@aglyn/tenant-data-admin 1.0.0-beta.143

package/src/lib/server/media-delivery.js

@@ -0,0 +1,485 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { Readable } from "node:stream";
+import { mediaRenditionObjectPath, parseMediaRenditions } from "@aglyn/aglyn/app-utils/media-ref";
+import { mediaDeliveryProvider } from "@aglyn/aglyn/plugin-manager/media-delivery-provider";
+import { firebaseAdmin } from "./firebase-admin.js";
+import { MEDIA_SIGNATURE_MAX_TTL_MS } from "./media-signing.js";
+import { mediaStoragePathInScope } from "./media-storage-path.js";
+import { isServerReleaseFlagOnForOrg } from "./release-flags.js";
+/**
+ * Video delivered from the configured delivery provider (AGL-2824): the
+ * platform's half.
+ *
+ * `serveMediaCdn` keeps every access decision it has always made. When a
+ * video request passes all of them, and this module finds a current copy of
+ * the requested representation at the delivery provider, the CDN answers
+ * with a `302` to a short-lived signed URL on the provider's host instead of
+ * streaming the bytes itself. The commerce stream mints the same URL for a
+ * buyer. Everything else — images, posters, downloads, and every video with
+ * no current copy — serves exactly as it did.
+ *
+ * ## Three switches, all of which must be on
+ *
+ * 1. **A provider.** A plugin registers one against core's contract
+ *    (`media-delivery-provider`), and it must be configured for the
+ *    capability in question: `store` to copy or remove, `deliver` to mint.
+ *    With none, every function here returns before any I/O.
+ * 2. **The release flag**, per org: {@link MEDIA_DELIVERY_RELEASE_FLAG}. It
+ *    gates the COPY as well as the redirect, because a copy is customer data
+ *    at the provider. Removal is never gated: a copy made while the flag was
+ *    on must still go when its asset does.
+ * 3. **A current copy**, recorded on the media document under
+ *    {@link MEDIA_DELIVERY_COPIES_FIELD}. A copy is current when it was made
+ *    from the asset's present `contentHash` and its key is the one this
+ *    module derives for the asset. A replace changes the hash, so every copy
+ *    of the previous bytes stops being served in the same write, before
+ *    anything at the provider is removed.
+ *
+ * ## The platform stays the system of record
+ *
+ * The bucket keeps every byte it kept before, and the storage counter moves
+ * exactly as it did: a copy's size is recorded on the copy and never added to
+ * `counters/media`, so storage is billed once. Making the provider's copy the
+ * only one is a later step, and the storage cost model depends on it (see
+ * AGL-2825); nothing here deletes a platform object.
+ *
+ * ## Keys carry the content hash
+ *
+ * `{hosts|orgs}/{scopeId}/{mediaId}/{sourceHash}/{representation}/{objectHash}`.
+ * The source hash is the asset's `contentHash`; the object hash is the
+ * copied object's own digest (for the master the two are the same). A
+ * replaced file or a re-encoded rendition therefore gets a new key, so a URL
+ * minted for old bytes can never be answered with new ones, and the whole
+ * asset is one prefix for removal. The record is written by the server only,
+ * but the key it holds is checked against the derivation before it is used:
+ * a record copied onto another document names a key that is not that
+ * document's own, and is ignored.
+ */ /** The per-org release flag both halves — copy and redirect — ask. */ export const MEDIA_DELIVERY_RELEASE_FLAG = 'release_video_delivery';
+/** The media document field that records the copies at the provider. */ export const MEDIA_DELIVERY_COPIES_FIELD = 'deliveryCopies';
+/** The representation name of the uploaded file itself. */ export const MEDIA_DELIVERY_MASTER = 'master';
+/**
+ * The shortest delivery URL lifetime. A delivery URL is a bearer capability,
+ * so it is short, but a player sends its range requests to the URL it was
+ * redirected to, so it must outlive a sitting: seeking, pausing and resuming
+ * all reuse it.
+ */ export const MEDIA_DELIVERY_MIN_TTL_MS = 15 * 60 * 1000;
+/** The lifetime when the film's duration is unknown. */ export const MEDIA_DELIVERY_DEFAULT_TTL_MS = 60 * 60 * 1000;
+/** The longest lifetime, shared with every other signed media link. */ export const MEDIA_DELIVERY_MAX_TTL_MS = MEDIA_SIGNATURE_MAX_TTL_MS;
+/**
+ * How long a delivery URL for a film of `durationMs` lives: twice the film,
+ * so a viewer who pauses halfway still finishes it, between
+ * {@link MEDIA_DELIVERY_MIN_TTL_MS} and {@link MEDIA_DELIVERY_MAX_TTL_MS}.
+ */ export function mediaDeliveryTtlMs(durationMs) {
+    const duration = Number(durationMs);
+    if (!Number.isFinite(duration) || duration <= 0) {
+        return MEDIA_DELIVERY_DEFAULT_TTL_MS;
+    }
+    return Math.min(MEDIA_DELIVERY_MAX_TTL_MS, Math.max(MEDIA_DELIVERY_MIN_TTL_MS, Math.round(duration * 2)));
+}
+/** An id segment, as the CDN route accepts one. */ const ID_SEGMENT = /^[A-Za-z0-9_-]{1,64}$/;
+/** A content digest: `contentHash` is 16 hex, a full digest up to 64. */ const DIGEST = /^[a-f0-9]{16,64}$/;
+/** `master`, or `r-` and a rendition key. */ const REPRESENTATION = /^(?:master|r-[a-z0-9][a-z0-9-]{0,23})$/;
+/** The representation a rendition (or the master, for none) is copied as. */ export function mediaDeliveryRepresentation(rendition) {
+    return rendition ? `r-${rendition.key}` : MEDIA_DELIVERY_MASTER;
+}
+function validAsset(asset) {
+    return (asset.collection === 'hosts' || asset.collection === 'orgs') && ID_SEGMENT.test(asset.scopeId) && ID_SEGMENT.test(asset.mediaId);
+}
+/**
+ * The prefix every copy of one asset lives under, or null for an asset whose
+ * identity does not fit the grammar. Ends in `/`, so one asset's prefix is
+ * never another's.
+ */ export function mediaDeliveryAssetPrefix(asset) {
+    if (!validAsset(asset)) return null;
+    return `${asset.collection}/${asset.scopeId}/${asset.mediaId}/`;
+}
+/** The prefix every copy of one library lives under, for an erasure. */ export function mediaDeliveryScopePrefix(collection, scopeId) {
+    if (collection !== 'hosts' && collection !== 'orgs') return null;
+    if (!ID_SEGMENT.test(scopeId)) return null;
+    return `${collection}/${scopeId}/`;
+}
+/** The object key of one copy, or null when a part does not fit the grammar. */ export function mediaDeliveryObjectKey(asset, copy) {
+    const prefix = mediaDeliveryAssetPrefix(asset);
+    if (!prefix) return null;
+    if (!DIGEST.test(copy.sourceHash) || !DIGEST.test(copy.objectHash)) return null;
+    if (!REPRESENTATION.test(copy.representation)) return null;
+    return `${prefix}${copy.sourceHash}/${copy.representation}/${copy.objectHash}`;
+}
+/**
+ * The copies a media document records that belong to THIS asset: each entry
+ * well formed, and its key exactly the one {@link mediaDeliveryObjectKey}
+ * derives from its own fields. Anything else is dropped rather than trusted.
+ */ export function parseMediaDeliveryCopies(raw, asset) {
+    const copies = {};
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return copies;
+    for (const [representation, value] of Object.entries(raw)){
+        var _entry_sourceHash, _entry_objectHash, _entry_contentType;
+        if (!value || typeof value !== 'object') continue;
+        const entry = value;
+        const sourceHash = String((_entry_sourceHash = entry['sourceHash']) != null ? _entry_sourceHash : '');
+        const objectHash = String((_entry_objectHash = entry['objectHash']) != null ? _entry_objectHash : '');
+        const key = mediaDeliveryObjectKey(asset, {
+            sourceHash,
+            representation,
+            objectHash
+        });
+        if (!key || entry['key'] !== key) continue;
+        const contentType = String((_entry_contentType = entry['contentType']) != null ? _entry_contentType : '');
+        if (!/^video\/[\w.+-]{1,64}$/.test(contentType)) continue;
+        const sizeBytes = Number(entry['sizeBytes']);
+        copies[representation] = {
+            key,
+            sourceHash,
+            objectHash,
+            contentType,
+            sizeBytes: Number.isFinite(sizeBytes) && sizeBytes > 0 ? Math.round(sizeBytes) : 0,
+            copiedAtMs: Number(entry['copiedAtMs']) || 0
+        };
+    }
+    return copies;
+}
+/** Whether a served type is one this module delivers: video, nothing else. */ export function isMediaDeliveryType(contentType) {
+    return String(contentType != null ? contentType : '').split(';')[0].trim().toLowerCase().startsWith('video/');
+}
+function currentContentHash(document) {
+    const hash = document.get('contentHash');
+    return typeof hash === 'string' && DIGEST.test(hash) ? hash : null;
+}
+/*===========================================================================
+ * The owning org, for the flag.
+ *==========================================================================*/ const ORG_CACHE_TTL_MS = 60000;
+const hostOrgCache = new Map();
+/** Drops the host → org cache. Tests need it between cases. */ export function invalidateMediaDeliveryOrgCache() {
+    hostOrgCache.clear();
+}
+/**
+ * The org that owns a library: the id itself for an org library, and the
+ * host's `hostIndex` entry for a site's. Cached for a minute, like the
+ * release-flag reads it feeds; a failed read answers null, which the flag
+ * treats as "no org" and so refuses anything short of a full release.
