@hexclave/shared 1.0.60 → 1.0.62

package/dist/esm/interface/crud/team-member-profiles.d.ts

@@ -19,39 +19,40 @@ declare const teamMemberProfilesCrudServerReadSchema: import("yup").ObjectSchema
   profile_image_url: string | null;
 } & {
   user: {
+    restricted_reason: {
+      type: "anonymous" | "email_not_verified" | "restricted_by_administrator";
+    } | null;
+    primary_email: string | null;
     display_name: string | null;
     client_metadata: {} | null;
     client_read_only_metadata: {} | null;
     server_metadata: {} | null;
     id: string;
-    primary_email: string | null;
+    selected_team_id: string | null;
+    is_anonymous: boolean;
+    is_restricted: boolean;
+    requires_totp_mfa: boolean;
+    country_code: string | null;
+    profile_image_url: string | null;
+    signed_up_at_millis: number;
+    last_active_at_millis: number;
     primary_email_verified: boolean;
     primary_email_auth_enabled: boolean;
-    profile_image_url: string | null;
     selected_team: {
       client_metadata?: {} | null | undefined;
       client_read_only_metadata?: {} | null | undefined;
       server_metadata?: {} | null | undefined;
       display_name: string;
       id: string;
-      profile_image_url: string | null;
       created_at_millis: number;
+      profile_image_url: string | null;
     } | null;
-    selected_team_id: string | null;
-    signed_up_at_millis: number;
     has_password: boolean;
     otp_auth_enabled: boolean;
     passkey_auth_enabled: boolean;
-    last_active_at_millis: number;
-    is_anonymous: boolean;
-    is_restricted: boolean;
-    restricted_reason: {
-      type: "anonymous" | "email_not_verified" | "restricted_by_administrator";
-    } | null;
     restricted_by_admin: boolean;
     restricted_by_admin_reason: string | null;
     restricted_by_admin_private_details: string | null;
-    country_code: string | null;
     risk_scores: {
       sign_up: {
         bot: number;
@@ -64,7 +65,6 @@ declare const teamMemberProfilesCrudServerReadSchema: import("yup").ObjectSchema
       account_id: string;
     }[];
     auth_with_email: boolean;
-    requires_totp_mfa: boolean;
   };
 }, import("yup").AnyObject, {
   team_id: undefined;
@@ -142,39 +142,40 @@ declare const teamMemberProfilesCrud: import("../../crud").CrudSchemaFromOptions
     profile_image_url: string | null;
   } & {
     user: {
+      restricted_reason: {
+        type: "anonymous" | "email_not_verified" | "restricted_by_administrator";
+      } | null;
+      primary_email: string | null;
       display_name: string | null;
       client_metadata: {} | null;
       client_read_only_metadata: {} | null;
       server_metadata: {} | null;
       id: string;
-      primary_email: string | null;
+      selected_team_id: string | null;
+      is_anonymous: boolean;
+      is_restricted: boolean;
+      requires_totp_mfa: boolean;
+      country_code: string | null;
+      profile_image_url: string | null;
+      signed_up_at_millis: number;
+      last_active_at_millis: number;
       primary_email_verified: boolean;
       primary_email_auth_enabled: boolean;
-      profile_image_url: string | null;
       selected_team: {
         client_metadata?: {} | null | undefined;
         client_read_only_metadata?: {} | null | undefined;
         server_metadata?: {} | null | undefined;
         display_name: string;
         id: string;
-        profile_image_url: string | null;
         created_at_millis: number;
+        profile_image_url: string | null;
       } | null;
-      selected_team_id: string | null;
-      signed_up_at_millis: number;
       has_password: boolean;
       otp_auth_enabled: boolean;
       passkey_auth_enabled: boolean;
-      last_active_at_millis: number;
-      is_anonymous: boolean;
-      is_restricted: boolean;
-      restricted_reason: {
-        type: "anonymous" | "email_not_verified" | "restricted_by_administrator";
-      } | null;
       restricted_by_admin: boolean;
       restricted_by_admin_reason: string | null;
       restricted_by_admin_private_details: string | null;
-      country_code: string | null;
       risk_scores: {
         sign_up: {
           bot: number;
@@ -187,7 +188,6 @@ declare const teamMemberProfilesCrud: import("../../crud").CrudSchemaFromOptions
         account_id: string;
       }[];
       auth_with_email: boolean;
-      requires_totp_mfa: boolean;
     };
   }, import("yup").AnyObject, {
     team_id: undefined;

