@crowdedkingdoms/crowdy-dsh 0.2.0-dev.1 → 0.2.0-dev.2

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,226 @@
+<!-- Generated by scripts/gen-third-party-notices.ts — do not edit by hand.
+     Run `pnpm run gen-third-party-notices` to regenerate. -->
+
+# Third-Party Notices
+
+DeepSeek Harness is licensed under [MIT](LICENSE). It depends on the third-party software listed below. Each project remains under its own license; nothing in this file changes those terms.
+
+This file lists **direct** dependencies declared by the workspace and the explicitly disclosed official Claude Code platform payload closure. It is generated from the workspace manifests by `scripts/gen-third-party-notices.ts`: a pre-commit hook regenerates it whenever a staged file changes one of its inputs, and `scripts/gen-third-party-notices.spec.ts` asserts in the test lane that the committed bytes match. Deleting a manifest runs no hook, so that case is caught by the assertion instead. Run `pnpm run verify-third-party-notices` for the standalone check.
+
+The complete npm transitive closure, including the Landlock launcher workspace, is recorded with exact pinned versions in [`pnpm-lock.yaml`](pnpm-lock.yaml) — inspect it with `pnpm licenses list`. The Python closure is recorded separately in [`python/sdk/uv.lock`](python/sdk/uv.lock).
+
+## Vendored source (`vendor/`)
+
+The Cordis framework and its foundation libraries are source-vendored into this repository rather than consumed from npm, and republished under the `@deepseek-ai` scope. All are MIT-licensed; each directory preserves its upstream `LICENSE` file. Exact upstream commits and local modifications are recorded in [`vendor/README.md`](vendor/README.md).
+
+| Package | Upstream name | Upstream | License |
+| --- | --- | --- | --- |
+| `@deepseek-ai/cosmokit` | `cosmokit` | [github.com/deepseek-harness/cosmokit](https://github.com/deepseek-harness/cosmokit) | MIT |
+| `@deepseek-ai/schemastery` | `schemastery` | [github.com/deepseek-harness/schemastery](https://github.com/deepseek-harness/schemastery) | MIT |
+| `@deepseek-ai/cordis` | `cordis` | [github.com/cordiverse/cordis](https://github.com/cordiverse/cordis) | MIT |
+| `@deepseek-ai/cordis-plugin-loader` | `@cordisjs/plugin-loader` | [github.com/cordiverse/cordis](https://github.com/cordiverse/cordis) | MIT |
+| `@deepseek-ai/cordis-plugin-include` | `@cordisjs/plugin-include` | [github.com/deepseek-harness/cordis](https://github.com/deepseek-harness/cordis) | MIT |
+| `@deepseek-ai/cordis-plugin-group` | `@cordisjs/plugin-group` | [github.com/deepseek-harness/cordis](https://github.com/deepseek-harness/cordis) | MIT |
+| `@deepseek-ai/cordis-plugin-timer` | `@cordisjs/plugin-timer` | [github.com/deepseek-harness/cordis](https://github.com/deepseek-harness/cordis) | MIT |
+| `@deepseek-ai/cordis-plugin-hmr` | `@cordisjs/plugin-hmr` | [github.com/deepseek-harness/cordis](https://github.com/deepseek-harness/cordis) | MIT |
+| `@deepseek-ai/cordis-plugin-logger-console` | `@cordisjs/plugin-logger-console` | [github.com/deepseek-harness/cordis](https://github.com/deepseek-harness/cordis) | MIT |
+
+## Runtime npm dependencies
+
+External packages installed for runtime use or distributed inside the prebuilt browser artifacts. Browser inputs are resolved through the shipping tsdown and Vite configurations, independently of npm dependency sections. The tier covers every plugin a user can mount from `cordis.yml` — not only what the `dsh` CLI, Web UI, and Python SDK runtime load by default.
+
+| Package | License |
+| --- | --- |
+| [`@agentclientprotocol/sdk`](https://github.com/agentclientprotocol/typescript-sdk) | Apache-2.0 |
+| [`@anthropic-ai/claude-agent-sdk`](https://github.com/anthropics/claude-agent-sdk-typescript) | SEE LICENSE IN README.md |
+| [`@anthropic-ai/sdk`](https://github.com/anthropics/anthropic-sdk-typescript) | MIT |
+| [`@babel/code-frame`](https://github.com/babel/babel) | MIT |
+| [`@earendil-works/pi-ai`](https://github.com/earendil-works/pi) | MIT |
+| [`@joplin/turndown-plugin-gfm`](https://github.com/laurent22/joplin-turndown-plugin-gfm) | MIT |
+| [`@jridgewell/gen-mapping`](https://github.com/jridgewell/sourcemaps) | MIT |
+| [`@lexical/history`](https://github.com/facebook/lexical) | MIT |
+| [`@lexical/plain-text`](https://github.com/facebook/lexical) | MIT |
+| [`@lexical/text`](https://github.com/facebook/lexical) | MIT |
+| [`@lexical/utils`](https://github.com/facebook/lexical) | MIT |
+| [`@modelcontextprotocol/sdk`](https://github.com/modelcontextprotocol/typescript-sdk) | MIT |
+| [`@noble/hashes`](https://github.com/paulmillr/noble-hashes) | MIT |
+| [`@octokit/webhooks`](https://github.com/octokit/webhooks.js) | MIT |
+| [`@openai/codex`](https://github.com/openai/codex) | Apache-2.0 |
+| [`@opentelemetry/api`](https://github.com/open-telemetry/opentelemetry-js) | Apache-2.0 |
+| [`@opentelemetry/api-logs`](https://github.com/open-telemetry/opentelemetry-js) | Apache-2.0 |
+| [`@opentelemetry/exporter-logs-otlp-http`](https://github.com/open-telemetry/opentelemetry-js) | Apache-2.0 |
+| [`@opentelemetry/otlp-exporter-base`](https://github.com/open-telemetry/opentelemetry-js) | Apache-2.0 |
+| [`@opentelemetry/resources`](https://github.com/open-telemetry/opentelemetry-js) | Apache-2.0 |
