@faicad/faijs 0.22.2 → 0.29.5

package/dist/io/fai-zip/container-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-read.js","sourceRoot":"","sources":["../../../src/io/fai-zip/container-read.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,cAAc,EAAuB,MAAM,QAAQ,CAAA;AAE5D,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,GAIjB,MAAM,aAAa,CAAA;AAuBpB,gDAAgD;AAChD,MAAM,YAAY,GAAG,QAAQ,CAAA;AAC7B,iDAAiD;AACjD,MAAM,YAAY,GAAG,QAAQ,CAAA;AAC7B,mDAAmD;AACnD,MAAM,aAAa,GAAG,SAAS,CAAA;AAE/B;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAiB,EAAE,IAAqB;IAC5D,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAA;QAC5F,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,2CAA2C,KAAK,EAAE,CAAC,CACxE;QAAC,GAAmC,CAAC,KAAK,GAAG,CAAC,CAAA;QAC/C,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,aAAa,CAAC,MAAc,EAAE,KAAe;IACpD,MAAM,KAAK,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAA;IAChF,OAAO,IAAI,KAAK,CAAC,+BAA+B,MAAM,GAAG,KAAK,EAAE,CAAC,CAAA;AACnE,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,OAAkB;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IACxC,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;IACtH,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAA;IAC5C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IAC7I,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,aAAa,CAAC,qCAAqC,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,QAAQ,GAAG,MAAiC,CAAA;IAElD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,aAAa,CAAC,+EAA+E,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IACvH,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,aAAa,CAAC,oBAAoB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC3D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,aAAa,CAAC,kCAAkC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAmB,CAAA;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IACrC,MAAM,UAAU,GAAqB,EAAE,CAAA;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,aAAa,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAA;QAC1D,CAAC;QACD,MAAM,GAAG,GAAG,CAA4B,CAAA;QACxC,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACnD,IAAI,EAAE,KAAK,EAAE;YAAE,MAAM,aAAa,CAAC,UAAU,CAAC,iCAAiC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QACxF,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,aAAa,CAAC,UAAU,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAA;QAClH,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,aAAa,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAA;QAC1E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAEf,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QAC5D,IAAI,KAAK,KAAK,EAAE;YAAE,MAAM,aAAa,CAAC,UAAU,CAAC,oCAAoC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;QACjG,qBAAqB,CAAC,KAAK,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;QAClD,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,aAAa,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;QACvF,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACtB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,aAAa,CAAC,UAAU,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAA;QAClF,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;QAChE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,MAAM,aAAa,CAAC,UAAU,CAAC,2CAA2C,EAAE,IAAI,CAAC,CAAA;YACnF,CAAC;QACH,CAAC;QAED,UAAU,CAAC,IAAI,CAAC;YACd,EAAE;YACF,KAAK;YACL,GAAG,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,MAA0B,CAAA;IAC9B,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzE,MAAM,aAAa,CAAC,oCAAoC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC5E,CAAC;QACD,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;IAC1B,CAAC;IAED,OAAO;QACL,MAAM,EAAE,CAAC;QACT,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,UAAU;QAClB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAqC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvI,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,OAAkB;IAC9C,MAAM,KAAK,GAA+B,EAAE,CAAA;IAC5C,MAAM,MAAM,GAA+B,EAAE,CAAA;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAC1C,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;gBAC9B,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,SAAS,CAAA;QACf,IAAI,MAAM,KAAK,SAAS;YAAE,SAAQ;QAClC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACpC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,GAAG,GAAG,CAAC,CAAA;QACtG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAChB,IAAI,MAAM,KAAK,YAAY;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;;YACzC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;IACzB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AAC1B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,OAAO,gBAAgB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,CAAA;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,OAAO,eAAe,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;AAC7C,CAAC;AAED,8EAA8E;AAC9E,SAAS,eAAe,CAAC,OAAkB;IACzC,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;YACnG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,EAAE,CAAA;AACpB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAiB,EAAE,GAAW;IACvD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACzE,CAAC;IACD,oBAAoB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;IAC3C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,mFAAmF,GAAG,GAAG,CAAC,CAAA;IAC5G,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,CAAA;IAC1D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,+BAA+B,CAAC,CAAA;IACtF,CAAC;IACD,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAA;AACjC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,KAAiB,EAAE,UAAkB;IAClE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IACpF,CAAC;IACD,oBAAoB,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAClD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,mCAAmC,CAAC,CAAA;IACrG,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACrC,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,8BAA8B,UAAU,wBAAwB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IAC7I,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,OAAO,oBAAoB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;AAClD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,KAAiB,EAAE,OAA6B,EAAE;IAC9E,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAE1C,MAAM,WAAW,GAAmB,CAAC,GAAG,EAAE;QACxC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAA;YACtE,OAAO,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACvC,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,CAAA;QAClE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,OAAO,sBAAsB,CAAC,CAAA;QACxF,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC,CAAC,EAAE,CAAA;IAEJ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IAErC,MAAM,MAAM,GAAkB;QAC5B,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAC5B,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,SAAS,CAAC,CAAA;YACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,+BAA+B,CAAC,CAAA;YACxF,CAAC;YACD,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAA;QACjC,CAAC;KACF,CAAA;IAED,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;IACvD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AACzD,CAAC","sourcesContent":["/**\n * Unified `.fai.zip` read API (docs/fai-zip-format.md §4–§9).\n *\n * Environment-independent by constraint: reading goes through `io/zip.ts`\n * (`readZipEntries`) plus JSON parsing — no `node:*`, no DOM, no fs, and no\n * direct ZIP library. Web workers, the weapp worker and node share this code.\n *\n * Contract highlights (spec §9 Reader obligations):\n * - a missing/malformed manifest, `format !== 3`, a malformed `models` array,\n *   a missing entry, a missing named data member and a duplicate asset key are\n *   all errors carrying the offending value;\n * - entry selection is `active` or `models[0]` — never a file-name heuristic;\n * - members outside the table (§3), unknown manifest fields and unknown\n *   data-member keys are ignored, never errors, never decision inputs.\n */\nimport { readZipEntries, type ZipReadOptions } from '../zip'\nimport type { ProjectLoader } from '../../cad-runtime/ports'\nimport {\n  assetKeyOf,\n  assertDataMemberPath,\n  assertModelMemberPath,\n  assertSafeMemberPath,\n  decodeMemberText,\n  type ContainerAssetEntries,\n  type ContainerManifest,\n  type ContainerModel,\n} from './container'\n\n/** openContainer options. */\nexport interface OpenContainerOptions {\n  /** override `manifest.active`; default = `manifest.active`, else `models[0]` */\n  modelId?: string\n  /** override the `io/zip.ts` read caps (maxEntries / maxTotalBytes) */\n  caps?: ZipReadOptions\n}\n\n/** openContainer result: manifest, active model, loader and payloads. */\nexport interface OpenContainerResult {\n  manifest: ContainerManifest\n  activeModel: ContainerModel\n  /** project loader over the container's module graph (listModules/readSource) */\n  loader: ProjectLoader\n  files: Record<string, Uint8Array>\n  assets: Record<string, Uint8Array>\n}\n\n/** Unzipped members, keyed by container path. */\ntype MemberMap = Map<string, Uint8Array>\n\n/** Path prefix of every model script member. */\nconst MODEL_PREFIX = 'model/'\n/** Path prefix of the imported-file payloads. */\nconst FILES_PREFIX = 'files/'\n/** Path prefix of the script-consumed payloads. */\nconst ASSETS_PREFIX = 'assets/'\n\n/**\n * Unpack the archive; a non-ZIP input is a hard error carrying the original\n * failure as `cause`. Caps violations keep `io/zip.ts`'s wording.\n */\nfunction unzipMembers(bytes: Uint8Array, caps?: ZipReadOptions): MemberMap {\n  try {\n    return readZipEntries(bytes, caps)\n  } catch (e) {\n    const inner = (e instanceof Error ? e.message : String(e)).replace(/^zip read failed: /, '')\n    const err = new Error(`[fai-zip] cannot open container as ZIP: ${inner}`)\n    ;(err as Error & { cause?: unknown }).cause = e\n    throw err\n  }\n}\n\n/** Normalize a manifest field error into one message naming the offending value. */\nfunction manifestError(reason: string, value?: unknown): Error {\n  const shown = value === undefined ? '' : ` (observed: ${JSON.stringify(value)})`\n  return new Error(`[fai-zip] invalid manifest: ${reason}${shown}`)\n}\n\n/**\n * Read and validate the container manifest from already-unpacked members.