@datamoc/mw_games 0.43.0 → 0.45.0

package/dist/core/ReplayFile.js

@@ -1,257 +0,0 @@
-import { Recorder, Player, parseReplayEvents } from './Replay.js';
-import { defaultStorage } from './Save.js';
-import { StoredValue } from './StoredValue.js';
-import { checkSize, parseInbound } from './Sanitize.js';
-function checkIdentity(kind, value) {
-    if (typeof value !== 'string' || !value.length)
-        throw new TypeError(`a replay file needs a non-empty ${kind}`);
-    return value;
-}
-function checkSeed(seed) {
-    const value = seed;
-    if (!Number.isInteger(value) || value < 0 || value > 0xffffffff)
-        throw new RangeError('a replay seed must be uint32');
-    return value;
-}
-/**
- * Wraps a recording in the versioned, self-describing envelope, as a JSON string ready to
- * save as a file. The events are validated and copied, so the exported file cannot drift
- * with a recording that keeps running.
- *
- * @example
- * ```ts
- * import { exportReplayFile, Recorder, Signal, version } from '@datamoc/mw_games';
- *
- * declare const recorder: Recorder;
- * const file = exportReplayFile(recorder.toJSON(), {
- * 	framework: version,
- * 	game: 'my-game',
- * 	recordedAt: Date.now(),
- * });
- * ```
- */
-export function exportReplayFile(events, meta) {
-    const framework = checkIdentity('framework', meta.framework);
-    const game = checkIdentity('game', meta.game);
-    const file = {
-        format: 'mwg-replay',
-        version: 1,
-        framework,
-        game,
-        events: parseReplayEvents(events),
-    };
-    if (meta.seed !== undefined)
-        file.seed = checkSeed(meta.seed);
-    if (meta.recordedAt !== undefined) {
-        if (typeof meta.recordedAt !== 'number' || !Number.isFinite(meta.recordedAt))
-            throw new TypeError('recordedAt must be a finite number');
-        file.recordedAt = meta.recordedAt;
-    }
-    return JSON.stringify(file);
-}
-/**
- * Parses and checks a replay file, refusing by name anything that is not this game on this
- * framework: a replay from another build does not fail somewhere mid-playback, it is
- * rejected at the door with what it actually carries.
- *
- * @example
- * ```ts
- * import { importReplayFile, version } from '@datamoc/mw_games';
- *
- * declare const json: string; // read from a file, see readReplayFile
- * const file = importReplayFile(json, { framework: version, game: 'my-game' });
- * console.log(file.events.length, file.seed);
- * ```
- */
-export function importReplayFile(json, expect) {
-    const parsed = parseInbound(json, { label: 'replay file' });
-    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
-        throw new Error('a replay file must be a JSON object');
-    if (parsed.format !== 'mwg-replay')
-        throw new Error(`not a replay file: expected format "mwg-replay", found ${JSON.stringify(parsed.format)}`);
-    if (parsed.version !== 1)
-        throw new Error(`replay file version ${JSON.stringify(parsed.version)} is not supported (this build reads 1)`);
-    if (parsed.game !== expect.game)
-        throw new Error(`a replay of ${JSON.stringify(parsed.game)} cannot be imported into ${JSON.stringify(expect.game)}`);
-    if (parsed.framework !== expect.framework)
-        throw new Error(`a replay recorded against mwg ${JSON.stringify(parsed.framework)} cannot be imported into ${JSON.stringify(expect.framework)}`);
-    const events = parseReplayEvents(parsed.events);
-    return {
-        format: 'mwg-replay',
-        version: 1,
-        framework: parsed.framework,
-        game: parsed.game,
-        ...(parsed.seed === undefined ? {} : { seed: checkSeed(parsed.seed) }),
-        ...(parsed.recordedAt === undefined ? {} : { recordedAt: parsed.recordedAt }),
-        events,
-    };
-}
-/**
- * The newest recording, always kept, bounded: what "watch the previous run" reads. One
- * recording deep by design (the newest replaces the older one), stored through the same
- * `SaveStorage` a `SaveSystem` slot uses, so it survives a reload and lands in the
- * in-memory fallback under `file://`.
