@qpqjs/user-script 0.0.0-stage → 0.2.0

package/lib/esm/actionProcessor/logic/extractUserScriptZip.js

@@ -0,0 +1,132 @@
+import fs from 'fs';
+import { Transform } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+import path from 'path';
+import yauzl from 'yauzl';
+import { isSafeProjectPath } from './isSafeProjectPath';
+import { USER_SCRIPT_SOURCE_LIMITS } from './USER_SCRIPT_SOURCE_LIMITS';
+import { UserScriptArchiveError, UserScriptArchiveErrorCode } from './UserScriptArchiveError';
+const REFUSED_DIRECTORY = 'node_modules';
+const SYMLINK_MODE = 0o120000;
+const FILE_TYPE_MASK = 0o170000;
+// Unix mode lives in the high 16 bits of the external attributes; zips made on other
+// systems leave it zero, which reads as "not a symlink".
+const isSymlinkEntry = (entry) => ((entry.externalFileAttributes >>> 16) & FILE_TYPE_MASK) === SYMLINK_MODE;
+// With decodeStrings off, yauzl hands names over raw so it does not apply its own path
+// rules before ours.
+const entryName = (entry) => (Buffer.isBuffer(entry.fileName) ? entry.fileName.toString('utf8') : String(entry.fileName));
+const isDirectoryEntry = (name) => name.endsWith('/');
+const openZip = (zip) => new Promise((resolve, reject) => {
+    // Header sizes are never consulted: the byte cap on the inflated stream is the only
+    // authority, so yauzl's own size validation is off rather than a second, trusted, rule.
+    yauzl.fromBuffer(zip, { lazyEntries: true, decodeStrings: false, validateEntrySizes: false }, (error, zipFile) => error ? reject(error) : resolve(zipFile));
+});
+const readEntries = (zipFile, onEntry) => new Promise((resolve, reject) => {
+    zipFile.on('error', reject);
+    zipFile.on('end', resolve);
+    zipFile.on('entry', (entry) => {
+        // A rule that throws synchronously must still reject here, not escape yauzl's
+        // event emitter where it would be lost and leave the zip hanging.
+        Promise.resolve()
+            .then(() => onEntry(entry))
+            .then(() => zipFile.readEntry(), (error) => {
+            zipFile.close();
+            reject(error);
+        });
+    });
+    zipFile.readEntry();
+});
+const openEntryStream = (zipFile, entry) => new Promise((resolve, reject) => {
+    zipFile.openReadStream(entry, (error, stream) => (error ? reject(error) : resolve(stream)));
+});
+const tooLarge = (message) => new UserScriptArchiveError(UserScriptArchiveErrorCode.SourceTooLarge, message);
+const unsafe = (message) => new UserScriptArchiveError(UserScriptArchiveErrorCode.UnsafeArchiveEntry, message);
+const invalid = (message) => new UserScriptArchiveError(UserScriptArchiveErrorCode.InvalidArchive, message);
+// Counts the bytes that really come out of the inflater and fails the pipeline the moment
+// the project cap is crossed, so a zip that lies about its sizes cannot fill the disk.
+const createByteCap = (counter, onExceeded) => new Transform({
+    transform(chunk, _encoding, callback) {
+        counter.total += chunk.length;
+        if (counter.total > USER_SCRIPT_SOURCE_LIMITS.maxBytes) {
+            callback(onExceeded());
+            return;
+        }
+        callback(null, chunk);
+    },
+});
+// Accepts the project at the zip root (anything under `src/`), or wrapped in exactly one
+// top-level folder (how most tools zip a directory): when nothing is under `src/` at the
+// root, every file shares the same first segment, and none sits at the root, that segment
+// is stripped. A root `src/` always wins, so a project with only `src/` is never stripped.
+const stripCommonFolder = (names) => {
+    if (names.length === 0 || names.some((name) => name.startsWith('src/')))
+        return 0;
+    const firstSegments = new Set(names.map((name) => name.split('/')[0]));
+    const allNested = names.every((name) => name.includes('/'));
+    return firstSegments.size === 1 && allNested ? [...firstSegments][0].length + 1 : 0;
+};
+const planEntries = async (zip) => {
+    const files = [];
+    const zipFile = await openZip(zip);
+    await readEntries(zipFile, (entry) => {
+        const name = entryName(entry);
+        if (isDirectoryEntry(name))
+            return;
+        if (entry.isEncrypted())
+            throw invalid(`entry [${name}] is encrypted`);
+        if (isSymlinkEntry(entry))
+            throw unsafe(`entry [${name}] is a symlink`);
+        if (!isSafeProjectPath(name))
+            throw unsafe(`entry [${name}] is not a plain relative path inside the project`);
+        if (name.split('/').includes(REFUSED_DIRECTORY)) {
+            throw tooLarge(`entry [${name}] is inside a ${REFUSED_DIRECTORY} folder; dependencies are not supported in a user script yet`);
+        }
+        files.push({ entry, relativePath: name });
+        if (files.length > USER_SCRIPT_SOURCE_LIMITS.maxFiles) {
+            throw tooLarge(`the archive holds more than ${USER_SCRIPT_SOURCE_LIMITS.maxFiles} files`);
+        }
+    });
+    const strip = stripCommonFolder(files.map((file) => file.relativePath));
+    return files.map((file) => ({ ...file, relativePath: file.relativePath.slice(strip) }));
+};
+/**
+ * Unpacks a user-controlled zip into the project directory under the same rules as a
+ * directory build: plain relative paths only, no symlinks, no node_modules, at most
+ * USER_SCRIPT_SOURCE_LIMITS files and unpacked bytes counted as they are written (the
+ * sizes in the zip's headers are never trusted). Directory entries are ignored; folders
+ * come from file paths. Returns the project-relative paths written.
+ */
+export const extractUserScriptZip = async (zip, projectDir) => {
+    let planned;
+    try {
+        planned = await planEntries(zip);
+    }
+    catch (error) {
+        if (error instanceof UserScriptArchiveError)
+            throw error;
+        throw invalid(`cannot read the archive: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const counter = { total: 0 };
+    const written = [];
+    const zipFile = await openZip(zip);
+    const plannedByEntryName = new Map(planned.map((file) => [entryName(file.entry), file.relativePath]));
+    try {
+        await readEntries(zipFile, async (entry) => {
+            const relativePath = plannedByEntryName.get(entryName(entry));
+            if (relativePath === undefined)
+                return;
+            const target = path.join(projectDir, ...relativePath.split('/'));
+            fs.mkdirSync(path.dirname(target), { recursive: true });
+            const stream = await openEntryStream(zipFile, entry);
+            await pipeline(stream, createByteCap(counter, () => tooLarge(`the archive unpacks to more than ${USER_SCRIPT_SOURCE_LIMITS.maxBytes} bytes`)), fs.createWriteStream(target));
+            written.push(relativePath);
+        });
+    }
+    catch (error) {
+        if (error instanceof UserScriptArchiveError)
+            throw error;
+        throw invalid(`cannot unpack the archive: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    return written;
+};
+//# sourceMappingURL=extractUserScriptZip.js.map

