@songsid/agend 2.3.2 → 2.3.3-beta.10

package/dist/ui/shared/feature-flags.js

@@ -1,127 +0,0 @@
-// Product feature policy only: this module imports no experimental runtime.
-import { appStore } from "./app-store.js";
-import { navStore } from "./app-nav.js";
-import { ownerEffectsChosen, onOwnerEffectsChanged } from "./app-prefs.js";
-import { register } from "./app-i18n.js";
-import { html, useEffect, useState } from "./app-html.js";
-register("cwControls", { en: { title: "Effects" }, "zh-TW": { title: "效果" } });
-export function canvasWorkerEnabled() { return appStore.get().canvasWorker === true; }
-export function onCanvasWorkerChange(fn) {
-  let value = canvasWorkerEnabled();
-  return appStore.subscribe(() => { const next = canvasWorkerEnabled(); if (next !== value) { value = next; fn(next); } });
-}
-export function useCanvasWorker() {
-  const [value, setValue] = useState(canvasWorkerEnabled);
-  useEffect(() => { setValue(canvasWorkerEnabled()); return onCanvasWorkerChange(setValue); }, []);
-  return value;
-}
-// Never evaluate the optional module before admission. An obsolete import may finish, but cannot mount.
-export function experimentalComponent(load, select) {
-  return function ExperimentalComponent(props) {
-    const enabled = useCanvasWorker(), [component, setComponent] = useState(null);
-    useEffect(() => {
-      let current = true;
-      if (enabled) load().then(module => { if (current && canvasWorkerEnabled()) setComponent(() => select(module)); }, () => {});
-      return () => { current = false; };
-    }, [enabled]);
-    return enabled && component ? html`<${component} ...${props} />` : null;
-  };
-}
-
-/** effect_chat_v of a chat with no placements: sha256(JSON.stringify([])), first 32 hex (fleet-manager's status row). */
-export const EMPTY_CHAT_EFFECTS = "4f53cda18c2baa0c0354bb5f9a3ecbe5";
-
-let mod = null, waking = null, chatStore = null, started = false, generation = 0, awakeGeneration = -1, retiring = Promise.resolve();
-const awakeListeners = new Set();
-
-/** Whether `name`'s chat has Canvas Worker placements (as the status rows say). */
-export function chatHasEffects(name, app = appStore.get()) {
-  const v = name ? app.instances?.find(i => i.name === name)?.effect_chat_v : undefined;
-  return canvasWorkerEnabled() && typeof v === "string" && /^[a-f0-9]{32}$/.test(v) && v !== EMPTY_CHAT_EFFECTS;
-}
-
-/** The running effects owner, or null while dormant (or when it could not start: as getAppEffects always was). */
-export function getAppEffects(host) { return canvasWorkerEnabled() && mod ? mod.getAppEffects(host) : null; }
-
-/** Whether the runtime has been asked to start on this page. */
-export function effectsAwake() { return waking !== null; }
-/** Whether its module has loaded (started, or found it could not: getAppEffects() then says which). */
-export function effectsLoaded() { return mod !== null && awakeGeneration === generation; }
-
-/** Follow every completed runtime episode, including a replacement after an experimental off/on. */
-export function onEffectsAwake(fn) {
-  if (typeof fn !== "function") return () => {};
-  awakeListeners.add(fn);
-  if (effectsLoaded()) { try { fn(); } catch { /* a listener's error is its own */ } }
-  return () => awakeListeners.delete(fn);
-}
-
-/** Load lazily; each explicitly enabled episode owns its startup and cancellation. */
-export function wakeEffects() {
-  if (!canvasWorkerEnabled()) return Promise.resolve(null);
-  if (waking) return waking;
-  const episode = generation;
-  waking = (mod ? Promise.resolve(mod) : import("/ui/js/app-effects.js")).then(async m => {
-    mod = m;
-    await retiring;
-    if (episode !== generation || !canvasWorkerEnabled()) return null;
-    const owner = chatStore ? m.startAppEffects({ store: chatStore }) : null;
-    awakeGeneration = episode;
-    for (const fn of [...awakeListeners]) { try { fn(); } catch { /* the rest still hear */ } }
-    return owner;
-  }, () => null);
-  return waking;
-}
-
-/** Wake when the open chat has placements or the person has a personal effect. */
-function check() {
-  if (!canvasWorkerEnabled()) {
-    generation++;
-    const owner = mod?.getAppEffects();
-    if (owner) retiring = Promise.resolve(owner.dispose?.(true));
-    waking = null;
-    return;
-  }
-  if (waking) return;
-  const route = navStore.get().route;
-  if ((route?.panel === "chat" && chatHasEffects(route.instance)) || ownerEffectsChosen()) void wakeEffects();
-}
-
-/** Boot (once per page, with the Chat store the runtime binds to). Starts nothing but the watch. */
-export function startEffectsWaker({ store }) {
-  chatStore = store;
-  if (started) return;
-  started = true;
-  appStore.subscribe(check); navStore.subscribe(check); onOwnerEffectsChanged(check);
-  check();
-}
-
-// Full Canvas Worker metadata stays in the experimental graph, never in ordinary chat boot.
-let metadata = null, metadataPending = null;
-const metadataListeners = new Set();
-export function onCanvasMetadataChange(fn) { metadataListeners.add(fn); return () => metadataListeners.delete(fn); }
-export function loadCanvasWorkerMetadata() {
-  if (!canvasWorkerEnabled()) return Promise.resolve(null);
-  if (metadata) return Promise.resolve(metadata);
-  if (metadataPending?.episode === generation) return metadataPending.promise;
-  const episode = generation, op = { episode, promise: null };
-  metadataPending = op;
-  op.promise = import("./effect-display-metadata.js").then(value => {
-    if (episode !== generation || !canvasWorkerEnabled()) return null;
-    metadata = value;
-    for (const fn of [...metadataListeners]) { try { fn(); } catch { /* independent viewers */ } }
-    appStore.set({ canvasMetadataEpoch: episode });
-    return metadata;
-  }, () => null).finally(() => { if (metadataPending === op) metadataPending = null; });
-  return op.promise;
-}
-export function readCanvasTrialMessage(message) {
-  if (!canvasWorkerEnabled()) return null;
-  if (!metadata) { void loadCanvasWorkerMetadata(); return undefined; }
-  return metadata.effectTrialMessage(message);
-}
-export function canvasWorkerMenuAvailable(host) {
-  if (!canvasWorkerEnabled()) return false;
-  if (!metadata) { void loadCanvasWorkerMetadata(); return false; }
-  return metadata.chatEffectIdentity(host) !== null;
-}

