threenative-asset-mcp 0.4.0

package/dist/config.d.ts

@@ -0,0 +1,20 @@
+export interface FabConfig {
+    directTimeoutMs: number;
+    browserTimeoutMs: number;
+    browserManualTimeoutMs: number;
+    browserHeadless: boolean;
+    browserProfileDir: string;
+    downloadDir: string;
+    maxDownloadBytes: number;
+    logLevel: "debug" | "info" | "warn" | "error";
+    logQueries: boolean;
+    /**
+     * Explicit curl-impersonate wrapper override; "0"/"off"/"false" disables
+     * impersonation. Resolution against PATH happens in the client.
+     */
+    curlImpersonate?: string;
+    minRequestIntervalMs: number;
+    downloadTimeoutMs: number;
+}
+export declare function loadFabConfig(environment?: NodeJS.ProcessEnv): FabConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAyDA,MAAM,WAAW,SAAS;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC9C,UAAU,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAwDD,wBAAgB,aAAa,CAC3B,WAAW,GAAE,MAAM,CAAC,UAAwB,GAC3C,SAAS,CAgDX"}

package/dist/config.js

@@ -0,0 +1,130 @@
+import { realpathSync } from "node:fs";
+import { homedir } from "node:os";
+import { basename, dirname, isAbsolute, join, relative, resolve, } from "node:path";
+import { z } from "zod";
+const BooleanEnvironmentValue = z
+    .enum(["0", "1", "false", "true"])
+    .transform((value) => value === "1" || value === "true");
+const EnvironmentSchema = z.object({
+    FAB_DIRECT_TIMEOUT_MS: z.coerce.number().int().min(1_000).max(120_000).default(20_000),
+    FAB_BROWSER_TIMEOUT_MS: z.coerce
+        .number()
+        .int()
+        .min(1_000)
+        .max(180_000)
+        .default(30_000),
+    FAB_BROWSER_MANUAL_TIMEOUT_MS: z.coerce
+        .number()
+        .int()
+        .min(1_000)
+        .max(120_000)
+        .default(10_000),
+    FAB_BROWSER_HEADLESS: BooleanEnvironmentValue.default(true),
+    FAB_BROWSER_PROFILE_DIR: z.string().trim().min(1).optional(),
+    FAB_DOWNLOAD_DIR: z.string().trim().min(1).optional(),
+    FAB_MAX_DOWNLOAD_BYTES: z.coerce
+        .number()
+        .int()
+        .min(1_048_576)
+        .max(21_474_836_480)
+        .default(2_147_483_648),
+    FAB_LOG_LEVEL: z.enum(["debug", "info", "warn", "error"]).default("warn"),
+    FAB_LOG_QUERIES: BooleanEnvironmentValue.default(false),
+    FAB_CURL_IMPERSONATE: z.string().trim().min(1).optional(),
+    FAB_MIN_REQUEST_INTERVAL_MS: z.coerce
+        .number()
+        .int()
+        .min(0)
+        .max(10_000)
+        .default(1_000),
+    FAB_DOWNLOAD_TIMEOUT_MS: z.coerce
+        .number()
+        .int()
+        .min(10_000)
+        .max(3_600_000)
+        .default(600_000),
+});
+function isInside(path, parent) {
+    const child = relative(parent, path);
+    return child === "" || (!child.startsWith("..") && !isAbsolute(child));
+}
+function canonicalPath(input) {
+    let candidate = resolve(input);
+    const missingSegments = [];
+    while (true) {
+        try {
+            return resolve(realpathSync.native(candidate), ...missingSegments);
+        }
+        catch {
+            const parent = dirname(candidate);
+            if (parent === candidate)
+                return resolve(input);
+            missingSegments.unshift(basename(candidate));
+            candidate = parent;
+        }
+    }
+}
+function normalBrowserProfileRoots(environment) {
+    const userHome = homedir();
+    if (process.platform === "darwin") {
+        return [
+            join(userHome, "Library", "Application Support", "Google", "Chrome"),
+            join(userHome, "Library", "Application Support", "Google", "Chrome Beta"),
+            join(userHome, "Library", "Application Support", "Google", "Chrome Canary"),
+            join(userHome, "Library", "Application Support", "Chromium"),
+            join(userHome, "Library", "Application Support", "Microsoft Edge"),
+        ];
+    }
+    if (process.platform === "win32") {
+        const localData = environment.LOCALAPPDATA?.trim();
+        return localData
+            ? [
+                join(localData, "Google", "Chrome", "User Data"),
+                join(localData, "Google", "Chrome Beta", "User Data"),
+                join(localData, "Google", "Chrome SxS", "User Data"),
+                join(localData, "Chromium", "User Data"),
+                join(localData, "Microsoft", "Edge", "User Data"),
+            ]
+            : [];
+    }
+    return [
+        join(userHome, ".config", "google-chrome"),
+        join(userHome, ".config", "google-chrome-beta"),
+        join(userHome, ".config", "google-chrome-unstable"),
+        join(userHome, ".config", "chromium"),
+        join(userHome, ".config", "microsoft-edge"),
+    ];
+}
+export function loadFabConfig(environment = process.env) {
+    const parsed = EnvironmentSchema.parse(environment);
+    const stateRoot = environment.XDG_STATE_HOME?.trim() ||
+        join(homedir(), ".local", "state");
+    const browserProfileDir = canonicalPath(parsed.FAB_BROWSER_PROFILE_DIR ??
