@hraness/ghostget 0.17.2

package/src/assets/code-owned-provider-template/plugin.ts.template

@@ -0,0 +1,102 @@
+import {
+  defineProviderPlugin,
+  lazyWebSessionRuntime,
+} from "../../provider-plugin";
+
+/**
+ * Capture-required trusted source plugin scaffold.
+ *
+ * Keep this source unit under src/plugins/__SITE_ID__-web/. Replace each
+ * fail-closed boundary only after the selected sanitized evidence,
+ * deterministic tests, account binding, and an authorized low-stakes fixture
+ * prove the exact exchange. Never add a raw HTTP, GraphQL, header, URL, cookie,
+ * JavaScript, selector, or browser-action input.
+ */
+
+export const __CONSTANT_PREFIX___WEB_OPERATION_NAMES = Object.freeze([
+  __OPERATION_JSON__,
+] as const);
+
+export type __PASCAL_NAME__WebOperationName =
+  (typeof __CONSTANT_PREFIX___WEB_OPERATION_NAMES)[number];
+export type __PASCAL_NAME__WebContractState = "observed" | "capture-required";
+export type __PASCAL_NAME__WebRisk = "R1" | "R2" | "R3";
+
+export type __PASCAL_NAME__WebOperationContract = {
+  readonly effect: "read" | "write";
+  readonly risk: __PASCAL_NAME__WebRisk;
+  readonly state: __PASCAL_NAME__WebContractState;
+  readonly reason: string;
+};
+
+export const __CONSTANT_PREFIX___WEB_OPERATIONS = Object.freeze({
+  [__OPERATION_JSON__]: Object.freeze({
+    effect: __EFFECT_JSON__,
+    risk: __RISK_JSON__,
+    state: "capture-required",
+    reason: "Selected sanitized evidence is bound, but the exact request, response, account, actor, target, incidental-effect, uncertainty, and low-stakes live-fixture proofs are not complete.",
+  }),
+} as const satisfies Readonly<
+  Record<__PASCAL_NAME__WebOperationName, __PASCAL_NAME__WebOperationContract>
+>);
+
+export const __CONSTANT_PREFIX___WEB_ORIGIN = __ORIGIN_JSON__;
+
+function matches__PASCAL_NAME__WebSubject(_value: string): boolean {
+  // A subject format guessed from structural traffic would be unsafe. Replace
+  // this only with the reviewed stable provider-account namespace.
+  return false;
+}
+
+export const __CAMEL_NAME__WebPlugin = defineProviderPlugin({
+  apiVersion: 1,
+  id: __PLUGIN_ID_JSON__,
+  version: "0.1.0",
+  displayName: "__DISPLAY_NAME__",
+  sourceKind: "source",
+  implementationSources: [
+    { label: "plugin.ts", url: new URL(import.meta.url) },
+    { label: "runtime.ts", url: new URL("./runtime.ts", import.meta.url) },
+    { label: "wrench-adapter.json", url: new URL("./wrench-adapter.json", import.meta.url) },
+  ],
+  bindings: [{
+    transport: "web-session-api",
+    surfaceId: __SITE_ID_JSON__,
+    origin: __ORIGIN_JSON__,
+    protectedHostnameFamilies: [__HOSTNAME_JSON__],
+    authKinds: ["cookie-source", "cookies-file", "browser-profile"],
+    operations: [{
+      name: __OPERATION_JSON__,
+      contractVersion: 1,
+      risk: __RISK_JSON__,
+      input: {
+        properties: {},
+        required: [],
+      },
+      sideEffect: "__SIDE_EFFECT__",
+      idempotency: "__IDEMPOTENCY__",
+      dedupeWindowMs: __DEDUPE_WINDOW_MS__,
+      state: "capture-required",
+      dispatch: __DISPATCH_JSON__,
+      implementation: "Network-inert scaffold; promote only after every bound proof is complete.",
+      planDispatches: () => __PLAN_DISPATCHES__,
+      validateInput: (input) =>
+        Object.keys(input).length === 0
+          ? []
+          : ["capture-required scaffold accepts no operation input"],
+    }],
+    subject: {
+      format: "__SITE_ID__:<stable-provider-account-id>",
+      matches: matches__PASCAL_NAME__WebSubject,
+    },
+    runtime: lazyWebSessionRuntime(async () => {
+      const runtime = await import("./runtime");
+      return {
+        probe: runtime.probe__PASCAL_NAME__WebSubject,
+        execute: runtime.execute__PASCAL_NAME__WebOperation,
+      };
+    }),
+  }],
+});
+
+export default __CAMEL_NAME__WebPlugin;

