@nodetool-ai/websocket 0.7.0-rc.23 → 0.8.2

package/dist/lib/storage-access.js

@@ -0,0 +1,74 @@
+/**
+ * Ownership rules for `/api/storage/<key>`.
+ *
+ * The local storage backend is a single shared directory with no per-user
+ * prefix: an asset's bytes live at `<assetId>.<ext>` (thumbnail:
+ * `<assetId>_thumb.jpg`), whoever created it. The only thing that ties a key
+ * to a user is the `assets` row, so every read has to go through it — without
+ * that check any authenticated caller could read (and, when PUT was open,
+ * overwrite) another tenant's asset bytes by id alone.
+ *
+ * The tRPC `storage.signUrl` procedure already gated on this; these helpers
+ * are the shared implementation so REST and tRPC can't drift apart again.
+ */
+import path from "node:path";
+import { Asset } from "@nodetool-ai/models";
+import { assetKeyOwner } from "@nodetool-ai/storage";
+/**
+ * Key prefixes the runtime writes to directly, with no `assets` row behind
+ * them: `temp/<uuid>.<ext>` (temp_url asset outputs) and `assets/<uuid>.<ext>`
+ * (storage_url outputs, binary tool results). They are capability keys — a
+ * random v4 UUID minted per run and handed only to the caller who triggered
+ * it — so they stay readable without an ownership record. Nothing can
+ * overwrite them: `/api/storage` no longer accepts writes at all.
+ */
+const RUNTIME_SCRATCH_PREFIXES = ["temp/", "assets/"];
+function normalizeKey(key) {
+    return key.replace(/\\/g, "/").replace(/^\/+/, "");
+}
+export function isRuntimeScratchKey(key) {
+    const normalized = normalizeKey(key);
+    return RUNTIME_SCRATCH_PREFIXES.some((prefix) => normalized.startsWith(prefix));
+}
+/**
+ * Derive the owning asset id from a storage key. Asset files are stored flat
+ * as `<assetId>.<ext>` and `<assetId>_thumb.jpg`.
+ */
+export function assetIdFromKey(key) {
+    const base = path.basename(normalizeKey(key));
+    const withoutExt = base.replace(/\.[^.]+$/, "");
+    const id = withoutExt.replace(/_thumb$/, "");
+    return id || null;
+}
+/**
+ * Whether `userId` owns the asset a key refers to. Fails closed: a key that
+ * maps to no asset row, or a lookup that throws, is not owned.
+ */
+export async function callerOwnsStorageKey(userId, key) {
+    const assetId = assetIdFromKey(key);
+    if (!assetId)
+        return false;
+    try {
+        return (await Asset.find(userId, assetId)) !== null;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Whether `userId` may read the bytes at `key`.
+ *
+ * Owner-prefixed keys (`<userId>/<assetId>.<ext>`) are settled by the prefix
+ * alone — no database round trip, and the same rule a Supabase RLS policy or
+ * bucket policy applies to the object itself. Legacy flat keys, written
+ * before that layout, still need the `assets` lookup.
+ */
+export async function canReadStorageKey(userId, key) {
+    if (isRuntimeScratchKey(key))
+        return true;
+    const owner = assetKeyOwner(key);
+    if (owner !== null)
+        return owner === userId;
+    return callerOwnsStorageKey(userId, key);
+}
+//# sourceMappingURL=storage-access.js.map

package/dist/lib/storage-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-access.js","sourceRoot":"","sources":["../../src/lib/storage-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD;;;;;;;GAOG;AACH,MAAM,wBAAwB,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAEtD,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC9C,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC7C,OAAO,EAAE,IAAI,IAAI,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,GAAW;IAEX,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,GAAW;IAEX,IAAI,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,KAAK,MAAM,CAAC;IAC5C,OAAO,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC"}

package/dist/lib/storage.d.ts

@@ -0,0 +1,9 @@
+import { type StorageAdapter } from "@nodetool-ai/storage";
+/**
+ * The asset store. On the local file backend it also resolves external
+ * assets, whose bytes stay at their original path outside the storage root.
+ * Server-built `ProcessingContext`s receive this instance as `assetStorage`.
+ */
+export declare function getAssetAdapter(): StorageAdapter;
+export declare function getTempAdapter(): StorageAdapter;
+//# sourceMappingURL=storage.d.ts.map

