yugoo-design 0.1.2 → 0.2.2

package/payload/shared/scripts/panel-preview-CPGv8nTe.mjs

@@ -1,105 +0,0 @@
-import { Ot as compileSchema } from "./core-entry-B6zaTh1o.mjs";
-import { t as loadStudioKit } from "./load-DE29wyw0.mjs";
-import { isAbsolute, resolve } from "node:path";
-//#region packages/studio/src/panel-preview.ts
-/** Definition-only Panel preview preparation; never writes or runs a Bundle. */
-function failure(code, message) {
-	return { diagnostics: [{
-		code,
-		message
-	}] };
-}
-/** Shared finalization over a real Core-compiled Bundle, with optional real Kit context. */
-function finalizeStudioPanelPreview(input) {
-	const { compiled, revision, sampleSource } = input;
-	const bundle = { ...input.bundle }, kit = input.kit === void 0 ? void 0 : { ...input.kit };
-	if (!Number.isSafeInteger(revision) || revision < 0 || typeof sampleSource !== "string") return failure("preview.request", "Select an exact Bundle, text sample JSON and a non-negative editor revision.");
-	if ((compiled.catalogName ?? compiled.name) !== bundle.name || String(compiled.version) !== bundle.version) return failure("preview.bundle_pin", "The source does not match the selected Bundle version.");
-	const panelYaml = compiled.metadata?.panelYaml;
-	if (typeof panelYaml !== "string") return failure("preview.not_declarative", "Only an existing declarative Panel can be previewed.");
-	const schema = compiled.metadata?.schemaDocument;
-	if (schema === void 0) return failure("preview.definition", "The loader did not produce a declarative Panel and schema.");
-	if (new TextEncoder().encode(sampleSource).length > 262144) return failure("preview.size", "Sample JSON is limited to 256 KiB.");
-	let sample;
-	try {
-		sample = JSON.parse(sampleSource);
-	} catch {
-		return failure("preview.sample_json", "The preview sample must be valid JSON.");
-	}
-	if (sample === null || typeof sample !== "object" || Array.isArray(sample)) return failure("preview.sample_json", "The preview sample must be a JSON object.");
-	try {
-		const errors = compileSchema(schema)(sample);
-		if (errors.length > 0) return { diagnostics: errors.map((message) => ({
-			code: "preview.sample_schema",
-			message
-		})) };
-		return {
-			preview: {
-				revision,
-				...kit === void 0 ? {} : { kit },
-				bundle,
-				panelYaml,
-				sample
-			},
-			diagnostics: []
-		};
-	} catch (error) {
-		return failure("preview.definition", error instanceof Error ? error.message : String(error));
-	}
-}
-/**
-* Compile one Panel edit against an exact, host-resolved Kit snapshot.
-*
-* The host must supply an immutable/read-confined source port and root for the
-* selected pin, not arbitrary browser paths or a mutable production project.
-* Only panel.yaml is overlaid. All schemas, methods, locales and renderer
-* contracts still come from that snapshot and pass through the runtime loader.
-* The returned sample is fresh JSON and can be edited in a sandboxed preview;
-* this function grants no artifact, filesystem, model or publication authority.
-* A preview consumer must discard a result if its editor revision has changed.
