@jini-ai/agent-plugins 0.4.7 → 0.6.10

package/dist/admin-surfaces/surface-handlers.d.ts

@@ -0,0 +1,111 @@
+/**
+ * @file Plugin-supplied server-side handlers for admin surfaces: a surface may name a contained
+ * `.mjs` `handlerModule` that answers its declared actions and may provide its bootstrap data.
+ *
+ * Why it exists: without it a host can only answer a surface's actions with its own code, so a
+ * provider plugin cannot ship a working settings or resource-chooser screen. Why it is safe to run plugin code
+ * here: the module loads only through the lifecycle's one executable loader
+ * (`defineExecutablePluginContribution`: active plugin, shipped digest, on-disk containment), it
+ * receives host capability ports (never a raw secret) through the admin-surface capability session
+ * (`./surface-capabilities.ts`: only the surface's declared connections and config, revoked on disable,
+ * results and errors scanned for tokens the call obtained, the same gate as executable tools), and the
+ * dispatcher still checks the declared input and result schemas around it.
+ * Bootstrap data is the one answer allowed to carry an access token (a surface may need a short-lived
+ * one); it must match the surface's declared `bootstrap` schema and is never cached by the host.
+ */
+import { type LoadedPluginContribution, type PluginContributionDefinition } from '../lifecycle/contribution-loader.js';
+import type { IssuedTokenMemories } from '../lifecycle/tools/capabilities.js';
+import { type AdminSurfaceCapabilities, type AdminSurfaceCapabilitiesPort } from './surface-capabilities.js';
+import { type AdminSurfaceActionHandler } from './action-dispatcher.js';
+import { type AdminSurfaceDescriptor } from './descriptor.js';
+/** Who a call is for. The host route establishes it; plugin and surface ids are rebound to the
+ * loaded module's own before a handler sees them. */
+export interface AdminSurfaceHandlerContext {
+    readonly workspaceId: string;
+    readonly principalId?: string;
+    readonly pluginId: string;
+    readonly surfaceId: string;
+}
+/** Which kind of host is running the surface, so a plugin picks its flow (for example a sign-in in
+ * the system browser on desktop) without inferring it from config. */
+export type AdminSurfaceHostKind = 'hosted' | 'desktop';
+/** The context a handler sees: the route's context plus the plugin's own declared connection ids
+ * (ids, never refs: the host resolves the ref, so a plugin can never name another plugin's connection)
+ * and the host kind the host was built with (never a caller's or the plugin's value). */
+export interface AdminSurfacePluginContext extends AdminSurfaceHandlerContext {
+    readonly connectionIds: readonly string[];
+    readonly hostKind: AdminSurfaceHostKind;
+}
+/** What a bootstrap provider receives. */
+export interface AdminSurfaceBootstrapCall {
+    readonly capabilities: AdminSurfaceCapabilities;
+    readonly context: AdminSurfacePluginContext;
+}
+/** What an action handler receives. `input` already matched the action's declared input schema. */
+export interface AdminSurfaceHandlerCall extends AdminSurfaceBootstrapCall {
+    readonly input: unknown;
+    /** Builds a surface-safe failure to throw: `code` (lowercase hyphenated) and `message` reach the frame. */
+    readonly fail: (required: {
+        readonly code: string;
+        readonly message: string;
+    }, optional?: {
+        readonly retryable?: boolean;
+    }) => Error;
+}
+/** What a handler module's default export must be. */
+export interface AdminSurfaceHandlerModule {
+    /** Keyed by declared action name; a declared action without one answers `action-unavailable`. */
+    readonly actions: Readonly<Record<string, (required: AdminSurfaceHandlerCall, optional?: Record<string, never>) => unknown>>;
+    /** Data the surface starts with; requires a `bootstrap` schema on the surface. */
+    readonly bootstrap?: (required: AdminSurfaceBootstrapCall, optional?: Record<string, never>) => unknown;
+}
+type HandledSurface = AdminSurfaceDescriptor & {
+    readonly handlerModule: string;
+};
+export type LoadedAdminSurfaceHandlers = LoadedPluginContribution<HandledSurface, AdminSurfaceHandlerModule>;
+export declare const ADMIN_SURFACE_PLUGIN_DISABLED_MESSAGE = "This plugin was disabled, so its admin surface cannot act. Re-enable the plugin and reopen the surface.";
+/**
+ * The executable contribution for the host's surfaces file (the same file `defineAdminSurfaceContribution`
+ * reads): one item per surface that names a `handlerModule`.
+ * @param required.filename - The host-named surfaces file at the plugin root.
+ * @complexity O(1); each load parses the file and performs one contained import per handled surface.
+ */
+export declare function defineAdminSurfaceHandlerContribution(required: {
+    readonly filename: string;
+}, _optional?: Record<string, never>): PluginContributionDefinition<HandledSurface, LoadedAdminSurfaceHandlers>;
+/**
+ * Holds the admitted handler modules and answers for them. Call `sync` with every load of
+ * `defineAdminSurfaceHandlerContribution` (on boot and on every activation change); a surface missing
+ * from a load loses its handlers, and capabilities its module kept are revoked.
+ * @param required.capabilities - Host port building one call's admin-surface capabilities.
+ * @param required.issuedTokens - Per-plugin token memory shared with the plugin's tool projection.
+ * @param required.hostKind - The kind of host this process is; every handler and bootstrap call sees it.
+ * @throws TypeError when `hostKind` is neither `hosted` nor `desktop`.
+ * @returns `sync`, plus `handlersFor` and `bootstrapData` for the host's action dispatcher and bootstrap route.
+ * @complexity sync is O(s + a) surfaces and actions; lookups are O(1).
+ */
+export declare function createAdminSurfaceHandlerHost(required: {
+    readonly capabilities: AdminSurfaceCapabilitiesPort;
+    readonly issuedTokens: IssuedTokenMemories;
+    readonly hostKind: AdminSurfaceHostKind;
+}, _optional?: Record<string, never>): {
+    /** Admits one load result. @returns The loader's refusals plus this seam's own, in order. */
+    sync(input: {
+        readonly loaded: readonly LoadedAdminSurfaceHandlers[];
+        readonly refusals: readonly string[];
+    }, _options?: Record<string, never>): {
+        readonly refusals: readonly string[];
+    };
+    /** The plugin's handlers for one surface (empty when none are admitted), for `createAdminSurfaceActionDispatcher`. */
+    handlersFor(input: {
+        readonly pluginId: string;
+        readonly surfaceId: string;
+    }, _options?: Record<string, never>): Readonly<Record<string, AdminSurfaceActionHandler<AdminSurfaceHandlerContext>>>;
+    /** The plugin's bootstrap data for `context`'s surface, or null when it provides none.
+     * @throws Error when the data does not match the declared schema (the message names a path, never a value). */
+    bootstrapData(input: {
+        readonly context: AdminSurfaceHandlerContext;
+    }, _options?: Record<string, never>): Promise<unknown>;
+};
+export {};
+//# sourceMappingURL=surface-handlers.d.ts.map

