@nodetool-ai/agents 0.7.0-rc.23 → 0.8.2

package/dist/host-modules/pdflib.js

@@ -0,0 +1,138 @@
+/**
+ * `@nodetool-ai/sandbox-pdflib` — pdf-lib, on the host.
+ *
+ * pdf-lib builds and merges PDF documents from class instances that cannot
+ * cross the guest boundary. The guest describes pages as JSON; this module
+ * turns that into PDF bytes.
+ */
+import { toGuestBytes } from "../sandbox-bytes.js";
+import { optionsOf, requireBytes, unwrapLibrary } from "./limits.js";
+import { isFunction, isObjectLike, isString } from "../utils/type-guards.js";
+const MAX_PAGE = 8192;
+const MAX_PAGES = 200;
+async function loadPdfLib(where) {
+    const mod = await import("pdf-lib");
+    return unwrapLibrary(mod, where, "pdf-lib", (v) => isFunction(v?.PDFDocument?.create));
+}
+function pageSize(where, width, height) {
+    const w = Number(width ?? 612);
+    const h = Number(height ?? 792);
+    if (!Number.isFinite(w) || w <= 0 || w > MAX_PAGE) {
+        throw new Error(`${where}: width must be a positive number up to ${MAX_PAGE}`);
+    }
+    if (!Number.isFinite(h) || h <= 0 || h > MAX_PAGE) {
+        throw new Error(`${where}: height must be a positive number up to ${MAX_PAGE}`);
+    }
+    return [w, h];
+}
+function parseRgb(lib, color) {
+    if (!isString(color) || !color.trim()) {
+        return lib.rgb(0, 0, 0);
+    }
+    let hex = color.trim().replace(/^#/, "");
+    if (hex.length === 3) {
+        hex = `${hex[0]}${hex[0]}${hex[1]}${hex[1]}${hex[2]}${hex[2]}`;
+    }
+    if (!/^[0-9a-fA-F]{6}$/.test(hex)) {
+        return lib.rgb(0, 0, 0);
+    }
+    return lib.rgb(parseInt(hex.slice(0, 2), 16) / 255, parseInt(hex.slice(2, 4), 16) / 255, parseInt(hex.slice(4, 6), 16) / 255);
+}
+function isJpeg(bytes) {
+    return bytes.length >= 3 && bytes[0] === 0xff && bytes[1] === 0xd8 && bytes[2] === 0xff;
+}
+async function drawItems(where, lib, doc, page, items) {
+    const font = await doc.embedFont(lib.StandardFonts.Helvetica);
+    const { height } = page.getSize();
+    for (let i = 0; i < items.length; i += 1) {
+        const raw = items[i];
+        if (!isObjectLike(raw)) {
+            throw new Error(`${where}: items[${i}] must be an object`);
+        }
+        const item = raw;
+        const type = String(item.type ?? "");
+        if (type === "text") {
+            const size = Number(item.size ?? 12);
+            const x = Number(item.x ?? 0);
+            const yTop = Number(item.y ?? 0);
+            page.drawText(String(item.text ?? ""), {
+                x,
+                y: height - yTop - size,
+                size,
+                font,
+                color: parseRgb(lib, item.color)
+            });
+            continue;
+        }
+        if (type === "image") {
+            const data = requireBytes(`${where}: items[${i}]`, item.data, "data");
+            const image = isJpeg(data) ? await doc.embedJpg(data) : await doc.embedPng(data);
+            const w = Number(item.width ?? image.width);
+            const h = Number(item.height ?? image.height);
+            const x = Number(item.x ?? 0);
+            const yTop = Number(item.y ?? 0);
+            page.drawImage(image, {
+                x,
+                y: height - yTop - h,
+                width: w,
+                height: h
+            });
+            continue;
+        }
+        throw new Error(`${where}: items[${i}] has unknown type "${type}"`);
+    }
+}
+/**
+ * Build a PDF from a JSON page list. Origin for items is top-left, in points.
+ */
+export async function build(spec) {
+    const where = "pdflib.build";
+    const input = optionsOf(spec);
+    const pages = Array.isArray(input.pages) ? input.pages : [];
+    if (pages.length === 0) {
+        throw new Error(`${where}: provide at least one page`);
+    }
+    if (pages.length > MAX_PAGES) {
+        throw new Error(`${where}: at most ${MAX_PAGES} pages`);
+    }
+    const lib = await loadPdfLib(where);
+    const doc = await lib.PDFDocument.create();
+    for (let i = 0; i < pages.length; i += 1) {
+        const raw = pages[i];
+        if (!isObjectLike(raw)) {
+            throw new Error(`${where}: pages[${i}] must be an object`);
+        }
+        const pageSpec = raw;
+        const [width, height] = pageSize(`${where}: pages[${i}]`, pageSpec.width, pageSpec.height);
+        const page = doc.addPage([width, height]);
+        const items = Array.isArray(pageSpec.items) ? pageSpec.items : [];
+        await drawItems(`${where}: pages[${i}]`, lib, doc, page, items);
+    }
+    return toGuestBytes(await doc.save());
+}
+/**
+ * Concatenate PDF byte arrays in order.
+ */
+export async function merge(pdfs) {
+    const where = "pdflib.merge";
+    if (!Array.isArray(pdfs) || pdfs.length === 0) {
+        throw new Error(`${where}: provide a non-empty array of PDF byte arrays`);
+    }
+    if (pdfs.length > MAX_PAGES) {
+        throw new Error(`${where}: at most ${MAX_PAGES} documents`);
+    }
+    const lib = await loadPdfLib(where);
+    const out = await lib.PDFDocument.create();
+    for (let i = 0; i < pdfs.length; i += 1) {
+        const bytes = requireBytes(`${where}: pdfs[${i}]`, pdfs[i], "pdf");
+        const src = await lib.PDFDocument.load(bytes);
+        const count = src.getPageCount();
+        const indices = Array.from({ length: count }, (_, n) => n);
+        const copied = await out.copyPages(src, indices);
+        for (const page of copied) {
+            out.addPage(page);
+        }
+    }
+    return toGuestBytes(await out.save());
+}
+//# sourceMappingURL=pdflib.js.map