package/lib/esm/actionProcessor/logic/extractUserScriptZip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extractUserScriptZip.js","sourceRoot":"","sources":["../../../../src/actionProcessor/logic/extractUserScriptZip.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAY,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,KAAyB,MAAM,OAAO,CAAC;AAE9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAE9F,MAAM,iBAAiB,GAAG,cAAc,CAAC;AACzC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAC9B,MAAM,cAAc,GAAG,QAAQ,CAAC;AAEhC,qFAAqF;AACrF,yDAAyD;AACzD,MAAM,cAAc,GAAG,CAAC,KAAY,EAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,GAAG,cAAc,CAAC,KAAK,YAAY,CAAC;AAE5H,uFAAuF;AACvF,qBAAqB;AACrB,MAAM,SAAS,GAAG,CAAC,KAAY,EAAU,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAEzI,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAEvE,MAAM,OAAO,GAAG,CAAC,GAAW,EAAoB,EAAE,CAChD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,oFAAoF;IACpF,wFAAwF;IACxF,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAC/G,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CACzC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,CAAC,OAAgB,EAAE,OAA+C,EAAiB,EAAE,CACvG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;QACnC,8EAA8E;QAC9E,kEAAkE;QAClE,OAAO,CAAC,OAAO,EAAE;aACd,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;aAC1B,IAAI,CACH,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EACzB,CAAC,KAAK,EAAE,EAAE;YACR,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CACF,CAAC;IACN,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,SAAS,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEL,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAE,KAAY,EAAqB,EAAE,CAC5E,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC;AAEL,MAAM,QAAQ,GAAG,CAAC,OAAe,EAA0B,EAAE,CAAC,IAAI,sBAAsB,CAAC,0BAA0B,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;AAC7I,MAAM,MAAM,GAAG,CAAC,OAAe,EAA0B,EAAE,CAAC,IAAI,sBAAsB,CAAC,0BAA0B,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AAC/I,MAAM,OAAO,GAAG,CAAC,OAAe,EAA0B,EAAE,CAAC,IAAI,sBAAsB,CAAC,0BAA0B,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;AAE5I,0FAA0F;AAC1F,uFAAuF;AACvF,MAAM,aAAa,GAAG,CAAC,OAA0B,EAAE,UAAuB,EAAa,EAAE,CACvF,IAAI,SAAS,CAAC;IACZ,SAAS,CAAC,KAAa,EAAE,SAAS,EAAE,QAAQ;QAC1C,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QAC9B,IAAI,OAAO,CAAC,KAAK,GAAG,yBAAyB,CAAC,QAAQ,EAAE,CAAC;YACvD,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;CACF,CAAC,CAAC;AAIL,yFAAyF;AACzF,yFAAyF;AACzF,0FAA0F;AAC1F,2FAA2F;AAC3F,MAAM,iBAAiB,GAAG,CAAC,KAAe,EAAU,EAAE;IACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAElF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAE5D,OAAO,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,KAAK,EAAE,GAAW,EAA2B,EAAE;IACjE,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAEnC,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,gBAAgB,CAAC,IAAI,CAAC;YAAE,OAAO;QAEnC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,MAAM,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAC;QACvE,IAAI,cAAc,CAAC,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAC;QACxE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;YAAE,MAAM,MAAM,CAAC,UAAU,IAAI,mDAAmD,CAAC,CAAC;QAC9G,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAChD,MAAM,QAAQ,CAAC,UAAU,IAAI,iBAAiB,iBAAiB,8DAA8D,CAAC,CAAC;QACjI,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,yBAAyB,CAAC,QAAQ,EAAE,CAAC;YACtD,MAAM,QAAQ,CAAC,+BAA+B,yBAAyB,CAAC,QAAQ,QAAQ,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAExE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1F,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EAAE,GAAW,EAAE,UAAkB,EAAqB,EAAE;IAC/F,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB;YAAE,MAAM,KAAK,CAAC;QACzD,MAAM,OAAO,CAAC,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAEtG,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACzC,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9D,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO;YAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACjE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAExD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACrD,MAAM,QAAQ,CACZ,MAAM,EACN,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,oCAAoC,yBAAyB,CAAC,QAAQ,QAAQ,CAAC,CAAC,EACtH,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAC7B,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB;YAAE,MAAM,KAAK,CAAC;QACzD,MAAM,OAAO,CAAC,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxG,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC","sourcesContent":["import fs from 'fs';\nimport { Readable, Transform } from 'node:stream';\nimport { pipeline } from 'node:stream/promises';\nimport path from 'path';\nimport yauzl, { Entry, ZipFile } from 'yauzl';\n\nimport { isSafeProjectPath } from './isSafeProjectPath';\nimport { USER_SCRIPT_SOURCE_LIMITS } from './USER_SCRIPT_SOURCE_LIMITS';\nimport { UserScriptArchiveError, UserScriptArchiveErrorCode } from './UserScriptArchiveError';\n\nconst REFUSED_DIRECTORY = 'node_modules';\nconst SYMLINK_MODE = 0o120000;\nconst FILE_TYPE_MASK = 0o170000;\n\n// Unix mode lives in the high 16 bits of the external attributes; zips made on other\n// systems leave it zero, which reads as \"not a symlink\".\nconst isSymlinkEntry = (entry: Entry): boolean => ((entry.externalFileAttributes >>> 16) & FILE_TYPE_MASK) === SYMLINK_MODE;\n\n// With decodeStrings off, yauzl hands names over raw so it does not apply its own path\n// rules before ours.\nconst entryName = (entry: Entry): string => (Buffer.isBuffer(entry.fileName) ? entry.fileName.toString('utf8') : String(entry.fileName));\n\nconst isDirectoryEntry = (name: string): boolean => name.endsWith('/');\n\nconst openZip = (zip: Buffer): Promise<ZipFile> =>\n  new Promise((resolve, reject) => {\n    // Header sizes are never consulted: the byte cap on the inflated stream is the only\n    // authority, so yauzl's own size validation is off rather than a second, trusted, rule.\n    yauzl.fromBuffer(zip, { lazyEntries: true, decodeStrings: false, validateEntrySizes: false }, (error, zipFile) =>\n      error ? reject(error) : resolve(zipFile),\n    );\n  });\n\nconst readEntries = (zipFile: ZipFile, onEntry: (entry: Entry) => Promise<void> | void): Promise<void> =>\n  new Promise((resolve, reject) => {\n    zipFile.on('error', reject);\n    zipFile.on('end', resolve);\n    zipFile.on('entry', (entry: Entry) => {\n      // A rule that throws synchronously must still reject here, not escape yauzl's\n      // event emitter where it would be lost and leave the zip hanging.\n      Promise.resolve()\n        .then(() => onEntry(entry))\n        .then(\n          () => zipFile.readEntry(),\n          (error) => {\n            zipFile.close();\n            reject(error);\n          },\n        );\n    });\n    zipFile.readEntry();\n  });\n\nconst openEntryStream = (zipFile: ZipFile, entry: Entry): Promise<Readable> =>\n  new Promise((resolve, reject) => {\n    zipFile.openReadStream(entry, (error, stream) => (error ? reject(error) : resolve(stream)));\n  });\n\nconst tooLarge = (message: string): UserScriptArchiveError => new UserScriptArchiveError(UserScriptArchiveErrorCode.SourceTooLarge, message);\nconst unsafe = (message: string): UserScriptArchiveError => new UserScriptArchiveError(UserScriptArchiveErrorCode.UnsafeArchiveEntry, message);\nconst invalid = (message: string): UserScriptArchiveError => new UserScriptArchiveError(UserScriptArchiveErrorCode.InvalidArchive, message);\n\n// Counts the bytes that really come out of the inflater and fails the pipeline the moment\n// the project cap is crossed, so a zip that lies about its sizes cannot fill the disk.\nconst createByteCap = (counter: { total: number }, onExceeded: () => Error): Transform =>\n  new Transform({\n    transform(chunk: Buffer, _encoding, callback) {\n      counter.total += chunk.length;\n      if (counter.total > USER_SCRIPT_SOURCE_LIMITS.maxBytes) {\n        callback(onExceeded());\n        return;\n      }\n      callback(null, chunk);\n    },\n  });\n\ntype PlannedEntry = { entry: Entry; relativePath: string };\n\n// Accepts the project at the zip root (anything under `src/`), or wrapped in exactly one\n// top-level folder (how most tools zip a directory): when nothing is under `src/` at the\n// root, every file shares the same first segment, and none sits at the root, that segment\n// is stripped. A root `src/` always wins, so a project with only `src/` is never stripped.\nconst stripCommonFolder = (names: string[]): number => {\n  if (names.length === 0 || names.some((name) => name.startsWith('src/'))) return 0;\n\n  const firstSegments = new Set(names.map((name) => name.split('/')[0]));\n  const allNested = names.every((name) => name.includes('/'));\n\n  return firstSegments.size === 1 && allNested ? [...firstSegments][0].length + 1 : 0;\n};\n\nconst planEntries = async (zip: Buffer): Promise<PlannedEntry[]> => {\n  const files: PlannedEntry[] = [];\n  const zipFile = await openZip(zip);\n\n  await readEntries(zipFile, (entry) => {\n    const name = entryName(entry);\n    if (isDirectoryEntry(name)) return;\n\n    if (entry.isEncrypted()) throw invalid(`entry [${name}] is encrypted`);\n    if (isSymlinkEntry(entry)) throw unsafe(`entry [${name}] is a symlink`);\n    if (!isSafeProjectPath(name)) throw unsafe(`entry [${name}] is not a plain relative path inside the project`);\n    if (name.split('/').includes(REFUSED_DIRECTORY)) {\n      throw tooLarge(`entry [${name}] is inside a ${REFUSED_DIRECTORY} folder; dependencies are not supported in a user script yet`);\n    }\n\n    files.push({ entry, relativePath: name });\n    if (files.length > USER_SCRIPT_SOURCE_LIMITS.maxFiles) {\n      throw tooLarge(`the archive holds more than ${USER_SCRIPT_SOURCE_LIMITS.maxFiles} files`);\n    }\n  });\n\n  const strip = stripCommonFolder(files.map((file) => file.relativePath));\n\n  return files.map((file) => ({ ...file, relativePath: file.relativePath.slice(strip) }));\n};\n\n/**\n * Unpacks a user-controlled zip into the project directory under the same rules as a\n * directory build: plain relative paths only, no symlinks, no node_modules, at most\n * USER_SCRIPT_SOURCE_LIMITS files and unpacked bytes counted as they are written (the\n * sizes in the zip's headers are never trusted). Directory entries are ignored; folders\n * come from file paths. Returns the project-relative paths written.\n */\nexport const extractUserScriptZip = async (zip: Buffer, projectDir: string): Promise<string[]> => {\n  let planned: PlannedEntry[];\n  try {\n    planned = await planEntries(zip);\n  } catch (error) {\n    if (error instanceof UserScriptArchiveError) throw error;\n    throw invalid(`cannot read the archive: ${error instanceof Error ? error.message : String(error)}`);\n  }\n\n  const counter = { total: 0 };\n  const written: string[] = [];\n  const zipFile = await openZip(zip);\n  const plannedByEntryName = new Map(planned.map((file) => [entryName(file.entry), file.relativePath]));\n\n  try {\n    await readEntries(zipFile, async (entry) => {\n      const relativePath = plannedByEntryName.get(entryName(entry));\n      if (relativePath === undefined) return;\n\n      const target = path.join(projectDir, ...relativePath.split('/'));\n      fs.mkdirSync(path.dirname(target), { recursive: true });\n\n      const stream = await openEntryStream(zipFile, entry);\n      await pipeline(\n        stream,\n        createByteCap(counter, () => tooLarge(`the archive unpacks to more than ${USER_SCRIPT_SOURCE_LIMITS.maxBytes} bytes`)),\n        fs.createWriteStream(target),\n      );\n      written.push(relativePath);\n    });\n  } catch (error) {\n    if (error instanceof UserScriptArchiveError) throw error;\n    throw invalid(`cannot unpack the archive: ${error instanceof Error ? error.message : String(error)}`);\n  }\n\n  return written;\n};\n"]}