package/dist/esm/interface/crud/transactions.d.ts

@@ -3,6 +3,7 @@ import { InferType } from "yup";
 //#region src/interface/crud/transactions.d.ts
 declare const transactionEntrySchema: import("yup").MixedSchema<{
   type: "money_transfer";
+  customer_id: string;
   customer_type: "team" | "user" | "custom";
   charged_amount: {
     USD?: string | undefined;
@@ -18,29 +19,29 @@ declare const transactionEntrySchema: import("yup").MixedSchema<{
   };
   adjusted_transaction_id: string | null;
   adjusted_entry_index: number | null;
-  customer_id: string;
 } | {
   type: "item_quantity_change";
   item_id: string;
+  customer_id: string;
   quantity: number;
   customer_type: "team" | "user" | "custom";
   adjusted_transaction_id: string | null;
   adjusted_entry_index: number | null;
-  customer_id: string;
 } | {
-  subscription_id?: string | undefined;
   one_time_purchase_id?: string | undefined;
+  subscription_id?: string | undefined;
   type: "product_grant";
+  customer_id: string;
+  product_id: string | null;
   quantity: number;
   customer_type: "team" | "user" | "custom";
   product: {
+    free_trial?: import("../../utils/dates").DayInterval | undefined;
     client_metadata?: {} | null | undefined;
     client_read_only_metadata?: {} | null | undefined;
     server_metadata?: {} | null | undefined;
-    free_trial?: import("../../utils/dates").DayInterval | undefined;
-    display_name: string;
-    customer_type: "team" | "user" | "custom";
     server_only: boolean;
+    customer_type: "team" | "user" | "custom";
     stackable: boolean;
     prices: Record<string, {
       USD?: string | undefined;
@@ -50,19 +51,18 @@ declare const transactionEntrySchema: import("yup").MixedSchema<{
       INR?: string | undefined;
       AUD?: string | undefined;
       CAD?: string | undefined;
-      free_trial?: import("../../utils/dates").DayInterval | undefined;
       interval?: import("../../utils/dates").DayInterval | undefined;
+      free_trial?: import("../../utils/dates").DayInterval | undefined;
     }>;
+    display_name: string;
     included_items: Record<string, {
-      repeat?: "never" | import("../../utils/dates").DayInterval | undefined;
       quantity?: number | undefined;
+      repeat?: "never" | import("../../utils/dates").DayInterval | undefined;
       expires?: "never" | "when-purchase-expires" | "when-repeated" | undefined;
     }>;
   };
-  product_id: string | null;
   adjusted_transaction_id: string | null;
   adjusted_entry_index: number | null;
-  customer_id: string;
   price_id: string | null;
 } | {
   type: "product_revocation";
@@ -87,6 +87,7 @@ declare const transactionSchema: import("yup").ObjectSchema<{
   customer_id: string;
   entries: ({
     type: "money_transfer";
+    customer_id: string;
     customer_type: "team" | "user" | "custom";
     charged_amount: {
       USD?: string | undefined;
@@ -102,29 +103,29 @@ declare const transactionSchema: import("yup").ObjectSchema<{
     };
     adjusted_transaction_id: string | null;
     adjusted_entry_index: number | null;
-    customer_id: string;
   } | {
     type: "item_quantity_change";
     item_id: string;
+    customer_id: string;
     quantity: number;
     customer_type: "team" | "user" | "custom";
     adjusted_transaction_id: string | null;
     adjusted_entry_index: number | null;
-    customer_id: string;
   } | {
-    subscription_id?: string | undefined;
     one_time_purchase_id?: string | undefined;
+    subscription_id?: string | undefined;
     type: "product_grant";
+    customer_id: string;
+    product_id: string | null;
     quantity: number;
     customer_type: "team" | "user" | "custom";
     product: {
+      free_trial?: import("../../utils/dates").DayInterval | undefined;
       client_metadata?: {} | null | undefined;
       client_read_only_metadata?: {} | null | undefined;
       server_metadata?: {} | null | undefined;
-      free_trial?: import("../../utils/dates").DayInterval | undefined;
-      display_name: string;
-      customer_type: "team" | "user" | "custom";
       server_only: boolean;
+      customer_type: "team" | "user" | "custom";
       stackable: boolean;
       prices: Record<string, {
         USD?: string | undefined;
@@ -134,19 +135,18 @@ declare const transactionSchema: import("yup").ObjectSchema<{
         INR?: string | undefined;
         AUD?: string | undefined;
         CAD?: string | undefined;
-        free_trial?: import("../../utils/dates").DayInterval | undefined;
         interval?: import("../../utils/dates").DayInterval | undefined;
+        free_trial?: import("../../utils/dates").DayInterval | undefined;
       }>;
+      display_name: string;
       included_items: Record<string, {
-        repeat?: "never" | import("../../utils/dates").DayInterval | undefined;
         quantity?: number | undefined;
+        repeat?: "never" | import("../../utils/dates").DayInterval | undefined;
         expires?: "never" | "when-purchase-expires" | "when-repeated" | undefined;
       }>;
     };
-    product_id: string | null;
     adjusted_transaction_id: string | null;
     adjusted_entry_index: number | null;
-    customer_id: string;
     price_id: string | null;
   } | {
     type: "product_revocation";

