@songsid/agend 2.3.3-beta.4 → 2.3.3-beta.5

package/dist/ui/shared/feature-flags.js

@@ -1,127 +0,0 @@
-// Product feature policy only: this module imports no experimental runtime.
-import { appStore } from "./app-store.js";
-import { navStore } from "./app-nav.js";
-import { ownerEffectsChosen, onOwnerEffectsChanged } from "./app-prefs.js";
-import { register } from "./app-i18n.js";
-import { html, useEffect, useState } from "./app-html.js";
-register("cwControls", { en: { title: "Effects" }, "zh-TW": { title: "效果" } });
-export function canvasWorkerEnabled() { return appStore.get().canvasWorker === true; }
-export function onCanvasWorkerChange(fn) {
-  let value = canvasWorkerEnabled();
-  return appStore.subscribe(() => { const next = canvasWorkerEnabled(); if (next !== value) { value = next; fn(next); } });
-}
-export function useCanvasWorker() {
-  const [value, setValue] = useState(canvasWorkerEnabled);
-  useEffect(() => { setValue(canvasWorkerEnabled()); return onCanvasWorkerChange(setValue); }, []);
-  return value;
-}
-// Never evaluate the optional module before admission. An obsolete import may finish, but cannot mount.
-export function experimentalComponent(load, select) {
-  return function ExperimentalComponent(props) {
-    const enabled = useCanvasWorker(), [component, setComponent] = useState(null);
-    useEffect(() => {
-      let current = true;
-      if (enabled) load().then(module => { if (current && canvasWorkerEnabled()) setComponent(() => select(module)); }, () => {});
-      return () => { current = false; };
-    }, [enabled]);
-    return enabled && component ? html`<${component} ...${props} />` : null;
-  };
-}
-
-/** effect_chat_v of a chat with no placements: sha256(JSON.stringify([])), first 32 hex (fleet-manager's status row). */
-export const EMPTY_CHAT_EFFECTS = "4f53cda18c2baa0c0354bb5f9a3ecbe5";
-
-let mod = null, waking = null, chatStore = null, started = false, generation = 0, awakeGeneration = -1, retiring = Promise.resolve();
-const awakeListeners = new Set();
-
-/** Whether `name`'s chat has Canvas Worker placements (as the status rows say). */
-export function chatHasEffects(name, app = appStore.get()) {
-  const v = name ? app.instances?.find(i => i.name === name)?.effect_chat_v : undefined;
-  return canvasWorkerEnabled() && typeof v === "string" && /^[a-f0-9]{32}$/.test(v) && v !== EMPTY_CHAT_EFFECTS;
-}
-
-/** The running effects owner, or null while dormant (or when it could not start: as getAppEffects always was). */
-export function getAppEffects(host) { return canvasWorkerEnabled() && mod ? mod.getAppEffects(host) : null; }
-
-/** Whether the runtime has been asked to start on this page. */
-export function effectsAwake() { return waking !== null; }
-/** Whether its module has loaded (started, or found it could not: getAppEffects() then says which). */
-export function effectsLoaded() { return mod !== null && awakeGeneration === generation; }
-
-/** Follow every completed runtime episode, including a replacement after an experimental off/on. */
-export function onEffectsAwake(fn) {
-  if (typeof fn !== "function") return () => {};
-  awakeListeners.add(fn);
-  if (effectsLoaded()) { try { fn(); } catch { /* a listener's error is its own */ } }
-  return () => awakeListeners.delete(fn);
-}
-
-/** Load lazily; each explicitly enabled episode owns its startup and cancellation. */
-export function wakeEffects() {
-  if (!canvasWorkerEnabled()) return Promise.resolve(null);
-  if (waking) return waking;
-  const episode = generation;
-  waking = (mod ? Promise.resolve(mod) : import("/ui/js/app-effects.js")).then(async m => {
-    mod = m;
-    await retiring;
-    if (episode !== generation || !canvasWorkerEnabled()) return null;
-    const owner = chatStore ? m.startAppEffects({ store: chatStore }) : null;
-    awakeGeneration = episode;
-    for (const fn of [...awakeListeners]) { try { fn(); } catch { /* the rest still hear */ } }
-    return owner;
-  }, () => null);
-  return waking;
-}
-
-/** Wake when the open chat has placements or the person has a personal effect. */
-function check() {
-  if (!canvasWorkerEnabled()) {
-    generation++;
-    const owner = mod?.getAppEffects();
-    if (owner) retiring = Promise.resolve(owner.dispose?.(true));
-    waking = null;
-    return;
-  }
-  if (waking) return;
-  const route = navStore.get().route;
-  if ((route?.panel === "chat" && chatHasEffects(route.instance)) || ownerEffectsChosen()) void wakeEffects();
-}
-
-/** Boot (once per page, with the Chat store the runtime binds to). Starts nothing but the watch. */
-export function startEffectsWaker({ store }) {
-  chatStore = store;
-  if (started) return;
-  started = true;
-  appStore.subscribe(check); navStore.subscribe(check); onOwnerEffectsChanged(check);
-  check();
-}
-
-// Full Canvas Worker metadata stays in the experimental graph, never in ordinary chat boot.
-let metadata = null, metadataPending = null;
-const metadataListeners = new Set();
-export function onCanvasMetadataChange(fn) { metadataListeners.add(fn); return () => metadataListeners.delete(fn); }
-export function loadCanvasWorkerMetadata() {
-  if (!canvasWorkerEnabled()) return Promise.resolve(null);
-  if (metadata) return Promise.resolve(metadata);
-  if (metadataPending?.episode === generation) return metadataPending.promise;
-  const episode = generation, op = { episode, promise: null };
-  metadataPending = op;
-  op.promise = import("./effect-display-metadata.js").then(value => {
-    if (episode !== generation || !canvasWorkerEnabled()) return null;
-    metadata = value;
-    for (const fn of [...metadataListeners]) { try { fn(); } catch { /* independent viewers */ } }
-    appStore.set({ canvasMetadataEpoch: episode });
-    return metadata;
-  }, () => null).finally(() => { if (metadataPending === op) metadataPending = null; });
-  return op.promise;
-}
-export function readCanvasTrialMessage(message) {
-  if (!canvasWorkerEnabled()) return null;
-  if (!metadata) { void loadCanvasWorkerMetadata(); return undefined; }
-  return metadata.effectTrialMessage(message);
-}
-export function canvasWorkerMenuAvailable(host) {
-  if (!canvasWorkerEnabled()) return false;
-  if (!metadata) { void loadCanvasWorkerMetadata(); return false; }
-  return metadata.chatEffectIdentity(host) !== null;
-}