- *
- * @example
- * ```ts
- * import { LastRun, Recorder } from '@datamoc/mw_games/core';
- *
- * declare const recorder: Recorder;
- * const last = new LastRun({ namespace: 'my-game' });
- * last.keep(recorder.toJSON());
- * const kept = last.load();
- * console.log(kept ? kept.events.length : 'no run yet');
- * ```
- */
-export class LastRun {
-    constructor(options) {
-        if (typeof options.namespace !== 'string' || !options.namespace.length)
-            throw new TypeError('a last-run store needs a non-empty namespace');
-        const maxEvents = options.maxEvents ?? 10000;
-        if (!Number.isInteger(maxEvents) || maxEvents < 1 || maxEvents > 1_000_000)
-            throw new RangeError('last-run maxEvents must be in 1..1000000');
-        this.maxEvents = maxEvents;
-        this.store = new StoredValue(options.storage ?? defaultStorage(), `mwg-last-run:${options.namespace}`);
-    }
-    /** Keeps the newest recording, replacing any previous one. An oversized tail keeps its newest events. */
-    keep(events, seed) {
-        let all = parseReplayEvents(events);
-        if (all.length > this.maxEvents)
-            all = all.slice(all.length - this.maxEvents);
-        const data = seed === undefined ? { version: 1, events: all } : { version: 1, seed: checkSeed(seed), events: all };
-        checkSize(JSON.stringify(data));
-        this.store.write(data);
-    }
-    /** The kept recording, or null when no run has been kept yet. Corrupt storage throws by name. */
-    load() {
-        const data = this.store.read(null);
-        if (data === null)
-            return null;
-        if (data?.version !== 1)
-            throw new Error('the kept last-run recording is not version 1; clear() it and record again');
-        return {
-            version: 1,
-            ...(data.seed === undefined ? {} : { seed: checkSeed(data.seed) }),
-            events: parseReplayEvents(data.events),
-        };
-    }
-    /** Drops the kept recording. */
-    clear() {
-        this.store.remove();
-    }
-}
-/**
- * Pairs a live recording with the state a save already captured, as plain data a
- * `SaveSystem` slot stores: restoring the slot restores the run, not just the numbers.
- *
- * @example
- * ```ts
- * import { runCheckpoint, Recorder } from '@datamoc/mw_games/core';
- *
- * declare const recorder: Recorder;
- * const checkpoint = runCheckpoint(recorder, { depth: 4, hp: 9 });
- * console.log(checkpoint.frame, checkpoint.state.hp);
- * ```
- */
-export function runCheckpoint(recorder, state) {
-    return { version: 1, frame: recorder.frame, events: recorder.toJSON(), state };
-}
-/**
- * The playback half of a restored checkpoint: a `Player` that continues the recording from
- * the checkpoint's frame, skipping the events before it, so the run resumes rather than
- * restarting. The restored state and the resumed playback travel together: the game loads
- * the slot, then starts this player against the same frame signal it records on.
- *
- * @example
- * ```ts
- * import { resumeRunPlayer, runCheckpoint, Recorder, Signal } from '@datamoc/mw_games/core';
- *
- * declare const recorder: Recorder;
- * const checkpoint = runCheckpoint(recorder, { hp: 9 });
- * const onFrame = new Signal<number>();
- * const player = resumeRunPlayer(checkpoint, (action) => console.log(action), onFrame);
- * player.stop();
- * ```
- */
-export function resumeRunPlayer(checkpoint, dispatch, frames) {
-    if (typeof checkpoint !== 'object' || checkpoint === null || checkpoint.version !== 1)
-        throw new Error('a run checkpoint must be { version: 1, frame, events, state }');
-    return new Player(parseReplayEvents(checkpoint.events), dispatch, frames, { fromFrame: checkpoint.frame });
-}
-/**
- * Saves a replay file locally: a Blob download, which works from a `file://` page with no
- * server and no `fetch()`. Nothing is read back; the file is the export.
