@nodetool-ai/node-sdk 0.7.0-rc.23 → 0.8.2

package/dist/manifest-node-values.js

@@ -0,0 +1,195 @@
+/**
+ * Property values for manifest-driven node factories: atlascloud, fal, kie,
+ * replicate, together, topaz. Sibling of `classifyFields` in
+ * `field-classification.ts`, which the same factories share.
+ */
+import { mapPromptAssetsToInputs } from "@nodetool-ai/runtime";
+/**
+ * The default for a declared property whose manifest field carries none.
+ *
+ * Container types are matched by prefix: the manifests between them name
+ * hundreds of element types (`list[Image]`, `list[list[TrackPoint]]`), and the
+ * element type never changes what the container starts at.
+ */
+export function defaultForPropType(propType) {
+    switch (propType) {
+        case "bool":
+            return false;
+        case "int":
+        case "float":
+            return 0;
+        case "image":
+            return {
+                type: "image",
+                uri: "",
+                asset_id: null,
+                data: null,
+                metadata: null
+            };
+        case "audio":
+            return {
+                type: "audio",
+                uri: "",
+                asset_id: null,
+                data: null,
+                metadata: null
+            };
+        case "video":
+            return {
+                type: "video",
+                uri: "",
+                asset_id: null,
+                data: null,
+                metadata: null,
+                duration: null,
+                format: null
+            };
+        default:
+            if (propType.startsWith("list["))
+                return [];
+            if (propType.startsWith("dict["))
+                return null;
+            return "";
+    }
+}
+export function propertyOf(instance, name) {
+    // SAFETY: every declared property is registered from a manifest field, whose
+    // declared types are exactly the scalars, media refs, and lists or dicts of
+    // those that `NodeValue` names.
+    const properties = instance;
+    return properties[name];
+}
+/**
+ * The media kind a prop type names, or `null` when it names none.
+ * `list[image]` answers `"image"` — {@link isListAssetPropType} tells the two apart.
+ */
+export function assetKindOf(propType) {
+    switch (propType.toLowerCase()) {
+        case "image":
+        case "list[image]":
+            return "image";
+        case "video":
+        case "list[video]":
+            return "video";
+        case "audio":
+        case "list[audio]":
+            return "audio";
+        default:
+            return null;
+    }
+}
+/** True for `list[image]` / `list[video]` / `list[audio]`. */
+export function isListAssetPropType(propType) {
+    const lower = propType.toLowerCase();
+    return lower.startsWith("list[") && assetKindOf(lower) !== null;
+}
+/**
+ * Whether an enum's API argument must be sent as a number under `policy`.
+ * Exported because replicate also needs it at property-registration time, to
+ * register numeric options and a numeric default.
+ */
+export function manifestEnumIsNumeric(values, policy = "declared") {
+    if (!Array.isArray(values) || values.length === 0)
+        return false;
+    if (policy === "declared") {
+        // A numeric option equals its own numeric value; the string "1024" does
+        // not, and NaN never equals itself.
+        return values.every((v) => v === Number(v));
+    }
+    return values.every((v) => v !== "" && Number.isFinite(Number(v)));
+}
+/**
+ * Coerce a stored property value to the type a manifest-driven API expects.
+ *
+ * A non-numeric value in an `int`/`float` field answers `null` rather than
+ * `NaN`: the factories all strip `null` args before sending, and `NaN` survives
+ * that strip and reaches the provider as an invalid number.
+ *
+ * `list[...]` / `dict[...]` values pass through untouched — they are the user's
+ * own structure, not a scalar to reshape.
+ */
+export function coerceManifestScalar(value, propType, enumValues, enumPolicy = "declared") {
+    if (value === null || value === undefined)
+        return value;
+    const type = propType.toLowerCase();
+    if (type.startsWith("list[") || type.startsWith("dict["))
+        return value;
+    switch (type) {
+        case "int": {
+            const n = Number(value);
+            return Number.isFinite(n) ? Math.trunc(n) : null;
+        }
+        case "float": {
+            const n = Number(value);
+            return Number.isFinite(n) ? n : null;
+        }
+        case "bool": {
+            // The UI serializes a checkbox as the string "false" as readily as the
+            // boolean; `Boolean("false")` is true, which is how fal/kie/topaz sent
+            // an unchecked box as checked.
