@songsid/agend 2.2.0-beta.9 → 2.3.0-beta.1

package/dist/web-commands.d.ts

@@ -11,10 +11,11 @@
  * - The public link (a gateway request) is the outward-facing surface: /save is refused there — it makes the CLI
  *   write a file under a name the caller picks, outside the agent's own judgement.
  * - /clear asks first, as on the platforms: the first call answers a confirmation token; only the second, with that
- *   token, clears — and only if the instance is still the one that was asked about.
+ *   token, clears — and only if the instance is still the one that was asked about. /backend (#1806) asks the same way
+ *   once its backend, model and effort are chosen.
  */
 import { type CommandScope } from "./command-table.js";
-export declare const WEB_COMMANDS: readonly ["ctx", "compact", "clear", "model", "effort", "cancel", "btw", "steer", "pause", "wake", "save"];
+export declare const WEB_COMMANDS: readonly ["ctx", "compact", "clear", "model", "backend", "effort", "cancel", "btw", "steer", "pause", "wake", "save"];
 export type WebCommand = typeof WEB_COMMANDS[number];
 /** Refused on the public link (see the header). */
 export declare const PUBLIC_LINK_REFUSED: ReadonlySet<WebCommand>;
@@ -25,17 +26,44 @@ export interface WebChoices {
         id: string;
         label: string;
     }>;
+    /** What the choice is for, when the command asks more than one thing (/backend: backend, then model, then effort). */
+    prompt?: string;
 }
+/** #1806: what one `/backend` call answers — the next choice, the confirmation, a word, or why not. */
+export type WebBackendAnswer = {
+    choices: WebChoices;
+} | {
+    confirm: {
+        token: string;
+        message: string;
+    };
+} | {
+    text: string;
+} | {
+    error: string;
+};
 export interface WebCommandDeps {
     /** The instance is one the web chat may command (a fleet instance or a ClassicBot room), and in which scope. */
     scope(instance: string): CommandScope | null;
     ctx(instance: string): Promise<string>;
-    compact(instance: string, instructions: string | undefined): Promise<string>;
+    /** Board 003648ac: `sent` — the command went; `watch` — the id its end is followed by (null: this backend's can't be seen). */
+    compact(instance: string, instructions: string | undefined): Promise<{
+        sent: boolean;
+        text: string;
+        watch: string | null;
+    }>;
     applyModel(instance: string, name: string): Promise<string>;
     /** The model menu from the cached catalog only (never a live probe on this path); null: no list to offer. */
     modelChoices(instance: string): WebChoices | null;
     applyEffort(instance: string, level: string): Promise<string>;
     effortChoices(instance: string): WebChoices | null;
+    /** #1806: the next `/backend` step for these arguments (each choice's id is the arguments with it added). */
+    backendStep(instance: string, args: string): Promise<WebBackendAnswer>;
+    /** #1806: switch, if the token is live, for these same arguments, and the instance is still on the backend asked about. */
+    backendConfirm(instance: string, args: string, token: string): Promise<{
+        status: number;
+        text: string;
+    }>;
     cancel(instance: string): boolean;
     steer(instance: string, text: string, originalBody: string): string;
     btw(instance: string, text: string, originalBody: string): string;
@@ -51,6 +79,7 @@ export interface WebCommandDeps {
     clearConfirm(instance: string, token: string): Promise<{
         status: number;
         text: string;
+        sent?: boolean;
     }>;
     t(key: string, ...args: string[]): string;
 }
@@ -70,6 +99,13 @@ export interface WebCommandResult {
             token: string;
             message: string;
         };
+        /** A sent /compact: the status frame's `compact` with this id says when it ends; id null: its end can't be seen. */
+        follow?: {
+            kind: "compact";
+            id: string | null;
+        };
+        /** Board 003648ac: the command was handed over and its text says only that — the chat's card may leave by itself. */
+        sent?: true;
     };
 }
 export declare function runWebCommand(deps: WebCommandDeps, input: WebCommandInput, opts: {

