@qpqjs/user-script 0.0.0-stage → 0.2.0

package/lib/commonjs/actionProcessor/logic/extractUserScriptZip.js

@@ -0,0 +1,148 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractUserScriptZip = void 0;
+const fs_1 = __importDefault(require("fs"));
+const node_stream_1 = require("node:stream");
+const promises_1 = require("node:stream/promises");
+const path_1 = __importDefault(require("path"));
+const yauzl_1 = __importDefault(require("yauzl"));
+const isSafeProjectPath_1 = require("./isSafeProjectPath");
+const USER_SCRIPT_SOURCE_LIMITS_1 = require("./USER_SCRIPT_SOURCE_LIMITS");
+const UserScriptArchiveError_1 = require("./UserScriptArchiveError");
+const REFUSED_DIRECTORY = 'node_modules';
+const SYMLINK_MODE = 0o120000;
+const FILE_TYPE_MASK = 0o170000;
+// Unix mode lives in the high 16 bits of the external attributes; zips made on other
+// systems leave it zero, which reads as "not a symlink".
+const isSymlinkEntry = (entry) => ((entry.externalFileAttributes >>> 16) & FILE_TYPE_MASK) === SYMLINK_MODE;
+// With decodeStrings off, yauzl hands names over raw so it does not apply its own path
+// rules before ours.
+const entryName = (entry) => (Buffer.isBuffer(entry.fileName) ? entry.fileName.toString('utf8') : String(entry.fileName));
+const isDirectoryEntry = (name) => name.endsWith('/');
+const openZip = (zip) => new Promise((resolve, reject) => {
+    // Header sizes are never consulted: the byte cap on the inflated stream is the only
+    // authority, so yauzl's own size validation is off rather than a second, trusted, rule.
+    yauzl_1.default.fromBuffer(zip, { lazyEntries: true, decodeStrings: false, validateEntrySizes: false }, (error, zipFile) => error ? reject(error) : resolve(zipFile));
+});
+const readEntries = (zipFile, onEntry) => new Promise((resolve, reject) => {
+    zipFile.on('error', reject);
+    zipFile.on('end', resolve);
+    zipFile.on('entry', (entry) => {
+        // A rule that throws synchronously must still reject here, not escape yauzl's
+        // event emitter where it would be lost and leave the zip hanging.
+        Promise.resolve()
+            .then(() => onEntry(entry))
+            .then(() => zipFile.readEntry(), (error) => {
+            zipFile.close();
+            reject(error);
+        });
+    });
+    zipFile.readEntry();
+});
+const openEntryStream = (zipFile, entry) => new Promise((resolve, reject) => {
+    zipFile.openReadStream(entry, (error, stream) => (error ? reject(error) : resolve(stream)));
+});
+const tooLarge = (message) => new UserScriptArchiveError_1.UserScriptArchiveError(UserScriptArchiveError_1.UserScriptArchiveErrorCode.SourceTooLarge, message);
+const unsafe = (message) => new UserScriptArchiveError_1.UserScriptArchiveError(UserScriptArchiveError_1.UserScriptArchiveErrorCode.UnsafeArchiveEntry, message);
+const invalid = (message) => new UserScriptArchiveError_1.UserScriptArchiveError(UserScriptArchiveError_1.UserScriptArchiveErrorCode.InvalidArchive, message);
+// Counts the bytes that really come out of the inflater and fails the pipeline the moment
+// the project cap is crossed, so a zip that lies about its sizes cannot fill the disk.
+const createByteCap = (counter, onExceeded) => new node_stream_1.Transform({
+    transform(chunk, _encoding, callback) {
+        counter.total += chunk.length;
+        if (counter.total > USER_SCRIPT_SOURCE_LIMITS_1.USER_SCRIPT_SOURCE_LIMITS.maxBytes) {
+            callback(onExceeded());
+            return;
+        }
+        callback(null, chunk);
+    },
+});
+// Accepts the project at the zip root (anything under `src/`), or wrapped in exactly one
+// top-level folder (how most tools zip a directory): when nothing is under `src/` at the
+// root, every file shares the same first segment, and none sits at the root, that segment
+// is stripped. A root `src/` always wins, so a project with only `src/` is never stripped.
+const stripCommonFolder = (names) => {
+    if (names.length === 0 || names.some((name) => name.startsWith('src/')))
+        return 0;
+    const firstSegments = new Set(names.map((name) => name.split('/')[0]));
+    const allNested = names.every((name) => name.includes('/'));
+    return firstSegments.size === 1 && allNested ? [...firstSegments][0].length + 1 : 0;
+};
+const planEntries = (zip) => __awaiter(void 0, void 0, void 0, function* () {
+    const files = [];
+    const zipFile = yield openZip(zip);
+    yield readEntries(zipFile, (entry) => {
+        const name = entryName(entry);
+        if (isDirectoryEntry(name))
+            return;
+        if (entry.isEncrypted())
+            throw invalid(`entry [${name}] is encrypted`);
+        if (isSymlinkEntry(entry))
+            throw unsafe(`entry [${name}] is a symlink`);
+        if (!(0, isSafeProjectPath_1.isSafeProjectPath)(name))
+            throw unsafe(`entry [${name}] is not a plain relative path inside the project`);
+        if (name.split('/').includes(REFUSED_DIRECTORY)) {
+            throw tooLarge(`entry [${name}] is inside a ${REFUSED_DIRECTORY} folder; dependencies are not supported in a user script yet`);
+        }
+        files.push({ entry, relativePath: name });
+        if (files.length > USER_SCRIPT_SOURCE_LIMITS_1.USER_SCRIPT_SOURCE_LIMITS.maxFiles) {
+            throw tooLarge(`the archive holds more than ${USER_SCRIPT_SOURCE_LIMITS_1.USER_SCRIPT_SOURCE_LIMITS.maxFiles} files`);
+        }
+    });
+    const strip = stripCommonFolder(files.map((file) => file.relativePath));
+    return files.map((file) => (Object.assign(Object.assign({}, file), { relativePath: file.relativePath.slice(strip) })));
+});
+/**
+ * Unpacks a user-controlled zip into the project directory under the same rules as a
+ * directory build: plain relative paths only, no symlinks, no node_modules, at most
+ * USER_SCRIPT_SOURCE_LIMITS files and unpacked bytes counted as they are written (the
+ * sizes in the zip's headers are never trusted). Directory entries are ignored; folders
+ * come from file paths. Returns the project-relative paths written.
+ */
+const extractUserScriptZip = (zip, projectDir) => __awaiter(void 0, void 0, void 0, function* () {
+    let planned;
+    try {
+        planned = yield planEntries(zip);
+    }
+    catch (error) {
+        if (error instanceof UserScriptArchiveError_1.UserScriptArchiveError)
+            throw error;
+        throw invalid(`cannot read the archive: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const counter = { total: 0 };
+    const written = [];
+    const zipFile = yield openZip(zip);
+    const plannedByEntryName = new Map(planned.map((file) => [entryName(file.entry), file.relativePath]));
+    try {
+        yield readEntries(zipFile, (entry) => __awaiter(void 0, void 0, void 0, function* () {
+            const relativePath = plannedByEntryName.get(entryName(entry));
+            if (relativePath === undefined)
+                return;
+            const target = path_1.default.join(projectDir, ...relativePath.split('/'));
+            fs_1.default.mkdirSync(path_1.default.dirname(target), { recursive: true });
+            const stream = yield openEntryStream(zipFile, entry);
+            yield (0, promises_1.pipeline)(stream, createByteCap(counter, () => tooLarge(`the archive unpacks to more than ${USER_SCRIPT_SOURCE_LIMITS_1.USER_SCRIPT_SOURCE_LIMITS.maxBytes} bytes`)), fs_1.default.createWriteStream(target));
+            written.push(relativePath);
+        }));
+    }
+    catch (error) {
+        if (error instanceof UserScriptArchiveError_1.UserScriptArchiveError)
+            throw error;
+        throw invalid(`cannot unpack the archive: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    return written;
+});
+exports.extractUserScriptZip = extractUserScriptZip;
+//# sourceMappingURL=extractUserScriptZip.js.map

