@xopcai/xopc 0.0.84 → 0.0.86

package/dist/src/share/share-types.js

@@ -17,7 +17,24 @@ const SHARE_CONFIG_DEFAULTS = {
 		"text/markdown",
 		"text/plain",
 		"application/json"
-	]
+	],
+	directory: {
+		enabled: true,
+		maxFolderSize: 1073741824,
+		maxFileCount: 1e3,
+		maxDepth: 20,
+		listingCacheMs: 6e4,
+		zipConcurrency: 1
+	},
+	thumbnail: {
+		enabled: true,
+		concurrency: 2,
+		maxBytes: 262144,
+		viewportWidth: 1200,
+		viewportHeight: 630,
+		generationTimeoutMs: 8e3,
+		failureCooldownMs: 5 * 6e4
+	}
 };
 //#endregion
 export { SHARE_CONFIG_DEFAULTS };

package/dist/src/share/share-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"share-types.js","names":[],"sources":["../../../src/share/share-types.ts"],"sourcesContent":["export interface ShareRecord {\n  /** Unique identifier (UUIDv4) for management. */\n  id: string;\n  /** Cryptographically secure URL token (base64url, 32 bytes). */\n  token: string;\n  /** Resolved absolute path at creation time. */\n  absolutePath: string;\n  /** Workspace-relative POSIX path (for display). */\n  workspaceRelativePath: string;\n  /** Workspace root at creation time (for download-time re-validation). */\n  workspaceRoot: string;\n  /** File inode at creation time (TOCTOU protection). */\n  inode: number;\n  /** Whether this share targets a directory. */\n  isDirectory: boolean;\n  /** Original file name (basename). */\n  fileName: string;\n  /** File size in bytes (snapshot at creation). */\n  fileSize: number;\n  /** MIME type. */\n  mimeType: string;\n  /** ISO creation timestamp. */\n  createdAt: string;\n  /** ISO expiration timestamp. */\n  expiresAt: string;\n  /** Maximum allowed views (null = unlimited). */\n  maxViews: number | null;\n  /** Current view count. */\n  viewCount: number;\n  /** Whether manually revoked. */\n  revoked: boolean;\n  /** Gateway token SHA-256 hash prefix (12 chars) of the creator. */\n  createdByTokenHash: string;\n  /** Optional human-readable description. */\n  description?: string;\n}\n\nexport interface CreateShareParams {\n  /** Workspace-relative file path. */\n  path: string;\n  /** Time-to-live in milliseconds (default: 24h). */\n  ttlMs?: number;\n  /** Maximum view count (null = unlimited). */\n  maxViews?: number | null;\n  /** Optional description shown on the landing page. */\n  description?: string;\n  /** Session key to resolve workspace root. */\n  sessionKey?: string;\n  /** Agent id to resolve workspace root. */\n  agentId?: string;\n}\n\nexport interface ShareStoreData {\n  version: 1;\n  shares: ShareRecord[];\n}\n\nexport type ShareReachability = 'public' | 'lan' | 'local-only';\n\nexport interface ResolvedShareUrl {\n  shareUrl: string;\n  lanUrl: string | null;\n  reachability: ShareReachability;\n  reachabilityHint: string | null;\n}\n\nexport interface ShareConfig {\n  enabled: boolean;\n  defaultTtlMs: number;\n  maxTtlMs: number;\n  maxActiveShares: number;\n  maxFileSize: number;\n  inlinePreviewMimes: string[];\n}\n\n/** Default share configuration values. */\nexport const SHARE_CONFIG_DEFAULTS: ShareConfig = {\n  enabled: true,\n  defaultTtlMs: 86_400_000,\n  maxTtlMs: 604_800_000,\n  maxActiveShares: 100,\n  maxFileSize: 104_857_600,\n  inlinePreviewMimes: [\n    'image/png',\n    'image/jpeg',\n    'image/gif',\n    'image/webp',\n    'image/svg+xml',\n    'application/pdf',\n    'text/html',\n    'text/markdown',\n    'text/plain',\n    'application/json',\n  ],\n};\n"],"mappings":";;AA4EA,MAAa,wBAAqC;CAChD,SAAS;CACT,cAAc;CACd,UAAU;CACV,iBAAiB;CACjB,aAAa;CACb,oBAAoB;EAClB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD;CACF"}
+{"version":3,"file":"share-types.js","names":[],"sources":["../../../src/share/share-types.ts"],"sourcesContent":["export type ShareKind = 'file' | 'directory';\n\nexport interface ShareDirectoryMeta {\n  /** 'browse' shows a file tree; 'zip-only' hides structure and only offers ZIP. */\n  mode: 'browse' | 'zip-only';\n  /** Snapshot entry count at creation time (display + sanity guard). */\n  entryCount: number;\n  /** Whether the symlink filter at scan time was permissive. */\n  followSymlinks: boolean;\n  /** Maximum traversal depth (defense against recursive symlinks). */\n  maxDepth: number;\n}\n\nexport interface ShareRecord {\n  /** Unique identifier (UUIDv4) for management. */\n  id: string;\n  /** Cryptographically secure URL token (base64url, 32 bytes). */\n  token: string;\n  /** Resolved absolute path at creation time. */\n  absolutePath: string;\n  /** Workspace-relative POSIX path (for display). */\n  workspaceRelativePath: string;\n  /** Workspace root at creation time (for download-time re-validation). */\n  workspaceRoot: string;\n  /** File or directory inode at creation time (TOCTOU protection). */\n  inode: number;\n  /** Discriminator for downstream branching ('file' | 'directory'). */\n  kind: ShareKind;\n  /** Original file/folder name (basename). */\n  fileName: string;\n  /**\n   * For files: file size in bytes (snapshot at creation).\n   * For directories: sum of file sizes at scan time (display only).