package/dist/ui/shared/owner-effect-prefs.js

@@ -1,117 +0,0 @@
-// #1629: host-authoritative personal choices. No local cache, migration, frame, code fetch or automatic resend.
-import { createStore, appStore } from "./app-store.js";
-import { OWNER_EFFECT_PREF_KEYS } from "./app-prefs.js";
-import { checkEffectOwnerSlots } from "./effect-runtime-loader.js";
-const KEYS = OWNER_EFFECT_PREF_KEYS, ID = /^[a-f0-9]{32}$/, EPOCH = /^[a-f0-9]{16}$/;
-const plain = x => !!x && typeof x === "object" && Object.getPrototypeOf(x) === Object.prototype;
-const own = (x, k) => Object.hasOwn(x, k);
-const unknownSlots = () => Object.fromEntries(KEYS.map(k => [k, { status: "unknown", id: null }]));
-const publicPage = () => typeof document === "undefined" || document.body?.dataset.publicLink === "1" || document.body?.dataset.mode === "view-only";
-function bootScope() {
-  try {
-    const x = JSON.parse(document.documentElement.getAttribute("data-prefs") || "null");
-    return plain(x) && ["person", "operator"].includes(x.ownerScope) && typeof x.ownerEpoch === "string" && EPOCH.test(x.ownerEpoch)
-      ? Object.freeze({ scope: x.ownerScope, epoch: x.ownerEpoch }) : null;
-  } catch { return null; }
-}
-const owner = bootScope();
-export const ownerEffectsStore = createStore({ scope: owner?.scope ?? "none", status: "unknown", revoked: false, busy: false, slots: unknownSlots(), error: null });
-let watchers = 0, generation = 0, active = null, queuedRead = false, unsubscribe = null, rev = -1, seen = null, failedAt = -Infinity;
-const clock = () => { try { const n = performance.now(); return Number.isFinite(n) && n >= 0 ? n : null; } catch { return null; } };
-const eligible = () => !!owner && watchers > 0 && !publicPage() && !ownerEffectsStore.get().revoked;
-const current = op => eligible() && op.generation === generation && active === op;
-function revoke() {
-  queuedRead = false;
-  ownerEffectsStore.set({ status: "unknown", revoked: true, slots: unknownSlots(), error: "sign_in_changed" });
-}
-function unknown(error) { const n = clock(); failedAt = n === null ? Infinity : n; ownerEffectsStore.set({ status: "unknown", slots: unknownSlots(), error }); }
-function claim() {
-  if (!eligible() || active) return null;
-  const controller = new AbortController(), op = { controller, generation };
-  active = op; ownerEffectsStore.set({ busy: true, error: null }); return op;
-}
-async function call(op, path, init = {}) {
-  const started = clock();
-  if (started === null || op.controller.signal.aborted) return { ok: false, status: 0, body: null };
-  const timer = setTimeout(() => op.controller.abort(), 10000);
-  try {
-    const res = await fetch(path, { credentials: "same-origin", ...init, signal: op.controller.signal });
-    let body = null; try { body = await res.json(); } catch { /* unknown */ }
-    const ended = clock();
-    if (op.controller.signal.aborted || ended === null || ended < started || ended - started >= 10000) return { ok: false, status: 0, body: null };
-    return { ok: res.ok, status: res.status, body };
-  } catch { return { ok: false, status: 0, body: null }; }
-  finally { clearTimeout(timer); }
-}
-function finish(op) {
-  if (active !== op) return;
-  active = null; ownerEffectsStore.set({ busy: false });
-  const again = queuedRead; queuedRead = false;
-  const n = clock();
-  if (again && eligible() && n !== null && n - failedAt >= 5000) refreshOwnerEffects();
-}
-/** An owner response is closed and bounded. Unavailable means a stored id, not an empty slot or private manifest. */
-export function checkOwnerSlots(body) { return checkEffectOwnerSlots(body); }
-
-async function read(op) {
-  const r = await call(op, `/ui/effects/owner?ownerEpoch=${owner.epoch}`);
-  if (!current(op)) return false;
-  if ([401, 403, 409].includes(r.status)) { revoke(); return false; }
