@nodetool-ai/runtime 0.8.8 → 0.8.9-beta.2

package/dist/providers/safe-url.js

@@ -1,285 +1,2 @@
-/**
- * SSRF guard for outbound fetches of caller-supplied URLs, and the one address
- * table every screening surface in the repo reads.
- *
- * Image/video providers (FAL, Replicate, …) return result URLs that the server
- * then `fetch`es to download the generated bytes. Those URLs originate from the
- * provider's response, so without validation a compromised or misbehaving
- * provider — or a response coerced via a crafted prompt — could point the
- * server at internal services (`http://169.254.169.254/...`,
- * `http://localhost:6379/...`, RFC1918 hosts, …). The same is true of a media
- * ref a workflow carries and of a URL a model hands a tool.
- *
- * Two things live here, and the split matters. {@link isBlockedIpLiteral} is
- * the **address table** — which literals are internal — shared with the sandbox
- * fetch bridge (`packages/agents/src/network-guard.ts`), which allows plain
- * http and an opt-in private mode that this module never does.
- * {@link isSafePublicHttpsUrl} is NodeTool's **default policy** on top of it:
- * https only, to an apparently-public host. A predicate is not a protected
- * fetch, though — only {@link safeFetch} validates every redirect hop, so an
- * operation that actually goes out calls that.
- *
- * The check is conservative: unparseable URLs, non-https schemes, and literal
- * IP addresses in loopback / link-local / RFC1918 / CGNAT / benchmarking ranges
- * (including IPv4-mapped IPv6 literals and IPv4 embedded in 6to4 / NAT64
- * transition addresses) are refused. Alternate IPv4 spellings — decimal, hex,
- * octal, short form — are normalized by the WHATWG URL parser before the table
- * sees them.
- *
- * **DNS rebinding is out of scope here, deliberately.** A public name that
- * resolves to a private address passes: this process does not control which
- * address `fetch` connects to, and pinning one would break TLS and virtual
- * hosting. Two answers exist and the inventory records which each surface uses
- * — `assertResolvedHostAllowed` (a resolve-and-check pass, for a URL handed to
- * a separate process that opens its own sockets), and the deployment's egress
- * control as the security boundary for everything in-process. See
- * `docs/url-egress-inventory.md`.
- */
-/**
- * Expand an IPv6 literal (already stripped of brackets, lower-cased) into its 8
- * 16-bit hextets, handling `::` compression and a trailing dotted-quad. Returns
- * `null` if `host` is not a well-formed IPv6 literal.
- */
-function expandIpv6(host) {
-    if (!host.includes(":"))
-        return null;
-    // Rewrite a trailing dotted-quad (`...:a.b.c.d`) into two hex hextets so the
-    // rest of the parse only deals with `:`-separated groups.
-    const body = host.replace(/((?:\d{1,3}\.){3}\d{1,3})$/, (m) => {
-        const oct = m.split(".").map((n) => parseInt(n, 10));
-        if (oct.some((n) => n > 255))
-            return "\0"; // sentinel → fails group parse
-        const hex = (n) => n.toString(16).padStart(2, "0");
-        return `${hex(oct[0])}${hex(oct[1])}:${hex(oct[2])}${hex(oct[3])}`;
-    });
-    const halves = body.split("::");
-    if (halves.length > 2)
-        return null;
-    const parseGroup = (s) => {
-        if (s === "")
-            return [];
-        const out = [];
-        for (const p of s.split(":")) {
-            if (!/^[0-9a-f]{1,4}$/.test(p))
-                return null;
-            out.push(parseInt(p, 16));
-        }
-        return out;
-    };
-    const head = parseGroup(halves[0]);
-    if (head === null)
-        return null;
-    let hextets;
-    if (halves.length === 2) {
-        const rest = parseGroup(halves[1]);
-        if (rest === null)
-            return null;
-        const middle = 8 - head.length - rest.length;
-        if (middle < 0)
-            return null;
-        hextets = [...head, ...new Array(middle).fill(0), ...rest];
-    }
-    else {
-        hextets = head;
-    }
-    if (hextets.length !== 8)
-        return null;
-    return hextets;
-}
-/**
- * True for IPv4 octet pairs in loopback / RFC1918 / link-local / CGNAT /
- * benchmarking ranges.
