urma-mcp 0.1.0-rc.1

package/dist/src/store/store.d.ts

@@ -0,0 +1,138 @@
+import type { ArtifactId, InvestigationRef, RemoteIdentity, SourceRef } from "../core/ids.js";
+import type { AcquisitionMethod, ArtifactKind, ArtifactRole, SourceKind, TranscriptKind } from "../core/model.js";
+export type StoredSource = Readonly<{
+    sourceRef: SourceRef;
+    kind: SourceKind;
+    identity: RemoteIdentity | Readonly<{
+        basis: "local";
+        pathDigest: string;
+    }>;
+    latestRevision: string;
+    createdAt: string;
+}>;
+export type StoredSourceSnapshot = Readonly<{
+    sourceRef: SourceRef;
+    revision: string;
+    observedAt: string;
+    durationMs: number;
+    descriptor: Readonly<Record<string, unknown>>;
+}>;
+export type StoredSourceLocator = Readonly<{
+    sourceRef: SourceRef;
+    locatorDigest: string;
+    privateReopenLocator: string;
+    observedAt: string;
+}>;
+export type StoredInvestigation = Readonly<{
+    investigationRef: InvestigationRef;
+    sourceRef: SourceRef;
+    sourceRevision: string;
+    durationMs: number;
+    createdAt: string;
+    updatedAt: string;
+}>;
+export type StoredTrack = Readonly<{
+    id: string;
+    sourceRef: SourceRef;
+    sourceRevision: string;
+    language: string;
+    kind: TranscriptKind;
+    providerTrackId: string | null;
+    acquiredAt: string;
+    metadata: Readonly<Record<string, unknown>>;
+}>;
+export type StoredSegment = Readonly<{
+    id: number;
+    trackId: string;
+    startMs: number;
+    endMs: number;
+    text: string;
+    ordinal: number;
+}>;
+export type StoredArtifact = Readonly<{
+    artifactId: ArtifactId;
+    sourceRef: SourceRef;
+    sourceRevision: string;
+    kind: ArtifactKind;
+    role: ArtifactRole;
+    mimeType: string;
+    sha256: string;
+    byteSize: number;
+    blobPath: string;
+    startMs: number | null;
+    endMs: number | null;
+    params: Readonly<Record<string, unknown>>;
+    producer: Readonly<Record<string, unknown>>;
+    createdAt: string;
+}>;
+export type StoredAcquisition = Readonly<{
+    id: string;
+    sourceRef: SourceRef;
+    sourceRevision: string;
+    investigationRef: InvestigationRef | null;
+    operation: string;
+    requestKey: string;
+    method: AcquisitionMethod;
+    status: "running" | "succeeded" | "failed" | "cancelled";
+    startedAt: string;
+    completedAt: string | null;
+    wallMs: number | null;
+    networkBytes: number | null;
+    networkAccountingComplete: boolean;
+    errorCode: string | null;
+    metadata: Readonly<Record<string, unknown>>;
+}>;
+export type StoredPresentation = Readonly<{
+    id: string;
+    investigationRef: InvestigationRef;
+    artifactId: ArtifactId | null;
+    modality: "transcript" | "visual" | "audio";
+    evidenceKind: "transcript_search" | "transcript_range" | "point" | "sparse" | "ordered_points" | "audio";
+    startMs: number | null;
+    endMs: number | null;
+    pointsMs: readonly number[] | null;
+    metadata: Readonly<Record<string, unknown>>;
+    presentedAt: string;
+}>;
+export interface UrmaStore {
+    readonly ftsEnabled: boolean;
+    close(): void;
+    putSourceSnapshot(input: Readonly<{
+        source: Omit<StoredSource, "createdAt">;
+        snapshot: StoredSourceSnapshot;
+        locators: readonly StoredSourceLocator[];
+    }>): StoredSourceSnapshot;
+    getSource(sourceRef: SourceRef): StoredSource | null;
+    getSnapshot(sourceRef: SourceRef, revision: string): StoredSourceSnapshot | null;
+    getLatestSnapshot(sourceRef: SourceRef): StoredSourceSnapshot | null;
+    getLocator(sourceRef: SourceRef, locatorDigest: string): StoredSourceLocator | null;
+    listSourceLocators(sourceRef: SourceRef): StoredSourceLocator[];
+    findSourcesByLocatorDigest(locatorDigest: string): StoredSource[];
+    createInvestigation(investigation: StoredInvestigation): void;
+    getInvestigation(investigationRef: InvestigationRef): StoredInvestigation | null;
+    putTranscript(track: StoredTrack, segments: readonly Omit<StoredSegment, "id">[]): void;
+    listTranscriptTracks(sourceRef: SourceRef, revision: string): StoredTrack[];
+    listTranscriptSegments(trackId: string, startMs?: number, endMs?: number): StoredSegment[];
+    searchTranscriptSegments(trackId: string, query: string, limit: number): StoredSegment[];
+    putArtifact(artifact: StoredArtifact, request?: Readonly<{
+        requestKey: string;
+        operation: string;
+    }>, parents?: readonly ArtifactId[]): void;
+    getArtifact(artifactId: ArtifactId): StoredArtifact | null;
+    getArtifactByRequest(requestKey: string): StoredArtifact | null;
+    listArtifacts(sourceRef: SourceRef, revision: string): StoredArtifact[];
+    beginAcquisition(acquisition: StoredAcquisition): void;
+    finishAcquisition(id: string, result: Pick<StoredAcquisition, "status" | "completedAt" | "wallMs" | "networkBytes" | "networkAccountingComplete" | "errorCode" | "metadata">): void;
+    listAcquisitions(investigationRef: InvestigationRef): StoredAcquisition[];
+    addPresentation(presentation: StoredPresentation): void;
+    listPresentations(investigationRef: InvestigationRef): StoredPresentation[];
+    isArtifactPresented(investigationRef: InvestigationRef, artifactId: ArtifactId): boolean;
+    listPresentedArtifactIds(investigationRef: InvestigationRef): ArtifactId[];
+    cacheStats(): {
+        sources: number;
+        investigations: number;
+        artifacts: number;
+        artifactBytes: number;
+        acquisitions: number;
+    };
+}