\n   */\n  fileSize: number;\n  /** MIME type (directories: 'application/x-directory'). */\n  mimeType: string;\n  /** ISO creation timestamp. */\n  createdAt: string;\n  /** ISO expiration timestamp. */\n  expiresAt: string;\n  /** Maximum allowed downloads (null = unlimited). Counts file/zip/preview events. */\n  maxViews: number | null;\n  /** Download counter (file-bytes / zip-bytes / preview events). Landing-page renders never count. */\n  downloadCount: number;\n  /** Whether manually revoked. */\n  revoked: boolean;\n  /** Gateway token SHA-256 hash prefix (12 chars) of the creator. */\n  createdByTokenHash: string;\n  /** Optional human-readable description. */\n  description?: string;\n  /** Directory-only extra fields. */\n  directory?: ShareDirectoryMeta;\n  /** Thumbnail generation status (lazy + scheduled). */\n  thumbnailStatus?: 'pending' | 'ready' | 'failed';\n  /** ISO timestamp of the last successful thumbnail render. */\n  thumbnailGeneratedAt?: string;\n  /** ISO timestamp of the last failed attempt (used for cooldown). */\n  thumbnailFailedAt?: string;\n}\n\nexport interface CreateShareParams {\n  /** Workspace-relative file path. */\n  path: string;\n  /** Time-to-live in milliseconds (default: 24h). */\n  ttlMs?: number;\n  /** Maximum view/download count (null = unlimited). */\n  maxViews?: number | null;\n  /** Optional description shown on the landing page. */\n  description?: string;\n  /** Session key to resolve workspace root. */\n  sessionKey?: string;\n  /** Agent id to resolve workspace root. */\n  agentId?: string;\n  /** Force directory share semantics (overrides auto-detection). */\n  kind?: ShareKind;\n  /** Directory: browse vs zip-only. Defaults to 'browse'. */\n  directoryMode?: 'browse' | 'zip-only';\n  /** Directory: cap on entry count at scan time. */\n  maxFileCount?: number;\n  /** Directory: cap on total folder size in bytes. */\n  maxFolderSize?: number;\n  /** Directory: whether to follow symlinks (subject to workspace boundary). */\n  followSymlinks?: boolean;\n  /** Directory: walk depth cap (default 20). */\n  maxDepth?: number;\n}\n\nexport interface ShareStoreData {\n  version: 1;\n  shares: ShareRecord[];\n}\n\nexport type ShareReachability = 'public' | 'lan' | 'local-only';\n\nexport interface ResolvedShareUrl {\n  shareUrl: string;\n  lanUrl: string | null;\n  reachability: ShareReachability;\n  reachabilityHint: string | null;\n}\n\nexport interface ShareDirectoryConfig {\n  enabled: boolean;\n  maxFolderSize: number;\n  maxFileCount: number;\n  maxDepth: number;\n  listingCacheMs: number;\n  zipConcurrency: number;\n}\n\nexport interface ShareThumbnailConfig {\n  enabled: boolean;\n  concurrency: number;\n  /** Hard cap on emitted jpeg bytes. */\n  maxBytes: number;\n  viewportWidth: number;\n  viewportHeight: number;\n  /** Per-render timeout (Playwright navigation + screenshot). */\n  generationTimeoutMs: number;\n  /** Cooldown before a failed token is retried. */\n  failureCooldownMs: number;\n  /** Optional override for the loopback URL used by the headless renderer. */\n  internalGatewayUrl?: string;\n}\n\nexport interface ShareConfig {\n  enabled: boolean;\n  defaultTtlMs: number;\n  maxTtlMs: number;\n  maxActiveShares: number;\n  maxFileSize: number;\n  inlinePreviewMimes: string[];\n  directory: ShareDirectoryConfig;\n  thumbnail: ShareThumbnailConfig;\n}\n\n/** Default share configuration values. */\nexport const SHARE_CONFIG_DEFAULTS: ShareConfig = {\n  enabled: true,\n  defaultTtlMs: 86_400_000,\n  maxTtlMs: 604_800_000,\n  maxActiveShares: 100,\n  maxFileSize: 104_857_600,\n  inlinePreviewMimes: [\n    'image/png',\n    'image/jpeg',\n    'image/gif',\n    'image/webp',\n    'image/svg+xml',\n    'application/pdf',\n    'text/html',\n    'text/markdown',\n    'text/plain',\n    'application/json',\n  ],\n  directory: {\n    enabled: true,\n    maxFolderSize: 1_073_741_824, // 1 GB\n    maxFileCount: 1000,\n    maxDepth: 20,\n    listingCacheMs: 60_000,\n    zipConcurrency: 1,\n  },\n  thumbnail: {\n    enabled: true,\n    concurrency: 2,\n    maxBytes: 262_144, // 256 KB after re-encode\n    viewportWidth: 1200,\n    viewportHeight: 630,\n    generationTimeoutMs: 8_000,\n    failureCooldownMs: 5 * 60_000,\n  },\n};\n"],"mappings":";;AA0IA,MAAa,wBAAqC;CAChD,SAAS;CACT,cAAc;CACd,UAAU;CACV,iBAAiB;CACjB,aAAa;CACb,oBAAoB;EAClB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD;CACD,WAAW;EACT,SAAS;EACT,eAAe;EACf,cAAc;EACd,UAAU;EACV,gBAAgB;EAChB,gBAAgB;EACjB;CACD,WAAW;EACT,SAAS;EACT,aAAa;EACb,UAAU;EACV,eAAe;EACf,gBAAgB;EAChB,qBAAqB;EACrB,mBAAmB,IAAI;EACxB;CACF"}

package/dist/src/share/share-url.js

@@ -1,5 +1,5 @@
-import { resolveLanGatewayUrl } from "../tunnel/tunnel-qr.js";
 import { loadTunnelState } from "../tunnel/tunnel-state.js";
+import { resolveLanGatewayUrl } from "../tunnel/tunnel-qr.js";
 //#region src/share/share-url.ts
 function resolveShareUrl(token, ctx) {
 	const tunnelState = loadTunnelState();

package/dist/src/share/share-zip.d.ts

@@ -0,0 +1,35 @@
+import { Readable } from 'node:stream';
+import type { ShareRecord } from './share-types.js';
+export interface ZipPlanFile {
+    /** Path within the archive (POSIX, no leading /, may contain subdirs). */
+    zipPath: string;
+    /** Absolute filesystem path of the source file. */
+    absolutePath: string;
+    /** Modification time used for the entry header. */
+    mtimeMs: number;
+    /** File size in bytes. */
+    size: number;
+}
+export interface ZipBuildOptions {
+    files: ZipPlanFile[];
+    /** Whether to deflate a given entry. Defaults to a sensible heuristic. */
+    compress?: (f: ZipPlanFile) => boolean;
+}
+/**
+ * Build a streaming ZIP archive as a Node Readable. Files that fail to read
+ * are skipped and listed in a synthetic `_xopc_errors.txt` trailer entry.
+ */
+export declare function createZipStream(opts: ZipBuildOptions): Readable;
+export interface PlanDirectoryOpts {
+    /** Sub-path inside the share to start from ('' for whole share). */
+    rootRelativePath: string;
+    /** Maximum entries returned. */
+    maxFileCount: number;
+    /** Maximum aggregate file size. */
+    maxFolderSize: number;
+    /** Whether symlinks are followed (and re-validated against workspace). */
+    followSymlinks: boolean;
+    /** Walk depth cap. */
+    maxDepth: number;
+}
+export declare function planDirectoryFiles(record: ShareRecord, opts: PlanDirectoryOpts): Promise<ZipPlanFile[]>;

package/dist/src/share/share-zip.js

@@ -0,0 +1,303 @@
