@hoardodile/sdk-types 0.0.0

package/dist/plugin.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Plugin-facing runtime limits: the read cap plugins must respect and
+ * the fan-out bounds plugins should stay within when probing. Sandbox
+ * tuning (watchdog, timeouts, memory) is app-side and lives in
+ * `@hoardodile/host` instead.
+ */
+/**
+ * Upper bound for a single `readFile` call, full or ranged. Anything
+ * bigger must go through byte ranges (`readFileChunks`) so neither the
+ * host process nor the plugin worker buffers it whole.
+ */
+declare const PLUGIN_READ_FILE_MAX_BYTES: number;
+/**
+ * Parallel image probes a plugin hook may fan out across the host.
+ * Host-side probes run sharp concurrently; keep them bounded.
+ */
+declare const PLUGIN_IMAGE_PROBE_CONCURRENCY = 8;
+/**
+ * Parallel video probes a plugin hook may fan out. Each spawns an
+ * ffprobe process host-side, so videos are bound tighter than images.
+ */
+declare const PLUGIN_VIDEO_PROBE_CONCURRENCY = 4;
+/**
+ * Parallel audio probes a plugin hook may fan out. Shares the ffprobe
+ * spawn budget with video, so it carries the same bound.
+ */
+declare const PLUGIN_AUDIO_PROBE_CONCURRENCY = 4;
+/**
+ * How many audio files a `coverLocal` hook scans looking for embedded
+ * artwork before settling for the first audio file. Albums carry the
+ * same artwork on every track, so the scan almost always stops at the
+ * first probe; the cap keeps a pathological archive from spawning one
+ * ffprobe per track.
+ */
+declare const PLUGIN_AUDIO_COVER_SCAN_LIMIT = 8;
+/**
+ * Chunk size for batch `statFiles` calls: the host resolves each chunk
+ * in one RPC round-trip, so a 100-file archive costs ~13 round-trips
+ * instead of 100.
+ */
+declare const PLUGIN_STAT_CONCURRENCY = 8;
+/**
+ * Batch size for animation scans in `searchMeta` hooks: probes run
+ * concurrently within a batch, and the early-exit check happens between
+ * batches.
+ */
+declare const PLUGIN_ANIMATION_SCAN_BATCH = 8;
+
+export { PLUGIN_ANIMATION_SCAN_BATCH, PLUGIN_AUDIO_COVER_SCAN_LIMIT, PLUGIN_AUDIO_PROBE_CONCURRENCY, PLUGIN_IMAGE_PROBE_CONCURRENCY, PLUGIN_READ_FILE_MAX_BYTES, PLUGIN_STAT_CONCURRENCY, PLUGIN_VIDEO_PROBE_CONCURRENCY };

package/dist/plugin.js

@@ -0,0 +1,12 @@
+// src/plugin.ts
+var PLUGIN_READ_FILE_MAX_BYTES = 128 * 1024 * 1024;
+var PLUGIN_IMAGE_PROBE_CONCURRENCY = 8;
+var PLUGIN_VIDEO_PROBE_CONCURRENCY = 4;
+var PLUGIN_AUDIO_PROBE_CONCURRENCY = 4;
+var PLUGIN_AUDIO_COVER_SCAN_LIMIT = 8;
+var PLUGIN_STAT_CONCURRENCY = 8;
+var PLUGIN_ANIMATION_SCAN_BATCH = 8;
+
+export { PLUGIN_ANIMATION_SCAN_BATCH, PLUGIN_AUDIO_COVER_SCAN_LIMIT, PLUGIN_AUDIO_PROBE_CONCURRENCY, PLUGIN_IMAGE_PROBE_CONCURRENCY, PLUGIN_READ_FILE_MAX_BYTES, PLUGIN_STAT_CONCURRENCY, PLUGIN_VIDEO_PROBE_CONCURRENCY };
+//# sourceMappingURL=plugin.js.map
+//# sourceMappingURL=plugin.js.map

package/dist/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/plugin.ts"],"names":[],"mappings":";AAYO,IAAM,0BAAA,GAA6B,MAAM,IAAA,GAAO;AAMhD,IAAM,8BAAA,GAAiC;AAMvC,IAAM,8BAAA,GAAiC;AAMvC,IAAM,8BAAA,GAAiC;AASvC,IAAM,6BAAA,GAAgC;AAOtC,IAAM,uBAAA,GAA0B;AAOhC,IAAM,2BAAA,GAA8B","file":"plugin.js","sourcesContent":["/**\n * Plugin-facing runtime limits: the read cap plugins must respect and\n * the fan-out bounds plugins should stay within when probing. Sandbox\n * tuning (watchdog, timeouts, memory) is app-side and lives in\n * `@hoardodile/host` instead.\n */\n\n/**\n * Upper bound for a single `readFile` call, full or ranged. Anything\n * bigger must go through byte ranges (`readFileChunks`) so neither the\n * host process nor the plugin worker buffers it whole.\n */\nexport const PLUGIN_READ_FILE_MAX_BYTES = 128 * 1024 * 1024\n\n/**\n * Parallel image probes a plugin hook may fan out across the host.\n * Host-side probes run sharp concurrently; keep them bounded.\n */\nexport const PLUGIN_IMAGE_PROBE_CONCURRENCY = 8\n\n/**\n * Parallel video probes a plugin hook may fan out. Each spawns an\n * ffprobe process host-side, so videos are bound tighter than images.\n */\nexport const PLUGIN_VIDEO_PROBE_CONCURRENCY = 4\n\n/**\n * Parallel audio probes a plugin hook may fan out. Shares the ffprobe\n * spawn budget with video, so it carries the same bound.\n */\nexport const PLUGIN_AUDIO_PROBE_CONCURRENCY = 4\n\n/**\n * How many audio files a `coverLocal` hook scans looking for embedded\n * artwork before settling for the first audio file. Albums carry the\n * same artwork on every track, so the scan almost always stops at the\n * first probe; the cap keeps a pathological archive from spawning one\n * ffprobe per track.\n */\nexport const PLUGIN_AUDIO_COVER_SCAN_LIMIT = 8\n\n/**\n * Chunk size for batch `statFiles` calls: the host resolves each chunk\n * in one RPC round-trip, so a 100-file archive costs ~13 round-trips\n * instead of 100.\n */\nexport const PLUGIN_STAT_CONCURRENCY = 8\n\n/**\n * Batch size for animation scans in `searchMeta` hooks: probes run\n * concurrently within a batch, and the early-exit check happens between\n * batches.\n */\nexport const PLUGIN_ANIMATION_SCAN_BATCH = 8\n"]}

package/dist/resource.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Plugin-facing resource caps. The preview policy (`exceedsPreviewThresholds`,
+ * which consumes the two caps below) lives with its caller in
+ * `@hoardodile/sdk-server/helpers`; the cover cap below is consumed by
+ * the app's thumb pipeline, the CLI's workbench renders and the media
+ * helpers in `@hoardodile/host`. Character image-area caps stay
+ * app-internal in `@hoardodile/shared`.
+ */
+/**
+ * Schema version stamped onto every `SearchMeta` payload. Plugins
+ * that build search-meta MUST emit this exact value so the host can
+ * detect format drift across plugin upgrades.
+ */
+declare const SEARCH_META_VERSION = 1;
+/** Max pixel area for resource covers; larger images are scaled down. */
+declare const RESOURCE_COVER_MAX_AREA = 300000;
+/** Max pixel area for preview variants served to resource previews. */
+declare const RESOURCE_PREVIEW_MAX_AREA = 4000000;
+/**
+ * Byte-size threshold for preview eligibility. An image whose
+ * area is at or below the cap may still qualify for preview when
+ * its byte size exceeds this value.
+ */
+declare const RESOURCE_PREVIEW_SIZE_THRESHOLD = 1000000;
+
+export { RESOURCE_COVER_MAX_AREA, RESOURCE_PREVIEW_MAX_AREA, RESOURCE_PREVIEW_SIZE_THRESHOLD, SEARCH_META_VERSION };