package/dist/ui/shared/owner-effect-prefs.js

@@ -1,117 +0,0 @@
-// #1629: host-authoritative personal choices. No local cache, migration, frame, code fetch or automatic resend.
-import { createStore, appStore } from "./app-store.js";
-import { OWNER_EFFECT_PREF_KEYS } from "./app-prefs.js";
-import { checkEffectOwnerSlots } from "./effect-runtime-loader.js";
-const KEYS = OWNER_EFFECT_PREF_KEYS, ID = /^[a-f0-9]{32}$/, EPOCH = /^[a-f0-9]{16}$/;
-const plain = x => !!x && typeof x === "object" && Object.getPrototypeOf(x) === Object.prototype;
-const own = (x, k) => Object.hasOwn(x, k);
-const unknownSlots = () => Object.fromEntries(KEYS.map(k => [k, { status: "unknown", id: null }]));
-const publicPage = () => typeof document === "undefined" || document.body?.dataset.publicLink === "1" || document.body?.dataset.mode === "view-only";
-function bootScope() {
-  try {
-    const x = JSON.parse(document.documentElement.getAttribute("data-prefs") || "null");
-    return plain(x) && ["person", "operator"].includes(x.ownerScope) && typeof x.ownerEpoch === "string" && EPOCH.test(x.ownerEpoch)
-      ? Object.freeze({ scope: x.ownerScope, epoch: x.ownerEpoch }) : null;
-  } catch { return null; }
-}
-const owner = bootScope();
-export const ownerEffectsStore = createStore({ scope: owner?.scope ?? "none", status: "unknown", revoked: false, busy: false, slots: unknownSlots(), error: null });
-let watchers = 0, generation = 0, active = null, queuedRead = false, unsubscribe = null, rev = -1, seen = null, failedAt = -Infinity;
-const clock = () => { try { const n = performance.now(); return Number.isFinite(n) && n >= 0 ? n : null; } catch { return null; } };
-const eligible = () => !!owner && watchers > 0 && !publicPage() && !ownerEffectsStore.get().revoked;
-const current = op => eligible() && op.generation === generation && active === op;
-function revoke() {
-  queuedRead = false;
-  ownerEffectsStore.set({ status: "unknown", revoked: true, slots: unknownSlots(), error: "sign_in_changed" });
-}
-function unknown(error) { const n = clock(); failedAt = n === null ? Infinity : n; ownerEffectsStore.set({ status: "unknown", slots: unknownSlots(), error }); }
-function claim() {
-  if (!eligible() || active) return null;
-  const controller = new AbortController(), op = { controller, generation };
-  active = op; ownerEffectsStore.set({ busy: true, error: null }); return op;
-}
-async function call(op, path, init = {}) {
-  const started = clock();
-  if (started === null || op.controller.signal.aborted) return { ok: false, status: 0, body: null };
-  const timer = setTimeout(() => op.controller.abort(), 10000);
-  try {
-    const res = await fetch(path, { credentials: "same-origin", ...init, signal: op.controller.signal });
-    let body = null; try { body = await res.json(); } catch { /* unknown */ }
-    const ended = clock();
-    if (op.controller.signal.aborted || ended === null || ended < started || ended - started >= 10000) return { ok: false, status: 0, body: null };
-    return { ok: res.ok, status: res.status, body };
-  } catch { return { ok: false, status: 0, body: null }; }
-  finally { clearTimeout(timer); }
-}
-function finish(op) {
-  if (active !== op) return;
-  active = null; ownerEffectsStore.set({ busy: false });
-  const again = queuedRead; queuedRead = false;
-  const n = clock();
-  if (again && eligible() && n !== null && n - failedAt >= 5000) refreshOwnerEffects();
-}
-/** An owner response is closed and bounded. Unavailable means a stored id, not an empty slot or private manifest. */
-export function checkOwnerSlots(body) { return checkEffectOwnerSlots(body); }
-
-async function read(op) {
-  const r = await call(op, `/ui/effects/owner?ownerEpoch=${owner.epoch}`);
-  if (!current(op)) return false;
-  if ([401, 403, 409].includes(r.status)) { revoke(); return false; }
