shennian 0.3.86 → 0.4.0

package/dist/src/fs/boundary.js

@@ -1,185 +1 @@
-// @arch docs/architecture/cli/daemon.md#文件系统权限边界
-// @test src/__tests__/fs-boundary.test.ts
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-const WINDOWS_ABSOLUTE_RE = /^[A-Za-z]:([\\/]|$)/;
-const WINDOWS_UNC_RE = /^\\\\[^\\]+\\[^\\]+/;
-const WINDOWS_DRIVE_RELATIVE_RE = /^[A-Za-z]:(?![\\/])/;
-function isWindowsAbsolutePath(input) {
-    return WINDOWS_ABSOLUTE_RE.test(input) || WINDOWS_UNC_RE.test(input);
-}
-function hasWindowsDriveRelativePrefix(input) {
-    return WINDOWS_DRIVE_RELATIVE_RE.test(input);
-}
-function normalizeWindowsAbsolutePath(input) {
-    return input.replace(/^[/\\]([A-Za-z]:[\\/].*)$/, '$1');
-}
-function isHomeRelativePath(input) {
-    return input === '~' || input.startsWith('~/') || input.startsWith('~\\');
-}
-function pathFlavor(input) {
-    return isWindowsAbsolutePath(normalizeWindowsAbsolutePath(input)) ? 'win32' : 'posix';
-}
-function pathApi(flavor) {
-    return flavor === 'win32' ? path.win32 : path.posix;
-}
-function normalizeForCompare(input, flavor) {
-    const api = pathApi(flavor);
-    const normalized = api.normalize(input);
-    const trimmed = normalized.length > api.parse(normalized).root.length
-        ? normalized.replace(/[\\/]+$/, '')
-        : normalized;
-    return flavor === 'win32' ? trimmed.toLowerCase() : trimmed;
-}
-function isWithinOrEqual(candidate, root, flavor) {
-    const api = pathApi(flavor);
-    const normalizedCandidate = normalizeForCompare(candidate, flavor);
-    const normalizedRoot = normalizeForCompare(root, flavor);
-    if (normalizedCandidate === normalizedRoot)
-        return true;
-    const relative = api.relative(normalizedRoot, normalizedCandidate);
-    return Boolean(relative) && !relative.startsWith('..') && !api.isAbsolute(relative);
-}
-function safeRealpath(pathValue) {
-    try {
-        return fs.realpathSync.native(pathValue);
-    }
-    catch {
-        return null;
-    }
-}
-async function safeRealpathAsync(pathValue) {
-    try {
-        return await fs.promises.realpath(pathValue);
-    }
-    catch {
-        return null;
-    }
-}
-export function resolveSessionWorkDir(input) {
-    if (!input)
-        return os.homedir();
-    const normalizedInput = normalizeWindowsAbsolutePath(input);
-    const flavor = pathFlavor(normalizedInput);
-    const api = pathApi(flavor);
-    if (isHomeRelativePath(normalizedInput)) {
-        return path.join(os.homedir(), normalizedInput.slice(1).replace(/^[/\\]+/, ''));
-    }
-    if (process.platform === 'win32') {
-        const normalized = normalizedInput.replace(/\\/g, '/');
-        if (normalized === '/tmp' || normalized.startsWith('/tmp/')) {
-            const suffix = normalized.slice('/tmp'.length).replace(/^\/+/, '');
-            return suffix ? path.win32.join(os.tmpdir(), ...suffix.split('/')) : os.tmpdir();
-        }
-    }
-    if (isWindowsAbsolutePath(normalizedInput)) {
-        return path.win32.resolve(normalizedInput);
-    }
-    return api.resolve(normalizedInput);
-}
-export function createAuthorizedFsRoot(rawRoot) {
-    const normalized = resolveSessionWorkDir(rawRoot);
-    const flavor = pathFlavor(normalized);