- *
- * @example
- * ```ts
- * import { downloadReplayFile, exportReplayFile } from '@datamoc/mw_games/core';
- *
- * const json = exportReplayFile([], { framework: '0.26.1', game: 'my-game' });
- * downloadReplayFile(json, 'run-1.mwgreplay.json');
- * ```
- */
-export function downloadReplayFile(json, filename) {
-    if (typeof document === 'undefined')
-        throw new Error('downloadReplayFile needs a browser document');
-    const anchor = document.createElement('a');
-    anchor.href = URL.createObjectURL(new Blob([json], { type: 'application/json' }));
-    anchor.download = filename;
-    document.body.appendChild(anchor);
-    anchor.click();
-    anchor.remove();
-    setTimeout(() => URL.revokeObjectURL(anchor.href), 0);
-}
-/**
- * Reads a chosen file (or any Blob) as text, headless and in the browser alike: the
- * browser half of an import is the picker, this is the rest. `Blob.text()` needs no DOM,
- * so the same function reads a `node:fs` buffer's Blob in a tool.
- *
- * @example
- * ```ts
- * import { importReplayFile, readReplayFile, version } from '@datamoc/mw_games';
- *
- * declare const file: Blob; // from pickReplayFile, or a Node-side Blob
- * const json = await readReplayFile(file);
- * const replay = importReplayFile(json, { framework: version, game: 'my-game' });
- * ```
- */
-export async function readReplayFile(file) {
-    return await file.text();
-}
-/**
- * Opens a file picker for one replay file, resolving null when the player cancels. The
- * `file://` import path: no `fetch()`, no drag-drop wiring to get wrong.
- *
- * @example
- * ```ts
- * import { importReplayFile, pickReplayFile, readReplayFile, version } from '@datamoc/mw_games';
- *
- * const picked = await pickReplayFile();
- * if (picked) {
- * 	const replay = importReplayFile(await readReplayFile(picked), { framework: version, game: 'my-game' });
- * }
- * ```
- */
-export async function pickReplayFile(accept = '.json') {
-    if (typeof document === 'undefined')
-        throw new Error('pickReplayFile needs a browser document');
-    return await new Promise((resolve) => {
-        const input = document.createElement('input');
-        input.type = 'file';
-        input.accept = accept;
-        input.style.display = 'none';
-        let settled = false;
-        const done = (value) => {
-            if (settled)
-                return;
-            settled = true;
-            input.remove();
-            resolve(value);
-        };
-        input.addEventListener('change', () => done(input.files?.[0] ?? null));
-        input.addEventListener('cancel', () => done(null));
-        document.body.appendChild(input);
-        input.click();
-    });
-}
-//# sourceMappingURL=ReplayFile.js.map

package/dist/core/ReplayFile.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ReplayFile.js","sourceRoot":"","sources":["../../src/core/ReplayFile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,EAAE,cAAc,EAAoB,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAsCxD,SAAS,aAAa,CAAC,IAA0B,EAAE,KAAc;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;IAC/G,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,IAAa;IAC/B,MAAM,KAAK,GAAG,IAAc,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,UAAU;QAC9D,MAAM,IAAI,UAAU,CAAC,8BAA8B,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAA8B,EAAE,IAAoB;IACpF,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAe;QACxB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,CAAC;QACV,SAAS;QACT,IAAI;QACJ,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC;KACjC,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;YAC3E,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,MAA2C;IACzF,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAwB,CAAC;IACnF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY;QACjC,MAAM,IAAI,KAAK,CAAC,0DAA0D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5G,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;IAChH,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAC9B,MAAM,IAAI,KAAK,CACd,eAAe,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CACnG,CAAC;IACH,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;QACxC,MAAM,IAAI,KAAK,CACd,iCAAiC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAC/H,CAAC;IACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChD,OAAO;QACN,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QAC7E,MAAM;KACN,CAAC;AACH,CAAC;AAiBD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,OAAO;IAInB,YAAY,OAAuB;QAClC,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM;YACrE,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,SAAS;YACzE,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAC3B,OAAO,CAAC,OAAO,IAAI,cAAc,EAAE,EACnC,gBAAgB,OAAO,CAAC,SAAS,EAAE,CACnC,CAAC;IACH,CAAC;IAED,yGAAyG;IACzG,IAAI,CAAC,MAA8B,EAAE,IAAa;QACjD,IAAI,GAAG,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS;YAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,IAAI,GACT,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACvG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,iGAAiG;IACjG,IAAI;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,IAAI,IAAI,EAAE,OAAO,KAAK,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC9F,OAAO;YACN,OAAO,EAAE,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClE,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC;SACtC,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,KAAK;QACJ,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACrB,CAAC;CACD;AAWD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAI,QAAkB,EAAE,KAAQ;IAC5D,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC;AAChF,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,eAAe,CAC9B,UAA4B,EAC5B,QAAkC,EAClC,MAAsB;IAEtB,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,OAAO,KAAK,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAClF,OAAO,IAAI,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;AAC5G,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAgB;IAChE,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACpG,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;IAClF,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAU;IAC9C,OAAO,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAM,GAAG,OAAO;IACpD,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAChG,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC9C,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC;QACpB,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;QACtB,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,KAAkB,EAAE,EAAE;YACnC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,CAAC,MAAM,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,KAAK,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QACvE,KAAK,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACjC,KAAK,CAAC,KAAK,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/RunHistory.d.ts

@@ -1,54 +0,0 @@
-import { type SaveStorage } from './Save.ts';
-/**
- * A personal, local record of completed runs - what `core.Session` (launch count) and
- * `core.Achievements` (derived unlocks, no per-run record) don't keep, and distinct from
- * `SaveSystem.list()`, which enumerates *continuable* slots, not runs already over.
