@jungjaehoon/mama-os 0.75.0 → 0.77.0

package/dist/tools/office-render.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requireOfficeSandbox = requireOfficeSandbox;
+exports.officeSandboxProfile = officeSandboxProfile;
+exports.renderEnvironment = renderEnvironment;
+exports.sandboxedCommand = sandboxedCommand;
+exports.renderOffice = renderOffice;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const node_url_1 = require("node:url");
+const backend_security_js_1 = require("../runtime/backend-security.js");
+const command_runner_js_1 = require("./command-runner.js");
+function requireOfficeSandbox(platform = process.platform) {
+    if (platform !== 'darwin')
+        throw new Error(`document.render requires macOS sandbox-exec to enforce read denies and the network deny; rendering is unavailable on ${platform}`);
+}
+/** Office needs an AF_UNIX bind in /tmp; that grants no outbound network. */
+function officeSandboxProfile(temp, output, deniedReadPaths) {
+    const quoted = (path) => JSON.stringify(path);
+    return [
+        '(version 1)',
+        '(allow default)',
+        '(deny network*)',
+        '(allow network-bind network-inbound (local unix-socket))',
+        '(deny appleevent-send)',
+        '(deny file-write*)',
+        // LibreOffice checks that /tmp is writable, then binds its single-instance socket there
+        // (/tmp/OSL_PIPE_<uid>_SingleOfficeIPC_<hash>) whatever TMPDIR says; measured 2026-10-14.
+        `(allow file-write* ${[temp, output].map((path) => `(subpath ${quoted(path)})`).join(' ')} (literal "/private/tmp") (regex #"^/private/tmp/OSL_PIPE_[0-9]+_SingleOfficeIPC_[0-9a-f]+$"))`,
+        ...(deniedReadPaths.length
+            ? [
+                `(deny file-read* ${(0, backend_security_js_1.normalizeReadPaths)(deniedReadPaths)
+                    .map((path) => `(subpath ${quoted(path)})`)
+                    .join(' ')})`,
+            ]
+            : []),
+        // Every agent denies the host render root. Only this renderer may read its private child.
+        `(allow file-read* (subpath ${quoted(temp)}))`,
+        // LibreOffice stats that child's parent, the render root; denied, it waits until the timeout
+        // (measured 2026-10-15). Metadata of the root alone lists no other render.
+        `(allow file-read-metadata (literal ${quoted((0, node_path_1.dirname)(temp))}))`,
+    ].join('\n');
+}
+function renderEnvironment(versionDir, fontconfig, temp) {
+    return {
+        ...(0, backend_security_js_1.backendEnvironment)(),
+        HOME: temp,
+        TMPDIR: temp,
+        XDG_CACHE_HOME: (0, node_path_1.join)(temp, 'cache'),
+        XDG_CONFIG_HOME: (0, node_path_1.join)(temp, 'config'),
+        FONTCONFIG_FILE: fontconfig,
+        FONTCONFIG_PATH: versionDir,
+        // LibreOffice's bundled Python would write __pycache__ into the app and break its seal.
+        PYTHONDONTWRITEBYTECODE: '1',
+        PATH: `${(0, node_path_1.join)(versionDir, 'bin')}:${process.env.PATH ?? '/usr/bin:/bin'}`,
+    };
+}
+async function sandboxedCommand(options) {
+    requireOfficeSandbox(options.platform);
+    const run = options.run ?? command_runner_js_1.runCommand;
+    return run('/usr/bin/sandbox-exec', [
+        '-p',
+        officeSandboxProfile(options.temp, options.output, options.deniedReadPaths),
+        options.command,
+        ...options.args,
+    ], { env: options.env, cwd: options.temp, timeoutMs: options.timeoutMs });
+}
+async function renderOffice(options) {
+    const profile = (0, node_path_1.join)(options.temp, 'profile');
+    (0, node_fs_1.mkdirSync)((0, node_path_1.join)(profile, 'user'), { recursive: true });
+    (0, node_fs_1.writeFileSync)((0, node_path_1.join)(profile, 'user', 'registrymodifications.xcu'), '<?xml version="1.0" encoding="UTF-8"?>\n' +
+        '<oor:items xmlns:oor="http://openoffice.org/2001/registry">' +
+        '<item oor:path="/org.openoffice.Office.Common/Security/Scripting">' +
+        '<prop oor:name="MacroSecurityLevel" oor:op="fuse"><value>3</value></prop>' +
+        '<prop oor:name="DisableMacrosExecution" oor:op="fuse"><value>true</value></prop>' +
+        '<prop oor:name="BlockUntrustedRefererLinks" oor:op="fuse"><value>true</value></prop>' +
+        '</item>' +
+        // Writer's Link: 2 is Never (1 is On Request); Calc's Link: 1 is Never.
+        '<item oor:path="/org.openoffice.Office.Writer/Content/Update">' +
+        '<prop oor:name="Link" oor:op="fuse"><value>2</value></prop></item>' +
+        '<item oor:path="/org.openoffice.Office.Calc/Content/Update">' +
+        '<prop oor:name="Link" oor:op="fuse"><value>1</value></prop></item>' +
+        '</oor:items>\n', { mode: 0o600 });
+    await sandboxedCommand({
+        ...options,
+        command: options.soffice,
+        args: [
+            '--headless',
+            '--nologo',
+            '--nodefault',
+            '--norestore',
+            `-env:UserInstallation=${(0, node_url_1.pathToFileURL)(profile).href}`,
+            '--convert-to',
+            'pdf',
+            '--outdir',
+            options.output,
+            options.input,
+        ],
+    });
+}
+//# sourceMappingURL=office-render.js.map

