@yu_robotics/remote-cli 1.6.169 → 1.6.173

package/dist/utils/ImageDelivery.js

@@ -0,0 +1,270 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ImageDelivery = exports.ImageReadPool = exports.IMAGE_DELIVERY_LIMITS = void 0;
+const crypto_1 = require("crypto");
+const LocalImageDetector_1 = require("./LocalImageDetector");
+const ImageValidation_1 = require("./ImageValidation");
+exports.IMAGE_DELIVERY_LIMITS = {
+    images: 8,
+    candidates: 32,
+    pathLength: 4096,
+    scanLength: 512 * 1024,
+    readTimeoutMs: 15_000,
+    drainTimeoutMs: 30_000,
+};
+/** Bound queued read jobs; the filesystem reader separately owns its actual I/O permits. */
+class ImageReadPool {
+    concurrency;
+    queuedLimit;
+    active = 0;
+    queue = [];
+    constructor(concurrency = 4, queuedLimit = 32) {
+        this.concurrency = concurrency;
+        this.queuedLimit = queuedLimit;
+    }
+    submit(run) {
+        if (this.active >= this.concurrency && this.queue.length >= this.queuedLimit)
+            return undefined;
+        const job = { run, started: false };
+        this.queue.push(job);
+        this.pump();
+        return () => {
+            if (job.started)
+                return;
+            const index = this.queue.indexOf(job);
+            if (index >= 0)
+                this.queue.splice(index, 1);
+            job.run = undefined;
+        };
+    }
+    pump() {
+        while (this.active < this.concurrency && this.queue.length) {
+            const job = this.queue.shift();
+            const run = job.run;
+            job.run = undefined;
+            if (!run)
+                continue;
+            job.started = true;
+            this.active++;
+            // Collector timeout does not release this job's permit. The filesystem
+            // reader also retains its I/O permit if its own deadline wins first.
+            void Promise.resolve().then(run).catch(() => { }).finally(() => {
+                this.active--;
+                this.pump();
+            });
+        }
+    }
+}
+exports.ImageReadPool = ImageReadPool;
+const sharedReads = new ImageReadPool();
+/** One logical reply owns deduplication and accepted asynchronous image reads. */
+class ImageDelivery {
+    options;
+    attempts = 0;
+    omitted = 0;
+    closed = false;
+    cancelled = false;
+    hashes = new Set();
+    pending = new Set();
+    reasons = new Set();
+    streamText = '';
+    streamEligible = () => true;
+    streamPaths = new Set();
+    scanLimited = false;
+    constructor(options) {
+        this.options = options;
+    }
+    offerImage(image, eligible = () => true) {
+        if (!this.admit(eligible))
+            return;
+        this.deliver(image, eligible);
+    }
+    offerText(text, eligible = () => true) {
+        if (typeof text !== 'string' || !text || !this.current(eligible) || this.closed)
+            return;
+        // Do not retain transcripts or allocate an unbounded candidate collection.
+        const bounded = text.slice(0, exports.IMAGE_DELIVERY_LIMITS.scanLength);
+        if (text.length > bounded.length)
+            this.scanLimited = true;
+        const paths = (0, LocalImageDetector_1.extractLocalImagePaths)(bounded);
+        for (const filePath of paths)
+            this.offerFile(filePath, eligible);
+    }
+    /** Keep a bounded window, preserving a path-sized overlap at chunk boundaries. */
+    offerStream(chunk, eligible = () => true) {
+        if (!chunk || this.closed || !this.current(eligible))
+            return;
+        if (!this.streamEligible())
+            this.resetStream();
+        this.streamEligible = eligible;
+        let offset = 0;
+        while (offset < chunk.length) {
+            const take = Math.min(exports.IMAGE_DELIVERY_LIMITS.scanLength - this.streamText.length, chunk.length - offset);
+            this.streamText += chunk.slice(offset, offset + take);
+            offset += take;
+            if (this.streamText.length === exports.IMAGE_DELIVERY_LIMITS.scanLength) {
+                this.scanStream();
+                this.streamText = this.streamText.slice(-exports.IMAGE_DELIVERY_LIMITS.pathLength);
+            }
+        }
+    }
+    flushStream() {
+        this.scanStream();
+        this.streamText = '';
+    }
+    resetStream() {
+        this.streamText = '';
+        this.streamPaths.clear();
+    }
+    scanStream() {
+        if (!this.current(this.streamEligible))
+            return;
+        for (const filePath of (0, LocalImageDetector_1.extractLocalImagePaths)(this.streamText)) {
+            if (this.streamPaths.has(filePath))
+                continue;
+            if (this.streamPaths.size < exports.IMAGE_DELIVERY_LIMITS.candidates)
+                this.streamPaths.add(filePath);
+            this.offerFile(filePath, this.streamEligible);
+        }
+    }
+    offerFile(filePath, eligible = () => true) {
+        if (!this.admit(eligible))
+            return;
+        if (typeof filePath !== 'string' || !filePath || filePath.length > exports.IMAGE_DELIVERY_LIMITS.pathLength) {