package/dist/host-modules/pdflib.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdflib.js","sourceRoot":"","sources":["../../src/host-modules/pdflib.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAmB,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EACL,UAAU,EACV,YAAY,EACZ,QAAQ,EACT,MAAM,yBAAyB,CAAC;AAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC;AACtB,MAAM,SAAS,GAAG,GAAG,CAAC;AA8CtB,KAAK,UAAU,UAAU,CAAC,KAAa;IACrC,MAAM,GAAG,GAAY,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7C,OAAO,aAAa,CAClB,GAAG,EACH,KAAK,EACL,SAAS,EACT,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAE,CAA4B,EAAE,WAAW,EAAE,MAAM,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,KAAc,EAAE,MAAe;IAC9D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,QAAQ,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4CAA4C,QAAQ,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CACf,GAAe,EACf,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACtC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CACZ,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,EACnC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,EACnC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CACpC,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAiB;IAC/B,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,KAAa,EACb,GAAe,EACf,GAAW,EACX,IAAa,EACb,KAAgB;IAEhB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,WAAW,CAAC,qBAAqB,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,IAAI,GAAG,GAA8B,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACrC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE;gBACrC,CAAC;gBACD,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;gBACvB,IAAI;gBACJ,IAAI;gBACJ,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC;aACjC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,KAAK,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjF,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;gBACpB,CAAC;gBACD,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC;gBACpB,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,CAAC;aACV,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,WAAW,CAAC,uBAAuB,IAAI,GAAG,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAa;IACvC,MAAM,KAAK,GAAG,cAAc,CAAC;IAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,SAAS,QAAQ,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,WAAW,CAAC,qBAAqB,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,QAAQ,GAAG,GAA8B,CAAC;QAChD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,QAAQ,CAC9B,GAAG,KAAK,WAAW,CAAC,GAAG,EACvB,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,MAAM,CAChB,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,SAAS,CAAC,GAAG,KAAK,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAa;IACvC,MAAM,KAAK,GAAG,cAAc,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gDAAgD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,SAAS,YAAY,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC"}