- *
- * `mwg` stays agnostic about what a run's own report actually contains, the same way
- * `SaveSystem` stays agnostic about what "the save" contains: a game supplies its own
- * `summary` shape (score, cause of death, floor reached, whatever it considers a run's own
- * stats) and this only ever stores, lists, and sorts it.
- *
- * @example
- * ```ts
- * import { RunHistory } from '@datamoc/mw_games/core';
- *
- * interface RunSummary { score: number; cause: string }
- *
- * const runs = new RunHistory<RunSummary>({ namespace: 'my-game', limit: 20 });
- * runs.record({ score: 340, cause: 'slain by a rat' });
- *
- * const best = runs.ranked((summary) => summary.score, 'desc');
- * ```
- */
-export interface RunHistoryEntry<T> {
-    id: string;
-    endedAt: number;
-    summary: T;
-}
-export interface RunHistoryOptions {
-    /** namespaces the stored history, so two games sharing an origin never collide */
-    namespace: string;
-    storage?: SaveStorage;
-    /** oldest runs are dropped once this many are stored; omit for unlimited */
-    limit?: number;
-}
-export declare class RunHistory<T> {
-    private readonly store;
-    private readonly limit?;
-    constructor(options: RunHistoryOptions);
-    private readAll;
-    /** appends a completed run's summary, oldest first; drops the oldest entry once `limit` is exceeded */
-    record(summary: T): RunHistoryEntry<T>;
-    /** every recorded run, oldest first */
-    all(): readonly RunHistoryEntry<T>[];
-    /**
-     * Every recorded run sorted by a field of its own summary - explicitly a local, personal
-     * ranking over this player's own history, not a networked leaderboard comparing players
-     * against each other, which `mwg` does not attempt here.
-     */
-    ranked(by: (summary: T) => number, order?: 'asc' | 'desc'): readonly RunHistoryEntry<T>[];
-    /** drops every recorded run */
-    clear(): void;
-}
-//# sourceMappingURL=RunHistory.d.ts.map

package/dist/core/RunHistory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"RunHistory.d.ts","sourceRoot":"","sources":["../../src/core/RunHistory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7D;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,CAAC,CAAC;CACX;AAED,MAAM,WAAW,iBAAiB;IACjC,kFAAkF;IAClF,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,UAAU,CAAC,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoC;IAC1D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAS;IAEhC,YAAY,OAAO,EAAE,iBAAiB,EAMrC;IAED,OAAO,CAAC,OAAO;IAIf,uGAAuG;IACvG,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAOrC;IAED,uCAAuC;IACvC,GAAG,IAAI,SAAS,eAAe,CAAC,CAAC,CAAC,EAAE,CAEnC;IAED;;;;OAIG;IACH,MAAM,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,MAAM,EAAE,KAAK,GAAE,KAAK,GAAG,MAAe,GAAG,SAAS,eAAe,CAAC,CAAC,CAAC,EAAE,CAIhG;IAED,+BAA+B;IAC/B,KAAK,IAAI,IAAI,CAEZ;CACD"}

package/dist/core/RunHistory.js

@@ -1,40 +0,0 @@
-import { defaultStorage } from './Save.js';
-import { StoredValue } from './StoredValue.js';
-export class RunHistory {
-    constructor(options) {
-        this.store = new StoredValue(options.storage ?? defaultStorage(), `mwg-runs:${options.namespace}`);
-        this.limit = options.limit;
-    }
-    readAll() {
-        return this.store.read([]);
-    }
-    /** appends a completed run's summary, oldest first; drops the oldest entry once `limit` is exceeded */
-    record(summary) {
-        const entries = this.readAll();
-        const entry = { id: `${Date.now()}-${entries.length}`, endedAt: Date.now(), summary };
-        entries.push(entry);
-        if (this.limit !== undefined && entries.length > this.limit)
-            entries.splice(0, entries.length - this.limit);
-        this.store.write(entries);
-        return entry;
-    }
-    /** every recorded run, oldest first */
-    all() {
-        return this.readAll();
-    }
-    /**
-     * Every recorded run sorted by a field of its own summary - explicitly a local, personal
-     * ranking over this player's own history, not a networked leaderboard comparing players
-     * against each other, which `mwg` does not attempt here.
