@de-otio/trellis 0.11.0 → 0.12.1

package/dist/lib/media/ffmpeg-args.js

@@ -0,0 +1,119 @@
+/**
+ * Pure functional-core builder for ffmpeg argument arrays.
+ *
+ * Produces an argv ARRAY passed directly to the ffmpeg process — NEVER a shell
+ * string. No interpolation into a shell context means no command injection risk
+ * regardless of what inputPath / outputPath / posterPath contain.
+ *
+ * Hardening applied unconditionally on every invocation:
+ *   - "-protocol_whitelist","file,pipe"   blocks SSRF (no http/https/rtmp/etc.)
+ *   - "-t", String(maxDurationSeconds)    bounds processing time (from spec; never a literal)
+ *   - "-dn"                               drop data tracks
+ *   - "-sn"                               drop subtitle tracks
+ *
+ * Video additionally gets:
+ *   - "-c:v","libx264","-c:a","aac"       re-encode to safe codecs
+ *   - "-movflags","+faststart"            progressive streaming
+ *
+ * Audio-only gets:
+ *   - "-c:a","aac"                        re-encode to safe codec
+ *
+ * Poster frame extraction is a SEPARATE argv (buildPosterArgs). Splitting the
+ * two operations keeps the main transcode deterministic and lets the poster be
+ * produced in a separate process without retranscoding. The poster job uses
+ * "-frames:v","1" to extract exactly one frame and inherits all hardening args.
+ *
+ * PURITY: no I/O, no AWS SDK, no fs, no Date.now, no Math.random. All
+ * operational parameters (maxDurationSeconds) arrive as function arguments
+ * sourced from Env.media — never as literals in this file. Ships in the PUBLIC
+ * npm tarball: no hard-coded operational numbers here.
+ */
+// ---------------------------------------------------------------------------
+// buildFfmpegArgs
+// ---------------------------------------------------------------------------
+/**
+ * Build the argv for transcoding a media object.
+ *
+ * The returned array is passed to the child-process launcher directly — never
+ * joined into a shell string. The caller is responsible for prepending the
+ * ffmpeg binary path or using `execFile`/`spawn` with `shell: false`.
+ *
+ * The protocol whitelist, duration cap, and track-drop flags are always present
+ * in the output regardless of kind. The caller should verify these are present
+ * before launching (the test suite does so exhaustively).
+ */
+export function buildFfmpegArgs(spec) {
+    const args = [
+        // SSRF prevention: accept only file: and pipe: protocols. This blocks any
+        // attempt to use the ffmpeg process to reach http/https/rtmp/concat/subfile
+        // endpoints that an in-VPC worker could reach.
+        "-protocol_whitelist",
+        "file,pipe",
+        // Duration cap: sourced from spec (Env.media), never a compiled literal.
+        "-t",
+        String(spec.maxDurationSeconds),
+        // Input
+        "-i",
+        spec.inputPath,
+        // Drop data tracks (camera metadata, GPS, etc.) and subtitle tracks.
+        // Neither is needed for the re-encoded output and both can carry payloads.
+        "-dn",
+        "-sn",
+    ];
+    if (spec.kind === "video") {
+        args.push("-c:v", "libx264", "-c:a", "aac", 
+        // Enable progressive download (moov atom first in the container).
+        "-movflags", "+faststart");
+    }
+    else {
+        // audio-only
+        args.push("-c:a", "aac");
+    }
+    // Overwrite output without prompt — required for non-interactive subprocess.
+    args.push("-y", spec.outputPath);
+    return args;
+}
+// ---------------------------------------------------------------------------
+// buildPosterArgs
+// ---------------------------------------------------------------------------
+/**
+ * Build the argv for extracting a poster frame from a video.
+ *
+ * This is a SEPARATE invocation from {@link buildFfmpegArgs}: splitting the two
+ * means the transcode and the poster extraction run independently, the poster
+ * can be regenerated without retranscoding, and the transcode argv stays clean.
+ *
+ * The poster job inherits all hardening (protocol whitelist, duration cap,
+ * track drops) and adds:
+ *   - "-frames:v","1"   — extract exactly one video frame
+ *   - "-an"             — no audio output (image output only)
+ *
+ * Callers should only invoke this when `spec.posterPath` is defined. The
+ * function documents this contract via its signature: if posterPath is absent,
+ * the output path would be undefined and the caller must guard before spawning.
+ * The implementation always uses spec.posterPath so TypeScript callers can call
+ * with a spec that has posterPath set and get a well-formed array.
+ *
+ * @param spec - must have `posterPath` set; calling without it is a caller
+ *               contract violation (outputPath would be undefined).
+ */
+export function buildPosterArgs(spec) {
+    return [
+        "-protocol_whitelist",
+        "file,pipe",
+        "-t",
+        String(spec.maxDurationSeconds),
+        "-i",
+        spec.inputPath,
+        "-dn",
+        "-sn",
+        // Extract exactly one video frame.
+        "-frames:v",
+        "1",
+        // No audio stream in the poster image output.
+        "-an",
+        "-y",
+        spec.posterPath,
+    ];
+}
+//# sourceMappingURL=ffmpeg-args.js.map