+import { isPathUnderWorkspace } from "../gateway/workspace-editor-path.js";
+import { relative, resolve } from "node:path";
+import { createReadStream } from "node:fs";
+import { lstat, readdir, realpath, stat } from "node:fs/promises";
+import { Readable, Transform } from "node:stream";
+import { pipeline } from "node:stream/promises";
+import { crc32, createDeflateRaw } from "node:zlib";
+//#region src/share/share-zip.ts
+const SIG_LOCAL = 67324752;
+const SIG_CENTRAL = 33639248;
+const SIG_EOCD = 101010256;
+const SIG_EOCD64 = 101075792;
+const SIG_EOCD64_LOCATOR = 117853008;
+const SIG_DATA_DESCRIPTOR = 134695760;
+const ZIP64_THRESHOLD = 4294967295;
+const COUNT_ZIP64_THRESHOLD = 65535;
+const FLAG_USE_DATA_DESCRIPTOR = 8;
+const FLAG_UTF8 = 2048;
+const METHOD_STORE = 0;
+const METHOD_DEFLATE = 8;
+function dosTime(d) {
+	return d.getHours() << 11 | d.getMinutes() << 5 | Math.floor(d.getSeconds() / 2);
+}
+function dosDate(d) {
+	return d.getFullYear() - 1980 << 9 | d.getMonth() + 1 << 5 | d.getDate();
+}
+function localFileHeader(name, mtimeDate, method) {
+	const buf = Buffer.alloc(30 + name.length);
+	buf.writeUInt32LE(SIG_LOCAL, 0);
+	buf.writeUInt16LE(45, 4);
+	buf.writeUInt16LE(FLAG_USE_DATA_DESCRIPTOR | FLAG_UTF8, 6);
+	buf.writeUInt16LE(method, 8);
+	buf.writeUInt16LE(dosTime(mtimeDate), 10);
+	buf.writeUInt16LE(dosDate(mtimeDate), 12);
+	buf.writeUInt32LE(0, 14);
+	buf.writeUInt32LE(0, 18);
+	buf.writeUInt32LE(0, 22);
+	buf.writeUInt16LE(name.length, 26);
+	buf.writeUInt16LE(0, 28);
+	name.copy(buf, 30);
+	return buf;
+}
+function dataDescriptor(crc, compressed, uncompressed) {
+	if (compressed > ZIP64_THRESHOLD || uncompressed > ZIP64_THRESHOLD) {
+		const buf = Buffer.alloc(24);
+		buf.writeUInt32LE(SIG_DATA_DESCRIPTOR, 0);
+		buf.writeUInt32LE(crc >>> 0, 4);
+		buf.writeBigUInt64LE(BigInt(compressed), 8);
+		buf.writeBigUInt64LE(BigInt(uncompressed), 16);
+		return buf;
+	}
+	const buf = Buffer.alloc(16);
+	buf.writeUInt32LE(SIG_DATA_DESCRIPTOR, 0);
+	buf.writeUInt32LE(crc >>> 0, 4);
+	buf.writeUInt32LE(compressed >>> 0, 8);
+	buf.writeUInt32LE(uncompressed >>> 0, 12);
+	return buf;
+}
+function buildZip64Extra(entry) {
+	const fields = [];
+	const needUncompressed = entry.uncompressedSize > ZIP64_THRESHOLD;
+	const needCompressed = entry.compressedSize > ZIP64_THRESHOLD;
+	const needOffset = entry.offset > ZIP64_THRESHOLD;
+	if (needUncompressed) fields.push(BigInt(entry.uncompressedSize));
+	if (needCompressed) fields.push(BigInt(entry.compressedSize));
+	if (needOffset) fields.push(BigInt(entry.offset));
+	const buf = Buffer.alloc(4 + fields.length * 8);
+	buf.writeUInt16LE(1, 0);
+	buf.writeUInt16LE(fields.length * 8, 2);
+	for (let i = 0; i < fields.length; i++) buf.writeBigUInt64LE(fields[i], 4 + i * 8);
+	return buf;
+}
+function centralHeader(entry) {
+	const extra = entry.compressedSize > ZIP64_THRESHOLD || entry.uncompressedSize > ZIP64_THRESHOLD || entry.offset > ZIP64_THRESHOLD ? buildZip64Extra(entry) : Buffer.alloc(0);
+	const date = new Date(entry.mtime);
+	const buf = Buffer.alloc(46 + entry.name.length + extra.length);
+	buf.writeUInt32LE(SIG_CENTRAL, 0);
+	buf.writeUInt16LE(45, 4);
+	buf.writeUInt16LE(45, 6);
+	buf.writeUInt16LE(FLAG_USE_DATA_DESCRIPTOR | FLAG_UTF8, 8);
+	buf.writeUInt16LE(entry.method, 10);
+	buf.writeUInt16LE(dosTime(date), 12);
+	buf.writeUInt16LE(dosDate(date), 14);
+	buf.writeUInt32LE(entry.crc32 >>> 0, 16);
+	buf.writeUInt32LE(Math.min(entry.compressedSize, 4294967295) >>> 0, 20);
+	buf.writeUInt32LE(Math.min(entry.uncompressedSize, 4294967295) >>> 0, 24);
+	buf.writeUInt16LE(entry.name.length, 28);
+	buf.writeUInt16LE(extra.length, 30);
+	buf.writeUInt16LE(0, 32);
+	buf.writeUInt16LE(0, 34);
+	buf.writeUInt16LE(0, 36);
+	buf.writeUInt32LE(0, 38);
+	buf.writeUInt32LE(Math.min(entry.offset, 4294967295) >>> 0, 42);
+	entry.name.copy(buf, 46);
+	extra.copy(buf, 46 + entry.name.length);
+	return buf;
+}
+function endOfCentralDir(totalEntries, cdSize, cdOffset, needsZip64) {
+	const parts = [];
+	if (needsZip64) {
+		const eocd64 = Buffer.alloc(56);
+		eocd64.writeUInt32LE(SIG_EOCD64, 0);
+		eocd64.writeBigUInt64LE(BigInt(44), 4);
+		eocd64.writeUInt16LE(45, 12);
+		eocd64.writeUInt16LE(45, 14);
+		eocd64.writeUInt32LE(0, 16);
+		eocd64.writeUInt32LE(0, 20);
+		eocd64.writeBigUInt64LE(BigInt(totalEntries), 24);
+		eocd64.writeBigUInt64LE(BigInt(totalEntries), 32);
+		eocd64.writeBigUInt64LE(BigInt(cdSize), 40);
+		eocd64.writeBigUInt64LE(BigInt(cdOffset), 48);
+		parts.push(eocd64);
+		const locator = Buffer.alloc(20);
+		locator.writeUInt32LE(SIG_EOCD64_LOCATOR, 0);
+		locator.writeUInt32LE(0, 4);
+		locator.writeBigUInt64LE(BigInt(cdOffset + cdSize), 8);
+		locator.writeUInt32LE(1, 16);
+		parts.push(locator);
+	}
+	const eocd = Buffer.alloc(22);
+	eocd.writeUInt32LE(SIG_EOCD, 0);
+	eocd.writeUInt16LE(0, 4);
+	eocd.writeUInt16LE(0, 6);
+	eocd.writeUInt16LE(Math.min(totalEntries, 65535), 8);
+	eocd.writeUInt16LE(Math.min(totalEntries, 65535), 10);
+	eocd.writeUInt32LE(Math.min(cdSize, 4294967295) >>> 0, 12);
+	eocd.writeUInt32LE(Math.min(cdOffset, 4294967295) >>> 0, 16);
+	eocd.writeUInt16LE(0, 20);
+	parts.push(eocd);
+	return Buffer.concat(parts);
+}
+const NO_COMPRESS_EXT = new Set([
+	"zip",
+	"gz",
+	"bz2",
+	"xz",
+	"rar",
+	"7z",
+	"png",
+	"jpg",
+	"jpeg",
+	"gif",
+	"webp",
+	"avif",
+	"heic",
+	"mp3",
+	"mp4",
+	"mkv",
+	"mov",
+	"webm",
+	"ogg",
+	"opus",
+	"pdf"
+]);
+function defaultShouldCompress(f) {
+	const ext = f.zipPath.split(".").pop()?.toLowerCase() ?? "";
+	if (NO_COMPRESS_EXT.has(ext)) return false;
+	if (f.size > 32 * 1024 * 1024) return false;
+	return true;
+}
+/**
+* Build a streaming ZIP archive as a Node Readable. Files that fail to read
+* are skipped and listed in a synthetic `_xopc_errors.txt` trailer entry.