+| [`@opentelemetry/sdk-logs`](https://github.com/open-telemetry/opentelemetry-js) | Apache-2.0 |
+| [`@shikijs/langs`](https://github.com/shikijs/shiki) | MIT |
+| [`@standard-schema/spec`](https://github.com/standard-schema/standard-schema) | MIT |
+| [`@tanstack/react-virtual`](https://github.com/TanStack/virtual) | MIT |
+| [`@vscode/ripgrep`](https://github.com/microsoft/vscode-ripgrep) | MIT |
+| [`@xterm/headless`](https://github.com/xtermjs/xterm.js) | MIT |
+| [`@yarnpkg/parsers`](https://github.com/yarnpkg/berry) | BSD-2-Clause |
+| [`acorn`](https://github.com/acornjs/acorn) | MIT |
+| [`anser`](https://github.com/IonicaBizau/anser) | MIT |
+| [`buffer`](https://github.com/feross/buffer) | MIT |
+| [`chokidar`](https://github.com/paulmillr/chokidar) | MIT |
+| [`clsx`](https://github.com/lukeed/clsx) | MIT |
+| [`commander`](https://github.com/tj/commander.js) | MIT |
+| [`compression`](https://github.com/expressjs/compression) | MIT |
+| [`diff`](https://github.com/kpdecker/jsdiff) | BSD-3-Clause |
+| [`e2b`](https://github.com/e2b-dev/e2b) | MIT |
+| [`electron-updater`](https://github.com/electron-userland/electron-builder) | MIT |
+| [`eventsource-parser`](https://github.com/rexxars/eventsource-parser) | MIT |
+| [`fflate`](https://github.com/101arrowz/fflate) | MIT |
+| [`immer`](https://github.com/immerjs/immer) | MIT |
+| [`ipaddr.js`](https://github.com/whitequark/ipaddr.js) | MIT |
+| [`js-yaml`](https://github.com/nodeca/js-yaml) | MIT |
+| [`katex`](https://github.com/KaTeX/KaTeX) | MIT |
+| [`koffi`](https://github.com/Koromix/koffi) | MIT |
+| [`lexical`](https://github.com/facebook/lexical) | MIT |
+| [`mdast-util-from-markdown`](https://github.com/syntax-tree/mdast-util-from-markdown) | MIT |
+| [`mdast-util-gfm`](https://github.com/syntax-tree/mdast-util-gfm) | MIT |
+| [`mdast-util-math`](https://github.com/syntax-tree/mdast-util-math) | MIT |
+| [`micromark-core-commonmark`](https://github.com/micromark/micromark/tree/main/packages/micromark-core-commonmark) | MIT |
+| [`micromark-extension-gfm`](https://github.com/micromark/micromark-extension-gfm) | MIT |
+| [`micromark-extension-math`](https://github.com/micromark/micromark-extension-math) | MIT |
+| [`micromark-factory-space`](https://github.com/micromark/micromark/tree/main/packages/micromark-factory-space) | MIT |
+| [`micromark-util-character`](https://github.com/micromark/micromark/tree/main/packages/micromark-util-character) | MIT |
+| [`micromark-util-classify-character`](https://github.com/micromark/micromark/tree/main/packages/micromark-util-classify-character) | MIT |
+| [`micromark-util-sanitize-uri`](https://github.com/micromark/micromark/tree/main/packages/micromark-util-sanitize-uri) | MIT |
+| [`micromark-util-symbol`](https://github.com/micromark/micromark/tree/main/packages/micromark-util-symbol) | MIT |
+| [`mime-types`](https://github.com/jshttp/mime-types) | MIT |
+| [`negotiator`](https://github.com/jshttp/negotiator) | MIT |
+| [`node-addon-require-builtin`](https://www.npmjs.com/package/node-addon-require-builtin) | MIT |
+| [`node-pty`](https://github.com/microsoft/node-pty) | MIT |
+| [`open`](https://github.com/sindresorhus/open) | MIT |
+| [`pdfjs-dist`](https://github.com/mozilla/pdf.js) | Apache-2.0 |
+| [`picomatch`](https://github.com/micromatch/picomatch) | MIT |
+| [`react`](https://github.com/facebook/react) | MIT |
+| [`react-dom`](https://github.com/facebook/react) | MIT |
+| [`readable-stream`](https://github.com/nodejs/readable-stream) | MIT |
+| [`resolve.exports`](https://github.com/lukeed/resolve.exports) | MIT |
+| [`semver`](https://github.com/npm/node-semver) | ISC |
+| [`sharp`](https://github.com/lovell/sharp) | Apache-2.0 |
+| [`shiki`](https://github.com/shikijs/shiki) | MIT |
+| [`supports-color`](https://github.com/chalk/supports-color) | MIT |
+| [`tsx`](https://github.com/privatenumber/tsx) | MIT |
+| [`turndown`](https://github.com/mixmark-io/turndown) | MIT |
+| [`typescript`](https://github.com/microsoft/TypeScript) | Apache-2.0 |
+| [`undici`](https://github.com/nodejs/undici) | MIT |
+| [`use-sync-external-store`](https://github.com/facebook/react) | MIT |
+| [`ws`](https://github.com/websockets/ws) | MIT |
+| [`yaml`](https://github.com/eemeli/yaml) | ISC |
+| [`zod`](https://github.com/colinhacks/zod) | MIT |
+| [`zustand`](https://github.com/pmndrs/zustand) | MIT |
+
+pnpm applies local patches to the following packages at install time, so shipped artifacts carry modified copies; each patch file is the complete record of the modification:
+
+- `@yao-pkg/pkg@6.21.0` — [`patches/@yao-pkg__pkg@6.21.0.patch`](patches/@yao-pkg__pkg@6.21.0.patch)
+- `node-pty@1.2.0-beta.15` — [`patches/node-pty@1.2.0-beta.15.patch`](patches/node-pty@1.2.0-beta.15.patch)
+
+## Official Claude Code platform payloads
+
+The project owner authorizes distribution of every version of the official `@anthropic-ai/claude-agent-sdk` package and the official Claude Code CLI/platform payloads that each version declares through `optionalDependencies`. This identity-scoped authorization does not classify their declared terms as permissive and does not cover any unrelated runtime package; version, declared-license, and payload-set changes still require the ordinary dependency, lockfile, compatibility, terms, and notices review.
