allyhub 0.3.0 → 0.5.0

package/dist/node_modules/@allyhub-next/runtimes/dist/packages.d.ts

@@ -0,0 +1,65 @@
+export interface PackagesOptions {
+    /** The cache folder (default: the system's, `cacheHome`). */
+    home?: string;
+    /** The folder of pins (default: the ones AllyHub ships). */
+    pins?: string;
+    env?: Readonly<Record<string, string | undefined>>;
+    /** What fills a folder from its package-lock.json (default: `npm ci`). */
+    install?: Install;
+}
+export type Install = (dir: string, options: {
+    home: string;
+    signal?: AbortSignal | undefined;
+}) => Promise<void>;
+export interface LocatedPackage {
+    name: string;
+    version: string;
+    /** Its folder, the one holding its `node_modules`. */
+    dir: string;
+}
+export interface EnsurePackageOptions {
+    signal?: AbortSignal | undefined;
+    /** Called once if the package has to be fetched, before it is. */
+    onFetch?: (name: string) => void;
+}
+export interface LoadOptions extends EnsurePackageOptions {
+    /** The module to load, for a pin holding several (default: the pin's name). */
+    module?: string;
+}
+export interface Packages {
+    readonly home: string;
+    /** A package if it is there; never fetches, and reads only its record. */
+    locate(name: string): LocatedPackage | undefined;
+    /** What a package takes on this computer, as near as its pin says (bytes). */
+    size(name: string): number;
+    /** The file `import(name)` would load, when the package is there. */
+    entry(name: string): string | undefined;
+    /** The file a module of an ensured package resolves to, which never fetches. */
+    resolve(name: string, module: string): string | undefined;
+    /** A package, fetched and checked first if it is not there. */
+    ensure(name: string, options?: EnsurePackageOptions): Promise<LocatedPackage>;
+    /** A package's module, as `import(name)` would give it, ensured first. */
+    load<T>(name: string, options?: LoadOptions): Promise<T>;
+    /** Takes a package off this computer; it comes back when next ensured. */
+    remove(name: string): Promise<void>;
+}
+/** A setting `npx` puts in the environment about its own install. */
+export declare const NPX_SETTING: RegExp;
+/** What went wrong, from what npm wrote: its reason, not its advice. */
+export declare function npmProblem(stderr: string, code: number | null): string;
+export interface NpmCommand {
+    command: string;
+    /** What comes before npm's own arguments: its script, when Node runs it. */
+    script: string[];
+}
+/**
+ * The npm to install with. An app that brings its own names it (bundled.ts),
+ * and `npx` names the one that runs it; else the computer's; and where it has
+ * none, as a person who only has Studio may not, the runtime manager's Node
+ * and its npm, fetched like any runtime.
+ */
+export declare function findNpm(env: Readonly<Record<string, string | undefined>>, ensureNode: () => Promise<Record<string, string>>): Promise<NpmCommand>;
+/** Runs `npm ci` from the lock, keeping npm's cache in AllyHub's home. */
+export declare const npmCi: Install;
+export declare function createPackages(options?: PackagesOptions): Packages;
+//# sourceMappingURL=packages.d.ts.map

