@songsid/agend 2.2.1 → 2.3.0-beta.10

package/dist/web-effect-playback.js

@@ -0,0 +1,71 @@
+/** #2115: untrusted, volatile playback observations. Never a safety/admission input or measured profile. */
+export const EFFECT_BLOCK_REASONS = Object.freeze([
+    "transport_unavailable", "preview_unavailable", "preview_not_consented", "unsupported_host", "safe_mode", "reduced_motion", "save_data", "hidden", "disabled", "public_link",
+    "baseline_unsupported", "baseline_unavailable", "baseline_timeout", "calibrating", "clock_unavailable", "gates_unknown", "owner_css", "stock_overlay", "modal",
+    "safety_off", "safety_unknown", "interrupted", "paused", "host_budget", "frame_limit", "front_limit", "offscreen", "region_unavailable", "resource_unavailable", "resource_timeout", "runtime_unavailable", "unknown",
+]);
+export function checkPlaybackObservation(value) {
+    if (!value || typeof value !== "object" || ![Object.prototype, null].includes(Object.getPrototypeOf(value)))
+        return null;
+    const ds = Object.getOwnPropertyDescriptors(value), keys = ["v", "kind", "device", "status", "reason"];
+    if (Reflect.ownKeys(ds).length !== keys.length || keys.some(k => !ds[k]?.enumerable || !("value" in ds[k])))
+        return null;
+    const v = Object.fromEntries(keys.map(k => [k, ds[k].value]));
+    if (v.v !== 1 || v.kind !== "playback" || !["standard", "constrained"].includes(v.device))
+        return null;
+    if (v.status === "playing" ? v.reason !== null : v.status !== "blocked" || !EFFECT_BLOCK_REASONS.includes(v.reason))
+        return null;
+    return Object.freeze(v);
+}
+export class WebEffectPlayback {
+    clock;
+    rows = new Map();
+    previous = null;
+    broken = false;
+    constructor(clock = () => performance.now()) {
+        this.clock = clock;
+    }
+    now() {
+        if (this.broken)
+            return null;
+        let n;
+        try {
+            n = this.clock();
+        }
+        catch {
+            this.broken = true;
+            return null;
+        }
+        if (!Number.isFinite(n) || n < 0 || this.previous !== null && n < this.previous) {
+            this.broken = true;
+            this.rows.clear();
+            return null;
+        }
+        this.previous = n;
+        for (const [key, row] of this.rows)
+            if (n - row.at >= 300_000)
+                this.rows.delete(key);
+        return n;
+    }
+    record(reporter, instance, id, value) {
+        const observation = checkPlaybackObservation(value);
+        if (!observation || !/^[a-f0-9]{64}$/.test(reporter))
+            return { error: "playback_report" };
+        const now = this.now();
+        if (now === null)
+            return { error: "profile_clock" };
+        const key = JSON.stringify([reporter, instance, id]), old = this.rows.get(key);
+        if (old && now - old.at < 10_000 || !old && this.rows.size >= 1024)
+            return { error: "profile_rate_limited" };
+        this.rows.set(key, { instance, id, at: now, reason: observation.reason });
+        return { ok: true };
+    }
+    /** Current placement IDs are supplied by the host; never export identifiers, counts, times or device classes. */
+    summary(instance, id) {
+        if (this.now() === null)
+            return { status: "unknown", reasons: [] };
+        const reasons = EFFECT_BLOCK_REASONS.filter(reason => [...this.rows.values()].some(r => r.instance === instance && r.id === id && r.reason === reason));
+        return { status: reasons.length ? "reported_blocked" : "unknown", reasons };
+    }
+}
+//# sourceMappingURL=web-effect-playback.js.map