+
+The installed SDK 0.3.263 declares the following optional platform packages. Each carries the official Claude Code 2.1.263 executable; the package identities and versions come from the SDK manifest, while the declared license field is verified against the platform payload installed for the current host.
+
+| Optional platform package | Version | Declared license |
+| --- | --- | --- |
+| [`@anthropic-ai/claude-agent-sdk-darwin-arm64`](https://www.npmjs.com/package/@anthropic-ai/claude-agent-sdk-darwin-arm64) | 0.3.263 | SEE LICENSE IN LICENSE.md |
+| [`@anthropic-ai/claude-agent-sdk-darwin-x64`](https://www.npmjs.com/package/@anthropic-ai/claude-agent-sdk-darwin-x64) | 0.3.263 | SEE LICENSE IN LICENSE.md |
+| [`@anthropic-ai/claude-agent-sdk-linux-arm64`](https://www.npmjs.com/package/@anthropic-ai/claude-agent-sdk-linux-arm64) | 0.3.263 | SEE LICENSE IN LICENSE.md |
+| [`@anthropic-ai/claude-agent-sdk-linux-arm64-musl`](https://www.npmjs.com/package/@anthropic-ai/claude-agent-sdk-linux-arm64-musl) | 0.3.263 | SEE LICENSE IN LICENSE.md |
+| [`@anthropic-ai/claude-agent-sdk-linux-x64`](https://www.npmjs.com/package/@anthropic-ai/claude-agent-sdk-linux-x64) | 0.3.263 | SEE LICENSE IN LICENSE.md |
+| [`@anthropic-ai/claude-agent-sdk-linux-x64-musl`](https://www.npmjs.com/package/@anthropic-ai/claude-agent-sdk-linux-x64-musl) | 0.3.263 | SEE LICENSE IN LICENSE.md |
+| [`@anthropic-ai/claude-agent-sdk-win32-arm64`](https://www.npmjs.com/package/@anthropic-ai/claude-agent-sdk-win32-arm64) | 0.3.263 | SEE LICENSE IN LICENSE.md |
+| [`@anthropic-ai/claude-agent-sdk-win32-x64`](https://www.npmjs.com/package/@anthropic-ai/claude-agent-sdk-win32-x64) | 0.3.263 | SEE LICENSE IN LICENSE.md |
+
+
+## Development-only npm dependencies
+
+External packages **directly declared** for development, tests, types, or tooling, without a runtime installation or browser-build relationship. A package here may still be pulled in transitively by a runtime dependency — `pnpm-lock.yaml` is the authority on that full closure.
+
+| Package | License |
+| --- | --- |
+| [`@aws-sdk/client-s3`](https://github.com/aws/aws-sdk-js-v3) | Apache-2.0 |
+| [`@braintree/sanitize-url`](https://github.com/braintree/sanitize-url) | MIT |
+| [`@electron/notarize`](https://github.com/electron/notarize) | MIT |
+| [`@lexical/headless`](https://github.com/facebook/lexical) | MIT |
+| [`@modelcontextprotocol/server-everything`](https://github.com/modelcontextprotocol/servers) | MIT / Apache-2.0 |
+| [`@modelcontextprotocol/server-filesystem`](https://github.com/modelcontextprotocol/servers) | MIT / Apache-2.0 |
+| [`@stylistic/eslint-plugin`](https://github.com/eslint-stylistic/eslint-stylistic) | MIT |
+| [`@testing-library/dom`](https://github.com/testing-library/dom-testing-library) | MIT |
+| [`@testing-library/react`](https://github.com/testing-library/react-testing-library) | MIT |
+| [`@types/babel__code-frame`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/compression`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/js-yaml`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/jsdom`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/mdast`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/mime-types`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/negotiator`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/node`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/picomatch`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/react`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/react-dom`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/readable-stream`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/semver`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/spdx-expression-parse`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/turndown`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/use-sync-external-store`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@types/ws`](https://github.com/DefinitelyTyped/DefinitelyTyped) | MIT |
+| [`@vitejs/plugin-react`](https://github.com/vitejs/vite-plugin-react) | MIT |
+| [`@vitest/coverage-v8`](https://github.com/vitest-dev/vitest) | MIT |
+| [`@yao-pkg/pkg`](https://github.com/yao-pkg/pkg) | MIT |
+| [`@yarnpkg/cli-dist`](https://github.com/yarnpkg/berry) | BSD-2-Clause |
+| [`app-builder-lib`](https://github.com/electron-userland/electron-builder) | MIT |
+| [`cytoscape`](https://github.com/cytoscape/cytoscape.js) | MIT |
+| [`cytoscape-cose-bilkent`](https://github.com/cytoscape/cytoscape.js-cose-bilkent) | MIT |