package/dist/resource.js

@@ -0,0 +1,9 @@
+// src/resource.ts
+var SEARCH_META_VERSION = 1;
+var RESOURCE_COVER_MAX_AREA = 3e5;
+var RESOURCE_PREVIEW_MAX_AREA = 4e6;
+var RESOURCE_PREVIEW_SIZE_THRESHOLD = 1e6;
+
+export { RESOURCE_COVER_MAX_AREA, RESOURCE_PREVIEW_MAX_AREA, RESOURCE_PREVIEW_SIZE_THRESHOLD, SEARCH_META_VERSION };
+//# sourceMappingURL=resource.js.map
+//# sourceMappingURL=resource.js.map

package/dist/resource.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/resource.ts"],"names":[],"mappings":";AAcO,IAAM,mBAAA,GAAsB;AAG5B,IAAM,uBAAA,GAA0B;AAGhC,IAAM,yBAAA,GAA4B;AAOlC,IAAM,+BAAA,GAAkC","file":"resource.js","sourcesContent":["/**\n * Plugin-facing resource caps. The preview policy (`exceedsPreviewThresholds`,\n * which consumes the two caps below) lives with its caller in\n * `@hoardodile/sdk-server/helpers`; the cover cap below is consumed by\n * the app's thumb pipeline, the CLI's workbench renders and the media\n * helpers in `@hoardodile/host`. Character image-area caps stay\n * app-internal in `@hoardodile/shared`.\n */\n\n/**\n * Schema version stamped onto every `SearchMeta` payload. Plugins\n * that build search-meta MUST emit this exact value so the host can\n * detect format drift across plugin upgrades.\n */\nexport const SEARCH_META_VERSION = 1\n\n/** Max pixel area for resource covers; larger images are scaled down. */\nexport const RESOURCE_COVER_MAX_AREA = 300_000\n\n/** Max pixel area for preview variants served to resource previews. */\nexport const RESOURCE_PREVIEW_MAX_AREA = 4_000_000\n\n/**\n * Byte-size threshold for preview eligibility. An image whose\n * area is at or below the cap may still qualify for preview when\n * its byte size exceeds this value.\n */\nexport const RESOURCE_PREVIEW_SIZE_THRESHOLD = 1_000_000\n"]}

package/dist/result.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Shared `ok: true/false` result vocabulary (Rust's `Result` in spirit,
+ * spread payloads in shape): every site that answers "did it work?" —
+ * detections, parses, validations, benchmark runs — uses one type
+ * family, one pair of constructors and one pair of guards instead of
+ * hand-rolling its own union.
+ *
+ * The payloads are spread onto the marker rather than carried in a
+ * `value`/`error` channel: `ok({ start, end })` is literally
+ * `{ ok: true, start, end }`. This keeps every existing consumer's
+ * field access (`r.start`, `r.code`, `r.failure`) and every `toEqual`
+ * assertion working unchanged, and lets the plugin-facing `{ ok: true }`
+ * literal stay the contract.
+ */
+type Ok<TPayload extends object = object> = {
+    readonly ok: true;
+} & TPayload;
+type Err<TPayload extends object = object> = {
+    readonly ok: false;
+} & TPayload;
+type Result<TOk extends object = object, TErr extends object = object> = Ok<TOk> | Err<TErr>;
+/**
+ * Build the success variant; `ok()` alone yields `{ ok: true }`. The
+ * cast is the constructor boundary: the runtime value is exactly
+ * `{ ok: true, ...payload }`, which the generic spread cannot prove.
+ */
+declare function ok<TPayload extends object = object>(payload?: TPayload): Ok<TPayload>;
+/**
+ * Build the failure variant; `err()` alone yields `{ ok: false }`. See
+ * {@link ok} for the constructor-boundary cast.
+ */
+declare function err<TPayload extends object = object>(payload?: TPayload): Err<TPayload>;
+/** Narrow a result to its success variant. */
+declare function isOk<TOk extends object, TErr extends object>(result: Result<TOk, TErr>): result is Ok<TOk>;
+/** Narrow a result to its failure variant. */
+declare function isErr<TOk extends object, TErr extends object>(result: Result<TOk, TErr>): result is Err<TErr>;
+/**
+ * Destructure a result through one of two handlers — the pattern-match
+ * combinator. Both handlers must produce `R`; the chosen one receives
+ * the spread payload of its variant.
+ */
+declare function matchResult<TOk extends object, TErr extends object, R>(result: Result<TOk, TErr>, handlers: {
+    readonly ok: (payload: Ok<TOk>) => R;
+    readonly err: (payload: Err<TErr>) => R;
+}): R;
+
+export { type Err, type Ok, type Result, err, isErr, isOk, matchResult, ok };

package/dist/result.js

@@ -0,0 +1,20 @@
+// src/result.ts
+function ok(payload) {
+  return { ok: true, ...payload };
+}
+function err(payload) {
+  return { ok: false, ...payload };
+}
+function isOk(result) {
+  return result.ok === true;
+}
+function isErr(result) {
+  return result.ok === false;
+}
+function matchResult(result, handlers) {
+  return isOk(result) ? handlers.ok(result) : handlers.err(result);
+}
+
+export { err, isErr, isOk, matchResult, ok };
+//# sourceMappingURL=result.js.map
+//# sourceMappingURL=result.js.map

package/dist/result.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/result.ts"],"names":[],"mappings":";AA6BO,SAAS,GACf,OAAA,EACe;AACf,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,GAAG,OAAA,EAAQ;AAC/B;AAMO,SAAS,IACf,OAAA,EACgB;AAChB,EAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,GAAG,OAAA,EAAQ;AAChC;AAGO,SAAS,KACf,MAAA,EACoB;AACpB,EAAA,OAAO,OAAO,EAAA,KAAO,IAAA;AACtB;AAGO,SAAS,MACf,MAAA,EACsB;AACtB,EAAA,OAAO,OAAO,EAAA,KAAO,KAAA;AACtB;AAOO,SAAS,WAAA,CACf,QACA,QAAA,EAII;AACJ,EAAA,OAAO,IAAA,CAAK,MAAM,CAAA,GAAI,QAAA,CAAS,GAAG,MAAM,CAAA,GAAI,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AAChE","file":"result.js","sourcesContent":["/**\n * Shared `ok: true/false` result vocabulary (Rust's `Result` in spirit,\n * spread payloads in shape): every site that answers \"did it work?\" —\n * detections, parses, validations, benchmark runs — uses one type\n * family, one pair of constructors and one pair of guards instead of\n * hand-rolling its own union.\n *\n * The payloads are spread onto the marker rather than carried in a\n * `value`/`error` channel: `ok({ start, end })` is literally\n * `{ ok: true, start, end }`. This keeps every existing consumer's\n * field access (`r.start`, `r.code`, `r.failure`) and every `toEqual`\n * assertion working unchanged, and lets the plugin-facing `{ ok: true }`\n * literal stay the contract.\n */\nexport type Ok<TPayload extends object = object> = {\n\treadonly ok: true\n} & TPayload\nexport type Err<TPayload extends object = object> = {\n\treadonly ok: false\n} & TPayload\nexport type Result<TOk extends object = object, TErr extends object = object> =\n\t| Ok<TOk>\n\t| Err<TErr>\n\n/**\n * Build the success variant; `ok()` alone yields `{ ok: true }`. The\n * cast is the constructor boundary: the runtime value is exactly\n * `{ ok: true, ...payload }`, which the generic spread cannot prove.\n */\nexport function ok<TPayload extends object = object>(\n\tpayload?: TPayload,\n): Ok<TPayload> {\n\treturn { ok: true, ...payload } as Ok<TPayload>\n}\n\n/**\n * Build the failure variant; `err()` alone yields `{ ok: false }`. See\n * {@link ok} for the constructor-boundary cast.\n */\nexport function err<TPayload extends object = object>(\n\tpayload?: TPayload,\n): Err<TPayload> {\n\treturn { ok: false, ...payload } as Err<TPayload>\n}\n\n/** Narrow a result to its success variant. */\nexport function isOk<TOk extends object, TErr extends object>(\n\tresult: Result<TOk, TErr>,\n): result is Ok<TOk> {\n\treturn result.ok === true\n}\n\n/** Narrow a result to its failure variant. */\nexport function isErr<TOk extends object, TErr extends object>(\n\tresult: Result<TOk, TErr>,\n): result is Err<TErr> {\n\treturn result.ok === false\n}\n\n/**\n * Destructure a result through one of two handlers — the pattern-match\n * combinator. Both handlers must produce `R`; the chosen one receives\n * the spread payload of its variant.\n */\nexport function matchResult<TOk extends object, TErr extends object, R>(\n\tresult: Result<TOk, TErr>,\n\thandlers: {\n\t\treadonly ok: (payload: Ok<TOk>) => R\n\t\treadonly err: (payload: Err<TErr>) => R\n\t},\n): R {\n\treturn isOk(result) ? handlers.ok(result) : handlers.err(result)\n}\n"]}