package/dist/lib/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/lib/storage.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,sBAAsB,CAAC;AAM9B;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,cAAc,CAWhD;AAED,wBAAgB,cAAc,IAAI,cAAc,CAG/C"}

package/dist/lib/storage.js

@@ -0,0 +1,28 @@
+import { loadAssetStorageConfig, loadTempStorageConfig } from "@nodetool-ai/config";
+import { createStorageAdapter, FileStorageAdapter } from "@nodetool-ai/storage";
+import { lookupExternalAssetPath } from "./external-asset-lookup.js";
+let _assetAdapter = null;
+let _tempAdapter = null;
+/**
+ * The asset store. On the local file backend it also resolves external
+ * assets, whose bytes stay at their original path outside the storage root.
+ * Server-built `ProcessingContext`s receive this instance as `assetStorage`.
+ */
+export function getAssetAdapter() {
+    if (!_assetAdapter) {
+        const config = loadAssetStorageConfig();
+        _assetAdapter =
+            config.kind === "file"
+                ? new FileStorageAdapter(config.rootDir, {
+                    externalPathLookup: lookupExternalAssetPath
+                })
+                : createStorageAdapter(config);
+    }
+    return _assetAdapter;
+}
+export function getTempAdapter() {
+    if (!_tempAdapter)
+        _tempAdapter = createStorageAdapter(loadTempStorageConfig());
+    return _tempAdapter;
+}
+//# sourceMappingURL=storage.js.map

package/dist/lib/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/lib/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAEnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,IAAI,aAAa,GAA0B,IAAI,CAAC;AAChD,IAAI,YAAY,GAA0B,IAAI,CAAC;AAE/C;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,sBAAsB,EAAE,CAAC;QACxC,aAAa;YACX,MAAM,CAAC,IAAI,KAAK,MAAM;gBACpB,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE;oBACrC,kBAAkB,EAAE,uBAAuB;iBAC5C,CAAC;gBACJ,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC,YAAY;QAAE,YAAY,GAAG,oBAAoB,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAChF,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/lib/storyboard-export.d.ts

@@ -0,0 +1,64 @@
+import type { Shot } from "@nodetool-ai/protocol";
+import { type ExportSource, type ZipStreamWriter } from "./zip-stream.js";
+/** The board fields the export reads, as `Storyboard.toDocument()` holds them. */
+export interface StoryboardExportInput {
+    name: string;
+    title?: string;
+    logline?: string;
+    brief?: string;
+    style?: string;
+    aspectRatio?: string;
+    narration?: string;
+    musicPrompt?: string;
+    shots: Shot[];
+}
+/** What the archive holds for one shot: a packed path, or why it holds none. */
+interface ShotMedia {
+    still?: string;
+    clip?: string;
+    /** Refs the shot named that the export could not turn into bytes. */
+    unresolved?: Array<{
+        kind: "still" | "clip";
+        source: string;
+    }>;
+}
+/**
+ * The locator to resolve bytes from, or null when the ref carries none.
+ *
+ * A stored `asset_id` beats the ref's own `uri` when that uri is not something
+ * the server can fetch — a `blob:` or `file://` source is the browser's
+ * handle on the bytes, not the server's, and the asset id names the same
+ * media in terms the storage adapter understands.
+ */
+export declare function mediaRefSource(ref: unknown): string | null;
+/**
+ * Render the board as Markdown. `media` maps a shot id to the archive-relative
+ * paths packed for it; a shot missing from it renders without media links.
+ */
+export declare function renderStoryboardMarkdown(board: StoryboardExportInput, media: ReadonlyMap<string, ShotMedia>): string;
+export interface PackStoryboardZipOptions {
+    board: StoryboardExportInput;
+    /**
+     * Resolve a media ref uri (`asset://…`, `/api/storage/…`) to bytes or a
+     * local file, which is streamed from disk.
+     */
+    fetchAssetSource: (ref: string) => Promise<ExportSource | null>;
+}
+export interface WriteStoryboardZipResult {
+    /** Archive-relative paths written, `storyboard.md` first. */
+    files: string[];
+    /** Refs that named media the export could not resolve. */
+    missing: string[];
+}
+export interface PackStoryboardZipResult extends WriteStoryboardZipResult {
+    bytes: Uint8Array;
+}
+/**
+ * Write the zip to `writer`: every resolvable shot asset as it is read, then
+ * the Markdown document, which names what was found.
+ */
+export declare function writeStoryboardZip(options: PackStoryboardZipOptions, writer: ZipStreamWriter): Promise<WriteStoryboardZipResult>;
+/** Build the zip in memory. The HTTP export streams instead. */
+export declare function packStoryboardZip(options: PackStoryboardZipOptions): Promise<PackStoryboardZipResult>;
+export {};
+//# sourceMappingURL=storyboard-export.d.ts.map