+| [`dayjs`](https://github.com/iamkun/dayjs) | MIT |
+| [`debug`](https://github.com/debug-js/debug) | MIT |
+| [`electron`](https://github.com/electron/electron) | MIT |
+| [`electron-builder`](https://github.com/electron-userland/electron-builder) | MIT |
+| [`esbuild`](https://github.com/evanw/esbuild) | MIT |
+| [`eslint-plugin-sonarjs`](https://github.com/SonarSource/SonarJS) | LGPL-3.0-only |
+| [`execa`](https://github.com/sindresorhus/execa) | MIT |
+| [`extract-zip`](https://github.com/maxogden/extract-zip) | BSD-2-Clause |
+| [`fast-check`](https://github.com/dubzzz/fast-check) | MIT |
+| [`http-server`](https://github.com/http-party/http-server) | MIT |
+| [`istanbul-lib-report`](https://github.com/istanbuljs/istanbuljs) | BSD-3-Clause |
+| [`jscpd`](https://github.com/kucherenko/jscpd) | MIT |
+| [`jsdom`](https://github.com/jsdom/jsdom) | MIT |
+| [`lefthook`](https://github.com/evilmartians/lefthook) | MIT |
+| [`lightningcss`](https://github.com/parcel-bundler/lightningcss) | MPL-2.0 |
+| [`mermaid`](https://github.com/mermaid-js/mermaid) | MIT |
+| [`micromark-util-types`](https://github.com/micromark/micromark/tree/main/packages/micromark-util-types) | MIT |
+| [`msgpackr`](http://github.com/kriszyp/msgpackr) | MIT |
+| [`oxlint`](https://github.com/oxc-project/oxc) | MIT |
+| [`oxlint-tsgolint`](https://github.com/oxc-project/tsgolint) | MIT |
+| [`playwright`](https://github.com/microsoft/playwright) | Apache-2.0 |
+| [`pnpm`](https://github.com/pnpm/pnpm) | MIT |
+| [`publint`](https://github.com/publint/publint) | MIT |
+| [`smol-toml`](https://github.com/squirrelchat/smol-toml) | BSD-3-Clause |
+| [`spdx-expression-parse`](https://github.com/jslicense/spdx-expression-parse.js) | MIT |
+| [`tar`](https://github.com/isaacs/node-tar) | BlueOak-1.0.0 |
+| [`tsdown`](https://github.com/rolldown/tsdown) | MIT |
+| [`typescript-language-server`](https://github.com/typescript-language-server/typescript-language-server) | Apache-2.0 |
+| [`vite`](https://github.com/vitejs/vite) | MIT |
+| [`vite-tsconfig-paths`](https://github.com/aleclarson/vite-tsconfig-paths) | MIT |
+| [`vitepress`](https://github.com/vuejs/vitepress) | MIT |
+| [`vitepress-plugin-mermaid`](https://github.com/emersonbottero/vitepress-plugin-mermaid) | MIT |
+| [`vitest`](https://github.com/vitest-dev/vitest) | MIT |
+
+`eslint-plugin-sonarjs` (LGPL-3.0-only) and `lightningcss` (MPL-2.0) run only as development tooling; their code is not linked into or distributed with any DeepSeek Harness artifact.
+
+## Python SDK dependencies (`python/`)
+
+Direct dependencies of the `pyproject.toml` manifests, plus `uv` as the development workflow tool.
+
+| Package | License | Role |
+| --- | --- | --- |
+| [`hatchling`](https://github.com/pypa/hatch) | MIT | build backend |
+| [`pydantic`](https://github.com/pydantic/pydantic) | MIT | runtime dependency of `deepseek-harness-sdk` |
+| [`pytest`](https://github.com/pytest-dev/pytest) | MIT | test-only |
+| [`uv`](https://github.com/astral-sh/uv) | MIT / Apache-2.0 | development workflow tool |
+
+## First-party native packages
+
+`@deepseek-ai/node-addon-system` (and its platform packages) is built and released from this repository under BSD 3-Clause. It is listed here for completeness; it is first-party, not third-party.

package/dist/dsh-web/BUILD.json

@@ -1,10 +1,10 @@
 {
   "package": "@crowdedkingdoms/crowdy-dsh",
   "version": "0.2.0",
-  "builtAt": "2026-09-12T12:57:06.868Z",
+  "builtAt": "2026-09-12T13:23:51.176Z",
   "source": {
     "repository": "CrowdedKingdoms/crowdy-dsh",
-    "commit": "8d2c72733bb269e518515d6df0997d618c6f8457",
+    "commit": "23fefb0c400681249d0cd5d8189eac7ff5594cef",
     "dirty": false
   },
   "upstream": {
@@ -112,7 +112,7 @@
     "manifest.webmanifest": "sha256:9b54d57eea00f2fdd1affe6e7999a4209a515755f12ac1a3299da2d55e178d4c",
     "preview/bootstrap-CYECZNXt.js": "sha256:9f303a0485c0badfdd19fad0c357ef050c5b9a343744ab5bf0c70015e7d95092",
     "preview/crowdy-boot-D0e56jZN.js": "sha256:b08fc35fb3a549662388c88fa99dd0dbbc7e553e6d6cccac74c50a6967af88ef",
-    "preview/vfs-image.tar.gz": "sha256:1e8d03ad47b957b074a0b68a575d64f69a76e62c1f6da32ff23051ba4128554c",
+    "preview/vfs-image.tar.gz": "sha256:bc394dccb9c0a0ab0ea47fe1566fd3692fd025cf5874ed5def3efad5b985a7e9",
     "preview/worker-C8-_ANaz.js": "sha256:81099e5732dfe0c32bacd5897316b7956c5a0a22da01b4a0c6e21d0a3b9d9aa1"
   }
 }

package/lib/attachments/crowdy-attachment-store.js

@@ -0,0 +1,200 @@
+/**
+ * An in-memory `ctx.attachments` provider for the browser worker.