package/lib/commonjs/actionProcessor/logic/extractUserScriptZip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extractUserScriptZip.js","sourceRoot":"","sources":["../../../../src/actionProcessor/logic/extractUserScriptZip.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,4CAAoB;AACpB,6CAAkD;AAClD,mDAAgD;AAChD,gDAAwB;AACxB,kDAA8C;AAE9C,2DAAwD;AACxD,2EAAwE;AACxE,qEAA8F;AAE9F,MAAM,iBAAiB,GAAG,cAAc,CAAC;AACzC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAC9B,MAAM,cAAc,GAAG,QAAQ,CAAC;AAEhC,qFAAqF;AACrF,yDAAyD;AACzD,MAAM,cAAc,GAAG,CAAC,KAAY,EAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,GAAG,cAAc,CAAC,KAAK,YAAY,CAAC;AAE5H,uFAAuF;AACvF,qBAAqB;AACrB,MAAM,SAAS,GAAG,CAAC,KAAY,EAAU,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAEzI,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAEvE,MAAM,OAAO,GAAG,CAAC,GAAW,EAAoB,EAAE,CAChD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,oFAAoF;IACpF,wFAAwF;IACxF,eAAK,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAC/G,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CACzC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,CAAC,OAAgB,EAAE,OAA+C,EAAiB,EAAE,CACvG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;QACnC,8EAA8E;QAC9E,kEAAkE;QAClE,OAAO,CAAC,OAAO,EAAE;aACd,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;aAC1B,IAAI,CACH,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EACzB,CAAC,KAAK,EAAE,EAAE;YACR,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CACF,CAAC;IACN,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,SAAS,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEL,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAE,KAAY,EAAqB,EAAE,CAC5E,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC;AAEL,MAAM,QAAQ,GAAG,CAAC,OAAe,EAA0B,EAAE,CAAC,IAAI,+CAAsB,CAAC,mDAA0B,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;AAC7I,MAAM,MAAM,GAAG,CAAC,OAAe,EAA0B,EAAE,CAAC,IAAI,+CAAsB,CAAC,mDAA0B,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AAC/I,MAAM,OAAO,GAAG,CAAC,OAAe,EAA0B,EAAE,CAAC,IAAI,+CAAsB,CAAC,mDAA0B,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;AAE5I,0FAA0F;AAC1F,uFAAuF;AACvF,MAAM,aAAa,GAAG,CAAC,OAA0B,EAAE,UAAuB,EAAa,EAAE,CACvF,IAAI,uBAAS,CAAC;IACZ,SAAS,CAAC,KAAa,EAAE,SAAS,EAAE,QAAQ;QAC1C,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QAC9B,IAAI,OAAO,CAAC,KAAK,GAAG,qDAAyB,CAAC,QAAQ,EAAE,CAAC;YACvD,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;CACF,CAAC,CAAC;AAIL,yFAAyF;AACzF,yFAAyF;AACzF,0FAA0F;AAC1F,2FAA2F;AAC3F,MAAM,iBAAiB,GAAG,CAAC,KAAe,EAAU,EAAE;IACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAElF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAE5D,OAAO,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAO,GAAW,EAA2B,EAAE;IACjE,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAEnC,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,gBAAgB,CAAC,IAAI,CAAC;YAAE,OAAO;QAEnC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,MAAM,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAC;QACvE,IAAI,cAAc,CAAC,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAC;QACxE,IAAI,CAAC,IAAA,qCAAiB,EAAC,IAAI,CAAC;YAAE,MAAM,MAAM,CAAC,UAAU,IAAI,mDAAmD,CAAC,CAAC;QAC9G,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAChD,MAAM,QAAQ,CAAC,UAAU,IAAI,iBAAiB,iBAAiB,8DAA8D,CAAC,CAAC;QACjI,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,qDAAyB,CAAC,QAAQ,EAAE,CAAC;YACtD,MAAM,QAAQ,CAAC,+BAA+B,qDAAyB,CAAC,QAAQ,QAAQ,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAExE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iCAAM,IAAI,KAAE,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,IAAG,CAAC,CAAC;AAC1F,CAAC,CAAA,CAAC;AAEF;;;;;;GAMG;AACI,MAAM,oBAAoB,GAAG,CAAO,GAAW,EAAE,UAAkB,EAAqB,EAAE;IAC/F,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,+CAAsB;YAAE,MAAM,KAAK,CAAC;QACzD,MAAM,OAAO,CAAC,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAEtG,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,OAAO,EAAE,CAAO,KAAK,EAAE,EAAE;YACzC,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9D,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO;YAEvC,MAAM,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACjE,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAExD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACrD,MAAM,IAAA,mBAAQ,EACZ,MAAM,EACN,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,oCAAoC,qDAAyB,CAAC,QAAQ,QAAQ,CAAC,CAAC,EACtH,YAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAC7B,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7B,CAAC,CAAA,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,+CAAsB;YAAE,MAAM,KAAK,CAAC;QACzD,MAAM,OAAO,CAAC,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxG,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAA,CAAC;AApCW,QAAA,oBAAoB,wBAoC/B","sourcesContent":["import fs from 'fs';\nimport { Readable, Transform } from 'node:stream';\nimport { pipeline } from 'node:stream/promises';\nimport path from 'path';\nimport yauzl, { Entry, ZipFile } from 'yauzl';\n\nimport { isSafeProjectPath } from './isSafeProjectPath';\nimport { USER_SCRIPT_SOURCE_LIMITS } from './USER_SCRIPT_SOURCE_LIMITS';\nimport { UserScriptArchiveError, UserScriptArchiveErrorCode } from './UserScriptArchiveError';\n\nconst REFUSED_DIRECTORY = 'node_modules';\nconst SYMLINK_MODE = 0o120000;\nconst FILE_TYPE_MASK = 0o170000;\n\n// Unix mode lives in the high 16 bits of the external attributes; zips made on other\n// systems leave it zero, which reads as \"not a symlink\".\nconst isSymlinkEntry = (entry: Entry): boolean => ((entry.externalFileAttributes >>> 16) & FILE_TYPE_MASK) === SYMLINK_MODE;\n\n// With decodeStrings off, yauzl hands names over raw so it does not apply its own path\n// rules before ours.\nconst entryName = (entry: Entry): string => (Buffer.isBuffer(entry.fileName) ? entry.fileName.toString('utf8') : String(entry.fileName));\n\nconst isDirectoryEntry = (name: string): boolean => name.endsWith('/');\n\nconst openZip = (zip: Buffer): Promise<ZipFile> =>\n  new Promise((resolve, reject) => {\n    // Header sizes are never consulted: the byte cap on the inflated stream is the only\n    // authority, so yauzl's own size validation is off rather than a second, trusted, rule.