-    const stat = safeStat(normalized);
-    const file = typeof stat?.isFile === 'function' ? stat.isFile() : false;
-    const boundary = file ? pathApi(flavor).dirname(normalized) : normalized;
-    return {
-        raw: rawRoot,
-        normalized,
-        boundary,
-        real: safeRealpath(boundary),
-        flavor,
-        file,
-    };
-}
-export async function createAuthorizedFsRootAsync(rawRoot) {
-    const normalized = resolveSessionWorkDir(rawRoot);
-    const flavor = pathFlavor(normalized);
-    const stat = await safeStatAsync(normalized);
-    const file = typeof stat?.isFile === 'function' ? stat.isFile() : false;
-    const boundary = file ? pathApi(flavor).dirname(normalized) : normalized;
-    return {
-        raw: rawRoot,
-        normalized,
-        boundary,
-        real: await safeRealpathAsync(boundary),
-        flavor,
-        file,
-    };
-}
-export function resolveAuthorizedPath(rawPath, root) {
-    const input = String(rawPath || '').trim() || root.normalized;
-    const normalizedInput = isHomeRelativePath(input)
-        ? resolveSessionWorkDir(input)
-        : normalizeWindowsAbsolutePath(input);
-    const api = pathApi(root.flavor);
-    if (hasWindowsDriveRelativePrefix(normalizedInput)) {
-        return { ok: false, error: `Access denied: ${rawPath}` };
-    }
-    const candidate = api.isAbsolute(normalizedInput)
-        ? api.resolve(normalizedInput)
-        : api.resolve(root.boundary, normalizedInput);
-    if (!isWithinOrEqual(candidate, root.boundary, root.flavor)) {
-        return { ok: false, error: `Access denied: ${rawPath}` };
-    }
-    if (root.file && normalizeForCompare(candidate, root.flavor) !== normalizeForCompare(root.normalized, root.flavor)) {
-        return { ok: false, error: `Access denied: ${rawPath}` };
-    }
-    const realCandidate = safeRealpath(candidate);
-    if (realCandidate) {
-        const realRoot = root.real ?? safeRealpath(root.boundary);
-        if (realRoot && !isWithinOrEqual(realCandidate, realRoot, pathFlavor(realRoot))) {
-            return { ok: false, error: `Access denied: ${rawPath}` };
-        }
-    }
-    return { ok: true, path: candidate, root };
-}
-export async function resolveAuthorizedPathAsync(rawPath, root) {
-    const input = String(rawPath || '').trim() || root.normalized;
-    const normalizedInput = isHomeRelativePath(input)
-        ? resolveSessionWorkDir(input)
-        : normalizeWindowsAbsolutePath(input);
-    const api = pathApi(root.flavor);
-    if (hasWindowsDriveRelativePrefix(normalizedInput)) {
-        return { ok: false, error: `Access denied: ${rawPath}` };
-    }
-    const candidate = api.isAbsolute(normalizedInput)
-        ? api.resolve(normalizedInput)
-        : api.resolve(root.boundary, normalizedInput);
-    if (!isWithinOrEqual(candidate, root.boundary, root.flavor)) {
-        return { ok: false, error: `Access denied: ${rawPath}` };
-    }
-    if (root.file
-        && normalizeForCompare(candidate, root.flavor) !== normalizeForCompare(root.normalized, root.flavor)) {
-        return { ok: false, error: `Access denied: ${rawPath}` };
-    }
-    const realCandidate = await safeRealpathAsync(candidate);
