@songsid/agend 2.2.0 → 2.3.0-beta.1

package/dist/web-effect-trials.js

@@ -0,0 +1,204 @@
+/** #1629: volatile Try authority. Local-admin API exists; offer cards and playback remain disconnected. */
+import { randomBytes } from "node:crypto";
+import { performance } from "node:perf_hooks";
+import { canonicalText } from "./web-theme.js";
+export const EFFECT_TRIAL_TTL_MS = 10 * 60 * 1000;
+const ID = /^[0-9a-f]{32}$/;
+const EPOCH = /^[0-9a-f]{16}$/;
+const SESSION = /^[0-9a-f]{64}$/;
+const LIMIT = 128;
+const denied = () => ({ ok: false, error: "trial_unavailable" });
+/** Closed own data without invoking getters; output does not retain caller-owned objects. */
+function data(value, keys) {
+    try {
+        if (!value || typeof value !== "object" || ![Object.prototype, null].includes(Object.getPrototypeOf(value)))
+            return null;
+        const names = Reflect.ownKeys(value);
+        if (names.length !== keys.length || names.some(k => typeof k !== "string" || !keys.includes(k)))
+            return null;
+        const out = Object.create(null);
+        for (const k of keys) {
+            const d = Object.getOwnPropertyDescriptor(value, k);
+            if (!d || !Object.hasOwn(d, "value") || !d.enumerable)
+                return null;
+            out[k] = d.value;
+        }
+        return out;
+    }
+    catch {
+        return null;
+    }
+}
+/** Independent history/card codec. Future producer must also require host status + own instance. */
+export function effectTrialOffer(value) {
+    const d = data(value, ["v", "offer", "id", "title", "expiresAt"]);
+    if (!d || d.v !== 1 || typeof d.offer !== "string" || !ID.test(d.offer) || typeof d.id !== "string" || !ID.test(d.id)
+        || typeof d.title !== "string" || d.title.length > 400 || canonicalText(d.title, 1, 40) !== d.title
+        || !Number.isSafeInteger(d.expiresAt) || d.expiresAt < 0)
+        return null;
+    return Object.freeze({ v: 1, offer: d.offer, id: d.id, title: d.title, expiresAt: d.expiresAt });
+}
+function actor(value, requireCss = true) {
+    const d = data(value, ["via", "surface", "tier", "sessionHash", "epoch", "person", "ownerCss"]);
+    if (!d || d.via !== "session" || d.surface !== "local" || d.tier !== "admin"
+        || typeof d.sessionHash !== "string" || !SESSION.test(d.sessionHash)
+        || typeof d.epoch !== "string" || !EPOCH.test(d.epoch)
+        || typeof d.person !== "string" || !d.person.length || d.person.length > 256
+        || (requireCss ? d.ownerCss !== "off" : !["off", "on", "loading", "unknown"].includes(d.ownerCss)))
+        return null;
+    return Object.freeze({ ...d });
+}
+const sameActor = (a, b) => a.sessionHash === b.sessionHash && a.epoch === b.epoch && a.person === b.person;
+/** One owner per library. Register before publishing the library or doing any collection.
+ * No claims, preferences, files, exports or placements are written. Offers retain bytes
+ * only; read() always rechecks the origin agent's CURRENT own/shared ACL.
+ */
+export class WebEffectTrials {
+    deps;
+    offers = new Map();
+    trials = new Map();
+    unregister;
+    busy = false;
+    clockBusy = false;
+    dead = false;
+    brokenClock = false;
+    previous = 0;
+    constructor(deps) {
+        this.deps = deps;
+        this.unregister = deps.library.registerReferenceSource("effect-trials", () => this.references());
+    }
+    clock() {
+        if (this.brokenClock || this.clockBusy)
+            throw Error("trial_clock");
+        this.clockBusy = true;
+        try {
+            const at = (this.deps.monotonic ?? (() => performance.now()))();
+            if (!Number.isFinite(at) || at < this.previous || at < 0 || at > Number.MAX_SAFE_INTEGER - EFFECT_TRIAL_TTL_MS)
+                throw Error("trial_clock");
+            this.previous = at;
+            return at;
+        }
+        catch (e) {
+            this.brokenClock = true;
+            throw e;
+        }
+        finally {
+            this.clockBusy = false;
+        }
+    }
+    references() {
+        // Observational only. Do not prune, call the library or collect while it enumerates.