-*/
-async function prepareStudioPanelPreview(source, kitRoot, request, loadOptions = {}) {
-	const { panelSource, sampleSource, revision } = request;
-	const kitPin = { ...request.kit };
-	const bundlePin = { ...request.bundle };
-	if (!isAbsolute(kitRoot) || !/^[a-z][a-z0-9_]*$/.test(bundlePin.name) || !Number.isSafeInteger(revision) || revision < 0 || typeof panelSource !== "string" || typeof sampleSource !== "string") return failure("preview.request", "Select an exact Bundle and a non-negative editor revision.");
-	if (new TextEncoder().encode(panelSource).length > 1048576 || new TextEncoder().encode(sampleSource).length > 262144) return failure("preview.size", "Panel source is limited to 1 MiB and sample JSON to 256 KiB.");
-	let sample;
-	try {
-		sample = JSON.parse(sampleSource);
-	} catch {
-		return failure("preview.sample_json", "The preview sample must be valid JSON.");
-	}
-	if (sample === null || typeof sample !== "object" || Array.isArray(sample)) return failure("preview.sample_json", "The preview sample must be a JSON object.");
-	try {
-		const base = await loadStudioKit(source, kitRoot, loadOptions);
-		if (base.name !== kitPin.name || String(base.version) !== kitPin.version) return failure("preview.kit_pin", "The source does not match the selected Kit version.");
-		const bundle = base.skills.find((skill) => (skill.catalogName ?? skill.name) === bundlePin.name);
-		if (bundle === void 0 || String(bundle.version) !== bundlePin.version) return failure("preview.bundle_pin", "The source does not match the selected Bundle version.");
-		if (typeof bundle.metadata?.panelYaml !== "string") return failure("preview.not_declarative", "Only an existing declarative Panel can be edited in this preview.");
-		const panelPath = resolve(bundle.resourceRoot ?? resolve(kitRoot, "skills", bundle.name), "panel.yaml");
-		const overlay = {
-			readText: (path) => resolve(path) === panelPath ? Promise.resolve(panelSource) : source.readText(path),
-			...source.readResource ? { readResource: (path) => resolve(path) === panelPath ? Promise.resolve({
-				kind: "text",
-				content: panelSource
-			}) : source.readResource(path) } : {},
-			listDir: (path) => source.listDir(path),
-			...source.isDirectory ? { isDirectory: (path) => source.isDirectory(path) } : {},
-			...source.realPath ? { realPath: (path) => source.realPath(path) } : {}
-		};
-		const compiled = (await loadStudioKit(overlay, kitRoot, loadOptions)).skills.find((skill) => (skill.catalogName ?? skill.name) === bundlePin.name);
-		if (compiled === void 0) return failure("preview.bundle_pin", "The source does not match the selected Bundle version.");
-		return finalizeStudioPanelPreview({
-			compiled,
-			revision,
-			kit: kitPin,
-			bundle: bundlePin,
-			sampleSource
-		});
-	} catch (error) {
-		return failure("preview.definition", error instanceof Error ? error.message : String(error));
-	}
-}
-//#endregion
-export { prepareStudioPanelPreview as n, finalizeStudioPanelPreview as t };

package/payload/shared/scripts/studio-content-archive-CNUz472H.mjs

@@ -1,334 +0,0 @@
-import { n as ensureWindowsPrivateDirectory, t as assertWindowsPrivate } from "./windows-private-storage-DRAXaqae.mjs";
-import { t as loadStudioKit } from "./load-DE29wyw0.mjs";
-import { i as readStudioContentArchive, n as prepareStudioContentImport, r as readStudioArchiveResource, t as exportStudioContentArchive } from "./content-archive-4UdioMU9.mjs";
-import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
-import { link, lstat, mkdir, open, readdir, realpath, rmdir, unlink } from "node:fs/promises";
-import { createHash, randomUUID } from "node:crypto";
-import { constants } from "node:fs";
-//#region packages/companion/src/studio-content-archive.mjs
-/**
-* Trusted byte snapshots and inert import preparation. No extraction/installation.
-* Offline envelope limits do not expand Companion's existing 12 MiB HTTP limit.
-* Exports retain no source copies; imports retain only envelopes and receipts.
-* Limits: 32 immutable new identities / 128 MiB total, no automatic deletion.
-*/
-const MAX_BYTES = 16777216;
-const MAX_FILES = 4096;
-const MAX_RECORD = 34603008;
-const MAX_STORE = 134217728;
-const MAX_IMPORTS = 32;
-const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u;
-const hash = (bytes) => createHash("sha256").update(bytes).digest("hex");
-const inside = (root, path) => {
-	const rel = relative(root, path);
-	return !isAbsolute(rel) && rel !== ".." && !rel.startsWith(`..${sep}`);
-};