+ */ export async function mediaDeliveryOrgIdFor(collection, scopeId) {
+    if (collection === 'orgs') return scopeId || null;
+    const hit = hostOrgCache.get(scopeId);
+    if (hit && Date.now() - hit.at < ORG_CACHE_TTL_MS) return hit.orgId;
+    const orgId = await (async ()=>{
+        try {
+            const firestore = firebaseAdmin.app().firestore();
+            const [index] = await firestore.getAll(firestore.collection('hostIndex').doc(scopeId), {
+                fieldMask: [
+                    'orgId'
+                ]
+            });
+            const value = index == null ? void 0 : index.get('orgId');
+            return typeof value === 'string' && value ? value : null;
+        } catch (unused) {
+            return null;
+        }
+    })();
+    hostOrgCache.set(scopeId, {
+        at: Date.now(),
+        orgId
+    });
+    return orgId;
+}
+/** The flag verdict for one org. */ export function mediaDeliveryEnabledForOrg(orgId) {
+    return isServerReleaseFlagOnForOrg(MEDIA_DELIVERY_RELEASE_FLAG, orgId);
+}
+/**
+ * The delivery URL for one representation of one asset, or null when the
+ * request must be served the way it always was.
+ *
+ * Called only after the caller has made every access decision. Null for: a
+ * type that is not video; an asset with no current copy of this
+ * representation; the flag off for the owning org; a lifetime that has
+ * already run out; and a provider that fails to mint. The cheap answers come
+ * first, so an asset with no copy costs no read at all.
+ */ export async function mediaDeliveryRedirect(input) {
+    var _input_deliveryEnabled, _input_nowMs, _input_ttlMs;
+    if (!isMediaDeliveryType(input.servedType)) return null;
+    const sourceHash = currentContentHash(input.document);
+    if (!sourceHash) return null;
+    const copies = parseMediaDeliveryCopies(input.document.get(MEDIA_DELIVERY_COPIES_FIELD), input.asset);
+    const copy = copies[mediaDeliveryRepresentation(input.rendition)];
+    if (!copy || copy.sourceHash !== sourceHash) return null;
+    const orgId = await input.orgId();
+    const enabled = await ((_input_deliveryEnabled = input.deliveryEnabled) != null ? _input_deliveryEnabled : mediaDeliveryEnabledForOrg)(orgId);
+    if (!enabled) return null;
+    const nowMs = (_input_nowMs = input.nowMs) != null ? _input_nowMs : Date.now();
+    const video = input.document.get('video');
+    const lifetime = Math.min(MEDIA_DELIVERY_MAX_TTL_MS, (_input_ttlMs = input.ttlMs) != null ? _input_ttlMs : mediaDeliveryTtlMs(video == null ? void 0 : video.durationMs));
+    let expiresAtMs = nowMs + lifetime;
+    if (input.notAfterMs !== undefined) {
+        // A bound that cannot be read is no bound, and a URL with none could
+        // outlive what the caller was entitled to; serve from the platform.
+        if (!Number.isFinite(input.notAfterMs)) return null;
+        expiresAtMs = Math.min(expiresAtMs, input.notAfterMs);
+    }
+    if (!(expiresAtMs > nowMs)) return null;
+    try {
+        const location = await input.provider.deliveryUrl({
+            key: copy.key,
+            expiresAtMs,
+            claims: _extends({}, input.claims, {
+                orgId
+            })
+        });
+        return {
+            location,
+            expiresAtMs,
+            key: copy.key
+        };
+    } catch (error) {
+        console.error('[media-delivery] could not mint a delivery URL', JSON.stringify({
+            key: copy.key
+        }), error);
+        return null;
+    }
+}
+/** The md5 Storage records for an object, as hex. */ function md5Hex(metadata) {
+    const raw = metadata['md5Hash'];
+    if (typeof raw !== 'string' || !raw) return null;
+    const hex = Buffer.from(raw, 'base64').toString('hex');
+    return DIGEST.test(hex) ? hex : null;
+}
+/** One `getMetadata()` answer, unwrapped from the SDK's tuple. */ async function readMetadata(file) {
+    const response = await file.getMetadata();
+    const metadata = Array.isArray(response) ? response[0] : response;
+    return metadata != null ? metadata : {};
+}
+/**
+ * Brings the provider's copies of one video in line with its document: every
+ * representation the document serves — the master and each recorded
+ * rendition — gets a copy made from its current bytes, and a copy nothing
+ * current names is removed.
+ *
+ * Every copy path runs through here: an upload's finalize, a replace, a
+ * restore and the rendition producer. It is safe to run again at any time.
+ * The master's copy is current when it was made from the asset's
+ * `contentHash`; a rendition's when it was made from that hash AND from the
+ * rendition object Storage holds now, since the producer can encode a key
+ * again without the master changing.
+ *
+ * The record is written in a transaction that re-reads the document, and
+ * only while the asset still has the content hash the copies were made from.
+ * An asset replaced or deleted while its copies were uploading keeps that
+ * state, and the copies just made are removed rather than recorded against
+ * bytes they are not.
+ */ export async function syncMediaDeliveryCopies(options) {
+    var _options_deliveryEnabled, _options_nowMs;
+    const result = {
+        status: 'synced',
+        copied: [],
+        kept: [],
+        removed: [],
+        failed: []
+    };
+    const done = (status)=>_extends({}, result, {
+            status
+        });
+    const provider = options.provider === undefined ? mediaDeliveryProvider('store') : options.provider;
+    if (!provider) return done('no-provider');
+    const { asset, bucket, docRef } = options;
+    if (!mediaDeliveryAssetPrefix(asset)) return done('no-asset');
+    const snapshot = await docRef.get();
+    if (!snapshot.exists || snapshot.get('deletedAt')) return done('no-asset');
+    if (!isMediaDeliveryType(snapshot.get('contentType'))) return done('not-video');
+    const sourceHash = currentContentHash(snapshot);
+    if (!sourceHash) return done('no-hash');
+    const orgId = options.orgId === undefined ? await mediaDeliveryOrgIdFor(asset.collection, asset.scopeId) : options.orgId;
+    const enabled = await ((_options_deliveryEnabled = options.deliveryEnabled) != null ? _options_deliveryEnabled : mediaDeliveryEnabledForOrg)(orgId);
+    if (!enabled) return done('disabled');
+    const now = (_options_nowMs = options.nowMs) != null ? _options_nowMs : Date.now;
+    const basePath = mediaStoragePathInScope({
+        storagePath: snapshot.get('storagePath'),
+        base: `${asset.collection}/${asset.scopeId}`,
+        mediaId: asset.mediaId
+    });
+    const wanted = [
+        {
+            objectPath: basePath,
+            rendition: null
+        },
+        ...parseMediaRenditions(snapshot.get('videoRenditions')).map((rendition)=>({
+                objectPath: mediaRenditionObjectPath(basePath, rendition),
+                rendition
+            }))
+    ];
+    const recorded = parseMediaDeliveryCopies(snapshot.get(MEDIA_DELIVERY_COPIES_FIELD), asset);
+    const next = {};
+    for (const { objectPath, rendition } of wanted){
+        const representation = mediaDeliveryRepresentation(rendition);
+        const existing = recorded[representation];
+        try {
+            var _ref, _metadata_contentType;
+            const file = bucket.file(objectPath);
+            // The master's digest is on the document already, so a current copy of
+            // it costs no Storage read. A rendition's is read every time.
+            if (!rendition && (existing == null ? void 0 : existing.sourceHash) === sourceHash) {
+                next[representation] = existing;
+                result.kept.push(representation);
+                continue;
+            }
+            const metadata = await readMetadata(file);
+            const objectHash = rendition ? md5Hex(metadata) : sourceHash;
+            if (!objectHash) throw new Error('the object reports no digest');
+            if (existing && existing.sourceHash === sourceHash && existing.objectHash === objectHash) {
+                next[representation] = existing;
+                result.kept.push(representation);
+                continue;
+            }
+            const sizeBytes = Number(metadata['size']);
+            if (!Number.isSafeInteger(sizeBytes) || sizeBytes <= 0) {
+                throw new Error('the object reports no size');
+            }
+            const contentType = rendition ? rendition.contentType : String((_ref = (_metadata_contentType = metadata['contentType']) != null ? _metadata_contentType : snapshot.get('contentType')) != null ? _ref : '');
+            if (!isMediaDeliveryType(contentType)) throw new Error('the object is not a video');
+            const key = mediaDeliveryObjectKey(asset, {
+                sourceHash,
+                representation,
+                objectHash
+            });
+            if (!key) throw new Error('no key fits the asset');
+            await provider.putObject({
+                key,
+                body: Readable.toWeb(file.createReadStream()),
+                contentLength: sizeBytes,
+                contentType
+            });
+            next[representation] = {
+                key,
+                sourceHash,
+                objectHash,
+                contentType,
+                sizeBytes,
+                copiedAtMs: now()
+            };
+            result.copied.push(representation);
+        } catch (error) {
+            result.failed.push(representation);
+            console.error('[media-delivery] copy failed; it keeps serving from the platform', JSON.stringify(_extends({}, asset, {
+                representation
+            })), error);
+        }
+    }
+    const nextKeys = new Set(Object.values(next).map((copy)=>copy.key));
+    const retired = Object.values(recorded).map((copy)=>copy.key).filter((key)=>!nextKeys.has(key));
+    const madeNow = result.copied.map((representation)=>{
+        var _next_representation;
+        return (_next_representation = next[representation]) == null ? void 0 : _next_representation.key;
+    }).filter((key)=>Boolean(key));
+    if (result.copied.length || retired.length) {
+        const written = await docRef.firestore.runTransaction(async (transaction)=>{
+            const fresh = await transaction.get(docRef);
+            if (!fresh.exists || fresh.get('deletedAt')) return false;
+            if (currentContentHash(fresh) !== sourceHash) return false;
+            transaction.update(docRef, {
+                [MEDIA_DELIVERY_COPIES_FIELD]: next
+            });
+            return true;
+        });
+        if (!written) {
+            // Replaced or deleted while the copies were uploading. Nothing records
+            // what was just made, so it goes rather than lingering unreferenced.