-    if (realCandidate) {
-        const realRoot = root.real ?? await safeRealpathAsync(root.boundary);
-        if (realRoot && !isWithinOrEqual(realCandidate, realRoot, pathFlavor(realRoot))) {
-            return { ok: false, error: `Access denied: ${rawPath}` };
-        }
-    }
-    return { ok: true, path: candidate, root };
-}
-export function isAuthorizedRootPath(pathValue, root) {
-    return isWithinOrEqual(pathValue, root.boundary, root.flavor) &&
-        normalizeForCompare(pathValue, root.flavor) === normalizeForCompare(root.boundary, root.flavor);
-}
-function safeStat(pathValue) {
-    try {
-        return fs.statSync(pathValue);
-    }
-    catch {
-        return null;
-    }
-}
-async function safeStatAsync(pathValue) {
-    try {
-        return await fs.promises.stat(pathValue);
-    }
-    catch {
-        return null;
-    }
-}
+import p from"node:fs";import m from"node:os";import u from"node:path";const R=/^[A-Za-z]:([\\/]|$)/,$=/^\\\\[^\\]+\\[^\\]+/,k=/^[A-Za-z]:(?![\\/])/;function b(n){return R.test(n)||$.test(n)}function W(n){return k.test(n)}function A(n){return n.replace(/^[/\\]([A-Za-z]:[\\/].*)$/,"$1")}function h(n){return n==="~"||n.startsWith("~/")||n.startsWith("~\\")}function f(n){return b(A(n))?"win32":"posix"}function l(n){return n==="win32"?u.win32:u.posix}function o(n,e){const i=l(e),r=i.normalize(n),t=r.length>i.parse(r).root.length?r.replace(/[\\/]+$/,""):r;return e==="win32"?t.toLowerCase():t}function d(n,e,i){const r=l(i),t=o(n,i),s=o(e,i);if(t===s)return!0;const a=r.relative(s,t);return!!a&&!a.startsWith("..")&&!r.isAbsolute(a)}function y(n){try{return p.realpathSync.native(n)}catch{return null}}async function z(n){try{return await p.promises.realpath(n)}catch{return null}}function v(n){if(!n)return m.homedir();const e=A(n),i=f(e),r=l(i);if(h(e))return u.join(m.homedir(),e.slice(1).replace(/^[/\\]+/,""));if(process.platform==="win32"){const t=e.replace(/\\/g,"/");if(t==="/tmp"||t.startsWith("/tmp/")){const s=t.slice(4).replace(/^\/+/,"");return s?u.win32.join(m.tmpdir(),...s.split("/")):m.tmpdir()}}return b(e)?u.win32.resolve(e):r.resolve(e)}function I(n){const e=v(n),i=f(e),r=S(e),t=typeof r?.isFile=="function"?r.isFile():!1,s=t?l(i).dirname(e):e;return{raw:n,normalized:e,boundary:s,real:y(s),flavor:i,file:t}}async function _(n){const e=v(n),i=f(e),r=await x(e),t=typeof r?.isFile=="function"?r.isFile():!1,s=t?l(i).dirname(e):e;return{raw:n,normalized:e,boundary:s,real:await z(s),flavor:i,file:t}}function g(n,e){const i=String(n||"").trim()||e.normalized,r=h(i)?v(i):A(i),t=l(e.flavor);if(W(r))return{ok:!1,error:`Access denied: ${n}`};const s=t.isAbsolute(r)?t.resolve(r):t.resolve(e.boundary,r);if(!d(s,e.boundary,e.flavor))return{ok:!1,error:`Access denied: ${n}`};if(e.file&&o(s,e.flavor)!==o(e.normalized,e.flavor))return{ok:!1,error:`Access denied: ${n}`};const a=y(s);if(a){const c=e.real??y(e.boundary);if(c&&!d(a,c,f(c)))return{ok:!1,error:`Access denied: ${n}`}}return{ok:!0,path:s,root:e}}async function C(n,e){const i=String(n||"").trim()||e.normalized,r=h(i)?v(i):A(i),t=l(e.flavor);if(W(r))return{ok:!1,error:`Access denied: ${n}`};const s=t.isAbsolute(r)?t.resolve(r):t.resolve(e.boundary,r);if(!d(s,e.boundary,e.flavor))return{ok:!1,error:`Access denied: ${n}`};if(e.file&&o(s,e.flavor)!