package/lib/esm/actionProcessor/logic/getUserScriptBuildErrorType.d.ts

@@ -0,0 +1,7 @@
+import { UserScriptBuildErrorCode } from '../../build/UserScriptBuildError';
+export type UserScriptBuildErrorCatalog = Record<'SourceNotFound' | 'BuildFailed' | 'OutputNotSingleFile' | 'NoExports' | 'NonFunctionExport', string>;
+/**
+ * The action error type for a build failure. Codes map one to one, except that a missing
+ * entry is the caller's source being wrong, not the build, so it is SourceNotFound.
+ */
+export declare const getUserScriptBuildErrorType: (code: UserScriptBuildErrorCode, errorType: UserScriptBuildErrorCatalog) => string;

package/lib/esm/actionProcessor/logic/getUserScriptBuildErrorType.js

@@ -0,0 +1,16 @@
+import { UserScriptBuildErrorCode } from '../../build/UserScriptBuildError';
+/**
+ * The action error type for a build failure. Codes map one to one, except that a missing
+ * entry is the caller's source being wrong, not the build, so it is SourceNotFound.
+ */
+export const getUserScriptBuildErrorType = (code, errorType) => {
+    const byCode = {
+        [UserScriptBuildErrorCode.NoEntry]: errorType.SourceNotFound,
+        [UserScriptBuildErrorCode.BuildFailed]: errorType.BuildFailed,
+        [UserScriptBuildErrorCode.OutputNotSingleFile]: errorType.OutputNotSingleFile,
+        [UserScriptBuildErrorCode.NoExports]: errorType.NoExports,
+        [UserScriptBuildErrorCode.NonFunctionExport]: errorType.NonFunctionExport,
+    };
+    return byCode[code];
+};
+//# sourceMappingURL=getUserScriptBuildErrorType.js.map