package/dist/tools/office-render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"office-render.js","sourceRoot":"","sources":["../../src/tools/office-render.ts"],"names":[],"mappings":";;AAMA,oDAKC;AAGD,oDA6BC;AAED,8CAiBC;AAED,4CAuBC;AAED,oCA8CC;AAvID,qCAAmD;AACnD,yCAA0C;AAC1C,uCAAyC;AACzC,wEAAwF;AACxF,2DAAqE;AAErE,SAAgB,oBAAoB,CAAC,WAA4B,OAAO,CAAC,QAAQ;IAC/E,IAAI,QAAQ,KAAK,QAAQ;QACvB,MAAM,IAAI,KAAK,CACb,wHAAwH,QAAQ,EAAE,CACnI,CAAC;AACN,CAAC;AAED,6EAA6E;AAC7E,SAAgB,oBAAoB,CAClC,IAAY,EACZ,MAAc,EACd,eAAkC;IAElC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtD,OAAO;QACL,aAAa;QACb,iBAAiB;QACjB,iBAAiB;QACjB,0DAA0D;QAC1D,wBAAwB;QACxB,oBAAoB;QACpB,wFAAwF;QACxF,0FAA0F;QAC1F,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,gGAAgG;QACzL,GAAG,CAAC,eAAe,CAAC,MAAM;YACxB,CAAC,CAAC;gBACE,oBAAoB,IAAA,wCAAkB,EAAC,eAAe,CAAC;qBACpD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;qBAC1C,IAAI,CAAC,GAAG,CAAC,GAAG;aAChB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,0FAA0F;QAC1F,8BAA8B,MAAM,CAAC,IAAI,CAAC,IAAI;QAC9C,6FAA6F;QAC7F,2EAA2E;QAC3E,sCAAsC,MAAM,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,IAAI;KAChE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAgB,iBAAiB,CAC/B,UAAkB,EAClB,UAAkB,EAClB,IAAY;IAEZ,OAAO;QACL,GAAG,IAAA,wCAAkB,GAAE;QACvB,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,IAAI;QACZ,cAAc,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,OAAO,CAAC;QACnC,eAAe,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,QAAQ,CAAC;QACrC,eAAe,EAAE,UAAU;QAC3B,eAAe,EAAE,UAAU;QAC3B,wFAAwF;QACxF,uBAAuB,EAAE,GAAG;QAC5B,IAAI,EAAE,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,eAAe,EAAE;KAC1E,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,OAUtC;IACC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,8BAAU,CAAC;IACtC,OAAO,GAAG,CACR,uBAAuB,EACvB;QACE,IAAI;QACJ,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC;QAC3E,OAAO,CAAC,OAAO;QACf,GAAG,OAAO,CAAC,IAAI;KAChB,EACD,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACtE,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,OAUlC;IACC,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAA,mBAAS,EAAC,IAAA,gBAAI,EAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,IAAA,uBAAa,EACX,IAAA,gBAAI,EAAC,OAAO,EAAE,MAAM,EAAE,2BAA2B,CAAC,EAClD,0CAA0C;QACxC,6DAA6D;QAC7D,oEAAoE;QACpE,2EAA2E;QAC3E,kFAAkF;QAClF,sFAAsF;QACtF,SAAS;QACT,wEAAwE;QACxE,gEAAgE;QAChE,oEAAoE;QACpE,8DAA8D;QAC9D,oEAAoE;QACpE,gBAAgB,EAClB,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACF,MAAM,gBAAgB,CAAC;QACrB,GAAG,OAAO;QACV,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE;YACJ,YAAY;YACZ,UAAU;YACV,aAAa;YACb,aAAa;YACb,yBAAyB,IAAA,wBAAa,EAAC,OAAO,CAAC,CAAC,IAAI,EAAE;YACtD,cAAc;YACd,KAAK;YACL,UAAU;YACV,OAAO,CAAC,MAAM;YACd,OAAO,CAAC,KAAK;SACd;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/toolkit-process.d.ts