==o(e.normalized,e.flavor))return{ok:!1,error:`Access denied: ${n}`};const a=await z(s);if(a){const c=e.real??await z(e.boundary);if(c&&!d(a,c,f(c)))return{ok:!1,error:`Access denied: ${n}`}}return{ok:!0,path:s,root:e}}function D(n,e){return d(n,e.boundary,e.flavor)&&o(n,e.flavor)===o(e.boundary,e.flavor)}function S(n){try{return p.statSync(n)}catch{return null}}async function x(n){try{return await p.promises.stat(n)}catch{return null}}export{I as createAuthorizedFsRoot,_ as createAuthorizedFsRootAsync,D as isAuthorizedRootPath,g as resolveAuthorizedPath,C as resolveAuthorizedPathAsync,v as resolveSessionWorkDir};

package/dist/src/fs/handler.js

@@ -1,130 +1 @@
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { normalizePath, isPathSafe } from './security.js';
-const FILE_SYSTEM_ROOTS_PATH = '__roots__';
-const MAX_READ_SIZE = 100 * 1024;
-const MAX_TRANSFER_SIZE = 20 * 1024 * 1024;
-const CHUNK_SIZE = 64 * 1024;
-const RATE_LIMIT_BYTES_PER_SEC = 5 * 1024 * 1024;
-function sleep(ms) {
-    return new Promise((r) => setTimeout(r, ms));
-}
-function listFileSystemRoots() {
-    if (os.platform() === 'win32') {
-        const entries = [];
-        for (let code = 65; code <= 90; code += 1) {
-            const drive = `${String.fromCharCode(code)}:\\`;
-            if (!fs.existsSync(drive))
-                continue;
-            entries.push({ name: drive, path: drive, isDir: true });
-        }
-        return { entries };
-    }
-    return { entries: [{ name: '/', path: '/', isDir: true }] };
-}
-export function handleFsLs(reqPath) {
-    if (reqPath === FILE_SYSTEM_ROOTS_PATH) {
-        return listFileSystemRoots();
-    }
-    const normalized = normalizePath(reqPath);
-    if (!isPathSafe(normalized)) {
-        return { error: `Access denied: ${reqPath}` };
-    }
-    try {
-        const dirents = fs.readdirSync(normalized, { withFileTypes: true });
-        const entries = dirents.map((d) => {
-            const fullPath = path.join(normalized, d.name);
-            const isDir = d.isDirectory();
-            const entry = { name: d.name, path: fullPath, isDir };
-            try {
-                const stat = fs.statSync(fullPath);
-                entry.size = isDir ? undefined : stat.size;
-                entry.modifiedAt = stat.mtimeMs;
-            }
-            catch {
-                // stat failure is non-fatal
-            }
-            return entry;
-        });
-        return { entries };
-    }
-    catch (err) {
-        return { error: `Failed to list ${reqPath}: ${err.message}` };
-    }
-}
-export function handleFsRead(reqPath) {
-    const normalized = normalizePath(reqPath);
-    if (!isPathSafe(normalized)) {
-        return { error: `Access denied: ${reqPath}` };
-    }
-    try {
-        const stat = fs.statSync(normalized);
-        if (stat.isDirectory()) {
-            return { error: `Not a file: ${reqPath}` };
-        }
-        if (stat.size > MAX_READ_SIZE) {
-            return { error: `File too large (${stat.size} bytes, max ${MAX_READ_SIZE})` };
-        }
-        const content = fs.readFileSync(normalized, 'utf-8');