package/dist/web-effect-playback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-effect-playback.js","sourceRoot":"","sources":["../src/web-effect-playback.ts"],"names":[],"mappings":"AAAA,4GAA4G;AAC5G,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IAChD,uBAAuB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa;IAC5K,sBAAsB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,aAAa,EAAE,mBAAmB,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO;IAC9J,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,SAAS;CAC7M,CAAC,CAAC;AAGZ,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACzH,MAAM,EAAE,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvG,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1H,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACvG,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACjI,OAAO,MAAM,CAAC,MAAM,CAAC,CAAgB,CAAC,CAAC;AACzC,CAAC;AACD,MAAM,OAAO,iBAAiB;IAIC;IAHZ,IAAI,GAAG,IAAI,GAAG,EAA0F,CAAC;IAClH,QAAQ,GAAkB,IAAI,CAAC;IAC/B,MAAM,GAAG,KAAK,CAAC;IACvB,YAA6B,QAAsB,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAA7C,UAAK,GAAL,KAAK,CAAwC;IAAG,CAAC;IACtE,GAAG;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,CAAS,CAAC;QAAC,IAAI,CAAC;YAAC,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACnF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACxI,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,OAAO;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,CAAC,QAAgB,EAAE,QAAgB,EAAE,EAAU,EAAE,KAAc;QACnE,MAAM,WAAW,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/E,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,CAAC,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;QAC7G,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,iHAAiH;IACjH,OAAO,CAAC,QAAgB,EAAE,EAAU;QAClC,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACnE,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC;QACxJ,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;IAC9E,CAAC;CACF"}

package/dist/web-effect-poster.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Retain the PNG default image, not APNG animation. This does not change stored CW1 bytes/identity.
+ * Input comes from the revalidated library (metadata already stripped). Chunk/size checks are not
+ * a complete image decoder or CRC validator; a browser may still refuse an invalid default image.
+ */
+export declare function staticEffectPoster(bytes: Uint8Array): Uint8Array | null;
+/** Cursor output keeps the default PNG image and the CW1 32-KiB / square 64-pixel limit. */
+export declare function staticEffectCursor(bytes: Uint8Array): Uint8Array | null;

package/dist/web-effect-poster.js

@@ -0,0 +1,52 @@
+/** #1629: a bounded static projection of an already-normalized CW1 PNG, never its author code. */
+import { imageSize, sniffMedia } from "./web-image-meta.js";
+import { WEB_EFFECT_MAX_BYTES } from "./web-effect-bundle.js";
+const ANIMATION = new Set(["acTL", "fcTL", "fdAT"]);
+/**
+ * Retain the PNG default image, not APNG animation. This does not change stored CW1 bytes/identity.
+ * Input comes from the revalidated library (metadata already stripped). Chunk/size checks are not
+ * a complete image decoder or CRC validator; a browser may still refuse an invalid default image.
+ */
+export function staticEffectPoster(bytes) {
+    if (!(bytes instanceof Uint8Array) || bytes.byteLength > WEB_EFFECT_MAX_BYTES || sniffMedia(bytes) !== "png")
+        return null;
+    const size = imageSize(bytes, "png");
+    if (!size || size.width < 1 || size.height < 1 || size.width > 4096 || size.height > 4096 || size.width * size.height > 8388608)
+        return null;
+    const parts = [bytes.subarray(0, 8)];
+    let offset = 8, chunks = 0, data = false;
+    while (offset + 12 <= bytes.length && ++chunks <= 4096) {
+        const length = new DataView(bytes.buffer, bytes.byteOffset + offset, 4).getUint32(0);
+        const end = offset + 12 + length;
+        if (end > bytes.length)
+            return null;
+        const type = String.fromCharCode(...bytes.subarray(offset + 4, offset + 8));
+        if (chunks === 1 ? type !== "IHDR" || length !== 13 : type === "IHDR")
+            return null;
+        if (type === "IDAT" && length > 0)
+            data = true;
+        if (!ANIMATION.has(type))
+            parts.push(bytes.subarray(offset, end));
+        offset = end;
+        if (type === "IEND") {
+            if (length !== 0 || !data || offset !== bytes.length)
+                return null;
+            const result = new Uint8Array(parts.reduce((n, part) => n + part.length, 0));
+            let at = 0;
+            for (const part of parts) {
+                result.set(part, at);
+                at += part.length;
+            }
+            return result;
+        }
+    }
+    return null;
+}
+/** Cursor output keeps the default PNG image and the CW1 32-KiB / square 64-pixel limit. */
+export function staticEffectCursor(bytes) {
+    if (!(bytes instanceof Uint8Array) || bytes.byteLength > 32768)
+        return null;
+    const size = imageSize(bytes, "png");
+    return size && size.width >= 1 && size.width <= 64 && size.height === size.width ? staticEffectPoster(bytes) : null;
+}
+//# sourceMappingURL=web-effect-poster.js.map

