@openfairygui/functions 0.2.0-alpha.34 → 0.2.0-alpha.36

package/dist/web.cjs

@@ -1,7 +1,116 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_publish = require("./publish-DCP0AYx2.cjs");
+const require_publish = require("./publish-CykUJfVa.cjs");
 let _openfairygui_core = require("@openfairygui/core");
+let fast_xml_parser = require("fast-xml-parser");
 //#region src/adapters/web/raster.ts
+const MAX_SVG_SOURCE_BYTES = 8 * 1024 * 1024;
+const MAX_SVG_DIMENSION = 16384;
+const MAX_SVG_PIXELS = 64 * 1024 * 1024;
+const MAX_SVG_NODES = 5e4;
+const UNSAFE_SVG_ELEMENTS = new Set([
+	"a",
+	"animate",
+	"animatecolor",
+	"animatemotion",
+	"animatetransform",
+	"audio",
+	"canvas",
+	"discard",
+	"embed",
+	"feimage",
+	"foreignobject",
+	"iframe",
+	"image",
+	"object",
+	"script",
+	"set",
+	"style",
+	"video"
+]);
+function unsafeSvg(message) {
+	throw new Error(`publishBrowser: unsafe SVG input (${message}).`);
+}
+function svgLocalName(name) {
+	return name.split(":").at(-1).toLowerCase();
+}
+function parseSvgLength(value, name) {
+	if (value === void 0) return void 0;
+	const match = String(value).match(/^\s*(?:\d+(?:\.\d+)?|\.\d+)(?:px)?\s*$/iu);
+	if (!match) unsafeSvg(`${name} must use a finite pixel value`);
+	const parsed = Number.parseFloat(match[0]);
+	if (!Number.isFinite(parsed) || parsed <= 0 || parsed > MAX_SVG_DIMENSION) unsafeSvg(`${name} exceeds the supported dimensions`);
+	return parsed;
+}
+function validateSvgAttribute(name, value) {
+	const normalizedName = name.toLowerCase();
+	if (normalizedName === "xmlns" || normalizedName.startsWith("xmlns:")) return;
+	const localName = svgLocalName(name);
+	const text = String(value);
+	if (localName.startsWith("on")) unsafeSvg(`event attribute "${name}" is not allowed`);
+	if (localName === "style" || localName === "src") unsafeSvg(`attribute "${name}" is not allowed`);
+	if (localName === "href" && !/^#[A-Za-z_][\w:.-]*$/u.test(text)) unsafeSvg(`external reference in "${name}" is not allowed`);
+	if (/(?:^|[\s("'=])(?:https?:|file:|javascript:|data:|\/\/)/iu.test(text)) unsafeSvg(`external URL in "${name}" is not allowed`);
+	for (const match of text.matchAll(/url\s*\(([^)]*)\)/giu)) {
+		const reference = (match[1] ?? "").trim().replace(/^(['"])(.*)\1$/u, "$2");
+		if (!/^#[A-Za-z_][\w:.-]*$/u.test(reference)) unsafeSvg(`external url() in "${name}" is not allowed`);
+	}
+}
+function visitSvgEntry(entry) {
+	const pending = [entry];
+	let nodeCount = 0;
+	while (pending.length > 0) {
+		const current = pending.pop();
+		for (const [name, value] of Object.entries(current)) {
+			if (name === ":@" || name.startsWith("#") || name.startsWith("?")) continue;
+			if (++nodeCount > MAX_SVG_NODES) unsafeSvg("node count exceeds the supported limit");
+			const localName = svgLocalName(name);
+			if (UNSAFE_SVG_ELEMENTS.has(localName)) unsafeSvg(`element <${name}> is not allowed`);
+			for (const [attributeName, attributeValue] of Object.entries(current[":@"] ?? {})) validateSvgAttribute(attributeName, attributeValue);
+			if (Array.isArray(value)) {
+				for (const child of value) if (child && typeof child === "object" && !Array.isArray(child)) pending.push(child);
+			}
+		}
+	}
+}
+function validateSvg(bytes) {
+	if (bytes.byteLength === 0 || bytes.byteLength > MAX_SVG_SOURCE_BYTES) unsafeSvg("source size is unsupported");
+	let source;
+	try {
+		source = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+	} catch {