-  const data = r.ok ? checkOwnerSlots(r.body) : null;
-  if (!data) { unknown("unreadable"); return false; }
-  if (data.rev < rev) { unknown("stale"); return false; }
-  rev = data.rev; failedAt = -Infinity;
-  ownerEffectsStore.set({ status: "known", slots: data.slots, error: null }); return true;
-}
-export async function refreshOwnerEffects() {
-  if (!eligible()) return false;
-  if (active) { queuedRead = true; return false; }
-  const op = claim(); if (!op) return false;
-  try { return await read(op); } finally { finish(op); }
-}
-/** One physical operation survives until settlement, including after abort. At most one coalesced read follows. */
-export function watchOwnerEffects() {
-  watchers++;
-  if (watchers === 1 && eligible()) {
-    const check = () => {
-      const next = appStore.get().prefsRev, n = clock();
-      if (next !== seen || ownerEffectsStore.get().status === "unknown" && n !== null && n - failedAt >= 5000) { seen = next; refreshOwnerEffects(); }
-    };
-    unsubscribe = appStore.subscribe(check); check();
-  }
-  let ended = false;
-  return () => {
-    if (ended) return; ended = true;
-    if (--watchers > 0) return;
-    generation++; queuedRead = false; unsubscribe?.(); unsubscribe = null; active?.controller.abort();
-    ownerEffectsStore.set({ status: "unknown", slots: unknownSlots(), error: null });
-  };
-}
-export async function saveOwnerEffects(set) {
-  if (!plain(set) || !Object.keys(set).length || Object.keys(set).some(k => !KEYS.includes(k) || set[k] !== null && (typeof set[k] !== "string" || !ID.test(set[k])))) return { ok: false, error: "invalid" };
-  // Snapshot both data and immutable boot context before the first wait. No optimistic runtime selection.
-  const values = { ...set }, op = claim(); if (!op) return { ok: false, error: "busy_or_unavailable" };
-  let saved = false;
-  try {
-    const r = await call(op, "/ui/prefs", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ set: values, ownerEpoch: owner.epoch }) });
-    if (!current(op)) return { ok: false, error: "superseded" };
-    if ([401, 403, 409].includes(r.status)) { revoke(); return { ok: false, error: "sign_in_changed" }; }
-    if (r.ok && plain(r.body) && (r.body.ownerEpoch !== owner.epoch || r.body.ownerScope !== owner.scope)) { revoke(); return { ok: false, error: "sign_in_changed" }; }
-    if (!r.ok || !plain(r.body) || !plain(r.body.values) || !Number.isSafeInteger(r.body.rev) || r.body.rev < 0 || r.body.rev < rev || r.body.unreadable) { unknown("not_saved"); return { ok: false, error: "not_saved" }; }
-    if (!Object.entries(values).every(([k, v]) => v === null ? !own(r.body.values, k) : r.body.values[k] === v)) { unknown("not_saved"); return { ok: false, error: "not_saved" }; }
-    saved = true;
-    const refreshed = await read(op); return { ok: refreshed, saved, error: refreshed ? null : "refresh_failed" };
-  } finally { finish(op); }
-}
-/** Runtime adapter asks only for the exact, currently known selection; a cursor can never request Worker source. */
-export function ownerEffectUrl(key, id, kind = "resource") {
-  const row = ownerEffectsStore.get().slots[key];
-  if (!eligible() || ownerEffectsStore.get().status !== "known" || !KEYS.includes(key) || !row || row.status !== "available" || row.id !== id || !["resource", "poster", "cursor"].includes(kind) || kind === "resource" && key === "fx.cursor") return null;
-  const path = kind === "resource" ? `/ui/effects/resource/${id}` : `/ui/effects/image/${id}/${kind}.png`;
-  return `${path}?slot=${encodeURIComponent(key)}&ownerEpoch=${owner.epoch}`;
-}
-export function markOwnerEffectUnavailable(key, id) {
-  const s = ownerEffectsStore.get(), row = s.slots[key];
-  if (!eligible() || s.status !== "known" || !KEYS.includes(key) || row?.id !== id) return;
-  ownerEffectsStore.set({ slots: { ...s.slots, [key]: { status: "unavailable", id } } });
-}

