@songsid/agend 2.2.1 → 2.3.0-beta.10

package/dist/web-effect-worker.js

@@ -0,0 +1,170 @@
+/** #1629: trusted bootstrap sources; uploaded JS runs only in a dedicated Worker, never a DOM realm. */
+export const EFFECT_MAX_BYTES = 1024 * 1024;
+export const EFFECT_MAX_PIXELS = 8 * 1024 * 1024;
+// Shared by the trusted document and Worker. Closed signals only; no content-bearing fields are read.
+export const EFFECT_SIGNAL_CHECK = String.raw `
+function signal(d, instance) {
+  if (!d || Object.getPrototypeOf(d) !== Object.prototype || d.v !== 1 || !Number.isFinite(d.ts) || d.ts < 0) return false;
+  var keys = {state:['state'],reply:[],mention:[],theme:['mode'],env:['width','height','dpr','quality'],pointer:['kind','x','y','buttons']};
+  if (!Object.prototype.hasOwnProperty.call(keys,d.type)) return false;
+  var exact = ['v','type','ts'].concat(keys[d.type]);
+  if (['state','reply','mention'].indexOf(d.type) >= 0 && Object.prototype.hasOwnProperty.call(d,'instance')) {
+    if (typeof instance !== 'string' || d.instance !== instance) return false;
+    exact.push('instance');
+  }
+  if (d.type === 'pointer') for (var key of ['dx','dy']) if (Object.prototype.hasOwnProperty.call(d,key)) {
+    if (!Number.isFinite(d[key]) || Math.abs(d[key]) > 10000) return false;
+    exact.push(key);
+  }
+  if (Object.keys(d).sort().join(',') !== exact.sort().join(',')) return false;
+  switch (d.type) {
+    case 'state': return ['idle','working','needs_you','stopped'].indexOf(d.state) >= 0;
+    case 'reply': case 'mention': return true;
+    case 'theme': return ['light','dark'].indexOf(d.mode) >= 0;
+    case 'env': return Number.isInteger(d.width) && d.width >= 1 && d.width <= 4096 && Number.isInteger(d.height) && d.height >= 1 && d.height <= 4096 && d.width*d.height <= 8388608 && Number.isFinite(d.dpr) && d.dpr >= 0.5 && d.dpr <= 3 && ['normal','low'].indexOf(d.quality) >= 0;
+    case 'pointer': return ['move','down','up','click','wheel'].indexOf(d.kind) >= 0 && Number.isFinite(d.x) && d.x >= 0 && d.x <= 4096 && Number.isFinite(d.y) && d.y >= 0 && d.y <= 4096 && Number.isInteger(d.buttons) && d.buttons >= 0 && d.buttons <= 31;
+  }
+  return false;
+}
+`;
+/** The private port never reaches user callbacks, including through poisoned native getters/schedulers. */
+export function effectWorkerSource() {
+    return `"use strict";
+(function () {
+  ${EFFECT_SIGNAL_CHECK}
+  var defer = self.setTimeout.bind(self), load = self.importScripts.bind(self), end = self.close.bind(self), now = performance.now.bind(performance);
+  var read = Function.prototype.call.bind(Object.getOwnPropertyDescriptor(MessageEvent.prototype,'data').get);
+  var raf = typeof self.requestAnimationFrame === 'function' ? self.requestAnimationFrame.bind(self) : null;
+  var initialized = false;
+  function init(event) {
+    if (initialized) return;
+    var d = read(event);
+    if (!d || !d.port || !d.canvas || typeof d.codeUrl !== 'string') return;
+    initialized = true;
+    self.removeEventListener('message',init);
+    var port = d.port, post = port.postMessage.bind(port), callbacks = Object.create(null), ready = false;
+    var assets = Object.create(null);
+    d.assets.forEach(function (asset) { assets[asset.name] = asset.bitmap; });
+    var api = Object.freeze({
+      canvas: d.canvas,
+      params: Object.freeze(d.params),
+      asset: function (name) { return Object.prototype.hasOwnProperty.call(assets,name) ? assets[name] : undefined; },
+      on: function (kind,fn) {
+        if (['state','reply','mention','theme','env','pointer'].indexOf(kind) < 0 || typeof fn !== 'function') return;
+        if (!callbacks[kind]) callbacks[kind] = [];
+        if (callbacks[kind].length < 32) callbacks[kind].push(fn);
+      },
+      frame: function (fn) {
+        if (typeof fn !== 'function') return;
+        if (raf) { try { return raf(fn); } catch (_) {} }
+        return defer(function () { fn(now()); },16);
+      },
+      ready: function () { if (!ready) { ready = true; post({type:'ready'}); } }
+    });
+    Object.defineProperty(self,'agend',{value:api,writable:false,configurable:false});
+    // Defence in depth against nested workers; termination and host budgets remain required.