+        join(stateRoot, "threenative-asset-mcp", "fab-browser-profile"));
+    if (normalBrowserProfileRoots(environment).some((root) => isInside(browserProfileDir, canonicalPath(root)))) {
+        throw new Error("FAB_BROWSER_PROFILE_DIR must be an MCP-owned directory, not a normal browser profile.");
+    }
+    const downloadDir = canonicalPath(parsed.FAB_DOWNLOAD_DIR ??
+        join(homedir(), "Downloads", "threenative-asset-mcp", "fab"));
+    if (downloadDir === canonicalPath(homedir()) ||
+        dirname(downloadDir) === downloadDir) {
+        throw new Error("FAB_DOWNLOAD_DIR must be a dedicated asset directory, not a filesystem or home root.");
+    }
+    return {
+        directTimeoutMs: parsed.FAB_DIRECT_TIMEOUT_MS,
+        browserTimeoutMs: parsed.FAB_BROWSER_TIMEOUT_MS,
+        browserManualTimeoutMs: parsed.FAB_BROWSER_MANUAL_TIMEOUT_MS,
+        browserHeadless: parsed.FAB_BROWSER_HEADLESS,
+        browserProfileDir,
+        downloadDir,
+        maxDownloadBytes: parsed.FAB_MAX_DOWNLOAD_BYTES,
+        logLevel: parsed.FAB_LOG_LEVEL,
+        logQueries: parsed.FAB_LOG_QUERIES,
+        ...(parsed.FAB_CURL_IMPERSONATE
+            ? { curlImpersonate: parsed.FAB_CURL_IMPERSONATE }
+            : {}),
+        minRequestIntervalMs: parsed.FAB_MIN_REQUEST_INTERVAL_MS,
+        downloadTimeoutMs: parsed.FAB_DOWNLOAD_TIMEOUT_MS,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EACL,QAAQ,EACR,OAAO,EACP,UAAU,EACV,IAAI,EACJ,QAAQ,EACR,OAAO,GACR,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,uBAAuB,GAAG,CAAC;KAC9B,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;KACjC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC;AAE3D,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,qBAAqB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACtF,sBAAsB,EAAE,CAAC,CAAC,MAAM;SAC7B,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,KAAK,CAAC;SACV,GAAG,CAAC,OAAO,CAAC;SACZ,OAAO,CAAC,MAAM,CAAC;IAClB,6BAA6B,EAAE,CAAC,CAAC,MAAM;SACpC,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,KAAK,CAAC;SACV,GAAG,CAAC,OAAO,CAAC;SACZ,OAAO,CAAC,MAAM,CAAC;IAClB,oBAAoB,EAAE,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3D,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrD,sBAAsB,EAAE,CAAC,CAAC,MAAM;SAC7B,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,SAAS,CAAC;SACd,GAAG,CAAC,cAAc,CAAC;SACnB,OAAO,CAAC,aAAa,CAAC;IACzB,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACzE,eAAe,EAAE,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC;IACvD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,2BAA2B,EAAE,CAAC,CAAC,MAAM;SAClC,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,MAAM,CAAC;SACX,OAAO,CAAC,KAAK,CAAC;IACjB,uBAAuB,EAAE,CAAC,CAAC,MAAM;SAC9B,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,MAAM,CAAC;SACX,GAAG,CAAC,SAAS,CAAC;SACd,OAAO,CAAC,OAAO,CAAC;CACpB,CAAC,CAAC;AAqBH,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrC,OAAO,KAAK,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,eAAe,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAClC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;YAChD,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7C,SAAS,GAAG,MAAM,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAChC,WAA8B;IAE9B,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,QAAQ,CAAC;YACpE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,aAAa,CAAC;YACzE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,eAAe,CAAC;YAC3E,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAE,UAAU,CAAC;YAC5D,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAE,gBAAgB,CAAC;SACnE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;QACnD,OAAO,SAAS;YACd,CAAC,CAAC;gBACE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC;gBAChD,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC;gBACrD,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC;gBACpD,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC;gBACxC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC;aAClD;YACH,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IACD,OAAO;QACL,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,oBAAoB,CAAC;QAC/C,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,wBAAwB,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC;QACrC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,WAAW,GAAsB,OAAO,CAAC,GAAG;IAE5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,SAAS,GACb,WAAW,CAAC,cAAc,EAAE,IAAI,EAAE;QAClC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAErC,MAAM,iBAAiB,GAAG,aAAa,CACrC,MAAM,CAAC,uBAAuB;QAC5B,IAAI,CAAC,SAAS,EAAE,uBAAuB,EAAE,qBAAqB,CAAC,CAClE,CAAC;IACF,IACE,yBAAyB,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACnD,QAAQ,CAAC,iBAAiB,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CACjD,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,aAAa,CAC/B,MAAM,CAAC,gBAAgB;QACrB,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE,KAAK,CAAC,CAC/D,CAAC;IACF,IACE,WAAW,KAAK,aAAa,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,CAAC,WAAW,CAAC,KAAK,WAAW,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,eAAe,EAAE,MAAM,CAAC,qBAAqB;QAC7C,gBAAgB,EAAE,MAAM,CAAC,sBAAsB;QAC/C,sBAAsB,EAAE,MAAM,CAAC,6BAA6B;QAC5D,eAAe,EAAE,MAAM,CAAC,oBAAoB;QAC5C,iBAAiB;QACjB,WAAW;QACX,gBAAgB,EAAE,MAAM,CAAC,sBAAsB;QAC/C,QAAQ,EAAE,MAAM,CAAC,aAAa;QAC9B,UAAU,EAAE,MAAM,CAAC,eAAe;QAClC,GAAG,CAAC,MAAM,CAAC,oBAAoB;YAC7B,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,oBAAoB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,oBAAoB,EAAE,MAAM,CAAC,2BAA2B;QACxD,iBAAiB,EAAE,MAAM,CAAC,uBAAuB;KAClD,CAAC;AACJ,CAAC"}

package/dist/download/direct-asset-downloader.d.ts

@@ -0,0 +1,41 @@
+export type DirectAssetProvider = "polyhaven" | "ambientcg" | "smithsonian" | "game-icons" | "kenney" | "itch";
+export type DirectAssetDownloadErrorCode = "ASSET_DOWNLOAD_URL_REJECTED" | "ASSET_DOWNLOAD_TOO_LARGE" | "ASSET_DOWNLOAD_UPSTREAM_DENIED" | "ASSET_DOWNLOAD_FAILED";
+export declare class DirectAssetDownloadError extends Error {
+    readonly code: DirectAssetDownloadErrorCode;
+    readonly retryable: boolean;
+    constructor(code: DirectAssetDownloadErrorCode, message: string, retryable?: boolean);
+}
+export interface DirectAssetDownloadResult {
+    provider: DirectAssetProvider;
+    fileName: string;
+    path: string;
+    sizeBytes: number;
+    sha256: string;
+    alreadyExisted: boolean;
+    sourceUrl: string;
+    licenseAcknowledged: true;
+}
+export interface DirectAssetDownloaderOptions {
+    fetch?: typeof globalThis.fetch;
+    downloadDir?: string;
+    maxDownloadBytes?: number;
+    downloadTimeoutMs?: number;
+}
+export declare class DirectAssetDownloader {
+    private readonly fetch;
+    private readonly downloadDir;
+    private readonly maxDownloadBytes;
+    private readonly downloadTimeoutMs;
+    constructor(options?: DirectAssetDownloaderOptions);
+    download(input: {
+        provider: DirectAssetProvider;
+        url: string;
+        fileName: string;
+        identity?: string;
+        reportedSourceUrl?: string;
+    }): Promise<DirectAssetDownloadResult>;
+    private ensureDirectory;
+    private fetchDownload;
+    private result;
+}
+//# sourceMappingURL=direct-asset-downloader.d.ts.map

package/dist/download/direct-asset-downloader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-asset-downloader.d.ts","sourceRoot":"","sources":["../../src/download/direct-asset-downloader.ts"],"names":[],"mappings":"AAeA,MAAM,MAAM,mBAAmB,GAC3B,WAAW,GACX,WAAW,GACX,aAAa,GACb,YAAY,GACZ,QAAQ,GACR,MAAM,CAAC;AAEX,MAAM,MAAM,4BAA4B,GACpC,6BAA6B,GAC7B,0BAA0B,GAC1B,gCAAgC,GAChC,uBAAuB,CAAC;AAE5B,qBAAa,wBAAyB,SAAQ,KAAK;aAE/B,IAAI,EAAE,4BAA4B;aAElC,SAAS;IAH3B,YACkB,IAAI,EAAE,4BAA4B,EAClD,OAAO,EAAE,MAAM,EACC,SAAS,UAAQ,EAIlC;CACF;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,EAAE,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,4BAA4B;IAC3C,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAgHD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAE3C,YAAY,OAAO,GAAE,4BAAiC,EAqBrD;IAEK,QAAQ,CAAC,KAAK,EAAE;QACpB,QAAQ,EAAE,mBAAmB,CAAC;QAC9B,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAiHrC;YAEa,eAAe;YAKf,aAAa;IAgD3B,OAAO,CAAC,MAAM;CAoBf"}