package/dist/src/store/store.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=store.js.map

package/dist/src/store/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/store/store.ts"],"names":[],"mappings":""}

package/dist/src/subprocess/ffmpeg.d.ts

@@ -0,0 +1,18 @@
+import type { UrmaConfig } from "../config.js";
+import type { RemoteOperationContext } from "../remote/worker.js";
+import { type ProcessResult, type RunOptions } from "./runner.js";
+export declare class Ffmpeg {
+    readonly config: UrmaConfig;
+    readonly remoteContext: RemoteOperationContext | null;
+    readonly runner: (executable: string, args: readonly string[], options?: RunOptions) => Promise<ProcessResult>;
+    constructor(config: UrmaConfig, remoteContext?: RemoteOperationContext | null, runner?: (executable: string, args: readonly string[], options?: RunOptions) => Promise<ProcessResult>);
+    version(signal?: AbortSignal): Promise<string>;
+    extractJpeg(media: string, atMs: number, output: string, signal?: AbortSignal): Promise<void>;
+    cropJpeg(image: string, crop: {
+        width: number;
+        height: number;
+        x: number;
+        y: number;
+    }, output: string, signal?: AbortSignal): Promise<void>;
+    validateJpeg(file: string): Promise<void>;
+}

package/dist/src/subprocess/ffmpeg.js

@@ -0,0 +1,117 @@
+import { readFile, rm, stat } from "node:fs/promises";
+import { UrmaError } from "../core/errors.js";
+import { runChecked } from "./runner.js";
+import { remoteMediaInputArgs } from "./remote-media.js";
+import { verifyRuntimeTool } from "../distribution/integrity.js";
+export class Ffmpeg {
+    config;
+    remoteContext;
+    runner;
+    constructor(config, remoteContext = null, runner = runChecked) {
+        this.config = config;
+        this.remoteContext = remoteContext;
+        this.runner = runner;
+    }
+    async version(signal) {
+        await verifyRuntimeTool(this.config, "ffmpeg");
+        const result = await this.runner(this.config.ffmpeg, ["-version"], {
+            timeoutMs: 10_000,
+            maxStdoutBytes: 256 * 1024,
+            maxStderrBytes: 256 * 1024,
+            signal,
+            debug: this.config.debug,
+            label: "ffmpeg",
+            diagnosticRole: "binary-version",
+        });
+        return result.stdout.toString("utf8").split(/\r?\n/, 1)[0] ?? "unknown";
+    }
+    async extractJpeg(media, atMs, output, signal) {
+        await verifyRuntimeTool(this.config, "ffmpeg");
+        await rm(output, { force: true });
+        const remoteArgs = await remoteMediaInputArgs(media, this.remoteContext);
+        await this.runner(this.config.ffmpeg, [
+            ...remoteArgs,
+            "-v",
+            "error",
+            "-ss",
+            (atMs / 1000).toFixed(3),
+            "-i",
+            media,
+            "-frames:v",
+            "1",
+            "-pix_fmt",
+            "yuvj420p",
+            "-q:v",
+            "2",
+            "-y",
+            output,
+        ], {
+            timeoutMs: this.config.limits.mediaTimeoutMs,
+            maxStdoutBytes: 512 * 1024,
+            maxStderrBytes: this.config.limits.subprocessStderrBytes,
+            signal,
+            debug: this.config.debug,
+            label: "ffmpeg",
+            diagnosticRole: "ffmpeg-exact-frame",
+        });
+        try {
+            const info = await stat(output);
+            if (!info.isFile() || info.size < 1)
+                throw new Error("empty output");
+        }
+        catch (error) {
+            if (error instanceof UrmaError)
+                throw error;
+            throw new UrmaError("FRAME_EXTRACTION_FAILED", "ffmpeg completed without producing a JPEG frame; verify that the requested timestamp is present in the media", { retryable: true, cause: error });
+        }
+    }
+    async cropJpeg(image, crop, output, signal) {
+        await verifyRuntimeTool(this.config, "ffmpeg");
+        const remoteArgs = await remoteMediaInputArgs(image, this.remoteContext);
+        await this.runner(this.config.ffmpeg, [
+            ...remoteArgs,
+            "-v",
+            "error",
+            "-i",
+            image,
+            "-vf",
+            `crop=${crop.width}:${crop.height}:${crop.x}:${crop.y}`,
+            "-frames:v",
+            "1",
+            "-pix_fmt",
+            "yuvj420p",
+            "-q:v",
+            "2",
+            "-y",
+            output,
+        ], {
+            timeoutMs: this.config.limits.mediaTimeoutMs,
+            maxStdoutBytes: 512 * 1024,
+            maxStderrBytes: this.config.limits.subprocessStderrBytes,
+            signal,
+            debug: this.config.debug,
+            label: "ffmpeg",
+            diagnosticRole: "ffmpeg-panel",
+        });
+    }
+    async validateJpeg(file) {
+        let bytes;
+        try {
+            bytes = await readFile(file);
+        }
+        catch (error) {
+            if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+                throw new UrmaError("FRAME_EXTRACTION_FAILED", "Expected JPEG output was not produced by ffmpeg; verify that the requested timestamp is present in the media", { retryable: true, cause: error });
+            }
+            throw error;
+        }
+        if (bytes.length < 4 ||
+            bytes[0] !== 0xff ||
+            bytes[1] !== 0xd8 ||
+            bytes.at(-2) !== 0xff ||
+            bytes.at(-1) !== 0xd9) {
+            throw new UrmaError("MEDIA_INVALID", `Extracted JPEG failed marker validation; retry acquisition from source media`);
+        }
+    }
+}
+//# sourceMappingURL=ffmpeg.js.map