+        const at = this.clock();
+        return [...this.offers.values()].filter(o => at < o.until).map(o => ({ id: o.public.id, holder: `trial-offer:${o.public.offer}` }));
+    }
+    prune(at) {
+        for (const [id, o] of this.offers)
+            if (at >= o.until)
+                this.offers.delete(id);
+        for (const [id, t] of this.trials)
+            if (this.offers.get(t.offer.public.offer) !== t.offer)
+                this.trials.delete(id);
+    }
+    run(fn) {
+        if (this.busy || this.clockBusy)
+            return { ok: false, error: "trial_busy" };
+        if (this.dead || this.brokenClock)
+            return denied();
+        this.busy = true;
+        try {
+            this.prune(this.clock());
+            return fn();
+        }
+        catch {
+            return denied();
+        }
+        finally {
+            this.busy = false;
+        }
+    }
+    readable(o) {
+        if (!this.deps.known(o.instance) || this.dead)
+            return null;
+        const r = this.deps.library.read(o.public.id, { kind: "agent", id: o.instance });
+        return r.ok && !this.dead && this.clock() < o.until ? r.entry : null;
+    }
+    /** Agent may OFFER only, using its current own/shared read rights. No appearance write or rate-limit record.
+     * A repeat active offer is idempotent, never extends TTL, and needs no second card.
+     */
+    offer(instance, id) {
+        return this.run(() => {
+            if (typeof instance !== "string" || !instance.length || instance.length > 128 || typeof id !== "string" || !ID.test(id) || !this.deps.known(instance) || this.dead)
+                return denied();
+            const r = this.deps.library.read(id, { kind: "agent", id: instance });
+            if (!r.ok || this.dead)
+                return denied();
+            const at = this.clock();
+            this.prune(at);
+            const old = [...this.offers.values()].find(o => o.instance === instance);
+            if (old?.public.id === id)
+                return { ok: true, offer: old.public, created: false };
+            if (!old && this.offers.size >= LIMIT)
+                return { ok: false, error: "trial_capacity" };
+            const wall = (this.deps.now ?? Date.now)();
+            if (!Number.isSafeInteger(wall) || wall < 0 || wall > Number.MAX_SAFE_INTEGER - EFFECT_TRIAL_TTL_MS || this.dead)
+                return denied();
+            const offer = effectTrialOffer({ v: 1, offer: randomBytes(16).toString("hex"), id, title: r.entry.manifest.title, expiresAt: wall + EFFECT_TRIAL_TTL_MS });
+            if (!offer || this.offers.has(offer.offer) || this.clock() - at >= EFFECT_TRIAL_TTL_MS || this.dead)
+                return denied();
+            if (old)
+                this.offers.delete(old.public.offer);
+            this.prune(this.clock());
+            this.offers.set(offer.offer, Object.freeze({ public: offer, instance, until: at + EFFECT_TRIAL_TTL_MS }));
+            return { ok: true, offer, created: true };
+        });
+    }
+    /** Future CSRF-protected POST only, after an explicit local-admin click. Never a tool or GET. */
+    start(offer, instance, viewer) {
+        return this.run(() => {
+            const a = actor(viewer), o = this.offers.get(offer);
+            if (!a || !o || o.instance !== instance || !this.readable(o))
+                return denied();
+            const old = [...this.trials.values()].find(t => t.actor.sessionHash === a.sessionHash);
+            if (!old && this.trials.size >= LIMIT)
+                return { ok: false, error: "trial_capacity" };
+            const token = randomBytes(16).toString("hex");
+            const remainingMs = Math.floor(o.until - this.clock());
+            if (this.trials.has(token) || remainingMs <= 0 || this.dead)
+                return denied();
+            if (old)
+                this.trials.delete(old.token);
+            this.trials.set(token, Object.freeze({ token, offer: o, actor: a }));
+            return { ok: true, trial: token, offer: o.public, remainingMs };
+        });
+    }
+    /** Each image/code/profile authorization supplies a FRESH verified viewer. Knowing a token is insufficient. */
+    read(trial, instance, viewer) {
+        return this.run(() => {
+            const a = actor(viewer), t = this.trials.get(trial);
+            if (!a || !t || t.offer.instance !== instance || !sameActor(a, t.actor))
+                return denied();
+            const entry = this.readable(t.offer);
+            return entry ? { ok: true, id: t.offer.public.id, instance: t.offer.instance, entry } : denied();
+        });
+    }
+    /** An authenticated owner can stop even after CSS becomes on/unknown; never stops another session. */
+    stop(trial, viewer) {
+        return this.run(() => {
+            const a = actor(viewer, false), t = this.trials.get(trial);
+            if (!a || !t || !sameActor(a, t.actor))
+                return denied();
+            this.trials.delete(trial);
+            return { ok: true };
+        });
+    }
+    /** Call only when this library owner ends. No collection here; the caller owns GC ordering. */
+    dispose() {
+        if (this.dead)
+            return;
+        this.dead = true;
+        this.trials.clear();
+        this.offers.clear();
+        this.unregister();
+    }
+}
+//# sourceMappingURL=web-effect-trials.js.map