@@ -0,0 +1,9 @@
+/** Kill command groups before releasing their locks, even when no finally can run. */
+export declare function onToolkitSignal(cleanup: () => void, options?: {
+    exit?: boolean;
+}): () => void;
+export declare function pidIsAlive(pid: number): boolean;
+export declare function liveToolkitLease(path: string): boolean;
+/** Publish a nonempty lock atomically; unique owner files make concurrent stale recovery safe. */
+export declare function tryToolkitLock(path: string): (() => void) | null;
+//# sourceMappingURL=toolkit-process.d.ts.map

package/dist/tools/toolkit-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolkit-process.d.ts","sourceRoot":"","sources":["../../src/tools/toolkit-process.ts"],"names":[],"mappings":"AAkBA,sFAAsF;AACtF,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,IAAI,CA4BjG;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAW/C;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUtD;AAED,kGAAkG;AAClG,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CA6DhE"}

package/dist/tools/toolkit-process.js

@@ -0,0 +1,148 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.onToolkitSignal = onToolkitSignal;
+exports.pidIsAlive = pidIsAlive;
+exports.liveToolkitLease = liveToolkitLease;
+exports.tryToolkitLock = tryToolkitLock;
+const node_fs_1 = require("node:fs");
+const node_crypto_1 = require("node:crypto");
+const node_path_1 = require("node:path");
+const signals = { SIGINT: 130, SIGHUP: 129, SIGTERM: 143 };
+const cleanups = new Map();
+const handlers = new Map();
+/** Kill command groups before releasing their locks, even when no finally can run. */
+function onToolkitSignal(cleanup, options = {}) {
+    if (!cleanups.size) {
+        for (const [signal, code] of Object.entries(signals)) {
+            const handler = () => {
+                let exit = false;
+                for (const [release, exitOnSignal] of [...cleanups].reverse()) {
+                    exit ||= exitOnSignal;
+                    try {
+                        release();
+                    }
+                    catch (error) {
+                        process.stderr.write(`Document toolkit cleanup failed: ${String(error)}\n`);
+                    }
+                }
+                // Daemon shutdown owns its async stop. Only the host install CLI requests exit.
+                if (exit)
+                    process.exit(code);
+            };
+            handlers.set(signal, handler);
+            process.on(signal, handler);
+        }
+    }
+    cleanups.set(cleanup, options.exit === true);
+    return () => {
+        cleanups.delete(cleanup);
+        if (!cleanups.size) {
+            for (const [signal, handler] of handlers)
+                process.removeListener(signal, handler);
+            handlers.clear();
+        }
+    };
+}
+function pidIsAlive(pid) {
+    if (!Number.isSafeInteger(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ESRCH')
+            return false;
+        // EPERM still proves that the process exists. Other errors must be visible.
+        if (error.code === 'EPERM')
+            return true;
+        throw error;
+    }
+}
+function liveToolkitLease(path) {
+    let owner;
+    try {
+        owner = (0, node_fs_1.readFileSync)(path, 'utf8');
+    }
+    catch (error) {
+        // A render released its lease between the directory scan and this read.
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+    return pidIsAlive(Number(owner.trim()));
+}
+/** Publish a nonempty lock atomically; unique owner files make concurrent stale recovery safe. */
+function tryToolkitLock(path) {
+    const candidate = (0, node_fs_1.mkdtempSync)(`${path}.`);
+    const owner = `${process.pid}-${(0, node_crypto_1.randomUUID)()}`;
+    (0, node_fs_1.writeFileSync)((0, node_path_1.join)(candidate, owner), String(process.pid), { mode: 0o600 });
+    const removeEmpty = () => {
+        try {
+            (0, node_fs_1.rmdirSync)(path);
+        }
+        catch (error) {
+            if (!['ENOENT', 'ENOTEMPTY', 'EEXIST'].includes(error.code ?? ''))
+                throw error;
+        }
+    };
+    try {
+        for (;;) {
+            try {
+                (0, node_fs_1.renameSync)(candidate, path);
+                const release = () => {
+                    (0, node_fs_1.rmSync)((0, node_path_1.join)(path, owner), { force: true });
+                    removeEmpty();
+                };
+                const unregister = onToolkitSignal(release);
+                return () => {
+                    try {
+                        release();
+                    }
+                    finally {
+                        unregister();
+                    }
+                };
+            }
+            catch (error) {
+                if (!['EEXIST', 'ENOTEMPTY', 'ENOTDIR'].includes(error.code ?? ''))
+                    throw error;
+                try {