package/dist/lib/media/ffmpeg-args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ffmpeg-args.js","sourceRoot":"","sources":["../../../src/lib/media/ffmpeg-args.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAuBH,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,IAAmB;IACjD,MAAM,IAAI,GAAa;QACrB,0EAA0E;QAC1E,4EAA4E;QAC5E,+CAA+C;QAC/C,qBAAqB;QACrB,WAAW;QAEX,yEAAyE;QACzE,IAAI;QACJ,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAE/B,QAAQ;QACR,IAAI;QACJ,IAAI,CAAC,SAAS;QAEd,qEAAqE;QACrE,2EAA2E;QAC3E,KAAK;QACL,KAAK;KACN,CAAC;IAEF,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CACP,MAAM,EACN,SAAS,EACT,MAAM,EACN,KAAK;QACL,kEAAkE;QAClE,WAAW,EACX,YAAY,CACb,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,aAAa;QACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAEjC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAqD;IAErD,OAAO;QACL,qBAAqB;QACrB,WAAW;QAEX,IAAI;QACJ,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAE/B,IAAI;QACJ,IAAI,CAAC,SAAS;QAEd,KAAK;QACL,KAAK;QAEL,mCAAmC;QACnC,WAAW;QACX,GAAG;QAEH,8CAA8C;QAC9C,KAAK;QAEL,IAAI;QACJ,IAAI,CAAC,UAAU;KAChB,CAAC;AACJ,CAAC"}