package/dist/web-effect-poster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-effect-poster.js","sourceRoot":"","sources":["../src/web-effect-poster.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACpD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,oBAAoB,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC1H,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,OAAO;QAAE,OAAO,IAAI,CAAC;IAC7I,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC;IACzC,OAAO,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC;QACjC,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACnF,IAAI,IAAI,KAAK,MAAM,IAAI,MAAM,GAAG,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC;QAC/C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,CAAC;QACb,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YAClE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7E,IAAI,EAAE,GAAG,CAAC,CAAC;YAAC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC;YAAC,CAAC;YAClF,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,KAAK;QAAE,OAAO,IAAI,CAAC;IAC5E,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtH,CAAC"}

package/dist/web-effect-profiles.d.ts

@@ -0,0 +1,118 @@
+import { z } from "zod";
+export declare const EFFECT_PROFILE_LIMIT = 20;
+export declare const EFFECT_PROFILE_IDS = 512;
+export declare const EFFECT_PROFILE_FILE_BYTES: number;
+declare const inputSchema: z.ZodObject<{
+    v: z.ZodLiteral<1>;
+    device: z.ZodEnum<{
+        standard: "standard";
+        constrained: "constrained";
+    }>;
+    verdict: z.ZodEnum<{
+        paused: "paused";
+        off: "off";
+        ok: "ok";
+        degraded: "degraded";
+    }>;
+    reason: z.ZodNullable<z.ZodEnum<{
+        hidden: "hidden";
+        clock_unavailable: "clock_unavailable";
+        reduced_motion: "reduced_motion";
+        save_data: "save_data";
+        gates_unknown: "gates_unknown";
+        host_budget: "host_budget";
+        viewer_off: "viewer_off";
+    }>>;
+    samples: z.ZodNumber;
+    fps_p50: z.ZodNumber;
+    fps_p10: z.ZodNumber;
+    fps_floor: z.ZodNumber;
+    long_task_p95: z.ZodNullable<z.ZodNumber>;
+    long_task_samples: z.ZodNumber;
+    attributed_long_task_p95: z.ZodNullable<z.ZodNumber>;
+    attributed_samples: z.ZodNumber;
+    attribution: z.ZodEnum<{
+        unknown: "unknown";
+        observed: "observed";
+    }>;
+    load_ms: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strict>;
+declare const storedSchema: z.ZodObject<{
+    at: z.ZodNumber;
+    source: z.ZodLiteral<"reported_host">;
+    v: z.ZodLiteral<1>;
+    device: z.ZodEnum<{
+        standard: "standard";
+        constrained: "constrained";
+    }>;
+    verdict: z.ZodEnum<{
+        paused: "paused";
+        off: "off";
+        ok: "ok";
+        degraded: "degraded";
+    }>;
+    reason: z.ZodNullable<z.ZodEnum<{
+        hidden: "hidden";
+        clock_unavailable: "clock_unavailable";
+        reduced_motion: "reduced_motion";
+        save_data: "save_data";
+        gates_unknown: "gates_unknown";
+        host_budget: "host_budget";
+        viewer_off: "viewer_off";
+    }>>;
+    samples: z.ZodNumber;
+    fps_p50: z.ZodNumber;
+    fps_p10: z.ZodNumber;
+    fps_floor: z.ZodNumber;
+    long_task_p95: z.ZodNullable<z.ZodNumber>;
+    long_task_samples: z.ZodNumber;
+    attributed_long_task_p95: z.ZodNullable<z.ZodNumber>;
+    attributed_samples: z.ZodNumber;
+    attribution: z.ZodEnum<{
+        unknown: "unknown";
+        observed: "observed";
+    }>;
+    load_ms: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strict>;
+export type EffectProfileInput = z.infer<typeof inputSchema>;
+export type StoredEffectProfile = z.infer<typeof storedSchema>;
+export interface EffectProfileSummary {
+    status: "unmeasured" | "reported";
+    records: StoredEffectProfile[];
+}
+export declare function checkEffectProfile(input: unknown): {
+    ok: true;
+    profile: EffectProfileInput;
+} | {
+    ok: false;
+    error: "profile_args";
+};
+type Failure = {
+    ok: false;
+    error: "profile_args" | "profiles_unreadable" | "profiles_write_failed" | "profiles_bound" | "profile_clock" | "profiles_busy";
+};
+/** Lazy, single-fleet-owner store. No constructor I/O, HTTP ingress, profile writer tool or frame mount. */
+export declare class WebEffectProfiles {
+    private readonly opts;
+    readonly path: string;
+    private readonly dataDir;
+    constructor(dataDir: string, opts?: {
+        now?: () => number;
+    });
+    private load;
+    read(id: string): {
+        ok: true;
+        status: "unmeasured" | "reported";
+        records: StoredEffectProfile[];
+    } | Failure;
+    /** One bounded parse for a library listing; callers still project only their authorized ids. */
+    readSummaries(): {
+        ok: true;
+        summaries: Record<string, EffectProfileSummary>;
+    } | Failure;
+    record(id: string, input: unknown): {
+        ok: true;
+        profile: StoredEffectProfile;
+    } | Failure;
+}
+export {};

