@character-foundry/character-foundry 0.4.3 → 0.5.0

package/dist/index.d.cts

@@ -13,8 +13,8 @@ export type BinaryData = Uint8Array;
 declare const CCv3CharacterBookSchema: z.ZodObject<{
 	name: z.ZodOptional<z.ZodString>;
 	description: z.ZodOptional<z.ZodString>;
-	scan_depth: z.ZodOptional<z.ZodNumber>;
-	token_budget: z.ZodOptional<z.ZodNumber>;
+	scan_depth: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
+	token_budget: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
 	recursive_scanning: z.ZodOptional<z.ZodBoolean>;
 	extensions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 	entries: z.ZodArray<z.ZodObject<{
@@ -250,8 +250,8 @@ declare const CCv3CharacterBookSchema: z.ZodObject<{
 	}, z.ZodTypeAny, "passthrough">[];
 	name?: string | undefined;
 	description?: string | undefined;
-	scan_depth?: number | undefined;
-	token_budget?: number | undefined;
+	scan_depth?: unknown;
+	token_budget?: unknown;
 	recursive_scanning?: boolean | undefined;
 	extensions?: Record<string, unknown> | undefined;
 }>;
@@ -276,8 +276,8 @@ declare const CCv3DataSchema: z.ZodObject<{
 		character_book: z.ZodNullable<z.ZodOptional<z.ZodObject<{
 			name: z.ZodOptional<z.ZodString>;
 			description: z.ZodOptional<z.ZodString>;
-			scan_depth: z.ZodOptional<z.ZodNumber>;
-			token_budget: z.ZodOptional<z.ZodNumber>;
+			scan_depth: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
+			token_budget: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
 			recursive_scanning: z.ZodOptional<z.ZodBoolean>;
 			extensions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 			entries: z.ZodArray<z.ZodObject<{
@@ -513,14 +513,14 @@ declare const CCv3DataSchema: z.ZodObject<{
 			}, z.ZodTypeAny, "passthrough">[];
 			name?: string | undefined;
 			description?: string | undefined;
-			scan_depth?: number | undefined;
-			token_budget?: number | undefined;
+			scan_depth?: unknown;
+			token_budget?: unknown;
 			recursive_scanning?: boolean | undefined;
 			extensions?: Record<string, unknown> | undefined;
 		}>>>;
 		extensions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 		assets: z.ZodOptional<z.ZodArray<z.ZodObject<{
-			type: z.ZodEnum<[
+			type: z.ZodEffects<z.ZodEnum<[
 				"icon",
 				"background",
 				"emotion",
@@ -529,7 +529,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				"video",
 				"custom",
 				"x-risu-asset"
-			]>;
+			]>, "custom" | "icon" | "background" | "emotion" | "user_icon" | "sound" | "video" | "x-risu-asset", unknown>;
 			uri: z.ZodString;
 			name: z.ZodString;
 			ext: z.ZodString;
@@ -540,15 +540,15 @@ declare const CCv3DataSchema: z.ZodObject<{
 			ext: string;
 		}, {
 			name: string;
-			type: "custom" | "icon" | "background" | "emotion" | "user_icon" | "sound" | "video" | "x-risu-asset";
 			uri: string;
 			ext: string;
+			type?: unknown;
 		}>, "many">>;
 		nickname: z.ZodOptional<z.ZodString>;
 		creator_notes_multilingual: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 		source: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-		creation_date: z.ZodOptional<z.ZodNumber>;
-		modification_date: z.ZodOptional<z.ZodNumber>;
+		creation_date: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
+		modification_date: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
 	}, "strip", z.ZodTypeAny, {
 		name: string;
 		description: string;
@@ -689,8 +689,8 @@ declare const CCv3DataSchema: z.ZodObject<{
 			}, z.ZodTypeAny, "passthrough">[];
 			name?: string | undefined;
 			description?: string | undefined;