package/dist/host-modules/pptx.d.ts

@@ -0,0 +1,19 @@
+/**
+ * `@nodetool-ai/sandbox-pptx` — office-text-extractor, on the host.
+ *
+ * office-text-extractor reads a buffer through Node's own zip/XML stack; it is
+ * not a guest-module candidate. `extractSlides` reuses the same `fflate`
+ * dependency `@nodetool-ai/sandbox-zip` exposes, kept internal here since
+ * per-slide XML parsing isn't a general zip operation.
+ */
+/** A PowerPoint file's text, all slides concatenated. */
+export declare function extractText(bytes: unknown): Promise<string>;
+/** One slide of a presentation, as `extractSlides` reports it. */
+export interface PptxSlide {
+    index: number;
+    slideNumber: number;
+    text: string;
+}
+/** Each slide's text as its own item, in slide order. */
+export declare function extractSlides(bytes: unknown): Promise<PptxSlide[]>;
+//# sourceMappingURL=pptx.d.ts.map

package/dist/host-modules/pptx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pptx.d.ts","sourceRoot":"","sources":["../../src/host-modules/pptx.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAuBH,yDAAyD;AACzD,wBAAsB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAKjE;AAoBD,kEAAkE;AAClE,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,yDAAyD;AACzD,wBAAsB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAwBxE"}

package/dist/host-modules/pptx.js

@@ -0,0 +1,67 @@
+/**
+ * `@nodetool-ai/sandbox-pptx` — office-text-extractor, on the host.
+ *
+ * office-text-extractor reads a buffer through Node's own zip/XML stack; it is
+ * not a guest-module candidate. `extractSlides` reuses the same `fflate`
+ * dependency `@nodetool-ai/sandbox-zip` exposes, kept internal here since
+ * per-slide XML parsing isn't a general zip operation.
+ */
+import { requireBytes, unwrapLibrary } from "./limits.js";
+import { isFunction } from "../utils/type-guards.js";
+async function loadExtractor(where) {
+    const mod = await import("office-text-extractor");
+    const lib = unwrapLibrary(mod, where, "office-text-extractor", (v) => isFunction(v?.getTextExtractor));
+    return lib.getTextExtractor();
+}
+/** A PowerPoint file's text, all slides concatenated. */
+export async function extractText(bytes) {
+    const where = "pptx.extractText";
+    const buffer = Buffer.from(requireBytes(where, bytes));
+    const extractor = await loadExtractor(where);
+    return extractor.extractText({ type: "buffer", input: buffer });
+}
+function decodeSlideText(xml) {
+    const parts = [];
+    const regex = /<a:t[^>]*>([\s\S]*?)<\/a:t>/g;
+    let match;
+    while ((match = regex.exec(xml)) !== null) {
+        // &amp; must decode last — decoding it first would turn a literal
+        // "&amp;lt;" into "<" instead of the "&lt;" it actually represents.
+        const decoded = match[1]
+            .replace(/&lt;/g, "<")
+            .replace(/&gt;/g, ">")
+            .replace(/&quot;/g, '"')
+            .replace(/&apos;/g, "'")
+            .replace(/&amp;/g, "&");
+        if (decoded)
+            parts.push(decoded);
+    }
+    return parts.join("\n").trim();
+}
+/** Each slide's text as its own item, in slide order. */
+export async function extractSlides(bytes) {
+    const where = "pptx.extractSlides";
+    const archive = requireBytes(where, bytes);
+    const { unzipSync, strFromU8 } = await import("fflate");
+    const entries = unzipSync(archive);
+    const slidePaths = Object.keys(entries)
+        .filter((name) => /^ppt\/slides\/slide\d+\.xml$/.test(name))
+        .sort((a, b) => {
+        const na = Number(a.match(/slide(\d+)\.xml$/)?.[1] ?? 0);
+        const nb = Number(b.match(/slide(\d+)\.xml$/)?.[1] ?? 0);
+        return na - nb;
+    });
+    const slides = [];
+    for (let i = 0; i < slidePaths.length; i++) {
+        const raw = entries[slidePaths[i]];
+        if (!raw)
+            continue;
+        slides.push({
+            index: i,
+            slideNumber: i + 1,
+            text: decodeSlideText(strFromU8(raw))
+        });
+    }
+    return slides;
+}
+//# sourceMappingURL=pptx.js.map