package/dist/lib/storyboard-export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storyboard-export.d.ts","sourceRoot":"","sources":["../../src/lib/storyboard-export.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAElD,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AAGzB,kFAAkF;AAClF,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,IAAI,EAAE,CAAC;CACf;AAED,gFAAgF;AAChF,UAAU,SAAS;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChE;AAkBD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAS1D;AAqCD;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,qBAAqB,EAC5B,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,GACpC,MAAM,CA+CR;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,qBAAqB,CAAC;IAC7B;;;OAGG;IACH,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,wBAAwB;IACvC,6DAA6D;IAC7D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,uBAAwB,SAAQ,wBAAwB;IACvE,KAAK,EAAE,UAAU,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,wBAAwB,EACjC,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,wBAAwB,CAAC,CAmEnC;AAED,gEAAgE;AAChE,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,uBAAuB,CAAC,CAOlC"}

package/dist/lib/storyboard-export.js

@@ -0,0 +1,183 @@
+/**
+ * Storyboard zip export — a board as a Markdown document plus the media it
+ * references, packed into one archive a person can read outside NodeTool.
+ *
+ * Layout (a zip):
+ *   storyboard.md        — the board, shot by shot, linking its media
+ *   stills/<n>-<slug>.<ext>  — the selected keyframe per shot
+ *   clips/<n>-<slug>.<ext>   — the selected clip per shot
+ *
+ * Unlike the `.nodetool` workflow bundle this is not a re-importable format:
+ * nothing rewrites refs, and a shot whose media cannot be resolved simply
+ * loses its link (the file list reports it). Rendering the Markdown is pure
+ * and separately testable; only packing needs asset bytes.
+ */
+import { strToU8 } from "fflate";
+import { mediaExtension } from "./package-asset-export.js";
+import { collectZip, exportSourceSize, MAX_ZIP_ENTRY_BYTES } from "./zip-stream.js";
+import { isString } from "./wire-values.js";
+/** A locator the server can resolve on its own, without the browser's help. */
+function isResolvableSource(uri) {
+    return (uri.startsWith("asset://") ||
+        uri.includes("/api/storage/") ||
+        /^https?:\/\//.test(uri) ||
+        uri.startsWith("data:"));
+}
+/**
+ * The locator to resolve bytes from, or null when the ref carries none.
+ *
+ * A stored `asset_id` beats the ref's own `uri` when that uri is not something
+ * the server can fetch — a `blob:` or `file://` source is the browser's
+ * handle on the bytes, not the server's, and the asset id names the same
+ * media in terms the storage adapter understands.
+ */
+export function mediaRefSource(ref) {
+    if (!ref || typeof ref !== "object")
+        return null;
+    const { uri, asset_id: assetId } = ref;
+    const id = isString(assetId) && assetId !== "" ? `asset://${assetId}` : null;
+    if (isString(uri) && uri !== "") {
+        if (isResolvableSource(uri))
+            return uri;
+        return id ?? uri;
+    }
+    return id;
+}
+function shotNumber(shot, index) {
+    const position = Number.isFinite(shot.index) ? shot.index + 1 : index + 1;
+    return String(position).padStart(2, "0");
+}
+function slugPart(shot) {
+    const raw = (shot.slug || shot.action || "").trim().toLowerCase();
+    const cleaned = raw
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "")
+        .slice(0, 40);
+    return cleaned ? `-${cleaned}` : "";
+}
+function heading(shot, index) {
+    const number = shotNumber(shot, index);
+    const label = shot.slug?.trim() || shot.action.trim().split("\n")[0];
+    return `## ${number}. ${label}`;
+}
+function field(label, value) {
+    if (!isString(value) || value.trim() === "")
+        return null;
+    return `- **${label}:** ${value.trim()}`;
+}
+function cameraLine(shot) {
+    const parts = [
+        shot.camera?.framing,
+        shot.camera?.lens,
+        shot.camera?.angle,
+        shot.camera?.movement
+    ].filter((part) => isString(part) && part.trim() !== "");
+    return parts.length > 0 ? `- **Camera:** ${parts.join(", ")}` : null;
+}
+/**
+ * Render the board as Markdown. `media` maps a shot id to the archive-relative
+ * paths packed for it; a shot missing from it renders without media links.
+ */
+export function renderStoryboardMarkdown(board, media) {
