makersclaw 0.8.4 → 0.8.5

package/r/transaction-list.json

@@ -5,7 +5,7 @@
   "title": "TransactionList",
   "description": "Money records as a plain list, in two variants: history (payments in and out, grouped by month, a received / paid / pending / failed mark and a signed amount) and invoices (number, date, a Paid / Due in N days / N days overdue badge, amount, download). Optional date-range filter, Export and per-row download. Empty, loading and error states built in.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.4/r/core.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.5/r/core.json"
   ],
   "dependencies": [],
   "files": [
@@ -46,7 +46,7 @@
   "docs": "Installed to components/makersclaw/blocks/transaction-list. Import: import { TransactionList } from \"@/components/makersclaw/blocks/transaction-list\". Props and an example: components/makersclaw/blocks/transaction-list/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.8.4",
+      "version": "0.8.5",
       "useWhen": "A billing page's invoices, an account's payment history, a wallet's recent activity: records read top to bottom, newest first. Not for records the founder sorts, filters by column or totals (data-table), or for one order (order-detail)."
     }
   }

package/r/trigger-picker.json

@@ -5,8 +5,8 @@
   "title": "TriggerPicker",
   "description": "What starts an automation, as a panel: by hand, on a schedule in the team's time zone, when an app sends an event, when one of an app's actions finishes, when a record is added or changed, when the automation's own web address is called (its secret made and replaced here, shown once), or when another automation finishes. The platform says which of these it runs (the list door's triggers); a connection's own events are listed as \"soon\" with what to use meanwhile. The schedule is offered in the shapes people ask for (every day, every weekday, every week, every hour, another schedule as five-field cron) with a time of day, a weekday, the team's zone or another, and a sentence saying it back (\"Runs weekdays at 07:00, team time\").",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.4/r/core.json",
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.4/r/automation-model.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.5/r/core.json",
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.5/r/automation-model.json"
   ],
   "dependencies": [],
   "files": [
@@ -54,7 +54,7 @@
   "docs": "Installed to components/makersclaw/blocks/trigger-picker. Import: import { TriggerPicker } from \"@/components/makersclaw/blocks/trigger-picker\". Props and an example: components/makersclaw/blocks/trigger-picker/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.8.4",
+      "version": "0.8.5",
       "useWhen": "An automation's trigger is edited in your own screen. automation-editor opens it when the trigger card is pressed; pass it the platform's triggers (useAutomations().triggers) so it offers what the platform runs."
     }
   }

package/r/whiteboard.json

@@ -5,8 +5,8 @@
   "title": "Whiteboard",
   "description": "A full-page freeform whiteboard on sketch-canvas: a top bar with the board's title (click to rename), the save state (Saving…, Saved, or the error with Retry), a Board / Text view switch, Export PNG and an optional Share button; under it the Miro-style canvas (tool rail, floating toolbar, zoom, undo). An empty board offers starter templates — blank, a grid of titled areas, a 2×2 matrix — and the Text view lists every word on the board for a screen reader or an agent. With onCreateTask, a selected note or text becomes a task from the top bar (\"Create task\", editable title; several notes make one task each), and a small badge marks it on the board from then on. The sketch is plain JSON; saves are async callbacks answering { ok }.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.4/r/core.json",
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.4/r/sketch-canvas.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.5/r/core.json",
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.5/r/sketch-canvas.json"
   ],
   "dependencies": [],
   "files": [
@@ -59,7 +59,7 @@
   "docs": "Installed to components/makersclaw/blocks/whiteboard. Import: import { Whiteboard, WHITEBOARD_TEMPLATES, gridSketch, matrixSketch } from \"@/components/makersclaw/blocks/whiteboard\". Props and an example: components/makersclaw/blocks/whiteboard/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.8.4",
+      "version": "0.8.5",
       "useWhen": "A screen is one board to think on: a team whiteboard, a planning or prioritisation board, a place to sketch an idea and keep it with a record. Not for marking up a screenshot (annotate), sketching a UI to build (sketch-to-app), a structured board of cards and connectors (flow-canvas), or a kanban (board)."
     }
   }