- */
-function isPrivateIpv4(a, b) {
-    // 0.0.0.0/8, 10.0.0.0/8, 127.0.0.0/8
-    if (a === 0 || a === 10 || a === 127)
-        return true;
-    // 169.254.0.0/16 (link-local, incl. the 169.254.169.254 metadata service)
-    if (a === 169 && b === 254)
-        return true;
-    // 172.16.0.0/12
-    if (a === 172 && b >= 16 && b <= 31)
-        return true;
-    // 192.168.0.0/16
-    if (a === 192 && b === 168)
-        return true;
-    // 100.64.0.0/10 (CGNAT)
-    if (a === 100 && b >= 64 && b <= 127)
-        return true;
-    // 198.18.0.0/15 (benchmarking)
-    if (a === 198 && (b === 18 || b === 19))
-        return true;
-    return false;
-}
-/**
- * True when `host` is a literal IPv4/IPv6 address in a loopback, link-local,
- * private, CGNAT or benchmarking range — including the IPv6 spellings that
- * carry an IPv4 inside them (IPv4-mapped, IPv4-compatible, 6to4, NAT64).
- *
- * This is the address table, not a policy: it says nothing about schemes,
- * hostnames or redirects, and a caller that allows private networks on purpose
- * (the sandbox fetch bridge under `allowPrivateNetwork`) skips it rather than
- * reimplementing it. A hostname that is not a literal is not this function's
- * question — it answers `false`, and what the name *resolves* to is decided by
- * the surface's DNS-rebinding policy (see the module comment).
- */
-export function isBlockedIpLiteral(host) {
-    // Strip IPv6 brackets and any zone id (`fe80::1%eth0`), lower-case for the
-    // hex comparisons.
-    const h = host
-        .replace(/^\[|\]$/g, "")
-        .split("%")[0]
-        .toLowerCase();
-    // IPv4 in dotted form, standalone or as an IPv6 tail (`::ffff:127.0.0.1`).
-    const dotted = h.match(/(?:^|:)((?:\d{1,3}\.){3}\d{1,3})$/);
-    if (dotted) {
-        const [a, b] = dotted[1].split(".").map((n) => parseInt(n, 10));
-        return isPrivateIpv4(a, b);
-    }
-    if (!h.includes(":"))
-        return false;
-    if (h === "::" || h === "::1")
-        return true; // unspecified / loopback
-    if (h.startsWith("fc") || h.startsWith("fd"))
-        return true; // ULA fc00::/7
-    // link-local fe80::/10 — the first hextet spans fe80–febf, so the first three
-    // hex digits are fe8/fe9/fea/feb; "fe80" alone is too narrow.
-    if (/^fe[89ab]/.test(h))
-        return true;
-    // IPv4 embedded in a hex-serialized IPv6 literal. The WHATWG parser rewrites
-    // `::ffff:127.0.0.1` to `::ffff:7f00:1`, which the dotted regex above no
-    // longer matches, and the transition prefixes hide an IPv4 in the same way:
-    // IPv4-mapped/-compatible and NAT64 (64:ff9b::/96) in the low 32 bits, 6to4
-    // (2002:WWXX:YYZZ::/16) in the second and third hextets.
-    const hextets = expandIpv6(h);
-    if (!hextets)
-        return false;
-    const isZero = (from, to) => hextets.slice(from, to).every((n) => n === 0);
-    let embedded = null;
-    if (hextets[0] === 0x2002) {
-        embedded = hextets[1];
-    }
-    else if (isZero(0, 5) && hextets[5] === 0xffff) {
-        embedded = hextets[6]; // ::ffff:a.b.c.d
-    }
-    else if (isZero(0, 6)) {
-        embedded = hextets[6]; // ::a.b.c.d (IPv4-compatible, deprecated)
-    }
-    else if (hextets[0] === 0x64 && hextets[1] === 0xff9b && isZero(2, 6)) {
-        embedded = hextets[6]; // 64:ff9b::/96
-    }
-    if (embedded === null)
-        return false;
-    return isPrivateIpv4((embedded >> 8) & 0xff, embedded & 0xff);
-}
-/**
- * Return `true` when `url` is an https URL whose host is not a loopback,
- * link-local, or RFC1918 private address. NodeTool's default egress policy.
- */
-export function isSafePublicHttpsUrl(url) {
-    let parsed;
-    try {
-        parsed = new URL(url);
-    }
-    catch {
-        return false;
-    }
-    if (parsed.protocol !== "https:") {
-        return false;
-    }
-    // Normalise: strip IPv6 brackets (WHATWG URL may include them depending on
-    // the runtime) and any trailing dot (`localhost.` resolves the same as
-    // `localhost` but would dodge the exact/suffix checks below). The dots are
-    // trimmed with a loop: `/\.+$/` backtracks quadratically on a long dot run.
-    const bare = parsed.hostname.toLowerCase().replace(/^\[|\]$/g, "");