+    const lines = [];
+    lines.push(`# ${board.title?.trim() || board.name || "Untitled storyboard"}`);
+    const summary = [
+        field("Logline", board.logline),
+        field("Brief", board.brief),
+        field("Style", board.style),
+        field("Aspect ratio", board.aspectRatio),
+        field("Music", board.musicPrompt),
+        `- **Shots:** ${board.shots.length}`
+    ].filter((line) => line !== null);
+    lines.push("", ...summary);
+    if (isString(board.narration) && board.narration.trim() !== "") {
+        lines.push("", "## Narration", "", board.narration.trim());
+    }
+    board.shots.forEach((shot, index) => {
+        const files = media.get(shot.id);
+        lines.push("", heading(shot, index), "");
+        if (files?.still) {
+            lines.push(`![Still for shot ${shotNumber(shot, index)}](${files.still})`, "");
+        }
+        lines.push(shot.action.trim() || "_No action written._");
+        const details = [
+            cameraLine(shot),
+            field("Motion", shot.motion),
+            field("Dialogue", shot.dialogue),
+            field("Narration", shot.narration),
+            typeof shot.duration_seconds === "number"
+                ? `- **Duration:** ${shot.duration_seconds}s`
+                : null,
+            field("Status", shot.status),
+            field("Notes", shot.notes),
+            files?.clip ? `- **Clip:** [${files.clip}](${files.clip})` : null,
+            ...(files?.unresolved ?? []).map(({ kind, source }) => `- **Missing ${kind}:** \`${source}\` could not be read, so it is not in this archive.`)
+        ].filter((line) => line !== null);
+        if (details.length > 0) {
+            lines.push("", ...details);
+        }
+    });
+    return `${lines.join("\n")}\n`;
+}
+/**
+ * Write the zip to `writer`: every resolvable shot asset as it is read, then
+ * the Markdown document, which names what was found.
+ */
+export async function writeStoryboardZip(options, writer) {
+    const { board, fetchAssetSource } = options;
+    const mediaFiles = [];
+    const media = new Map();
+    const missing = [];
+    const addMedia = async (shot, index, ref, dir, refType, unresolved) => {
+        const source = mediaRefSource(ref);
+        if (!source)
+            return undefined;
+        const resolved = await fetchAssetSource(source).catch(() => null);
+        const size = resolved ? exportSourceSize(resolved) : 0;
+        if (!resolved || size === 0 || size > MAX_ZIP_ENTRY_BYTES) {
+            missing.push(source);
+            unresolved.push({ kind: dir === "stills" ? "still" : "clip", source });
+            return undefined;
+        }
+        const name = `${shotNumber(shot, index)}${slugPart(shot)}${mediaExtension(source, refType)}`;
+        const path = `${dir}/${name}`;
+        // Two shots with the same number and slug share one entry; a zip written
+        // as a stream cannot replace an entry already sent.
+        if (!mediaFiles.includes(path)) {
+            await writer.add(path, resolved);
+            mediaFiles.push(path);
+        }
+        return path;
+    };
+    let index = 0;
+    for (const shot of board.shots) {
+        const unresolved = [];
+        const still = await addMedia(shot, index, shot.keyframe, "stills", "image", unresolved);
+        const clip = await addMedia(shot, index, shot.clip, "clips", "video", unresolved);
+        if (still || clip || unresolved.length > 0) {
+            const entry = {};
+            if (still)
+                entry.still = still;
+            if (clip)
+                entry.clip = clip;
+            if (unresolved.length > 0)
+                entry.unresolved = unresolved;
+            media.set(shot.id, entry);
+        }
+        index += 1;
+    }
+    const markdown = renderStoryboardMarkdown(board, media);
+    await writer.add("storyboard.md", strToU8(markdown), { compress: true });
+    return { files: ["storyboard.md", ...mediaFiles], missing };
+}
+/** Build the zip in memory. The HTTP export streams instead. */
+export async function packStoryboardZip(options) {
+    const written = {};
+    const bytes = await collectZip(async (writer) => {
+        written.result = await writeStoryboardZip(options, writer);
+    });
+    if (!written.result)
+        throw new Error("Storyboard zip wrote nothing");
+    return { bytes, ...written.result };
+}
+//# sourceMappingURL=storyboard-export.js.map