-			scan_depth?: number | undefined;
-			token_budget?: number | undefined;
+			scan_depth?: unknown;
+			token_budget?: unknown;
 			recursive_scanning?: boolean | undefined;
 			extensions?: Record<string, unknown> | undefined;
 		} | null | undefined;
@@ -700,15 +700,15 @@ declare const CCv3DataSchema: z.ZodObject<{
 		group_only_greetings?: string[] | undefined;
 		assets?: {
 			name: string;
-			type: "custom" | "icon" | "background" | "emotion" | "user_icon" | "sound" | "video" | "x-risu-asset";
 			uri: string;
 			ext: string;
+			type?: unknown;
 		}[] | undefined;
 		nickname?: string | undefined;
 		creator_notes_multilingual?: Record<string, string> | undefined;
 		source?: string[] | undefined;
-		creation_date?: number | undefined;
-		modification_date?: number | undefined;
+		creation_date?: unknown;
+		modification_date?: unknown;
 	}>;
 }, "strip", z.ZodTypeAny, {
 	data: {
@@ -855,8 +855,8 @@ declare const CCv3DataSchema: z.ZodObject<{
 			}, z.ZodTypeAny, "passthrough">[];
 			name?: string | undefined;
 			description?: string | undefined;
-			scan_depth?: number | undefined;
-			token_budget?: number | undefined;
+			scan_depth?: unknown;
+			token_budget?: unknown;
 			recursive_scanning?: boolean | undefined;
 			extensions?: Record<string, unknown> | undefined;
 		} | null | undefined;
@@ -866,15 +866,15 @@ declare const CCv3DataSchema: z.ZodObject<{
 		group_only_greetings?: string[] | undefined;
 		assets?: {
 			name: string;
-			type: "custom" | "icon" | "background" | "emotion" | "user_icon" | "sound" | "video" | "x-risu-asset";
 			uri: string;
 			ext: string;
+			type?: unknown;
 		}[] | undefined;
 		nickname?: string | undefined;
 		creator_notes_multilingual?: Record<string, string> | undefined;
 		source?: string[] | undefined;
-		creation_date?: number | undefined;
-		modification_date?: number | undefined;
+		creation_date?: unknown;
+		modification_date?: unknown;
 	};
 	spec: "chara_card_v3";
 	spec_version: "3.0";
@@ -923,8 +923,8 @@ declare const CCv2DataSchema: z.ZodObject<{
 	character_book: z.ZodNullable<z.ZodOptional<z.ZodObject<{
 		name: z.ZodOptional<z.ZodString>;
 		description: z.ZodOptional<z.ZodString>;
-		scan_depth: z.ZodOptional<z.ZodNumber>;
-		token_budget: z.ZodOptional<z.ZodNumber>;
+		scan_depth: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
+		token_budget: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
 		recursive_scanning: z.ZodOptional<z.ZodBoolean>;
 		extensions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 		entries: z.ZodArray<z.ZodObject<{
@@ -1055,8 +1055,8 @@ declare const CCv2DataSchema: z.ZodObject<{
 		}, z.ZodTypeAny, "passthrough">[];
 		name?: string | undefined;
 		description?: string | undefined;
-		scan_depth?: number | undefined;
-		token_budget?: number | undefined;
+		scan_depth?: unknown;
+		token_budget?: unknown;
 		recursive_scanning?: boolean | undefined;
 		extensions?: Record<string, unknown> | undefined;
 	}>>>;
@@ -1150,8 +1150,8 @@ declare const CCv2DataSchema: z.ZodObject<{
 		}, z.ZodTypeAny, "passthrough">[];
 		name?: string | undefined;
 		description?: string | undefined;
-		scan_depth?: number | undefined;
-		token_budget?: number | undefined;
+		scan_depth?: unknown;
+		token_budget?: unknown;
 		recursive_scanning?: boolean | undefined;
 		extensions?: Record<string, unknown> | undefined;
 	} | null | undefined;

package/dist/index.d.ts

@@ -13,8 +13,8 @@ export type BinaryData = Uint8Array;
 declare const CCv3CharacterBookSchema: z.ZodObject<{