\n * @param members the unpacked container members\n * @returns the validated manifest\n */\nfunction readManifestFrom(members: MemberMap): ContainerManifest {\n  const raw = members.get('manifest.json')\n  if (raw === undefined) throw new Error('[fai-zip] invalid manifest: missing manifest.json — not a .fai.zip container')\n  let parsed: unknown\n  try {\n    parsed = JSON.parse(decodeMemberText(raw))\n  } catch (e) {\n    throw new Error(`[fai-zip] invalid manifest: manifest.json is not valid JSON: ${e instanceof Error ? e.message : String(e)}`, { cause: e })\n  }\n  if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {\n    throw manifestError('manifest.json must be a JSON object')\n  }\n  const manifest = parsed as Record<string, unknown>\n\n  if (manifest.format !== 3) {\n    throw manifestError('format must be the integer 3 (this revision); no other value is interpretable', manifest.format)\n  }\n  if (manifest.units !== 'mm') {\n    throw manifestError('units must be \"mm\"', manifest.units)\n  }\n  if (!Array.isArray(manifest.models) || manifest.models.length === 0) {\n    throw manifestError('models must be a non-empty array', manifest.models)\n  }\n\n  const models = manifest.models as unknown[]\n  const seenIds = new Set<string>()\n  const seenEntries = new Set<string>()\n  const normalized: ContainerModel[] = []\n  for (let i = 0; i < models.length; i++) {\n    const m = models[i]\n    if (typeof m !== 'object' || m === null || Array.isArray(m)) {\n      throw manifestError(`models[${i}] must be an object`, m)\n    }\n    const rec = m as Record<string, unknown>\n    const id = typeof rec.id === 'string' ? rec.id : ''\n    if (id === '') throw manifestError(`models[${i}].id must be a non-empty string`, rec.id)\n    if (id.includes('/') || id.includes('\\\\')) throw manifestError(`models[${i}].id must not contain \"/\" or \"\\\\\"`, id)\n    if (seenIds.has(id)) throw manifestError('models[].id must be unique', id)\n    seenIds.add(id)\n\n    const entry = typeof rec.entry === 'string' ? rec.entry : ''\n    if (entry === '') throw manifestError(`models[${i}].entry must be a non-empty string`, rec.entry)\n    assertModelMemberPath(entry, `models[${i}].entry`)\n    if (seenEntries.has(entry)) throw manifestError('models[].entry must be unique', entry)\n    seenEntries.add(entry)\n    if (!members.has(entry)) {\n      throw manifestError(`models[${i}].entry does not exist in the container`, entry)\n    }\n\n    const data = typeof rec.data === 'string' ? rec.data : undefined\n    if (data !== undefined) {\n      assertSafeMemberPath(data, `models[${i}].data`)\n      if (!members.has(data)) {\n        throw manifestError(`models[${i}].data names a member that does not exist`, data)\n      }\n    }\n\n    normalized.push({\n      id,\n      entry,\n      ...(typeof rec.label === 'string' ? { label: rec.label } : {}),\n      ...(data !== undefined ? { data } : {}),\n    })\n  }\n\n  let active: string | undefined\n  if (manifest.active !== undefined) {\n    if (typeof manifest.active !== 'string' || !seenIds.has(manifest.active)) {\n      throw manifestError('active must equal some models[].id', manifest.active)\n    }\n    active = manifest.active\n  }\n\n  return {\n    format: 3,\n    units: 'mm',\n    models: normalized,\n    ...(active !== undefined ? { active } : {}),\n    ...(typeof manifest.createdAt === 'string' ? { createdAt: manifest.createdAt } : {}),\n    ...(typeof manifest.appVersion === 'string' ? { appVersion: manifest.appVersion } : {}),\n    ...(typeof manifest.label === 'string' ? { label: manifest.label } : {}),\n    ...(typeof manifest.source === 'object' && manifest.source !== null ? { source: manifest.source as ContainerManifest['source'] } : {}),\n  }\n}\n\n/**\n * Collect the payload bytes of already-unpacked members.\n * Keys are unique across `files/**` and `assets/**` together (spec §7.1);\n * a duplicate key is an error rather than a pick.\n * @param members the unpacked container members\n * @returns the payload entries keyed by asset key\n */\nfunction readAssetEntriesFrom(members: MemberMap): ContainerAssetEntries {\n  const files: Record<string, Uint8Array> = {}\n  const assets: Record<string, Uint8Array> = {}\n  const claimed = new Set<string>()\n  for (const [path, body] of members) {\n    const prefix = path.startsWith(FILES_PREFIX)\n      ? FILES_PREFIX\n      : path.startsWith(ASSETS_PREFIX)\n        ? ASSETS_PREFIX\n        : undefined\n    if (prefix === undefined) continue\n    const key = assetKeyOf(path, prefix)\n    if (claimed.has(key)) throw new Error(`[fai-zip] duplicate asset key across files//assets/: \"${key}\"`)\n    claimed.add(key)\n    if (prefix === FILES_PREFIX) files[key] = body\n    else assets[key] = body\n  }\n  return { files, assets }\n}\n\n/**\n * Read and validate the container manifest (spec §4).\n * @param bytes the .fai.zip archive bytes\n * @returns the validated manifest\n * @throws when the archive is not a ZIP, the manifest is missing/malformed,\n *   `format !== 3`, `units !== \"mm\"`, `models` is empty/malformed, ids/entries\n *   are duplicated, an entry is not under `model/` or does not exist, `active`\n *   is not in `models[].id`, or a named `data` member does not exist.\n */\nexport function readManifest(bytes: Uint8Array): ContainerManifest {\n  return readManifestFrom(unzipMembers(bytes))\n}\n\n/**\n * List the container models (validated). Same validation as readManifest.\n * @param bytes the .fai.zip archive bytes\n * @returns the validated model list\n */\nexport function listModels(bytes: Uint8Array): ContainerModel[] {\n  return readManifest(bytes).models\n}\n\n/**\n * List every module under `model/` (keys relative to `model/`, sorted).\n * Members outside the table are ignored (§3), never an error.\n * @param bytes the .fai.zip archive bytes\n * @returns module keys relative to `model/`, sorted\n */\nexport function listModules(bytes: Uint8Array): string[] {\n  return listModulesFrom(unzipMembers(bytes))\n}\n\n/** Module keys (relative to `model/`, sorted) of already-unpacked members. */\nfunction listModulesFrom(members: MemberMap): string[] {\n  const keys: string[] = []\n  for (const path of members.keys()) {\n    if (path.startsWith(MODEL_PREFIX) && path.endsWith('.fai.js') && path.length > MODEL_PREFIX.length) {\n      keys.push(path.slice(MODEL_PREFIX.length))\n    }\n  }\n  return keys.sort()\n}\n\n/**\n * Read one module's source text by module key (relative to `model/`).\n * @param bytes the .fai.zip archive bytes\n * @param key the module key relative to `model/` (e.g. `main.fai.js`)\n * @returns the module source text\n * @throws for a key outside `model/` or that does not exist\n */\nexport function readModule(bytes: Uint8Array, key: string): string {\n  if (typeof key !== 'string' || key === '') {\n    throw new Error('[fai-zip] readModule: key must be a non-empty string')\n  }\n  assertSafeMemberPath(key, 'readModule key')\n  if (!key.endsWith('.fai.js')) {\n    throw new Error(`[fai-zip] readModule: key must name a module under model/ (ends with .fai.js): \"${key}\"`)\n  }\n  const member = unzipMembers(bytes).get(MODEL_PREFIX + key)\n  if (member === undefined) {\n    throw new Error(`[fai-zip] readModule: module \"${key}\" does not exist under model/`)\n  }\n  return decodeMemberText(member)\n}\n\n/**\n * Read one model data member's JSON text by member path (e.g. `data/main.json`).\n *\n * The path must be exactly what `models[].data` declares (spec §4): a safe,\n * relative member under `data/` ending with `.json`. Content is validated to\n * parse as JSON — the editor keeps data members pure JSON (§6.1), so a\n * non-JSON member is a format violation and an error, never a silent skip.\n *\n * @param bytes the .fai.zip archive bytes\n * @param memberPath the member path named by `models[].data`\n * @returns the raw JSON text\n * @throws for a non-string/unsafe path, a path outside `data/`, a missing\n *   member, or content that does not parse as JSON\n */\nexport function readDataMember(bytes: Uint8Array, memberPath: string): string {\n  if (typeof memberPath !== 'string' || memberPath === '') {\n    throw new Error('[fai-zip] readDataMember: memberPath must be a non-empty string')\n  }\n  assertDataMemberPath(memberPath, 'readDataMember path')\n  const member = unzipMembers(bytes).get(memberPath)\n  if (member === undefined) {\n    throw new Error(`[fai-zip] readDataMember: member \"${memberPath}\" does not exist in the container`)\n  }\n  const text = decodeMemberText(member)\n  try {\n    JSON.parse(text)\n  } catch (e) {\n    throw new Error(`[fai-zip] readDataMember: \"${memberPath}\" is not valid JSON: ${e instanceof Error ? e.message : String(e)}`, { cause: e })\n  }\n  return text\n}\n\n/**\n * Collect the payload bytes of a container.\n * Keys are unique across `files/**` and `assets/**` together (spec §7.1);\n * a duplicate key is an error rather than a pick.\n * @param bytes the .fai.zip archive bytes\n * @returns the payload entries keyed by asset key\n */\nexport function readAssetEntries(bytes: Uint8Array): ContainerAssetEntries {\n  return readAssetEntriesFrom(unzipMembers(bytes))\n}\n\n/**\n * Host entry point: open a container and return the manifest, the active\n * model and a ProjectLoader over its module graph, plus the payloads.\n *\n * The archive is unpacked exactly once for the whole call.\n *\n * @param bytes the .fai.zip archive bytes\n * @param opts optional active-model override and `io/zip.ts` read caps\n * @returns manifest, active model, project loader and payload entries\n * @throws when the container is invalid, the requested model id is unknown, or\n *   the read caps are exceeded\n */\nexport function openContainer(bytes: Uint8Array, opts: OpenContainerOptions = {}): OpenContainerResult {\n  const members = unzipMembers(bytes, opts.caps)\n  const manifest = readManifestFrom(members)\n\n  const activeModel: ContainerModel = (() => {\n    if (opts.modelId === undefined) {\n      const byActive = manifest.models.find((m) => m.id === manifest.active)\n      return byActive ?? manifest.models[0]\n    }\n    const byParam = manifest.models.find((m) => m.id === opts.modelId)\n    if (byParam === undefined) {\n      throw new Error(`[fai-zip] openContainer: model \"${opts.modelId}\" is not in models[]`)\n    }\n    return byParam\n  })()\n\n  const keys = listModulesFrom(members)\n\n  const loader: ProjectLoader = {\n    listModules: () => [...keys],\n    readSource: async (moduleKey) => {\n      const member = members.get(MODEL_PREFIX + moduleKey)\n      if (member === undefined) {\n        throw new Error(`[fai-zip] loader: module \"${moduleKey}\" does not exist under model/`)\n      }\n      return decodeMemberText(member)\n    },\n  }\n\n  const { files, assets } = readAssetEntriesFrom(members)\n  return { manifest, activeModel, loader, files, assets }\n}\n"]}