+            await removeKeys(provider, madeNow, result);
+            return done('replaced');
+        }
+    }
+    await removeKeys(provider, retired, result);
+    return done('synced');
+}
+async function removeKeys(provider, keys, result) {
+    for (const key of keys){
+        try {
+            await provider.deleteObject(key);
+            result.removed.push(key);
+        } catch (error) {
+            console.error('[media-delivery] could not remove a retired copy', JSON.stringify({
+                key
+            }), error);
+        }
+    }
+}
+/**
+ * Removes every copy of one asset from the provider: a delete, a takedown and
+ * a replace all end the life of the bytes the copies were made from.
+ *
+ * By prefix rather than by the document's record, so a copy the record lost
+ * track of goes too. Never gated on the flag, since copies made while it was
+ * on must still go, and never throws: the caller's own action has already
+ * happened and must not be reported as failed because a copy lingered. Null
+ * when no provider is configured to store.
+ */ export async function removeMediaDeliveryCopies(options) {
+    const provider = options.provider === undefined ? mediaDeliveryProvider('store') : options.provider;
+    if (!provider) return null;
+    const prefix = mediaDeliveryAssetPrefix(options.asset);
+    if (!prefix) return {
+        removed: 0,
+        failed: false
+    };
+    try {
+        return {
+            removed: await provider.deleteObjectsWithPrefix(prefix),
+            failed: false
+        };
+    } catch (error) {
+        console.error('[media-delivery] could not remove an asset\'s copies', JSON.stringify(options.asset), error);
+        return {
+            removed: 0,
+            failed: true
+        };
+    }
+}
+/**
+ * Removes every copy a library holds at the provider — the erasure of a site
+ * or an org. Same posture as {@link removeMediaDeliveryCopies}.
+ */ export async function eraseMediaDeliveryScope(options) {
+    const provider = options.provider === undefined ? mediaDeliveryProvider('store') : options.provider;
+    if (!provider) return null;
+    const prefix = mediaDeliveryScopePrefix(options.collection, options.scopeId);
+    if (!prefix) return {
+        removed: 0,
+        failed: false
+    };
+    try {
+        return {
+            removed: await provider.deleteObjectsWithPrefix(prefix),
+            failed: false
+        };
+    } catch (error) {
+        console.error('[media-delivery] could not erase a library\'s copies', JSON.stringify({
+            collection: options.collection,
+            scopeId: options.scopeId
+        }), error);
+        return {
+            removed: 0,
+            failed: true
+        };
+    }
+}
+/**
+ * A media document without its copy record, for a restore: the delete that
+ * made the tombstone removed the copies, so the record describes objects
+ * that are gone.
+ */ export function withoutMediaDeliveryCopies(media) {
+    if (!(MEDIA_DELIVERY_COPIES_FIELD in media)) return media;
+    const rest = _extends({}, media);
+    delete rest[MEDIA_DELIVERY_COPIES_FIELD];
+    return rest;
+}
+
+//# sourceMappingURL=media-delivery.js.map

package/src/lib/server/media-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/data/admin/src/lib/server/media-delivery.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Readable } from 'node:stream'\nimport {\n  type MediaVideoRendition,\n  mediaRenditionObjectPath,\n  parseMediaRenditions,\n} from '@aglyn/aglyn/app-utils/media-ref'\nimport type { ReleaseFlagKey } from '@aglyn/aglyn/app-utils/release-flags'\nimport {\n  type MediaDeliveryClaims,\n  type MediaDeliveryProvider,\n  mediaDeliveryProvider,\n} from '@aglyn/aglyn/plugin-manager/media-delivery-provider'\nimport { firebaseAdmin } from './firebase-admin'\nimport { MEDIA_SIGNATURE_MAX_TTL_MS } from './media-signing'\nimport { mediaStoragePathInScope } from './media-storage-path'\nimport { isServerReleaseFlagOnForOrg } from './release-flags'\n\n/**\n * Video delivered from the configured delivery provider (AGL-2824): the\n * platform's half.\n *\n * `serveMediaCdn` keeps every access decision it has always made. When a\n * video request passes all of them, and this module finds a current copy of\n * the requested representation at the delivery provider, the CDN answers\n * with a `302` to a short-lived signed URL on the provider's host instead of\n * streaming the bytes itself. The commerce stream mints the same URL for a\n * buyer. Everything else — images, posters, downloads, and every video with\n * no current copy — serves exactly as it did.\n *\n * ## Three switches, all of which must be on\n *\n * 1. **A provider.** A plugin registers one against core's contract\n *    (`media-delivery-provider`), and it must be configured for the\n *    capability in question: `store` to copy or remove, `deliver` to mint.\n *    With none, every function here returns before any I/O.\n * 2. **The release flag**, per org: {@link MEDIA_DELIVERY_RELEASE_FLAG}. It\n *    gates the COPY as well as the redirect, because a copy is customer data\n *    at the provider. Removal is never gated: a copy made while the flag was\n *    on must still go when its asset does.\n * 3. **A current copy**, recorded on the media document under\n *    {@link MEDIA_DELIVERY_COPIES_FIELD}. A copy is current when it was made\n *    from the asset's present `contentHash` and its key is the one this\n *    module derives for the asset. A replace changes the hash, so every copy\n *    of the previous bytes stops being served in the same write, before\n *    anything at the provider is removed.\n *\n * ## The platform stays the system of record\n *\n * The bucket keeps every byte it kept before, and the storage counter moves\n * exactly as it did: a copy's size is recorded on the copy and never added to\n * `counters/media`, so storage is billed once. Making the provider's copy the\n * only one is a later step, and the storage cost model depends on it (see\n * AGL-2825); nothing here deletes a platform object.\n *\n * ## Keys carry the content hash\n *\n * `{hosts|orgs}/{scopeId}/{mediaId}/{sourceHash}/{representation}/{objectHash}`.\n * The source hash is the asset's `contentHash`; the object hash is the\n * copied object's own digest (for the master the two are the same). A\n * replaced file or a re-encoded rendition therefore gets a new key, so a URL\n * minted for old bytes can never be answered with new ones, and the whole\n * asset is one prefix for removal. The record is written by the server only,\n * but the key it holds is checked against the derivation before it is used:\n * a record copied onto another document names a key that is not that\n * document's own, and is ignored.