beauticode-dsh 1.0.7 → 1.0.13

package/vendor/core/error-message.js

@@ -126,16 +126,8 @@ export function toChineseErrorMessage(value) {
         [/No active background to save\.?/i, "当前没有可保存的背景。"],
         [/Saved theme limit reached \((\d+)\)\. Delete one before saving\.?/i, (match) => `已达到保存主题数量上限（${match[1]}），请先删除一个主题。`],
         [/Saved theme storage limit exceeded \((\d+) bytes\)\. Delete a theme before saving\.?/i, (match) => `已超过保存主题的存储上限（${match[1]} 字节），请先删除一个主题。`],
-        [/Import requires an image or video file\.?/i, "导入需要图片或视频文件。"],
-        [/Imported media must be an image or video\.?/i, "导入的媒体必须是图片或视频。"],
         [/Built-in theme cannot be deleted\.?/i, "内置主题不能删除。"],
         [/Invalid saved theme id\.?/i, "已保存主题 ID 无效。"],
-        [/Invalid skin-center media path\.?/i, "皮肤中心地址无效。"],
-        [/Skin center is not configured\.?/i, "尚未配置皮肤中心地址。"],
-        [/Skin is not available for download\.?/i, "该皮肤尚未上架或已被下架。"],
-        [/Skin media download failed\.?/i, "皮肤文件下载失败。"],
-        [/Skin media download exceeded the size limit\.?/i, "皮肤文件超过大小限制。"],
-        [/Skin media download host mismatch\.?/i, "皮肤下载地址与皮肤中心域名不一致。"],
         [/Saved theme not found\.?/i, "未找到已保存的主题。"],
         [/Invalid video position\.?/i, "视频位置无效。"],
         [/Theme meta unreadable\.?/i, "主题元数据无法读取。"],

package/vendor/core/file-lock.js

@@ -1,8 +1,17 @@
 import crypto from "node:crypto";
-import fsSync from "node:fs";
 import fs from "node:fs/promises";
 import path from "node:path";
-import { isRecordedPidLive, } from "./process-liveness.js";
+function isPidAlive(pid) {
+    if (!Number.isInteger(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
 function parseOwner(raw) {
     try {
         const value = JSON.parse(raw);
@@ -65,14 +74,12 @@ export async function acquireFileLock(filePath, opts = {}) {
                 throw error;
             }
             let released = false;
-            const detachExit = attachExitRelease(resolved, owner.nonce, handle.fd);
             return {
                 owner,
                 async release() {
                     if (released)
                         return;
                     released = true;
-                    detachExit();
                     try {
                         const raw = await fs.readFile(resolved, "utf8");
                         const current = parseOwner(raw);
@@ -119,15 +126,10 @@ export async function acquireFileLock(filePath, opts = {}) {
         }
         const existing = parseOwner(raw);
         const existingPid = parseOwnerPid(raw);
-        const recordedStartedAt = existing?.startedAt ?? new Date(Date.now() - age).toISOString();
-        if (existingPid != null &&
-            (await isRecordedPidLive(existingPid, recordedStartedAt, {
-                fresh: true,
-                ...(opts.inspectPid ? { inspect: opts.inspectPid } : {}),
-            }))) {
+        if (existingPid != null && isPidAlive(existingPid)) {
             throw new Error(`Another ${opts.purpose ?? "operation"} is running (pid ${existingPid}).`);
         }
-        if (!existing && existingPid == null && age <= staleMs) {
+        if (!existing && age <= staleMs) {
             throw new Error(`Another ${opts.purpose ?? "operation"} may be starting; lock owner is not readable yet.`);
         }
         const quarantine = `${resolved}.stale-${process.pid}-${crypto.randomUUID()}`;
@@ -146,27 +148,4 @@ export async function acquireFileLock(filePath, opts = {}) {
     }
     throw new Error(`Could not acquire ${opts.purpose ?? "file"} lock.`);
 }
-function attachExitRelease(filePath, nonce, fd) {
-    const onExit = () => {
-        try {
-            fsSync.closeSync(fd);
-        }
-        catch {
-            /* already closed */
-        }
-        try {
-            const raw = fsSync.readFileSync(filePath, "utf8");
-            if (parseOwner(raw)?.nonce === nonce) {
-                fsSync.rmSync(filePath, { force: true });
-            }
-        }
-        catch {
-            /* process is dying; next acquirer will treat a leftover as stale */
-        }
-    };
-    process.on("exit", onExit);
-    return () => {
-        process.off("exit", onExit);
-    };
-}
 //# sourceMappingURL=file-lock.js.map