package/dist/io/fai-zip/container-write.d.ts

@@ -0,0 +1,70 @@
+import { type ContainerManifest, type ContainerModel } from './container.js';
+/** Assembly input of a container: no producer concept, only format concepts. */
+export interface ContainerAssembly {
+    /** `manifest.models` — the complete model list (spec §4) */
+    models: ContainerModel[];
+    /** `manifest.active`; must equal some `models[].id` when present */
+    active?: string;
+    /** display-only manifest fields plus §8.2 conversion provenance */
+    meta?: {
+        createdAt?: string;
+        appVersion?: string;
+        label?: string;
+        source?: ContainerManifest['source'];
+    };
+    /** `model/**` members: full container path → source text. Every `models[].entry` must be present */
+    modules: Record<string, string>;
+    /** `data/**` members: full container path → JSON text (spec §6) */
+    dataMembers: Record<string, string>;
+    /** `files/**` payloads: fileId → bytes. Written as `files/<fileId>.bin` */
+    files: Record<string, Uint8Array>;
+    /** `assets/**` payloads: full container path → bytes (e.g. `assets/bracket.brp`) */
+    assets: Record<string, Uint8Array>;
+    /** producer-defined members (spec §3, e.g. `mapping.json`, `freecad/**`), written as-is */
+    producerMembers?: Record<string, Uint8Array>;
+}
+/** Result of `writeContainer`. */
+export interface WriteContainerResult {
+    /** the assembled container bytes */
+    bytes: Uint8Array;
+    /** the manifest that was serialized into the container */
+    manifest: ContainerManifest;
+}
+/**
+ * Build and validate the container manifest — the single implementation of the
+ * §4 schema.
+ *
+ * Structural only: it cannot check that `models[].entry` and `models[].data`
+ * resolve to emitted members, because it never sees the members. That is
+ * `writeContainer`'s job, and it is why conversion pipelines that legitimately
+ * assemble a container in two passes can still reuse this function.
+ *
+ * @param input the model list, the optional active id and display metadata
+ * @returns the manifest, with `format: 3` and `units: "mm"` fixed
+ * @throws when `models` is empty, an id/entry is empty, unsafe or duplicated,
+ *   an `entry` is not a module path under `model/` ending with `.fai.js`, a
+ *   `data` is not a JSON path under `data/`, or `active` names no model
+ */
+export declare function createManifest(input: Pick<ContainerAssembly, 'models' | 'active' | 'meta'>): ContainerManifest;
+/**
+ * Assemble a container from an assembly, enforcing spec §10 before writing any
+ * bytes.
+ *
+ * Enforced (each throws, never silently produces an unreconstructable
+ * container):
+ * 1. `models` is non-empty, ids and entries are unique (`createManifest`);
+ * 2. every `models[].entry` is emitted in `modules`;
+ * 3. every `models[].data` is emitted in `dataMembers`;
+ * 4. `active`, when present, equals some `models[].id` (`createManifest`);
+ * 5. asset keys are unique across `files/**`, `assets/**` and any
+ *    producer-defined member in those namespaces (spec §7.1) — a fileId that
+ *    would not survive the base-name key rule is an error, not a silent rename;
+ * 6. every `entry`/`data`/module/asset path is a safe relative member path in
+ *    its namespace, and no path is emitted twice.
+ *
+ * @param assembly the assembly input (§3.4)
+ * @returns the container bytes and the manifest that was written
+ * @throws when any of the obligations above is violated
+ */
+export declare function writeContainer(assembly: ContainerAssembly): WriteContainerResult;
+//# sourceMappingURL=container-write.d.ts.map

package/dist/io/fai-zip/container-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-write.d.ts","sourceRoot":"","sources":["../../../src/io/fai-zip/container-write.ts"],"names":[],"mappings":"AAgBA,OAAO,EAML,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACpB,MAAM,aAAa,CAAA;AAEpB,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,mEAAmE;IACnE,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,MAAM,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAA;KACrC,CAAA;IACD,oGAAoG;IACpG,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACnC,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACjC,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IAClC,2FAA2F;IAC3F,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;CAC7C;AAED,kCAAkC;AAClC,MAAM,WAAW,oBAAoB;IACnC,oCAAoC;IACpC,KAAK,EAAE,UAAU,CAAA;IACjB,0DAA0D;IAC1D,QAAQ,EAAE,iBAAiB,CAAA;CAC5B;AAKD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC,GAAG,iBAAiB,CAoD9G;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,iBAAiB,GAAG,oBAAoB,CAuFhF"}