package/dist/admin-surfaces/surface-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface-handlers.d.ts","sourceRoot":"","sources":["../../src/admin-surfaces/surface-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAsC,KAAK,wBAAwB,EAAE,KAAK,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AAC3J,OAAO,KAAK,EAAE,mBAAmB,EAAqB,MAAM,oCAAoC,CAAC;AACjG,OAAO,EAAqC,KAAK,wBAAwB,EAAE,KAAK,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAChJ,OAAO,EAA2B,KAAK,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAEjG,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEtF;qDACqD;AACrD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;sEACsE;AACtE,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAGxD;;yFAEyF;AACzF,MAAM,WAAW,yBAA0B,SAAQ,0BAA0B;IAC3E,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;CACzC;AAED,0CAA0C;AAC1C,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;CAC7C;AAED,mGAAmG;AACnG,MAAM,WAAW,uBAAwB,SAAQ,yBAAyB;IACxE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,2GAA2G;IAC3G,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,KAAK,CAAC;CACtI;AAED,sDAAsD;AACtD,MAAM,WAAW,yBAAyB;IACxC,iGAAiG;IACjG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,uBAAuB,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC;IAC7H,kFAAkF;IAClF,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,yBAAyB,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,OAAO,CAAC;CACzG;AAED,KAAK,cAAc,GAAG,sBAAsB,GAAG;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC;AAClF,MAAM,MAAM,0BAA0B,GAAG,wBAAwB,CAAC,cAAc,EAAE,yBAAyB,CAAC,CAAC;AAE7G,eAAO,MAAM,qCAAqC,4GAA4G,CAAC;AAgB/J;;;;;GAKG;AACH,wBAAgB,qCAAqC,CACnD,QAAQ,EAAE;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACvC,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAM,GACpC,4BAA4B,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAU1E;AA2BD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE;IAAE,QAAQ,CAAC,YAAY,EAAE,4BAA4B,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAA;CAAE,EAAE,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAM;IAwCvO,6FAA6F;gBACjF;QAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,0BAA0B,EAAE,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,aAAY,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAQ;QAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE;IAgB7L,sHAAsH;uBACnG;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,aAAY,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAQ,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAGpM;mHAC+G;yBACpF;QAAE,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAA;KAAE,aAAY,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAQ,OAAO,CAAC,OAAO,CAAC;EAavI"}