+                    if (!(0, node_fs_1.lstatSync)(path).isDirectory()) {
+                        // Recover an earlier PID-file lock, without removing a replacement directory.
+                        if (liveToolkitLease(path))
+                            return null;
+                        try {
+                            (0, node_fs_1.unlinkSync)(path);
+                        }
+                        catch (error) {
+                            const code = error.code;
+                            if (code === 'EPERM' && (0, node_fs_1.lstatSync)(path).isDirectory())
+                                continue;
+                            if (!['ENOENT', 'EISDIR'].includes(code ?? ''))
+                                throw error;
+                        }
+                    }
+                    else {
+                        for (const name of (0, node_fs_1.readdirSync)(path)) {
+                            const entry = (0, node_path_1.join)(path, name);
+                            if (liveToolkitLease(entry))
+                                return null;
+                            // A newly published lock always has a different owner filename.
+                            (0, node_fs_1.rmSync)(entry, { force: true });
+                        }
+                        removeEmpty();
+                    }
+                }
+                catch (error) {
+                    if (error.code !== 'ENOENT')
+                        throw error;
+                }
+            }
+        }
+    }
+    finally {
+        (0, node_fs_1.rmSync)(candidate, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=toolkit-process.js.map

package/dist/tools/toolkit-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolkit-process.js","sourceRoot":"","sources":["../../src/tools/toolkit-process.ts"],"names":[],"mappings":";;AAmBA,0CA4BC;AAED,gCAWC;AAED,4CAUC;AAGD,wCA6DC;AAxID,qCAUiB;AACjB,6CAAyC;AACzC,yCAAiC;AAEjC,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAW,CAAC;AACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;AAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;AAEvD,sFAAsF;AACtF,SAAgB,eAAe,CAAC,OAAmB,EAAE,UAA8B,EAAE;IACnF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,IAAI,IAAI,GAAG,KAAK,CAAC;gBACjB,KAAK,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC9D,IAAI,KAAK,YAAY,CAAC;oBACtB,IAAI,CAAC;wBACH,OAAO,EAAE,CAAC;oBACZ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC9E,CAAC;gBACH,CAAC;gBACD,gFAAgF;gBAChF,IAAI,IAAI;oBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC,CAAC;YACF,QAAQ,CAAC,GAAG,CAAC,MAAwB,EAAE,OAAO,CAAC,CAAC;YAChD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC7C,OAAO,GAAG,EAAE;QACV,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,QAAQ;gBAAE,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAClF,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,UAAU,CAAC,GAAW;IACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACpE,4EAA4E;QAC5E,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QACnE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,kGAAkG;AAClG,SAAgB,cAAc,CAAC,IAAY;IACzC,MAAM,SAAS,GAAG,IAAA,qBAAW,EAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAA,wBAAU,GAAE,EAAE,CAAC;IAC/C,IAAA,uBAAa,EAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,IAAI,CAAC;YACH,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC1F,MAAM,KAAK,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC;QACH,SAAS,CAAC;YACR,IAAI,CAAC;gBACH,IAAA,oBAAU,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC5B,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,IAAA,gBAAM,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC3C,WAAW,EAAE,CAAC;gBAChB,CAAC,CAAC;gBACF,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAC5C,OAAO,GAAG,EAAE;oBACV,IAAI,CAAC;wBACH,OAAO,EAAE,CAAC;oBACZ,CAAC;4BAAS,CAAC;wBACT,UAAU,EAAE,CAAC;oBACf,CAAC;gBACH,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC;oBAEzF,MAAM,KAAK,CAAC;gBACd,IAAI,CAAC;oBACH,IAAI,CAAC,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;wBACnC,8EAA8E;wBAC9E,IAAI,gBAAgB,CAAC,IAAI,CAAC;4BAAE,OAAO,IAAI,CAAC;wBACxC,IAAI,CAAC;4BACH,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;wBACnB,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;4BACnD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE;gCAAE,SAAS;4BAChE,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;gCAAE,MAAM,KAAK,CAAC;wBAC9D,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,KAAK,MAAM,IAAI,IAAI,IAAA,qBAAW,EAAC,IAAI,CAAC,EAAE,CAAC;4BACrC,MAAM,KAAK,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;4BAC/B,IAAI,gBAAgB,CAAC,KAAK,CAAC;gCAAE,OAAO,IAAI,CAAC;4BACzC,gEAAgE;4BAChE,IAAA,gBAAM,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBACjC,CAAC;wBACD,WAAW,EAAE,CAAC;oBAChB,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAC;gBACtE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAA,gBAAM,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/tools/toolkit-state.d.ts

