aztec.ts

1/**2 * aztec.ts — Aztec 2D barcode generation with round-trip verification.3 *4 * The library has two entry points:5 *   - browser:  `bwip-js` — uses Canvas/OffscreenCanvas for rasterization6 *   - node:     `bwip-js/node` — uses zlib-PNG, returns a Buffer directly7 *8 * We resolve which one to use at runtime so the popup (browser context) and9 * vitest (node context) both work without any build-time conditional. The10 * resolved module is cached because importing parses ~500KB of generated JS.11 *12 * Round-trip verification: every generated Aztec is decoded back via @zxing13 * and the decoded text is compared byte-for-byte with the original envelope14 * JSON. Without the round-trip we have no proof that what we printed is15 * actually readable. In the popup the decode runs through OffscreenCanvas.16 * In a pure node test environment OffscreenCanvas is unavailable, so we17 * fall back to a no-op verification — the generation tests for that path18 * cover the encoder via separate code paths.19 */2021import {22  BarcodeFormat,23  BinaryBitmap,24  DecodeHintType,25  HybridBinarizer,26  MultiFormatReader,27  RGBLuminanceSource,28} from "@zxing/library";29import {30  AZTEC_ECC_PERCENT,31  CodexError,32  type ChunkEnvelope,33} from "../../shared/codex-types";3435export interface AztecImage {36  pngBytes: Uint8Array;37  width: number;38  height: number;39}4041// ── bwip-js loader ───────────────────────────────────────────────────────────4243/**44 * In browser builds the popup bundler resolves `bwip-js` to the browser entry45 * which exports `toCanvas`. In node (vitest) we want `bwip-js/node` which46 * exports `toBuffer`. We can't import both unconditionally — node can't load47 * the browser entry's canvas code, and the browser can't load `node:zlib`.48 *49 * The detection is "do we have a working OffscreenCanvas?" rather than50 * "is `process` defined?" because the popup runs in an MV3 worker context51 * where some Node globals leak via polyfills.52 */53interface BwipBrowserModule {54  toCanvas: (55    canvas: OffscreenCanvas | HTMLCanvasElement,56    opts: Record<string, unknown>,57  ) => OffscreenCanvas | HTMLCanvasElement;58}5960interface BwipNodeModule {61  toBuffer: (opts: Record<string, unknown>) => Promise<Buffer>;62}6364let cachedBwip: BwipBrowserModule | BwipNodeModule | null = null;65let cachedIsBrowser: boolean | null = null;6667async function loadBwip(): Promise<{68  mod: BwipBrowserModule | BwipNodeModule;69  isBrowser: boolean;70}> {71  if (cachedBwip && cachedIsBrowser !== null) {72    return { mod: cachedBwip, isBrowser: cachedIsBrowser };73  }74  const isBrowser = typeof OffscreenCanvas !== "undefined";7576  // Two separate import() calls so Rolldown code-splits the browser entry77  // into a real chunk (making the URL resolvable at runtime in the extension),78  // while keeping @vite-ignore on the test-only node path to prevent Rolldown79  // from trying to bundle node:zlib into the browser build.80  let ns: Record<string, unknown>;81  if (isBrowser) {82    // bwip-js exports types under the "browser" condition only — tsc can't83    // resolve them with moduleResolution:"bundler". The runtime behavior is84    // correct; the cast below enforces our own interface.85    // @ts-expect-error — no top-level types entry in bwip-js package.json exports86    ns = (await import("bwip-js")) as Record<string, unknown>;87  } else {88    // vitest / node only — bwip-js/node uses node:zlib which can't bundle for browser.89    ns = (await import(/* @vite-ignore */ "bwip-js/node")) as Record<string, unknown>;90  }9192  const defaultExport = ns["default"] as Record<string, unknown> | undefined;93  // ESM dynamic import surface differs between the two builds: the browser94  // bundle exports `toCanvas` as a named export, while the node bundle is95  // CJS-shaped and exposes `toBuffer` on `default`. Merge both so callers96  // can use either method without caring which path resolved.97  const merged = { ...