@nodetool-ai/websocket 0.7.0-rc.23 → 0.8.2

package/dist/lib/localhost-trust.js

@@ -0,0 +1,139 @@
+/**
+ * Helpers for deciding whether a connection may bypass authentication because
+ * it originates from the local host.
+ *
+ * The naive "trust anything from 127.0.0.1/::1" rule is dangerous behind a
+ * reverse proxy, container network, or SSH tunnel: in those topologies the
+ * proxy itself connects from loopback, so a blanket localhost bypass silently
+ * disables auth in exactly the deployment where it is needed. These helpers
+ * make the trust explicit and opt-in, and keep X-Forwarded-For parsing scoped
+ * to a configured set of proxies.
+ */
+/**
+ * Parse a boolean-ish environment variable.
+ *
+ * Returns `undefined` when the variable is unset, empty, or unrecognized so the
+ * caller can apply its own default.
+ */
+export function parseBoolEnv(value) {
+    if (value == null)
+        return undefined;
+    const v = value.trim().toLowerCase();
+    if (v === "")
+        return undefined;
+    if (v === "1" || v === "true" || v === "yes" || v === "on")
+        return true;
+    if (v === "0" || v === "false" || v === "no" || v === "off")
+        return false;
+    return undefined;
+}
+/** True when `ip` is an IPv4 or IPv6 loopback address. */
+export function isLoopbackAddress(ip) {
+    if (!ip)
+        return false;
+    const addr = ip.trim().toLowerCase();
+    return (addr === "::1" ||
+        addr === "::ffff:127.0.0.1" ||
+        // Whole 127.0.0.0/8 block is loopback.
+        addr.startsWith("127.") ||
+        addr.startsWith("::ffff:127."));
+}
+/**
+ * Resolve whether loopback connections should bypass authentication.
+ *
+ * - An explicit `NODETOOL_TRUST_LOCALHOST` value (true/false) always wins.
+ * - Otherwise the bypass defaults OFF whenever auth is enforced — so a
+ *   reverse-proxied/containerized deployment doesn't silently accept every
+ *   request — and ON when auth is not enforced (local desktop/dev).
+ */
+export function resolveTrustLocalhost(opts) {
+    const explicit = parseBoolEnv(opts.envValue);
+    if (explicit !== undefined)
+        return explicit;
+    return !opts.enforceAuth;
+}
+/**
+ * Parse `NODETOOL_TRUSTED_PROXIES` into a list of IPs/CIDRs suitable for
+ * Fastify's `trustProxy` option. Empty input means no proxy is trusted, so
+ * X-Forwarded-For is ignored and the socket peer address is used instead.
+ */
+export function parseTrustedProxies(value) {
+    if (!value)
+        return [];
+    return value
+        .split(",")
+        .map((s) => s.trim())
+        .filter(Boolean);
+}
+/**
+ * Parse `NODETOOL_TRUST_LOCAL_NETWORKS` into a list of source CIDRs whose
+ * connections are trusted to run as the local user in Local mode without a
+ * token. Same comma-separated shape as {@link parseTrustedProxies}.
+ *
+ * This exists because Docker (and other NAT topologies) rewrite the source of a
+ * published-port connection to the bridge gateway (e.g. 172.17.0.1), so the
+ * request never arrives from loopback and the {@link isLoopbackAddress} bypass
+ * can't fire. Trusting the bridge range restores the "single local user" model
+ * for containerized self-hosting.
+ */
+export function parseTrustedLocalNetworks(value) {
+    return parseTrustedProxies(value);
+}
+/** Parse a dotted-quad IPv4 string to a 32-bit integer, or null if malformed. */
+function ipv4ToInt(ip) {
+    if (!ip)
+        return null;
+    const m = ip.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+    if (!m)
+        return null;
+    const parts = m.slice(1).map((n) => Number(n));
+    if (parts.some((p) => p > 255))
+        return null;
+    return ((parts[0] * 2 ** 24 + parts[1] * 2 ** 16 + parts[2] * 2 ** 8 + parts[3]) >>>
+        0);
+}
+/**
+ * Reduce an address to its dotted-quad IPv4 form when possible, unwrapping the
+ * IPv4-mapped IPv6 form Node often reports for bridged connections
+ * (`::ffff:172.17.0.1` → `172.17.0.1`). Returns null for genuine IPv6.
+ */
+function toIpv4(ip) {
+    const addr = ip.trim().toLowerCase();
+    const mapped = addr.startsWith("::ffff:") ? addr.slice(7) : addr;
+    return /^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(mapped) ? mapped : null;
+}
+/**
+ * Whether `ip` falls inside `cidr`. Supports IPv4 CIDRs (and IPv4-mapped IPv6
+ * peers), a bare IP as a /32, and the `0.0.0.0/0` / `::/0` wildcards that match
+ * everything. Genuine IPv6 is matched only by exact (normalized) equality.
+ */
+export function isIpInCidr(ip, cidr) {
+    if (!ip)
+        return false;
+    const c = cidr.trim().toLowerCase();
+    if (!c)
+        return false;
+    if (c === "0.0.0.0/0" || c === "::/0")
+        return true;
+    const slash = c.indexOf("/");
+    const range = slash === -1 ? c : c.slice(0, slash);
+    const prefixStr = slash === -1 ? null : c.slice(slash + 1);
+    const ipInt = ipv4ToInt(toIpv4(ip));
+    const rangeInt = ipv4ToInt(toIpv4(range));
+    if (ipInt !== null && rangeInt !== null) {
+        if (prefixStr === "")
+            return false;
+        const prefix = prefixStr === null ? 32 : Number(prefixStr);
+        if (!Number.isInteger(prefix) || prefix < 0 || prefix > 32)
+            return false;
+        const mask = prefix === 0 ? 0 : (0xffffffff << (32 - prefix)) >>> 0;
+        return ((ipInt ^ rangeInt) & mask) === 0;
+    }
+    // Not an IPv4 CIDR — fall back to exact IPv6 match (prefix ignored).
+    return ip.trim().toLowerCase() === range;
+}
+/** True when `ip` matches any of the trusted source `networks` (CIDRs/IPs). */
+export function isTrustedLocalAddress(ip, networks) {
+    return networks.some((cidr) => isIpInCidr(ip, cidr));
+}
+//# sourceMappingURL=localhost-trust.js.map