package/dist/esm/interface/crud/transactions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transactions.d.ts","names":[],"sources":["../../../../src/interface/crud/transactions.ts"],"mappings":";;;cAwFa,sBAAA,gBAAsB,WAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAMxB,MAAA;;;;;;;;;;;oBAAA,MAAA;;;;;;;;;;;;;;;;;;;;;;KAEC,gBAAA,GAAmB,SAAS,QAAQ,sBAAA;AAAA,cAEnC,iBAAA;AAAA,KAUD,eAAA,WAA0B,iBAAiB;AAAA,cAE1C,iBAAA,gBAAiB,YAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAkBlB,MAAA;;;;;;;;;;;sBAAA,MAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAEA,WAAA,GAAc,SAAS,QAAQ,iBAAA"}
+{"version":3,"file":"transactions.d.ts","names":[],"sources":["../../../../src/interface/crud/transactions.ts"],"mappings":";;;cAwFa,sBAAA,gBAAsB,WAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAMxB,MAAA;;;;;;;;;;;;oBAAA,MAAA;;;;;;;;;;;;;;;;;;;;KAEC,gBAAA,GAAmB,SAAS,QAAQ,sBAAA;AAAA,cAEnC,iBAAA;AAAA,KAUD,eAAA,WAA0B,iBAAiB;AAAA,cAE1C,iBAAA,gBAAiB,YAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAkBlB,MAAA;;;;;;;;;;;;sBAAA,MAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAEA,WAAA,GAAc,SAAS,QAAQ,iBAAA"}