+ *
+ * The stock `@deepseek-ai/dsh-attachment-local` decodes and normalizes images
+ * with `sharp`, a native module the browser worker replaces with a stub that
+ * refuses every call — so in the worker neither `read_image` nor a pasted
+ * screenshot could ever produce an image block. This store keeps the bytes it
+ * is handed, reads intrinsic dimensions from the container header (PNG, JPEG,
+ * WebP, GIF), and serves model requests verbatim. The Studio page already
+ * downscales captures before sharing them, and the byte caps here bound what a
+ * pasted image can cost.
+ *
+ * Attachments live for the life of the harness only: reloading the page drops
+ * the bytes, and a replayed session shows the image envelope without pixels.
+ *
+ * @module @crowdedkingdoms/crowdy-dsh/attachments
+ */
+import z from '@deepseek-ai/schemastery';
+import { AttachmentError, AttachmentId, AttachmentStore, ImageVariantId, } from '@deepseek-ai/dsh-attachment';
+const MEDIA_TYPES = ['image/png', 'image/jpeg', 'image/webp', 'image/gif'];
+/** Intrinsic dimensions read from the container header, or undefined when the bytes are not that format. */
+export function imageDimensions(data, mediaType) {
+    const view = new DataView(data.buffer, data.byteOffset, data.byteLength);
+    switch (mediaType) {
+        case 'image/png': {
+            if (data.byteLength < 24)
+                return undefined;
+            const signature = [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a];
+            if (!signature.every((byte, index) => data[index] === byte))
+                return undefined;
+            return { width: view.getUint32(16), height: view.getUint32(20) };
+        }
+        case 'image/gif': {
+            if (data.byteLength < 10 || data[0] !== 0x47 || data[1] !== 0x49 || data[2] !== 0x46)
+                return undefined;
+            return { width: view.getUint16(6, true), height: view.getUint16(8, true) };
+        }
+        case 'image/webp': {
+            if (data.byteLength < 30)
+                return undefined;
+            if (String.fromCharCode(...data.subarray(0, 4)) !== 'RIFF')
+                return undefined;
+            if (String.fromCharCode(...data.subarray(8, 12)) !== 'WEBP')
+                return undefined;
+            const chunk = String.fromCharCode(...data.subarray(12, 16));
+            if (chunk === 'VP8 ') {
+                return { width: view.getUint16(26, true) & 0x3fff, height: view.getUint16(28, true) & 0x3fff };
+            }
+            if (chunk === 'VP8L') {
+                const bits = view.getUint32(21, true);
+                return { width: (bits & 0x3fff) + 1, height: ((bits >> 14) & 0x3fff) + 1 };
+            }
+            if (chunk === 'VP8X') {
+                const width = 1 + (data[24] | (data[25] << 8) | (data[26] << 16));
+                const height = 1 + (data[27] | (data[28] << 8) | (data[29] << 16));
+                return { width, height };
+            }
+            return undefined;
+        }
+        case 'image/jpeg': {
+            if (data.byteLength < 4 || data[0] !== 0xff || data[1] !== 0xd8)
+                return undefined;
+            let offset = 2;
+            while (offset + 9 < data.byteLength) {
+                if (data[offset] !== 0xff) {
+                    offset += 1;
+                    continue;
+                }
+                const marker = data[offset + 1];
+                if (marker === 0xd8 || (marker >= 0xd0 && marker <= 0xd7) || marker === 0x01) {
+                    offset += 2;
+                    continue;
+                }
+                const length = view.getUint16(offset + 2);
+                const isSof = (marker >= 0xc0 && marker <= 0xc3) ||
+                    (marker >= 0xc5 && marker <= 0xc7) ||
+                    (marker >= 0xc9 && marker <= 0xcb) ||
+                    (marker >= 0xcd && marker <= 0xcf);
+                if (isSof) {
+                    return { height: view.getUint16(offset + 5), width: view.getUint16(offset + 7) };
+                }
+                offset += 2 + length;
+            }
+            return undefined;
+        }
+        default:
+            return undefined;
+    }
+}
+function digest(data) {
+    // FNV-1a over the bytes, two lanes; content addressing only needs to make
+    // identical captures share one id, not resist an adversary.