package/dist/web-commands.js

@@ -11,11 +11,12 @@
  * - The public link (a gateway request) is the outward-facing surface: /save is refused there — it makes the CLI
  *   write a file under a name the caller picks, outside the agent's own judgement.
  * - /clear asks first, as on the platforms: the first call answers a confirmation token; only the second, with that
- *   token, clears — and only if the instance is still the one that was asked about.
+ *   token, clears — and only if the instance is still the one that was asked about. /backend (#1806) asks the same way
+ *   once its backend, model and effort are chosen.
  */
 import { commandSpec, decideCommand } from "./command-table.js";
 import { SAVE_FILENAME_RE } from "./topic-commands.js";
-export const WEB_COMMANDS = ["ctx", "compact", "clear", "model", "effort", "cancel", "btw", "steer", "pause", "wake", "save"];
+export const WEB_COMMANDS = ["ctx", "compact", "clear", "model", "backend", "effort", "cancel", "btw", "steer", "pause", "wake", "save"];
 /** Refused on the public link (see the header). */
 export const PUBLIC_LINK_REFUSED = new Set(["save"]);
 export const MAX_COMMAND_ARGS = 4000;
@@ -42,20 +43,36 @@ export async function runWebCommand(deps, input, opts) {
     const ok = (text) => ({ status: 200, body: { text } });
     switch (command) {
         case "ctx": return ok(await deps.ctx(instance));
-        case "compact": return ok(await deps.compact(instance, args || undefined));
+        case "compact": {
+            const r = await deps.compact(instance, args || undefined);
+            return r.sent ? { status: 200, body: { text: r.text, follow: { kind: "compact", id: r.watch } } } : { status: 409, body: { error: r.text } };
+        }
         case "model": {
             if (args)
                 return ok(await deps.applyModel(instance, args));
             const choices = deps.modelChoices(instance);
             return choices ? { status: 200, body: { choices } } : ok(deps.t("model.list_unavailable", instance));
         }
+        case "backend": {
+            // #1806: backend → model → effort, one call per step; the last answers a confirmation, as /clear does.
+            if (input.confirm) {
+                const r = await deps.backendConfirm(instance, args, input.confirm);
+                return { status: r.status, body: r.status === 200 ? { text: r.text } : { error: r.text } };
+            }
+            const r = await deps.backendStep(instance, args);
+            if ("choices" in r)
+                return { status: 200, body: { choices: r.choices } };
+            if ("confirm" in r)
+                return { status: 200, body: { confirm: r.confirm } };
+            return "error" in r ? { status: 400, body: { error: r.error } } : ok(r.text);
+        }
         case "effort": {
             if (args)
                 return ok(await deps.applyEffort(instance, args));
             const choices = deps.effortChoices(instance);
             return choices ? { status: 200, body: { choices } } : { status: 400, body: { error: deps.t("web.command_no_choices", "/effort") } };
         }
-        case "cancel": return ok(deps.cancel(instance) ? deps.t("cancel.sent", instance) : deps.t("cancel.not_running", instance));
+        case "cancel": return deps.cancel(instance) ? { status: 200, body: { text: deps.t("cancel.sent", instance), sent: true } } : ok(deps.t("cancel.not_running", instance));
         case "steer":
         case "btw":
             if (!args)
@@ -72,7 +89,7 @@ export async function runWebCommand(deps, input, opts) {
         case "clear": {
             if (input.confirm) {
                 const r = await deps.clearConfirm(instance, input.confirm);
-                return { status: r.status, body: r.status === 200 ? { text: r.text } : { error: r.text } };
+                return { status: r.status, body: r.status === 200 ? { text: r.text, ...(r.sent ? { sent: true } : {}) } : { error: r.text } };
             }
             const asked = deps.clearAsk(instance);
             return "token" in asked ? { status: 200, body: { confirm: asked } } : { status: 409, body: { error: asked.refused } };