package/dist/esm/interface/crud/users.d.ts

@@ -82,8 +82,8 @@ declare const usersCrudServerReadSchema: yup$1.ObjectSchema<{
     server_metadata?: {} | null | undefined;
     display_name: string;
     id: string;
-    profile_image_url: string | null;
     created_at_millis: number;
+    profile_image_url: string | null;
   } | null;
   selected_team_id: string | null;
   profile_image_url: string | null;
@@ -162,34 +162,34 @@ declare const usersCrudServerReadSchema: yup$1.ObjectSchema<{
   requires_totp_mfa: undefined;
 }, "">;
 declare const usersCrudServerCreateSchema: yup$1.ObjectSchema<{
+  primary_email: string | null | undefined;
   display_name: string | null | undefined;
   client_metadata: {} | null | undefined;
   client_read_only_metadata: {} | null | undefined;
   server_metadata: {} | null | undefined;
-  primary_email: string | null | undefined;
+  is_anonymous: boolean | undefined;
+  password: string | null | undefined;
+  country_code: string | null | undefined;
+  profile_image_url: string | null | undefined;
   primary_email_verified: boolean | undefined;
   primary_email_auth_enabled: boolean | undefined;
-  profile_image_url: string | null | undefined;
   otp_auth_enabled: boolean | undefined;
   passkey_auth_enabled: boolean | undefined;
-  is_anonymous: boolean | undefined;
   restricted_by_admin: boolean | undefined;
   restricted_by_admin_reason: string | null | undefined;
   restricted_by_admin_private_details: string | null | undefined;
-  country_code: string | null | undefined;
   risk_scores: {
     sign_up: {
       bot: number;
       free_trial_abuse: number;
     };
   } | undefined;
-  password: string | null | undefined;
   password_hash: string | undefined;
   totp_secret_base64: string | null | undefined;
 } & {
   oauth_providers: {
-    id: string;
     email: string | null;
+    id: string;
     account_id: string;
   }[] | undefined;
   is_anonymous: boolean | undefined;
@@ -235,8 +235,8 @@ declare const usersCrud: import("../../crud").CrudSchemaFromOptions<{
       server_metadata?: {} | null | undefined;
       display_name: string;
       id: string;
-      profile_image_url: string | null;
       created_at_millis: number;
+      profile_image_url: string | null;
     } | null;
     selected_team_id: string | null;
     profile_image_url: string | null;
@@ -368,34 +368,34 @@ declare const usersCrud: import("../../crud").CrudSchemaFromOptions<{
     };
   }, "">;
   serverCreateSchema: yup$1.ObjectSchema<{
+    primary_email: string | null | undefined;
     display_name: string | null | undefined;
     client_metadata: {} | null | undefined;
     client_read_only_metadata: {} | null | undefined;
     server_metadata: {} | null | undefined;
-    primary_email: string | null | undefined;
+    is_anonymous: boolean | undefined;
+    password: string | null | undefined;
+    country_code: string | null | undefined;
+    profile_image_url: string | null | undefined;
     primary_email_verified: boolean | undefined;
     primary_email_auth_enabled: boolean | undefined;
-    profile_image_url: string | null | undefined;
     otp_auth_enabled: boolean | undefined;
     passkey_auth_enabled: boolean | undefined;
-    is_anonymous: boolean | undefined;
     restricted_by_admin: boolean | undefined;
     restricted_by_admin_reason: string | null | undefined;
     restricted_by_admin_private_details: string | null | undefined;
-    country_code: string | null | undefined;
     risk_scores: {
       sign_up: {
         bot: number;
         free_trial_abuse: number;
       };
     } | undefined;
-    password: string | null | undefined;
     password_hash: string | undefined;
     totp_secret_base64: string | null | undefined;
   } & {
     oauth_providers: {
-      id: string;
       email: string | null;
+      id: string;
       account_id: string;
     }[] | undefined;
     is_anonymous: boolean | undefined;
@@ -469,8 +469,8 @@ declare const userCreatedWebhookEvent: WebhookEvent<yup$1.ObjectSchema<{
     server_metadata?: {} | null | undefined;
     display_name: string;
     id: string;
-    profile_image_url: string | null;
     created_at_millis: number;
+    profile_image_url: string | null;
   } | null;
   selected_team_id: string | null;
   profile_image_url: string | null;
@@ -560,8 +560,8 @@ declare const userUpdatedWebhookEvent: WebhookEvent<yup$1.ObjectSchema<{
     server_metadata?: {} | null | undefined;
     display_name: string;
     id: string;
-    profile_image_url: string | null;
     created_at_millis: number;
+    profile_image_url: string | null;
   } | null;
   selected_team_id: string | null;
   profile_image_url: string | null;