package/dist/lib/localhost-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localhost-trust.js","sourceRoot":"","sources":["../../src/lib/localhost-trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAyB;IACpD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC1E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB,CAAC,EAA6B;IAC7D,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,CACL,IAAI,KAAK,KAAK;QACd,IAAI,KAAK,kBAAkB;QAC3B,uCAAuC;QACvC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAGrC;IACC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAyB;IACjE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,iFAAiF;AACjF,SAAS,SAAS,CAAC,EAAiB;IAClC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACnE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,CACL,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CAAC,EAAU;IACxB,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,OAAO,sCAAsC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,EAA6B,EAAE,IAAY;IACpE,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAEnD,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAE3D,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACxC,IAAI,SAAS,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;QACzE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,qEAAqE;IACrE,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AAC3C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CACnC,EAA6B,EAC7B,QAAkB;IAElB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/lib/mcp-mount.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Whether this server offers `/mcp`, and where.
+ *
+ * The mount's production gate is read in two places — `server.ts` registers
+ * the route by it, and the agent-access router reports it to the settings UI
+ * — so it lives here rather than as the same expression written twice. A UI
+ * that says "connected" over a route that was never registered is worse than
+ * no UI.
+ */
+/**
+ * The `/mcp` streamable-HTTP mount carries the full agent toolbelt, so it is
+ * off in production unless the operator opts in.
+ */
+export declare function isMcpHttpEnabled(env?: NodeJS.ProcessEnv): boolean;
+/** The env var that turns the mount on, named so the UI and the boot log agree. */
+export declare const MCP_ENABLE_FLAG = "NODETOOL_ENABLE_MCP";
+/**
+ * The absolute `/mcp` URL, when the operator configured a public address.
+ *
+ * Null otherwise — the server behind a proxy cannot know the address a
+ * browser reached it at, so the client falls back to its own origin, which is
+ * by construction an address that works.
+ */
+export declare function configuredMcpUrl(env?: NodeJS.ProcessEnv): string | null;
+//# sourceMappingURL=mcp-mount.d.ts.map

package/dist/lib/mcp-mount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-mount.d.ts","sourceRoot":"","sources":["../../src/lib/mcp-mount.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAE9E;AAED,mFAAmF;AACnF,eAAO,MAAM,eAAe,wBAAwB,CAAC;AAErD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,IAAI,CAIf"}