package/dist/lib/media/media-ports.d.ts

@@ -0,0 +1,126 @@
+export interface TranscodeVideoInput {
+    readonly inputPath: string;
+    readonly outputPath: string;
+    readonly posterPath: string;
+    /** Hard cap on accepted duration; injected from Env.media (never a literal). */
+    readonly maxDurationSeconds: number;
+}
+export interface TranscodeVideoResult {
+    readonly cleanedPath: string;
+    readonly posterPath: string;
+    readonly durationSeconds: number;
+}
+export interface TranscodeAudioInput {
+    readonly inputPath: string;
+    readonly outputPath: string;
+    /** Hard cap on accepted duration; injected from Env.media (never a literal). */
+    readonly maxDurationSeconds: number;
+}
+export interface TranscodeAudioResult {
+    readonly cleanedPath: string;
+    readonly durationSeconds: number;
+}
+export interface TranscodePort {
+    /** Probe the duration of an input without transcoding it. */
+    probeDurationSeconds(inputPath: string): Promise<number>;
+    /** Re-encode a video to a clean form and emit a poster frame. */
+    transcodeVideo(input: TranscodeVideoInput): Promise<TranscodeVideoResult>;
+    /** Re-encode audio to a clean form. */
+    transcodeAudio(input: TranscodeAudioInput): Promise<TranscodeAudioResult>;
+}
+export interface StoragePort {
+    getObject(key: string): Promise<Buffer>;
+    putObject(key: string, body: Buffer, contentType: string): Promise<void>;
+    copyObject(fromKey: string, toKey: string): Promise<void>;
+    deleteObject(key: string): Promise<void>;
+    headObject(key: string): Promise<{
+        exists: boolean;
+    }>;
+}
+export type TranscriptionStatus = "COMPLETED" | "FAILED" | "IN_PROGRESS";
+export interface TranscribePort {
+    startTranscription(input: {
+        key: string;
+        jobName: string;
+    }): Promise<{
+        jobId: string;
+    }>;
+    getTranscription(jobId: string): Promise<{
+        status: TranscriptionStatus;
+        transcript?: string;
+    }>;
+}
+/**
+ * In-memory TranscodePort. Returns programmable durations and echoes the
+ * requested output/poster paths back, so the shell's path-plumbing can be
+ * asserted without invoking a real encoder.
+ *
+ * Determinism: a single `duration` (default 0) is returned by `probe` and by
+ * both transcode calls unless overridden. `transcodeVideo`/`transcodeAudio`
+ * never themselves enforce `maxDurationSeconds` — duration policy lives in the
+ * functional core (a separate caps unit), and the mock must not silently make
+ * that decision for it.
+ */
+export declare class MockTranscodePort implements TranscodePort {
+    private duration;
+    /** Records of each call, for assertions. */
+    readonly probeCalls: string[];
+    readonly videoCalls: TranscodeVideoInput[];
+    readonly audioCalls: TranscodeAudioInput[];
+    constructor(opts?: {
+        duration?: number;
+    });
+    /** Program the duration returned by subsequent calls. */
+    setDuration(seconds: number): void;
+    probeDurationSeconds(inputPath: string): Promise<number>;
+    transcodeVideo(input: TranscodeVideoInput): Promise<TranscodeVideoResult>;
+    transcodeAudio(input: TranscodeAudioInput): Promise<TranscodeAudioResult>;
+}
+/**
+ * In-memory StoragePort backed by a Map. `headObject` reports existence from the
+ * map; `getObject` throws on a miss (callers must handle the miss explicitly —
+ * a silent empty buffer would mask bugs).
+ */
+export declare class MockStoragePort implements StoragePort {
+    private readonly objects;
+    constructor(seed?: Record<string, Buffer>);
+    getObject(key: string): Promise<Buffer>;
+    putObject(key: string, body: Buffer, contentType: string): Promise<void>;
+    copyObject(fromKey: string, toKey: string): Promise<void>;
+    deleteObject(key: string): Promise<void>;
+    headObject(key: string): Promise<{
+        exists: boolean;
+    }>;
+    /** Test helper: read the content-type a key was stored with. */
+    contentTypeOf(key: string): string | undefined;
+}
+/**
+ * In-memory TranscribePort. By default a started job is immediately COMPLETED
+ * with an empty transcript; callers program per-job results via `setResult`.
+ * Job ids are a deterministic monotonic sequence.
+ */
+export declare class MockTranscribePort implements TranscribePort {
+    private seq;
+    private readonly results;
+    /** Records of each start call, for assertions. */
+    readonly startCalls: {
+        key: string;
+        jobName: string;
+    }[];
+    startTranscription(input: {
+        key: string;
+        jobName: string;
+    }): Promise<{
+        jobId: string;
+    }>;
+    /** Program the result a given job id will report. */
+    setResult(jobId: string, result: {
+        status: TranscriptionStatus;
+        transcript?: string;
+    }): void;
+    getTranscription(jobId: string): Promise<{
+        status: TranscriptionStatus;
+        transcript?: string;
+    }>;
+}
+//# sourceMappingURL=media-ports.d.ts.map

