@jsm-mit/sultana-assets-rust-package 0.2.0 → 0.3.1

package/README.md

@@ -34,7 +34,8 @@ One class per part of the canister:
 | `AssetsRustUploadsActor` | chunked session, single-shot upload, `uploadBytesAsyncUnsafe` | any signed-in caller |
 | `AssetsRustSalonActor` | `upload_image`, `delete_salon_asset`, transcoding and render reservations | the salon's owner — core decides |
 | `AssetsRustWorkerActor` | system upload of a transcoded result under a reserved id | listed transcoding workers |
-| `AssetsRustAssetsActor` | `get_asset_info`, `list_assets`, `http_request`, `assetUrl` | anybody |
+| `AssetsRustAssetsActor` | `get_asset_info`, `list_assets`, `http_request`, `assetUrl` | anybody; `list_assets` only the canister's controllers and the core seat |
+| `AssetsRustAvatarActor` | `upload_my_avatar`, `delete_my_avatar` (own avatar only, profile required — core `isUser` —, no quota; 64 KB / 512 px, re-encoded as JPEG), `get_avatar`, `/avatar/<principal>`, `avatarUrl` | writes: the caller for themselves; reads: anybody |
 
 Every method is `…AsyncUnsafe` and throws one of three errors, like the other wrapper
 packages:
@@ -56,7 +57,8 @@ types are exported too, and `./declarations/*` gives the generated files.
 `src/` is browser-safe — the same package serves the biz panel, the playground and the
 transcoding worker.
 
-Scripts: `build`, `typecheck`, `sync-declarations`, `test-suite`, `test-smoke`, `test-upgrade`, `redeploy`, `sandbox`
+Scripts: `build`, `typecheck`, `sync-declarations`, `test-suite`, `test-smoke`, `test-upgrade`,
+`test-suite-local`, `test-smoke-local`, `test-upgrade-local`, `redeploy`, `sandbox`
 (an interactive console: `npm run sandbox -- <canister-id>`, caller from `IDENTITY_PEM` in
 `.env.sandbox` or anonymous), `stamp-canister`, `publish-public`. See `CLAUDE.md` for who runs what.
 
@@ -72,6 +74,12 @@ read per domain (worker list, a few-byte single-shot upload read back over HTTP,
 result, a salon upload refused by the stand-in core), one replication wait, ≈ 30 s.
 `publish-public` runs it too.
 
+The `-local` variants (`npm run test-suite-local`, `test-smoke-local`, `test-upgrade-local`) run
+the same entry points on the LOCAL replica — no cycles, no lease. `scripts/local-canister.sh`
+builds `../sultana-assets-rust` with cargo and reinstalls it into a canister of the dfx project
+in `local/` (its id stays under `local/.dfx`); the upgrade test upgrades that canister. The
+local replica must run (`dfx start --background`); the scripts never start or stop it.
+
 What the suite covers: the core seat and the worker list; chunked and single-shot uploads
 with every owner and size check; reads, HTTP 200/206/404, certification header and
 streaming; the worker's system upload with a poster; `delete_asset` taking the thumb along;
@@ -84,7 +92,8 @@ the suite never touches it.
 
 Bump the version by hand, commit, push, then `npm run publish-public`. It refuses unless this
 repo and `../sultana-assets-rust` are on a clean, pushed `master` and the version is new on
-npm; it reinstalls the canister's master into `short-living` (lease 2), checks that its
+npm; it reinstalls the canister's master into the canister on the LOCAL replica
+(`scripts/local-canister.sh`; the replica must run), checks that its
 `candid:service` equals `declarations/sultana-assets-rust/sultana-assets-rust.did` as dfx
 rewrites it (the hand-written .did is normalized by a local `dfx build --check` first), runs
 the smoke test (`tests/test-smoke.ts`) on that same deploy, stamps

