@krischoichoi/channel-files 0.6.0

package/lib/attachments/extractors/xlsx.js

@@ -0,0 +1,83 @@
+/**
+ * XLSX (and xls) text extractor.
+ *
+ * Uses the established, pure-JS xlsx@0.18.5 (SheetJS, exact-pinned) to read
+ * the workbook cells and render each sheet as a markdown table. Shared
+ * strings, inline strings, numbers and booleans are all surfaced as text.
+ *
+ * Capped parsing is enforced by the registry/pipeline; here we only map bytes
+ * -> text and wrap failures into a stable ExtractionError.
+ */
+import * as XLSX from 'xlsx';
+import { ExtractionError } from './types.js';
+const SPREADSHEET_MIMES = [
+    'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet', // .xlsx
+    'application/vnd.ms-excel', // .xls
+];
+/** Render one cell address range as a markdown table. */
+function sheetToMarkdown(sheetName, sheet) {
+    const ref = sheet['!ref'];
+    if (!ref)
+        return '## ' + sheetName + '\n\n(empty sheet)\n';
+    const range = XLSX.utils.decode_range(ref);
+    const rows = [];
+    for (let r = range.s.r; r <= range.e.r; r++) {
+        const row = [];
+        for (let c = range.s.c; c <= range.e.c; c++) {
+            const addr = XLSX.utils.encode_cell({ r, c });
+            const cell = sheet[addr];
+            if (!cell || cell.v === undefined || cell.v === null) {
+                row.push('');
+                continue;
+            }
+            const val = String(cell.v).replace(/[\r\n]+/g, ' ').replace(/\|/g, '\\|');
+            row.push(val);
+        }
+        rows.push(row);
+    }
+    const header = rows[0] ?? [];
+    const sep = header.map(() => '---');
+    const all = [header, sep, ...rows.slice(1)].map((r) => '| ' + r.join(' | ') + ' |').join('\n');
+    return '## ' + sheetName + '\n\n' + all + '\n';
+}
+/** The singleton spreadsheet extractor. */
+export const xlsxExtractor = {
+    mimes: SPREADSHEET_MIMES,
+    extensions: ['xlsx', 'xls'],
+    async extract(data, options) {
+        if (options?.signal?.aborted) {
+            throw new ExtractionError('parser-error', 'extraction aborted');
+        }
+        // XLSX / XLS are ZIP containers: reject bytes that are not even a zip so a
+        // corrupt blob is reported as parser-error rather than misparsed as cells.
+        if (data.length < 4 || data[0] !== 0x50 || data[1] !== 0x4b) {
+            throw new ExtractionError('parser-error', 'not a spreadsheet container');
+        }
+        try {
+            const buf = Buffer.from(data.buffer, data.byteOffset, data.byteLength);
+            const workbook = XLSX.read(buf, { type: 'buffer', cellText: false, cellNF: false });
+            if (!workbook.SheetNames || workbook.SheetNames.length === 0) {
+                throw new ExtractionError('unsupported', 'workbook has no sheets');
+            }
+            const parts = workbook.SheetNames.map((name) => {
+                const sheet = workbook.Sheets[name];
+                return sheet ? sheetToMarkdown(name, sheet) : '';
+            }).filter((text) => text.length > 0);
+            const text = parts.join('\n').trim();
+            if (text.length === 0) {
+                throw new ExtractionError('unsupported', 'no extractable text in spreadsheet');
+            }
+            return { format: 'markdown', text };
+        }
+        catch (error) {
+            if (error instanceof ExtractionError)
+                throw error;
+            throw new ExtractionError('parser-error', 'spreadsheet text could not be extracted');
+        }
+    },
+};
+/** Whether a (verified) MIME / extension is served by the spreadsheet extractor. */
+export function xlsxMimeServed(mime) {
+    return mime ? SPREADSHEET_MIMES.includes(mime.toLowerCase()) : false;
+}
+//# sourceMappingURL=xlsx.js.map

