@de-otio/trellis 0.11.0 → 0.12.0

package/dist/lambda/media-processing-worker.js

@@ -1,60 +1,354 @@
-import { S3Client, GetObjectCommand, PutObjectCommand } from "@aws-sdk/client-s3";
+// media-processing-worker.ts — the P0b media-processing orchestration SHELL.
+//
+// This is the imperative shell over the pure functional-core media units. It is
+// NOT itself a functional-core unit: it performs I/O (object storage, transcode,
+// transcription, moderation, DB writes). BUT all of that I/O arrives through
+// INJECTED capability seams (TranscodePort / StoragePort / TranscribePort /
+// MediaModerationProvider) and a Prisma-shaped persistence port, so the
+// orchestration logic is exercised in unit tests against the B0 in-memory Mocks
+// — no real cloud, no real encoder, no real DB.
+//
+// Per the seam discipline (see lib/media/media-ports.ts and
+// lib/media/moderation-provider.ts): CORE ships the interfaces + mocks; the
+// consuming app (Skybber) injects the concrete cloud adapters at startup via
+// `setMediaProcessingDeps()`. Until they are injected, the handler fails CLOSED
+// (throws → SQS retry), never silently approves or drops work.
+//
+// Fail-closed posture, end to end:
+//   - A key that is not a well-formed `pending/{tenant}/{upload}` key is dropped
+//     (ack) and NEVER written under — the re-trigger-loop guard.
+//   - The tenant is re-derived FROM THE ROW, and the triggering key must equal
+//     pendingKey(rowTenant, uploadId); a mismatch is a hard reject (poison →
+//     REVIEW + ack), so a forged/odd key cannot make us moderate the wrong cas/.
+//   - Over-cap duration is poison → REVIEW + ack (no transcode attempted).
+//   - The worker ONLY starts moderation jobs + persists their jobIds; it never
+//     fetches verdicts (a separate poller owns fan-in). Moderation runs on the
+//     cleaned bytes at the STAGING key, NOT the raw pending upload — and the
+//     cleaned bytes are NOT written to cas/ here. cas/ is the CDN-served prefix,
+//     so it must only ever hold APPROVED cleaned bytes; the completion worker
+//     promotes staging -> cas/ on approval ("cleaned-staging, promote-on-approval").
+//   - classifyWorkerError() splits permanent media/payload defects (poison →
+//     REVIEW + ack, no DLQ loop) from transient infra faults (retryable → throw
+//     → SQS retry → DLQ + alert backstop).
 import { Logger } from "@aws-lambda-powertools/logger";
+import { createHash } from "node:crypto";
+import { pendingKey, casKey, isCasKeyError, } from "../lib/media/cas-keys.js";
+import { exceedsDurationCap } from "../lib/media/duration-cap.js";
+import { classifyWorkerError } from "../lib/media/classify-worker-error.js";
+// ---------------------------------------------------------------------------
+// Key parsing — pending/{tenantId}/{uploadId}
+// ---------------------------------------------------------------------------
+/**
+ * Parse a triggering key as a `pending/{tenantId}/{uploadId}` key, validating
+ * the FORM by round-tripping the parsed parts back through `pendingKey()`. A
+ * key only parses if rebuilding it from its parts yields the identical string —
+ * so a path-traversal payload, extra segments, or a malformed id can never pass
+ * (cas-keys.ts owns the anchored allowlists).
+ *
+ * @returns the {tenantId, uploadId} when the key is a canonical pending key,
+ *          or null for ANY other key (which the caller ack-drops; we never
+ *          write outputs under pending/, so a non-pending key is not our work).