package/lib/esm/actionProcessor/logic/getUserScriptBuildErrorType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserScriptBuildErrorType.js","sourceRoot":"","sources":["../../../../src/actionProcessor/logic/getUserScriptBuildErrorType.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAQ5E;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,IAA8B,EAAE,SAAsC,EAAU,EAAE;IAC5H,MAAM,MAAM,GAA6C;QACvD,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,cAAc;QAC5D,CAAC,wBAAwB,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,WAAW;QAC7D,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,EAAE,SAAS,CAAC,mBAAmB;QAC7E,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,SAAS;QACzD,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC,iBAAiB;KAC1E,CAAC;IAEF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC,CAAC","sourcesContent":["import { UserScriptBuildErrorCode } from '../../build/UserScriptBuildError';\n\n// The error names a build action's catalog must carry for the build's own codes.\nexport type UserScriptBuildErrorCatalog = Record<\n  'SourceNotFound' | 'BuildFailed' | 'OutputNotSingleFile' | 'NoExports' | 'NonFunctionExport',\n  string\n>;\n\n/**\n * The action error type for a build failure. Codes map one to one, except that a missing\n * entry is the caller's source being wrong, not the build, so it is SourceNotFound.\n */\nexport const getUserScriptBuildErrorType = (code: UserScriptBuildErrorCode, errorType: UserScriptBuildErrorCatalog): string => {\n  const byCode: Record<UserScriptBuildErrorCode, string> = {\n    [UserScriptBuildErrorCode.NoEntry]: errorType.SourceNotFound,\n    [UserScriptBuildErrorCode.BuildFailed]: errorType.BuildFailed,\n    [UserScriptBuildErrorCode.OutputNotSingleFile]: errorType.OutputNotSingleFile,\n    [UserScriptBuildErrorCode.NoExports]: errorType.NoExports,\n    [UserScriptBuildErrorCode.NonFunctionExport]: errorType.NonFunctionExport,\n  };\n\n  return byCode[code];\n};\n"]}

package/lib/esm/actionProcessor/logic/index.d.ts

@@ -0,0 +1,12 @@
+export * from './askUserScriptCheckPublishedOutput';
+export * from './askUserScriptCollectSource';
+export * from './askUserScriptPublishOutput';
+export * from './buildUserScriptInTempDir';
+export * from './BuiltUserScript';
+export * from './extractUserScriptZip';
+export * from './getUserScriptBuildErrorType';
+export * from './isSafeProjectPath';
+export * from './materialiseUserScriptSource';
+export * from './USER_SCRIPT_SOURCE_LIMITS';
+export * from './UserScriptArchiveError';
+export * from './UserScriptSourceFile';

package/lib/esm/actionProcessor/logic/index.js

@@ -0,0 +1,13 @@
+export * from './askUserScriptCheckPublishedOutput';
+export * from './askUserScriptCollectSource';
+export * from './askUserScriptPublishOutput';
+export * from './buildUserScriptInTempDir';
+export * from './BuiltUserScript';
+export * from './extractUserScriptZip';
+export * from './getUserScriptBuildErrorType';
+export * from './isSafeProjectPath';
+export * from './materialiseUserScriptSource';
+export * from './USER_SCRIPT_SOURCE_LIMITS';
+export * from './UserScriptArchiveError';
+export * from './UserScriptSourceFile';
+//# sourceMappingURL=index.js.map

package/lib/esm/actionProcessor/logic/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actionProcessor/logic/index.ts"],"names":[],"mappings":"AAAA,cAAc,qCAAqC,CAAC;AACpD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC","sourcesContent":["export * from './askUserScriptCheckPublishedOutput';\nexport * from './askUserScriptCollectSource';\nexport * from './askUserScriptPublishOutput';\nexport * from './buildUserScriptInTempDir';\nexport * from './BuiltUserScript';\nexport * from './extractUserScriptZip';\nexport * from './getUserScriptBuildErrorType';\nexport * from './isSafeProjectPath';\nexport * from './materialiseUserScriptSource';\nexport * from './USER_SCRIPT_SOURCE_LIMITS';\nexport * from './UserScriptArchiveError';\nexport * from './UserScriptSourceFile';\n"]}

package/lib/esm/actionProcessor/logic/isSafeProjectPath.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Whether a path from an untrusted source (a drive listing, a zip entry) may be written
+ * under a project directory: relative, forward slashes only, no `..`, no empty segment.
+ */
+export declare const isSafeProjectPath: (relativePath: string) => boolean;

package/lib/esm/actionProcessor/logic/isSafeProjectPath.js

@@ -0,0 +1,9 @@
+/**
+ * Whether a path from an untrusted source (a drive listing, a zip entry) may be written
+ * under a project directory: relative, forward slashes only, no `..`, no empty segment.
+ */
+export const isSafeProjectPath = (relativePath) => relativePath.length > 0 &&
+    !relativePath.includes('\\') &&
+    !relativePath.startsWith('/') &&
+    !relativePath.split('/').some((segment) => segment === '' || segment === '.' || segment === '..');
+//# sourceMappingURL=isSafeProjectPath.js.map

package/lib/esm/actionProcessor/logic/isSafeProjectPath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isSafeProjectPath.js","sourceRoot":"","sources":["../../../../src/actionProcessor/logic/isSafeProjectPath.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,YAAoB,EAAW,EAAE,CACjE,YAAY,CAAC,MAAM,GAAG,CAAC;IACvB,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;IAC7B,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC","sourcesContent":["/**\n * Whether a path from an untrusted source (a drive listing, a zip entry) may be written\n * under a project directory: relative, forward slashes only, no `..`, no empty segment.\n */\nexport const isSafeProjectPath = (relativePath: string): boolean =>\n  relativePath.length > 0 &&\n  !relativePath.includes('\\\\') &&\n  !relativePath.startsWith('/') &&\n  !relativePath.split('/').some((segment) => segment === '' || segment === '.' || segment === '..');\n"]}

package/lib/esm/actionProcessor/logic/materialiseUserScriptSource.d.ts

@@ -0,0 +1,3 @@
+import { UserScriptSourceFile } from './UserScriptSourceFile';
+/** Writes collected source files under the project directory, refusing any path that would leave it. */
+export declare const materialiseUserScriptSource: (projectDir: string, files: UserScriptSourceFile[]) => void;

package/lib/esm/actionProcessor/logic/materialiseUserScriptSource.js

@@ -0,0 +1,16 @@
+import fs from 'fs';
+import path from 'path';
+import { UserScriptBuildError, UserScriptBuildErrorCode } from '../../build/UserScriptBuildError';
+import { isSafeProjectPath } from './isSafeProjectPath';
+/** Writes collected source files under the project directory, refusing any path that would leave it. */
+export const materialiseUserScriptSource = (projectDir, files) => {
+    for (const file of files) {
+        if (!isSafeProjectPath(file.path)) {
+            throw new UserScriptBuildError(UserScriptBuildErrorCode.BuildFailed, `Refusing source path [${file.path}]`);
+        }
+        const target = path.join(projectDir, ...file.path.split('/'));
+        fs.mkdirSync(path.dirname(target), { recursive: true });
+        fs.writeFileSync(target, file.text);
+    }
+};
+//# sourceMappingURL=materialiseUserScriptSource.js.map