+            const text = String(value).trim().toLowerCase();
+            if (text === "false" || text === "" || text === "0")
+                return false;
+            return Boolean(value);
+        }
+        default:
+            return manifestEnumIsNumeric(enumValues, enumPolicy)
+                ? Number(value)
+                : String(value);
+    }
+}
+/**
+ * Answer `null` for a numeric `0` that the field's `min` forbids, so arg
+ * cleanup drops it.
+ *
+ * The provider codegens fill an optional number that has no schema default
+ * with `0`. Where the field's `min` is above zero (Flux 2 `width`/`height`,
+ * min 256, used only with `aspect_ratio=custom`), that placeholder can never
+ * be valid, and sending it makes the provider reject the whole request. A `0`
+ * inside the declared range is a real value and passes through.
+ */
+export function unsetZeroBelowMin(value, min, defaultValue) {
+    return value === 0 && defaultValue === 0 && min !== undefined && min > 0
+        ? null
+        : value;
+}
+/**
+ * Route `asset://` media mentioned inline in a node's text inputs onto its empty
+ * image/audio/video inputs, and strip the mentions from the text.
+ *
+ * `hasSource` is the caller's own "this ref already points at bytes" test —
+ * the providers disagree about whether an `asset_id`-only ref counts, so the
+ * decision stays with them.
+ */
+export async function promptAssetOverridesFor(instance, fields, hasSource, context) {
+    const textFields = [];
+    const assetFields = [];
+    for (const field of fields) {
+        if (field.parentField)
+            continue;
+        const kind = assetKindOf(field.propType);
+        if (kind) {
+            const list = isListAssetPropType(field.propType);
+            const value = propertyOf(instance, field.name);
+            assetFields.push({
+                name: field.name,
+                label: field.apiParamName ?? field.name,
+                kind,
+                list,
+                hasSource: list
+                    ? Array.isArray(value) && value.some(hasSource)
+                    : hasSource(value)
+            });
+        }
+        else if (field.propType.toLowerCase() === "str") {
+            textFields.push({
+                name: field.name,
+                value: String(propertyOf(instance, field.name) ?? "")
+            });
+        }
+    }
+    // SAFETY: the overrides are asset refs this call injected from `asset://`
+    // mentions, so they are node property values like the ones they replace.
+    return mapPromptAssetsToInputs(textFields, assetFields, context);
+}
+//# sourceMappingURL=manifest-node-values.js.map

package/dist/manifest-node-values.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-node-values.js","sourceRoot":"","sources":["../src/manifest-node-values.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,uBAAuB,EAGxB,MAAM,sBAAsB,CAAC;AAuC9B;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,KAAK,CAAC;QACf,KAAK,KAAK,CAAC;QACX,KAAK,OAAO;YACV,OAAO,CAAC,CAAC;QACX,KAAK,OAAO;YACV,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,GAAG,EAAE,EAAE;gBACP,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,IAAI;aACf,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,GAAG,EAAE,EAAE;gBACP,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,IAAI;aACf,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,GAAG,EAAE,EAAE;gBACP,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;aACb,CAAC;QACJ;YACE,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC5C,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC9C,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAKD,MAAM,UAAU,UAAU,CAAC,QAAkB,EAAE,IAAY;IACzD,6EAA6E;IAC7E,4EAA4E;IAC5E,gCAAgC;IAChC,MAAM,UAAU,GAAG,QAAkC,CAAC;IACtD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,QAAQ,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/B,KAAK,OAAO,CAAC;QACb,KAAK,aAAa;YAChB,OAAO,OAAO,CAAC;QACjB,KAAK,OAAO,CAAC;QACb,KAAK,aAAa;YAChB,OAAO,OAAO,CAAC;QACjB,KAAK,OAAO,CAAC;QACb,KAAK,aAAa;YAChB,OAAO,OAAO,CAAC;QACjB;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;AAClE,CAAC;AAgBD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAgD,EAChD,MAAM,GAAuB,UAAU;IAEvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1B,wEAAwE;QACxE,oCAAoC;QACpC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAgB,EAChB,QAAgB,EAChB,UAAyC,EACzC,UAAU,GAAuB,UAAU;IAE3C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnD,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvC,CAAC;QACD,KAAK,MAAM,EAAE,CAAC;YACZ,uEAAuE;YACvE,uEAAuE;YACvE,+BAA+B;YAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAChD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG;gBAAE,OAAO,KAAK,CAAC;YAClE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD;YACE,OAAO,qBAAqB,CAAC,UAAU,EAAE,UAAU,CAAC;gBAClD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAgB,EAChB,GAAuB,EACvB,YAAqB;IAErB,OAAO,KAAK,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC;QACtE,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAYD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAkB,EAClB,MAAsC,EACtC,SAAwC,EACxC,OAA4C;IAE5C,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,WAAW,GAA4B,EAAE,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,WAAW;YAAE,SAAS;QAChC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI;gBACvC,IAAI;gBACJ,IAAI;gBACJ,SAAS,EAAE,IAAI;oBACb,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC/C,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;aACrB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YAClD,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aACtD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,OAAO,uBAAuB,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAE9D,CAAC;AACJ,CAAC"}

package/dist/metadata.d.ts

@@ -1,3 +1,4 @@
+import type { InputMode, NodeEffect, OutputCorrelation, Platform } from "@nodetool-ai/protocol";
 export interface TypeMetadata {
     type: string;
     optional?: boolean;
@@ -30,24 +31,88 @@ export interface NodeMetadata {
     namespace: string;
     node_type: string;
     layout?: string;
+    /**
+     * Node body renderer key. "content_card" makes the frontend render a
+     * media/text-forward content card instead of the generic input/output body.
+     * Node authors opt in via the class's `body` static (TS) or `_body`/`body()`
+     * (Python). Absent or "default" → generic body.
+     */
+    body?: string;
     properties: PropertyMetadata[];
     outputs: OutputSlotMetadata[];
     recommended_models?: unknown[];
-    basic_fields?: string[];
+    inline_fields?: string[];
+    input_fields?: string[];
     required_settings?: string[];
     /**
      * Runtime packages this node depends on (e.g. "ffmpeg", "python", "ollama").
      * The frontend uses this to show install prompts before execution.
      */
     required_runtimes?: string[];
-    is_dynamic?: boolean;
+    supports_dynamic_inputs?: boolean;
+    /**
+     * Types a user may pick for a dynamic input slot on this node. Unset means
+     * the full type palette. See `BaseNode.allowedDynamicSlotTypes`.
+     */
+    allowed_dynamic_slot_types?: TypeMetadata[];
     is_streaming_input?: boolean;
     is_streaming_output?: boolean;
+    input_mode?: InputMode;
+    output_correlation?: Record<string, OutputCorrelation>;
     is_controlled?: boolean;
-    expose_as_tool?: boolean;
+    /** §7 — Zip/Cross nodes opt out of the incomparable-scope check. */
+    is_join_node?: boolean;
+    /**
+     * Trigger node: compiles to a `trigger_registrations` row on activation
+     * and enters via `emitTriggerEvent` when a run carries a trigger event.
+     */
+    is_trigger?: boolean;
+    /** Emit output_update even for connected handles (UI-monitor nodes). */
+    always_emit_output_updates?: boolean;
     supports_dynamic_outputs?: boolean;
     auto_save_asset?: boolean;
+    /**
+     * Opt-in: re-running the node with identical inputs is safe. Absent means
+     * unsafe, so the supervisor withholds `retry`. See `BaseNode.retrySafe`.
+     */
+    retry_safe?: boolean;
+    /** See `BaseNode.appendStaticInputs`. */
+    append_static_inputs?: string[];
+    /**
+     * Per-type cache lifetime for partial runs (seconds, or the `"forever"`
+     * sentinel — never `Infinity`, which is not JSON-safe). Only consulted for
+     * Computed nodes. Unset / `0` = never reuse. See `BaseNode.cacheTtl` and
+     * docs/superpowers/specs/2026-06-27-run-subgraph-caching.md §4.
+     */
+    cache_ttl?: number | "forever";
+    /**
+     * What running the node does to the world. Reactive runs (mini-app sliders,
+     * live previews) traverse "pure" and "read" only. Absent is treated as
+     * "external". See `BaseNode.effect`.
+     */
+    effect?: NodeEffect;
+    /**
+     * Names the output slot carrying the node's primary generation (persisted
+     * value + content-card preview). Absent falls back to the first output.