package/declarations/sultana-assets-rust/sultana-assets-rust.did

@@ -75,11 +75,13 @@ type ReserveRenderArgs = record {
 service : () -> {
   abort_upload : (text) -> (bool);
   delete_asset : (text) -> (bool);
+  delete_my_avatar : () -> (bool);
   delete_salon_asset : (DeleteSalonAssetArgs) -> (bool);
   fail_system_upload : (FailSystemUploadArgs) -> (bool);
   finish_system_upload : (FinishSystemUploadArgs) -> (text);
   finish_upload : (text) -> (text);
   get_asset_info : (text) -> (opt AssetInfo) query;
+  get_avatar : (principal) -> (opt text) query;
   get_coordinator : () -> (opt principal) query;
   get_core_canister : () -> (opt principal) query;
   get_workers : () -> (vec WorkerEntry) query;
@@ -97,4 +99,5 @@ service : () -> {
   upload_asset : (UploadArgs) -> (text);
   upload_chunk : (text, nat32, blob) -> ();
   upload_image : (UploadImageArgs) -> (text);
+  upload_my_avatar : (blob) -> (text);
 }

package/declarations/sultana-assets-rust/sultana-assets-rust.did.d.ts

@@ -95,11 +95,13 @@ export interface WorkerEntry { 'url' : string, 'principal' : Principal }
 export interface _SERVICE {
   'abort_upload' : ActorMethod<[string], boolean>,
   'delete_asset' : ActorMethod<[string], boolean>,
+  'delete_my_avatar' : ActorMethod<[], boolean>,
   'delete_salon_asset' : ActorMethod<[DeleteSalonAssetArgs], boolean>,
   'fail_system_upload' : ActorMethod<[FailSystemUploadArgs], boolean>,
   'finish_system_upload' : ActorMethod<[FinishSystemUploadArgs], string>,
   'finish_upload' : ActorMethod<[string], string>,
   'get_asset_info' : ActorMethod<[string], [] | [AssetInfo]>,
+  'get_avatar' : ActorMethod<[Principal], [] | [string]>,
   'get_coordinator' : ActorMethod<[], [] | [Principal]>,
   'get_core_canister' : ActorMethod<[], [] | [Principal]>,
   'get_workers' : ActorMethod<[], Array<WorkerEntry>>,
@@ -126,6 +128,7 @@ export interface _SERVICE {
     undefined
   >,
   'upload_image' : ActorMethod<[UploadImageArgs], string>,
+  'upload_my_avatar' : ActorMethod<[Uint8Array | number[]], string>,
 }
 export declare const idlFactory: IDL.InterfaceFactory;
 export declare const init: (args: { IDL: typeof IDL }) => IDL.Type[];

package/declarations/sultana-assets-rust/sultana-assets-rust.did.js

@@ -106,11 +106,13 @@ export const idlFactory = ({ IDL }) => {
   return IDL.Service({
     'abort_upload' : IDL.Func([IDL.Text], [IDL.Bool], []),
     'delete_asset' : IDL.Func([IDL.Text], [IDL.Bool], []),
+    'delete_my_avatar' : IDL.Func([], [IDL.Bool], []),
     'delete_salon_asset' : IDL.Func([DeleteSalonAssetArgs], [IDL.Bool], []),
     'fail_system_upload' : IDL.Func([FailSystemUploadArgs], [IDL.Bool], []),
     'finish_system_upload' : IDL.Func([FinishSystemUploadArgs], [IDL.Text], []),
     'finish_upload' : IDL.Func([IDL.Text], [IDL.Text], []),
     'get_asset_info' : IDL.Func([IDL.Text], [IDL.Opt(AssetInfo)], ['query']),
+    'get_avatar' : IDL.Func([IDL.Principal], [IDL.Opt(IDL.Text)], ['query']),
     'get_coordinator' : IDL.Func([], [IDL.Opt(IDL.Principal)], ['query']),
     'get_core_canister' : IDL.Func([], [IDL.Opt(IDL.Principal)], ['query']),
     'get_workers' : IDL.Func([], [IDL.Vec(WorkerEntry)], ['query']),
@@ -140,6 +142,7 @@ export const idlFactory = ({ IDL }) => {
     'upload_asset' : IDL.Func([UploadArgs], [IDL.Text], []),
     'upload_chunk' : IDL.Func([IDL.Text, IDL.Nat32, IDL.Vec(IDL.Nat8)], [], []),
     'upload_image' : IDL.Func([UploadImageArgs], [IDL.Text], []),
+    'upload_my_avatar' : IDL.Func([IDL.Vec(IDL.Nat8)], [IDL.Text], []),
   });
 };
 export const init = ({ IDL }) => { return []; };