package/lib/attachments/extractors/xlsx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xlsx.js","sourceRoot":"","sources":["../../../src/attachments/extractors/xlsx.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,eAAe,EAA2D,MAAM,YAAY,CAAC;AAEtG,MAAM,iBAAiB,GAAsB;IAC3C,mEAAmE,EAAE,QAAQ;IAC7E,0BAA0B,EAAE,OAAO;CACpC,CAAA;AAED,yDAAyD;AACzD,SAAS,eAAe,CAAC,SAAiB,EAAE,KAAqB;IAC/D,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,GAAG,SAAS,GAAG,qBAAqB,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAgC,CAAC;YACxD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACrD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACb,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1E,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/F,OAAO,KAAK,GAAG,SAAS,GAAG,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC;AACjD,CAAC;AAED,2CAA2C;AAC3C,MAAM,CAAC,MAAM,aAAa,GAAc;IACtC,KAAK,EAAE,iBAAiB;IACxB,UAAU,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;IAC3B,KAAK,CAAC,OAAO,CAAC,IAAgB,EAAE,OAAwB;QACtD,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,eAAe,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;QAClE,CAAC;QACD,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5D,MAAM,IAAI,eAAe,CAAC,cAAc,EAAE,6BAA6B,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACpC,OAAO,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAC;YACjF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe;gBAAE,MAAM,KAAK,CAAC;YAClD,MAAM,IAAI,eAAe,CAAC,cAAc,EAAE,yCAAyC,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;CACF,CAAC;AAEF,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,OAAO,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACvE,CAAC"}

package/lib/attachments/filename.d.ts

@@ -0,0 +1,23 @@
+/** Strip control characters (including NUL) from a rendered string. */
+export declare function stripControlChars(input: string): string;
+/**
+ * Sanitize a channel-provided filename into a safe display basename.
+ *
+ * - removes any path separators (`/`, `\\`) and drive/colon prefixes;
+ * - strips control characters;
+ * - strips leading dots and trims;
+ * - removes Windows-reserved characters along with trailing dots/spaces;
+ * - limits the whole name to `maxLength` bytes-safe characters (the extension
+ *   is preserved);
+ * - falls back to a default stem when nothing survives.
+ */
+export declare function sanitizeFilename(input: string | undefined, options?: {
+    maxLength?: number;
+    fallback?: string;
+}): string;
+/**
+ * Normalize an adapter-provided MIME hint into a safe token. Returns
+ * `undefined` when the hint is missing or clearly invalid.
+ */
+export declare function normalizeMimeHint(mimeType: string | undefined): string | undefined;
+//# sourceMappingURL=filename.d.ts.map

package/lib/attachments/filename.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filename.d.ts","sourceRoot":"","sources":["../../src/attachments/filename.ts"],"names":[],"mappings":"AAWA,uEAAuE;AACvE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGvD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,MAAM,CAsBR;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAIlF"}