+*/
+function createZipStream(opts) {
+	const errors = [];
+	const central = [];
+	const compress = opts.compress ?? defaultShouldCompress;
+	const stream = new Readable({ read() {} });
+	let position = 0;
+	function pushBuf(buf) {
+		position += buf.length;
+		stream.push(buf);
+	}
+	async function emitEntry(file) {
+		const nameBuf = Buffer.from(file.zipPath, "utf8");
+		const method = compress(file) ? METHOD_DEFLATE : METHOD_STORE;
+		const offset = position;
+		const mtime = file.mtimeMs > 0 ? file.mtimeMs : Date.now();
+		pushBuf(localFileHeader(nameBuf, new Date(mtime), method));
+		let uncompressed = 0;
+		let compressed = 0;
+		let crc = 0;
+		const source = createReadStream(file.absolutePath);
+		const counter = new Transform({ transform(chunk, _enc, cb) {
+			const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+			uncompressed += buf.length;
+			crc = crc32(buf, crc);
+			cb(null, buf);
+		} });
+		const sink = new Transform({ transform(chunk, _enc, cb) {
+			const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+			compressed += buf.length;
+			pushBuf(buf);
+			cb();
+		} });
+		if (method === METHOD_DEFLATE) await pipeline(source, counter, createDeflateRaw({ level: 6 }), sink);
+		else await pipeline(source, counter, sink);
+		pushBuf(dataDescriptor(crc, compressed, uncompressed));
+		central.push({
+			name: nameBuf,
+			mtime,
+			crc32: crc,
+			compressedSize: compressed,
+			uncompressedSize: uncompressed,
+			offset,
+			method
+		});
+	}
+	async function emitSyntheticTextEntry(zipPath, content) {
+		const nameBuf = Buffer.from(zipPath, "utf8");
+		const offset = position;
+		const mtime = Date.now();
+		pushBuf(localFileHeader(nameBuf, new Date(mtime), METHOD_STORE));
+		const buf = Buffer.from(content, "utf8");
+		const crc = crc32(buf, 0);
+		pushBuf(buf);
+		pushBuf(dataDescriptor(crc, buf.length, buf.length));
+		central.push({
+			name: nameBuf,
+			mtime,
+			crc32: crc,
+			compressedSize: buf.length,
+			uncompressedSize: buf.length,
+			offset,
+			method: METHOD_STORE
+		});
+	}
+	(async () => {
+		try {
+			for (const file of opts.files) try {
+				await emitEntry(file);
+			} catch (err) {
+				const msg = err instanceof Error ? err.message : String(err);
+				errors.push(`${file.zipPath}: ${msg}`);
+			}
+			if (errors.length > 0) await emitSyntheticTextEntry("_xopc_errors.txt", errors.join("\n"));
+			const cdOffset = position;
+			let needsZip64 = central.length > COUNT_ZIP64_THRESHOLD;
+			for (const entry of central) {
+				if (entry.compressedSize > ZIP64_THRESHOLD || entry.uncompressedSize > ZIP64_THRESHOLD || entry.offset > ZIP64_THRESHOLD) needsZip64 = true;
+				pushBuf(centralHeader(entry));
+			}
+			const cdSize = position - cdOffset;
+			pushBuf(endOfCentralDir(central.length, cdSize, cdOffset, needsZip64));
+			stream.push(null);
+		} catch (err) {
+			stream.destroy(err instanceof Error ? err : new Error(String(err)));
+		}
+	})();
+	return stream;
+}
+async function planDirectoryFiles(record, opts) {
+	if (record.kind !== "directory") return [];
+	const rootAbs = resolve(record.absolutePath, opts.rootRelativePath);
+	const files = [];
+	let totalSize = 0;
+	async function walk(dir, depth) {
+		if (depth > opts.maxDepth) return;
+		if (files.length >= opts.maxFileCount) return;
+		const dirents = await readdir(dir, { withFileTypes: true });
+		for (const dirent of dirents) {
+			if (files.length >= opts.maxFileCount) return;
+			const abs = resolve(dir, dirent.name);
+			const childLstat = await lstat(abs);
+			let stats = childLstat;
+			if (childLstat.isSymbolicLink()) {
+				if (!opts.followSymlinks) continue;
+				const real = await realpath(abs);
+				if (!isPathUnderWorkspace(record.workspaceRoot, real)) continue;
+				if (relative(record.absolutePath, real).startsWith("..")) continue;
+				stats = await stat(abs);
+			}
+			if (stats.isFile()) {
+				totalSize += stats.size;
+				if (totalSize > opts.maxFolderSize) throw new Error("zip exceeds maxFolderSize");
+				const zipRel = relative(rootAbs, abs).split(/[\\/]/).join("/");
+				files.push({
+					zipPath: zipRel,
+					absolutePath: abs,
+					mtimeMs: stats.mtimeMs,
+					size: stats.size
+				});
+			} else if (stats.isDirectory()) await walk(abs, depth + 1);
+		}
+	}
+	const rootLstat = await lstat(rootAbs);
+	if (rootLstat.isDirectory()) await walk(rootAbs, 0);
+	else if (rootLstat.isFile()) {
+		const rootStat = await stat(rootAbs);
+		files.push({
+			zipPath: relative(record.absolutePath, rootAbs).split(/[\\/]/).join("/"),
+			absolutePath: rootAbs,
+			mtimeMs: rootStat.mtimeMs,
+			size: rootStat.size
+		});
+	}
+	return files;
+}
+//#endregion
+export { createZipStream, planDirectoryFiles };
+
+//# sourceMappingURL=share-zip.js.map