package/dist/download/direct-asset-downloader.js

@@ -0,0 +1,232 @@
+import { createHash, randomUUID } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { link, lstat, mkdir, open, realpath, stat, unlink, } from "node:fs/promises";
+import { homedir } from "node:os";
+import { basename, isAbsolute, join, relative, resolve } from "node:path";
+export class DirectAssetDownloadError extends Error {
+    code;
+    retryable;
+    constructor(code, message, retryable = false) {
+        super(message);
+        this.code = code;
+        this.retryable = retryable;
+        this.name = "DirectAssetDownloadError";
+    }
+}
+const PROVIDER_HOSTS = {
+    polyhaven: new Set(["dl.polyhaven.org"]),
+    ambientcg: new Set([
+        "ambientcg.com",
+        "acg-download.struffelproductions.com",
+    ]),
+    smithsonian: new Set(["3d-api.si.edu"]),
+    "game-icons": new Set(["game-icons.net"]),
+    kenney: new Set(["kenney.nl"]),
+    itch: new Set(),
+};
+function isAllowedProviderHost(provider, hostname) {
+    if (provider === "itch") {
+        return /^itchio-mirror\.[0-9a-f]+\.r2\.cloudflarestorage\.com$/i.test(hostname);
+    }
+    return PROVIDER_HOSTS[provider].has(hostname);
+}
+function validateInitialUrl(provider, url) {
+    if (url.protocol !== "https:" || !isAllowedProviderHost(provider, url.hostname)) {
+        return false;
+    }
+    if (provider === "ambientcg") {
+        return url.hostname === "ambientcg.com" && url.pathname === "/get" && url.searchParams.has("file");
+    }
+    if (provider === "smithsonian") {
+        return url.hostname === "3d-api.si.edu" && url.pathname.startsWith("/content/document/3d_package:");
+    }
+    if (provider === "game-icons") {
+        return (url.hostname === "game-icons.net" &&
+            /^\/archives\/[0-9a-f]{6}\/(?:[0-9a-f]{6}|transparent)\/game-icons\.net\.(?:svg|png)\.zip$/i.test(url.pathname));
+    }
+    if (provider === "kenney") {
+        return /^\/media\/pages\/assets\/[a-z0-9-]+\/[a-z0-9-]+\/kenney_[a-z0-9_.-]+\.zip$/i.test(url.pathname);
+    }
+    if (provider === "itch") {
+        return (/^\/upload2\/game\/\d+\/\d+$/.test(url.pathname) &&
+            url.searchParams.has("X-Amz-Signature"));
+    }
+    return url.hostname === "dl.polyhaven.org";
+}
+function safeFileName(input) {
+    const leaf = basename(input).slice(0, 220);
+    const safe = leaf.replace(/[^A-Za-z0-9._ -]/g, "_").trim();
+    if (!safe || safe === "." || safe === "..") {
+        throw new DirectAssetDownloadError("ASSET_DOWNLOAD_FAILED", "The requested filename is unsafe.");
+    }
+    return safe;
+}
+function isInside(path, parent) {
+    const child = relative(parent, path);
+    return child === "" || (!child.startsWith("..") && !isAbsolute(child));
+}
+async function sha256File(path) {
+    const hash = createHash("sha256");
+    await new Promise((resolveHash, reject) => {
+        const stream = createReadStream(path);
+        stream.on("data", (chunk) => hash.update(chunk));
+        stream.on("error", reject);
+        stream.on("end", resolveHash);
+    });
+    return hash.digest("hex");
+}
+async function writeAll(file, value) {
+    let offset = 0;
+    while (offset < value.byteLength) {
+        const { bytesWritten } = await file.write(value, offset, value.byteLength - offset, null);
+        if (bytesWritten <= 0)
+            throw new Error("Asset file write made no progress.");
+        offset += bytesWritten;
+    }
+}
+function positiveIntegerEnvironment(value, fallback, maximum) {
+    if (!value)
+        return fallback;
+    const parsed = Number(value);
+    return Number.isSafeInteger(parsed) && parsed > 0 && parsed <= maximum
+        ? parsed
+        : fallback;
+}
+export class DirectAssetDownloader {
+    fetch;
