@jsm-mit/sultana-assets-rust-package 0.1.0 → 0.3.0

package/README.md

@@ -35,6 +35,7 @@ One class per part of the canister:
 | `AssetsRustSalonActor` | `upload_image`, `delete_salon_asset`, transcoding and render reservations | the salon's owner — core decides |
 | `AssetsRustWorkerActor` | system upload of a transcoded result under a reserved id | listed transcoding workers |
 | `AssetsRustAssetsActor` | `get_asset_info`, `list_assets`, `http_request`, `assetUrl` | anybody |
+| `AssetsRustAvatarActor` | `upload_my_avatar`, `delete_my_avatar` (own avatar only, profile required — core `isUser` —, no quota; 64 KB / 512 px, re-encoded as JPEG), `get_avatar`, `/avatar/<principal>`, `avatarUrl` | writes: the caller for themselves; reads: anybody |
 
 Every method is `…AsyncUnsafe` and throws one of three errors, like the other wrapper
 packages:
@@ -56,9 +57,9 @@ types are exported too, and `./declarations/*` gives the generated files.
 `src/` is browser-safe — the same package serves the biz panel, the playground and the
 transcoding worker.
 
-Scripts: `build`, `typecheck`, `sync-declarations`, `test-suite`, `redeploy`, `sandbox`
+Scripts: `build`, `typecheck`, `sync-declarations`, `test-suite`, `test-smoke`, `test-upgrade`, `redeploy`, `sandbox`
 (an interactive console: `npm run sandbox -- <canister-id>`, caller from `IDENTITY_PEM` in
-`.env` or anonymous), `stamp-canister`, `publish-public`. See `CLAUDE.md` for who runs what.
+`.env.sandbox` or anonymous), `stamp-canister`, `publish-public`. See `CLAUDE.md` for who runs what.
 
 ## Integration tests
 
@@ -67,6 +68,11 @@ table's `short-living` slot (lease 3 minutes) and runs `tests/test-suite.ts` the
 `.env`, no PEMs: every identity is generated per run. A fresh canister has no core canister,
 so the suite claims that claim-once seat for a generated identity and plays core itself.
 
+`npm run test-smoke` does the same with `tests/test-smoke.ts`: setup, then one write and one
+read per domain (worker list, a few-byte single-shot upload read back over HTTP, a worker
+result, a salon upload refused by the stand-in core), one replication wait, ≈ 30 s.
+`publish-public` runs it too.
+
 What the suite covers: the core seat and the worker list; chunked and single-shot uploads
 with every owner and size check; reads, HTTP 200/206/404, certification header and
 streaming; the worker's system upload with a poster; `delete_asset` taking the thumb along;
@@ -79,8 +85,9 @@ the suite never touches it.
 
 Bump the version by hand, commit, push, then `npm run publish-public`. It refuses unless this
 repo and `../sultana-assets-rust` are on a clean, pushed `master` and the version is new on
-npm; it reinstalls the canister's master into `short-living` (lease 1), checks that its
+npm; it reinstalls the canister's master into `short-living` (lease 2), checks that its
 `candid:service` equals `declarations/sultana-assets-rust/sultana-assets-rust.did` as dfx
-rewrites it (the hand-written .did is normalized by a local `dfx build --check` first), stamps
+rewrites it (the hand-written .did is normalized by a local `dfx build --check` first), runs
+the smoke test (`tests/test-smoke.ts`) on that same deploy, stamps
 `sultanaAssets.{repo, repoUrl, commit}` into package.json, publishes and commits `Version bump
 to <version>`.