package/lib/attachments/filename.js

@@ -0,0 +1,62 @@
+/**
+ * Filename sanitization for stored channel assets (plan \u00a747).
+ *
+ * A platform-supplied name is a hint from an untrusted boundary: it may carry
+ * path separators, control characters, leading dots or a bogus extension. We
+ * keep a safe, short basename plus its extension and NEVER let it influence
+ * the on-disk path (the store lays files out under generated attachment ids,
+ * so the sanitized name only appears in metadata).
+ */
+import { extname } from 'node:path';
+/** Strip control characters (including NUL) from a rendered string. */
+export function stripControlChars(input) {
+    // eslint-disable-next-line no-control-regex
+    return input.replace(/[\u0000-\u001f\u007f]/g, '');
+}
+/**
+ * Sanitize a channel-provided filename into a safe display basename.
+ *
+ * - removes any path separators (`/`, `\\`) and drive/colon prefixes;
+ * - strips control characters;
+ * - strips leading dots and trims;
+ * - removes Windows-reserved characters along with trailing dots/spaces;
+ * - limits the whole name to `maxLength` bytes-safe characters (the extension
+ *   is preserved);
+ * - falls back to a default stem when nothing survives.
+ */
+export function sanitizeFilename(input, options = {}) {
+    const maxLength = options.maxLength ?? 80;
+    const fallback = options.fallback ?? 'attachment';
+    if (!input)
+        return fallback;
+    // 1. Drop any path separator so a name can never traverse or hide a subpath.
+    let name = stripControlChars(input).replace(/[\\/]/g, '');
+    // 2. Strip a windows-ish drive prefix ("C:" ...) and leading dots.
+    name = name.replace(/^[a-zA-Z]:/, '').replace(/^\.+/, '');
+    name = name.trim();
+    // 3. Remove Windows-reserved characters and trailing dots/spaces.
+    // eslint-disable-next-line no-control-regex
+    name = name.replace(/[<>:"|?*\u0000-\u001f\u007f]/g, '');
+    name = name.replace(/[. ]+$/g, '');
+    if (!name)
+        return fallback;
+    // Preserve the extension but bound the whole name.
+    const ext = extname(name); // ".pdf"
+    const stem = name.slice(0, name.length - ext.length);
+    if (stem.length === 0)
+        return (ext || fallback).slice(0, maxLength);
+    const budget = Math.max(1, maxLength - ext.length);
+    const kept = stem.slice(0, budget);
+    return kept + ext;
+}
+/**
+ * Normalize an adapter-provided MIME hint into a safe token. Returns
+ * `undefined` when the hint is missing or clearly invalid.
+ */
+export function normalizeMimeHint(mimeType) {
+    if (!mimeType)
+        return undefined;
+    const m = /^[a-z0-9.+-]+\/[a-z0-9.+-]+$/i.exec(mimeType.trim());
+    return m ? m[0].toLowerCase() : undefined;
+}
+//# sourceMappingURL=filename.js.map

package/lib/attachments/filename.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filename.js","sourceRoot":"","sources":["../../src/attachments/filename.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,uEAAuE;AACvE,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,4CAA4C;IAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAyB,EACzB,UAAqD,EAAE;IAEvD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5B,6EAA6E;IAC7E,IAAI,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC1D,mEAAmE;IACnE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACnB,kEAAkE;IAClE,4CAA4C;IAC5C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IAE3B,mDAAmD;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,IAAI,GAAG,GAAG,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA4B;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,CAAC,GAAG,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC"}

package/lib/attachments/hash.d.ts

@@ -0,0 +1,5 @@
+/** Hex-encoded SHA-256 of the given bytes. */
+export declare function sha256Hex(bytes: Uint8Array | Buffer): string;
+/** Hex-encoded SHA-256 of a UTF-8 string. */
+export declare function sha256HexText(text: string): string;
+//# sourceMappingURL=hash.d.ts.map

package/lib/attachments/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../src/attachments/hash.ts"],"names":[],"mappings":"AAKA,8CAA8C;AAC9C,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,CAE5D;AAED,6CAA6C;AAC7C,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD"}

package/lib/attachments/hash.js

@@ -0,0 +1,13 @@
+/**
+ * SHA-256 helpers for the private channel asset store (plan \u00a747).
+ */
+import { createHash } from 'node:crypto';
+/** Hex-encoded SHA-256 of the given bytes. */
+export function sha256Hex(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+/** Hex-encoded SHA-256 of a UTF-8 string. */
+export function sha256HexText(text) {
+    return createHash('sha256').update(text, 'utf8').digest('hex');
+}
+//# sourceMappingURL=hash.js.map

package/lib/attachments/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../src/attachments/hash.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,8CAA8C;AAC9C,MAAM,UAAU,SAAS,CAAC,KAA0B;IAClD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC"}

package/lib/attachments/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Private Channel Asset Store.
+ *
+ * Public surface of the channel-harness attachments module.
+ */
+export * from './types.js';
+export * from './policy.js';
+export * from './filename.js';
+export * from './mime.js';
+export * from './hash.js';
+export * from './schema.js';
+export * from './store.js';
+export * from './pipeline.js';
+export * from './pipeline-extractor.js';
+export * from './render.js';
+export * from './extractors/index.js';
+export * from './tool-read.js';
+//# sourceMappingURL=index.d.ts.map