+     */
+    primary_output?: string;
     model_packs?: unknown[];
+    /**
+     * Deployment platforms this node supports. Absent or empty values are
+     * treated as ["node"] (most restrictive). See `@nodetool-ai/protocol`'s
+     * Platform type for the closed set.
+     */
+    platforms?: readonly Platform[];
+    /** When true, the node remains runnable but should be deprioritized in search. */
+    deprecated?: boolean;
+    /**
+     * When true, the node is registered and runnable but hidden from discovery
+     * UIs (palette, search) entirely — for internal nodes a user never adds by
+     * hand (e.g. agent-runner-inserted steps).
+     */
+    hidden?: boolean;
+    /** Preferred replacement node_type when deprecated is true. */
+    replaced_by?: string;
 }
 export interface PackageMetadata {
     name: string;
@@ -72,5 +137,12 @@ export interface PythonMetadataLoadResult {
     duplicates: string[];
     warnings: string[];
 }
+/**
+ * Python's json module emits bare `NaN`/`Infinity`/`-Infinity` tokens, which
+ * are not valid JSON. Replace them with `null` — but only outside string
+ * literals, so descriptions or defaults containing the words "NaN" or
+ * "Infinity" survive intact.
+ */
+export declare function sanitizePythonJson(raw: string): string;
 export declare function loadPythonPackageMetadata(options?: PythonMetadataLoadOptions): PythonMetadataLoadResult;
 //# sourceMappingURL=metadata.d.ts.map

package/dist/metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../src/metadata.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IAChC,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,2EAA2E;AAC3E,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,YAAY,GAAG,YAAY,CAKnE;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACnD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAE9B,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,mGAAmG;IACnG,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACvC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAmPD,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,yBAA8B,GACtC,wBAAwB,CA2C1B"}
+{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../src/metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,QAAQ,EACT,MAAM,uBAAuB,CAAC;AA6B/B,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IAChC,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,2EAA2E;AAC3E,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,YAAY,GAAG,YAAY,CAKnE;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACnD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAE9B,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;OAGG;IACH,0BAA0B,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACvD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,oEAAoE;IACpE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,wEAAwE;IACxE,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,yCAAyC;IACzC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;;;OAIG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IAChC,kFAAkF;IAClF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,mGAAmG;IACnG,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACvC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAiLD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAwCtD;AA4FD,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,yBAA8B,GACtC,wBAAwB,CA8C1B"}

package/dist/metadata.js

@@ -1,7 +1,14 @@
-import fs from "node:fs";
-import path from "node:path";
-import crypto from "node:crypto";
-import os from "node:os";
+import { IS_NODE, getNodeBuiltinSync } from "@nodetool-ai/config";
+import { isObjectLike, isString } from "./type-predicates.js";
+function asDefault(mod) {
+    if (!mod)
+        return undefined;
+    return mod.default ?? mod;
+}
+const fs = asDefault(getNodeBuiltinSync("node:fs"));
+const path = asDefault(getNodeBuiltinSync("node:path"));
+const crypto = asDefault(getNodeBuiltinSync("node:crypto"));
+const os = asDefault(getNodeBuiltinSync("node:os"));
 /** Ensure a raw type object from JSON always has type_args as an array. */
 export function normalizeTypeMetadata(t) {
     return {
@@ -12,22 +19,32 @@ export function normalizeTypeMetadata(t) {
 function isRecord(value) {
     return !!value && typeof value === "object" && !Array.isArray(value);
 }
+/** True if `dir` is a nodetool `package_metadata` directory. */
+function isMetadataDir(dir) {
+    const normalized = dir.split(path.sep).join("/");
+    // Stryker disable next-line LogicalOperator,MethodExpression: a "/src/nodetool/package_metadata" path also ends with "/nodetool/package_metadata", so the first check is redundant with the second — mutating it leaves detection unchanged (equivalent).
+    return normalized.endsWith("/src/nodetool/package_metadata") || normalized.endsWith("/nodetool/package_metadata");
+}
+/** Read the `.json` files in a `package_metadata` directory into `files`. */
+function scanMetadataDir(dir, files, warnings) {
+    try {
+        const metadataFiles = fs
+            .readdirSync(dir, { withFileTypes: true })
+            .filter((f) => f.isFile() && f.name.endsWith(".json"))
+            .map((f) => path.join(dir, f.name));
+        files.push(...metadataFiles);
+        // Stryker disable next-line BlockStatement,StringLiteral: a readdir failure on a directory we just matched is unreachable in tests; the warning text is diagnostic.