package/declarations/sultana-assets-rust/sultana-assets-rust.did

@@ -75,11 +75,14 @@ type ReserveRenderArgs = record {
 service : () -> {
   abort_upload : (text) -> (bool);
   delete_asset : (text) -> (bool);
+  delete_my_avatar : () -> (bool);
   delete_salon_asset : (DeleteSalonAssetArgs) -> (bool);
   fail_system_upload : (FailSystemUploadArgs) -> (bool);
   finish_system_upload : (FinishSystemUploadArgs) -> (text);
   finish_upload : (text) -> (text);
   get_asset_info : (text) -> (opt AssetInfo) query;
+  get_avatar : (principal) -> (opt text) query;
+  get_coordinator : () -> (opt principal) query;
   get_core_canister : () -> (opt principal) query;
   get_workers : () -> (vec WorkerEntry) query;
   http_request : (HttpRequest) -> (HttpResponse) query;
@@ -88,6 +91,7 @@ service : () -> {
   reserve_render : (ReserveRenderArgs) -> (ReserveTranscodingUpload);
   reserve_transcoding_upload : (ReserveTranscodingUploadArgs) -> (ReserveTranscodingUpload);
   run_reservation_sweep : (nat64) -> (nat32);
+  set_coordinator : (opt principal) -> (bool);
   set_core_canister : (principal) -> (bool);
   set_workers : (vec WorkerEntry) -> (bool);
   start_upload : (StartUploadArgs) -> (text);
@@ -95,4 +99,5 @@ service : () -> {
   upload_asset : (UploadArgs) -> (text);
   upload_chunk : (text, nat32, blob) -> ();
   upload_image : (UploadImageArgs) -> (text);
+  upload_my_avatar : (blob) -> (text);
 }

package/declarations/sultana-assets-rust/sultana-assets-rust.did.d.ts

@@ -95,11 +95,14 @@ export interface WorkerEntry { 'url' : string, 'principal' : Principal }
 export interface _SERVICE {
   'abort_upload' : ActorMethod<[string], boolean>,
   'delete_asset' : ActorMethod<[string], boolean>,
+  'delete_my_avatar' : ActorMethod<[], boolean>,
   'delete_salon_asset' : ActorMethod<[DeleteSalonAssetArgs], boolean>,
   'fail_system_upload' : ActorMethod<[FailSystemUploadArgs], boolean>,
   'finish_system_upload' : ActorMethod<[FinishSystemUploadArgs], string>,
   'finish_upload' : ActorMethod<[string], string>,
   'get_asset_info' : ActorMethod<[string], [] | [AssetInfo]>,
+  'get_avatar' : ActorMethod<[Principal], [] | [string]>,
+  'get_coordinator' : ActorMethod<[], [] | [Principal]>,
   'get_core_canister' : ActorMethod<[], [] | [Principal]>,
   'get_workers' : ActorMethod<[], Array<WorkerEntry>>,
   'http_request' : ActorMethod<[HttpRequest], HttpResponse>,
@@ -114,6 +117,7 @@ export interface _SERVICE {
     ReserveTranscodingUpload
   >,
   'run_reservation_sweep' : ActorMethod<[bigint], number>,
+  'set_coordinator' : ActorMethod<[[] | [Principal]], boolean>,
   'set_core_canister' : ActorMethod<[Principal], boolean>,
   'set_workers' : ActorMethod<[Array<WorkerEntry>], boolean>,
   'start_upload' : ActorMethod<[StartUploadArgs], string>,
@@ -124,6 +128,7 @@ export interface _SERVICE {
     undefined
   >,
   'upload_image' : ActorMethod<[UploadImageArgs], string>,
+  'upload_my_avatar' : ActorMethod<[Uint8Array | number[]], string>,
 }
 export declare const idlFactory: IDL.InterfaceFactory;
 export declare const init: (args: { IDL: typeof IDL }) => IDL.Type[];