package/dist/web-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"web-commands.js","sourceRoot":"","sources":["../src/web-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAqB,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAEvI,mDAAmD;AACnD,MAAM,CAAC,MAAM,mBAAmB,GAA4B,IAAI,GAAG,CAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1F,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AA+BrC,MAAM,YAAY,GAAG,CAAC,CAAS,EAAmB,EAAE,CAAE,YAAkC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAErG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAoB,EAAE,KAAsB,EAAE,IAA6B;IAC7G,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,qBAAqB,EAAE,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;IAClH,IAAI,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,4BAA4B,EAAE,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;IACtJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAC5F,yGAAyG;IACzG,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,qBAAqB,EAAE,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;IACjG,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5H,IAAI,CAAC,QAAQ,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACxF,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/D,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,KAAK,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC;QAC3E,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,IAAI;gBAAE,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5C,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC,CAAC;QACvG,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,IAAI;gBAAE,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC7C,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,wBAAwB,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;QACtI,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3H,KAAK,OAAO,CAAC;QACb,KAAK,KAAK;YACR,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC/E,OAAO,EAAE,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QACrH,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAChE,KAAK,MAAM;YACT,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACzE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC;YACtG,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7C,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAAC,CAAC;YAC9K,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACtC,OAAO,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACxH,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"web-commands.js","sourceRoot":"","sources":["../src/web-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAqB,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAElJ,mDAAmD;AACnD,MAAM,CAAC,MAAM,mBAAmB,GAA4B,IAAI,GAAG,CAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1F,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAkDrC,MAAM,YAAY,GAAG,CAAC,CAAS,EAAmB,EAAE,CAAE,YAAkC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAErG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAoB,EAAE,KAAsB,EAAE,IAA6B;IAC7G,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,qBAAqB,EAAE,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;IAClH,IAAI,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,4BAA4B,EAAE,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;IACtJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAC5F,yGAAyG;IACzG,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,qBAAqB,EAAE,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;IACjG,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5H,IAAI,CAAC,QAAQ,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACxF,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/D,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC;YAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/I,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,IAAI;gBAAE,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5C,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC,CAAC;QACvG,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,uGAAuG;YACvG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAAC,CAAC;YACtL,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACjD,IAAI,SAAS,IAAI,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACzE,IAAI,SAAS,IAAI,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACzE,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,IAAI;gBAAE,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC7C,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,wBAAwB,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;QACtI,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAC;QACxK,KAAK,OAAO,CAAC;QACb,KAAK,KAAK;YACR,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC/E,OAAO,EAAE,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QACrH,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAChE,KAAK,MAAM;YACT,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACzE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC;YACtG,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7C,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3D,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACzI,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACtC,OAAO,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACxH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/web-effect-bundle.d.ts

@@ -0,0 +1,28 @@
+import { type WebEffectManifest } from "./web-effect.js";
+export declare const WEB_EFFECT_MAX_BYTES: number;
+export declare const WEB_EFFECT_RAW_MAX_BYTES: number;
+export declare const WEB_EFFECT_ASSET_MAX = 16;
+export interface CheckedWebEffect {
+    id: string;
+    sha256: string;
+    manifest: WebEffectManifest;
+    bytes: number;
+    files: ReadonlyMap<string, Uint8Array>;
+    warnings: string[];
+}
+export type EffectEntryResult = {
+    ok: true;
+} & CheckedWebEffect | {
+    ok: false;
+    problems: Array<{
+        path: string;
+        problem: string;
+    }>;
+};
+export declare function checkEffectEntry(input: ReadonlyMap<string, Uint8Array>): EffectEntryResult;
+/** Already normalized files only: assets become decoded ImageBitmaps inside the trusted frame. */
+export declare function effectRasterAssets(entry: CheckedWebEffect): Array<{
+    name: string;
+    mime: string;
+    bytes: Uint8Array;
+}>;