package/dist/io/fai-zip/container-write.js

@@ -0,0 +1,186 @@
+/**
+ * Unified `.fai.zip` write API (docs/fai-zip-format.md §10, Writer obligations).
+ *
+ * The input is an *assembly* — pure format concepts plus opaque
+ * producer-defined members (§3). Nothing here knows about FCStd, editors or
+ * filesystems.
+ *
+ * Environment-independent: ZIP bytes go through `io/zip.ts`, text goes through
+ * the UTF-8 codec in `./container.js`. No `node:*`, no fflate, no fs.
+ *
+ * The point of this layer is that a container which a reader cannot
+ * reconstruct is never produced: every §10 obligation that can be checked
+ * statically is checked here and throws. A thrown error is always preferable
+ * to a container with a dangling reference (spec §10.7, fail loudly).
+ */
+import { writeZipEntries } from '../zip.js';
+import { assetKeyOf, assertDataMemberPath, assertModelMemberPath, assertSafeMemberPath, encodeMemberText, } from './container.js';
+const FILES_PREFIX = 'files/';
+const ASSETS_PREFIX = 'assets/';
+/**
+ * Build and validate the container manifest — the single implementation of the
+ * §4 schema.
+ *
+ * Structural only: it cannot check that `models[].entry` and `models[].data`
+ * resolve to emitted members, because it never sees the members. That is
+ * `writeContainer`'s job, and it is why conversion pipelines that legitimately
+ * assemble a container in two passes can still reuse this function.
+ *
+ * @param input the model list, the optional active id and display metadata
+ * @returns the manifest, with `format: 3` and `units: "mm"` fixed
+ * @throws when `models` is empty, an id/entry is empty, unsafe or duplicated,
+ *   an `entry` is not a module path under `model/` ending with `.fai.js`, a
+ *   `data` is not a JSON path under `data/`, or `active` names no model
+ */
+export function createManifest(input) {
+    const { models, active, meta = {} } = input;
+    if (!Array.isArray(models) || models.length === 0) {
+        throw new Error('[fai-zip] createManifest: models must be a non-empty array');
+    }
+    const seenIds = new Set();
+    const seenEntries = new Set();
+    const normalized = [];
+    for (let i = 0; i < models.length; i++) {
+        const m = models[i];
+        const id = typeof m.id === 'string' ? m.id : '';
+        if (id === '')
+            throw new Error(`[fai-zip] createManifest: models[${i}].id must be a non-empty string`);
+        if (id.includes('/') || id.includes('\\')) {
+            throw new Error(`[fai-zip] createManifest: models[${i}].id must not contain "/" or "\\": "${id}"`);
+        }
+        if (seenIds.has(id))
+            throw new Error(`[fai-zip] createManifest: models[].id must be unique: "${id}"`);
+        seenIds.add(id);
+        if (typeof m.entry !== 'string' || m.entry === '') {
+            throw new Error(`[fai-zip] createManifest: models[${i}].entry must be a non-empty string`);
+        }
+        assertModelMemberPath(m.entry, `createManifest: models[${i}].entry`);
+        if (seenEntries.has(m.entry)) {
+            throw new Error(`[fai-zip] createManifest: models[].entry must be unique: "${m.entry}"`);
+        }
+        seenEntries.add(m.entry);
+        if (m.data !== undefined)
+            assertDataMemberPath(m.data, `createManifest: models[${i}].data`);
+        normalized.push({
+            id,
+            entry: m.entry,
+            ...(m.label !== undefined ? { label: m.label } : {}),
+            ...(m.data !== undefined ? { data: m.data } : {}),
+        });
+    }
+    if (active !== undefined && !seenIds.has(active)) {
+        throw new Error(`[fai-zip] createManifest: active must equal some models[].id: "${active}"`);
+    }
+    return {
+        format: 3,
+        units: 'mm',
+        models: normalized,
+        ...(active !== undefined ? { active } : {}),
+        ...(meta.createdAt !== undefined ? { createdAt: meta.createdAt } : {}),
+        ...(meta.appVersion !== undefined ? { appVersion: meta.appVersion } : {}),
+        ...(meta.label !== undefined ? { label: meta.label } : {}),
+        ...(meta.source !== undefined ? { source: meta.source } : {}),
+    };
+}
+/**
+ * Assemble a container from an assembly, enforcing spec §10 before writing any
+ * bytes.
+ *
+ * Enforced (each throws, never silently produces an unreconstructable
+ * container):
+ * 1. `models` is non-empty, ids and entries are unique (`createManifest`);
+ * 2. every `models[].entry` is emitted in `modules`;
+ * 3. every `models[].data` is emitted in `dataMembers`;
+ * 4. `active`, when present, equals some `models[].id` (`createManifest`);
+ * 5. asset keys are unique across `files/**`, `assets/**` and any
+ *    producer-defined member in those namespaces (spec §7.1) — a fileId that
+ *    would not survive the base-name key rule is an error, not a silent rename;
+ * 6. every `entry`/`data`/module/asset path is a safe relative member path in
+ *    its namespace, and no path is emitted twice.
+ *
+ * @param assembly the assembly input (§3.4)
+ * @returns the container bytes and the manifest that was written
+ * @throws when any of the obligations above is violated
+ */
+export function writeContainer(assembly) {
+    const { modules, dataMembers, files, assets, producerMembers = {} } = assembly;
+    const manifest = createManifest(assembly);
+    const members = new Map();
+    const claimedKeys = new Map();
+    /** Record an asset key; a second member claiming it is an error (spec §7.1). */
+    const claim = (key, path) => {
+        const prev = claimedKeys.get(key);
+        if (prev !== undefined) {
+            throw new Error(`[fai-zip] writeContainer: duplicate asset key "${key}" (members "${prev}" and "${path}")`);
+        }
+        claimedKeys.set(key, path);
+    };
+    /** Add one member; a duplicate member path is an error. */
+    const put = (path, body) => {
+        if (members.has(path)) {
+            throw new Error(`[fai-zip] writeContainer: duplicate member path "${path}"`);
+        }
+        members.set(path, body);
+    };
+    // manifest.json — always first, always present (spec §10.1)
+    put('manifest.json', encodeMemberText(JSON.stringify(manifest, null, 2)));
+    // model/** — every declared entry must be delivered (spec §10.2, §10.3)
+    for (const [path, source] of Object.entries(modules)) {
+        assertModelMemberPath(path, 'writeContainer: modules key');
+        put(path, encodeMemberText(source));
+    }
+    for (const m of manifest.models) {
+        if (!members.has(m.entry)) {
+            throw new Error(`[fai-zip] writeContainer: models[].entry "${m.entry}" has no module in the assembly`);
+        }
+    }
+    // data/** — a declared data member must be delivered, and must be JSON (spec §6.1)
+    for (const [path, json] of Object.entries(dataMembers)) {
+        assertDataMemberPath(path, 'writeContainer: dataMembers key');
+        try {
+            JSON.parse(json);
+        }
+        catch (e) {
+            throw new Error(`[fai-zip] writeContainer: data member "${path}" is not valid JSON: ${e instanceof Error ? e.message : String(e)}`, { cause: e });
+        }
+        put(path, encodeMemberText(json));
+    }
+    for (const m of manifest.models) {
+        if (m.data !== undefined && !members.has(m.data)) {
+            throw new Error(`[fai-zip] writeContainer: models[].data "${m.data}" has no member in the assembly`);
+        }
+    }
+    // files/** — keyed by fileId, stored as files/<fileId>.bin so the key
+    // round-trips through the base-name rule (spec §7). A fileId containing a
+    // separator would be silently re-keyed on read, so it is rejected here.
+    for (const [fileId, body] of Object.entries(files)) {
+        if (fileId === '' || fileId.includes('/') || fileId.includes('\\')) {
+            throw new Error(`[fai-zip] writeContainer: fileId must be a non-empty base name without separators: "${fileId}"`);
+        }
+        const path = `${FILES_PREFIX}${fileId}.bin`;
+        put(path, body);
+        claim(assetKeyOf(path, FILES_PREFIX), path);
+    }
+    // assets/** — the key is the base name, so two paths may collide (spec §7.1)
+    for (const [path, body] of Object.entries(assets)) {
+        assertSafeMemberPath(path, 'writeContainer: assets key');
+        if (!path.startsWith(ASSETS_PREFIX)) {
+            throw new Error(`[fai-zip] writeContainer: assets key must be under assets/: "${path}"`);
+        }
+        put(path, body);
+        claim(assetKeyOf(path, ASSETS_PREFIX), path);
+    }
+    // producer-defined members (spec §3) — opaque payload, but they still live
+    // in the archive, so a member dropped under files//assets/ takes part in the
+    // key uniqueness rule whether or not the producer thought of it that way.
+    for (const [path, body] of Object.entries(producerMembers)) {
+        assertSafeMemberPath(path, 'writeContainer: producerMembers key');
+        put(path, body);
+        if (path.startsWith(FILES_PREFIX))
+            claim(assetKeyOf(path, FILES_PREFIX), path);
+        else if (path.startsWith(ASSETS_PREFIX))
+            claim(assetKeyOf(path, ASSETS_PREFIX), path);
+    }
+    return { bytes: writeZipEntries(Object.fromEntries(members)), manifest };
+}
+//# sourceMappingURL=container-write.js.map