package/declarations/sultana-assets-rust/sultana-assets-rust.did.js

@@ -106,11 +106,14 @@ export const idlFactory = ({ IDL }) => {
   return IDL.Service({
     'abort_upload' : IDL.Func([IDL.Text], [IDL.Bool], []),
     'delete_asset' : IDL.Func([IDL.Text], [IDL.Bool], []),
+    'delete_my_avatar' : IDL.Func([], [IDL.Bool], []),
     'delete_salon_asset' : IDL.Func([DeleteSalonAssetArgs], [IDL.Bool], []),
     'fail_system_upload' : IDL.Func([FailSystemUploadArgs], [IDL.Bool], []),
     'finish_system_upload' : IDL.Func([FinishSystemUploadArgs], [IDL.Text], []),
     'finish_upload' : IDL.Func([IDL.Text], [IDL.Text], []),
     'get_asset_info' : IDL.Func([IDL.Text], [IDL.Opt(AssetInfo)], ['query']),
+    'get_avatar' : IDL.Func([IDL.Principal], [IDL.Opt(IDL.Text)], ['query']),
+    'get_coordinator' : IDL.Func([], [IDL.Opt(IDL.Principal)], ['query']),
     'get_core_canister' : IDL.Func([], [IDL.Opt(IDL.Principal)], ['query']),
     'get_workers' : IDL.Func([], [IDL.Vec(WorkerEntry)], ['query']),
     'http_request' : IDL.Func([HttpRequest], [HttpResponse], ['query']),
@@ -131,6 +134,7 @@ export const idlFactory = ({ IDL }) => {
         [],
       ),
     'run_reservation_sweep' : IDL.Func([IDL.Nat64], [IDL.Nat32], []),
+    'set_coordinator' : IDL.Func([IDL.Opt(IDL.Principal)], [IDL.Bool], []),
     'set_core_canister' : IDL.Func([IDL.Principal], [IDL.Bool], []),
     'set_workers' : IDL.Func([IDL.Vec(WorkerEntry)], [IDL.Bool], []),
     'start_upload' : IDL.Func([StartUploadArgs], [IDL.Text], []),
@@ -138,6 +142,7 @@ export const idlFactory = ({ IDL }) => {
     'upload_asset' : IDL.Func([UploadArgs], [IDL.Text], []),
     'upload_chunk' : IDL.Func([IDL.Text, IDL.Nat32, IDL.Vec(IDL.Nat8)], [], []),
     'upload_image' : IDL.Func([UploadImageArgs], [IDL.Text], []),
+    'upload_my_avatar' : IDL.Func([IDL.Vec(IDL.Nat8)], [IDL.Text], []),
   });
 };
 export const init = ({ IDL }) => { return []; };

package/dist/actors/admin-actor.d.ts

@@ -27,6 +27,27 @@ export declare class AssetsRustAdminActor extends ActorBase {
      * @throws CriticalCanisterError - Transport failure or an unreachable canister.
      */
     getCoreCanisterAsyncUnsafe(): Promise<string | null>;
+    /**
+     * Core-canister only: the coordinator of the sharded group (sultana-sharded) whose workers
+     * hold the salons — the trusted calls of a salon then go to its worker. The real path is
+     * the group core's `linkAssetsToGroup` (sultana-sharded-package
+     * `AdminActor.linkAssetsToGroupAsyncUnsafe`); `null` goes back to the one core.
+     * @param coordinatorPrincipal - The group's coordinator, or `null`.
+     * @returns A Promise that resolves to `true` when set, `false` when the caller is not the
+     *          core canister.
+     * @throws CanisterError - The canister trapped.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    setCoordinatorAsyncUnsafe(coordinatorPrincipal: string | null): Promise<boolean>;
+    /**
+     * @returns A Promise that resolves to the coordinator of the sharded group, or `null` when
+     *          the canister serves one core.
+     * @throws CanisterError - The canister trapped.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    getCoordinatorAsyncUnsafe(): Promise<string | null>;
     /**
      * Core-canister only: replaces the transcoding-worker list. The real path is core's
      * superadmin proxy (sultana-core-motoko-package `AdminActor.setAssetWorkersAsyncUnsafe`).

package/dist/actors/admin-actor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin-actor.d.ts","sourceRoot":"","sources":["../../src/actors/admin-actor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD;;;;;;GAMG;AACH,qBAAa,oBAAqB,SAAQ,SAAS;IAC/C;;;;;;;;;OASG;IACU,0BAA0B,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIhF;;;;;;OAMG;IACU,0BAA0B,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKjE;;;;;;;;;OASG;IACU,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAI3E;;;;;;OAMG;IACU,qBAAqB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAK3D;;;;;;;;;;OAUG;IACU,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAItE;;;;;;;;OAQG;IACU,8BAA8B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAG9E"}
+{"version":3,"file":"admin-actor.d.ts","sourceRoot":"","sources":["../../src/actors/admin-actor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD;;;;;;GAMG;AACH,qBAAa,oBAAqB,SAAQ,SAAS;IAC/C;;;;;;;;;OASG;IACU,0BAA0B,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIhF;;;;;;OAMG;IACU,0BAA0B,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKjE;;;;;;;;;;;OAWG;IACU,yBAAyB,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IAI7F;;;;;;OAMG;IACU,yBAAyB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKhE;;;;;;;;;OASG;IACU,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAI3E;;;;;;OAMG;IACU,qBAAqB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAK3D;;;;;;;;;;OAUG;IACU,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAItE;;;;;;;;OAQG;IACU,8BAA8B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAG9E"}