-     */
-    ranked(by, order = 'desc') {
-        const entries = this.readAll();
-        const sign = order === 'desc' ? -1 : 1;
-        return entries.sort((a, b) => sign * (by(a.summary) - by(b.summary)));
-    }
-    /** drops every recorded run */
-    clear() {
-        this.store.remove();
-    }
-}
-//# sourceMappingURL=RunHistory.js.map

package/dist/core/RunHistory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"RunHistory.js","sourceRoot":"","sources":["../../src/core/RunHistory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAoB,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAsC/C,MAAM,OAAO,UAAU;IAItB,YAAY,OAA0B;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAC3B,OAAO,CAAC,OAAO,IAAI,cAAc,EAAE,EACnC,YAAY,OAAO,CAAC,SAAS,EAAE,CAC/B,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,CAAC;IAEO,OAAO;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,uGAAuG;IACvG,MAAM,CAAC,OAAU;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAuB,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC;QAC1G,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5G,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC;IACd,CAAC;IAED,uCAAuC;IACvC,GAAG;QACF,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,EAA0B,EAAE,KAAK,GAAmB,MAAM;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,+BAA+B;IAC/B,KAAK;QACJ,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACrB,CAAC;CACD"}

package/dist/core/Sanitize.d.ts

@@ -1,101 +0,0 @@
-/**
- * Cheap, structural checks over inbound data - a save imported from another device or
- * server (`SaveSystem.importSlot`), a news feed response (`NewsClient`), an external save
- * format (`rpg.decodeMarshal`) - run before any of it is parsed or handed to a game as
- * trusted state. Deliberately narrow: a size cap and a control-character check catch a
- * truncated, corrupted, or hostile payload cheaply, ahead of and distinct from validating
- * that a parsed value's own fields have the shape a game actually expects (`validateSchema`,
- * below), which is a separate, deeper pass over already-parsed data.
- *
- * @example
- * ```ts
- * import { checkSize, checkNoControlCharacters, sanitizeInboundText, validateSchema } from '@datamoc/mw_games/core';
- *
- * declare const rawResponseText: string;
- *
- * // the cheap structural pass, before JSON.parse ever sees the payload
- * const text = sanitizeInboundText(rawResponseText, { maxBytes: 1_000_000 });
- * // equivalent to calling checkSize then checkNoControlCharacters by hand
- *
- * // the deeper pass, once the payload is parsed
- * const parsed = JSON.parse(text);
- * validateSchema(parsed, {
- *   type: 'object',
- *   fields: { id: { type: 'string' }, score: { type: 'number', min: 0 } },
- * });
- * ```
- */
-export interface SizeLimitOptions {
-    /** bytes; defaults to 10 MB */
-    maxBytes?: number;
-}
-/** throws once `data`'s size (UTF-8 byte length for a string, byte length for a buffer) exceeds the cap */
-export declare function checkSize(data: string | Uint8Array, options?: SizeLimitOptions): void;
-/**
- * Throws on an embedded NUL byte or a control character outside ordinary whitespace
- * (tab, newline, carriage return) - the kind of byte a well-formed save or news response
- * never legitimately contains, and a cheap tell that a payload was truncated, corrupted, or
- * deliberately malformed before it ever reaches `JSON.parse`.