-        return { path: normalized, content };
-    }
-    catch (err) {
-        return { error: `Failed to read ${reqPath}: ${err.message}` };
-    }
-}
-export async function* handleFsDownload(req, onProgress) {
-    const filePath = req.path;
-    if (!filePath) {
-        throw new Error('Missing path for download');
-    }
-    const normalized = normalizePath(filePath);
-    if (!isPathSafe(normalized)) {
-        throw new Error(`Access denied: ${filePath}`);
-    }
-    const stat = fs.statSync(normalized);
-    if (stat.size > MAX_TRANSFER_SIZE) {
-        throw new Error(`File too large (${stat.size} bytes, max ${MAX_TRANSFER_SIZE})`);
-    }
-    const buf = fs.readFileSync(normalized);
-    const total = Math.ceil(buf.length / CHUNK_SIZE);
-    const chunksPerSec = Math.floor(RATE_LIMIT_BYTES_PER_SEC / CHUNK_SIZE);
-    const delayMs = chunksPerSec > 0 ? Math.ceil(1000 / chunksPerSec) : 0;
-    for (let seq = 0; seq < total; seq++) {
-        const start = seq * CHUNK_SIZE;
-        const end = Math.min(start + CHUNK_SIZE, buf.length);
-        const data = buf.subarray(start, end).toString('base64');
-        yield { transferId: req.transferId, seq, total, data };
-        onProgress?.({
-            transferId: req.transferId,
-            seq,
-            total,
-            bytesSent: end,
-            bytesTotal: buf.length,
-        });
-        if (delayMs > 0 && seq < total - 1) {
-            await sleep(delayMs);
-        }
-    }
-}
-export function handleFsUploadInit(req) {
-    const targetPath = req.targetPath ?? req.path;
-    if (!targetPath) {
-        return { error: 'Missing targetPath for upload' };
-    }
-    const normalized = normalizePath(targetPath);
-    if (!isPathSafe(normalized)) {
-        return { error: `Access denied: ${targetPath}` };
-    }
-    if (req.size != null && req.size > MAX_TRANSFER_SIZE) {
-        return { error: `File too large (${req.size} bytes, max ${MAX_TRANSFER_SIZE})` };
-    }
-    const dir = path.dirname(normalized);
-    fs.mkdirSync(dir, { recursive: true });
-    return { targetPath: normalized };
-}
-export function handleFsUploadChunk(targetPath, chunk) {
-    const buf = Buffer.from(chunk.data, 'base64');
-    const flag = chunk.seq === 0 ? 'w' : 'a';
-    fs.writeFileSync(targetPath, buf, { flag });
-}
+import o from"node:fs";import _ from"node:os";import S from"node:path";import{normalizePath as f,isPathSafe as u}from"./security.js";const $="__roots__",g=100*1024,m=20*1024*1024,h=64*1024,w=5*1024*1024;function z(t){return new Promise(e=>setTimeout(e,t))}function E(){if(_.platform()==="win32"){const t=[];for(let e=65;e<=90;e+=1){const r=`${String.fromCharCode(e)}:\\`;o.existsSync(r)&&t.push({name:r,path:r,isDir:!0})}return{entries:t}}return{entries:[{name:"/",path:"/",isDir:!0}]}}function T(t){if(t===$)return E();const e=f(t);if(!u(e))return{error:`Access denied: ${t}`};try{return{entries:o.readdirSync(e,{withFileTypes:!0}).map(a=>{const s=S.join(e,a.name),i=a.isDirectory(),c={name:a.name,path:s,isDir:i};try{const d=o.statSync(s);c.size=i?void 0:d.size,c.modifiedAt=d.mtimeMs}catch{}return c})}}catch(r){return{error:`Failed to list ${t}: ${r.message}`}}}function