+ */
+export function parsePendingKey(key) {
+    const parts = key.split("/");
+    if (parts.length !== 3 || parts[0] !== "pending") {
+        return null;
+    }
+    const tenantId = parts[1];
+    const uploadId = parts[2];
+    const rebuilt = pendingKey(tenantId, uploadId);
+    if (isCasKeyError(rebuilt) || rebuilt !== key) {
+        return null;
+    }
+    return { tenantId, uploadId };
+}
+// ---------------------------------------------------------------------------
+// S3-event-over-SQS extraction
+// ---------------------------------------------------------------------------
+/** Every object key referenced by one SQS record's S3 event notification. */
+export function extractObjectKeys(recordBody) {
+    const parsed = JSON.parse(recordBody);
+    const s3Records = parsed.Records ?? [];
+    const keys = [];
+    for (const r of s3Records) {
+        const raw = r?.s3?.object?.key;
+        if (typeof raw === "string") {
+            // S3 URL-encodes keys and uses '+' for spaces in notifications.
+            keys.push(decodeURIComponent(raw.replace(/\+/g, " ")));
+        }
+    }
+    return keys;
+}
+// ---------------------------------------------------------------------------
+// Typed errors the orchestration core throws internally
+// ---------------------------------------------------------------------------
+/** A permanent payload defect: the key did not match the row's tenant/upload. */
+class KeyTenantMismatchError extends Error {
+    constructor() {
+        // The name is in classify-worker-error's poison fragment set ("validation").
+        super("media key/tenant validation mismatch: triggering key does not match the row");
+        this.name = "ValidationError";
+    }
+}
+/** A permanent payload defect: the probed duration exceeds the configured cap. */
+class DurationCapExceededError extends Error {
+    constructor() {
+        super("media duration cap exceeded");
+        this.name = "DurationCapExceeded";
+    }
+}
+// ---------------------------------------------------------------------------
+// Orchestration core — testable against the B0 Mocks
+// ---------------------------------------------------------------------------
+/**
+ * Orchestrate processing for ONE already-extracted object key.
+ *
+ * Steps (every uncertainty fails closed; nothing here can yield APPROVED):
+ *  1. Reject any key that is not a canonical `pending/{tenant}/{upload}` key —
+ *     ack-drop it; outputs are NEVER written under pending/.
+ *  2. Load the MediaFile row by uploadId; re-derive tenant FROM THE ROW and
+ *     assert pendingKey(rowTenant, uploadId) === the triggering key. Mismatch
+ *     (or missing/uploadId-less row) is a hard reject → REVIEW + ack.
+ *  3. Probe duration; over-cap ⇒ poison ⇒ REVIEW + ack (no transcode).
+ *  4. Transcode-and-discard ⇒ cleaned bytes at the STAGING key (read back from
+ *     the cleaned key). The cleaned bytes are NOT written to cas/ here — cas/ is
+ *     the CDN-served prefix and must hold only APPROVED bytes (promotion happens
+ *     in the completion worker).
+ *  5. Hash the cleaned bytes ⇒ realHash; PERSIST {contentHash: realHash,
+ *     originalKey: casKey(tenant, realHash)} onto the row, replacing the
+ *     upload-time uploadId placeholder so the completion worker can derive the
+ *     promote target.
+ *  6. START moderation on the cleaned STAGING object (NOT the raw pending upload,
+ *     NOT a cas/ key) — moderation must run on EXACTLY the bytes that will be
+ *     served: provider.startVideoModeration ⇒ persist VISUAL job (+ threshold
+ *     snapshot); transcribe.startTranscription ⇒ persist AUDIO job (+ snapshot).
+ *     The worker only STARTS jobs + persists jobIds; it never fetches verdicts.
+ */
+export async function processObjectKey(triggeringKey, deps) {
+    try {
+        // --- 1. Pending-key form gate (re-trigger-loop guard). ---
+        const parsed = parsePendingKey(triggeringKey);
+        if (parsed === null) {
+            deps.logger.info("Dropping non-pending key (not our work)", {
+                key: triggeringKey,
+            });
+            return { disposition: "ack", reason: "non-pending-key" };
+        }
+        const { uploadId } = parsed;
+        // --- 2. Load row; re-derive tenant FROM THE ROW; assert key match. ---
+        const row = await deps.persistence.findMediaByUploadId(uploadId);
+        if (row === null || row.uploadId === null) {
+            // No row, or a row that lost its upload session — cannot certify this
+            // object. Permanent w.r.t. these bytes: fail closed to human review.