package/dist/node_modules/@allyhub-next/runtimes/dist/packages.js

@@ -0,0 +1,4 @@
+/*! AllyHub. Copyright (c) 2026 AllyHub, Inc. All rights reserved. Use is subject to LICENSE.md. */
+import{spawn as _}from"node:child_process";import{createHash as T,randomBytes as H}from"node:crypto";import{existsSync as A,readFileSync as b}from"node:fs";import{copyFile as R,mkdir as E,readdir as y,readFile as C,rename as F,rm as g,writeFile as L}from"node:fs/promises";import{createRequire as I}from"node:module";import{delimiter as z,join as o}from"node:path";import{fileURLToPath as J,pathToFileURL as U}from"node:url";import{RuntimeError as k}from"./errors.js";import{cacheHome as W}from"./home.js";import{withLock as B}from"./lock.js";import{nodeCommand as D}from"./node-program.js";import{createRuntimes as M}from"./runtimes.js";const N=".allyhub-package.json",q=J(new URL("../pins/",import.meta.url));async function G(s){const c=o(s,"node_modules","onnxruntime-node","bin","napi-v6");for(const n of await y(c)){if(n!==process.platform){await g(o(c,n),{recursive:!0,force:!0});continue}for(const p of await y(o(c,n)))p!==process.arch&&await g(o(c,n,p),{recursive:!0,force:!0})}if(process.platform!=="darwin")return;const i=o(c,"darwin",process.arch);for(const n of await y(i))/^libonnxruntime\.\d+\.\d+\.\d+\.dylib$/u.test(n)&&await g(o(i,n),{force:!0})}const V={"onnxruntime-node":G};export const NPX_SETTING=/^npm_config_(global|prefix|location|cache|.*_prefix)/iu;export function npmProblem(s,c){return s.split(`
+`).map(n=>n.replace(/^npm (error|ERR!)\s*/u,"").trim()).find(n=>n!==""&&!/^(code|errno|syscall|path|type|A complete log|Exit handler|This is an error with npm|<https)/u.test(n))??`npm ended with code ${String(c)}`}const X=(s,c)=>(c.PATH??"").split(z).some(i=>i!==""&&A(o(i,s)));export async function findNpm(s,c){const i=s.ALLYHUB_NPM??s.npm_execpath;if(i?.endsWith(".js"))return{command:D(s),script:[i]};if(X("npm",s))return{command:"npm",script:[]};const n=await c(),{node:p,npm:l}=n;if(!p||!l)throw new Error("AllyHub's Node has no npm");return{command:p,script:[l]}}export const npmCi=async(s,{home:c,signal:i})=>{const n=await findNpm(process.env,async()=>(await M({home:c}).ensure("node",{signal:i})).bins),p=Object.fromEntries(Object.entries(process.env).filter(([f])=>!NPX_SETTING.test(f))),l=["ci","--ignore-scripts","--omit=dev","--no-audit","--no-fund","--omit=peer","--loglevel=error","--fetch-retries=1"];await new Promise((f,m)=>{const w=_(n.command,[...n.script,...l],{cwd:s,env:{...p,npm_config_cache:o(c,"packages",".npm")},stdio:["ignore","ignore","pipe"],...i?{signal:i}:{}});let h="";w.stderr.on("data",v=>{h=`${h}${v.toString()}`.slice(-1e3)}),w.on("error",m),w.on("close",v=>{v===0?f():m(new Error(npmProblem(h,v)))})})};export function createPackages(s={}){const c=s.env??process.env,i=s.home??W(c),n=s.pins??q,p=s.install??npmCi,l=o(i,"packages"),f=e=>{const r=o(n,e);let t,a;try{t=JSON.parse(b(o(r,"package.json"),"utf8")),a=b(o(r,"package-lock.json"),"utf8")}catch{throw new k("unknown-package",`AllyHub has no package "${e}".`)}const u=t.dependencies??{},d=u[e]??t.version;if(!d)throw new k("unknown-package",`The pin of "${e}" does not name it.`);return{version:d,holds:u,lock:T("sha256").update(a).digest("hex"),dir:r,size:t.allyhubSize??0}},m=(e,r)=>o(l,`${e}@${r.version}`),w=(e,r)=>{try{const t=JSON.parse(b(o(m(e,r),N),"utf8"));return t.version===r.version&&t.lock===r.lock}catch{return!1}},h=(e,r)=>({name:e,version:r.version,dir:m(e,r)}),v=async(e,r,t)=>{const a=m(e,r),u=`${a}.partial-${String(process.pid)}-${H(4).toString("hex")}`;await E(u,{recursive:!0});try{await R(o(r.dir,"package.json"),o(u,"package.json")),await R(o(r.dir,"package-lock.json"),o(u,"package-lock.json")),await p(u,{home:i,signal:t});for(const[d,j]of Object.entries(r.holds)){const O=JSON.parse(await C(o(u,"node_modules",d,"package.json"),"utf8"));if(O.version!==j)throw new Error(`it holds ${d} ${String(O.version)}, not ${j}`)}await V[e]?.(u),await L(o(u,N),`${JSON.stringify({version:r.version,lock:r.lock,at:new Date().toISOString()})}
+`),await g(a,{recursive:!0,force:!0}),await F(u,a),await P(e,r)}catch(d){throw await g(u,{recursive:!0,force:!0}),t?.aborted?new k("cancelled",`Stopped getting ${e}.`,{cause:d}):new k("install",`Could not get ${e} ${r.version} (${d instanceof Error?d.message:String(d)}). Check the connection and run it again.`,{cause:d})}},P=async(e,r)=>{const t=`${e}@${r.version}`;for(const a of await y(l))a.startsWith(`${e}@`)&&a!==t&&!a.startsWith(`${t}.`)&&await g(o(l,a),{recursive:!0,force:!0})},$=e=>{const r=f(e);return w(e,r)?h(e,r):void 0},S=(e,r)=>I(o(e,"package.json")).resolve(r),x=async(e,r={})=>{const t=f(e);return w(e,t)||(await E(l,{recursive:!0}).catch(a=>{throw new k("install",`Could not get ${e} ${t.version}: AllyHub cannot write to ${l}.`,{cause:a})}),await B(`${m(e,t)}.lock`,async()=>{w(e,t)||(r.onFetch?.(e),await v(e,t,r.signal))},{signal:r.signal})),h(e,t)};return{home:i,locate:$,ensure:x,size:e=>f(e).size,entry(e){const r=$(e);return r?S(r.dir,e):void 0},resolve(e,r){const t=$(e);return t?S(t.dir,r):void 0},async load(e,r){const{dir:t}=await x(e,r),a=S(t,r?.module??e);return await import(U(a).href)},async remove(e){await g(m(e,f(e)),{recursive:!0,force:!0})}}}