package/dist/web-effect-bundle.js

@@ -0,0 +1,126 @@
+/** CW1: synchronous validation and normalization. No I/O, JS execution, or image decoding. */
+import { Script } from "node:vm";
+import { imageSize, sniffMedia, stripMetadata, MEDIA_MIME } from "./web-image-meta.js";
+import { effectBundleIdentity, effectManifestJson } from "./web-effect-canonical.js";
+import { parseWebEffectManifest } from "./web-effect.js";
+export const WEB_EFFECT_MAX_BYTES = 1024 * 1024;
+export const WEB_EFFECT_RAW_MAX_BYTES = 8 * 1024 * 1024;
+export const WEB_EFFECT_ASSET_MAX = 16;
+const utf8 = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
+const assetPath = /^assets\/[a-z0-9][a-z0-9_-]{0,63}\.(png|jpe?g|webp|gif)$/;
+const fail = (path, problem) => ({ ok: false, problems: [{ path, problem }] });
+export function checkEffectEntry(input) {
+    try {
+        if (!(input instanceof Map) || input.size < 2 || input.size > 20)
+            return fail("<entry>", "invalid_files");
+        let raw = 0, assets = 0, seen = 0;
+        const snapshot = new Map();
+        for (const [path, bytes] of input) {
+            if (++seen > 20)
+                return fail("<entry>", "invalid_files");
+            if (typeof path !== "string" || !["effect.json", "worker.js", "poster.png", "cursor.png"].includes(path) && !assetPath.test(path))
+                return fail("<entry>", "unsupported_path");
+            if (!(bytes instanceof Uint8Array))
+                return fail(path, "invalid_bytes");
+            raw += bytes.byteLength;
+            if (raw > WEB_EFFECT_RAW_MAX_BYTES)
+                return fail("<entry>", "raw_entry_too_large");
+            if (assetPath.test(path) && ++assets > WEB_EFFECT_ASSET_MAX)
+                return fail("<entry>", "too_many_assets");
+            if (snapshot.has(path))
+                return fail("<entry>", "invalid_files");
+            snapshot.set(path, new Uint8Array(bytes));
+        }
+        const manifestBytes = snapshot.get("effect.json"), script = snapshot.get("worker.js");
+        if (!manifestBytes || !script)
+            return fail("<entry>", "missing_entry");
+        if (manifestBytes.byteLength > 64 * 1024)
+            return fail("effect.json", "manifest_too_large");
+        if (script.byteLength > WEB_EFFECT_MAX_BYTES)
+            return fail("worker.js", "entry_too_large");
+        let decoded, code;
+        try {
+            decoded = JSON.parse(utf8.decode(manifestBytes));
+        }
+        catch {
+            return fail("effect.json", "invalid_manifest");
+        }
+        const parsed = parseWebEffectManifest(decoded);
+        if (!parsed.ok)
+            return fail("effect.json", "invalid_manifest");
+        try {
+            code = utf8.decode(script);
+        }
+        catch {
+            return fail("worker.js", "invalid_utf8");
+        }
+        let manifest = parsed.manifest;
+        if (manifest.poster && !snapshot.has("poster.png"))
+            return fail("poster.png", "missing_poster");
+        if (!!manifest.cursor !== snapshot.has("cursor.png"))
+            return fail("cursor.png", "cursor_manifest_mismatch");
+        if (snapshot.has("poster.png"))
+            manifest = { ...manifest, poster: "poster.png" };
+        let pixels = 0;
+        const files = new Map();
+        files.set("worker.js", Uint8Array.from(script));
+        for (const [path, bytes] of snapshot) {
+            if (path === "effect.json" || path === "worker.js")
+                continue;
+            const kind = sniffMedia(bytes);
+            if (!kind || kind === "woff2")
+                return fail(path, "invalid_raster");
+            const extension = path.slice(path.lastIndexOf(".") + 1), expected = extension === "jpg" ? "jpeg" : extension;
+            if (kind !== expected)
+                return fail(path, "media_mismatch");
+            const size = imageSize(bytes, kind);
+            if (!size || size.width < 1 || size.height < 1 || size.width > 4096 || size.height > 4096 || size.width * size.height > 8 * 1024 * 1024)
+                return fail(path, "image_dimensions");
+            pixels += size.width * size.height;
+            if (pixels > 8 * 1024 * 1024)
+                return fail(path, "image_dimensions");
+            const stripped = stripMetadata(bytes, kind);
+            if (!stripped)
+                return fail(path, "invalid_raster");
+            if (path === "cursor.png") {
+                if (kind !== "png" || stripped.byteLength > 32 * 1024 || size.width !== size.height || size.width > 64)
+                    return fail(path, "invalid_cursor");
+                if (manifest.cursor.hotspot.some((point, index) => point >= (index === 0 ? size.width : size.height)))
+                    return fail(path, "invalid_hotspot");
+            }
+            files.set(path, Uint8Array.from(stripped));
+        }
+        files.set("effect.json", new TextEncoder().encode(effectManifestJson(manifest)));
+        const bytes = [...files.values()].reduce((n, v) => n + v.byteLength, 0);
+        if (bytes > WEB_EFFECT_MAX_BYTES)
+            return fail("<entry>", "entry_too_large");
+        // Compile classic syntax only. Never run the result or expose parser excerpts.
+        try {
+            new Script(code, { filename: "worker.js" });
+        }
+        catch {
+            return fail("worker.js", "invalid_classic_script");
+        }
+        const identity = effectBundleIdentity(manifest, files);
+        const warnings = [];
+        if (/\b(?:fetch|XMLHttpRequest|WebSocket|RTCPeerConnection|importScripts)\b|https?:\/\/|\/\/|\bimport\s*\(|\btop\.|\bparent\.location/.test(code))
+            warnings.push("network_or_import_api_unsupported");
+        return { ok: true, id: identity.id, sha256: identity.sha256, manifest, files, bytes, warnings };
+    }
+    catch {
+        return fail("<entry>", "invalid_entry");
+    }
+}
+/** Already normalized files only: assets become decoded ImageBitmaps inside the trusted frame. */
+export function effectRasterAssets(entry) {
+    const assets = [];
+    for (const [name, bytes] of entry.files)
+        if (assetPath.test(name)) {
+            const kind = sniffMedia(bytes);
+            if (!kind || kind === "woff2")
+                throw Error("Invalid normalized raster");
+            assets.push({ name, mime: MEDIA_MIME[kind], bytes: Uint8Array.from(bytes) });
+        }
+    return assets;
+}
+//# sourceMappingURL=web-effect-bundle.js.map