@@ -0,0 +1,22 @@
+export declare const TOOLKIT_INSTALL_COMMAND = "mama tools install";
+export declare const TOOLKIT_ASSETS: string;
+export declare const TOOLKIT_VERSION_NAME: RegExp;
+export declare const TOOLKIT_LEASE_NAME: RegExp;
+/** Never follow a shared lease directory link, at either installation or rendering. */
+export declare function toolkitLeaseDirectory(root: string, create?: boolean): string | null;
+export interface DocumentToolkit {
+    versionDir: string;
+    python: string;
+    soffice: string;
+    fontconfig: string;
+}
+/** Broken/absent installations disable the toolkit; unsafe ownership remains a hard error. */
+export declare function readDocumentToolkit(root?: string, onBroken?: (error: Error) => void): DocumentToolkit | null;
+export declare function requireDocumentToolkit(root?: string): DocumentToolkit;
+/** Switch/prune and render leasing are mutually exclusive, across installer/daemon processes. */
+export declare function withToolkitState<T>(root: string, work: () => T): Promise<T>;
+export declare function leaseDocumentToolkit(root?: string): Promise<{
+    toolkit: DocumentToolkit;
+    release: () => void;
+}>;
+//# sourceMappingURL=toolkit-state.d.ts.map

package/dist/tools/toolkit-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolkit-state.d.ts","sourceRoot":"","sources":["../../src/tools/toolkit-state.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,uBAAuB,uBAAuB,CAAC;AAC5D,eAAO,MAAM,cAAc,QAAmC,CAAC;AAE/D,eAAO,MAAM,oBAAoB,QAAiC,CAAC;AACnE,eAAO,MAAM,kBAAkB,QAA2C,CAAC;AAE3E,uFAAuF;AACvF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,UAAQ,GAAG,MAAM,GAAG,IAAI,CAiBjF;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8FAA8F;AAC9F,wBAAgB,mBAAmB,CACjC,IAAI,CAAC,EAAE,MAAM,EACb,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAChC,eAAe,GAAG,IAAI,CA+BxB;AAED,wBAAgB,sBAAsB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,eAAe,CAOrE;AAED,iGAAiG;AACjG,wBAAsB,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAkBjF;AAED,wBAAsB,oBAAoB,CACxC,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,OAAO,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,CAAC,CAwB5D"}