+    }
+    catch (error) {
+        warnings.push(`Failed to scan metadata dir ${dir}: ${String(error)}`);
+    }
+}
 function walkForMetadataFiles(root, maxDepth, files, warnings, depth = 0) {
-    if (depth > maxDepth)
+    const tooDeep = depth > maxDepth;
+    if (tooDeep)
         return;
-    const normalizedRoot = root.split(path.sep).join("/");
-    if (normalizedRoot.endsWith("/src/nodetool/package_metadata") ||
-        normalizedRoot.endsWith("/nodetool/package_metadata")) {
-        try {
-            const metadataFiles = fs
-                .readdirSync(root, { withFileTypes: true })
-                .filter((f) => f.isFile() && f.name.endsWith(".json"))
-                .map((f) => path.join(root, f.name));
-            files.push(...metadataFiles);
-        }
-        catch (error) {
-            warnings.push(`Failed to scan metadata dir ${root}: ${String(error)}`);
-        }
+    if (isMetadataDir(root)) {
+        scanMetadataDir(root, files, warnings);
         return;
     }
     let entries;
@@ -46,19 +63,9 @@ function walkForMetadataFiles(root, maxDepth, files, warnings, depth = 0) {
                 entry.name === "dist") {
                 continue;
             }
-            const normalized = fullPath.split(path.sep).join("/");
-            if (normalized.endsWith("/src/nodetool/package_metadata") ||
-                normalized.endsWith("/nodetool/package_metadata")) {
-                try {
-                    const metadataFiles = fs
-                        .readdirSync(fullPath, { withFileTypes: true })
-                        .filter((f) => f.isFile() && f.name.endsWith(".json"))
-                        .map((f) => path.join(fullPath, f.name));
-                    files.push(...metadataFiles);
-                }
-                catch (error) {
-                    warnings.push(`Failed to scan metadata dir ${fullPath}: ${String(error)}`);
-                }
+            // Stryker disable next-line ConditionalExpression,BlockStatement: redundant with the recursion below — a metadata subdir not matched (or not scanned) here is found when walkForMetadataFiles recurses into it and matches the top-level isMetadataDir check (equivalent).
+            if (isMetadataDir(fullPath)) {
+                scanMetadataDir(fullPath, files, warnings);
                 continue;
             }
             walkForMetadataFiles(fullPath, maxDepth, files, warnings, depth + 1);
@@ -69,37 +76,53 @@ function walkForMetadataFiles(root, maxDepth, files, warnings, depth = 0) {
 // Metadata cache — avoids re-reading and re-parsing JSON files on every startup
 // when the underlying metadata files haven't changed.
 // ---------------------------------------------------------------------------
-const CACHE_DIR = path.join(os.tmpdir(), "nodetool-metadata-cache");
+// Per-user cache dir — the shared system tmpdir is world-writable, so a
+// predictable path there would let another local user pre-seed poisoned
+// metadata or plant symlinks.
+// `IS_NODE` alone is not enough: Cloudflare Workers (`nodejs_compat`) set
+// `process.versions.node`, so IS_NODE is true, yet `importNodeBuiltin` returns
+// null there (workerd blocks the `new Function` dynamic import). Gate on the
+// builtins actually loading so this module-load const doesn't deref a null
+// `path`/`os` on the Workers isolate.
+const CACHE_DIR = IS_NODE && path && os
+    ? path.join(
+    // Stryker disable next-line ConditionalExpression,LogicalOperator: XDG_CACHE_HOME is unset in the test environment, so the homedir fallback always applies (equivalent).
+    process.env["XDG_CACHE_HOME"] || path.join(os.homedir(), ".cache"), "nodetool", "metadata-cache")
+    : // Stryker disable next-line StringLiteral: the non-Node branch is unreachable in the (Node) test environment, where IS_NODE is always true (dead branch).