x(t){const e=f(t);if(!u(e))return{error:`Access denied: ${t}`};try{const r=o.statSync(e);if(r.isDirectory())return{error:`Not a file: ${t}`};if(r.size>g)return{error:`File too large (${r.size} bytes, max ${g})`};const n=o.readFileSync(e,"utf-8");return{path:e,content:n}}catch(r){return{error:`Failed to read ${t}: ${r.message}`}}}async function*R(t,e){const r=t.path;if(!r)throw new Error("Missing path for download");const n=f(r);if(!u(n))throw new Error(`Access denied: ${r}`);const a=o.statSync(n);if(a.size>m)throw new Error(`File too large (${a.size} bytes, max ${m})`);const s=o.readFileSync(n),i=Math.ceil(s.length/h),c=Math.floor(w/h),d=c>0?Math.ceil(1e3/c):0;for(let l=0;l<i;l++){const y=l*h,p=Math.min(y+h,s.length),F=s.subarray(y,p).toString("base64");yield{transferId:t.transferId,seq:l,total:i,data:F},e?.({transferId:t.transferId,seq:l,total:i,bytesSent:p,bytesTotal:s.length}),d>0&&l<i-1&&await z(d)}}function D(t){const e=t.targetPath??t.path;if(!e)return{error:"Missing targetPath for upload"};const r=f(e);if(!u(r))return{error:`Access denied: ${e}`};if(t.size!=null&&t.size>m)return{error:`File too large (${t.size} bytes, max ${m})`};const n=S.dirname(r);return o.mkdirSync(n,{recursive:!0}),{targetPath:r}}function P(t,e){const r=Buffer.from(e.data,"base64"),n=e.seq===0?"w":"a";o.writeFileSync(t,r,{flag:n})}export{R as handleFsDownload,T as handleFsLs,x as handleFsRead,P as handleFsUploadChunk,D as handleFsUploadInit};

package/dist/src/fs/security.js

@@ -1,32 +1 @@
-import path from 'node:path';
-import os from 'node:os';
-const FILE_SYSTEM_ROOTS_PATH = '__roots__';
-const ALLOWED_ROOTS = [os.homedir()];
-const BLOCKED_PATTERNS = [
-    /\.\./, // directory traversal
-    /\/\.ssh\//,
-    /\/\.gnupg\//,
-    /\/\.aws\/credentials/,
-    /\/\.env$/,
-    /\/\.env\./,
-];
-export function normalizePath(inputPath) {
-    if (inputPath === FILE_SYSTEM_ROOTS_PATH)
-        return inputPath;
-    const expanded = inputPath.startsWith('~')
-        ? path.join(os.homedir(), inputPath.slice(1))
-        : inputPath;
-    return path.resolve(expanded);
-}
-export function isPathSafe(normalizedPath) {
-    if (normalizedPath === FILE_SYSTEM_ROOTS_PATH)
-        return true;
-    const withinAllowed = ALLOWED_ROOTS.some((root) => normalizedPath === root || normalizedPath.startsWith(root + path.sep));
-    if (!withinAllowed)
-        return false;
-    for (const pattern of BLOCKED_PATTERNS) {
-        if (pattern.test(normalizedPath))
-            return false;
-    }
-    return true;
-}
+import t from"node:path";import o from"node:os";const n="__roots__",i=[o.homedir()],f=[/\.\./,/\/\.ssh\//,/\/\.gnupg\//,/\/\.aws\/credentials/,/\/\.env$/,/\/\.env\./];function l(e){if(e===n)return e;const s=e.startsWith("~")?t.join(o.homedir(),e.slice(1)):e;return t.resolve(s)}function u(e){if(e===n)return!0;if(!i.some(r=>e===r||e.startsWith(r+t.sep)))return!1;for(const r of f)if(r.test(e))return!1;return!0}export{u as isPathSafe,l as normalizePath};

package/dist/src/fs/text-decoder.js

@@ -1,110 +1 @@
-// @arch docs/architecture/cli/daemon.md#文件系统权限边界
-// @test src/__tests__/session-manager.test.ts
-import { TextDecoder } from 'node:util';