package/lib/attachments/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/attachments/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,yBAAyB,CAAC;AACxC,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC"}

package/lib/attachments/index.js

@@ -0,0 +1,18 @@
+/**
+ * Private Channel Asset Store.
+ *
+ * Public surface of the channel-harness attachments module.
+ */
+export * from './types.js';
+export * from './policy.js';
+export * from './filename.js';
+export * from './mime.js';
+export * from './hash.js';
+export * from './schema.js';
+export * from './store.js';
+export * from './pipeline.js';
+export * from './pipeline-extractor.js';
+export * from './render.js';
+export * from './extractors/index.js';
+export * from './tool-read.js';
+//# sourceMappingURL=index.js.map

package/lib/attachments/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/attachments/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,yBAAyB,CAAC;AACxC,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC"}

package/lib/attachments/mime.d.ts

@@ -0,0 +1,27 @@
+/**
+ * MIME detection by magic-signature sniffing (plan \u00a747).
+ *
+ * The adapter's `mimeType` is only a HINT from an untrusted boundary. Before
+ * we trust what a stored asset claims to be, we re-verify it against the raw
+ * bytes' magic signatures. This module recognizes common binary containers
+ * (png/jpeg/gif/webp/pdf, OOXML zip members docx/xlsx, and zip) plus runs of
+ * printable ASCII/UTF-8 (plain text). Anything unrecognized yields
+ * `undefined` and the store keeps the (hint) value as-is.
+ */
+/** Result of a sniff: a re-verified MIME (or undefined when unknown). */
+export interface MagicSniffResult {
+    mimeType: string | undefined;
+    /** True when the bytes were recognized as printable text. */
+    isPlainText: boolean;
+}
+/**
+ * Sniff a re-verified MIME from raw bytes. `hint` (adapter mimeType) is never
+ * trusted on its own — it is only used as a tiebreaker/fallback when the magic
+ * is ambiguous (e.g. zip). Returns the detected type.
+ */
+export declare function sniffMime(bytes: Uint8Array, hint?: string): string | undefined;
+/** Whether the sniffed bytes were recognized as plain readable text. */
+export declare function sniffIsPlainText(bytes: Uint8Array): boolean;
+/** Re-verified MIME, preferring magic over the adapter hint (plan \u00a747). */
+export declare function verifiedMime(bytes: Uint8Array, hint?: string): string | undefined;
+//# sourceMappingURL=mime.d.ts.map

package/lib/attachments/mime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mime.d.ts","sourceRoot":"","sources":["../../src/attachments/mime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,6DAA6D;IAC7D,WAAW,EAAE,OAAO,CAAC;CACtB;AA0ED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAM9E;AA4CD,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAE3D;AAED,gFAAgF;AAChF,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAIjF"}