package/dist/lib/storyboard-export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storyboard-export.js","sourceRoot":"","sources":["../../src/lib/storyboard-export.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,mBAAmB,EAGpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AA6B5C,+EAA+E;AAC/E,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,CACL,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC7B,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QACxB,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CACxB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,GAAmB,CAAC;IACvD,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QAChC,IAAI,kBAAkB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QACxC,OAAO,EAAE,IAAI,GAAG,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,UAAU,CAAC,IAAU,EAAE,KAAa;IAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAU;IAC1B,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,GAAG;SAChB,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,OAAO,CAAC,IAAU,EAAE,KAAa;IACxC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,MAAM,MAAM,KAAK,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,EAAE,KAAc;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,OAAO,KAAK,OAAO,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,UAAU,CAAC,IAAU;IAC5B,MAAM,KAAK,GAAG;QACZ,IAAI,CAAC,MAAM,EAAE,OAAO;QACpB,IAAI,CAAC,MAAM,EAAE,IAAI;QACjB,IAAI,CAAC,MAAM,EAAE,KAAK;QAClB,IAAI,CAAC,MAAM,EAAE,QAAQ;KACtB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAA4B,EAC5B,KAAqC;IAErC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,IAAI,IAAI,qBAAqB,EAAE,CAAC,CAAC;IAE9E,MAAM,OAAO,GAAG;QACd,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;QAC/B,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;QAC3B,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;QAC3B,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC;QACxC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC;QACjC,gBAAgB,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE;KACrC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;IAE3B,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,oBAAoB,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,GAAG,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,sBAAsB,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG;YACd,UAAU,CAAC,IAAI,CAAC;YAChB,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;YAC5B,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC;YAChC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC;YAClC,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ;gBACvC,CAAC,CAAC,mBAAmB,IAAI,CAAC,gBAAgB,GAAG;gBAC7C,CAAC,CAAC,IAAI;YACR,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;YAC5B,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC;YAC1B,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI;YACjE,GAAG,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAC9B,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CACnB,eAAe,IAAI,SAAS,MAAM,qDAAqD,CAC1F;SACF,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAsBD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAiC,EACjC,MAAuB;IAEvB,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC;IAC5C,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,QAAQ,GAAG,KAAK,EACpB,IAAU,EACV,KAAa,EACb,GAAY,EACZ,GAAuB,EACvB,OAA0B,EAC1B,UAAgD,EACnB,EAAE;QAC/B,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,GAAG,mBAAmB,EAAE,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACvE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,GAAG,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,yEAAyE;QACzE,oDAAoD;QACpD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAyC,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAC1B,IAAI,EACJ,KAAK,EACL,IAAI,CAAC,QAAQ,EACb,QAAQ,EACR,OAAO,EACP,UAAU,CACX,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CACzB,IAAI,EACJ,KAAK,EACL,IAAI,CAAC,IAAI,EACT,OAAO,EACP,OAAO,EACP,UAAU,CACX,CAAC;QACF,IAAI,KAAK,IAAI,IAAI,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAc,EAAE,CAAC;YAC5B,IAAI,KAAK;gBAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;YAC/B,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;YAC5B,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;YACzD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzE,OAAO,EAAE,KAAK,EAAE,CAAC,eAAe,EAAE,GAAG,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;AAC9D,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAiC;IAEjC,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAC9C,OAAO,CAAC,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;AACtC,CAAC"}