-    let end = bare.length;
-    while (end > 0 && bare[end - 1] === ".")
-        end -= 1;
-    const host = bare.slice(0, end);
-    if (!host)
-        return false;
-    if (host === "localhost" ||
-        host === "ip6-localhost" ||
-        host === "ip6-loopback" ||
-        host.endsWith(".localhost") ||
-        host.endsWith(".local") ||
-        host.endsWith(".internal")) {
-        return false;
-    }
-    return !isBlockedIpLiteral(host);
-}
-/**
- * Throw if `url` is not a safe public https URL (see {@link isSafePublicHttpsUrl}).
- * Use before `fetch`ing any provider-supplied download URL.
- */
-export function assertSafePublicHttpsUrl(url) {
-    if (!isSafePublicHttpsUrl(url)) {
-        throw new Error(`Refusing to fetch unsafe URL (must be https to a public host): ${url}`);
-    }
-}
-/** Request headers that must not cross an origin boundary on a redirect. */
-const CROSS_ORIGIN_SENSITIVE_HEADERS = [
-    "authorization",
-    "cookie",
-    "proxy-authorization",
-    "x-goog-api-key"
-];
-/**
- * Return a copy of `init` with credentials and body stripped, for replay
- * against a different origin. Mirrors browser behaviour: a cross-origin
- * redirect must not forward `Authorization`/`Cookie` headers or the request
- * body, both of which may carry secrets meant only for the original host.
- */
-function stripCrossOriginCredentials(init) {
-    const headers = new Headers(init.headers ?? undefined);
-    for (const name of CROSS_ORIGIN_SENSITIVE_HEADERS)
-        headers.delete(name);
-    const next = { ...init, headers };
-    delete next.body;
-    return next;
-}
-/**
- * `fetch` a provider-supplied URL with SSRF protection. The initial URL and
- * every redirect hop are validated with {@link assertSafePublicHttpsUrl}, so a
- * public host cannot redirect into an internal/loopback target or downgrade to
- * http. Redirects are followed manually up to `maxRedirects`. When a redirect
- * crosses to a different origin, auth headers and the request body are stripped
- * so they are never leaked to the redirect target.
- */
-export async function safeFetch(url, init, maxRedirects = 5, 
-// The underlying fetch implementation. Defaults to the global fetch; callers
-// that inject a fetch (e.g. providers with a testable `fetchFn`) can pass it
-// here so the SSRF URL validation still runs on every hop while the actual
-// request goes through their implementation.
-fetchImpl = fetch) {
-    let current = url;
-    let currentInit = { ...init };
-    let currentOrigin = new URL(url).origin;
-    for (let hop = 0; hop <= maxRedirects; hop++) {
-        assertSafePublicHttpsUrl(current);
-        const res = await fetchImpl(current, { ...currentInit, redirect: "manual" });
-        // A real Response always has headers; tolerate minimal fetch mocks/polyfills
-        // that omit them (treated as no redirect).
-        const location = res.headers?.get?.("location") ?? null;
-        if (res.status >= 300 && res.status < 400 && location) {
-            const method = (currentInit.method ?? "GET").toUpperCase();
-            if (((res.status === 301 || res.status === 302) && method === "POST") ||
-                (res.status === 303 && method !== "GET" && method !== "HEAD")) {
-                const headers = new Headers(currentInit.headers);
-                for (const name of ["content-encoding", "content-language", "content-location", "content-type", "content-length"])
-                    headers.delete(name);
-                currentInit = { ...currentInit, method: "GET", body: undefined, headers };
-            }
-            const next = new URL(location, current);
-            if (next.origin !== currentOrigin) {
-                currentInit = stripCrossOriginCredentials(currentInit);
-            }
-            current = next.toString();
-            currentOrigin = next.origin;
-            continue;
-        }
-        return res;
-    }
-    throw new Error(`Too many redirects while fetching: ${url}`);
-}
+export { isBlockedIpLiteral, isSafePublicHttpsUrl, assertSafePublicHttpsUrl, safeFetch } from "@nodetool-ai/runtime-core/safe-url";
 //# sourceMappingURL=safe-url.js.map