package/dist/tools/toolkit-state.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOOLKIT_LEASE_NAME = exports.TOOLKIT_VERSION_NAME = exports.TOOLKIT_ASSETS = exports.TOOLKIT_INSTALL_COMMAND = void 0;
+exports.toolkitLeaseDirectory = toolkitLeaseDirectory;
+exports.readDocumentToolkit = readDocumentToolkit;
+exports.requireDocumentToolkit = requireDocumentToolkit;
+exports.withToolkitState = withToolkitState;
+exports.leaseDocumentToolkit = leaseDocumentToolkit;
+const node_fs_1 = require("node:fs");
+const node_crypto_1 = require("node:crypto");
+const node_path_1 = require("node:path");
+const tools_paths_js_1 = require("../runtime/tools-paths.js");
+const toolkit_process_js_1 = require("./toolkit-process.js");
+exports.TOOLKIT_INSTALL_COMMAND = 'mama tools install';
+exports.TOOLKIT_ASSETS = (0, node_path_1.join)(__dirname, '../../toolkit');
+const uuid = '[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}';
+exports.TOOLKIT_VERSION_NAME = new RegExp(`^v-\\d+-${uuid}$`);
+exports.TOOLKIT_LEASE_NAME = new RegExp(`^v-\\d+-${uuid}\\.${uuid}$`);
+/** Never follow a shared lease directory link, at either installation or rendering. */
+function toolkitLeaseDirectory(root, create = false) {
+    const path = (0, node_path_1.join)(root, '.leases');
+    let meta;
+    try {
+        meta = (0, node_fs_1.lstatSync)(path);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+        if (!create)
+            return null;
+        (0, node_fs_1.mkdirSync)(path, { mode: 0o700 });
+        meta = (0, node_fs_1.lstatSync)(path);
+    }
+    const uid = process.getuid?.();
+    if (!meta.isDirectory() || uid === undefined || meta.uid !== uid)
+        throw new Error(`Document toolkit: left ${path} untouched; require a real directory owned by uid ${uid}`);
+    return path;
+}
+/** Broken/absent installations disable the toolkit; unsafe ownership remains a hard error. */
+function readDocumentToolkit(root, onBroken) {
+    if (root)
+        (0, tools_paths_js_1.assertToolsOwnership)(root);
+    try {
+        if (!root || !(0, node_fs_1.existsSync)((0, node_path_1.join)(root, 'current')))
+            return null;
+        const versionDir = (0, node_fs_1.realpathSync)((0, node_path_1.join)(root, 'current'));
+        const offset = (0, node_path_1.relative)((0, node_fs_1.realpathSync)(root), versionDir);
+        if (offset !== (0, node_path_1.basename)(versionDir) || offset.includes(node_path_1.sep) || !offset.startsWith('v-'))
+            throw new Error(`Invalid document toolkit current link; run ${exports.TOOLKIT_INSTALL_COMMAND}`);
+        const manifest = JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(versionDir, 'manifest.json'), 'utf8'));
+        const python = (0, node_path_1.join)(versionDir, 'bin', 'python3');
+        const fontconfig = (0, node_path_1.join)(versionDir, 'fonts.conf');
+        if (manifest.version !== 1 ||
+            typeof manifest.soffice !== 'string' ||
+            ![python, fontconfig, (0, node_path_1.join)(versionDir, 'pyvenv.cfg'), manifest.soffice].every((path) => (0, node_fs_1.existsSync)(path) && (0, node_fs_1.statSync)(path).isFile()))
+            throw new Error(`Incomplete document toolkit; run ${exports.TOOLKIT_INSTALL_COMMAND}`);
+        return { versionDir, python, soffice: manifest.soffice, fontconfig };
+    }
+    catch (error) {
+        onBroken?.(new Error(`Document toolkit unavailable: ${error instanceof Error ? error.message : String(error)}; run ${exports.TOOLKIT_INSTALL_COMMAND}`));
+        return null;
+    }
+}
+function requireDocumentToolkit(root) {
+    const toolkit = readDocumentToolkit(root);
+    if (!toolkit)
+        throw new Error(`Document toolkit is missing; ask the owner to run ${exports.TOOLKIT_INSTALL_COMMAND} on the host`);
+    return toolkit;
+}
+/** Switch/prune and render leasing are mutually exclusive, across installer/daemon processes. */
+async function withToolkitState(root, work) {
+    const lock = (0, node_path_1.join)(root, '.state-lock');
+    const deadline = Date.now() + 30_000;
+    let release;
+    for (;;) {
+        release = (0, toolkit_process_js_1.tryToolkitLock)(lock);
+        if (release)
+            break;
+        if (Date.now() >= deadline)
+            throw new Error(`Document toolkit state is busy at ${lock}; retry after the host install finishes`);
+        await new Promise((resolve) => setTimeout(resolve, 25));
+    }
+    try {
+        return work();
+    }
+    finally {
+        release();
+    }
+}
+async function leaseDocumentToolkit(root) {
+    // An absent tools_root never attempts filesystem writes.
+    if (!root || !(0, node_fs_1.existsSync)(root)) {
+        requireDocumentToolkit(root);
+    }
+    (0, tools_paths_js_1.assertToolsOwnership)(root);
+    return withToolkitState(root, () => {
+        const toolkit = requireDocumentToolkit(root);
+        const directory = toolkitLeaseDirectory(root, true);
+        const lease = (0, node_path_1.join)(directory, `${(0, node_path_1.basename)(toolkit.versionDir)}.${(0, node_crypto_1.randomUUID)()}`);
+        (0, node_fs_1.writeFileSync)(lease, String(process.pid), { flag: 'wx', mode: 0o600 });
+        const release = () => (0, node_fs_1.rmSync)(lease, { force: true });
+        const unregister = (0, toolkit_process_js_1.onToolkitSignal)(release);
+        return {
+            toolkit,
+            release: () => {
+                try {
+                    release();
+                }
+                finally {
+                    unregister();
+                }
+            },
+        };
+    });
+}
+//# sourceMappingURL=toolkit-state.js.map