package/dist/web-effect-profiles.js

@@ -0,0 +1,180 @@
+/** #1629: bounded reported host observations. This store grants no effect or admission authority. */
+import { constants, openSync, fstatSync, readSync, closeSync, mkdirSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { z } from "zod";
+import { atomicWriteFileSync } from "./atomic-write.js";
+export const EFFECT_PROFILE_LIMIT = 20;
+export const EFFECT_PROFILE_IDS = 512;
+export const EFFECT_PROFILE_FILE_BYTES = 8 * 1024 * 1024;
+const ID = /^[a-f0-9]{32}$/;
+const writes = new Set();
+const device = z.enum(["standard", "constrained"]);
+const integer = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER);
+const fps = z.number().finite().min(0).max(1000);
+const task = z.number().finite().min(0).max(256000).nullable();
+const shape = {
+    v: z.literal(1), device,
+    verdict: z.enum(["ok", "degraded", "paused", "off"]),
+    reason: z.enum(["host_budget", "clock_unavailable", "gates_unknown", "hidden", "reduced_motion", "save_data", "viewer_off"]).nullable(),
+    samples: z.number().int().min(1).max(120),
+    fps_p50: fps, fps_p10: fps, fps_floor: fps.positive(),
+    long_task_p95: task, long_task_samples: z.number().int().min(0).max(120),
+    attributed_long_task_p95: task, attributed_samples: z.number().int().min(0).max(120),
+    attribution: z.enum(["unknown", "observed"]), load_ms: z.number().finite().min(0).max(600000).nullable(),
+};
+function coherent(p) {
+    return p.fps_p10 <= p.fps_p50 && p.long_task_samples <= p.samples && p.attributed_samples <= p.long_task_samples
+        && (p.long_task_samples === 0) === (p.long_task_p95 === null)
+        && (p.attributed_samples === 0) === (p.attributed_long_task_p95 === null)
+        && (p.attributed_samples === 0 ? p.attribution === "unknown" : p.attribution === "observed");
+}
+const inputSchema = z.object(shape).strict().refine(coherent);
+const storedSchema = z.object({ ...shape, at: integer, source: z.literal("reported_host") }).strict().refine(coherent);
+export function checkEffectProfile(input) {
+    try {
+        if (!plain(input))
+            return { ok: false, error: "profile_args" };
+        const p = inputSchema.safeParse(input);
+        return p.success ? { ok: true, profile: p.data } : { ok: false, error: "profile_args" };
+    }
+    catch {
+        return { ok: false, error: "profile_args" };
+    }
+}
+const fail = (error) => ({ ok: false, error });
+const plain = (x) => !!x && typeof x === "object" && Object.getPrototypeOf(x) === Object.prototype;
+/** One regular fd, bounded before allocation and again after read; no path supplied by a web request. */
+function readIndex(path) {
+    const fd = openSync(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0));
+    try {
+        const stat = fstatSync(fd);
+        if (!stat.isFile() || stat.size > EFFECT_PROFILE_FILE_BYTES)
+            throw Error("profile file bound");
+        const bytes = Buffer.alloc(stat.size + 1);
+        let at = 0;
+        while (at < bytes.length) {
+            const n = readSync(fd, bytes, at, bytes.length - at, null);
+            if (!n)
+                break;
+            at += n;
+        }
+        if (at !== stat.size || fstatSync(fd).size !== stat.size)
+            throw Error("profile file changed");
+        return bytes.subarray(0, at);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Lazy, single-fleet-owner store. No constructor I/O, HTTP ingress, profile writer tool or frame mount. */
+export class WebEffectProfiles {
+    opts;
+    path;
+    dataDir;
+    constructor(dataDir, opts = {}) {
+        this.opts = opts;
+        this.dataDir = resolve(dataDir);
+        this.path = join(this.dataDir, "web-effect-profiles.json");
+    }
+    load() {
+        let bytes;
+        try {
+            bytes = readIndex(this.path);
+        }
+        catch (e) {
+            return e.code === "ENOENT" ? { rev: 0, entries: new Map() } : fail("profiles_unreadable");
+        }
+        try {
+            const text = new TextDecoder("utf-8", { fatal: true }).decode(bytes), doc = JSON.parse(text);
+            if (!plain(doc) || Object.keys(doc).sort().join(",") !== "entries,rev,version" || doc.version !== 1 || !Number.isSafeInteger(doc.rev) || doc.rev < 0 || !plain(doc.entries))
+                return fail("profiles_unreadable");