package/dist/schema.d.ts

@@ -0,0 +1,29 @@
+import { z } from 'zod';
+export { C as CoverKindUi, a as CoverKindUiMap, P as PluginManifest, b as PluginManifestId, c as PluginManifestUi, d as PluginPermissions, S as SearchKind, i as iconRef, l as localeString, p as pluginManifest, e as pluginManifestId, f as pluginManifestUi, g as pluginPermissions, s as searchKind } from './manifest-Dk6_xyNy.js';
+
+/**
+ * The zod schema layer of the plugin contract: the manifest schema and
+ * the wire anchor envelope. Import this subpath
+ * (`@hoardodile/sdk-types/schema`) only where a runtime validator is
+ * actually needed — the host, the server, and tooling. The root entry
+ * re-exports the inferred types only, so plugin bundles never pull zod.
+ */
+
+/**
+ * Wire/storage envelope for a message or danmaku anchor. Carries only
+ * the plugin-defined location payload in `data`; the host never
+ * interprets its contents. The anchor's resource is host state — the SDK
+ * injects it from the iframe's binding and the server derives it from
+ * the row's `anchor_resource_id` column — so plugins never see a resId
+ * here, and a plugin that sends one is rejected (strict).
+ *
+ * Plugin code works with the raw location data (`PluginSchema["anchor"]`)
+ * directly; the SDK wraps it into this envelope when it crosses the
+ * wire.
+ */
+declare const anchorData: z.ZodObject<{
+    data: z.ZodOptional<z.ZodUnknown>;
+}, z.core.$strict>;
+type AnchorData = z.infer<typeof anchorData>;
+
+export { type AnchorData, anchorData };