- */
-export declare function checkNoControlCharacters(text: string): void;
-/** `checkSize` then `checkNoControlCharacters` - the minimum bar before any inbound text is parsed */
-export declare function sanitizeInboundText(text: string, options?: SizeLimitOptions): string;
-/**
- * A small schema for validating an already-parsed value's shape - deliberately not a full
- * JSON Schema implementation, only what `SaveSystem`/`NewsClient`-shaped data actually needs:
- * primitives, arrays, and objects, with `__proto__`/`constructor`/`prototype` keys always
- * rejected regardless of what a schema itself asks for, since no legitimate save or feed
- * payload ever needs to set one and a parsed JSON object having one is exactly the
- * prototype-pollution shape this exists to catch.
- */
-export type Schema = {
-    type: 'string';
-    optional?: boolean;
-} | {
-    type: 'number';
-    optional?: boolean;
-    min?: number;
-    max?: number;
-} | {
-    type: 'boolean';
-    optional?: boolean;
-} | {
-    type: 'object';
-    optional?: boolean;
-    fields: Record<string, Schema>;
-} | {
-    type: 'array';
-    optional?: boolean;
-    items: Schema;
-    maxLength?: number;
-};
-/**
- * Recursively rejects `__proto__`/`constructor`/`prototype` as an own key anywhere in `value`,
- * for data too dynamic for `validateSchema`'s fixed field list (a free-form variable bag, a
- * dictionary keyed by content-chosen ids, both common in a save format). Reuses the same
- * `FORBIDDEN_KEYS` set `validateSchema` enforces for fixed-shape objects; use this one instead
- * when the shape itself isn't known ahead of time.
- */
-export declare function assertNoForbiddenKeys(value: unknown, path?: string): void;
-/** throws with a path-qualified message at the first field that does not match `schema` */
-export declare function validateSchema(value: unknown, schema: Schema, path?: string): void;
-/**
- * The whole inbound pass in one call: `sanitizeInboundText`, then `JSON.parse` with a reviver
- * that refuses `__proto__`/`constructor`/`prototype` at any depth. Every path in `core` that
- * reads JSON it did not just produce goes through this (save slots, `Collection`, stored
- * values, `LockstepClient` messages, `NewsClient`), because under `file://` Chromium gives every
- * local page one shared `localStorage`: a value this game wrote can have been rewritten by any
- * other HTML file opened on the same machine. Throws a named `Error` for every failure.
- *
- * @example
- * ```ts
- * import { parseInbound } from '@datamoc/mw_games/core';
- *
- * parseInbound('{"hp": 3}'); // { hp: 3 }
- * parseInbound('{"__proto__": {"admin": true}}'); // throws: $ contains a forbidden key "__proto__"
- * ```
- */
-export declare function parseInbound(text: string, options?: SizeLimitOptions & {
-    label?: string;
-}): unknown;
-//# sourceMappingURL=Sanitize.d.ts.map

package/dist/core/Sanitize.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"Sanitize.d.ts","sourceRoot":"","sources":["../../src/core/Sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,WAAW,gBAAgB;IAChC,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,2GAA2G;AAC3G,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,OAAO,GAAE,gBAAqB,GAAG,IAAI,CAIzF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAU3D;AAED,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,MAAM,CAIxF;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,MAAM,GACf;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAI5E;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAM,GAAG,IAAI,CAWtE;AAED,2FAA2F;AAC3F,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,SAAM,GAAG,IAAI,CAsC/E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAgB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAYvG"}

package/dist/core/Sanitize.js

@@ -1,162 +0,0 @@
-/**
- * Cheap, structural checks over inbound data - a save imported from another device or
- * server (`SaveSystem.importSlot`), a news feed response (`NewsClient`), an external save
- * format (`rpg.decodeMarshal`) - run before any of it is parsed or handed to a game as
- * trusted state. Deliberately narrow: a size cap and a control-character check catch a
- * truncated, corrupted, or hostile payload cheaply, ahead of and distinct from validating
- * that a parsed value's own fields have the shape a game actually expects (`validateSchema`,
- * below), which is a separate, deeper pass over already-parsed data.
