openworkgraph 0.2.12

package/dist/vendor/protocol/pairing.js

@@ -0,0 +1,71 @@
+/** Versioned, bounded pairing envelopes. These are encodings, not encryption.
+ * Algorithms are fixed per version; never accept an algorithm from the caller. */
+export const CLIENT_CODE_PREFIX = 'wgpc1_';
+export const PAIR_AUTHORIZATION_PREFIX = 'wgpa1_';
+/** Human-entered codes accept optional whitespace or a separator between groups. */
+export function normalizeShortPairingCode(value) {
+    const compact = value.trim().replace(/[\s-]/g, '');
+    return /^\d{8}$/.test(compact) ? compact : undefined;
+}
+/** Display/copy exactly eight digits; separators are accepted only on input. */
+export function formatShortPairingCode(value) {
+    const code = normalizeShortPairingCode(value);
+    if (!code)
+        throw new Error('短码必须为 8 位数字');
+    return code;
+}
+export function encodeBase64Url(bytes) {
+    return btoa(String.fromCharCode(...bytes)).replaceAll('+', '-').replaceAll('/', '_').replace(/=+$/, '');
+}
+export function decodeBase64Url(value, maxBytes) {
+    if (typeof value !== 'string' || !value || value.length > Math.ceil(maxBytes * 4 / 3) || !/^[A-Za-z0-9_-]+$/.test(value))
+        throw new Error('无效的配对编码');
+    const bytes = Uint8Array.from(atob(value.replaceAll('-', '+').replaceAll('_', '/')), c => c.charCodeAt(0));
+    if (bytes.length > maxBytes || encodeBase64Url(bytes) !== value)
+        throw new Error('无效的配对编码');
+    return bytes;
+}
+function encode(prefix, value) { return prefix + encodeBase64Url(new TextEncoder().encode(JSON.stringify(value))); }
+function decode(prefix, code) {
+    if (typeof code !== 'string' || !code.startsWith(prefix))
+        throw new Error('配对码版本不支持');
+    const value = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(decodeBase64Url(code.slice(prefix.length), 2048)));
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('无效的配对码');
+    return value;
+}
+export function encodeClientCode(value) {
+    return encode(CLIENT_CODE_PREFIX, { version: value.version, origin: value.origin, publicKey: value.publicKey, nonce: value.nonce });
+}
+export function parseClientCode(code) {
+    const value = decode(CLIENT_CODE_PREFIX, code);
+    if (value.version !== 1 || typeof value.origin !== 'string' || value.origin.length > 512 || typeof value.publicKey !== 'string' || typeof value.nonce !== 'string')
+        throw new Error('无效的客户端码');
+    const origin = new URL(value.origin);
+    if (!['http:', 'https:'].includes(origin.protocol) || origin.origin !== value.origin || origin.hostname.includes('*'))
+        throw new Error('客户端码来源无效');
+    const key = decodeBase64Url(value.publicKey, 65);
+    if (key.length !== 65 || key[0] !== 4 || decodeBase64Url(value.nonce, 32).length !== 32)
+        throw new Error('客户端公钥或挑战无效');
+    const result = { version: 1, origin: value.origin, publicKey: value.publicKey, nonce: value.nonce };
+    if (encodeClientCode(result) !== code)
+        throw new Error('客户端码字段或格式无效');
+    return result;
+}
+export function encodePairAuthorization(value) {
+    return encode(PAIR_AUTHORIZATION_PREFIX, { version: value.version, serviceId: value.serviceId, code: value.code, clientHash: value.clientHash, expiresAt: value.expiresAt });
+}
+export function parsePairAuthorization(code) {
+    const value = decode(PAIR_AUTHORIZATION_PREFIX, code);
+    if (value.version !== 1 || typeof value.serviceId !== 'string' || !/^[A-Za-z0-9-]{1,100}$/.test(value.serviceId) || typeof value.code !== 'string' || !/^[A-F0-9]{32}$/.test(value.code) || typeof value.clientHash !== 'string' || !/^[a-f0-9]{64}$/.test(value.clientHash) || typeof value.expiresAt !== 'number' || !Number.isSafeInteger(value.expiresAt) || value.expiresAt <= 0)
+        throw new Error('无效的配对授权码');
+    const result = value;
+    if (encodePairAuthorization(result) !== code)
+        throw new Error('授权码字段或格式无效');
+    return result;
+}
+/** UTF-8 JSON array gives unambiguous domain-separated signing bytes. */
+export function pairingProofMessage(serviceId, origin, authorization, clientCode, browserName) {
+    return new TextEncoder().encode(JSON.stringify(['openworkgraph:pair:v1', serviceId, origin, authorization, clientCode, browserName.trim()]));
+}
+//# sourceMappingURL=pairing.js.map