package/dist/schema.js

@@ -0,0 +1,124 @@
+import { z } from 'zod';
+
+// src/schema.ts
+var pluginManifestId = z.string().uuid();
+var pluginPermissions = z.object({
+  /** Read/write the resource's source metadata. */
+  sourceMeta: z.boolean().default(false),
+  /** Produce and store search metadata facets. */
+  searchMeta: z.boolean().default(false),
+  /** Create/list danmaku for resources this plugin renders. */
+  danmaku: z.boolean().default(false),
+  /** Create/list messages for resources this plugin renders. */
+  message: z.boolean().default(false),
+  /** Produce content hashes for duplicate detection / image similarity. */
+  imageHashes: z.boolean().default(false),
+  /**
+   * List and extract archive (zip/tar/7z/…) entries. The only API
+   * surface with a write side effect (the host's extraction cache), so
+   * it is denied by default.
+   */
+  container: z.boolean().default(false),
+  /**
+   * The plugin asset vault: user-consented downloads into the plugin's
+   * own `vault/` directory plus the vault read/delete methods. Denied
+   * by default — every download needs this capability AND the user's
+   * per-request approval.
+   */
+  download: z.boolean().default(false)
+});
+var localeString = z.record(z.string(), z.string());
+var iconRef = z.string().min(1);
+var templateValue = z.string();
+var coverKindUi = z.object({
+  tl: z.array(templateValue).optional(),
+  tr: z.array(templateValue).optional(),
+  bl: z.array(templateValue).optional(),
+  br: z.array(templateValue).optional()
+});
+var coverKindUiMap = z.object({
+  image: coverKindUi.optional(),
+  video: coverKindUi.optional(),
+  audio: coverKindUi.optional(),
+  default: coverKindUi.optional()
+});
+var searchKind = z.object({
+  key: z.string().min(1),
+  /** i18n label key shown as the facet group's title. */
+  label: z.string().min(1),
+  /** Optional icon asset path in the plugin zip. */
+  icon: templateValue.optional()
+});
+var searchUi = z.object({
+  kinds: z.array(searchKind)
+});
+var messageUi = z.object({
+  /**
+   * Template string for message anchor chip labels. Rendered by the
+   * host's template engine. Supports `{{data.field}}`, `{{duration(ms)}}`,
+   * `{{inc(n)}}`, `{{t('key')}}`, etc.
+   */
+  anchor: z.string().min(1).optional()
+});
+var pluginManifestUi = z.object({
+  /**
+   * Preferred preview surface height (any CSS length, e.g. "85vh").
+   * Applied by both the resource detail page and the preview dialog.
+   */
+  height: z.string().min(1).optional(),
+  /**
+   * Preferred preview surface aspect ratio (e.g. "16/9"), capped by the
+   * host at 70vh. Intended for video-centric plugins; takes precedence
+   * over `height`. When neither is set the host falls back to 60vh.
+   */
+  aspect: z.string().min(1).optional(),
+  /**
+   * Cover template blocks per content kind. When present, the host
+   * renders the resource cover from the plugin's file templates
+   * instead of the built-in thumbnail pipeline.
+   */
+  card: coverKindUiMap.optional(),
+  /** Search facet kinds; enables the plugin's search integration. */
+  search: searchUi.optional(),
+  /**
+   * Anchor chip label template for messages; declares message-anchor
+   * support in the host UI.
+   */
+  message: messageUi.optional(),
+  /**
+   * Whether the plugin iframe inherits the host's app font (default true).
+   * Set to false for plugins that must render with their own fonts.
+   */
+  inheritFont: z.boolean().optional()
+});
+var pluginManifest = z.object({
+  id: pluginManifestId,
+  /** Display name shown in the plugins list and resource badges. */
+  name: z.string().min(1),
+  /** One-line description shown in the plugins list. */
+  description: z.string().min(1),
+  /** Icon asset path inside the plugin zip. */
+  icon: iconRef.optional(),
+  /** Semantic plugin version; shown to users on the plugin card. */
+  version: z.string().min(1),
+  /** Declared capabilities (see {@link pluginPermissions}). */
+  permissions: pluginPermissions,
+  /**
+   * Localized label tables: `{ labelKey: { locale: label } }`, e.g.
+   * `{ "cover.open": { "en": "Open", "zh-CN": "打开" } }` — labels are
+   * referenced from templates with `{{t('labelKey')}}` (see
+   * {@link localeString}).
+   */
+  i18n: z.record(z.string(), localeString).optional(),
+  /** UI preferences (see {@link pluginManifestUi}). */
+  ui: pluginManifestUi.optional()
+});
+
+// src/schema.ts
+var anchorData = z.object({
+  data: z.unknown().optional()
+}).strict();
+
+export { anchorData, iconRef, localeString, pluginManifest, pluginManifestId, pluginManifestUi, pluginPermissions, searchKind };
+//# sourceMappingURL=schema.js.map
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/manifest.ts","../src/schema.ts"],"names":["z"],"mappings":";;;AAOO,IAAM,gBAAA,GAAmB,CAAA,CAAE,MAAA,EAAO,CAAE,IAAA;AASpC,IAAM,iBAAA,GAAoB,EAAE,MAAA,CAAO;AAAA;AAAA,EAEzC,UAAA,EAAY,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA;AAAA,EAErC,UAAA,EAAY,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA;AAAA,EAErC,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA;AAAA,EAElC,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA;AAAA,EAElC,WAAA,EAAa,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMtC,SAAA,EAAW,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOpC,QAAA,EAAU,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK;AACpC,CAAC;AAQM,IAAM,YAAA,GAAe,EAAE,MAAA,CAAO,CAAA,CAAE,QAAO,EAAG,CAAA,CAAE,QAAQ;AAGpD,IAAM,OAAA,GAAU,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AAWvC,IAAM,aAAA,GAAgB,EAAE,MAAA,EAAO;AAQ/B,IAAM,WAAA,GAAc,EAAE,MAAA,CAAO;AAAA,EAC5B,EAAA,EAAI,CAAA,CAAE,KAAA,CAAM,aAAa,EAAE,QAAA,EAAS;AAAA,EACpC,EAAA,EAAI,CAAA,CAAE,KAAA,CAAM,aAAa,EAAE,QAAA,EAAS;AAAA,EACpC,EAAA,EAAI,CAAA,CAAE,KAAA,CAAM,aAAa,EAAE,QAAA,EAAS;AAAA,EACpC,EAAA,EAAI,CAAA,CAAE,KAAA,CAAM,aAAa,EAAE,QAAA;AAC5B,CAAC,CAAA;AAQD,IAAM,cAAA,GAAiB,EAAE,MAAA,CAAO;AAAA,EAC/B,KAAA,EAAO,YAAY,QAAA,EAAS;AAAA,EAC5B,KAAA,EAAO,YAAY,QAAA,EAAS;AAAA,EAC5B,KAAA,EAAO,YAAY,QAAA,EAAS;AAAA,EAC5B,OAAA,EAAS,YAAY,QAAA;AACtB,CAAC,CAAA;AAOM,IAAM,UAAA,GAAa,EAAE,MAAA,CAAO;AAAA,EAClC,GAAA,EAAK,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAErB,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAEvB,IAAA,EAAM,cAAc,QAAA;AACrB,CAAC;AAGD,IAAM,QAAA,GAAW,EAAE,MAAA,CAAO;AAAA,EACzB,KAAA,EAAO,CAAA,CAAE,KAAA,CAAM,UAAU;AAC1B,CAAC,CAAA;AAED,IAAM,SAAA,GAAY,EAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM1B,QAAQ,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA;AAC3B,CAAC,CAAA;AAOM,IAAM,gBAAA,GAAmB,EAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKxC,QAAQ,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMnC,QAAQ,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMnC,IAAA,EAAM,eAAe,QAAA,EAAS;AAAA;AAAA,EAE9B,MAAA,EAAQ,SAAS,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAK1B,OAAA,EAAS,UAAU,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAK5B,WAAA,EAAa,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AAC1B,CAAC;AAWM,IAAM,cAAA,GAAiB,EAAE,MAAA,CAAO;AAAA,EACtC,EAAA,EAAI,gBAAA;AAAA;AAAA,EAEJ,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAEtB,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAE7B,IAAA,EAAM,QAAQ,QAAA,EAAS;AAAA;AAAA,EAEvB,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAEzB,WAAA,EAAa,iBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOb,IAAA,EAAM,EAAE,MAAA,CAAO,CAAA,CAAE,QAAO,EAAG,YAAY,EAAE,QAAA,EAAS;AAAA;AAAA,EAElD,EAAA,EAAI,iBAAiB,QAAA;AACtB,CAAC;;;ACjKM,IAAM,UAAA,GAAaA,EACxB,MAAA,CAAO;AAAA,EACP,IAAA,EAAMA,CAAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AACnB,CAAC,EACA,MAAA","file":"schema.js","sourcesContent":["import { z } from \"zod\"\n\n/**\n * Plugin manifest UUID (v4). Generated once when scaffolding a plugin\n * (e.g. `crypto.randomUUID()`) and never reused across plugins — the\n * server keys installed plugins by this id.\n */\nexport const pluginManifestId = z.string().uuid()\nexport type PluginManifestId = z.infer<typeof pluginManifestId>\n\n/**\n * Declared plugin capabilities. Each flag gates the corresponding API\n * surface: a plugin without `danmaku` gets no danmaku methods and the\n * host enforces the permission at the capability guard, so a manifest\n * that does not declare a capability cannot call it.\n */\nexport const pluginPermissions = z.object({\n\t/** Read/write the resource's source metadata. */\n\tsourceMeta: z.boolean().default(false),\n\t/** Produce and store search metadata facets. */\n\tsearchMeta: z.boolean().default(false),\n\t/** Create/list danmaku for resources this plugin renders. */\n\tdanmaku: z.boolean().default(false),\n\t/** Create/list messages for resources this plugin renders. */\n\tmessage: z.boolean().default(false),\n\t/** Produce content hashes for duplicate detection / image similarity. */\n\timageHashes: z.boolean().default(false),\n\t/**\n\t * List and extract archive (zip/tar/7z/…) entries. The only API\n\t * surface with a write side effect (the host's extraction cache), so\n\t * it is denied by default.\n\t */\n\tcontainer: z.boolean().default(false),\n\t/**\n\t * The plugin asset vault: user-consented downloads into the plugin's\n\t * own `vault/` directory plus the vault read/delete methods. Denied\n\t * by default — every download needs this capability AND the user's\n\t * per-request approval.\n\t */\n\tdownload: z.boolean().default(false),\n})\nexport type PluginPermissions = z.infer<typeof pluginPermissions>\n\n/**\n * Label key → locale table: `{ \"cover.open\": { \"en\": \"Open\", \"zh-CN\": \"打开\" } }`.\n * The host's template engine resolves `t('cover.open')` against the\n * resource's locale from this map.\n */\nexport const localeString = z.record(z.string(), z.string())\n\n/** Icon reference: an asset path inside the plugin zip (`assets/icon.svg`). */\nexport const iconRef = z.string().min(1)\n\n/**\n * Corner template slot: a string rendered by the host's template engine\n * over the resource scope. The engine supports `{{data.field}}` paths,\n * pipes (`bytes`, `duration`, `number`, `inc`), comparisons\n * (`eq`/`ne`/`gt`/`lt`/`gte`/`lte`), `if(cond, a, b)`, `join`,\n * `t('key')` for i18n, `icon('Icon')`, `asset('path')`,\n * `kind(...)`, and `searchKindIcons()` (the plugin's search kinds).\n * Unknown expressions render as the empty string.\n */\nconst templateValue = z.string()\n\n/**\n * Corner template slots for one content kind. Templates are rendered by\n * the host's template engine over the resource's file list; supported\n * directives include `{{data.field}}`, `{{duration(ms)}}`, `{{inc(n)}}`\n * and `{{t('key')}}`.\n */\nconst coverKindUi = z.object({\n\ttl: z.array(templateValue).optional(),\n\ttr: z.array(templateValue).optional(),\n\tbl: z.array(templateValue).optional(),\n\tbr: z.array(templateValue).optional(),\n})\n\n/**\n * Cover templates per content kind. A plugin declares the kinds it can\n * produce; the host picks the block matching the resource's cover type\n * (`image`/`video`/`audio`/`default`) and renders each corner as\n * specified, or falls back to the default cover when no block matches.\n */\nconst coverKindUiMap = z.object({\n\timage: coverKindUi.optional(),\n\tvideo: coverKindUi.optional(),\n\taudio: coverKindUi.optional(),\n\tdefault: coverKindUi.optional(),\n})\n\n/**\n * A search facet kind: a named dimension with an icon, rendered as a\n * facet group in the host's search UI. `key` becomes the facet key in\n * the search metadata the plugin produces.\n */\nexport const searchKind = z.object({\n\tkey: z.string().min(1),\n\t/** i18n label key shown as the facet group's title. */\n\tlabel: z.string().min(1),\n\t/** Optional icon asset path in the plugin zip. */\n\ticon: templateValue.optional(),\n})\nexport type SearchKind = z.infer<typeof searchKind>\n\nconst searchUi = z.object({\n\tkinds: z.array(searchKind),\n})\n\nconst messageUi = z.object({\n\t/**\n\t * Template string for message anchor chip labels. Rendered by the\n\t * host's template engine. Supports `{{data.field}}`, `{{duration(ms)}}`,\n\t * `{{inc(n)}}`, `{{t('key')}}`, etc.\n\t */\n\tanchor: z.string().min(1).optional(),\n})\n\n/**\n * Manifest-declared UI preferences. These shape how the host app\n * presents the plugin's iframe without the plugin shipping any host\n * integration code.\n */\nexport const pluginManifestUi = z.object({\n\t/**\n\t * Preferred preview surface height (any CSS length, e.g. \"85vh\").\n\t * Applied by both the resource detail page and the preview dialog.\n\t */\n\theight: z.string().min(1).optional(),\n\t/**\n\t * Preferred preview surface aspect ratio (e.g. \"16/9\"), capped by the\n\t * host at 70vh. Intended for video-centric plugins; takes precedence\n\t * over `height`. When neither is set the host falls back to 60vh.\n\t */\n\taspect: z.string().min(1).optional(),\n\t/**\n\t * Cover template blocks per content kind. When present, the host\n\t * renders the resource cover from the plugin's file templates\n\t * instead of the built-in thumbnail pipeline.\n\t */\n\tcard: coverKindUiMap.optional(),\n\t/** Search facet kinds; enables the plugin's search integration. */\n\tsearch: searchUi.optional(),\n\t/**\n\t * Anchor chip label template for messages; declares message-anchor\n\t * support in the host UI.\n\t */\n\tmessage: messageUi.optional(),\n\t/**\n\t * Whether the plugin iframe inherits the host's app font (default true).\n\t * Set to false for plugins that must render with their own fonts.\n\t */\n\tinheritFont: z.boolean().optional(),\n})\nexport type PluginManifestUi = z.infer<typeof pluginManifestUi>\nexport type CoverKindUi = z.infer<typeof coverKindUi>\nexport type CoverKindUiMap = z.infer<typeof coverKindUiMap>\n\n/**\n * The plugin manifest contract — the single schema validated everywhere\n * via its parse: the server at install time, the build CLI, and the\n * workbench. A manifest lives at the zip root of a built plugin next to\n * `main.js` and `index.html`.\n */\nexport const pluginManifest = z.object({\n\tid: pluginManifestId,\n\t/** Display name shown in the plugins list and resource badges. */\n\tname: z.string().min(1),\n\t/** One-line description shown in the plugins list. */\n\tdescription: z.string().min(1),\n\t/** Icon asset path inside the plugin zip. */\n\ticon: iconRef.optional(),\n\t/** Semantic plugin version; shown to users on the plugin card. */\n\tversion: z.string().min(1),\n\t/** Declared capabilities (see {@link pluginPermissions}). */\n\tpermissions: pluginPermissions,\n\t/**\n\t * Localized label tables: `{ labelKey: { locale: label } }`, e.g.\n\t * `{ \"cover.open\": { \"en\": \"Open\", \"zh-CN\": \"打开\" } }` — labels are\n\t * referenced from templates with `{{t('labelKey')}}` (see\n\t * {@link localeString}).\n\t */\n\ti18n: z.record(z.string(), localeString).optional(),\n\t/** UI preferences (see {@link pluginManifestUi}). */\n\tui: pluginManifestUi.optional(),\n})\nexport type PluginManifest = z.infer<typeof pluginManifest>\n","/**\n * The zod schema layer of the plugin contract: the manifest schema and\n * the wire anchor envelope. Import this subpath\n * (`@hoardodile/sdk-types/schema`) only where a runtime validator is\n * actually needed — the host, the server, and tooling. The root entry\n * re-exports the inferred types only, so plugin bundles never pull zod.\n */\nimport { z } from \"zod\"\n\nexport * from \"./manifest.ts\"\n\n/**\n * Wire/storage envelope for a message or danmaku anchor. Carries only\n * the plugin-defined location payload in `data`; the host never\n * interprets its contents. The anchor's resource is host state — the SDK\n * injects it from the iframe's binding and the server derives it from\n * the row's `anchor_resource_id` column — so plugins never see a resId\n * here, and a plugin that sends one is rejected (strict).\n *\n * Plugin code works with the raw location data (`PluginSchema[\"anchor\"]`)\n * directly; the SDK wraps it into this envelope when it crosses the\n * wire.\n */\nexport const anchorData = z\n\t.object({\n\t\tdata: z.unknown().optional(),\n\t})\n\t.strict()\nexport type AnchorData = z.infer<typeof anchorData>\n"]}