+    ['Worker','SharedWorker','importScripts','RTCPeerConnection','webkitRTCPeerConnection'].forEach(function (key) {
+      try { Object.defineProperty(self,key,{value:undefined,writable:false,configurable:false}); } catch (_) {}
+    });
+    port.addEventListener('message',function (event) {
+      var payload = read(event);
+      if (!signal(payload,d.instance)) return;
+      defer(function () {
+        var listeners = (callbacks[payload.type] || []).slice();
+        listeners.forEach(function (fn) { try { fn(payload); } catch (_) {} });
+      },0);
+    });
+    port.start();
+    // Separate script/global: never concatenate user code into a trusted lexical scope.
+    defer(function () { try { load(d.codeUrl); } catch (_) { end(); } },0);
+  }
+  self.addEventListener('message',init);
+})();`;
+}
+function literal(value) {
+    return JSON.stringify(value).replace(/</g, "\\u003c").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+}
+/** No HTML input exists. The document realm contains only this shim and its single canvas. */
+export function buildCanvasEffectShim(bootId, origins, sameListener = false) {
+    const source = String.raw `(function () {
+  "use strict";
+  ${EFFECT_SIGNAL_CHECK}
+  var BOOT=${literal(bootId)}, ORIGINS=${sameListener ? "[new URL(window.location.href).origin]" : literal([...origins])}, MAX=${EFFECT_MAX_BYTES}, PIXELS=${EFFECT_MAX_PIXELS};
+  var WORKER=${literal(effectWorkerSource())};
+  var done=false, active=true, worker=null, host=null, link=null, urls=[], bitmaps=[], deadline=null, expires=null;
+  var defer=window.setTimeout.bind(window), cancel=window.clearTimeout.bind(window), now=performance.now.bind(performance);
+  var read=Function.prototype.call.bind(Object.getOwnPropertyDescriptor(MessageEvent.prototype,'data').get);
+  function plain(d) { return !!d && Object.getPrototypeOf(d) === Object.prototype; }
+  function bytes(s) { try { return new TextEncoder().encode(s).length; } catch (_) { return Infinity; } }
+  function stop() {
+    if (!active) return;
+    active=false;
+    if (deadline !== null) cancel(deadline);
+    if (worker) worker.terminate();
+    if (host) host.close();
+    if (link) link.close();
+    urls.forEach(function (url) { URL.revokeObjectURL(url); });
+    bitmaps.forEach(function (bitmap) { try { bitmap.close(); } catch (_) {} });
+  }
+  window.addEventListener('pagehide',stop,{once:true});
+  async function render(event) {
+    if (done || !active || event.source !== window.parent || event.origin === 'null' || ORIGINS.indexOf(event.origin) < 0) return;
+    var d=read(event);
+    if (!plain(d) || Object.keys(d).sort().join(',') !== 'assets,ch,code,dpr,height,instance,params,type,v,width' || d.v !== 1 || d.type !== 'render') return;
+    if (typeof d.ch !== 'string' || !/^[0-9a-f]{16,64}$/.test(d.ch) || typeof d.code !== 'string' || bytes(d.code) > MAX) return;
+    if (d.instance !== null && (typeof d.instance !== 'string' || d.instance.length < 1 || d.instance.length > 128)) return;
+    if (!signal({v:1,type:'env',ts:0,width:d.width,height:d.height,dpr:d.dpr,quality:'normal'},d.instance)) return;
+    if (!plain(d.params) || Object.keys(d.params).length > 16 || !Array.isArray(d.assets) || d.assets.length > 16) return;
+    var names=new Set();
+    if (!Object.keys(d.params).every(function (key) {
+      var value=d.params[key];
+      return /^[a-z][a-z0-9_]{0,31}$/.test(key) && (typeof value === 'boolean' || typeof value === 'number' && Number.isFinite(value) || typeof value === 'string' && value.length <= 128);
+    })) return;
+    var size=bytes(d.code)+bytes(JSON.stringify(d.params));
+    if (Object.keys(d.assets).length !== d.assets.length) return;
+    if (!d.assets.every(function (asset) {