package/dist/actor-base.d.ts

@@ -25,10 +25,13 @@ export declare class ActorBase {
     protected host: string;
     protected actor: ActorSubclass<_SERVICE>;
     protected agent: HttpAgent;
+    private ready;
     /**
      * @param canisterId - The sultana-assets-rust canister to talk to.
      * @param identity - The caller; left out = anonymous (enough for the reads).
-     * @param host - The IC API host; default https://icp0.io.
+     * @param host - The IC API host; default https://icp0.io. A local replica
+     *   (`http://127.0.0.1:4943`) works too: for a local host — and only then — the agent
+     *   fetches the replica's root key before the first call.
      */
     constructor(canisterId: string, identity?: Identity | undefined, host?: string);
     private initAgentAndActor;

package/dist/actor-base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actor-base.d.ts","sourceRoot":"","sources":["../src/actor-base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAE,SAAS,EAAE,KAAK,QAAQ,EAAS,MAAM,qBAAqB,CAAC;AAE1F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gEAAgE,CAAC;AAG/F,sFAAsF;AACtF,MAAM,WAAW,SAAS;IACtB,yFAAyF;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,YAAY,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,QAAQ,EAAE,OAAO,CAAC;CACrB;AAKD;;;;;;;;;GASG;AACH,qBAAa,SAAS;IASN,SAAS,CAAC,UAAU,EAAE,MAAM;IAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,QAAQ;IAAE,SAAS,CAAC,IAAI,EAAE,MAAM;IAR/F,SAAS,CAAC,KAAK,EAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC1C,SAAS,CAAC,KAAK,EAAG,SAAS,CAAC;IAE5B;;;;OAIG;gBACmB,UAAU,EAAE,MAAM,EAAY,QAAQ,CAAC,EAAE,QAAQ,YAAA,EAAY,IAAI,GAAE,MAAqB;IAI9G,OAAO,CAAC,iBAAiB;IAWzB;;;;OAIG;IACI,iBAAiB,IAAI,IAAI;IAIhC,iFAAiF;cACjE,0BAA0B,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAqBpF,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,GAAG,OAAO;IASpD,SAAS,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,GAAG,IAAI;CAU1D"}
+{"version":3,"file":"actor-base.d.ts","sourceRoot":"","sources":["../src/actor-base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAE,SAAS,EAAE,KAAK,QAAQ,EAAS,MAAM,qBAAqB,CAAC;AAE1F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gEAAgE,CAAC;AAG/F,sFAAsF;AACtF,MAAM,WAAW,SAAS;IACtB,yFAAyF;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,YAAY,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,QAAQ,EAAE,OAAO,CAAC;CACrB;AASD;;;;;;;;;GASG;AACH,qBAAa,SAAS;IAYN,SAAS,CAAC,UAAU,EAAE,MAAM;IAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,QAAQ;IAAE,SAAS,CAAC,IAAI,EAAE,MAAM;IAX/F,SAAS,CAAC,KAAK,EAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC1C,SAAS,CAAC,KAAK,EAAG,SAAS,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAoC;IAEjD;;;;;;OAMG;gBACmB,UAAU,EAAE,MAAM,EAAY,QAAQ,CAAC,EAAE,QAAQ,YAAA,EAAY,IAAI,GAAE,MAAqB;IAI9G,OAAO,CAAC,iBAAiB;IAYzB;;;;OAIG;IACI,iBAAiB,IAAI,IAAI;IAIhC,iFAAiF;cACjE,0BAA0B,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAuBpF,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,GAAG,OAAO;IASpD,SAAS,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,GAAG,IAAI;CAU1D"}