package/dist/template.d.ts

@@ -0,0 +1,67 @@
+/**
+ * The host's cover/message template grammar: fragment splitting, the
+ * expression tokeniser and the recursive-descent parser. Pure logic
+ * with no DOM or React — shared verbatim by the web renderer
+ * (`apps/web/src/features/res/template/render.ts`) and the CLI's
+ * build-time template lint (`packages/cli`), so the linter can never
+ * drift from what the engine actually renders.
+ *
+ * The parser is deliberately lenient: a partial parse recovers and the
+ * evaluator renders what it can (bad expressions render as the empty
+ * string). Strictness belongs to the lint tooling, which inspects the
+ * tokens and the AST on top of this grammar.
+ */
+type TemplateFragment = {
+    readonly kind: "text";
+    readonly value: string;
+} | {
+    readonly kind: "expr";
+    readonly source: string;
+};
+/** Split a template into literal text and `{{...}}` expression fragments. */
+declare function parseTemplateFragments(template: string): readonly TemplateFragment[];
+type TemplateToken = {
+    readonly kind: "ident";
+    readonly value: string;
+} | {
+    readonly kind: "dot";
+} | {
+    readonly kind: "lparen";
+} | {
+    readonly kind: "rparen";
+} | {
+    readonly kind: "comma";
+} | {
+    readonly kind: "string";
+    readonly value: string;
+} | {
+    readonly kind: "eof";
+};
+/** Tokenise one expression body (the inside of `{{...}}`). */
+declare function tokeniseExpression(source: string): TemplateToken[];
+type TemplateExpr = {
+    readonly kind: "path";
+    readonly segments: readonly string[];
+} | {
+    readonly kind: "call";
+    readonly name: string;
+    readonly args: readonly TemplateArg[];
+};
+type TemplateArg = {
+    readonly kind: "expr";
+    readonly expr: TemplateExpr;
+} | {
+    readonly kind: "string";
+    readonly value: string;
+};
+/**
+ * Parse one expression body (`{{...}}` contents) into an AST. Returns
+ * `undefined` when the expression does not start with an identifier —
+ * a call or path head is required. Note the parser is lenient about
+ * the *tail*: unbalanced parentheses recover into a partial AST (the
+ * evaluator renders what it can); use {@link tokeniseExpression} and
+ * check paren balance yourself when strictness matters.
+ */
+declare function parseTemplateExpression(source: string): TemplateExpr | undefined;
+
+export { type TemplateArg, type TemplateExpr, type TemplateFragment, type TemplateToken, parseTemplateExpression, parseTemplateFragments, tokeniseExpression };