\n    yauzl.fromBuffer(zip, { lazyEntries: true, decodeStrings: false, validateEntrySizes: false }, (error, zipFile) =>\n      error ? reject(error) : resolve(zipFile),\n    );\n  });\n\nconst readEntries = (zipFile: ZipFile, onEntry: (entry: Entry) => Promise<void> | void): Promise<void> =>\n  new Promise((resolve, reject) => {\n    zipFile.on('error', reject);\n    zipFile.on('end', resolve);\n    zipFile.on('entry', (entry: Entry) => {\n      // A rule that throws synchronously must still reject here, not escape yauzl's\n      // event emitter where it would be lost and leave the zip hanging.\n      Promise.resolve()\n        .then(() => onEntry(entry))\n        .then(\n          () => zipFile.readEntry(),\n          (error) => {\n            zipFile.close();\n            reject(error);\n          },\n        );\n    });\n    zipFile.readEntry();\n  });\n\nconst openEntryStream = (zipFile: ZipFile, entry: Entry): Promise<Readable> =>\n  new Promise((resolve, reject) => {\n    zipFile.openReadStream(entry, (error, stream) => (error ? reject(error) : resolve(stream)));\n  });\n\nconst tooLarge = (message: string): UserScriptArchiveError => new UserScriptArchiveError(UserScriptArchiveErrorCode.SourceTooLarge, message);\nconst unsafe = (message: string): UserScriptArchiveError => new UserScriptArchiveError(UserScriptArchiveErrorCode.UnsafeArchiveEntry, message);\nconst invalid = (message: string): UserScriptArchiveError => new UserScriptArchiveError(UserScriptArchiveErrorCode.InvalidArchive, message);\n\n// Counts the bytes that really come out of the inflater and fails the pipeline the moment\n// the project cap is crossed, so a zip that lies about its sizes cannot fill the disk.\nconst createByteCap = (counter: { total: number }, onExceeded: () => Error): Transform =>\n  new Transform({\n    transform(chunk: Buffer, _encoding, callback) {\n      counter.total += chunk.length;\n      if (counter.total > USER_SCRIPT_SOURCE_LIMITS.maxBytes) {\n        callback(onExceeded());\n        return;\n      }\n      callback(null, chunk);\n    },\n  });\n\ntype PlannedEntry = { entry: Entry; relativePath: string };\n\n// Accepts the project at the zip root (anything under `src/`), or wrapped in exactly one\n// top-level folder (how most tools zip a directory): when nothing is under `src/` at the\n// root, every file shares the same first segment, and none sits at the root, that segment\n// is stripped. A root `src/` always wins, so a project with only `src/` is never stripped.\nconst stripCommonFolder = (names: string[]): number => {\n  if (names.length === 0 || names.some((name) => name.startsWith('src/'))) return 0;\n\n  const firstSegments = new Set(names.map((name) => name.split('/')[0]));\n  const allNested = names.every((name) => name.includes('/'));\n\n  return firstSegments.size === 1 && allNested ? [...firstSegments][0].length + 1 : 0;\n};\n\nconst planEntries = async (zip: Buffer): Promise<PlannedEntry[]> => {\n  const files: PlannedEntry[] = [];\n  const zipFile = await openZip(zip);\n\n  await readEntries(zipFile, (entry) => {\n    const name = entryName(entry);\n    if (isDirectoryEntry(name)) return;\n\n    if (entry.isEncrypted()) throw invalid(`entry [${name}] is encrypted`);\n    if (isSymlinkEntry(entry)) throw unsafe(`entry [${name}] is a symlink`);\n    if (!isSafeProjectPath(name)) throw unsafe(`entry [${name}] is not a plain relative path inside the project`);\n    if (name.split('/').includes(REFUSED_DIRECTORY)) {\n      throw tooLarge(`entry [${name}] is inside a ${REFUSED_DIRECTORY} folder; dependencies are not supported in a user script yet`);\n    }\n\n    files.push({ entry, relativePath: name });\n    if (files.length > USER_SCRIPT_SOURCE_LIMITS.maxFiles) {\n      throw tooLarge(`the archive holds more than ${USER_SCRIPT_SOURCE_LIMITS.maxFiles} files`);\n    }\n  });\n\n  const strip = stripCommonFolder(files.map((file) => file.relativePath));\n\n  return files.map((file) => ({ ...file, relativePath: file.relativePath.slice(strip) }));\n};\n\n/**\n * Unpacks a user-controlled zip into the project directory under the same rules as a\n * directory build: plain relative paths only, no symlinks, no node_modules, at most\n * USER_SCRIPT_SOURCE_LIMITS files and unpacked bytes counted as they are written (the\n * sizes in the zip's headers are never trusted). Directory entries are ignored; folders\n * come from file paths. Returns the project-relative paths written.\n */\nexport const extractUserScriptZip = async (zip: Buffer, projectDir: string): Promise<string[]> => {\n  let planned: PlannedEntry[];\n  try {\n    planned = await planEntries(zip);\n  } catch (error) {\n    if (error instanceof UserScriptArchiveError) throw error;\n    throw invalid(`cannot read the archive: ${error instanceof Error ? error.message : String(error)}`);\n  }\n\n  const counter = { total: 0 };\n  const written: string[] = [];\n  const zipFile = await openZip(zip);\n  const plannedByEntryName = new Map(planned.map((file) => [entryName(file.entry), file.relativePath]));\n\n  try {\n    await readEntries(zipFile, async (entry) => {\n      const relativePath = plannedByEntryName.get(entryName(entry));\n      if (relativePath === undefined) return;\n\n      const target = path.join(projectDir, ...relativePath.split('/'));\n      fs.mkdirSync(path.dirname(target), { recursive: true });\n\n      const stream = await openEntryStream(zipFile, entry);\n      await pipeline(\n        stream,\n        createByteCap(counter, () => tooLarge(`the archive unpacks to more than ${USER_SCRIPT_SOURCE_LIMITS.maxBytes} bytes`)),\n        fs.createWriteStream(target),\n      );\n      written.push(relativePath);\n    });\n  } catch (error) {\n    if (error instanceof UserScriptArchiveError) throw error;\n    throw invalid(`cannot unpack the archive: ${error instanceof Error ? error.message : String(error)}`);\n  }\n\n  return written;\n};\n"]}