\n */\n\n/** The per-org release flag both halves — copy and redirect — ask. */\nexport const MEDIA_DELIVERY_RELEASE_FLAG: ReleaseFlagKey = 'release_video_delivery'\n\n/** The media document field that records the copies at the provider. */\nexport const MEDIA_DELIVERY_COPIES_FIELD = 'deliveryCopies'\n\n/** The representation name of the uploaded file itself. */\nexport const MEDIA_DELIVERY_MASTER = 'master'\n\n/**\n * The shortest delivery URL lifetime. A delivery URL is a bearer capability,\n * so it is short, but a player sends its range requests to the URL it was\n * redirected to, so it must outlive a sitting: seeking, pausing and resuming\n * all reuse it.\n */\nexport const MEDIA_DELIVERY_MIN_TTL_MS = 15 * 60 * 1000\n\n/** The lifetime when the film's duration is unknown. */\nexport const MEDIA_DELIVERY_DEFAULT_TTL_MS = 60 * 60 * 1000\n\n/** The longest lifetime, shared with every other signed media link. */\nexport const MEDIA_DELIVERY_MAX_TTL_MS = MEDIA_SIGNATURE_MAX_TTL_MS\n\n/**\n * How long a delivery URL for a film of `durationMs` lives: twice the film,\n * so a viewer who pauses halfway still finishes it, between\n * {@link MEDIA_DELIVERY_MIN_TTL_MS} and {@link MEDIA_DELIVERY_MAX_TTL_MS}.\n */\nexport function mediaDeliveryTtlMs(durationMs: unknown): number {\n  const duration = Number(durationMs)\n  if (!Number.isFinite(duration) || duration <= 0) {\n    return MEDIA_DELIVERY_DEFAULT_TTL_MS\n  }\n  return Math.min(\n    MEDIA_DELIVERY_MAX_TTL_MS,\n    Math.max(MEDIA_DELIVERY_MIN_TTL_MS, Math.round(duration * 2)),\n  )\n}\n\n/** The asset a copy belongs to. */\nexport interface MediaDeliveryAsset {\n  collection: 'hosts' | 'orgs'\n  scopeId: string\n  mediaId: string\n}\n\n/** An id segment, as the CDN route accepts one. */\nconst ID_SEGMENT = /^[A-Za-z0-9_-]{1,64}$/\n/** A content digest: `contentHash` is 16 hex, a full digest up to 64. */\nconst DIGEST = /^[a-f0-9]{16,64}$/\n/** `master`, or `r-` and a rendition key. */\nconst REPRESENTATION = /^(?:master|r-[a-z0-9][a-z0-9-]{0,23})$/\n\n/** The representation a rendition (or the master, for none) is copied as. */\nexport function mediaDeliveryRepresentation(\n  rendition: Pick<MediaVideoRendition, 'key'> | null | undefined,\n): string {\n  return rendition ? `r-${rendition.key}` : MEDIA_DELIVERY_MASTER\n}\n\nfunction validAsset(asset: MediaDeliveryAsset): boolean {\n  return (\n    (asset.collection === 'hosts' || asset.collection === 'orgs') &&\n    ID_SEGMENT.test(asset.scopeId) &&\n    ID_SEGMENT.test(asset.mediaId)\n  )\n}\n\n/**\n * The prefix every copy of one asset lives under, or null for an asset whose\n * identity does not fit the grammar. Ends in `/`, so one asset's prefix is\n * never another's.\n */\nexport function mediaDeliveryAssetPrefix(asset: MediaDeliveryAsset): string | null {\n  if (!validAsset(asset)) return null\n  return `${asset.collection}/${asset.scopeId}/${asset.mediaId}/`\n}\n\n/** The prefix every copy of one library lives under, for an erasure. */\nexport function mediaDeliveryScopePrefix(\n  collection: 'hosts' | 'orgs',\n  scopeId: string,\n): string | null {\n  if (collection !== 'hosts' && collection !== 'orgs') return null\n  if (!ID_SEGMENT.test(scopeId)) return null\n  return `${collection}/${scopeId}/`\n}\n\n/** The object key of one copy, or null when a part does not fit the grammar. */\nexport function mediaDeliveryObjectKey(\n  asset: MediaDeliveryAsset,\n  copy: { sourceHash: string; representation: string; objectHash: string },\n): string | null {\n  const prefix = mediaDeliveryAssetPrefix(asset)\n  if (!prefix) return null\n  if (!DIGEST.test(copy.sourceHash) || !DIGEST.test(copy.objectHash)) return null\n  if (!REPRESENTATION.test(copy.representation)) return null\n  return `${prefix}${copy.sourceHash}/${copy.representation}/${copy.objectHash}`\n}\n\n/** One copy at the provider, as the media document records it. */\nexport interface MediaDeliveryCopy {\n  key: string\n  /** The asset's `contentHash` when the copy was made. */\n  sourceHash: string\n  /** The copied object's own digest. */\n  objectHash: string\n  contentType: string\n  sizeBytes: number\n  copiedAtMs: number\n}\n\n/** The recorded copies of one asset, by representation. */\nexport type MediaDeliveryCopies = Record<string, MediaDeliveryCopy>\n\n/**\n * The copies a media document records that belong to THIS asset: each entry\n * well formed, and its key exactly the one {@link mediaDeliveryObjectKey}\n * derives from its own fields. Anything else is dropped rather than trusted.\n */\nexport function parseMediaDeliveryCopies(\n  raw: unknown,\n  asset: MediaDeliveryAsset,\n): MediaDeliveryCopies {\n  const copies: MediaDeliveryCopies = {}\n  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return copies\n  for (const [representation, value] of Object.entries(raw as Record<string, unknown>)) {\n    if (!value || typeof value !== 'object') continue\n    const entry = value as Record<string, unknown>\n    const sourceHash = String(entry['sourceHash'] ?? '')\n    const objectHash = String(entry['objectHash'] ?? '')\n    const key = mediaDeliveryObjectKey(asset, { sourceHash, representation, objectHash })\n    if (!key || entry['key'] !== key) continue\n    const contentType = String(entry['contentType'] ?? '')\n    if (!/^video\\/[\\w.+-]{1,64}$/.test(contentType)) continue\n    const sizeBytes = Number(entry['sizeBytes'])\n    copies[representation] = {\n      key,\n      sourceHash,\n      objectHash,\n      contentType,\n      sizeBytes: Number.isFinite(sizeBytes) && sizeBytes > 0 ? Math.round(sizeBytes) : 0,\n      copiedAtMs: Number(entry['copiedAtMs']) || 0,\n    }\n  }\n  return copies\n}\n\n/** Whether a served type is one this module delivers: video, nothing else. */\nexport function isMediaDeliveryType(contentType: unknown): boolean {\n  return String(contentType ?? '')\n    .split(';')[0]\n    .trim()\n    .toLowerCase()\n    .startsWith('video/')\n}\n\nfunction currentContentHash(document: { get(field: string): unknown }): string | null {\n  const hash = document.get('contentHash')\n  return typeof hash === 'string' && DIGEST.test(hash) ? hash : null\n}\n\n/*===========================================================================\n * The owning org, for the flag.\n *==========================================================================*/\n\nconst ORG_CACHE_TTL_MS = 60_000\nconst hostOrgCache = new Map<string, { at: number; orgId: string | null }>()\n\n/** Drops the host → org cache. Tests need it between cases. */\nexport function invalidateMediaDeliveryOrgCache(): void {\n  hostOrgCache.clear()\n}\n\n/**\n * The org that owns a library: the id itself for an org library, and the\n * host's `hostIndex` entry for a site's. Cached for a minute, like the\n * release-flag reads it feeds; a failed read answers null, which the flag\n * treats as \"no org\" and so refuses anything short of a full release.