package/dist/actors/admin-actor.js

@@ -33,6 +33,32 @@ export class AssetsRustAdminActor extends ActorBase {
         const result = await this.executeFunctionAsyncUnsafe(() => this.actor.get_core_canister());
         return result.length === 0 ? null : result[0].toText();
     }
+    /**
+     * Core-canister only: the coordinator of the sharded group (sultana-sharded) whose workers
+     * hold the salons — the trusted calls of a salon then go to its worker. The real path is
+     * the group core's `linkAssetsToGroup` (sultana-sharded-package
+     * `AdminActor.linkAssetsToGroupAsyncUnsafe`); `null` goes back to the one core.
+     * @param coordinatorPrincipal - The group's coordinator, or `null`.
+     * @returns A Promise that resolves to `true` when set, `false` when the caller is not the
+     *          core canister.
+     * @throws CanisterError - The canister trapped.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    async setCoordinatorAsyncUnsafe(coordinatorPrincipal) {
+        return this.executeFunctionAsyncUnsafe(() => this.actor.set_coordinator(coordinatorPrincipal === null ? [] : [Principal.fromText(coordinatorPrincipal)]));
+    }
+    /**
+     * @returns A Promise that resolves to the coordinator of the sharded group, or `null` when
+     *          the canister serves one core.
+     * @throws CanisterError - The canister trapped.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    async getCoordinatorAsyncUnsafe() {
+        const result = await this.executeFunctionAsyncUnsafe(() => this.actor.get_coordinator());
+        return result.length === 0 ? null : result[0].toText();
+    }
     /**
      * Core-canister only: replaces the transcoding-worker list. The real path is core's
      * superadmin proxy (sultana-core-motoko-package `AdminActor.setAssetWorkersAsyncUnsafe`).

package/dist/actors/avatar-actor.d.ts

@@ -0,0 +1,54 @@
+import { ActorBase } from "../actor-base.js";
+import type { HttpGetInput, HttpResponseView } from "../interfaces.js";
+/**
+ * The caller's own avatar. Every signed-in principal has at most one and is the only one who
+ * can change it — there is no principal argument on the writes. Only a principal with a
+ * profile in sultana-core-motoko may upload one (core's isUser); there is no salon and no quota. The canister refuses a file over
+ * `ASSETS_RUST_LIMITS.avatarMaxBytes` or over `avatarMaxSide` px and stores it re-encoded as
+ * JPEG (EXIF/GPS dropped), so scale it down on the client first.
+ */
+export declare class AssetsRustAvatarActor extends ActorBase {
+    /**
+     * Stores a new avatar for the caller and deletes the previous one.
+     * @param data - The image (JPEG, PNG or WebP).
+     * @returns A Promise that resolves to the new avatar's asset id.
+     * @throws CanisterError - The canister trapped: anonymous caller, "avatar too large: …",
+     *         "avatar refused: …" (no profile in core, or core unreachable), "avatar rejected:
+     *         …" (not an image, or a side over the limit).
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    uploadMyAvatarAsyncUnsafe(data: Uint8Array): Promise<string>;
+    /**
+     * Deletes the caller's avatar.
+     * @returns A Promise that resolves to `true` when an avatar was removed, `false` when the
+     *          caller had none.
+     * @throws CanisterError - The canister trapped: anonymous caller.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    deleteMyAvatarAsyncUnsafe(): Promise<boolean>;
+    /**
+     * @param owner - The principal (text).
+     * @returns A Promise that resolves to the asset id of the principal's current avatar, or
+     *          `null` when they have none.
+     * @throws CanisterError - The canister trapped.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    getAvatarAsyncUnsafe(owner: string): Promise<string | null>;
+    /**
+     * GET of `/avatar/<owner>` through the canister's `http_request` query — what the HTTP
+     * gateway calls: 200 with the current avatar (5-minute cache), 404 when there is none.
+     * @param owner - The principal (text).
+     * @param input - Request headers.
+     * @returns A Promise that resolves to the response.
+     * @throws CanisterError - The canister trapped.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    httpGetAvatarAsyncUnsafe(owner: string, input?: HttpGetInput): Promise<HttpResponseView>;
+    /** The stable public URL of a principal's avatar on this canister (see {@link avatarUrl}). */
+    avatarUrl(owner: string): string;
+}
+//# sourceMappingURL=avatar-actor.d.ts.map