package/lib/commonjs/actionProcessor/logic/getUserScriptBuildErrorType.d.ts

@@ -0,0 +1,7 @@
+import { UserScriptBuildErrorCode } from '../../build/UserScriptBuildError';
+export type UserScriptBuildErrorCatalog = Record<'SourceNotFound' | 'BuildFailed' | 'OutputNotSingleFile' | 'NoExports' | 'NonFunctionExport', string>;
+/**
+ * The action error type for a build failure. Codes map one to one, except that a missing
+ * entry is the caller's source being wrong, not the build, so it is SourceNotFound.
+ */
+export declare const getUserScriptBuildErrorType: (code: UserScriptBuildErrorCode, errorType: UserScriptBuildErrorCatalog) => string;

package/lib/commonjs/actionProcessor/logic/getUserScriptBuildErrorType.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getUserScriptBuildErrorType = void 0;
+const UserScriptBuildError_1 = require("../../build/UserScriptBuildError");
+/**
+ * The action error type for a build failure. Codes map one to one, except that a missing
+ * entry is the caller's source being wrong, not the build, so it is SourceNotFound.
+ */
+const getUserScriptBuildErrorType = (code, errorType) => {
+    const byCode = {
+        [UserScriptBuildError_1.UserScriptBuildErrorCode.NoEntry]: errorType.SourceNotFound,
+        [UserScriptBuildError_1.UserScriptBuildErrorCode.BuildFailed]: errorType.BuildFailed,
+        [UserScriptBuildError_1.UserScriptBuildErrorCode.OutputNotSingleFile]: errorType.OutputNotSingleFile,
+        [UserScriptBuildError_1.UserScriptBuildErrorCode.NoExports]: errorType.NoExports,
+        [UserScriptBuildError_1.UserScriptBuildErrorCode.NonFunctionExport]: errorType.NonFunctionExport,
+    };
+    return byCode[code];
+};
+exports.getUserScriptBuildErrorType = getUserScriptBuildErrorType;
+//# sourceMappingURL=getUserScriptBuildErrorType.js.map

package/lib/commonjs/actionProcessor/logic/getUserScriptBuildErrorType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserScriptBuildErrorType.js","sourceRoot":"","sources":["../../../../src/actionProcessor/logic/getUserScriptBuildErrorType.ts"],"names":[],"mappings":";;;AAAA,2EAA4E;AAQ5E;;;GAGG;AACI,MAAM,2BAA2B,GAAG,CAAC,IAA8B,EAAE,SAAsC,EAAU,EAAE;IAC5H,MAAM,MAAM,GAA6C;QACvD,CAAC,+CAAwB,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,cAAc;QAC5D,CAAC,+CAAwB,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,WAAW;QAC7D,CAAC,+CAAwB,CAAC,mBAAmB,CAAC,EAAE,SAAS,CAAC,mBAAmB;QAC7E,CAAC,+CAAwB,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,SAAS;QACzD,CAAC,+CAAwB,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC,iBAAiB;KAC1E,CAAC;IAEF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC,CAAC;AAVW,QAAA,2BAA2B,+BAUtC","sourcesContent":["import { UserScriptBuildErrorCode } from '../../build/UserScriptBuildError';\n\n// The error names a build action's catalog must carry for the build's own codes.\nexport type UserScriptBuildErrorCatalog = Record<\n  'SourceNotFound' | 'BuildFailed' | 'OutputNotSingleFile' | 'NoExports' | 'NonFunctionExport',\n  string\n>;\n\n/**\n * The action error type for a build failure. Codes map one to one, except that a missing\n * entry is the caller's source being wrong, not the build, so it is SourceNotFound.\n */\nexport const getUserScriptBuildErrorType = (code: UserScriptBuildErrorCode, errorType: UserScriptBuildErrorCatalog): string => {\n  const byCode: Record<UserScriptBuildErrorCode, string> = {\n    [UserScriptBuildErrorCode.NoEntry]: errorType.SourceNotFound,\n    [UserScriptBuildErrorCode.BuildFailed]: errorType.BuildFailed,\n    [UserScriptBuildErrorCode.OutputNotSingleFile]: errorType.OutputNotSingleFile,\n    [UserScriptBuildErrorCode.NoExports]: errorType.NoExports,\n    [UserScriptBuildErrorCode.NonFunctionExport]: errorType.NonFunctionExport,\n  };\n\n  return byCode[code];\n};\n"]}