package/dist/lib/media/media-ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-ports.d.ts","sourceRoot":"","sources":["../../../src/lib/media/media-ports.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,6DAA6D;IAC7D,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,iEAAiE;IACjE,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1E,uCAAuC;IACvC,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAC3E;AAOD,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACvD;AAQD,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,QAAQ,GAAG,aAAa,CAAC;AAEzE,MAAM,WAAW,cAAc;IAC7B,kBAAkB,CAAC,KAAK,EAAE;QACxB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/B,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QACvC,MAAM,EAAE,mBAAmB,CAAC;QAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;CACJ;AAMD;;;;;;;;;;GAUG;AACH,qBAAa,iBAAkB,YAAW,aAAa;IACrD,OAAO,CAAC,QAAQ,CAAS;IAEzB,4CAA4C;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAM;IACnC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,EAAE,CAAM;IAChD,QAAQ,CAAC,UAAU,EAAE,mBAAmB,EAAE,CAAM;gBAEpC,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO;IAI5C,yDAAyD;IACzD,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAI5B,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKxD,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IASzE,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAOhF;AAED;;;;GAIG;AACH,qBAAa,eAAgB,YAAW,WAAW;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4D;gBAExE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM;IAMvC,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAQvC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxE,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzD,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAI3D,gEAAgE;IAChE,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;CAG/C;AAED;;;;GAIG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IACvD,OAAO,CAAC,GAAG,CAAK;IAChB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAGpB;IAEJ,kDAAkD;IAClD,QAAQ,CAAC,UAAU,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAM;IAEvD,kBAAkB,CAAC,KAAK,EAAE;QAC9B,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAU9B,qDAAqD;IACrD,SAAS,CACP,KAAK,EAAE,MAAM,EACb,MAAM,EAAE;QAAE,MAAM,EAAE,mBAAmB,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3D,IAAI;IAID,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7C,MAAM,EAAE,mBAAmB,CAAC;QAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CAGH"}