(defaultExport ?? {}), ...ns } as Record<string, unknown>;98  const resolved = merged as unknown as BwipBrowserModule | BwipNodeModule;99  cachedBwip = resolved;100  cachedIsBrowser = isBrowser;101  return { mod: resolved, isBrowser };102}103104// ── Aztec PNG generation ────────────────────────────────────────────────────105106/**107 * Render an Aztec barcode at 25% ECC and return its PNG bytes. The PNG is108 * intentionally monochrome at scale 4 — that's the smallest scale that still109 * looks crisp at print resolution while keeping per-code rendering well under110 * 100ms on modest hardware.111 */112export async function generateAztecPng(payload: string): Promise<AztecImage> {113  const { mod, isBrowser } = await loadBwip();114  const opts = {115    bcid: "azteccode",116    text: payload,117    eclevel: AZTEC_ECC_PERCENT.toString(),118    scale: 4,119    // padding: 2 adds 8px (2 modules at scale 4) of quiet zone on each side.120    // ZXing's finder pattern search fails when the code is flush against the121    // image edge with no quiet zone, causing spurious AZTEC_ROUNDTRIP_FAILED.122    padding: 2,123    monochrome: true,124  } as const;125126  try {127    if (isBrowser) {128      const canvas = new OffscreenCanvas(1, 1);129      const drawn = (mod as BwipBrowserModule).toCanvas(canvas, opts);130      const out = drawn as OffscreenCanvas;131      const blob = await out.convertToBlob({ type: "image/png" });132      const pngBytes = new Uint8Array(await blob.arrayBuffer());133      return { pngBytes, width: out.width, height: out.height };134    }135136    const buf = await (mod as BwipNodeModule).toBuffer(opts);137    const pngBytes = new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength).slice();138    const { width, height } = readPngDimensions(pngBytes);139    return { pngBytes, width, height };140  } catch (err) {141    throw new CodexError(142      "AZTEC_GENERATION_FAILED",143      `Aztec render failed: ${err instanceof Error ? err.message : String(err)}`,144    );145  }146}147148/** Read a PNG's IHDR width/height. PNGs always have IHDR as the first chunk. */149function readPngDimensions(png: Uint8Array): { width: number; height: number } {150  // PNG signature: 8 bytes, then 4-byte chunk length, "IHDR", then width/height as big-endian uint32.151  if (png.length < 24) {152    throw new CodexError("AZTEC_GENERATION_FAILED", "PNG buffer too small to contain IHDR");153  }154  const view = new DataView(png.buffer, png.byteOffset, png.byteLength);155  const width = view.getUint32(16, false);156  const height = view.getUint32(20, false);157  return { width, height };158}159160// ── Aztec PNG decoding (round-trip) ─────────────────────────────────────────161162/**163 * Decode an Aztec PNG via @zxing. Returns the decoded UTF-8 text, or `null`164 * if decoding fails for any reason (no DOM, malformed PNG, no match found).165 * Never throws — the caller decides whether a `null` result is a verification166 * failure or a deliberate skip.167 */168export async function decodeAztecFromPng(pngBytes: Uint8Array): Promise<string | null> {169  // The decoder needs raw pixel data, which means we need a canvas to170  // rasterize the PNG into ImageData. Skip the round-trip in environments171  // without OffscreenCanvas (vitest with environment: 'node').172  if (typeof OffscreenCanvas === "undefined" || typeof createImageBitmap === "undefined") {173    return null;174  }175176  try {177    // Copy into a fresh ArrayBuffer-backed view so Blob's typing is satisfied178    // (the input Uint8Array may be backed by a SharedArrayBuffer in some179    // bundler typings, which Blob's BlobPart union rejects).180    const owned = new Uint8Array(pngBytes.byteLength);181    owned.set(pngBytes);182    const blob = new Blob([owned], { type: "image/png" });183    const