package/dist/esm/interface/plan-usage.d.ts

@@ -24,16 +24,16 @@ declare const planUsageRowSchema: yup$1.ObjectSchema<{
 declare const planUsageResponseSchema: yup$1.ObjectSchema<{
   owner_team_id: string;
   owner_team_display_name: string;
-  plan_id: "free" | "team" | "growth";
+  plan_id: "team" | "free" | "growth";
   plan_display_name: string;
   period_start_millis: number;
   period_end_millis: number;
   next_plan_id: "team" | "growth" | null;
   are_plan_limits_enforced: boolean;
   rows: {
-    kind: "current" | "metered" | "capability";
     item_id: "dashboard_admins" | "auth_users" | "emails_per_month" | "analytics_timeout_seconds" | "analytics_events" | "session_replays" | "onboarding_call";
     display_name: string;
+    kind: "current" | "metered" | "capability";
     used: number | null;
     limit: number | null;
     remaining: number | null;

package/dist/esm/interface/webhooks.d.ts

@@ -22,8 +22,8 @@ declare const webhookEvents: readonly [WebhookEvent<yup$1.ObjectSchema<{
     server_metadata?: {} | null | undefined;
     display_name: string;
     id: string;
-    profile_image_url: string | null;
     created_at_millis: number;
+    profile_image_url: string | null;
   } | null;
   selected_team_id: string | null;
   profile_image_url: string | null;
@@ -112,8 +112,8 @@ declare const webhookEvents: readonly [WebhookEvent<yup$1.ObjectSchema<{
     server_metadata?: {} | null | undefined;
     display_name: string;
     id: string;
-    profile_image_url: string | null;
     created_at_millis: number;
+    profile_image_url: string | null;
   } | null;
   selected_team_id: string | null;
   profile_image_url: string | null;

package/dist/esm/known-errors.d.ts

@@ -518,7 +518,7 @@ declare const KnownErrors: {
   CustomerDoesNotExist: KnownErrorConstructor<KnownError & KnownErrorBrand<"CUSTOMER_DOES_NOT_EXIST">, [customerId: string]> & {
     errorCode: "CUSTOMER_DOES_NOT_EXIST";
   };
-  ProductDoesNotExist: KnownErrorConstructor<KnownError & KnownErrorBrand<"PRODUCT_DOES_NOT_EXIST">, [productId: string, context: "server_only" | "item_exists" | null]> & {
+  ProductDoesNotExist: KnownErrorConstructor<KnownError & KnownErrorBrand<"PRODUCT_DOES_NOT_EXIST">, [productId: string, context: "item_exists" | "server_only" | null]> & {
     errorCode: "PRODUCT_DOES_NOT_EXIST";
   };
   ProductCustomerTypeDoesNotMatch: KnownErrorConstructor<KnownError & KnownErrorBrand<"PRODUCT_CUSTOMER_TYPE_DOES_NOT_MATCH">, [productId: string | undefined, customerId: string, productCustomerType: "team" | "user" | "custom" | undefined, actualCustomerType: "team" | "user" | "custom"]> & {

