@demiurgejs/core 0.2.0-beta.5 → 0.2.0-beta.6

package/README.md

@@ -17,6 +17,18 @@ pnpm add @demiurgejs/core react react-dom
 pnpm add -D vite @vitejs/plugin-react typescript @types/node @types/react @types/react-dom
 ```
 
+Declare the root policy for a public page application:
+
+```ts
+// src/routes/@policy.ts
+import { security } from "@demiurgejs/core";
+
+export const policy = {
+  access: { public: true },
+  document: security.strict(),
+};
+```
+
 Define a route under `src/routes`:
 
 ```tsx
@@ -65,6 +77,7 @@ covers host allowlists, proxy trust, timeouts, and graceful shutdown.
 
 - `@demiurgejs/core` — routes, document APIs, security, caching, and browser runtime
 - `@demiurgejs/core/node` — production Node HTTP, SSR, and static-file adapter
+- `@demiurgejs/core/vercel` — Vercel Node Function deployment adapter
 - `@demiurgejs/core/static` — static-output adapter
 - `@demiurgejs/core/redis` — Redis-backed cache store with cross-instance tag invalidation
 - `@demiurgejs/core/config` — the application configuration contract
@@ -72,6 +85,7 @@ covers host allowlists, proxy trust, timeouts, and graceful shutdown.
 - `@demiurgejs/core/adapter/testing` — adapter capability conformance contract
 - `@demiurgejs/core/deployment/testing` — deployment conformance kit for provider translation and production artifacts
 - `@demiurgejs/core/data/testing` — cache-store conformance contract
+- `@demiurgejs/core/testing` — application route-pipeline test boundary
 - `@demiurgejs/core/internal/testing` — explicitly unstable test helpers
 
 Vite is an optional peer dependency with `@vitejs/plugin-react`. A consumer

package/bin/demiurge.mjs

@@ -10,6 +10,7 @@ import {
   runBuild,
   runDev,
   runInspectCommand,
+  runStart,
 } from "../dist/cli.js";
 import { loadDemiurgeConfig } from "../dist/config/index.js";
 import {
@@ -64,6 +65,11 @@ async function main() {
     return;
   }
 
+  if (options.command === "start") {
+    await runStart(options, config);
+    return;
+  }
+
   const outDir = resolvePreviewOutputDirectory(
     config.root,
     options.outDir,

package/dist/chunks/{document-shell-9GPwtcTt.js → document-shell-C0aPrkhd.js}

@@ -1,4 +1,4 @@
-import { r as c } from "./index-0MNiR_wo.js";
+import { r as c } from "./index-LYve1rQp.js";
 const r = '<template data-demiurge-stream-root=""></template>';
 async function i(t, e) {
   const l = c({
@@ -33,4 +33,4 @@ async function i(t, e) {
 export {
   i as c
 };
-//# sourceMappingURL=document-shell-9GPwtcTt.js.map
+//# sourceMappingURL=document-shell-C0aPrkhd.js.map

package/dist/chunks/{document-shell-9GPwtcTt.js.map → document-shell-C0aPrkhd.js.map}

