@de-otio/trellis 0.10.11 → 0.12.0

package/dist/env.d.ts

@@ -6,6 +6,8 @@
  */
 import { type ResolveContext } from "@de-otio/saas-foundation/secrets";
 import type { KVNamespace, CloudflareQueue, R2Bucket, AnalyticsEngineDataset } from "./types/cloudflare-compat.js";
+import type { NotificationType } from "@prisma/client";
+import type { RealtimeTransport } from "./lib/realtime/index.js";
 /** Application environment — available to all route handlers */
 export interface Env {
     DATABASE_URL: string;
@@ -185,7 +187,237 @@ export interface Env {
     INTERACTION_EVENT_PRUNE_BATCH_SIZE?: string;
     /** Prune circuit-breaker: max iterations per run. Default 1000. */
     INTERACTION_EVENT_PRUNE_MAX_ITERATIONS?: string;
+    /**
+     * Feature gates for the realtime seam.
+     *   realtimeTransport: which transport core selects as the FALLBACK when no
+     *     provider is injected — "poll" (default) | "appsync-events".
+     *   realtimePush: whether the createNotification() push hand-off is enabled
+     *     (default false). The floor decision is computed either way; this only
+     *     gates whether deliver() is invoked.
+     */
+    features: {
+        realtimeTransport: "poll" | "appsync-events";
+        realtimePush: boolean;
+    };
+    /**
+     * Manipulative re-engagement NotificationTypes denied to non-adult recipients
+     * by the delivery FLOOR (minor-protection). RUNTIME CONFIG per the
+     * threshold-secrecy invariant. Default EMPTY (v1 ships no such type).
+     */
+    REALTIME_REENGAGEMENT_TYPES: ReadonlySet<NotificationType>;
+    /** Setting-sync blob namespaces the deployment permits (allowlist). Empty = sync off. */
+    REALTIME_SETTING_NAMESPACES: string[];
+    /** Max bytes for a single encrypted setting blob (size cap; runtime config). */
+    REALTIME_SETTING_MAX_BYTES: number;
+    /**
+     * Retention window (days) for realtime connection/access logs. Treated like
+     * SecurityEvent (retention-bound), never durable ops data. Default short (7).
+     */
+    REALTIME_CONN_LOG_RETENTION_DAYS: number;
+    /**
+     * The resolved transport instance. Populated by the env builder with the
+     * default (Poll/Noop) via resolveRealtimeTransport(); a consuming app
+     * OVERWRITES the slot by calling setRealtimeProvider() before serving.
+     * Handlers read env.realtimeTransport — never construct one.
+     */
+    realtimeTransport: RealtimeTransport;
+    /**
+     * Media upload/serve configuration. All operational thresholds come from
+     * env vars; code ships only conservative safe-for-dev defaults.
+     */
+    media: {
+        /**
+         * Maximum file size in bytes per media type.
+         * Sources: MEDIA_MAX_BYTES_IMAGE / MEDIA_MAX_BYTES_VIDEO / MEDIA_MAX_BYTES_AUDIO.
+         */
+        maxBytes: {
+            image: number;
+            video: number;
+            audio: number;
+        };
+        /**
+         * Maximum total pixels (width × height) for uploaded images. Guards against
+         * decompression-bomb attacks (sharp limitInputPixels). Source: MEDIA_MAX_PIXELS.
+         */
+        maxPixels: number;
+        /**
+         * Upload and serve rate limits (requests per minute). Operational values
+         * come from env; code ships conservative dev defaults.
+         * Sources: MEDIA_RATE_UPLOAD_PER_MIN / MEDIA_RATE_BATCH_PER_MIN / MEDIA_RATE_SERVE_PER_MIN.
+         */
+        rateLimits: {
+            uploadPerMin: number;
+            batchPerMin: number;
+            servePerMin: number;
+        };
+        /**
+         * Accepted MIME-type allowlists per media type.
+         * Sources: MEDIA_ALLOWLIST_IMAGE_JSON / MEDIA_ALLOWLIST_VIDEO_JSON / MEDIA_ALLOWLIST_AUDIO_JSON
+         * (JSON arrays). Defaults to narrow safe sets; consumer widens as needed.
+         */
+        allowlist: {
+            image: string[];
+            video: string[];
+            audio: string[];
+        };
+        /**
+         * Enumerated derivative preset identifiers. Bounds the closed union used by
+         * the CAS key builder (T3). Source: MEDIA_PRESETS_JSON (JSON string array).
+         */
+        presets: string[];
+        /**
+         * Per-category moderation thresholds: review and quarantine confidence
+         * boundaries (0–1). Absence of a key ⇒ fail-closed (treat as review).
+         * Source: MEDIA_THRESHOLDS_JSON (JSON object). Real operative numbers live
+         * in the consumer's SSM; compiled defaults are intentionally absent so the
+         * public tarball contains no threshold values.
+         */
+        thresholds: Record<string, {
+            review: number;
+            quarantine: number;
+        }>;
+        /**
+         * Canonical output format for the image re-encode pipeline (T7).
+         * Must be one of the sharp-writable formats: "jpeg" | "png" | "webp".
+         * Source: MEDIA_CANONICAL_FORMAT. Default: "jpeg".
+         */
+        canonicalFormat: "jpeg" | "png" | "webp";
+        /**
+         * JPEG/WebP output quality for the re-encode pipeline (1–100).
+         * Source: MEDIA_CANONICAL_QUALITY. Default: 85 (conservative dev default).
+         */
+        canonicalQuality: number;
+        /**
+         * Maximum video duration in seconds the pipeline will accept. Clips
+         * exceeding this cap are rejected before transcoding begins (cost + abuse
+         * guard). Source: MEDIA_MAX_DURATION_SECONDS. Default: 60 (conservative
+         * dev default; consumer injects operative value via SSM/env).
+         */
+        maxDurationSeconds: number;
+        /**
+         * Per-tenant cap on the number of uploads that may reach REVIEW status
+         * within the rolling rate window. Tenants that exceed this cap have
+         * subsequent uploads auto-rejected until the window resets. Source:
+         * MEDIA_REVIEW_RATE_CAP. Default: 20 (conservative dev default; consumer
+         * injects operative value via SSM/env).
+         */
+        reviewRateCap: number;
+        /**
+         * Per-tenant upload quota: maximum number of stored objects and total
+         * bytes. Quota enforcement is advisory in P0b (logged, not hard-blocked);
+         * the consumer's CDK env sets hard values. Sources: MEDIA_QUOTA_MAX_OBJECTS
+         * / MEDIA_QUOTA_MAX_BYTES.
+         */
+        uploadQuota: {
+            /** Maximum number of stored MediaFile objects per tenant. Default: 1000. */
+            maxObjects: number;
+            /** Maximum total bytes of stored media per tenant. Default: 1 GiB. */
+            maxBytes: number;
+        };
+        /**
+         * Transcription configuration for audio moderation (AUDIO track).
+         * outputBucket: S3 bucket for transcription output (no default — absent
+         *   means the AUDIO track cannot submit jobs; callers must check).
+         * languageCode: BCP-47 language code for the transcription model.