package/dist/web-effect-trials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-effect-trials.js","sourceRoot":"","sources":["../src/web-effect-trials.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAI/C,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAClD,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAC5B,MAAM,KAAK,GAAG,gBAAgB,CAAC;AAC/B,MAAM,OAAO,GAAG,gBAAgB,CAAC;AACjC,MAAM,KAAK,GAAG,GAAG,CAAC;AAElB,MAAM,MAAM,GAAG,GAAY,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAW1E,6FAA6F;AAC7F,SAAS,IAAI,CAAC,KAAc,EAAE,IAAuB;IACnD,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACzH,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7G,MAAM,GAAG,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC;YACnE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;WAChH,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK;WAChG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAK,CAAC,CAAC,SAAoB,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAmB,EAAE,CAAC,CAAC;AAC7G,CAAC;AAeD,SAAS,KAAK,CAAC,KAAc,EAAE,UAAU,GAAG,IAAI;IAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;IAChG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;WACvE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;WACjE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;WACnD,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG;WACzE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAkB,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5H,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,CAAgC,CAAC;AAChE,CAAC;AAGD,MAAM,SAAS,GAAG,CAAC,CAAmB,EAAE,CAAmB,EAAW,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC;AAQzJ;;;GAGG;AACH,MAAM,OAAO,eAAe;IASG;IARZ,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IAClC,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IAClC,UAAU,CAAa;IAChC,IAAI,GAAG,KAAK,CAAC;IACb,SAAS,GAAG,KAAK,CAAC;IAClB,IAAI,GAAG,KAAK,CAAC;IACb,WAAW,GAAG,KAAK,CAAC;IACpB,QAAQ,GAAG,CAAC,CAAC;IACrB,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;QAChD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACnG,CAAC;IACO,KAAK;QACX,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,gBAAgB,GAAG,mBAAmB;gBAAE,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;YAC3I,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;YACnB,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAAC,MAAM,CAAC,CAAC;QAAC,CAAC;gBACzC,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAAC,CAAC;IACrC,CAAC;IACO,UAAU;QAChB,qFAAqF;QACrF,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACtI,CAAC;IACO,KAAK,CAAC,EAAU;QACtB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7E,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnH,CAAC;IACO,GAAG,CAAI,EAAW;QACxB,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QAC3E,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,MAAM,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAAC,OAAO,EAAE,EAAE,CAAC;QAAC,CAAC;QAC9C,MAAM,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;QAAC,CAAC;gBAClB,CAAC;YAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QAAC,CAAC;IAChC,CAAC;IACO,QAAQ,CAAC,CAAQ;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3D,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjF,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IACD;;OAEG;IACH,KAAK,CAAC,QAAgB,EAAE,EAAU;QAChC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;YACnB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO,MAAM,EAAE,CAAC;YACpL,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO,MAAM,EAAE,CAAC;YACxC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxC,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YACzE,IAAI,GAAG,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC3F,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,gBAAyB,EAAE,CAAC;YACvG,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,gBAAgB,GAAG,mBAAmB,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO,MAAM,EAAE,CAAC;YAClI,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,GAAG,mBAAmB,EAAE,CAAC,CAAC;YAC3J,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,mBAAmB,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO,MAAM,EAAE,CAAC;YACrH,IAAI,GAAG;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,mBAAmB,EAAE,CAAC,CAAC,CAAC;YAC1G,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IACD,iGAAiG;IACjG,KAAK,CAAC,KAAa,EAAE,QAAgB,EAAE,MAAe;QACpD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;YACnB,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,MAAM,EAAE,CAAC;YAC9E,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC;YACvF,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,gBAAyB,EAAE,CAAC;YACvG,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACvD,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO,MAAM,EAAE,CAAC;YAC7E,IAAI,GAAG;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACrE,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC;IACD,+GAA+G;IAC/G,IAAI,CAAC,KAAa,EAAE,QAAgB,EAAE,MAAe;QACnD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;YACnB,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC;gBAAE,OAAO,MAAM,EAAE,CAAC;YACzF,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACrC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAa,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5G,CAAC,CAAC,CAAC;IACL,CAAC;IACD,sGAAsG;IACtG,IAAI,CAAC,KAAa,EAAE,MAAe;QACjC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;YACnB,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3D,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC;gBAAE,OAAO,MAAM,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;IACD,+FAA+F;IAC/F,OAAO;QACL,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,UAAU,EAAE,CAAC;IAChF,CAAC;CACF"}