package/dist/admin-surfaces/surface-handlers.js

@@ -0,0 +1,172 @@
+/**
+ * @file Plugin-supplied server-side handlers for admin surfaces: a surface may name a contained
+ * `.mjs` `handlerModule` that answers its declared actions and may provide its bootstrap data.
+ *
+ * Why it exists: without it a host can only answer a surface's actions with its own code, so a
+ * provider plugin cannot ship a working settings or resource-chooser screen. Why it is safe to run plugin code
+ * here: the module loads only through the lifecycle's one executable loader
+ * (`defineExecutablePluginContribution`: active plugin, shipped digest, on-disk containment), it
+ * receives host capability ports (never a raw secret) through the admin-surface capability session
+ * (`./surface-capabilities.ts`: only the surface's declared connections and config, revoked on disable,
+ * results and errors scanned for tokens the call obtained, the same gate as executable tools), and the
+ * dispatcher still checks the declared input and result schemas around it.
+ * Bootstrap data is the one answer allowed to carry an access token (a surface may need a short-lived
+ * one); it must match the surface's declared `bootstrap` schema and is never cached by the host.
+ */
+import { defineExecutablePluginContribution } from '../lifecycle/contribution-loader.js';
+import { openAdminSurfaceCapabilitySession } from './surface-capabilities.js';
+import { AdminSurfaceActionError } from './action-dispatcher.js';
+import { validateAdminSurfaceActionValue } from './action-schema.js';
+import { parseAdminSurfacesFile } from './descriptor.js';
+const HOST_KINDS = ['hosted', 'desktop'];
+export const ADMIN_SURFACE_PLUGIN_DISABLED_MESSAGE = 'This plugin was disabled, so its admin surface cannot act. Re-enable the plugin and reopen the surface.';
+const FAILURE_CODE_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const MAX_FAILURE_CODE_LENGTH = 64;
+const MAX_FAILURE_MESSAGE_LENGTH = 300;
+const isFunction = (value) => typeof value === 'function';
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+/** The module's export as a handler module, or why not. Shape only; declarations are checked at sync. @complexity O(a) exported actions. */
+function validateHandlerModule({ exported }) {
+    if (!isRecord(exported))
+        return "its module's default export is not an object";
+    if (!isRecord(exported.actions) || !Object.values(exported.actions).every(isFunction))
+        return "its module's default export needs an actions object of functions";
+    if (exported.bootstrap !== undefined && !isFunction(exported.bootstrap))
+        return 'bootstrap must be a function';
+    return exported;
+}
+/**
+ * The executable contribution for the host's surfaces file (the same file `defineAdminSurfaceContribution`
+ * reads): one item per surface that names a `handlerModule`.
+ * @param required.filename - The host-named surfaces file at the plugin root.
+ * @complexity O(1); each load parses the file and performs one contained import per handled surface.
+ */
+export function defineAdminSurfaceHandlerContribution(required, _optional = {}) {
+    return defineExecutablePluginContribution({
+        filename: required.filename, contribution: 'admin surface handlers',
+        parse: ({ raw }) => {
+            const parsed = parseAdminSurfacesFile({ raw });
+            return parsed.ok ? { ok: true, descriptors: parsed.descriptors.filter((descriptor) => descriptor.handlerModule !== undefined) } : parsed;
+        },
+        modulePath: ({ descriptor }) => descriptor.handlerModule, validate: validateHandlerModule,
+        refusal: ({ plugin, descriptor, reason }) => `admin surface handlers for '${descriptor.id}' from '${plugin.pluginId}' were not loaded: ${reason}`,
+    });
+}
+/** A surface-safe failure, or a generic one when the plugin's code is not a valid id. @complexity O(1). */
+function fail(required, optional = {}) {
+    const { code, message } = required;
+    if (typeof code !== 'string' || code.length > MAX_FAILURE_CODE_LENGTH || !FAILURE_CODE_PATTERN.test(code))
+        return new Error('a plugin failure used an invalid code');
+    return new AdminSurfaceActionError({ code, message: String(message).slice(0, MAX_FAILURE_MESSAGE_LENGTH) }, { retryable: optional.retryable === true });
+}
+/** Why a loaded module cannot answer for its surface, or null. @complexity O(a) exported actions. */
+function admissionRefusal({ descriptor, module }) {
+    const undeclared = Object.keys(module.actions).find((name) => !descriptor.actions.some((action) => action.name === name));
+    if (undeclared !== undefined)
+        return `it exports a handler for undeclared action '${undeclared.slice(0, 64)}'`;
+    return module.bootstrap !== undefined && descriptor.bootstrap === undefined ? 'it exports bootstrap() but the surface declares no bootstrap schema' : null;
+}
+/** Plugin and surface ids cannot contain NUL, so the key is unambiguous. */
+const keyOf = (pluginId, surfaceId) => `${pluginId}\u0000${surfaceId}`;
+/**
+ * Holds the admitted handler modules and answers for them. Call `sync` with every load of
+ * `defineAdminSurfaceHandlerContribution` (on boot and on every activation change); a surface missing
+ * from a load loses its handlers, and capabilities its module kept are revoked.
+ * @param required.capabilities - Host port building one call's admin-surface capabilities.
+ * @param required.issuedTokens - Per-plugin token memory shared with the plugin's tool projection.
+ * @param required.hostKind - The kind of host this process is; every handler and bootstrap call sees it.
+ * @throws TypeError when `hostKind` is neither `hosted` nor `desktop`.
+ * @returns `sync`, plus `handlersFor` and `bootstrapData` for the host's action dispatcher and bootstrap route.
+ * @complexity sync is O(s + a) surfaces and actions; lookups are O(1).
+ */
+export function createAdminSurfaceHandlerHost(required, _optional = {}) {
+    // Checked at run time too: a JavaScript host may pass an unchecked config value, and a plugin would pick its flow from it.
+    if (!HOST_KINDS.includes(required.hostKind))
+        throw new TypeError("createAdminSurfaceHandlerHost: hostKind must be 'hosted' or 'desktop'.");
+    const { hostKind } = required;
+    let admitted = new Map();
+    /** One call's capability session, scoped to the loaded plugin and the route's workspace/principal. */
+    function sessionFor(self, context) {
+        const { pluginId, descriptor } = self.loaded;
+        const principal = context.principalId === undefined ? {} : { principalId: context.principalId };
+        const capabilities = required.capabilities({ pluginId, workspaceId: context.workspaceId, ...principal });
+        const session = openAdminSurfaceCapabilitySession({ capabilities, isLive: self.isLive, declared: descriptor, issued: self.issued }, { ...(principal.principalId !== undefined && { actorId: principal.principalId }) });
+        const connectionIds = (descriptor.connections ?? []).map((connection) => connection.id);
+        return { session, context: { workspaceId: context.workspaceId, ...principal, pluginId, surfaceId: descriptor.id, connectionIds, hostKind } };
+    }
+    function actionHandler(self, run) {
+        return async ({ payload, context: caller }) => {
+            if (!self.isLive())
+                throw new AdminSurfaceActionError({ code: 'plugin-disabled', message: ADMIN_SURFACE_PLUGIN_DISABLED_MESSAGE });
+            const { session, context } = sessionFor(self, caller);
+            try {
+                return session.release({ value: await run({ input: payload, capabilities: session.capabilities, context, fail }) });
+            }
+            catch (error) {
+                throw session.sanitize({ error });
+            }
+        };
+    }
+    /** A generation for one surface; live only while `admitted` holds this exact object. */
+    function admit(key, loaded) {
+        const declared = loaded.descriptor.actions.filter((action) => Object.hasOwn(loaded.module.actions, action.name));
+        const self = { loaded, handlers: {}, isLive: () => admitted.get(key) === self, issued: required.issuedTokens.forPlugin({ pluginId: loaded.pluginId }) };
+        Object.assign(self.handlers, Object.fromEntries(declared.map((action) => [action.name, actionHandler(self, loaded.module.actions[action.name])])));
+        return Object.freeze(self);
+    }
+    /** The previous generation when module and declaration are unchanged, so re-syncing never revokes it. */
+    function unchanged(previous, loaded) {
+        const same = previous !== undefined && previous.loaded.module === loaded.module && JSON.stringify(previous.loaded.descriptor) === JSON.stringify(loaded.descriptor);
+        return same ? previous : undefined;
+    }
+    return {
+        /** Admits one load result. @returns The loader's refusals plus this seam's own, in order. */
+        sync(input, _options = {}) {
+            const refusals = [...input.refusals];
+            const claims = new Map();
+            for (const entry of input.loaded)
+                claims.set(keyOf(entry.pluginId, entry.descriptor.id), (claims.get(keyOf(entry.pluginId, entry.descriptor.id)) ?? 0) + 1);
+            const next = new Map();
+            const previous = admitted;
+            for (const entry of input.loaded) {
+                const key = keyOf(entry.pluginId, entry.descriptor.id);
+                const reason = claims.get(key) > 1 ? 'more than one handler module claims this surface' : admissionRefusal(entry);
+                const line = `admin surface handlers for '${entry.descriptor.id}' from '${entry.pluginId}' were not loaded: ${reason}`;
+                if (reason !== null) {
+                    if (!refusals.includes(line))
+                        refusals.push(line);
+                    continue;
+                }
+                next.set(key, unchanged(previous.get(key), entry) ?? admit(key, entry));
+            }
+            admitted = next;
+            return { refusals };
+        },
+        /** The plugin's handlers for one surface (empty when none are admitted), for `createAdminSurfaceActionDispatcher`. */
+        handlersFor(input, _options = {}) {
+            return admitted.get(keyOf(input.pluginId, input.surfaceId))?.handlers ?? {};
+        },
+        /** The plugin's bootstrap data for `context`'s surface, or null when it provides none.
+         * @throws Error when the data does not match the declared schema (the message names a path, never a value). */
+        async bootstrapData(input, _options = {}) {
+            const self = admitted.get(keyOf(input.context.pluginId, input.context.surfaceId));
+            const provide = self?.loaded.module.bootstrap;
+            if (self === undefined || provide === undefined)
+                return null;
+            const { session, context } = sessionFor(self, input.context);
+            let data;
+            try {
+                data = await provide({ capabilities: session.capabilities, context });
+            }
+            catch (error) {
+                throw session.sanitize({ error });
+            }
+            // Admission guarantees a schema whenever the module provides bootstrap data.
+            const violation = validateAdminSurfaceActionValue({ schema: self.loaded.descriptor.bootstrap, value: data });
+            if (violation !== null)
+                throw new Error(`Admin surface '${context.surfaceId}' from '${context.pluginId}' returned bootstrap data outside its declared schema (${violation}); report it to the plugin author.`);
+            return data;
+        },
+    };
+}
+//# sourceMappingURL=surface-handlers.js.map