package/r/workflow-view.json

@@ -5,8 +5,8 @@
   "title": "WorkflowView",
   "description": "One job of the app's agent drawn as a graph on a dotted ground: the Trigger (\"Every weekday at 07:00\", \"When a deal is created\") → each step of the chosen run with how it went, as a mark and a word → the result. Over it a run picker with Re-run; in its head the Live switch and \"Trigger manually\" with its price; beside it the run history and the overview (run-history). Before any run it draws the job's declared steps in pencil, with an honest empty line. Fed by useJobs, useRuns and useRun (lib/hooks.js). Under about 768 px of its own width the history stacks under the graph and the graph runs top to bottom.",
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.4/r/core.json",
-    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.4/r/run-history.json"
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.5/r/core.json",
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.5/r/run-history.json"
   ],
   "dependencies": [],
   "files": [
@@ -48,7 +48,7 @@
   "docs": "Installed to components/makersclaw/blocks/workflow-view. Import: import { WorkflowView } from \"@/components/makersclaw/blocks/workflow-view\". Props and an example: components/makersclaw/blocks/workflow-view/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
   "meta": {
     "makersclaw": {
-      "version": "0.8.4",
+      "version": "0.8.5",
       "useWhen": "Superseded by automation-editor and run-view for an app whose jobs run on the automations engine; still the block for an app that has not moved (its jobs are the agent's wakes). A job's own page: the founder opens an automation to see what it does, how its last runs went and to run it now — a morning read, an inbox sweep, a nightly enrichment, an event-triggered workflow. For the job as a card beside the day's work use schedule-card; for a plain list of runs use run-history."
     }
   }