package/dist/actors/avatar-actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"avatar-actor.d.ts","sourceRoot":"","sources":["../../src/actors/avatar-actor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGvE;;;;;;GAMG;AACH,qBAAa,qBAAsB,SAAQ,SAAS;IAChD;;;;;;;;;OASG;IACU,yBAAyB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzE;;;;;;;OAOG;IACU,yBAAyB,IAAI,OAAO,CAAC,OAAO,CAAC;IAI1D;;;;;;;OAOG;IACU,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKxE;;;;;;;;;OASG;IACU,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAE,YAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAYzG,8FAA8F;IACvF,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAG1C"}

package/dist/actors/avatar-actor.js

@@ -0,0 +1,72 @@
+import { Principal } from "@icp-sdk/core/principal";
+import { ActorBase } from "../actor-base.js";
+import { avatarUrl } from "../constants.js";
+import { mapHttpResponseView } from "../mappers.js";
+/**
+ * The caller's own avatar. Every signed-in principal has at most one and is the only one who
+ * can change it — there is no principal argument on the writes. Only a principal with a
+ * profile in sultana-core-motoko may upload one (core's isUser); there is no salon and no quota. The canister refuses a file over
+ * `ASSETS_RUST_LIMITS.avatarMaxBytes` or over `avatarMaxSide` px and stores it re-encoded as
+ * JPEG (EXIF/GPS dropped), so scale it down on the client first.
+ */
+export class AssetsRustAvatarActor extends ActorBase {
+    /**
+     * Stores a new avatar for the caller and deletes the previous one.
+     * @param data - The image (JPEG, PNG or WebP).
+     * @returns A Promise that resolves to the new avatar's asset id.
+     * @throws CanisterError - The canister trapped: anonymous caller, "avatar too large: …",
+     *         "avatar refused: …" (no profile in core, or core unreachable), "avatar rejected:
+     *         …" (not an image, or a side over the limit).
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    async uploadMyAvatarAsyncUnsafe(data) {
+        return this.executeFunctionAsyncUnsafe(() => this.actor.upload_my_avatar(data));
+    }
+    /**
+     * Deletes the caller's avatar.
+     * @returns A Promise that resolves to `true` when an avatar was removed, `false` when the
+     *          caller had none.
+     * @throws CanisterError - The canister trapped: anonymous caller.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    async deleteMyAvatarAsyncUnsafe() {
+        return this.executeFunctionAsyncUnsafe(() => this.actor.delete_my_avatar());
+    }
+    /**
+     * @param owner - The principal (text).
+     * @returns A Promise that resolves to the asset id of the principal's current avatar, or
+     *          `null` when they have none.
+     * @throws CanisterError - The canister trapped.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    async getAvatarAsyncUnsafe(owner) {
+        const result = await this.executeFunctionAsyncUnsafe(() => this.actor.get_avatar(Principal.fromText(owner)));
+        return result.length === 0 ? null : result[0];
+    }
+    /**
+     * GET of `/avatar/<owner>` through the canister's `http_request` query — what the HTTP
+     * gateway calls: 200 with the current avatar (5-minute cache), 404 when there is none.
+     * @param owner - The principal (text).
+     * @param input - Request headers.
+     * @returns A Promise that resolves to the response.
+     * @throws CanisterError - The canister trapped.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    async httpGetAvatarAsyncUnsafe(owner, input = {}) {
+        const response = await this.executeFunctionAsyncUnsafe(() => this.actor.http_request({
+            method: "GET",
+            url: `/avatar/${owner}`,
+            headers: Object.entries(input.headers ?? {}),
+            body: new Uint8Array(),
+        }));
+        return mapHttpResponseView(response);
+    }
+    /** The stable public URL of a principal's avatar on this canister (see {@link avatarUrl}). */
+    avatarUrl(owner) {
+        return avatarUrl(this.canisterId, owner);
+    }
+}