package/dist/upgrade-notices.d.ts

@@ -1,17 +0,0 @@
-export declare const WEB_CHAT_NOTICE = "web-chat-2.2";
-/** Where the web chat notice points a phone user, until the public link (#1367) gives them a menu option. */
-export declare const WEB_REMOTE_DOCS_URL = "https://github.com/songsid/AgEnD/blob/main/docs/web-dashboard.md#reaching-it-from-elsewhere";
-export declare function upgradeNoticesPath(dataDir: string): string;
-/**
- * Whether this version has web chat: 2.2 or later, prereleases included. The 2.2 betas (2.2.0-beta.N) are where
- * upgrading users first meet it, although SemVer orders them before 2.2.0. A version that does not parse (a dev
- * checkout says 1.22.0, an unknown one says "unknown") is not.
- */
-export declare function hasWebChat(version: string): boolean;
-/**
- * Record that `notice` is being sent to `adapterId`. True only when this call recorded it: false when it was
- * recorded before, or when the file cannot be read or written (then the caller sends nothing).
- */
-export declare function claimNotice(path: string, notice: string, adapterId: string): boolean;
-/** Undo a claim whose send failed, so the next start tries again. Best effort: false when it could not be undone. */
-export declare function releaseNotice(path: string, notice: string, adapterId: string): boolean;