package/dist/actor-base.js

@@ -1,6 +1,9 @@
 import { HttpAgent, Actor } from "@icp-sdk/core/agent";
 import { idlFactory } from "../declarations/sultana-assets-rust/sultana-assets-rust.did.js";
 import { DEFAULT_HOST } from "./constants.js";
+function isLocalHost(host) {
+    return /^https?:\/\/(127\.0\.0\.1|localhost|\[::1\])(:\d+)?\/?$/.test(host);
+}
 // IC error code of an explicit trap (ic0.trap — every ic_cdk::trap and every Rust panic).
 const TRAP_ERROR_CODE = "IC0503";
 /**
@@ -19,10 +22,13 @@ export class ActorBase {
     host;
     actor;
     agent;
+    ready = Promise.resolve();
     /**
      * @param canisterId - The sultana-assets-rust canister to talk to.
      * @param identity - The caller; left out = anonymous (enough for the reads).
-     * @param host - The IC API host; default https://icp0.io.
+     * @param host - The IC API host; default https://icp0.io. A local replica
+     *   (`http://127.0.0.1:4943`) works too: for a local host — and only then — the agent
+     *   fetches the replica's root key before the first call.
      */
     constructor(canisterId, identity, host = DEFAULT_HOST) {
         this.canisterId = canisterId;
@@ -35,6 +41,7 @@ export class ActorBase {
             host: this.host,
             identity: this.identity,
         });
+        this.ready = isLocalHost(this.host) ? this.agent.fetchRootKey().then(() => undefined) : Promise.resolve();
         this.actor = Actor.createActor(idlFactory, {
             agent: this.agent,
             canisterId: this.canisterId,
@@ -50,6 +57,7 @@ export class ActorBase {
     }
     /** Runs one canister call and translates its failure (see the class comment). */
     async executeFunctionAsyncUnsafe(fnAsync) {
+        await this.ready;
         try {
             return await fnAsync();
         }

package/dist/actors/assets-actor.d.ts

@@ -1,6 +1,7 @@
 import { ActorBase } from "../actor-base.js";
 import type { AssetInfoView, HttpGetInput, HttpResponseView } from "../interfaces.js";
-/** Reads: what is stored and how it is served. All queries — anonymous callers are fine. */
+/** Reads: what is stored and how it is served. All queries — anonymous callers are fine,
+ * except `listAssetsAsyncUnsafe`: the canister's controllers and the core seat only. */
 export declare class AssetsRustAssetsActor extends ActorBase {
     /**
      * @param assetId - The asset.
@@ -13,7 +14,8 @@ export declare class AssetsRustAssetsActor extends ActorBase {
     getAssetInfoAsyncUnsafe(assetId: string): Promise<AssetInfoView | null>;
     /**
      * Every asset physically stored — the raw storage view, independent of any salon library:
-     * thumbnails, posters and orphans included.
+     * thumbnails, posters and orphans included. The canister's controllers and the core seat
+     * only; anybody else gets a CanisterError ("list_assets refused: controllers only").
      * @returns A Promise that resolves to every stored asset.
      * @throws CanisterError - The canister trapped.
      * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.

package/dist/actors/assets-actor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assets-actor.d.ts","sourceRoot":"","sources":["../../src/actors/assets-actor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGtF,4FAA4F;AAC5F,qBAAa,qBAAsB,SAAQ,SAAS;IAChD;;;;;;;OAOG;IACU,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAKpF;;;;;;;OAOG;IACU,qBAAqB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAK9D;;;;;;;;;;OAUG;IACU,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,YAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAYzG,0EAA0E;IACnE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;CAG3C"}
+{"version":3,"file":"assets-actor.d.ts","sourceRoot":"","sources":["../../src/actors/assets-actor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGtF;wFACwF;AACxF,qBAAa,qBAAsB,SAAQ,SAAS;IAChD;;;;;;;OAOG;IACU,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAKpF;;;;;;;;OAQG;IACU,qBAAqB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAK9D;;;;;;;;;;OAUG;IACU,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,YAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAYzG,0EAA0E;IACnE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;CAG3C"}