+         *   Source: MEDIA_TRANSCRIBE_LANGUAGE_CODE. Default: "en-US".
+         */
+        transcribe: {
+            /** S3 bucket for transcription job output. Source: MEDIA_TRANSCRIBE_OUTPUT_BUCKET. No default. */
+            outputBucket?: string;
+            /** BCP-47 language code. Source: MEDIA_TRANSCRIBE_LANGUAGE_CODE. Default: "en-US". */
+            languageCode: string;
+        };
+    };
 }
+/**
+ * Track A — the RESERVED key-ring namespace. The client stores its wrapped-DEK
+ * bundle under this namespace; the server is blind to it (opaque ciphertext, no
+ * parsing). Always allowed, regardless of REALTIME_SETTING_NAMESPACES, so the
+ * key-ring works even when no other setting sync is opted in.
+ */
+export declare const KEYRING_NAMESPACE = "__keyring";
+/**
+ * Resolve the realtime config block + the default transport instance from
+ * process.env. Single-writer: this is the ONLY place that reads the REALTIME_*
+ * env vars. The default is `poll` with an in-memory store + the calm-delivery
+ * resolver — fully functional with zero infra. A consuming app overrides the
+ * transport via setRealtimeProvider() (resolved here).
+ *
+ * REALTIME_SETTING_NAMESPACES always includes the reserved `__keyring` namespace
+ * (Track A), independent of the deployment's opt-in allowlist.
+ */
+export declare function resolveRealtimeEnv(): {
+    features: {
+        realtimeTransport: "poll" | "appsync-events";
+        realtimePush: boolean;
+    };
+    REALTIME_REENGAGEMENT_TYPES: ReadonlySet<NotificationType>;
+    REALTIME_SETTING_NAMESPACES: string[];
+    REALTIME_SETTING_MAX_BYTES: number;
+    REALTIME_CONN_LOG_RETENTION_DAYS: number;
+    realtimeTransport: RealtimeTransport;
+};
+/**
+ * Resolve the media config block from process.env.
+ *
+ * Single-writer: this is the ONLY place that reads the MEDIA_* env vars.
+ * Threshold-secrecy invariant (CLAUDE.md rule 8): no cap / rate-limit /
+ * threshold *value* is compiled in. Defaults are conservative dev-safe
+ * values only; the consumer injects operative values via SSM/env vars.
+ *
+ * Absence of a threshold entry ⇒ fail-closed (treated as "review" by the gate).
+ */
+export declare function resolveMediaEnv(): {
+    media: {
+        maxBytes: {
+            image: number;
+            video: number;
+            audio: number;
+        };
+        maxPixels: number;
+        rateLimits: {
+            uploadPerMin: number;
+            batchPerMin: number;
+            servePerMin: number;
+        };
+        allowlist: {
+            image: string[];
+            video: string[];
+            audio: string[];
+        };
+        presets: string[];
+        thresholds: Record<string, {
+            review: number;
+            quarantine: number;
+        }>;
+        canonicalFormat: "jpeg" | "png" | "webp";
+        canonicalQuality: number;
+        maxDurationSeconds: number;
+        reviewRateCap: number;
+        uploadQuota: {
+            maxObjects: number;
+            maxBytes: number;
+        };
+        transcribe: {
+            outputBucket?: string;
+            languageCode: string;
+        };
+    };
+};
+/**
+ * Parse MEDIA_THRESHOLDS_JSON into a validated threshold map.
+ *
+ * Only entries whose `review` and `quarantine` values are numbers in [0, 1] are
+ * accepted. Out-of-range entries are silently dropped — an invalid threshold is
+ * treated as absent, which ⇒ fail-closed (review). This guards against a
+ * misconfigured value accidentally opening the gate.
+ *
+ * Exported for unit testing.
+ */
+export declare function parseMediaThresholds(raw: string | undefined): Record<string, {
+    review: number;
+    quarantine: number;
+}>;
 /** S1.4 — Validate critical environment variables at startup */
 export declare function validateEnv(env: Env): string[];
 /**

package/dist/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EACf,QAAQ,EAER,sBAAsB,EACvB,MAAM,8BAA8B,CAAC;AAUtC,gEAAgE;AAChE,MAAM,WAAW,GAAG;IAElB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAGlC,cAAc,EAAE,MAAM,CAAC;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAG9B,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,uDAAuD;IACvD,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;;OAMG;IACH,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,yEAAyE;IACzE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iGAAiG;IACjG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4FAA4F;IAC5F,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kFAAkF;IAClF,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAGrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAGnC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAG5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;OAOG;IACH,mBAAmB,EAAE,OAAO,CAAC;IAE7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAGvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IAGvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,sBAAsB,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,CAAC;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAGhC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAG9B,aAAa,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,oBAAoB,GAAG,aAAa,CAAC;IAC5E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAG5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAG9B,SAAS,CAAC,EAAE,sBAAsB,CAAC;IAGnC;;;;;;;;OAQG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAIrC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAG9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IAGf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAG/B,MAAM,CAAC,EAAE,GAAG,CAAC;IAGb,aAAa,EAAE,WAAW,CAAC;IAC3B,sBAAsB,EAAE,WAAW,CAAC;IACpC,UAAU,EAAE,WAAW,CAAC;IACxB,mBAAmB,EAAE,WAAW,CAAC;IACjC,aAAa,EAAE,WAAW,CAAC;IAC3B,mBAAmB,EAAE,WAAW,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;IACzB,qBAAqB,EAAE,WAAW,CAAC;IACnC,iBAAiB,EAAE,WAAW,CAAC;IAC/B,YAAY,EAAE,WAAW,CAAC;IAC1B,cAAc,EAAE,WAAW,CAAC;IAC5B,cAAc,EAAE,WAAW,CAAC;IAC5B,cAAc,EAAE,WAAW,CAAC;IAC5B,oBAAoB,EAAE,WAAW,CAAC;IAClC,cAAc,EAAE,WAAW,CAAC;IAG5B,YAAY,EAAE,eAAe,CAAC;IAC9B,oBAAoB,EAAE,eAAe,CAAC;IACtC,sBAAsB,EAAE,eAAe,CAAC;IACxC,gBAAgB,EAAE,eAAe,CAAC;IAClC,sBAAsB,EAAE,eAAe,CAAC;IACxC,0BAA0B,EAAE,eAAe,CAAC;IAG5C,eAAe,EAAE,QAAQ,CAAC;IAC1B,eAAe,EAAE,QAAQ,CAAC;IAU1B;4CACwC;IACxC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,yEAAyE;IACzE,gCAAgC,CAAC,EAAE,MAAM,CAAC;IAC1C,8EAA8E;IAC9E,kCAAkC,CAAC,EAAE,MAAM,CAAC;IAC5C,wDAAwD;IACxD,kCAAkC,CAAC,EAAE,MAAM,CAAC;IAC5C,mEAAmE;IACnE,sCAAsC,CAAC,EAAE,MAAM,CAAC;CACjD;AA8FD,gEAAgE;AAChE,wBAAgB,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