package/dist/web-effect-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-effect-bundle.js","sourceRoot":"","sources":["../src/web-effect-bundle.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,sBAAsB,EAA0B,MAAM,iBAAiB,CAAC;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAkBvC,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACxE,MAAM,SAAS,GAAG,0DAA0D,CAAC;AAC7E,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,OAAe,EAAqB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AAClH,MAAM,UAAU,gBAAgB,CAAC,KAAsC;IACrE,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE;YAC9D,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC1C,IAAI,GAAG,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;YAClC,IAAI,EAAE,IAAI,GAAG,EAAE;gBACb,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC/H,OAAO,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;YAC7C,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;gBAChC,OAAO,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACrC,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC;YACxB,IAAI,GAAG,GAAG,wBAAwB;gBAChC,OAAO,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;YAChD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB;gBACzD,OAAO,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YAC5C,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YAC1C,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtF,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM;YAC3B,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC1C,IAAI,aAAa,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI;YACtC,OAAO,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,UAAU,GAAG,oBAAoB;YAC1C,OAAO,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAC9C,IAAI,OAAgB,EAAE,IAAY,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,EAAE;YACZ,OAAO,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC/B,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;YAChD,OAAO,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;YAClD,OAAO,IAAI,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAAC;QACxD,IAAI,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5B,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACnD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC5C,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;YACrC,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,WAAW;gBAChD,SAAS;YACX,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,OAAO;gBAC3B,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7G,IAAI,IAAI,KAAK,QAAQ;gBACnB,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;gBACrI,OAAO,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YACxC,MAAM,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;YACnC,IAAI,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;gBAC1B,OAAO,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ;gBACX,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,IAAI,IAAI,KAAK,KAAK,IAAI,QAAQ,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,GAAG,EAAE;oBACpG,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACtC,IAAI,QAAQ,CAAC,MAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACpG,OAAO,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,KAAK,GAAG,oBAAoB;YAC9B,OAAO,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAC5C,+EAA+E;QAC/E,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,kIAAkI,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/I,QAAQ,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACrD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClG,CAAC;IACD,MAAM,CAAC;QACL,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AACD,kGAAkG;AAClG,MAAM,UAAU,kBAAkB,CAAC,KAAuB;IAKxD,MAAM,MAAM,GAIP,EAAE,CAAC;IACR,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK;QACrC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,OAAO;gBAC3B,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/web-effect-canonical.d.ts