package/src/assets/code-owned-provider-template/runtime.internal.test.ts.template

@@ -0,0 +1,44 @@
+import { describe, expect, test } from "bun:test";
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+
+import type { GhostgetAuth } from "../../auth";
+import {
+  authorize__PASCAL_NAME__Request,
+  execute__PASCAL_NAME__WebOperation,
+  normalize__PASCAL_NAME__Response,
+  parse__PASCAL_NAME__CurrentSubject,
+  probe__PASCAL_NAME__WebSubject,
+} from "./runtime";
+
+const auth = {
+  schemaVersion: 1,
+  id: "__SITE_ID__-scaffold",
+  kind: "cookie-source",
+  source: "chrome",
+} as const satisfies GhostgetAuth;
+
+describe("__DISPLAY_NAME__ authenticated first-party runtime scaffold", () => {
+  test("fails before account bootstrap or semantic execution", async () => {
+    expect(() => authorize__PASCAL_NAME__Request({})).toThrow("capture-required");
+    expect(() => parse__PASCAL_NAME__CurrentSubject({})).toThrow("capture-required");
+    expect(() => normalize__PASCAL_NAME__Response({})).toThrow("capture-required");
+    await expect(probe__PASCAL_NAME__WebSubject(auth)).rejects.toThrow(
+      "capture-required",
+    );
+    await expect(Reflect.apply(
+      execute__PASCAL_NAME__WebOperation,
+      undefined,
+      [undefined, undefined, undefined, undefined, undefined],
+    )).rejects.toThrow("capture-required");
+  });
+
+  test("contains no direct network or browser-action primitive", () => {
+    const source = readFileSync(join(import.meta.dir, "runtime.ts"), "utf8");
+    expect(source).not.toMatch(/\bfetch\s*\(/u);
+    expect(source).not.toMatch(/\bBun\.connect\s*\(/u);
+    expect(source).not.toMatch(/\b(?:http|https)\.request\s*\(/u);
+    expect(source).not.toMatch(/\bnew\s+WebSocket\s*\(/u);
+    expect(source).not.toMatch(/\bpage\.(?:click|fill|goto|press|type|upload)\s*\(/u);
+  });
+});