package/dist/esm/schema-fields.d.ts

@@ -140,7 +140,7 @@ declare const projectSignUpEnabledSchema: yup$1.BooleanSchema<boolean | undefine
 declare const projectCredentialEnabledSchema: yup$1.BooleanSchema<boolean | undefined, yup$1.AnyObject, undefined, "">;
 declare const oauthIdSchema: yup$1.StringSchema<"google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "x" | "twitch" | undefined, yup$1.AnyObject, undefined, "">;
 declare const oauthEnabledSchema: yup$1.BooleanSchema<boolean | undefined, yup$1.AnyObject, undefined, "">;
-declare const oauthTypeSchema: yup$1.StringSchema<"standard" | "shared" | undefined, yup$1.AnyObject, undefined, "">;
+declare const oauthTypeSchema: yup$1.StringSchema<"shared" | "standard" | undefined, yup$1.AnyObject, undefined, "">;
 declare const oauthClientIdSchema: yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
 declare const oauthClientSecretSchema: yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
 declare const oauthCustomCallbackUrlSchema: yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
@@ -151,7 +151,7 @@ declare const oauthAppleBundleIdSchema: yup$1.StringSchema<string, yup$1.AnyObje
 declare const oauthAccountMergeStrategySchema: yup$1.StringSchema<"link_method" | "raise_error" | "allow_duplicates" | undefined, yup$1.AnyObject, undefined, "">;
 declare const oauthIssuerUrlSchema: yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
 declare const oauthScopeSchema: yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
-declare const emailTypeSchema: yup$1.StringSchema<"standard" | "shared" | undefined, yup$1.AnyObject, undefined, "">;
+declare const emailTypeSchema: yup$1.StringSchema<"shared" | "standard" | undefined, yup$1.AnyObject, undefined, "">;
 declare const emailSenderNameSchema: yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
 declare const emailHostSchema: yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
 declare const emailPortSchema: yup$1.NumberSchema<number | undefined, yup$1.AnyObject, undefined, "">;
@@ -310,12 +310,12 @@ declare const inlineProductSchema: yup$1.ObjectSchema<{
     INR?: string | undefined;
     AUD?: string | undefined;
     CAD?: string | undefined;
-    free_trial?: DayInterval | undefined;
     interval?: DayInterval | undefined;
+    free_trial?: DayInterval | undefined;
   }>;
   included_items: Record<string, {
-    repeat?: "never" | DayInterval | undefined;
     quantity?: number | undefined;
+    repeat?: "never" | DayInterval | undefined;
     expires?: "never" | "when-purchase-expires" | "when-repeated" | undefined;
   }>;
   client_metadata: {} | null | undefined;

package/dist/esm/sessions.d.ts

@@ -9,25 +9,25 @@ declare class AccessToken {
   private constructor();
   get payload(): {
     exp?: number | undefined;
-    sub: string;
-    selected_team_id: string | null;
-    is_anonymous: boolean;
-    is_restricted: boolean;
+    project_id: string;
+    refresh_token_id: string;
+    email: string | null;
     restricted_reason: {
       type: "anonymous" | "email_not_verified" | "restricted_by_administrator";
     } | null;
-    email: string | null;
-    requires_totp_mfa: boolean;
-    name: string | null;
-    role: "authenticated";
+    branch_id: string;
+    sub: string;
     iat: number;
     iss: string;
     aud: string;
-    project_id: string;
-    branch_id: string;
-    refresh_token_id: string;
+    role: "authenticated";
+    name: string | null;
     email_verified: boolean;
+    selected_team_id: string | null;
     signed_up_at: number;
+    is_anonymous: boolean;
+    is_restricted: boolean;
+    requires_totp_mfa: boolean;
   };
   get expiresAt(): Date;
   get issuedAt(): Date;

package/dist/esm/utils/tar.d.ts

@@ -0,0 +1,26 @@
+//#region src/utils/tar.d.ts
+type TarEntry = {
+  path: string;
+  data: Uint8Array;
+};
+type TarLimits = {
+  maxEntries: number;
+  maxTotalBytes: number;
+};
+/**
+ * Serializes entries into an (uncompressed) ustar tarball. Entries whose path
+ * ends with "/" are written as directories and must have empty data.
+ */
+declare function createTar(entries: TarEntry[]): Uint8Array<ArrayBuffer>;
+/**
+ * Parses an (uncompressed) ustar tarball produced by `createTar` (or any tool
+ * emitting the plain ustar subset). Strict by design — see module comment.
+ * Directory entries are returned with a trailing "/" and empty data.
+ *
+ * Throws `StatusError(400, ...)` on malformed or unsafe input so backend routes
+ * can surface it directly to the uploader.
+ */
+declare function parseTar(bytes: Uint8Array, limits: TarLimits): TarEntry[];
+//#endregion
+export { TarEntry, TarLimits, createTar, parseTar };
+//# sourceMappingURL=tar.d.ts.map