package/dist/lib/mcp-mount.js

@@ -0,0 +1,32 @@
+/**
+ * Whether this server offers `/mcp`, and where.
+ *
+ * The mount's production gate is read in two places — `server.ts` registers
+ * the route by it, and the agent-access router reports it to the settings UI
+ * — so it lives here rather than as the same expression written twice. A UI
+ * that says "connected" over a route that was never registered is worse than
+ * no UI.
+ */
+/**
+ * The `/mcp` streamable-HTTP mount carries the full agent toolbelt, so it is
+ * off in production unless the operator opts in.
+ */
+export function isMcpHttpEnabled(env = process.env) {
+    return env["NODETOOL_ENV"] !== "production" || env["NODETOOL_ENABLE_MCP"] === "1";
+}
+/** The env var that turns the mount on, named so the UI and the boot log agree. */
+export const MCP_ENABLE_FLAG = "NODETOOL_ENABLE_MCP";
+/**
+ * The absolute `/mcp` URL, when the operator configured a public address.
+ *
+ * Null otherwise — the server behind a proxy cannot know the address a
+ * browser reached it at, so the client falls back to its own origin, which is
+ * by construction an address that works.
+ */
+export function configuredMcpUrl(env = process.env) {
+    const base = env["NODETOOL_PUBLIC_URL"]?.trim();
+    if (!base)
+        return null;
+    return `${base.replace(/\/+$/, "")}/mcp`;
+}
+//# sourceMappingURL=mcp-mount.js.map

package/dist/lib/mcp-mount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-mount.js","sourceRoot":"","sources":["../../src/lib/mcp-mount.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACnE,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,IAAI,GAAG,CAAC,qBAAqB,CAAC,KAAK,GAAG,CAAC;AACpF,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC;AAC3C,CAAC"}

package/dist/lib/media-size.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Pixel dimensions for a resolution tier + aspect ratio, mirroring the
+ * generation nodes' `resolveImageSize` (packages/image-nodes): the tier sets
+ * the short edge and the ratio scales the other edge.
+ *
+ * Providers whose image APIs are pixel-addressed (GPT Image's `size` field)
+ * declare no `aspect_ratio` parameter, so a request carrying only the ratio
+ * string renders at the model default — square. The direct-generation path
+ * derives the same explicit dimensions the node layer always sent.
+ */
+/** Long-edge pixels per resolution tier (image-nodes' table). */
+export declare const IMAGE_RESOLUTION_PX: Record<string, number>;
+/**
+ * Width/height for a resolution tier + aspect ratio, or null when no tier is
+ * recognized (callers keep their current behavior then).
+ */
+export declare function resolveImageSize(resolution?: string | null, aspectRatio?: string | null): {
+    width: number;
+    height: number;
+} | null;
+//# sourceMappingURL=media-size.d.ts.map

package/dist/lib/media-size.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-size.d.ts","sourceRoot":"","sources":["../../src/lib/media-size.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,iEAAiE;AACjE,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAItD,CAAC;AAkBF;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,EAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,GAC1B;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAU1C"}

package/dist/lib/media-size.js

@@ -0,0 +1,48 @@
+/**
+ * Pixel dimensions for a resolution tier + aspect ratio, mirroring the
+ * generation nodes' `resolveImageSize` (packages/image-nodes): the tier sets
+ * the short edge and the ratio scales the other edge.
+ *
+ * Providers whose image APIs are pixel-addressed (GPT Image's `size` field)
+ * declare no `aspect_ratio` parameter, so a request carrying only the ratio
+ * string renders at the model default — square. The direct-generation path
+ * derives the same explicit dimensions the node layer always sent.
+ */
+/** Long-edge pixels per resolution tier (image-nodes' table). */
+export const IMAGE_RESOLUTION_PX = {
+    "1K": 1024,
+    "2K": 2048,
+    "4K": 4096
+};
+/** Ratio name → [w, h] units (image-nodes' table). */
+const ASPECT_RATIOS = {
+    "21:9": [21, 9],
+    "16:9": [16, 9],
+    "3:2": [3, 2],
+    "7:5": [7, 5],
+    "4:3": [4, 3],
+    "5:4": [5, 4],
+    "1:1": [1, 1],
+    "9:16": [9, 16],
+    "2:3": [2, 3],
+    "5:7": [5, 7],
+    "3:4": [3, 4],
+    "4:5": [4, 5]
+};
+/**
+ * Width/height for a resolution tier + aspect ratio, or null when no tier is
+ * recognized (callers keep their current behavior then).
+ */
+export function resolveImageSize(resolution, aspectRatio) {
+    const base = resolution ? (IMAGE_RESOLUTION_PX[resolution] ?? null) : null;
+    if (base === null)
+        return null;
+    const [aw, ah] = ASPECT_RATIOS[aspectRatio ?? ""] ?? [1, 1];
+    if (aw >= ah) {
+        const height = base;
+        return { width: Math.round((height * aw) / ah), height };
+    }
+    const width = base;
+    return { width, height: Math.round((width * ah) / aw) };
+}
+//# sourceMappingURL=media-size.js.map