package/dist/host-modules/pptx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pptx.js","sourceRoot":"","sources":["../../src/host-modules/pptx.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AASrD,KAAK,UAAU,aAAa,CAAC,KAAa;IACxC,MAAM,GAAG,GAAY,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,aAAa,CACvB,GAAG,EACH,KAAK,EACL,uBAAuB,EACvB,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAE,CAAyC,EAAE,gBAAgB,CAAC,CAChF,CAAC;IACF,OAAO,GAAG,CAAC,gBAAgB,EAAE,CAAC;AAChC,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAc;IAC9C,MAAM,KAAK,GAAG,kBAAkB,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,SAAS,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,8BAA8B,CAAC;IAC7C,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1C,kEAAkE;QAClE,oEAAoE;QACpE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC;aACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;aACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;aACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;aACvB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;aACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1B,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AACjC,CAAC;AASD,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAc;IAChD,MAAM,KAAK,GAAG,oBAAoB,CAAC;IACnC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;SACpC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC3D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,OAAO,EAAE,GAAG,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEL,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,CAAC;YACR,WAAW,EAAE,CAAC,GAAG,CAAC;YAClB,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/host-modules/pptxgen.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `@nodetool-ai/sandbox-pptxgen` — PptxGenJS, on the host.
+ *
+ * PptxGenJS builds a presentation from class instances that cannot cross the
+ * guest boundary. The guest describes slides as JSON; this module turns that
+ * into PPTX bytes.
+ */
+import { type GuestBytes } from "../sandbox-bytes.js";
+/**
+ * Build a PPTX from a JSON slide list. Positions are inches from the top-left.
+ */
+export declare function build(spec: unknown): Promise<GuestBytes>;
+//# sourceMappingURL=pptxgen.d.ts.map

package/dist/host-modules/pptxgen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pptxgen.d.ts","sourceRoot":"","sources":["../../src/host-modules/pptxgen.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AA8CpE;;GAEG;AACH,wBAAsB,KAAK,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAgF9D"}

package/dist/host-modules/pptxgen.js

@@ -0,0 +1,98 @@
+/**
+ * `@nodetool-ai/sandbox-pptxgen` — PptxGenJS, on the host.
+ *
+ * PptxGenJS builds a presentation from class instances that cannot cross the
+ * guest boundary. The guest describes slides as JSON; this module turns that
+ * into PPTX bytes.
+ */
+import { toGuestBytes } from "../sandbox-bytes.js";
+import { optionsOf, requireBytes, unwrapLibrary } from "./limits.js";
+import { isFunction, isObjectLike, isString } from "../utils/type-guards.js";
+const MAX_SLIDES = 200;
+async function loadPptxGen(where) {
+    const mod = await import("pptxgenjs");
+    const ctor = unwrapLibrary(mod, where, "pptxgenjs", (v) => isFunction(v));
+    return ctor;
+}
+function toDataUrl(bytes) {
+    const jpeg = bytes.length >= 3 && bytes[0] === 0xff && bytes[1] === 0xd8;
+    const b64 = Buffer.from(bytes).toString("base64");
+    return `data:image/${jpeg ? "jpeg" : "png"};base64,${b64}`;
+}
+/**
+ * Build a PPTX from a JSON slide list. Positions are inches from the top-left.
+ */
+export async function build(spec) {
+    const where = "pptxgen.build";
+    const input = optionsOf(spec);
+    const slides = Array.isArray(input.slides) ? input.slides : [];
+    if (slides.length === 0) {
+        throw new Error(`${where}: provide at least one slide`);
+    }
+    if (slides.length > MAX_SLIDES) {
+        throw new Error(`${where}: at most ${MAX_SLIDES} slides`);
+    }
+    const PptxGen = await loadPptxGen(where);
+    const pres = new PptxGen();
+    if (isString(input.title)) {
+        pres.title = input.title;
+    }
+    if (isString(input.author)) {
+        pres.author = input.author;
+    }
+    if (isString(input.subject)) {
+        pres.subject = input.subject;
+    }
+    for (let i = 0; i < slides.length; i += 1) {
+        const raw = slides[i];
+        if (!isObjectLike(raw)) {
+            throw new Error(`${where}: slides[${i}] must be an object`);
+        }
+        const slideSpec = raw;
+        const slide = pres.addSlide();
+        if (isString(slideSpec.background)) {
+            slide.background = { color: slideSpec.background.replace(/^#/, "") };
+        }
+        const items = Array.isArray(slideSpec.items) ? slideSpec.items : [];
+        for (let j = 0; j < items.length; j += 1) {
+            const itemRaw = items[j];
+            if (!isObjectLike(itemRaw)) {
+                throw new Error(`${where}: slides[${i}].items[${j}] must be an object`);
+            }
+            const item = itemRaw;
+            const type = String(item.type ?? "");
+            const box = {
+                x: Number(item.x ?? 0.5),
+                y: Number(item.y ?? 0.5),
+                w: Number(item.w ?? item.width ?? 8),
+                h: Number(item.h ?? item.height ?? 1)
+            };
+            if (type === "text") {
+                slide.addText(String(item.text ?? ""), {
+                    ...box,
+                    fontSize: Number(item.fontSize ?? 18),
+                    color: String(item.color ?? "000000").replace(/^#/, ""),
+                    bold: Boolean(item.bold),
+                    align: item.align ?? "left"
+                });
+                continue;
+            }
+            if (type === "image") {
+                const data = requireBytes(`${where}: slides[${i}].items[${j}]`, item.data, "data");
+                slide.addImage({ ...box, data: toDataUrl(data) });
+                continue;
+            }
+            if (type === "shape") {
+                slide.addShape(String(item.shape ?? "rect"), {
+                    ...box,
+                    fill: { color: String(item.fill ?? "2563eb").replace(/^#/, "") }
+                });
+                continue;
+            }
+            throw new Error(`${where}: slides[${i}].items[${j}] has unknown type "${type}"`);
+        }
+    }
+    const bytes = await pres.write({ outputType: "uint8array" });
+    return toGuestBytes(bytes);
+}
+//# sourceMappingURL=pptxgen.js.map

