@character-foundry/character-foundry 0.4.2 → 0.4.3-dev.1766103111

package/dist/voxta.cjs

@@ -6613,6 +6613,58 @@ var import_zod = require("zod");
 var import_zod2 = require("zod");
 var import_zod3 = require("zod");
 var import_zod4 = require("zod");
+function preprocessTimestamp(val) {
+  if (val === null || val === void 0) return void 0;
+  let num;
+  if (typeof val === "number") {
+    num = val;
+  } else if (typeof val === "string") {
+    const trimmed = val.trim();
+    if (!trimmed) return void 0;
+    const parsed = Number(trimmed);
+    if (!isNaN(parsed)) {
+      num = parsed;
+    } else {
+      const date = new Date(trimmed);
+      if (isNaN(date.getTime())) return void 0;
+      num = Math.floor(date.getTime() / 1e3);
+    }
+  } else {
+    return void 0;
+  }
+  if (num > 1e10) {
+    num = Math.floor(num / 1e3);
+  }
+  if (num < 0) return void 0;
+  return num;
+}
+function preprocessNumeric(val) {
+  if (val === null || val === void 0) return void 0;
+  if (typeof val === "number") {
+    return isNaN(val) ? void 0 : val;
+  }
+  if (typeof val === "string") {
+    const trimmed = val.trim();
+    if (!trimmed) return void 0;
+    const parsed = Number(trimmed);
+    return isNaN(parsed) ? void 0 : parsed;
+  }
+  return void 0;
+}
+var KNOWN_ASSET_TYPES = /* @__PURE__ */ new Set([
+  "icon",
+  "background",
+  "emotion",
+  "user_icon",
+  "sound",
+  "video",
+  "custom",
+  "x-risu-asset"
+]);
+function preprocessAssetType(val) {
+  if (typeof val !== "string") return "custom";
+  return KNOWN_ASSET_TYPES.has(val) ? val : "custom";
+}
 var ISO8601Schema = import_zod.z.string().datetime();
 var UUIDSchema = import_zod.z.string().uuid();
 var SpecSchema = import_zod.z.enum(["v2", "v3"]);
@@ -6635,16 +6687,19 @@ var SourceFormatSchema = import_zod.z.enum([
   // VoxPkg format
 ]);
 var OriginalShapeSchema = import_zod.z.enum(["wrapped", "unwrapped", "legacy"]);
-var AssetTypeSchema = import_zod.z.enum([
-  "icon",
-  "background",
-  "emotion",
-  "user_icon",
-  "sound",
-  "video",
-  "custom",
-  "x-risu-asset"
-]);
+var AssetTypeSchema = import_zod.z.preprocess(
+  preprocessAssetType,
+  import_zod.z.enum([
+    "icon",
+    "background",
+    "emotion",
+    "user_icon",
+    "sound",
+    "video",
+    "custom",
+    "x-risu-asset"
+  ])
+);
 var AssetDescriptorSchema = import_zod.z.object({
   type: AssetTypeSchema,
   uri: import_zod.z.string(),
@@ -6673,13 +6728,13 @@ var CCv2LorebookEntrySchema = import_zod2.z.object({
   selective: import_zod2.z.boolean().nullable().optional(),
   secondary_keys: import_zod2.z.array(import_zod2.z.string()).nullable().optional(),
   constant: import_zod2.z.boolean().nullable().optional(),
-  position: import_zod2.z.union([import_zod2.z.enum(["before_char", "after_char"]), import_zod2.z.number().int(), import_zod2.z.literal("")]).nullable().optional()
+  position: import_zod2.z.union([import_zod2.z.enum(["before_char", "after_char", "in_chat"]), import_zod2.z.number().int(), import_zod2.z.literal("")]).nullable().optional()
 }).passthrough();
 var CCv2CharacterBookSchema = import_zod2.z.object({
   name: import_zod2.z.string().optional(),
   description: import_zod2.z.string().optional(),
-  scan_depth: import_zod2.z.number().int().nonnegative().optional(),
-  token_budget: import_zod2.z.number().int().nonnegative().optional(),
+  scan_depth: import_zod2.z.preprocess(preprocessNumeric, import_zod2.z.number().int().nonnegative().optional()),
+  token_budget: import_zod2.z.preprocess(preprocessNumeric, import_zod2.z.number().int().nonnegative().optional()),
   recursive_scanning: import_zod2.z.boolean().optional(),
   extensions: import_zod2.z.record(import_zod2.z.unknown()).optional(),
   entries: import_zod2.z.array(CCv2LorebookEntrySchema)
@@ -6726,7 +6781,7 @@ var CCv3LorebookEntrySchema = import_zod3.z.object({
   selective: import_zod3.z.boolean().nullable().optional(),