package/dist/lib/style-presets.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Seeding a shipped preset set into a user's library (PRD § 7.3, § 7.7.9, and
+ * game-prd § 5.6 for the game set).
+ *
+ * A style preset is an entity, and an entity is an asset carrying a
+ * `nodetool_entity` marker — so a preset is one asset row. Unlike the example
+ * boards, which stay files on disk until someone installs one, presets have to
+ * be rows: the style step picks one by entity id and `setStylePreset` writes
+ * that id onto the board, so the id must exist before the board references it.
+ *
+ * The row ids are derived from `(user, preset slug)`, which is what makes
+ * seeding idempotent — a second call finds the rows the first one wrote instead
+ * of adding a second copy. Preset ids are unique across the sets, so the two
+ * callers (the storyboard look step and the game look step) never collide. The
+ * marker carries `system: true`, which `Asset.systemEntityRefusal` reads to
+ * keep the row read-only.
+ *
+ * No bytes are stored. The tile art is a `package://` path on the marker,
+ * served from the package asset root the same way an example board's stills
+ * are.
+ */
+import { Asset } from "@nodetool-ai/models";
+import { type StylePreset } from "@nodetool-ai/protocol";
+/** The asset row id a preset takes in one user's library. */
+export declare function stylePresetAssetId(userId: string, presetId: string): string;
+/**
+ * Write any missing preset into the user's library and return every preset row,
+ * in shipped order. Safe to call on every visit to a style step.
+ *
+ * `presets` defaults to the storyboard set, so the caller that predates the
+ * game set reads unchanged.
+ */
+export declare function seedStylePresets(userId: string, presets?: readonly StylePreset[]): Promise<Asset[]>;
+//# sourceMappingURL=style-presets.d.ts.map

package/dist/lib/style-presets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"style-presets.d.ts","sourceRoot":"","sources":["../../src/lib/style-presets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,KAAK,EAAoB,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,uBAAuB,CAAC;AAK/B,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3E;AAcD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,SAAS,WAAW,EAAkB,GAC9C,OAAO,CAAC,KAAK,EAAE,CAAC,CAgBlB"}

package/dist/lib/style-presets.js

@@ -0,0 +1,62 @@
+/**
+ * Seeding a shipped preset set into a user's library (PRD § 7.3, § 7.7.9, and
+ * game-prd § 5.6 for the game set).
+ *
+ * A style preset is an entity, and an entity is an asset carrying a
+ * `nodetool_entity` marker — so a preset is one asset row. Unlike the example
+ * boards, which stay files on disk until someone installs one, presets have to
+ * be rows: the style step picks one by entity id and `setStylePreset` writes
+ * that id onto the board, so the id must exist before the board references it.
+ *
+ * The row ids are derived from `(user, preset slug)`, which is what makes
+ * seeding idempotent — a second call finds the rows the first one wrote instead
+ * of adding a second copy. Preset ids are unique across the sets, so the two
+ * callers (the storyboard look step and the game look step) never collide. The
+ * marker carries `system: true`, which `Asset.systemEntityRefusal` reads to
+ * keep the row read-only.
+ *
+ * No bytes are stored. The tile art is a `package://` path on the marker,
+ * served from the package asset root the same way an example board's stills
+ * are.
+ */
+import { Asset, createStableUuid } from "@nodetool-ai/models";
+import { ENTITY_METADATA_KEY, STYLE_PRESETS, stylePresetMarker } from "@nodetool-ai/protocol";
+/** Namespace for the derived row ids. Changing it re-seeds every library. */
+const ID_NAMESPACE = "style_preset";
+/** The asset row id a preset takes in one user's library. */
+export function stylePresetAssetId(userId, presetId) {
+    return createStableUuid(ID_NAMESPACE, `${userId}:${presetId}`);
+}
+function buildAsset(userId, preset) {
+    return new Asset({
+        id: stylePresetAssetId(userId, preset.id),
+        user_id: userId,
+        // Entities are image assets; the library refuses to read a marker off
+        // anything else.
+        content_type: "image/jpeg",
+        name: preset.name,
+        metadata: { [ENTITY_METADATA_KEY]: stylePresetMarker(preset) }
+    });
+}
+/**
+ * Write any missing preset into the user's library and return every preset row,
+ * in shipped order. Safe to call on every visit to a style step.
+ *
+ * `presets` defaults to the storyboard set, so the caller that predates the
+ * game set reads unchanged.
+ */
+export async function seedStylePresets(userId, presets = STYLE_PRESETS) {
+    const seeded = [];
+    for (const preset of presets) {
+        const existing = await Asset.find(userId, stylePresetAssetId(userId, preset.id));
+        if (existing) {
+            seeded.push(existing);
+            continue;
+        }
+        const asset = buildAsset(userId, preset);
+        await asset.save();
+        seeded.push(asset);
+    }
+    return seeded;
+}
+//# sourceMappingURL=style-presets.js.map