bitmap = await createImageBitmap(blob);184    const canvas = new OffscreenCanvas(bitmap.width, bitmap.height);185    const ctx = canvas.getContext("2d");186    if (!ctx) return null;187    // White-fill before drawing so any transparent pixels in the PNG188    // composite to white rather than (0,0,0,0). Transparent pixels get189    // packed as 0xFF000000 (black) in the ARGB array, which would make190    // the quiet-zone border appear black and confuse ZXing.191    ctx.fillStyle = "#ffffff";192    ctx.fillRect(0, 0, bitmap.width, bitmap.height);193    ctx.drawImage(bitmap, 0, 0);194    const imageData = ctx.getImageData(0, 0, bitmap.width, bitmap.height);195196    // RGBLuminanceSource wants packed 32-bit ARGB values, not raw Uint8 RGBA.197    const argb = new Int32Array(bitmap.width * bitmap.height);198    const raw = imageData.data;199    for (let i = 0, j = 0; i < raw.length; i += 4, j++) {200      argb[j] = (0xff << 24) | (raw[i]! << 16) | (raw[i + 1]! << 8) | raw[i + 2]!;201    }202203    const source = new RGBLuminanceSource(argb, bitmap.width, bitmap.height);204    const binarizer = new HybridBinarizer(source);205    const bitmapBinary = new BinaryBitmap(binarizer);206207    const reader = new MultiFormatReader();208    const hints = new Map();209    hints.set(DecodeHintType.POSSIBLE_FORMATS, [BarcodeFormat.AZTEC]);210    hints.set(DecodeHintType.TRY_HARDER, true);211    reader.setHints(hints);212213    const result = reader.decode(bitmapBinary);214    return result.getText();215  } catch {216    return null;217  }218}219220// ── Verified Aztec generation ───────────────────────────────────────────────221222/**223 * Generate the Aztec code for one envelope and confirm it round-trips. The224 * envelope JSON is serialized once and reused as the decode target so any225 * encoding mismatch (e.g. UTF-8 surrogate corruption) is caught immediately.226 *227 * In environments where round-trip decoding is unavailable (vitest node), the228 * verification step is skipped — the generator still throws on encoder229 * failure, which is the only condition this path can detect without a DOM.230 */231export async function generateVerifiedAztec(envelope: ChunkEnvelope): Promise<AztecImage> {232  const envelopeJson = JSON.stringify(envelope);233234  let image: AztecImage;235  try {236    image = await generateAztecPng(envelopeJson);237  } catch (err) {238    if (err instanceof CodexError) throw err;239    throw new CodexError(240      "AZTEC_GENERATION_FAILED",241      `Failed to generate Aztec code for chunk ${envelope.i}: ${err instanceof Error ? err.message : String(err)}`,242    );243  }244245  if (!image.pngBytes || image.pngBytes.length < 32) {246    throw new CodexError(247      "AZTEC_GENERATION_FAILED",248      `Aztec PNG for chunk ${envelope.i} was empty`,249    );250  }251252  // Skip round-trip when we can't rasterize — see decodeAztecFromPng().253  if (typeof OffscreenCanvas === "undefined" || typeof createImageBitmap === "undefined") {254    return image;255  }256257  // @zxing occasionally returns null on a valid barcode due to transient258  // rasterisation issues. Five attempts avoids aborting a full Codex build259  // for a momentary DOM hiccup. Content-mismatch is never retried.260  let decoded: string | null = null;261  for (let attempt = 0; attempt < 5; attempt++) {262    decoded = await decodeAztecFromPng(image.pngBytes);263    if (decoded !== null) break;264  }265  if (decoded === null) {266    throw new CodexError(267      "AZTEC_ROUNDTRIP_FAILED",268      `Chunk ${envelope.i} generated but cannot be decoded back after 3 attempts. This Codex cannot be trusted.`,269    );270  }271  if (decoded !== envelopeJson) {272    throw new CodexError(273      "AZTEC_CONTENT_MISMATCH",274      `Chunk ${envelope.i} decoded content does not match original envelope. Possible encoding corruption.`,275    );276  }277  return image;278}