package/dist/upgrade-notices.js

@@ -1,93 +0,0 @@
-/**
- * One-time notices for people who upgrade into a release that changed how AgEnD is used (#1366).
- *
- * The first is web chat (2.2): a fleet that has run 2.1 for months gives no sign that its agents can now be talked
- * to from a browser. The first time a fleet runs 2.2 or later, each chat platform's General is told once.
- *
- * What was announced where is recorded in `<AGEND_HOME>/upgrade-notices.json`: `{ "<notice>": ["<adapter id>", …] }`.
- * A notice is claimed in that file before it is sent, and the claim is released if the send fails, so the next start
- * tries again. When the file cannot be read or written, nothing is sent: a missed notice is better than one that
- * repeats on every restart.
- */
-import { readFileSync } from "node:fs";
-import { join } from "node:path";
-import { writeFileAtomic } from "./backend/kiro-engine-ledger.js";
-export const WEB_CHAT_NOTICE = "web-chat-2.2";
-/** Where the web chat notice points a phone user, until the public link (#1367) gives them a menu option. */
-export const WEB_REMOTE_DOCS_URL = "https://github.com/songsid/AgEnD/blob/main/docs/web-dashboard.md#reaching-it-from-elsewhere";
-export function upgradeNoticesPath(dataDir) {
-    return join(dataDir, "upgrade-notices.json");
-}
-/**
- * Whether this version has web chat: 2.2 or later, prereleases included. The 2.2 betas (2.2.0-beta.N) are where
- * upgrading users first meet it, although SemVer orders them before 2.2.0. A version that does not parse (a dev
- * checkout says 1.22.0, an unknown one says "unknown") is not.
- */
-export function hasWebChat(version) {
-    const m = /^(\d+)\.(\d+)\.\d+(?:[-+].*)?$/.exec(version.trim());
-    if (!m)
-        return false;
-    const major = Number(m[1]), minor = Number(m[2]);
-    return major > 2 || (major === 2 && minor >= 2);
-}
-/** The state, `{}` when there is no file yet, or null when it exists but cannot be read or understood. */
-function readState(path) {
-    let text;
-    try {
-        text = readFileSync(path, "utf8");
-    }
-    catch (err) {
-        return err.code === "ENOENT" ? {} : null;
-    }
-    try {
-        const parsed = JSON.parse(text);
-        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
-            return null;
-        const state = {};
-        for (const [notice, adapters] of Object.entries(parsed)) {
-            if (!Array.isArray(adapters) || !adapters.every(a => typeof a === "string"))
-                return null;
-            state[notice] = adapters;
-        }
-        return state;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Record that `notice` is being sent to `adapterId`. True only when this call recorded it: false when it was
- * recorded before, or when the file cannot be read or written (then the caller sends nothing).
- */
-export function claimNotice(path, notice, adapterId) {
-    const state = readState(path);
-    if (!state || state[notice]?.includes(adapterId))
-        return false;
-    state[notice] = [...(state[notice] ?? []), adapterId];
-    try {
-        writeFileAtomic(path, JSON.stringify(state, null, 2) + "\n");
-    }
-    catch {
-        return false;
-    }
-    return true;
-}
-/** Undo a claim whose send failed, so the next start tries again. Best effort: false when it could not be undone. */
-export function releaseNotice(path, notice, adapterId) {
-    const state = readState(path);
-    if (!state)
-        return false;
-    const left = (state[notice] ?? []).filter(a => a !== adapterId);
-    if (left.length > 0)
-        state[notice] = left;
-    else
-        delete state[notice];
-    try {
-        writeFileAtomic(path, JSON.stringify(state, null, 2) + "\n");
-    }
-    catch {
-        return false;
-    }
-    return true;
-}
-//# sourceMappingURL=upgrade-notices.js.map

package/dist/upgrade-notices.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"upgrade-notices.js","sourceRoot":"","sources":["../src/upgrade-notices.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,MAAM,CAAC,MAAM,eAAe,GAAG,cAAc,CAAC;AAC9C,6GAA6G;AAC7G,MAAM,CAAC,MAAM,mBAAmB,GAAG,6FAA6F,CAAC;AAIjI,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,MAAM,CAAC,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,0GAA0G;AAC1G,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACtD,OAAQ,GAA6B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,MAAM,KAAK,GAAgB,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzF,KAAK,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAc,EAAE,SAAiB;IACzE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC;QAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IAC7F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,MAAc,EAAE,SAAiB;IAC3E,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;;QAAM,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IACrE,IAAI,CAAC;QAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IAC7F,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/web-effect-bootstrap.d.ts

@@ -1,12 +0,0 @@
-import type { IncomingMessage, ServerResponse } from "node:http";
-/** #2118: fixed trusted document; no uploaded source, account data or resource authorization lives here. */
-export declare const EFFECT_BOOTSTRAP_PATH = "/effect-bootstrap";
-export declare function effectBootstrapResponse(boot: string): {
-    body: Buffer;
-    headers: Readonly<Record<string, string>>;
-};
-/** Call only after the listener's Host/shutdown admission. No session lookup/touch or credential parsing. */
-export declare function createEffectBootstrap(boot?: string): {
-    readonly boot: string;
-    handle(req: IncomingMessage, res: ServerResponse): boolean;
-};