+		unsafeSvg("source is not valid UTF-8");
+	}
+	if (/<!\s*(?:doctype|entity)\b|<\?xml-stylesheet\b/iu.test(source)) unsafeSvg("DTD, entities, and stylesheets are not allowed");
+	if (fast_xml_parser.XMLValidator.validate(source, { allowBooleanAttributes: false }) !== true) unsafeSvg("source is not well-formed XML");
+	const roots = new fast_xml_parser.XMLParser({
+		preserveOrder: true,
+		ignoreAttributes: false,
+		attributeNamePrefix: "",
+		parseAttributeValue: false,
+		parseTagValue: false,
+		processEntities: false,
+		trimValues: false
+	}).parse(source).flatMap((entry) => Object.keys(entry).filter((name) => name !== ":@" && !name.startsWith("#") && !name.startsWith("?")).map((name) => ({
+		entry,
+		name
+	})));
+	if (roots.length !== 1 || svgLocalName(roots[0].name) !== "svg") unsafeSvg("a single <svg> root is required");
+	const root = roots[0].entry;
+	visitSvgEntry(root);
+	const attributes = root[":@"] ?? {};
+	const width = parseSvgLength(attributes.width, "width");
+	const height = parseSvgLength(attributes.height, "height");
+	let viewBoxWidth;
+	let viewBoxHeight;
+	if (attributes.viewBox !== void 0) {
+		const viewBox = String(attributes.viewBox).trim().split(/[\s,]+/u).map(Number);
+		if (viewBox.length !== 4 || viewBox.some((value) => !Number.isFinite(value)) || viewBox[2] <= 0 || viewBox[3] <= 0) unsafeSvg("viewBox must contain four finite values with positive dimensions");
+		viewBoxWidth = viewBox[2];
+		viewBoxHeight = viewBox[3];
+		if (viewBoxWidth > MAX_SVG_DIMENSION || viewBoxHeight > MAX_SVG_DIMENSION) unsafeSvg("viewBox exceeds the supported dimensions");
+	}
+	if ((width ?? viewBoxWidth ?? 300) * (height ?? viewBoxHeight ?? 150) > MAX_SVG_PIXELS) unsafeSvg("pixel count exceeds the supported limit");
+}
 function getBrowserContext(canvas) {
 	const context = canvas.getContext("2d");
 	if (!context) throw new Error("publishBrowser: a 2D canvas context is unavailable.");
@@ -60,7 +169,15 @@ async function canvasToPng(canvas) {
 async function decodeRaster(bytes, mimeType) {
 	if (typeof createImageBitmap !== "function") throw new Error("publishBrowser: createImageBitmap is required for atlas PNG generation.");
 	const copy = bytes.slice();
-	const bitmap = await createImageBitmap(new Blob([copy.buffer], { type: mimeType }));
+	if (mimeType === "image/svg+xml") validateSvg(copy);
+	const blob = new Blob([copy.buffer], { type: mimeType });
+	let bitmap;
+	try {
+		bitmap = await createImageBitmap(blob);
+	} catch (error) {
+		if (mimeType !== "image/svg+xml") throw error;
+		return decodeSvgWithDom(blob);
+	}
 	try {
 		const raster = createRaster(bitmap.width, bitmap.height);
 		getBrowserContext(raster.canvas).drawImage(bitmap, 0, 0);
@@ -69,6 +186,26 @@ async function decodeRaster(bytes, mimeType) {
 		bitmap.close();
 	}
 }
+async function decodeSvgWithDom(blob) {
+	if (typeof globalThis.Image !== "function" || typeof globalThis.URL?.createObjectURL !== "function" || typeof globalThis.URL?.revokeObjectURL !== "function") throw new Error("publishBrowser: createImageBitmap rejected SVG and DOM image decoding is unavailable.");
+	const url = globalThis.URL.createObjectURL(blob);
+	try {
+		const image = new globalThis.Image();
+		await new Promise((resolve, reject) => {
+			image.onload = () => resolve();
+			image.onerror = () => reject(/* @__PURE__ */ new Error("publishBrowser: DOM image decoding failed for SVG."));