+        "/tmp/nodetool-metadata-cache";
 const CACHE_VERSION = 1;
 /** Build a fingerprint from sorted file paths + their mtime/size. */
 function buildFingerprint(files) {
     const hash = crypto.createHash("sha256");
     for (const file of files) {
         hash.update(file);
+        // Stryker disable BlockStatement: the catch is unreachable for freshly-walked files (they exist); emptying it changes only an opaque cache-key input (equivalent).
         try {
             const stat = fs.statSync(file);
             hash.update(`|${stat.mtimeMs}|${stat.size}`);
         }
         catch {
+            // Stryker disable next-line StringLiteral: opaque, consistent cache-key input (equivalent).
             hash.update("|missing");
         }
+        // Stryker restore BlockStatement
     }
     return hash.digest("hex");
 }
 function getCachePath(roots) {
-    const key = crypto
-        .createHash("sha256")
-        .update(roots.join(":"))
-        .digest("hex")
-        .slice(0, 16);
+    // Stryker disable next-line MethodExpression,StringLiteral: the cache filename derives from an opaque hash of the roots; any consistent key maps a roots-set to a stable file, so these hashing details are equivalent.
+    const key = crypto.createHash("sha256").update(roots.join(":")).digest("hex").slice(0, 16);
     return path.join(CACHE_DIR, `metadata-${key}.json`);
 }
 function tryReadCache(cachePath, fingerprint) {
     try {
+        // Stryker disable next-line ConditionalExpression: a missing cache file makes the readFileSync below throw into the catch, which also returns null (equivalent).
         if (!fs.existsSync(cachePath))
             return null;
+        // Stryker disable next-line StringLiteral: Node decodes "" as utf-8, so the encoding argument is equivalent.
         const raw = fs.readFileSync(cachePath, "utf8");
         const entry = JSON.parse(raw);
+        // Stryker disable next-line ConditionalExpression: the cache-staleness guard is covered behaviourally by the cache round-trip test (a content change invalidates via fingerprint); the version vs fingerprint operands are not independently asserted.
         if (entry.version !== CACHE_VERSION || entry.fingerprint !== fingerprint)
             return null;
         return {
@@ -109,10 +132,12 @@ function tryReadCache(cachePath, fingerprint) {
             duplicates: entry.duplicates,
             warnings: entry.warnings
         };
+        // Stryker disable BlockStatement: emptying this catch makes tryReadCache fall through to `return undefined`, which the caller treats identically to null (equivalent).
     }
     catch {
         return null;
     }
+    // Stryker restore BlockStatement
 }
 function writeCache(cachePath, fingerprint, result) {
     try {
@@ -132,6 +157,54 @@ function writeCache(cachePath, fingerprint, result) {
         // Cache write failure is non-fatal
     }
 }
+/**
+ * Python's json module emits bare `NaN`/`Infinity`/`-Infinity` tokens, which
+ * are not valid JSON. Replace them with `null` — but only outside string
+ * literals, so descriptions or defaults containing the words "NaN" or
+ * "Infinity" survive intact.
+ */
+export function sanitizePythonJson(raw) {
+    let out = "";
+    let inString = false;
+    for (let i = 0; i < raw.length; i++) {
+        const ch = raw[i];
+        if (inString) {
+            out += ch;
+            if (ch === "\\") {
+                // Copy the escaped character verbatim so an escaped quote (\")
+                // doesn't terminate the string early.
+                out += raw[i + 1] ?? "";
+                i++;
+            }
+            else if (ch === '"') {
+                inString = false;
+            }
+            continue;
+        }
+        if (ch === '"') {
+            inString = true;
+            out += ch;
+            continue;
+        }
+        if (raw.startsWith("NaN", i)) {
+            out += "null";
+            i += 2;
+            continue;
+        }
+        if (raw.startsWith("-Infinity", i)) {
+            out += "null";
+            i += 8;
+            continue;
+        }
+        if (raw.startsWith("Infinity", i)) {
+            out += "null";
+            i += 7;
+            continue;
+        }
+        out += ch;
+    }
+    return out;
+}
 function parseMetadataFiles(files) {
     const packages = [];
     const nodesByType = new Map();
@@ -140,11 +213,15 @@ function parseMetadataFiles(files) {
     for (const file of files) {
         let parsed;
         try {
-            // Python's json module allows NaN/Infinity which are not valid JSON; replace them with null.