-const same = (a, b) => a.dev === b.dev && a.ino === b.ino && a.size === b.size && a.mtimeMs === b.mtimeMs && a.ctimeMs === b.ctimeMs;
-async function noLinks(path) {
-	let current = resolve(path);
-	while (true) {
-		if ((await lstat(current)).isSymbolicLink()) throw Error("Archive paths must not use source or storage symlinks.");
-		const parent = dirname(current);
-		if (parent === current) break;
-		current = parent;
-	}
-	if (await realpath(path) !== resolve(path)) throw Error("Archive path must be canonical, not an alias.");
-}
-async function privateDirectory(path) {
-	await noLinks(path);
-	if (process.platform === "win32") return assertWindowsPrivate(path, { directory: true });
-	const info = await lstat(path);
-	if (!info.isDirectory() || info.uid !== process.getuid() || info.mode & 63) throw Error("Archive storage requires an existing private owned directory; permissions are not repaired.");
-	return info;
-}
-async function regularBytes(path, limit, { privateFile = false } = {}) {
-	await noLinks(path);
-	const before = await lstat(path);
-	if (!before.isFile() || before.size > limit) throw Error("Archive source must be a bounded regular file.");
-	if (privateFile) {
-		if (process.platform === "win32") await assertWindowsPrivate(path);
-		else if (before.uid !== process.getuid() || before.mode & 127) throw Error("Archive record permissions must be private and non-executable.");
-	}
-	const handle = await open(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
-	try {
-		if (!same(before, await handle.stat())) throw Error("Archive file identity changed before reading.");
-		const bytes = Buffer.alloc(before.size);
-		let offset = 0;
-		while (offset < bytes.length) {
-			const { bytesRead } = await handle.read(bytes, offset, bytes.length - offset, offset);
-			if (!bytesRead) throw Error("Archive source changed during reading.");
-			offset += bytesRead;
-		}
-		if (!same(before, await handle.stat()) || !same(before, await lstat(path))) throw Error("Archive file changed during reading.");
-		return {
-			bytes,
-			stat: before
-		};
-	} finally {
-		await handle.close();
-	}
-}
-/** Complete immutable bytes retained in memory before any Core/content parsing. */
-async function capture(kitRoot, budget = {
-	bytes: 0,
-	files: 0
-}) {
-	const files = /* @__PURE__ */ new Map(), stats = /* @__PURE__ */ new Map();
-	const visit = async (directory) => {
-		await noLinks(directory);
-		stats.set(directory, await lstat(directory));
-		for (const name of (await readdir(directory)).sort()) {
-			if (name === ".git" || name === "node_modules") continue;
-			const path = join(directory, name), info = await lstat(path);
-			if (info.isSymbolicLink()) throw Error("Archive snapshot refuses source symlinks.");
-			if (info.isDirectory()) await visit(path);
-			else {
-				if (budget.files >= MAX_FILES) throw Error("Archive snapshot exceeds 4096 files.");
-				const { bytes, stat } = await regularBytes(path, MAX_BYTES - budget.bytes);
-				budget.bytes += bytes.length;
-				budget.files++;
-				const key = relative(kitRoot, path).split(sep).join("/");
-				files.set(key, bytes);
-				stats.set(path, stat);
-			}
-		}
-	};
-	await visit(kitRoot);
-	for (const [path, stat] of stats) if (!same(stat, await lstat(path))) throw Error("Archive snapshot source changed before completion.");
-	const keyOf = (path) => {
-		const absolute = resolve(path);
-		if (!inside(kitRoot, absolute)) throw Error("Archive loader escaped its captured source.");
-		return relative(kitRoot, absolute).split(sep).join("/");
-	};
-	const children = (path) => {
-		const key = keyOf(path), prefix = key ? `${key}/` : "";
-		return [...new Set([...files.keys()].filter((file) => file.startsWith(prefix)).map((file) => file.slice(prefix.length).split("/")[0]))].sort();
-	};
-	return {
-		root: kitRoot,
-		async listFiles() {
-			return [...files.keys()];
-		},
-		async readBytes(path) {
-			const bytes = files.get(keyOf(path));
-			if (!bytes) throw Error("Missing captured source file.");
-			return Buffer.from(bytes);
-		},
-		fs: {
-			async readText(path) {
-				const bytes = files.get(keyOf(path));
-				return bytes === void 0 ? void 0 : new TextDecoder("utf8", { fatal: true }).decode(bytes);
-			},
-			async readResource(path) {
-				const bytes = files.get(keyOf(path));
-				return bytes === void 0 ? void 0 : readStudioArchiveResource(path, bytes);
-			},
-			async listDir(path) {
-				return children(path);
-			},
-			async isDirectory(path) {
-				return children(path).length > 0;
-			},
-			async realPath(path) {