package/dist/template.js

@@ -0,0 +1,137 @@
+// src/template.ts
+var TEMPLATE_RE = /\{\{(.*?)\}\}/g;
+function parseTemplateFragments(template) {
+  const fragments = [];
+  let lastIndex = 0;
+  for (const match of template.matchAll(TEMPLATE_RE)) {
+    const start = match.index ?? 0;
+    if (start > lastIndex) {
+      fragments.push({ kind: "text", value: template.slice(lastIndex, start) });
+    }
+    fragments.push({ kind: "expr", source: match[1] ?? "" });
+    lastIndex = start + match[0].length;
+  }
+  if (lastIndex < template.length) {
+    fragments.push({ kind: "text", value: template.slice(lastIndex) });
+  }
+  return fragments;
+}
+function tokeniseExpression(source) {
+  const tokens = [];
+  let i = 0;
+  while (i < source.length) {
+    const ch = source[i];
+    if (/\s/.test(ch)) {
+      i++;
+      continue;
+    }
+    if (ch === ".") {
+      tokens.push({ kind: "dot" });
+      i++;
+      continue;
+    }
+    if (ch === "(") {
+      tokens.push({ kind: "lparen" });
+      i++;
+      continue;
+    }
+    if (ch === ")") {
+      tokens.push({ kind: "rparen" });
+      i++;
+      continue;
+    }
+    if (ch === ",") {
+      tokens.push({ kind: "comma" });
+      i++;
+      continue;
+    }
+    if (ch === "'") {
+      let j = i + 1;
+      while (j < source.length && source[j] !== "'") {
+        j++;
+      }
+      tokens.push({ kind: "string", value: source.slice(i + 1, j) });
+      i = j + 1;
+      continue;
+    }
+    if (/[A-Za-z0-9_]/.test(ch)) {
+      let j = i;
+      while (j < source.length && /[A-Za-z0-9_]/.test(source[j])) {
+        j++;
+      }
+      tokens.push({ kind: "ident", value: source.slice(i, j) });
+      i = j;
+      continue;
+    }
+    i++;
+  }
+  tokens.push({ kind: "eof" });
+  return tokens;
+}
+var Parser = class {
+  tokens;
+  pos = 0;
+  constructor(tokens) {
+    this.tokens = tokens;
+  }
+  peek() {
+    return this.tokens[this.pos] ?? { kind: "eof" };
+  }
+  advance() {
+    const t = this.tokens[this.pos];
+    this.pos++;
+    return t ?? { kind: "eof" };
+  }
+};
+function parseExpr(parser) {
+  const t = parser.peek();
+  if (t.kind !== "ident") return void 0;
+  parser.advance();
+  const next = parser.peek();
+  if (next.kind === "lparen") {
+    parser.advance();
+    const args = [];
+    if (parser.peek().kind !== "rparen") {
+      while (true) {
+        const arg = parseArg(parser);
+        if (arg === void 0) break;
+        args.push(arg);
+        if (parser.peek().kind === "comma") {
+          parser.advance();
+          continue;
+        }
+        break;
+      }
+    }
+    if (parser.peek().kind === "rparen") {
+      parser.advance();
+    }
+    return { kind: "call", name: t.value, args };
+  }
+  const segments = [t.value];
+  while (parser.peek().kind === "dot") {
+    parser.advance();
+    const seg = parser.peek();
+    if (seg.kind !== "ident") break;
+    parser.advance();
+    segments.push(seg.value);
+  }
+  return { kind: "path", segments };
+}
+function parseArg(parser) {
+  const t = parser.peek();
+  if (t.kind === "string") {
+    parser.advance();
+    return { kind: "string", value: t.value };
+  }
+  const expr = parseExpr(parser);
+  if (expr === void 0) return void 0;
+  return { kind: "expr", expr };
+}
+function parseTemplateExpression(source) {
+  return parseExpr(new Parser(tokeniseExpression(source)));
+}
+
+export { parseTemplateExpression, parseTemplateFragments, tokeniseExpression };
+//# sourceMappingURL=template.js.map
+//# sourceMappingURL=template.js.map