,EAAE,CAkB9C;AA0BD;;;;;;;GAOG;AACH,wBAAsB,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,CA0MrE"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EACf,QAAQ,EAER,sBAAsB,EACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAiBjE,gEAAgE;AAChE,MAAM,WAAW,GAAG;IAElB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAGlC,cAAc,EAAE,MAAM,CAAC;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAG9B,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,uDAAuD;IACvD,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;;OAMG;IACH,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,yEAAyE;IACzE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iGAAiG;IACjG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4FAA4F;IAC5F,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kFAAkF;IAClF,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAGrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAGnC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAG5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;OAOG;IACH,mBAAmB,EAAE,OAAO,CAAC;IAE7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAGvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IAGvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,sBAAsB,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,CAAC;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAGhC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAG9B,aAAa,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,oBAAoB,GAAG,aAAa,CAAC;IAC5E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAG5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAG9B,SAAS,CAAC,EAAE,sBAAsB,CAAC;IAGnC;;;;;;;;OAQG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAIrC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAG9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IAGf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAG/B,MAAM,CAAC,EAAE,GAAG,CAAC;IAGb,aAAa,EAAE,WAAW,CAAC;IAC3B,sBAAsB,EAAE,WAAW,CAAC;IACpC,UAAU,EAAE,WAAW,CAAC;IACxB,mBAAmB,EAAE,WAAW,CAAC;IACjC,aAAa,EAAE,WAAW,CAAC;IAC3B,mBAAmB,EAAE,WAAW,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;IACzB,qBAAqB,EAAE,WAAW,CAAC;IACnC,iBAAiB,EAAE,WAAW,CAAC;IAC/B,YAAY,EAAE,WAAW,CAAC;IAC1B,cAAc,EAAE,WAAW,CAAC;IAC5B,cAAc,EAAE,WAAW,CAAC;IAC5B,cAAc,EAAE,WAAW,CAAC;IAC5B,oBAAoB,EAAE,WAAW,CAAC;IAClC,cAAc,EAAE,WAAW,CAAC;IAG5B,YAAY,EAAE,eAAe,CAAC;IAC9B,oBAAoB,EAAE,eAAe,CAAC;IACtC,sBAAsB,EAAE,eAAe,CAAC;IACxC,gBAAgB,EAAE,eAAe,CAAC;IAClC,sBAAsB,EAAE,eAAe,CAAC;IACxC,0BAA0B,EAAE,eAAe,CAAC;IAG5C,eAAe,EAAE,QAAQ,CAAC;IAC1B,eAAe,EAAE,QAAQ,CAAC;IAU1B;4CACwC;IACxC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,yEAAyE;IACzE,gCAAgC,CAAC,EAAE,MAAM,CAAC;IAC1C,8EAA8E;IAC9E,kCAAkC,CAAC,EAAE,MAAM,CAAC;IAC5C,wDAAwD;IACxD,kCAAkC,CAAC,EAAE,MAAM,CAAC;IAC5C,mEAAmE;IACnE,sCAAsC,CAAC,EAAE,MAAM,CAAC;IAOhD;;;;;;;OAOG;IACH,QAAQ,EAAE;QACR,iBAAiB,EAAE,MAAM,GAAG,gBAAgB,CAAC;QAC7C,YAAY,EAAE,OAAO,CAAC;KACvB,CAAC;IACF;;;;OAIG;IACH,2BAA2B,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC3D,yFAAyF;IACzF,2BAA2B,EAAE,MAAM,EAAE,CAAC;IACtC,gFAAgF;IAChF,0BAA0B,EAAE,MAAM,CAAC;IACnC;;;OAGG;IACH,gCAAgC,EAAE,MAAM,CAAC;IACzC;;;;;OAKG;IACH,iBAAiB,EAAE,iBAAiB,CAAC;IAUrC;;;OAGG;IACH,KAAK,EAAE;QACL;;;WAGG;QACH,QAAQ,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1D;;;WAGG;QACH,SAAS,EAAE,MAAM,CAAC;QAClB;;;;WAIG;QACH,UAAU,EAAE;YAAE,YAAY,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/E;;;;WAIG;QACH,SAAS,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QACjE;;;WAGG;QACH,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB;;;;;;WAMG;QACH,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACnE;;;;WAIG;QACH,eAAe,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;QACzC;;;WAGG;QACH,gBAAgB,EAAE,MAAM,CAAC;QACzB;;;;;WAKG;QACH,kBAAkB,EAAE,MAAM,CAAC;QAC3B;;;;;;WAMG;QACH,aAAa,EAAE,MAAM,CAAC;QACtB;;;;;WAKG;QACH,WAAW,EAAE;YACX,4EAA4E;YAC5E,UAAU,EAAE,MAAM,CAAC;YACnB,sEAAsE;YACtE,QAAQ,EAAE,MAAM,CAAC;SAClB,CAAC;QACF;;;;;;WAMG;QACH,UAAU,EAAE;YACV,kGAAkG;YAClG,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,sFAAsF;YACtF,YAAY,EAAE,MAAM,CAAC;SACtB,CAAC;KACH,CAAC;CAEH;AAED;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAE7C;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,IAAI;IACpC,QAAQ,EAAE;QAAE,iBAAiB,EAAE,MAAM,GAAG,gBAAgB,CAAC;QAAC,YAAY,EAAE,OAAO,CAAA;KAAE,CAAC;IAClF,2BAA2B,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC3D,2BAA2B,EAAE,MAAM,EAAE,CAAC;IACtC,0BAA0B,EAAE,MAAM,CAAC;IACnC,gCAAgC,EAAE,MAAM,CAAC;IACzC,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CA4DA;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,IAAI;IAAE,KAAK,EAAE;QAC1C,QAAQ,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1D,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE;YAAE,YAAY,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/E,SAAS,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACnE,eAAe,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;QACzC,gBAAgB,EAAE,MAAM,CAAC;QACzB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QACtD,UAAU,EAAE;YAAE,YAAY,CAAC,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;KAC7D,CAAA;CAAE,CAwJF;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,GAAG,SAAS,GACtB,MAAM,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAkCxD;AA8FD,gEAAgE;AAChE,wBAAgB,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,EAAE,CAkB9C;AA0BD;;;;;;;GAOG;AACH,wBAAsB,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,CAiNrE"}

package/dist/env.js

@@ -8,12 +8,226 @@ import { DynamoKv, createDefaultDynamoClient } from "@de-otio/saas-foundation/kv
 import { S3Storage, createDefaultS3Client } from "@de-otio/saas-foundation/storage";
 import { SqsQueue, createDefaultSqsClient } from "@de-otio/saas-foundation/queue";
 import { resolveSecret, secretRef, } from "@de-otio/saas-foundation/secrets";
+import { PollTransport, NoopRealtimeTransport, InMemorySettingStore, CalmDeliveryResolver, resolveRealtimeTransport, } from "./lib/realtime/index.js";
 const stage = process.env.STAGE || "dev";
 function sqsUrl(queueName) {
     const base = process.env.SQS_ENDPOINT || `https://sqs.${process.env.AWS_REGION || "us-east-1"}.amazonaws.com`;
     const accountId = process.env.AWS_ACCOUNT_ID || "000000000000";
     return `${base}/${accountId}/${stage}-${queueName}`;
 }
+/**
+ * Track A — the RESERVED key-ring namespace. The client stores its wrapped-DEK
+ * bundle under this namespace; the server is blind to it (opaque ciphertext, no
+ * parsing). Always allowed, regardless of REALTIME_SETTING_NAMESPACES, so the
+ * key-ring works even when no other setting sync is opted in.