package/dist/host-modules/pptxgen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pptxgen.js","sourceRoot":"","sources":["../../src/host-modules/pptxgen.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAmB,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EACL,UAAU,EACV,YAAY,EACZ,QAAQ,EACT,MAAM,yBAAyB,CAAC;AAEjC,MAAM,UAAU,GAAG,GAAG,CAAC;AAqBvB,KAAK,UAAU,WAAW,CAAC,KAAa;IACtC,MAAM,GAAG,GAAY,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,aAAa,CACxB,GAAG,EACH,KAAK,EACL,WAAW,EACX,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACrB,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IACzE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClD,OAAO,cAAc,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,GAAG,EAAE,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAa;IACvC,MAAM,KAAK,GAAG,eAAe,CAAC;IAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,UAAU,SAAS,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;IAC3B,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC3B,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC7B,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC/B,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,YAAY,CAAC,qBAAqB,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,SAAS,GAAG,GAA8B,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,UAAU,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QACvE,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,YAAY,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,IAAI,GAAG,OAAkC,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACrC,MAAM,GAAG,GAAG;gBACV,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;gBACxB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;gBACxB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;gBACpC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;aACtC,CAAC;YACF,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE;oBACrC,GAAG,GAAG;oBACN,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;oBACrC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;oBACvD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;oBACxB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,MAAM;iBAC5B,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,YAAY,CACvB,GAAG,KAAK,YAAY,CAAC,WAAW,CAAC,GAAG,EACpC,IAAI,CAAC,IAAI,EACT,MAAM,CACP,CAAC;gBACF,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAClD,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,EAAE;oBAC3C,GAAG,GAAG;oBACN,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE;iBACjE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,YAAY,CAAC,WAAW,CAAC,uBAAuB,IAAI,GAAG,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IAC7D,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC"}