-  const data = r.ok ? checkOwnerSlots(r.body) : null;
-  if (!data) { unknown("unreadable"); return false; }
-  if (data.rev < rev) { unknown("stale"); return false; }
-  rev = data.rev; failedAt = -Infinity;
-  ownerEffectsStore.set({ status: "known", slots: data.slots, error: null }); return true;
-}
-export async function refreshOwnerEffects() {
-  if (!eligible()) return false;
-  if (active) { queuedRead = true; return false; }
-  const op = claim(); if (!op) return false;
-  try { return await read(op); } finally { finish(op); }
-}
-/** One physical operation survives until settlement, including after abort. At most one coalesced read follows. */
-export function watchOwnerEffects() {
-  watchers++;
-  if (watchers === 1 && eligible()) {
-    const check = () => {
-      const next = appStore.get().prefsRev, n = clock();
-      if (next !== seen || ownerEffectsStore.get().status === "unknown" && n !== null && n - failedAt >= 5000) { seen = next; refreshOwnerEffects(); }
-    };
-    unsubscribe = appStore.subscribe(check); check();
-  }
-  let ended = false;
-  return () => {
-    if (ended) return; ended = true;
-    if (--watchers > 0) return;
-    generation++; queuedRead = false; unsubscribe?.(); unsubscribe = null; active?.controller.abort();
-    ownerEffectsStore.set({ status: "unknown", slots: unknownSlots(), error: null });
-  };
-}
-export async function saveOwnerEffects(set) {
-  if (!plain(set) || !Object.keys(set).length || Object.keys(set).some(k => !KEYS.includes(k) || set[k] !== null && (typeof set[k] !== "string" || !ID.test(set[k])))) return { ok: false, error: "invalid" };
-  // Snapshot both data and immutable boot context before the first wait. No optimistic runtime selection.
-  const values = { ...set }, op = claim(); if (!op) return { ok: false, error: "busy_or_unavailable" };
-  let saved = false;
-  try {
-    const r = await call(op, "/ui/prefs", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ set: values, ownerEpoch: owner.epoch }) });
-    if (!current(op)) return { ok: false, error: "superseded" };
-    if ([401, 403, 409].includes(r.status)) { revoke(); return { ok: false, error: "sign_in_changed" }; }
-    if (r.ok && plain(r.body) && (r.body.ownerEpoch !== owner.epoch || r.body.ownerScope !== owner.scope)) { revoke(); return { ok: false, error: "sign_in_changed" }; }
-    if (!r.ok || !plain(r.body) || !plain(r.body.values) || !Number.isSafeInteger(r.body.rev) || r.body.rev < 0 || r.body.rev < rev || r.body.unreadable) { unknown("not_saved"); return { ok: false, error: "not_saved" }; }
-    if (!Object.entries(values).every(([k, v]) => v === null ? !own(r.body.values, k) : r.body.values[k] === v)) { unknown("not_saved"); return { ok: false, error: "not_saved" }; }
-    saved = true;
-    const refreshed = await read(op); return { ok: refreshed, saved, error: refreshed ? null : "refresh_failed" };
-  } finally { finish(op); }
-}
-/** Runtime adapter asks only for the exact, currently known selection; a cursor can never request Worker source. */
-export function ownerEffectUrl(key, id, kind = "resource") {
-  const row = ownerEffectsStore.get().slots[key];
-  if (!eligible() || ownerEffectsStore.get().status !== "known" || !KEYS.includes(key) || !row || row.status !== "available" || row.id !== id || !["resource", "poster", "cursor"].includes(kind) || kind === "resource" && key === "fx.cursor") return null;
-  const path = kind === "resource" ? `/ui/effects/resource/${id}` : `/ui/effects/image/${id}/${kind}.png`;
-  return `${path}?slot=${encodeURIComponent(key)}&ownerEpoch=${owner.epoch}`;
-}
-export function markOwnerEffectUnavailable(key, id) {
-  const s = ownerEffectsStore.get(), row = s.slots[key];
-  if (!eligible() || s.status !== "known" || !KEYS.includes(key) || row?.id !== id) return;
-  ownerEffectsStore.set({ slots: { ...s.slots, [key]: { status: "unavailable", id } } });
-}