- *
- * @example
- * ```ts
- * import { checkSize, checkNoControlCharacters, sanitizeInboundText, validateSchema } from '@datamoc/mw_games/core';
- *
- * declare const rawResponseText: string;
- *
- * // the cheap structural pass, before JSON.parse ever sees the payload
- * const text = sanitizeInboundText(rawResponseText, { maxBytes: 1_000_000 });
- * // equivalent to calling checkSize then checkNoControlCharacters by hand
- *
- * // the deeper pass, once the payload is parsed
- * const parsed = JSON.parse(text);
- * validateSchema(parsed, {
- *   type: 'object',
- *   fields: { id: { type: 'string' }, score: { type: 'number', min: 0 } },
- * });
- * ```
- */
-const DEFAULT_MAX_BYTES = 10 * 1024 * 1024;
-/** throws once `data`'s size (UTF-8 byte length for a string, byte length for a buffer) exceeds the cap */
-export function checkSize(data, options = {}) {
-    const maxBytes = options.maxBytes ?? DEFAULT_MAX_BYTES;
-    const size = typeof data === 'string' ? new TextEncoder().encode(data).length : data.length;
-    if (size > maxBytes)
-        throw new Error(`inbound data exceeds the ${maxBytes}-byte limit (${size} bytes)`);
-}
-/**
- * Throws on an embedded NUL byte or a control character outside ordinary whitespace
- * (tab, newline, carriage return) - the kind of byte a well-formed save or news response
- * never legitimately contains, and a cheap tell that a payload was truncated, corrupted, or
- * deliberately malformed before it ever reaches `JSON.parse`.
- */
-export function checkNoControlCharacters(text) {
-    for (let i = 0; i < text.length; i++) {
-        const code = text.charCodeAt(i);
-        if (code === 0x09 || code === 0x0a || code === 0x0d)
-            continue; //tab, LF, CR
-        if (code <= 0x1f || code === 0x7f) {
-            throw new Error(`inbound data contains a control character (0x${code.toString(16).padStart(2, '0')}) at index ${i}`);
-        }
-    }
-}
-/** `checkSize` then `checkNoControlCharacters` - the minimum bar before any inbound text is parsed */
-export function sanitizeInboundText(text, options = {}) {
-    checkSize(text, options);
-    checkNoControlCharacters(text);
-    return text;
-}
-const FORBIDDEN_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
-/**
- * Recursively rejects `__proto__`/`constructor`/`prototype` as an own key anywhere in `value`,
- * for data too dynamic for `validateSchema`'s fixed field list (a free-form variable bag, a
- * dictionary keyed by content-chosen ids, both common in a save format). Reuses the same
- * `FORBIDDEN_KEYS` set `validateSchema` enforces for fixed-shape objects; use this one instead
- * when the shape itself isn't known ahead of time.
- */
-export function assertNoForbiddenKeys(value, path = '$') {
-    if (Array.isArray(value)) {
-        value.forEach((item, index) => assertNoForbiddenKeys(item, `${path}[${index}]`));
-        return;
-    }
-    if (value !== null && typeof value === 'object') {
-        for (const key of Object.keys(value)) {
-            if (FORBIDDEN_KEYS.has(key))
-                throw new Error(`${path} contains a forbidden key "${key}"`);
-            assertNoForbiddenKeys(value[key], `${path}.${key}`);
-        }
-    }
-}
-/** throws with a path-qualified message at the first field that does not match `schema` */
-export function validateSchema(value, schema, path = '$') {
-    if (value === undefined) {
-        if (schema.optional)
-            return;
-        throw new Error(`${path} is required`);
-    }
-    switch (schema.type) {
-        case 'string':
-            if (typeof value !== 'string')
-                throw new Error(`${path} must be a string`);
-            return;
-        case 'number':
-            if (typeof value !== 'number' || !Number.isFinite(value))
-                throw new Error(`${path} must be a finite number`);
-            if (schema.min !== undefined && value < schema.min)
-                throw new Error(`${path} must be >= ${schema.min}`);
-            if (schema.max !== undefined && value > schema.max)
-                throw new Error(`${path} must be <= ${schema.max}`);
-            return;
-        case 'boolean':
-            if (typeof value !== 'boolean')
-                throw new Error(`${path} must be a boolean`);
-            return;
-        case 'array':
-            if (!Array.isArray(value))
-                throw new Error(`${path} must be an array`);
-            if (schema.maxLength !== undefined && value.length > schema.maxLength) {
-                throw new Error(`${path} exceeds its maximum length of ${schema.maxLength}`);
-            }
-            value.forEach((item, index) => validateSchema(item, schema.items, `${path}[${index}]`));
-            return;
-        case 'object': {
-            if (typeof value !== 'object' || value === null || Array.isArray(value))
-                throw new Error(`${path} must be an object`);
-            for (const key of Object.keys(value)) {
-                if (FORBIDDEN_KEYS.has(key))
-                    throw new Error(`${path} contains a forbidden key "${key}"`);
-            }
-            for (const [key, fieldSchema] of Object.entries(schema.fields)) {
-                validateSchema(value[key], fieldSchema, `${path}.${key}`);
-            }
-            return;
-        }
-    }
-}
-/**
- * The whole inbound pass in one call: `sanitizeInboundText`, then `JSON.parse` with a reviver
- * that refuses `__proto__`/`constructor`/`prototype` at any depth. Every path in `core` that
- * reads JSON it did not just produce goes through this (save slots, `Collection`, stored
- * values, `LockstepClient` messages, `NewsClient`), because under `file://` Chromium gives every
- * local page one shared `localStorage`: a value this game wrote can have been rewritten by any
- * other HTML file opened on the same machine. Throws a named `Error` for every failure.