-				keyOf(path);
-				return resolve(path);
-			}
-		}
-	};
-}
-/** Host passes trusted roots; request bodies never supply filesystem destinations. */
-async function createStudioContentArchives({ stateRoot, kitRoot, readInstalledKit, sourceId, bundles }) {
-	if (!isAbsolute(stateRoot) || !isAbsolute(kitRoot) || typeof readInstalledKit !== "function") throw Error("Archives require trusted absolute roots and an installed Kit reader.");
-	stateRoot = resolve(stateRoot);
-	kitRoot = resolve(kitRoot);
-	await noLinks(kitRoot);
-	if (!(await lstat(kitRoot)).isDirectory()) throw Error("Installed Kit root must be a directory.");
-	if (inside(kitRoot, stateRoot) || inside(stateRoot, kitRoot)) throw Error("Archive state and installed Kit must not be nested.");
-	await privateDirectory(stateRoot);
-	const root = join(stateRoot, "studio-content-imports");
-	if (process.platform === "win32") await ensureWindowsPrivateDirectory(root);
-	else await mkdir(root, { mode: 448 }).catch((error) => {
-		if (error.code !== "EEXIST") throw error;
-	});
-	await privateDirectory(root);
-	const captureInstalled = async () => {
-		const installed = readInstalledKit(), selected = {
-			name: installed?.name,
-			version: String(installed?.version)
-		};
-		const budget = {
-			bytes: 0,
-			files: 0
-		}, snapshot = await capture(kitRoot, budget);
-		snapshot.sourceId = sourceId;
-		if (bundles !== void 0) {
-			if (!Array.isArray(bundles) || !Array.isArray(installed.skills)) throw Error("Independent archive capture requires a compiled Kit and trusted Bundle sources.");
-			snapshot.bundles = [];
-			for (const skill of installed.skills) {
-				const name = skill.catalogName ?? skill.name, version = String(skill.version);
-				const matches = bundles.filter((bundle) => bundle.name === name && bundle.version === version);
-				if (matches.length !== 1) throw Error("Missing or ambiguous exact Bundle source for archive.");
-				const binding = matches[0];
-				if (!isAbsolute(binding.rootDir) || typeof binding.sourceId !== "string" || !binding.sourceId) throw Error("Bundle archive sources require trusted absolute roots and source identity.");
-				const bundleRoot = resolve(binding.rootDir);
-				if (inside(bundleRoot, stateRoot) || inside(stateRoot, bundleRoot)) throw Error("Archive state and Bundle sources must not be nested.");
-				snapshot.bundles.push({
-					name,
-					version,
-					sourceId: binding.sourceId,
-					snapshot: await capture(bundleRoot, budget)
-				});
-			}
-		}
-		const captured = await loadStudioKit({
-			readText: (path) => sourceFor(path).fs.readText(path),
-			readResource: (path) => sourceFor(path).fs.readResource(path),
-			listDir: (path) => sourceFor(path).fs.listDir(path),
-			isDirectory: (path) => sourceFor(path).fs.isDirectory(path),
-			realPath: (path) => sourceFor(path).fs.realPath(path)
-		}, snapshot.root, {
-			sourceId,
-			bundles: snapshot.bundles?.map((bundle) => ({
-				name: bundle.name,
-				version: bundle.version,
-				rootDir: bundle.snapshot.root,
-				sourceId: bundle.sourceId
-			}))
-		});
-		function sourceFor(path) {
-			const source = [...(snapshot.bundles ?? []).map((bundle) => bundle.snapshot), snapshot].sort((a, b) => b.root.length - a.root.length).find((source) => inside(source.root, resolve(path)));
-			if (!source) throw Error("Archive loader escaped captured sources.");
-			return source;
-		}
-		if (captured.name !== selected.name || String(captured.version) !== selected.version) throw Error("Captured source disagrees with installed Kit pin.");
-		return {
-			snapshot,
-			selected
-		};
-	};
-	const pathOf = (id) => {
-		if (typeof id !== "string" || !UUID.test(id)) throw Error("Invalid import identity.");
-		return join(root, `${id}.json`);
-	};
-	const contextHash = async (snapshot) => {
-		const entries = [];
-		for (const source of [{
-			snapshot,
-			sourceId: snapshot.sourceId
-		}, ...snapshot.bundles ?? []]) {
-			const files = [];
-			for (const path of (await source.snapshot.listFiles()).sort()) files.push([path, hash(await source.snapshot.readBytes(join(source.snapshot.root, path)))]);
-			entries.push({
-				name: source.name,
-				version: source.version,
-				sourceId: source.sourceId,
-				files
-			});
-		}
-		return hash(JSON.stringify(entries));
-	};
-	const withLock = async (operation) => {
-		await privateDirectory(root);
-		const lock = join(root, "write.lock");
-		try {
-			await mkdir(lock, { mode: 448 });
-		} catch (error) {
-			if (error.code === "EEXIST") throw Error("Archive store is busy; retry after the existing writer settles.");