package/dist/src/subprocess/ffmpeg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ffmpeg.js","sourceRoot":"","sources":["../../../src/subprocess/ffmpeg.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAuC,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEjE,MAAM,OAAO,MAAM;IAEN,MAAM;IACN,aAAa;IACb,MAAM;IAHjB,YACW,MAAkB,EAClB,aAAa,GAAkC,IAAI,EACnD,MAAM,GAIe,UAAU;sBAN/B,MAAM;6BACN,aAAa;sBACb,MAAM;IAKd,CAAC;IACJ,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE;YACjE,SAAS,EAAE,MAAM;YACjB,cAAc,EAAE,GAAG,GAAG,IAAI;YAC1B,cAAc,EAAE,GAAG,GAAG,IAAI;YAC1B,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,KAAK,EAAE,QAAQ;YACf,cAAc,EAAE,gBAAgB;SACjC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IAC1E,CAAC;IACD,KAAK,CAAC,WAAW,CACf,KAAa,EACb,IAAY,EACZ,MAAc,EACd,MAAoB;QAEpB,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACzE,MAAM,IAAI,CAAC,MAAM,CACf,IAAI,CAAC,MAAM,CAAC,MAAM,EAClB;YACE,GAAG,UAAU;YACb,IAAI;YACJ,OAAO;YACP,KAAK;YACL,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACxB,IAAI;YACJ,KAAK;YACL,WAAW;YACX,GAAG;YACH,UAAU;YACV,UAAU;YACV,MAAM;YACN,GAAG;YACH,IAAI;YACJ,MAAM;SACP,EACD;YACE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc;YAC5C,cAAc,EAAE,GAAG,GAAG,IAAI;YAC1B,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB;YACxD,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,KAAK,EAAE,QAAQ;YACf,cAAc,EAAE,oBAAoB;SACrC,CACF,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,SAAS;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,IAAI,SAAS,CACjB,yBAAyB,EACzB,8GAA8G,EAC9G,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAClC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,CAAC,QAAQ,CACZ,KAAa,EACb,IAA6D,EAC7D,MAAc,EACd,MAAoB;QAEpB,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACzE,MAAM,IAAI,CAAC,MAAM,CACf,IAAI,CAAC,MAAM,CAAC,MAAM,EAClB;YACE,GAAG,UAAU;YACb,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,KAAK;YACL,KAAK;YACL,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE;YACvD,WAAW;YACX,GAAG;YACH,UAAU;YACV,UAAU;YACV,MAAM;YACN,GAAG;YACH,IAAI;YACJ,MAAM;SACP,EACD;YACE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc;YAC5C,cAAc,EAAE,GAAG,GAAG,IAAI;YAC1B,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB;YACxD,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,KAAK,EAAE,QAAQ;YACf,cAAc,EAAE,cAAc;SAC/B,CACF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EACpE,CAAC;gBACD,MAAM,IAAI,SAAS,CACjB,yBAAyB,EACzB,8GAA8G,EAC9G,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAClC,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IACE,KAAK,CAAC,MAAM,GAAG,CAAC;YAChB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;YACrB,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EACrB,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,eAAe,EACf,8EAA8E,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/src/subprocess/ffprobe.d.ts

@@ -0,0 +1,11 @@
+import type { UrmaConfig } from "../config.js";
+import type { RemoteOperationContext } from "../remote/worker.js";
+import { type ProcessResult, type RunOptions } from "./runner.js";