package/lib/commonjs/actionProcessor/logic/index.d.ts

@@ -0,0 +1,12 @@
+export * from './askUserScriptCheckPublishedOutput';
+export * from './askUserScriptCollectSource';
+export * from './askUserScriptPublishOutput';
+export * from './buildUserScriptInTempDir';
+export * from './BuiltUserScript';
+export * from './extractUserScriptZip';
+export * from './getUserScriptBuildErrorType';
+export * from './isSafeProjectPath';
+export * from './materialiseUserScriptSource';
+export * from './USER_SCRIPT_SOURCE_LIMITS';
+export * from './UserScriptArchiveError';
+export * from './UserScriptSourceFile';

package/lib/commonjs/actionProcessor/logic/index.js

@@ -0,0 +1,29 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./askUserScriptCheckPublishedOutput"), exports);
+__exportStar(require("./askUserScriptCollectSource"), exports);
+__exportStar(require("./askUserScriptPublishOutput"), exports);
+__exportStar(require("./buildUserScriptInTempDir"), exports);
+__exportStar(require("./BuiltUserScript"), exports);
+__exportStar(require("./extractUserScriptZip"), exports);
+__exportStar(require("./getUserScriptBuildErrorType"), exports);
+__exportStar(require("./isSafeProjectPath"), exports);
+__exportStar(require("./materialiseUserScriptSource"), exports);
+__exportStar(require("./USER_SCRIPT_SOURCE_LIMITS"), exports);
+__exportStar(require("./UserScriptArchiveError"), exports);
+__exportStar(require("./UserScriptSourceFile"), exports);
+//# sourceMappingURL=index.js.map

package/lib/commonjs/actionProcessor/logic/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actionProcessor/logic/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sEAAoD;AACpD,+DAA6C;AAC7C,+DAA6C;AAC7C,6DAA2C;AAC3C,oDAAkC;AAClC,yDAAuC;AACvC,gEAA8C;AAC9C,sDAAoC;AACpC,gEAA8C;AAC9C,8DAA4C;AAC5C,2DAAyC;AACzC,yDAAuC","sourcesContent":["export * from './askUserScriptCheckPublishedOutput';\nexport * from './askUserScriptCollectSource';\nexport * from './askUserScriptPublishOutput';\nexport * from './buildUserScriptInTempDir';\nexport * from './BuiltUserScript';\nexport * from './extractUserScriptZip';\nexport * from './getUserScriptBuildErrorType';\nexport * from './isSafeProjectPath';\nexport * from './materialiseUserScriptSource';\nexport * from './USER_SCRIPT_SOURCE_LIMITS';\nexport * from './UserScriptArchiveError';\nexport * from './UserScriptSourceFile';\n"]}

package/lib/commonjs/actionProcessor/logic/isSafeProjectPath.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Whether a path from an untrusted source (a drive listing, a zip entry) may be written
+ * under a project directory: relative, forward slashes only, no `..`, no empty segment.
+ */
+export declare const isSafeProjectPath: (relativePath: string) => boolean;

package/lib/commonjs/actionProcessor/logic/isSafeProjectPath.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSafeProjectPath = void 0;
+/**
+ * Whether a path from an untrusted source (a drive listing, a zip entry) may be written
+ * under a project directory: relative, forward slashes only, no `..`, no empty segment.
+ */
+const isSafeProjectPath = (relativePath) => relativePath.length > 0 &&
+    !relativePath.includes('\\') &&
+    !relativePath.startsWith('/') &&
+    !relativePath.split('/').some((segment) => segment === '' || segment === '.' || segment === '..');
+exports.isSafeProjectPath = isSafeProjectPath;
+//# sourceMappingURL=isSafeProjectPath.js.map

package/lib/commonjs/actionProcessor/logic/isSafeProjectPath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isSafeProjectPath.js","sourceRoot":"","sources":["../../../../src/actionProcessor/logic/isSafeProjectPath.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACI,MAAM,iBAAiB,GAAG,CAAC,YAAoB,EAAW,EAAE,CACjE,YAAY,CAAC,MAAM,GAAG,CAAC;IACvB,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;IAC7B,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AAJvF,QAAA,iBAAiB,qBAIsE","sourcesContent":["/**\n * Whether a path from an untrusted source (a drive listing, a zip entry) may be written\n * under a project directory: relative, forward slashes only, no `..`, no empty segment.\n */\nexport const isSafeProjectPath = (relativePath: string): boolean =>\n  relativePath.length > 0 &&\n  !relativePath.includes('\\\\') &&\n  !relativePath.startsWith('/') &&\n  !relativePath.split('/').some((segment) => segment === '' || segment === '.' || segment === '..');\n"]}

package/lib/commonjs/actionProcessor/logic/materialiseUserScriptSource.d.ts

@@ -0,0 +1,3 @@
+import { UserScriptSourceFile } from './UserScriptSourceFile';
+/** Writes collected source files under the project directory, refusing any path that would leave it. */
+export declare const materialiseUserScriptSource: (projectDir: string, files: UserScriptSourceFile[]) => void;

package/lib/commonjs/actionProcessor/logic/materialiseUserScriptSource.js

@@ -0,0 +1,23 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.materialiseUserScriptSource = void 0;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const UserScriptBuildError_1 = require("../../build/UserScriptBuildError");
+const isSafeProjectPath_1 = require("./isSafeProjectPath");
+/** Writes collected source files under the project directory, refusing any path that would leave it. */
+const materialiseUserScriptSource = (projectDir, files) => {
+    for (const file of files) {
+        if (!(0, isSafeProjectPath_1.isSafeProjectPath)(file.path)) {
+            throw new UserScriptBuildError_1.UserScriptBuildError(UserScriptBuildError_1.UserScriptBuildErrorCode.BuildFailed, `Refusing source path [${file.path}]`);
+        }
+        const target = path_1.default.join(projectDir, ...file.path.split('/'));
+        fs_1.default.mkdirSync(path_1.default.dirname(target), { recursive: true });
+        fs_1.default.writeFileSync(target, file.text);
+    }
+};
+exports.materialiseUserScriptSource = materialiseUserScriptSource;
+//# sourceMappingURL=materialiseUserScriptSource.js.map