+    let h1 = 0x811c9dc5;
+    let h2 = 0x9747b28c;
+    for (let index = 0; index < data.byteLength; index += 1) {
+        h1 = Math.imul(h1 ^ data[index], 0x01000193) >>> 0;
+        h2 = Math.imul(h2 ^ data[index], 0x85ebca6b) >>> 0;
+    }
+    return `${h1.toString(16).padStart(8, '0')}${h2.toString(16).padStart(8, '0')}${data.byteLength.toString(16)}`;
+}
+function sanitizeName(name) {
+    if (!name)
+        return undefined;
+    const leaf = name.split(/[\\/]/).pop() ?? '';
+    const cleaned = leaf.replace(/[^\w.\- ]+/g, '_').slice(0, 120);
+    return cleaned || undefined;
+}
+export class CrowdyAttachmentStore extends AttachmentStore {
+    static Config = z.object({
+        maxImageBytes: z.number().default(4 * 1024 * 1024),
+        maxImageDimension: z.number().default(8192),
+    });
+    imageLimits;
+    images = new Map();
+    constructor(ctx, config = {}) {
+        super(ctx);
+        const maxImageBytes = config.maxImageBytes ?? 4 * 1024 * 1024;
+        const maxImageDimension = config.maxImageDimension ?? 8192;
+        this.imageLimits = {
+            maxImageBytes,
+            maxImagesPerMessage: 6,
+            maxMessageImageBytes: maxImageBytes * 3,
+            maxImagePixels: maxImageDimension * maxImageDimension,
+            maxImageDimension,
+            mediaTypes: MEDIA_TYPES,
+        };
+    }
+    inspect(input) {
+        if (!MEDIA_TYPES.includes(input.mediaType)) {
+            throw new AttachmentError(`Unsupported image media type ${input.mediaType}.`, 'UNSUPPORTED_IMAGE_TYPE');
+        }
+        if (input.data.byteLength > this.imageLimits.maxImageBytes) {
+            throw new AttachmentError(`The image is ${input.data.byteLength} bytes; the limit is ${this.imageLimits.maxImageBytes}.`, 'IMAGE_TOO_LARGE');
+        }
+        const dimensions = imageDimensions(input.data, input.mediaType);
+        if (!dimensions) {
+            // Declared type and bytes disagree, or the header is unreadable.
+            const sniffed = MEDIA_TYPES.find((type) => imageDimensions(input.data, type));
+            throw new AttachmentError(sniffed
+                ? `The bytes are ${sniffed}, not ${input.mediaType}.`
+                : 'The bytes are not a PNG, JPEG, WebP or GIF image.', sniffed ? 'IMAGE_TYPE_MISMATCH' : 'INVALID_IMAGE');
+        }
+        if (dimensions.width > this.imageLimits.maxImageDimension || dimensions.height > this.imageLimits.maxImageDimension) {
+            throw new AttachmentError(`The image is ${dimensions.width}x${dimensions.height}; each side may be at most ${this.imageLimits.maxImageDimension} px.`, 'IMAGE_DIMENSION_TOO_LARGE');
+        }
+        if (dimensions.width * dimensions.height > this.imageLimits.maxImagePixels) {
+            throw new AttachmentError('The image has too many pixels.', 'IMAGE_TOO_MANY_PIXELS');
+        }
+        return dimensions;
+    }
+    async validateImage(input) {
+        this.inspect(input);
+    }
+    async saveImage(input) {
+        const { width, height } = this.inspect(input);
+        const id = `img-${digest(input.data)}`;
+        const name = sanitizeName(input.name);
+        const ref = {
+            attachmentId: AttachmentId(id),
+            mediaType: input.mediaType,
+            bytes: input.data.byteLength,
+            width,
+            height,
+            ...(name === undefined ? {} : { name }),
+        };
+        if (!this.images.has(id))
+            this.images.set(id, { ref, data: input.data.slice() });
+        return ref;
+    }
+    async readImage(ref, signal) {
+        signal?.throwIfAborted();
+        const stored = this.images.get(String(ref.attachmentId));
+        if (!stored) {
+            throw new AttachmentError(`Attachment ${String(ref.attachmentId)} is not in memory (the page was reloaded since it was captured).`, 'ATTACHMENT_NOT_FOUND');
+        }
+        return { ref: { ...stored.ref }, data: stored.data };
+    }
+    async readImageRequest(ref, policy, signal) {
+        const stored = await this.readImage(ref, signal);
+        if (stored.data.byteLength > policy.maxBytes * 4) {
+            // No encoder here: an image far above the route's byte target would be
+            // rejected by the provider, so refuse with the reason instead.
+            throw new AttachmentError(`The image (${stored.data.byteLength} bytes) is too large for this model route; capture a smaller screenshot.`, 'IMAGE_TOO_LARGE');
+        }
+        return {
+            variantId: ImageVariantId(`${String(ref.attachmentId)}:${policy.maxPixels}:${policy.maxBytes}:verbatim`),
+            attachment: { ...stored.ref },
+            data: stored.data,
+            mediaType: stored.ref.mediaType,
+            bytes: stored.data.byteLength,
+            width: stored.ref.width,
+            height: stored.ref.height,
+            depth: 'uchar',
+            space: 'srgb',
+            hasAlpha: stored.ref.mediaType === 'image/png' || stored.ref.mediaType === 'image/webp' || stored.ref.mediaType === 'image/gif',
+        };
+    }
+}
+export default CrowdyAttachmentStore;
+//# sourceMappingURL=crowdy-attachment-store.js.map