package/dist/esm/utils/tar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar.d.ts","names":[],"sources":["../../../src/utils/tar.tsx"],"mappings":";KAeY,QAAA;EAEV,IAAA;EACA,IAAA,EAAM,UAAU;AAAA;AAAA,KAGN,SAAA;EACV,UAAA;EACA,aAAa;AAAA;;AALG;AAGlB;;iBAqDgB,SAAA,CAAU,OAAA,EAAS,QAAA,KAAa,UAAA,CAAW,WAAA;;AAnD5C;AAmDf;;;;;;iBA2EgB,QAAA,CAAS,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,SAAA,GAAY,QAAA"}

package/dist/esm/utils/tar.js

@@ -0,0 +1,136 @@
+import { HexclaveAssertionError, StatusError } from "./errors.js";
+//#region src/utils/tar.tsx
+const BLOCK_SIZE = 512;
+function writeOctal(header, offset, length, value) {
+	if (value < 0 || !Number.isSafeInteger(value)) throw new HexclaveAssertionError(`Invalid tar octal value: ${value}`);
+	const str = value.toString(8).padStart(length - 1, "0");
+	if (str.length > length - 1) throw new HexclaveAssertionError(`Tar octal value too large for field: ${value} (field length ${length})`);
+	for (let i = 0; i < str.length; i++) header[offset + i] = str.charCodeAt(i);
+}
+function writeString(header, offset, length, value) {
+	const bytes = new TextEncoder().encode(value);
+	if (bytes.length > length) throw new HexclaveAssertionError(`Tar string too long for field: ${value}`);
+	header.set(bytes, offset);
+}
+function splitUstarPath(path) {
+	if (new TextEncoder().encode(path).length <= 100) return {
+		prefix: "",
+		name: path
+	};
+	const parts = path.split("/");
+	for (let i = parts.length - 1; i > 0; i--) {
+		const prefix = parts.slice(0, i).join("/");
+		const name = parts.slice(i).join("/");
+		const prefixLen = new TextEncoder().encode(prefix).length;
+		const nameLen = new TextEncoder().encode(name).length;
+		if (prefixLen <= 155 && nameLen > 0 && nameLen <= 100) return {
+			prefix,
+			name
+		};
+	}
+}
+/**
+* Serializes entries into an (uncompressed) ustar tarball. Entries whose path
+* ends with "/" are written as directories and must have empty data.
+*/
+function createTar(entries) {
+	const chunks = [];
+	for (const entry of entries) {
+		if (entry.path.startsWith("/") || entry.path.split("/").includes("..") || entry.path === "") throw new HexclaveAssertionError(`Invalid tar entry path: ${JSON.stringify(entry.path)}`);
+		const isDirectory = entry.path.endsWith("/");
+		if (isDirectory && entry.data.length > 0) throw new HexclaveAssertionError(`Tar directory entry must have empty data: ${entry.path}`);
+		const split = splitUstarPath(entry.path) ?? throwPathTooLong(entry.path);
+		const header = new Uint8Array(BLOCK_SIZE);
+		writeString(header, 0, 100, split.name);
+		writeOctal(header, 100, 8, isDirectory ? 493 : 420);
+		writeOctal(header, 108, 8, 0);
+		writeOctal(header, 116, 8, 0);
+		writeOctal(header, 124, 12, entry.data.length);
+		writeOctal(header, 136, 12, 0);
+		header[156] = isDirectory ? 53 : 48;
+		writeString(header, 257, 6, "ustar");
+		header[263] = 48;
+		header[264] = 48;
+		writeString(header, 345, 155, split.prefix);
+		header.fill(32, 148, 156);
+		let checksum = 0;
+		for (const byte of header) checksum += byte;
+		header.fill(0, 148, 156);
+		writeOctal(header, 148, 7, checksum);
+		header[155] = 32;
+		chunks.push(header);
+		if (entry.data.length > 0) {
+			chunks.push(entry.data);
+			const padding = (BLOCK_SIZE - entry.data.length % BLOCK_SIZE) % BLOCK_SIZE;
+			if (padding > 0) chunks.push(new Uint8Array(padding));
+		}
+	}