+            throw new KeyTenantMismatchError();
+        }
+        const rowTenant = row.tenantId;
+        const expectedKey = pendingKey(rowTenant, uploadId);
+        if (isCasKeyError(expectedKey) || expectedKey !== triggeringKey) {
+            // The triggering key's tenant segment disagrees with the owning tenant,
+            // OR the row's tenant is itself malformed. Either way: hard reject.
+            throw new KeyTenantMismatchError();
+        }
+        // --- 3. Duration cap (probe BEFORE transcoding — cost + abuse guard). ---
+        const probed = await deps.transcode.probeDurationSeconds(triggeringKey);
+        if (exceedsDurationCap(probed, deps.config.maxDurationSeconds)) {
+            throw new DurationCapExceededError();
+        }
+        // --- 4. Transcode-and-discard ⇒ cleaned bytes. ---
+        // The cleaned output is written to a transient staging key OUTSIDE pending/
+        // (so re-uploading the cleaned bytes can never re-trigger this worker).
+        const cleanedStagingKey = `processing/${rowTenant}/${uploadId}`;
+        const posterStagingKey = `processing/${rowTenant}/${uploadId}.poster`;
+        const transcodeResult = await deps.transcode.transcodeVideo({
+            inputPath: triggeringKey,
+            outputPath: cleanedStagingKey,
+            posterPath: posterStagingKey,
+            maxDurationSeconds: deps.config.maxDurationSeconds,
+        });
+        const cleanedStagingKeyOut = transcodeResult.cleanedPath;
+        const cleanedBytes = await deps.storage.getObject(cleanedStagingKeyOut);
+        // --- 5. Hash the CLEANED bytes ⇒ real content identity; persist it. ---
+        // We do NOT write the cleaned bytes to cas/ here: they already live at the
+        // STAGING key, and cas/ (the CDN-served prefix) must only ever hold APPROVED
+        // bytes. We persist the real hash + future serve key so the completion
+        // worker can promote staging -> cas/ on approval.
+        const contentHash = createHash("sha256").update(cleanedBytes).digest("hex");
+        const cleanedCasKey = casKey(rowTenant, contentHash);
+        if (isCasKeyError(cleanedCasKey)) {
+            // The hash/tenant failed the CAS allowlist — a permanent defect in our own
+            // derivation inputs (e.g. a malformed tenant that slipped the row check).
+            // Fail closed: route to review rather than serve un-addressable bytes.
+            throw new KeyTenantMismatchError();
+        }
+        // Replace the upload-time uploadId placeholder contentHash with the REAL
+        // hash and record the future serve key (cas/{tenant}/{hash}).
+        await deps.persistence.persistCleanedContent(row.id, {
+            contentHash,
+            originalKey: cleanedCasKey,
+        });
+        // --- 6. START moderation on the CLEANED STAGING object (the exact bytes ---
+        // that will be served), NOT the raw pending upload and NOT a cas/ key.
+        const stagingRef = { bucket: deps.bucket, key: cleanedStagingKeyOut };
+        const visual = await deps.moderation.startVideoModeration(stagingRef);
+        await deps.persistence.createModerationJob({
+            mediaId: row.id,
+            track: "VISUAL",
+            jobId: visual.jobId,
+            // Snapshot the CURRENT operative thresholds onto the job at submission.
+            thresholdSnapshot: deps.config.thresholds,
+        });
+        const audio = await deps.transcribe.startTranscription({
+            key: cleanedStagingKeyOut,
+            jobName: deps.newJobName(cleanedStagingKeyOut),
+        });
+        await deps.persistence.createModerationJob({
+            mediaId: row.id,
+            track: "AUDIO",
+            jobId: audio.jobId,
+            thresholdSnapshot: deps.config.thresholds,
+        });
+        deps.logger.info("Started per-track moderation jobs", {
+            mediaId: row.id,
+            stagingKey: cleanedStagingKeyOut,
+            casKey: cleanedCasKey,
+            visualJobId: visual.jobId,
+            audioJobId: audio.jobId,
+        });
+        return { disposition: "ack", reason: "started-moderation" };
+    }
+    catch (err) {
+        // Single classification point: poison ⇒ REVIEW + ack; retryable ⇒ fail.