+      if (!plain(asset) || Object.keys(asset).sort().join(',') !== 'bytes,mime,name' || typeof asset.name !== 'string' || !/^assets\/[a-z0-9][a-z0-9_-]{0,63}\.(png|jpe?g|webp|gif)$/.test(asset.name) || names.has(asset.name)) return false;
+      if (['image/png','image/jpeg','image/webp','image/gif'].indexOf(asset.mime) < 0 || !(asset.bytes instanceof Uint8Array)) return false;
+      names.add(asset.name);size+=asset.bytes.byteLength;return true;
+    }) || size > MAX) return;
+    if (!event.ports || event.ports.length !== 1) return;
+    var port=event.ports[0];
+    if (!port || typeof port.postMessage !== 'function' || typeof port.addEventListener !== 'function' || typeof port.start !== 'function' || typeof port.close !== 'function') return;
+    done=true;host=port;window.removeEventListener('message',render);
+    expires=now()+10000;deadline=defer(stop,10000);
+    try {
+      if (typeof Worker !== 'function' || typeof OffscreenCanvas !== 'function' || typeof createImageBitmap !== 'function' || typeof HTMLCanvasElement.prototype.transferControlToOffscreen !== 'function') { stop();return; }
+      var assets=[], pixels=0;
+      for (var asset of d.assets) {
+        var bitmap=await createImageBitmap(new Blob([asset.bytes],{type:asset.mime}));
+        if (!active || now() >= expires) { bitmap.close();stop();return; }
+        bitmaps.push(bitmap);
+        if (bitmap.width < 1 || bitmap.height < 1 || bitmap.width > 4096 || bitmap.height > 4096 || bitmap.width*bitmap.height > PIXELS) { stop();return; }
+        pixels+=bitmap.width*bitmap.height;if(pixels > PIXELS) { stop();return; }
+        assets.push({name:asset.name,bitmap:bitmap});
+      }
+      if (!active || now() >= expires) { stop();return; }
+      var canvas=document.querySelector('canvas');canvas.width=d.width;canvas.height=d.height;
+      var offscreen=canvas.transferControlToOffscreen();
+      var codeUrl=URL.createObjectURL(new Blob([d.code],{type:'text/javascript'}));urls.push(codeUrl);
+      var workerUrl=URL.createObjectURL(new Blob([WORKER],{type:'text/javascript'}));urls.push(workerUrl);
+      worker=new Worker(workerUrl);var channel=new MessageChannel();link=channel.port1;
+      var ready=false, post=port.postMessage.bind(port);
+      // No diagnostic, cost, pong, command or error message is forwarded to the host.
+      link.addEventListener('message',function (event) {
+        var value=read(event);
+        if (active && !ready && now() >= expires) { stop();return; }
+        if (!active || ready || !plain(value) || Object.keys(value).join(',') !== 'type' || value.type !== 'ready') return;
+        ready=true;cancel(deadline);deadline=null;post({type:'ready'});
+      });link.start();
+      worker.addEventListener('error',stop);worker.addEventListener('messageerror',stop);
+      port.addEventListener('message',function (event) { var payload=read(event);if (active && signal(payload,d.instance)) link.postMessage(payload); });port.start();
+      worker.postMessage({port:channel.port2,canvas:offscreen,assets:assets,params:d.params,instance:d.instance,codeUrl:codeUrl},[channel.port2,offscreen].concat(bitmaps));
+    } catch (_) { stop(); }
+  }
+  window.addEventListener('message',render);
+  window.parent.postMessage({v:1,type:'ready',ch:null,boot:BOOT},'*');
+})();`;
+    return `<!doctype html><html><head><meta charset="utf-8"><title>Effect</title><style>html,body{margin:0;width:100%;height:100%;overflow:hidden}canvas{display:block;width:100%;height:100%}</style></head><body><canvas></canvas><script>${source}</script></body></html>`;
+}
+//# sourceMappingURL=web-effect-worker.js.map