package/dist/web-effect-bootstrap.d.ts

@@ -1,12 +0,0 @@
-import type { IncomingMessage, ServerResponse } from "node:http";
-/** #2118: fixed trusted document; no uploaded source, account data or resource authorization lives here. */
-export declare const EFFECT_BOOTSTRAP_PATH = "/effect-bootstrap";
-export declare function effectBootstrapResponse(boot: string): {
-    body: Buffer;
-    headers: Readonly<Record<string, string>>;
-};
-/** Call only after the listener's Host/shutdown admission. No session lookup/touch or credential parsing. */
-export declare function createEffectBootstrap(boot?: string): {
-    readonly boot: string;
-    handle(req: IncomingMessage, res: ServerResponse): boolean;
-};

package/dist/web-effect-bootstrap.js

@@ -1,49 +0,0 @@
-import { createHash, randomBytes } from "node:crypto";
-import { buildCanvasEffectShim } from "./web-effect-worker.js";
-import { gatewayRequestContext } from "./web-request-context.js";
-/** #2118: fixed trusted document; no uploaded source, account data or resource authorization lives here. */
-export const EFFECT_BOOTSTRAP_PATH = "/effect-bootstrap";
-export function effectBootstrapResponse(boot) {
-    if (!/^[0-9a-f]{32}$/.test(boot))
-        throw new Error("invalid effect bootstrap boot");
-    // The URL's origin is the actual navigation origin, even though the sandboxed realm is opaque. Do not derive
-    // the parent allowlist from Origin, forwarded headers, cookies, a preview listener or a request parameter.
-    const html = buildCanvasEffectShim(boot, [], true), body = Buffer.from(html, "utf8");
-    const script = /<script>([\s\S]*?)<\/script>/.exec(html)[1];
-    const style = /<style>([\s\S]*?)<\/style>/.exec(html)[1];
-    const hash = (value) => "'sha256-" + createHash("sha256").update(value).digest("base64") + "'";
-    const csp = [
-        "default-src 'none'", "script-src " + hash(script) + " blob:", "style-src " + hash(style),
-        "worker-src blob:", "img-src data: blob:", "font-src 'none'", "media-src 'none'",
-        "connect-src 'none'", "frame-src 'none'", "child-src 'none'", "object-src 'none'",
-        "form-action 'none'", "base-uri 'none'", "manifest-src 'none'", "webrtc 'block'",
-        "frame-ancestors 'self'", "sandbox allow-scripts",
-    ].join("; ");
-    return { body, headers: Object.freeze({
-            "Content-Type": "text/html; charset=utf-8", "Content-Length": String(body.length),
-            "Content-Security-Policy": csp, "Cache-Control": "no-store", "X-Content-Type-Options": "nosniff",
-            "Referrer-Policy": "no-referrer", "Cross-Origin-Resource-Policy": "same-origin",
-            "Permissions-Policy": "camera=(), microphone=(), geolocation=(), clipboard-read=(), clipboard-write=(), usb=(), serial=(), hid=(), bluetooth=(), payment=(), display-capture=(), fullscreen=()",
-        }) };
-}
-/** Call only after the listener's Host/shutdown admission. No session lookup/touch or credential parsing. */
-export function createEffectBootstrap(boot = randomBytes(16).toString("hex")) {
-    const response = effectBootstrapResponse(boot);
-    return Object.freeze({ boot, handle(req, res) {
-            const raw = req.url ?? "/";
-            if (raw.split(/[?#]/, 1)[0] !== EFFECT_BOOTSTRAP_PATH)
-                return false;
-            const gateway = gatewayRequestContext(req);
-            if (raw !== EFFECT_BOOTSTRAP_PATH || req.method !== "GET" || gateway && !gateway.isCurrent()) {
-                res.writeHead(404, { "Content-Length": "0", "Cache-Control": "no-store" });
-                res.end();
-                return true;
-            }
-            // The ordinary shell must stay unframable; this document is instead confined by response CSP sandbox.
-            res.removeHeader("X-Frame-Options");
-            res.writeHead(200, response.headers);
-            res.end(response.body);
-            return true;
-        } });
-}
-//# sourceMappingURL=web-effect-bootstrap.js.map