package/dist/actors/assets-actor.js

@@ -1,7 +1,8 @@
 import { ActorBase } from "../actor-base.js";
 import { assetUrl } from "../constants.js";
 import { mapAssetInfoView, mapHttpResponseView } from "../mappers.js";
-/** Reads: what is stored and how it is served. All queries — anonymous callers are fine. */
+/** Reads: what is stored and how it is served. All queries — anonymous callers are fine,
+ * except `listAssetsAsyncUnsafe`: the canister's controllers and the core seat only. */
 export class AssetsRustAssetsActor extends ActorBase {
     /**
      * @param assetId - The asset.
@@ -17,7 +18,8 @@ export class AssetsRustAssetsActor extends ActorBase {
     }
     /**
      * Every asset physically stored — the raw storage view, independent of any salon library:
-     * thumbnails, posters and orphans included.
+     * thumbnails, posters and orphans included. The canister's controllers and the core seat
+     * only; anybody else gets a CanisterError ("list_assets refused: controllers only").
      * @returns A Promise that resolves to every stored asset.
      * @throws CanisterError - The canister trapped.
      * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.

package/dist/actors/avatar-actor.d.ts

@@ -0,0 +1,54 @@
+import { ActorBase } from "../actor-base.js";
+import type { HttpGetInput, HttpResponseView } from "../interfaces.js";
+/**
+ * The caller's own avatar. Every signed-in principal has at most one and is the only one who
+ * can change it — there is no principal argument on the writes. Only a principal with a
+ * profile in sultana-core-motoko may upload one (core's isUser); there is no salon and no quota. The canister refuses a file over
+ * `ASSETS_RUST_LIMITS.avatarMaxBytes` or over `avatarMaxSide` px and stores it re-encoded as
+ * JPEG (EXIF/GPS dropped), so scale it down on the client first.
+ */
+export declare class AssetsRustAvatarActor extends ActorBase {
+    /**
+     * Stores a new avatar for the caller and deletes the previous one.
+     * @param data - The image (JPEG, PNG or WebP).
+     * @returns A Promise that resolves to the new avatar's asset id.
+     * @throws CanisterError - The canister trapped: anonymous caller, "avatar too large: …",
+     *         "avatar refused: …" (no profile in core, or core unreachable), "avatar rejected:
+     *         …" (not an image, or a side over the limit).
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    uploadMyAvatarAsyncUnsafe(data: Uint8Array): Promise<string>;
+    /**
+     * Deletes the caller's avatar.
+     * @returns A Promise that resolves to `true` when an avatar was removed, `false` when the
+     *          caller had none.
+     * @throws CanisterError - The canister trapped: anonymous caller.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    deleteMyAvatarAsyncUnsafe(): Promise<boolean>;
+    /**
+     * @param owner - The principal (text).
+     * @returns A Promise that resolves to the asset id of the principal's current avatar, or
+     *          `null` when they have none.
+     * @throws CanisterError - The canister trapped.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    getAvatarAsyncUnsafe(owner: string): Promise<string | null>;
+    /**
+     * GET of `/avatar/<owner>` through the canister's `http_request` query — what the HTTP
+     * gateway calls: 200 with the current avatar (5-minute cache), 404 when there is none.
+     * @param owner - The principal (text).
+     * @param input - Request headers.
+     * @returns A Promise that resolves to the response.
+     * @throws CanisterError - The canister trapped.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    httpGetAvatarAsyncUnsafe(owner: string, input?: HttpGetInput): Promise<HttpResponseView>;
+    /** The stable public URL of a principal's avatar on this canister (see {@link avatarUrl}). */
+    avatarUrl(owner: string): string;
+}
+//# sourceMappingURL=avatar-actor.d.ts.map

package/dist/actors/avatar-actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"avatar-actor.d.ts","sourceRoot":"","sources":["../../src/actors/avatar-actor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGvE;;;;;;GAMG;AACH,qBAAa,qBAAsB,SAAQ,SAAS;IAChD;;;;;;;;;OASG;IACU,yBAAyB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzE;;;;;;;OAOG;IACU,yBAAyB,IAAI,OAAO,CAAC,OAAO,CAAC;IAI1D;;;;;;;OAOG;IACU,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKxE;;;;;;;;;OASG;IACU,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAE,YAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAYzG,8FAA8F;IACvF,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAG1C"}