package/dist/web-effect-bootstrap.js

@@ -1,49 +0,0 @@
-import { createHash, randomBytes } from "node:crypto";
-import { buildCanvasEffectShim } from "./web-effect-worker.js";
-import { gatewayRequestContext } from "./web-request-context.js";
-/** #2118: fixed trusted document; no uploaded source, account data or resource authorization lives here. */
-export const EFFECT_BOOTSTRAP_PATH = "/effect-bootstrap";
-export function effectBootstrapResponse(boot) {
-    if (!/^[0-9a-f]{32}$/.test(boot))
-        throw new Error("invalid effect bootstrap boot");
-    // The URL's origin is the actual navigation origin, even though the sandboxed realm is opaque. Do not derive
-    // the parent allowlist from Origin, forwarded headers, cookies, a preview listener or a request parameter.
-    const html = buildCanvasEffectShim(boot, [], true), body = Buffer.from(html, "utf8");
-    const script = /<script>([\s\S]*?)<\/script>/.exec(html)[1];
-    const style = /<style>([\s\S]*?)<\/style>/.exec(html)[1];
-    const hash = (value) => "'sha256-" + createHash("sha256").update(value).digest("base64") + "'";
-    const csp = [
-        "default-src 'none'", "script-src " + hash(script) + " blob:", "style-src " + hash(style),
-        "worker-src blob:", "img-src data: blob:", "font-src 'none'", "media-src 'none'",
-        "connect-src 'none'", "frame-src 'none'", "child-src 'none'", "object-src 'none'",
-        "form-action 'none'", "base-uri 'none'", "manifest-src 'none'", "webrtc 'block'",
-        "frame-ancestors 'self'", "sandbox allow-scripts",
-    ].join("; ");
-    return { body, headers: Object.freeze({
-            "Content-Type": "text/html; charset=utf-8", "Content-Length": String(body.length),
-            "Content-Security-Policy": csp, "Cache-Control": "no-store", "X-Content-Type-Options": "nosniff",
-            "Referrer-Policy": "no-referrer", "Cross-Origin-Resource-Policy": "same-origin",
-            "Permissions-Policy": "camera=(), microphone=(), geolocation=(), clipboard-read=(), clipboard-write=(), usb=(), serial=(), hid=(), bluetooth=(), payment=(), display-capture=(), fullscreen=()",
-        }) };
-}
-/** Call only after the listener's Host/shutdown admission. No session lookup/touch or credential parsing. */
-export function createEffectBootstrap(boot = randomBytes(16).toString("hex")) {
-    const response = effectBootstrapResponse(boot);
-    return Object.freeze({ boot, handle(req, res) {
-            const raw = req.url ?? "/";
-            if (raw.split(/[?#]/, 1)[0] !== EFFECT_BOOTSTRAP_PATH)
-                return false;
-            const gateway = gatewayRequestContext(req);
-            if (raw !== EFFECT_BOOTSTRAP_PATH || req.method !== "GET" || gateway && !gateway.isCurrent()) {
-                res.writeHead(404, { "Content-Length": "0", "Cache-Control": "no-store" });
-                res.end();
-                return true;
-            }
-            // The ordinary shell must stay unframable; this document is instead confined by response CSP sandbox.
-            res.removeHeader("X-Frame-Options");
-            res.writeHead(200, response.headers);
-            res.end(response.body);
-            return true;
-        } });
-}
-//# sourceMappingURL=web-effect-bootstrap.js.map

package/dist/web-effect-bootstrap.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"web-effect-bootstrap.js","sourceRoot":"","sources":["../src/web-effect-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,4GAA4G;AAC5G,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAEzD,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnF,6GAA6G;IAC7G,2GAA2G;IAC3G,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC,CAAC,CAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC,CAAC,CAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC;IACvG,MAAM,GAAG,GAAG;QACV,oBAAoB,EAAE,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC;QACzF,kBAAkB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,kBAAkB;QAChF,oBAAoB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB;QACjF,oBAAoB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,gBAAgB;QAChF,wBAAwB,EAAE,uBAAuB;KAClD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACpC,cAAc,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACjF,yBAAyB,EAAE,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,wBAAwB,EAAE,SAAS;YAChG,iBAAiB,EAAE,aAAa,EAAE,8BAA8B,EAAE,aAAa;YAC/E,oBAAoB,EAAE,yKAAyK;SAChM,CAAC,EAAE,CAAC;AACP,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,qBAAqB,CAAC,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IAG1E,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAoB,EAAE,GAAmB;YAC3E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;YAC3B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,qBAAqB;gBAAE,OAAO,KAAK,CAAC;YACpE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,GAAG,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC7F,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;gBAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBAAC,OAAO,IAAI,CAAC;YACrG,CAAC;YACD,sGAAsG;YACtG,GAAG,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;YACpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAC5E,CAAC,EAAE,CAAC,CAAC;AACP,CAAC"}