package/dist/web-effect-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-effect-worker.js","sourceRoot":"","sources":["../src/web-effect-worker.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD,sGAAsG;AACtG,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;CAwB5C,CAAC;AAEF,2GAA2G;AAC3G,MAAM,UAAU,kBAAkB;IAChC,OAAO;;IAEL,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAgDjB,CAAC;AACP,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACpH,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,OAA0B,EAAE,YAAY,GAAG,KAAK;IACpG,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAA;;IAEvB,mBAAmB;aACV,OAAO,CAAC,MAAM,CAAC,aAAa,YAAY,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,SAAS,gBAAgB,YAAY,iBAAiB;eAC/J,OAAO,CAAC,kBAAkB,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA0EtC,CAAC;IACL,OAAO,oOAAoO,MAAM,yBAAyB,CAAC;AAC7Q,CAAC"}

package/dist/web-effect.d.ts

@@ -0,0 +1,103 @@
+/** CW1 effect manifests are metadata, never placement authority. Widgets are host-rendered elsewhere. */
+import { z } from "zod";
+export declare const WEB_EFFECT_ID: RegExp;
+export declare const WEB_EFFECT_REGIONS: readonly ["chat", "sidebar", "header", "page", "box"];
+export declare const WEB_EFFECT_WANTS: readonly ["pointer", "state", "reply", "mention", "theme"];
+declare const manifest: z.ZodObject<{
+    v: z.ZodLiteral<1>;
+    kind: z.ZodDefault<z.ZodLiteral<"effect">>;
+    runtime: z.ZodLiteral<"canvas-worker-v1">;
+    worker: z.ZodLiteral<"worker.js">;
+    name: z.ZodString;
+    title: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    description: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    poster: z.ZodOptional<z.ZodLiteral<"poster.png">>;
+    regions: z.ZodArray<z.ZodEnum<{
+        chat: "chat";
+        sidebar: "sidebar";
+        header: "header";
+        page: "page";
+        box: "box";
+    }>>;
+    layer: z.ZodEnum<{
+        behind: "behind";
+        front: "front";
+    }>;
+    box: z.ZodOptional<z.ZodObject<{
+        anchor: z.ZodEnum<{
+            "top-left": "top-left";
+            "top-right": "top-right";
+            "bottom-left": "bottom-left";
+            "bottom-right": "bottom-right";
+            center: "center";
+        }>;
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+        offset: z.ZodNumber;
+    }, z.core.$strict>>;
+    cursor: z.ZodOptional<z.ZodObject<{
+        hotspot: z.ZodTuple<[z.ZodNumber, z.ZodNumber], null>;
+    }, z.core.$strict>>;
+    wants: z.ZodArray<z.ZodEnum<{
+        mention: "mention";
+        state: "state";
+        theme: "theme";
+        pointer: "pointer";
+        reply: "reply";
+    }>>;
+    params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"number">;
+        min: z.ZodNumber;
+        max: z.ZodNumber;
+        step: z.ZodOptional<z.ZodNumber>;
+        default: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"int">;
+        min: z.ZodNumber;
+        max: z.ZodNumber;
+        default: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"bool">;
+        default: z.ZodBoolean;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"enum">;
+        values: z.ZodArray<z.ZodString>;
+        default: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"color">;
+        default: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    }, z.core.$strict>], "type">>>;
+}, z.core.$strict>;
+export type WebEffectManifest = z.infer<typeof manifest>;
+export type EffectParamValue = string | number | boolean;
+export declare function parseWebEffectManifest(value: unknown): {
+    ok: true;
+    manifest: WebEffectManifest;
+} | {
+    ok: false;
+    error: "invalid_manifest";
+};
+/**
+ * #2017: whether an effect can be placed in a chat — its manifest's regions include `chat` (else it is saved but never
+ * plays there). Only a NEW chat placement is checked (agent tool, person's route, a mod's theme.effects); an older one
+ * stays as it is (filtered at run time) and can be removed. A non-chat effect stays a valid upload and personal choice.