+ */
+export const KEYRING_NAMESPACE = "__keyring";
+/**
+ * Resolve the realtime config block + the default transport instance from
+ * process.env. Single-writer: this is the ONLY place that reads the REALTIME_*
+ * env vars. The default is `poll` with an in-memory store + the calm-delivery
+ * resolver — fully functional with zero infra. A consuming app overrides the
+ * transport via setRealtimeProvider() (resolved here).
+ *
+ * REALTIME_SETTING_NAMESPACES always includes the reserved `__keyring` namespace
+ * (Track A), independent of the deployment's opt-in allowlist.
+ */
+export function resolveRealtimeEnv() {
+    const transportKind = process.env.REALTIME_TRANSPORT === "appsync-events"
+        ? "appsync-events"
+        : "poll";
+    const realtimePush = process.env.REALTIME_PUSH_ENABLED === "true";
+    // Minor-protection re-engagement denylist (runtime config; default empty).
+    const reengagementTypes = new Set((process.env.REALTIME_REENGAGEMENT_TYPES ?? "")
+        .split(",")
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0));
+    const configured = (process.env.REALTIME_SETTING_NAMESPACES ?? "")
+        .split(",")
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0);
+    // Track A — RESERVED system namespace. `__keyring` holds the wrapped-DEK
+    // key-ring bundle and is ALWAYS allowed (the store treats it as opaque
+    // ciphertext — no parsing), independent of the deployment's opt-in allowlist.
+    const namespaces = configured.includes(KEYRING_NAMESPACE)
+        ? configured
+        : [...configured, KEYRING_NAMESPACE];
+    const maxBytesRaw = Number.parseInt(process.env.REALTIME_SETTING_MAX_BYTES ?? "", 10);
+    const maxBytes = Number.isFinite(maxBytesRaw) && maxBytesRaw > 0
+        ? maxBytesRaw
+        : 65536; // 64 KiB default cap
+    const retentionRaw = Number.parseInt(process.env.REALTIME_CONN_LOG_RETENTION_DAYS ?? "", 10);
+    const connLogRetentionDays = Number.isFinite(retentionRaw) && retentionRaw > 0 ? retentionRaw : 7;
+    // Default transport: in-memory store + calm-delivery resolver. Skybber injects
+    // a push transport. Core never constructs an AppSync transport —
+    // "appsync-events" without an injected provider falls back to noop.
+    const settingStore = new InMemorySettingStore();
+    const policyResolver = new CalmDeliveryResolver({ reengagementTypes });
+    const fallback = transportKind === "appsync-events"
+        ? new NoopRealtimeTransport(policyResolver)
+        : new PollTransport(settingStore, policyResolver);
+    const realtimeTransport = resolveRealtimeTransport(fallback);
+    return {
+        features: { realtimeTransport: transportKind, realtimePush },
+        REALTIME_REENGAGEMENT_TYPES: reengagementTypes,
+        REALTIME_SETTING_NAMESPACES: namespaces,
+        REALTIME_SETTING_MAX_BYTES: maxBytes,
+        REALTIME_CONN_LOG_RETENTION_DAYS: connLogRetentionDays,
+        realtimeTransport,
+    };
+}
+/**
+ * Resolve the media config block from process.env.
+ *
+ * Single-writer: this is the ONLY place that reads the MEDIA_* env vars.
+ * Threshold-secrecy invariant (CLAUDE.md rule 8): no cap / rate-limit /
+ * threshold *value* is compiled in. Defaults are conservative dev-safe
+ * values only; the consumer injects operative values via SSM/env vars.
+ *
+ * Absence of a threshold entry ⇒ fail-closed (treated as "review" by the gate).
+ */
+export function resolveMediaEnv() {
+    // --- maxBytes: conservative dev defaults (10 MiB image, 100 MiB video/audio) ---
+    const parseBytes = (raw, fallback) => {
+        const n = Number.parseInt(raw ?? "", 10);
+        return Number.isFinite(n) && n > 0 ? n : fallback;
+    };
+    const maxBytesImage = parseBytes(process.env.MEDIA_MAX_BYTES_IMAGE, 10 * 1024 * 1024);
+    const maxBytesVideo = parseBytes(process.env.MEDIA_MAX_BYTES_VIDEO, 100 * 1024 * 1024);
+    const maxBytesAudio = parseBytes(process.env.MEDIA_MAX_BYTES_AUDIO, 100 * 1024 * 1024);
+    // --- maxPixels: decompression-bomb guard for sharp(limitInputPixels) ---
+    const maxPixelsRaw = Number.parseInt(process.env.MEDIA_MAX_PIXELS ?? "", 10);
+    // 25 MP dev default — conservative; real limit injected via env
+    const maxPixels = Number.isFinite(maxPixelsRaw) && maxPixelsRaw > 0
+        ? maxPixelsRaw
+        : 25_000_000;
+    // --- rate limits (requests per minute; conservative dev defaults) ---
+    const parseRateLimit = (raw, fallback) => {
+        const n = Number.parseInt(raw ?? "", 10);
+        return Number.isFinite(n) && n > 0 ? n : fallback;
+    };
+    const uploadPerMin = parseRateLimit(process.env.MEDIA_RATE_UPLOAD_PER_MIN, 10);
+    const batchPerMin = parseRateLimit(process.env.MEDIA_RATE_BATCH_PER_MIN, 5);
+    const servePerMin = parseRateLimit(process.env.MEDIA_RATE_SERVE_PER_MIN, 60);
+    // --- MIME allowlists: narrow safe dev defaults; consumer widens as needed ---
+    const parseJsonArray = (raw, fallback) => {
+        if (!raw)
+            return fallback;
+        try {
+            const parsed = JSON.parse(raw);
+            if (Array.isArray(parsed) && parsed.every((x) => typeof x === "string")) {
+                return parsed;
+            }
+        }
+        catch {
+            // Malformed JSON → fail-closed: use fallback
+        }
+        return fallback;
+    };
+    const allowlistImage = parseJsonArray(process.env.MEDIA_ALLOWLIST_IMAGE_JSON, ["image/jpeg", "image/png", "image/webp", "image/gif"]);
+    const allowlistVideo = parseJsonArray(process.env.MEDIA_ALLOWLIST_VIDEO_JSON, ["video/mp4"]);
+    const allowlistAudio = parseJsonArray(process.env.MEDIA_ALLOWLIST_AUDIO_JSON, ["audio/mpeg", "audio/mp4"]);
+    // --- presets: derivative variant identifiers (empty = no derivatives in P0a) ---
+    const presets = parseJsonArray(process.env.MEDIA_PRESETS_JSON, []);
+    // --- thresholds: fail-closed; NO default numeric values ---
+    // Absence of a key ⇒ the moderation gate treats the category as "review".
+    // Real operative numbers live in the consumer's SSM; the public tarball
+    // must never contain a compiled threshold literal (threshold-secrecy invariant).
