data, options);
 }
+var DEFAULT_MAX_LOREBOOK_SIZE = 10 * 1024 * 1024;
 
 // ../exporter/dist/index.js
 function checkPngLoss(card, assets) {