+            const entries = new Map();
+            for (const [id, value] of Object.entries(doc.entries)) {
+                if (!ID.test(id) || entries.size >= EFFECT_PROFILE_IDS || !plain(value) || Object.keys(value).sort().join(",") !== "constrained,standard")
+                    return fail("profiles_unreadable");
+                const buckets = { standard: [], constrained: [] };
+                for (const cls of ["standard", "constrained"]) {
+                    if (!Array.isArray(value[cls]) || value[cls].length > EFFECT_PROFILE_LIMIT)
+                        return fail("profiles_unreadable");
+                    let previous = -1;
+                    for (const item of value[cls]) {
+                        const p = storedSchema.safeParse(item);
+                        if (!p.success || p.data.device !== cls || p.data.at < previous)
+                            return fail("profiles_unreadable");
+                        previous = p.data.at;
+                        buckets[cls].push(p.data);
+                    }
+                }
+                entries.set(id, buckets);
+            }
+            return { rev: doc.rev, entries };
+        }
+        catch {
+            return fail("profiles_unreadable");
+        }
+    }
+    read(id) {
+        if (typeof id !== "string" || !ID.test(id))
+            return fail("profile_args");
+        const state = this.load();
+        if ("ok" in state)
+            return state;
+        const entry = state.entries.get(id), records = entry ? [...entry.standard, ...entry.constrained].sort((a, b) => a.at - b.at) : [];
+        return { ok: true, status: records.length ? "reported" : "unmeasured", records };
+    }
+    /** One bounded parse for a library listing; callers still project only their authorized ids. */
+    readSummaries() {
+        const state = this.load();
+        if ("ok" in state)
+            return state;
+        return { ok: true, summaries: Object.fromEntries([...state.entries].map(([id, buckets]) => {
+                const records = [buckets.standard.at(-1), buckets.constrained.at(-1)].filter((p) => p !== undefined);
+                return [id, { status: records.length ? "reported" : "unmeasured", records }];
+            })) };
+    }
+    record(id, input) {
+        if (writes.has(this.path))
+            return fail("profiles_busy");
+        writes.add(this.path);
+        try {
+            if (typeof id !== "string" || !ID.test(id))
+                return fail("profile_args");
+            const checked = checkEffectProfile(input);
+            if (!checked.ok)
+                return checked;
+            const state = this.load();
+            if ("ok" in state)
+                return state;
+            let now;
+            try {
+                now = (this.opts.now ?? Date.now)();
+            }
+            catch {
+                return fail("profile_clock");
+            }
+            if (!Number.isSafeInteger(now) || now < 0)
+                return fail("profile_clock");
+            if (state.rev === Number.MAX_SAFE_INTEGER || !state.entries.has(id) && state.entries.size >= EFFECT_PROFILE_IDS)
+                return fail("profiles_bound");
+            const buckets = state.entries.get(id) ?? { standard: [], constrained: [] }, cls = checked.profile.device;
+            const at = Math.max(now, buckets[cls].at(-1)?.at ?? 0), profile = { ...checked.profile, source: "reported_host", at };
+            buckets[cls] = [...buckets[cls], profile].slice(-EFFECT_PROFILE_LIMIT);
+            state.entries.set(id, buckets);
+            const text = JSON.stringify({ version: 1, rev: state.rev + 1, entries: Object.fromEntries(state.entries) });
+            if (Buffer.byteLength(text, "utf8") > EFFECT_PROFILE_FILE_BYTES)
+                return fail("profiles_bound");
+            try {
+                mkdirSync(this.dataDir, { recursive: true });
+                atomicWriteFileSync(this.path, text, { mode: 0o600 });
+            }
+            catch {
+                return fail("profiles_write_failed");
+            }
+            return { ok: true, profile: JSON.parse(JSON.stringify(profile)) };
+        }
+        finally {
+            writes.delete(this.path);
+        }
+    }
+}
+//# sourceMappingURL=web-effect-profiles.js.map