package/dist/providers/safe-url.js.map

@@ -1 +1 @@
-{"version":3,"file":"safe-url.js","sourceRoot":"","sources":["../../src/providers/safe-url.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,4BAA4B,EAAE,CAAC,CAAC,EAAE,EAAE;QAC5D,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACrD,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,+BAA+B;QAC1E,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3D,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,UAAU,GAAG,CAAC,CAAS,EAAmB,EAAE;QAChD,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QACxB,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,OAAiB,CAAC;IACtB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC7C,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5B,OAAO,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,CAAS,EAAE,CAAS;IACzC,qCAAqC;IACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAClD,0EAA0E;IAC1E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACxC,gBAAgB;IAChB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACjD,iBAAiB;IACjB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACxC,wBAAwB;IACxB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IAClD,+BAA+B;IAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,2EAA2E;IAC3E,mBAAmB;IACnB,MAAM,CAAC,GAAG,IAAI;SACX,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACb,WAAW,EAAE,CAAC;IACjB,2EAA2E;IAC3E,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC5D,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC,CAAC,yBAAyB;IACrE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,eAAe;IAC1E,8EAA8E;IAC9E,8DAA8D;IAC9D,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,6EAA6E;IAC7E,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAU,EAAW,EAAE,CACnD,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC1B,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;SAAM,IAAI,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACjD,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB;IAC1C,CAAC;SAAM,IAAI,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACxB,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,0CAA0C;IACnE,CAAC;SAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACxE,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe;IACxC,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,aAAa,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACnE,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,GAAG,IAAI,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IACE,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,eAAe;QACxB,IAAI,KAAK,cAAc;QACvB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC1B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,kEAAkE,GAAG,EAAE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,8BAA8B,GAAG;IACrC,eAAe;IACf,QAAQ;IACR,qBAAqB;IACrB,gBAAgB;CACjB,CAAC;AAEF;;;;;GAKG;AACH,SAAS,2BAA2B,CAAC,IAAiB;IACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,8BAA8B;QAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,IAAI,GAAgB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAW,EACX,IAAkB,EAClB,YAAY,GAAG,CAAC;AAChB,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,6CAA6C;AAC7C,SAAS,GAAiB,KAAK;IAE/B,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,IAAI,WAAW,GAAgB,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3C,IAAI,aAAa,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,YAAY,EAAE,GAAG,EAAE,EAAE,CAAC;QAC7C,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7E,6EAA6E;QAC7E,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;QACxD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAC3D,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,MAAM,KAAK,MAAM,CAAC;gBACjE,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;gBAClE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBACjD,KAAK,MAAM,IAAI,IAAI,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,cAAc,EAAE,gBAAgB,CAAC;oBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACxI,WAAW,GAAG,EAAE,GAAG,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;YAC5E,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;gBAClC,WAAW,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;AAC/D,CAAC"}
+{"version":3,"file":"safe-url.js","sourceRoot":"","sources":["../../src/providers/safe-url.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,SAAS,EACV,MAAM,oCAAoC,CAAC"}