package/dist/web-effect-bootstrap.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"web-effect-bootstrap.js","sourceRoot":"","sources":["../src/web-effect-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,4GAA4G;AAC5G,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAEzD,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnF,6GAA6G;IAC7G,2GAA2G;IAC3G,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC,CAAC,CAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC,CAAC,CAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC;IACvG,MAAM,GAAG,GAAG;QACV,oBAAoB,EAAE,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC;QACzF,kBAAkB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,kBAAkB;QAChF,oBAAoB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB;QACjF,oBAAoB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,gBAAgB;QAChF,wBAAwB,EAAE,uBAAuB;KAClD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACpC,cAAc,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACjF,yBAAyB,EAAE,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,wBAAwB,EAAE,SAAS;YAChG,iBAAiB,EAAE,aAAa,EAAE,8BAA8B,EAAE,aAAa;YAC/E,oBAAoB,EAAE,yKAAyK;SAChM,CAAC,EAAE,CAAC;AACP,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,qBAAqB,CAAC,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IAG1E,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAoB,EAAE,GAAmB;YAC3E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;YAC3B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,qBAAqB;gBAAE,OAAO,KAAK,CAAC;YACpE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,GAAG,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC7F,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;gBAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBAAC,OAAO,IAAI,CAAC;YACrG,CAAC;YACD,sGAAsG;YACtG,GAAG,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;YACpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAC5E,CAAC,EAAE,CAAC,CAAC;AACP,CAAC"}

package/dist/web-effect-bundle.d.ts

@@ -1,28 +0,0 @@
-import { type WebEffectManifest } from "./web-effect.js";
-export declare const WEB_EFFECT_MAX_BYTES: number;
-export declare const WEB_EFFECT_RAW_MAX_BYTES: number;
-export declare const WEB_EFFECT_ASSET_MAX = 16;
-export interface CheckedWebEffect {
-    id: string;
-    sha256: string;
-    manifest: WebEffectManifest;
-    bytes: number;
-    files: ReadonlyMap<string, Uint8Array>;
-    warnings: string[];
-}
-export type EffectEntryResult = ({
-    ok: true;
-} & CheckedWebEffect) | {
-    ok: false;
-    problems: Array<{
-        path: string;
-        problem: string;
-    }>;
-};
-export declare function checkEffectEntry(input: ReadonlyMap<string, Uint8Array>): EffectEntryResult;
-/** Already normalized files only: assets become decoded ImageBitmaps inside the trusted frame. */
-export declare function effectRasterAssets(entry: CheckedWebEffect): Array<{
-    name: string;
-    mime: string;
-    bytes: Uint8Array;
-}>;