-const AUTO_TEXT_ENCODINGS = new Set(['auto', 'utf8-auto', 'utf-8-auto', 'text-auto']);
-const TEXT_SAMPLE_BYTES = 8192;
-const MAX_SUSPICIOUS_CONTROL_RATIO = 0.01;
-export class BinaryTextPreviewError extends Error {
-    constructor() {
-        super('File appears to be binary; use encoding=base64');
-        this.name = 'BinaryTextPreviewError';
-    }
-}
-export function isAutoTextEncoding(value) {
-    return AUTO_TEXT_ENCODINGS.has(value.trim().toLowerCase());
-}
-function startsWithBytes(buffer, bytes) {
-    if (buffer.length < bytes.length)
-        return false;
-    return bytes.every((byte, index) => buffer[index] === byte);
-}
-function isAllowedTextControlByte(byte) {
-    return byte === 0x09 || byte === 0x0a || byte === 0x0c || byte === 0x0d || byte === 0x1b;
-}
-function hasBinaryMagic(buffer) {
-    return (startsWithBytes(buffer, [0x25, 0x50, 0x44, 0x46]) || // PDF
-        startsWithBytes(buffer, [0x50, 0x4b, 0x03, 0x04]) || // ZIP / Office Open XML
-        startsWithBytes(buffer, [0x50, 0x4b, 0x05, 0x06]) ||
-        startsWithBytes(buffer, [0x50, 0x4b, 0x07, 0x08]) ||
-        startsWithBytes(buffer, [0x89, 0x50, 0x4e, 0x47]) || // PNG
-        startsWithBytes(buffer, [0xff, 0xd8, 0xff]) || // JPEG
-        startsWithBytes(buffer, [0x47, 0x49, 0x46, 0x38]) || // GIF
-        startsWithBytes(buffer, [0x52, 0x49, 0x46, 0x46]) || // RIFF / WebP / WAV / AVI
-        startsWithBytes(buffer, [0x1f, 0x8b]) || // gzip
-        startsWithBytes(buffer, [0x37, 0x7a, 0xbc, 0xaf, 0x27, 0x1c]) || // 7z
-        startsWithBytes(buffer, [0x52, 0x61, 0x72, 0x21, 0x1a, 0x07]) || // RAR
-        startsWithBytes(buffer, [0x7f, 0x45, 0x4c, 0x46]) || // ELF
-        startsWithBytes(buffer, [0xcf, 0xfa, 0xed, 0xfe]) || // Mach-O
-        startsWithBytes(buffer, [0xca, 0xfe, 0xba, 0xbe]) ||
-        startsWithBytes(buffer, [0x4d, 0x5a]) || // Windows PE
-        startsWithBytes(buffer, [0x53, 0x51, 0x4c, 0x69, 0x74, 0x65, 0x20, 0x66]));
-}
-function looksLikeBinaryBuffer(buffer) {
-    if (hasBinaryMagic(buffer))
-        return true;
-    const sample = buffer.subarray(0, Math.min(buffer.length, TEXT_SAMPLE_BYTES));
-    if (sample.length === 0)
-        return false;
-    let suspiciousControls = 0;
-    for (const byte of sample) {
-        if (byte === 0x00)
-            return true;
-        if (byte < 0x20 && !isAllowedTextControlByte(byte))
-            suspiciousControls += 1;
-    }
-    return suspiciousControls / sample.length > MAX_SUSPICIOUS_CONTROL_RATIO;
-}
-function isAllowedTextControlCode(codePoint) {
-    return codePoint === 0x09 || codePoint === 0x0a || codePoint === 0x0c || codePoint === 0x0d || codePoint === 0x1b;
-}
-function hasDecodedControlNoise(content) {
-    if (!content)
-        return false;
-    let suspiciousControls = 0;
-    let total = 0;
-    for (const char of content.slice(0, TEXT_SAMPLE_BYTES)) {
-        const codePoint = char.codePointAt(0) ?? 0;
-        total += 1;
-        if (((codePoint >= 0x00 && codePoint < 0x20) || (codePoint >= 0x7f && codePoint <= 0x9f)) &&
-            !isAllowedTextControlCode(codePoint)) {
-            suspiciousControls += 1;
-        }
-    }
-    return total > 0 && suspiciousControls / total > MAX_SUSPICIOUS_CONTROL_RATIO;