package/dist/lib/media/media-ports.js

@@ -0,0 +1,129 @@
+// CONTRACT: stable — coordinate changes. Shared P0b I/O SEAM definitions.
+//
+// These are the capability seams the media pipeline's imperative SHELL binds to,
+// mirroring the MediaModerationProvider seam discipline (./moderation-provider.ts):
+// core ships the *interfaces* plus test-only Mock implementations; the consuming
+// app (Skybber) injects the concrete cloud adapters (ffmpeg/MediaConvert, S3,
+// Transcribe) at startup. Core imports NO cloud SDK here.
+//
+// IMPORTANT: this file deliberately defines ONLY the seam interfaces and their
+// in-memory Mocks. The mocks are deterministic and side-effect-free w.r.t. the
+// outside world (they touch only their own in-process state) so functional-core
+// units can be exercised against them in property tests. Operational parameters
+// (e.g. maxDurationSeconds) are *arguments*, never literals baked into these
+// interfaces — this file ships in the PUBLIC npm tarball.
+// ===========================================================================
+// Mock implementations (test-only). Deterministic, in-memory, no outside I/O.
+// ===========================================================================
+/**
+ * In-memory TranscodePort. Returns programmable durations and echoes the
+ * requested output/poster paths back, so the shell's path-plumbing can be
+ * asserted without invoking a real encoder.
+ *
+ * Determinism: a single `duration` (default 0) is returned by `probe` and by
+ * both transcode calls unless overridden. `transcodeVideo`/`transcodeAudio`
+ * never themselves enforce `maxDurationSeconds` — duration policy lives in the
+ * functional core (a separate caps unit), and the mock must not silently make
+ * that decision for it.
+ */
+export class MockTranscodePort {
+    duration;
+    /** Records of each call, for assertions. */
+    probeCalls = [];
+    videoCalls = [];
+    audioCalls = [];
+    constructor(opts = {}) {
+        this.duration = opts.duration ?? 0;
+    }
+    /** Program the duration returned by subsequent calls. */
+    setDuration(seconds) {
+        this.duration = seconds;
+    }
+    async probeDurationSeconds(inputPath) {
+        this.probeCalls.push(inputPath);
+        return this.duration;
+    }
+    async transcodeVideo(input) {
+        this.videoCalls.push(input);
+        return {
+            cleanedPath: input.outputPath,
+            posterPath: input.posterPath,
+            durationSeconds: this.duration,
+        };
+    }
+    async transcodeAudio(input) {
+        this.audioCalls.push(input);
+        return {
+            cleanedPath: input.outputPath,
+            durationSeconds: this.duration,
+        };
+    }
+}
+/**
+ * In-memory StoragePort backed by a Map. `headObject` reports existence from the
+ * map; `getObject` throws on a miss (callers must handle the miss explicitly —
+ * a silent empty buffer would mask bugs).
+ */
+export class MockStoragePort {
+    objects = new Map();
+    constructor(seed = {}) {
+        for (const [key, body] of Object.entries(seed)) {
+            this.objects.set(key, { body, contentType: "application/octet-stream" });
+        }
+    }
+    async getObject(key) {
+        const obj = this.objects.get(key);
+        if (!obj) {
+            throw new Error(`MockStoragePort: no object at key "${key}"`);
+        }
+        return obj.body;
+    }
+    async putObject(key, body, contentType) {
+        this.objects.set(key, { body, contentType });
+    }
+    async copyObject(fromKey, toKey) {
+        const obj = this.objects.get(fromKey);
+        if (!obj) {
+            throw new Error(`MockStoragePort: no object at key "${fromKey}" to copy`);
+        }
+        this.objects.set(toKey, { body: obj.body, contentType: obj.contentType });
+    }
+    async deleteObject(key) {
+        this.objects.delete(key);
+    }
+    async headObject(key) {
+        return { exists: this.objects.has(key) };
+    }
+    /** Test helper: read the content-type a key was stored with. */
+    contentTypeOf(key) {
+        return this.objects.get(key)?.contentType;
+    }
+}
+/**
+ * In-memory TranscribePort. By default a started job is immediately COMPLETED
+ * with an empty transcript; callers program per-job results via `setResult`.
+ * Job ids are a deterministic monotonic sequence.
+ */
+export class MockTranscribePort {
+    seq = 0;
+    results = new Map();
+    /** Records of each start call, for assertions. */
+    startCalls = [];
+    async startTranscription(input) {
+        this.startCalls.push(input);
+        this.seq += 1;
+        const jobId = `mock-transcribe-${this.seq}`;
+        if (!this.results.has(jobId)) {
+            this.results.set(jobId, { status: "COMPLETED", transcript: "" });
+        }
+        return { jobId };
+    }
+    /** Program the result a given job id will report. */
+    setResult(jobId, result) {
+        this.results.set(jobId, result);
+    }
+    async getTranscription(jobId) {
+        return this.results.get(jobId) ?? { status: "IN_PROGRESS" };
+    }
+}
+//# sourceMappingURL=media-ports.js.map