package/dist/admin-surfaces/surface-handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface-handlers.js","sourceRoot":"","sources":["../../src/admin-surfaces/surface-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,kCAAkC,EAAoE,MAAM,qCAAqC,CAAC;AAE3J,OAAO,EAAE,iCAAiC,EAAoE,MAAM,2BAA2B,CAAC;AAChJ,OAAO,EAAE,uBAAuB,EAAkC,MAAM,wBAAwB,CAAC;AACjG,OAAO,EAAE,+BAA+B,EAAiC,MAAM,oBAAoB,CAAC;AACpG,OAAO,EAAE,sBAAsB,EAA+B,MAAM,iBAAiB,CAAC;AActF,MAAM,UAAU,GAAsB,CAAC,QAAQ,EAAE,SAAS,CAA2C,CAAC;AAkCtG,MAAM,CAAC,MAAM,qCAAqC,GAAG,yGAAyG,CAAC;AAC/J,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAC1D,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAEvC,MAAM,UAAU,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,UAAU,CAAC;AACnE,MAAM,QAAQ,GAAG,CAAC,KAAc,EAA8C,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEtJ,4IAA4I;AAC5I,SAAS,qBAAqB,CAAC,EAAE,QAAQ,EAAkC;IACzE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,8CAA8C,CAAC;IAC/E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,kEAAkE,CAAC;IACjK,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,8BAA8B,CAAC;IAC/G,OAAO,QAAgD,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qCAAqC,CACnD,QAAuC,EACvC,YAAmC,EAAE;IAErC,OAAO,kCAAkC,CAA4C;QACnF,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,wBAAwB;QACnE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;YACjB,MAAM,MAAM,GAAG,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/C,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAgC,EAAE,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACzK,CAAC;QACD,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,QAAQ,EAAE,qBAAqB;QACzF,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,+BAA+B,UAAU,CAAC,EAAE,WAAW,MAAM,CAAC,QAAQ,sBAAsB,MAAM,EAAE;KAClJ,CAAC,CAAC;AACL,CAAC;AAED,2GAA2G;AAC3G,SAAS,IAAI,CAAC,QAA6D,EAAE,WAA6C,EAAE;IAC1H,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IACnC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,uBAAuB,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACrK,OAAO,IAAI,uBAAuB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,0BAA0B,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC,CAAC;AAC1J,CAAC;AAED,qGAAqG;AACrG,SAAS,gBAAgB,CAAC,EAAE,UAAU,EAAE,MAAM,EAA8B;IAC1E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;IAC1H,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,+CAA+C,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;IAC/G,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,qEAAqE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7J,CAAC;AAUD,4EAA4E;AAC5E,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAE,SAAiB,EAAE,EAAE,CAAC,GAAG,QAAQ,SAAS,SAAS,EAAE,CAAC;AAEvF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAAC,QAAsJ,EAAE,YAAmC,EAAE;IACzO,2HAA2H;IAC3H,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,wEAAwE,CAAC,CAAC;IAC3I,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;IAC9B,IAAI,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAElD,sGAAsG;IACtG,SAAS,UAAU,CAAC,IAAqB,EAAE,OAAmC;QAC5E,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;QAChG,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QACzG,MAAM,OAAO,GAAG,iCAAiC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QACxN,MAAM,aAAa,GAAG,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACxF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC;IAC/I,CAAC;IAED,SAAS,aAAa,CAAC,IAAqB,EAAE,GAAiD;QAC7F,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;YAC5C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,uBAAuB,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAC;YACnI,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtD,IAAI,CAAC;gBAAC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAC5H,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,CAAC;QACtD,CAAC,CAAC;IACJ,CAAC;IAED,wFAAwF;IACxF,SAAS,KAAK,CAAC,GAAW,EAAE,MAAkC;QAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACjH,MAAM,IAAI,GAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpJ,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,yGAAyG;IACzG,SAAS,SAAS,CAAC,QAAqC,EAAE,MAAkC;QAC1F,MAAM,IAAI,GAAG,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACpK,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACrC,CAAC;IAED,OAAO;QACL,6FAA6F;QAC7F,IAAI,CAAC,KAAuG,EAAE,WAAkC,EAAE;YAChJ,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;YACzC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5J,MAAM,IAAI,GAAG,IAAI,GAAG,EAA2B,CAAC;YAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC;YAC1B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACvD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAE,GAAG,CAAC,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACnH,MAAM,IAAI,GAAG,+BAA+B,KAAK,CAAC,UAAU,CAAC,EAAE,WAAW,KAAK,CAAC,QAAQ,sBAAsB,MAAM,EAAE,CAAC;gBACvH,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;wBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACrF,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YAC1E,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,CAAC;QACD,sHAAsH;QACtH,WAAW,CAAC,KAAgE,EAAE,WAAkC,EAAE;YAChH,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC9E,CAAC;QACD;uHAC+G;QAC/G,KAAK,CAAC,aAAa,CAAC,KAAuD,EAAE,WAAkC,EAAE;YAC/G,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YAClF,MAAM,OAAO,GAAG,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;YAC9C,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC7D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBAAC,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,CAAC;YACnI,6EAA6E;YAC7E,MAAM,SAAS,GAAG,+BAA+B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAqC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzI,IAAI,SAAS,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,OAAO,CAAC,SAAS,WAAW,OAAO,CAAC,QAAQ,0DAA0D,SAAS,oCAAoC,CAAC,CAAC;YAC/M,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/admin-surfaces/theme.d.ts

