@songsid/agend 2.2.0 → 2.2.5

package/dist/web-effect-bundle.js

@@ -0,0 +1,171 @@
+/** CW1: synchronous validation and normalization. No I/O, JS execution, or image decoding. */
+import { Script } from "node:vm";
+import { imageSize, sniffMedia, stripMetadata, MEDIA_MIME } from "./web-image-meta.js";
+import { effectBundleIdentity, effectManifestJson } from "./web-effect-canonical.js";
+import { parseWebEffectManifest } from "./web-effect.js";
+export const WEB_EFFECT_MAX_BYTES = 1024 * 1024;
+export const WEB_EFFECT_RAW_MAX_BYTES = 8 * 1024 * 1024;
+export const WEB_EFFECT_ASSET_MAX = 16;
+const utf8 = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
+const assetPath = /^assets\/[a-z0-9][a-z0-9_-]{0,63}\.(png|jpe?g|webp|gif)$/;
+const fail = (path, problem) => ({ ok: false, problems: [{ path, problem }] });
+/** Advisory text lint only, never validation or a security boundary. Keep quoted URLs while ignoring comments. */
+function workerLintText(code) {
+    const parts = [];
+    let copied = 0, at = 0;
+    while (at < code.length) {
+        const c = code[at];
+        if (c === '"' || c === "'" || c === "`") {
+            const quote = c;
+            at++;
+            while (at < code.length) {
+                if (code[at] === "\\") {
+                    at += 2;
+                    continue;
+                }
+                if (code[at++] === quote)
+                    break;
+            }
+            continue;
+        }
+        // Escaped slashes in a regular-expression literal are not comment openers.
+        if (c === "\\") {
+            at += 2;
+            continue;
+        }
+        if (c === "/" && (code[at + 1] === "/" || code[at + 1] === "*")) {
+            parts.push(code.slice(copied, at), " ");
+            if (code[at + 1] === "/") {
+                at += 2;
+                while (at < code.length && !/[\r\n\u2028\u2029]/.test(code[at]))
+                    at++;
+            }
+            else {
+                at += 2;
+                while (at < code.length && !(code[at] === "*" && code[at + 1] === "/"))
+                    at++;
+                at = Math.min(code.length, at + 2);
+            }
+            copied = at;
+            continue;
+        }
+        at++;
+    }
+    parts.push(code.slice(copied));
+    return parts.join("");
+}
+export function checkEffectEntry(input) {
+    try {
+        if (!(input instanceof Map) || input.size < 2 || input.size > 20)
+            return fail("<entry>", "invalid_files");
+        let raw = 0, assets = 0, seen = 0;
+        const snapshot = new Map();
+        for (const [path, bytes] of input) {
+            if (++seen > 20)
+                return fail("<entry>", "invalid_files");
+            if (typeof path !== "string" || !["effect.json", "worker.js", "poster.png", "cursor.png"].includes(path) && !assetPath.test(path))
+                return fail("<entry>", "unsupported_path");
+            if (!(bytes instanceof Uint8Array))
+                return fail(path, "invalid_bytes");
+            raw += bytes.byteLength;
+            if (raw > WEB_EFFECT_RAW_MAX_BYTES)
+                return fail("<entry>", "raw_entry_too_large");
+            if (assetPath.test(path) && ++assets > WEB_EFFECT_ASSET_MAX)
+                return fail("<entry>", "too_many_assets");
+            if (snapshot.has(path))
+                return fail("<entry>", "invalid_files");
+            snapshot.set(path, new Uint8Array(bytes));
+        }
+        const manifestBytes = snapshot.get("effect.json"), script = snapshot.get("worker.js");
+        if (!manifestBytes || !script)
+            return fail("<entry>", "missing_entry");
+        if (manifestBytes.byteLength > 64 * 1024)
+            return fail("effect.json", "manifest_too_large");
+        if (script.byteLength > WEB_EFFECT_MAX_BYTES)
+            return fail("worker.js", "entry_too_large");
+        let decoded, code;
+        try {
+            decoded = JSON.parse(utf8.decode(manifestBytes));
+        }
+        catch {
+            return fail("effect.json", "invalid_manifest");
+        }
+        const parsed = parseWebEffectManifest(decoded);
+        if (!parsed.ok)
+            return fail("effect.json", "invalid_manifest");
+        try {
+            code = utf8.decode(script);
+        }
+        catch {
+            return fail("worker.js", "invalid_utf8");
+        }
+        let manifest = parsed.manifest;
+        if (manifest.poster && !snapshot.has("poster.png"))
+            return fail("poster.png", "missing_poster");
+        if (!!manifest.cursor !== snapshot.has("cursor.png"))
+            return fail("cursor.png", "cursor_manifest_mismatch");
+        if (snapshot.has("poster.png"))
+            manifest = { ...manifest, poster: "poster.png" };
+        let pixels = 0;
+        const files = new Map();
+        files.set("worker.js", Uint8Array.from(script));
+        for (const [path, bytes] of snapshot) {
+            if (path === "effect.json" || path === "worker.js")
+                continue;
+            const kind = sniffMedia(bytes);
+            if (!kind || kind === "woff2")
+                return fail(path, "invalid_raster");
+            const extension = path.slice(path.lastIndexOf(".") + 1), expected = extension === "jpg" ? "jpeg" : extension;
+            if (kind !== expected)
+                return fail(path, "media_mismatch");
+            const size = imageSize(bytes, kind);
+            if (!size || size.width < 1 || size.height < 1 || size.width > 4096 || size.height > 4096 || size.width * size.height > 8 * 1024 * 1024)
+                return fail(path, "image_dimensions");
+            pixels += size.width * size.height;
+            if (pixels > 8 * 1024 * 1024)
+                return fail(path, "image_dimensions");
+            const stripped = stripMetadata(bytes, kind);
+            if (!stripped)
+                return fail(path, "invalid_raster");
+            if (path === "cursor.png") {
+                if (kind !== "png" || stripped.byteLength > 32 * 1024 || size.width !== size.height || size.width > 64)
+                    return fail(path, "invalid_cursor");
+                if (manifest.cursor.hotspot.some((point, index) => point >= (index === 0 ? size.width : size.height)))
+                    return fail(path, "invalid_hotspot");
+            }
+            files.set(path, Uint8Array.from(stripped));
+        }
+        files.set("effect.json", new TextEncoder().encode(effectManifestJson(manifest)));
+        const bytes = [...files.values()].reduce((n, v) => n + v.byteLength, 0);
+        if (bytes > WEB_EFFECT_MAX_BYTES)
+            return fail("<entry>", "entry_too_large");
+        // Compile classic syntax only. Never run the result or expose parser excerpts.
+        try {
+            new Script(code, { filename: "worker.js" });
+        }
+        catch {
+            return fail("worker.js", "invalid_classic_script");
+        }
+        const identity = effectBundleIdentity(manifest, files);
+        const warnings = [];
+        if (/\b(?:fetch|XMLHttpRequest|WebSocket|RTCPeerConnection|importScripts)\b|https?:\/\/|["\'`]\/\/|\bimport\s*\(|\btop\.|\bparent\.location/.test(workerLintText(code)))
+            warnings.push("network_or_import_api_unsupported");
+        return { ok: true, id: identity.id, sha256: identity.sha256, manifest, files, bytes, warnings };
+    }
+    catch {
+        return fail("<entry>", "invalid_entry");
+    }
+}
+/** Already normalized files only: assets become decoded ImageBitmaps inside the trusted frame. */
+export function effectRasterAssets(entry) {
+    const assets = [];
+    for (const [name, bytes] of entry.files)
+        if (assetPath.test(name)) {
+            const kind = sniffMedia(bytes);
+            if (!kind || kind === "woff2")
+                throw Error("Invalid normalized raster");
+            assets.push({ name, mime: MEDIA_MIME[kind], bytes: Uint8Array.from(bytes) });
+        }
+    return assets;
+}
+//# sourceMappingURL=web-effect-bundle.js.map