package/vendor/core/index.js

@@ -3,12 +3,11 @@ export * from "./types.js";
 export * from "./host-session.js";
 export * from "./media-validation.js";
 export * from "./media-server.js";
+export * from "./media-source.js";
 export { defaultDataRoot, resolveDataPaths, isPathInsideRoot, } from "./paths.js";
 export * from "./file-lock.js";
-export * from "./process-liveness.js";
 export * from "./error-message.js";
 export * from "./background-store.js";
 export * from "./bundled-gallery.js";
 export * from "./apply-transaction.js";
-export * from "./skin-pack.js";
 //# sourceMappingURL=index.js.map

package/vendor/core/media-server.js

@@ -36,27 +36,6 @@ function parseRange(value, size) {
 function makeToken() {
     return randomUUID().replaceAll("-", "");
 }
-function pipeOpenedFile(handle, response, range) {
-    const stream = handle.createReadStream({
-        start: range.start,
-        ...(range.end != null ? { end: range.end } : {}),
-        autoClose: false,
-    });
-    let closed = false;
-    const closeHandle = () => {
-        if (closed)
-            return;
-        closed = true;
-        void handle.close().catch(() => { });
-    };
-    stream.on("error", () => {
-        closeHandle();
-        response.destroy();
-    });
-    stream.on("close", closeHandle);
-    response.on("close", closeHandle);
-    stream.pipe(response);
-}
 async function hashOpenedFile(handle, size) {
     const hash = createHash("sha256");
     const chunk = Buffer.allocUnsafe(1024 * 1024);
@@ -71,24 +50,12 @@ async function hashOpenedFile(handle, size) {
     }
     return hash.digest("hex");
 }
-function isLoopbackHttpOrigin(origin) {
-    try {
-        const url = new URL(origin);
-        return (url.protocol === "http:" &&
-            ["127.0.0.1", "localhost", "[::1]"].includes(url.hostname.toLowerCase()));
-    }
-    catch {
-        return false;
-    }
-}
-/** Exact match, loopback HTTP, or app://* prefix (hub is loopback-only). */
+/** Exact match or app://* prefix (hub is loopback-only). */
 function matchTrustedOrigin(origin, trusted) {
     if (!origin)
         return null;
     if (trusted.has(origin))
         return origin;
-    if (isLoopbackHttpOrigin(origin))
-        return origin;
     for (const prefix of TRUSTED_ORIGIN_PREFIXES) {
         if (origin.startsWith(prefix))
             return origin;
@@ -160,7 +127,8 @@ export class LoopbackMediaHub {
             this.listenPromise = null;
         }
     }
-    async addFile(filePath) {
+    async addFile(filePath, opts = {}) {
+        const validation = opts.validation ?? "full";
         const ext = path.extname(filePath).toLowerCase();
         let kind;
         let mime;
@@ -174,6 +142,7 @@ export class LoopbackMediaHub {
         if (IMAGE_EXTENSIONS.includes(ext)) {
             const v = await validateImageFile(filePath, {
                 maxBytes: this.maxImageBytes,
+                mode: validation,
             });
             kind = "image";
             mime = v.mime;
@@ -188,6 +157,7 @@ export class LoopbackMediaHub {
         else if (ext === VIDEO_EXTENSION) {
             const v = await validateVideoFile(filePath, {
                 maxBytes: this.maxVideoBytes,
+                mode: validation,
             });
             kind = "video";
             mime = VIDEO_MIME;
@@ -225,6 +195,7 @@ export class LoopbackMediaHub {
             mtimeMs,
             ctimeMs,
             mime,
+            validation,
             token,
             route,
         };
@@ -254,6 +225,7 @@ export class LoopbackMediaHub {
             mtimeMs: rec.mtimeMs,
             ctimeMs: rec.ctimeMs,
             mime: rec.mime,
+            validation: rec.validation,
             token: rec.token,
             route: rec.route,
             url,
@@ -349,7 +321,7 @@ export class LoopbackMediaHub {
             queryToken = "";
         }
         const tokenOk = headerToken === pathToken || queryToken === pathToken;
-        if ((origin && !trustedOrigin && !isLoopbackHttpOrigin(origin)) || !tokenOk) {
+        if ((origin && !trustedOrigin) || !tokenOk) {
             response.writeHead(403, { "Cache-Control": "no-store" });
             response.end();
             return;
@@ -379,6 +351,9 @@ export class LoopbackMediaHub {
                 throw new Error("Media file changed or exceeded the safety limit");
             }
             if (fingerprintChanged) {
+                if (asset.validation === "fast") {
+                    throw new Error("Media file changed after staging");
+                }
                 const currentHash = await hashOpenedFile(opened, stat.size);
                 if (currentHash !== asset.identity) {
                     throw new Error("Media file content changed after staging");
@@ -422,8 +397,11 @@ export class LoopbackMediaHub {
                     opened = null;
                     return;
                 }
-                pipeOpenedFile(opened, response, { start: 0 });
+                const stream = opened.createReadStream({ start: 0, autoClose: true });
                 opened = null;
+                stream
+                    .on("error", () => response.destroy())
+                    .pipe(response);
                 return;
             }
             headers["Content-Range"] =
@@ -436,11 +414,15 @@ export class LoopbackMediaHub {
                 opened = null;
                 return;
             }
-            pipeOpenedFile(opened, response, {
+            const stream = opened.createReadStream({
                 start: range.start,
                 end: range.end,
+                autoClose: true,
             });
             opened = null;
+            stream
+                .on("error", () => response.destroy())
+                .pipe(response);
         }
         catch {
             await opened?.close().catch(() => { });
@@ -505,10 +487,10 @@ export class MediaServerController {
     get activeVideo() {
         return this.#video;
     }
-    async stage(filePath) {
+    async stage(filePath, opts = {}) {
         if (!filePath || !this.#enabled)
             return null;
-        return this.#hub.addFile(filePath);
+        return this.#hub.addFile(filePath, opts);
     }
     /**
      * Promote staged image/video handles; close assets that are no longer needed.