@@ -0,0 +1,59 @@
+/**
+ * @file The host's design tokens for plugin surfaces: which `--jini-*` custom properties a host
+ * shares with every surface frame, how it reads their current values, and the envelope that sends
+ * a change after init.
+ *
+ * Why: a surface is a sandboxed frame without `allow-same-origin`, so it cannot see the admin's
+ * stylesheets, and its CSP allows only its own files. Values posted in a message are the only way
+ * its screens can match the admin and follow a light/dark or admin-theme change. The surface client
+ * applies them as custom properties on its root (CSSOM, which the CSP allows; never a style
+ * attribute or a stylesheet), so a surface writes `var(--jini-primary, <fallback>)` and looks right
+ * with or without a host that sends tokens.
+ *
+ * Values are text a host computed from its own CSS; anything that could fetch (`url(`, `image-set(`)
+ * or leave a declaration (`;`, braces) is dropped here and again in the surface client.
+ */
+import { ADMIN_SURFACE_PROTOCOL, ADMIN_SURFACE_PROTOCOL_VERSION } from './protocol.js';
+/** The shared vocabulary: colours, type, radius, spacing, depth and focus. A host may send fewer. */
+export declare const ADMIN_SURFACE_THEME_TOKENS: readonly ["--jini-bg", "--jini-surface", "--jini-bg-subtle", "--jini-text", "--jini-text-muted", "--jini-border", "--jini-border-strong", "--jini-primary", "--jini-primary-ink", "--jini-link", "--jini-danger", "--jini-danger-bg", "--jini-success", "--jini-success-bg", "--jini-warning", "--jini-warning-bg", "--jini-font-ui", "--jini-font-mono", "--jini-font-size-xs", "--jini-font-size-sm", "--jini-font-size-base", "--jini-font-size-md", "--jini-radius-sm", "--jini-radius", "--jini-radius-md", "--jini-radius-pill", "--jini-space-1", "--jini-space-2", "--jini-space-3", "--jini-space-4", "--jini-shadow-xs", "--jini-shadow-sm", "--jini-control-bg", "--jini-control-border", "--jini-control-shadow-focus", "--jini-overlay-tooltip-bg", "--jini-overlay-tooltip-text", "--jini-overlay-tooltip-border"];
+export type AdminSurfaceThemeToken = (typeof ADMIN_SURFACE_THEME_TOKENS)[number];
+export type AdminSurfaceColorScheme = 'light' | 'dark';
+/** What a surface receives: the scheme for native controls plus the token values. */
+export interface AdminSurfaceTheme {
+    readonly scheme: AdminSurfaceColorScheme;
+    readonly tokens: Readonly<Partial<Record<AdminSurfaceThemeToken, string>>>;
+}
+/** Host page -> surface after init, whenever the admin's theme or colour scheme changes. */
+export interface AdminSurfaceThemeMessage {
+    readonly protocol: typeof ADMIN_SURFACE_PROTOCOL;
+    readonly version: typeof ADMIN_SURFACE_PROTOCOL_VERSION;
+    readonly kind: 'theme';
+    readonly mountId: string;
+    readonly theme: AdminSurfaceTheme;
+}
+/** Whether `value` is plain declaration text that cannot fetch anything or end its declaration.
+ * @complexity O(n) in the value length. */
+export declare function isSafeAdminSurfaceThemeValue(value: unknown): value is string;
+/**
+ * Reads the shared tokens from the host's computed style.
+ * @param required.style - Usually `getComputedStyle(element)` for the element the admin theme is on.
+ * @param optional.sources - Where to read a token when the host draws with its own name for it
+ *   (e.g. `{ '--jini-text': '--fg' }`); unnamed tokens are read under their own name.
+ * @returns Only the tokens with a safe, non-empty value.
+ * @complexity O(t) tokens.
+ */
+export declare function readAdminSurfaceTheme(required: {
+    readonly style: {
+        getPropertyValue(name: string): string;
+    };
+    readonly scheme: AdminSurfaceColorScheme;
+}, optional?: {
+    readonly sources?: Readonly<Partial<Record<AdminSurfaceThemeToken, string>>>;
+}): AdminSurfaceTheme;
+/** Builds the envelope that sends a changed theme to one mount's frame.
+ * @complexity O(1). */
+export declare function adminSurfaceThemeMessage(required: {
+    readonly mountId: string;
+    readonly theme: AdminSurfaceTheme;
+}, _optional?: Record<string, never>): AdminSurfaceThemeMessage;
+//# sourceMappingURL=theme.d.ts.map