package/dist/web-effect-bundle.js

@@ -1,171 +0,0 @@
-/** CW1: synchronous validation and normalization. No I/O, JS execution, or image decoding. */
-import { Script } from "node:vm";
-import { imageSize, sniffMedia, stripMetadata, MEDIA_MIME } from "./web-image-meta.js";
-import { effectBundleIdentity, effectManifestJson } from "./web-effect-canonical.js";
-import { parseWebEffectManifest } from "./web-effect.js";
-export const WEB_EFFECT_MAX_BYTES = 1024 * 1024;
-export const WEB_EFFECT_RAW_MAX_BYTES = 8 * 1024 * 1024;
-export const WEB_EFFECT_ASSET_MAX = 16;
-const utf8 = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
-const assetPath = /^assets\/[a-z0-9][a-z0-9_-]{0,63}\.(png|jpe?g|webp|gif)$/;
-const fail = (path, problem) => ({ ok: false, problems: [{ path, problem }] });
-/** Advisory text lint only, never validation or a security boundary. Keep quoted URLs while ignoring comments. */
-function workerLintText(code) {
-    const parts = [];
-    let copied = 0, at = 0;
-    while (at < code.length) {
-        const c = code[at];
-        if (c === '"' || c === "'" || c === "`") {
-            const quote = c;
-            at++;
-            while (at < code.length) {
-                if (code[at] === "\\") {
-                    at += 2;
-                    continue;
-                }
-                if (code[at++] === quote)
-                    break;
-            }
-            continue;
-        }
-        // Escaped slashes in a regular-expression literal are not comment openers.
-        if (c === "\\") {
-            at += 2;
-            continue;
-        }
-        if (c === "/" && (code[at + 1] === "/" || code[at + 1] === "*")) {
-            parts.push(code.slice(copied, at), " ");
-            if (code[at + 1] === "/") {
-                at += 2;
-                while (at < code.length && !/[\r\n\u2028\u2029]/.test(code[at]))
-                    at++;
-            }
-            else {
-                at += 2;
-                while (at < code.length && !(code[at] === "*" && code[at + 1] === "/"))
-                    at++;
-                at = Math.min(code.length, at + 2);
-            }
-            copied = at;
-            continue;
-        }
-        at++;
-    }
-    parts.push(code.slice(copied));
-    return parts.join("");
-}
-export function checkEffectEntry(input) {
-    try {
-        if (!(input instanceof Map) || input.size < 2 || input.size > 20)
-            return fail("<entry>", "invalid_files");
-        let raw = 0, assets = 0, seen = 0;
-        const snapshot = new Map();
-        for (const [path, bytes] of input) {
-            if (++seen > 20)
-                return fail("<entry>", "invalid_files");
-            if (typeof path !== "string" || !["effect.json", "worker.js", "poster.png", "cursor.png"].includes(path) && !assetPath.test(path))
-                return fail("<entry>", "unsupported_path");
-            if (!(bytes instanceof Uint8Array))
-                return fail(path, "invalid_bytes");
-            raw += bytes.byteLength;
-            if (raw > WEB_EFFECT_RAW_MAX_BYTES)
-                return fail("<entry>", "raw_entry_too_large");
-            if (assetPath.test(path) && ++assets > WEB_EFFECT_ASSET_MAX)
-                return fail("<entry>", "too_many_assets");
-            if (snapshot.has(path))
-                return fail("<entry>", "invalid_files");
-            snapshot.set(path, new Uint8Array(bytes));
-        }
-        const manifestBytes = snapshot.get("effect.json"), script = snapshot.get("worker.js");
-        if (!manifestBytes || !script)
-            return fail("<entry>", "missing_entry");
-        if (manifestBytes.byteLength > 64 * 1024)
-            return fail("effect.json", "manifest_too_large");
-        if (script.byteLength > WEB_EFFECT_MAX_BYTES)
-            return fail("worker.js", "entry_too_large");
-        let decoded, code;
-        try {
-            decoded = JSON.parse(utf8.decode(manifestBytes));
-        }
-        catch {
-            return fail("effect.json", "invalid_manifest");
-        }
-        const parsed = parseWebEffectManifest(decoded);
-        if (!parsed.ok)
-            return fail("effect.json", "invalid_manifest");
-        try {
-            code = utf8.decode(script);
-        }
-        catch {
-            return fail("worker.js", "invalid_utf8");
-        }
-        let manifest = parsed.manifest;
-        if (manifest.poster && !snapshot.has("poster.png"))
-            return fail("poster.png", "missing_poster");
-        if (!!manifest.cursor !== snapshot.has("cursor.png"))
-            return fail("cursor.png", "cursor_manifest_mismatch");
-        if (snapshot.has("poster.png"))
-            manifest = { ...manifest, poster: "poster.png" };
-        let pixels = 0;
-        const files = new Map();
-        files.set("worker.js", Uint8Array.from(script));
-        for (const [path, bytes] of snapshot) {
-            if (path === "effect.json" || path === "worker.js")
-                continue;
-            const kind = sniffMedia(bytes);
-            if (!kind || kind === "woff2")
-                return fail(path, "invalid_raster");
-            const extension = path.slice(path.lastIndexOf(".") + 1), expected = extension === "jpg" ? "jpeg" : extension;
-            if (kind !== expected)
-                return fail(path, "media_mismatch");
-            const size = imageSize(bytes, kind);
-            if (!size || size.width < 1 || size.height < 1 || size.width > 4096 || size.height > 4096 || size.width * size.height > 8 * 1024 * 1024)
-                return fail(path, "image_dimensions");
-            pixels += size.width * size.height;
-            if (pixels > 8 * 1024 * 1024)
-                return fail(path, "image_dimensions");
-            const stripped = stripMetadata(bytes, kind);
-            if (!stripped)
-                return fail(path, "invalid_raster");
-            if (path === "cursor.png") {
-                if (kind !== "png" || stripped.byteLength > 32 * 1024 || size.width !== size.height || size.width > 64)
-                    return fail(path, "invalid_cursor");
-                if (manifest.cursor.hotspot.some((point, index) => point >= (index === 0 ? size.width : size.height)))
-                    return fail(path, "invalid_hotspot");
-            }
-            files.set(path, Uint8Array.from(stripped));
-        }
-        files.set("effect.json", new TextEncoder().encode(effectManifestJson(manifest)));
-        const bytes = [...files.values()].reduce((n, v) => n + v.byteLength, 0);
-        if (bytes > WEB_EFFECT_MAX_BYTES)
-            return fail("<entry>", "entry_too_large");
-        // Compile classic syntax only. Never run the result or expose parser excerpts.
-        try {
-            new Script(code, { filename: "worker.js" });
-        }
-        catch {
-            return fail("worker.js", "invalid_classic_script");
-        }
-        const identity = effectBundleIdentity(manifest, files);
-        const warnings = [];
-        if (/\b(?:fetch|XMLHttpRequest|WebSocket|RTCPeerConnection|importScripts)\b|https?:\/\/|["\'`]\/\/|\bimport\s*\(|\btop\.|\bparent\.location/.test(workerLintText(code)))
-            warnings.push("network_or_import_api_unsupported");
-        return { ok: true, id: identity.id, sha256: identity.sha256, manifest, files, bytes, warnings };
-    }
-    catch {
-        return fail("<entry>", "invalid_entry");
-    }
-}
-/** Already normalized files only: assets become decoded ImageBitmaps inside the trusted frame. */
-export function effectRasterAssets(entry) {
-    const assets = [];
-    for (const [name, bytes] of entry.files)
-        if (assetPath.test(name)) {
-            const kind = sniffMedia(bytes);
-            if (!kind || kind === "woff2")
-                throw Error("Invalid normalized raster");
-            assets.push({ name, mime: MEDIA_MIME[kind], bytes: Uint8Array.from(bytes) });
-        }
-    return assets;
-}
-//# sourceMappingURL=web-effect-bundle.js.map