package/lib/esm/actionProcessor/logic/materialiseUserScriptSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"materialiseUserScriptSource.js","sourceRoot":"","sources":["../../../../src/actionProcessor/logic/materialiseUserScriptSource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGxD,wGAAwG;AACxG,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,UAAkB,EAAE,KAA6B,EAAQ,EAAE;IACrG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,oBAAoB,CAAC,wBAAwB,CAAC,WAAW,EAAE,yBAAyB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QAC9G,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;AACH,CAAC,CAAC","sourcesContent":["import fs from 'fs';\nimport path from 'path';\n\nimport { UserScriptBuildError, UserScriptBuildErrorCode } from '../../build/UserScriptBuildError';\nimport { isSafeProjectPath } from './isSafeProjectPath';\nimport { UserScriptSourceFile } from './UserScriptSourceFile';\n\n/** Writes collected source files under the project directory, refusing any path that would leave it. */\nexport const materialiseUserScriptSource = (projectDir: string, files: UserScriptSourceFile[]): void => {\n  for (const file of files) {\n    if (!isSafeProjectPath(file.path)) {\n      throw new UserScriptBuildError(UserScriptBuildErrorCode.BuildFailed, `Refusing source path [${file.path}]`);\n    }\n    const target = path.join(projectDir, ...file.path.split('/'));\n    fs.mkdirSync(path.dirname(target), { recursive: true });\n    fs.writeFileSync(target, file.text);\n  }\n};\n"]}

package/lib/esm/build/USER_SCRIPT_ENTRY_CANDIDATES.d.ts

@@ -0,0 +1,2 @@
+/** The entry files a script project may have, relative to its root, in the order they are tried. */
+export declare const USER_SCRIPT_ENTRY_CANDIDATES: readonly ["src/main.ts", "src/main.js"];

package/lib/esm/build/USER_SCRIPT_ENTRY_CANDIDATES.js

@@ -0,0 +1,3 @@
+/** The entry files a script project may have, relative to its root, in the order they are tried. */
+export const USER_SCRIPT_ENTRY_CANDIDATES = ['src/main.ts', 'src/main.js'];
+//# sourceMappingURL=USER_SCRIPT_ENTRY_CANDIDATES.js.map

package/lib/esm/build/USER_SCRIPT_ENTRY_CANDIDATES.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"USER_SCRIPT_ENTRY_CANDIDATES.js","sourceRoot":"","sources":["../../../src/build/USER_SCRIPT_ENTRY_CANDIDATES.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,aAAa,EAAE,aAAa,CAAU,CAAC","sourcesContent":["/** The entry files a script project may have, relative to its root, in the order they are tried. */\nexport const USER_SCRIPT_ENTRY_CANDIDATES = ['src/main.ts', 'src/main.js'] as const;\n"]}

package/lib/esm/build/USER_SCRIPT_OUTPUT_FILENAME.d.ts

@@ -0,0 +1,2 @@
+/** The name a build writes the script under in its own out dir; a platform build then publishes that file to the caller's `outputFilepath`. */
+export declare const USER_SCRIPT_OUTPUT_FILENAME = "main.js";

package/lib/esm/build/USER_SCRIPT_OUTPUT_FILENAME.js

@@ -0,0 +1,3 @@
+/** The name a build writes the script under in its own out dir; a platform build then publishes that file to the caller's `outputFilepath`. */
+export const USER_SCRIPT_OUTPUT_FILENAME = 'main.js';
+//# sourceMappingURL=USER_SCRIPT_OUTPUT_FILENAME.js.map

package/lib/esm/build/USER_SCRIPT_OUTPUT_FILENAME.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"USER_SCRIPT_OUTPUT_FILENAME.js","sourceRoot":"","sources":["../../../src/build/USER_SCRIPT_OUTPUT_FILENAME.ts"],"names":[],"mappings":"AAAA,+IAA+I;AAC/I,MAAM,CAAC,MAAM,2BAA2B,GAAG,SAAS,CAAC","sourcesContent":["/** The name a build writes the script under in its own out dir; a platform build then publishes that file to the caller's `outputFilepath`. */\nexport const USER_SCRIPT_OUTPUT_FILENAME = 'main.js';\n"]}

package/lib/esm/build/UserScriptBuildError.d.ts

@@ -0,0 +1,12 @@
+export declare enum UserScriptBuildErrorCode {
+    NoEntry = "NoEntry",
+    BuildFailed = "BuildFailed",
+    OutputNotSingleFile = "OutputNotSingleFile",
+    NoExports = "NoExports",
+    NonFunctionExport = "NonFunctionExport"
+}
+/** Thrown by buildUserScript; `code` says which step refused the project. */
+export declare class UserScriptBuildError extends Error {
+    readonly code: UserScriptBuildErrorCode;
+    constructor(code: UserScriptBuildErrorCode, message: string);
+}

package/lib/esm/build/UserScriptBuildError.js

@@ -0,0 +1,23 @@
+export var UserScriptBuildErrorCode;
+(function (UserScriptBuildErrorCode) {
+    // No src/main.ts or src/main.js in the project.
+    UserScriptBuildErrorCode["NoEntry"] = "NoEntry";
+    // Rspack reported errors (a refused Node builtin among them).
+    UserScriptBuildErrorCode["BuildFailed"] = "BuildFailed";
+    // The build emitted more than one JavaScript file, so the output is not one loadable module.
+    UserScriptBuildErrorCode["OutputNotSingleFile"] = "OutputNotSingleFile";
+    // The built module has no own enumerable exports.
+    UserScriptBuildErrorCode["NoExports"] = "NoExports";
+    // An own enumerable export of the built module is not a function.
+    UserScriptBuildErrorCode["NonFunctionExport"] = "NonFunctionExport";
+})(UserScriptBuildErrorCode || (UserScriptBuildErrorCode = {}));
+/** Thrown by buildUserScript; `code` says which step refused the project. */
+export class UserScriptBuildError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'UserScriptBuildError';
+    }
+}
+//# sourceMappingURL=UserScriptBuildError.js.map