\n */\nexport async function mediaDeliveryOrgIdFor(\n  collection: 'hosts' | 'orgs',\n  scopeId: string,\n): Promise<string | null> {\n  if (collection === 'orgs') return scopeId || null\n  const hit = hostOrgCache.get(scopeId)\n  if (hit && Date.now() - hit.at < ORG_CACHE_TTL_MS) return hit.orgId\n  const orgId = await (async (): Promise<string | null> => {\n    try {\n      const firestore = firebaseAdmin.app().firestore()\n      const [index] = await firestore.getAll(\n        firestore.collection('hostIndex').doc(scopeId),\n        { fieldMask: ['orgId'] },\n      )\n      const value = index?.get('orgId')\n      return typeof value === 'string' && value ? value : null\n    } catch {\n      return null\n    }\n  })()\n  hostOrgCache.set(scopeId, { at: Date.now(), orgId })\n  return orgId\n}\n\n/** The flag verdict for one org. */\nexport function mediaDeliveryEnabledForOrg(orgId: string | null): Promise<boolean> {\n  return isServerReleaseFlagOnForOrg(MEDIA_DELIVERY_RELEASE_FLAG, orgId)\n}\n\n/*===========================================================================\n * The redirect.\n *==========================================================================*/\n\nexport interface MediaDeliveryRedirect {\n  location: string\n  expiresAtMs: number\n  key: string\n}\n\n/**\n * The delivery URL for one representation of one asset, or null when the\n * request must be served the way it always was.\n *\n * Called only after the caller has made every access decision. Null for: a\n * type that is not video; an asset with no current copy of this\n * representation; the flag off for the owning org; a lifetime that has\n * already run out; and a provider that fails to mint. The cheap answers come\n * first, so an asset with no copy costs no read at all.\n */\nexport async function mediaDeliveryRedirect(input: {\n  provider: MediaDeliveryProvider\n  asset: MediaDeliveryAsset\n  document: { get(field: string): unknown }\n  /** The rendition being served, or none for the master. */\n  rendition?: Pick<MediaVideoRendition, 'key'> | null\n  servedType: unknown\n  claims: Omit<MediaDeliveryClaims, 'orgId'>\n  /** The owning org, asked only once a current copy is found. */\n  orgId: () => Promise<string | null>\n  /** Defaults to the release flag. */\n  deliveryEnabled?: (orgId: string | null) => Promise<boolean>\n  /** The URL may not outlive this, e.g. the signature the request carried. */\n  notAfterMs?: number\n  /** A fixed lifetime; otherwise {@link mediaDeliveryTtlMs} of the film. */\n  ttlMs?: number\n  nowMs?: number\n}): Promise<MediaDeliveryRedirect | null> {\n  if (!isMediaDeliveryType(input.servedType)) return null\n  const sourceHash = currentContentHash(input.document)\n  if (!sourceHash) return null\n  const copies = parseMediaDeliveryCopies(\n    input.document.get(MEDIA_DELIVERY_COPIES_FIELD),\n    input.asset,\n  )\n  const copy = copies[mediaDeliveryRepresentation(input.rendition)]\n  if (!copy || copy.sourceHash !== sourceHash) return null\n\n  const orgId = await input.orgId()\n  const enabled = await (input.deliveryEnabled ?? mediaDeliveryEnabledForOrg)(orgId)\n  if (!enabled) return null\n\n  const nowMs = input.nowMs ?? Date.now()\n  const video = input.document.get('video') as { durationMs?: unknown } | undefined\n  const lifetime = Math.min(\n    MEDIA_DELIVERY_MAX_TTL_MS,\n    input.ttlMs ?? mediaDeliveryTtlMs(video?.durationMs),\n  )\n  let expiresAtMs = nowMs + lifetime\n  if (input.notAfterMs !== undefined) {\n    // A bound that cannot be read is no bound, and a URL with none could\n    // outlive what the caller was entitled to; serve from the platform.\n    if (!Number.isFinite(input.notAfterMs)) return null\n    expiresAtMs = Math.min(expiresAtMs, input.notAfterMs)\n  }\n  if (!(expiresAtMs > nowMs)) return null\n  try {\n    const location = await input.provider.deliveryUrl({\n      key: copy.key,\n      expiresAtMs,\n      claims: { ...input.claims, orgId },\n    })\n    return { location, expiresAtMs, key: copy.key }\n  } catch (error) {\n    console.error(\n      '[media-delivery] could not mint a delivery URL',\n      JSON.stringify({ key: copy.key }),\n      error,\n    )\n    return null\n  }\n}\n\n/*===========================================================================\n * Copies.\n *==========================================================================*/\n\n/** The slice of a Storage file the copy reads. */\nexport interface MediaDeliverySourceFile {\n  getMetadata(): Promise<unknown>\n  createReadStream(): NodeJS.ReadableStream\n}\n\n/** The slice of a Storage bucket the copy reads. */\nexport interface MediaDeliverySourceBucket {\n  file(path: string): MediaDeliverySourceFile\n}\n\nexport type MediaDeliverySyncStatus =\n  | 'no-provider'\n  | 'no-asset'\n  | 'not-video'\n  | 'no-hash'\n  | 'disabled'\n  | 'replaced'\n  | 'synced'\n\nexport interface MediaDeliverySyncResult {\n  status: MediaDeliverySyncStatus\n  /** Representations copied by this call. */\n  copied: string[]\n  /** Representations whose current copy was already there. */\n  kept: string[]\n  /** Keys removed from the provider because nothing current names them. */\n  removed: string[]\n  /** Representations whose copy failed; they keep serving from the platform. */\n  failed: string[]\n}\n\n/** The md5 Storage records for an object, as hex. */\nfunction md5Hex(metadata: Record<string, unknown>): string | null {\n  const raw = metadata['md5Hash']\n  if (typeof raw !== 'string' || !raw) return null\n  const hex = Buffer.from(raw, 'base64').toString('hex')\n  return DIGEST.test(hex) ? hex : null\n}\n\n/** One `getMetadata()` answer, unwrapped from the SDK's tuple. */\nasync function readMetadata(file: MediaDeliverySourceFile): Promise<Record<string, unknown>> {\n  const response = await file.getMetadata()\n  const metadata = Array.isArray(response) ? response[0] : response\n  return (metadata ?? {}) as Record<string, unknown>\n}\n\n/**\n * Brings the provider's copies of one video in line with its document: every\n * representation the document serves — the master and each recorded\n * rendition — gets a copy made from its current bytes, and a copy nothing\n * current names is removed.\n *\n * Every copy path runs through here: an upload's finalize, a replace, a\n * restore and the rendition producer. It is safe to run again at any time.\n * The master's copy is current when it was made from the asset's\n * `contentHash`; a rendition's when it was made from that hash AND from the\n * rendition object Storage holds now, since the producer can encode a key\n * again without the master changing.\n *\n * The record is written in a transaction that re-reads the document, and\n * only while the asset still has the content hash the copies were made from.\n * An asset replaced or deleted while its copies were uploading keeps that\n * state, and the copies just made are removed rather than recorded against\n * bytes they are not.