+    const thresholds = parseMediaThresholds(process.env.MEDIA_THRESHOLDS_JSON);
+    // --- canonicalFormat: the sharp output format for the re-encode pipeline ---
+    const rawFormat = process.env.MEDIA_CANONICAL_FORMAT ?? "jpeg";
+    const canonicalFormat = rawFormat === "png" || rawFormat === "webp" ? rawFormat : "jpeg";
+    // --- canonicalQuality: JPEG/WebP output quality (1-100) ---
+    const rawQuality = Number.parseInt(process.env.MEDIA_CANONICAL_QUALITY ?? "", 10);
+    const canonicalQuality = Number.isFinite(rawQuality) && rawQuality >= 1 && rawQuality <= 100
+        ? rawQuality
+        : 85; // Conservative dev default
+    // --- maxDurationSeconds: video clip cap ---
+    const maxDurationSecondsRaw = Number.parseInt(process.env.MEDIA_MAX_DURATION_SECONDS ?? "", 10);
+    // 60 s conservative dev default; consumer injects operative value via env.
+    const maxDurationSeconds = Number.isFinite(maxDurationSecondsRaw) && maxDurationSecondsRaw > 0
+        ? maxDurationSecondsRaw
+        : 60;
+    // --- reviewRateCap: per-tenant REVIEW-generating upload cap ---
+    const reviewRateCapRaw = Number.parseInt(process.env.MEDIA_REVIEW_RATE_CAP ?? "", 10);
+    // 20 conservative dev default; consumer injects operative value via env.
+    const reviewRateCap = Number.isFinite(reviewRateCapRaw) && reviewRateCapRaw > 0
+        ? reviewRateCapRaw
+        : 20;
+    // --- uploadQuota: per-tenant object count + byte ceiling ---
+    const quotaMaxObjectsRaw = Number.parseInt(process.env.MEDIA_QUOTA_MAX_OBJECTS ?? "", 10);
+    const quotaMaxObjects = Number.isFinite(quotaMaxObjectsRaw) && quotaMaxObjectsRaw > 0
+        ? quotaMaxObjectsRaw
+        : 1000; // 1 000 objects dev default
+    const quotaMaxBytesRaw = Number.parseInt(process.env.MEDIA_QUOTA_MAX_BYTES ?? "", 10);
+    const quotaMaxBytes = Number.isFinite(quotaMaxBytesRaw) && quotaMaxBytesRaw > 0
+        ? quotaMaxBytesRaw
+        : 1024 * 1024 * 1024; // 1 GiB dev default
+    // --- transcribe config ---
+    // outputBucket has no default (absent ⇒ AUDIO track cannot submit jobs).
+    const transcribeOutputBucket = process.env.MEDIA_TRANSCRIBE_OUTPUT_BUCKET || undefined;
+    const rawLanguageCode = (process.env.MEDIA_TRANSCRIBE_LANGUAGE_CODE ?? "").trim();
+    const transcribeLanguageCode = rawLanguageCode.length > 0 ? rawLanguageCode : "en-US";
+    return {
+        media: {
+            maxBytes: { image: maxBytesImage, video: maxBytesVideo, audio: maxBytesAudio },
+            maxPixels,
+            rateLimits: { uploadPerMin, batchPerMin, servePerMin },
+            allowlist: { image: allowlistImage, video: allowlistVideo, audio: allowlistAudio },
+            presets,
+            thresholds,
+            canonicalFormat,
+            canonicalQuality,
+            maxDurationSeconds,
+            reviewRateCap,
+            uploadQuota: { maxObjects: quotaMaxObjects, maxBytes: quotaMaxBytes },
+            transcribe: { outputBucket: transcribeOutputBucket, languageCode: transcribeLanguageCode },
+        },
+    };
+}
+/**
+ * Parse MEDIA_THRESHOLDS_JSON into a validated threshold map.
+ *
+ * Only entries whose `review` and `quarantine` values are numbers in [0, 1] are
+ * accepted. Out-of-range entries are silently dropped — an invalid threshold is
+ * treated as absent, which ⇒ fail-closed (review). This guards against a
+ * misconfigured value accidentally opening the gate.
+ *
+ * Exported for unit testing.
+ */
+export function parseMediaThresholds(raw) {
+    if (!raw)
+        return {};
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return {};
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        return {};
+    }
+    const result = {};
+    for (const [category, value] of Object.entries(parsed)) {
+        if (typeof value === "object" &&
+            value !== null &&
+            !Array.isArray(value) &&
+            typeof value.review === "number" &&
+            typeof value.quarantine === "number" &&
+            value.review >= 0 &&
+            value.review <= 1 &&
+            value.quarantine >= 0 &&
+            value.quarantine <= 1) {
+            result[category] = {
+                review: value.review,
+                quarantine: value.quarantine,
+            };
+        }
+        // Out-of-range or malformed entries are dropped (fail-closed)
+    }
+    return result;
+}
 /**
  * Assemble a Postgres URL from Secrets Manager at runtime.
  *
@@ -169,6 +383,13 @@ export async function buildEnv(context) {
     // NOT write it to process.env so it can't leak through env-var exposure.
     const databaseUrl = await resolveDatabaseUrl();
     return {
+        // Realtime transport seam: resolveRealtimeEnv() reads the REALTIME_* vars
+        // and selects the default (poll/noop) transport; Skybber overrides via
+        // setRealtimeProvider() before serving.
+        ...resolveRealtimeEnv(),
+        // Media config seam: resolveMediaEnv() reads all MEDIA_* vars; no compiled
+        // threshold values ship in the tarball (threshold-secrecy invariant).