package/dist/template.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/template.ts"],"names":[],"mappings":";AAcA,IAAM,WAAA,GAAc,gBAAA;AAOb,SAAS,uBACf,QAAA,EAC8B;AAC9B,EAAA,MAAM,YAAgC,EAAC;AACvC,EAAA,IAAI,SAAA,GAAY,CAAA;AAChB,EAAA,KAAA,MAAW,KAAA,IAAS,QAAA,CAAS,QAAA,CAAS,WAAW,CAAA,EAAG;AACnD,IAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,IAAS,CAAA;AAC7B,IAAA,IAAI,QAAQ,SAAA,EAAW;AACtB,MAAA,SAAA,CAAU,IAAA,CAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,KAAA,EAAO,SAAS,KAAA,CAAM,SAAA,EAAW,KAAK,CAAA,EAAG,CAAA;AAAA,IACzE;AACA,IAAA,SAAA,CAAU,IAAA,CAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,QAAQ,KAAA,CAAM,CAAC,CAAA,IAAK,EAAA,EAAI,CAAA;AACvD,IAAA,SAAA,GAAY,KAAA,GAAQ,KAAA,CAAM,CAAC,CAAA,CAAE,MAAA;AAAA,EAC9B;AACA,EAAA,IAAI,SAAA,GAAY,SAAS,MAAA,EAAQ;AAChC,IAAA,SAAA,CAAU,IAAA,CAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,OAAO,QAAA,CAAS,KAAA,CAAM,SAAS,CAAA,EAAG,CAAA;AAAA,EAClE;AACA,EAAA,OAAO,SAAA;AACR;AAYO,SAAS,mBAAmB,MAAA,EAAiC;AACnE,EAAA,MAAM,SAA0B,EAAC;AACjC,EAAA,IAAI,CAAA,GAAI,CAAA;AACR,EAAA,OAAO,CAAA,GAAI,OAAO,MAAA,EAAQ;AACzB,IAAA,MAAM,EAAA,GAAK,OAAO,CAAC,CAAA;AACnB,IAAA,IAAI,IAAA,CAAK,IAAA,CAAK,EAAE,CAAA,EAAG;AAClB,MAAA,CAAA,EAAA;AACA,MAAA;AAAA,IACD;AACA,IAAA,IAAI,OAAO,GAAA,EAAK;AACf,MAAA,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA;AAC3B,MAAA,CAAA,EAAA;AACA,MAAA;AAAA,IACD;AACA,IAAA,IAAI,OAAO,GAAA,EAAK;AACf,MAAA,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,QAAA,EAAU,CAAA;AAC9B,MAAA,CAAA,EAAA;AACA,MAAA;AAAA,IACD;AACA,IAAA,IAAI,OAAO,GAAA,EAAK;AACf,MAAA,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,QAAA,EAAU,CAAA;AAC9B,MAAA,CAAA,EAAA;AACA,MAAA;AAAA,IACD;AACA,IAAA,IAAI,OAAO,GAAA,EAAK;AACf,MAAA,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,OAAA,EAAS,CAAA;AAC7B,MAAA,CAAA,EAAA;AACA,MAAA;AAAA,IACD;AACA,IAAA,IAAI,OAAO,GAAA,EAAK;AACf,MAAA,IAAI,IAAI,CAAA,GAAI,CAAA;AACZ,MAAA,OAAO,IAAI,MAAA,CAAO,MAAA,IAAU,MAAA,CAAO,CAAC,MAAM,GAAA,EAAK;AAC9C,QAAA,CAAA,EAAA;AAAA,MACD;AACA,MAAA,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,MAAA,CAAO,KAAA,CAAM,CAAA,GAAI,CAAA,EAAG,CAAC,CAAA,EAAG,CAAA;AAC7D,MAAA,CAAA,GAAI,CAAA,GAAI,CAAA;AACR,MAAA;AAAA,IACD;AACA,IAAA,IAAI,cAAA,CAAe,IAAA,CAAK,EAAE,CAAA,EAAG;AAC5B,MAAA,IAAI,CAAA,GAAI,CAAA;AACR,MAAA,OAAO,CAAA,GAAI,OAAO,MAAA,IAAU,cAAA,CAAe,KAAK,MAAA,CAAO,CAAC,CAAE,CAAA,EAAG;AAC5D,QAAA,CAAA,EAAA;AAAA,MACD;AACA,MAAA,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,OAAO,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,EAAG,CAAA;AACxD,MAAA,CAAA,GAAI,CAAA;AACJ,MAAA;AAAA,IACD;AAGA,IAAA,CAAA,EAAA;AAAA,EACD;AACA,EAAA,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA;AAC3B,EAAA,OAAO,MAAA;AACR;AAcA,IAAM,SAAN,MAAa;AAAA,EACH,MAAA;AAAA,EACT,GAAA,GAAM,CAAA;AAAA,EACN,YAAY,MAAA,EAAyB;AACpC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EACf;AAAA,EAEA,IAAA,GAAsB;AACrB,IAAA,OAAO,KAAK,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,IAAK,EAAE,MAAM,KAAA,EAAM;AAAA,EAC/C;AAAA,EAEA,OAAA,GAAyB;AACxB,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA;AAC9B,IAAA,IAAA,CAAK,GAAA,EAAA;AACL,IAAA,OAAO,CAAA,IAAK,EAAE,IAAA,EAAM,KAAA,EAAM;AAAA,EAC3B;AACD,CAAA;AAEA,SAAS,UAAU,MAAA,EAA0C;AAC5D,EAAA,MAAM,CAAA,GAAI,OAAO,IAAA,EAAK;AACtB,EAAA,IAAI,CAAA,CAAE,IAAA,KAAS,OAAA,EAAS,OAAO,MAAA;AAC/B,EAAA,MAAA,CAAO,OAAA,EAAQ;AAEf,EAAA,MAAM,IAAA,GAAO,OAAO,IAAA,EAAK;AACzB,EAAA,IAAI,IAAA,CAAK,SAAS,QAAA,EAAU;AAE3B,IAAA,MAAA,CAAO,OAAA,EAAQ;AACf,IAAA,MAAM,OAAsB,EAAC;AAC7B,IAAA,IAAI,MAAA,CAAO,IAAA,EAAK,CAAE,IAAA,KAAS,QAAA,EAAU;AACpC,MAAA,OAAO,IAAA,EAAM;AACZ,QAAA,MAAM,GAAA,GAAM,SAAS,MAAM,CAAA;AAC3B,QAAA,IAAI,QAAQ,MAAA,EAAW;AACvB,QAAA,IAAA,CAAK,KAAK,GAAG,CAAA;AACb,QAAA,IAAI,MAAA,CAAO,IAAA,EAAK,CAAE,IAAA,KAAS,OAAA,EAAS;AACnC,UAAA,MAAA,CAAO,OAAA,EAAQ;AACf,UAAA;AAAA,QACD;AACA,QAAA;AAAA,MACD;AAAA,IACD;AACA,IAAA,IAAI,MAAA,CAAO,IAAA,EAAK,CAAE,IAAA,KAAS,QAAA,EAAU;AACpC,MAAA,MAAA,CAAO,OAAA,EAAQ;AAAA,IAChB;AACA,IAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,CAAA,CAAE,OAAO,IAAA,EAAK;AAAA,EAC5C;AAGA,EAAA,MAAM,QAAA,GAAW,CAAC,CAAA,CAAE,KAAK,CAAA;AACzB,EAAA,OAAO,MAAA,CAAO,IAAA,EAAK,CAAE,IAAA,KAAS,KAAA,EAAO;AACpC,IAAA,MAAA,CAAO,OAAA,EAAQ;AACf,IAAA,MAAM,GAAA,GAAM,OAAO,IAAA,EAAK;AACxB,IAAA,IAAI,GAAA,CAAI,SAAS,OAAA,EAAS;AAC1B,IAAA,MAAA,CAAO,OAAA,EAAQ;AACf,IAAA,QAAA,CAAS,IAAA,CAAK,IAAI,KAAK,CAAA;AAAA,EACxB;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,QAAA,EAAS;AACjC;AAEA,SAAS,SAAS,MAAA,EAAyC;AAC1D,EAAA,MAAM,CAAA,GAAI,OAAO,IAAA,EAAK;AACtB,EAAA,IAAI,CAAA,CAAE,SAAS,QAAA,EAAU;AACxB,IAAA,MAAA,CAAO,OAAA,EAAQ;AACf,IAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,EAAE,KAAA,EAAM;AAAA,EACzC;AACA,EAAA,MAAM,IAAA,GAAO,UAAU,MAAM,CAAA;AAC7B,EAAA,IAAI,IAAA,KAAS,QAAW,OAAO,MAAA;AAC/B,EAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAK;AAC7B;AAUO,SAAS,wBACf,MAAA,EAC2B;AAC3B,EAAA,OAAO,UAAU,IAAI,MAAA,CAAO,kBAAA,CAAmB,MAAM,CAAC,CAAC,CAAA;AACxD","file":"template.js","sourcesContent":["/**\n * The host's cover/message template grammar: fragment splitting, the\n * expression tokeniser and the recursive-descent parser. Pure logic\n * with no DOM or React — shared verbatim by the web renderer\n * (`apps/web/src/features/res/template/render.ts`) and the CLI's\n * build-time template lint (`packages/cli`), so the linter can never\n * drift from what the engine actually renders.\n *\n * The parser is deliberately lenient: a partial parse recovers and the\n * evaluator renders what it can (bad expressions render as the empty\n * string). Strictness belongs to the lint tooling, which inspects the\n * tokens and the AST on top of this grammar.\n */\n\nconst TEMPLATE_RE = /\\{\\{(.*?)\\}\\}/g\n\nexport type TemplateFragment =\n\t| { readonly kind: \"text\"; readonly value: string }\n\t| { readonly kind: \"expr\"; readonly source: string }\n\n/** Split a template into literal text and `{{...}}` expression fragments. */\nexport function parseTemplateFragments(\n\ttemplate: string,\n): readonly TemplateFragment[] {\n\tconst fragments: TemplateFragment[] = []\n\tlet lastIndex = 0\n\tfor (const match of template.matchAll(TEMPLATE_RE)) {\n\t\tconst start = match.index ?? 0\n\t\tif (start > lastIndex) {\n\t\t\tfragments.push({ kind: \"text\", value: template.slice(lastIndex, start) })\n\t\t}\n\t\tfragments.push({ kind: \"expr\", source: match[1] ?? \"\" })\n\t\tlastIndex = start + match[0].length\n\t}\n\tif (lastIndex < template.length) {\n\t\tfragments.push({ kind: \"text\", value: template.slice(lastIndex) })\n\t}\n\treturn fragments\n}\n\nexport type TemplateToken =\n\t| { readonly kind: \"ident\"; readonly value: string }\n\t| { readonly kind: \"dot\" }\n\t| { readonly kind: \"lparen\" }\n\t| { readonly kind: \"rparen\" }\n\t| { readonly kind: \"comma\" }\n\t| { readonly kind: \"string\"; readonly value: string }\n\t| { readonly kind: \"eof\" }\n\n/** Tokenise one expression body (the inside of `{{...}}`). */\nexport function tokeniseExpression(source: string): TemplateToken[] {\n\tconst tokens: TemplateToken[] = []\n\tlet i = 0\n\twhile (i < source.length) {\n\t\tconst ch = source[i]!\n\t\tif (/\\s/.test(ch)) {\n\t\t\ti++\n\t\t\tcontinue\n\t\t}\n\t\tif (ch === \".\") {\n\t\t\ttokens.push({ kind: \"dot\" })\n\t\t\ti++\n\t\t\tcontinue\n\t\t}\n\t\tif (ch === \"(\") {\n\t\t\ttokens.push({ kind: \"lparen\" })\n\t\t\ti++\n\t\t\tcontinue\n\t\t}\n\t\tif (ch === \")\") {\n\t\t\ttokens.push({ kind: \"rparen\" })\n\t\t\ti++\n\t\t\tcontinue\n\t\t}\n\t\tif (ch === \",\") {\n\t\t\ttokens.push({ kind: \"comma\" })\n\t\t\ti++\n\t\t\tcontinue\n\t\t}\n\t\tif (ch === \"'\") {\n\t\t\tlet j = i + 1\n\t\t\twhile (j < source.length && source[j] !== \"'\") {\n\t\t\t\tj++\n\t\t\t}\n\t\t\ttokens.push({ kind: \"string\", value: source.slice(i + 1, j) })\n\t\t\ti = j + 1\n\t\t\tcontinue\n\t\t}\n\t\tif (/[A-Za-z0-9_]/.test(ch)) {\n\t\t\tlet j = i\n\t\t\twhile (j < source.length && /[A-Za-z0-9_]/.test(source[j]!)) {\n\t\t\t\tj++\n\t\t\t}\n\t\t\ttokens.push({ kind: \"ident\", value: source.slice(i, j) })\n\t\t\ti = j\n\t\t\tcontinue\n\t\t}\n\t\t// Unrecognised character — skip; the evaluator renders the\n\t\t// resulting expression as the empty string.\n\t\ti++\n\t}\n\ttokens.push({ kind: \"eof\" })\n\treturn tokens\n}\n\nexport type TemplateExpr =\n\t| { readonly kind: \"path\"; readonly segments: readonly string[] }\n\t| {\n\t\t\treadonly kind: \"call\"\n\t\t\treadonly name: string\n\t\t\treadonly args: readonly TemplateArg[]\n\t  }\n\nexport type TemplateArg =\n\t| { readonly kind: \"expr\"; readonly expr: TemplateExpr }\n\t| { readonly kind: \"string\"; readonly value: string }\n\nclass Parser {\n\treadonly tokens: TemplateToken[]\n\tpos = 0\n\tconstructor(tokens: TemplateToken[]) {\n\t\tthis.tokens = tokens\n\t}\n\n\tpeek(): TemplateToken {\n\t\treturn this.tokens[this.pos] ?? { kind: \"eof\" }\n\t}\n\n\tadvance(): TemplateToken {\n\t\tconst t = this.tokens[this.pos]\n\t\tthis.pos++\n\t\treturn t ?? { kind: \"eof\" }\n\t}\n}\n\nfunction parseExpr(parser: Parser): TemplateExpr | undefined {\n\tconst t = parser.peek()\n\tif (t.kind !== \"ident\") return undefined\n\tparser.advance()\n\n\tconst next = parser.peek()\n\tif (next.kind === \"lparen\") {\n\t\t// call\n\t\tparser.advance() // consume (\n\t\tconst args: TemplateArg[] = []\n\t\tif (parser.peek().kind !== \"rparen\") {\n\t\t\twhile (true) {\n\t\t\t\tconst arg = parseArg(parser)\n\t\t\t\tif (arg === undefined) break\n\t\t\t\targs.push(arg)\n\t\t\t\tif (parser.peek().kind === \"comma\") {\n\t\t\t\t\tparser.advance()\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\t\t\t\tbreak\n\t\t\t}\n\t\t}\n\t\tif (parser.peek().kind === \"rparen\") {\n\t\t\tparser.advance()\n\t\t}\n\t\treturn { kind: \"call\", name: t.value, args }\n\t}\n\n\t// path\n\tconst segments = [t.value]\n\twhile (parser.peek().kind === \"dot\") {\n\t\tparser.advance()\n\t\tconst seg = parser.peek()\n\t\tif (seg.kind !== \"ident\") break\n\t\tparser.advance()\n\t\tsegments.push(seg.value)\n\t}\n\treturn { kind: \"path\", segments }\n}\n\nfunction parseArg(parser: Parser): TemplateArg | undefined {\n\tconst t = parser.peek()\n\tif (t.kind === \"string\") {\n\t\tparser.advance()\n\t\treturn { kind: \"string\", value: t.value }\n\t}\n\tconst expr = parseExpr(parser)\n\tif (expr === undefined) return undefined\n\treturn { kind: \"expr\", expr }\n}\n\n/**\n * Parse one expression body (`{{...}}` contents) into an AST. Returns\n * `undefined` when the expression does not start with an identifier —\n * a call or path head is required. Note the parser is lenient about\n * the *tail*: unbalanced parentheses recover into a partial AST (the\n * evaluator renders what it can); use {@link tokeniseExpression} and\n * check paren balance yourself when strictness matters.\n */\nexport function parseTemplateExpression(\n\tsource: string,\n): TemplateExpr | undefined {\n\treturn parseExpr(new Parser(tokeniseExpression(source)))\n}\n"]}