package/dist/web-effect-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-effect-bundle.js","sourceRoot":"","sources":["../src/web-effect-bundle.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,sBAAsB,EAA0B,MAAM,iBAAiB,CAAC;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAkBvC,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACxE,MAAM,SAAS,GAAG,0DAA0D,CAAC;AAC7E,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,OAAe,EAAqB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AAClH,kHAAkH;AAClH,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAAC,IAAI,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,CAAC,CAAC;YAAC,EAAE,EAAE,CAAC;YACtB,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;oBAAC,EAAE,IAAI,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK;oBAAE,MAAM;YAAC,CAAC;YAC3G,SAAS;QACX,CAAC;QACD,2EAA2E;QAC3E,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,EAAE,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACzB,EAAE,IAAI,CAAC,CAAC;gBAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAE,CAAC;oBAAE,EAAE,EAAE,CAAC;YAClF,CAAC;iBAAM,CAAC;gBAAC,EAAE,IAAI,CAAC,CAAC;gBAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;oBAAE,EAAE,EAAE,CAAC;gBAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;YAAC,CAAC;YACrI,MAAM,GAAG,EAAE,CAAC;YAAC,SAAS;QACxB,CAAC;QACD,EAAE,EAAE,CAAC;IACP,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxD,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,KAAsC;IACrE,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE;YAC9D,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC1C,IAAI,GAAG,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;YAClC,IAAI,EAAE,IAAI,GAAG,EAAE;gBACb,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC/H,OAAO,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;YAC7C,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;gBAChC,OAAO,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACrC,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC;YACxB,IAAI,GAAG,GAAG,wBAAwB;gBAChC,OAAO,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;YAChD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB;gBACzD,OAAO,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YAC5C,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YAC1C,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtF,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM;YAC3B,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC1C,IAAI,aAAa,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI;YACtC,OAAO,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,UAAU,GAAG,oBAAoB;YAC1C,OAAO,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAC9C,IAAI,OAAgB,EAAE,IAAY,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,EAAE;YACZ,OAAO,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC/B,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;YAChD,OAAO,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;YAClD,OAAO,IAAI,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAAC;QACxD,IAAI,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5B,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACnD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC5C,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;YACrC,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,WAAW;gBAChD,SAAS;YACX,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,OAAO;gBAC3B,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7G,IAAI,IAAI,KAAK,QAAQ;gBACnB,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;gBACrI,OAAO,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YACxC,MAAM,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;YACnC,IAAI,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;gBAC1B,OAAO,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ;gBACX,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,IAAI,IAAI,KAAK,KAAK,IAAI,QAAQ,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,GAAG,EAAE;oBACpG,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACtC,IAAI,QAAQ,CAAC,MAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACpG,OAAO,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,KAAK,GAAG,oBAAoB;YAC9B,OAAO,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAC5C,+EAA+E;QAC/E,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,wIAAwI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACrK,QAAQ,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACrD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClG,CAAC;IACD,MAAM,CAAC;QACL,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AACD,kGAAkG;AAClG,MAAM,UAAU,kBAAkB,CAAC,KAAuB;IAKxD,MAAM,MAAM,GAIP,EAAE,CAAC;IACR,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK;QACrC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,OAAO;gBAC3B,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/web-effect-canonical.d.ts