+			image.src = url;
+		});
+		const width = image.naturalWidth || image.width;
+		const height = image.naturalHeight || image.height;
+		if (!Number.isFinite(width) || !Number.isFinite(height) || width <= 0 || height <= 0 || width > MAX_SVG_DIMENSION || height > MAX_SVG_DIMENSION || width * height > MAX_SVG_PIXELS) unsafeSvg("decoded dimensions exceed the supported limit");
+		const raster = createRaster(width, height);
+		getBrowserContext(raster.canvas).drawImage(image, 0, 0);
+		return raster;
+	} finally {
+		globalThis.URL.revokeObjectURL(url);
+	}
+}
 var BrowserImagePipeline = class {
 	rawOutput = false;
 	constructor(raster, decode, write) {
@@ -223,6 +360,15 @@ function toResult(success, files, diagnostics) {
 		diagnostics
 	};
 }
+function unsupportedSetting(setting, path, message) {
+	return {
+		level: "error",
+		code: "unsupported_publish_setting",
+		setting,
+		path,
+		message
+	};
+}
 /**
 * Publish a loaded FairyGUI project to browser-provided storage.
 *
@@ -238,14 +384,33 @@ async function publishBrowser(options) {
 	options.document.setLogger(createDiagnosticLogger(previousLogger, diagnostics));
 	try {
 		if (options.projectType !== "layabox") throw new Error(`publishBrowser: unsupported project type "${String(options.projectType)}".`);
-		assertBrowserImageSupport();
 		root.setProjectType(_openfairygui_core.ProjectType.LayaBox);
+		const resolved = require_publish.resolvePublishOptions(options.document, {
+			compressed: options.compressed,
+			packages: options.packages,
+			atlas: options.atlas
+		});
+		if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(resolved.fileExtension)) {
+			diagnostics.push(unsupportedSetting("fileExtension", "settings.publish.fileExtension", `publishBrowser: unsupported fileExtension "${resolved.fileExtension}".`));
+			return toResult(false, files, diagnostics);
+		}
+		const selectedPackageNames = options.packages?.length ? new Set(options.packages) : null;
+		const selectedPackages = root.listPackages().filter((pkg) => !selectedPackageNames || selectedPackageNames.has(pkg.getName()));
+		if (require_publish.resolveCodeGenerationSettings(options.document).allowGenCode) {
+			const packageIndex = selectedPackages.findIndex((pkg) => pkg.getGenCode());
+			if (packageIndex >= 0) {
+				const pkg = selectedPackages[packageIndex];
+				diagnostics.push(unsupportedSetting("codeGeneration", `packages[${root.listPackages().indexOf(pkg)}].publish.genCode`, `publishBrowser: code generation requested by package "${pkg.getName()}" is not supported.`));
+				return toResult(false, files, diagnostics);
+			}
+		}
+		assertBrowserImageSupport();
 		const outputFileSystem = createTrackingFileSystem(options.outputFileSystem, files);
 		const sourceAssetsPath = options.sourceFileSystem.join(options.document.getProjectDir(), "assets");
 		await options.document.transform(require_publish.publish({
 			output: options.output,
-			compressed: options.compressed,
-			fileExtension: "fui",
+			compressed: resolved.compressed,
+			fileExtension: resolved.fileExtension,
 			packages: options.packages,
 			branch: options.branch,
 			basePath: sourceAssetsPath,
@@ -262,6 +427,7 @@ async function publishBrowser(options) {
 	} catch (error) {
 		diagnostics.push({
 			level: "error",
+			code: "publish_failed",
 			message: error instanceof Error ? error.message : String(error)
 		});
 		return toResult(false, files, diagnostics);