package/dist/web-effect-profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-effect-profiles.js","sourceRoot":"","sources":["../src/web-effect-profiles.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACzD,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAC5B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;AACjC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;AACnD,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AACrE,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC/D,MAAM,KAAK,GAAG;IACZ,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM;IACvB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,mBAAmB,EAAE,eAAe,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvI,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE;IACrD,aAAa,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,wBAAwB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpF,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;CACzG,CAAC;AACF,SAAS,QAAQ,CAAC,CAAqC;IACrD,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,iBAAiB;WAC3G,CAAC,CAAC,CAAC,iBAAiB,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC;WAC1D,CAAC,CAAC,CAAC,kBAAkB,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,wBAAwB,KAAK,IAAI,CAAC;WACtE,CAAC,CAAC,CAAC,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC;AACjG,CAAC;AACD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC9D,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAIvH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAAC,CAAC;IACxM,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAAC,CAAC;AACxD,CAAC;AAID,MAAM,IAAI,GAAG,CAAC,KAAuB,EAAW,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1E,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC;AAE1I,yGAAyG;AACzG,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1G,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,yBAAyB;YAAE,MAAM,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC3H,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtD,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;YAAC,IAAI,CAAC,CAAC;gBAAE,MAAM;YAAC,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QACjH,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;YAAE,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC9F,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAED,4GAA4G;AAC5G,MAAM,OAAO,iBAAiB;IAGkB;IAFrC,IAAI,CAAS;IACL,OAAO,CAAS;IACjC,YAAY,OAAe,EAAmB,OAA+B,EAAE;QAAjC,SAAI,GAAJ,IAAI,CAA6B;QAAI,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IAAC,CAAC;IACzK,IAAI;QACV,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YAAC,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QACrC,OAAO,CAAC,EAAE,CAAC;YAAC,OAAQ,CAA2B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAAC,CAAC;QACnI,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,qBAAqB,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAK,GAAG,CAAC,GAAc,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAC5N,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;YAC3C,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,IAAI,kBAAkB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,sBAAsB;oBAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;gBAC9K,MAAM,OAAO,GAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;gBAC3D,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAU,EAAE,CAAC;oBACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,oBAAoB;wBAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;oBAC/G,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;oBAClB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC9B,MAAM,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;wBACvC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ;4BAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;wBACpG,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;wBAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAa,EAAE,OAAO,EAAE,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAAC,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,EAAU;QACb,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,IAAI,IAAI,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClI,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;IACnF,CAAC;IACD,gGAAgG;IAChG,aAAa;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,IAAI,IAAI,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE;gBACxF,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAA4B,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;gBAC/H,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/E,CAAC,CAAC,CAAC,EAAE,CAAC;IACR,CAAC;IACD,MAAM,CAAC,EAAU,EAAE,KAAc;QAC/B,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,OAAO,OAAO,CAAC;YAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,IAAI,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;YAC3D,IAAI,GAAW,CAAC;YAAC,IAAI,CAAC;gBAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;YAAC,CAAC;YACrG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;YACxE,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,kBAAkB;gBAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/I,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YACzG,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,EAAE,OAAO,GAAwB,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;YAC3I,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACvG,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5G,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,yBAAyB;gBAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/F,IAAI,CAAC;gBAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,CAAC;YAC5G,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAAC,CAAC;YAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAwB,EAAE,CAAC;QAC3F,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/web-effect-service.d.ts