+ */
+export declare function chatCompatible(manifest: {
+    regions?: readonly string[];
+}): boolean;
+/** #2017: the same test on an effect's files (its effect.json), for a mod export: an unreadable manifest is not chat. */
+export declare function filesPlayInChat(files: ReadonlyMap<string, Uint8Array>): boolean;
+export declare const EFFECT_REGION: Readonly<{
+    error: "effect_region";
+    message: string;
+}>;
+/** Defaults and overrides are resolved together before a placement or mod commit can write. */
+export declare function resolveEffectParams(input: WebEffectManifest, overrides?: unknown): {
+    ok: true;
+    values: Record<string, EffectParamValue>;
+    overrides: Record<string, EffectParamValue>;
+} | {
+    ok: false;
+    error: "invalid_params";
+};
+export {};

package/dist/web-effect.js

@@ -0,0 +1,153 @@
+/** CW1 effect manifests are metadata, never placement authority. Widgets are host-rendered elsewhere. */
+import { z } from "zod";
+import { canonicalText } from "./web-theme.js";
+export const WEB_EFFECT_ID = /^[0-9a-f]{32}$/;
+export const WEB_EFFECT_REGIONS = ["chat", "sidebar", "header", "page", "box"];
+export const WEB_EFFECT_WANTS = ["pointer", "state", "reply", "mention", "theme"];
+const slug = z.string().regex(/^[a-z0-9][a-z0-9-]{0,31}$/);
+function text(max, min) {
+    return z.string().max(max * 10).transform((value, ctx) => {
+        const result = min === 0 && value === "" ? "" : canonicalText(value, Math.max(1, min), max);
+        if (result === null) {
+            ctx.addIssue({ code: "custom", message: "Invalid display text" });
+            return z.NEVER;
+        }
+        return result;
+    });
+}
+const finite = z.number().finite().min(-1e9).max(1e9);
+const numeric = z.strictObject({ type: z.literal("number"), min: finite, max: finite, step: z.number().finite().positive().max(2e9).optional(), default: finite });
+const integer = z.strictObject({ type: z.literal("int"), min: finite.int(), max: finite.int(), default: finite.int() });
+const param = z.discriminatedUnion("type", [
+    numeric, integer, z.strictObject({ type: z.literal("bool"), default: z.boolean() }),
+    z.strictObject({ type: z.literal("enum"), values: z.array(slug).min(1).max(16), default: slug }),
+    z.strictObject({ type: z.literal("color"), default: z.string().regex(/^#[0-9a-fA-F]{6}$/).transform(value => value.toLowerCase()) }),
+]).refine(d => {
+    if (d.type === "enum")
+        return new Set(d.values).size === d.values.length && d.values.includes(d.default);
+    if (d.type === "number" || d.type === "int")
+        return d.min <= d.max && d.default >= d.min && d.default <= d.max && (d.type !== "number" || d.step === undefined || aligned(d.default, d.min, d.step));
+    return true;
+});
+function aligned(value, min, step) {
+    const distance = (value - min) / step;
+    return Number.isFinite(distance) && Math.abs(distance - Math.round(distance)) <= 1e-8;
+}
+const manifest = z.strictObject({
+    v: z.literal(1), kind: z.literal("effect").default("effect"), runtime: z.literal("canvas-worker-v1"), worker: z.literal("worker.js"),
+    name: slug, title: text(40, 1), description: text(200, 0).optional(), poster: z.literal("poster.png").optional(),
+    regions: z.array(z.enum(WEB_EFFECT_REGIONS)).min(1).max(5).refine(v => new Set(v).size === v.length),
+    layer: z.enum(["behind", "front"]),
+    box: z.strictObject({ anchor: z.enum(["top-left", "top-right", "bottom-left", "bottom-right", "center"]), width: z.number().int().min(32).max(480), height: z.number().int().min(32).max(480), offset: z.number().int().min(0).max(64) }).optional(),
+    cursor: z.strictObject({ hotspot: z.tuple([z.number().int().min(0).max(63), z.number().int().min(0).max(63)]) }).optional(),
+    wants: z.array(z.enum(WEB_EFFECT_WANTS)).max(5).refine(v => new Set(v).size === v.length),
+    params: z.record(z.string().regex(/^[a-z][a-z0-9_]{0,31}$/), param).refine(v => Object.keys(v).length <= 16).optional(),
+});
+/** Bounded data only. Do not invoke getters or interpret unreadable values as an absent field. */
+function plainData(value) {
+    const pending = [{ value, depth: 0 }];
+    let nodes = 0;
+    while (pending.length) {
+        const { value, depth } = pending.pop();
+        if (++nodes > 1024 || depth > 8)
+            return false;
+        if (value === null || typeof value === "string" || typeof value === "boolean")
+            continue;
+        if (typeof value === "number") {
+            if (!Number.isFinite(value))
+                return false;
+            continue;
+        }
+        if (typeof value !== "object")
+            return false;
+        const array = Array.isArray(value), proto = Object.getPrototypeOf(value);
+        if (array ? proto !== Array.prototype : proto !== Object.prototype && proto !== null)
+            return false;
+        const keys = Reflect.ownKeys(value);
+        if (keys.length > 33 || array && value.length > 32)
+            return false;
+        for (const key of keys) {
+            if (typeof key !== "string")
+                return false;
+            if (array && key === "length")
+                continue;
+            const field = Object.getOwnPropertyDescriptor(value, key);
+            if (!("value" in field))
+                return false;
+            pending.push({ value: field.value, depth: depth + 1 });
+        }
+    }
+    return true;
+}
+export function parseWebEffectManifest(value) {
+    try {
+        if (!plainData(value))
+            return { ok: false, error: "invalid_manifest" };
+        const result = manifest.safeParse(value);
+        return result.success ? { ok: true, manifest: result.data } : { ok: false, error: "invalid_manifest" };
+    }
+    catch {
+        return { ok: false, error: "invalid_manifest" };
+    }
+}
+/**
+ * #2017: whether an effect can be placed in a chat — its manifest's regions include `chat` (else it is saved but never
+ * plays there). Only a NEW chat placement is checked (agent tool, person's route, a mod's theme.effects); an older one
+ * stays as it is (filtered at run time) and can be removed. A non-chat effect stays a valid upload and personal choice.