+        const klass = classifyWorkerError(err);
+        if (klass === "poison") {
+            // Best-effort route to REVIEW. If we can identify the row, mark it; if we
+            // cannot (e.g. the failure was the row lookup itself), there is nothing to
+            // mark and the ack simply drops a message that would loop forever.
+            const reviewReason = await routePoisonToReview(triggeringKey, deps, err);
+            return { disposition: "ack", reason: reviewReason, poison: true };
+        }
+        deps.logger.error("Retryable media-processing fault — letting SQS retry", {
+            key: triggeringKey,
+            error: err,
+        });
+        return { disposition: "fail", reason: "retryable" };
+    }
+}
+/**
+ * Best-effort: drive the owning MediaFile to REVIEW for a poison failure. Never
+ * throws — a failure to mark must not convert a poison ack into an infinite
+ * retry. Returns an observability reason string.
+ */
+async function routePoisonToReview(triggeringKey, deps, cause) {
+    deps.logger.warn("Poison media — routing to REVIEW + ack", {
+        key: triggeringKey,
+        error: cause,
+    });
+    const parsed = parsePendingKey(triggeringKey);
+    if (parsed === null) {
+        return "poison-no-row";
+    }
+    try {
+        const row = await deps.persistence.findMediaByUploadId(parsed.uploadId);
+        if (row === null) {
+            return "poison-no-row";
+        }
+        await deps.persistence.markMediaForReview(row.id);
+        return "poison-review";
+    }
+    catch (markErr) {
+        deps.logger.error("Failed to mark poison media for REVIEW (acking anyway)", {
+            key: triggeringKey,
+            error: markErr,
+        });
+        return "poison-mark-failed";
+    }
+}
+/**
+ * Process one SQS record (which may carry several S3 object keys). The record
+ * fails (SQS retry) iff ANY of its keys produced a retryable fault; otherwise
+ * it is acked. Per-key poison is acked, never failed.
+ */
+export async function processRecord(record, deps) {
+    let keys;
+    try {
+        keys = extractObjectKeys(record.body);
+    }
+    catch (err) {
+        // A body we cannot even parse is a permanent payload defect (poison): a
+        // retry re-parses the same bytes to the same failure. Ack to avoid a loop.
+        deps.logger.warn("Unparseable SQS record body — acking as poison", {
+            messageId: record.messageId,
+            error: err,
+        });
+        return { disposition: "ack", reason: "unparseable-body", poison: true };
+    }
+    for (const key of keys) {
+        const outcome = await processObjectKey(key, deps);
+        if (outcome.disposition === "fail") {
+            // First retryable key fails the whole record; SQS redelivers it. Already-
+            // started keys are idempotent on the dedupe path (deriveDedupeKey).
+            return outcome;
+        }
+    }
+    return { disposition: "ack", reason: "record-complete" };
+}
+// ---------------------------------------------------------------------------
+// Deps injection seam (consuming app wires concrete adapters at startup)
+// ---------------------------------------------------------------------------
+let injectedDeps;
+/**
+ * Inject the concrete media-processing seams. The consuming app (Skybber) calls
+ * this once at Lambda cold start with its ffmpeg/MediaConvert TranscodePort, S3
+ * StoragePort, Transcribe TranscribePort, injected MediaModerationProvider, and
+ * a Prisma-backed MediaPersistencePort. Core ships NO concrete adapters.
+ */
+export function setMediaProcessingDeps(deps) {
+    injectedDeps = deps;
+}
+/** Test helper: clear injected deps between cases. */
+export function __resetMediaProcessingDeps() {
+    injectedDeps = undefined;
+}
 const logger = new Logger({ serviceName: "media-processing-worker" });
-const s3 = new S3Client({ region: process.env.AWS_REGION });
+/**
+ * The SQS entry point. Preserves `reportBatchItemFailures` semantics: only the
+ * messageIds whose records produced a retryable fault are returned as batch
+ * item failures; everything else (success / drop / poison→REVIEW) is acked by
+ * omission.