@@ -0,0 +1,93 @@
+import { WebEffectLibrary } from "./web-effect-library.js";
+import { ThemeStore } from "./web-theme-store.js";
+import type { WebEffectProfiles } from "./web-effect-profiles.js";
+import type { WebEffectTrials } from "./web-effect-trials.js";
+import { type OwnerEffectKey, type WebPrefsStore } from "./web-prefs.js";
+type Answer = Record<string, unknown>;
+export interface EffectServiceDeps {
+    library: WebEffectLibrary;
+    themes: ThemeStore;
+    profiles: WebEffectProfiles;
+    prefs?: WebPrefsStore;
+    trials?: WebEffectTrials;
+    known(name: string): boolean;
+    changed(): void;
+    monotonic?: () => number;
+}
+/** Host routes provide the authenticated human key. Neither a body nor an agent tool supplies it. */
+export declare class WebEffectService {
+    private readonly deps;
+    private readonly reports;
+    private previous;
+    private readonly playback;
+    constructor(deps: EffectServiceDeps);
+    playbackSummary(instance: string, id: string): {
+        status: "reported_blocked" | "unknown";
+        reasons: import("./web-effect-playback.js").EffectBlockReason[];
+    } | {
+        status: string;
+        reasons: never[];
+    };
+    private principal;
+    private validPerson;
+    private readable;
+    list(person: string): Answer;
+    profileSummaries(ids: readonly string[]): Record<string, Answer>;
+    profileSummary(id: string): Answer;
+    profile(person: string, id: string): Answer;
+    upload(person: string, bytes: Uint8Array): Answer;
+    apply(person: string, args: unknown): Answer;
+    remove(person: string, args: unknown): Answer;
+    share(person: string, args: unknown): Answer;
+    delete(person: string, id: string): Answer;
+    /** A selection never acquires a claim or borrows chat retention. Null clears need no library read. */
+    validateOwnerSelection(person: string, key: OwnerEffectKey, id: string): string | null;
+    private ownerCompatible;
+    collectOwnerReplaced(ids: string[]): void;
+    ownerSelections(person: string): Answer;
+    private ownerSelected;
+    /** Personal runtime authorizations always recheck current own/shared ACL. Cursor selection grants no code read. */
+    ownerResource(person: string, id: string, slot: unknown): Answer;
+    ownerImage(person: string, id: string, kind: "poster" | "cursor", slot: unknown): {
+        ok: true;
+        bytes: Uint8Array;
+    } | {
+        ok: false;
+        error: "not_found";
+    };
+    private resourceAnswer;
+    /** Host-only trial routes supply a fresh verified actor, never a JSON body actor. No placement/claim writes. */
+    trialStart(offer: string, instance: string, viewer: unknown): Answer;
+    trialStop(trial: string, viewer: unknown): Answer;
+    trialResource(trial: string, instance: string, viewer: unknown): Answer;
+    trialPoster(trial: string, instance: string, viewer: unknown): {
+        ok: true;
+        bytes: Uint8Array;
+    } | {
+        ok: false;
+    };
+    trialProfile(trial: string, instance: string, viewer: unknown): Answer;
+    /** A runtime resource is not an export grant. An exact currently retained placement is independently required. */
+    private retained;
+    /** Public/local visual projection: current chat placements only, no principal, code, params or claim grant. */
+    posterPlacements(instance: string): Answer;
+    placedPoster(id: string, instance: string): {
+        ok: true;
+        bytes: Uint8Array;
+    } | {
+        ok: false;
+        error: "not_found";
+    };
+    resource(person: string, id: string, instance?: string, chatOnly?: boolean): Answer;
+    image(person: string, id: string, kind: "poster" | "cursor", instance?: string): {
+        ok: true;
+        bytes: Uint8Array;
+    } | {
+        ok: false;
+        error: "not_found";
+    };
+    placements(person: string, instance: string, chatOnly?: boolean): Answer;
+    /** Diagnostic writes only: a validated report never changes safety, admission or a placement. */
+    report(person: string, id: string, input: unknown, instance?: string, sessionEpoch?: string): Answer;
+}
+export {};