package/dist/lib/media-size.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-size.js","sourceRoot":"","sources":["../../src/lib/media-size.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,iEAAiE;AACjE,MAAM,CAAC,MAAM,mBAAmB,GAA2B;IACzD,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI;CACX,CAAC;AAEF,sDAAsD;AACtD,MAAM,aAAa,GAAqC;IACtD,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACf,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACf,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACb,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACb,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACb,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACb,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACb,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IACf,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACb,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACb,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACb,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;CACd,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAA0B,EAC1B,WAA2B;IAE3B,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,aAAa,CAAC,WAAW,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,IAAI,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC"}

package/dist/lib/media.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Thrown when the `ffmpeg`/`ffprobe` binaries are not on PATH (ENOENT), so the
+ * caller can distinguish "tooling missing" (a 503 the operator must fix) from
+ * "this media has no audio" (a normal 200 `{ has_audio: false }`).
+ */
+export declare class MediaToolingMissingError extends Error {
+    constructor(message?: string);
+}
+/**
+ * True if the media file at `filePath` contains at least one audio stream.
+ * Returns false only when ffprobe ran and reported no audio stream; throws
+ * {@link MediaToolingMissingError} if the binary is missing.
+ */
+export declare function probeHasAudio(filePath: string): Promise<boolean>;
+/**
+ * Duration of the media at `filePath` in milliseconds, or null if ffprobe ran
+ * but produced no parseable duration. Throws {@link MediaToolingMissingError}
+ * if the binary is missing.
+ */
+export declare function probeDurationMs(filePath: string): Promise<number | null>;
+/**
+ * Extract the audio track of the media at `inputPath` to a 16-bit PCM WAV at
+ * `outputPath` and return the WAV's duration. The WAV stays on disk so the
+ * caller can store it without holding it in memory; a two-hour stereo track
+ * is over a gigabyte. Throws if ffmpeg fails (e.g. the input has no audio) or
+ * {@link MediaToolingMissingError} if the binary is missing.
+ */
+export declare function extractAudio(inputPath: string, outputPath: string): Promise<{
+    durationMs: number | null;
+}>;
+/** Shared source-window materialization used by browser and headless edits. */
+export declare function trimVideoWindow(input: Uint8Array, startMs: number, endMs: number): Promise<Uint8Array>;
+//# sourceMappingURL=media.d.ts.map

package/dist/lib/media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../src/lib/media.ts"],"names":[],"mappings":"AAaA;;;;GAIG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAO,SAAqC,EAGvD;CACF;AAMD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBtE;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmBxB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAoBxC;AAED,+EAA+E;AAC/E,wBAAsB,eAAe,CACnC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,CAAC,CASrB"}