package/dist/lib/style-presets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"style-presets.js","sourceRoot":"","sources":["../../src/lib/style-presets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EAElB,MAAM,uBAAuB,CAAC;AAE/B,6EAA6E;AAC7E,MAAM,YAAY,GAAG,cAAc,CAAC;AAEpC,6DAA6D;AAC7D,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,QAAgB;IACjE,OAAO,gBAAgB,CAAC,YAAY,EAAE,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,MAAmB;IACrD,OAAO,IAAI,KAAK,CAAC;QACf,EAAE,EAAE,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,MAAM;QACf,sEAAsE;QACtE,iBAAiB;QACjB,YAAY,EAAE,YAAY;QAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE;KAC/D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,OAAO,GAA2B,aAAa;IAE/C,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAC/B,MAAM,EACN,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CACtC,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/lib/temp-url-resolver.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Turns a stored temp-asset URI into a URL the *client* can fetch.
+ *
+ * `temp_url` asset output mode stores the bytes and hands the client back a
+ * URL. Which URL depends on the backend: a local file is served by this
+ * process at /api/storage/<key>, while a cloud object must be fetched from the
+ * bucket directly — the /api/storage route only reads local disk.
+ */
+import type { StorageAdapter } from "@nodetool-ai/storage";
+/**
+ * Return a public HTTPS URL for a cloud URI if the adapter exposes a
+ * `getPublicUrl(uri)` method (the Supabase adapter does). Duck-typed because
+ * `getPublicUrl` is adapter-specific, not part of the `StorageAdapter`
+ * interface. Returns null when the adapter has no such method or it declines.
+ */
+export declare function getAdapterPublicUrl(adapter: StorageAdapter, uri: string): string | null;
+/**
+ * Return a short-lived signed GET URL for a cloud URI when the adapter can
+ * mint one (the Supabase and S3 adapters do). Returns null when the adapter
+ * has no such method, declines the URI, or signing fails.
+ */
+export declare function createAdapterDownloadUrl(adapter: StorageAdapter, uri: string): Promise<string | null>;
+/** Extract the object key from a cloud storage URI, or return null for file URIs. */
+export declare function extractCloudKey(uri: string): string | null;
+/**
+ * Build the `tempUrlResolver` the runtime context calls for every `temp_url`
+ * asset output.
+ *
+ * A cloud object resolves to a **signed** URL first. A signed URL works on a
+ * private bucket; a public one does not — Supabase's /object/public/… route
+ * resolves only buckets marked public and answers `NoSuchBucket` for all the
+ * rest, so a public URL against a private temp bucket 404s in the client.
+ */
+export declare function createTempUrlResolver(tempAdapter: StorageAdapter, storagePath: string): (uri: string) => Promise<string>;
+//# sourceMappingURL=temp-url-resolver.d.ts.map

package/dist/lib/temp-url-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"temp-url-resolver.d.ts","sourceRoot":"","sources":["../../src/lib/temp-url-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAI3D;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,MAAM,GACV,MAAM,GAAG,IAAI,CASf;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQxB;AAED,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS1D;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,cAAc,EAC3B,WAAW,EAAE,MAAM,GAClB,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAmBlC"}