package/r/workspace-objects.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://ui.shadcn.com/schema/registry-item.json",
+  "name": "workspace-objects",
+  "type": "registry:block",
+  "title": "Workspace objects",
+  "description": "Reusable bounded file hashing, resumable workspace uploads and local file references. The host supplies authorized transport and storage.",
+  "registryDependencies": [
+    "https://cdn.jsdelivr.net/npm/makersclaw@0.8.5/r/core.json"
+  ],
+  "dependencies": [],
+  "files": [
+    {
+      "path": "registry/blocks/workspace-objects/index.js",
+      "type": "registry:component",
+      "target": "@components/makersclaw/blocks/workspace-objects/index.js",
+      "content": "export { createObjectClient, createLocalObjects, fingerprintFile, ObjectTransferError } from \"./objects.js\";\n"
+    },
+    {
+      "path": "registry/blocks/workspace-objects/objects.js",
+      "type": "registry:component",
+      "target": "@components/makersclaw/blocks/workspace-objects/objects.js",
+      "content": "// Pure transfer orchestration. All network and persistence authority belongs\n// to the injected host. Only one bounded file slice is read at a time.\nconst DEFAULT_PART = 8 * 1024 * 1024;\nconst MAX_PART = 64 * 1024 * 1024;\nconst hex = (bytes) => [...bytes].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\nconst stopped = (signal) => { if (signal?.aborted) throw new DOMException(\"Transfer cancelled\", \"AbortError\"); };\nconst hash = async (bytes) => hex(new Uint8Array(await globalThis.crypto.subtle.digest(\"SHA-256\", bytes)));\n\nexport class ObjectTransferError extends Error {\n  constructor(code, message) { super(message); this.name = \"ObjectTransferError\"; this.code = code; }\n}\n\nfunction fileCheck(file) {\n  if (!file || typeof file.slice !== \"function\" || !Number.isSafeInteger(file.size) || file.size <= 0)\n    throw new ObjectTransferError(\"invalid_file\", \"Choose a nonempty file.\");\n}\nfunction partCheck(size) {\n  if (!Number.isSafeInteger(size) || size < 1 || size > MAX_PART)\n    throw new ObjectTransferError(\"invalid_part_size\", \"The upload service returned an unsupported part size.\");\n}\nasync function partHash(file, start, size, signal) {\n  stopped(signal);\n  const bytes = await file.slice(start, Math.min(file.size, start + size)).arrayBuffer();\n  stopped(signal);\n  if (bytes.byteLength !== Math.min(size, file.size - start)) throw new ObjectTransferError(\"source_read_failed\", \"The original file could not be read completely.\");\n  return hash(bytes);\n}\n\n/** A content identity from every bounded slice, not just name/size/mtime.\n * It is a manifest fingerprint, deliberately not called a whole-file SHA256. */\nexport async function fingerprintFile(file, { partSize = DEFAULT_PART, signal, onProgress } = {}) {\n  fileCheck(file); partCheck(partSize);\n  const count = Math.ceil(file.size / partSize);\n  // The object service's 10 GiB target has 1280 parts. Bound hostile inputs\n  // before allocating the small hash manifest; never allocate file.size.\n  if (count > 16384) throw new ObjectTransferError(\"too_many_parts\", \"This file needs more parts than the transfer client supports.\");\n  const hashes = [];\n  for (let index = 0; index < count; index++) {\n    hashes.push(await partHash(file, index * partSize, partSize, signal));\n    onProgress?.({ stage: \"hashing\", loaded: Math.min(file.size, (index + 1) * partSize), total: file.size });\n  }\n  stopped(signal);\n  const identity = await hash(new TextEncoder().encode(JSON.stringify({ size: file.size, partSize, hashes })));\n  return { identity, partSize, hashes };\n}\n\n/** request paths are relative to the host object API. uploadPart is the host's\n * direct-to-storage upload, never a large request to the app data door. */\nexport function createObjectClient({ request, uploadPart, storage, scope = \"default\", partSize = DEFAULT_PART }) {\n  if (typeof request !== \"function\" || typeof uploadPart !== \"function\") throw new TypeError(\"Authorized request and uploadPart callbacks are required\");\n  const prefix = `workspace-objects:v1:${scope}:`;\n  const load = (id) => { try { return JSON.parse(storage?.getItem(prefix + id) || \"null\"); } catch { return null; } };\n  const keep = (id, value) => { try { storage?.setItem(prefix + id, JSON.stringify(value)); return Boolean(storage); } catch { return false; } };\n  const forget = (id) => { try { storage?.removeItem(prefix + id); } catch { /* transfer success does not depend on local storage */ } };\n  const call = (path, body, signal) => request(path, { method: body === undefined ? \"GET\" : \"POST\", ...(body === undefined ? {} : { body }), signal });\n\n  return {\n    getObject: (id, opts = {}) => call(`/${encodeURIComponent(id)}`, undefined, opts.signal),\n    getObjectUrl: (id, opts = {}) => call(`/${encodeURIComponent(id)}/url`, undefined, opts.signal),\n    listObjects: (opts = {}) => call(\"/\", undefined, opts.signal),\n    trashObject: (id, opts = {}) => request(`/${encodeURIComponent(id)}`, { method: \"DELETE\", signal: opts.signal }),\n    resumeState: load,\n    async uploadObject(file, { resumeId, signal, onProgress } = {}) {\n      fileCheck(file); stopped(signal);\n      const known = resumeId ? load(resumeId) : null;\n      if (resumeId && !known) throw new ObjectTransferError(\"resume_identity_missing\", \"Reselect the original file in the browser that started this upload, or start a new upload.