\n */\nexport async function syncMediaDeliveryCopies(options: {\n  docRef: FirebaseFirestore.DocumentReference\n  asset: MediaDeliveryAsset\n  bucket: MediaDeliverySourceBucket\n  /** The owning org, when the caller has it; otherwise resolved. */\n  orgId?: string | null\n  /** Defaults to the registered provider configured to store. */\n  provider?: MediaDeliveryProvider | null\n  /** Defaults to the release flag. */\n  deliveryEnabled?: (orgId: string | null) => Promise<boolean>\n  nowMs?: () => number\n}): Promise<MediaDeliverySyncResult> {\n  const result: MediaDeliverySyncResult = {\n    status: 'synced',\n    copied: [],\n    kept: [],\n    removed: [],\n    failed: [],\n  }\n  const done = (status: MediaDeliverySyncStatus): MediaDeliverySyncResult => ({\n    ...result,\n    status,\n  })\n  const provider =\n    options.provider === undefined ? mediaDeliveryProvider('store') : options.provider\n  if (!provider) return done('no-provider')\n  const { asset, bucket, docRef } = options\n  if (!mediaDeliveryAssetPrefix(asset)) return done('no-asset')\n\n  const snapshot = await docRef.get()\n  if (!snapshot.exists || snapshot.get('deletedAt')) return done('no-asset')\n  if (!isMediaDeliveryType(snapshot.get('contentType'))) return done('not-video')\n  const sourceHash = currentContentHash(snapshot)\n  if (!sourceHash) return done('no-hash')\n\n  const orgId =\n    options.orgId === undefined\n      ? await mediaDeliveryOrgIdFor(asset.collection, asset.scopeId)\n      : options.orgId\n  const enabled = await (options.deliveryEnabled ?? mediaDeliveryEnabledForOrg)(orgId)\n  if (!enabled) return done('disabled')\n\n  const now = options.nowMs ?? Date.now\n  const basePath = mediaStoragePathInScope({\n    storagePath: snapshot.get('storagePath'),\n    base: `${asset.collection}/${asset.scopeId}`,\n    mediaId: asset.mediaId,\n  })\n  const wanted: Array<{ objectPath: string; rendition: MediaVideoRendition | null }> = [\n    { objectPath: basePath, rendition: null },\n    ...parseMediaRenditions(snapshot.get('videoRenditions')).map((rendition) => ({\n      objectPath: mediaRenditionObjectPath(basePath, rendition),\n      rendition,\n    })),\n  ]\n\n  const recorded = parseMediaDeliveryCopies(snapshot.get(MEDIA_DELIVERY_COPIES_FIELD), asset)\n  const next: MediaDeliveryCopies = {}\n  for (const { objectPath, rendition } of wanted) {\n    const representation = mediaDeliveryRepresentation(rendition)\n    const existing = recorded[representation]\n    try {\n      const file = bucket.file(objectPath)\n      // The master's digest is on the document already, so a current copy of\n      // it costs no Storage read. A rendition's is read every time.\n      if (!rendition && existing?.sourceHash === sourceHash) {\n        next[representation] = existing\n        result.kept.push(representation)\n        continue\n      }\n      const metadata = await readMetadata(file)\n      const objectHash = rendition ? md5Hex(metadata) : sourceHash\n      if (!objectHash) throw new Error('the object reports no digest')\n      if (\n        existing &&\n        existing.sourceHash === sourceHash &&\n        existing.objectHash === objectHash\n      ) {\n        next[representation] = existing\n        result.kept.push(representation)\n        continue\n      }\n      const sizeBytes = Number(metadata['size'])\n      if (!Number.isSafeInteger(sizeBytes) || sizeBytes <= 0) {\n        throw new Error('the object reports no size')\n      }\n      const contentType = rendition\n        ? rendition.contentType\n        : String(metadata['contentType'] ?? snapshot.get('contentType') ?? '')\n      if (!isMediaDeliveryType(contentType)) throw new Error('the object is not a video')\n      const key = mediaDeliveryObjectKey(asset, { sourceHash, representation, objectHash })\n      if (!key) throw new Error('no key fits the asset')\n      await provider.putObject({\n        key,\n        body: Readable.toWeb(file.createReadStream() as Readable) as ReadableStream<Uint8Array>,\n        contentLength: sizeBytes,\n        contentType,\n      })\n      next[representation] = {\n        key,\n        sourceHash,\n        objectHash,\n        contentType,\n        sizeBytes,\n        copiedAtMs: now(),\n      }\n      result.copied.push(representation)\n    } catch (error) {\n      result.failed.push(representation)\n      console.error(\n        '[media-delivery] copy failed; it keeps serving from the platform',\n        JSON.stringify({ ...asset, representation }),\n        error,\n      )\n    }\n  }\n\n  const nextKeys = new Set(Object.values(next).map((copy) => copy.key))\n  const retired = Object.values(recorded)\n    .map((copy) => copy.key)\n    .filter((key) => !nextKeys.has(key))\n  const madeNow = result.copied\n    .map((representation) => next[representation]?.key)\n    .filter((key): key is string => Boolean(key))\n\n  if (result.copied.length || retired.length) {\n    const written = await docRef.firestore.runTransaction(async (transaction) => {\n      const fresh = await transaction.get(docRef)\n      if (!fresh.exists || fresh.get('deletedAt')) return false\n      if (currentContentHash(fresh) !== sourceHash) return false\n      transaction.update(docRef, { [MEDIA_DELIVERY_COPIES_FIELD]: next })\n      return true\n    })\n    if (!written) {\n      // Replaced or deleted while the copies were uploading. Nothing records\n      // what was just made, so it goes rather than lingering unreferenced.\n      await removeKeys(provider, madeNow, result)\n      return done('replaced')\n    }\n  }\n  await removeKeys(provider, retired, result)\n  return done('synced')\n}\n\nasync function removeKeys(\n  provider: MediaDeliveryProvider,\n  keys: string[],\n  result: Pick<MediaDeliverySyncResult, 'removed'>,\n): Promise<void> {\n  for (const key of keys) {\n    try {\n      await provider.deleteObject(key)\n      result.removed.push(key)\n    } catch (error) {\n      console.error('[media-delivery] could not remove a retired copy', JSON.stringify({ key }), error)\n    }\n  }\n}\n\n/**\n * Removes every copy of one asset from the provider: a delete, a takedown and\n * a replace all end the life of the bytes the copies were made from.\n *\n * By prefix rather than by the document's record, so a copy the record lost\n * track of goes too. Never gated on the flag, since copies made while it was\n * on must still go, and never throws: the caller's own action has already\n * happened and must not be reported as failed because a copy lingered. Null\n * when no provider is configured to store.\n */\nexport async function removeMediaDeliveryCopies(options: {\n  asset: MediaDeliveryAsset\n  provider?: MediaDeliveryProvider | null\n}): Promise<{ removed: number; failed: boolean } | null> {\n  const provider =\n    options.provider === undefined ? mediaDeliveryProvider('store') : options.provider\n  if (!provider) return null\n  const prefix = mediaDeliveryAssetPrefix(options.asset)\n  if (!prefix) return { removed: 0, failed: false }\n  try {\n    return { removed: await provider.deleteObjectsWithPrefix(prefix), failed: false }\n  } catch (error) {\n    console.error(\n      '[media-delivery] could not remove an asset\\'s copies',\n      JSON.stringify(options.asset),\n      error,\n    )\n    return { removed: 0, failed: true }\n  }\n}\n\n/**\n * Removes every copy a library holds at the provider — the erasure of a site\n * or an org. Same posture as {@link removeMediaDeliveryCopies}.