package/dist/lib/temp-url-resolver.js

@@ -0,0 +1,88 @@
+/**
+ * Turns a stored temp-asset URI into a URL the *client* can fetch.
+ *
+ * `temp_url` asset output mode stores the bytes and hands the client back a
+ * URL. Which URL depends on the backend: a local file is served by this
+ * process at /api/storage/<key>, while a cloud object must be fetched from the
+ * bucket directly — the /api/storage route only reads local disk.
+ */
+import { pathToFileURL } from "node:url";
+import { buildAssetUrl } from "@nodetool-ai/config";
+import { isFunctionValue } from "./wire-values.js";
+/**
+ * Return a public HTTPS URL for a cloud URI if the adapter exposes a
+ * `getPublicUrl(uri)` method (the Supabase adapter does). Duck-typed because
+ * `getPublicUrl` is adapter-specific, not part of the `StorageAdapter`
+ * interface. Returns null when the adapter has no such method or it declines.
+ */
+export function getAdapterPublicUrl(adapter, uri) {
+    const fn = adapter
+        .getPublicUrl;
+    if (!isFunctionValue(fn))
+        return null;
+    try {
+        return fn.call(adapter, uri) ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Return a short-lived signed GET URL for a cloud URI when the adapter can
+ * mint one (the Supabase and S3 adapters do). Returns null when the adapter
+ * has no such method, declines the URI, or signing fails.
+ */
+export async function createAdapterDownloadUrl(adapter, uri) {
+    const fn = adapter.createDownloadUrl;
+    if (!isFunctionValue(fn))
+        return null;
+    try {
+        return (await fn.call(adapter, uri)) ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Extract the object key from a cloud storage URI, or return null for file URIs. */
+export function extractCloudKey(uri) {
+    for (const scheme of ["supabase://", "s3://"]) {
+        if (uri.startsWith(scheme)) {
+            const rest = uri.slice(scheme.length);
+            const slash = rest.indexOf("/");
+            return slash >= 0 ? rest.slice(slash + 1) : null;
+        }
+    }
+    return null;
+}
+/**
+ * Build the `tempUrlResolver` the runtime context calls for every `temp_url`
+ * asset output.
+ *
+ * A cloud object resolves to a **signed** URL first. A signed URL works on a
+ * private bucket; a public one does not — Supabase's /object/public/… route
+ * resolves only buckets marked public and answers `NoSuchBucket` for all the
+ * rest, so a public URL against a private temp bucket 404s in the client.
+ */
+export function createTempUrlResolver(tempAdapter, storagePath) {
+    return async (uri) => {
+        const cloudKey = extractCloudKey(uri);
+        if (cloudKey !== null) {
+            const signedUrl = await createAdapterDownloadUrl(tempAdapter, uri);
+            if (signedUrl)
+                return signedUrl;
+            const publicUrl = getAdapterPublicUrl(tempAdapter, uri);
+            if (publicUrl)
+                return publicUrl;
+            // Neither form available. /api/storage/<key> 404s on a cloud backend,
+            // but keeps behaviour unchanged for the file backend.
+            return buildAssetUrl(cloudKey);
+        }
+        // File: convert file:///path/to/storage/uuid.png → /api/storage/uuid.png
+        const prefix = pathToFileURL(storagePath).toString();
+        if (uri.startsWith(prefix)) {
+            return buildAssetUrl(uri.slice(prefix.length + 1));
+        }
+        return uri;
+    };
+}
+//# sourceMappingURL=temp-url-resolver.js.map

package/dist/lib/temp-url-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"temp-url-resolver.js","sourceRoot":"","sources":["../../src/lib/temp-url-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAuB,EACvB,GAAW;IAEX,MAAM,EAAE,GAAI,OAA6D;SACtE,YAAY,CAAC;IAChB,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAuB,EACvB,GAAW;IAEX,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACrC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,KAAK,MAAM,MAAM,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAA2B,EAC3B,WAAmB;IAEnB,OAAO,KAAK,EAAE,GAAW,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACnE,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAC;YAChC,MAAM,SAAS,GAAG,mBAAmB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACxD,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAC;YAChC,sEAAsE;YACtE,sDAAsD;YACtD,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QACD,yEAAyE;QACzE,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/test-ui-run-routes.d.ts

@@ -0,0 +1,8 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+/** The local UI harness uses the production owner routes with its existing single-user fixture. */
+export declare function createTestUiRunRoutes(): {
+    matches(pathname: string): boolean;
+    handle(request: IncomingMessage, response: ServerResponse): Promise<void>;
+    close(): Promise<void>;
+};
+//# sourceMappingURL=test-ui-run-routes.d.ts.map

package/dist/lib/test-ui-run-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-ui-run-routes.d.ts","sourceRoot":"","sources":["../../src/lib/test-ui-run-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAQjE,mGAAmG;AACnG,wBAAgB,qBAAqB;IAUjC,OAAO,WAAW,MAAM,GAAG,OAAO;IAI5B,MAAM,UAAU,eAAe,YAAY,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAYzE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;EAE/B"}