package/vendor/core/media-source.js

@@ -0,0 +1,36 @@
+import path from "node:path";
+/** Resolve a manifest source against the directory that owns managed files. */
+export function resolveMediaSource(source, ownerDir) {
+    if (source.kind === "local")
+        return path.resolve(source.path);
+    return path.join(ownerDir, source.file);
+}
+/** Resolve the primary image source, including legacy v1 manifests. */
+export function resolveBackgroundImagePath(ownerDir, background) {
+    if (background.type === "image" && background.source) {
+        return resolveMediaSource(background.source, ownerDir);
+    }
+    return background.image ? path.join(ownerDir, background.image) : null;
+}
+/** Resolve the primary video source, including legacy v1 manifests. */
+export function resolveBackgroundVideoPath(ownerDir, background) {
+    if (background.type !== "video")
+        return null;
+    if (background.source)
+        return resolveMediaSource(background.source, ownerDir);
+    return background.video ? path.join(ownerDir, background.video) : null;
+}
+export function isLocalBackgroundSource(background) {
+    return background.source?.kind === "local";
+}
+/** Return the managed primary filename when a snapshot/theme must copy it. */
+export function managedPrimaryFile(background) {
+    if (background.source?.kind === "managed")
+        return background.source.file;
+    if (background.source?.kind === "local")
+        return null;
+    return background.type === "image"
+        ? background.image ?? null
+        : background.video ?? null;
+}
+//# sourceMappingURL=media-source.js.map