package/dist/providers/topaz-provider.d.ts

@@ -5,7 +5,7 @@
  * Settings → API Keys.
  *
  * Video enhancement is handled by the `@nodetool-ai/topaz-nodes`
- * `topaz.video.EnhanceVideo` node (it needs local ffprobe metadata probing and
+ * `topaz.video.EnhanceVideo` node (it needs local metadata probing and
  * a multi-step upload pipeline), so it is intentionally not duplicated here.
  *
  * Topaz authenticates with the `X-API-Key` header. Image model definitions are

package/dist/providers/topaz-provider.js

@@ -5,7 +5,7 @@
  * Settings → API Keys.
  *
  * Video enhancement is handled by the `@nodetool-ai/topaz-nodes`
- * `topaz.video.EnhanceVideo` node (it needs local ffprobe metadata probing and
+ * `topaz.video.EnhanceVideo` node (it needs local metadata probing and
  * a multi-step upload pipeline), so it is intentionally not duplicated here.
  *
  * Topaz authenticates with the `X-API-Key` header. Image model definitions are

package/dist/providers/video-frame-fallback.d.ts

@@ -4,7 +4,7 @@
  * Most chat APIs are OpenAI-compatible and have nowhere to put a clip, so a
  * `video` part reaching them used to be a hard refusal — even when the model
  * behind the endpoint reads images perfectly well. This samples the clip into
- * stills with ffmpeg and puts them on the message as ordinary image parts,
+ * stills in process and puts them on the message as ordinary image parts,
  * labelled with their timestamps so the model can reason about order and
  * timing.
  *

package/dist/providers/video-frame-fallback.js

@@ -4,7 +4,7 @@
  * Most chat APIs are OpenAI-compatible and have nowhere to put a clip, so a
  * `video` part reaching them used to be a hard refusal — even when the model
  * behind the endpoint reads images perfectly well. This samples the clip into
- * stills with ffmpeg and puts them on the message as ordinary image parts,
+ * stills in process and puts them on the message as ordinary image parts,
  * labelled with their timestamps so the model can reason about order and
  * timing.
  *
@@ -42,7 +42,7 @@ function parseDataUri(uri) {
 }
 /**
  * Source a video part's bytes: inline data first, then its URI. The container
- * type is not read off the ref — ffmpeg sniffs it from the file itself, which
+ * type is not read off the ref — libav sniffs it from the file itself, which
  * is right more often than a `mimeType` the caller guessed.
  */
 async function videoContentBytes(video, options) {
@@ -134,9 +134,9 @@ export async function expandVideoContentAsFrames(messages, options = {}) {
                 signal: options.signal
             });
             if (sample.frames.length === 0) {
-                throw new Error(`ffmpeg decoded no frames from the attached video, so ` +
+                throw new Error(`No frames could be decoded from the attached video, so ` +
                     `${options.provider ?? "this provider"} has nothing to read. The ` +
-                    `file may not be a video, or may use a codec this ffmpeg build ` +
+                    `file may not be a video, or may use a codec this build ` +
                     `does not decode.`);
             }
             log.debug("Sampled a video into frames", {