-			throw error;
-		}
-		try {
-			return await operation();
-		} finally {
-			await rmdir(lock);
-		}
-	};
-	const readImport = async (id) => {
-		await privateDirectory(root);
-		const { bytes } = await regularBytes(pathOf(id), MAX_RECORD, { privateFile: true });
-		const record = JSON.parse(new TextDecoder("utf8", { fatal: true }).decode(bytes));
-		const { sha256, ...data } = record;
-		if (record.format !== "studio-content-import/v1" || record.id !== id || hash(JSON.stringify(data)) !== sha256 || record.executionGranted !== false || typeof record.requiresTrustReview !== "boolean" || typeof record.validation?.valid !== "boolean" || !Array.isArray(record.validation?.diagnostics)) throw Error("Import record integrity or shape mismatch.");
-		readStudioContentArchive(JSON.stringify(record.archive));
-		return record;
-	};
-	return {
-		async exportArchive(request) {
-			const input = structuredClone(request);
-			const { snapshot, selected: installed } = await captureInstalled();
-			if (input.kind === "kit" && (input.pin?.name !== installed.name || input.pin?.version !== String(installed.version))) throw Error("Select the exact installed Kit pin.");
-			return exportStudioContentArchive(snapshot, input);
-		},
-		async prepareImport({ source, validateAgainstInstalled = false }) {
-			if (typeof validateAgainstInstalled !== "boolean") throw Error("Explicit validation-context selection must be boolean.");
-			const archive = readStudioContentArchive(source);
-			const validationContext = archive.kind === "bundle" && validateAgainstInstalled ? (await captureInstalled()).snapshot : void 0;
-			const prepared = await prepareStudioContentImport(JSON.stringify(archive), { validationContext });
-			return withLock(async () => {
-				const names = await readdir(root);
-				if (names.filter((name) => name.endsWith(".json")).length >= MAX_IMPORTS) throw Error("Archive import limit reached (32).");
-				let stored = 0;
-				for (const name of names) {
-					const info = await lstat(join(root, name));
-					if (info.isSymbolicLink()) throw Error("Unsafe archive store member.");
-					if (info.isFile()) stored += info.size;
-				}
-				const id = randomUUID(), data = {
-					format: "studio-content-import/v1",
-					id,
-					archive: prepared.archive,
-					...validationContext ? { validationContextHash: await contextHash(validationContext) } : {},
-					validation: prepared.validation,
-					executionGranted: false,
-					requiresTrustReview: prepared.requiresTrustReview
-				};
-				const json = JSON.stringify({
-					...data,
-					sha256: hash(JSON.stringify(data))
-				});
-				if (Buffer.byteLength(json) > MAX_RECORD || stored + Buffer.byteLength(json) > MAX_STORE) throw Error("Archive record/store size limit exceeded.");
-				const temporary = join(root, `${randomUUID()}.tmp`);
-				let handle;
-				try {
-					handle = await open(temporary, "wx", 384);
-					await handle.writeFile(json, "utf8");
-					await handle.sync();
-					await handle.close();
-					handle = void 0;
-					if (process.platform === "win32") await assertWindowsPrivate(temporary);
-					await link(temporary, pathOf(id));
-				} finally {
-					await handle?.close();
-					await unlink(temporary).catch((error) => {
-						if (error.code !== "ENOENT") throw error;
-					});
-				}
-				return readImport(id);
-			});
-		},
-		readImport,
-		async revalidateImport(id) {
-			const record = await readImport(id);
-			const validationContext = record.validationContextHash ? (await captureInstalled()).snapshot : void 0;
-			if (validationContext && await contextHash(validationContext) !== record.validationContextHash) throw Error("Installed validation context changed; prepare this import again.");
-			return prepareStudioContentImport(JSON.stringify(record.archive), { validationContext });
-		},
-		async listImports() {
-			await privateDirectory(root);
-			const names = (await readdir(root)).filter((name) => name.endsWith(".json") && UUID.test(name.slice(0, -5))).sort();
-			if (names.length > MAX_IMPORTS) throw Error("Archive import count exceeds limit.");
-			return Promise.all(names.map(async (name) => {
-				const record = await readImport(name.slice(0, -5));
-				return {
-					id: record.id,
-					kind: record.archive.kind,
-					pin: record.archive.pin,
-					validation: record.validation,
-					executionGranted: false,
-					requiresTrustReview: record.requiresTrustReview
-				};
-			}));
-		}
-	};
-}
-//#endregion
-export { createStudioContentArchives };