   secondary_keys: import_zod3.z.array(import_zod3.z.string()).nullable().optional(),
   constant: import_zod3.z.boolean().nullable().optional(),
-  position: import_zod3.z.union([import_zod3.z.enum(["before_char", "after_char"]), import_zod3.z.number().int(), import_zod3.z.literal("")]).nullable().optional(),
+  position: import_zod3.z.union([import_zod3.z.enum(["before_char", "after_char", "in_chat"]), import_zod3.z.number().int(), import_zod3.z.literal("")]).nullable().optional(),
   extensions: import_zod3.z.record(import_zod3.z.unknown()).optional(),
   // v3 specific - also lenient with types since SillyTavern uses numbers for enums
   automation_id: import_zod3.z.string().optional(),
@@ -6742,8 +6797,8 @@ var CCv3LorebookEntrySchema = import_zod3.z.object({
 var CCv3CharacterBookSchema = import_zod3.z.object({
   name: import_zod3.z.string().optional(),
   description: import_zod3.z.string().optional(),
-  scan_depth: import_zod3.z.number().int().nonnegative().optional(),
-  token_budget: import_zod3.z.number().int().nonnegative().optional(),
+  scan_depth: import_zod3.z.preprocess(preprocessNumeric, import_zod3.z.number().int().nonnegative().optional()),
+  token_budget: import_zod3.z.preprocess(preprocessNumeric, import_zod3.z.number().int().nonnegative().optional()),
   recursive_scanning: import_zod3.z.boolean().optional(),
   extensions: import_zod3.z.record(import_zod3.z.unknown()).optional(),
   entries: import_zod3.z.array(CCv3LorebookEntrySchema)
@@ -6775,10 +6830,9 @@ var CCv3DataInnerSchema = import_zod3.z.object({
   nickname: import_zod3.z.string().optional(),
   creator_notes_multilingual: import_zod3.z.record(import_zod3.z.string()).optional(),
   source: import_zod3.z.array(import_zod3.z.string()).optional(),
-  creation_date: import_zod3.z.number().int().nonnegative().optional(),
-  // Unix timestamp in seconds
-  modification_date: import_zod3.z.number().int().nonnegative().optional()
-  // Unix timestamp in seconds
+  // Unix timestamps - preprocess to handle ISO strings, numeric strings, milliseconds
+  creation_date: import_zod3.z.preprocess(preprocessTimestamp, import_zod3.z.number().int().nonnegative().optional()),
+  modification_date: import_zod3.z.preprocess(preprocessTimestamp, import_zod3.z.number().int().nonnegative().optional())
 });
 var CCv3DataSchema = import_zod3.z.object({
   spec: import_zod3.z.literal("chara_card_v3"),
@@ -7252,6 +7306,22 @@ function sanitizeName(name, ext) {
   if (!safeName) safeName = "asset";
   return safeName;
 }
+function sanitizeExtension(ext) {
+  const normalized = ext.trim().replace(/^\./, "").toLowerCase();
+  if (!normalized) {
+    throw new Error("Invalid asset extension: empty extension");
+  }
+  if (normalized.length > 64) {
+    throw new Error(`Invalid asset extension: too long (${normalized.length} chars)`);
+  }
+  if (normalized.includes("/") || normalized.includes("\\") || normalized.includes("\0")) {
+    throw new Error("Invalid asset extension: path separators are not allowed");
+  }
+  if (!/^[a-z0-9][a-z0-9._-]*$/.test(normalized)) {
+    throw new Error(`Invalid asset extension: "${ext}"`);
+  }
+  return normalized;
+}
 function writeVoxta(card, assets, options = {}) {
   const { compressionLevel = 6, includePackageJson = false } = options;
   const cardData = card.data;
@@ -7340,8 +7410,9 @@ function writeVoxta(card, assets, options = {}) {
   let assetCount = 0;
   let mainThumbnail;
   for (const asset of assets) {
-    const safeName = sanitizeName(asset.name, asset.ext);
-    const finalFilename = `${safeName}.${asset.ext}`;
+    const safeExt = sanitizeExtension(asset.ext);
+    const safeName = sanitizeName(asset.name, safeExt);
+    const finalFilename = `${safeName}.${safeExt}`;
     let voxtaPath = "";
     const tags = asset.tags || [];
     const isMainIcon = asset.type === "icon" && (tags.includes("portrait-override") || asset.name === "main" || asset.isMain);