+            this.omit('invalid image reference');
+            return;
+        }
+        let live = true;
+        let resolve;
+        let cancelQueued;
+        const done = new Promise(complete => { resolve = complete; });
+        const settle = () => {
+            if (!live)
+                return;
+            live = false;
+            clearTimeout(timer);
+            this.pending.delete(pending);
+            resolve();
+        };
+        const pending = { done, stop: () => { cancelQueued?.(); settle(); } };
+        const timer = setTimeout(() => {
+            if (live && this.current(eligible))
+                this.omit('image read timed out');
+            pending.stop();
+        }, this.options.readTimeoutMs ?? exports.IMAGE_DELIVERY_LIMITS.readTimeoutMs);
+        this.pending.add(pending);
+        cancelQueued = (this.options.pool ?? sharedReads).submit(async () => {
+            try {
+                if (!live || !this.current(eligible))
+                    return;
+                const image = await this.options.readFile(filePath);
+                if (!live || !this.current(eligible))
+                    return;
+                if (image)
+                    this.deliver({ type: 'image', data: image.data, mimeType: image.mimeType }, eligible);
+                else
+                    this.omit('image unavailable or outside the allowed directories');
+            }
+            catch {
+                if (live && this.current(eligible))
+                    this.omit('image could not be read');
+            }
+            finally {
+                settle();
+            }
+        });
+        if (!cancelQueued) {
+            this.omit('image read capacity reached');
+            settle();
+        }
+    }
+    /** Drain a fixed prefix without closing admission for a managed continuation. */
+    async drain() {
+        const prefix = [...this.pending];
+        if (!prefix.length)
+            return;
+        let timer;
+        await Promise.race([
+            Promise.all(prefix.map(job => job.done)),
+            new Promise(resolve => {
+                timer = setTimeout(() => {
+                    for (const job of prefix) {
+                        if (!this.pending.has(job))
+                            continue;
+                        if (this.current())
+                            this.omit('image delivery timed out');
+                        job.stop();
+                    }
+                    resolve();
+                }, this.options.drainTimeoutMs ?? exports.IMAGE_DELIVERY_LIMITS.drainTimeoutMs);
+            }),
+        ]);
+        if (timer)
+            clearTimeout(timer);
+    }
+    async finish() {
+        this.flushStream();
+        this.closed = true;
+        await this.drain();
+        if (this.omitted && this.current()) {
+            this.options.notice(`\nImages omitted: ${this.omitted} (${[...this.reasons].join('; ')}).\n`);
+        }
+        if (this.scanLimited && this.current()) {
+            this.options.notice('\nImage link scanning reached its text limit; some references may not have been inspected.\n');
+        }
+        this.cancel();
+    }
+    cancel() {
+        this.closed = true;
+        this.cancelled = true;
+        this.invalidatePending();
+    }
+    /** Discard disconnected work while allowing newly emitted images after recovery. */
+    invalidatePending() {
+        this.resetStream();
+        for (const job of [...this.pending])
+            job.stop();
+    }
+    current(eligible = () => true) {
+        return !this.cancelled && this.options.isCurrent() && eligible();
+    }
+    admit(eligible) {
+        if (this.closed || !this.current(eligible))
+            return false;
+        if (this.attempts >= exports.IMAGE_DELIVERY_LIMITS.candidates) {
+            this.omit('image candidate limit reached');
+            return false;
+        }
+        this.attempts++;
+        return true;
+    }
+    deliver(candidate, eligible) {
+        if (!this.current(eligible))
+            return;
+        const image = (0, ImageValidation_1.validateImageBlock)(candidate);
+        if (!image) {
+            this.omit('invalid or oversized image');
+            return;
+        }
+        const hash = (0, crypto_1.createHash)('sha256').update(Buffer.from(image.data, 'base64')).digest('hex');
+        if (this.hashes.has(hash))
+            return;
+        if (this.hashes.size >= exports.IMAGE_DELIVERY_LIMITS.images) {
+            this.omit('image count limit reached');
+            return;
+        }
+        try {
+            this.options.publish(image);
+            this.hashes.add(hash);
+        }
+        catch {
+            this.omit('image could not be sent');
+        }
+    }
+    omit(reason) {
+        this.omitted = Math.min(Number.MAX_SAFE_INTEGER, this.omitted + 1);
+        this.reasons.add(reason);
+    }
+}
+exports.ImageDelivery = ImageDelivery;
+//# sourceMappingURL=ImageDelivery.js.map