package/lib/attachments/mime.js

@@ -0,0 +1,162 @@
+/**
+ * MIME detection by magic-signature sniffing (plan \u00a747).
+ *
+ * The adapter's `mimeType` is only a HINT from an untrusted boundary. Before
+ * we trust what a stored asset claims to be, we re-verify it against the raw
+ * bytes' magic signatures. This module recognizes common binary containers
+ * (png/jpeg/gif/webp/pdf, OOXML zip members docx/xlsx, and zip) plus runs of
+ * printable ASCII/UTF-8 (plain text). Anything unrecognized yields
+ * `undefined` and the store keeps the (hint) value as-is.
+ */
+const TEXT_SCAN_BYTES = 512;
+function isUtf8OrAscii(bytes) {
+    // Reject on any NUL / most control chars; accept printable ASCII and valid
+    // UTF-8 multi-byte sequences. This is intentionally permissive but blocks
+    // null-terminated or binary gibberish.
+    const max = Math.min(bytes.length, TEXT_SCAN_BYTES);
+    for (let i = 0; i < max; i++) {
+        const b = bytes[i];
+        if (b === 0)
+            return false;
+        if (b < 0x09)
+            return false;
+        if (b >= 0x7f && (b === 0x7f || (b >= 0x80 && b <= 0xbf && i === 0))) {
+            // 0x7f is DEL (control); 0x80-0xbf as a lead byte is invalid.
+            return false;
+        }
+        if (b >= 0xc2 && b <= 0xdf && i + 1 < max && bytes[i + 1] >= 0x80 && bytes[i + 1] <= 0xbf) {
+            i++; // 2-byte sequence
+        }
+        else if (b >= 0xe0 && b <= 0xef && i + 2 < max) {
+            const b1 = bytes[i + 1];
+            const b2 = bytes[i + 2];
+            if (b1 >= 0x80 && b1 <= 0xbf && b2 >= 0x80 && b2 <= 0xbf) {
+                i += 2; // 3-byte sequence
+            }
+            else {
+                return false;
+            }
+        }
+        else if (b >= 0xf0 && b <= 0xf4 && i + 3 < max) {
+            const b1 = bytes[i + 1];
+            const b2 = bytes[i + 2];
+            const b3 = bytes[i + 3];
+            if (b1 >= 0x80 && b1 <= 0xbf && b2 >= 0x80 && b2 <= 0xbf && b3 >= 0x80 && b3 <= 0xbf) {
+                i += 3; // 4-byte sequence
+            }
+            else {
+                return false;
+            }
+        }
+    }
+    return true;
+}
+/** Inflate a ZIP central directory / local header fingerprint for OOXML. */
+function sniffZip(bytes) {
+    // ZIP local file header: PK\u0003\u0004 (or empty/fast: PK\u0005\u0006, spanned PK\u0007\u0008).
+    if (bytes.length < 4)
+        return undefined;
+    if (bytes[0] !== 0x50 || bytes[1] !== 0x4b)
+        return undefined;
+    if (bytes[2] === 0x03 && bytes[3] === 0x04) {
+        // OOXML packages carry "[Content_Types].xml" with the first member often
+        // "_rels/.rels". Peek further down for the signature.
+        const marker = findAscii(bytes, '_rels/.rels') || findAscii(bytes, '[Content_Types].xml');
+        if (marker) {
+            if (findAscii(bytes, 'word/'))
+                return 'application/vnd.openxmlformats-officedocument.wordprocessingml.document';
+            if (findAscii(bytes, 'xl/'))
+                return 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet';
+            if (findAscii(bytes, 'ppt/'))
+                return 'application/vnd.openxmlformats-officedocument.presentationml.presentation';
+            return 'application/zip';
+        }
+        return 'application/zip';
+    }
+    if ((bytes[2] === 0x05 && bytes[3] === 0x06) || (bytes[2] === 0x07 && bytes[3] === 0x08)) {
+        return 'application/zip';
+    }
+    return undefined;
+}
+function findAscii(bytes, token) {
+    const needle = new TextEncoder().encode(token);
+    const scan = Math.min(bytes.length, 4096);
+    outer: for (let i = 0; i + needle.length <= scan; i++) {
+        for (let j = 0; j < needle.length; j++) {
+            if (bytes[i + j] !== needle[j])
+                continue outer;
+        }
+        return true;
+    }
+    return false;
+}
+/**
+ * Sniff a re-verified MIME from raw bytes. `hint` (adapter mimeType) is never
+ * trusted on its own — it is only used as a tiebreaker/fallback when the magic
+ * is ambiguous (e.g. zip). Returns the detected type.
+ */
+export function sniffMime(bytes, hint) {
+    if (!bytes || bytes.length === 0)
+        return undefined;
+    const magic = magicMime(bytes, hint);
+    if (magic)
+        return magic;
+    if (isUtf8OrAscii(bytes))
+        return hint?.startsWith('text/') ? hint : sniffPlainText(bytes);
+    return hint; // unknown binary — keep the adapter hint (best effort).
+}
+/** Magic-signature detection for the recognized binary containers. */
+function magicMime(bytes, hint) {
+    // PNG: \u0089PNG\r\n\u001a\n
+    if (bytes.length >= 8 && bytes[0] === 0x89 && bytes[1] === 0x50 && bytes[2] === 0x4e
+        && bytes[3] === 0x47 && bytes[4] === 0x0d && bytes[5] === 0x0a && bytes[6] === 0x1a && bytes[7] === 0x0a) {
+        return 'image/png';
+    }
+    // JPEG: FF D8 FF
+    if (bytes.length >= 3 && bytes[0] === 0xff && bytes[1] === 0xd8 && bytes[2] === 0xff) {
+        return 'image/jpeg';
+    }
+    // GIF: GIF87a / GIF89a
+    if (bytes.length >= 6 && bytes[0] === 0x47 && bytes[1] === 0x49 && bytes[2] === 0x46
+        && (bytes[3] === 0x38) && (bytes[4] === 0x37 || bytes[4] === 0x39) && bytes[5] === 0x61) {
+        return 'image/gif';
+    }
+    // WEBP: RIFF....WEBP
+    if (bytes.length >= 12 && bytes[0] === 0x52 && bytes[1] === 0x49 && bytes[2] === 0x46
+        && bytes[3] === 0x46 && bytes[8] === 0x57 && bytes[9] === 0x45 && bytes[10] === 0x42 && bytes[11] === 0x50) {
+        return 'image/webp';
+    }
+    // PDF: %PDF-
+    if (bytes.length >= 5 && bytes[0] === 0x25 && bytes[1] === 0x50 && bytes[2] === 0x44
+        && bytes[3] === 0x46 && bytes[4] === 0x2d) {
+        return 'application/pdf';
+    }
+    return sniffZip(bytes);
+}
+/** Plain-text detection: pick a textual MIME when bytes look like readable text. */
+function sniffPlainText(bytes) {
+    // Cheap heuristic: JSON/XML/YAML-ish markers win for the common feed types,
+    // otherwise generic text/plain.
+    const sample = new TextDecoder('utf-8', { fatal: false })
+        .decode(bytes.slice(0, TEXT_SCAN_BYTES))
+        .trimStart();
+    if (sample.startsWith('{') && sample.includes('"'))
+        return 'application/json';
+    if (sample.startsWith('<?xml'))
+        return 'application/xml';
+    if (sample.startsWith('#') || sample.includes(': '))
+        return 'text/plain';
+    return 'text/plain';
+}
+/** Whether the sniffed bytes were recognized as plain readable text. */
+export function sniffIsPlainText(bytes) {
+    return bytes.length > 0 && isUtf8OrAscii(bytes);
+}
+/** Re-verified MIME, preferring magic over the adapter hint (plan \u00a747). */
+export function verifiedMime(bytes, hint) {
+    const magic = magicMime(bytes, hint);
+    if (magic)
+        return magic;
+    return sniffMime(bytes, hint);
+}
+//# sourceMappingURL=mime.js.map