\");\n      const fingerprint = await fingerprintFile(file, { partSize: known?.partSize || partSize, signal, onProgress });\n      if (known && (known.identity !== fingerprint.identity || known.size !== file.size))\n        throw new ObjectTransferError(\"resume_file_changed\", \"This is a different file. Choose the original file to resume, or start a new upload.\");\n      // Finalization may have succeeded just before its response was lost.\n      if (known) {\n        const previous = await call(`/${encodeURIComponent(known.objectId)}`, undefined, signal);\n        if (previous.object?.status === \"ready\") {\n          if (previous.object.id !== known.objectId || previous.object.size !== file.size) throw new ObjectTransferError(\"invalid_upload\", \"The completed file does not match this upload.\");\n          forget(resumeId);\n          onProgress?.({ stage: \"ready\", loaded: file.size, total: file.size, objectId: known.objectId });\n          return previous.object;\n        }\n      }\n      const begun = await call(\"/begin\", { name: file.name || \"Untitled file\", mime: file.type || \"application/octet-stream\", size: file.size, fingerprint: fingerprint.identity, ...(resumeId ? { resume_id: resumeId } : {}) }, signal);\n      const object = begun.object;\n      const upload = begun.upload;\n      if (!object?.id || !upload?.id) throw new ObjectTransferError(\"invalid_upload\", \"The upload service did not return an upload identity.\");\n      partCheck(upload.part_size);\n      if (upload.parts !== Math.ceil(file.size / upload.part_size)) throw new ObjectTransferError(\"invalid_upload\", \"The upload service returned an inconsistent part count.\");\n      if (upload.part_size !== fingerprint.partSize) throw new ObjectTransferError(\"invalid_upload\", \"The upload service changed the fingerprint part size. Start a new upload with the supported part size.\");\n      const current = fingerprint;\n      const resume = { id: upload.id, objectId: object.id, name: file.name || \"Untitled file\", size: file.size, partSize: upload.part_size, identity: current.identity };\n      const resumable = keep(upload.id, resume);\n      const complete = new Set(upload.completed_parts || []);\n      if ([...complete].some((i) => !Number.isInteger(i) || i < 0 || i >= upload.parts)) throw new ObjectTransferError(\"invalid_upload\", \"The upload service returned invalid completed parts.\");\n      let uploaded = [...complete].reduce((sum, i) => sum + Math.min(upload.part_size, file.size - i * upload.part_size), 0);\n      onProgress?.({ stage: \"uploading\", loaded: uploaded, total: file.size, objectId: object.id, resumeId: upload.id, resumable });\n      for (let index = 0; index < upload.parts; index++) {\n        stopped(signal);\n        if (complete.has(index)) continue;\n        const start = index * upload.part_size;\n        const blob = file.slice(start, Math.min(file.size, start + upload.part_size));\n        // Detect a mutable file changing after the initial identity pass.\n        const actual = await partHash(file, start, upload.part_size, signal);\n        if (actual !== current.hashes[index]) throw new ObjectTransferError(\"source_changed\", \"The original file changed during upload. Start a new upload from the finished file.\");\n        // A previous PUT may have succeeded just before the browser lost its\n        // response. Reconcile it before trying another immutable upload.\n        {\n          try {\n            await call(`/${encodeURIComponent(object.id)}/parts/${index}/complete`, { upload_id: upload.id, sha256: actual }, signal);\n            uploaded += blob.size;\n            onProgress?.({ stage: \"uploading\", loaded: uploaded, total: file.size, objectId: object.id, resumeId: upload.id, resumable });\n            continue;\n          } catch (error) {\n            if (error?.status !== 404 && ![\"part_missing\", \"object_part_missing\"].includes(error?.code)) throw error;\n          }\n        }\n        await uploadPart({ object, upload, index, blob, sha256: actual, signal, onProgress: (fraction) => onProgress?.({ stage: \"uploading\", loaded: uploaded + Math.round(blob.size * Math.max(0, Math.min(1, Number(fraction) || 0))), total: file.size, objectId: object.id, resumeId: upload.id, resumable }) });\n        stopped(signal);\n        await call(`/${encodeURIComponent(object.id)}/parts/${index}/complete`, { upload_id: upload.id, sha256: actual }, signal);\n        uploaded += blob.size;\n        onProgress?.({ stage: \"uploading\", loaded: uploaded, total: file.size, objectId: object.id, resumeId: upload.id, resumable });\n      }\n      stopped(signal);\n      const result = await call(`/${encodeURIComponent(object.id)}/complete`, { upload_id: upload.id }, signal);\n      if (result.object?.status !