+    downloadDir;
+    maxDownloadBytes;
+    downloadTimeoutMs;
+    constructor(options = {}) {
+        this.fetch = options.fetch ?? globalThis.fetch;
+        this.downloadDir = resolve(options.downloadDir ??
+            process.env.ASSET_DOWNLOAD_DIR ??
+            join(homedir(), "Downloads", "threenative-asset-mcp", "assets"));
+        this.maxDownloadBytes =
+            options.maxDownloadBytes ??
+                positiveIntegerEnvironment(process.env.ASSET_MAX_DOWNLOAD_BYTES, 10_737_418_240, 53_687_091_200);
+        this.downloadTimeoutMs =
+            options.downloadTimeoutMs ??
+                positiveIntegerEnvironment(process.env.ASSET_DOWNLOAD_TIMEOUT_MS, 1_800_000, 7_200_000);
+    }
+    async download(input) {
+        let initial;
+        try {
+            initial = new URL(input.url);
+        }
+        catch {
+            throw new DirectAssetDownloadError("ASSET_DOWNLOAD_URL_REJECTED", "The provider download URL is invalid.");
+        }
+        if (!validateInitialUrl(input.provider, initial)) {
+            throw new DirectAssetDownloadError("ASSET_DOWNLOAD_URL_REJECTED", "The URL does not match the selected provider's official download contract.");
+        }
+        const fileName = safeFileName(input.fileName);
+        const root = await this.ensureDirectory(this.downloadDir);
+        const sourceKey = createHash("sha256")
+            .update(input.identity ?? initial.toString())
+            .digest("hex");
+        const directory = await this.ensureDirectory(join(root, input.provider, sourceKey));
+        if (!isInside(directory, root)) {
+            throw new DirectAssetDownloadError("ASSET_DOWNLOAD_FAILED", "Refused a path outside the configured asset directory.");
+        }
+        const outputPath = join(directory, fileName);
+        const existing = await lstat(outputPath).catch(() => undefined);
+        if (existing) {
+            if (!existing.isFile() || existing.isSymbolicLink()) {
+                throw new DirectAssetDownloadError("ASSET_DOWNLOAD_FAILED", "The destination is not a safe regular file.");
+            }
+            const metadata = await stat(outputPath);
+            return this.result(input.provider, input.reportedSourceUrl ?? initial.toString(), fileName, outputPath, metadata.size, await sha256File(outputPath), true);
+        }
+        const temporaryPath = join(directory, `.${fileName}.${randomUUID()}.part`);
+        try {
+            const response = await this.fetchDownload(input.provider, initial);
+            const declaredLength = Number(response.headers.get("content-length"));
+            if (Number.isFinite(declaredLength) && declaredLength > this.maxDownloadBytes) {
+                throw new DirectAssetDownloadError("ASSET_DOWNLOAD_TOO_LARGE", "The asset exceeds ASSET_MAX_DOWNLOAD_BYTES.");
+            }
+            if (!response.body) {
+                throw new DirectAssetDownloadError("ASSET_DOWNLOAD_FAILED", "The provider returned an empty response body.", true);
+            }
+            const file = await open(temporaryPath, "wx", 0o600);
+            const hash = createHash("sha256");
+            let sizeBytes = 0;
+            try {
+                const reader = response.body.getReader();
+                while (true) {
+                    const { done, value } = await reader.read();
+                    if (done)
+                        break;
+                    sizeBytes += value.byteLength;
+                    if (sizeBytes > this.maxDownloadBytes) {
+                        await reader.cancel();
+                        throw new DirectAssetDownloadError("ASSET_DOWNLOAD_TOO_LARGE", "The asset exceeds ASSET_MAX_DOWNLOAD_BYTES.");
+                    }
+                    hash.update(value);
+                    await writeAll(file, value);
+                }
+                await file.sync();
+            }
+            finally {
+                await file.close();
+            }