package/dist/web-effect-upload.d.ts

@@ -0,0 +1,29 @@
+export declare const EFFECT_WIRE_LIMIT: number;
+export declare const EFFECT_UPLOAD_MEMORY: number;
+export declare const EFFECT_UPLOAD_IDLE_MS = 60000;
+export type EffectRead = {
+    ok: true;
+    files: ReadonlyMap<string, Uint8Array>;
+} | {
+    ok: false;
+    reason: string;
+};
+/** All paths and bounded reads are on the agent's side. A partial/changed directory is revalidated as one CW1 entry. */
+export declare function readAgentEffect(dir: unknown, opts: {
+    workspace: string | undefined;
+    stateDir: string;
+}): Promise<EffectRead>;
+/** The one transport representation; normalized entries only, no directory path, caller or holder. */
+export declare function encodeEffectFiles(files: ReadonlyMap<string, Uint8Array>): Buffer | null;
+export declare function decodeEffectFiles(bytes: Uint8Array): ReadonlyMap<string, Uint8Array> | null;
+/** Every part fits the existing endpoint/IPC limit; a part is acknowledged before the next is sent. */
+export declare function sendEffectInParts(files: ReadonlyMap<string, Uint8Array>, send: (args: Record<string, unknown>) => Promise<Record<string, unknown>>): Promise<Record<string, unknown>>;
+/** Receiving side: caller identity comes from IPC/session, never the part's fields. No filesystem path is accepted. */
+export declare class EffectUploads {
+    private readonly clock;
+    private readonly pending;
+    private lastClock;
+    constructor(clock?: () => number);
+    forget(instance: string): void;
+    accept(instance: string, args: Record<string, unknown>, complete: (files: ReadonlyMap<string, Uint8Array>) => Record<string, unknown>): Record<string, unknown>;
+}

package/dist/web-effect-upload.js

@@ -0,0 +1,190 @@
+/** #1629 CW1: agent-side directory snapshot and bounded multipart transport. No fleet opens a workspace path. */
+import { lstat, opendir, realpath } from "node:fs/promises";
+import { isAbsolute, join, resolve, sep } from "node:path";
+import { createHash, randomBytes } from "node:crypto";
+import { readAgentFile } from "./agent-file-read.js";
+import { checkEffectEntry } from "./web-effect-bundle.js";
+import { ASSET_PART_BYTES } from "./web-asset-parts.js";
+// Room for base64-wrapped raw metadata; CW1 still limits normalized entries to one MiB.
+export const EFFECT_WIRE_LIMIT = 12 * 1024 * 1024;
+export const EFFECT_UPLOAD_MEMORY = 64 * 1024 * 1024;
+export const EFFECT_UPLOAD_IDLE_MS = 60_000;
+const ROOT_FILES = new Set(["effect.json", "worker.js", "poster.png", "cursor.png"]);
+const ASSET_NAME = /^[a-z0-9][a-z0-9_-]{0,63}\.(?:png|jpe?g|webp|gif)$/;
+const under = (path, root) => path === root || path.startsWith(root.endsWith(sep) ? root : root + sep);
+/** All paths and bounded reads are on the agent's side. A partial/changed directory is revalidated as one CW1 entry. */
+export async function readAgentEffect(dir, opts) {
+    if (typeof dir !== "string" || !dir.trim() || dir.includes("\0") || !opts.workspace)
+        return { ok: false, reason: "an effect directory in your working directory" };
+    try {
+        const named = isAbsolute(dir) ? dir : resolve(opts.workspace, dir), info = await lstat(named);
+        if (!info.isDirectory() || info.isSymbolicLink())
+            return { ok: false, reason: "not a plain directory" };
+        const root = await realpath(named), workspace = await realpath(opts.workspace);
+        const states = [resolve(opts.stateDir)];
+        try {
+            states.push(await realpath(opts.stateDir));
+        }
+        catch { /* absent state path */ }
+        if (!under(root, workspace) || states.some(state => under(root, state)))
+            return { ok: false, reason: "outside the workspace or inside AgEnD state" };
+        const paths = [];
+        const directory = await opendir(root);
+        for await (const entry of directory) {
+            if (ROOT_FILES.has(entry.name) && entry.isFile())
+                paths.push(entry.name);
+            else if (entry.name === "assets" && entry.isDirectory()) {
+                const assets = await opendir(join(root, "assets"));
+                let count = 0;
+                for await (const asset of assets) {
+                    if (++count > 16 || !asset.isFile() || !ASSET_NAME.test(asset.name))
+                        return { ok: false, reason: "at most sixteen plain raster assets" };
+                    paths.push("assets/" + asset.name);
+                }
+            }
+            else
+                return { ok: false, reason: "unsupported effect directory entry" };
+            if (paths.length > 20)
+                return { ok: false, reason: "too many effect files" };
+        }
+        const files = new Map();
+        let remaining = 8 * 1024 * 1024;
+        for (const path of paths.sort()) {
+            const read = await readAgentFile(join(root, path), { ...opts, maxBytes: remaining });
+            if (!read.ok)
+                return read;
+            remaining -= read.bytes.length;
+            files.set(path, read.bytes);
+        }
+        // This is preparation only. The receiving fleet validates again before any claim or limiter record.