+ */
+export function chatCompatible(manifest) {
+    return Array.isArray(manifest.regions) && manifest.regions.includes("chat");
+}
+/** #2017: the same test on an effect's files (its effect.json), for a mod export: an unreadable manifest is not chat. */
+export function filesPlayInChat(files) {
+    const raw = files.get("effect.json");
+    if (!raw)
+        return false;
+    try {
+        return chatCompatible(JSON.parse(Buffer.from(raw).toString("utf8")));
+    }
+    catch {
+        return false;
+    }
+}
+export const EFFECT_REGION = Object.freeze({ error: "effect_region", message: "This effect's regions do not include chat." });
+/** Defaults and overrides are resolved together before a placement or mod commit can write. */
+export function resolveEffectParams(input, overrides = {}) {
+    try {
+        if (!plainData(overrides) || !overrides || Array.isArray(overrides) || typeof overrides !== "object")
+            return { ok: false, error: "invalid_params" };
+        const schema = input.params ?? {};
+        for (const key of Object.keys(overrides))
+            if (!Object.hasOwn(schema, key))
+                return { ok: false, error: "invalid_params" };
+        const values = Object.create(null), changed = Object.create(null);
+        for (const [name, d] of Object.entries(schema)) {
+            let value = Object.hasOwn(overrides, name) ? overrides[name] : d.default;
+            if (d.type === "number" || d.type === "int") {
+                if (typeof value !== "number" || !Number.isFinite(value) || value < d.min || value > d.max || d.type === "int" && !Number.isSafeInteger(value) || d.type === "number" && d.step !== undefined && !aligned(value, d.min, d.step))
+                    return { ok: false, error: "invalid_params" };
+            }
+            else if (d.type === "bool") {
+                if (typeof value !== "boolean")
+                    return { ok: false, error: "invalid_params" };
+            }
+            else if (d.type === "enum") {
+                if (typeof value !== "string" || !d.values.includes(value))
+                    return { ok: false, error: "invalid_params" };
+            }
+            else {
+                if (typeof value !== "string" || !/^#[0-9a-fA-F]{6}$/.test(value))
+                    return { ok: false, error: "invalid_params" };
+                value = value.toLowerCase();
+            }
+            values[name] = value;
+            if (value !== d.default)
+                changed[name] = value;
+        }
+        return { ok: true, values, overrides: changed };
+    }
+    catch {
+        return { ok: false, error: "invalid_params" };
+    }
+}
+//# sourceMappingURL=web-effect.js.map

package/dist/web-effect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-effect.js","sourceRoot":"","sources":["../src/web-effect.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAC9C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AACxF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAU,CAAC;AAC3F,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAC3D,SAAS,IAAI,CAAC,GAAW,EAAE,GAAW;IACpC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvD,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5F,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAClE,OAAO,CAAC,CAAC,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AACD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACtD,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AACnK,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACxH,MAAM,KAAK,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACnF,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChG,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;CACrI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;IACZ,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QACnB,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACpF,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QACzC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1J,OAAO,IAAI,CAAC;AACd,CAAC,CAAC,CAAC;AACH,SAAS,OAAO,CAAC,KAAa,EAAE,GAAW,EAAE,IAAY;IACvD,MAAM,QAAQ,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;IACtC,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC;AACxF,CAAC;AACD,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9B,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IACpI,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IAChH,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC;IACpG,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClC,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpP,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3H,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC;IACzF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxH,CAAC,CAAC;AAGH,kGAAkG;AAClG,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,OAAO,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACtC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QACxC,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;YAC3E,SAAS;QACX,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACzB,OAAO,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAC3B,OAAO,KAAK,CAAC;QACf,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACzE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI;YAClF,OAAO,KAAK,CAAC;QACf,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;YAChD,OAAO,KAAK,CAAC;QACf,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,OAAO,GAAG,KAAK,QAAQ;gBACzB,OAAO,KAAK,CAAC;YACf,IAAI,KAAK,IAAI,GAAG,KAAK,QAAQ;gBAC3B,SAAS;YACX,MAAM,KAAK,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAE,CAAC;YAC3D,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC;gBACrB,OAAO,KAAK,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,KAAc;IAOnD,IAAI,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IACzG,CAAC;IACD,MAAM,CAAC;QACL,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAClD,CAAC;AACH,CAAC;AACD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAyC;IACtE,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC9E,CAAC;AACD,yHAAyH;AACzH,MAAM,UAAU,eAAe,CAAC,KAAsC;IACpE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,CAAC;QAAC,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAoC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC1I,CAAC;AACD,MAAM,CAAC,MAAM,aAAa,GAA0D,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC;AAErL,+FAA+F;AAC/F,MAAM,UAAU,mBAAmB,CAAC,KAAwB,EAAE,YAAqB,EAAE;IAQnF,IAAI,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,SAAS,KAAK,QAAQ;YAClG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;gBAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QAClD,MAAM,MAAM,GAAqC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,GAAqC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,IAAI,KAAK,GAAY,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAE,SAAqC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/G,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC;oBAC7N,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;YAClD,CAAC;iBACI,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC3B,IAAI,OAAO,KAAK,KAAK,SAAS;oBAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;YAClD,CAAC;iBACI,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;YAClD,CAAC;iBACI,CAAC;gBACJ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;oBAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;gBAChD,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YAC9B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAyB,CAAC;YACzC,IAAI,KAAK,KAAK,CAAC,CAAC,OAAO;gBACrB,OAAO,CAAC,IAAI,CAAC,GAAG,KAAyB,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,CAAC;QACL,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAChD,CAAC;AACH,CAAC"}

package/dist/web-guest-access.d.ts

@@ -0,0 +1,125 @@
+import type { WebChatButtons, WebChatHistory, WebChatMessage, WebDeliveryState } from "./web-chat-history.js";
+export type GuestRouteState = "on" | "later";
+export interface GuestRoute {
+    readonly methods: readonly string[];
+    readonly pattern: RegExp;
+    /** Where the instance is: a path group (decoded), a query parameter, or nothing (static, not per instance). */
+    readonly instance: {
+        readonly group: number;
+    } | {
+        readonly query: string;
+    } | null;
+    readonly state: GuestRouteState;
+    /** Why it is open, or which phase opens it and what it waits for. */
+    readonly note: string;
+}
+/** The design's table (#1920 §4). Everything else is 403 for a guest. */
+export declare const GUEST_ROUTES: readonly GuestRoute[];
+export type GuestRouteDecision = {
+    readonly kind: "allow";
+    readonly route: GuestRoute;
+} | {
+    readonly kind: "deny";
+    readonly status: 403 | 404;
+    readonly error: "guest_forbidden" | "not found";
+};
+/**
+ * A guest's request: allowed (an `on` route, its instance in `scope`), 404 (an `on` per-instance route whose instance is
+ * not in scope, or is not a name at all), or 403 (anything else).
+ */
+export declare function guestRouteDecision(method: string, url: URL, scope: ReadonlySet<string>): GuestRouteDecision;
+/** The same Discord or Telegram account (both sessions name one), for a guest's "my own sessions". */
+export declare function sameAccount(a: {
+    readonly adapterId: string;
+    readonly userId: string;
+} | undefined, b: {
+    readonly adapterId: string;
+    readonly userId: string;
+} | undefined): boolean;
+type Owner = {
+    readonly adapterId: string;
+    readonly userId: string;
+};
+/**
+ * A guest request: whose, and its scope — asked anew each time (a long-lived stream follows a narrowed scope). `current`
+ * is the exact session that admitted it, still current (not revoked, expired or rotated away) — never "some cookie on the
+ * request still authenticates": another device's session must not keep a revoked one's stream alive (#2049 review).