+export declare class Ffprobe {
+    readonly config: UrmaConfig;
+    readonly remoteContext: RemoteOperationContext | null;
+    readonly runner: (executable: string, args: readonly string[], options?: RunOptions) => Promise<ProcessResult>;
+    constructor(config: UrmaConfig, remoteContext?: RemoteOperationContext | null, runner?: (executable: string, args: readonly string[], options?: RunOptions) => Promise<ProcessResult>);
+    version(signal?: AbortSignal): Promise<string>;
+    inspect(media: string, signal?: AbortSignal): Promise<Record<string, unknown>>;
+}

package/dist/src/subprocess/ffprobe.js

@@ -0,0 +1,62 @@
+import { UrmaError } from "../core/errors.js";
+import { runChecked } from "./runner.js";
+import { remoteMediaInputArgs } from "./remote-media.js";
+import { verifyRuntimeTool } from "../distribution/integrity.js";
+export class Ffprobe {
+    config;
+    remoteContext;
+    runner;
+    constructor(config, remoteContext = null, runner = runChecked) {
+        this.config = config;
+        this.remoteContext = remoteContext;
+        this.runner = runner;
+    }
+    async version(signal) {
+        await verifyRuntimeTool(this.config, "ffprobe");
+        const result = await this.runner(this.config.ffprobe, ["-version"], {
+            timeoutMs: 10_000,
+            maxStdoutBytes: 256 * 1024,
+            maxStderrBytes: 256 * 1024,
+            signal,
+            debug: this.config.debug,
+            label: "ffprobe",
+            diagnosticRole: "binary-version",
+        });
+        return result.stdout.toString("utf8").split(/\r?\n/, 1)[0] ?? "unknown";
+    }
+    async inspect(media, signal) {
+        await verifyRuntimeTool(this.config, "ffprobe");
+        const remoteArgs = await remoteMediaInputArgs(media, this.remoteContext);
+        const result = await this.runner(this.config.ffprobe, [
+            ...remoteArgs,
+            "-v",
+            "error",
+            "-show_format",
+            "-show_streams",
+            "-of",
+            "json",
+            media,
+        ], {
+            timeoutMs: this.config.limits.metadataTimeoutMs,
+            maxStdoutBytes: this.config.limits.subprocessStdoutBytes,
+            maxStderrBytes: this.config.limits.subprocessStderrBytes,
+            signal,
+            debug: this.config.debug,
+            label: "ffprobe",
+            diagnosticRole: "ffprobe-media-probe",
+        });
+        try {
+            const parsed = JSON.parse(result.stdout.toString("utf8"));
+            if (typeof parsed !== "object" ||
+                parsed === null ||
+                Array.isArray(parsed)) {
+                throw new Error("not an object");
+            }
+            return parsed;
+        }
+        catch (error) {
+            throw new UrmaError("MEDIA_INVALID", `ffprobe returned invalid JSON for the requested media; verify the source is a supported video`, { cause: error });
+        }
+    }
+}
+//# sourceMappingURL=ffprobe.js.map