package/dist/io/fai-zip/container-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-write.js","sourceRoot":"","sources":["../../../src/io/fai-zip/container-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAA;AACxC,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,GAGjB,MAAM,aAAa,CAAA;AAmCpB,MAAM,YAAY,GAAG,QAAQ,CAAA;AAC7B,MAAM,aAAa,GAAG,SAAS,CAAA;AAE/B;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,cAAc,CAAC,KAA4D;IACzF,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,KAAK,CAAA;IAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;IAC/E,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IACrC,MAAM,UAAU,GAAqB,EAAE,CAAA;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAmB,CAAA;QACrC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/C,IAAI,EAAE,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,iCAAiC,CAAC,CAAA;QACtG,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAA;QACpG,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,EAAE,GAAG,CAAC,CAAA;QACrG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAEf,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,oCAAoC,CAAC,CAAA;QAC5F,CAAC;QACD,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,0BAA0B,CAAC,SAAS,CAAC,CAAA;QACpE,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC,KAAK,GAAG,CAAC,CAAA;QAC1F,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QAExB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,0BAA0B,CAAC,QAAQ,CAAC,CAAA;QAE3F,UAAU,CAAC,IAAI,CAAC;YACd,EAAE;YACF,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,kEAAkE,MAAM,GAAG,CAAC,CAAA;IAC9F,CAAC;IAED,OAAO;QACL,MAAM,EAAE,CAAC;QACT,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,UAAU;QAClB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAAC,QAA2B;IACxD,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,GAAG,EAAE,EAAE,GAAG,QAAQ,CAAA;IAC9E,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IAEzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC7C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAA;IAE7C,gFAAgF;IAChF,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,IAAY,EAAQ,EAAE;QAChD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,kDAAkD,GAAG,eAAe,IAAI,UAAU,IAAI,IAAI,CAAC,CAAA;QAC7G,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAC5B,CAAC,CAAA;IAED,2DAA2D;IAC3D,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAgB,EAAQ,EAAE;QACnD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,GAAG,CAAC,CAAA;QAC9E,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACzB,CAAC,CAAA;IAED,4DAA4D;IAC5D,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAEzE,wEAAwE;IACxE,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,qBAAqB,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAA;QAC1D,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAA;IACrC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,KAAK,iCAAiC,CAAC,CAAA;QACxG,CAAC;IACH,CAAC;IAED,mFAAmF;IACnF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACvD,oBAAoB,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAA;QAC7D,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAClB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,wBAAwB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACnJ,CAAC;QACD,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAA;IACnC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,IAAI,iCAAiC,CAAC,CAAA;QACtG,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,0EAA0E;IAC1E,wEAAwE;IACxE,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,uFAAuF,MAAM,GAAG,CAAC,CAAA;QACnH,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,YAAY,GAAG,MAAM,MAAM,CAAA;QAC3C,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACf,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,CAAA;IAC7C,CAAC;IAED,6EAA6E;IAC7E,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,oBAAoB,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAA;QACxD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,gEAAgE,IAAI,GAAG,CAAC,CAAA;QAC1F,CAAC;QACD,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACf,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,CAAA;IAC9C,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3D,oBAAoB,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAA;QACjE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACf,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,CAAA;aACzE,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,CAAA;IACvF,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAA;AAC1E,CAAC","sourcesContent":["/**\n * Unified `.fai.zip` write API (docs/fai-zip-format.md §10, Writer obligations).\n *\n * The input is an *assembly* — pure format concepts plus opaque\n * producer-defined members (§3). Nothing here knows about FCStd, editors or\n * filesystems.\n *\n * Environment-independent: ZIP bytes go through `io/zip.ts`, text goes through\n * the UTF-8 codec in `./container.js`. No `node:*`, no fflate, no fs.\n *\n * The point of this layer is that a container which a reader cannot\n * reconstruct is never produced: every §10 obligation that can be checked\n * statically is checked here and throws. A thrown error is always preferable\n * to a container with a dangling reference (spec §10.7, fail loudly).\n */\nimport { writeZipEntries } from '../zip'\nimport {\n  assetKeyOf,\n  assertDataMemberPath,\n  assertModelMemberPath,\n  assertSafeMemberPath,\n  encodeMemberText,\n  type ContainerManifest,\n  type ContainerModel,\n} from './container'\n\n/** Assembly input of a container: no producer concept, only format concepts. */\nexport interface ContainerAssembly {\n  /** `manifest.models` — the complete model list (spec §4) */\n  models: ContainerModel[]\n  /** `manifest.active`; must equal some `models[].id` when present */\n  active?: string\n  /** display-only manifest fields plus §8.2 conversion provenance */\n  meta?: {\n    createdAt?: string\n    appVersion?: string\n    label?: string\n    source?: ContainerManifest['source']\n  }\n  /** `model/**` members: full container path → source text. Every `models[].entry` must be present */\n  modules: Record<string, string>\n  /** `data/**` members: full container path → JSON text (spec §6) */\n  dataMembers: Record<string, string>\n  /** `files/**` payloads: fileId → bytes. Written as `files/<fileId>.bin` */\n  files: Record<string, Uint8Array>\n  /** `assets/**` payloads: full container path → bytes (e.g. `assets/bracket.brp`) */\n  assets: Record<string, Uint8Array>\n  /** producer-defined members (spec §3, e.g. `mapping.json`, `freecad/**`), written as-is */\n  producerMembers?: Record<string, Uint8Array>\n}\n\n/** Result of `writeContainer`. */\nexport interface WriteContainerResult {\n  /** the assembled container bytes */\n  bytes: Uint8Array\n  /** the manifest that was serialized into the container */\n  manifest: ContainerManifest\n}\n\nconst FILES_PREFIX = 'files/'\nconst ASSETS_PREFIX = 'assets/'\n\n/**\n * Build and validate the container manifest — the single implementation of the\n * §4 schema.\n *\n * Structural only: it cannot check that `models[].entry` and `models[].data`\n * resolve to emitted members, because it never sees the members. That is\n * `writeContainer`'s job, and it is why conversion pipelines that legitimately\n * assemble a container in two passes can still reuse this function.\n *\n * @param input the model list, the optional active id and display metadata\n * @returns the manifest, with `format: 3` and `units: \"mm\"` fixed\n * @throws when `models` is empty, an id/entry is empty, unsafe or duplicated,\n *   an `entry` is not a module path under `model/` ending with `.fai.js`, a\n *   `data` is not a JSON path under `data/`, or `active` names no model\n */\nexport function createManifest(input: Pick<ContainerAssembly, 'models' | 'active' | 'meta'>): ContainerManifest {\n  const { models, active, meta = {} } = input\n  if (!Array.isArray(models) || models.length === 0) {\n    throw new Error('[fai-zip] createManifest: models must be a non-empty array')\n  }\n\n  const seenIds = new Set<string>()\n  const seenEntries = new Set<string>()\n  const normalized: ContainerModel[] = []\n  for (let i = 0; i < models.length; i++) {\n    const m = models[i] as ContainerModel\n    const id = typeof m.id === 'string' ? m.id : ''\n    if (id === '') throw new Error(`[fai-zip] createManifest: models[${i}].id must be a non-empty string`)\n    if (id.includes('/') || id.includes('\\\\')) {\n      throw new Error(`[fai-zip] createManifest: models[${i}].id must not contain \"/\" or \"\\\\\": \"${id}\"`)\n    }\n    if (seenIds.has(id)) throw new Error(`[fai-zip] createManifest: models[].id must be unique: \"${id}\"`)\n    seenIds.add(id)\n\n    if (typeof m.entry !== 'string' || m.entry === '') {\n      throw new Error(`[fai-zip] createManifest: models[${i}].entry must be a non-empty string`)\n    }\n    assertModelMemberPath(m.entry, `createManifest: models[${i}].entry`)\n    if (seenEntries.has(m.entry)) {\n      throw new Error(`[fai-zip] createManifest: models[].entry must be unique: \"${m.entry}\"`)\n    }\n    seenEntries.add(m.entry)\n\n    if (m.data !== undefined) assertDataMemberPath(m.data, `createManifest: models[${i}].data`)\n\n    normalized.push({\n      id,\n      entry: m.entry,\n      ...(m.label !== undefined ? { label: m.label } : {}),\n      ...(m.data !== undefined ? { data: m.data } : {}),\n    })\n  }\n\n  if (active !== undefined && !seenIds.has(active)) {\n    throw new Error(`[fai-zip] createManifest: active must equal some models[].id: \"${active}\"`)\n  }\n\n  return {\n    format: 3,\n    units: 'mm',\n    models: normalized,\n    ...(active !== undefined ? { active } : {}),\n    ...(meta.createdAt !== undefined ? { createdAt: meta.createdAt } : {}),\n    ...(meta.appVersion !== undefined ? { appVersion: meta.appVersion } : {}),\n    ...(meta.label !== undefined ? { label: meta.label } : {}),\n    ...(meta.source !== undefined ? { source: meta.source } : {}),\n  }\n}\n\n/**\n * Assemble a container from an assembly, enforcing spec §10 before writing any\n * bytes.\n *\n * Enforced (each throws, never silently produces an unreconstructable\n * container):\n * 1. `models` is non-empty, ids and entries are unique (`createManifest`);\n * 2. every `models[].entry` is emitted in `modules`;\n * 3. every `models[].data` is emitted in `dataMembers`;\n * 4. `active`, when present, equals some `models[].id` (`createManifest`);\n * 5. asset keys are unique across `files/**`, `assets/**` and any\n *    producer-defined member in those namespaces (spec §7.1) — a fileId that\n *    would not survive the base-name key rule is an error, not a silent rename;\n * 6. every `entry`/`data`/module/asset path is a safe relative member path in\n *    its namespace, and no path is emitted twice.\n *\n * @param assembly the assembly input (§3.4)\n * @returns the container bytes and the manifest that was written\n * @throws when any of the obligations above is violated\n */\nexport function writeContainer(assembly: ContainerAssembly): WriteContainerResult {\n  const { modules, dataMembers, files, assets, producerMembers = {} } = assembly\n  const manifest = createManifest(assembly)\n\n  const members = new Map<string, Uint8Array>()\n  const claimedKeys = new Map<string, string>()\n\n  /** Record an asset key; a second member claiming it is an error (spec §7.1). */\n  const claim = (key: string, path: string): void => {\n    const prev = claimedKeys.get(key)\n    if (prev !== undefined) {\n      throw new Error(`[fai-zip] writeContainer: duplicate asset key \"${key}\" (members \"${prev}\" and \"${path}\")`)\n    }\n    claimedKeys.set(key, path)\n  }\n\n  /** Add one member; a duplicate member path is an error. */\n  const put = (path: string, body: Uint8Array): void => {\n    if (members.has(path)) {\n      throw new Error(`[fai-zip] writeContainer: duplicate member path \"${path}\"`)\n    }\n    members.set(path, body)\n  }\n\n  // manifest.json — always first, always present (spec §10.1)\n  put('manifest.json', encodeMemberText(JSON.stringify(manifest, null, 2)))\n\n  // model/** — every declared entry must be delivered (spec §10.2, §10.3)\n  for (const [path, source] of Object.entries(modules)) {\n    assertModelMemberPath(path, 'writeContainer: modules key')\n    put(path, encodeMemberText(source))\n  }\n  for (const m of manifest.models) {\n    if (!members.has(m.entry)) {\n      throw new Error(`[fai-zip] writeContainer: models[].entry \"${m.entry}\" has no module in the assembly`)\n    }\n  }\n\n  // data/** — a declared data member must be delivered, and must be JSON (spec §6.1)\n  for (const [path, json] of Object.entries(dataMembers)) {\n    assertDataMemberPath(path, 'writeContainer: dataMembers key')\n    try {\n      JSON.parse(json)\n    } catch (e) {\n      throw new Error(`[fai-zip] writeContainer: data member \"${path}\" is not valid JSON: ${e instanceof Error ? e.message : String(e)}`, { cause: e })\n    }\n    put(path, encodeMemberText(json))\n  }\n  for (const m of manifest.models) {\n    if (m.data !== undefined && !members.has(m.data)) {\n      throw new Error(`[fai-zip] writeContainer: models[].data \"${m.data}\" has no member in the assembly`)\n    }\n  }\n\n  // files/** — keyed by fileId, stored as files/<fileId>.bin so the key\n  // round-trips through the base-name rule (spec §7). A fileId containing a\n  // separator would be silently re-keyed on read, so it is rejected here.\n  for (const [fileId, body] of Object.entries(files)) {\n    if (fileId === '' || fileId.includes('/') || fileId.includes('\\\\')) {\n      throw new Error(`[fai-zip] writeContainer: fileId must be a non-empty base name without separators: \"${fileId}\"`)\n    }\n    const path = `${FILES_PREFIX}${fileId}.bin`\n    put(path, body)\n    claim(assetKeyOf(path, FILES_PREFIX), path)\n  }\n\n  // assets/** — the key is the base name, so two paths may collide (spec §7.1)\n  for (const [path, body] of Object.entries(assets)) {\n    assertSafeMemberPath(path, 'writeContainer: assets key')\n    if (!path.startsWith(ASSETS_PREFIX)) {\n      throw new Error(`[fai-zip] writeContainer: assets key must be under assets/: \"${path}\"`)\n    }\n    put(path, body)\n    claim(assetKeyOf(path, ASSETS_PREFIX), path)\n  }\n\n  // producer-defined members (spec §3) — opaque payload, but they still live\n  // in the archive, so a member dropped under files//assets/ takes part in the\n  // key uniqueness rule whether or not the producer thought of it that way.\n  for (const [path, body] of Object.entries(producerMembers)) {\n    assertSafeMemberPath(path, 'writeContainer: producerMembers key')\n    put(path, body)\n    if (path.startsWith(FILES_PREFIX)) claim(assetKeyOf(path, FILES_PREFIX), path)\n    else if (path.startsWith(ASSETS_PREFIX)) claim(assetKeyOf(path, ASSETS_PREFIX), path)\n  }\n\n  return { bytes: writeZipEntries(Object.fromEntries(members)), manifest }\n}\n"]}