package/dist/actors/avatar-actor.js

@@ -0,0 +1,72 @@
+import { Principal } from "@icp-sdk/core/principal";
+import { ActorBase } from "../actor-base.js";
+import { avatarUrl } from "../constants.js";
+import { mapHttpResponseView } from "../mappers.js";
+/**
+ * The caller's own avatar. Every signed-in principal has at most one and is the only one who
+ * can change it — there is no principal argument on the writes. Only a principal with a
+ * profile in sultana-core-motoko may upload one (core's isUser); there is no salon and no quota. The canister refuses a file over
+ * `ASSETS_RUST_LIMITS.avatarMaxBytes` or over `avatarMaxSide` px and stores it re-encoded as
+ * JPEG (EXIF/GPS dropped), so scale it down on the client first.
+ */
+export class AssetsRustAvatarActor extends ActorBase {
+    /**
+     * Stores a new avatar for the caller and deletes the previous one.
+     * @param data - The image (JPEG, PNG or WebP).
+     * @returns A Promise that resolves to the new avatar's asset id.
+     * @throws CanisterError - The canister trapped: anonymous caller, "avatar too large: …",
+     *         "avatar refused: …" (no profile in core, or core unreachable), "avatar rejected:
+     *         …" (not an image, or a side over the limit).
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    async uploadMyAvatarAsyncUnsafe(data) {
+        return this.executeFunctionAsyncUnsafe(() => this.actor.upload_my_avatar(data));
+    }
+    /**
+     * Deletes the caller's avatar.
+     * @returns A Promise that resolves to `true` when an avatar was removed, `false` when the
+     *          caller had none.
+     * @throws CanisterError - The canister trapped: anonymous caller.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    async deleteMyAvatarAsyncUnsafe() {
+        return this.executeFunctionAsyncUnsafe(() => this.actor.delete_my_avatar());
+    }
+    /**
+     * @param owner - The principal (text).
+     * @returns A Promise that resolves to the asset id of the principal's current avatar, or
+     *          `null` when they have none.
+     * @throws CanisterError - The canister trapped.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    async getAvatarAsyncUnsafe(owner) {
+        const result = await this.executeFunctionAsyncUnsafe(() => this.actor.get_avatar(Principal.fromText(owner)));
+        return result.length === 0 ? null : result[0];
+    }
+    /**
+     * GET of `/avatar/<owner>` through the canister's `http_request` query — what the HTTP
+     * gateway calls: 200 with the current avatar (5-minute cache), 404 when there is none.
+     * @param owner - The principal (text).
+     * @param input - Request headers.
+     * @returns A Promise that resolves to the response.
+     * @throws CanisterError - The canister trapped.
+     * @throws CallRefusedAtInspectionStage - The call was refused at the inspect stage.
+     * @throws CriticalCanisterError - Transport failure or an unreachable canister.
+     */
+    async httpGetAvatarAsyncUnsafe(owner, input = {}) {
+        const response = await this.executeFunctionAsyncUnsafe(() => this.actor.http_request({
+            method: "GET",
+            url: `/avatar/${owner}`,
+            headers: Object.entries(input.headers ?? {}),
+            body: new Uint8Array(),
+        }));
+        return mapHttpResponseView(response);
+    }
+    /** The stable public URL of a principal's avatar on this canister (see {@link avatarUrl}). */
+    avatarUrl(owner) {
+        return avatarUrl(this.canisterId, owner);
+    }
+}