package/dist/web.d.cts

@@ -20,6 +20,9 @@ interface BrowserPublishOptions {
 interface BrowserPublishDiagnostic {
   level: 'debug' | 'info' | 'warning' | 'error';
   message: string;
+  code?: 'unsupported_publish_setting' | 'publish_failed';
+  setting?: string;
+  path?: string;
 }
 interface BrowserPublishedFile {
   path: string;

package/dist/web.d.ts

@@ -20,6 +20,9 @@ interface BrowserPublishOptions {
 interface BrowserPublishDiagnostic {
   level: 'debug' | 'info' | 'warning' | 'error';
   message: string;
+  code?: 'unsupported_publish_setting' | 'publish_failed';
+  setting?: string;
+  path?: string;
 }
 interface BrowserPublishedFile {
   path: string;

package/dist/web.js

@@ -1,6 +1,115 @@
-import { t as publish } from "./publish-BJk8UzRP.js";
+import { c as resolveCodeGenerationSettings, n as resolvePublishOptions, t as publish } from "./publish-DXoaC1Nl.js";
 import { ProjectType } from "@openfairygui/core";
+import { XMLParser, XMLValidator } from "fast-xml-parser";
 //#region src/adapters/web/raster.ts
+const MAX_SVG_SOURCE_BYTES = 8 * 1024 * 1024;
+const MAX_SVG_DIMENSION = 16384;
+const MAX_SVG_PIXELS = 64 * 1024 * 1024;
+const MAX_SVG_NODES = 5e4;
+const UNSAFE_SVG_ELEMENTS = new Set([
+	"a",
+	"animate",
+	"animatecolor",
+	"animatemotion",
+	"animatetransform",
+	"audio",
+	"canvas",
+	"discard",
+	"embed",
+	"feimage",
+	"foreignobject",
+	"iframe",
+	"image",
+	"object",
+	"script",
+	"set",
+	"style",
+	"video"
+]);
+function unsafeSvg(message) {
+	throw new Error(`publishBrowser: unsafe SVG input (${message}).`);
+}
+function svgLocalName(name) {
+	return name.split(":").at(-1).toLowerCase();
+}
+function parseSvgLength(value, name) {
+	if (value === void 0) return void 0;
+	const match = String(value).match(/^\s*(?:\d+(?:\.\d+)?|\.\d+)(?:px)?\s*$/iu);
+	if (!match) unsafeSvg(`${name} must use a finite pixel value`);
+	const parsed = Number.parseFloat(match[0]);
+	if (!Number.isFinite(parsed) || parsed <= 0 || parsed > MAX_SVG_DIMENSION) unsafeSvg(`${name} exceeds the supported dimensions`);
+	return parsed;
+}
+function validateSvgAttribute(name, value) {
+	const normalizedName = name.toLowerCase();
+	if (normalizedName === "xmlns" || normalizedName.startsWith("xmlns:")) return;
+	const localName = svgLocalName(name);
+	const text = String(value);
+	if (localName.startsWith("on")) unsafeSvg(`event attribute "${name}" is not allowed`);
+	if (localName === "style" || localName === "src") unsafeSvg(`attribute "${name}" is not allowed`);
+	if (localName === "href" && !/^#[A-Za-z_][\w:.-]*$/u.test(text)) unsafeSvg(`external reference in "${name}" is not allowed`);
+	if (/(?:^|[\s("'=])(?:https?:|file:|javascript:|data:|\/\/)/iu.test(text)) unsafeSvg(`external URL in "${name}" is not allowed`);
+	for (const match of text.matchAll(/url\s*\(([^)]*)\)/giu)) {
+		const reference = (match[1] ?? "").trim().replace(/^(['"])(.*)\1$/u, "$2");
+		if (!/^#[A-Za-z_][\w:.-]*$/u.test(reference)) unsafeSvg(`external url() in "${name}" is not allowed`);
+	}
+}
+function visitSvgEntry(entry) {
+	const pending = [entry];
+	let nodeCount = 0;
+	while (pending.length > 0) {
+		const current = pending.pop();
+		for (const [name, value] of Object.entries(current)) {
+			if (name === ":@" || name.startsWith("#") || name.startsWith("?")) continue;
+			if (++nodeCount > MAX_SVG_NODES) unsafeSvg("node count exceeds the supported limit");
+			const localName = svgLocalName(name);
+			if (UNSAFE_SVG_ELEMENTS.has(localName)) unsafeSvg(`element <${name}> is not allowed`);
+			for (const [attributeName, attributeValue] of Object.entries(current[":@"] ?? {})) validateSvgAttribute(attributeName, attributeValue);
+			if (Array.isArray(value)) {
+				for (const child of value) if (child && typeof child === "object" && !Array.isArray(child)) pending.push(child);