 	name: z.ZodOptional<z.ZodString>;
 	description: z.ZodOptional<z.ZodString>;
-	scan_depth: z.ZodOptional<z.ZodNumber>;
-	token_budget: z.ZodOptional<z.ZodNumber>;
+	scan_depth: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
+	token_budget: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
 	recursive_scanning: z.ZodOptional<z.ZodBoolean>;
 	extensions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 	entries: z.ZodArray<z.ZodObject<{
@@ -250,8 +250,8 @@ declare const CCv3CharacterBookSchema: z.ZodObject<{
 	}, z.ZodTypeAny, "passthrough">[];
 	name?: string | undefined;
 	description?: string | undefined;
-	scan_depth?: number | undefined;
-	token_budget?: number | undefined;
+	scan_depth?: unknown;
+	token_budget?: unknown;
 	recursive_scanning?: boolean | undefined;
 	extensions?: Record<string, unknown> | undefined;
 }>;
@@ -276,8 +276,8 @@ declare const CCv3DataSchema: z.ZodObject<{
 		character_book: z.ZodNullable<z.ZodOptional<z.ZodObject<{
 			name: z.ZodOptional<z.ZodString>;
 			description: z.ZodOptional<z.ZodString>;
-			scan_depth: z.ZodOptional<z.ZodNumber>;
-			token_budget: z.ZodOptional<z.ZodNumber>;
+			scan_depth: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
+			token_budget: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
 			recursive_scanning: z.ZodOptional<z.ZodBoolean>;
 			extensions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 			entries: z.ZodArray<z.ZodObject<{
@@ -513,14 +513,14 @@ declare const CCv3DataSchema: z.ZodObject<{
 			}, z.ZodTypeAny, "passthrough">[];
 			name?: string | undefined;
 			description?: string | undefined;
-			scan_depth?: number | undefined;
-			token_budget?: number | undefined;
+			scan_depth?: unknown;
+			token_budget?: unknown;
 			recursive_scanning?: boolean | undefined;
 			extensions?: Record<string, unknown> | undefined;
 		}>>>;
 		extensions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 		assets: z.ZodOptional<z.ZodArray<z.ZodObject<{
-			type: z.ZodEnum<[
+			type: z.ZodEffects<z.ZodEnum<[
 				"icon",
 				"background",
 				"emotion",
@@ -529,7 +529,7 @@ declare const CCv3DataSchema: z.ZodObject<{
 				"video",
 				"custom",
 				"x-risu-asset"
-			]>;
+			]>, "custom" | "icon" | "background" | "emotion" | "user_icon" | "sound" | "video" | "x-risu-asset", unknown>;
 			uri: z.ZodString;
 			name: z.ZodString;
 			ext: z.ZodString;
@@ -540,15 +540,15 @@ declare const CCv3DataSchema: z.ZodObject<{
 			ext: string;
 		}, {
 			name: string;
-			type: "custom" | "icon" | "background" | "emotion" | "user_icon" | "sound" | "video" | "x-risu-asset";
 			uri: string;
 			ext: string;
+			type?: unknown;
 		}>, "many">>;
 		nickname: z.ZodOptional<z.ZodString>;
 		creator_notes_multilingual: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 		source: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-		creation_date: z.ZodOptional<z.ZodNumber>;
-		modification_date: z.ZodOptional<z.ZodNumber>;
+		creation_date: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
+		modification_date: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
 	}, "strip", z.ZodTypeAny, {
 		name: string;
 		description: string;
@@ -689,8 +689,8 @@ declare const CCv3DataSchema: z.ZodObject<{
 			}, z.ZodTypeAny, "passthrough">[];
 			name?: string | undefined;
 			description?: string | undefined;
-			scan_depth?: number | undefined;
-			token_budget?: number | undefined;
+			scan_depth?: unknown;
+			token_budget?: unknown;
 			recursive_scanning?: boolean | undefined;