package/dist/utils/ImageDelivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ImageDelivery.js","sourceRoot":"","sources":["../../src/utils/ImageDelivery.ts"],"names":[],"mappings":";;;AAAA,mCAAoC;AAEpC,6DAA8D;AAC9D,uDAAuD;AAE1C,QAAA,qBAAqB,GAAG;IACnC,MAAM,EAAE,CAAC;IACT,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,GAAG,GAAG,IAAI;IACtB,aAAa,EAAE,MAAM;IACrB,cAAc,EAAE,MAAM;CACd,CAAC;AAOX,4FAA4F;AAC5F,MAAa,aAAa;IAIK;IAAkC;IAHvD,MAAM,GAAG,CAAC,CAAC;IACF,KAAK,GAAc,EAAE,CAAC;IAEvC,YAA6B,cAAc,CAAC,EAAmB,cAAc,EAAE;QAAlD,gBAAW,GAAX,WAAW,CAAI;QAAmB,gBAAW,GAAX,WAAW,CAAK;IAAG,CAAC;IAEnF,MAAM,CAAC,GAAwB;QAC7B,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QAC/F,MAAM,GAAG,GAAY,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,GAAG,EAAE;YACV,IAAI,GAAG,CAAC,OAAO;gBAAE,OAAO;YACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,KAAK,IAAI,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5C,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC;QACtB,CAAC,CAAC;IACJ,CAAC;IAEO,IAAI;QACV,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAG,CAAC;YAChC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;YACpB,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC;YACpB,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,uEAAuE;YACvE,qEAAqE;YACrE,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAnCD,sCAmCC;AAED,MAAM,WAAW,GAAG,IAAI,aAAa,EAAE,CAAC;AAiBxC,kFAAkF;AAClF,MAAa,aAAa;IAaK;IAZrB,QAAQ,GAAG,CAAC,CAAC;IACb,OAAO,GAAG,CAAC,CAAC;IACZ,MAAM,GAAG,KAAK,CAAC;IACf,SAAS,GAAG,KAAK,CAAC;IACT,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3B,OAAO,GAAG,IAAI,GAAG,EAAe,CAAC;IACjC,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,UAAU,GAAG,EAAE,CAAC;IAChB,cAAc,GAAkB,GAAG,EAAE,CAAC,IAAI,CAAC;IAClC,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,WAAW,GAAG,KAAK,CAAC;IAE5B,YAA6B,OAA6B;QAA7B,YAAO,GAAP,OAAO,CAAsB;IAAG,CAAC;IAE9D,UAAU,CAAC,KAAiB,EAAE,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI;QACjD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO;QAClC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,SAAS,CAAC,IAAa,EAAE,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI;QAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxF,2EAA2E;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,6BAAqB,CAAC,UAAU,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;YAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAA,2CAAsB,EAAC,OAAO,CAAC,CAAC;QAC9C,KAAK,MAAM,QAAQ,IAAI,KAAK;YAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnE,CAAC;IAED,kFAAkF;IAClF,WAAW,CAAC,KAAa,EAAE,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI;QAC9C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO;QAC7D,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;YAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC;QAC/B,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,6BAAqB,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;YACxG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;YACtD,MAAM,IAAI,IAAI,CAAC;YACf,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,6BAAqB,CAAC,UAAU,EAAE,CAAC;gBAChE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,6BAAqB,CAAC,UAAU,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;IACH,CAAC;IAED,WAAW;QACT,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;IACvB,CAAC;IAED,WAAW;QACT,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