package/dist/node_modules/@allyhub-next/runtimes/dist/runtimes.d.ts

@@ -0,0 +1,69 @@
+import { type Platform, type RuntimeManifest } from "@allyhub-next/protocol";
+export interface RuntimesOptions {
+    /** The cache folder (default: the system's, `cacheHome`). */
+    home?: string;
+    manifest?: RuntimeManifest;
+    /** The platform (default: this process's). */
+    platform?: Platform | undefined;
+    env?: Readonly<Record<string, string | undefined>>;
+    fetch?: typeof globalThis.fetch;
+    /**
+     * Where a download no `onProgress` follows says how it goes (default:
+     * stderr): most commands get a runtime in passing, and minutes of silence
+     * read as a hang to whoever runs them.
+     */
+    log?: (line: string) => void;
+}
+export interface Located {
+    name: string;
+    /** The pinned version; none for programs the environment names, whose version is their own. */
+    version: string | undefined;
+    /** Its folder; for one named by the environment, where its first program is. */
+    dir: string;
+    /** Its programs, by name, at their absolute paths. */
+    bins: Record<string, string>;
+    /** Where it was found. */
+    from: "cache" | "env";
+}
+export interface Status {
+    name: string;
+    about: string;
+    version: string;
+    license: string;
+    /** It has files for this platform. */
+    available: boolean;
+    installed: boolean;
+    /** Where it is, when it is. */
+    from?: "cache" | "env";
+    /** What it downloads, in bytes. */
+    size: number;
+    dir: string;
+}
+export interface Progress {
+    runtime: string;
+    url: string;
+    received: number;
+    total: number;
+}
+export interface EnsureOptions {
+    signal?: AbortSignal | undefined;
+    onProgress?: (progress: Progress) => void;
+}
+export interface Runtimes {
+    readonly home: string;
+    readonly platform: Platform | undefined;
+    /** Every runtime of the manifest, as it stands on this computer. */
+    status(): Promise<Status[]>;
+    /** A runtime if it is there; never downloads. */
+    locate(name: string): Promise<Located | undefined>;
+    /** A runtime, downloaded and checked first if it is not there. */
+    ensure(name: string, options?: EnsureOptions): Promise<Located>;
+    /** One program of a runtime, ensured. */
+    bin(name: string, bin: string, options?: EnsureOptions): Promise<string>;
+    /** Takes a runtime off this computer; it comes back when next ensured. */
+    remove(name: string): Promise<void>;
+}
+/** The variable that names a program on the computer: ALLYHUB_FFMPEG, ALLYHUB_YT_DLP. */
+export declare const binVariable: (bin: string) => string;
+export declare function createRuntimes(options?: RuntimesOptions): Runtimes;
+//# sourceMappingURL=runtimes.d.ts.map