package/dist/admin-surfaces/theme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme.d.ts","sourceRoot":"","sources":["../../src/admin-surfaces/theme.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAC;AAEvF,qGAAqG;AACrG,eAAO,MAAM,0BAA0B,kyBAS5B,CAAC;AAEZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AACjF,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,MAAM,CAAC;AAEvD,qFAAqF;AACrF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;CAC5E;AAED,4FAA4F;AAC5F,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,OAAO,sBAAsB,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,OAAO,8BAA8B,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;CACnC;AAKD;2CAC2C;AAC3C,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE5E;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE;QAAE,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,EAClH,QAAQ,GAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;CAAO,GAC9F,iBAAiB,CAOnB;AAED;uBACuB;AACvB,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,EAAE,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAM,GAAG,wBAAwB,CAEnL"}

package/dist/admin-surfaces/theme.js

@@ -0,0 +1,57 @@
+/**
+ * @file The host's design tokens for plugin surfaces: which `--jini-*` custom properties a host
+ * shares with every surface frame, how it reads their current values, and the envelope that sends
+ * a change after init.
+ *
+ * Why: a surface is a sandboxed frame without `allow-same-origin`, so it cannot see the admin's
+ * stylesheets, and its CSP allows only its own files. Values posted in a message are the only way
+ * its screens can match the admin and follow a light/dark or admin-theme change. The surface client
+ * applies them as custom properties on its root (CSSOM, which the CSP allows; never a style
+ * attribute or a stylesheet), so a surface writes `var(--jini-primary, <fallback>)` and looks right
+ * with or without a host that sends tokens.
+ *
+ * Values are text a host computed from its own CSS; anything that could fetch (`url(`, `image-set(`)
+ * or leave a declaration (`;`, braces) is dropped here and again in the surface client.
+ */
+import { ADMIN_SURFACE_PROTOCOL, ADMIN_SURFACE_PROTOCOL_VERSION } from './protocol.js';
+/** The shared vocabulary: colours, type, radius, spacing, depth and focus. A host may send fewer. */
+export const ADMIN_SURFACE_THEME_TOKENS = Object.freeze([
+    '--jini-bg', '--jini-surface', '--jini-bg-subtle', '--jini-text', '--jini-text-muted',
+    '--jini-border', '--jini-border-strong', '--jini-primary', '--jini-primary-ink', '--jini-link',
+    '--jini-danger', '--jini-danger-bg', '--jini-success', '--jini-success-bg', '--jini-warning', '--jini-warning-bg',
+    '--jini-font-ui', '--jini-font-mono', '--jini-font-size-xs', '--jini-font-size-sm', '--jini-font-size-base', '--jini-font-size-md',
+    '--jini-radius-sm', '--jini-radius', '--jini-radius-md', '--jini-radius-pill',
+    '--jini-space-1', '--jini-space-2', '--jini-space-3', '--jini-space-4',
+    '--jini-shadow-xs', '--jini-shadow-sm', '--jini-control-bg', '--jini-control-border', '--jini-control-shadow-focus',
+    '--jini-overlay-tooltip-bg', '--jini-overlay-tooltip-text', '--jini-overlay-tooltip-border',
+]);
+const MAX_VALUE_LENGTH = 200;
+const UNSAFE_VALUE = /url\(|image\(|image-set\(|[;{}<>\\@]/i;
+/** Whether `value` is plain declaration text that cannot fetch anything or end its declaration.
+ * @complexity O(n) in the value length. */
+export function isSafeAdminSurfaceThemeValue(value) {
+    return typeof value === 'string' && value.length > 0 && value.length <= MAX_VALUE_LENGTH && !UNSAFE_VALUE.test(value);
+}
+/**
+ * Reads the shared tokens from the host's computed style.
+ * @param required.style - Usually `getComputedStyle(element)` for the element the admin theme is on.
+ * @param optional.sources - Where to read a token when the host draws with its own name for it
+ *   (e.g. `{ '--jini-text': '--fg' }`); unnamed tokens are read under their own name.
+ * @returns Only the tokens with a safe, non-empty value.
+ * @complexity O(t) tokens.
+ */
+export function readAdminSurfaceTheme(required, optional = {}) {
+    const tokens = {};
+    for (const token of ADMIN_SURFACE_THEME_TOKENS) {
+        const value = required.style.getPropertyValue(optional.sources?.[token] ?? token).trim();
+        if (isSafeAdminSurfaceThemeValue(value))
+            tokens[token] = value;
+    }
+    return { scheme: required.scheme, tokens };
+}
+/** Builds the envelope that sends a changed theme to one mount's frame.
+ * @complexity O(1). */
+export function adminSurfaceThemeMessage(required, _optional = {}) {
+    return { protocol: ADMIN_SURFACE_PROTOCOL, version: ADMIN_SURFACE_PROTOCOL_VERSION, kind: 'theme', mountId: required.mountId, theme: required.theme };
+}
+//# sourceMappingURL=theme.js.map

package/dist/admin-surfaces/theme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme.js","sourceRoot":"","sources":["../../src/admin-surfaces/theme.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAC;AAEvF,qGAAqG;AACrG,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,MAAM,CAAC;IACtD,WAAW,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,aAAa,EAAE,mBAAmB;IACrF,eAAe,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,aAAa;IAC9F,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,mBAAmB;IACjH,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,qBAAqB;IAClI,kBAAkB,EAAE,eAAe,EAAE,kBAAkB,EAAE,oBAAoB;IAC7E,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB;IACtE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,6BAA6B;IACnH,2BAA2B,EAAE,6BAA6B,EAAE,+BAA+B;CACnF,CAAC,CAAC;AAoBZ,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,YAAY,GAAG,uCAAuC,CAAC;AAE7D;2CAC2C;AAC3C,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,gBAAgB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAkH,EAClH,WAA6F,EAAE;IAE/F,MAAM,MAAM,GAAoD,EAAE,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,0BAA0B,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACzF,IAAI,4BAA4B,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED;uBACuB;AACvB,MAAM,UAAU,wBAAwB,CAAC,QAAyE,EAAE,YAAmC,EAAE;IACvJ,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,OAAO,EAAE,8BAA8B,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AACxJ,CAAC"}