@@ -0,0 +1,8 @@
+import type { WebEffectManifest } from "./web-effect.js";
+export declare function effectBundleIdentity(manifest: WebEffectManifest, files: ReadonlyMap<string, Uint8Array>): {
+    id: string;
+    sha256: string;
+    canonical: string;
+};
+/** Stable JSON for the validated manifest; array order is part of its value. */
+export declare function effectManifestJson(manifest: WebEffectManifest): string;

package/dist/web-effect-canonical.js

@@ -0,0 +1,27 @@
+/** #1629: identity of an already validated, normalized bundle, including every file.
+* This is not an upload validator. The bundle preparer owns paths, media stripping,
+* UTF-8, entry format and the normalized byte limit. */
+import { createHash } from "node:crypto";
+export function effectBundleIdentity(manifest, files) {
+    const entries = [...files].map(([path, bytes]) => [path, createHash("sha256").update(bytes).digest("hex")]);
+    entries.sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
+    const canonical = JSON.stringify({ manifest: JSON.parse(effectManifestJson(manifest)), files: entries });
+    const sha256 = createHash("sha256").update(canonical, "utf8").digest("hex");
+    return { id: sha256.slice(0, 32), sha256, canonical };
+}
+/** Stable JSON for the validated manifest; array order is part of its value. */
+export function effectManifestJson(manifest) {
+    const normalized = (value) => {
+        if (Array.isArray(value))
+            return value.map(normalized);
+        if (value !== null && typeof value === "object") {
+            const object = Object.create(null);
+            for (const key of Object.keys(value).sort())
+                object[key] = normalized(value[key]);
+            return object;
+        }
+        return value;
+    };
+    return JSON.stringify(normalized(manifest));
+}
+//# sourceMappingURL=web-effect-canonical.js.map

package/dist/web-effect-canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-effect-canonical.js","sourceRoot":"","sources":["../src/web-effect-canonical.ts"],"names":[],"mappings":"AAAA;;uDAEuD;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,oBAAoB,CAAC,QAA2B,EAAE,KAAsC;IAKtG,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAU,CAAC,CAAC;IACrH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACzG,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACxD,CAAC;AACD,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,QAA2B;IAC5D,MAAM,UAAU,GAAG,CAAC,KAAc,EAAW,EAAE;QAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACtB,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;gBACzC,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;YACpE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/web-effect-library.d.ts