+        ...resolveMediaEnv(),
         DATABASE_URL: databaseUrl,
         DATABASE_URL_CN: process.env.DATABASE_URL_CN,
         DIRECT_URL: process.env.DIRECT_URL,

package/dist/env.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAClF,OAAO,EACL,aAAa,EACb,SAAS,GAEV,MAAM,kCAAkC,CAAC;AAS1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC;AAEzC,SAAS,MAAM,CAAC,SAAiB;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,eAAe,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW,gBAAgB,CAAC;IAC9G,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,cAAc,CAAC;IAC/D,OAAO,GAAG,IAAI,IAAI,SAAS,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;AACtD,CAAC;AAyOD;;;;;;;;GAQG;AACH,IAAI,iBAAqC,CAAC;AAE1C,KAAK,UAAU,kBAAkB;IAC/B,IAAI,iBAAiB;QAAE,OAAO,iBAAiB,CAAC;IAEhD,gFAAgF;IAChF,iFAAiF;IACjF,sDAAsD;IACtD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAC7C,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,oEAAoE;IACpE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC5C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,cAAc,CAAC;QACxD,MAAM,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAClE,iCAAiC,CAClC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,IAAI,qBAAqB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CACnD,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,4BAA4B,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,oBAAoB,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QACzC,MAAM,MAAM,GAAI,MAAM,CAAC,MAA6B,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;QAEzF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,iDAAiD,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,sDAAsD,IAAI,GAAG,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,GAAG,CAAC,CAAC;QAC9E,CAAC;QAED,iBAAiB,GAAG,gBAAgB,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;QACjG,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,8EAA8E;IAC9E,sEAAsE;IACtE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;IAChD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,6GAA6G,CAC9G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,yDAAyD,IAAI,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,iBAAiB,GAAG,gBAAgB,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;IACjG,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,WAAW,CAAC,GAAQ;IAClC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;SAAM,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,gBAAgB,CAC7B,QAA4B,EAC5B,GAAuB,EACvB,OAAwB;IAExB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC;IAClD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,KAAK,IAAI,OAAO,QAAQ,CAAC;IACjF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,GAAG,KAAK,IAAI,OAAO,UAAU,CAAC;IACvF,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,yBAAyB,EAAE,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,KAAK,UAAU,CAAC;IAErE,yEAAyE;IACzE,8EAA8E;IAC9E,gFAAgF;IAChF,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAC1C,OAAO,CAAC,GAAG,CAAC,cAAc,EAC1B,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAC9B,OAAO,CACR,CAAC;IACF,MAAM,qBAAqB,GAAG,MAAM,gBAAgB,CAClD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EACnC,OAAO,CAAC,GAAG,CAAC,2BAA2B,EACvC,OAAO,CACR,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,gBAAgB,CACzC,OAAO,CAAC,GAAG,CAAC,cAAc,EAC1B,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAC9B,OAAO,CACR,CAAC;IAEF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,uEAAuE;QACvE,MAAM,IAAI,KAAK,CACb,iEAAiE;YAC/D,2CAA2C,CAC9C,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAClE,MAAM,EAAE,GAAG,CAAC,SAAiB,EAAE,EAAE,CAC/B,IAAI,QAAQ,CAAC,YAAY,EAAE;QACzB,SAAS,EAAE,WAAW;QACtB,SAAS;QACT,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC;IAEL,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,MAAM,WAAW,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAE/C,OAAO;QACL,YAAY,EAAE,WAAW;QACzB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAC5C,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;QAClC,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,8BAA8B,EAAE,OAAO,CAAC,GAAG,CAAC,8BAA8B;QAC1E,6BAA6B,EAAE,OAAO,CAAC,GAAG,CAAC,6BAA6B;QACxE,wBAAwB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QAE9D,OAAO;QACP,cAAc,EAAE,aAAa;QAC7B,uBAAuB,EAAE,qBAAqB;QAC9C,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QACtC,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QACtD,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACxD,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;QACnF,wBAAwB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QAC9D,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAEtD,6CAA6C;QAC7C,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB;QAC5D,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAC1D,yBAAyB,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;QAChE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;QACpD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC9C,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QACtD,2BAA2B,EACzB,OAAO,CAAC,GAAG,CAAC,2BAA2B;YACvC,sCAAsC;QAExC,WAAW;QACX,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QACtC,wBAAwB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QAC9D,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAC5C,2BAA2B,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;QACpE,yBAAyB,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;QAEhE,kBAAkB;QAClB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAC5C,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACxD,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAElD,aAAa;QACb,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;QAClC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO;QAC5B,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAC5C,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QACtD,wEAAwE;QACxE,4CAA4C;QAC5C,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM;QAE/D,mEAAmE;QACnE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;QAExC,MAAM;QACN,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAC5C,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1C,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;QAExC,SAAS;QACT,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAC1D,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAuE;QAC3G,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI;QAClD,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACxD,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAE1D,gBAAgB;QAChB,cAAc,EAAE,YAAY;QAC5B,4BAA4B,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B;QACtE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAClD,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAEtD,QAAQ;QACR,aAAa,EAAG,OAAO,CAAC,GAAG,CAAC,aAAqB,IAAI,SAAS;QAC9D,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QACtD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;QAClC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;QACnF,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1C,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACxD,yBAAyB,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;QAChE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1C,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QACtD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAClD,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1C,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAElD,QAAQ;QACR,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAEtD,yEAAyE;QACzE,2BAA2B,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;QACpE,wCAAwC;QAExC,kBAAkB;QAClB,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM;QAClE,wBAAwB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,KAAK;QACvE,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM;QACtE,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,IAAI;QAClE,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,GAAG;QACnE,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,GAAG;QAE7D,aAAa;QACb,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ;QAC5D,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;QAClC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO;QAC/C,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS;QAChC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ;QAC9B,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;QAClB,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1C,KAAK,EAAE,KAAK;QAEZ,MAAM;QACN,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;QAClC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1C,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;QAExD,wCAAwC;QACxC,MAAM,EAAE,SAAS;QAEjB,gCAAgC;QAChC,aAAa,EAAE,EAAE,CAAC,WAAW,CAAC;QAC9B,sBAAsB,EAAE,EAAE,CAAC,SAAS,CAAC;QACrC,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC;QACzB,mBAAmB,EAAE,EAAE,CAAC,aAAa,CAAC;QACtC,aAAa,EAAE,EAAE,CAAC,MAAM,CAAC;QACzB,mBAAmB,EAAE,EAAE,CAAC,YAAY,CAAC;QACrC,WAAW,EAAE,EAAE,CAAC,UAAU,CAAC;QAC3B,qBAAqB,EAAE,EAAE,CAAC,aAAa,CAAC;QACxC,iBAAiB,EAAE,EAAE,CAAC,UAAU,CAAC;QACjC,YAAY,EAAE,EAAE,