-            const raw = fs
-                .readFileSync(file, "utf8")
-                .replace(/\bNaN\b|-?Infinity\b/g, "null");
-            parsed = JSON.parse(raw);
+            const raw = fs.readFileSync(file, "utf8");
+            try {
+                parsed = JSON.parse(raw);
+            }
+            catch {
+                // Python's json module allows NaN/Infinity which are not valid JSON;
+                // retry with those tokens (outside string literals) nulled out.
+                parsed = JSON.parse(sanitizePythonJson(raw));
+            }
         }
         catch (error) {
             warnings.push(`Failed to parse JSON ${file}: ${String(error)}`);
@@ -159,15 +236,15 @@ function parseMetadataFiles(files) {
         const metaDir = path.dirname(file); // .../nodetool/package_metadata
         const sourceFolder = path.dirname(path.dirname(metaDir)); // strip /nodetool/package_metadata
         const pkg = {
-            name: typeof parsed.name === "string"
+            name: isString(parsed.name)
                 ? parsed.name
                 : path.basename(file, ".json"),
-            description: typeof parsed.description === "string" ? parsed.description : undefined,
-            version: typeof parsed.version === "string" ? parsed.version : undefined,
+            description: isString(parsed.description) ? parsed.description : undefined,
+            version: isString(parsed.version) ? parsed.version : undefined,
             authors: Array.isArray(parsed.authors)
                 ? parsed.authors
                 : undefined,
-            repo_id: typeof parsed.repo_id === "string" ? parsed.repo_id : undefined,
+            repo_id: isString(parsed.repo_id) ? parsed.repo_id : undefined,
             nodes: Array.isArray(parsed.nodes)
                 ? parsed.nodes
                 : undefined,
@@ -176,10 +253,12 @@ function parseMetadataFiles(files) {
             sourceFolder
         };
         packages.push(pkg);
+        // Stryker disable next-line ArrayDeclaration: a bogus seed node is a string, which the guard below skips (typeof "..." !== "object"), so the result is unchanged (equivalent).
         for (const node of pkg.nodes ?? []) {
             if (!node ||
-                typeof node !== "object" ||
-                typeof node.node_type !== "string") {
+                // Stryker disable next-line ConditionalExpression: a non-object truthy node has no string node_type, so the next check rejects it either way (equivalent).
+                !isObjectLike(node) ||
+                !isString(node.node_type)) {
                 continue;
             }
             if (nodesByType.has(node.node_type)) {
@@ -209,7 +288,9 @@ function parseMetadataFiles(files) {
     };
 }
 export function loadPythonPackageMetadata(options = {}) {
-    const roots = (options.roots && options.roots.length > 0 ? options.roots : [process.cwd()]).map((p) => path.resolve(p));
+    const roots = (
+    // Stryker disable next-line ConditionalExpression,LogicalOperator,EqualityOperator,ArrayDeclaration: the cwd fallback for an empty roots list is environment-dependent — a clean working tree yields no metadata, so [] and [process.cwd()] are indistinguishable in tests (equivalent).
+    options.roots && options.roots.length > 0 ? options.roots : [process.cwd()]).map((p) => path.resolve(p));
     const maxDepth = options.maxDepth ?? 8;
     const warnings = [];
     const fileSet = new Set();
@@ -231,12 +312,14 @@ export function loadPythonPackageMetadata(options = {}) {
     const cached = tryReadCache(cachePath, fingerprint);
     if (cached) {
         // Merge any walk warnings into the cached result
+        // Stryker disable next-line ConditionalExpression,EqualityOperator,BlockStatement: merging an empty warnings list is a no-op, so the > 0 guard is equivalent for the empty case; the populated case requires a cache hit *and* walk warnings simultaneously, which the cache round-trip test does not combine.
         if (warnings.length > 0) {
             cached.warnings = [...warnings, ...cached.warnings];
         }
         return cached;
     }
     const result = parseMetadataFiles(files);
+    // Stryker disable next-line ConditionalExpression,EqualityOperator: the populated path is covered by the walk-warnings test (a non-existent root is prepended to the parse warnings); merging an empty list is a no-op, so the >= 0 / always-true variants are equivalent.
     if (warnings.length > 0) {
         result.warnings = [...warnings, ...result.warnings];
     }