 			extensions?: Record<string, unknown> | undefined;
 		} | null | undefined;
@@ -700,15 +700,15 @@ declare const CCv3DataSchema: z.ZodObject<{
 		group_only_greetings?: string[] | undefined;
 		assets?: {
 			name: string;
-			type: "custom" | "icon" | "background" | "emotion" | "user_icon" | "sound" | "video" | "x-risu-asset";
 			uri: string;
 			ext: string;
+			type?: unknown;
 		}[] | undefined;
 		nickname?: string | undefined;
 		creator_notes_multilingual?: Record<string, string> | undefined;
 		source?: string[] | undefined;
-		creation_date?: number | undefined;
-		modification_date?: number | undefined;
+		creation_date?: unknown;
+		modification_date?: unknown;
 	}>;
 }, "strip", z.ZodTypeAny, {
 	data: {
@@ -855,8 +855,8 @@ declare const CCv3DataSchema: z.ZodObject<{
 			}, z.ZodTypeAny, "passthrough">[];
 			name?: string | undefined;
 			description?: string | undefined;
-			scan_depth?: number | undefined;
-			token_budget?: number | undefined;
+			scan_depth?: unknown;
+			token_budget?: unknown;
 			recursive_scanning?: boolean | undefined;
 			extensions?: Record<string, unknown> | undefined;
 		} | null | undefined;
@@ -866,15 +866,15 @@ declare const CCv3DataSchema: z.ZodObject<{
 		group_only_greetings?: string[] | undefined;
 		assets?: {
 			name: string;
-			type: "custom" | "icon" | "background" | "emotion" | "user_icon" | "sound" | "video" | "x-risu-asset";
 			uri: string;
 			ext: string;
+			type?: unknown;
 		}[] | undefined;
 		nickname?: string | undefined;
 		creator_notes_multilingual?: Record<string, string> | undefined;
 		source?: string[] | undefined;
-		creation_date?: number | undefined;
-		modification_date?: number | undefined;
+		creation_date?: unknown;
+		modification_date?: unknown;
 	};
 	spec: "chara_card_v3";
 	spec_version: "3.0";
@@ -923,8 +923,8 @@ declare const CCv2DataSchema: z.ZodObject<{
 	character_book: z.ZodNullable<z.ZodOptional<z.ZodObject<{
 		name: z.ZodOptional<z.ZodString>;
 		description: z.ZodOptional<z.ZodString>;
-		scan_depth: z.ZodOptional<z.ZodNumber>;
-		token_budget: z.ZodOptional<z.ZodNumber>;
+		scan_depth: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
+		token_budget: z.ZodEffects<z.ZodOptional<z.ZodNumber>, number | undefined, unknown>;
 		recursive_scanning: z.ZodOptional<z.ZodBoolean>;
 		extensions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 		entries: z.ZodArray<z.ZodObject<{
@@ -1055,8 +1055,8 @@ declare const CCv2DataSchema: z.ZodObject<{
 		}, z.ZodTypeAny, "passthrough">[];
 		name?: string | undefined;
 		description?: string | undefined;
-		scan_depth?: number | undefined;
-		token_budget?: number | undefined;
+		scan_depth?: unknown;
+		token_budget?: unknown;
 		recursive_scanning?: boolean | undefined;
 		extensions?: Record<string, unknown> | undefined;
 	}>>>;
@@ -1150,8 +1150,8 @@ declare const CCv2DataSchema: z.ZodObject<{
 		}, z.ZodTypeAny, "passthrough">[];
 		name?: string | undefined;
 		description?: string | undefined;
-		scan_depth?: number | undefined;
-		token_budget?: number | undefined;
+		scan_depth?: unknown;
+		token_budget?: unknown;
 		recursive_scanning?: boolean | undefined;
 		extensions?: Record<string, unknown> | undefined;
 	} | null | undefined;

package/dist/index.js

@@ -536,6 +536,58 @@ import { z } from "zod";
 import { z as z2 } from "zod";
 import { z as z3 } from "zod";
 import "zod";
+function preprocessTimestamp(val) {
+  if (val === null || val === void 0) return void 0;
+  let num;
+  if (typeof val === "number") {