package/dist/host-modules/prepared-request.d.ts

@@ -0,0 +1,41 @@
+/**
+ * The shape every auth-helper host module returns, and the argument checks
+ * they share.
+ *
+ * An auth helper builds a request; it never sends one. The guest passes what
+ * comes back to `fetch`, so the run's fetch cap, its SSRF guard, and its body
+ * limit all still apply — moving the header math to the host must not move the
+ * network call with it.
+ */
+export interface PreparedRequest {
+    readonly url: string;
+    readonly method: string;
+    readonly headers: Record<string, string>;
+    /** Absent for a request with no body, so `fetch` sends none. */
+    readonly body?: string;
+}
+/** A required non-empty string argument, or a named error. */
+export declare function requireString(where: string, value: unknown, label: string): string;
+/** An HTTP method, uppercased, defaulting to `fallback`. */
+export declare function methodOf(value: unknown, fallback: string): string;
+/** Serialize a JSON body, refusing one too large to be worth building. */
+export declare function jsonBody(where: string, value: unknown): string;
+/**
+ * Append a query bag to a URL.
+ *
+ * `undefined` and `null` entries are dropped rather than sent as the strings
+ * "undefined" and "null", which is what an optional filter should do. An array
+ * repeats the key.
+ */
+export declare function withQuery(url: URL, query: unknown): URL;
+/** Form-encode a parameter bag, dropping absent entries and repeating arrays. */
+export declare function formBody(where: string, params: unknown): string;
+/**
+ * Base64 of a UTF-8 string.
+ *
+ * Written out rather than reached for through `btoa`, which is byte-oriented
+ * and throws on anything past U+00FF — an API token is ASCII, but a password
+ * with an accent in it should produce a header, not an exception.
+ */
+export declare function base64Utf8(value: string): string;
+//# sourceMappingURL=prepared-request.d.ts.map

package/dist/host-modules/prepared-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepared-request.d.ts","sourceRoot":"","sources":["../../src/host-modules/prepared-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,gEAAgE;IAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAKD,8DAA8D;AAC9D,wBAAgB,aAAa,CAC3B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,GACZ,MAAM,CAKR;AAED,4DAA4D;AAC5D,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIjE;AAED,0EAA0E;AAC1E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAQ9D;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,GAAG,GAAG,CAcvD;AAED,iFAAiF;AACjF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAsB/D;AAKD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAYhD"}

package/dist/host-modules/prepared-request.js

@@ -0,0 +1,104 @@
+/**
+ * The shape every auth-helper host module returns, and the argument checks
+ * they share.
+ *
+ * An auth helper builds a request; it never sends one. The guest passes what
+ * comes back to `fetch`, so the run's fetch cap, its SSRF guard, and its body
+ * limit all still apply — moving the header math to the host must not move the
+ * network call with it.
+ */
+/** A request ready for `fetch(prepared.url, prepared)`. */
+import { isObjectLike, isString } from "../utils/type-guards.js";
+/** Largest request body an auth helper will build, in characters. */
+const MAX_BODY_CHARS = 1024 * 1024;
+/** A required non-empty string argument, or a named error. */
+export function requireString(where, value, label) {
+    if (!isString(value) || value === "") {
+        throw new Error(`${where}: ${label} is required`);
+    }
+    return value;
+}
+/** An HTTP method, uppercased, defaulting to `fallback`. */
+export function methodOf(value, fallback) {
+    return value === undefined || value === null
+        ? fallback
+        : String(value).toUpperCase();
+}
+/** Serialize a JSON body, refusing one too large to be worth building. */
+export function jsonBody(where, value) {
+    const text = JSON.stringify(value ?? {});
+    if (text.length > MAX_BODY_CHARS) {
+        throw new Error(`${where}: body exceeds the ${MAX_BODY_CHARS} character limit`);
+    }
+    return text;
+}
+/**
+ * Append a query bag to a URL.
+ *
+ * `undefined` and `null` entries are dropped rather than sent as the strings
+ * "undefined" and "null", which is what an optional filter should do. An array
+ * repeats the key.
+ */
+export function withQuery(url, query) {
+    if (!isObjectLike(query))
+        return url;
+    for (const [key, value] of Object.entries(query)) {
+        if (value === undefined || value === null)
+            continue;
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (item === undefined || item === null)
+                    continue;
+                url.searchParams.append(key, String(item));
+            }
+            continue;
+        }
+        url.searchParams.set(key, String(value));
+    }
+    return url;
+}
+/** Form-encode a parameter bag, dropping absent entries and repeating arrays. */
+export function formBody(where, params) {
+    const encoded = new URLSearchParams();
+    if (isObjectLike(params)) {
+        for (const [key, value] of Object.entries(params)) {
+            if (value === undefined || value === null)
+                continue;
+            if (Array.isArray(value)) {
+                for (const item of value) {
+                    if (item === undefined || item === null)
+                        continue;
+                    encoded.append(key, String(item));
+                }
+                continue;
+            }
+            encoded.set(key, String(value));
+        }
+    }
+    const text = encoded.toString();
+    if (text.length > MAX_BODY_CHARS) {
+        throw new Error(`${where}: body exceeds the ${MAX_BODY_CHARS} character limit`);
+    }
+    return text;
+}
+const BASE64_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+/**
+ * Base64 of a UTF-8 string.
+ *
+ * Written out rather than reached for through `btoa`, which is byte-oriented
+ * and throws on anything past U+00FF — an API token is ASCII, but a password
+ * with an accent in it should produce a header, not an exception.
+ */
+export function base64Utf8(value) {
+    const bytes = new TextEncoder().encode(value);
+    let out = "";
+    for (let i = 0; i < bytes.length; i += 3) {
+        const chunk = (bytes[i] << 16) | ((bytes[i + 1] ?? 0) << 8) | (bytes[i + 2] ?? 0);
+        out += BASE64_ALPHABET[(chunk >> 18) & 63];
+        out += BASE64_ALPHABET[(chunk >> 12) & 63];
+        out += i + 1 < bytes.length ? BASE64_ALPHABET[(chunk >> 6) & 63] : "=";
+        out += i + 2 < bytes.length ? BASE64_ALPHABET[chunk & 63] : "=";
+    }
+    return out;
+}
+//# sourceMappingURL=prepared-request.js.map