package/dist/lib/media.js

@@ -0,0 +1,110 @@
+/**
+ * Thin ffmpeg/ffprobe wrappers used by the asset audio-extraction endpoint.
+ * Mirrors the invocation style already used by @nodetool-ai/video-nodes
+ * (bare `ffmpeg`/`ffprobe` binaries resolved from PATH).
+ */
+import { execFile as execFileCb } from "node:child_process";
+import { promisify } from "node:util";
+import { trimVideoWindow as trimSharedVideoWindow } from "@nodetool-ai/runtime/trim-video-window";
+import { isObjectLike } from "./wire-values.js";
+import { withTaskSpan } from "@nodetool-ai/runtime/tracing";
+const execFile = promisify(execFileCb);
+/**
+ * Thrown when the `ffmpeg`/`ffprobe` binaries are not on PATH (ENOENT), so the
+ * caller can distinguish "tooling missing" (a 503 the operator must fix) from
+ * "this media has no audio" (a normal 200 `{ has_audio: false }`).
+ */
+export class MediaToolingMissingError extends Error {
+    constructor(message = "ffmpeg/ffprobe not found on PATH") {
+        super(message);
+        this.name = "MediaToolingMissingError";
+    }
+}
+function isEnoent(err) {
+    return isObjectLike(err) && err.code === "ENOENT";
+}
+/**
+ * True if the media file at `filePath` contains at least one audio stream.
+ * Returns false only when ffprobe ran and reported no audio stream; throws
+ * {@link MediaToolingMissingError} if the binary is missing.
+ */
+export async function probeHasAudio(filePath) {
+    try {
+        const { stdout } = await execFile("ffprobe", [
+            "-v",
+            "error",
+            "-select_streams",
+            "a",
+            "-show_entries",
+            "stream=codec_type",
+            "-of",
+            "default=noprint_wrappers=1:nokey=1",
+            filePath
+        ]);
+        return stdout.trim().length > 0;
+    }
+    catch (err) {
+        if (isEnoent(err)) {
+            throw new MediaToolingMissingError();
+        }
+        return false;
+    }
+}
+/**
+ * Duration of the media at `filePath` in milliseconds, or null if ffprobe ran
+ * but produced no parseable duration. Throws {@link MediaToolingMissingError}
+ * if the binary is missing.
+ */
+export async function probeDurationMs(filePath) {
+    try {
+        const { stdout } = await execFile("ffprobe", [
+            "-v",
+            "error",
+            "-show_entries",
+            "format=duration",
+            "-of",
+            "default=noprint_wrappers=1:nokey=1",
+            filePath
+        ]);
+        const seconds = parseFloat(stdout.trim());
+        return Number.isFinite(seconds) ? Math.round(seconds * 1000) : null;
+    }
+    catch (err) {
+        if (isEnoent(err)) {
+            throw new MediaToolingMissingError();
+        }
+        return null;
+    }
+}
+/**
+ * Extract the audio track of the media at `inputPath` to a 16-bit PCM WAV at
+ * `outputPath` and return the WAV's duration. The WAV stays on disk so the
+ * caller can store it without holding it in memory; a two-hour stereo track
+ * is over a gigabyte. Throws if ffmpeg fails (e.g. the input has no audio) or
+ * {@link MediaToolingMissingError} if the binary is missing.
+ */
+export async function extractAudio(inputPath, outputPath) {
+    try {
+        await withTaskSpan("cpu", "subprocess.run", { "process.executable.name": "ffmpeg" }, () => execFile("ffmpeg", ["-y", "-i", inputPath, "-vn", "-acodec", "pcm_s16le", outputPath], { maxBuffer: 50 * 1024 * 1024 }));
+        return { durationMs: await probeDurationMs(outputPath) };
+    }
+    catch (err) {
+        if (isEnoent(err)) {
+            throw new MediaToolingMissingError();
+        }
+        throw err;
+    }
+}
+/** Shared source-window materialization used by browser and headless edits. */
+export async function trimVideoWindow(input, startMs, endMs) {
+    try {
+        return await trimSharedVideoWindow(input, startMs, endMs);
+    }
+    catch (error) {
+        if (isEnoent(error)) {
+            throw new MediaToolingMissingError();
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=media.js.map

package/dist/lib/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../src/lib/media.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,eAAe,IAAI,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAClG,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;AAEvC;;;;GAIG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAO,GAAG,kCAAkC;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,YAAY,CAAC,GAAG,CAAC,IAAK,GAA0B,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAgB;IAClD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE;YAC3C,IAAI;YACJ,OAAO;YACP,iBAAiB;YACjB,GAAG;YACH,eAAe;YACf,mBAAmB;YACnB,KAAK;YACL,oCAAoC;YACpC,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,wBAAwB,EAAE,CAAC;QACvC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE;YAC3C,IAAI;YACJ,OAAO;YACP,eAAe;YACf,iBAAiB;YACjB,KAAK;YACL,oCAAoC;YACpC,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,wBAAwB,EAAE,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAiB,EACjB,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,YAAY,CAChB,KAAK,EACL,gBAAgB,EAChB,EAAE,yBAAyB,EAAE,QAAQ,EAAE,EACvC,GAAG,EAAE,CACH,QAAQ,CACN,QAAQ,EACR,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,EAClE,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAChC,CACJ,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,wBAAwB,EAAE,CAAC;QACvC,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAiB,EACjB,OAAe,EACf,KAAa;IAEb,IAAI,CAAC;QACH,OAAO,MAAM,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,wBAAwB,EAAE,CAAC;QACvC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/package-asset-export.d.ts