package/dist/constants.d.ts

@@ -21,12 +21,22 @@ export declare const ASSETS_RUST_LIMITS: {
     readonly maxMusicStartSec: 600;
     readonly minSlideDurationSec: 5;
     readonly maxSlideDurationSec: 60;
+    /** `upload_my_avatar`: the largest file, the largest side in px. Scale the image down
+     *  on the client first (256 px JPEG fits well). */
+    readonly avatarMaxBytes: number;
+    readonly avatarMaxSide: 512;
 };
 /**
  * The public URL of a stored asset. Served from the raw host (`<id>.raw.icp0.io`), which
  * also answers Range requests (206, uncertified) that a `<video>` needs to seek.
  */
 export declare function assetUrl(canisterId: string, assetId: string): string;
+/**
+ * The stable public URL of a principal's avatar: always their current one, 404 when they have
+ * none. Cached for 5 minutes, so a new avatar shows up for others within that time; add a
+ * query such as `?v=<asset id>` to see a fresh one at once.
+ */
+export declare function avatarUrl(canisterId: string, owner: string): string;
 /** Splits `bytes` into chunks the canister accepts. An empty input is one empty chunk —
  *  a session needs at least one. */
 export declare function splitIntoChunks(bytes: Uint8Array, chunkSizeBytes?: number): Uint8Array[];

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,eAAO,MAAM,YAAY,oBAAoB,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,kBAAkB;IAC3B;iFAC6E;;IAE7E,yDAAyD;;IAEzD,wEAAwE;;IAExE,uEAAuE;;IAEvE,6EAA6E;;IAE7E,6FAA6F;;;;;CAKvF,CAAC;AAEX;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;oCACoC;AACpC,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,GAAE,MAA0C,GAAG,UAAU,EAAE,CAY3H"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,eAAO,MAAM,YAAY,oBAAoB,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,kBAAkB;IAC3B;iFAC6E;;IAE7E,yDAAyD;;IAEzD,wEAAwE;;IAExE,uEAAuE;;IAEvE,6EAA6E;;IAE7E,6FAA6F;;;;;IAK7F;uDACmD;;;CAG7C,CAAC;AAEX;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED;oCACoC;AACpC,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,GAAE,MAA0C,GAAG,UAAU,EAAE,CAY3H"}

package/dist/constants.js

@@ -21,6 +21,10 @@ export const ASSETS_RUST_LIMITS = {
     maxMusicStartSec: 600,
     minSlideDurationSec: 5,
     maxSlideDurationSec: 60,
+    /** `upload_my_avatar`: the largest file, the largest side in px. Scale the image down
+     *  on the client first (256 px JPEG fits well). */
+    avatarMaxBytes: 64 * 1024,
+    avatarMaxSide: 512,
 };
 /**
  * The public URL of a stored asset. Served from the raw host (`<id>.raw.icp0.io`), which
@@ -29,6 +33,14 @@ export const ASSETS_RUST_LIMITS = {
 export function assetUrl(canisterId, assetId) {
     return `https://${canisterId}.raw.icp0.io/asset/${assetId}`;
 }
+/**
+ * The stable public URL of a principal's avatar: always their current one, 404 when they have
+ * none. Cached for 5 minutes, so a new avatar shows up for others within that time; add a
+ * query such as `?v=<asset id>` to see a fresh one at once.
+ */
+export function avatarUrl(canisterId, owner) {
+    return `https://${canisterId}.raw.icp0.io/avatar/${owner}`;
+}
 /** Splits `bytes` into chunks the canister accepts. An empty input is one empty chunk —
  *  a session needs at least one. */
 export function splitIntoChunks(bytes, chunkSizeBytes = ASSETS_RUST_LIMITS.chunkSizeBytes) {