package/vendor/core/media-validation.js

@@ -88,7 +88,7 @@ async function assertRegularFile(filePath) {
     }
     return { resolved: realPath, size: stat.size };
 }
-async function inspectAndHash(filePath, expectedSize) {
+async function inspectAndHash(filePath, expectedSize, mode = "full") {
     const handle = await fs.open(filePath, "r");
     try {
         const before = await handle.stat();
@@ -97,23 +97,30 @@ async function inspectAndHash(filePath, expectedSize) {
         }
         const head = Buffer.alloc(Math.min(64, expectedSize));
         const hash = createHash("sha256");
-        const chunk = Buffer.allocUnsafe(1024 * 1024);
-        let position = 0;
-        let headOffset = 0;
-        while (position < expectedSize) {
-            const length = Math.min(chunk.byteLength, expectedSize - position);
-            const { bytesRead } = await handle.read(chunk, 0, length, position);
-            if (bytesRead <= 0) {
-                throw new MediaValidationError("Media file ended during validation.");
-            }
-            const bytes = chunk.subarray(0, bytesRead);
-            hash.update(bytes);
-            if (headOffset < head.byteLength) {
-                const take = Math.min(bytesRead, head.byteLength - headOffset);
-                bytes.copy(head, headOffset, 0, take);
-                headOffset += take;
+        const { bytesRead } = await handle.read(head, 0, head.byteLength, 0);
+        if (bytesRead !== head.byteLength) {
+            throw new MediaValidationError("Media file ended during validation.");
+        }
+        if (mode === "fast") {
+            // Local-reference imports must not hash a multi-GB file. The file
+            // fingerprint is deliberately tied to metadata and the validated head;
+            // the media server rejects the asset if metadata changes afterwards.
+            hash.update(`${before.dev}:${before.ino}:${before.size}:${before.mtimeMs}:${before.ctimeMs}`);
+            hash.update(head);
+        }
+        else {
+            hash.update(head);
+            const chunk = Buffer.allocUnsafe(1024 * 1024);
+            let position = head.byteLength;
+            while (position < expectedSize) {
+                const length = Math.min(chunk.byteLength, expectedSize - position);
+                const read = await handle.read(chunk, 0, length, position);
+                if (read.bytesRead <= 0) {
+                    throw new MediaValidationError("Media file ended during validation.");
+                }
+                hash.update(chunk.subarray(0, read.bytesRead));
+                position += read.bytesRead;
             }
-            position += bytesRead;
         }
         const after = await handle.stat();
         if (after.size !== before.size ||
@@ -172,7 +179,7 @@ export async function validateImageFile(filePath, opts = {}) {
     if (size < 1 || size > maxBytes) {
         throw new MediaValidationError(`Image must be a non-empty file no larger than ${maxBytes} bytes.`);
     }
-    const inspected = await inspectAndHash(resolved, size);
+    const inspected = await inspectAndHash(resolved, size, opts.mode);
     const detected = detectImageMime(inspected.head, ext, size);
     if (!detected) {
         throw new MediaValidationError("Image content does not match a supported JPEG/PNG/WEBP/AVIF signature.");
@@ -200,7 +207,7 @@ export async function validateVideoFile(filePath, opts = {}) {
     if (size < 1 || size > maxBytes) {
         throw new MediaValidationError(`Video background must be a non-empty MP4 no larger than ${maxBytes} bytes.`);
     }
-    const inspected = await inspectAndHash(resolved, size);
+    const inspected = await inspectAndHash(resolved, size, opts.mode);
     if (!isMp4Container(inspected.head, size)) {
         throw new MediaValidationError("Video background is not a valid MP4 container.");
     }

package/vendor/core/paths.js

@@ -68,7 +68,6 @@ export async function ensureDataLayout(paths) {
             entry === SNAPSHOTS_DIR_NAME ||
             entry === SAVED_DIR_NAME ||
             entry === RUNTIME_MEDIA_DIR_NAME ||
-            entry === "tmp" ||
             entry === "logs" ||
             entry === "engine-launcher.log" ||
             entry === "injector.lock" ||