+        const checked = checkEffectEntry(files);
+        return checked.ok ? { ok: true, files: checked.files } : { ok: false, reason: "invalid CW1 effect entry" };
+    }
+    catch {
+        return { ok: false, reason: "cannot read effect directory" };
+    }
+}
+/** The one transport representation; normalized entries only, no directory path, caller or holder. */
+export function encodeEffectFiles(files) {
+    const checked = checkEffectEntry(files);
+    if (!checked.ok)
+        return null;
+    const bytes = Buffer.from(JSON.stringify([...checked.files].map(([path, data]) => ({ path, data_b64: Buffer.from(data).toString("base64") }))));
+    return bytes.length <= EFFECT_WIRE_LIMIT ? bytes : null;
+}
+export function decodeEffectFiles(bytes) {
+    if (bytes.byteLength > EFFECT_WIRE_LIMIT)
+        return null;
+    try {
+        const value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+        if (!Array.isArray(value) || value.length < 2 || value.length > 20)
+            return null;
+        const files = new Map();
+        let total = 0;
+        for (const entry of value) {
+            if (!entry || typeof entry !== "object" || Object.keys(entry).sort().join(",") !== "data_b64,path" || typeof entry.path !== "string" || files.has(entry.path) || typeof entry.data_b64 !== "string" || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(entry.data_b64))
+                return null;
+            const data = Buffer.from(entry.data_b64, "base64");
+            total += data.length;
+            if (total > 8 * 1024 * 1024)
+                return null;
+            files.set(entry.path, data);
+        }
+        const checked = checkEffectEntry(files);
+        return checked.ok ? checked.files : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Every part fits the existing endpoint/IPC limit; a part is acknowledged before the next is sent. */
+export async function sendEffectInParts(files, send) {
+    const all = encodeEffectFiles(files);
+    if (!all)
+        return { error: "invalid_effect" };
+    const sha256 = createHash("sha256").update(all).digest("hex"), count = Math.ceil(all.length / ASSET_PART_BYTES);
+    let upload, answer = {};
+    for (let index = 0; index < count; index++) {
+        answer = await send({ data_b64: all.subarray(index * ASSET_PART_BYTES, (index + 1) * ASSET_PART_BYTES).toString("base64"), part: { index, count, bytes: all.length, sha256, ...(upload ? { upload } : {}) } });
+        if (typeof answer.error === "string" || Array.isArray(answer.errors))
+            return answer;
+        if (index < count - 1) {
+            if (typeof answer.upload !== "string")
+                return { error: "upload", message: "The fleet did not accept the upload part." };
+            upload = answer.upload;
+        }
+    }
+    return answer;
+}
+/** Receiving side: caller identity comes from IPC/session, never the part's fields. No filesystem path is accepted. */
+export class EffectUploads {
+    clock;
+    pending = new Map();
+    lastClock = null;
+    constructor(clock = () => performance.now()) {
+        this.clock = clock;
+    }
+    forget(instance) { this.pending.delete(instance); }
+    accept(instance, args, complete) {
+        const fail = (error) => { this.pending.delete(instance); return { error }; };
+        let now;
+        try {
+            now = this.clock();
+        }
+        catch {
+            this.pending.clear();
+            return { error: "clock_unavailable" };
+        }
+        if (!Number.isFinite(now) || now < 0 || this.lastClock !== null && now < this.lastClock) {
+            this.pending.clear();
+            return { error: "clock_unavailable" };
+        }
+        this.lastClock = now;
+        for (const [name, p] of this.pending)
+            if (now - p.last >= EFFECT_UPLOAD_IDLE_MS)
+                this.pending.delete(name);
+        if (!args || typeof args !== "object" || Array.isArray(args))
+            return fail("effect_part");
+        if (Object.keys(args).sort().join(",") !== "data_b64,part" || typeof args.data_b64 !== "string" || args.data_b64.length > Math.ceil(ASSET_PART_BYTES / 3) * 4 || !/^[A-Za-z0-9+/]*={0,2}$/.test(args.data_b64))