package/dist/providers/video-frame-fallback.js.map

@@ -1 +1 @@
-{"version":3,"file":"video-frame-fallback.js","sourceRoot":"","sources":["../../src/providers/video-frame-fallback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAyB,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,GAAG,GAAG,YAAY,CAAC,+BAA+B,CAAC,CAAC;AAU1D;;;;GAIG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,+BAA+B,CAAC,CAAC;IACvE,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO,CAAC;AACxC,CAAC;AAED,0DAA0D;AAC1D,SAAS,oBAAoB,CAAC,QAA4B;IACxD,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,sCAAsC;AACtC,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACnD,OAAO,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,KAAmC,EACnC,OAAkC;IAElC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YACnC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1B,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,YAAY,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,OAAO,IAAI,UAAU,EAAE,CAAC;IAExC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QAC5C,CAAC,CAAC,KAAK,CAAC,GAAG;QACX,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAEhE,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,QAAQ,EACR,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,EAAE,MAAM,GAAG,CAAC;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,MAAwB;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACnC,MAAM,QAAQ,GACZ,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,IAAI,GACR,MAAM,CAAC,GAAG,IAAI,CAAC;QACb,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,gBAAgB;QACzC,CAAC,CAAC,mBAAmB,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC;IACrD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS;QAC1B,CAAC,CAAC,4EAA4E;QAC9E,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,CACL,kBAAkB,KAAK,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ;QACpE,kBAAkB,QAAQ,YAAY,IAAI,+BAA+B;QACzE,gDAAgD,GAAG,GAAG,CACvD,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,SAAS,aAAa,CAAC,MAAwB;IAC7C,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,SAAS,KAAK,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI;SACxD,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE;gBACL,GAAG,EAAE,QAAQ,KAAK,CAAC,QAAQ,WAAW,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBAClF,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAAmB,EACnB,OAAO,GAA8B,EAAE;IAEvC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAErD,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;YAC/B,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAChD,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAClC,IAA4B,CAAC,KAAK,EACnC,OAAO,CACR,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,yDAAyD;iBAChE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE;gBAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,uDAAuD;oBACrD,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,4BAA4B;oBAClE,gEAAgE;oBAChE,kBAAkB,CACrB,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;gBAC5B,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5D,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"video-frame-fallback.js","sourceRoot":"","sources":["../../src/providers/video-frame-fallback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAyB,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,GAAG,GAAG,YAAY,CAAC,+BAA+B,CAAC,CAAC;AAU1D;;;;GAIG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,+BAA+B,CAAC,CAAC;IACvE,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO,CAAC;AACxC,CAAC;AAED,0DAA0D;AAC1D,SAAS,oBAAoB,CAAC,QAA4B;IACxD,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,sCAAsC;AACtC,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACnD,OAAO,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,KAAmC,EACnC,OAAkC;IAElC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YACnC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1B,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,YAAY,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,OAAO,IAAI,UAAU,EAAE,CAAC;IAExC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QAC5C,CAAC,CAAC,KAAK,CAAC,GAAG;QACX,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAEhE,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,QAAQ,EACR,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,EAAE,MAAM,GAAG,CAAC;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,MAAwB;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACnC,MAAM,QAAQ,GACZ,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,IAAI,GACR,MAAM,CAAC,GAAG,IAAI,CAAC;QACb,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,gBAAgB;QACzC,CAAC,CAAC,mBAAmB,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC;IACrD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS;QAC1B,CAAC,CAAC,4EAA4E;QAC9E,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,CACL,kBAAkB,KAAK,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ;QACpE,kBAAkB,QAAQ,YAAY,IAAI,+BAA+B;QACzE,gDAAgD,GAAG,GAAG,CACvD,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,SAAS,aAAa,CAAC,MAAwB;IAC7C,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,SAAS,KAAK,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI;SACxD,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE;gBACL,GAAG,EAAE,QAAQ,KAAK,CAAC,QAAQ,WAAW,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBAClF,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAAmB,EACnB,OAAO,GAA8B,EAAE;IAEvC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAErD,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;YAC/B,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAChD,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAClC,IAA4B,CAAC,KAAK,EACnC,OAAO,CACR,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,yDAAyD;iBAChE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE;gBAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,yDAAyD;oBACvD,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,4BAA4B;oBAClE,yDAAyD;oBACzD,kBAAkB,CACrB,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;gBAC5B,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5D,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/providers/video-frames.d.ts