package/dist/src/share/share-zip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-zip.js","names":["pipelineAsync","resolvePath","relPathPosix"],"sources":["../../../src/share/share-zip.ts"],"sourcesContent":["import { createReadStream } from 'node:fs';\nimport { stat, readdir, lstat, realpath } from 'node:fs/promises';\nimport { resolve as resolvePath, relative as relPathPosix } from 'node:path';\nimport { Readable, Transform } from 'node:stream';\nimport { pipeline as pipelineAsync } from 'node:stream/promises';\nimport { createDeflateRaw, crc32 } from 'node:zlib';\n\nimport { isPathUnderWorkspace } from '../gateway/workspace-editor-path.js';\nimport type { ShareRecord } from './share-types.js';\n\n// ── Minimal streaming ZIP encoder (ZIP64-aware) ───────────────────────────────\n//\n// Reference: PKWARE APPNOTE 6.3 §4 and §4.5 (ZIP64 extra field).\n// Uses local headers with `FLAG_USE_DATA_DESCRIPTOR` so we can stream entries\n// without seeking back to patch sizes once the file is fully read.\n\nconst SIG_LOCAL = 0x04034b50;\nconst SIG_CENTRAL = 0x02014b50;\nconst SIG_EOCD = 0x06054b50;\nconst SIG_EOCD64 = 0x06064b50;\nconst SIG_EOCD64_LOCATOR = 0x07064b50;\nconst SIG_DATA_DESCRIPTOR = 0x08074b50;\nconst ZIP64_THRESHOLD = 0xffffffff;\nconst COUNT_ZIP64_THRESHOLD = 0xffff;\n\nconst FLAG_USE_DATA_DESCRIPTOR = 0x0008;\nconst FLAG_UTF8 = 0x0800;\nconst METHOD_STORE = 0;\nconst METHOD_DEFLATE = 8;\n\ninterface CentralEntry {\n  name: Buffer;\n  mtime: number;\n  crc32: number;\n  compressedSize: number;\n  uncompressedSize: number;\n  offset: number;\n  method: number;\n}\n\nfunction dosTime(d: Date): number {\n  return (d.getHours() << 11) | (d.getMinutes() << 5) | Math.floor(d.getSeconds() / 2);\n}\n\nfunction dosDate(d: Date): number {\n  return ((d.getFullYear() - 1980) << 9) | ((d.getMonth() + 1) << 5) | d.getDate();\n}\n\nfunction localFileHeader(name: Buffer, mtimeDate: Date, method: number): Buffer {\n  const buf = Buffer.alloc(30 + name.length);\n  buf.writeUInt32LE(SIG_LOCAL, 0);\n  buf.writeUInt16LE(45, 4); // version needed (4.5 for ZIP64)\n  buf.writeUInt16LE(FLAG_USE_DATA_DESCRIPTOR | FLAG_UTF8, 6);\n  buf.writeUInt16LE(method, 8);\n  buf.writeUInt16LE(dosTime(mtimeDate), 10);\n  buf.writeUInt16LE(dosDate(mtimeDate), 12);\n  buf.writeUInt32LE(0, 14); // crc — filled in via data descriptor\n  buf.writeUInt32LE(0, 18); // compressed size — filled in via data descriptor\n  buf.writeUInt32LE(0, 22); // uncompressed size — filled in via data descriptor\n  buf.writeUInt16LE(name.length, 26);\n  buf.writeUInt16LE(0, 28);\n  name.copy(buf, 30);\n  return buf;\n}\n\nfunction dataDescriptor(crc: number, compressed: number, uncompressed: number): Buffer {\n  const needsZip64 = compressed > ZIP64_THRESHOLD || uncompressed > ZIP64_THRESHOLD;\n  if (needsZip64) {\n    const buf = Buffer.alloc(24);\n    buf.writeUInt32LE(SIG_DATA_DESCRIPTOR, 0);\n    buf.writeUInt32LE(crc >>> 0, 4);\n    buf.writeBigUInt64LE(BigInt(compressed), 8);\n    buf.writeBigUInt64LE(BigInt(uncompressed), 16);\n    return buf;\n  }\n  const buf = Buffer.alloc(16);\n  buf.writeUInt32LE(SIG_DATA_DESCRIPTOR, 0);\n  buf.writeUInt32LE(crc >>> 0, 4);\n  buf.writeUInt32LE(compressed >>> 0, 8);\n  buf.writeUInt32LE(uncompressed >>> 0, 12);\n  return buf;\n}\n\nfunction buildZip64Extra(entry: CentralEntry): Buffer {\n  const fields: bigint[] = [];\n  const needUncompressed = entry.uncompressedSize > ZIP64_THRESHOLD;\n  const needCompressed = entry.compressedSize > ZIP64_THRESHOLD;\n  const needOffset = entry.offset > ZIP64_THRESHOLD;\n  if (needUncompressed) fields.push(BigInt(entry.uncompressedSize));\n  if (needCompressed) fields.push(BigInt(entry.compressedSize));\n  if (needOffset) fields.push(BigInt(entry.offset));\n  const buf = Buffer.alloc(4 + fields.length * 8);\n  buf.writeUInt16LE(0x0001, 0);\n  buf.writeUInt16LE(fields.length * 8, 2);\n  for (let i = 0; i < fields.length; i++) buf.writeBigUInt64LE(fields[i], 4 + i * 8);\n  return buf;\n}\n\nfunction centralHeader(entry: CentralEntry): Buffer {\n  const needsZip64 =\n    entry.compressedSize > ZIP64_THRESHOLD ||\n    entry.uncompressedSize > ZIP64_THRESHOLD ||\n    entry.offset > ZIP64_THRESHOLD;\n\n  const extra = needsZip64 ? buildZip64Extra(entry) : Buffer.alloc(0);\n  const date = new Date(entry.mtime);\n  const buf = Buffer.alloc(46 + entry.name.length + extra.length);\n  buf.writeUInt32LE(SIG_CENTRAL, 0);\n  buf.writeUInt16LE(45, 4);\n  buf.writeUInt16LE(45, 6);\n  buf.writeUInt16LE(FLAG_USE_DATA_DESCRIPTOR | FLAG_UTF8, 8);\n  buf.writeUInt16LE(entry.method, 10);\n  buf.writeUInt16LE(dosTime(date), 12);\n  buf.writeUInt16LE(dosDate(date), 14);\n  buf.writeUInt32LE(entry.crc32 >>> 0, 16);\n  buf.writeUInt32LE(Math.min(entry.compressedSize, 0xffffffff) >>> 0, 20);\n  buf.writeUInt32LE(Math.min(entry.uncompressedSize, 0xffffffff) >>> 0, 24);\n  buf.writeUInt16LE(entry.name.length, 28);\n  buf.writeUInt16LE(extra.length, 30);\n  buf.writeUInt16LE(0, 32);\n  buf.writeUInt16LE(0, 34);\n  buf.writeUInt16LE(0, 36);\n  buf.writeUInt32LE(0, 38);\n  buf.writeUInt32LE(Math.min(entry.offset, 0xffffffff) >>> 0, 42);\n  entry.name.copy(buf, 46);\n  extra.copy(buf, 46 + entry.name.length);\n  return buf;\n}\n\nfunction endOfCentralDir(\n  totalEntries: number,\n  cdSize: number,\n  cdOffset: number,\n  needsZip64: boolean,\n): Buffer {\n  const parts: Buffer[] = [];\n\n  if (needsZip64) {\n    const eocd64 = Buffer.alloc(56);\n    eocd64.writeUInt32LE(SIG_EOCD64, 0);\n    eocd64.writeBigUInt64LE(BigInt(44), 4);\n    eocd64.writeUInt16LE(45, 12);\n    eocd64.writeUInt16LE(45, 14);\n    eocd64.writeUInt32LE(0, 16);\n    eocd64.writeUInt32LE(0, 20);\n    eocd64.writeBigUInt64LE(BigInt(totalEntries), 24);\n    eocd64.writeBigUInt64LE(BigInt(totalEntries), 32);\n    eocd64.writeBigUInt64LE(BigInt(cdSize), 40);\n    eocd64.writeBigUInt64LE(BigInt(cdOffset), 48);\n    parts.push(eocd64);\n\n    const locator = Buffer.alloc(20);\n    locator.writeUInt32LE(SIG_EOCD64_LOCATOR, 0);\n    locator.writeUInt32LE(0, 4);\n    locator.writeBigUInt64LE(BigInt(cdOffset + cdSize), 8);\n    locator.writeUInt32LE(1, 16);\n    parts.push(locator);\n  }\n\n  const eocd = Buffer.alloc(22);\n  eocd.writeUInt32LE(SIG_EOCD, 0);\n  eocd.writeUInt16LE(0, 