package/dist/folder-zip-node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"folder-zip-node.d.ts","sourceRoot":"","sources":["../src/folder-zip-node.ts"],"names":[],"mappings":"AAqDA;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EAAE,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAiB7I"}

package/dist/folder-zip-node.js

@@ -2,6 +2,59 @@ import * as fs from "node:fs/promises";
 import { constants } from "node:fs";
 import path from "node:path";
 import { FOLDER_MAX_FILES, FOLDER_UNREADABLE, FolderZipError, zipFolderFiles } from "./folder-zip.js";
+async function readLocalFile(required, _optional = {}) {
+    const { filesystem, root, filename, name, maxBytes } = required;
+    if (await filesystem.realpath(filename) !== filename)
+        throw new FolderZipError("unreadable", FOLDER_UNREADABLE);
+    // O_NOFOLLOW refuses a file replaced with a symlink between enumeration and opening.
+    const file = await filesystem.open(filename, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+    try {
+        const info = await file.stat();
+        if (!info.isFile())
+            throw new FolderZipError("unreadable", FOLDER_UNREADABLE);
+        const total = required.total + info.size;
+        if (total > maxBytes)
+            throw new FolderZipError("too-large", "Folder is over the upload limit.");
+        // One extra byte detects growth without an unbounded readFile allocation.
+        const bytes = Buffer.alloc(info.size + 1);
+        let length = 0;
+        while (length < bytes.length) {
+            const read = await file.read(bytes, length, bytes.length - length, null);
+            if (read.bytesRead === 0)
+                break;
+            length += read.bytesRead;
+        }
+        if (length !== info.size)
+            throw new FolderZipError("unreadable", FOLDER_UNREADABLE);
+        const picked = new File([new Uint8Array(bytes.subarray(0, length))], name);
+        Object.defineProperty(picked, "webkitRelativePath", { value: `folder/${path.relative(root, filename).split(path.sep).join("/")}` });
+        return { file: picked, total };
+    }
+    finally {
+        await file.close();
+    }
+}
+async function collectDirectory(required, _optional = {}) {
+    const { filesystem, root, directory, collection, maxBytes } = required;
+    if (!(await filesystem.lstat(directory)).isDirectory() || await filesystem.realpath(directory) !== directory)
+        throw new FolderZipError("unreadable", FOLDER_UNREADABLE);
+    const handle = await filesystem.opendir(directory);
+    // Mutate the traversal's owned buffers so visiting directories does not copy accumulated files.
+    for await (const entry of handle) {
+        if (++collection.entries > FOLDER_MAX_FILES)
+            throw new FolderZipError("too-many", `More than ${FOLDER_MAX_FILES} entries.`);
+        const filename = path.join(directory, entry.name);
+        if (entry.isDirectory()) {
+            collection.pending.push(filename);
+            continue;
+        }
+        if (!entry.isFile())
+            throw new FolderZipError("unreadable", FOLDER_UNREADABLE);
+        const result = await readLocalFile({ filesystem, root, filename, name: entry.name, total: collection.total, maxBytes });
+        collection.total = result.total;
+        collection.files.push(result.file);
+    }
+}
 /** Reads a local folder into the browser upload encoder. Refuses links/special files and bounds
  * entries and bytes before allocation; the resulting ZIP still requires the install validator.
  * @throws {FolderZipError} Empty, unreadable, linked, or over-limit folders.
@@ -9,58 +62,15 @@ import { FOLDER_MAX_FILES, FOLDER_UNREADABLE, FolderZipError, zipFolderFiles } f
  * bounded to 4096 entries and maxBytes. No network I/O.
  */
 export async function zipLocalFolder(required, _optional = {}) {
-    const files = [];
-    let entries = 0;
-    let total = 0;
+    const collection = { files: [], pending: [], entries: 0, total: 0 };
     try {
         const root = await fs.realpath(required.path);
-        const pending = [root];
-        while (pending.length) {
-            const directory = pending.pop();
-            if (!(await fs.lstat(directory)).isDirectory() || await fs.realpath(directory) !== directory)
-                throw new FolderZipError("unreadable", FOLDER_UNREADABLE);
-            const handle = await fs.opendir(directory);
-            for await (const entry of handle) {
-                if (++entries > FOLDER_MAX_FILES)
-                    throw new FolderZipError("too-many", `More than ${FOLDER_MAX_FILES} entries.`);
-                const filename = path.join(directory, entry.name);
-                if (entry.isDirectory()) {
-                    pending.push(filename);
-                    continue;
-                }
-                if (!entry.isFile())
-                    throw new FolderZipError("unreadable", FOLDER_UNREADABLE);
-                if (await fs.realpath(filename) !== filename)
-                    throw new FolderZipError("unreadable", FOLDER_UNREADABLE);
-                // O_NOFOLLOW refuses a file replaced with a symlink between enumeration and opening.
-                const file = await fs.open(filename, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
-                try {
-                    const info = await file.stat();
-                    if (!info.isFile())
-                        throw new FolderZipError("unreadable", FOLDER_UNREADABLE);
-                    total += info.size;
-                    if (total > required.maxBytes)
-                        throw new FolderZipError("too-large", "Folder is over the upload limit.");
-                    // One extra byte detects growth without an unbounded readFile allocation.
-                    const bytes = Buffer.alloc(info.size + 1);
-                    let length = 0;
-                    while (length < bytes.length) {
-                        const read = await file.read(bytes, length, bytes.length - length, null);
-                        if (read.bytesRead === 0)
-                            break;
-                        length += read.bytesRead;
-                    }
-                    if (length !== info.size)
-                        throw new FolderZipError("unreadable", FOLDER_UNREADABLE);
-                    const picked = new File([new Uint8Array(bytes.subarray(0, length))], entry.name);
-                    Object.defineProperty(picked, "webkitRelativePath", { value: `folder/${path.relative(root, filename).split(path.sep).join("/")}` });
-                    files.push(picked);
-                }
-                finally {
-                    await file.close();
-                }
-            }
+        collection.pending.push(root);
+        while (collection.pending.length) {
+            const directory = collection.pending.pop();
+            await collectDirectory({ filesystem: fs, root, directory, collection, maxBytes: required.maxBytes });
         }
+        const { files } = collection;
         // Stable order gives repeat local-folder installs identical ZIP digests.
         files.sort((a, b) => a.webkitRelativePath < b.webkitRelativePath ? -1 : a.webkitRelativePath > b.webkitRelativePath ? 1 : 0);
         return new Uint8Array(await (await zipFolderFiles({ files, maxBytes: required.maxBytes })).arrayBuffer());