package/dist/lib/media/media-ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-ports.js","sourceRoot":"","sources":["../../../src/lib/media/media-ports.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,EAAE;AACF,iFAAiF;AACjF,oFAAoF;AACpF,iFAAiF;AACjF,8EAA8E;AAC9E,0DAA0D;AAC1D,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAChF,6EAA6E;AAC7E,0DAA0D;AA2E1D,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,OAAO,iBAAiB;IACpB,QAAQ,CAAS;IAEzB,4CAA4C;IACnC,UAAU,GAAa,EAAE,CAAC;IAC1B,UAAU,GAA0B,EAAE,CAAC;IACvC,UAAU,GAA0B,EAAE,CAAC;IAEhD,YAAY,OAA8B,EAAE;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,yDAAyD;IACzD,WAAW,CAAC,OAAe;QACzB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,SAAiB;QAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAA0B;QAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO;YACL,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,eAAe,EAAE,IAAI,CAAC,QAAQ;SAC/B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAA0B;QAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO;YACL,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,eAAe,EAAE,IAAI,CAAC,QAAQ;SAC/B,CAAC;IACJ,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,eAAe;IACT,OAAO,GAAG,IAAI,GAAG,EAAiD,CAAC;IAEpF,YAAY,OAA+B,EAAE;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,IAAY,EAAE,WAAmB;QAC5D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,KAAa;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,WAAW,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW;QAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAW;QAC1B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3C,CAAC;IAED,gEAAgE;IAChE,aAAa,CAAC,GAAW;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC;IAC5C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IACrB,GAAG,GAAG,CAAC,CAAC;IACC,OAAO,GAAG,IAAI,GAAG,EAG/B,CAAC;IAEJ,kDAAkD;IACzC,UAAU,GAAuC,EAAE,CAAC;IAE7D,KAAK,CAAC,kBAAkB,CAAC,KAGxB;QACC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACd,MAAM,KAAK,GAAG,mBAAmB,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,qDAAqD;IACrD,SAAS,CACP,KAAa,EACb,MAA4D;QAE5D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAIlC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC9D,CAAC;CACF"}

package/dist/lib/media/media-upsert.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Pure builder for the MediaFile upsert arguments (T9).
+ *
+ * Keeping this out of the route handler makes the dedup-safety invariant
+ * directly unit-testable: a within-tenant dedup hit (identical bytes
+ * re-uploaded) must NOT transfer ownership (`uploadedBy`) or de-publish the
+ * canonical row (`moderationStatus`). Subsequent uploaders get a *reference*
+ * (via the post→media relation), never a mutation of the shared row.
+ *
+ * The shell (media.ts) passes the result straight to
+ * `db.mediaFile.upsert(buildMediaUpsertArgs(...))`.
+ */
+export interface MediaUpsertInput {
+    tenantId: string;
+    contentHash: string;
+    originalKey: string;
+    mimeType: string;
+    size: number;
+    uploadedBy: string;
+    width?: number;
+    height?: number;
+    duration?: number;
+}
+/**
+ * The `create`/`update`/`where` payload for `db.mediaFile.upsert`.
+ *
+ * Typed structurally (not against the generated Prisma client) so this pure
+ * module never depends on a regenerated client across worktrees. The shell
+ * passes it to Prisma, which validates the shape.
+ */
+export interface MediaUpsertArgs {
+    where: {
+        tenantId_contentHash: {
+            tenantId: string;
+            contentHash: string;
+        };
+    };
+    create: {
+        tenantId: string;
+        contentHash: string;
+        mimeType: string;
+        size: number;
+        originalKey: string;
+        uploadStatus: "COMPLETE";
+        uploadedBy: string;
+        width?: number;
+        height?: number;
+        duration?: number;
+    };
+    update: {
+        uploadStatus: "COMPLETE";
+    };
+}
+export declare function buildMediaUpsertArgs(input: MediaUpsertInput): MediaUpsertArgs;
+//# sourceMappingURL=media-upsert.d.ts.map

package/dist/lib/media/media-upsert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-upsert.d.ts","sourceRoot":"","sources":["../../../src/lib/media/media-upsert.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE;QAAE,oBAAoB,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAC3E,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,UAAU,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,MAAM,EAAE;QAIN,YAAY,EAAE,UAAU,CAAC;KAC1B,CAAC;CACH;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,gBAAgB,GACtB,eAAe,CAwBjB"}