package/dist/node_modules/@allyhub-next/runtimes/dist/runtimes.js

@@ -0,0 +1,4 @@
+/*! AllyHub. Copyright (c) 2026 AllyHub, Inc. All rights reserved. Use is subject to LICENSE.md. */
+import{randomBytes as W}from"node:crypto";import{chmod as _,mkdir as R,readFile as T,rename as P,rm as k,writeFile as V}from"node:fs/promises";import{dirname as U,join as d}from"node:path";import{binsOf as A,filesFor as B,platformOf as Y}from"@allyhub-next/protocol";import{download as q,sha256Of as G}from"./download.js";import{RuntimeError as m}from"./errors.js";import{cacheHome as K}from"./home.js";import{withLock as Q}from"./lock.js";import{shippedManifest as X}from"./manifest.js";import{inside as C,native as Z,undmg as tt,untgz as et,unzip as rt}from"./unpack.js";const D=".allyhub-runtime.json";export const binVariable=i=>`ALLYHUB_${i.toUpperCase().replaceAll("-","_")}`;const x=i=>`${String(Math.max(1,Math.round(i/1e6)))} MB`;function nt(i,b,w,g){g(`Downloading ${i} ${b} (${x(w)}), once…`);let h=0;return u=>{const $=Math.floor(u/w*10)*10;$!==h&&(h=$,g(`  ${String($)}% (${x(u)} of ${x(w)})`))}}export function createRuntimes(i={}){const b=i.log??(t=>{process.stderr.write(`${t}
+`)}),w=i.env??process.env,g=i.home??K(w),h=i.manifest??X(),u="platform"in i?i.platform:Y(process.platform,process.arch),$=i.fetch??globalThis.fetch,S=d(g,"runtimes"),z=t=>{const e=Object.hasOwn(h.runtimes,t)?h.runtimes[t]:void 0;if(!e)throw new m("unknown-runtime",`AllyHub has no runtime "${t}".`);return e},p=(t,e)=>d(S,`${t}@${e.version}`),O=(t,e)=>{const r=u?B(e,u):void 0;if(!r)throw new m("unsupported",`${t} ${e.version} has no build for ${u??`${process.platform}-${process.arch}`}.`);return r},F=(t,e,r)=>Object.fromEntries(Object.entries(A(O(t,e))).map(([n,s])=>[n,d(r,Z(s))])),E=(t,e)=>{const r=[...new Set(Object.values(e.platforms).flatMap(c=>Object.keys(A(c))))];if(r.length===0)return;const n=r.map(c=>[c,w[binVariable(c)]]);if(n.some(([,c])=>!c))return;const s=Object.fromEntries(n),a=n[0]?.[1]??"";return{name:t,version:void 0,dir:U(a),bins:s,from:"env"}},j=async(t,e)=>{try{const r=JSON.parse(await T(d(p(t,e),D),"utf8")),n=O(t,e).map(s=>s.sha256);return r.version===e.version&&JSON.stringify(r.files)===JSON.stringify(n)}catch{return!1}},M=async t=>{const e=z(t),r=E(t,e);if(r)return r;if(!await j(t,e))return;const n=p(t,e);return{name:t,version:e.version,dir:n,bins:F(t,e,n),from:"cache"}},H=async(t,e,r)=>{const n=O(t,e),s=p(t,e),a=`${s}.partial-${String(process.pid)}-${W(4).toString("hex")}`,c=d(a,".downloads");await R(c,{recursive:!0});const I=r.onProgress?void 0:nt(t,e.version,n.reduce((l,o)=>l+o.size,0),b);let N=0;try{for(const[l,o]of n.entries()){const v=d(c,String(l));if(await q(o.url,v,{size:o.size,sha256:o.sha256,fetch:$,signal:r.signal,onProgress:(f,y)=>{I?.(N+f),r.onProgress?.({runtime:t,url:o.url,received:f,total:y})}}),N+=o.size,o.unpack==="zip")await rt(v,a);else if(o.unpack==="tgz")await et(v,a);else if(o.unpack==="dmg")await tt(v,a);else{const f=C(a,o.name??st(o.url));if(!f)throw new m("unpack",`${o.url} would be kept outside its folder.`);await R(U(f),{recursive:!0}),await P(v,f),o.executable&&await _(f,493)}for(const f of o.check){const y=C(a,f.path),J=y?await G(y).catch(()=>"missing"):"missing";if(J!==f.sha256)throw new m("checksum",`${f.path} from ${o.url} has sha256 ${J}; its pin is ${f.sha256}.`)}}await k(c,{recursive:!0,force:!0}),await V(d(a,D),`${JSON.stringify({version:e.version,files:n.map(l=>l.sha256),at:new Date().toISOString()})}
+`),await k(s,{recursive:!0,force:!0}),await P(a,s)}catch(l){throw await k(a,{recursive:!0,force:!0}),l}},L=async(t,e={})=>{const r=z(t),n=await M(t);if(n)return n;O(t,r),await R(S,{recursive:!0}),await Q(`${p(t,r)}.lock`,async()=>{await j(t,r)||await H(t,r,e)},{signal:e.signal,onWait:()=>{b(`Waiting for ${t}, which another command is getting…`)}});const s=await M(t);if(!s)throw new m("download",`${t} was installed but cannot be found in ${S}.`);return s};return{home:g,platform:u,locate:M,ensure:L,async bin(t,e,r){const s=(await L(t,r)).bins[e];if(!s)throw new m("unknown-runtime",`${t} holds no program "${e}".`);return s},async remove(t){const e=z(t);await k(p(t,e),{recursive:!0,force:!0})},async status(){return Promise.all(Object.entries(h.runtimes).map(async([t,e])=>{const r=u?B(e,u):void 0,n=p(t,e),s=E(t,e)!==void 0?"env":r!==void 0&&await j(t,e)?"cache":void 0;return{name:t,about:e.about,version:e.version,license:e.license,available:r!==void 0,installed:s!==void 0,...s?{from:s}:{},size:(r??[]).reduce((a,c)=>a+c.size,0),dir:n}}))}}}const st=i=>decodeURIComponent(new URL(i).pathname.split("/").pop()??"file");