package/lib/esm/build/UserScriptBuildError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserScriptBuildError.js","sourceRoot":"","sources":["../../../src/build/UserScriptBuildError.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,wBAWX;AAXD,WAAY,wBAAwB;IAClC,gDAAgD;IAChD,+CAAmB,CAAA;IACnB,8DAA8D;IAC9D,uDAA2B,CAAA;IAC3B,6FAA6F;IAC7F,uEAA2C,CAAA;IAC3C,kDAAkD;IAClD,mDAAuB,CAAA;IACvB,kEAAkE;IAClE,mEAAuC,CAAA;AACzC,CAAC,EAXW,wBAAwB,KAAxB,wBAAwB,QAWnC;AAED,6EAA6E;AAC7E,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAE3B;IADlB,YACkB,IAA8B,EAC9C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAA0B;QAI9C,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF","sourcesContent":["export enum UserScriptBuildErrorCode {\n  // No src/main.ts or src/main.js in the project.\n  NoEntry = 'NoEntry',\n  // Rspack reported errors (a refused Node builtin among them).\n  BuildFailed = 'BuildFailed',\n  // The build emitted more than one JavaScript file, so the output is not one loadable module.\n  OutputNotSingleFile = 'OutputNotSingleFile',\n  // The built module has no own enumerable exports.\n  NoExports = 'NoExports',\n  // An own enumerable export of the built module is not a function.\n  NonFunctionExport = 'NonFunctionExport',\n}\n\n/** Thrown by buildUserScript; `code` says which step refused the project. */\nexport class UserScriptBuildError extends Error {\n  constructor(\n    public readonly code: UserScriptBuildErrorCode,\n    message: string,\n  ) {\n    super(message);\n    this.name = 'UserScriptBuildError';\n  }\n}\n"]}

package/lib/esm/build/UserScriptBuildResult.d.ts

@@ -0,0 +1,4 @@
+/** What a successful user-script build produced. */
+export type UserScriptBuildResult = {
+    entryPath: string;
+};

package/lib/esm/build/UserScriptBuildResult.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=UserScriptBuildResult.js.map

package/lib/esm/build/UserScriptBuildResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserScriptBuildResult.js","sourceRoot":"","sources":["../../../src/build/UserScriptBuildResult.ts"],"names":[],"mappings":"","sourcesContent":["/** What a successful user-script build produced. */\nexport type UserScriptBuildResult = {\n  // Absolute path of the single CommonJS output, `<outDir>/main.js`, the only file written.\n  entryPath: string;\n};\n"]}

package/lib/esm/build/__fixtures__/basic/src/helpers/formatSum.d.ts

@@ -0,0 +1 @@
+export declare const formatSum: (sum: number) => string;

package/lib/esm/build/__fixtures__/basic/src/helpers/formatSum.js

@@ -0,0 +1,2 @@
+export const formatSum = (sum) => `added ${sum}`;
+//# sourceMappingURL=formatSum.js.map

package/lib/esm/build/__fixtures__/basic/src/helpers/formatSum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatSum.js","sourceRoot":"","sources":["../../../../../../../src/build/__fixtures__/basic/src/helpers/formatSum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC","sourcesContent":["export const formatSum = (sum: number): string => `added ${sum}`;\n"]}

package/lib/esm/build/__fixtures__/basic/src/main.d.ts

@@ -0,0 +1,4 @@
+import { AskResponse } from '@qpqjs/core';
+export declare function add(drive: string, filepath: string, a: number, b: number): AskResponse<number>;
+export declare const greet: (name: string) => string;
+export declare const makeId: () => string;

package/lib/esm/build/__fixtures__/basic/src/main.js

@@ -0,0 +1,11 @@
+import { askFileWriteTextContents } from '@qpqjs/core';
+import { uuidv7 } from 'uuidv7';
+import { formatSum } from './helpers/formatSum';
+export function* add(drive, filepath, a, b) {
+    const sum = a + b;
+    yield* askFileWriteTextContents(drive, filepath, formatSum(sum));
+    return sum;
+}
+export const greet = (name) => `hello ${name}`;
+export const makeId = () => uuidv7();
+//# sourceMappingURL=main.js.map

package/lib/esm/build/__fixtures__/basic/src/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../../../../src/build/__fixtures__/basic/src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAe,MAAM,aAAa,CAAC;AAEpE,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,MAAM,SAAS,CAAC,CAAC,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAE,CAAS,EAAE,CAAS;IACxE,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,KAAK,CAAC,CAAC,wBAAwB,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC;AAE/D,MAAM,CAAC,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,MAAM,EAAE,CAAC","sourcesContent":["import { askFileWriteTextContents, AskResponse } from '@qpqjs/core';\n\nimport { uuidv7 } from 'uuidv7';\n\nimport { formatSum } from './helpers/formatSum';\n\nexport function* add(drive: string, filepath: string, a: number, b: number): AskResponse<number> {\n  const sum = a + b;\n  yield* askFileWriteTextContents(drive, filepath, formatSum(sum));\n  return sum;\n}\n\nexport const greet = (name: string): string => `hello ${name}`;\n\nexport const makeId = (): string => uuidv7();\n"]}

package/lib/esm/build/__fixtures__/builtin/src/main.d.ts

@@ -0,0 +1 @@
+export declare const readIt: () => string;

package/lib/esm/build/__fixtures__/builtin/src/main.js

@@ -0,0 +1,3 @@
+import { readFileSync } from 'fs';
+export const readIt = () => readFileSync('/etc/hostname', 'utf8');
+//# sourceMappingURL=main.js.map

package/lib/esm/build/__fixtures__/builtin/src/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../../../../src/build/__fixtures__/builtin/src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAElC,MAAM,CAAC,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC","sourcesContent":["import { readFileSync } from 'fs';\n\nexport const readIt = (): string => readFileSync('/etc/hostname', 'utf8');\n"]}

package/lib/esm/build/__fixtures__/noEntry/src/notMain.d.ts

@@ -0,0 +1 @@
+export declare const nothing: () => void;

package/lib/esm/build/__fixtures__/noEntry/src/notMain.js

@@ -0,0 +1,2 @@
+export const nothing = () => { };
+//# sourceMappingURL=notMain.js.map

package/lib/esm/build/__fixtures__/noEntry/src/notMain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notMain.js","sourceRoot":"","sources":["../../../../../../src/build/__fixtures__/noEntry/src/notMain.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,GAAS,EAAE,GAAE,CAAC,CAAC","sourcesContent":["export const nothing = (): void => {};\n"]}

package/lib/esm/build/__fixtures__/nonFunction/src/main.d.ts

@@ -0,0 +1,2 @@
+export declare const greet: (name: string) => string;
+export declare const version = 3;

package/lib/esm/build/__fixtures__/nonFunction/src/main.js

@@ -0,0 +1,3 @@
+export const greet = (name) => `hello ${name}`;
+export const version = 3;
+//# sourceMappingURL=main.js.map

package/lib/esm/build/__fixtures__/nonFunction/src/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../../../../src/build/__fixtures__/nonFunction/src/main.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC;AAC/D,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC","sourcesContent":["export const greet = (name: string): string => `hello ${name}`;\nexport const version = 3;\n"]}

package/lib/esm/build/assertUserScriptExports.d.ts

@@ -0,0 +1,6 @@
+import { UserScriptModuleExports } from '@qpqjs/core';
+/**
+ * The output contract, judged on what loading the built module reported: at least one export,
+ * and every export a function. Returns the function names in definition order.
+ */
+export declare const assertUserScriptExports: (label: string, exports: UserScriptModuleExports) => string[];