+ *
+ * If no concrete deps were injected, the handler fails CLOSED: it throws, so the
+ * whole batch is retried rather than silently dropped. An un-wired worker must
+ * never ack-drop real uploads.
+ */
 export const handler = async (event) => {
-    const failedIds = [];
+    if (injectedDeps === undefined) {
+        // Fail closed: no backend wired ⇒ retry the batch, never drop. The
+        // consuming app must call setMediaProcessingDeps() at startup.
+        logger.error("media-processing-worker invoked with no injected deps — refusing to" +
+            " process. Call setMediaProcessingDeps() at cold start.");
+        throw new Error("media-processing-worker: deps not injected");
+    }
+    const deps = injectedDeps;
+    const batchItemFailures = [];
     for (const record of event.Records) {
+        let outcome;
         try {
-            // S3 event notification comes via SQS
-            const s3Event = JSON.parse(record.body);
-            const s3Records = s3Event.Records || [];
-            for (const s3Record of s3Records) {
-                const bucket = s3Record.s3.bucket.name;
-                const key = decodeURIComponent(s3Record.s3.object.key.replace(/\+/g, " "));
-                if (!key.startsWith("originals/"))
-                    continue;
-                // Get original
-                const original = await s3.send(new GetObjectCommand({ Bucket: bucket, Key: key }));
-                const chunks = [];
-                for await (const chunk of original.Body) {
-                    chunks.push(chunk);
-                }
-                const buffer = Buffer.concat(chunks);
-                // Process with Sharp (must be installed as ARM64 binary)
-                // dynamic import to avoid bundling issues
-                const sharp = (await import("sharp")).default;
-                const hash = key.split("/").pop().replace(/\.[^.]+$/, "");
-                // Thumbnail: 300px WebP
-                const thumbnail = await sharp(buffer)
-                    .resize(300, 300, { fit: "cover" })
-                    .webp({ quality: 80 })
-                    .toBuffer();
-                // Optimized: 1200px WebP
-                const optimized = await sharp(buffer)
-                    .resize(1200, 1200, { fit: "inside", withoutEnlargement: true })
-                    .webp({ quality: 85 })
-                    .toBuffer();
-                await Promise.all([
-                    s3.send(new PutObjectCommand({
-                        Bucket: bucket, Key: `thumbnails/${hash}.webp`,
-                        Body: thumbnail, ContentType: "image/webp",
-                    })),
-                    s3.send(new PutObjectCommand({
-                        Bucket: bucket, Key: `optimized/${hash}.webp`,
-                        Body: optimized, ContentType: "image/webp",
-                    })),
-                ]);
-                logger.info("Media processed", { key, hash });
-            }
+            outcome = await processRecord(record, deps);
         }
         catch (err) {
-            logger.error("Media processing failed", { error: err, messageId: record.messageId });
-            failedIds.push(record.messageId);
+            // Defensive: processRecord is designed not to throw, but if it does, treat
+            // it as retryable (fail closed for retry; DLQ + alert is the backstop).