@@ -0,0 +1,8 @@
+import type { WebEffectManifest } from "./web-effect.js";
+export declare function effectBundleIdentity(manifest: WebEffectManifest, files: ReadonlyMap<string, Uint8Array>): {
+    id: string;
+    sha256: string;
+    canonical: string;
+};
+/** Stable JSON for the validated manifest; array order is part of its value. */
+export declare function effectManifestJson(manifest: WebEffectManifest): string;

package/dist/web-effect-canonical.js

@@ -0,0 +1,27 @@
+/** #1629: identity of an already validated, normalized bundle, including every file.
+* This is not an upload validator. The bundle preparer owns paths, media stripping,
+* UTF-8, entry format and the normalized byte limit. */
+import { createHash } from "node:crypto";
+export function effectBundleIdentity(manifest, files) {
+    const entries = [...files].map(([path, bytes]) => [path, createHash("sha256").update(bytes).digest("hex")]);
+    entries.sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
+    const canonical = JSON.stringify({ manifest: JSON.parse(effectManifestJson(manifest)), files: entries });
+    const sha256 = createHash("sha256").update(canonical, "utf8").digest("hex");
+    return { id: sha256.slice(0, 32), sha256, canonical };
+}
+/** Stable JSON for the validated manifest; array order is part of its value. */
+export function effectManifestJson(manifest) {
+    const normalized = (value) => {
+        if (Array.isArray(value))
+            return value.map(normalized);
+        if (value !== null && typeof value === "object") {
+            const object = Object.create(null);
+            for (const key of Object.keys(value).sort())
+                object[key] = normalized(value[key]);
+            return object;
+        }
+        return value;
+    };
+    return JSON.stringify(normalized(manifest));
+}
+//# sourceMappingURL=web-effect-canonical.js.map

package/dist/web-effect-canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-effect-canonical.js","sourceRoot":"","sources":["../src/web-effect-canonical.ts"],"names":[],"mappings":"AAAA;;uDAEuD;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,oBAAoB,CAAC,QAA2B,EAAE,KAAsC;IAKtG,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAU,CAAC,CAAC;IACrH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACzG,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACxD,CAAC;AACD,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,QAA2B;IAC5D,MAAM,UAAU,GAAG,CAAC,KAAc,EAAW,EAAE;QAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACtB,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;gBACzC,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;YACpE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/web-effect-library.d.ts