+            await link(temporaryPath, outputPath);
+            return this.result(input.provider, input.reportedSourceUrl ?? initial.toString(), fileName, outputPath, sizeBytes, hash.digest("hex"), false);
+        }
+        catch (error) {
+            if (error instanceof DirectAssetDownloadError)
+                throw error;
+            throw new DirectAssetDownloadError("ASSET_DOWNLOAD_FAILED", "The asset could not be downloaded or saved safely.", true);
+        }
+        finally {
+            await unlink(temporaryPath).catch(() => undefined);
+        }
+    }
+    async ensureDirectory(path) {
+        await mkdir(path, { recursive: true, mode: 0o700 });
+        return realpath(path);
+    }
+    async fetchDownload(provider, initial) {
+        let current = initial;
+        for (let redirects = 0; redirects <= 5; redirects += 1) {
+            if (current.protocol !== "https:" ||
+                !isAllowedProviderHost(provider, current.hostname)) {
+                throw new DirectAssetDownloadError("ASSET_DOWNLOAD_URL_REJECTED", "The provider redirected outside its official download-host allowlist.");
+            }
+            const response = await this.fetch(current, {
+                redirect: "manual",
+                signal: AbortSignal.timeout(this.downloadTimeoutMs),
+                headers: { "user-agent": "threenative-asset-mcp/0.4.0" },
+            });
+            if ([301, 302, 303, 307, 308].includes(response.status)) {
+                const location = response.headers.get("location");
+                if (!location)
+                    break;
+                current = new URL(location, current);
+                continue;
+            }
+            if (!response.ok) {
+                throw new DirectAssetDownloadError("ASSET_DOWNLOAD_UPSTREAM_DENIED", `The provider refused the download with HTTP ${response.status}.`, response.status === 429 || response.status >= 500);
+            }
+            const contentType = response.headers.get("content-type")?.toLocaleLowerCase();
+            if (contentType?.includes("text/html")) {
+                throw new DirectAssetDownloadError("ASSET_DOWNLOAD_UPSTREAM_DENIED", "The provider returned HTML instead of an asset file.");
+            }
+            return response;
+        }
+        throw new DirectAssetDownloadError("ASSET_DOWNLOAD_URL_REJECTED", "The provider exceeded the redirect limit.");
+    }
+    result(provider, sourceUrl, fileName, path, sizeBytes, sha256, alreadyExisted) {
+        return {
+            provider,
+            fileName,
+            path,
+            sizeBytes,
+            sha256,
+            alreadyExisted,
+            sourceUrl,
+            licenseAcknowledged: true,
+        };
+    }
+}
+//# sourceMappingURL=direct-asset-downloader.js.map

package/dist/download/direct-asset-downloader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-asset-downloader.js","sourceRoot":"","sources":["../../src/download/direct-asset-downloader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EACL,IAAI,EACJ,KAAK,EACL,KAAK,EACL,IAAI,EACJ,QAAQ,EACR,IAAI,EACJ,MAAM,GAEP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgB1E,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAE/B,IAAI;IAEJ,SAAS;IAH3B,YACkB,IAAkC,EAClD,OAAe,EACC,SAAS,GAAG,KAAK;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAJC,IAAI;yBAEJ,SAAS;QAGzB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAoBD,MAAM,cAAc,GAAqD;IACvE,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACxC,SAAS,EAAE,IAAI,GAAG,CAAC;QACjB,eAAe;QACf,sCAAsC;KACvC,CAAC;IACF,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;IACvC,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACzC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;IAC9B,IAAI,EAAE,IAAI,GAAG,EAAE;CAChB,CAAC;AAEF,SAAS,qBAAqB,CAC5B,QAA6B,EAC7B,QAAgB;IAEhB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,yDAAyD,CAAC,IAAI,CACnE,QAAQ,CACT,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