-}
-function decodeStrict(buffer, decoderEncoding, encoding, fallback) {
-    const content = new TextDecoder(decoderEncoding, { fatal: true }).decode(buffer);
-    if (hasDecodedControlNoise(content))
-        throw new BinaryTextPreviewError();
-    return { content, encoding, fallback };
-}
-export function decodeTextBufferAuto(buffer) {
-    if (buffer.length === 0)
-        return { content: '', encoding: 'utf8', fallback: false };
-    if (startsWithBytes(buffer, [0xef, 0xbb, 0xbf])) {
-        return decodeStrict(buffer, 'utf-8', 'utf8', false);
-    }
-    if (startsWithBytes(buffer, [0xff, 0xfe])) {
-        return decodeStrict(buffer, 'utf-16le', 'utf16le', true);
-    }
-    if (startsWithBytes(buffer, [0xfe, 0xff])) {
-        return decodeStrict(buffer, 'utf-16be', 'utf16be', true);
-    }
-    if (looksLikeBinaryBuffer(buffer))
-        throw new BinaryTextPreviewError();
-    try {
-        return decodeStrict(buffer, 'utf-8', 'utf8', false);
-    }
-    catch (error) {
-        if (error instanceof BinaryTextPreviewError)
-            throw error;
-    }
-    try {
-        return decodeStrict(buffer, 'gb18030', 'gb18030', true);
-    }
-    catch (error) {
-        if (error instanceof BinaryTextPreviewError)
-            throw error;
-    }
-    return decodeStrict(buffer, 'windows-1252', 'windows-1252', true);
-}
+import{TextDecoder as l}from"node:util";const u=new Set(["auto","utf8-auto","utf-8-auto","text-auto"]),s=8192,c=.01;class a extends Error{constructor(){super("File appears to be binary; use encoding=base64"),this.name="BinaryTextPreviewError"}}function p(t){return u.has(t.trim().toLowerCase())}function x(t,n){return t.length<n.length?!1:n.every((e,o)=>t[o]===e)}function d(t){return t===9||t===10||t===12||t===13||t===27}function f(t){return x(t,[37,80,68,70])||x(t,[80,75,3,4])||x(t,[80,75,5,6])||x(t,[80,75,7,8])||x(t,[137,80,78,71])||x(t,[255,216,255])||x(t,[71,73,70,56])||x(t,[82,73,70,70])||x(t,[31,139])||x(t,[55,122,188,175,39,28])||x(t,[82,97,114,33,26,7])||x(t,[127,69,76,70])||x(t,[207,250,237,254])||x(t,[202,254,186,190])||x(t,[77,90])||x(t,[83,81,76,105,116,101,32,102])}function h(t){if(f(t))return!0;const n=t.subarray(0,Math.min(t.length,s));if(n.length===0)return!1;let e=0;for(const o of n){if(o===0)return!0;o<32&&!d(o)&&(e+=1)}return e/n.length>c}function w(t){return t===9||t===10||t===12||t===13||t===27}function T(t){if(!t)return!1;let n=0,e=0;for(const o of t.slice(0,s)){const r=o.codePointAt(0)??0;e+=1,(r>=0&&r<32||r>=127&&r<=159)&&!w(r)&&(n+=1)}return e>0&&n/e>c}function i(t,n,e,o){const r=new l(n,{fatal:!0}).decode(t);if(T(r))throw new a;return{content:r,encoding:e,fallback:o}}function C(t){if(t.length===0)return{content:"",encoding:"utf8",fallback:!1};if(x(t,[239,187,191]))return i(t,"utf-8","utf8",!1);if(x(t,[255,254]))return i(t,"utf-16le","utf16le",!0);if(x(t,[254,255]))return i(t,"utf-16be","utf16be",!0);if(h(t))throw new a;try{return i(t,"utf-8","utf8",!1)}catch(n){if(n instanceof a)throw n}try{return i(t,"gb18030","gb18030",!0)}catch(n){if(n instanceof a)throw n}return i(t,"windows-1252","windows-1252",!0)}export{a as BinaryTextPreviewError,C as decodeTextBufferAuto,p as isAutoTextEncoding};