+            logger.error("Unexpected throw from processRecord — retrying record", {
+                messageId: record.messageId,
+                error: err,
+            });
+            batchItemFailures.push({ itemIdentifier: record.messageId });
+            continue;
+        }
+        if (outcome.disposition === "fail") {
+            batchItemFailures.push({ itemIdentifier: record.messageId });
         }
     }
-    if (failedIds.length > 0) {
-        return { batchItemFailures: failedIds.map((id) => ({ itemIdentifier: id })) };
-    }
+    return { batchItemFailures };
 };
 //# sourceMappingURL=media-processing-worker.js.map

package/dist/lambda/media-processing-worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"media-processing-worker.js","sourceRoot":"","sources":["../../src/lambda/media-processing-worker.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAEvD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC,CAAC;AAEtE,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,OAAO,GAAe,KAAK,EAAE,KAAK,EAAE,EAAE;IACjD,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,sCAAsC;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;YAExC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;gBACvC,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;gBAE3E,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;oBAAE,SAAS;gBAE5C,eAAe;gBACf,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;gBACnF,MAAM,MAAM,GAAiB,EAAE,CAAC;gBAChC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAiC,EAAE,CAAC;oBACrE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAErC,yDAAyD;gBACzD,0CAA0C;gBAC1C,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBAE3D,wBAAwB;gBACxB,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;qBAClC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;qBAClC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;qBACrB,QAAQ,EAAE,CAAC;gBAEd,yBAAyB;gBACzB,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;qBAClC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;qBAC/D,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;qBACrB,QAAQ,EAAE,CAAC;gBAEd,MAAM,OAAO,CAAC,GAAG,CAAC;oBAChB,EAAE,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;wBAC3B,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,IAAI,OAAO;wBAC9C,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY;qBAC3C,CAAC,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;wBAC3B,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,IAAI,OAAO;wBAC7C,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY;qBAC3C,CAAC,CAAC;iBACJ,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YACrF,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,iBAAiB,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;IAChF,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"file":"media-processing-worker.js","sourceRoot":"","sources":["../../src/lambda/media-processing-worker.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,gFAAgF;AAChF,iFAAiF;AACjF,6EAA6E;AAC7E,4EAA4E;AAC5E,wEAAwE;AACxE,gFAAgF;AAChF,gDAAgD;AAChD,EAAE;AACF,4DAA4D;AAC5D,4EAA4E;AAC5E,6EAA6E;AAC7E,gFAAgF;AAChF,+DAA+D;AAC/D,EAAE;AACF,mCAAmC;AACnC,iFAAiF;AACjF,iEAAiE;AACjE,+EAA+E;AAC/E,6EAA6E;AAC7E,iFAAiF;AACjF,2EAA2E;AAC3E,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,iFAAiF;AACjF,8EAA8E;AAC9E,qFAAqF;AACrF,6EAA6E;AAC7E,gFAAgF;AAChF,2CAA2C;AAG3C,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAyH5E,8EAA8E;AAC9E,8CAA8C;AAC9C,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAW;IAEX,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAEnC,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IACvC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC;QAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,gEAAgE;YAChE,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAE9E,iFAAiF;AACjF,MAAM,sBAAuB,SAAQ,KAAK;IACxC;QACE,6EAA6E;QAC7E,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,kFAAkF;AAClF,MAAM,wBAAyB,SAAQ,KAAK;IAC1C;QACE,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,8EAA8E;AAC9E,qDAAqD;AACrD,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAqB,EACrB,IAAyB;IAEzB,IAAI,CAAC;QACH,4DAA4D;QAC5D,MAAM,MAAM,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE;gBAC1D,GAAG,EAAE,aAAa;aACnB,CAAC,CAAC;YACH,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QAC3D,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QAE5B,wEAAwE;QACxE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC1C,sEAAsE;YACtE,qEAAqE;YACrE,MAAM,IAAI,sBAAsB,EAAE,CAAC;QACrC,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC/B,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACpD,IAAI,aAAa,CAAC,WAAW,CAAC,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;YAChE,wEAAwE;YACxE,oEAAoE;YACpE,MAAM,IAAI,sBAAsB,EAAE,CAAC;QACrC,CAAC;QAED,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;QACxE,IAAI,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,wBAAwB,EAAE,CAAC;QACvC,CAAC;QAED,oDAAoD;QACpD,4EAA4E;QAC5E,wEAAwE;QACxE,MAAM,iBAAiB,GAAG,cAAc,SAAS,IAAI,QAAQ,EAAE,CAAC;QAChE,MAAM,gBAAgB,GAAG,cAAc,SAAS,IAAI,QAAQ,SAAS,CAAC;QACtE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;YAC1D,SAAS,EAAE,aAAa;YACxB,UAAU,EAAE,iBAAiB;YAC7B,UAAU,EAAE,gBAAgB;YAC5B,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;SACnD,CAAC,CAAC;QACH,MAAM,oBAAoB,GAAG,eAAe,CAAC,WAAW,CAAC;QACzD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAExE,yEAAyE;QACzE,2EAA2E;QAC3E,6EAA6E;QAC7E,uEAAuE;QACvE,kDAAkD;QAClD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACrD,IAAI,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,2EAA2E;YAC3E,0EAA0E;YAC1E,uEAAuE;YACvE,MAAM,IAAI,sBAAsB,EAAE,CAAC;QACrC,CAAC;QACD,yEAAyE;QACzE,8DAA8D;QAC9D,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,EAAE;YACnD,WAAW;YACX,WAAW,EAAE,aAAa;SAC3B,CAAC,CAAC;QAEH,6EAA6E;QAC7E,uEAAuE;QACvE,MAAM,UAAU,GAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC;QAE7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC;YACzC,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,wEAAwE;YACxE,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;SAC1C,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC;YACrD,GAAG,EAAE,oBAAoB;YACzB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC;SAC/C,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC;YACzC,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;SAC1C,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;YACpD,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,UAAU,EAAE,oBAAoB;YAChC,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE,MAAM,CAAC,KAAK;YACzB,UAAU,EAAE,KAAK,CAAC,KAAK;SACxB,CAAC,CAAC;QAEH,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC9D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,0EAA0E;YAC1E,2EAA2E;YAC3E,mEAAmE;YACnE,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,aAAa,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACzE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,EAAE;YACxE,GAAG,EAAE,aAAa;YAClB,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;QACH,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACtD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAChC,aAAqB,EACrB,IAAyB,EACzB,KAAc;IAEd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;QACzD,GAAG,EAAE,aAAa;QAClB,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO,eAAe,CAAC;IACzB,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;YAC1E,GAAG,EAAE,aAAa;YAClB,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;QACH,OAAO,oBAAoB,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAiB,EACjB,IAAyB;IAEzB,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,2EAA2E;QAC3E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;YACjE,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;QACH,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1E,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YACnC,0EAA0E;YAC1E,oEAAoE;YACpE,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;AAC3D,CAAC;AAED,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAE9E,IAAI,YAA6C,CAAC;AAElD;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAyB;IAC9D,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,0BAA0B;IACxC,YAAY,GAAG,SAAS,CAAC;AAC3B,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC,CAAC;AAEtE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,OAAO,GAAe,KAAK,EAAE,KAAK,EAA6B,EAAE;IAC5E,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,mEAAmE;QACnE,+DAA+D;QAC/D,MAAM,CAAC,KAAK,CACV,qEAAqE;YACnE,wDAAwD,CAC3D,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC;IAE1B,MAAM,iBAAiB,GAAiC,EAAE,CAAC;IAC3D,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,OAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2EAA2E;YAC3E,wEAAwE;YACxE,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;gBACpE,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,iBAAiB,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YACnC,iBAAiB,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAC/B,CAAC,CAAC"}

package/dist/lib/exif-stripper.d.ts

@@ -1,18 +1,42 @@
 /**
- * EXIF Stripping Utility
+ * EXIF strip verification helper (T6).
  *
- * PREPARATORY CHANGE: This utility is created now but not yet used in production.
- * It will be enabled when implementing location safety features for at-risk users.
+ * The byte-level strip is a CONSEQUENCE of T7's re-encode: sharp re-encoding
+ * without `.withMetadata()` drops all embedded metadata (EXIF, GPS, ICC,
+ * maker-notes). This module provides the POST-encode assertion that the strip
+ * actually happened — used defensively at runtime and as the verification
+ * contract in tests.
  *
- * Removes EXIF data from images for privacy.
- * Can be enabled/disabled via configuration.