package/dist/io/fai-zip/container.d.ts

@@ -0,0 +1,107 @@
+/**
+ * `.fai.zip` container schemas (docs/fai-zip-format.md §4, §7).
+ *
+ * `.fai.zip` is faijs' own container format, so this module carries the format
+ * itself and nothing producer-specific: `source` is a §4 manifest field
+ * (described in §8.2 as conversion provenance), not an FCStd leak. Producer
+ * members such as `mapping.json` and `freecad/**` are passed through opaquely
+ * (spec §3, "Optional, producer-defined"). `requiresBrep` was removed in
+ * 2026-10-03 (fai-zip-third-party-sdk-and-viewer-plan): BREP is always the
+ * default-required execution chain, so no per-container flag exists.
+ *
+ * Environment-independent by construction: no `node:*`, no DOM, no fflate.
+ * Text members go through the UTF-8 codec below, ZIP bytes go through
+ * `io/zip.ts` — the container layer never touches a ZIP library directly.
+ */
+/** One model in the container: entry script, plus an optional data member. */
+export interface ContainerModel {
+    /** model identifier: unique in the container, stable (switch/data key), no `/` or `\` */
+    id: string;
+    /** container path of the model's entry script, inside `model/`, ends with `.fai.js` */
+    entry: string;
+    /** display name; a reader MUST NOT use it as an identifier (spec §4) */
+    label?: string;
+    /** container path of the model's data member; absent = no data member (spec §6.5) */
+    data?: string;
+}
+/** `manifest.json` schema (unified `.fai.zip` format v3, spec §4). */
+export interface ContainerManifest {
+    /** container format identifier — MUST be 3 in this revision (spec §11) */
+    format: 3;
+    /** unit of every coordinate in the container; always "mm" */
+    units: 'mm';
+    /** the complete model list (length ≥ 1) */
+    models: ContainerModel[];
+    /** id of the initially active model; absent = `models[0]` */
+    active?: string;
+    /** ISO 8601 timestamp. Display only */
+    createdAt?: string;
+    /** version of the producing tool. Display only */
+    appVersion?: string;
+    /** container display name. Display only */
+    label?: string;
+    /** conversion provenance (spec §8.2). Display only */
+    source?: {
+        /** original source document file name (not a full path) */
+        file: string;
+        programVersion: string;
+        schemaVersion: number;
+    };
+}
+/**
+ * Asset payloads of a container: bytes keyed by asset key (spec §7).
+ * The key of a member is its base name with the final extension removed.
+ */
+export interface ContainerAssetEntries {
+    /** `files/**` members — key = fileId (member path under `files/` with the final extension removed) */
+    files: Record<string, Uint8Array>;
+    /** `assets/**` members — key = base name with the final extension removed */
+    assets: Record<string, Uint8Array>;
+}
+/**
+ * Asset key of a member path: base name with the final extension removed
+ * (spec §7). `assets/bracket.brp` → `bracket`; `files/deep/9f1c2a.bin` →
+ * `9f1c2a`. The rule is by base name, so nesting does not change the key.
+ *
+ * @param path the container member path (including its namespace prefix)
+ * @param prefix the namespace prefix the path was matched against
+ * @returns the asset key
+ */
+export declare function assetKeyOf(path: string, prefix: string): string;
+/**
+ * Decode a text member. UTF-8, matching the spec's "UTF-8 JSON object" wording.
+ * @param bytes the member bytes
+ * @returns the decoded text
+ */
+export declare function decodeMemberText(bytes: Uint8Array): string;
+/**
+ * Encode a text member to UTF-8 bytes.
+ * @param text the member text
+ * @returns the encoded bytes
+ */
+export declare function encodeMemberText(text: string): Uint8Array;
+/**
+ * Validate a member path against the spec §2 naming rules: relative, forward
+ * slashes only, no `..`, no drive letter, no leading `/`.
+ * @param path the member path to check
+ * @param what description of the field being checked, used in the error
+ * @throws when the path is not a safe relative member path
+ */
+export declare function assertSafeMemberPath(path: string, what: string): void;
+/**
+ * Validate that a path is a model entry/script member: under `model/` and
+ * ending with `.fai.js` (spec §5.1).
+ * @param path the member path to check
+ * @param what description of the field being checked, used in the error
+ * @throws when the path is not a model member path
+ */
+export declare function assertModelMemberPath(path: string, what: string): void;
+/**
+ * Validate that a path is a data member path: under `data/` and ending with
+ * `.json` (spec §6.1).
+ * @param path the member path to check
+ * @param what description of the field being checked, used in the error
+ * @throws when the path is not a data member path
+ */
+export declare function assertDataMemberPath(path: string, what: string): void;
+//# sourceMappingURL=container.d.ts.map