package/dist/src/subprocess/ffprobe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ffprobe.js","sourceRoot":"","sources":["../../../src/subprocess/ffprobe.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAuC,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEjE,MAAM,OAAO,OAAO;IAEP,MAAM;IACN,aAAa;IACb,MAAM;IAHjB,YACW,MAAkB,EAClB,aAAa,GAAkC,IAAI,EACnD,MAAM,GAIe,UAAU;sBAN/B,MAAM;6BACN,aAAa;sBACb,MAAM;IAKd,CAAC;IACJ,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE;YAClE,SAAS,EAAE,MAAM;YACjB,cAAc,EAAE,GAAG,GAAG,IAAI;YAC1B,cAAc,EAAE,GAAG,GAAG,IAAI;YAC1B,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,KAAK,EAAE,SAAS;YAChB,cAAc,EAAE,gBAAgB;SACjC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IAC1E,CAAC;IACD,KAAK,CAAC,OAAO,CACX,KAAa,EACb,MAAoB;QAEpB,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAC9B,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB;YACE,GAAG,UAAU;YACb,IAAI;YACJ,OAAO;YACP,cAAc;YACd,eAAe;YACf,KAAK;YACL,MAAM;YACN,KAAK;SACN,EACD;YACE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB;YAC/C,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB;YACxD,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB;YACxD,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,KAAK,EAAE,SAAS;YAChB,cAAc,EAAE,qBAAqB;SACtC,CACF,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;YACrE,IACE,OAAO,MAAM,KAAK,QAAQ;gBAC1B,MAAM,KAAK,IAAI;gBACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACrB,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,MAAiC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CACjB,eAAe,EACf,+FAA+F,EAC/F,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/src/subprocess/redaction.d.ts

@@ -0,0 +1,3 @@
+export declare function redactText(value: string): string;
+export declare function redactModelText(value: string): string;
+export declare function redactArgs(args: readonly string[]): string[];

package/dist/src/subprocess/redaction.js

@@ -0,0 +1,31 @@
+const URL_PATTERN = /https?:\/\/[^\s"'<>]+/gi;
+const SIGNED_QUERY_FRAGMENT_PATTERN = /(^|[\s"'(])\?(?=[^\s"'<>]*(?:sig(?:nature)?|token|expire|expires|hdnts|auth|authorization|x-amz-[^=]+|x-goog-[^=]+)=)[^\s"'<>]*/giu;
+export function redactText(value) {
+    return value.replace(URL_PATTERN, (raw) => {
+        try {
+            const parsed = new URL(raw);
+            if ([
+                "youtube.com",
+                "www.youtube.com",
+                "m.youtube.com",
+                "youtu.be",
+            ].includes(parsed.hostname.toLowerCase())) {
+                return `${parsed.protocol}//${parsed.host}${parsed.pathname}[query-redacted]`;
+            }
+        }
+        catch {
+            /* replace malformed URL-shaped diagnostics wholesale */
+        }
+        return "[remote-url-redacted]";
+    }).replace(SIGNED_QUERY_FRAGMENT_PATTERN, "$1[query-redacted]");
+}
+export function redactModelText(value) {
+    return redactText(value)
+        .replace(/[A-Za-z]:(?:\\{1,2}|\/)[^\s"'<>]*/g, "[local-path-redacted]")
+        .replace(/(^|[\s"'(])\/(?:[^\s"'<>]+\/)*[^\s"'<>]*/g, (_match, prefix) => `${prefix}[local-path-redacted]`)
+        .replace(/(?:\\\\|\/\/)[^\s"'<>]*/g, "[local-path-redacted]");
+}
+export function redactArgs(args) {
+    return args.map((argument) => redactText(argument));
+}
+//# sourceMappingURL=redaction.js.map