package/dist/folder-zip-node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"folder-zip-node.js","sourceRoot":"","sources":["../src/folder-zip-node.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAKtG,KAAK,UAAU,aAAa,CAAC,QAE5B,EAAE,YAAmC,EAAE;IACtC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;IAChE,IAAI,MAAM,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,cAAc,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAChH,qFAAqF;IACrF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/G,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,cAAc,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC;QACzC,IAAI,KAAK,GAAG,QAAQ;YAAE,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,kCAAkC,CAAC,CAAC;QAChG,0EAA0E;QAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC1C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC;YACzE,IAAI,IAAI,CAAC,SAAS,KAAK,CAAC;gBAAE,MAAM;YAChC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC;QAC3B,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,cAAc,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,UAAU,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACpI,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC;YAAS,CAAC;QAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAE/B,EAAE,YAAmC,EAAE;IACtC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;IACvE,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,MAAM,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,cAAc,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IACxK,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnD,gGAAgG;IAChG,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,EAAE,UAAU,CAAC,OAAO,GAAG,gBAAgB;YAAE,MAAM,IAAI,cAAc,CAAC,UAAU,EAAE,aAAa,gBAAgB,WAAW,CAAC,CAAC;QAC5H,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,cAAc,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxH,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAChC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAA4C,EAAE,YAAmC,EAAE;IACtH,MAAM,UAAU,GAAqB,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,EAAG,CAAC;YAC5C,MAAM,gBAAgB,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;QAC7B,yEAAyE;QACzE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7H,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc;YAAE,MAAM,KAAK,CAAC;QACjD,MAAM,IAAI,cAAc,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/dist/folder-zip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"folder-zip.d.ts","sourceRoot":"","sources":["../src/folder-zip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,0DAA0D;AAC1D,eAAO,MAAM,YAAY,0BAA0B,CAAC;AACpD,eAAO,MAAM,iBAAiB,2CAA2C,CAAC;AAC1E;iCACiC;AACjC,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,qBAAa,cAAe,SAAQ,KAAK;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY;gBAAzD,MAAM,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY,EAAE,OAAO,EAAE,MAAM;CAChG;AAgBD,0CAA0C;AAC1C,wBAAgB,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAI/C;AAgBD;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE;IAAE,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EAAE,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA2CjJ"}

package/dist/folder-zip.js

@@ -50,6 +50,14 @@ function entryPath(file) {
     const slash = relative.indexOf("/");
     return slash < 0 ? { folder: "", path: relative } : { folder: relative.slice(0, slash), path: relative.slice(slash + 1) };
 }
+async function readFolderFile(required, _optional = {}) {
+    try {
+        return new Uint8Array(await required.file.arrayBuffer());
+    }
+    catch {
+        throw new FolderZipError("unreadable", FOLDER_UNREADABLE);
+    }
+}
 /**
  * Zips the files of one picked folder.
  *
@@ -76,13 +84,7 @@ export async function zipFolderFiles(required, _optional = {}) {
     for (const file of files) {
         const entry = entryPath(file);
         folder ||= entry.folder;
-        let data;
-        try {
-            data = new Uint8Array(await file.arrayBuffer());
-        }
-        catch {
-            throw new FolderZipError("unreadable", FOLDER_UNREADABLE);
-        }
+        const data = await readFolderFile({ file });
         const name = encoder.encode(entry.path);
         const crc = crc32(data);
         // Bit 11: the name is UTF-8, so a reader never decodes it as CP437.

package/dist/folder-zip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"folder-zip.js","sourceRoot":"","sources":["../src/folder-zip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,YAAY,GAAG,uBAAuB,CAAC;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,wCAAwC,CAAC;AAC1E;iCACiC;AACjC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,MAAM,OAAO,cAAe,SAAQ,KAAK;IAClB;IAArB,YAAqB,MAAyD,EAAE,OAAe;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAA7F,WAAM,GAAN,MAAM,CAAmD;IAAqC,CAAC;CACrH;AAED;sEACsE;AACtE,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAEnC,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE;IACtB,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACzE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,EAAE,CAAC;AAEL,0CAA0C;AAC1C,MAAM,UAAU,KAAK,CAAC,KAAiB;IACrC,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1F,OAAO,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED;;yEAEyE;AACzE,SAAS,SAAS,CAAC,IAAU;IAC3B,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;AAC5H,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAA6C,EAAE,YAAmC,EAAE;IAChH,IAAI,CAAC;QAAC,OAAO,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAAC,CAAC;IACjE,MAAM,CAAC;QAAC,MAAM,IAAI,cAAc,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAsD,EAAE,YAAmC,EAAE;IAChI,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB;QAAE,MAAM,IAAI,cAAc,CAAC,UAAU,EAAE,aAAa,gBAAgB,SAAS,CAAC,CAAC;IAClH,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,QAAQ;QAAE,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,kCAAkC,CAAC,CAAC;IAC1I,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,oEAAoE;QACpE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3F,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7I,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpB,2FAA2F;QAC3F,iEAAiE;QACjE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACtH,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7I,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACvC,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7G,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACpE,IAAI,MAAM,GAAG,WAAW,GAAG,GAAG,CAAC,MAAM,GAAG,QAAQ;QAAE,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,kCAAkC,CAAC,CAAC;IAC5H,OAAO,IAAI,IAAI,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,OAAO,EAAE,GAAG,CAAe,EAAE,GAAG,MAAM,IAAI,QAAQ,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;AACxH,CAAC"}