package/vendor/core/process-liveness.js

@@ -1,205 +0,0 @@
-import { execFile } from "node:child_process";
-import fs from "node:fs/promises";
-import { promisify } from "node:util";
-const execFileAsync = promisify(execFile);
-export const PID_REUSE_GRACE_MS = 2_000;
-const INSPECT_CACHE_MS = 3_000;
-const WINDOWS_INSPECT_TIMEOUT_MS = 3_000;
-/** Windows hosts that recycle PIDs and can never own a beautiCode injector. */
-const NON_INJECTOR_PROCESS_NAMES = new Set([
-    "explorer",
-    "svchost",
-    "dwm",
-    "csrss",
-    "services",
-    "lsass",
-    "winlogon",
-    "system",
-    "idle",
-    "runtimebroker",
-    "searchhost",
-    "startmenuexperiencehost",
-    "shellexperiencehost",
-    "dllhost",
-    "conhost",
-    "taskhostw",
-    "sihost",
-    "ctfmon",
-    "securityhealthsystray",
-    "fontdrvhost",
-    "unsecapp",
-]);
-const inspectCache = new Map();
-export function clearProcessInspectCache() {
-    inspectCache.clear();
-}
-export function isPidAlive(pid) {
-    if (!Number.isInteger(pid) || pid <= 0)
-        return false;
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch (error) {
-        return Boolean(error && typeof error === "object" && "code" in error && error.code === "EPERM");
-    }
-}
-export function normalizeProcessName(name) {
-    if (typeof name !== "string")
-        return null;
-    const trimmed = name.trim().toLowerCase();
-    if (!trimmed)
-        return null;
-    return trimmed.endsWith(".exe") ? trimmed.slice(0, -4) : trimmed;
-}
-export function isDeniedInjectorName(name) {
-    const normalized = normalizeProcessName(name);
-    return normalized != null && NON_INJECTOR_PROCESS_NAMES.has(normalized);
-}
-export function parseRecordedStartMs(value) {
-    if (typeof value !== "string" || !value.trim())
-        return null;
-    const ms = Date.parse(value);
-    return Number.isFinite(ms) ? ms : null;
-}
-/**
- * True when `pid` still looks like the process that wrote `recordedStartedAt`.
- * A later start time means Windows reused the PID.
- */
-export function isRecordedOwnerAlive(snapshot, recordedStartedAt) {
-    if (!snapshot.exists)
-        return false;
-    if (isDeniedInjectorName(snapshot.name))
-        return false;
-    const recordedMs = parseRecordedStartMs(recordedStartedAt);
-    if (snapshot.startMs != null && recordedMs != null) {
-        return snapshot.startMs <= recordedMs + PID_REUSE_GRACE_MS;
-    }
-    return true;
-}
-export async function inspectProcess(pid, opts = {}) {
-    if (!Number.isInteger(pid) || pid <= 0) {
-        return { exists: false, name: null, startMs: null };
-    }
-    if (!opts.fresh) {
-        const cached = inspectCache.get(pid);
-        if (cached && cached.expires > Date.now())
-            return cached.snap;
-    }
-    const exists = isPidAlive(pid);
-    let snap = { exists, name: null, startMs: null };
-    if (exists) {
-        try {
-            snap =
-                process.platform === "win32"
-                    ? await inspectWindows(pid)
-                    : process.platform === "linux"
-                        ? await inspectLinux(pid)
-                        : await inspectPosix(pid);
-        }
-        catch {
-            snap = { exists: true, name: null, startMs: null };
-        }
-    }
-    inspectCache.set(pid, { expires: Date.now() + INSPECT_CACHE_MS, snap });
-    return snap;
-}
-export async function isRecordedPidLive(pid, recordedStartedAt, opts = {}) {
-    if (!Number.isInteger(pid) || pid <= 0)
-        return false;
-    const inspect = opts.inspect ??
-        ((value) => inspectProcess(value, opts.fresh === true ? { fresh: true } : {}));
-    const snapshot = await inspect(pid);
-    return isRecordedOwnerAlive(snapshot, recordedStartedAt);
-}
-async function inspectWindows(pid) {
-    if (!isPidAlive(pid))
-        return { exists: false, name: null, startMs: null };
-    const script = [
-        `$p = Get-Process -Id ${pid} -ErrorAction Stop`,
-        `$t = [DateTimeOffset]::new($p.StartTime).ToUnixTimeMilliseconds()`,
-        `Write-Output ($p.ProcessName + '|' + $t)`,
-    ].join("; ");
-    try {
-        const { stdout } = await execFileAsync("powershell.exe", ["-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-Command", script], { timeout: WINDOWS_INSPECT_TIMEOUT_MS, windowsHide: true });
-        const line = String(stdout).trim().split(/\r?\n/).at(-1) ?? "";
-        const sep = line.lastIndexOf("|");
-        if (sep <= 0)
-            return { exists: true, name: null, startMs: null };
-        const name = line.slice(0, sep).trim() || null;
-        const startMs = Number(line.slice(sep + 1));
-        return {
-            exists: true,
-            name,
-            startMs: Number.isFinite(startMs) ? startMs : null,
-        };
-    }
-    catch {
-        return { exists: isPidAlive(pid), name: null, startMs: null };
-    }
-}
-async function inspectLinux(pid) {
-    let name = null;
-    try {
-        name = (await fs.readFile(`/proc/${pid}/comm`, "utf8")).trim() || null;
-    }
-    catch {
-        return { exists: false, name: null, startMs: null };
-    }
-    const startMs = await linuxStartMs(pid);
-    return { exists: true, name, startMs };
-}
-async function linuxStartMs(pid) {
-    try {
-        const [stat, procStat] = await Promise.all([
-            fs.readFile("/proc/stat", "utf8"),
-            fs.readFile(`/proc/${pid}/stat`, "utf8"),
-        ]);
-        const btime = /^btime (\d+)$/m.exec(stat);
-        const closeParen = procStat.lastIndexOf(")");
-        if (!btime || closeParen < 0)
-            return linuxStatFallback(pid);
-        const fields = procStat.slice(closeParen + 2).trim().split(/\s+/);
-        const startTicks = Number(fields[19]);
-        const bootSec = Number(btime[1]);
-        if (!Number.isFinite(startTicks) || !Number.isFinite(bootSec))
-            return linuxStatFallback(pid);
-        return Math.round((bootSec + startTicks / 100) * 1000);
-    }
-    catch {
-        return linuxStatFallback(pid);
-    }
-}
-async function linuxStatFallback(pid) {
-    try {
-        const st = await fs.stat(`/proc/${pid}`);
-        const value = st.birthtimeMs > 0 ? st.birthtimeMs : st.ctimeMs;
-        return Number.isFinite(value) && value > 0 ? value : null;
-    }
-    catch {
-        return null;
-    }
-}
-async function inspectPosix(pid) {
-    if (!isPidAlive(pid))
-        return { exists: false, name: null, startMs: null };
-    try {
-        const { stdout } = await execFileAsync("ps", ["-p", String(pid), "-o", "lstart=", "-o", "comm="], { timeout: WINDOWS_INSPECT_TIMEOUT_MS });
-        const line = String(stdout).trim();
-        if (!line)
-            return { exists: isPidAlive(pid), name: null, startMs: null };
-        const match = /^(.*\d{4})\s+(\S+)$/.exec(line);
-        if (!match)
-            return { exists: true, name: line.split(/\s+/).at(-1) ?? null, startMs: null };
-        const startMs = Date.parse(match[1] ?? "");
-        return {
-            exists: true,
-            name: match[2] ?? null,
-            startMs: Number.isFinite(startMs) ? startMs : null,
-        };
-    }
-    catch {
-        return { exists: isPidAlive(pid), name: null, startMs: null };
-    }
-}
-//# sourceMappingURL=process-liveness.js.map