4);\n  eocd.writeUInt16LE(0, 6);\n  eocd.writeUInt16LE(Math.min(totalEntries, 0xffff), 8);\n  eocd.writeUInt16LE(Math.min(totalEntries, 0xffff), 10);\n  eocd.writeUInt32LE(Math.min(cdSize, 0xffffffff) >>> 0, 12);\n  eocd.writeUInt32LE(Math.min(cdOffset, 0xffffffff) >>> 0, 16);\n  eocd.writeUInt16LE(0, 20);\n  parts.push(eocd);\n\n  return Buffer.concat(parts);\n}\n\nexport interface ZipPlanFile {\n  /** Path within the archive (POSIX, no leading /, may contain subdirs). */\n  zipPath: string;\n  /** Absolute filesystem path of the source file. */\n  absolutePath: string;\n  /** Modification time used for the entry header. */\n  mtimeMs: number;\n  /** File size in bytes. */\n  size: number;\n}\n\nexport interface ZipBuildOptions {\n  files: ZipPlanFile[];\n  /** Whether to deflate a given entry. Defaults to a sensible heuristic. */\n  compress?: (f: ZipPlanFile) => boolean;\n}\n\nconst NO_COMPRESS_EXT = new Set([\n  'zip', 'gz', 'bz2', 'xz', 'rar', '7z',\n  'png', 'jpg', 'jpeg', 'gif', 'webp', 'avif', 'heic',\n  'mp3', 'mp4', 'mkv', 'mov', 'webm', 'ogg', 'opus',\n  'pdf',\n]);\n\nfunction defaultShouldCompress(f: ZipPlanFile): boolean {\n  const ext = f.zipPath.split('.').pop()?.toLowerCase() ?? '';\n  if (NO_COMPRESS_EXT.has(ext)) return false;\n  if (f.size > 32 * 1024 * 1024) return false;\n  return true;\n}\n\n/**\n * Build a streaming ZIP archive as a Node Readable. Files that fail to read\n * are skipped and listed in a synthetic `_xopc_errors.txt` trailer entry.\n */\nexport function createZipStream(opts: ZipBuildOptions): Readable {\n  const errors: string[] = [];\n  const central: CentralEntry[] = [];\n  const compress = opts.compress ?? defaultShouldCompress;\n  const stream = new Readable({ read() {} });\n  let position = 0;\n\n  function pushBuf(buf: Buffer): void {\n    position += buf.length;\n    stream.push(buf);\n  }\n\n  async function emitEntry(file: ZipPlanFile): Promise<void> {\n    const nameBuf = Buffer.from(file.zipPath, 'utf8');\n    const method = compress(file) ? METHOD_DEFLATE : METHOD_STORE;\n    const offset = position;\n    const mtime = file.mtimeMs > 0 ? file.mtimeMs : Date.now();\n    pushBuf(localFileHeader(nameBuf, new Date(mtime), method));\n\n    let uncompressed = 0;\n    let compressed = 0;\n    let crc = 0;\n\n    const source = createReadStream(file.absolutePath);\n\n    const counter = new Transform({\n      transform(chunk: Buffer, _enc, cb) {\n        const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk as unknown as ArrayBufferLike);\n        uncompressed += buf.length;\n        crc = crc32(buf, crc);\n        cb(null, buf);\n      },\n    });\n\n    const sink = new Transform({\n      transform(chunk: Buffer, _enc, cb) {\n        const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk as unknown as ArrayBufferLike);\n        compressed += buf.length;\n        pushBuf(buf);\n        cb();\n      },\n    });\n\n    if (method === METHOD_DEFLATE) {\n      await pipelineAsync(source, counter, createDeflateRaw({ level: 6 }), sink);\n    } else {\n      await pipelineAsync(source, counter, sink);\n    }\n\n    pushBuf(dataDescriptor(crc, compressed, uncompressed));\n    central.push({\n      name: nameBuf,\n      mtime,\n      crc32: crc,\n      compressedSize: compressed,\n      uncompressedSize: uncompressed,\n      offset,\n      method,\n    });\n  }\n\n  async function emitSyntheticTextEntry(zipPath: string, content: string): Promise<void> {\n    const nameBuf = Buffer.from(zipPath, 'utf8');\n    const offset = position;\n    const mtime = Date.now();\n    pushBuf(localFileHeader(nameBuf, new Date(mtime), METHOD_STORE));\n    const buf = Buffer.from(content, 'utf8');\n    const crc = crc32(buf, 0);\n    pushBuf(buf);\n    pushBuf(dataDescriptor(crc, buf.length, buf.length));\n    central.push({\n      name: nameBuf,\n      mtime,\n      crc32: crc,\n      compressedSize: buf.length,\n      uncompressedSize: buf.length,\n      offset,\n      method: METHOD_STORE,\n    });\n  }\n\n  (async () => {\n    try {\n      for (const file of opts.files) {\n        try {\n          await emitEntry(file);\n        } catch (err) {\n          const msg = err instanceof Error ? err.message : String(err);\n          errors.push(`${file.zipPath}: ${msg}`);\n        }\n      }\n      if (errors.length > 0) {\n        await emitSyntheticTextEntry('_xopc_errors.txt', errors.join('\\n'));\n      }\n\n      const cdOffset = position;\n      let needsZip64 = central.length > COUNT_ZIP64_THRESHOLD;\n      for (const entry of central) {\n        if (\n          entry.compressedSize > ZIP64_THRESHOLD ||\n          entry.uncompressedSize > ZIP64_THRESHOLD ||\n          entry.offset > ZIP64_THRESHOLD\n        ) {\n          needsZip64 = true;\n        }\n        pushBuf(centralHeader(entry));\n      }\n      const cdSize = position - cdOffset;\n      pushBuf(endOfCentralDir(central.length, cdSize, cdOffset, needsZip64));\n      stream.push(null);\n    } catch (err) {\n      stream.destroy(err instanceof Error ? err : new Error(String(err)));\n    }\n  })();\n\n  return stream;\n}\n\n// ── Planner: walk a directory share into a flat ZipPlanFile list ─────────────\n\nexport interface PlanDirectoryOpts {\n  /** Sub-path inside the share to start from ('' for whole share). */\n  rootRelativePath: string;\n  /** Maximum entries returned. */\n  maxFileCount: number;\n  /** Maximum aggregate file size. */\n  maxFolderSize: number;\n  /** Whether symlinks are followed (and re-validated against workspace). */\n  followSymlinks: boolean;\n  /** Walk depth cap. */\n  maxDepth: number;\n}\n\nexport async function planDirectoryFiles(\n  record: ShareRecord,\n  opts: PlanDirectoryOpts,\n): Promise<ZipPlanFile[]> {\n  if (record.kind !