== \"ready\") throw new ObjectTransferError(\"not_ready\", \"The file is still being verified. Its upload can be resumed.\");\n      forget(upload.id);\n      onProgress?.({ stage: \"ready\", loaded: file.size, total: file.size, objectId: object.id });\n      return result.object;\n    },\n  };\n}\n\n/** Local File references survive editor changes, but not a browser restart.\n * Reopen/relink checks the complete bounded-slice fingerprint first. */\nexport function createLocalObjects({ createUrl = (file) => URL.createObjectURL(file), revokeUrl = (url) => URL.revokeObjectURL(url) } = {}) {\n  const entries = new Map();\n  return {\n    async register(file, options = {}) {\n      const fp = await fingerprintFile(file, options);\n      const id = `local:${fp.identity}`;\n      if (options.expectedId && options.expectedId !== id) throw new ObjectTransferError(\"local_file_changed\", \"Choose the original local file to relink this footage.\");\n      if (!entries.has(id)) entries.set(id, { file, url: createUrl(file), object: { id, name: file.name || \"Local file\", mime: file.type || \"application/octet-stream\", size: file.size, status: \"local\", version: 1, identity: fp.identity } });\n      return entries.get(id).object;\n    },\n    url(id) { const entry = entries.get(id); if (!entry) throw new ObjectTransferError(\"local_file_missing\", \"This footage is local to another browser session. Relink the original file or upload it to the workspace.\"); return { url: entry.url, local: true }; },\n    file(id) { return entries.get(id)?.file || null; },\n    release(id) { const entry = entries.get(id); if (entry) revokeUrl(entry.url); entries.delete(id); },\n    dispose() { for (const entry of entries.values()) revokeUrl(entry.url); entries.clear(); },\n  };\n}\n"
+    },
+    {
+      "path": "registry/blocks/workspace-objects/README.md",
+      "type": "registry:file",
+      "target": "@components/makersclaw/blocks/workspace-objects/README.md",
+      "content": "# Workspace objects\n\nA portable client for the platform object engine. The host injects authorized requests, direct storage uploads and optional resume-state storage. The block does not know credentials, workspace identity, app paths or billing.\n\n## Props\n\n`createObjectClient({request,uploadPart,storage,scope,partSize?})` returns `uploadObject`, `getObject`, `getObjectUrl`, `listObjects`, `trashObject` and `resumeState`.\n\n- `request(path,{method,body,signal})`: relative to the app's authorized `/_claw/objects`; resolves parsed JSON or throws an error preserving status/code. Begin binds the full content fingerprint; its part size must match the negotiated part size (8MiB default).\n- `uploadPart({object,upload,index,blob,sha256,signal,onProgress})`: upload this bounded Blob directly to its private storage grant. `onProgress` is fraction0–1. Never send binary through the app data door.\n- `storage`: optional localStorage-shaped getItem/setItem/removeItem, namespaced by `scope` (workspace and app identity). Contains identifiers and content fingerprints, never file bytes or credentials.\n- `uploadObject(file,{resumeId,signal,onProgress})` reports `{stage,loaded,total,objectId?,resumeId?,resumable?}`. Hashing and uploading are distinct stages. Returns a ready platform object only after final verification. Hashing scans every8MiB slice sequentially, including on resume; no giant ArrayBuffer or base64 payload. Fingerprints are hash manifests, not whole-file hashes.\n- `createLocalObjects()` holds browser File references. `register(file,{expectedId?,signal,onProgress})` returns a local object; `url(id)` requires the live file, `file(id)` enables optional upload, `release`/`dispose` revoke URLs. Local objects must be labelled as requiring relink on another device/restart. They are not a workspace backup.\n\n## Example\n\n```js\nconst objects = createObjectClient({ request: authorizedObjectRequest, uploadPart: directPartUpload, storage: localStorage, scope: `${workspaceId}:${appId}` });\nconst object = await objects.uploadObject(file, { onProgress: setProgress, signal });\nconst { url } = await objects.getObjectUrl(object.id);\n```\n\nThe host refreshes expiring read URLs while retaining playback position. Background media jobs take ready workspace object IDs; local footage must first be uploaded. Preserve original references when attaching proxy outputs. Quotas are reported by the server, not invented by this client.\n"
+    }
+  ],
+  "categories": [
+    "files",
+    "objects",
+    "upload",
+    "streaming",
+    "media"
+  ],
+  "docs": "Installed to components/makersclaw/blocks/workspace-objects. Import: import { createObjectClient, createLocalObjects, fingerprintFile, ObjectTransferError } from \"@/components/makersclaw/blocks/workspace-objects\". Props and an example: components/makersclaw/blocks/workspace-objects/README.md. Makersclaw builds whole apps from these blocks: https://makersclaw.com",
+  "meta": {
+    "makersclaw": {
+      "version": "0.8.5",
+      "useWhen": "Working with large files without loading the complete file into memory or embedding bytes in database rows."
+    }
+  }
+}