package/lib/attachments/mime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mime.js","sourceRoot":"","sources":["../../src/attachments/mime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,eAAe,GAAG,GAAG,CAAC;AAS5B,SAAS,aAAa,CAAC,KAAiB;IACtC,2EAA2E;IAC3E,0EAA0E;IAC1E,uCAAuC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,CAAC,GAAG,IAAI;YAAE,OAAO,KAAK,CAAC;QAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,8DAA8D;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,IAAI,EAAE,CAAC;YAC5F,CAAC,EAAE,CAAC,CAAC,kBAAkB;QACzB,CAAC;aAAM,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;YACjD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACzB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACzB,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;gBACzD,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB;YAC5B,CAAC;iBAAM,CAAC;gBACN,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;YACjD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACzB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACzB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACzB,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;gBACrF,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB;YAC5B,CAAC;iBAAM,CAAC;gBACN,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,SAAS,QAAQ,CAAC,KAAiB;IACjC,iGAAiG;IACjG,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3C,yEAAyE;QACzE,sDAAsD;QACtD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;QAC1F,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC;gBAAE,OAAO,yEAAyE,CAAC;YAChH,IAAI,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC;gBAAE,OAAO,mEAAmE,CAAC;YACxG,IAAI,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;gBAAE,OAAO,2EAA2E,CAAC;YACjH,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QACzF,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB,EAAE,KAAa;IACjD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1C,KAAK,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;gBAAE,SAAS,KAAK,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,KAAiB,EAAE,IAAa;IACxD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC,CAAC,wDAAwD;AACvE,CAAC;AAED,sEAAsE;AACtE,SAAS,SAAS,CAAC,KAAiB,EAAE,IAAa;IACjD,6BAA6B;IAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WAC/E,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3G,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,iBAAiB;IACjB,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACrF,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,uBAAuB;IACvB,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WAC/E,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1F,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,qBAAqB;IACrB,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WAChF,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7G,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,aAAa;IACb,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WAC/E,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,oFAAoF;AACpF,SAAS,cAAc,CAAC,KAAiB;IACvC,4EAA4E;IAC5E,gCAAgC;IAChC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;SACtD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;SACvC,SAAS,EAAE,CAAC;IACf,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAC9E,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;QAAG,OAAO,iBAAiB,CAAC;IAC1D,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IACzE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,IAAa;IAC3D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC"}