package/vendor/core/skin-pack.js

@@ -1,64 +0,0 @@
-import { normalizeBackgroundEffects } from "./types.js";
-export const SKIN_SCHEMA_ID = "beauticode.skin/v1";
-export const SKIN_ID_PATTERN = /^skin-[a-z0-9]{8,40}$/;
-export function isSafeSkinId(id) {
-    return typeof id === "string" && SKIN_ID_PATTERN.test(id);
-}
-export function isLoopbackHostname(hostname) {
-    const host = String(hostname ?? "").toLowerCase();
-    return host === "127.0.0.1" || host === "localhost" || host === "::1";
-}
-/**
- * Public catalog origin. HTTPS required except loopback HTTP for local dev.
- * Strips trailing slashes. Rejects credentials and unexpected protocols.
- */
-export function normalizeSkinCenterUrl(value) {
-    if (typeof value !== "string")
-        return null;
-    const trimmed = value.trim();
-    if (!trimmed)
-        return null;
-    try {
-        const url = new URL(trimmed);
-        if (url.username || url.password || url.hash)
-            return null;
-        if (url.protocol !== "https:" && url.protocol !== "http:")
-            return null;
-        if (url.protocol === "http:" && !isLoopbackHostname(url.hostname))
-            return null;
-        const path = url.pathname === "/" ? "" : url.pathname.replace(/\/+$/, "");
-        return `${url.origin}${path}`;
-    }
-    catch {
-        return null;
-    }
-}
-export function resolveSkinCenterUrl(explicit) {
-    return (normalizeSkinCenterUrl(explicit) ??
-        normalizeSkinCenterUrl(process.env.BEAUTICODE_SKIN_CENTER));
-}
-export function normalizeSavedThemeSource(value) {
-    if (!value || typeof value !== "object")
-        return null;
-    const raw = value;
-    if (raw.kind !== "skin-center")
-        return null;
-    const skinId = String(raw.skinId ?? "").trim();
-    const centerUrl = normalizeSkinCenterUrl(raw.centerUrl);
-    if (!isSafeSkinId(skinId) || !centerUrl)
-        return null;
-    return { kind: "skin-center", skinId, centerUrl };
-}
-export function publicSkinEffects(value) {
-    return normalizeBackgroundEffects(value);
-}
-export function skinMediaPath(centerUrl, skinId, kind) {
-    const origin = normalizeSkinCenterUrl(centerUrl);
-    if (!origin || !isSafeSkinId(skinId)) {
-        throw new Error("Invalid skin-center media path.");
-    }
-    if (kind === "json")
-        return `${origin}/api/skins/${skinId}`;
-    return `${origin}/api/skins/${skinId}/${kind}`;
-}
-//# sourceMappingURL=skin-pack.js.map