package/dist/web-effect-bundle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"web-effect-bundle.js","sourceRoot":"","sources":["../src/web-effect-bundle.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,sBAAsB,EAA0B,MAAM,iBAAiB,CAAC;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAkBvC,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACxE,MAAM,SAAS,GAAG,0DAA0D,CAAC;AAC7E,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,OAAe,EAAqB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AAClH,kHAAkH;AAClH,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAAC,IAAI,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,CAAC,CAAC;YAAC,EAAE,EAAE,CAAC;YACtB,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;oBAAC,EAAE,IAAI,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK;oBAAE,MAAM;YAAC,CAAC;YAC3G,SAAS;QACX,CAAC;QACD,2EAA2E;QAC3E,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,EAAE,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACzB,EAAE,IAAI,CAAC,CAAC;gBAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAE,CAAC;oBAAE,EAAE,EAAE,CAAC;YAClF,CAAC;iBAAM,CAAC;gBAAC,EAAE,IAAI,CAAC,CAAC;gBAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;oBAAE,EAAE,EAAE,CAAC;gBAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;YAAC,CAAC;YACrI,MAAM,GAAG,EAAE,CAAC;YAAC,SAAS;QACxB,CAAC;QACD,EAAE,EAAE,CAAC;IACP,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxD,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,KAAsC;IACrE,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE;YAC9D,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC1C,IAAI,GAAG,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;YAClC,IAAI,EAAE,IAAI,GAAG,EAAE;gBACb,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC/H,OAAO,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;YAC7C,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;gBAChC,OAAO,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACrC,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC;YACxB,IAAI,GAAG,GAAG,wBAAwB;gBAChC,OAAO,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;YAChD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB;gBACzD,OAAO,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YAC5C,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YAC1C,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtF,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM;YAC3B,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC1C,IAAI,aAAa,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI;YACtC,OAAO,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,UAAU,GAAG,oBAAoB;YAC1C,OAAO,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAC9C,IAAI,OAAgB,EAAE,IAAY,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,EAAE;YACZ,OAAO,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC/B,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;YAChD,OAAO,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;YAClD,OAAO,IAAI,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAAC;QACxD,IAAI,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5B,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACnD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC5C,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;YACrC,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,WAAW;gBAChD,SAAS;YACX,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,OAAO;gBAC3B,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7G,IAAI,IAAI,KAAK,QAAQ;gBACnB,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;gBACrI,OAAO,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YACxC,MAAM,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;YACnC,IAAI,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;gBAC1B,OAAO,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ;gBACX,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,IAAI,IAAI,KAAK,KAAK,IAAI,QAAQ,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,GAAG,EAAE;oBACpG,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACtC,IAAI,QAAQ,CAAC,MAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACpG,OAAO,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,KAAK,GAAG,oBAAoB;YAC9B,OAAO,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAC5C,+EAA+E;QAC/E,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,wIAAwI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACrK,QAAQ,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACrD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClG,CAAC;IACD,MAAM,CAAC;QACL,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AACD,kGAAkG;AAClG,MAAM,UAAU,kBAAkB,CAAC,KAAuB;IAKxD,MAAM,MAAM,GAIP,EAAE,CAAC;IACR,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK;QACrC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,OAAO;gBAC3B,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/web-effect-canonical.d.ts