package/dist/host-modules/prepared-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepared-request.js","sourceRoot":"","sources":["../../src/host-modules/prepared-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,2DAA2D;AAC3D,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AASjE,qEAAqE;AACrE,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnC,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAC3B,KAAa,EACb,KAAc,EACd,KAAa;IAEb,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,KAAK,cAAc,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,QAAQ,CAAC,KAAc,EAAE,QAAgB;IACvD,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAC1C,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,KAAc;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,sBAAsB,cAAc,kBAAkB,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,GAAQ,EAAE,KAAc;IAChD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QACpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;oBAAE,SAAS;gBAClD,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7C,CAAC;YACD,SAAS;QACX,CAAC;QACD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,MAAe;IACrD,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IACtC,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,EAAE,CAAC;YAC7E,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;gBAAE,SAAS;YACpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;wBAAE,SAAS;oBAClD,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACpC,CAAC;gBACD,SAAS;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAChC,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,sBAAsB,cAAc,kBAAkB,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,eAAe,GACnB,kEAAkE,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GACT,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,GAAG,IAAI,eAAe,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3C,GAAG,IAAI,eAAe,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3C,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/host-modules/registry.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The implementations behind NodeTool's host module ids.
+ *
+ * `SANDBOX_HOST_MODULES` in `@nodetool-ai/protocol` declares *what* exists —
+ * ids, owning packs, export names — because node-sdk validates a manifest
+ * against it and the browser rebuilds a facade from it. This is the other half:
+ * the functions, which only a host runs.
+ *
+ * Every entry is loaded lazily. Nothing here sits in an entry graph, so a
+ * process that never runs a Code node importing `@nodetool-ai/sandbox-xlsx`
+ * never loads exceljs — the same property the old `data.*` bridges had, kept
+ * for the same reason.
+ */
+/** One host module's exports: named async functions over plain data. */
+export type SandboxHostModuleImplementation = Readonly<Record<string, (...args: unknown[]) => Promise<unknown>>>;
+/**
+ * Load one host module's implementation, at most once per process.
+ *
+ * A miss is a programming error, not a guest-reachable path: the dispatcher
+ * only asks for ids the catalog resolved, and the catalog only resolves ids
+ * `SANDBOX_HOST_MODULES` lists.
+ */
+export declare function loadSandboxHostModule(hostId: string): Promise<SandboxHostModuleImplementation>;
+/** Ids this process can actually serve. Every id in the protocol table. */
+export declare function registeredSandboxHostModuleIds(): readonly string[];
+/**
+ * Ids declared in the protocol table with no implementation here, or the other
+ * way round. Always empty in a healthy build; the drift test asserts it.
+ */
+export declare function sandboxHostModuleDrift(): readonly string[];
+//# sourceMappingURL=registry.d.ts.map

package/dist/host-modules/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/host-modules/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,wEAAwE;AACxE,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CACpD,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CACzD,CAAC;AA8IF;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,+BAA+B,CAAC,CAa1C;AAED,2EAA2E;AAC3E,wBAAgB,8BAA8B,IAAI,SAAS,MAAM,EAAE,CAElE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,SAAS,MAAM,EAAE,CAW1D"}