package/lib/commonjs/actionProcessor/logic/materialiseUserScriptSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"materialiseUserScriptSource.js","sourceRoot":"","sources":["../../../../src/actionProcessor/logic/materialiseUserScriptSource.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,gDAAwB;AAExB,2EAAkG;AAClG,2DAAwD;AAGxD,wGAAwG;AACjG,MAAM,2BAA2B,GAAG,CAAC,UAAkB,EAAE,KAA6B,EAAQ,EAAE;IACrG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAA,qCAAiB,EAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,2CAAoB,CAAC,+CAAwB,CAAC,WAAW,EAAE,yBAAyB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QAC9G,CAAC;QACD,MAAM,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,YAAE,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;AACH,CAAC,CAAC;AATW,QAAA,2BAA2B,+BAStC","sourcesContent":["import fs from 'fs';\nimport path from 'path';\n\nimport { UserScriptBuildError, UserScriptBuildErrorCode } from '../../build/UserScriptBuildError';\nimport { isSafeProjectPath } from './isSafeProjectPath';\nimport { UserScriptSourceFile } from './UserScriptSourceFile';\n\n/** Writes collected source files under the project directory, refusing any path that would leave it. */\nexport const materialiseUserScriptSource = (projectDir: string, files: UserScriptSourceFile[]): void => {\n  for (const file of files) {\n    if (!isSafeProjectPath(file.path)) {\n      throw new UserScriptBuildError(UserScriptBuildErrorCode.BuildFailed, `Refusing source path [${file.path}]`);\n    }\n    const target = path.join(projectDir, ...file.path.split('/'));\n    fs.mkdirSync(path.dirname(target), { recursive: true });\n    fs.writeFileSync(target, file.text);\n  }\n};\n"]}

package/lib/commonjs/build/USER_SCRIPT_ENTRY_CANDIDATES.d.ts

@@ -0,0 +1,2 @@
+/** The entry files a script project may have, relative to its root, in the order they are tried. */
+export declare const USER_SCRIPT_ENTRY_CANDIDATES: readonly ["src/main.ts", "src/main.js"];

package/lib/commonjs/build/USER_SCRIPT_ENTRY_CANDIDATES.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.USER_SCRIPT_ENTRY_CANDIDATES = void 0;
+/** The entry files a script project may have, relative to its root, in the order they are tried. */
+exports.USER_SCRIPT_ENTRY_CANDIDATES = ['src/main.ts', 'src/main.js'];
+//# sourceMappingURL=USER_SCRIPT_ENTRY_CANDIDATES.js.map

package/lib/commonjs/build/USER_SCRIPT_ENTRY_CANDIDATES.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"USER_SCRIPT_ENTRY_CANDIDATES.js","sourceRoot":"","sources":["../../../src/build/USER_SCRIPT_ENTRY_CANDIDATES.ts"],"names":[],"mappings":";;;AAAA,oGAAoG;AACvF,QAAA,4BAA4B,GAAG,CAAC,aAAa,EAAE,aAAa,CAAU,CAAC","sourcesContent":["/** The entry files a script project may have, relative to its root, in the order they are tried. */\nexport const USER_SCRIPT_ENTRY_CANDIDATES = ['src/main.ts', 'src/main.js'] as const;\n"]}

package/lib/commonjs/build/USER_SCRIPT_OUTPUT_FILENAME.d.ts

@@ -0,0 +1,2 @@
+/** The name a build writes the script under in its own out dir; a platform build then publishes that file to the caller's `outputFilepath`. */
+export declare const USER_SCRIPT_OUTPUT_FILENAME = "main.js";

package/lib/commonjs/build/USER_SCRIPT_OUTPUT_FILENAME.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.USER_SCRIPT_OUTPUT_FILENAME = void 0;
+/** The name a build writes the script under in its own out dir; a platform build then publishes that file to the caller's `outputFilepath`. */
+exports.USER_SCRIPT_OUTPUT_FILENAME = 'main.js';
+//# sourceMappingURL=USER_SCRIPT_OUTPUT_FILENAME.js.map

package/lib/commonjs/build/USER_SCRIPT_OUTPUT_FILENAME.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"USER_SCRIPT_OUTPUT_FILENAME.js","sourceRoot":"","sources":["../../../src/build/USER_SCRIPT_OUTPUT_FILENAME.ts"],"names":[],"mappings":";;;AAAA,+IAA+I;AAClI,QAAA,2BAA2B,GAAG,SAAS,CAAC","sourcesContent":["/** The name a build writes the script under in its own out dir; a platform build then publishes that file to the caller's `outputFilepath`. */\nexport const USER_SCRIPT_OUTPUT_FILENAME = 'main.js';\n"]}

package/lib/commonjs/build/UserScriptBuildError.d.ts

@@ -0,0 +1,12 @@
+export declare enum UserScriptBuildErrorCode {
+    NoEntry = "NoEntry",
+    BuildFailed = "BuildFailed",
+    OutputNotSingleFile = "OutputNotSingleFile",
+    NoExports = "NoExports",
+    NonFunctionExport = "NonFunctionExport"
+}
+/** Thrown by buildUserScript; `code` says which step refused the project. */
+export declare class UserScriptBuildError extends Error {
+    readonly code: UserScriptBuildErrorCode;
+    constructor(code: UserScriptBuildErrorCode, message: string);
+}

package/lib/commonjs/build/UserScriptBuildError.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserScriptBuildError = exports.UserScriptBuildErrorCode = void 0;
+var UserScriptBuildErrorCode;
+(function (UserScriptBuildErrorCode) {
+    // No src/main.ts or src/main.js in the project.
+    UserScriptBuildErrorCode["NoEntry"] = "NoEntry";
+    // Rspack reported errors (a refused Node builtin among them).
+    UserScriptBuildErrorCode["BuildFailed"] = "BuildFailed";
+    // The build emitted more than one JavaScript file, so the output is not one loadable module.
+    UserScriptBuildErrorCode["OutputNotSingleFile"] = "OutputNotSingleFile";
+    // The built module has no own enumerable exports.
+    UserScriptBuildErrorCode["NoExports"] = "NoExports";
+    // An own enumerable export of the built module is not a function.
+    UserScriptBuildErrorCode["NonFunctionExport"] = "NonFunctionExport";
+})(UserScriptBuildErrorCode || (exports.UserScriptBuildErrorCode = UserScriptBuildErrorCode = {}));
+/** Thrown by buildUserScript; `code` says which step refused the project. */
+class UserScriptBuildError extends Error {
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'UserScriptBuildError';
+    }
+}
+exports.UserScriptBuildError = UserScriptBuildError;
+//# sourceMappingURL=UserScriptBuildError.js.map