@@ -1,15 +1,10 @@
 /**
- * Sample a video into still frames with ffmpeg.
+ * Sample a video into still frames, decoded in process.
  *
  * This is what lets a vision model that cannot read a clip still answer
  * questions about one: the bytes are decoded here, a bounded number of frames
  * come back as JPEGs, and the caller sends them as ordinary image content.
- *
- * The argv is ours, not a model's — the only input path is a temp file this
- * module wrote — so the containment `packages/agents/src/host-binary-guard.ts`
- * applies to a model-supplied argv is not needed. `-protocol_whitelist file`
- * and `-nostdin` still go in: an mp4 can name an external opener, and a child
- * that inherits the server's stdin outlives the call.
+ * The only input is a temp file this module wrote.
  */
 /** A single sampled frame, JPEG-encoded. */
 export type SampledFrame = {
@@ -20,13 +15,13 @@ export type SampledFrame = {
 };
 export type VideoFrameSample = {
     frames: SampledFrame[];
-    /** Clip length from ffprobe, or null when the probe did not answer. */
+    /** Clip length from the probe, or null when the probe did not answer. */
     durationSec: number | null;
-    /** Frames per second actually requested of ffmpeg. */
+    /** Frames per second the clip was sampled at. */
     fps: number;
     /**
      * True when the frame cap stopped the sample before the end of the clip.
-     * Only reachable with an unknown duration: once ffprobe answers, the rate is
+     * Only reachable with an unknown duration: once the probe answers, the rate is
      * chosen to fit the budget across the whole clip and the cap never bites.
      */
     truncated: boolean;
@@ -40,11 +35,6 @@ export type SampleVideoFramesOptions = {
     maxDimension?: number;
     signal?: AbortSignal;
 };
-/** ffmpeg or ffprobe is not installed. Names the binary and the way out. */
-export declare class FrameSamplingUnavailableError extends Error {
-    readonly binary: string;
-    constructor(binary: string);
-}
 /** Read a video duration from its bytes without decoding frames. */
 export declare function probeVideoDurationSeconds(bytes: Uint8Array, signal: AbortSignal): Promise<number | null>;
 /**
@@ -55,7 +45,7 @@ export declare function probeVideoDurationSeconds(bytes: Uint8Array, signal: Abo
 export declare function frameRateFor(durationSec: number | null, maxFrames: number, maxFps: number): number;
 /**
  * Decode `bytes` and return up to `maxFrames` JPEG stills spread across the
- * clip. Throws {@link FrameSamplingUnavailableError} when ffmpeg is absent.
+ * clip.
  */
 export declare function sampleVideoFrames(bytes: Uint8Array, options?: SampleVideoFramesOptions): Promise<VideoFrameSample>;
 //# sourceMappingURL=video-frames.d.ts.map

package/dist/providers/video-frames.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"video-frames.d.ts","sourceRoot":"","sources":["../../src/providers/video-frames.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,4CAA4C;AAC5C,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,uEAAuE;IACvE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,4EAA4E;AAC5E,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,YAAY,MAAM,EAAE,MAAM,EASzB;CACF;AAwHD,oEAAoE;AACpE,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuBxB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,MAAM,CAMR;AAYD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,gBAAgB,CAAC,CA4D3B"}
+{"version":3,"file":"video-frames.d.ts","sourceRoot":"","sources":["../../src/providers/video-frames.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,4CAA4C;AAC5C,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,yEAAyE;IACzE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AA6CF,oEAAoE;AACpE,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBxB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,MAAM,CAMR;AAYD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,gBAAgB,CAAC,CAsD3B"}