+            return fail("effect_part");
+        const raw = args.part;
+        if (!raw || typeof raw !== "object" || Array.isArray(raw))
+            return fail("effect_part");
+        const p = raw, keys = Object.keys(p).sort().join(",");
+        if (keys !== "bytes,count,index,sha256" && keys !== "bytes,count,index,sha256,upload")
+            return fail("effect_part");
+        if (!Number.isSafeInteger(p.index) || !Number.isSafeInteger(p.count) || !Number.isSafeInteger(p.bytes) || typeof p.sha256 !== "string" || !/^[0-9a-f]{64}$/.test(p.sha256))
+            return fail("effect_part");
+        const index = p.index, count = p.count, bytes = p.bytes;
+        if (bytes < 1 || bytes > EFFECT_WIRE_LIMIT || count !== Math.ceil(bytes / ASSET_PART_BYTES) || index < 0 || index >= count)
+            return fail("effect_part");
+        const chunk = Buffer.from(args.data_b64, "base64");
+        if (chunk.toString("base64") !== args.data_b64 || chunk.length !== (index < count - 1 ? ASSET_PART_BYTES : bytes - index * ASSET_PART_BYTES))
+            return fail("effect_part");
+        if (index === 0) {
+            if (p.upload !== undefined)
+                return fail("effect_part");
+            if (!this.pending.has(instance) && this.pending.size >= 32)
+                return fail("effect_upload_full");
+            this.pending.set(instance, { id: randomBytes(16).toString("hex"), count, next: 0, bytes, sha256: p.sha256, received: 0, chunks: [], last: now });
+        }
+        const up = this.pending.get(instance);
+        if (!up || (index !== 0 && p.upload !== up.id) || index !== up.next || bytes !== up.bytes || count !== up.count || p.sha256 !== up.sha256)
+            return fail("effect_upload");
+        if ([...this.pending.values()].reduce((n, p) => n + p.received, chunk.length) > EFFECT_UPLOAD_MEMORY)
+            return fail("effect_upload_full");
+        up.chunks.push(chunk);
+        up.received += chunk.length;
+        up.next++;
+        up.last = now;
+        if (up.next < up.count)
+            return { upload: up.id, received: up.received };
+        this.pending.delete(instance);
+        const all = Buffer.concat(up.chunks);
+        if (all.length !== up.bytes || createHash("sha256").update(all).digest("hex") !== up.sha256)
+            return { error: "effect_digest" };
+        const files = decodeEffectFiles(all);
+        return files ? complete(files) : { error: "invalid_effect" };
+    }
+}
+//# sourceMappingURL=web-effect-upload.js.map

package/dist/web-effect-upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-effect-upload.js","sourceRoot":"","sources":["../src/web-effect-upload.ts"],"names":[],"mappings":"AAAA,iHAAiH;AACjH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,wFAAwF;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACrD,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AACrF,MAAM,UAAU,GAAG,oDAAoD,CAAC;AACxE,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AAGvH,wHAAwH;AACxH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAY,EAAE,IAAyD;IAC3G,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAC,KAAK,EAAE,MAAM,EAAC,+CAA+C,EAAE,CAAC;IACjK,IAAI,CAAC;QACH,MAAM,KAAK,GAAC,UAAU,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,OAAO,CAAC,IAAI,CAAC,SAAS,EAAC,GAAG,CAAC,EAAE,IAAI,GAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,OAAO,EAAC,EAAE,EAAC,KAAK,EAAC,MAAM,EAAC,uBAAuB,EAAC,CAAC;QACnG,MAAM,IAAI,GAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,GAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;QACrF,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,SAAS,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,IAAI,EAAC,KAAK,CAAC,CAAC;YAAE,OAAO,EAAC,EAAE,EAAC,KAAK,EAAC,MAAM,EAAC,6CAA6C,EAAC,CAAC;QAC5I,MAAM,KAAK,GAAU,EAAE,CAAC;QACxB,MAAM,SAAS,GAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YACpC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;iBACpE,IAAI,KAAK,CAAC,IAAI,KAAG,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAC,QAAQ,CAAC,CAAC,CAAC;gBAAC,IAAI,KAAK,GAAC,CAAC,CAAC;gBAC7D,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBACjC,IAAI,EAAE,KAAK,GAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;wBAAE,OAAO,EAAC,EAAE,EAAC