package/lib/esm/build/assertUserScriptExports.js

@@ -0,0 +1,16 @@
+import { UserScriptBuildError, UserScriptBuildErrorCode } from './UserScriptBuildError';
+/**
+ * The output contract, judged on what loading the built module reported: at least one export,
+ * and every export a function. Returns the function names in definition order.
+ */
+export const assertUserScriptExports = (label, exports) => {
+    if (exports.functions.length === 0 && exports.nonFunctions.length === 0) {
+        throw new UserScriptBuildError(UserScriptBuildErrorCode.NoExports, `[${label}] exports nothing; a script must export at least one function`);
+    }
+    const [nonFunction] = exports.nonFunctions;
+    if (nonFunction) {
+        throw new UserScriptBuildError(UserScriptBuildErrorCode.NonFunctionExport, `[${label}] export [${nonFunction}] is not a function; a script may only export functions`);
+    }
+    return exports.functions;
+};
+//# sourceMappingURL=assertUserScriptExports.js.map

package/lib/esm/build/assertUserScriptExports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertUserScriptExports.js","sourceRoot":"","sources":["../../../src/build/assertUserScriptExports.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAExF;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,KAAa,EAAE,OAAgC,EAAY,EAAE;IACnG,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,oBAAoB,CAAC,wBAAwB,CAAC,SAAS,EAAE,IAAI,KAAK,+DAA+D,CAAC,CAAC;IAC/I,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,oBAAoB,CAC5B,wBAAwB,CAAC,iBAAiB,EAC1C,IAAI,KAAK,aAAa,WAAW,yDAAyD,CAC3F,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC,SAAS,CAAC;AAC3B,CAAC,CAAC","sourcesContent":["import { UserScriptModuleExports } from '@qpqjs/core';\n\nimport { UserScriptBuildError, UserScriptBuildErrorCode } from './UserScriptBuildError';\n\n/**\n * The output contract, judged on what loading the built module reported: at least one export,\n * and every export a function. Returns the function names in definition order.\n */\nexport const assertUserScriptExports = (label: string, exports: UserScriptModuleExports): string[] => {\n  if (exports.functions.length === 0 && exports.nonFunctions.length === 0) {\n    throw new UserScriptBuildError(UserScriptBuildErrorCode.NoExports, `[${label}] exports nothing; a script must export at least one function`);\n  }\n\n  const [nonFunction] = exports.nonFunctions;\n  if (nonFunction) {\n    throw new UserScriptBuildError(\n      UserScriptBuildErrorCode.NonFunctionExport,\n      `[${label}] export [${nonFunction}] is not a function; a script may only export functions`,\n    );\n  }\n\n  return exports.functions;\n};\n"]}

package/lib/esm/build/buildUserScript.d.ts

@@ -0,0 +1,15 @@
+import { UserScriptModuleMap } from '@qpqjs/actionprocessor-node';
+import { UserScriptBuildResult } from './UserScriptBuildResult';
+export type BuildUserScriptOptions = {
+    projectDir: string;
+    outDir: string;
+    sourceMap?: boolean;
+    hostModules?: UserScriptModuleMap;
+};
+/**
+ * Builds a script project into `<outDir>/main.js`, the only file written. The output is not
+ * loaded here: a platform build has the sandbox report its exports (askUserScriptListExports)
+ * and a local build uses checkUserScriptOutput. Throws UserScriptBuildError; the `code` says
+ * whether the project or the bundle was at fault. `outDir` is emptied first.
+ */
+export declare const buildUserScript: ({ projectDir, outDir, sourceMap, hostModules, }: BuildUserScriptOptions) => Promise<UserScriptBuildResult>;

package/lib/esm/build/buildUserScript.js

@@ -0,0 +1,39 @@
+import fs from 'fs';
+import path from 'path';
+import { getUserScriptRspackConfig } from './getUserScriptRspackConfig';
+import { resolveUserScriptEntry } from './resolveUserScriptEntry';
+import { runUserScriptRspack } from './runUserScriptRspack';
+import { USER_SCRIPT_OUTPUT_FILENAME } from './USER_SCRIPT_OUTPUT_FILENAME';
+import { UserScriptBuildError, UserScriptBuildErrorCode } from './UserScriptBuildError';
+const getErrorMessage = (error) => (error instanceof Error ? error.message : String(error));
+/**
+ * Builds a script project into `<outDir>/main.js`, the only file written. The output is not
+ * loaded here: a platform build has the sandbox report its exports (askUserScriptListExports)
+ * and a local build uses checkUserScriptOutput. Throws UserScriptBuildError; the `code` says
+ * whether the project or the bundle was at fault. `outDir` is emptied first.
+ */
+export const buildUserScript = async ({ projectDir, outDir, sourceMap = false, hostModules = {}, }) => {
+    const absoluteProjectDir = path.resolve(projectDir);
+    const absoluteOutDir = path.resolve(outDir);
+    const entrySource = resolveUserScriptEntry(absoluteProjectDir);
+    try {
+        await runUserScriptRspack(getUserScriptRspackConfig({
+            projectDir: absoluteProjectDir,
+            entryPath: entrySource,
+            outDir: absoluteOutDir,
+            sourceMap,
+            hostModuleNames: Object.keys(hostModules),
+        }));
+    }
+    catch (error) {
+        throw new UserScriptBuildError(UserScriptBuildErrorCode.BuildFailed, `Building [${absoluteProjectDir}] failed:\n${getErrorMessage(error)}`);
+    }
+    // Every emitted file counts, not just scripts: the build's whole output is one file, so a
+    // stray map, chunk or asset would be silently lost when only main.js is published.
+    const emitted = fs.readdirSync(absoluteOutDir);
+    if (emitted.length !== 1 || emitted[0] !== USER_SCRIPT_OUTPUT_FILENAME) {
+        throw new UserScriptBuildError(UserScriptBuildErrorCode.OutputNotSingleFile, `Building [${absoluteProjectDir}] emitted [${emitted.join(', ')}]; a script must build to exactly ${USER_SCRIPT_OUTPUT_FILENAME}`);
+    }
+    return { entryPath: path.join(absoluteOutDir, USER_SCRIPT_OUTPUT_FILENAME) };
+};
+//# sourceMappingURL=buildUserScript.js.map