@@ -0,0 +1,83 @@
+export interface WorkflowGraphLike {
+    nodes: Array<Record<string, unknown>>;
+    edges: Array<Record<string, unknown>>;
+}
+/** True for refs that must be materialized to ship (per-install identifiers). */
+export declare function isLocalAssetUri(uri: string): boolean;
+export declare function isRemoteOrFileUri(uri: string): boolean;
+/** Best-effort extension for an asset, from the source URI then the ref type. */
+export declare function mediaExtension(source: string, refType: unknown): string;
+/**
+ * Clone `graph` and invoke `visit` on every media ref found under each node's
+ * `data` / `dynamic_properties`. The visitor mutates refs in place on the
+ * clone; the input graph is never modified. Returns the rewritten clone.
+ */
+export declare function transformMediaRefs(graph: WorkflowGraphLike, visit: (ref: Record<string, unknown>) => Promise<void> | void): Promise<WorkflowGraphLike>;
+export interface CollectedAsset {
+    /** The ref that was rewritten. */
+    source: string;
+    fileName: string;
+    /** The rewritten ref uri. */
+    uri: string;
+    bytes: Uint8Array;
+}
+export interface CollectOptions {
+    fetchAssetBytes: (ref: string) => Promise<Uint8Array | null>;
+    includeRemote?: boolean;
+    /** Choose a file name for a resolved asset. */
+    fileNameFor: (input: {
+        source: string;
+        bytes: Uint8Array;
+        refType: unknown;
+    }) => string;
+    /** Build the rewritten ref uri from the chosen file name. */
+    uriFor: (fileName: string) => string;
+}
+export interface CollectResult {
+    graph: WorkflowGraphLike;
+    /** Unique assets (deduped by source). */
+    assets: CollectedAsset[];
+    /** Sources that looked materializable but could not be resolved. */
+    skipped: string[];
+}
+/**
+ * Walk a graph, resolve each materializable asset ref to bytes, and rewrite the
+ * ref's `uri` (clearing `asset_id`/`temp_id`/`data`). The caller decides where
+ * the collected bytes are persisted. Identical sources are resolved once.
+ */
+export declare function collectWorkflowAssets(graph: WorkflowGraphLike, options: CollectOptions): Promise<CollectResult>;
+export interface MaterializeOptions {
+    /** Package the assets belong to, e.g. `nodetool-base`. */
+    packageName: string;
+    /** Root holding `<packageName>/<file>` constant assets on disk. */
+    assetsRoot: string;
+    /**
+     * Resolve the raw bytes for a referenced asset. `ref` is the original
+     * `uri` (or `asset://<id>` synthesized from an `asset_id`). Return `null`
+     * when the asset can't be resolved — the ref is then left untouched.
+     */
+    fetchAssetBytes: (ref: string) => Promise<Uint8Array | null>;
+    /**
+     * Also materialize remote (`http`/`https`) and local-file (`file://`,
+     * absolute path) references. Off by default — remote URLs are already
+     * portable and local paths are usually intentional. `asset://` and
+     * `/api/storage/` refs are always materialized.
+     */
+    includeRemote?: boolean;
+}
+export interface ExportedAsset {
+    /** The ref that was rewritten. */
+    source: string;
+    /** The `package://` URI it now points to. */
+    packageUri: string;
+    fileName: string;
+    byteLength: number;
+}
+export interface MaterializeResult {
+    graph: WorkflowGraphLike;
+    exported: ExportedAsset[];
+    /** Refs that looked materializable but could not be resolved. */
+    skipped: string[];
+}
+export declare function materializeWorkflowConstantAssets(graph: WorkflowGraphLike, options: MaterializeOptions): Promise<MaterializeResult>;
+//# sourceMappingURL=package-asset-export.d.ts.map

package/dist/lib/package-asset-export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-asset-export.d.ts","sourceRoot":"","sources":["../../src/lib/package-asset-export.ts"],"names":[],"mappings":"AA2BA,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvC;AAUD,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQpD;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOtD;AAED,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAgBvE;AAqCD;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,iBAAiB,EACxB,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GAC5D,OAAO,CAAC,iBAAiB,CAAC,CA+B5B;AAuBD,MAAM,WAAW,cAAc;IAC7B,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,eAAe,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,+CAA+C;IAC/C,WAAW,EAAE,CAAC,KAAK,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,UAAU,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC;KAClB,KAAK,MAAM,CAAC;IACb,6DAA6D;IAC7D,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,iBAAiB,CAAC;IACzB,yCAAyC;IACzC,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,oEAAoE;IACpE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,aAAa,CAAC,CAkCxB;AAED,MAAM,WAAW,kBAAkB;IACjC,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,eAAe,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7D;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,iBAAiB,CAAC;IACzB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,iEAAiE;IACjE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wBAAsB,iCAAiC,CACrD,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CA+B5B"}