;YAAE,OAAO;QAC/C,KAAK,MAAM,QAAQ,IAAI,IAAA,2CAAsB,EAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC7C,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,6BAAqB,CAAC,UAAU;gBAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7F,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,SAAS,CAAC,QAAgB,EAAE,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI;QAC/C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO;QAClC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,6BAAqB,CAAC,UAAU,EAAE,CAAC;YACpG,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,IAAI,OAAoB,CAAC;QACzB,IAAI,YAAsC,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,QAAQ,CAAC,EAAE,GAAG,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,IAAI,GAAG,KAAK,CAAC;YACb,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,OAAO,GAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,6BAAqB,CAAC,aAAa,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1B,YAAY,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAClE,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;oBAAE,OAAO;gBAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACpD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;oBAAE,OAAO;gBAC7C,IAAI,KAAK;oBAAE,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;;oBAC5F,IAAI,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;YACzE,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC3E,CAAC;oBAAS,CAAC;gBAAC,MAAM,EAAE,CAAC;YAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YACzC,MAAM,EAAE,CAAC;QACX,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,KAAK;QACT,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO;QAC3B,IAAI,KAAgD,CAAC;QACrD,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;gBAC1B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;wBACzB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;4BAAE,SAAS;wBACrC,IAAI,IAAI,CAAC,OAAO,EAAE;4BAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;wBAC1D,GAAG,CAAC,IAAI,EAAE,CAAC;oBACb,CAAC;oBACD,OAAO,EAAE,CAAC;gBACZ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,6BAAqB,CAAC,cAAc,CAAC,CAAC;YAC1E,CAAC,CAAC;SACH,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,OAAO,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,8FAA8F,CAAC,CAAC;QACtH,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED,oFAAoF;IACpF,iBAAiB;QACf,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IAClD,CAAC;IAEO,OAAO,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI;QACnC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,QAAQ,EAAE,CAAC;IACnE,CAAC;IAEO,KAAK,CAAC,QAAuB;QACnC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,IAAI,IAAI,CAAC,QAAQ,IAAI,6BAAqB,CAAC,UAAU,EAAE,CAAC;YACtD,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,OAAO,CAAC,SAAqB,EAAE,QAAuB;QAC5D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO;QACpC,MAAM,KAAK,GAAG,IAAA,oCAAkB,EAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAChE,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1F,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAClC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,6BAAqB,CAAC,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACzG,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAAC,CAAC;IACnD,CAAC;IAEO,IAAI,CAAC,MAAc;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;CACF;AAtLD,sCAsLC"}