@@ -0,0 +1,114 @@
+import { type CheckedWebEffect } from "./web-effect-bundle.js";
+import { type WebEffectManifest } from "./web-effect.js";
+export interface EffectPrincipal {
+    kind: "agent" | "human";
+    id: string;
+}
+export interface EffectReference {
+    id: string;
+    holder: string;
+}
+export interface EffectSummary {
+    id: string;
+    manifest: WebEffectManifest;
+    bytes: number;
+}
+/** Caller-scoped controls; never includes another principal or any holder. */
+export interface EffectManagementSummary extends EffectSummary {
+    ownClaim: boolean;
+    sharedByYou: boolean;
+}
+export type EffectFiles = ReadonlyMap<string, Uint8Array>;
+type Failure = {
+    ok: false;
+    error: string;
+};
+type WriteReceipt = {
+    ok: true;
+    undo: () => boolean;
+};
+export interface EffectStageSummary extends EffectSummary {
+    warnings: string[];
+}
+export declare class WebEffectLibrary {
+    private readonly dataDir;
+    private readonly options;
+    readonly path: string;
+    private readonly blobs;
+    private readonly stages;
+    private readonly providers;
+    private busy;
+    private readingReferences;
+    constructor(dataDir: string, options?: {
+        monotonic?: () => number;
+        now?: () => number;
+        beforeIndexRename?: () => void;
+    });
+    private clock;
+    private now;
+    private load;
+    private save;
+    private sweep;
+    private claim;
+    private visible;
+    private quota;
+    private summary;
+    private error;
+    private transaction;
+    /** Host-only provider; unreadable/invalid providers never authorize deletion or reference reads. */
+    registerReferenceSource(name: string, source: () => Iterable<EffectReference>): () => void;
+    private references;
+    private referenceKey;
+    private guardReferences;
+    private readRow;
+    private writeBlob;
+    /** No writes. A restart loses the stage; callers must restage and review. */
+    stage(input: EffectFiles | readonly EffectFiles[], principal: EffectPrincipal, options?: {
+        holder?: string;
+    }): {
+        ok: true;
+        stageId: string;
+        ids: string[];
+        entries: EffectStageSummary[];
+    } | Failure;
+    abort(stageId: string): void;
+    private undo;
+    commit(stageId: string): (WriteReceipt & {
+        ids: string[];
+        created: string[];
+    }) | Failure;
+    list(principal: EffectPrincipal): {
+        ok: true;
+        entries: EffectSummary[];
+    } | Failure;
+    managementList(principal: EffectPrincipal): {
+        ok: true;
+        entries: EffectManagementSummary[];
+    } | Failure;
+    read(id: string, principal: EffectPrincipal): {
+        ok: true;
+        entry: CheckedWebEffect;
+    } | Failure;
+    /** Internal: caller first authorizes its own resource. Knowing an id/holder is never a route capability. */
+    readReferenced(id: string, holder: string): {
+        ok: true;
+        entry: CheckedWebEffect;
+    } | Failure;
+    setShared(id: string, principal: EffectPrincipal, shared: boolean): {
+        ok: true;
+    } | Failure;
+    /** Explicit normal delete removes this principal's whole unused claim, including orphan mod holders. */
+    deleteClaim(id: string, principal: EffectPrincipal): {
+        ok: true;
+    } | Failure;
+    /** Host-only mod uninstall. Never releases a direct upload or another holder/principal. */
+    releaseHolder(holder: string, principal: EffectPrincipal): (WriteReceipt & {
+        released: string[];
+    }) | Failure;
+    /** Host-only notification after a placement/reference is removed; never a caller capability. */
+    collectUnreferenced(ids: readonly string[]): void;
+    private collectLater;
+}
+/** r4-5 uses this structural interface; it need not depend on the concrete store in tests. */
+export type EffectLibraryParticipant = Pick<WebEffectLibrary, "stage" | "commit" | "abort" | "read" | "readReferenced" | "releaseHolder" | "registerReferenceSource">;
+export {};