+ */
+export interface GuestRequest {
+    readonly owner: Owner;
+    scope(): ReadonlySet<string>;
+    current(): boolean;
+    /** #1920 §5.2: an instance whose every message is this guest's to see — its own Telegram private room. */
+    ownRoom?(instance: string): boolean;
+    /** #1920 §5.2: the kept messages, to show a tick or a reply's buttons only on a message the guest may see. */
+    history?(): WebChatHistory | null;
+    /** #1920 §5.1: guests may chat (web.guests.chat, default true); false: read-only. Absent: read-only. */
+    chat?(): boolean;
+    /** #1920 §3.2: its stream connected — its rooms' membership is read again, in the background. */
+    streamOpened?(): void;
+}
+/**
+ * #1920 §5.1 (step 2b): why a guest may not write to `instance` now, or null (not a guest, or allowed): out of scope is
+ * "not found" (another instance's name is never confirmed); read-only when the host says so.
+ */
+export declare function guestChatRefusal(guest: GuestRequest | undefined, instance: unknown): {
+    status: 403 | 404;
+    error: string;
+} | null;
+/** A guest never sends a command: text that starts (after spaces) with "/" is the platform's admin or command syntax. */
+export declare const guestCommandText: (text: string) => boolean;
+/**
+ * #1920 §4 (step 2b): the preferences a guest reads — the host's look and the guest's own; never one that names an
+ * instance (the sidebar's order, favourites, a card's size, the sidebar widget, names, the filter).
+ */
+export declare const GUEST_PREF_KEYS: ReadonlySet<string>;
+export declare function guestPrefs<T extends {
+    values: Record<string, unknown>;
+}>(view: T): T;
+/** Set by the one entry that admits a guest (FleetManager's gate); read by the handlers that answer per recipient. */
+export declare function bindGuestRequest(req: object, guest: GuestRequest): void;
+export declare function guestRequestOf(req: object): GuestRequest | undefined;
+export declare function guestStatus(status: unknown, scope: ReadonlySet<string>): {
+    instances: Array<Record<string, unknown>>;
+};
+/**
+ * Whether a guest sees one kept message: an in-scope instance's message that reached its channel (what the channel's
+ * members already saw), the guest's own, or anything in its own private room. Never someone else's web-only exchange,
+ * a cross-instance notice, a fleet status line, or a row kept from before these were recorded (they have no mark).
+ */
+export declare function guestSeesMessage(m: WebChatMessage, guest: GuestRequest, scope: ReadonlySet<string>): boolean;
+/**
+ * A message as a guest gets it: without whose account wrote it (`mine` says it was the guest), and without another
+ * person's message id and ticks; never an effect Try (effects stay admin-only).
+ */
+export declare function guestMessage(m: WebChatMessage, guest: GuestRequest): Record<string, unknown>;
+/**
+ * One stream event as a guest gets it, or undefined (not sent). Default deny:
+ * - the status (projected) and an in-scope instance's activity;
+ * - a chat message it may see (§5.2), a tick on one of its own messages, the buttons of a reply it may see;
+ * - never: the live reply receipt (effects), prompts (their nonces answer them), Needs you, the Log's ticks, traffic or
+ *   apply progress.
+ * Without `guest` (no context) only the status and activity pass.
+ */
+export declare function guestFrameData(event: string, data: unknown, scope: ReadonlySet<string>, guest?: GuestRequest): unknown;
+/** The ticks a guest is caught up with: its own messages' only. */
+export declare function guestDeliveries(history: WebChatHistory, guest: GuestRequest, scope: ReadonlySet<string>): Array<{
+    instance: string;
+    messageId: string;
+    delivery: WebDeliveryState;
+}>;
+/** The ended (or open-poll) buttons a guest is caught up with: on replies it may see. */
+export declare function guestButtonStates(history: WebChatHistory, guest: GuestRequest, scope: ReadonlySet<string>): Array<{
+    instance: string;
+    buttons: WebChatButtons;
+}>;
+/** A guest's replay (a reconnecting stream, a poll): what it may see of `rows`. */
+export declare function guestMessages(rows: readonly WebChatMessage[], guest: GuestRequest, scope: ReadonlySet<string>): Array<Record<string, unknown>>;
+/** /ui/history for a guest: the newest `limit` messages of one instance that it may see. */
+export declare function guestHistory(history: WebChatHistory, instance: string, limit: number, guest: GuestRequest, scope: ReadonlySet<string>): Array<Record<string, unknown>>;
+/**
+ * /ui/poll's answer for a guest: the projected status, and the chat it may see (the same rule as its stream) — with the
+ * cursor every poll hands out. Never prompts or Needs you.
+ */
+export declare function guestPollBody(status: unknown, scope: ReadonlySet<string>, now: number, guest?: GuestRequest, after?: string | null, replay?: (after: string | null) => readonly WebChatMessage[]): Record<string, unknown>;
+export {};