package/lib/attachments/pipeline-extractor.d.ts

@@ -0,0 +1,8 @@
+import { type AttachmentPolicy } from './policy.js';
+import type { AttachmentExtractorHook } from './pipeline.js';
+/**
+ * Create the registry-backed extraction hook for a given policy.
+ * Extraction can be disabled by not attaching the hook to the pipeline.
+ */
+export declare function createAttachmentExtractor(policy: AttachmentPolicy): AttachmentExtractorHook;
+//# sourceMappingURL=pipeline-extractor.d.ts.map

package/lib/attachments/pipeline-extractor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline-extractor.d.ts","sourceRoot":"","sources":["../../src/attachments/pipeline-extractor.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAI7D;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,GAAG,uBAAuB,CA6C3F"}

package/lib/attachments/pipeline-extractor.js

@@ -0,0 +1,62 @@
+/**
+ * M4 pipeline extraction hook.
+ *
+ * The concrete AttachmentExtractorHook used by the bridge: drives the
+ * extractor registry (attemptExtraction) and persists the outcome through
+ * the store — putExtracted for ready, recordExtraction for unsupported /
+ * failed / too-large. Never throws (best-effort): every failure
+ * collapses to a typed extraction state.
+ */
+import { extname } from 'node:path';
+import { attemptExtraction } from './extractors/registry.js';
+import {} from './policy.js';
+/**
+ * Create the registry-backed extraction hook for a given policy.
+ * Extraction can be disabled by not attaching the hook to the pipeline.
+ */
+export function createAttachmentExtractor(policy) {
+    return {
+        async extract(input) {
+            const { store, asset, data, signal } = input;
+            const extension = extname(asset.name).replace(/^\./, '') || undefined;
+            const attempt = await attemptExtraction({
+                mime: asset.mimeType,
+                extension,
+                data,
+                caps: policy.extract,
+                signal,
+            });
+            switch (attempt.status) {
+                case 'ready': {
+                    const bytes = new TextEncoder().encode(attempt.result.text).byteLength;
+                    const stored = await store.putExtracted(asset.attachmentId, {
+                        text: attempt.result.text,
+                        format: attempt.result.format,
+                        bytes,
+                    });
+                    return (stored?.extraction ?? {
+                        status: 'ready',
+                        format: attempt.result.format,
+                        bytes,
+                    });
+                }
+                case 'unsupported':
+                    await record(store, asset.attachmentId, { status: 'unsupported' });
+                    return { status: 'unsupported' };
+                case 'too-large':
+                    await record(store, asset.attachmentId, { status: 'too-large' });
+                    return { status: 'too-large' };
+                case 'failed':
+                    await record(store, asset.attachmentId, { status: 'failed', errorCode: attempt.errorCode });
+                    return { status: 'failed', errorCode: attempt.errorCode };
+            }
+        },
+    };
+}
+/** Record a non-ready extraction status through the store (additive-safe). */
+async function record(store, attachmentId, extraction) {
+    if (store.recordExtraction) {
+        await store.recordExtraction(attachmentId, extraction);
+    }
+}
+//# sourceMappingURL=pipeline-extractor.js.map