package/dist/io/fai-zip/container.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../../src/io/fai-zip/container.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,8EAA8E;AAC9E,MAAM,WAAW,cAAc;IAC7B,yFAAyF;IACzF,EAAE,EAAE,MAAM,CAAA;IACV,uFAAuF;IACvF,KAAK,EAAE,MAAM,CAAA;IACb,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,sEAAsE;AACtE,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,MAAM,EAAE,CAAC,CAAA;IACT,6DAA6D;IAC7D,KAAK,EAAE,IAAI,CAAA;IACX,2CAA2C;IAC3C,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,sDAAsD;IACtD,MAAM,CAAC,EAAE;QACP,2DAA2D;QAC3D,IAAI,EAAE,MAAM,CAAA;QACZ,cAAc,EAAE,MAAM,CAAA;QACtB,aAAa,EAAE,MAAM,CAAA;KACtB,CAAA;CACF;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,sGAAsG;IACtG,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACjC,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;CACnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAM/D;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAE1D;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAEzD;AAKD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAIrE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAKtE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAKrE"}

package/dist/io/fai-zip/container.js

@@ -0,0 +1,89 @@
+/**
+ * `.fai.zip` container schemas (docs/fai-zip-format.md §4, §7).
+ *
+ * `.fai.zip` is faijs' own container format, so this module carries the format
+ * itself and nothing producer-specific: `source` is a §4 manifest field
+ * (described in §8.2 as conversion provenance), not an FCStd leak. Producer
+ * members such as `mapping.json` and `freecad/**` are passed through opaquely
+ * (spec §3, "Optional, producer-defined"). `requiresBrep` was removed in
+ * 2026-10-03 (fai-zip-third-party-sdk-and-viewer-plan): BREP is always the
+ * default-required execution chain, so no per-container flag exists.
+ *
+ * Environment-independent by construction: no `node:*`, no DOM, no fflate.
+ * Text members go through the UTF-8 codec below, ZIP bytes go through
+ * `io/zip.ts` — the container layer never touches a ZIP library directly.
+ */
+/**
+ * Asset key of a member path: base name with the final extension removed
+ * (spec §7). `assets/bracket.brp` → `bracket`; `files/deep/9f1c2a.bin` →
+ * `9f1c2a`. The rule is by base name, so nesting does not change the key.
+ *
+ * @param path the container member path (including its namespace prefix)
+ * @param prefix the namespace prefix the path was matched against
+ * @returns the asset key
+ */
+export function assetKeyOf(path, prefix) {
+    const rel = path.slice(prefix.length);
+    const slash = rel.lastIndexOf('/');
+    const base = slash >= 0 ? rel.slice(slash + 1) : rel;
+    const dot = base.lastIndexOf('.');
+    return dot > 0 ? base.slice(0, dot) : base;
+}
+const UTF8_DECODER = new TextDecoder('utf-8');
+/**
+ * Decode a text member. UTF-8, matching the spec's "UTF-8 JSON object" wording.
+ * @param bytes the member bytes
+ * @returns the decoded text
+ */
+export function decodeMemberText(bytes) {
+    return UTF8_DECODER.decode(bytes);
+}
+/**
+ * Encode a text member to UTF-8 bytes.
+ * @param text the member text
+ * @returns the encoded bytes
+ */
+export function encodeMemberText(text) {
+    return new TextEncoder().encode(text);
+}
+const MODEL_PREFIX = 'model/';
+const DATA_PREFIX = 'data/';
+/**
+ * Validate a member path against the spec §2 naming rules: relative, forward
+ * slashes only, no `..`, no drive letter, no leading `/`.
+ * @param path the member path to check
+ * @param what description of the field being checked, used in the error
+ * @throws when the path is not a safe relative member path
+ */
+export function assertSafeMemberPath(path, what) {
+    if (path === '' || path.startsWith('/') || path.includes('\\') || path.includes('..') || /^[A-Za-z]:/.test(path)) {
+        throw new Error(`[fai-zip] unsafe member path in ${what}: "${path}"`);
+    }
+}
+/**
+ * Validate that a path is a model entry/script member: under `model/` and
+ * ending with `.fai.js` (spec §5.1).
+ * @param path the member path to check
+ * @param what description of the field being checked, used in the error
+ * @throws when the path is not a model member path
+ */
+export function assertModelMemberPath(path, what) {
+    assertSafeMemberPath(path, what);
+    if (!path.startsWith(MODEL_PREFIX) || !path.endsWith('.fai.js')) {
+        throw new Error(`[fai-zip] ${what} must be under model/ and end with .fai.js: "${path}"`);
+    }
+}
+/**
+ * Validate that a path is a data member path: under `data/` and ending with
+ * `.json` (spec §6.1).
+ * @param path the member path to check
+ * @param what description of the field being checked, used in the error
+ * @throws when the path is not a data member path
+ */
+export function assertDataMemberPath(path, what) {
+    assertSafeMemberPath(path, what);
+    if (!path.startsWith(DATA_PREFIX) || !path.endsWith('.json')) {
+        throw new Error(`[fai-zip] ${what} must be under data/ and end with .json: "${path}"`);
+    }
+}
+//# sourceMappingURL=container.js.map