package/lib/attachments/crowdy-attachment-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crowdy-attachment-store.js","sourceRoot":"","sources":["../../src/attachments/crowdy-attachment-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,EACL,eAAe,EACf,YAAY,EACZ,eAAe,EACf,cAAc,GACf,MAAM,6BAA6B,CAAA;AAkBpC,MAAM,WAAW,GAA8B,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,CAAC,CAAA;AAErG,4GAA4G;AAC5G,MAAM,UAAU,eAAe,CAC7B,IAAgB,EAChB,SAAyB;IAEzB,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IACxE,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,IAAI,CAAC,UAAU,GAAG,EAAE;gBAAE,OAAO,SAAS,CAAA;YAC1C,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;YAClE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAA;YAC7E,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAA;QAClE,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,IAAI,CAAC,UAAU,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,SAAS,CAAA;YACtG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAA;QAC5E,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,IAAI,IAAI,CAAC,UAAU,GAAG,EAAE;gBAAE,OAAO,SAAS,CAAA;YAC1C,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM;gBAAE,OAAO,SAAS,CAAA;YAC5E,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM;gBAAE,OAAO,SAAS,CAAA;YAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;YAC3D,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,MAAM,EAAE,CAAA;YAChG,CAAC;YACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;gBACrC,OAAO,EAAE,KAAK,EAAE,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;YAC5E,CAAC;YACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAE,IAAI,EAAE,CAAC,CAAC,CAAA;gBACpE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAE,IAAI,EAAE,CAAC,CAAC,CAAA;gBACrE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;YAC1B,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,SAAS,CAAA;YACjF,IAAI,MAAM,GAAG,CAAC,CAAA;YACd,OAAO,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC1B,MAAM,IAAI,CAAC,CAAA;oBACX,SAAQ;gBACV,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAA;gBAChC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,CAAC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBAC7E,MAAM,IAAI,CAAC,CAAA;oBACX,SAAQ;gBACV,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;gBACzC,MAAM,KAAK,GACT,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,CAAC;oBAClC,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,CAAC;oBAClC,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,CAAC;oBAClC,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,CAAC,CAAA;gBACpC,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAA;gBAClF,CAAC;gBACD,MAAM,IAAI,CAAC,GAAG,MAAM,CAAA;YACtB,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,IAAgB;IAC9B,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI,EAAE,GAAG,UAAU,CAAA;IACnB,IAAI,EAAE,GAAG,UAAU,CAAA;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAE,EAAE,UAAU,CAAC,KAAK,CAAC,CAAA;QACnD,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAE,EAAE,UAAU,CAAC,KAAK,CAAC,CAAA;IACrD,CAAC;IACD,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAA;AAChH,CAAC;AAED,SAAS,YAAY,CAAC,IAAwB;IAC5C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAA;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAC9D,OAAO,OAAO,IAAI,SAAS,CAAA;AAC7B,CAAC;AAED,MAAM,OAAO,qBAAsB,SAAQ,eAAe;IACxD,MAAM,CAAC,MAAM,GAAc,CAAC,CAAC,MAAM,CAAC;QAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;QAClD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC5C,CAAyB,CAAA;IAEjB,WAAW,CAAuB;IAC1B,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAA;IAElE,YAAY,GAAY,EAAE,SAAiB,EAAE;QAC3C,KAAK,CAAC,GAAG,CAAC,CAAA;QACV,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;QAC7D,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAA;QAC1D,IAAI,CAAC,WAAW,GAAG;YACjB,aAAa;YACb,mBAAmB,EAAE,CAAC;YACtB,oBAAoB,EAAE,aAAa,GAAG,CAAC;YACvC,cAAc,EAAE,iBAAiB,GAAG,iBAAiB;YACrD,iBAAiB;YACjB,UAAU,EAAE,WAAW;SACxB,CAAA;IACH,CAAC;IAEO,OAAO,CAAC,KAA0B;QACxC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,eAAe,CAAC,gCAAgC,KAAK,CAAC,SAAS,GAAG,EAAE,wBAAwB,CAAC,CAAA;QACzG,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YAC3D,MAAM,IAAI,eAAe,CACvB,gBAAgB,KAAK,CAAC,IAAI,CAAC,UAAU,wBAAwB,IAAI,CAAC,WAAW,CAAC,aAAa,GAAG,EAC9F,iBAAiB,CAClB,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;QAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,iEAAiE;YACjE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;YAC7E,MAAM,IAAI,eAAe,CACvB,OAAO;gBACL,CAAC,CAAC,iBAAiB,OAAO,SAAS,KAAK,CAAC,SAAS,GAAG;gBACrD,CAAC,CAAC,mDAAmD,EACvD,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,eAAe,CAClD,CAAA;QACH,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,IAAI,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;YACpH,MAAM,IAAI,eAAe,CACvB,gBAAgB,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,MAAM,8BAA8B,IAAI,CAAC,WAAW,CAAC,iBAAiB,MAAM,EAC3H,2BAA2B,CAC5B,CAAA;QACH,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;YAC3E,MAAM,IAAI,eAAe,CAAC,gCAAgC,EAAE,uBAAuB,CAAC,CAAA;QACtF,CAAC;QACD,OAAO,UAAU,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAA0B;QAC5C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAA0B;QACxC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC7C,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAA;QACtC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,GAAG,GAAuB;YAC9B,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;YAC5B,KAAK;YACL,MAAM;YACN,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;SACxC,CAAA;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAChF,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAuB,EAAE,MAAoB;QAC3D,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAA;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,eAAe,CACvB,cAAc,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,kEAAkE,EACxG,sBAAsB,CACvB,CAAA;QACH,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;IACtD,CAAC;IAEQ,KAAK,CAAC,gBAAgB,CAC7B,GAAuB,EACvB,MAA0B,EAC1B,MAAoB;QAEpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAChD,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjD,uEAAuE;YACvE,+DAA+D;YAC/D,MAAM,IAAI,eAAe,CACvB,cAAc,MAAM,CAAC,IAAI,CAAC,UAAU,0EAA0E,EAC9G,iBAAiB,CAClB,CAAA;QACH,CAAC;QACD,OAAO;YACL,SAAS,EAAE,cAAc,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,WAAW,CAAC;YACxG,UAAU,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS;YAC/B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;YAC7B,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK;YACvB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM;YACzB,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,WAAW,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,YAAY,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,WAAW;SAChI,CAAA;IACH,CAAC;;AAGH,eAAe,qBAAqB,CAAA"}

package/lib/bridge/client.js

@@ -0,0 +1,161 @@
+/**
+ * Worker-side half of the page bridge: a request/response and event layer
+ * over one `BroadcastChannel`.