package/dist/web-effect-bundle.d.ts

@@ -1,28 +0,0 @@
-import { type WebEffectManifest } from "./web-effect.js";
-export declare const WEB_EFFECT_MAX_BYTES: number;
-export declare const WEB_EFFECT_RAW_MAX_BYTES: number;
-export declare const WEB_EFFECT_ASSET_MAX = 16;
-export interface CheckedWebEffect {
-    id: string;
-    sha256: string;
-    manifest: WebEffectManifest;
-    bytes: number;
-    files: ReadonlyMap<string, Uint8Array>;
-    warnings: string[];
-}
-export type EffectEntryResult = ({
-    ok: true;
-} & CheckedWebEffect) | {
-    ok: false;
-    problems: Array<{
-        path: string;
-        problem: string;
-    }>;
-};
-export declare function checkEffectEntry(input: ReadonlyMap<string, Uint8Array>): EffectEntryResult;
-/** Already normalized files only: assets become decoded ImageBitmaps inside the trusted frame. */
-export declare function effectRasterAssets(entry: CheckedWebEffect): Array<{
-    name: string;
-    mime: string;
-    bytes: Uint8Array;
-}>;

package/dist/web-effect-bundle.js

@@ -1,171 +0,0 @@
-/** CW1: synchronous validation and normalization. No I/O, JS execution, or image decoding. */
-import { Script } from "node:vm";
-import { imageSize, sniffMedia, stripMetadata, MEDIA_MIME } from "./web-image-meta.js";
-import { effectBundleIdentity, effectManifestJson } from "./web-effect-canonical.js";
-import { parseWebEffectManifest } from "./web-effect.js";
-export const WEB_EFFECT_MAX_BYTES = 1024 * 1024;
-export const WEB_EFFECT_RAW_MAX_BYTES = 8 * 1024 * 1024;
-export const WEB_EFFECT_ASSET_MAX = 16;
-const utf8 = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
-const assetPath = /^assets\/[a-z0-9][a-z0-9_-]{0,63}\.(png|jpe?g|webp|gif)$/;
-const fail = (path, problem) => ({ ok: false, problems: [{ path, problem }] });
-/** Advisory text lint only, never validation or a security boundary. Keep quoted URLs while ignoring comments. */
-function workerLintText(code) {
-    const parts = [];
-    let copied = 0, at = 0;
-    while (at < code.length) {
-        const c = code[at];
-        if (c === '"' || c === "'" || c === "`") {
-            const quote = c;
-            at++;
-            while (at < code.length) {
-                if (code[at] === "\\") {
-                    at += 2;
-                    continue;
-                }
-                if (code[at++] === quote)
-                    break;
-            }
-            continue;
-        }
-        // Escaped slashes in a regular-expression literal are not comment openers.
-        if (c === "\\") {
-            at += 2;
-            continue;
-        }
-        if (c === "/" && (code[at + 1] === "/" || code[at + 1] === "*")) {
-            parts.push(code.slice(copied, at), " ");
-            if (code[at + 1] === "/") {
-                at += 2;
-                while (at < code.length && !/[\r\n\u2028\u2029]/.test(code[at]))
-                    at++;
-            }
-            else {
-                at += 2;
-                while (at < code.length && !(code[at] === "*" && code[at + 1] === "/"))
-                    at++;
-                at = Math.min(code.length, at + 2);
-            }
-            copied = at;
-            continue;
-        }
-        at++;
-    }
-    parts.push(code.slice(copied));
-    return parts.join("");
-}
-export function checkEffectEntry(input) {
-    try {
-        if (!(input instanceof Map) || input.size < 2 || input.size > 20)
-            return fail("<entry>", "invalid_files");
-        let raw = 0, assets = 0, seen = 0;
-        const snapshot = new Map();
-        for (const [path, bytes] of input) {
-            if (++seen > 20)
-                return fail("<entry>", "invalid_files");
-            if (typeof path !== "string" || !["effect.json", "worker.js", "poster.png", "cursor.png"].includes(path) && !assetPath.test(path))
-                return fail("<entry>", "unsupported_path");
-            if (!(bytes instanceof Uint8Array))
-                return fail(path, "invalid_bytes");
-            raw += bytes.byteLength;
-            if (raw > WEB_EFFECT_RAW_MAX_BYTES)
-                return fail("<entry>", "raw_entry_too_large");
-            if (assetPath.test(path) && ++assets > WEB_EFFECT_ASSET_MAX)
-                return fail("<entry>", "too_many_assets");
-            if (snapshot.has(path))
-                return fail("<entry>", "invalid_files");
-            snapshot.set(path, new Uint8Array(bytes));
-        }
-        const manifestBytes = snapshot.get("effect.json"), script = snapshot.get("worker.js");