package/dist/utils/ImageValidation.d.ts

@@ -0,0 +1,11 @@
+import type { ImageBlock } from '../types';
+export declare const MAX_IMAGE_BYTES: number;
+/** Identify supported signatures, without claiming to decode or sanitize the image. */
+export declare function sniffImageMime(bytes: Buffer): string | null;
+/**
+ * Accept only canonical, padded base64 within the decoded size limit. The declared
+ * MIME must agree with the signature (including common BMP/ICO/JPEG aliases).
+ * Return only wire fields, with MIME derived from bytes; never forward metadata.
+ */
+export declare function validateImageBlock(image: unknown): ImageBlock | null;
+//# sourceMappingURL=ImageValidation.d.ts.map

package/dist/utils/ImageValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ImageValidation.d.ts","sourceRoot":"","sources":["../../src/utils/ImageValidation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAE3C,eAAO,MAAM,eAAe,QAAkB,CAAC;AAG/C,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAW3D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI,CAoBpE"}

package/dist/utils/ImageValidation.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_IMAGE_BYTES = void 0;
+exports.sniffImageMime = sniffImageMime;
+exports.validateImageBlock = validateImageBlock;
+exports.MAX_IMAGE_BYTES = 2 * 1024 * 1024;
+const MAX_ENCODED_BYTES = 4 * Math.ceil(exports.MAX_IMAGE_BYTES / 3);
+/** Identify supported signatures, without claiming to decode or sanitize the image. */
+function sniffImageMime(bytes) {
+    if (!Buffer.isBuffer(bytes))
+        return null;
+    if (bytes.length >= 8 && bytes.subarray(0, 8).equals(Buffer.from('89504e470d0a1a0a', 'hex')))
+        return 'image/png';
+    if (bytes.length >= 3 && bytes[0] === 0xff && bytes[1] === 0xd8 && bytes[2] === 0xff)
+        return 'image/jpeg';
+    if (bytes.length >= 12 && bytes.toString('latin1', 0, 4) === 'RIFF'
+        && bytes.toString('latin1', 8, 12) === 'WEBP')
+        return 'image/webp';
+    if (bytes.length >= 6 && ['GIF87a', 'GIF89a'].includes(bytes.toString('latin1', 0, 6)))
+        return 'image/gif';
+    if (bytes.length >= 4 && ['49492a00', '4d4d002a'].includes(bytes.subarray(0, 4).toString('hex')))
+        return 'image/tiff';
+    if (bytes.length >= 14 && bytes[0] === 0x42 && bytes[1] === 0x4d)
+        return 'image/bmp';
+    if (bytes.length >= 6 && bytes.readUInt32LE(0) === 0x00010000 && bytes.readUInt16LE(4) > 0)
+        return 'image/x-icon';
+    return null;
+}
+/**
+ * Accept only canonical, padded base64 within the decoded size limit. The declared
+ * MIME must agree with the signature (including common BMP/ICO/JPEG aliases).
+ * Return only wire fields, with MIME derived from bytes; never forward metadata.
+ */
+function validateImageBlock(image) {
+    if (!image || typeof image !== 'object')
+        return null;
+    const candidate = image;
+    if (candidate.type !== 'image' || typeof candidate.data !== 'string' || typeof candidate.mimeType !== 'string')
+        return null;
+    const data = candidate.data;
+    if (!data.length || data.length > MAX_ENCODED_BYTES || data.length % 4 !== 0)
+        return null;
+    if (!/^[A-Za-z0-9+/]*={0,2}$/.test(data))
+        return null;
+    const decodedSize = data.length / 4 * 3 - (data.endsWith('==') ? 2 : data.endsWith('=') ? 1 : 0);
+    if (decodedSize <= 0 || decodedSize > exports.MAX_IMAGE_BYTES)
+        return null;
+    const bytes = Buffer.from(data, 'base64');
+    if (bytes.length !== decodedSize || bytes.toString('base64') !== data)
+        return null;
+    const mimeType = sniffImageMime(bytes);
+    const aliases = {
+        'image/jpg': 'image/jpeg',
+        'image/x-ms-bmp': 'image/bmp',
+        'image/vnd.microsoft.icon': 'image/x-icon',
+    };
+    const declared = candidate.mimeType.trim().toLowerCase();
+    if (!mimeType || (aliases[declared] ?? declared) !== mimeType)
+        return null;
+    return { type: 'image', data, mimeType };
+}
+//# sourceMappingURL=ImageValidation.js.map