CAAC,WAAW,CAAC;QAC7B,cAAc,EAAE,EAAE,CAAC,QAAQ,CAAC;QAC5B,cAAc,EAAE,EAAE,CAAC,QAAQ,CAAC;QAC5B,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC;QAC1B,oBAAoB,EAAE,EAAE,CAAC,SAAS,CAAC;QACnC,cAAc,EAAE,EAAE,CAAC,aAAa,CAAC;QAEjC,aAAa;QACb,YAAY,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAC5D,oBAAoB,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACvE,sBAAsB,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC3E,gBAAgB,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAC/D,sBAAsB,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC3E,0BAA0B,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAEnF,4BAA4B;QAC5B,eAAe,EAAE,IAAI,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC;QACrD,eAAe,EAAE,IAAI,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC;KACxD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAClF,OAAO,EACL,aAAa,EACb,SAAS,GAEV,MAAM,kCAAkC,CAAC;AAU1C,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC;AAEzC,SAAS,MAAM,CAAC,SAAiB;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,eAAe,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW,gBAAgB,CAAC;IAC9G,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,cAAc,CAAC;IAC/D,OAAO,GAAG,IAAI,IAAI,SAAS,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;AACtD,CAAC;AAuXD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAE7C;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB;IAQhC,MAAM,aAAa,GACjB,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,gBAAgB;QACjD,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,MAAM,CAAC;IACb,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,MAAM,CAAC;IAElE,2EAA2E;IAC3E,MAAM,iBAAiB,GAAkC,IAAI,GAAG,CAC9D,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE,CAAC;SAC5C,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAuB,CACrD,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE,CAAC;SAC/D,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,yEAAyE;IACzE,uEAAuE;IACvE,8EAA8E;IAC9E,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACvD,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,CAAC,GAAG,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAEvC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CACjC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,EAC5C,EAAE,CACH,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC;QAC9D,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB;IAEhC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAClC,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,EAAE,EAClD,EAAE,CACH,CAAC;IACF,MAAM,oBAAoB,GACxB,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvE,+EAA+E;IAC/E,iEAAiE;IACjE,oEAAoE;IACpE,MAAM,YAAY,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAChD,MAAM,cAAc,GAAG,IAAI,oBAAoB,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GACZ,aAAa,KAAK,gBAAgB;QAChC,CAAC,CAAC,IAAI,qBAAqB,CAAC,cAAc,CAAC;QAC3C,CAAC,CAAC,IAAI,aAAa,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACtD,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAE7D,OAAO;QACL,QAAQ,EAAE,EAAE,iBAAiB,EAAE,aAAa,EAAE,YAAY,EAAE;QAC5D,2BAA2B,EAAE,iBAAiB;QAC9C,2BAA2B,EAAE,UAAU;QACvC,0BAA0B,EAAE,QAAQ;QACpC,gCAAgC,EAAE,oBAAoB;QACtD,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe;IAc7B,kFAAkF;IAClF,MAAM,UAAU,GAAG,CAAC,GAAuB,EAAE,QAAgB,EAAU,EAAE;QACvE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACpD,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,UAAU,CAC9B,OAAO,CAAC,GAAG,CAAC,qBAAqB,EACjC,EAAE,GAAG,IAAI,GAAG,IAAI,CACjB,CAAC;IACF,MAAM,aAAa,GAAG,UAAU,CAC9B,OAAO,CAAC,GAAG,CAAC,qBAAqB,EACjC,GAAG,GAAG,IAAI,GAAG,IAAI,CAClB,CAAC;IACF,MAAM,aAAa,GAAG,UAAU,CAC9B,OAAO,CAAC,GAAG,CAAC,qBAAqB,EACjC,GAAG,GAAG,IAAI,GAAG,IAAI,CAClB,CAAC;IAEF,0EAA0E;IAC1E,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAClC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,EAClC,EAAE,CACH,CAAC;IACF,gEAAgE;IAChE,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC;QAC/C,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,UAAU,CAAC;IAEjB,uEAAuE;IACvE,MAAM,cAAc,GAAG,CAAC,GAAuB,EAAE,QAAgB,EAAU,EAAE;QAC3E,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACpD,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC,CAAC,CAAC;IAC5E,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;IAE7E,+EAA+E;IAC/E,MAAM,cAAc,GAAG,CAAC,GAAuB,EAAE,QAAkB,EAAY,EAAE;QAC/E,IAAI,CAAC,GAAG;YAAE,OAAO,QAAQ,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACxE,OAAO,MAAkB,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,cAAc,CACnC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EACtC,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC,CACvD,CAAC;IACF,MAAM,cAAc,GAAG,cAAc,CACnC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EACtC,CAAC,WAAW,CAAC,CACd,CAAC;IACF,MAAM,cAAc,GAAG,cAAc,CACnC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EACtC,CAAC,YAAY,EAAE,WAAW,CAAC,CAC5B,CAAC;IAEF,kFAAkF;IAClF,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAEnE,6DAA6D;IAC7D,0EAA0E;IAC1E,wEAAwE;IACxE,iFAAiF;IACjF,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAE3E,8EAA8E;IAC9E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,MAAM,CAAC;IAC/D,MAAM,eAAe,GACnB,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAEnE,6DAA6D;IAC7D,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,MAAM,gBAAgB,GACpB,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,IAAI,UAAU,IAAI,GAAG;QACjE,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,EAAE,CAAC,CAAC,2BAA2B;IAErC,6CAA6C;IAC7C,MAAM,qBAAqB,GAAG,MAAM,CAAC,QAAQ,CAC3C,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,EAC5C,EAAE,CACH,CAAC;IACF,2EAA2E;IAC3E,MAAM,kBAAkB,GACtB,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,qBAAqB,GAAG,CAAC;QACjE,CAAC,CAAC,qBAAqB;QACvB,CAAC,CAAC,EAAE,CAAC;IAET,iEAAiE;IACjE,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CACtC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,EACvC,EAAE,CACH,CAAC;IACF,yEAAyE;IACzE,MAAM,aAAa,GACjB,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC;QACvD,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,EAAE,CAAC;IAET,8DAA8D;IAC9D,MAAM,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CACxC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,EACzC,EAAE,CACH,CAAC;IACF,MAAM,eAAe,GACnB,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC;QAC3D,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,IAAI,CAAC,CAAC,4BAA4B;IAExC,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CACtC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,EACvC,EAAE,CACH,CAAC;IACF,MAAM,aAAa,GACjB,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC;QACvD,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,oBAAoB;IAE9C,4BAA4B;IAC5B,yEAAyE;IACzE,MAAM,sBAAsB,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,SAAS,CAAC;IAEvF,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClF,MAAM,sBAAsB,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;IAEtF,OAAO;QACL,KAAK,EAAE;YACL,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE;YAC9E,SAAS;YACT,UAAU,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE;YACtD,SAAS,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE;YAClF,OAAO;YACP,UAAU;YACV,eAAe;YACf,gBAAgB;YAChB,kBAAkB;YAClB,aAAa;YACb,WAAW,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,aAAa,EAAE;YACrE,UAAU,EAAE,EAAE,YAAY,EAAE,sBAAsB,EAAE,YAAY,EAAE,sBAAsB,EAAE;SAC3F;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAuB;IAEvB,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAA2D,EAAE,CAAC;IAC1E,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAC5C,MAAiC,CAClC,EAAE,CAAC;QACF,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACrB,OAAQ,KAAa,CAAC,MAAM,KAAK,QAAQ;YACzC,OAAQ,KAAa,CAAC,UAAU,KAAK,QAAQ;YAC5C,KAAa,CAAC,MAAM,IAAI,CAAC;YACzB,KAAa,CAAC,MAAM,IAAI,CAAC;YACzB,KAAa,CAAC,UAAU,IAAI,CAAC;YAC7B,KAAa,CAAC,UAAU,IAAI,CAAC,EAC9B,CAAC;YACD,MAAM,CAAC,QAAQ,CAAC,GAAG;gBACjB,MAAM,EAAG,KAAa,CAAC,MAAgB;gBACvC,UAAU,EAAG,KAAa,CAAC,UAAoB;aAChD,CAAC;QACJ,CAAC;QACD,8DAA8D;IAChE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,IAAI,iBAAqC,CAAC;AAE1C,KAAK,UAAU,kBAAkB;IAC/B,IAAI,iBAAiB;QAAE,OAAO,iBAAiB,CAAC;IAEhD,gFAAgF;IAChF,iFAAiF;IACjF,sDAAsD;IACtD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAC7C,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,oEAAoE;IACpE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC5C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,cAAc,CAAC;QACxD,MAAM,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAClE,iCAAiC,CAClC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,IAAI,qBAAqB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CACnD,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,4BAA4B,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,oBAAoB,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QACzC,MAAM,MAAM,GAAI,MAAM,CAAC,MAA6B,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;QAEzF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,iDAAiD,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,sDAAsD,IAAI,GAAG,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