\n */\nexport async function eraseMediaDeliveryScope(options: {\n  collection: 'hosts' | 'orgs'\n  scopeId: string\n  provider?: MediaDeliveryProvider | null\n}): Promise<{ removed: number; failed: boolean } | null> {\n  const provider =\n    options.provider === undefined ? mediaDeliveryProvider('store') : options.provider\n  if (!provider) return null\n  const prefix = mediaDeliveryScopePrefix(options.collection, options.scopeId)\n  if (!prefix) return { removed: 0, failed: false }\n  try {\n    return { removed: await provider.deleteObjectsWithPrefix(prefix), failed: false }\n  } catch (error) {\n    console.error(\n      '[media-delivery] could not erase a library\\'s copies',\n      JSON.stringify({ collection: options.collection, scopeId: options.scopeId }),\n      error,\n    )\n    return { removed: 0, failed: true }\n  }\n}\n\n/**\n * A media document without its copy record, for a restore: the delete that\n * made the tombstone removed the copies, so the record describes objects\n * that are gone.\n */\nexport function withoutMediaDeliveryCopies(\n  media: Record<string, unknown>,\n): Record<string, unknown> {\n  if (!(MEDIA_DELIVERY_COPIES_FIELD in media)) return media\n  const rest = { ...media }\n  delete rest[MEDIA_DELIVERY_COPIES_FIELD]\n  return rest\n}\n"],"names":["Readable","mediaRenditionObjectPath","parseMediaRenditions","mediaDeliveryProvider","firebaseAdmin","MEDIA_SIGNATURE_MAX_TTL_MS","mediaStoragePathInScope","isServerReleaseFlagOnForOrg","MEDIA_DELIVERY_RELEASE_FLAG","MEDIA_DELIVERY_COPIES_FIELD","MEDIA_DELIVERY_MASTER","MEDIA_DELIVERY_MIN_TTL_MS","MEDIA_DELIVERY_DEFAULT_TTL_MS","MEDIA_DELIVERY_MAX_TTL_MS","mediaDeliveryTtlMs","durationMs","duration","Number","isFinite","Math","min","max","round","ID_SEGMENT","DIGEST","REPRESENTATION","mediaDeliveryRepresentation","rendition","key","validAsset","asset","collection","test","scopeId","mediaId","mediaDeliveryAssetPrefix","mediaDeliveryScopePrefix","mediaDeliveryObjectKey","copy","prefix","sourceHash","objectHash","representation","parseMediaDeliveryCopies","raw","copies","Array","isArray","value","Object","entries","entry","String","contentType","sizeBytes","copiedAtMs","isMediaDeliveryType","split","trim","toLowerCase","startsWith","currentContentHash","document","hash","get","ORG_CACHE_TTL_MS","hostOrgCache","Map","invalidateMediaDeliveryOrgCache","clear","mediaDeliveryOrgIdFor","hit","Date","now","at","orgId","firestore","app","index","getAll","doc","fieldMask","set","mediaDeliveryEnabledForOrg","mediaDeliveryRedirect","input","servedType","enabled","deliveryEnabled","nowMs","video","lifetime","ttlMs","expiresAtMs","notAfterMs","undefined","location","provider","deliveryUrl","claims","error","console","JSON","stringify","md5Hex","metadata","hex","Buffer","from","toString","readMetadata","file","response","getMetadata","syncMediaDeliveryCopies","options","result","status","copied","kept","removed","failed","done","bucket","docRef","snapshot","exists","basePath","storagePath","base","wanted","objectPath","map","recorded","next","existing","push","Error","isSafeInteger","putObject","body","toWeb","createReadStream","contentLength","nextKeys","Set","values","retired","filter","has","madeNow","Boolean","length","written","runTransaction","transaction","fresh","update","removeKeys","keys","deleteObject","removeMediaDeliveryCopies","deleteObjectsWithPrefix","eraseMediaDeliveryScope","withoutMediaDeliveryCopies","media","rest"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,QAAQ,QAAQ,cAAa;AACtC,SAEEC,wBAAwB,EACxBC,oBAAoB,QACf,mCAAkC;AAEzC,SAGEC,qBAAqB,QAChB,sDAAqD;AAC5D,SAASC,aAAa,QAAQ,sBAAkB;AAChD,SAASC,0BAA0B,QAAQ,qBAAiB;AAC5D,SAASC,uBAAuB,QAAQ,0BAAsB;AAC9D,SAASC,2BAA2B,QAAQ,qBAAiB;AAE7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDC,GAED,oEAAoE,GACpE,OAAO,MAAMC,8BAA8C,yBAAwB;AAEnF,sEAAsE,GACtE,OAAO,MAAMC,8BAA8B,iBAAgB;AAE3D,yDAAyD,GACzD,OAAO,MAAMC,wBAAwB,SAAQ;AAE7C;;;;;CAKC,GACD,OAAO,MAAMC,4BAA4B,KAAK,KAAK,KAAI;AAEvD,sDAAsD,GACtD,OAAO,MAAMC,gCAAgC,KAAK,KAAK,KAAI;AAE3D,qEAAqE,GACrE,OAAO,MAAMC,4BAA4BR,2BAA0B;AAEnE;;;;CAIC,GACD,OAAO,SAASS,mBAAmBC,UAAmB;IACpD,MAAMC,WAAWC,OAAOF;IACxB,IAAI,CAACE,OAAOC,QAAQ,CAACF,aAAaA,YAAY,GAAG;QAC/C,OAAOJ;IACT;IACA,OAAOO,KAAKC,GAAG,CACbP,2BACAM,KAAKE,GAAG,CAACV,2BAA2BQ,KAAKG,KAAK,CAACN,WAAW;AAE9D;AASA,iDAAiD,GACjD,MAAMO,aAAa;AACnB,uEAAuE,GACvE,MAAMC,SAAS;AACf,2CAA2C,GAC3C,MAAMC,iBAAiB;AAEvB,2EAA2E,GAC3E,OAAO,SAASC,4BACdC,SAA8D;IAE9D,OAAOA,YAAY,CAAC,EAAE,EAAEA,UAAUC,GAAG,EAAE,GAAGlB;AAC5C;AAEA,SAASmB,WAAWC,KAAyB;IAC3C,OACE,AAACA,CAAAA,MAAMC,UAAU,KAAK,WAAWD,MAAMC,UAAU,KAAK,MAAK,KAC3DR,WAAWS,IAAI,CAACF,MAAMG,OAAO,KAC7BV,WAAWS,IAAI,CAACF,MAAMI,OAAO;AAEjC;AAEA;;;;CAIC,GACD,OAAO,SAASC,yBAAyBL,KAAyB;IAChE,IAAI,CAACD,WAAWC,QAAQ,OAAO;IAC/B,OAAO,GAAGA,MAAMC,UAAU,CAAC,CAAC,EAAED,MAAMG,OAAO,CAAC,CAAC,EAAEH,MAAMI,OAAO,CAAC,CAAC,CAAC;AACjE;AAEA,sEAAsE,GACtE,OAAO,SAASE,yBACdL,UAA4B,EAC5BE,OAAe;IAEf,IAAIF,eAAe,WAAWA,eAAe,QAAQ,OAAO;IAC5D,IAAI,CAACR,WAAWS,IAAI,CAACC,UAAU,OAAO;IACtC,OAAO,GAAGF,WAAW,CAAC,EAAEE,QAAQ,CAAC,CAAC;AACpC;AAEA,8EAA8E,GAC9E,OAAO,SAASI,uBACdP,KAAyB,EACzBQ,IAAwE;IAExE,MAAMC,SAASJ,yBAAyBL;IACxC,IAAI,CAACS,QAAQ,OAAO;IACpB,IAAI,CAACf,OAAOQ,IAAI,CAACM,KAAKE,UAAU,KAAK,CAAChB,OAAOQ,IAAI,CAACM,KAAKG,UAAU,GAAG,OAAO;IAC3E,IAAI,CAAChB,eAAeO,IAAI,CAACM,KAAKI,cAAc,GAAG,OAAO;IACtD,OAAO,GAAGH,SAASD,KAAKE,UAAU,CAAC,CAAC,EAAEF,KAAKI,cAAc,CAAC,CAAC,EAAEJ,KAAKG,UAAU,EAAE;AAChF;AAiBA;;;;CAIC,GACD,OAAO,SAASE,yBACdC,GAAY,EACZd,KAAyB;IAEzB,MAAMe,SAA8B,CAAC;IACrC,IAAI,CAACD,OAAO,OAAOA,QAAQ,YAAYE,MAAMC,OAAO,CAACH,MAAM,OAAOC;IAClE,KAAK,MAAM,CAACH,gBAAgBM,MAAM,IAAIC,OAAOC,OAAO,CAACN,KAAiC;YAG1DO,mBACAA,mBAGCA;QAN3B,IAAI,CAACH,SAAS,OAAOA,UAAU,UAAU;QACzC,MAAMG,QAAQH;QACd,MAAMR,aAAaY,QAAOD,oBAAAA,KAAK,CAAC,aAAa,YAAnBA,oBAAuB;QACjD,MAAMV,aAAaW,QAAOD,oBAAAA,KAAK,CAAC,aAAa,YAAnBA,oBAAuB;QACjD,MAAMvB,MAAMS,uBAAuBP,OAAO;YAAEU;YAAYE;YAAgBD;QAAW;QACnF,IAAI,CAACb,OAAOuB,KAAK,CAAC,MAAM,KAAKvB,KAAK;QAClC,MAAMyB,cAAcD,QAAOD,qBAAAA,KAAK,CAAC,cAAc,YAApBA,qBAAwB;QACnD,IAAI,CAAC,yBAAyBnB,IAAI,CAACqB,cAAc;QACjD,MAAMC,YAAYrC,OAAOkC,KAAK,CAAC,YAAY;QAC3CN,MAAM,CAACH,eAAe,GAAG;YACvBd;YACAY;YACAC;YACAY;YACAC,WAAWrC,OAAOC,QAAQ,CAACoC,cAAcA,YAAY,IAAInC,KAAKG,KAAK,CAACgC,aAAa;YACjFC,YAAYtC,OAAOkC,KAAK,CAAC,aAAa,KAAK;QAC7C;IACF;IACA,OAAON;AACT;AAEA,4EAA4E,GAC5E,OAAO,SAASW,oBAAoBH,WAAoB;IACtD,OAAOD,OAAOC,sBAAAA,cAAe,IAC1BI,KAAK,CAAC,IAAI,CAAC,EAAE,CACbC,IAAI,GACJC,WAAW,GACXC,UAAU,CAAC;AAChB;AAEA,SAASC,mBAAmBC,QAAyC;IACnE,MAAMC,OAAOD,SAASE,GAAG,CAAC;IAC1B,OAAO,OAAOD,SAAS,YAAYvC,OAAOQ,IAAI,CAAC+B,QAAQA,OAAO;AAChE;AAEA;;4EAE4E,GAE5E,MAAME,mBAAmB;AACzB,MAAMC,eAAe,IAAIC;AAEzB,6DAA6D,GAC7D,OAAO,SAASC;IACdF,aAAaG,KAAK;AACpB;AAEA;;;;;CAKC,GACD,OAAO,eAAeC,sBACpBvC,UAA4B,EAC5BE,OAAe;IAEf,IAAIF,eAAe,QAAQ,OAAOE,WAAW;IAC7C,MAAMsC,MAAML,aAAaF,GAAG,CAAC/B;IAC7B,IAAIsC,OAAOC,KAAKC,GAAG,KAAKF,IAAIG,EAAE,GAAGT,kBAAkB,OAAOM,IAAII,KAAK;IACnE,MAAMA,QAAQ,MAAM,AAAC,CAAA;QACnB,IAAI;YACF,MAAMC,YAAYxE,cAAcyE,GAAG,GAAGD,SAAS;YAC/C,MAAM,CAACE,MAAM,GAAG,MAAMF,UAAUG,MAAM,CACpCH,UAAU7C,UAAU,CAAC,aAAaiD,GAAG,CAAC/C,UACtC;gBAAEgD,WAAW;oBAAC;iBAAQ;YAAC;YAEzB,MAAMjC,QAAQ8B,yBAAAA,MAAOd,GAAG,CAAC;YACzB,OAAO,OAAOhB,UAAU,YAAYA,QAAQA,QAAQ;QACtD,EAAE,eAAM;YACN,OAAO;QACT;IACF,CAAA;IACAkB,aAAagB,GAAG,CAACjD,SAAS;QAAEyC,IAAIF,KAAKC,GAAG;QAAIE;IAAM;IAClD,OAAOA;AACT;AAEA,kCAAkC,GAClC,OAAO,SAASQ,2BAA2BR,KAAoB;IAC7D,OAAOpE,4BAA4BC,6BAA6BmE;AAClE;AAYA;;;;;;;;;CASC,GACD,OAAO,eAAeS,sBAAsBC,KAiB3C;QAYwBA,wBAGTA,cAIZA;IAlBF,IAAI,CAAC7B,oBAAoB6B,MAAMC,UAAU,GAAG,OAAO;IACnD,MAAM9C,aAAaqB,mBAAmBwB,MAAMvB,QAAQ;IACpD,IAAI,CAACtB,YAAY,OAAO;IACxB,MAAMK,SAASF,yBACb0C,MAAMvB,QAAQ,CAACE,GAAG,CAACvD,8BACnB4E,MAAMvD,KAAK;IAEb,MAAMQ,OAAOO,MAAM,CAACnB,4BAA4B2D,MAAM1D,SAAS,EAAE;IACjE,IAAI,CAACW,QAAQA,KAAKE,UAAU,KAAKA,YAAY,OAAO;IAEpD,MAAMmC,QAAQ,MAAMU,MAAMV,KAAK;IAC/B,MAAMY,UAAU,MAAM,EAACF,yBAAAA,MAAMG,eAAe,YAArBH,yBAAyBF,4BAA4BR;IAC5E,IAAI,CAACY,SAAS,OAAO;IAErB,MAAME,SAAQJ,eAAAA,MAAMI,KAAK,YAAXJ,eAAeb,KAAKC,GAAG;IACrC,MAAMiB,QAAQL,MAAMvB,QAAQ,CAACE,GAAG,CAAC;IACjC,MAAM2B,WAAWxE,KAAKC,GAAG,CACvBP,4BACAwE,eAAAA,MAAMO,KAAK,YAAXP,eAAevE,mBAAmB4E,yBAAAA,MAAO3E,UAAU;IAErD,IAAI8E,cAAcJ,QAAQE;IAC1B,IAAIN,MAAMS,UAAU,KAAKC,WAAW;QAClC,qEAAqE;QACrE,oEAAoE;QACpE,IAAI,CAAC9E,OAAOC,QAAQ,CAACmE,MAAMS,UAAU,GAAG,OAAO;QAC/CD,cAAc1E,KAAKC,GAAG,CAACyE,aAAaR,MAAMS,UAAU;IACtD;IACA,IAAI,CAAED,CAAAA,cAAcJ,KAAI,GAAI,OAAO;IACnC,IAAI;QACF,MAAMO,WAAW,MAAMX,MAAMY,QAAQ,CAACC,WAAW,CAAC;YAChDtE,KAAKU,KAAKV,GAAG;YACbiE;YACAM,QAAQ,aAAKd,MAAMc,MAAM;gBAAExB;;QAC7B;QACA,OAAO;YAAEqB;YAAUH;YAAajE,KAAKU,KAAKV,GAAG;QAAC;IAChD,EAAE,OAAOwE,OAAO;QACdC,QAAQD,KAAK,CACX,kDACAE,KAAKC,SAAS,CAAC;YAAE3E,KAAKU,KAAKV,GAAG;QAAC,IAC/BwE;QAEF,OAAO;IACT;AACF;AAsCA,mDAAmD,GACnD,SAASI,OAAOC,QAAiC;IAC/C,MAAM7D,MAAM6D,QAAQ,CAAC,UAAU;IAC/B,IAAI,OAAO7D,QAAQ,YAAY,CAACA,KAAK,OAAO;IAC5C,MAAM8D,MAAMC,OAAOC,IAAI,CAAChE,KAAK,UAAUiE,QAAQ,CAAC;IAChD,OAAOrF,OAAOQ,IAAI,CAAC0E,OAAOA,MAAM;AAClC;AAEA,gEAAgE,GAChE,eAAeI,aAAaC,IAA6B;IACvD,MAAMC,WAAW,MAAMD,KAAKE,WAAW;IACvC,MAAMR,WAAW3D,MAAMC,OAAO,CAACiE,YAAYA,QAAQ,CAAC,EAAE,GAAGA;IACzD,OAAQP,mBAAAA,WAAY,CAAC;AACvB;AAEA;;;;;;;;;;;;;;;;;;CAkBC,GACD,OAAO,eAAeS,wBAAwBC,OAW7C;QA4BwBA,0BAGXA;IA9BZ,MAAMC,SAAkC;QACtCC,QAAQ;QACRC,QAAQ,EAAE;QACVC,MAAM,EAAE;QACRC,SAAS,EAAE;QACXC,QAAQ,EAAE;IACZ;IACA,MAAMC,OAAO,CAACL,SAA8D,aACvED;YACHC;;IAEF,MAAMpB,WACJkB,QAAQlB,QAAQ,KAAKF,YAAY5F,sBAAsB,WAAWgH,QAAQlB,QAAQ;IACpF,IAAI,CAACA,UAAU,OAAOyB,KAAK;IAC3B,MAAM,EAAE5F,KAAK,EAAE6F,MAAM,EAAEC,MAAM,EAAE,GAAGT;IAClC,IAAI,CAAChF,yBAAyBL,QAAQ,OAAO4F,KAAK;IAElD,MAAMG,WAAW,MAAMD,OAAO5D,GAAG;IACjC,IAAI,CAAC6D,SAASC,MAAM,IAAID,SAAS7D,GAAG,CAAC,cAAc,OAAO0D,KAAK;IAC/D,IAAI,CAAClE,oBAAoBqE,SAAS7D,GAAG,CAAC,iBAAiB,OAAO0D,KAAK;IACnE,MAAMlF,aAAaqB,mBAAmBgE;IACtC,IAAI,CAACrF,YAAY,OAAOkF,KAAK;IAE7B,MAAM/C,QACJwC,QAAQxC,KAAK,KAAKoB,YACd,MAAMzB,sBAAsBxC,MAAMC,UAAU,EAAED,MAAMG,OAAO,IAC3DkF,QAAQxC,KAAK;IACnB,MAAMY,UAAU,MAAM,EAAC4B,2BAAAA,QAAQ3B,eAAe,YAAvB2B,2BAA2BhC,4BAA4BR;IAC9E,IAAI,CAACY,SAAS,OAAOmC,KAAK;IAE1B,MAAMjD,OAAM0C,iBAAAA,QAAQ1B,KAAK,YAAb0B,iBAAiB3C,KAAKC,GAAG;IACrC,MAAMsD,WAAWzH,wBAAwB;QACvC0H,aAAaH,SAAS7D,GAAG,CAAC;QAC1BiE,MAAM,GAAGnG,MAAMC,UAAU,CAAC,CAAC,EAAED,MAAMG,OAAO,EAAE;QAC5CC,SAASJ,MAAMI,OAAO;IACxB;IACA,MAAMgG,SAA+E;QACnF;YAAEC,YAAYJ;YAAUpG,WAAW;QAAK;WACrCzB,qBAAqB2H,SAAS7D,GAAG,CAAC,oBAAoBoE,GAAG,CAAC,CAACzG,YAAe,CAAA;gBAC3EwG,YAAYlI,yBAAyB8H,UAAUpG;gBAC/CA;YACF,CAAA;KACD;IAED,MAAM0G,WAAW1F,yBAAyBkF,SAAS7D,GAAG,CAACvD,8BAA8BqB;IACrF,MAAMwG,OAA4B,CAAC;IACnC,KAAK,MAAM,EAAEH,UAAU,EAAExG,SAAS,EAAE,IAAIuG,OAAQ;QAC9C,MAAMxF,iBAAiBhB,4BAA4BC;QACnD,MAAM4G,WAAWF,QAAQ,CAAC3F,eAAe;QACzC,IAAI;gBA2BS+D,MAAAA;YA1BX,MAAMM,OAAOY,OAAOZ,IAAI,CAACoB;YACzB,uEAAuE;YACvE,8DAA8D;YAC9D,IAAI,CAACxG,aAAa4G,CAAAA,4BAAAA,SAAU/F,UAAU,MAAKA,YAAY;gBACrD8F,IAAI,CAAC5F,eAAe,GAAG6F;gBACvBnB,OAAOG,IAAI,CAACiB,IAAI,CAAC9F;gBACjB;YACF;YACA,MAAM+D,WAAW,MAAMK,aAAaC;YACpC,MAAMtE,aAAad,YAAY6E,OAAOC,YAAYjE;YAClD,IAAI,CAACC,YAAY,MAAM,IAAIgG,MAAM;YACjC,IACEF,YACAA,SAAS/F,UAAU,KAAKA,cACxB+F,SAAS9F,UAAU,KAAKA,YACxB;gBACA6F,IAAI,CAAC5F,eAAe,GAAG6F;gBACvBnB,OAAOG,IAAI,CAACiB,IAAI,CAAC9F;gBACjB;YACF;YACA,MAAMY,YAAYrC,OAAOwF,QAAQ,CAAC,OAAO;YACzC,IAAI,CAACxF,OAAOyH,aAAa,CAACpF,cAAcA,aAAa,GAAG;gBACtD,MAAM,IAAImF,MAAM;YAClB;YACA,MAAMpF,cAAc1B,YAChBA,UAAU0B,WAAW,GACrBD,QAAOqD,QAAAA,wBAAAA,QAAQ,CAAC,cAAc,YAAvBA,wBAA2BoB,SAAS7D,GAAG,CAAC,0BAAxCyC,OAA0D;YACrE,IAAI,CAACjD,oBAAoBH,cAAc,MAAM,IAAIoF,MAAM;YACvD,MAAM7G,MAAMS,uBAAuBP,OAAO;gBAAEU;gBAAYE;gBAAgBD;YAAW;YACnF,IAAI,CAACb,KAAK,MAAM,IAAI6G,MAAM;YAC1B,MAAMxC,SAAS0C,SAAS,CAAC;gBACvB/G;gBACAgH,MAAM5I,SAAS6I,KAAK,CAAC9B,KAAK+B,gBAAgB;gBAC1CC,eAAezF;gBACfD;YACF;YACAiF,IAAI,CAAC5F,eAAe,GAAG;gBACrBd;gBACAY;gBACAC;gBACAY;gBACAC;gBACAC,YAAYkB;YACd;YACA2C,OAAOE,MAAM,CAACkB,IAAI,CAAC9F;QACrB,EAAE,OAAO0D,OAAO;YACdgB,OAAOK,MAAM,CAACe,IAAI,CAAC9F;YACnB2D,QAAQD,KAAK,CACX,oEACAE,KAAKC,SAAS,CAAC,aAAKzE;gBAAOY;iBAC3B0D;QAEJ;IACF;IAEA,MAAM4C,WAAW,IAAIC,IAAIhG,OAAOiG,MAAM,CAACZ,MAAMF,GAAG,CAAC,CAAC9F,OAASA,KAAKV,GAAG;IACnE,MAAMuH,UAAUlG,OAAOiG,MAAM,CAACb,UAC3BD,GAAG,CAAC,CAAC9F,OAASA,KAAKV,GAAG,EACtBwH,MAAM,CAAC,CAACxH,MAAQ,CAACoH,SAASK,GAAG,CAACzH;IACjC,MAAM0H,UAAUlC,OAAOE,MAAM,CAC1Bc,GAAG,CAAC,CAAC1F;YAAmB4F;gBAAAA,uBAAAA,IAAI,CAAC5F,eAAe,qBAApB4F,qBAAsB1G,GAAG;OACjDwH,MAAM,CAAC,CAACxH,MAAuB2H,QAAQ3H;IAE1C,IAAIwF,OAAOE,MAAM,CAACkC,MAAM,IAAIL,QAAQK,MAAM,EAAE;QAC1C,MAAMC,UAAU,MAAM7B,OAAOhD,SAAS,CAAC8E,cAAc,CAAC,OAAOC;YAC3D,MAAMC,QAAQ,MAAMD,YAAY3F,GAAG,CAAC4D;YACpC,IAAI,CAACgC,MAAM9B,MAAM,IAAI8B,MAAM5F,GAAG,CAAC,cAAc,OAAO;YACpD,IAAIH,mBAAmB+F,WAAWpH,YAAY,OAAO;YACrDmH,YAAYE,MAAM,CAACjC,QAAQ;gBAAE,CAACnH,4BAA4B,EAAE6H;YAAK;YACjE,OAAO;QACT;QACA,IAAI,CAACmB,SAAS;YACZ,uEAAuE;YACvE,qEAAqE;YACrE,MAAMK,WAAW7D,UAAUqD,SAASlC;YACpC,OAAOM,KAAK;QACd;IACF;IACA,MAAMoC,WAAW7D,UAAUkD,SAAS/B;IACpC,OAAOM,KAAK;AACd;AAEA,eAAeoC,WACb7D,QAA+B,EAC/B8D,IAAc,EACd3C,MAAgD;IAEhD,KAAK,MAAMxF,OAAOmI,KAAM;QACtB,IAAI;YACF,MAAM9D,SAAS+D,YAAY,CAACpI;YAC5BwF,OAAOI,OAAO,CAACgB,IAAI,CAAC5G;QACtB,EAAE,OAAOwE,OAAO;YACdC,QAAQD,KAAK,CAAC,oDAAoDE,KAAKC,SAAS,CAAC;gBAAE3E;YAAI,IAAIwE;QAC7F;IACF;AACF;AAEA;;;;;;;;;CASC,GACD,OAAO,eAAe6D,0BAA0B9C,OAG/C;IACC,MAAMlB,WACJkB,QAAQlB,QAAQ,KAAKF,YAAY5F,sBAAsB,WAAWgH,QAAQlB,QAAQ;IACpF,IAAI,CAACA,UAAU,OAAO;IACtB,MAAM1D,SAASJ,yBAAyBgF,QAAQrF,KAAK;IACrD,IAAI,CAACS,QAAQ,OAAO;QAAEiF,SAAS;QAAGC,QAAQ;IAAM;IAChD,IAAI;QACF,OAAO;YAAED,SAAS,MAAMvB,SAASiE,uBAAuB,CAAC3H;YAASkF,QAAQ;QAAM;IAClF,EAAE,OAAOrB,OAAO;QACdC,QAAQD,KAAK,CACX,wDACAE,KAAKC,SAAS,CAACY,QAAQrF,KAAK,GAC5BsE;QAEF,OAAO;YAAEoB,SAAS;YAAGC,QAAQ;QAAK;IACpC;AACF;AAEA;;;CAGC,GACD,OAAO,eAAe0C,wBAAwBhD,OAI7C;IACC,MAAMlB,WACJkB,QAAQlB,QAAQ,KAAKF,YAAY5F,sBAAsB,WAAWgH,QAAQlB,QAAQ;IACpF,IAAI,CAACA,UAAU,OAAO;IACtB,MAAM1D,SAASH,yBAAyB+E,QAAQpF,UAAU,EAAEoF,QAAQlF,OAAO;IAC3E,IAAI,CAACM,QAAQ,OAAO;QAAEiF,SAAS;QAAGC,QAAQ;IAAM;IAChD,IAAI;QACF,OAAO;YAAED,SAAS,MAAMvB,SAASiE,uBAAuB,CAAC3H;YAASkF,QAAQ;QAAM;IAClF,EAAE,OAAOrB,OAAO;QACdC,QAAQD,KAAK,CACX,wDACAE,KAAKC,SAAS,CAAC;YAAExE,YAAYoF,QAAQpF,UAAU;YAAEE,SAASkF,QAAQlF,OAAO;QAAC,IAC1EmE;QAEF,OAAO;YAAEoB,SAAS;YAAGC,QAAQ;QAAK;IACpC;AACF;AAEA;;;;CAIC,GACD,OAAO,SAAS2C,2BACdC,KAA8B;IAE9B,IAAI,CAAE5J,CAAAA,+BAA+B4J,KAAI,GAAI,OAAOA;IACpD,MAAMC,OAAO,aAAKD;IAClB,OAAOC,IAAI,CAAC7J,4BAA4B;IACxC,OAAO6J;AACT"}