+    num = val;
+  } else if (typeof val === "string") {
+    const trimmed = val.trim();
+    if (!trimmed) return void 0;
+    const parsed = Number(trimmed);
+    if (!isNaN(parsed)) {
+      num = parsed;
+    } else {
+      const date = new Date(trimmed);
+      if (isNaN(date.getTime())) return void 0;
+      num = Math.floor(date.getTime() / 1e3);
+    }
+  } else {
+    return void 0;
+  }
+  if (num > 1e10) {
+    num = Math.floor(num / 1e3);
+  }
+  if (num < 0) return void 0;
+  return num;
+}
+function preprocessNumeric(val) {
+  if (val === null || val === void 0) return void 0;
+  if (typeof val === "number") {
+    return isNaN(val) ? void 0 : val;
+  }
+  if (typeof val === "string") {
+    const trimmed = val.trim();
+    if (!trimmed) return void 0;
+    const parsed = Number(trimmed);
+    return isNaN(parsed) ? void 0 : parsed;
+  }
+  return void 0;
+}
+var KNOWN_ASSET_TYPES = /* @__PURE__ */ new Set([
+  "icon",
+  "background",
+  "emotion",
+  "user_icon",
+  "sound",
+  "video",
+  "custom",
+  "x-risu-asset"
+]);
+function preprocessAssetType(val) {
+  if (typeof val !== "string") return "custom";
+  return KNOWN_ASSET_TYPES.has(val) ? val : "custom";
+}
 var ISO8601Schema = z.string().datetime();
 var UUIDSchema = z.string().uuid();
 var SpecSchema = z.enum(["v2", "v3"]);
@@ -558,16 +610,19 @@ var SourceFormatSchema = z.enum([
   // VoxPkg format
 ]);
 var OriginalShapeSchema = z.enum(["wrapped", "unwrapped", "legacy"]);
-var AssetTypeSchema = z.enum([
-  "icon",
-  "background",
-  "emotion",
-  "user_icon",
-  "sound",
-  "video",
-  "custom",
-  "x-risu-asset"
-]);
+var AssetTypeSchema = z.preprocess(
+  preprocessAssetType,
+  z.enum([
+    "icon",
+    "background",
+    "emotion",
+    "user_icon",
+    "sound",
+    "video",
+    "custom",
+    "x-risu-asset"
+  ])
+);
 var AssetDescriptorSchema = z.object({
   type: AssetTypeSchema,
   uri: z.string(),
@@ -601,8 +656,8 @@ var CCv2LorebookEntrySchema = z2.object({
 var CCv2CharacterBookSchema = z2.object({
   name: z2.string().optional(),
   description: z2.string().optional(),
-  scan_depth: z2.number().int().nonnegative().optional(),
-  token_budget: z2.number().int().nonnegative().optional(),
+  scan_depth: z2.preprocess(preprocessNumeric, z2.number().int().nonnegative().optional()),
+  token_budget: z2.preprocess(preprocessNumeric, z2.number().int().nonnegative().optional()),
   recursive_scanning: z2.boolean().optional(),
   extensions: z2.record(z2.unknown()).optional(),
   entries: z2.array(CCv2LorebookEntrySchema)
@@ -676,8 +731,8 @@ var CCv3LorebookEntrySchema = z3.object({
 var CCv3CharacterBookSchema = z3.object({
   name: z3.string().optional(),
   description: z3.string().optional(),
-  scan_depth: z3.number().int().nonnegative().optional(),
-  token_budget: z3.number().int().nonnegative().optional(),
+  scan_depth: z3.preprocess(preprocessNumeric, z3.number().int().nonnegative().optional()),
+  token_budget: z3.preprocess(preprocessNumeric, z3.number().int().nonnegative().optional()),
   recursive_scanning: z3.boolean().optional(),
   extensions: z3.record(z3.unknown()).optional(),
   entries: z3.array(CCv3LorebookEntrySchema)
@@ -709,10 +764,9 @@ var CCv3DataInnerSchema = z3.object({
   nickname: z3.string().optional(),
   creator_notes_multilingual: z3.record(z3.string()).optional(),
   source: z3.array(z3.string()).optional(),
-  creation_date: z3.number().int().nonnegative().optional(),
-  // Unix timestamp in seconds
-  modification_date: z3.number().int().nonnegative().optional()