package/lib/attachments/pipeline-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline-extractor.js","sourceRoot":"","sources":["../../src/attachments/pipeline-extractor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAyB,MAAM,aAAa,CAAC;AAKpD;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAwB;IAChE,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAKb;YACC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;YAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;YACtE,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC;gBACtC,IAAI,EAAE,KAAK,CAAC,QAAQ;gBACpB,SAAS;gBACT,IAAI;gBACJ,IAAI,EAAE,MAAM,CAAC,OAAO;gBACpB,MAAM;aACP,CAAC,CAAC;YACH,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;gBACvB,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;oBACvE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE;wBAC1D,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;wBACzB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;wBAC7B,KAAK;qBACN,CAAC,CAAC;oBACH,OAAO,CACL,MAAM,EAAE,UAAU,IAAI;wBACpB,MAAM,EAAE,OAAgB;wBACxB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;wBAC7B,KAAK;qBACN,CACF,CAAC;gBACJ,CAAC;gBACD,KAAK,aAAa;oBAChB,MAAM,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;oBACnE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;gBACnC,KAAK,WAAW;oBACd,MAAM,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;oBACjE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;gBACjC,KAAK,QAAQ;oBACX,MAAM,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;oBAC5F,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;YAC9D,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,MAAM,CACnB,KAA+B,EAC/B,YAAoB,EACpB,UAA2B;IAE3B,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC3B,MAAM,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/lib/attachments/pipeline.d.ts

@@ -0,0 +1,29 @@
+import type { MessagePart } from '@krischoichoi/channel-core';
+import type { ChannelInboundAssetStore } from './store.js';
+import type { StoredAssetDescriptor, AssetExtraction, StoredChannelAsset } from './types.js';
+export interface AttachmentContext {
+    sessionId: string;
+    channelId: string;
+    accountId: string;
+    conversationId: string;
+    conversationType?: 'dm' | 'group';
+    threadId?: string;
+    messageId: string;
+}
+export interface AttachmentExtractorHook {
+    extract(input: {
+        store: ChannelInboundAssetStore;
+        asset: StoredChannelAsset;
+        data: Uint8Array;
+        signal?: AbortSignal;
+    }): Promise<AssetExtraction>;
+}
+export interface StoreBinaryPartOptions {
+    extractor?: AttachmentExtractorHook;
+    signal?: AbortSignal;
+}
+/** Store one channel-neutral file/audio/video part and optionally extract it. */
+export declare function storeBinaryPart(store: ChannelInboundAssetStore, context: AttachmentContext, part: Extract<MessagePart, {
+    type: 'file' | 'audio' | 'video';
+}>, options?: StoreBinaryPartOptions): Promise<StoredAssetDescriptor | undefined>;
+//# sourceMappingURL=pipeline.d.ts.map

package/lib/attachments/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/attachments/pipeline.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D,OAAO,KAAK,EACV,qBAAqB,EAErB,eAAe,EACf,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,KAAK,EAAE;QACb,KAAK,EAAE,wBAAwB,CAAC;QAChC,KAAK,EAAE,kBAAkB,CAAC;QAC1B,IAAI,EAAE,UAAU,CAAC;QACjB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,uBAAuB,CAAC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAMD,iFAAiF;AACjF,wBAAsB,eAAe,CACnC,KAAK,EAAE,wBAAwB,EAC/B,OAAO,EAAE,iBAAiB,EAC1B,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAA;CAAE,CAAC,EAChE,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAkD5C"}