package/registry/blocks/workspace-objects/README.md

@@ -0,0 +1,23 @@
+# Workspace objects
+
+A portable client for the platform object engine. The host injects authorized requests, direct storage uploads and optional resume-state storage. The block does not know credentials, workspace identity, app paths or billing.
+
+## Props
+
+`createObjectClient({request,uploadPart,storage,scope,partSize?})` returns `uploadObject`, `getObject`, `getObjectUrl`, `listObjects`, `trashObject` and `resumeState`.
+
+- `request(path,{method,body,signal})`: relative to the app's authorized `/_claw/objects`; resolves parsed JSON or throws an error preserving status/code. Begin binds the full content fingerprint; its part size must match the negotiated part size (8MiB default).
+- `uploadPart({object,upload,index,blob,sha256,signal,onProgress})`: upload this bounded Blob directly to its private storage grant. `onProgress` is fraction0–1. Never send binary through the app data door.
+- `storage`: optional localStorage-shaped getItem/setItem/removeItem, namespaced by `scope` (workspace and app identity). Contains identifiers and content fingerprints, never file bytes or credentials.
+- `uploadObject(file,{resumeId,signal,onProgress})` reports `{stage,loaded,total,objectId?,resumeId?,resumable?}`. Hashing and uploading are distinct stages. Returns a ready platform object only after final verification. Hashing scans every8MiB slice sequentially, including on resume; no giant ArrayBuffer or base64 payload. Fingerprints are hash manifests, not whole-file hashes.
+- `createLocalObjects()` holds browser File references. `register(file,{expectedId?,signal,onProgress})` returns a local object; `url(id)` requires the live file, `file(id)` enables optional upload, `release`/`dispose` revoke URLs. Local objects must be labelled as requiring relink on another device/restart. They are not a workspace backup.
+
+## Example
+
+```js
+const objects = createObjectClient({ request: authorizedObjectRequest, uploadPart: directPartUpload, storage: localStorage, scope: `${workspaceId}:${appId}` });
+const object = await objects.uploadObject(file, { onProgress: setProgress, signal });
+const { url } = await objects.getObjectUrl(object.id);
+```
+
+The host refreshes expiring read URLs while retaining playback position. Background media jobs take ready workspace object IDs; local footage must first be uploaded. Preserve original references when attaching proxy outputs. Quotas are reported by the server, not invented by this client.

package/registry/blocks/workspace-objects/block.json

@@ -0,0 +1,10 @@
+{
+  "name": "workspace-objects",
+  "title": "Workspace objects",
+  "description": "Reusable bounded file hashing, resumable workspace uploads and local file references. The host supplies authorized transport and storage.",
+  "useWhen": "Working with large files without loading the complete file into memory or embedding bytes in database rows.",
+  "tags": ["files", "objects", "upload", "streaming", "media"],
+  "exports": ["createObjectClient", "createLocalObjects", "fingerprintFile", "ObjectTransferError"],
+  "files": ["index.js", "objects.js"],
+  "requires": []
+}

package/registry/blocks/workspace-objects/demo.jsx

@@ -0,0 +1,3 @@
+export default function WorkspaceObjectsDemo() {
+  return <p className="text-sm text-muted-foreground">The host supplies authorized storage and upload callbacks. Files are read in bounded parts; local references stay on this device until uploaded.</p>;
+}

package/registry/blocks/workspace-objects/index.js

@@ -0,0 +1 @@
+export { createObjectClient, createLocalObjects, fingerprintFile, ObjectTransferError } from "./objects.js";