+	chunks.push(new Uint8Array(2 * BLOCK_SIZE));
+	const total = chunks.reduce((sum, c) => sum + c.length, 0);
+	const result = new Uint8Array(total);
+	let offset = 0;
+	for (const chunk of chunks) {
+		result.set(chunk, offset);
+		offset += chunk.length;
+	}
+	return result;
+}
+function throwPathTooLong(path) {
+	throw new StatusError(400, `File path too long to be packaged: ${JSON.stringify(path)}`);
+}
+function readString(block, offset, length) {
+	let end = offset;
+	while (end < offset + length && block[end] !== 0) end++;
+	return new TextDecoder().decode(block.subarray(offset, end));
+}
+function readOctal(block, offset, length) {
+	const str = readString(block, offset, length).trim();
+	if (str === "") return 0;
+	if (!/^[0-7]+$/.test(str)) throw new StatusError(400, "Invalid tarball: malformed octal header field");
+	return parseInt(str, 8);
+}
+/**
+* Parses an (uncompressed) ustar tarball produced by `createTar` (or any tool
+* emitting the plain ustar subset). Strict by design — see module comment.
+* Directory entries are returned with a trailing "/" and empty data.
+*
+* Throws `StatusError(400, ...)` on malformed or unsafe input so backend routes
+* can surface it directly to the uploader.
+*/
+function parseTar(bytes, limits) {
+	const entries = [];
+	let offset = 0;
+	let totalBytes = 0;
+	while (offset + BLOCK_SIZE <= bytes.length) {
+		const header = bytes.subarray(offset, offset + BLOCK_SIZE);
+		if (header.every((b) => b === 0)) return entries;
+		if (readString(header, 257, 6) !== "ustar") throw new StatusError(400, "Invalid tarball: not a ustar archive");
+		let expectedChecksum = 0;
+		for (let i = 0; i < BLOCK_SIZE; i++) expectedChecksum += i >= 148 && i < 156 ? 32 : header[i];
+		if (readOctal(header, 148, 8) !== expectedChecksum) throw new StatusError(400, "Invalid tarball: header checksum mismatch");
+		const typeflag = header[156];
+		if (typeflag !== 48 && typeflag !== 0 && typeflag !== 53) throw new StatusError(400, "Invalid tarball: only regular files and directories are supported");
+		const prefix = readString(header, 345, 155);
+		const name = readString(header, 0, 100);
+		const path = prefix === "" ? name : `${prefix}/${name}`;
+		if (path === "" || path.startsWith("/") || path.split("/").includes("..") || path.includes("\\")) throw new StatusError(400, `Invalid tarball: unsafe entry path ${JSON.stringify(path)}`);
+		const size = readOctal(header, 124, 12);
+		const isDirectory = typeflag === 53;
+		if (isDirectory && size !== 0) throw new StatusError(400, "Invalid tarball: directory entry with non-zero size");
+		offset += BLOCK_SIZE;
+		if (offset + size > bytes.length) throw new StatusError(400, "Invalid tarball: truncated file data");
+		totalBytes += size;
+		if (entries.length + 1 > limits.maxEntries) throw new StatusError(400, `Tarball contains too many files (max ${limits.maxEntries})`);
+		if (totalBytes > limits.maxTotalBytes) throw new StatusError(400, `Tarball contents too large (max ${limits.maxTotalBytes} bytes)`);
+		entries.push({
+			path: isDirectory && !path.endsWith("/") ? `${path}/` : path,
+			data: bytes.slice(offset, offset + size)
+		});
+		offset += size + (BLOCK_SIZE - size % BLOCK_SIZE) % BLOCK_SIZE;
+	}
+	throw new StatusError(400, "Invalid tarball: missing end-of-archive marker");
+}
+//#endregion
+export { createTar, parseTar };
+
+//# sourceMappingURL=tar.js.map