+			}
+		}
+	}
+}
+function validateSvg(bytes) {
+	if (bytes.byteLength === 0 || bytes.byteLength > MAX_SVG_SOURCE_BYTES) unsafeSvg("source size is unsupported");
+	let source;
+	try {
+		source = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+	} catch {
+		unsafeSvg("source is not valid UTF-8");
+	}
+	if (/<!\s*(?:doctype|entity)\b|<\?xml-stylesheet\b/iu.test(source)) unsafeSvg("DTD, entities, and stylesheets are not allowed");
+	if (XMLValidator.validate(source, { allowBooleanAttributes: false }) !== true) unsafeSvg("source is not well-formed XML");
+	const roots = new XMLParser({
+		preserveOrder: true,
+		ignoreAttributes: false,
+		attributeNamePrefix: "",
+		parseAttributeValue: false,
+		parseTagValue: false,
+		processEntities: false,
+		trimValues: false
+	}).parse(source).flatMap((entry) => Object.keys(entry).filter((name) => name !== ":@" && !name.startsWith("#") && !name.startsWith("?")).map((name) => ({
+		entry,
+		name
+	})));
+	if (roots.length !== 1 || svgLocalName(roots[0].name) !== "svg") unsafeSvg("a single <svg> root is required");
+	const root = roots[0].entry;
+	visitSvgEntry(root);
+	const attributes = root[":@"] ?? {};
+	const width = parseSvgLength(attributes.width, "width");
+	const height = parseSvgLength(attributes.height, "height");
+	let viewBoxWidth;
+	let viewBoxHeight;
+	if (attributes.viewBox !== void 0) {
+		const viewBox = String(attributes.viewBox).trim().split(/[\s,]+/u).map(Number);
+		if (viewBox.length !== 4 || viewBox.some((value) => !Number.isFinite(value)) || viewBox[2] <= 0 || viewBox[3] <= 0) unsafeSvg("viewBox must contain four finite values with positive dimensions");
+		viewBoxWidth = viewBox[2];
+		viewBoxHeight = viewBox[3];
+		if (viewBoxWidth > MAX_SVG_DIMENSION || viewBoxHeight > MAX_SVG_DIMENSION) unsafeSvg("viewBox exceeds the supported dimensions");
+	}
+	if ((width ?? viewBoxWidth ?? 300) * (height ?? viewBoxHeight ?? 150) > MAX_SVG_PIXELS) unsafeSvg("pixel count exceeds the supported limit");
+}
 function getBrowserContext(canvas) {
 	const context = canvas.getContext("2d");
 	if (!context) throw new Error("publishBrowser: a 2D canvas context is unavailable.");
@@ -59,7 +168,15 @@ async function canvasToPng(canvas) {
 async function decodeRaster(bytes, mimeType) {
 	if (typeof createImageBitmap !== "function") throw new Error("publishBrowser: createImageBitmap is required for atlas PNG generation.");
 	const copy = bytes.slice();
-	const bitmap = await createImageBitmap(new Blob([copy.buffer], { type: mimeType }));
+	if (mimeType === "image/svg+xml") validateSvg(copy);
+	const blob = new Blob([copy.buffer], { type: mimeType });
+	let bitmap;
+	try {
+		bitmap = await createImageBitmap(blob);
+	} catch (error) {
+		if (mimeType !== "image/svg+xml") throw error;
+		return decodeSvgWithDom(blob);
+	}
 	try {
 		const raster = createRaster(bitmap.width, bitmap.height);
 		getBrowserContext(raster.canvas).drawImage(bitmap, 0, 0);
@@ -68,6 +185,26 @@ async function decodeRaster(bytes, mimeType) {
 		bitmap.close();
 	}
 }
+async function decodeSvgWithDom(blob) {
+	if (typeof globalThis.Image !== "function" || typeof globalThis.URL?.createObjectURL !== "function" || typeof globalThis.URL?.revokeObjectURL !== "function") throw new Error("publishBrowser: createImageBitmap rejected SVG and DOM image decoding is unavailable.");
+	const url = globalThis.URL.createObjectURL(blob);
+	try {
+		const image = new globalThis.Image();
+		await new Promise((resolve, reject) => {
+			image.onload = () => resolve();
+			image.onerror = () => reject(/* @__PURE__ */ new Error("publishBrowser: DOM image decoding failed for SVG."));
+			image.src = url;
+		});
+		const width = image.naturalWidth || image.width;
+		const height = image.naturalHeight || image.height;