,GAAG,CAAC,CAAC;QAC9E,CAAC;QAED,iBAAiB,GAAG,gBAAgB,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;QACjG,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,8EAA8E;IAC9E,sEAAsE;IACtE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;IAChD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,6GAA6G,CAC9G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,yDAAyD,IAAI,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,iBAAiB,GAAG,gBAAgB,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;IACjG,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,WAAW,CAAC,GAAQ;IAClC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;SAAM,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,gBAAgB,CAC7B,QAA4B,EAC5B,GAAuB,EACvB,OAAwB;IAExB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC;IAClD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,KAAK,IAAI,OAAO,QAAQ,CAAC;IACjF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,GAAG,KAAK,IAAI,OAAO,UAAU,CAAC;IACvF,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,yBAAyB,EAAE,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,KAAK,UAAU,CAAC;IAErE,yEAAyE;IACzE,8EAA8E;IAC9E,gFAAgF;IAChF,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAC1C,OAAO,CAAC,GAAG,CAAC,cAAc,EAC1B,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAC9B,OAAO,CACR,CAAC;IACF,MAAM,qBAAqB,GAAG,MAAM,gBAAgB,CAClD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EACnC,OAAO,CAAC,GAAG,CAAC,2BAA2B,EACvC,OAAO,CACR,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,gBAAgB,CACzC,OAAO,CAAC,GAAG,CAAC,cAAc,EAC1B,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAC9B,OAAO,CACR,CAAC;IAEF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,uEAAuE;QACvE,MAAM,IAAI,KAAK,CACb,iEAAiE;YAC/D,2CAA2C,CAC9C,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAClE,MAAM,EAAE,GAAG,CAAC,SAAiB,EAAE,EAAE,CAC/B,IAAI,QAAQ,CAAC,YAAY,EAAE;QACzB,SAAS,EAAE,WAAW;QACtB,SAAS;QACT,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC;IAEL,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,MAAM,WAAW,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAE/C,OAAO;QACL,0EAA0E;QAC1E,uEAAuE;QACvE,wCAAwC;QACxC,GAAG,kBAAkB,EAAE;QACvB,2EAA2E;QAC3E,sEAAsE;QACtE,GAAG,eAAe,EAAE;QACpB,YAAY,EAAE,WAAW;QACzB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAC5C,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;QAClC,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,8BAA8B,EAAE,OAAO,CAAC,GAAG,CAAC,8BAA8B;QAC1E,6BAA6B,EAAE,OAAO,CAAC,GAAG,CAAC,6BAA6B;QACxE,wBAAwB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QAE9D,OAAO;QACP,cAAc,EAAE,aAAa;QAC7B,uBAAuB,EAAE,qBAAqB;QAC9C,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QACtC,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QACtD,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACxD,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;QACnF,wBAAwB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QAC9D,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAEtD,6CAA6C;QAC7C,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB;QAC5D,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAC1D,yBAAyB,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;QAChE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;QACpD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC9C,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QACtD,2BAA2B,EACzB,OAAO,CAAC,GAAG,CAAC,2BAA2B;YACvC,sCAAsC;QAExC,WAAW;QACX,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QACtC,wBAAwB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QAC9D,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAC5C,2BAA2B,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;QACpE,yBAAyB,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;QAEhE,kBAAkB;QAClB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAC5C,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACxD,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAElD,aAAa;QACb,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;QAClC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO;QAC5B,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAC5C,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QACtD,wEAAwE;QACxE,4CAA4C;QAC5C,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM;QAE/D,mEAAmE;QACnE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;QAExC,MAAM;QACN,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAC5C,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1C,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;QAExC,SAAS;QACT,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAC1D,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAuE;QAC3G,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI;QAClD,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACxD,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAE1D,gBAAgB;QAChB,cAAc,EAAE,YAAY;QAC5B,4BAA4B,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B;QACtE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAClD,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAEtD,QAAQ;QACR,aAAa,EAAG,OAAO,CAAC,GAAG,CAAC,aAAqB,IAAI,SAAS;QAC9D,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QACtD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;QAClC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;QACnF,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1C,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACxD,yBAAyB,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;QAChE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1C,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QACtD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAClD,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1C,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAElD,QAAQ;QACR,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAEtD,yEAAyE;QACzE,2BAA2B,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;QACpE,wCAAwC;QAExC,kBAAkB;QAClB,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM;QAClE,wBAAwB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,KAAK;QACvE,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM;QACtE,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,IAAI;QAClE,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,GAAG;QACnE,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,GAAG;QAE7D,aAAa;QACb,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ;QAC5D,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;QAClC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO;QAC/C,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS;QAChC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ;QAC9B,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;QAClB,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1C,KAAK,EAAE,KAAK;QAEZ,MAAM;QACN,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;QAClC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1C,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;QAExD,wCAAwC;QACxC,MAAM,EAAE,SAAS;QAEjB,gCAAgC;QAChC,aAAa,EAAE,EAAE,CAAC,WAAW,CAAC;QAC9B,sBAAsB,EAAE,EAAE,CAAC,SAAS,CAAC;QACrC,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC;QACzB,mBAAmB,EAAE,EAAE,CAAC,aAAa,CAAC;QACtC,aAAa,EAAE,EAAE,CAAC,MAAM,CAAC;QACzB,mBAAmB,EAAE,EAAE,CAAC,YAAY,CAAC;QACrC,WAAW,EAAE,EAAE,CAAC,UAAU,CAAC;QAC3B,qBAAqB,EAAE,EAAE,CAAC,aAAa,CAAC;QACxC,iBAAiB,EAAE,EAAE,CAAC,UAAU,CAAC;QACjC,YAAY,EAAE,EAAE,CAAC,WAAW,CAAC;QAC7B,cAAc,EAAE,EAAE,CAAC,QAAQ,CAAC;QAC5B,cAAc,EAAE,EAAE,CAAC,QAAQ,CAAC;QAC5B,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC;QAC1B,oBAAoB,EAAE,EAAE,CAAC,SAAS,CAAC;QACnC,cAAc,EAAE,EAAE,CAAC,aAAa,CAAC;QAEjC,aAAa;QACb,YAAY,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAC5D,oBAAoB,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACvE,sBAAsB,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC3E,gBAAgB,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAC/D,sBAAsB,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC3E,0BAA0B,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAEnF,4BAA4B;QAC5B,eAAe,EAAE,IAAI,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC;QACrD,eAAe,EAAE,IAAI,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC;KACxD,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -5,4 +5,5 @@
  */
 export { startServer } from "./server.js";
 export { registerExtension, getExtension, getExtensions } from "./extensions.js";
+export { setRealtimeProvider } from "./lib/realtime/index.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/index.js

@@ -5,4 +5,7 @@
  */
 export { startServer } from "./server.js";
 export { registerExtension, getExtension, getExtensions } from "./extensions.js";
+// Realtime transport seam: a consuming app (e.g. Skybber) injects a concrete
+// transport (AppSync Events) before serving; core ships the poll/noop default.
+export { setRealtimeProvider } from "./lib/realtime/index.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACjF,6EAA6E;AAC7E,+EAA+E;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC"}