-        if (!manifestBytes || !script)
-            return fail("<entry>", "missing_entry");
-        if (manifestBytes.byteLength > 64 * 1024)
-            return fail("effect.json", "manifest_too_large");
-        if (script.byteLength > WEB_EFFECT_MAX_BYTES)
-            return fail("worker.js", "entry_too_large");
-        let decoded, code;
-        try {
-            decoded = JSON.parse(utf8.decode(manifestBytes));
-        }
-        catch {
-            return fail("effect.json", "invalid_manifest");
-        }
-        const parsed = parseWebEffectManifest(decoded);
-        if (!parsed.ok)
-            return fail("effect.json", "invalid_manifest");
-        try {
-            code = utf8.decode(script);
-        }
-        catch {
-            return fail("worker.js", "invalid_utf8");
-        }
-        let manifest = parsed.manifest;
-        if (manifest.poster && !snapshot.has("poster.png"))
-            return fail("poster.png", "missing_poster");
-        if (!!manifest.cursor !== snapshot.has("cursor.png"))
-            return fail("cursor.png", "cursor_manifest_mismatch");
-        if (snapshot.has("poster.png"))
-            manifest = { ...manifest, poster: "poster.png" };
-        let pixels = 0;
-        const files = new Map();
-        files.set("worker.js", Uint8Array.from(script));
-        for (const [path, bytes] of snapshot) {
-            if (path === "effect.json" || path === "worker.js")
-                continue;
-            const kind = sniffMedia(bytes);
-            if (!kind || kind === "woff2")
-                return fail(path, "invalid_raster");
-            const extension = path.slice(path.lastIndexOf(".") + 1), expected = extension === "jpg" ? "jpeg" : extension;
-            if (kind !== expected)
-                return fail(path, "media_mismatch");
-            const size = imageSize(bytes, kind);
-            if (!size || size.width < 1 || size.height < 1 || size.width > 4096 || size.height > 4096 || size.width * size.height > 8 * 1024 * 1024)
-                return fail(path, "image_dimensions");
-            pixels += size.width * size.height;
-            if (pixels > 8 * 1024 * 1024)
-                return fail(path, "image_dimensions");
-            const stripped = stripMetadata(bytes, kind);
-            if (!stripped)
-                return fail(path, "invalid_raster");
-            if (path === "cursor.png") {
-                if (kind !== "png" || stripped.byteLength > 32 * 1024 || size.width !== size.height || size.width > 64)
-                    return fail(path, "invalid_cursor");
-                if (manifest.cursor.hotspot.some((point, index) => point >= (index === 0 ? size.width : size.height)))
-                    return fail(path, "invalid_hotspot");
-            }
-            files.set(path, Uint8Array.from(stripped));
-        }
-        files.set("effect.json", new TextEncoder().encode(effectManifestJson(manifest)));
-        const bytes = [...files.values()].reduce((n, v) => n + v.byteLength, 0);
-        if (bytes > WEB_EFFECT_MAX_BYTES)
-            return fail("<entry>", "entry_too_large");
-        // Compile classic syntax only. Never run the result or expose parser excerpts.
-        try {
-            new Script(code, { filename: "worker.js" });
-        }
-        catch {
-            return fail("worker.js", "invalid_classic_script");
-        }
-        const identity = effectBundleIdentity(manifest, files);
-        const warnings = [];
-        if (/\b(?:fetch|XMLHttpRequest|WebSocket|RTCPeerConnection|importScripts)\b|https?:\/\/|["\'`]\/\/|\bimport\s*\(|\btop\.|\bparent\.location/.test(workerLintText(code)))
-            warnings.push("network_or_import_api_unsupported");
-        return { ok: true, id: identity.id, sha256: identity.sha256, manifest, files, bytes, warnings };
-    }
-    catch {
-        return fail("<entry>", "invalid_entry");
-    }
-}
-/** Already normalized files only: assets become decoded ImageBitmaps inside the trusted frame. */
-export function effectRasterAssets(entry) {
-    const assets = [];
-    for (const [name, bytes] of entry.files)
-        if (assetPath.test(name)) {
-            const kind = sniffMedia(bytes);
-            if (!kind || kind === "woff2")
-                throw Error("Invalid normalized raster");
-            assets.push({ name, mime: MEDIA_MIME[kind], bytes: Uint8Array.from(bytes) });
-        }
-    return assets;
-}
-//# sourceMappingURL=web-effect-bundle.js.map