+ *
+ * `BroadcastChannel` is the one same-origin primitive a dedicated worker, the
+ * iframe that spawned it, and the embedding Studio page all share without the
+ * worker knowing its own port topology. The harness's own tunnel to the iframe
+ * is untouched; this channel is separate and ignores frames it did not define.
+ *
+ * @module @crowdedkingdoms/crowdy-dsh/bridge/client
+ */
+import { BRIDGE_ERROR_CODES, CROWDY_BRIDGE_PROTOCOL_VERSION, isBridgeFrame, } from './protocol.js';
+export class BridgeError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'BridgeError';
+    }
+}
+function defaultChannelFactory() {
+    const scope = globalThis;
+    if (typeof scope.BroadcastChannel !== 'function')
+        return undefined;
+    const ctor = scope.BroadcastChannel;
+    return (name) => new ctor(name);
+}
+export class BridgeClient {
+    channel;
+    pending = new Map();
+    listeners = new Map();
+    timeoutMs;
+    nonce;
+    sequence = 0;
+    /** Whether a page has said hello since the channel opened. */
+    pagePresent = false;
+    constructor(options = {}) {
+        this.timeoutMs = options.timeoutMs ?? 15_000;
+        this.nonce = options.nonce ?? '';
+        const factory = options.channelFactory ?? defaultChannelFactory();
+        if (options.channel && !options.nonce) {
+            console.warn('crowdy bridge: a channel without a boot nonce; refusing to join (the page must send crowdy.json with bridgeNonce)');
+        }
+        if (options.channel && options.nonce && factory) {
+            this.channel = factory(options.channel);
+            this.channel.addEventListener('message', (event) => {
+                this.handle(event.data);
+            });
+        }
+    }
+    /** True when a channel exists (a page may or may not be listening yet). */
+    get available() {
+        return this.channel !== undefined;
+    }
+    on(event, listener) {
+        let set = this.listeners.get(event);
+        if (!set) {
+            set = new Set();
+            this.listeners.set(event, set);
+        }
+        set.add(listener);
+        return () => {
+            set?.delete(listener);
+        };
+    }
+    emit(event, payload) {
+        if (!this.channel)
+            return;
+        const frame = { v: CROWDY_BRIDGE_PROTOCOL_VERSION, n: this.nonce, from: 'worker', t: 'event', event, payload };
+        this.channel.postMessage(frame);
+    }
+    async request(method, params, options = {}) {
+        if (!this.channel) {
+            throw new BridgeError('This action needs the Crowdy Studio page, which is not connected to the harness (developer cockpit).', BRIDGE_ERROR_CODES.unavailable);
+        }
+        if (!this.pagePresent) {
+            throw new BridgeError('Crowdy Studio has not connected to the agent yet. Keep the Studio panel open and retry in a moment.', BRIDGE_ERROR_CODES.unavailable);
+        }
+        options.signal?.throwIfAborted();
+        this.sequence += 1;
+        const id = `w${this.sequence}-${Date.now().toString(36)}`;
+        const frame = { v: CROWDY_BRIDGE_PROTOCOL_VERSION, n: this.nonce, from: 'worker', t: 'req', id, method, params };
+        return new Promise((resolve, reject) => {
+            const timeout = options.timeoutMs ?? this.timeoutMs;
+            const timer = setTimeout(() => {
+                this.pending.delete(id);
+                reject(new BridgeError(`Crowdy Studio did not answer ${method} within ${Math.round(timeout / 1000)}s.`, BRIDGE_ERROR_CODES.timeout));
+            }, timeout);
+            const onAbort = () => {
+                clearTimeout(timer);
+                this.pending.delete(id);
+                reject(new BridgeError(`${method} was cancelled.`, BRIDGE_ERROR_CODES.refused));
+            };
+            options.signal?.addEventListener('abort', onAbort, { once: true });
+            this.pending.set(id, {
+                resolve: (value) => {
+                    clearTimeout(timer);
+                    options.signal?.removeEventListener('abort', onAbort);
+                    resolve(value);
+                },
+                reject: (error) => {
+                    clearTimeout(timer);
+                    options.signal?.removeEventListener('abort', onAbort);
+                    reject(error);
+                },
+                timer,
+            });
+            this.channel.postMessage(frame);
+        });
+    }
+    close() {
+        for (const entry of this.pending.values()) {
+            entry.reject(new BridgeError('The bridge closed.', BRIDGE_ERROR_CODES.unavailable));
+        }
+        this.pending.clear();
+        this.channel?.close();
+    }
+    handle(data) {
+        if (!isBridgeFrame(data, this.nonce) || data.from !== 'page')
+            return;
+        switch (data.t) {
+            case 'res': {
+                const entry = this.pending.get(data.id);
+                if (!entry)
+                    return;
+                this.pending.delete(data.id);
+                entry.resolve(data.result);
+                return;
+            }
+            case 'err': {
+                const entry = this.pending.get(data.id);
+                if (!entry)
+                    return;
+                this.pending.delete(data.id);
+                entry.reject(new BridgeError(data.message, data.code || BRIDGE_ERROR_CODES.pageError));
+                return;
+            }
+            case 'event': {
+                if (data.event === 'page.hello')
+                    this.pagePresent = true;
+                if (data.event === 'page.bye')
+                    this.pagePresent = false;
+                const set = this.listeners.get(data.event);
+                if (!set)
+                    return;
+                for (const listener of set) {
+                    try {
+                        listener(data.payload);
+                    }
+                    catch (error) {
+                        console.warn(`crowdy bridge: listener for ${data.event} threw`, error);
+                    }
+                }
+                return;
+            }
+            default:
+                return;
+        }
+    }
+}
+//# sourceMappingURL=client.js.map