@@ -0,0 +1,114 @@
+import { type CheckedWebEffect } from "./web-effect-bundle.js";
+import { type WebEffectManifest } from "./web-effect.js";
+export interface EffectPrincipal {
+    kind: "agent" | "human";
+    id: string;
+}
+export interface EffectReference {
+    id: string;
+    holder: string;
+}
+export interface EffectSummary {
+    id: string;
+    manifest: WebEffectManifest;
+    bytes: number;
+}
+/** Caller-scoped controls; never includes another principal or any holder. */
+export interface EffectManagementSummary extends EffectSummary {
+    ownClaim: boolean;
+    sharedByYou: boolean;
+}
+export type EffectFiles = ReadonlyMap<string, Uint8Array>;
+type Failure = {
+    ok: false;
+    error: string;
+};
+type WriteReceipt = {
+    ok: true;
+    undo: () => boolean;
+};
+export interface EffectStageSummary extends EffectSummary {
+    warnings: string[];
+}
+export declare class WebEffectLibrary {
+    private readonly dataDir;
+    private readonly options;
+    readonly path: string;
+    private readonly blobs;
+    private readonly stages;
+    private readonly providers;
+    private busy;
+    private readingReferences;
+    constructor(dataDir: string, options?: {
+        monotonic?: () => number;
+        now?: () => number;
+        beforeIndexRename?: () => void;
+    });
+    private clock;
+    private now;
+    private load;
+    private save;
+    private sweep;
+    private claim;
+    private visible;
+    private quota;
+    private summary;
+    private error;
+    private transaction;
+    /** Host-only provider; unreadable/invalid providers never authorize deletion or reference reads. */
+    registerReferenceSource(name: string, source: () => Iterable<EffectReference>): () => void;
+    private references;
+    private referenceKey;
+    private guardReferences;
+    private readRow;
+    private writeBlob;
+    /** No writes. A restart loses the stage; callers must restage and review. */
+    stage(input: EffectFiles | readonly EffectFiles[], principal: EffectPrincipal, options?: {
+        holder?: string;
+    }): {
+        ok: true;
+        stageId: string;
+        ids: string[];
+        entries: EffectStageSummary[];
+    } | Failure;
+    abort(stageId: string): void;
+    private undo;
+    commit(stageId: string): (WriteReceipt & {
+        ids: string[];
+        created: string[];
+    }) | Failure;
+    list(principal: EffectPrincipal): {
+        ok: true;
+        entries: EffectSummary[];
+    } | Failure;
+    managementList(principal: EffectPrincipal): {
+        ok: true;
+        entries: EffectManagementSummary[];
+    } | Failure;
+    read(id: string, principal: EffectPrincipal): {
+        ok: true;
+        entry: CheckedWebEffect;
+    } | Failure;
+    /** Internal: caller first authorizes its own resource. Knowing an id/holder is never a route capability. */
+    readReferenced(id: string, holder: string): {
+        ok: true;
+        entry: CheckedWebEffect;
+    } | Failure;
+    setShared(id: string, principal: EffectPrincipal, shared: boolean): {
+        ok: true;
+    } | Failure;
+    /** Explicit normal delete removes this principal's whole unused claim, including orphan mod holders. */
+    deleteClaim(id: string, principal: EffectPrincipal): {
+        ok: true;
+    } | Failure;
+    /** Host-only mod uninstall. Never releases a direct upload or another holder/principal. */
+    releaseHolder(holder: string, principal: EffectPrincipal): (WriteReceipt & {
+        released: string[];
+    }) | Failure;
+    /** Host-only notification after a placement/reference is removed; never a caller capability. */
+    collectUnreferenced(ids: readonly string[]): void;
+    private collectLater;
+}
+/** r4-5 uses this structural interface; it need not depend on the concrete store in tests. */
+export type EffectLibraryParticipant = Pick<WebEffectLibrary, "stage" | "commit" | "abort" | "read" | "readReferenced" | "releaseHolder" | "registerReferenceSource">;
+export {};