package/dist/node_modules/@allyhub-next/runtimes/dist/unpack.d.ts

@@ -0,0 +1,14 @@
+/** Where an archive's entry goes inside `dir`, or undefined for one that would leave it. */
+export declare function inside(dir: string, entry: string): string | undefined;
+export declare function unzip(file: string, dir: string): Promise<void>;
+export declare function untgz(file: string, dir: string): Promise<void>;
+/**
+ * A macOS disk image's items (an app) copied into `dir`: the image is
+ * attached read-only where nothing opens it, each item that is not a link
+ * (the Applications shortcut is one) copied with ditto, which keeps an
+ * app's own links and signatures, and the image detached.
+ */
+export declare function undmg(file: string, dir: string): Promise<void>;
+/** A path in its system's spelling, from a manifest's forward slashes. */
+export declare const native: (path: string) => string;
+//# sourceMappingURL=unpack.d.ts.map

package/dist/node_modules/@allyhub-next/runtimes/dist/unpack.js

@@ -0,0 +1,2 @@
+/*! AllyHub. Copyright (c) 2026 AllyHub, Inc. All rights reserved. Use is subject to LICENSE.md. */
+import{createWriteStream as h}from"node:fs";import{execFile as k}from"node:child_process";import{chmod as $,mkdir as f,mkdtemp as y,readdir as g,rm as x}from"node:fs/promises";import{tmpdir as z}from"node:os";import{dirname as S,isAbsolute as l,join as m,normalize as b,relative as E,sep as v}from"node:path";import{pipeline as W}from"node:stream/promises";import{extract as j}from"tar";import A from"yauzl";import{RuntimeError as u}from"./errors.js";export function inside(e,r){if(r.includes("\0")||l(r)||/^[A-Za-z]:/u.test(r))return;const t=b(m(e,r)),i=E(e,t);if(!(i===""||i.startsWith("..")||l(i)))return t}export async function unzip(e,r){const t=await new Promise((i,a)=>{A.open(e,{lazyEntries:!0,autoClose:!0},(n,o)=>{n?a(new u("unpack",`${e} is not a zip: ${n.message}`,{cause:n})):i(o)})});await new Promise((i,a)=>{const n=o=>{t.close(),a(o instanceof u?o:new u("unpack",`Unpacking ${e} failed: ${String(o)}`,{cause:o}))};t.on("error",n),t.on("end",()=>{i()}),t.on("entry",o=>{const c=o.fileName.split("\\").join("/"),s=inside(r,c);if(!s){n(new u("unpack",`${e} holds ${c}, outside its folder.`));return}const p=o.externalFileAttributes>>>16&65535;if((p&61440)===40960){n(new u("unpack",`${e} holds a link, ${c}.`));return}if(c.endsWith("/")){f(s,{recursive:!0}).then(()=>{t.readEntry()},n);return}t.openReadStream(o,(d,w)=>{if(d){n(d);return}f(S(s),{recursive:!0}).then(()=>W(w,h(s))).then(()=>p&73?$(s,493):void 0).then(()=>{t.readEntry()},n)})}),t.readEntry()})}export async function untgz(e,r){try{await j({file:e,cwd:r,strict:!0,filter:(t,i)=>{const a="type"in i?i.type:void 0;return inside(r,t)!==void 0&&a!=="SymbolicLink"&&a!=="Link"}})}catch(t){throw new u("unpack",`Unpacking ${e} failed: ${t instanceof Error?t.message:String(t)}`,{cause:t})}}export async function undmg(e,r){if(process.platform!=="darwin")throw new u("unpack",`${e} is a macOS disk image.`);const t=await y(m(z(),"allyhub-dmg-")),i=(a,n)=>new Promise((o,c)=>{k(a,n,s=>{s?c(new u("unpack",`${a} ${n[0]??""} ${e} failed: ${s.message}`,{cause:s})):o()})});await i("hdiutil",["attach","-nobrowse","-readonly","-noautoopen","-mountpoint",t,e]);try{for(const a of await g(t,{withFileTypes:!0})){if(a.isSymbolicLink()||a.name.startsWith("."))continue;const n=inside(r,a.name);n&&await i("ditto",[m(t,a.name),n])}}finally{await i("hdiutil",["detach",t,"-force"]).catch(()=>{}),await x(t,{recursive:!0,force:!0})}}export const native=e=>e.split("/").join(v);