+		if (!Number.isFinite(width) || !Number.isFinite(height) || width <= 0 || height <= 0 || width > MAX_SVG_DIMENSION || height > MAX_SVG_DIMENSION || width * height > MAX_SVG_PIXELS) unsafeSvg("decoded dimensions exceed the supported limit");
+		const raster = createRaster(width, height);
+		getBrowserContext(raster.canvas).drawImage(image, 0, 0);
+		return raster;
+	} finally {
+		globalThis.URL.revokeObjectURL(url);
+	}
+}
 var BrowserImagePipeline = class {
 	rawOutput = false;
 	constructor(raster, decode, write) {
@@ -222,6 +359,15 @@ function toResult(success, files, diagnostics) {
 		diagnostics
 	};
 }
+function unsupportedSetting(setting, path, message) {
+	return {
+		level: "error",
+		code: "unsupported_publish_setting",
+		setting,
+		path,
+		message
+	};
+}
 /**
 * Publish a loaded FairyGUI project to browser-provided storage.
 *
@@ -237,14 +383,33 @@ async function publishBrowser(options) {
 	options.document.setLogger(createDiagnosticLogger(previousLogger, diagnostics));
 	try {
 		if (options.projectType !== "layabox") throw new Error(`publishBrowser: unsupported project type "${String(options.projectType)}".`);
-		assertBrowserImageSupport();
 		root.setProjectType(ProjectType.LayaBox);
+		const resolved = resolvePublishOptions(options.document, {
+			compressed: options.compressed,
+			packages: options.packages,
+			atlas: options.atlas
+		});
+		if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(resolved.fileExtension)) {
+			diagnostics.push(unsupportedSetting("fileExtension", "settings.publish.fileExtension", `publishBrowser: unsupported fileExtension "${resolved.fileExtension}".`));
+			return toResult(false, files, diagnostics);
+		}
+		const selectedPackageNames = options.packages?.length ? new Set(options.packages) : null;
+		const selectedPackages = root.listPackages().filter((pkg) => !selectedPackageNames || selectedPackageNames.has(pkg.getName()));
+		if (resolveCodeGenerationSettings(options.document).allowGenCode) {
+			const packageIndex = selectedPackages.findIndex((pkg) => pkg.getGenCode());
+			if (packageIndex >= 0) {
+				const pkg = selectedPackages[packageIndex];
+				diagnostics.push(unsupportedSetting("codeGeneration", `packages[${root.listPackages().indexOf(pkg)}].publish.genCode`, `publishBrowser: code generation requested by package "${pkg.getName()}" is not supported.`));
+				return toResult(false, files, diagnostics);
+			}
+		}
+		assertBrowserImageSupport();
 		const outputFileSystem = createTrackingFileSystem(options.outputFileSystem, files);
 		const sourceAssetsPath = options.sourceFileSystem.join(options.document.getProjectDir(), "assets");
 		await options.document.transform(publish({
 			output: options.output,
-			compressed: options.compressed,
-			fileExtension: "fui",
+			compressed: resolved.compressed,
+			fileExtension: resolved.fileExtension,
 			packages: options.packages,
 			branch: options.branch,
 			basePath: sourceAssetsPath,
@@ -261,6 +426,7 @@ async function publishBrowser(options) {
 	} catch (error) {
 		diagnostics.push({
 			level: "error",
+			code: "publish_failed",
 			message: error instanceof Error ? error.message : String(error)
 		});
 		return toResult(false, files, diagnostics);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openfairygui/functions",
-  "version": "0.2.0-alpha.34",
+  "version": "0.2.0-alpha.36",
   "description": "FairyGUI Headless Authoring SDK — composable transform functions.",
   "author": "OpenFairyGUI Contributors",
   "license": "MIT",
@@ -73,8 +73,9 @@
     "publish"
   ],
   "dependencies": {
+    "fast-xml-parser": "^5.0.0",
     "jiti": "^2.6.1",
-    "@openfairygui/core": "0.2.0-alpha.34"
+    "@openfairygui/core": "0.2.0-alpha.36"
   },
   "optionalDependencies": {
     "sharp": ">=0.33.0"