package/dist/constants.d.ts

@@ -21,12 +21,22 @@ export declare const ASSETS_RUST_LIMITS: {
     readonly maxMusicStartSec: 600;
     readonly minSlideDurationSec: 5;
     readonly maxSlideDurationSec: 60;
+    /** `upload_my_avatar`: the largest file, the largest side in px. Scale the image down
+     *  on the client first (256 px JPEG fits well). */
+    readonly avatarMaxBytes: number;
+    readonly avatarMaxSide: 512;
 };
 /**
  * The public URL of a stored asset. Served from the raw host (`<id>.raw.icp0.io`), which
  * also answers Range requests (206, uncertified) that a `<video>` needs to seek.
  */
 export declare function assetUrl(canisterId: string, assetId: string): string;
+/**
+ * The stable public URL of a principal's avatar: always their current one, 404 when they have
+ * none. Cached for 5 minutes, so a new avatar shows up for others within that time; add a
+ * query such as `?v=<asset id>` to see a fresh one at once.
+ */
+export declare function avatarUrl(canisterId: string, owner: string): string;
 /** Splits `bytes` into chunks the canister accepts. An empty input is one empty chunk —
  *  a session needs at least one. */
 export declare function splitIntoChunks(bytes: Uint8Array, chunkSizeBytes?: number): Uint8Array[];

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,eAAO,MAAM,YAAY,oBAAoB,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,kBAAkB;IAC3B;iFAC6E;;IAE7E,yDAAyD;;IAEzD,wEAAwE;;IAExE,uEAAuE;;IAEvE,6EAA6E;;IAE7E,6FAA6F;;;;;CAKvF,CAAC;AAEX;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;oCACoC;AACpC,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,GAAE,MAA0C,GAAG,UAAU,EAAE,CAY3H"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,eAAO,MAAM,YAAY,oBAAoB,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,kBAAkB;IAC3B;iFAC6E;;IAE7E,yDAAyD;;IAEzD,wEAAwE;;IAExE,uEAAuE;;IAEvE,6EAA6E;;IAE7E,6FAA6F;;;;;IAK7F;uDACmD;;;CAG7C,CAAC;AAEX;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED;oCACoC;AACpC,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,GAAE,MAA0C,GAAG,UAAU,EAAE,CAY3H"}

package/dist/constants.js

@@ -21,6 +21,10 @@ export const ASSETS_RUST_LIMITS = {
     maxMusicStartSec: 600,
     minSlideDurationSec: 5,
     maxSlideDurationSec: 60,
+    /** `upload_my_avatar`: the largest file, the largest side in px. Scale the image down
+     *  on the client first (256 px JPEG fits well). */
+    avatarMaxBytes: 64 * 1024,
+    avatarMaxSide: 512,
 };
 /**
  * The public URL of a stored asset. Served from the raw host (`<id>.raw.icp0.io`), which
@@ -29,6 +33,14 @@ export const ASSETS_RUST_LIMITS = {
 export function assetUrl(canisterId, assetId) {
     return `https://${canisterId}.raw.icp0.io/asset/${assetId}`;
 }
+/**
+ * The stable public URL of a principal's avatar: always their current one, 404 when they have
+ * none. Cached for 5 minutes, so a new avatar shows up for others within that time; add a
+ * query such as `?v=<asset id>` to see a fresh one at once.
+ */
+export function avatarUrl(canisterId, owner) {
+    return `https://${canisterId}.raw.icp0.io/avatar/${owner}`;
+}
 /** Splits `bytes` into chunks the canister accepts. An empty input is one empty chunk —
  *  a session needs at least one. */
 export function splitIntoChunks(bytes, chunkSizeBytes = ASSETS_RUST_LIMITS.chunkSizeBytes) {