package/dist/vendor/protocol/preview.d.ts

@@ -0,0 +1,2 @@
+/** Shared topology rule for runtime, portable graphs and the browser. */
+export declare function previewEdgeError(sourceType: string, targetType: string, incomingCount: number): string | undefined;

package/dist/vendor/protocol/preview.js

@@ -0,0 +1,9 @@
+/** Shared topology rule for runtime, portable graphs and the browser. */
+export function previewEdgeError(sourceType, targetType, incomingCount) {
+    if (sourceType === 'preview' && targetType === 'preview')
+        return '预览节点之间不能连接。';
+    if (targetType === 'preview' && incomingCount >= 1)
+        return '预览节点只能有一个前驱。';
+    return undefined;
+}
+//# sourceMappingURL=preview.js.map

package/dist/vendor/protocol/resource-mime.d.ts

@@ -0,0 +1,2 @@
+/** Byte-based MIME detection shared by browser graph bundles and service storage. */
+export declare function sniffResourceMime(bytes: Uint8Array): string;

package/dist/vendor/protocol/resource-mime.js

@@ -0,0 +1,35 @@
+/** Byte-based MIME detection shared by browser graph bundles and service storage. */
+export function sniffResourceMime(bytes) {
+    const text = (start, end) => new TextDecoder().decode(bytes.subarray(start, end));
+    const starts = (signature) => signature.every((value, i) => bytes[i] === value);
+    if (starts([137, 80, 78, 71, 13, 10, 26, 10]))
+        return 'image/png';
+    if (starts([255, 216, 255]))
+        return 'image/jpeg';
+    if (/^GIF8[79]a/.test(text(0, 6)))
+        return 'image/gif';
+    if (text(0, 4) === 'RIFF' && text(8, 12) === 'WEBP')
+        return 'image/webp';
+    if (text(0, 5) === '%PDF-')
+        return 'application/pdf';
+    if (text(4, 8) === 'ftyp')
+        return 'video/mp4';
+    if (starts([26, 69, 223, 163]))
+        return 'video/webm';
+    try {
+        const content = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
+        let printable = true;
+        for (const char of content) {
+            const n = char.charCodeAt(0);
+            if (n < 32 && n !== 9 && n !== 10 && n !== 13) {
+                printable = false;
+                break;
+            }
+        }
+        if (printable)
+            return 'text/plain';
+    }
+    catch { /* Binary data has no text representation. */ }
+    return 'application/octet-stream';
+}
+//# sourceMappingURL=resource-mime.js.map

package/dist/video-thumbnail.d.ts

@@ -0,0 +1,2 @@
+/** Bound decoder work across all workspaces; only small frames reach Node. */
+export declare function videoThumbnail(path: string, size: number): Promise<Buffer>;

package/dist/video-thumbnail.js

@@ -0,0 +1,34 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import sharp from 'sharp';
+import { ServiceError } from './errors.js';
+const execute = promisify(execFile);
+let active = 0;
+const waiting = [];
+/** Bound decoder work across all workspaces; only small frames reach Node. */
+export async function videoThumbnail(path, size) {
+    if (active >= 2)
+        await new Promise(resolve => waiting.push(resolve));
+    else
+        active++;
+    try {
+        const { stdout } = await execute('ffmpeg', [
+            '-v', 'error', '-nostdin', '-protocol_whitelist', 'file,pipe', '-i', path,
+            '-map', '0:v:0', '-frames:v', '1', '-vf',
+            'scale=' + size + ':' + size + ':force_original_aspect_ratio=decrease',
+            '-threads', '1', '-f', 'image2pipe', '-vcodec', 'png', 'pipe:1',
+        ], { encoding: 'buffer', timeout: 10_000, maxBuffer: 2 * 1024 * 1024, windowsHide: true });
+        return await sharp(stdout).webp({ quality: 75 }).toBuffer();
+    }
+    catch (cause) {
+        throw new ServiceError('INVALID_REQUEST', '无法生成视频封面，请确认工作空间可使用 FFmpeg。', { cause });
+    }
+    finally {
+        const next = waiting.shift();
+        if (next)
+            next();
+        else
+            active--;
+    }
+}
+//# sourceMappingURL=video-thumbnail.js.map

package/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "openworkgraph", "version": "0.2.12", "type": "module",
+  "publishConfig": { "access": "public" },
+  "engines": { "node": ">=24.0.0" },
+  "bin": { "openworkgraph": "dist/cli.js" },
+  "files": ["dist/**/*.js", "dist/**/*.d.ts", "README.md"],
+  "scripts": { "prebuild": "node ../scripts/check-versions.mjs --quiet", "build": "tsc -p tsconfig.json && node scripts/vendor-protocol.mjs", "prepack": "node scripts/prepare-pack.mjs", "typecheck": "tsc -p tsconfig.json --noEmit", "start": "node dist/cli.js", "test": "node --test test/*.test.mjs" },
+  "dependencies": { "sharp": "^0.35.4" }
+}