package/dist/index.d.ts

@@ -4,7 +4,8 @@ export { AssetsRustUploadsActor } from "./actors/uploads-actor.js";
 export { AssetsRustSalonActor } from "./actors/salon-actor.js";
 export { AssetsRustWorkerActor } from "./actors/worker-actor.js";
 export { AssetsRustAssetsActor } from "./actors/assets-actor.js";
-export { ASSETS_RUST_LIMITS, DEFAULT_HOST, assetUrl, splitIntoChunks } from "./constants.js";
+export { AssetsRustAvatarActor } from "./actors/avatar-actor.js";
+export { ASSETS_RUST_LIMITS, DEFAULT_HOST, assetUrl, avatarUrl, splitIntoChunks } from "./constants.js";
 export type { AssetInfoView, WorkerView, ReservationView, TranscodingKindView, RenderModeView, StartUploadInput, UploadAssetInput, UploadImageInput, ReserveTranscodingUploadInput, ReserveRenderInput, SystemStartUploadInput, HttpGetInput, HttpResponseView, UploadProgress, ChunkedUploadOptions, } from "./interfaces.js";
 export { mapAssetInfoView, mapWorkerView, mapReservationView, mapHttpResponseView, toCandidTranscodingKind, toCandidRenderMode, toCandidOpt, } from "./mappers.js";
 export type { AssetInfo, WorkerEntry, ReserveTranscodingUpload, TranscodingKind, RenderMode, HttpRequest, HttpResponse, StreamingCallbackToken, StreamingCallbackHttpResponse, StreamingStrategy, } from "../declarations/sultana-assets-rust/sultana-assets-rust.did.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC7F,YAAY,EACR,aAAa,EACb,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,6BAA6B,EAC7B,kBAAkB,EAClB,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACH,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,EAClB,WAAW,GACd,MAAM,cAAc,CAAC;AACtB,YAAY,EACR,SAAS,EACT,WAAW,EACX,wBAAwB,EACxB,eAAe,EACf,UAAU,EACV,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,6BAA6B,EAC7B,iBAAiB,GACpB,MAAM,gEAAgE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACxG,YAAY,EACR,aAAa,EACb,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,6BAA6B,EAC7B,kBAAkB,EAClB,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACH,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,EAClB,WAAW,GACd,MAAM,cAAc,CAAC;AACtB,YAAY,EACR,SAAS,EACT,WAAW,EACX,wBAAwB,EACxB,eAAe,EACf,UAAU,EACV,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,6BAA6B,EAC7B,iBAAiB,GACpB,MAAM,gEAAgE,CAAC"}

package/dist/index.js

@@ -4,5 +4,6 @@ export { AssetsRustUploadsActor } from "./actors/uploads-actor.js";
 export { AssetsRustSalonActor } from "./actors/salon-actor.js";
 export { AssetsRustWorkerActor } from "./actors/worker-actor.js";
 export { AssetsRustAssetsActor } from "./actors/assets-actor.js";
-export { ASSETS_RUST_LIMITS, DEFAULT_HOST, assetUrl, splitIntoChunks } from "./constants.js";
+export { AssetsRustAvatarActor } from "./actors/avatar-actor.js";
+export { ASSETS_RUST_LIMITS, DEFAULT_HOST, assetUrl, avatarUrl, splitIntoChunks } from "./constants.js";
 export { mapAssetInfoView, mapWorkerView, mapReservationView, mapHttpResponseView, toCandidTranscodingKind, toCandidRenderMode, toCandidOpt, } from "./mappers.js";

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@jsm-mit/sultana-assets-rust-package",
-    "version": "0.1.0",
+    "version": "0.3.0",
     "description": "Wrapper TypeScript package for the sultana-assets-rust canister: chunked and single-shot uploads, salon images and transcoding reservations, the worker upload path, reads and asset URLs.",
     "license": "ISC",
     "author": "",
@@ -26,6 +26,8 @@
         "typecheck": "tsc --noEmit -p tsconfig.tests.json",
         "sync-declarations": "bash scripts/sync-declarations.sh",
         "test-suite": "bash scripts/run-tests.sh tests/test-suite.ts --lease 3",
+        "test-smoke": "bash scripts/run-tests.sh tests/test-smoke.ts --lease 3",
+        "test-upgrade": "bash scripts/run-tests.sh tests/test-upgrade.ts --lease 6",
         "redeploy": "bash scripts/redeploy.sh",
         "sandbox": "npx tsx sandbox/main.ts",
         "stamp-canister": "bash scripts/stamp-canister-commit.sh"
@@ -53,6 +55,6 @@
     "sultanaAssets": {
         "repo": "sultana-assets-rust",
         "repoUrl": "https://github.com/JSM-Sultana/sultana-assets-rust",
-        "commit": "a2fcfea02282aa858d683bddb26297f2091c431c"
+        "commit": "7a2c7e96a4253f0203d9694c9200189f61044c85"
     }
 }