package/lib/esm/build/buildUserScript.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildUserScript.js","sourceRoot":"","sources":["../../../src/build/buildUserScript.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAaxF,MAAM,eAAe,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAE7G;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,EACpC,UAAU,EACV,MAAM,EACN,SAAS,GAAG,KAAK,EACjB,WAAW,GAAG,EAAE,GACO,EAAkC,EAAE;IAC3D,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,mBAAmB,CACvB,yBAAyB,CAAC;YACxB,UAAU,EAAE,kBAAkB;YAC9B,SAAS,EAAE,WAAW;YACtB,MAAM,EAAE,cAAc;YACtB,SAAS;YACT,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;SAC1C,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,oBAAoB,CAAC,wBAAwB,CAAC,WAAW,EAAE,aAAa,kBAAkB,cAAc,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9I,CAAC;IAED,0FAA0F;IAC1F,mFAAmF;IACnF,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,2BAA2B,EAAE,CAAC;QACvE,MAAM,IAAI,oBAAoB,CAC5B,wBAAwB,CAAC,mBAAmB,EAC5C,aAAa,kBAAkB,cAAc,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC,2BAA2B,EAAE,CAClI,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,2BAA2B,CAAC,EAAE,CAAC;AAC/E,CAAC,CAAC","sourcesContent":["import { UserScriptModuleMap } from '@qpqjs/actionprocessor-node';\n\nimport fs from 'fs';\nimport path from 'path';\n\nimport { getUserScriptRspackConfig } from './getUserScriptRspackConfig';\nimport { resolveUserScriptEntry } from './resolveUserScriptEntry';\nimport { runUserScriptRspack } from './runUserScriptRspack';\nimport { USER_SCRIPT_OUTPUT_FILENAME } from './USER_SCRIPT_OUTPUT_FILENAME';\nimport { UserScriptBuildError, UserScriptBuildErrorCode } from './UserScriptBuildError';\nimport { UserScriptBuildResult } from './UserScriptBuildResult';\n\nexport type BuildUserScriptOptions = {\n  projectDir: string;\n  outDir: string;\n  // Embed a source map in main.js. Off by default; a separate .map file is never written.\n  sourceMap?: boolean;\n  // The service's own script modules (defineUserScriptModule), by import name, which the\n  // bundler keeps external. A local build has none.\n  hostModules?: UserScriptModuleMap;\n};\n\nconst getErrorMessage = (error: unknown): string => (error instanceof Error ? error.message : String(error));\n\n/**\n * Builds a script project into `<outDir>/main.js`, the only file written. The output is not\n * loaded here: a platform build has the sandbox report its exports (askUserScriptListExports)\n * and a local build uses checkUserScriptOutput. Throws UserScriptBuildError; the `code` says\n * whether the project or the bundle was at fault. `outDir` is emptied first.\n */\nexport const buildUserScript = async ({\n  projectDir,\n  outDir,\n  sourceMap = false,\n  hostModules = {},\n}: BuildUserScriptOptions): Promise<UserScriptBuildResult> => {\n  const absoluteProjectDir = path.resolve(projectDir);\n  const absoluteOutDir = path.resolve(outDir);\n  const entrySource = resolveUserScriptEntry(absoluteProjectDir);\n\n  try {\n    await runUserScriptRspack(\n      getUserScriptRspackConfig({\n        projectDir: absoluteProjectDir,\n        entryPath: entrySource,\n        outDir: absoluteOutDir,\n        sourceMap,\n        hostModuleNames: Object.keys(hostModules),\n      }),\n    );\n  } catch (error) {\n    throw new UserScriptBuildError(UserScriptBuildErrorCode.BuildFailed, `Building [${absoluteProjectDir}] failed:\\n${getErrorMessage(error)}`);\n  }\n\n  // Every emitted file counts, not just scripts: the build's whole output is one file, so a\n  // stray map, chunk or asset would be silently lost when only main.js is published.\n  const emitted = fs.readdirSync(absoluteOutDir);\n  if (emitted.length !== 1 || emitted[0] !== USER_SCRIPT_OUTPUT_FILENAME) {\n    throw new UserScriptBuildError(\n      UserScriptBuildErrorCode.OutputNotSingleFile,\n      `Building [${absoluteProjectDir}] emitted [${emitted.join(', ')}]; a script must build to exactly ${USER_SCRIPT_OUTPUT_FILENAME}`,\n    );\n  }\n\n  return { entryPath: path.join(absoluteOutDir, USER_SCRIPT_OUTPUT_FILENAME) };\n};\n"]}

package/lib/esm/build/checkUserScriptOutput.d.ts

@@ -0,0 +1,7 @@
+import { UserScriptModuleMap } from '@qpqjs/actionprocessor-node';
+/**
+ * Loads a built file in this process and applies the output contract. For a developer's own
+ * build (`qpq script:build`) only: a platform build asks the sandbox with
+ * askUserScriptListExports instead, so no script code runs in the host.
+ */
+export declare const checkUserScriptOutput: (entryPath: string, hostModules?: UserScriptModuleMap) => string[];

package/lib/esm/build/checkUserScriptOutput.js

@@ -0,0 +1,10 @@
+import { getUserScriptModuleMap, listUserScriptExports } from '@qpqjs/actionprocessor-node';
+import fs from 'fs';
+import { assertUserScriptExports } from './assertUserScriptExports';
+/**
+ * Loads a built file in this process and applies the output contract. For a developer's own
+ * build (`qpq script:build`) only: a platform build asks the sandbox with
+ * askUserScriptListExports instead, so no script code runs in the host.
+ */
+export const checkUserScriptOutput = (entryPath, hostModules = {}) => assertUserScriptExports(entryPath, listUserScriptExports(entryPath, fs.readFileSync(entryPath, 'utf8'), getUserScriptModuleMap(hostModules)));
+//# sourceMappingURL=checkUserScriptOutput.js.map

package/lib/esm/build/checkUserScriptOutput.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkUserScriptOutput.js","sourceRoot":"","sources":["../../../src/build/checkUserScriptOutput.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAuB,MAAM,6BAA6B,CAAC;AAEjH,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAiB,EAAE,cAAmC,EAAE,EAAY,EAAE,CAC1G,uBAAuB,CAAC,SAAS,EAAE,qBAAqB,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC","sourcesContent":["import { getUserScriptModuleMap, listUserScriptExports, UserScriptModuleMap } from '@qpqjs/actionprocessor-node';\n\nimport fs from 'fs';\n\nimport { assertUserScriptExports } from './assertUserScriptExports';\n\n/**\n * Loads a built file in this process and applies the output contract. For a developer's own\n * build (`qpq script:build`) only: a platform build asks the sandbox with\n * askUserScriptListExports instead, so no script code runs in the host.\n */\nexport const checkUserScriptOutput = (entryPath: string, hostModules: UserScriptModuleMap = {}): string[] =>\n  assertUserScriptExports(entryPath, listUserScriptExports(entryPath, fs.readFileSync(entryPath, 'utf8'), getUserScriptModuleMap(hostModules)));\n"]}

package/lib/esm/build/createUserScriptExternals.d.ts

@@ -0,0 +1,11 @@
+import type { ExternalItemFunctionData } from '@rspack/core';
+type ExternalsCallback = (error?: Error, result?: string) => void;
+/**
+ * The externals rule for a user-script build: the shared framework packages and the
+ * service's own script modules (`hostModuleNames`, from defineUserScriptModule) stay
+ * external (the host provides them at run time), Node builtins are refused here with
+ * the importing file named, because the loader would refuse them at run time anyway,
+ * and everything else is bundled.
+ */
+export declare const createUserScriptExternals: (hostModuleNames?: readonly string[]) => ({ request, contextInfo }: ExternalItemFunctionData, callback: ExternalsCallback) => void;
+export {};