package/registry/blocks/workspace-objects/objects.js

@@ -0,0 +1,147 @@
+// Pure transfer orchestration. All network and persistence authority belongs
+// to the injected host. Only one bounded file slice is read at a time.
+const DEFAULT_PART = 8 * 1024 * 1024;
+const MAX_PART = 64 * 1024 * 1024;
+const hex = (bytes) => [...bytes].map((b) => b.toString(16).padStart(2, "0")).join("");
+const stopped = (signal) => { if (signal?.aborted) throw new DOMException("Transfer cancelled", "AbortError"); };
+const hash = async (bytes) => hex(new Uint8Array(await globalThis.crypto.subtle.digest("SHA-256", bytes)));
+
+export class ObjectTransferError extends Error {
+  constructor(code, message) { super(message); this.name = "ObjectTransferError"; this.code = code; }
+}
+
+function fileCheck(file) {
+  if (!file || typeof file.slice !== "function" || !Number.isSafeInteger(file.size) || file.size <= 0)
+    throw new ObjectTransferError("invalid_file", "Choose a nonempty file.");
+}
+function partCheck(size) {
+  if (!Number.isSafeInteger(size) || size < 1 || size > MAX_PART)
+    throw new ObjectTransferError("invalid_part_size", "The upload service returned an unsupported part size.");
+}
+async function partHash(file, start, size, signal) {
+  stopped(signal);
+  const bytes = await file.slice(start, Math.min(file.size, start + size)).arrayBuffer();
+  stopped(signal);
+  if (bytes.byteLength !== Math.min(size, file.size - start)) throw new ObjectTransferError("source_read_failed", "The original file could not be read completely.");
+  return hash(bytes);
+}
+
+/** A content identity from every bounded slice, not just name/size/mtime.
+ * It is a manifest fingerprint, deliberately not called a whole-file SHA256. */
+export async function fingerprintFile(file, { partSize = DEFAULT_PART, signal, onProgress } = {}) {
+  fileCheck(file); partCheck(partSize);
+  const count = Math.ceil(file.size / partSize);
+  // The object service's 10 GiB target has 1280 parts. Bound hostile inputs
+  // before allocating the small hash manifest; never allocate file.size.
+  if (count > 16384) throw new ObjectTransferError("too_many_parts", "This file needs more parts than the transfer client supports.");
+  const hashes = [];
+  for (let index = 0; index < count; index++) {
+    hashes.push(await partHash(file, index * partSize, partSize, signal));
+    onProgress?.({ stage: "hashing", loaded: Math.min(file.size, (index + 1) * partSize), total: file.size });
+  }
+  stopped(signal);
+  const identity = await hash(new TextEncoder().encode(JSON.stringify({ size: file.size, partSize, hashes })));
+  return { identity, partSize, hashes };
+}
+
+/** request paths are relative to the host object API. uploadPart is the host's
+ * direct-to-storage upload, never a large request to the app data door. */
+export function createObjectClient({ request, uploadPart, storage, scope = "default", partSize = DEFAULT_PART }) {
+  if (typeof request !== "function" || typeof uploadPart !== "function") throw new TypeError("Authorized request and uploadPart callbacks are required");
+  const prefix = `workspace-objects:v1:${scope}:`;
+  const load = (id) => { try { return JSON.parse(storage?.getItem(prefix + id) || "null"); } catch { return null; } };
+  const keep = (id, value) => { try { storage?.setItem(prefix + id, JSON.stringify(value)); return Boolean(storage); } catch { return false; } };
+  const forget = (id) => { try { storage?.removeItem(prefix + id); } catch { /* transfer success does not depend on local storage */ } };
+  const call = (path, body, signal) => request(path, { method: body === undefined ? "GET" : "POST", ...(body === undefined ? {} : { body }), signal });
+
+  return {
+    getObject: (id, opts = {}) => call(`/${encodeURIComponent(id)}`, undefined, opts.signal),
+    getObjectUrl: (id, opts = {}) => call(`/${encodeURIComponent(id)}/url`, undefined, opts.signal),
+    listObjects: (opts = {}) => call("/", undefined, opts.signal),
+    trashObject: (id, opts = {}) => request(`/${encodeURIComponent(id)}`, { method: "DELETE", signal: opts.signal }),
+    resumeState: load,
+    async uploadObject(file, { resumeId, signal, onProgress } = {}) {
+      fileCheck(file); stopped(signal);
+      const known = resumeId ? load(resumeId) : null;
+      if (resumeId && !known) throw new ObjectTransferError("resume_identity_missing", "Reselect the original file in the browser that started this upload, or start a new upload.");
+      const fingerprint = await fingerprintFile(file, { partSize: known?.partSize || partSize, signal, onProgress });
+      if (known && (known.identity !== fingerprint.identity || known.size !== file.size))
+        throw new ObjectTransferError("resume_file_changed", "This is a different file. Choose the original file to resume, or start a new upload.");
+      // Finalization may have succeeded just before its response was lost.
+      if (known) {
+        const previous = await call(`/${encodeURIComponent(known.objectId)}`, undefined, signal);
+        if (previous.object?.status === "ready") {
+          if (previous.object.id !== known.objectId || previous.object.size !== file.size) throw new ObjectTransferError("invalid_upload", "The completed file does not match this upload.");
+          forget(resumeId);
+          onProgress?.({ stage: "ready", loaded: file.size, total: file.size, objectId: known.objectId });
+          return previous.object;
+        }
+      }