package/dist/node_modules/@allyhub-next/runtimes/package.json

@@ -0,0 +1,18 @@
+{
+  "name": "@allyhub-next/runtimes",
+  "version": "0.5.0",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./node": {
+      "types": "./dist/node-program.d.ts",
+      "default": "./dist/node-program.js"
+    },
+    "./manifest.json": "./manifest.json"
+  },
+  "private": true,
+  "license": "SEE LICENSE IN LICENSE.md"
+}

package/dist/node_modules/@allyhub-next/runtimes/pins/docx/package-lock.json

@@ -0,0 +1,67 @@
+{
+  "name": "allyhub-pin-docx",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "allyhub-pin-docx",
+      "dependencies": {
+        "docx": "9.15.1",
+        "fflate": "0.8.3"
+      }
+    },
+    "node_modules/@types/node": {
+      "version": "26.6.6",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-26.6.6.tgz",
+      "integrity": "sha512-MzQj+8Kx3XI40OmUAE6Qoh58ZMNstNNMwn2nfd3qWsfe7nDNSqJNzes4njhz6AHwrSHOffSLwXU6yb474Q4aog==",
+      "license": "MIT",
+      "dependencies": {
+        "undici-types": "~8.9.0"
+      }
+    },
+    "node_modules/docx": {
+      "version": "9.15.1",
+      "resolved": "https://registry.npmjs.org/docx/-/docx-9.15.1.tgz",
+      "integrity": "sha512-wp8K+wsDov+gjtIE4fA7g4SkCcuefIjwdYUc2OYa8YViCqxKvbASwSODpUXsTIH5BCmoWw7cMVOB1xl3A7Uqig==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "^26.6.2",
+        "fflate": "^0.8.3",
+        "nanoid": "^6.0.1"
+      },
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/fflate": {
+      "version": "0.8.3",
+      "resolved": "https://registry.npmjs.org/fflate/-/fflate-0.8.3.tgz",
+      "integrity": "sha512-tbZNuJrLwGUp3zshBtdy4W+ORxZuIh8a5ilyIEQDC5rY1f3U20JMry0Ll3WBzU58EZKsEuJFXhb5gwv8CsPvgA==",
+      "license": "MIT"
+    },
+    "node_modules/nanoid": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-6.0.2.tgz",
+      "integrity": "sha512-hIvVOb9Qr1p/9CNNLOe0OlWvgx/ziTsVwKN/GDSsuArN2K0wDiafP3s0SWmsm7o2BdnyS8Z9Z64NFBUbn6ziBg==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.js"
+      },
+      "engines": {
+        "node": "^22 || ^24 || >=26"
+      }
+    },
+    "node_modules/undici-types": {
+      "version": "8.9.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-8.9.0.tgz",
+      "integrity": "sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg==",
+      "license": "MIT"
+    }
+  }
+}

package/dist/node_modules/@allyhub-next/runtimes/pins/docx/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "allyhub-pin-docx",
+  "private": true,
+  "dependencies": {
+    "docx": "9.15.1",
+    "fflate": "0.8.3"
+  },
+  "allyhubSize": 25000000
+}