package/lib/commonjs/build/UserScriptBuildError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserScriptBuildError.js","sourceRoot":"","sources":["../../../src/build/UserScriptBuildError.ts"],"names":[],"mappings":";;;AAAA,IAAY,wBAWX;AAXD,WAAY,wBAAwB;IAClC,gDAAgD;IAChD,+CAAmB,CAAA;IACnB,8DAA8D;IAC9D,uDAA2B,CAAA;IAC3B,6FAA6F;IAC7F,uEAA2C,CAAA;IAC3C,kDAAkD;IAClD,mDAAuB,CAAA;IACvB,kEAAkE;IAClE,mEAAuC,CAAA;AACzC,CAAC,EAXW,wBAAwB,wCAAxB,wBAAwB,QAWnC;AAED,6EAA6E;AAC7E,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,YACkB,IAA8B,EAC9C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAA0B;QAI9C,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AARD,oDAQC","sourcesContent":["export enum UserScriptBuildErrorCode {\n  // No src/main.ts or src/main.js in the project.\n  NoEntry = 'NoEntry',\n  // Rspack reported errors (a refused Node builtin among them).\n  BuildFailed = 'BuildFailed',\n  // The build emitted more than one JavaScript file, so the output is not one loadable module.\n  OutputNotSingleFile = 'OutputNotSingleFile',\n  // The built module has no own enumerable exports.\n  NoExports = 'NoExports',\n  // An own enumerable export of the built module is not a function.\n  NonFunctionExport = 'NonFunctionExport',\n}\n\n/** Thrown by buildUserScript; `code` says which step refused the project. */\nexport class UserScriptBuildError extends Error {\n  constructor(\n    public readonly code: UserScriptBuildErrorCode,\n    message: string,\n  ) {\n    super(message);\n    this.name = 'UserScriptBuildError';\n  }\n}\n"]}

package/lib/commonjs/build/UserScriptBuildResult.d.ts

@@ -0,0 +1,4 @@
+/** What a successful user-script build produced. */
+export type UserScriptBuildResult = {
+    entryPath: string;
+};

package/lib/commonjs/build/UserScriptBuildResult.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=UserScriptBuildResult.js.map

package/lib/commonjs/build/UserScriptBuildResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserScriptBuildResult.js","sourceRoot":"","sources":["../../../src/build/UserScriptBuildResult.ts"],"names":[],"mappings":"","sourcesContent":["/** What a successful user-script build produced. */\nexport type UserScriptBuildResult = {\n  // Absolute path of the single CommonJS output, `<outDir>/main.js`, the only file written.\n  entryPath: string;\n};\n"]}

package/lib/commonjs/build/__fixtures__/basic/src/helpers/formatSum.d.ts

@@ -0,0 +1 @@
+export declare const formatSum: (sum: number) => string;

package/lib/commonjs/build/__fixtures__/basic/src/helpers/formatSum.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatSum = void 0;
+const formatSum = (sum) => `added ${sum}`;
+exports.formatSum = formatSum;
+//# sourceMappingURL=formatSum.js.map

package/lib/commonjs/build/__fixtures__/basic/src/helpers/formatSum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatSum.js","sourceRoot":"","sources":["../../../../../../../src/build/__fixtures__/basic/src/helpers/formatSum.ts"],"names":[],"mappings":";;;AAAO,MAAM,SAAS,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC;AAApD,QAAA,SAAS,aAA2C","sourcesContent":["export const formatSum = (sum: number): string => `added ${sum}`;\n"]}

package/lib/commonjs/build/__fixtures__/basic/src/main.d.ts

@@ -0,0 +1,4 @@
+import { AskResponse } from '@qpqjs/core';
+export declare function add(drive: string, filepath: string, a: number, b: number): AskResponse<number>;
+export declare const greet: (name: string) => string;
+export declare const makeId: () => string;

package/lib/commonjs/build/__fixtures__/basic/src/main.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeId = exports.greet = void 0;
+exports.add = add;
+const core_1 = require("@qpqjs/core");
+const uuidv7_1 = require("uuidv7");
+const formatSum_1 = require("./helpers/formatSum");
+function* add(drive, filepath, a, b) {
+    const sum = a + b;
+    yield* (0, core_1.askFileWriteTextContents)(drive, filepath, (0, formatSum_1.formatSum)(sum));
+    return sum;
+}
+const greet = (name) => `hello ${name}`;
+exports.greet = greet;
+const makeId = () => (0, uuidv7_1.uuidv7)();
+exports.makeId = makeId;
+//# sourceMappingURL=main.js.map

package/lib/commonjs/build/__fixtures__/basic/src/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../../../../src/build/__fixtures__/basic/src/main.ts"],"names":[],"mappings":";;;AAMA,kBAIC;AAVD,sCAAoE;AAEpE,mCAAgC;AAEhC,mDAAgD;AAEhD,QAAe,CAAC,CAAC,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAE,CAAS,EAAE,CAAS;IACxE,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,KAAK,CAAC,CAAC,IAAA,+BAAwB,EAAC,KAAK,EAAE,QAAQ,EAAE,IAAA,qBAAS,EAAC,GAAG,CAAC,CAAC,CAAC;IACjE,OAAO,GAAG,CAAC;AACb,CAAC;AAEM,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC;AAAlD,QAAA,KAAK,SAA6C;AAExD,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,IAAA,eAAM,GAAE,CAAC;AAAhC,QAAA,MAAM,UAA0B","sourcesContent":["import { askFileWriteTextContents, AskResponse } from '@qpqjs/core';\n\nimport { uuidv7 } from 'uuidv7';\n\nimport { formatSum } from './helpers/formatSum';\n\nexport function* add(drive: string, filepath: string, a: number, b: number): AskResponse<number> {\n  const sum = a + b;\n  yield* askFileWriteTextContents(drive, filepath, formatSum(sum));\n  return sum;\n}\n\nexport const greet = (name: string): string => `hello ${name}`;\n\nexport const makeId = (): string => uuidv7();\n"]}

package/lib/commonjs/build/__fixtures__/builtin/src/main.d.ts

@@ -0,0 +1 @@
+export declare const readIt: () => string;

package/lib/commonjs/build/__fixtures__/builtin/src/main.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readIt = void 0;
+const fs_1 = require("fs");
+const readIt = () => (0, fs_1.readFileSync)('/etc/hostname', 'utf8');
+exports.readIt = readIt;
+//# sourceMappingURL=main.js.map