-  // Unix timestamp in seconds
+  // Unix timestamps - preprocess to handle ISO strings, numeric strings, milliseconds
+  creation_date: z3.preprocess(preprocessTimestamp, z3.number().int().nonnegative().optional()),
+  modification_date: z3.preprocess(preprocessTimestamp, z3.number().int().nonnegative().optional())
 });
 var CCv3DataSchema = z3.object({
   spec: z3.literal("chara_card_v3"),
@@ -1339,36 +1393,6 @@ var SAFE_ASSET_TYPES = /* @__PURE__ */ new Set([
   "data",
   "unknown"
 ]);
-var SAFE_EXTENSIONS = /* @__PURE__ */ new Set([
-  // Images
-  "png",
-  "jpg",
-  "jpeg",
-  "webp",
-  "gif",
-  "avif",
-  "svg",
-  "bmp",
-  "ico",
-  // Audio
-  "mp3",
-  "wav",
-  "ogg",
-  "flac",
-  "m4a",
-  "aac",
-  "opus",
-  // Video
-  "mp4",
-  "webm",
-  "avi",
-  "mov",
-  "mkv",
-  // Data
-  "json",
-  "txt",
-  "bin"
-]);
 function getCharxCategory(mimetype) {
   if (mimetype.startsWith("image/")) return "images";
   if (mimetype.startsWith("audio/")) return "audio";
@@ -1384,11 +1408,20 @@ function sanitizeAssetType(type) {
   return sanitized || "custom";
 }
 function sanitizeExtension(ext) {
-  const normalized = ext.replace(/^\./, "").toLowerCase().replace(/[^a-z0-9]/g, "");
-  if (SAFE_EXTENSIONS.has(normalized)) {
-    return normalized;
+  const normalized = ext.trim().replace(/^\./, "").toLowerCase();
+  if (!normalized) {
+    throw new Error("Invalid asset extension: empty extension");
+  }
+  if (normalized.length > 64) {
+    throw new Error(`Invalid asset extension: too long (${normalized.length} chars)`);
+  }
+  if (normalized.includes("/") || normalized.includes("\\") || normalized.includes("\0")) {
+    throw new Error("Invalid asset extension: path separators are not allowed");
   }
-  return "bin";
+  if (!/^[a-z0-9][a-z0-9._-]*$/.test(normalized)) {
+    throw new Error(`Invalid asset extension: "${ext}"`);
+  }
+  return normalized;
 }
 function sanitizeName(name, ext) {
   let safeName = name;
@@ -8170,6 +8203,22 @@ function sanitizeName2(name, ext) {
   if (!safeName) safeName = "asset";
   return safeName;
 }
+function sanitizeExtension2(ext) {
+  const normalized = ext.trim().replace(/^\./, "").toLowerCase();
+  if (!normalized) {
+    throw new Error("Invalid asset extension: empty extension");
+  }
+  if (normalized.length > 64) {
+    throw new Error(`Invalid asset extension: too long (${normalized.length} chars)`);
+  }
+  if (normalized.includes("/") || normalized.includes("\\") || normalized.includes("\0")) {
+    throw new Error("Invalid asset extension: path separators are not allowed");
+  }
+  if (!/^[a-z0-9][a-z0-9._-]*$/.test(normalized)) {
+    throw new Error(`Invalid asset extension: "${ext}"`);
+  }
+  return normalized;
+}
 function writeVoxta(card, assets, options = {}) {
   const { compressionLevel = 6, includePackageJson = false } = options;
   const cardData = card.data;
@@ -8258,8 +8307,9 @@ function writeVoxta(card, assets, options = {}) {
   let assetCount = 0;
   let mainThumbnail;
   for (const asset of assets) {
-    const safeName = sanitizeName2(asset.name, asset.ext);
-    const finalFilename = `${safeName}.${asset.ext}`;
+    const safeExt = sanitizeExtension2(asset.ext);
+    const safeName = sanitizeName2(asset.name, safeExt);
+    const finalFilename = `${safeName}.${safeExt}`;
     let voxtaPath = "";
     const tags = asset.tags || [];
     const isMainIcon = asset.type === "icon" && (tags.includes("portrait-override") || asset.name === "main" || asset.isMain);