+      const begun = await call("/begin", { name: file.name || "Untitled file", mime: file.type || "application/octet-stream", size: file.size, fingerprint: fingerprint.identity, ...(resumeId ? { resume_id: resumeId } : {}) }, signal);
+      const object = begun.object;
+      const upload = begun.upload;
+      if (!object?.id || !upload?.id) throw new ObjectTransferError("invalid_upload", "The upload service did not return an upload identity.");
+      partCheck(upload.part_size);
+      if (upload.parts !== Math.ceil(file.size / upload.part_size)) throw new ObjectTransferError("invalid_upload", "The upload service returned an inconsistent part count.");
+      if (upload.part_size !== fingerprint.partSize) throw new ObjectTransferError("invalid_upload", "The upload service changed the fingerprint part size. Start a new upload with the supported part size.");
+      const current = fingerprint;
+      const resume = { id: upload.id, objectId: object.id, name: file.name || "Untitled file", size: file.size, partSize: upload.part_size, identity: current.identity };
+      const resumable = keep(upload.id, resume);
+      const complete = new Set(upload.completed_parts || []);
+      if ([...complete].some((i) => !Number.isInteger(i) || i < 0 || i >= upload.parts)) throw new ObjectTransferError("invalid_upload", "The upload service returned invalid completed parts.");
+      let uploaded = [...complete].reduce((sum, i) => sum + Math.min(upload.part_size, file.size - i * upload.part_size), 0);
+      onProgress?.({ stage: "uploading", loaded: uploaded, total: file.size, objectId: object.id, resumeId: upload.id, resumable });
+      for (let index = 0; index < upload.parts; index++) {
+        stopped(signal);
+        if (complete.has(index)) continue;
+        const start = index * upload.part_size;
+        const blob = file.slice(start, Math.min(file.size, start + upload.part_size));
+        // Detect a mutable file changing after the initial identity pass.
+        const actual = await partHash(file, start, upload.part_size, signal);
+        if (actual !== current.hashes[index]) throw new ObjectTransferError("source_changed", "The original file changed during upload. Start a new upload from the finished file.");
+        // A previous PUT may have succeeded just before the browser lost its
+        // response. Reconcile it before trying another immutable upload.
+        {
+          try {
+            await call(`/${encodeURIComponent(object.id)}/parts/${index}/complete`, { upload_id: upload.id, sha256: actual }, signal);
+            uploaded += blob.size;
+            onProgress?.({ stage: "uploading", loaded: uploaded, total: file.size, objectId: object.id, resumeId: upload.id, resumable });
+            continue;
+          } catch (error) {
+            if (error?.status !== 404 && !["part_missing", "object_part_missing"].includes(error?.code)) throw error;
+          }
+        }
+        await uploadPart({ object, upload, index, blob, sha256: actual, signal, onProgress: (fraction) => onProgress?.({ stage: "uploading", loaded: uploaded + Math.round(blob.size * Math.max(0, Math.min(1, Number(fraction) || 0))), total: file.size, objectId: object.id, resumeId: upload.id, resumable }) });
+        stopped(signal);
+        await call(`/${encodeURIComponent(object.id)}/parts/${index}/complete`, { upload_id: upload.id, sha256: actual }, signal);
+        uploaded += blob.size;
+        onProgress?.({ stage: "uploading", loaded: uploaded, total: file.size, objectId: object.id, resumeId: upload.id, resumable });
+      }
+      stopped(signal);
+      const result = await call(`/${encodeURIComponent(object.id)}/complete`, { upload_id: upload.id }, signal);
+      if (result.object?.status !== "ready") throw new ObjectTransferError("not_ready", "The file is still being verified. Its upload can be resumed.");
+      forget(upload.id);
+      onProgress?.({ stage: "ready", loaded: file.size, total: file.size, objectId: object.id });
+      return result.object;
+    },
+  };
+}
+
+/** Local File references survive editor changes, but not a browser restart.
+ * Reopen/relink checks the complete bounded-slice fingerprint first. */
+export function createLocalObjects({ createUrl = (file) => URL.createObjectURL(file), revokeUrl = (url) => URL.revokeObjectURL(url) } = {}) {
+  const entries = new Map();
+  return {
+    async register(file, options = {}) {
+      const fp = await fingerprintFile(file, options);
+      const id = `local:${fp.identity}`;
+      if (options.expectedId && options.expectedId !== id) throw new ObjectTransferError("local_file_changed", "Choose the original local file to relink this footage.");
+      if (!entries.has(id)) entries.set(id, { file, url: createUrl(file), object: { id, name: file.name || "Local file", mime: file.type || "application/octet-stream", size: file.size, status: "local", version: 1, identity: fp.identity } });
+      return entries.get(id).object;
+    },
+    url(id) { const entry = entries.get(id); if (!entry) throw new ObjectTransferError("local_file_missing", "This footage is local to another browser session. Relink the original file or upload it to the workspace."); return { url: entry.url, local: true }; },
+    file(id) { return entries.get(id)?.file || null; },
+    release(id) { const entry = entries.get(id); if (entry) revokeUrl(entry.url); entries.delete(id); },
+    dispose() { for (const entry of entries.values()) revokeUrl(entry.url); entries.clear(); },
+  };
+}