package/dist/lib/media/media-upsert.js

@@ -0,0 +1,38 @@
+/**
+ * Pure builder for the MediaFile upsert arguments (T9).
+ *
+ * Keeping this out of the route handler makes the dedup-safety invariant
+ * directly unit-testable: a within-tenant dedup hit (identical bytes
+ * re-uploaded) must NOT transfer ownership (`uploadedBy`) or de-publish the
+ * canonical row (`moderationStatus`). Subsequent uploaders get a *reference*
+ * (via the post→media relation), never a mutation of the shared row.
+ *
+ * The shell (media.ts) passes the result straight to
+ * `db.mediaFile.upsert(buildMediaUpsertArgs(...))`.
+ */
+export function buildMediaUpsertArgs(input) {
+    return {
+        where: {
+            tenantId_contentHash: {
+                tenantId: input.tenantId,
+                contentHash: input.contentHash,
+            },
+        },
+        create: {
+            tenantId: input.tenantId,
+            contentHash: input.contentHash,
+            mimeType: input.mimeType,
+            size: input.size,
+            originalKey: input.originalKey,
+            uploadStatus: "COMPLETE",
+            uploadedBy: input.uploadedBy,
+            width: input.width,
+            height: input.height,
+            duration: input.duration,
+        },
+        update: {
+            uploadStatus: "COMPLETE",
+        },
+    };
+}
+//# sourceMappingURL=media-upsert.js.map

package/dist/lib/media/media-upsert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-upsert.js","sourceRoot":"","sources":["../../../src/lib/media/media-upsert.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA2CH,MAAM,UAAU,oBAAoB,CAClC,KAAuB;IAEvB,OAAO;QACL,KAAK,EAAE;YACL,oBAAoB,EAAE;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B;SACF;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,UAAU;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB;QACD,MAAM,EAAE;YACN,YAAY,EAAE,UAAU;SACzB;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/media/moderation-provider.d.ts

@@ -0,0 +1,111 @@
+import type { ModerationDecision } from "./moderation-status.js";
+export type { ModerationDecision };
+/** An opaque reference to an already-stored image object (key + bucket handle). */
+export interface ImageRef {
+    readonly bucket: string;
+    readonly key: string;
+}
+/** An opaque reference to an already-stored object in S3-compatible storage. */
+export interface S3Ref {
+    readonly bucket: string;
+    readonly key: string;
+}
+/** A single classifier label. `category` is an OPAQUE token, never a real-category string. */
+export interface ModerationLabel {
+    readonly category: string;
+    readonly confidence: number;
+}
+/**
+ * ModerationVerdict — the RESULT object (hub name). The `decision` is the
+ * 3-value classifier verdict; `labels` are opaque category tokens with
+ * confidences; `provider` identifies which backend produced it.
+ */
+export interface ModerationVerdict {
+    readonly decision: ModerationDecision;
+    readonly labels: ReadonlyArray<ModerationLabel>;
+    readonly provider: string;
+}
+/**
+ * The one canonical moderation seam. Image moderation is sync-ish (resolves a
+ * verdict directly); video moderation is async (start → poll), mirroring the
+ * cloud provider's job model. Audio reuses the text-moderation path and adds no
+ * method here.
+ */
+export interface MediaModerationProvider {
+    /** Synchronous-style image moderation: resolves a verdict directly. */
+    moderateImage(input: ImageRef): Promise<ModerationVerdict>;
+    /** Kicks off async video moderation; returns a handle to poll. */
+    startVideoModeration(input: S3Ref): Promise<{
+        jobId: string;
+    }>;
+    /** Polls a previously-started video moderation job for its verdict. */
+    getVideoModeration(jobId: string): Promise<ModerationVerdict>;
+}
+export type WarnSink = (message: string, data?: unknown) => void;
+/**
+ * A verdict that fails closed: every call resolves to `review` with no labels.
+ * Nothing this provider returns can ever auto-approve media. Used as the safe
+ * default before a concrete provider is injected (dev only — see the startup
+ * guard below).
+ */
+export declare class NullModerationProvider implements MediaModerationProvider {
+    private readonly warn;
+    constructor(warn?: WarnSink);
+    private failClosed;
+    moderateImage(_input: ImageRef): Promise<ModerationVerdict>;
+    startVideoModeration(_input: S3Ref): Promise<{
+        jobId: string;
+    }>;
+    getVideoModeration(_jobId: string): Promise<ModerationVerdict>;
+}
+/**
+ * Returns true for the fail-closed Null provider. The startup guard uses this to
+ * reject Null outside dev.
+ */
+export declare function isNullModerationProvider(provider: MediaModerationProvider): boolean;
+/**
+ * A test seam: returns canned verdicts on demand. Default is the fail-closed
+ * `review`. Labels use ONLY abstract category tokens (`category_a`,
+ * `category_b`); no real-category strings, no real imagery ever.
+ */
+export declare class MockModerationProvider implements MediaModerationProvider {
+    private imageVerdict;
+    private videoVerdict;
+    private jobIdSeq;
+    constructor(canned?: {
+        image?: ModerationVerdict;
+        video?: ModerationVerdict;
+    });
+    /** Program the verdict returned by `moderateImage`. */
+    setImageVerdict(verdict: ModerationVerdict): void;
+    /** Program the verdict returned by `getVideoModeration`. */
+    setVideoVerdict(verdict: ModerationVerdict): void;
+    moderateImage(_input: ImageRef): Promise<ModerationVerdict>;
+    startVideoModeration(_input: S3Ref): Promise<{
+        jobId: string;
+    }>;
+    getVideoModeration(_jobId: string): Promise<ModerationVerdict>;
+}
+/** Abstract category tokens for Mock verdicts — never real-category strings. */
+export declare const MOCK_CATEGORY_A = "category_a";
+export declare const MOCK_CATEGORY_B = "category_b";
+/**
+ * Error raised by the startup guard when the fail-closed Null provider would run
+ * outside dev. Carrying a distinct type lets the wiring fail loudly and lets
+ * tests assert on it.
+ */
+export declare class NullProviderInProductionError extends Error {
+    constructor(environment: string);
+}
+/**
+ * Startup guard for the seam wiring. Validates that a non-Null provider is
+ * injected whenever `environment !== "dev"`, and throws loudly otherwise.
+ * Returns the provider unchanged when the check passes, so it can wrap the
+ * injection site directly:
+ *
+ *   const provider = assertModerationProviderAllowed(injected, env.ENVIRONMENT);
+ *
+ * Fail loud, never silently run Null in prod.
+ */
+export declare function assertModerationProviderAllowed(provider: MediaModerationProvider, environment: string): MediaModerationProvider;
+//# sourceMappingURL=moderation-provider.d.ts.map