package/dist/index.d.ts

@@ -4,7 +4,8 @@ export { AssetsRustUploadsActor } from "./actors/uploads-actor.js";
 export { AssetsRustSalonActor } from "./actors/salon-actor.js";
 export { AssetsRustWorkerActor } from "./actors/worker-actor.js";
 export { AssetsRustAssetsActor } from "./actors/assets-actor.js";
-export { ASSETS_RUST_LIMITS, DEFAULT_HOST, assetUrl, splitIntoChunks } from "./constants.js";
+export { AssetsRustAvatarActor } from "./actors/avatar-actor.js";
+export { ASSETS_RUST_LIMITS, DEFAULT_HOST, assetUrl, avatarUrl, splitIntoChunks } from "./constants.js";
 export type { AssetInfoView, WorkerView, ReservationView, TranscodingKindView, RenderModeView, StartUploadInput, UploadAssetInput, UploadImageInput, ReserveTranscodingUploadInput, ReserveRenderInput, SystemStartUploadInput, HttpGetInput, HttpResponseView, UploadProgress, ChunkedUploadOptions, } from "./interfaces.js";
 export { mapAssetInfoView, mapWorkerView, mapReservationView, mapHttpResponseView, toCandidTranscodingKind, toCandidRenderMode, toCandidOpt, } from "./mappers.js";
 export type { AssetInfo, WorkerEntry, ReserveTranscodingUpload, TranscodingKind, RenderMode, HttpRequest, HttpResponse, StreamingCallbackToken, StreamingCallbackHttpResponse, StreamingStrategy, } from "../declarations/sultana-assets-rust/sultana-assets-rust.did.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC7F,YAAY,EACR,aAAa,EACb,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,6BAA6B,EAC7B,kBAAkB,EAClB,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACH,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,EAClB,WAAW,GACd,MAAM,cAAc,CAAC;AACtB,YAAY,EACR,SAAS,EACT,WAAW,EACX,wBAAwB,EACxB,eAAe,EACf,UAAU,EACV,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,6BAA6B,EAC7B,iBAAiB,GACpB,MAAM,gEAAgE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACxG,YAAY,EACR,aAAa,EACb,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,6BAA6B,EAC7B,kBAAkB,EAClB,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACH,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,EAClB,WAAW,GACd,MAAM,cAAc,CAAC;AACtB,YAAY,EACR,SAAS,EACT,WAAW,EACX,wBAAwB,EACxB,eAAe,EACf,UAAU,EACV,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,6BAA6B,EAC7B,iBAAiB,GACpB,MAAM,gEAAgE,CAAC"}

package/dist/index.js

@@ -4,5 +4,6 @@ export { AssetsRustUploadsActor } from "./actors/uploads-actor.js";
 export { AssetsRustSalonActor } from "./actors/salon-actor.js";
 export { AssetsRustWorkerActor } from "./actors/worker-actor.js";
 export { AssetsRustAssetsActor } from "./actors/assets-actor.js";
-export { ASSETS_RUST_LIMITS, DEFAULT_HOST, assetUrl, splitIntoChunks } from "./constants.js";
+export { AssetsRustAvatarActor } from "./actors/avatar-actor.js";
+export { ASSETS_RUST_LIMITS, DEFAULT_HOST, assetUrl, avatarUrl, splitIntoChunks } from "./constants.js";
 export { mapAssetInfoView, mapWorkerView, mapReservationView, mapHttpResponseView, toCandidTranscodingKind, toCandidRenderMode, toCandidOpt, } from "./mappers.js";

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@jsm-mit/sultana-assets-rust-package",
-    "version": "0.2.0",
+    "version": "0.3.1",
     "description": "Wrapper TypeScript package for the sultana-assets-rust canister: chunked and single-shot uploads, salon images and transcoding reservations, the worker upload path, reads and asset URLs.",
     "license": "ISC",
     "author": "",
@@ -28,6 +28,9 @@
         "test-suite": "bash scripts/run-tests.sh tests/test-suite.ts --lease 3",
         "test-smoke": "bash scripts/run-tests.sh tests/test-smoke.ts --lease 3",
         "test-upgrade": "bash scripts/run-tests.sh tests/test-upgrade.ts --lease 6",
+        "test-suite-local": "bash scripts/run-tests-local.sh tests/test-suite.ts",
+        "test-smoke-local": "bash scripts/run-tests-local.sh tests/test-smoke.ts",
+        "test-upgrade-local": "bash scripts/run-tests-local.sh tests/test-upgrade.ts",
         "redeploy": "bash scripts/redeploy.sh",
         "sandbox": "npx tsx sandbox/main.ts",
         "stamp-canister": "bash scripts/stamp-canister-commit.sh"
@@ -55,6 +58,6 @@
     "sultanaAssets": {
         "repo": "sultana-assets-rust",
         "repoUrl": "https://github.com/JSM-Sultana/sultana-assets-rust",
-        "commit": "2360e780f543b7bb4eb2d67cc9e6f63d784bd404"
+        "commit": "d63f0d1ebcfa98c953ae7f68b5331e81966cec8b"
     }
 }