- *
- * @example
- * ```ts
- * import { parseInbound } from '@datamoc/mw_games/core';
- *
- * parseInbound('{"hp": 3}'); // { hp: 3 }
- * parseInbound('{"__proto__": {"admin": true}}'); // throws: $ contains a forbidden key "__proto__"
- * ```
- */
-export function parseInbound(text, options = {}) {
-    const label = options.label ?? 'inbound data';
-    sanitizeInboundText(text, options);
-    try {
-        return JSON.parse(text, (key, value) => {
-            if (FORBIDDEN_KEYS.has(key))
-                throw new ForbiddenKey(key);
-            return value;
-        });
-    }
-    catch (error) {
-        if (error instanceof ForbiddenKey)
-            throw new Error(`${label} contains a forbidden key "${error.key}"`);
-        throw new Error(`${label} is not valid JSON (${error instanceof Error ? error.message : String(error)})`);
-    }
-}
-class ForbiddenKey {
-    constructor(key) {
-        this.key = key;
-    }
-}
-//# sourceMappingURL=Sanitize.js.map

package/dist/core/Sanitize.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Sanitize.js","sourceRoot":"","sources":["../../src/core/Sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAOH,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,2GAA2G;AAC3G,MAAM,UAAU,SAAS,CAAC,IAAyB,EAAE,OAAO,GAAqB,EAAE;IAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAC5F,IAAI,IAAI,GAAG,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,gBAAgB,IAAI,SAAS,CAAC,CAAC;AACzG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS,CAAC,aAAa;QAC5E,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACd,gDAAgD,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,EAAE,CACnG,CAAC;QACH,CAAC;IACF,CAAC;AACF,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,OAAO,GAAqB,EAAE;IAC/E,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzB,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACb,CAAC;AAiBD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAE1E;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,IAAI,GAAG,GAAG;IAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QACjF,OAAO;IACR,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,GAAG,GAAG,CAAC,CAAC;YAC1F,qBAAqB,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;QAClF,CAAC;IACF,CAAC;AACF,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,MAAc,EAAE,IAAI,GAAG,GAAG;IACxE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO;QAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IACxC,CAAC;IAED,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,QAAQ;YACZ,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;YAC3E,OAAO;QACR,KAAK,QAAQ;YACZ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,eAAe,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACxG,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,eAAe,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACxG,OAAO;QACR,KAAK,SAAS;YACb,IAAI,OAAO,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;YAC7E,OAAO;QACR,KAAK,OAAO;YACX,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;YACvE,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;gBACvE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kCAAkC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;YACxF,OAAO;QACR,KAAK,QAAQ,EAAE,CAAC;YACf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBACtE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;YAC9C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,GAAG,GAAG,CAAC,CAAC;YAC3F,CAAC;YACD,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChE,cAAc,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,OAAO;QACR,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAO,GAA0C,EAAE;IAC7F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;IAC9C,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,KAAc,EAAE,EAAE;YAC/C,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC;YACzD,OAAO,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3G,CAAC;AACF,CAAC;AAED,MAAM,YAAY;IAEjB,YAAY,GAAW;QACtB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IAChB,CAAC;CACD"}