package/lib/commonjs/build/__fixtures__/builtin/src/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../../../../src/build/__fixtures__/builtin/src/main.ts"],"names":[],"mappings":";;;AAAA,2BAAkC;AAE3B,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,IAAA,iBAAY,EAAC,eAAe,EAAE,MAAM,CAAC,CAAC;AAA7D,QAAA,MAAM,UAAuD","sourcesContent":["import { readFileSync } from 'fs';\n\nexport const readIt = (): string => readFileSync('/etc/hostname', 'utf8');\n"]}

package/lib/commonjs/build/__fixtures__/noEntry/src/notMain.d.ts

@@ -0,0 +1 @@
+export declare const nothing: () => void;

package/lib/commonjs/build/__fixtures__/noEntry/src/notMain.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nothing = void 0;
+const nothing = () => { };
+exports.nothing = nothing;
+//# sourceMappingURL=notMain.js.map

package/lib/commonjs/build/__fixtures__/noEntry/src/notMain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notMain.js","sourceRoot":"","sources":["../../../../../../src/build/__fixtures__/noEntry/src/notMain.ts"],"names":[],"mappings":";;;AAAO,MAAM,OAAO,GAAG,GAAS,EAAE,GAAE,CAAC,CAAC;AAAzB,QAAA,OAAO,WAAkB","sourcesContent":["export const nothing = (): void => {};\n"]}

package/lib/commonjs/build/__fixtures__/nonFunction/src/main.d.ts

@@ -0,0 +1,2 @@
+export declare const greet: (name: string) => string;
+export declare const version = 3;

package/lib/commonjs/build/__fixtures__/nonFunction/src/main.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.version = exports.greet = void 0;
+const greet = (name) => `hello ${name}`;
+exports.greet = greet;
+exports.version = 3;
+//# sourceMappingURL=main.js.map

package/lib/commonjs/build/__fixtures__/nonFunction/src/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../../../../src/build/__fixtures__/nonFunction/src/main.ts"],"names":[],"mappings":";;;AAAO,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC;AAAlD,QAAA,KAAK,SAA6C;AAClD,QAAA,OAAO,GAAG,CAAC,CAAC","sourcesContent":["export const greet = (name: string): string => `hello ${name}`;\nexport const version = 3;\n"]}

package/lib/commonjs/build/assertUserScriptExports.d.ts

@@ -0,0 +1,6 @@
+import { UserScriptModuleExports } from '@qpqjs/core';
+/**
+ * The output contract, judged on what loading the built module reported: at least one export,
+ * and every export a function. Returns the function names in definition order.
+ */
+export declare const assertUserScriptExports: (label: string, exports: UserScriptModuleExports) => string[];

package/lib/commonjs/build/assertUserScriptExports.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertUserScriptExports = void 0;
+const UserScriptBuildError_1 = require("./UserScriptBuildError");
+/**
+ * The output contract, judged on what loading the built module reported: at least one export,
+ * and every export a function. Returns the function names in definition order.
+ */
+const assertUserScriptExports = (label, exports) => {
+    if (exports.functions.length === 0 && exports.nonFunctions.length === 0) {
+        throw new UserScriptBuildError_1.UserScriptBuildError(UserScriptBuildError_1.UserScriptBuildErrorCode.NoExports, `[${label}] exports nothing; a script must export at least one function`);
+    }
+    const [nonFunction] = exports.nonFunctions;
+    if (nonFunction) {
+        throw new UserScriptBuildError_1.UserScriptBuildError(UserScriptBuildError_1.UserScriptBuildErrorCode.NonFunctionExport, `[${label}] export [${nonFunction}] is not a function; a script may only export functions`);
+    }
+    return exports.functions;
+};
+exports.assertUserScriptExports = assertUserScriptExports;
+//# sourceMappingURL=assertUserScriptExports.js.map

package/lib/commonjs/build/assertUserScriptExports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertUserScriptExports.js","sourceRoot":"","sources":["../../../src/build/assertUserScriptExports.ts"],"names":[],"mappings":";;;AAEA,iEAAwF;AAExF;;;GAGG;AACI,MAAM,uBAAuB,GAAG,CAAC,KAAa,EAAE,OAAgC,EAAY,EAAE;IACnG,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,2CAAoB,CAAC,+CAAwB,CAAC,SAAS,EAAE,IAAI,KAAK,+DAA+D,CAAC,CAAC;IAC/I,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,2CAAoB,CAC5B,+CAAwB,CAAC,iBAAiB,EAC1C,IAAI,KAAK,aAAa,WAAW,yDAAyD,CAC3F,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC,SAAS,CAAC;AAC3B,CAAC,CAAC;AAdW,QAAA,uBAAuB,2BAclC","sourcesContent":["import { UserScriptModuleExports } from '@qpqjs/core';\n\nimport { UserScriptBuildError, UserScriptBuildErrorCode } from './UserScriptBuildError';\n\n/**\n * The output contract, judged on what loading the built module reported: at least one export,\n * and every export a function. Returns the function names in definition order.\n */\nexport const assertUserScriptExports = (label: string, exports: UserScriptModuleExports): string[] => {\n  if (exports.functions.length === 0 && exports.nonFunctions.length === 0) {\n    throw new UserScriptBuildError(UserScriptBuildErrorCode.NoExports, `[${label}] exports nothing; a script must export at least one function`);\n  }\n\n  const [nonFunction] = exports.nonFunctions;\n  if (nonFunction) {\n    throw new UserScriptBuildError(\n      UserScriptBuildErrorCode.NonFunctionExport,\n      `[${label}] export [${nonFunction}] is not a function; a script may only export functions`,\n    );\n  }\n\n  return exports.functions;\n};\n"]}

package/lib/commonjs/build/buildUserScript.d.ts

@@ -0,0 +1,15 @@
+import { UserScriptModuleMap } from '@qpqjs/actionprocessor-node';
+import { UserScriptBuildResult } from './UserScriptBuildResult';
+export type BuildUserScriptOptions = {
+    projectDir: string;
+    outDir: string;
+    sourceMap?: boolean;
+    hostModules?: UserScriptModuleMap;
+};
+/**
+ * Builds a script project into `<outDir>/main.js`, the only file written. The output is not
+ * loaded here: a platform build has the sandbox report its exports (askUserScriptListExports)
+ * and a local build uses checkUserScriptOutput. Throws UserScriptBuildError; the `code` says
+ * whether the project or the bundle was at fault. `outDir` is emptied first.
+ */
+export declare const buildUserScript: ({ projectDir, outDir, sourceMap, hostModules, }: BuildUserScriptOptions) => Promise<UserScriptBuildResult>;