@@ -1,8 +0,0 @@
-import type { WebEffectManifest } from "./web-effect.js";
-export declare function effectBundleIdentity(manifest: WebEffectManifest, files: ReadonlyMap<string, Uint8Array>): {
-    id: string;
-    sha256: string;
-    canonical: string;
-};
-/** Stable JSON for the validated manifest; array order is part of its value. */
-export declare function effectManifestJson(manifest: WebEffectManifest): string;

package/dist/web-effect-canonical.js

@@ -1,27 +0,0 @@
-/** #1629: identity of an already validated, normalized bundle, including every file.
-* This is not an upload validator. The bundle preparer owns paths, media stripping,
-* UTF-8, entry format and the normalized byte limit. */
-import { createHash } from "node:crypto";
-export function effectBundleIdentity(manifest, files) {
-    const entries = [...files].map(([path, bytes]) => [path, createHash("sha256").update(bytes).digest("hex")]);
-    entries.sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
-    const canonical = JSON.stringify({ manifest: JSON.parse(effectManifestJson(manifest)), files: entries });
-    const sha256 = createHash("sha256").update(canonical, "utf8").digest("hex");
-    return { id: sha256.slice(0, 32), sha256, canonical };
-}
-/** Stable JSON for the validated manifest; array order is part of its value. */
-export function effectManifestJson(manifest) {
-    const normalized = (value) => {
-        if (Array.isArray(value))
-            return value.map(normalized);
-        if (value !== null && typeof value === "object") {
-            const object = Object.create(null);
-            for (const key of Object.keys(value).sort())
-                object[key] = normalized(value[key]);
-            return object;
-        }
-        return value;
-    };
-    return JSON.stringify(normalized(manifest));
-}
-//# sourceMappingURL=web-effect-canonical.js.map

package/dist/web-effect-canonical.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"web-effect-canonical.js","sourceRoot":"","sources":["../src/web-effect-canonical.ts"],"names":[],"mappings":"AAAA;;uDAEuD;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,oBAAoB,CAAC,QAA2B,EAAE,KAAsC;IAKtG,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAU,CAAC,CAAC;IACrH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACzG,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACxD,CAAC;AACD,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,QAA2B;IAC5D,MAAM,UAAU,GAAG,CAAC,KAAc,EAAW,EAAE;QAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACtB,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;gBACzC,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;YACpE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC9C,CAAC"}