@@ -1 +1 @@
-{"version":3,"file":"document-shell-9GPwtcTt.js","sources":["../../src/server/document-shell.ts"],"sourcesContent":["import { renderDocumentShell } from \"../document/render\";\nimport type { ScriptTag } from \"../document/scripts\";\nimport type { LoadedRouteMatch } from \"../router\";\nimport type { SsrRenderOptions } from \"./ssr\";\n\n// A streaming render sends the document head before the body exists. A\n// transform that rewrites the document therefore needs a placeholder where the\n// streamed body will go, and it has to leave that placeholder in place.\nexport const STREAM_ROOT_MARKER =\n  '<template data-demiurge-stream-root=\"\"></template>';\n\nexport type DocumentShell = {\n  prefix: string;\n  suffix: string;\n};\n\nexport async function createDocumentShell(\n  match: LoadedRouteMatch,\n  options: SsrRenderOptions & { scripts?: ScriptTag[] },\n): Promise<DocumentShell> {\n  const shell = renderDocumentShell({\n    body: { data: match.data, locale: options.locale, navigation: options.navigation },\n    dir: options.dir,\n    entrySrc: options.clientEntry,\n    lang: options.lang,\n    links: match.links,\n    metadata: match.metadata,\n    nonce: options.nonce,\n    scripts: options.scripts ?? match.scripts,\n    styles: options.styles,\n    title: options.title,\n  });\n\n  if (!options.transformDocument) {\n    return shell;\n  }\n\n  const transformed = await options.transformDocument(\n    `${shell.prefix}${STREAM_ROOT_MARKER}${shell.suffix}`,\n  );\n  const markerIndex = transformed.indexOf(STREAM_ROOT_MARKER);\n\n  if (\n    markerIndex === -1 ||\n    transformed.indexOf(\n      STREAM_ROOT_MARKER,\n      markerIndex + STREAM_ROOT_MARKER.length,\n    ) !== -1\n  ) {\n    throw new Error(\n      \"Demiurge streaming document transform must preserve the root marker exactly once.\",\n    );\n  }\n\n  return {\n    prefix: transformed.slice(0, markerIndex),\n    suffix: transformed.slice(markerIndex + STREAM_ROOT_MARKER.length),\n  };\n}\n"],"names":["STREAM_ROOT_MARKER","createDocumentShell","match","options","shell","renderDocumentShell","transformed","markerIndex"],"mappings":";AAQO,MAAMA,IACX;AAOF,eAAsBC,EACpBC,GACAC,GACwB;AACxB,QAAMC,IAAQC,EAAoB;AAAA,IAChC,MAAM,EAAE,MAAMH,EAAM,MAAM,QAAQC,EAAQ,QAAQ,YAAYA,EAAQ,WAAA;AAAA,IACtE,KAAKA,EAAQ;AAAA,IACb,UAAUA,EAAQ;AAAA,IAClB,MAAMA,EAAQ;AAAA,IACd,OAAOD,EAAM;AAAA,IACb,UAAUA,EAAM;AAAA,IAChB,OAAOC,EAAQ;AAAA,IACf,SAASA,EAAQ,WAAWD,EAAM;AAAA,IAClC,QAAQC,EAAQ;AAAA,IAChB,OAAOA,EAAQ;AAAA,EAAA,CAChB;AAED,MAAI,CAACA,EAAQ;AACX,WAAOC;AAGT,QAAME,IAAc,MAAMH,EAAQ;AAAA,IAChC,GAAGC,EAAM,MAAM,GAAGJ,CAAkB,GAAGI,EAAM,MAAM;AAAA,EAAA,GAE/CG,IAAcD,EAAY,QAAQN,CAAkB;AAE1D,MACEO,MAAgB,MAChBD,EAAY;AAAA,IACVN;AAAA,IACAO,IAAcP,EAAmB;AAAA,EAAA,MAC7B;AAEN,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAIJ,SAAO;AAAA,IACL,QAAQM,EAAY,MAAM,GAAGC,CAAW;AAAA,IACxC,QAAQD,EAAY,MAAMC,IAAcP,EAAmB,MAAM;AAAA,EAAA;AAErE;"}