package/src/assets/code-owned-provider-template/runtime.ts.template

@@ -0,0 +1,59 @@
+import type { GhostgetAuth } from "../../auth";
+import type { WebSessionOperationExecutor } from "../../web-session";
+
+function captureRequired(reason: string): never {
+  throw new Error(`__DISPLAY_NAME__ authenticated web source plugin is capture-required: ${reason}`);
+}
+
+/**
+ * Replace this with a typed exact-origin/method/path/query/body/header
+ * authorizer. Keep all user-controlled values individually encoded and reject
+ * every undeclared field before cookie acquisition or network I/O.
+ */
+export function authorize__PASCAL_NAME__Request(_input: unknown): never {
+  return captureRequired("exact request authorization is not proven");
+}
+
+/**
+ * Replace this with the reviewed current-account parser. Return one stable,
+ * namespaced subject and reject missing, duplicate, or ambiguous identities.
+ */
+export function parse__PASCAL_NAME__CurrentSubject(_value: unknown): never {
+  return captureRequired("current-account binding is not proven");
+}
+
+/**
+ * Replace this with a bounded response projection that verifies requested
+ * target and actor/parent bindings before returning semantic output.
+ */
+export function normalize__PASCAL_NAME__Response(_value: unknown): never {
+  return captureRequired("response projection is not proven");
+}
+
+/**
+ * Add a reviewed exact current-account request before promotion. Browser
+ * bootstrap may supply one narrowly routed token, but it must not perform the
+ * semantic read or action.
+ */
+export async function probe__PASCAL_NAME__WebSubject(
+  auth: GhostgetAuth,
+): Promise<string> {
+  void auth;
+  return captureRequired("current-account probe is not proven");
+}
+
+/**
+ * This source plugin is deliberately network-inert. Replace it with
+ * code-owned first-party HTTPS only after every promotion-checklist fact is
+ * proven. The kernel retains confirmation, dispatch journaling, recovery,
+ * attachment resolution, output bounds, and receipt authority.
+ */
+export const execute__PASCAL_NAME__WebOperation: WebSessionOperationExecutor =
+  async (manifest, recipe, input, auth, options) => {
+    void manifest;
+    void recipe;
+    void input;
+    void auth;
+    void options;
+    return captureRequired("semantic execution is not proven");
+  };

package/src/assets/code-owned-provider-template/wrench-adapter.json.template

@@ -0,0 +1,33 @@
+{
+  "schemaVersion": 4,
+  "id": __PLUGIN_ID_JSON__,
+  "version": "0.1.0",
+  "displayName": __ADAPTER_DISPLAY_NAME_JSON__,
+  "surfaceId": "__SITE_ID__",
+  "origins": [
+    "__ORIGIN__"
+  ],
+  "browserDomains": [
+    "__HOSTNAME__"
+  ],
+  "operations": {
+    "__OPERATION__": {
+      "description": "Capture-required contract reservation: sanitized evidence is selected, but the code-owned exchange and live fixture are not yet fully proven.",
+      "risk": "__RISK__",
+      "sideEffect": "__SIDE_EFFECT__",
+      "idempotency": "__IDEMPOTENCY__",
+      "dedupeWindowMs": __DEDUPE_WINDOW_MS__,
+      "input": {
+        "properties": {},
+        "required": []
+      },
+      "webSession": {
+        "site": "__SITE_ID__",
+        "action": "__OPERATION__",
+        "contractVersion": 1,
+        "timeoutMs": 60000,
+        "maxOutputBytes": 4194304
+      }
+    }
+  }
+}

package/src/assets/fonts/nebula-sans/LICENSE.txt

@@ -0,0 +1,96 @@
+Copyright (c) 2024, Nebula Entertainment & Broadcasting LLC (https://nebula.tv),
+with Reserved Font Name 'Nebula'.
+
+Based on Source Sans, copyright 2010-2024 Adobe (http://www.adobe.com/), with Reserved Font Name 'Source'. All Rights Reserved. Source is a trademark of Adobe in the United States and/or other countries.
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+https://openfontlicense.org
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.

package/src/assets/fonts/nebula-sans/PROVENANCE.md

@@ -0,0 +1,14 @@
+# Nebula Sans provenance
+
+- Family: Nebula Sans
+- Version: 1.010
+- Use: default proportional browser text and heading face
+- Upstream: https://www.nebulasans.com/
+- Source archive: https://www.nebulasans.com/download/NebulaSans-1.010.zip
+- Retrieved: 2026-08-27
+- Archive SHA-256: `a9b56ef15e24b6e8195af7457cc75f714ecf5501fc3c20a69f546c8f589e7bdb`
+- License: SIL Open Font License 1.1, retained as `LICENSE.txt`
+
+The WOFF2 files are vendored unchanged from the official archive. Nebula
+Entertainment & Broadcasting LLC reserves the font name `Nebula`; this package
+distributes the unmodified original files under that name.

package/src/assets.d.ts

@@ -0,0 +1,4 @@
+declare module "*.woff2" {
+  const assetPath: string;
+  export default assetPath;
+}