package/dist/utils/ImageValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ImageValidation.js","sourceRoot":"","sources":["../../src/utils/ImageValidation.ts"],"names":[],"mappings":";;;AAMA,wCAWC;AAOD,gDAoBC;AA1CY,QAAA,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,uBAAe,GAAG,CAAC,CAAC,CAAC;AAE7D,uFAAuF;AACvF,SAAgB,cAAc,CAAC,KAAa;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC;IACjH,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC;IAC1G,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM;WAC9D,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC;IACrE,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC;IAC3G,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,YAAY,CAAC;IACtH,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IACrF,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,cAAc,CAAC;IAClH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,SAAS,GAAG,KAA4B,CAAC;IAC/C,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5H,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,iBAAiB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1F,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,IAAI,WAAW,IAAI,CAAC,IAAI,WAAW,GAAG,uBAAe;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnF,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,OAAO,GAA2B;QACtC,WAAW,EAAE,YAAY;QACzB,gBAAgB,EAAE,WAAW;QAC7B,0BAA0B,EAAE,cAAc;KAC3C,CAAC;IACF,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzD,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC3C,CAAC"}

package/dist/utils/LocalImageDetector.d.ts

@@ -1,10 +1,19 @@
+import type { DirectoryGuard } from '../security/DirectoryGuard';
+export { MAX_IMAGE_BYTES } from './ImageValidation';
 export interface LocalImage {
     path: string;
     data: string;
     mimeType: string;
 }
-/** Extract standard Markdown image destinations and plain local image paths. */
+export type DetectedLocalImage = LocalImage;
+type ImagePolicy = DirectoryGuard | ((candidate: string, cwd: string) => boolean);
+/** Extract at most 32 candidate attempts, including invalid and duplicate destinations. */
 export declare function extractLocalImagePaths(text: unknown): string[];
-/** Read detected images that are allowed by the caller's directory policy. */
-export declare function readLocalImages(text: unknown, cwd: string, isAllowed: (candidate: string, cwd: string) => boolean): Promise<LocalImage[]>;
+/** Read exactly one native saved path. No text parsing or extension inference. */
+export declare function readLocalImagePath(filePath: string, cwd: string, directoryGuard: DirectoryGuard): Promise<DetectedLocalImage | null>;
+/**
+ * Read detected images using a guard or the existing callback API. Prefer the
+ * guard to resolve allowed-root aliases. These checks are not an OS sandbox.
+ */
+export declare function readLocalImages(text: unknown, cwd: string, isAllowed: ImagePolicy): Promise<LocalImage[]>;
 //# sourceMappingURL=LocalImageDetector.d.ts.map

package/dist/utils/LocalImageDetector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LocalImageDetector.d.ts","sourceRoot":"","sources":["../../src/utils/LocalImageDetector.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAiCD,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,EAAE,CAyC9D;AAED,8EAA8E;AAC9E,wBAAsB,eAAe,CACnC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,GACrD,OAAO,CAAC,UAAU,EAAE,CAAC,CAsBvB"}
+{"version":3,"file":"LocalImageDetector.d.ts","sourceRoot":"","sources":["../../src/utils/LocalImageDetector.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAGjE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAO5C,KAAK,WAAW,GAAG,cAAc,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;AAyBlF,2FAA2F;AAC3F,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,EAAE,CA+B9D;AAyFD,kFAAkF;AAClF,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,GAC5D,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAEpC;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,WAAW,GACrB,OAAO,CAAC,UAAU,EAAE,CAAC,CAcvB"}