package/dist/text-limits.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Plugin-facing text-length limits: the input caps plugins that render
+ * composers need. App-side field limits live in
+ * `@hoardodile/schemas/text-limits` instead.
+ */
+/** Danmaku body cap enforced by the host. */
+declare const MAX_DANMAKU_TEXT_LENGTH = 100;
+/** Comment/message body cap enforced by the host. */
+declare const MAX_COMMENT_BODY_LENGTH = 10000;
+
+export { MAX_COMMENT_BODY_LENGTH, MAX_DANMAKU_TEXT_LENGTH };

package/dist/text-limits.js

@@ -0,0 +1,7 @@
+// src/text-limits.ts
+var MAX_DANMAKU_TEXT_LENGTH = 100;
+var MAX_COMMENT_BODY_LENGTH = 1e4;
+
+export { MAX_COMMENT_BODY_LENGTH, MAX_DANMAKU_TEXT_LENGTH };
+//# sourceMappingURL=text-limits.js.map
+//# sourceMappingURL=text-limits.js.map

package/dist/text-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/text-limits.ts"],"names":[],"mappings":";AAOO,IAAM,uBAAA,GAA0B;AAGhC,IAAM,uBAAA,GAA0B","file":"text-limits.js","sourcesContent":["/**\n * Plugin-facing text-length limits: the input caps plugins that render\n * composers need. App-side field limits live in\n * `@hoardodile/schemas/text-limits` instead.\n */\n\n/** Danmaku body cap enforced by the host. */\nexport const MAX_DANMAKU_TEXT_LENGTH = 100\n\n/** Comment/message body cap enforced by the host. */\nexport const MAX_COMMENT_BODY_LENGTH = 10_000\n"]}