package/dist/lib/media/moderation-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"moderation-provider.d.ts","sourceRoot":"","sources":["../../../src/lib/media/moderation-provider.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAEnC,mFAAmF;AACnF,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,gFAAgF;AAChF,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,uEAAuE;IACvE,aAAa,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3D,kEAAkE;IAClE,oBAAoB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,uEAAuE;IACvE,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/D;AAWD,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;AAQjE;;;;;GAKG;AACH,qBAAa,sBAAuB,YAAW,uBAAuB;IACpE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAW;gBAEpB,IAAI,GAAE,QAAiD;IAInE,OAAO,CAAC,UAAU;IAKZ,aAAa,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAI3D,oBAAoB,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAM/D,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAGrE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAET;AAUD;;;;GAIG;AACH,qBAAa,sBAAuB,YAAW,uBAAuB;IACpE,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,QAAQ,CAAK;gBAGnB,MAAM,GAAE;QACN,KAAK,CAAC,EAAE,iBAAiB,CAAC;QAC1B,KAAK,CAAC,EAAE,iBAAiB,CAAC;KACtB;IAMR,uDAAuD;IACvD,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAIjD,4DAA4D;IAC5D,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAI3C,aAAa,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAI3D,oBAAoB,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAK/D,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAGrE;AAED,gFAAgF;AAChF,eAAO,MAAM,eAAe,eAAe,CAAC;AAC5C,eAAO,MAAM,eAAe,eAAe,CAAC;AAE5C;;;;GAIG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,WAAW,EAAE,MAAM;CAShC;AAED;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,uBAAuB,EACjC,WAAW,EAAE,MAAM,GAClB,uBAAuB,CAKzB"}