package/src/adapters/web/publish.ts

@@ -1,11 +1,13 @@
 import { type Document, type ILogger, ProjectType } from '@openfairygui/core';
 import type { AtlasOptions } from '../../atlas.js';
+import { resolveCodeGenerationSettings } from '../../codegen.js';
 import { publish } from '../../publish.js';
 import type {
 	PublishFileSystem,
 	PublishOutputFileSystem,
 	PublishSourceFileSystem,
 } from '../../publish/contracts.js';
+import { resolvePublishOptions } from '../../publish/options.js';
 import { assertBrowserImageSupport, createBrowserImageEncoder } from './raster.js';
 
 export type BrowserPublishProjectType = 'layabox';
@@ -42,6 +44,9 @@ export interface BrowserPublishOptions {
 export interface BrowserPublishDiagnostic {
 	level: 'debug' | 'info' | 'warning' | 'error';
 	message: string;
+	code?: 'unsupported_publish_setting' | 'publish_failed';
+	setting?: string;
+	path?: string;
 }
 
 export interface BrowserPublishedFile {
@@ -103,6 +108,10 @@ function toResult(
 	};
 }
 
+function unsupportedSetting(setting: string, path: string, message: string): BrowserPublishDiagnostic {
+	return { level: 'error', code: 'unsupported_publish_setting', setting, path, message };
+}
+
 /**
  * Publish a loaded FairyGUI project to browser-provided storage.
  *
@@ -121,16 +130,43 @@ export async function publishBrowser(options: BrowserPublishOptions): Promise<Br
 		if (options.projectType !== 'layabox') {
 			throw new Error(`publishBrowser: unsupported project type "${String(options.projectType)}".`);
 		}
-		assertBrowserImageSupport();
 		root.setProjectType(ProjectType.LayaBox);
+		const resolved = resolvePublishOptions(options.document, {
+			compressed: options.compressed,
+			packages: options.packages,
+			atlas: options.atlas,
+		});
+		if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(resolved.fileExtension)) {
+			diagnostics.push(unsupportedSetting(
+				'fileExtension',
+				'settings.publish.fileExtension',
+				`publishBrowser: unsupported fileExtension "${resolved.fileExtension}".`,
+			));
+			return toResult(false, files, diagnostics);
+		}
+		const selectedPackageNames = options.packages?.length ? new Set(options.packages) : null;
+		const selectedPackages = root.listPackages().filter((pkg) => !selectedPackageNames || selectedPackageNames.has(pkg.getName()));
+		if (resolveCodeGenerationSettings(options.document).allowGenCode) {
+			const packageIndex = selectedPackages.findIndex((pkg) => pkg.getGenCode());
+			if (packageIndex >= 0) {
+				const pkg = selectedPackages[packageIndex]!;
+				diagnostics.push(unsupportedSetting(
+					'codeGeneration',
+					`packages[${root.listPackages().indexOf(pkg)}].publish.genCode`,
+					`publishBrowser: code generation requested by package "${pkg.getName()}" is not supported.`,
+				));
+				return toResult(false, files, diagnostics);
+			}
+		}
+		assertBrowserImageSupport();
 		const outputFileSystem = createTrackingFileSystem(options.outputFileSystem, files);
 		const sourceAssetsPath = options.sourceFileSystem.join(options.document.getProjectDir(), 'assets');
 
 		await options.document.transform(
 			publish({
 				output: options.output,
-				compressed: options.compressed,
-				fileExtension: 'fui',
+				compressed: resolved.compressed,
+				fileExtension: resolved.fileExtension,
 				packages: options.packages,
 				branch: options.branch,
 				basePath: sourceAssetsPath,
@@ -149,6 +185,7 @@ export async function publishBrowser(options: BrowserPublishOptions): Promise<Br
 	} catch (error) {
 		diagnostics.push({
 			level: 'error',
+			code: 'publish_failed',
 			message: error instanceof Error ? error.message : String(error),
 		});
 		return toResult(false, files, diagnostics);