package/dist/src/subprocess/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../../src/subprocess/redaction.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,6BAA6B,GAAG,oIAAoI,CAAC;AAE3K,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,IACE;gBACE,aAAa;gBACb,iBAAiB;gBACjB,eAAe;gBACf,UAAU;aACX,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EACzC,CAAC;gBACD,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,kBAAkB,CAAC;YAChF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;QACD,OAAO,uBAAuB,CAAC;IACjC,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,EAAE,oBAAoB,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,UAAU,CAAC,KAAK,CAAC;SACrB,OAAO,CAAC,oCAAoC,EAAE,uBAAuB,CAAC;SACtE,OAAO,CACN,2CAA2C,EAC3C,CAAC,MAAc,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,MAAM,uBAAuB,CACrE;SACA,OAAO,CAAC,0BAA0B,EAAE,uBAAuB,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAuB;IAChD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtD,CAAC"}

package/dist/src/subprocess/remote-media.d.ts

@@ -0,0 +1,3 @@
+import { type RemoteOperationContext } from "../remote/worker.js";
+export declare function mediaInputKind(value: string): "local" | "remote";
+export declare function remoteMediaInputArgs(value: string, context: RemoteOperationContext | null | undefined): Promise<string[]>;

package/dist/src/subprocess/remote-media.js

@@ -0,0 +1,27 @@
+import { assertRemoteTargetAllowed } from "../remote/egress.js";
+import { ensureRemoteProxy } from "../remote/worker.js";
+import { UrmaError } from "../core/errors.js";
+function isWindowsDrivePath(value) {
+    return /^[A-Za-z]:[\\/]/u.test(value);
+}
+export function mediaInputKind(value) {
+    if (/^https?:\/\//iu.test(value))
+        return "remote";
+    if (!isWindowsDrivePath(value) && /^[A-Za-z][A-Za-z0-9+.-]*:/u.test(value)) {
+        throw new UrmaError("UNSUPPORTED_SOURCE", "Media subprocesses accept local paths or HTTP(S) through Urma's Safe Proxy; the supplied protocol is unsupported");
+    }
+    return "local";
+}
+export async function remoteMediaInputArgs(value, context) {
+    if (mediaInputKind(value) !== "remote")
+        return [];
+    assertRemoteTargetAllowed({ url: value, purpose: "input" });
+    const proxyUrl = await ensureRemoteProxy(context);
+    return [
+        "-protocol_whitelist",
+        "http,https,tcp,tls,httpproxy",
+        "-http_proxy",
+        proxyUrl,
+    ];
+}
+//# sourceMappingURL=remote-media.js.map

package/dist/src/subprocess/remote-media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-media.js","sourceRoot":"","sources":["../../../src/subprocess/remote-media.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAA+B,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,SAAS,CACjB,oBAAoB,EACpB,kHAAkH,CACnH,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAa,EACb,OAAkD;IAElD,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAClD,yBAAyB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClD,OAAO;QACL,qBAAqB;QACrB,8BAA8B;QAC9B,aAAa;QACb,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/src/subprocess/runner.d.ts

@@ -0,0 +1,23 @@
+export type ProcessResult = Readonly<{
+    executable: string;
+    args: readonly string[];
+    code: number;
+    stdout: Buffer;
+    stderr: Buffer;
+    wallMs: number;
+}>;
+export type RunOptions = Readonly<{
+    cwd?: string | undefined;
+    env?: NodeJS.ProcessEnv | undefined;
+    timeoutMs?: number | undefined;
+    maxStdoutBytes?: number | undefined;
+    maxStderrBytes?: number | undefined;
+    signal?: AbortSignal | undefined;
+    debug?: boolean | undefined;
+    label?: string | undefined;
+    diagnosticRole?: string | undefined;
+}>;
+/** Keep credentials, proxy settings, hooks, browser paths, and host state out of child processes */
+export declare function allowlistedEnvironment(input?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export declare function runProcess(executable: string, args: readonly string[], options?: RunOptions): Promise<ProcessResult>;
+export declare function runChecked(executable: string, args: readonly string[], options?: RunOptions): Promise<ProcessResult>;