+ * The old placeholder `stripEXIF()` is preserved below with a narrowed
+ * signature so existing callers compile; it delegates to the re-encode and is
+ * deprecated. New code must call `assertNoExif` after `reencodeImage`.
  *
- * FUTURE USE:
- * - When EXIF_STRIPPING_ENABLED=true, this utility will strip EXIF data from
- *   uploaded images before storing them
- * - Prevents location data, device info, and timestamps from being embedded in images
- * - Helps protect user privacy, especially for at-risk users
+ * GPS coordinates are NOT persisted: `gpsLatitude`/`gpsLongitude` columns
+ * were removed in T8's schema migration. Nothing in this file or the upload
+ * handler writes those fields.
  */
+/**
+ * Parse the EXIF/IPTC/GPS/ICC metadata embedded in `imageBytes` and return
+ * it as a flat object. Returns `undefined` when exifr finds nothing.
+ *
+ * Exported for use in tests (assert the object is empty/undefined after
+ * re-encode) and as an optional runtime defensive check.
+ */
+export declare function parseMetadata(imageBytes: ArrayBuffer | Buffer | Uint8Array): Promise<Record<string, unknown> | undefined>;
+/**
+ * Assert that `imageBytes` contains NO privacy-sensitive embedded metadata
+ * (EXIF GPS, ICC, maker-notes, camera info). Benign PNG structural fields
+ * (ImageWidth, ColorType, etc.) are excluded from this check since exifr
+ * parses them from the PNG format header, not from EXIF APP1 segments.
+ *
+ * Call this on the OUTPUT of `reencodeImage` to confirm the re-encode dropped
+ * all user/device metadata. Useful both in tests and as an optional defensive
+ * runtime check.
+ *
+ * @throws `Error` when privacy-sensitive metadata is present.
+ */
+export declare function assertNoExif(imageBytes: ArrayBuffer | Buffer | Uint8Array): Promise<void>;
+/** @deprecated Legacy config interface — no longer has any effect. */
 export interface EXIFStripperConfig {
     enabled: boolean;
     removeLocation: boolean;
@@ -20,18 +44,9 @@ export interface EXIFStripperConfig {
     removeTimestamp: boolean;
 }
 /**
- * Strip EXIF data from image buffer
- *
- * FUTURE USE: This function will be called during media upload processing
- * to remove EXIF data from images before storing them in R2.
- *
- * NOTE: This is currently a placeholder implementation.
- * When implementing, use a library like 'piexifjs' or 'exifr' to actually
- * remove EXIF data from the image buffer.
- *
- * @param imageBuffer - Image buffer to process
- * @param config - Stripping configuration
- * @returns Processed image buffer (with EXIF removed if enabled)
+ * @deprecated The strip now happens as a side-effect of `reencodeImage`
+ * (T7). This function is a no-op passthrough kept solely so the existing
+ * test suite compiles without change. Do not call in new code.
  */
 export declare function stripEXIF(imageBuffer: ArrayBuffer, config?: EXIFStripperConfig): Promise<ArrayBuffer>;
 //# sourceMappingURL=exif-stripper.d.ts.map

package/dist/lib/exif-stripper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exif-stripper.d.ts","sourceRoot":"","sources":["../../src/lib/exif-stripper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;IACxB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,SAAS,CAC7B,WAAW,EAAE,WAAW,EACxB,MAAM,GAAE,kBAKP,GACA,OAAO,CAAC,WAAW,CAAC,CAyBtB"}
+{"version":3,"file":"exif-stripper.d.ts","sourceRoot":"","sources":["../../src/lib/exif-stripper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,WAAW,GAAG,MAAM,GAAG,UAAU,GAC5C,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,CA2B9C;AAiCD;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,WAAW,GAAG,MAAM,GAAG,UAAU,GAC5C,OAAO,CAAC,IAAI,CAAC,CAgBf;AAQD,sEAAsE;AACtE,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;IACxB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,WAAW,EAAE,WAAW,EACxB,MAAM,GAAE,kBAKP,GACA,OAAO,CAAC,WAAW,CAAC,CAKtB"}