== 'directory') return [];\n  const rootAbs = resolvePath(record.absolutePath, opts.rootRelativePath);\n  const files: ZipPlanFile[] = [];\n  let totalSize = 0;\n\n  async function walk(dir: string, depth: number): Promise<void> {\n    if (depth > opts.maxDepth) return;\n    if (files.length >= opts.maxFileCount) return;\n    const dirents = await readdir(dir, { withFileTypes: true });\n    for (const dirent of dirents) {\n      if (files.length >= opts.maxFileCount) return;\n      const abs = resolvePath(dir, dirent.name);\n      const childLstat = await lstat(abs);\n      let stats = childLstat;\n      if (childLstat.isSymbolicLink()) {\n        if (!opts.followSymlinks) continue;\n        const real = await realpath(abs);\n        if (!isPathUnderWorkspace(record.workspaceRoot, real)) continue;\n        const relToShare = relPathPosix(record.absolutePath, real);\n        if (relToShare.startsWith('..')) continue;\n        stats = await stat(abs);\n      }\n      if (stats.isFile()) {\n        totalSize += stats.size;\n        if (totalSize > opts.maxFolderSize) {\n          throw new Error('zip exceeds maxFolderSize');\n        }\n        const zipRel = relPathPosix(rootAbs, abs).split(/[\\\\/]/).join('/');\n        files.push({\n          zipPath: zipRel,\n          absolutePath: abs,\n          mtimeMs: stats.mtimeMs,\n          size: stats.size,\n        });\n      } else if (stats.isDirectory()) {\n        await walk(abs, depth + 1);\n      }\n    }\n  }\n\n  const rootLstat = await lstat(rootAbs);\n  if (rootLstat.isDirectory()) {\n    await walk(rootAbs, 0);\n  } else if (rootLstat.isFile()) {\n    const rootStat = await stat(rootAbs);\n    files.push({\n      zipPath: relPathPosix(record.absolutePath, rootAbs).split(/[\\\\/]/).join('/'),\n      absolutePath: rootAbs,\n      mtimeMs: rootStat.mtimeMs,\n      size: rootStat.size,\n    });\n  }\n  return files;\n}\n"],"mappings":";;;;;;;;AAgBA,MAAM,YAAY;AAClB,MAAM,cAAc;AACpB,MAAM,WAAW;AACjB,MAAM,aAAa;AACnB,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAC5B,MAAM,kBAAkB;AACxB,MAAM,wBAAwB;AAE9B,MAAM,2BAA2B;AACjC,MAAM,YAAY;AAClB,MAAM,eAAe;AACrB,MAAM,iBAAiB;AAYvB,SAAS,QAAQ,GAAiB;AAChC,QAAQ,EAAE,UAAU,IAAI,KAAO,EAAE,YAAY,IAAI,IAAK,KAAK,MAAM,EAAE,YAAY,GAAG,EAAE;;AAGtF,SAAS,QAAQ,GAAiB;AAChC,QAAS,EAAE,aAAa,GAAG,QAAS,IAAO,EAAE,UAAU,GAAG,KAAM,IAAK,EAAE,SAAS;;AAGlF,SAAS,gBAAgB,MAAc,WAAiB,QAAwB;CAC9E,MAAM,MAAM,OAAO,MAAM,KAAK,KAAK,OAAO;AAC1C,KAAI,cAAc,WAAW,EAAE;AAC/B,KAAI,cAAc,IAAI,EAAE;AACxB,KAAI,cAAc,2BAA2B,WAAW,EAAE;AAC1D,KAAI,cAAc,QAAQ,EAAE;AAC5B,KAAI,cAAc,QAAQ,UAAU,EAAE,GAAG;AACzC,KAAI,cAAc,QAAQ,UAAU,EAAE,GAAG;AACzC,KAAI,cAAc,GAAG,GAAG;AACxB,KAAI,cAAc,GAAG,GAAG;AACxB,KAAI,cAAc,GAAG,GAAG;AACxB,KAAI,cAAc,KAAK,QAAQ,GAAG;AAClC,KAAI,cAAc,GAAG,GAAG;AACxB,MAAK,KAAK,KAAK,GAAG;AAClB,QAAO;;AAGT,SAAS,eAAe,KAAa,YAAoB,cAA8B;AAErF,KADmB,aAAa,mBAAmB,eAAe,iBAClD;EACd,MAAM,MAAM,OAAO,MAAM,GAAG;AAC5B,MAAI,cAAc,qBAAqB,EAAE;AACzC,MAAI,cAAc,QAAQ,GAAG,EAAE;AAC/B,MAAI,iBAAiB,OAAO,WAAW,EAAE,EAAE;AAC3C,MAAI,iBAAiB,OAAO,aAAa,EAAE,GAAG;AAC9C,SAAO;;CAET,MAAM,MAAM,OAAO,MAAM,GAAG;AAC5B,KAAI,cAAc,qBAAqB,EAAE;AACzC,KAAI,cAAc,QAAQ,GAAG,EAAE;AAC/B,KAAI,cAAc,eAAe,GAAG,EAAE;AACtC,KAAI,cAAc,iBAAiB,GAAG,GAAG;AACzC,QAAO;;AAGT,SAAS,gBAAgB,OAA6B;CACpD,MAAM,SAAmB,EAAE;CAC3B,MAAM,mBAAmB,MAAM,mBAAmB;CAClD,MAAM,iBAAiB,MAAM,iBAAiB;CAC9C,MAAM,aAAa,MAAM,SAAS;AAClC,KAAI,iBAAkB,QAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AACjE,KAAI,eAAgB,QAAO,KAAK,OAAO,MAAM,eAAe,CAAC;AAC7D,KAAI,WAAY,QAAO,KAAK,OAAO,MAAM,OAAO,CAAC;CACjD,MAAM,MAAM,OAAO,MAAM,IAAI,OAAO,SAAS,EAAE;AAC/C,KAAI,cAAc,GAAQ,EAAE;AAC5B,KAAI,cAAc,OAAO,SAAS,GAAG,EAAE;AACvC,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,IAAK,KAAI,iBAAiB,OAAO,IAAI,IAAI,IAAI,EAAE;AAClF,QAAO;;AAGT,SAAS,cAAc,OAA6B;CAMlD,MAAM,QAJJ,MAAM,iBAAiB,mBACvB,MAAM,mBAAmB,mBACzB,MAAM,SAAS,kBAEU,gBAAgB,MAAM,GAAG,OAAO,MAAM,EAAE;CACnE,MAAM,OAAO,IAAI,KAAK,MAAM,MAAM;CAClC,MAAM,MAAM,OAAO,MAAM,KAAK,MAAM,KAAK,SAAS,MAAM,OAAO;AAC/D,KAAI,cAAc,aAAa,EAAE;AACjC,KAAI,cAAc,IAAI,EAAE;AACxB,KAAI,cAAc,IAAI,EAAE;AACxB,KAAI,cAAc,2BAA2B,WAAW,EAAE;AAC1D,KAAI,cAAc,MAAM,QAAQ,GAAG;AACnC,KAAI,cAAc,QAAQ,KAAK,EAAE,GAAG;AACpC,KAAI,cAAc,QAAQ,KAAK,EAAE,GAAG;AACpC,KAAI,cAAc,MAAM,UAAU,GAAG,GAAG;AACxC,KAAI,cAAc,KAAK,IAAI,MAAM,gBAAgB,WAAW,KAAK,GAAG,GAAG;AACvE,KAAI,cAAc,KAAK,IAAI,MAAM,kBAAkB,WAAW,KAAK,GAAG,GAAG;AACzE,KAAI,cAAc,MAAM,KAAK,QAAQ,GAAG;AACxC,KAAI,cAAc,MAAM,QAAQ,GAAG;AACnC,KAAI,cAAc,GAAG,GAAG;AACxB,KAAI,cAAc,GAAG,GAAG;AACxB,KAAI,cAAc,GAAG,GAAG;AACxB,KAAI,cAAc,GAAG,GAAG;AACxB,KAAI,cAAc,KAAK,IAAI,MAAM,QAAQ,WAAW,KAAK,GAAG,GAAG;AAC/D,OAAM,KAAK,KAAK,KAAK,GAAG;AACxB,OAAM,KAAK,KAAK,KAAK,MAAM,KAAK,OAAO;AACvC,QAAO;;AAGT,SAAS,gBACP,cACA,QACA,UACA,YACQ;CACR,MAAM,QAAkB,EAAE;AAE1B,KAAI,YAAY;EACd,MAAM,SAAS,OAAO,MAAM,GAAG;AAC/B,SAAO,cAAc,YAAY,EAAE;AACnC,SAAO,iBAAiB,OAAO,GAAG,EAAE,EAAE;AACtC,SAAO,cAAc,IAAI,GAAG;AAC5B,SAAO,cAAc,IAAI,GAAG;AAC5B,SAAO,cAAc,GAAG,GAAG;AAC3B,SAAO,cAAc,GAAG,GAAG;AAC3B,SAAO,iBAAiB,OAAO,aAAa,EAAE,GAAG;AACjD,SAAO,iBAAiB,OAAO,aAAa,EAAE,GAAG;AACjD,SAAO,iBAAiB,OAAO,OAAO,EAAE,GAAG;AAC3C,SAAO,iBAAiB,OAAO,SAAS,EAAE,GAAG;AAC7C,QAAM,KAAK,OAAO;EAElB,MAAM,UAAU,OAAO,MAAM,GAAG;AAChC,UAAQ,cAAc,oBAAoB,EAAE;AAC5C,UAAQ,cAAc,GAAG,EAAE;AAC3B,UAAQ,iBAAiB,OAAO,WAAW,OAAO,EAAE,EAAE;AACtD,UAAQ,cAAc,GAAG,GAAG;AAC5B,QAAM,KAAK,QAAQ;;CAGrB,MAAM,OAAO,OAAO,MAAM,GAAG;AAC7B,MAAK,cAAc,UAAU,EAAE;AAC/B,MAAK,cAAc,GAAG,EAAE;AACxB,MAAK,cAAc,GAAG,EAAE;AACxB,MAAK,cAAc,KAAK,IAAI,cAAc,MAAO,EAAE,EAAE;AACrD,MAAK,cAAc,KAAK,IAAI,cAAc,MAAO,EAAE,GAAG;AACtD,MAAK,cAAc,KAAK,IAAI,QAAQ,WAAW,KAAK,GAAG,GAAG;AAC1D,MAAK,cAAc,KAAK,IAAI,UAAU,WAAW,KAAK,GAAG,GAAG;AAC5D,MAAK,cAAc,GAAG,GAAG;AACzB,OAAM,KAAK,KAAK;AAEhB,QAAO,OAAO,OAAO,MAAM;;AAoB7B,MAAM,kBAAkB,IAAI,IAAI;CAC9B;CAAO;CAAM;CAAO;CAAM;CAAO;CACjC;CAAO;CAAO;CAAQ;CAAO;CAAQ;CAAQ;CAC7C;CAAO;CAAO;CAAO;CAAO;CAAQ;CAAO;CAC3C;CACD,CAAC;AAEF,SAAS,sBAAsB,GAAyB;CACtD,MAAM,MAAM,EAAE,QAAQ,MAAM,IAAI,CAAC,KAAK,EAAE,aAAa,IAAI;AACzD,KAAI,gBAAgB,IAAI,IAAI,CAAE,QAAO;AACrC,KAAI,EAAE,OAAO,KAAK,OAAO,KAAM,QAAO;AACtC,QAAO;;;;;;AAOT,SAAgB,gBAAgB,MAAiC;CAC/D,MAAM,SAAmB,EAAE;CAC3B,MAAM,UAA0B,EAAE;CAClC,MAAM,WAAW,KAAK,YAAY;CAClC,MAAM,SAAS,IAAI,SAAS,EAAE,OAAO,IAAI,CAAC;CAC1C,IAAI,WAAW;CAEf,SAAS,QAAQ,KAAmB;AAClC,cAAY,IAAI;AAChB,SAAO,KAAK,IAAI;;CAGlB,eAAe,UAAU,MAAkC;EACzD,MAAM,UAAU,OAAO,KAAK,KAAK,SAAS,OAAO;EACjD,MAAM,SAAS,SAAS,KAAK,GAAG,iBAAiB;EACjD,MAAM,SAAS;EACf,MAAM,QAAQ,KAAK,UAAU,IAAI,KAAK,UAAU,KAAK,KAAK;AAC1D,UAAQ,gBAAgB,SAAS,IAAI,KAAK,MAAM,EAAE,OAAO,CAAC;EAE1D,IAAI,eAAe;EACnB,IAAI,aAAa;EACjB,IAAI,MAAM;EAEV,MAAM,SAAS,iBAAiB,KAAK,aAAa;EAElD,MAAM,UAAU,IAAI,UAAU,EAC5B,UAAU,OAAe,MAAM,IAAI;GACjC,MAAM,MAAM,OAAO,SAAS,MAAM,GAAG,QAAQ,OAAO,KAAK,MAAoC;AAC7F,mBAAgB,IAAI;AACpB,SAAM,MAAM,KAAK,IAAI;AACrB,MAAG,MAAM,IAAI;KAEhB,CAAC;EAEF,MAAM,OAAO,IAAI,UAAU,EACzB,UAAU,OAAe,MAAM,IAAI;GACjC,MAAM,MAAM,OAAO,SAAS,MAAM,GAAG,QAAQ,OAAO,KAAK,MAAoC;AAC7F,iBAAc,IAAI;AAClB,WAAQ,IAAI;AACZ,OAAI;KAEP,CAAC;AAEF,MAAI,WAAW,eACb,OAAMA,SAAc,QAAQ,SAAS,iBAAiB,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK;MAE1E,OAAMA,SAAc,QAAQ,SAAS,KAAK;AAG5C,UAAQ,eAAe,KAAK,YAAY,aAAa,CAAC;AACtD,UAAQ,KAAK;GACX,MAAM;GACN;GACA,OAAO;GACP,gBAAgB;GAChB,kBAAkB;GAClB;GACA;GACD,CAAC;;CAGJ,eAAe,uBAAuB,SAAiB,SAAgC;EACrF,MAAM,UAAU,OAAO,KAAK,SAAS,OAAO;EAC5C,MAAM,SAAS;EACf,MAAM,QAAQ,KAAK,KAAK;AACxB,UAAQ,gBAAgB,SAAS,IAAI,KAAK,MAAM,EAAE,aAAa,CAAC;EAChE,MAAM,MAAM,OAAO,KAAK,SAAS,OAAO;EACxC,MAAM,MAAM,MAAM,KAAK,EAAE;AACzB,UAAQ,IAAI;AACZ,UAAQ,eAAe,KAAK,IAAI,QAAQ,IAAI,OAAO,CAAC;AACpD,UAAQ,KAAK;GACX,MAAM;GACN;GACA,OAAO;GACP,gBAAgB,IAAI;GACpB,kBAAkB,IAAI;GACtB;GACA,QAAQ;GACT,CAAC;;AAGJ,EAAC,YAAY;AACX,MAAI;AACF,QAAK,MAAM,QAAQ,KAAK,MACtB,KAAI;AACF,UAAM,UAAU,KAAK;YACd,KAAK;IACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,WAAO,KAAK,GAAG,KAAK,QAAQ,IAAI,MAAM;;AAG1C,OAAI,OAAO,SAAS,EAClB,OAAM,uBAAuB,oBAAoB,OAAO,KAAK,KAAK,CAAC;GAGrE,MAAM,WAAW;GACjB,IAAI,aAAa,QAAQ,SAAS;AAClC,QAAK,MAAM,SAAS,SAAS;AAC3B,QACE,MAAM,iBAAiB,mBACvB,MAAM,mBAAmB,mBACzB,MAAM,SAAS,gBAEf,cAAa;AAEf,YAAQ,cAAc,MAAM,CAAC;;GAE/B,MAAM,SAAS,WAAW;AAC1B,WAAQ,gBAAgB,QAAQ,QAAQ,QAAQ,UAAU,WAAW,CAAC;AACtE,UAAO,KAAK,KAAK;WACV,KAAK;AACZ,UAAO,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,IAAI,CAAC,CAAC;;KAEnE;AAEJ,QAAO;;AAkBT,eAAsB,mBACpB,QACA,MACwB;AACxB,KAAI,OAAO,SAAS,YAAa,QAAO,EAAE;CAC1C,MAAM,UAAUC,QAAY,OAAO,cAAc,KAAK,iBAAiB;CACvE,MAAM,QAAuB,EAAE;CAC/B,IAAI,YAAY;CAEhB,eAAe,KAAK,KAAa,OAA8B;AAC7D,MAAI,QAAQ,KAAK,SAAU;AAC3B,MAAI,MAAM,UAAU,KAAK,aAAc;EACvC,MAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,MAAM,CAAC;AAC3D,OAAK,MAAM,UAAU,SAAS;AAC5B,OAAI,MAAM,UAAU,KAAK,aAAc;GACvC,MAAM,MAAMA,QAAY,KAAK,OAAO,KAAK;GACzC,MAAM,aAAa,MAAM,MAAM,IAAI;GACnC,IAAI,QAAQ;AACZ,OAAI,WAAW,gBAAgB,EAAE;AAC/B,QAAI,CAAC,KAAK,eAAgB;IAC1B,MAAM,OAAO,MAAM,SAAS,IAAI;AAChC,QAAI,CAAC,qBAAqB,OAAO,eAAe,KAAK,CAAE;AAEvD,QADmBC,SAAa,OAAO,cAAc,KACvC,CAAC,WAAW,KAAK,CAAE;AACjC,YAAQ,MAAM,KAAK,IAAI;;AAEzB,OAAI,MAAM,QAAQ,EAAE;AAClB,iBAAa,MAAM;AACnB,QAAI,YAAY,KAAK,cACnB,OAAM,IAAI,MAAM,4BAA4B;IAE9C,MAAM,SAASA,SAAa,SAAS,IAAI,CAAC,MAAM,QAAQ,CAAC,KAAK,IAAI;AAClE,UAAM,KAAK;KACT,SAAS;KACT,cAAc;KACd,SAAS,MAAM;KACf,MAAM,MAAM;KACb,CAAC;cACO,MAAM,aAAa,CAC5B,OAAM,KAAK,KAAK,QAAQ,EAAE;;;CAKhC,MAAM,YAAY,MAAM,MAAM,QAAQ;AACtC,KAAI,UAAU,aAAa,CACzB,OAAM,KAAK,SAAS,EAAE;UACb,UAAU,QAAQ,EAAE;EAC7B,MAAM,WAAW,MAAM,KAAK,QAAQ;AACpC,QAAM,KAAK;GACT,SAASA,SAAa,OAAO,cAAc,QAAQ,CAAC,MAAM,QAAQ,CAAC,KAAK,IAAI;GAC5E,cAAc;GACd,SAAS,SAAS;GAClB,MAAM,SAAS;GAChB,CAAC;;AAEJ,QAAO"}

package/dist/src/share/site-proxy.d.ts

@@ -0,0 +1,35 @@
+import type { IncomingMessage } from 'node:http';
+import type { Socket } from 'node:net';
+import type { SiteShareRecord } from './site-share-types.js';
+import type { SiteShareStore } from './site-share-store.js';
+export interface ProxyRequestContext {
+    /** Path inside the share to forward (no leading basePrefix). */
+    innerPath: string;
+    /** Path prefix the share is mounted under (used for Set-Cookie/Location rewrite). For subdomain mode use ''. */
+    basePrefix: string;
+    /** Client IP for forwarded headers and audit. */
+    clientIp: string;
+    /** Full request URL (for forwarded proto). */
+    originalUrl: URL;
+    /** Whether the request reached us via HTTPS at the edge. */
+    forwardedProto: 'http' | 'https';
+}
+export interface ProxyResult {
+    response: Response;
+}
+/**
+ * Forward an HTTP request to the upstream and return a streaming Response.
+ * Handles header filtering, forwarded headers, Set-Cookie / Location rewriting,
+ * and a per-request timeout.
+ */
+export declare function forwardHttpRequest(record: SiteShareRecord, store: SiteShareStore, req: Request, ctx: ProxyRequestContext): Promise<ProxyResult>;
+export declare function handleProxyWebSocketUpgrade(args: {
+    record: SiteShareRecord;
+    store: SiteShareStore;
+    req: IncomingMessage;
+    socket: Socket;
+    head: Buffer;
+    innerPath: string;
+    basePrefix: string;
+    clientIp: string;
+}): void;