,kBAAkB,CAAC,QAA6B,EAAE,GAAQ;IACjE,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC,QAAQ,KAAK,eAAe,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,OAAO,GAAG,CAAC,QAAQ,KAAK,eAAe,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,+BAA+B,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,OAAO,CACL,GAAG,CAAC,QAAQ,KAAK,gBAAgB;YACjC,4FAA4F,CAAC,IAAI,CAC/F,GAAG,CAAC,QAAQ,CACb,CACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,6EAA6E,CAAC,IAAI,CACvF,GAAG,CAAC,QAAQ,CACb,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,CACL,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,CACxC,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,KAAK,kBAAkB,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,IAAI,wBAAwB,CAChC,uBAAuB,EACvB,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrC,OAAO,KAAK,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,IAAI,OAAO,CAAO,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;QAC9C,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAgB,EAAE,KAAiB;IACzD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CACvC,KAAK,EACL,MAAM,EACN,KAAK,CAAC,UAAU,GAAG,MAAM,EACzB,IAAI,CACL,CAAC;QACF,IAAI,YAAY,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC7E,MAAM,IAAI,YAAY,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAyB,EACzB,QAAgB,EAChB,OAAe;IAEf,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,IAAI,OAAO;QACpE,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAED,MAAM,OAAO,qBAAqB;IACf,KAAK,CAA0B;IAC/B,WAAW,CAAS;IACpB,gBAAgB,CAAS;IACzB,iBAAiB,CAAS;IAE3C,YAAY,OAAO,GAAiC,EAAE;QACpD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,OAAO,CACxB,OAAO,CAAC,WAAW;YACjB,OAAO,CAAC,GAAG,CAAC,kBAAkB;YAC9B,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,CAAC,CAClE,CAAC;QACF,IAAI,CAAC,gBAAgB;YACnB,OAAO,CAAC,gBAAgB;gBACxB,0BAA0B,CACxB,OAAO,CAAC,GAAG,CAAC,wBAAwB,EACpC,cAAc,EACd,cAAc,CACf,CAAC;QACJ,IAAI,CAAC,iBAAiB;YACpB,OAAO,CAAC,iBAAiB;gBACzB,0BAA0B,CACxB,OAAO,CAAC,GAAG,CAAC,yBAAyB,EACrC,SAAS,EACT,SAAS,CACV,CAAC;IACN,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAMd;QACC,IAAI,OAAY,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,wBAAwB,CAChC,6BAA6B,EAC7B,uCAAuC,CACxC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,wBAAwB,CAChC,6BAA6B,EAC7B,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;aACnC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;aAC5C,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAC1C,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CACtC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,wBAAwB,CAChC,uBAAuB,EACvB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;gBACpD,MAAM,IAAI,wBAAwB,CAChC,uBAAuB,EACvB,6CAA6C,CAC9C,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC,MAAM,CAChB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,iBAAiB,IAAI,OAAO,CAAC,QAAQ,EAAE,EAC7C,QAAQ,EACR,UAAU,EACV,QAAQ,CAAC,IAAI,EACb,MAAM,UAAU,CAAC,UAAU,CAAC,EAC5B,IAAI,CACL,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,QAAQ,IAAI,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnE,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACtE,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC9E,MAAM,IAAI,wBAAwB,CAChC,0BAA0B,EAC1B,6CAA6C,CAC9C,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,wBAAwB,CAChC,uBAAuB,EACvB,+CAA+C,EAC/C,IAAI,CACL,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YAClC,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACzC,OAAO,IAAI,EAAE,CAAC;oBACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC5C,IAAI,IAAI;wBAAE,MAAM;oBAChB,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC;oBAC9B,IAAI,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBACtC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;wBACtB,MAAM,IAAI,wBAAwB,CAChC,0BAA0B,EAC1B,6CAA6C,CAC9C,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACnB,MAAM,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC9B,CAAC;gBACD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YACpB,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