,KAAK,EAAC,MAAM,EAAC,qCAAqC,EAAC,CAAC;oBAClI,KAAK,CAAC,IAAI,CAAC,SAAS,GAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;;gBAAM,OAAO,EAAC,EAAE,EAAC,KAAK,EAAC,MAAM,EAAC,oCAAoC,EAAC,CAAC;YACrE,IAAI,KAAK,CAAC,MAAM,GAAC,EAAE;gBAAE,OAAO,EAAC,EAAE,EAAC,KAAK,EAAC,MAAM,EAAC,uBAAuB,EAAC,CAAC;QACxE,CAAC;QACD,MAAM,KAAK,GAAC,IAAI,GAAG,EAAqB,CAAC;QAAC,IAAI,SAAS,GAAC,CAAC,GAAC,IAAI,GAAC,IAAI,CAAC;QACpE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,GAAC,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,EAAC,EAAC,GAAG,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,CAAC,CAAC;YAC7E,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC1B,SAAS,IAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;QACD,oGAAoG;QACpG,MAAM,OAAO,GAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC,EAAE,CAAA,CAAC,CAAA,EAAC,EAAE,EAAC,IAAI,EAAC,KAAK,EAAC,OAAO,CAAC,KAAK,EAAC,CAAA,CAAC,CAAA,EAAC,EAAE,EAAC,KAAK,EAAC,MAAM,EAAC,0BAA0B,EAAC,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAC,EAAE,EAAC,KAAK,EAAC,MAAM,EAAC,8BAA8B,EAAC,CAAC;IAAC,CAAC;AACtE,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,iBAAiB,CAAC,KAAqC;IACrE,MAAM,OAAO,GAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,KAAK,GAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAC,IAAI,CAAC,EAAC,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvI,OAAO,KAAK,CAAC,MAAM,IAAE,iBAAiB,CAAA,CAAC,CAAA,KAAK,CAAA,CAAC,CAAA,IAAI,CAAC;AACpD,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,KAAiB;IACjD,IAAI,KAAK,CAAC,UAAU,GAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,KAAK,GAAS,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAC,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAC,CAAC,IAAI,KAAK,CAAC,MAAM,GAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC5E,MAAM,KAAK,GAAC,IAAI,GAAG,EAAqB,CAAC;QAAC,IAAI,KAAK,GAAC,CAAC,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAG,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAG,eAAe,IAAI,OAAO,KAAK,CAAC,IAAI,KAAG,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAG,QAAQ,IAAI,CAAC,kEAAkE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrS,MAAM,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,QAAQ,CAAC,CAAC;YAAA,KAAK,IAAE,IAAI,CAAC,MAAM,CAAC;YACnE,IAAI,KAAK,GAAC,CAAC,GAAC,IAAI,GAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YACnC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,OAAO,GAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC,EAAE,CAAA,CAAC,CAAA,OAAO,CAAC,KAAK,CAAA,CAAC,CAAA,IAAI,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAqC,EAAE,IAAoE;IACjJ,MAAM,GAAG,GAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAC,KAAK,EAAC,gBAAgB,EAAC,CAAC;IAC1C,MAAM,MAAM,GAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,GAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAC,gBAAgB,CAAC,CAAC;IAC1G,IAAI,MAAuB,EAAE,MAAM,GAAwB,EAAE,CAAC;IAC9D,KAAI,IAAI,KAAK,GAAC,CAAC,EAAC,KAAK,GAAC,KAAK,EAAC,KAAK,EAAE,EAAE,CAAC;QACpC,MAAM,GAAC,MAAM,IAAI,CAAC,EAAC,QAAQ,EAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAC,gBAAgB,EAAC,CAAC,KAAK,GAAC,CAAC,CAAC,GAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,EAAC,KAAK,EAAC,KAAK,EAAC,KAAK,EAAC,GAAG,CAAC,MAAM,EAAC,MAAM,EAAC,GAAG,CAAC,MAAM,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,EAAC,CAAC,CAAC;QACpL,IAAI,OAAO,MAAM,CAAC,KAAK,KAAG,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QAClF,IAAI,KAAK,GAAC,KAAK,GAAC,CAAC,EAAE,CAAC;YAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAG,QAAQ;gBAAE,OAAO,EAAC,KAAK,EAAC,QAAQ,EAAC,OAAO,EAAC,2CAA2C,EAAC,CAAC;YAAC,MAAM,GAAC,MAAM,CAAC,MAAM,CAAC;QAAC,CAAC;IAChK,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAGD,uHAAuH;AACvH,MAAM,OAAO,aAAa;IAGK;IAFZ,OAAO,GAAC,IAAI,GAAG,EAA8B,CAAC;IACvD,SAAS,GAAkB,IAAI,CAAC;IACxC,YAA6B,QAAiB,GAAE,EAAE,CAAA,WAAW,CAAC,GAAG,EAAE;QAAtC,UAAK,GAAL,KAAK,CAAiC;IAAG,CAAC;IACvE,MAAM,CAAC,QAAe,IAAS,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,CAAC,QAAe,EAAC,IAA2B,EAAC,QAAuE;QACxH,MAAM,IAAI,GAAC,CAAC,KAAY,EAAC,EAAE,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA,OAAO,EAAC,KAAK,EAAC,CAAC,CAAA,CAAC,CAAC;QAC3E,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,EAAC,KAAK,EAAC,mBAAmB,EAAC,CAAC;QAAC,CAAC;QAC/F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,EAAC,KAAK,EAAC,mBAAmB,EAAC,CAAC;QAAC,CAAC;QACtJ,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QACrB,KAAI,MAAM,CAAC,IAAI,EAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO;YAAC,IAAG,GAAG,GAAC,CAAC,CAAC,IAAI,IAAE,qBAAqB;gBAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClG,IAAG,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;QACxF,IAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAG,eAAe,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAG,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAC,CAAC,CAAC,GAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;QAChO,MAAM,GAAG,GAAC,IAAI,CAAC,IAAI,CAAC;QACpB,IAAG,CAAC,GAAG,IAAI,OAAO,GAAG,KAAG,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAC,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;QAClF,MAAM,CAAC,GAAC,GAA6B,EAAC,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3E,IAAG,IAAI,KAAG,0BAA0B,IAAI,IAAI,KAAG,iCAAiC;YAAC,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5G,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAE,OAAO,CAAC,CAAC,MAAM,KAAG,QAAQ,IAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3L,MAAM,KAAK,GAAC,CAAC,CAAC,KAAe,EAAC,KAAK,GAAC,CAAC,CAAC,KAAe,EAAC,KAAK,GAAC,CAAC,CAAC,KAAe,CAAC;QAC9E,IAAG,KAAK,GAAC,CAAC,IAAE,KAAK,GAAC,iBAAiB,IAAE,KAAK,KAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAC,gBAAgB,CAAC,IAAE,KAAK,GAAC,CAAC,IAAE,KAAK,IAAE,KAAK;YAAC,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;QACjI,MAAM,KAAK,GAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAC,QAAQ,CAAC,CAAC;QAChD,IAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAG,IAAI,CAAC,QAAQ,IAAE,KAAK,CAAC,MAAM,KAAG,CAAC,KAAK,GAAC,KAAK,GAAC,CAAC,CAAA,CAAC,CAAA,gBAAgB,CAAA,CAAC,CAAA,KAAK,GAAC,KAAK,GAAC,gBAAgB,CAAC;YAAC,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;QACrJ,IAAG,KAAK,KAAG,CAAC,EAAE,CAAC;YACb,IAAG,CAAC,CAAC,MAAM,KAAG,SAAS;gBAAC,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;YACnD,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAE,EAAE;gBAAC,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACxF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAC,EAAC,EAAE,EAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,EAAC,KAAK,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAC,QAAQ,EAAC,CAAC,EAAC,MAAM,EAAC,EAAE,EAAC,IAAI,EAAC,GAAG,EAAC,CAAC,CAAC;QACnI,CAAC;QACD,MAAM,EAAE,GAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAG,CAAC,EAAE,IAAI,CAAC,KAAK,KAAG,CAAC,IAAE,CAAC,CAAC,MAAM,KAAG,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,KAAG,EAAE,CAAC,IAAI,IAAI,KAAK,KAAG,EAAE,CAAC,KAAK,IAAE,KAAK,KAAG,EAAE,CAAC,KAAK,IAAE,CAAC,CAAC,MAAM,KAAG,EAAE,CAAC,MAAM;YAAC,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;QACpJ,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,GAAC,CAAC,CAAC,QAAQ,EAAC,KAAK,CAAC,MAAM,CAAC,GAAC,oBAAoB;YAAC,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC/H,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAA,EAAE,CAAC,QAAQ,IAAE,KAAK,CAAC,MAAM,CAAC;QAAA,EAAE,CAAC,IAAI,EAAE,CAAC;QAAA,EAAE,CAAC,IAAI,GAAC,GAAG,CAAC;QACtE,IAAG,EAAE,CAAC,IAAI,GAAC,EAAE,CAAC,KAAK;YAAC,OAAO,EAAC,MAAM,EAAC,EAAE,CAAC,EAAE,EAAC,QAAQ,EAAC,EAAE,CAAC,QAAQ,EAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QACnC,IAAG,GAAG,CAAC,MAAM,KAAG,EAAE,CAAC,KAAK,IAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAG,EAAE,CAAC,MAAM;YAAC,OAAO,EAAC,KAAK,EAAC,eAAe,EAAC,CAAC;QACpH,MAAM,KAAK,GAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,KAAK,CAAA,CAAC,CAAA,QAAQ,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,EAAC,KAAK,EAAC,gBAAgB,EAAC,CAAC;IACxD,CAAC;CACF"}

package/dist/web-effect-worker.d.ts

@@ -0,0 +1,8 @@
+/** #1629: trusted bootstrap sources; uploaded JS runs only in a dedicated Worker, never a DOM realm. */
+export declare const EFFECT_MAX_BYTES: number;
+export declare const EFFECT_MAX_PIXELS: number;
+export declare const EFFECT_SIGNAL_CHECK: string;
+/** The private port never reaches user callbacks, including through poisoned native getters/schedulers. */
+export declare function effectWorkerSource(): string;
+/** No HTML input exists. The document realm contains only this shim and its single canvas. */
+export declare function buildCanvasEffectShim(bootId: string, origins: readonly string[]): string;