package/dist/tools/toolkit-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolkit-state.js","sourceRoot":"","sources":["../../src/tools/toolkit-state.ts"],"names":[],"mappings":";;;AAsBA,sDAiBC;AAUD,kDAkCC;AAED,wDAOC;AAGD,4CAkBC;AAED,oDA0BC;AA7ID,qCASiB;AACjB,6CAAyC;AACzC,yCAA0D;AAC1D,8DAAiE;AACjE,6DAAuE;AAE1D,QAAA,uBAAuB,GAAG,oBAAoB,CAAC;AAC/C,QAAA,cAAc,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,eAAe,CAAC,CAAC;AAC/D,MAAM,IAAI,GAAG,qEAAqE,CAAC;AACtE,QAAA,oBAAoB,GAAG,IAAI,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC;AACtD,QAAA,kBAAkB,GAAG,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC;AAE3E,uFAAuF;AACvF,SAAgB,qBAAqB,CAAC,IAAY,EAAE,MAAM,GAAG,KAAK;IAChE,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAA,mBAAS,EAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjC,IAAI,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG;QAC9D,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,qDAAqD,GAAG,EAAE,CACzF,CAAC;IACJ,OAAO,IAAI,CAAC;AACd,CAAC;AASD,8FAA8F;AAC9F,SAAgB,mBAAmB,CACjC,IAAa,EACb,QAAiC;IAEjC,IAAI,IAAI;QAAE,IAAA,qCAAoB,EAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7D,MAAM,UAAU,GAAG,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAA,oBAAQ,EAAC,IAAA,sBAAY,EAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,IAAA,oBAAQ,EAAC,UAAU,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,8CAA8C,+BAAuB,EAAE,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,UAAU,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAGlF,CAAC;QACF,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAClD,IACE,QAAQ,CAAC,OAAO,KAAK,CAAC;YACtB,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;YACpC,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,IAAA,gBAAI,EAAC,UAAU,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAC3E,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,IAAI,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CACtD;YAED,MAAM,IAAI,KAAK,CAAC,oCAAoC,+BAAuB,EAAE,CAAC,CAAC;QACjF,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,EAAE,CACR,IAAI,KAAK,CACP,iCAAiC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,+BAAuB,EAAE,CAC1H,CACF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,sBAAsB,CAAC,IAAa;IAClD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO;QACV,MAAM,IAAI,KAAK,CACb,qDAAqD,+BAAuB,cAAc,CAC3F,CAAC;IACJ,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iGAAiG;AAC1F,KAAK,UAAU,gBAAgB,CAAI,IAAY,EAAE,IAAa;IACnE,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,OAA4B,CAAC;IACjC,SAAS,CAAC;QACR,OAAO,GAAG,IAAA,mCAAc,EAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,OAAO;YAAE,MAAM;QACnB,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YACxB,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,yCAAyC,CACnF,CAAC;QACJ,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,oBAAoB,CACxC,IAAa;IAEb,yDAAyD;IACzD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,IAAA,qCAAoB,EAAC,IAAK,CAAC,CAAC;IAC5B,OAAO,gBAAgB,CAAC,IAAK,EAAE,GAAG,EAAE;QAClC,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAK,EAAE,IAAI,CAAE,CAAC;QACtD,MAAM,KAAK,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,GAAG,IAAA,oBAAQ,EAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAA,wBAAU,GAAE,EAAE,CAAC,CAAC;QACjF,IAAA,uBAAa,EAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAA,gBAAM,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAA,oCAAe,EAAC,OAAO,CAAC,CAAC;QAC5C,OAAO;YACL,OAAO;YACP,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,CAAC;oBACH,OAAO,EAAE,CAAC;gBACZ,CAAC;wBAAS,CAAC;oBACT,UAAU,EAAE,CAAC;gBACf,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jungjaehoon/mama-os",
-  "version": "0.75.0",
+  "version": "0.77.0",
   "description": "MAMA OS - The local work agent behind your messenger.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -42,6 +42,7 @@
     "dist",
     "public",
     "db",
+    "toolkit",
     "README.md",
     "CHANGELOG.md"
   ],
@@ -49,7 +50,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@jungjaehoon/mama-core": "^8.6.0",
+    "@jungjaehoon/mama-core": "^8.7.0",
     "@slack/socket-mode": "^2.0.5",
     "@slack/web-api": "^7.13.0",
     "better-sqlite3": "^12.8.0",