;YACD,MAAM,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;YACtC,OAAO,IAAI,CAAC,MAAM,CAChB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,iBAAiB,IAAI,OAAO,CAAC,QAAQ,EAAE,EAC7C,QAAQ,EACR,UAAU,EACV,SAAS,EACT,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAClB,KAAK,CACN,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,wBAAwB;gBAAE,MAAM,KAAK,CAAC;YAC3D,MAAM,IAAI,wBAAwB,CAChC,uBAAuB,EACvB,oDAAoD,EACpD,IAAI,CACL,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,IAAY;QACxC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,QAA6B,EAC7B,OAAY;QAEZ,IAAI,OAAO,GAAG,OAAO,CAAC;QACtB,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,IAAI,CAAC,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;YACvD,IACE,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBAC7B,CAAC,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,EAClD,CAAC;gBACD,MAAM,IAAI,wBAAwB,CAChC,6BAA6B,EAC7B,uEAAuE,CACxE,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBACzC,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACnD,OAAO,EAAE,EAAE,YAAY,EAAE,6BAA6B,EAAE;aACzD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAClD,IAAI,CAAC,QAAQ;oBAAE,MAAM;gBACrB,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,wBAAwB,CAChC,gCAAgC,EAChC,+CAA+C,QAAQ,CAAC,MAAM,GAAG,EACjE,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,CAClD,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,iBAAiB,EAAE,CAAC;YAC9E,IAAI,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,wBAAwB,CAChC,gCAAgC,EAChC,sDAAsD,CACvD,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,6BAA6B,EAC7B,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IAEO,MAAM,CACZ,QAA6B,EAC7B,SAAiB,EACjB,QAAgB,EAChB,IAAY,EACZ,SAAiB,EACjB,MAAc,EACd,cAAuB;QAEvB,OAAO;YACL,QAAQ;YACR,QAAQ;YACR,IAAI;YACJ,SAAS;YACT,MAAM;YACN,cAAc;YACd,SAAS;YACT,mBAAmB,EAAE,IAAI;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/fab/api-download.d.ts

@@ -0,0 +1,30 @@
+import { assertAllowedFabApiUrl, type FabDownloadRequest, type FabDownloadResult } from "./direct-transport.js";
+import { type FabLogger } from "./errors.js";
+export interface ApiDownloadOptions {
+    request: FabDownloadRequest;
+    /** Allow-listed anonymous JSON read (direct transport). */
+    fetchJson: (url: URL) => Promise<unknown>;
+    /** Streams a validated download URL to the given path. */
+    downloader: (url: URL, destinationPath: string) => Promise<void>;
+    downloadDir: string;
+    maxBytes: number;
+    logger?: FabLogger;
+}
+/**
+ * Resolves a free listing's file through Fab's anonymous JSON contract and
+ * stores it. Throws FAB_CHALLENGE (via fetchJson) so the caller can fall
+ * back to the browser click flow.
+ */
+export declare function downloadFreeAssetViaApi(options: ApiDownloadOptions): Promise<FabDownloadResult>;
+export interface NodeDownloadOptions {
+    timeoutMs: number;
+    maxBytes: number;
+}
+/**
+ * Fallback CDN downloader for hosts without curl-impersonate. Signed
+ * distribution URLs are self-authorizing, so a plain TLS client is
+ * acceptable for this hop.
+ */
+export declare function nodeDownloadToFile(url: URL, destinationPath: string, options: NodeDownloadOptions): Promise<void>;
+export { assertAllowedFabApiUrl };
+//# sourceMappingURL=api-download.d.ts.map

package/dist/fab/api-download.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-download.d.ts","sourceRoot":"","sources":["../../src/fab/api-download.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,sBAAsB,EAItB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAqB5D,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,2DAA2D;IAC3D,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,0DAA0D;IAC1D,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,SAAS,CAAC;CACpB;AA6GD;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAuF5B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,GAAG,EACR,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAoDf;AAED,OAAO,EAAE,sBAAsB,EAAE,CAAC"}