package/dist/io/fai-zip/container.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container.js","sourceRoot":"","sources":["../../../src/io/fai-zip/container.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAkDH;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,MAAc;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACjC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC5C,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAA;AAE7C;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,OAAO,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;AACvC,CAAC;AAED,MAAM,YAAY,GAAG,QAAQ,CAAA;AAC7B,MAAM,WAAW,GAAG,OAAO,CAAA;AAE3B;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,IAAY;IAC7D,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjH,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,MAAM,IAAI,GAAG,CAAC,CAAA;IACvE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,IAAY;IAC9D,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAChC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,gDAAgD,IAAI,GAAG,CAAC,CAAA;IAC3F,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,IAAY;IAC7D,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAChC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,6CAA6C,IAAI,GAAG,CAAC,CAAA;IACxF,CAAC;AACH,CAAC","sourcesContent":["/**\n * `.fai.zip` container schemas (docs/fai-zip-format.md §4, §7).\n *\n * `.fai.zip` is faijs' own container format, so this module carries the format\n * itself and nothing producer-specific: `source` is a §4 manifest field\n * (described in §8.2 as conversion provenance), not an FCStd leak. Producer\n * members such as `mapping.json` and `freecad/**` are passed through opaquely\n * (spec §3, \"Optional, producer-defined\"). `requiresBrep` was removed in\n * 2026-10-03 (fai-zip-third-party-sdk-and-viewer-plan): BREP is always the\n * default-required execution chain, so no per-container flag exists.\n *\n * Environment-independent by construction: no `node:*`, no DOM, no fflate.\n * Text members go through the UTF-8 codec below, ZIP bytes go through\n * `io/zip.ts` — the container layer never touches a ZIP library directly.\n */\n\n/** One model in the container: entry script, plus an optional data member. */\nexport interface ContainerModel {\n  /** model identifier: unique in the container, stable (switch/data key), no `/` or `\\` */\n  id: string\n  /** container path of the model's entry script, inside `model/`, ends with `.fai.js` */\n  entry: string\n  /** display name; a reader MUST NOT use it as an identifier (spec §4) */\n  label?: string\n  /** container path of the model's data member; absent = no data member (spec §6.5) */\n  data?: string\n}\n\n/** `manifest.json` schema (unified `.fai.zip` format v3, spec §4). */\nexport interface ContainerManifest {\n  /** container format identifier — MUST be 3 in this revision (spec §11) */\n  format: 3\n  /** unit of every coordinate in the container; always \"mm\" */\n  units: 'mm'\n  /** the complete model list (length ≥ 1) */\n  models: ContainerModel[]\n  /** id of the initially active model; absent = `models[0]` */\n  active?: string\n  /** ISO 8601 timestamp. Display only */\n  createdAt?: string\n  /** version of the producing tool. Display only */\n  appVersion?: string\n  /** container display name. Display only */\n  label?: string\n  /** conversion provenance (spec §8.2). Display only */\n  source?: {\n    /** original source document file name (not a full path) */\n    file: string\n    programVersion: string\n    schemaVersion: number\n  }\n}\n\n/**\n * Asset payloads of a container: bytes keyed by asset key (spec §7).\n * The key of a member is its base name with the final extension removed.\n */\nexport interface ContainerAssetEntries {\n  /** `files/**` members — key = fileId (member path under `files/` with the final extension removed) */\n  files: Record<string, Uint8Array>\n  /** `assets/**` members — key = base name with the final extension removed */\n  assets: Record<string, Uint8Array>\n}\n\n/**\n * Asset key of a member path: base name with the final extension removed\n * (spec §7). `assets/bracket.brp` → `bracket`; `files/deep/9f1c2a.bin` →\n * `9f1c2a`. The rule is by base name, so nesting does not change the key.\n *\n * @param path the container member path (including its namespace prefix)\n * @param prefix the namespace prefix the path was matched against\n * @returns the asset key\n */\nexport function assetKeyOf(path: string, prefix: string): string {\n  const rel = path.slice(prefix.length)\n  const slash = rel.lastIndexOf('/')\n  const base = slash >= 0 ? rel.slice(slash + 1) : rel\n  const dot = base.lastIndexOf('.')\n  return dot > 0 ? base.slice(0, dot) : base\n}\n\nconst UTF8_DECODER = new TextDecoder('utf-8')\n\n/**\n * Decode a text member. UTF-8, matching the spec's \"UTF-8 JSON object\" wording.\n * @param bytes the member bytes\n * @returns the decoded text\n */\nexport function decodeMemberText(bytes: Uint8Array): string {\n  return UTF8_DECODER.decode(bytes)\n}\n\n/**\n * Encode a text member to UTF-8 bytes.\n * @param text the member text\n * @returns the encoded bytes\n */\nexport function encodeMemberText(text: string): Uint8Array {\n  return new TextEncoder().encode(text)\n}\n\nconst MODEL_PREFIX = 'model/'\nconst DATA_PREFIX = 'data/'\n\n/**\n * Validate a member path against the spec §2 naming rules: relative, forward\n * slashes only, no `..`, no drive letter, no leading `/`.\n * @param path the member path to check\n * @param what description of the field being checked, used in the error\n * @throws when the path is not a safe relative member path\n */\nexport function assertSafeMemberPath(path: string, what: string): void {\n  if (path === '' || path.startsWith('/') || path.includes('\\\\') || path.includes('..') || /^[A-Za-z]:/.test(path)) {\n    throw new Error(`[fai-zip] unsafe member path in ${what}: \"${path}\"`)\n  }\n}\n\n/**\n * Validate that a path is a model entry/script member: under `model/` and\n * ending with `.fai.js` (spec §5.1).\n * @param path the member path to check\n * @param what description of the field being checked, used in the error\n * @throws when the path is not a model member path\n */\nexport function assertModelMemberPath(path: string, what: string): void {\n  assertSafeMemberPath(path, what)\n  if (!path.startsWith(MODEL_PREFIX) || !path.endsWith('.fai.js')) {\n    throw new Error(`[fai-zip] ${what} must be under model/ and end with .fai.js: \"${path}\"`)\n  }\n}\n\n/**\n * Validate that a path is a data member path: under `data/` and ending with\n * `.json` (spec §6.1).\n * @param path the member path to check\n * @param what description of the field being checked, used in the error\n * @throws when the path is not a data member path\n */\nexport function assertDataMemberPath(path: string, what: string): void {\n  assertSafeMemberPath(path, what)\n  if (!path.startsWith(DATA_PREFIX) || !path.endsWith('.json')) {\n    throw new Error(`[fai-zip] ${what} must be under data/ and end with .json: \"${path}\"`)\n  }\n}\n"]}

package/dist/io/fai-zip/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * `@faicad/faijs/io/fai-zip` — the `.fai.zip` container layer.
+ *
+ * `.fai.zip` is faijs' own container format (docs/fai-zip-format.md). Reading,
+ * writing and the manifest schema live here, in core, because every host that
+ * loads or saves a faijs project needs them and none of them needs a
+ * producer-specific converter to get at them.
+ *
+ * The layer is a peer of `@faicad/faijs/io`, not a child of it: `io` owns ZIP
+ * bytes, this owns the container format built on top. `io/index.ts` therefore
+ * does not re-export anything from here — a base layer never depends on a
+ * format layer.
+ */
+export type { ContainerAssetEntries, ContainerManifest, ContainerModel } from './container.js';
+export { decodeMemberText, encodeMemberText } from './container.js';
+export { listModels, listModules, openContainer, readAssetEntries, readDataMember, readManifest, readModule, type OpenContainerOptions, type OpenContainerResult, } from './container-read.js';
+export { createManifest, writeContainer, type ContainerAssembly, type WriteContainerResult, } from './container-write.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/io/fai-zip/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/io/fai-zip/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,YAAY,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC3F,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,EACL,UAAU,EACV,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,UAAU,EACV,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,cAAc,EACd,cAAc,EACd,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,GAC1B,MAAM,mBAAmB,CAAA"}

package/dist/io/fai-zip/index.js

@@ -0,0 +1,4 @@
+export { decodeMemberText, encodeMemberText } from './container.js';
+export { listModels, listModules, openContainer, readAssetEntries, readDataMember, readManifest, readModule, } from './container-read.js';
+export { createManifest, writeContainer, } from './container-write.js';
+//# sourceMappingURL=index.js.map

package/dist/io/fai-zip/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/io/fai-zip/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,EACL,UAAU,EACV,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,UAAU,GAGX,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,cAAc,EACd,cAAc,GAGf,MAAM,mBAAmB,CAAA","sourcesContent":["/**\n * `@faicad/faijs/io/fai-zip` — the `.fai.zip` container layer.\n *\n * `.fai.zip` is faijs' own container format (docs/fai-zip-format.md). Reading,\n * writing and the manifest schema live here, in core, because every host that\n * loads or saves a faijs project needs them and none of them needs a\n * producer-specific converter to get at them.\n *\n * The layer is a peer of `@faicad/faijs/io`, not a child of it: `io` owns ZIP\n * bytes, this owns the container format built on top. `io/index.ts` therefore\n * does not re-export anything from here — a base layer never depends on a\n * format layer.\n */\nexport type { ContainerAssetEntries, ContainerManifest, ContainerModel } from './container'\nexport { decodeMemberText, encodeMemberText } from './container'\nexport {\n  listModels,\n  listModules,\n  openContainer,\n  readAssetEntries,\n  readDataMember,\n  readManifest,\n  readModule,\n  type OpenContainerOptions,\n  type OpenContainerResult,\n} from './container-read'\nexport {\n  createManifest,\n  writeContainer,\n  type ContainerAssembly,\n  type WriteContainerResult,\n} from './container-write'\n"]}

package/dist/io/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * io — unified ZIP container IO for faijs (and the host).
+ *
+ * Single read/write entry for ZIP bytes; every downstream consumer (3MF loader,
+ * export-model writer, fcstd, demo) should use these rather than fflate
+ * directly. See `io/zip.ts` for the behaviour contract.
+ */
+export { readZipEntries, readZipEntriesAsync, writeZipEntries, writeZipEntriesAsync, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_TOTAL_BYTES, type ZipReadOptions, } from './zip.js';
+export { toArrayBuffer } from './bytes.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/io/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/io/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,cAAc,GACpB,MAAM,OAAO,CAAA;AAId,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA"}