package/toolkit/inspect-office-zip.py

@@ -0,0 +1,16 @@
+"""Bound office ZIP expansion using only the central directory, without extracting entries."""
+import sys
+import zipfile
+
+with zipfile.ZipFile(sys.argv[1]) as archive:
+    entries = archive.infolist()
+    if len(entries) > 10_000:
+        raise ValueError("Office ZIP exceeds the 10,000 entries limit")
+    total = sum(entry.file_size for entry in entries)
+    if total > 512 * 1024 ** 2:
+        raise ValueError("Office ZIP exceeds the 512 MiB total uncompressed size limit")
+    if any(entry.file_size > 256 * 1024 ** 2 for entry in entries):
+        raise ValueError("Office ZIP exceeds the 256 MiB entry uncompressed size limit")
+    compressed = sum(entry.compress_size for entry in entries)
+    if total > 100 * compressed:
+        raise ValueError("Office ZIP exceeds the 100:1 expansion ratio limit")

package/toolkit/rasterize.py

@@ -0,0 +1,29 @@
+"""Trusted host helper. Input PDF remains untrusted; caller applies time and OS sandbox limits."""
+import json
+import pathlib
+import sys
+import pymupdf
+
+source, output, limit = sys.argv[1], pathlib.Path(sys.argv[2]), int(sys.argv[3])
+# A small PDF can repeat one large image on every page; bound the whole render, not only a page.
+TOTAL_PIXELS = 200_000_000
+pages, fonts, total = [], [], 0
+with pymupdf.open(source) as pdf:
+    if pdf.is_encrypted:
+        raise ValueError("Encrypted PDFs cannot be rendered")
+    if not 0 < len(pdf) <= limit:
+        raise ValueError(f"Document must contain 1 to {limit} pages")
+    for number, page in enumerate(pdf, 1):
+        # 144 dpi, bounded before allocating the pixmap.
+        pixels = page.rect.width * page.rect.height * 4
+        if pixels > 20_000_000:
+            raise ValueError("Page exceeds the 20 megapixel render limit")
+        total += pixels
+        if total > TOTAL_PIXELS:
+            raise ValueError("Document exceeds the 200 megapixel render limit")
+        name = f"page-{number:03d}.png"
+        page.get_pixmap(matrix=pymupdf.Matrix(2, 2), alpha=False).save(output / name)
+        pages.append(name)
+        fonts.append(sorted({font[3] for font in page.get_fonts(full=True)
+                             if font[1] != "n/a"}))
+print(json.dumps({"pageCount": len(pages), "pages": pages, "fonts": fonts}))

package/toolkit/requirements.in

@@ -0,0 +1,11 @@
+python-pptx
+python-docx
+openpyxl
+xlsxwriter
+pymupdf
+pdfplumber
+reportlab
+pillow
+numpy
+pandas
+matplotlib