+{"version":3,"file":"document-shell-C0aPrkhd.js","sources":["../../src/server/document-shell.ts"],"sourcesContent":["import { renderDocumentShell } from \"../document/render\";\nimport type { ScriptTag } from \"../document/scripts\";\nimport type { LoadedRouteMatch } from \"../router\";\nimport type { SsrRenderOptions } from \"./ssr\";\n\n// A streaming render sends the document head before the body exists. A\n// transform that rewrites the document therefore needs a placeholder where the\n// streamed body will go, and it has to leave that placeholder in place.\nexport const STREAM_ROOT_MARKER =\n  '<template data-demiurge-stream-root=\"\"></template>';\n\nexport type DocumentShell = {\n  prefix: string;\n  suffix: string;\n};\n\nexport async function createDocumentShell(\n  match: LoadedRouteMatch,\n  options: SsrRenderOptions & { scripts?: ScriptTag[] },\n): Promise<DocumentShell> {\n  const shell = renderDocumentShell({\n    body: { data: match.data, locale: options.locale, navigation: options.navigation },\n    dir: options.dir,\n    entrySrc: options.clientEntry,\n    lang: options.lang,\n    links: match.links,\n    metadata: match.metadata,\n    nonce: options.nonce,\n    scripts: options.scripts ?? match.scripts,\n    styles: options.styles,\n    title: options.title,\n  });\n\n  if (!options.transformDocument) {\n    return shell;\n  }\n\n  const transformed = await options.transformDocument(\n    `${shell.prefix}${STREAM_ROOT_MARKER}${shell.suffix}`,\n  );\n  const markerIndex = transformed.indexOf(STREAM_ROOT_MARKER);\n\n  if (\n    markerIndex === -1 ||\n    transformed.indexOf(\n      STREAM_ROOT_MARKER,\n      markerIndex + STREAM_ROOT_MARKER.length,\n    ) !== -1\n  ) {\n    throw new Error(\n      \"Demiurge streaming document transform must preserve the root marker exactly once.\",\n    );\n  }\n\n  return {\n    prefix: transformed.slice(0, markerIndex),\n    suffix: transformed.slice(markerIndex + STREAM_ROOT_MARKER.length),\n  };\n}\n"],"names":["STREAM_ROOT_MARKER","createDocumentShell","match","options","shell","renderDocumentShell","transformed","markerIndex"],"mappings":";AAQO,MAAMA,IACX;AAOF,eAAsBC,EACpBC,GACAC,GACwB;AACxB,QAAMC,IAAQC,EAAoB;AAAA,IAChC,MAAM,EAAE,MAAMH,EAAM,MAAM,QAAQC,EAAQ,QAAQ,YAAYA,EAAQ,WAAA;AAAA,IACtE,KAAKA,EAAQ;AAAA,IACb,UAAUA,EAAQ;AAAA,IAClB,MAAMA,EAAQ;AAAA,IACd,OAAOD,EAAM;AAAA,IACb,UAAUA,EAAM;AAAA,IAChB,OAAOC,EAAQ;AAAA,IACf,SAASA,EAAQ,WAAWD,EAAM;AAAA,IAClC,QAAQC,EAAQ;AAAA,IAChB,OAAOA,EAAQ;AAAA,EAAA,CAChB;AAED,MAAI,CAACA,EAAQ;AACX,WAAOC;AAGT,QAAME,IAAc,MAAMH,EAAQ;AAAA,IAChC,GAAGC,EAAM,MAAM,GAAGJ,CAAkB,GAAGI,EAAM,MAAM;AAAA,EAAA,GAE/CG,IAAcD,EAAY,QAAQN,CAAkB;AAE1D,MACEO,MAAgB,MAChBD,EAAY;AAAA,IACVN;AAAA,IACAO,IAAcP,EAAmB;AAAA,EAAA,MAC7B;AAEN,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAIJ,SAAO;AAAA,IACL,QAAQM,EAAY,MAAM,GAAGC,CAAW;AAAA,IACxC,QAAQD,EAAY,MAAMC,IAAcP,EAAmB,MAAM;AAAA,EAAA;AAErE;"}

package/dist/chunks/image-CRerJ5BY.js

@@ -0,0 +1,145 @@
+import { createHash as A } from "node:crypto";
+import { r as R, n as b, t as E } from "./image-codec-CQ8Cwxwb.js";
+import { d as H, a as I, i as T, p as $, u as L } from "./images-QgdmLyQ3.js";
+import { R as w } from "./static-files-ehaD1kE7.js";
+import { readFile as S } from "node:fs/promises";
+import { resolve as v, relative as z, sep as D } from "node:path";
+function B(e) {
+  const t = e.basePath ?? H;
+  let n;
+  return async function(i) {
+    const c = new URL(i.url);
+    if (!c.pathname.startsWith(`${t}/`))
+      return null;
+    if (i.method !== "GET" && i.method !== "HEAD")
+      return new Response("Method Not Allowed", {
+        headers: {
+          allow: "GET, HEAD",
+          "content-type": "text/plain; charset=utf-8"
+        },
+        status: 405
+      });
+    n ??= o();
+    let d;
+    try {
+      d = await n;
+    } catch (r) {
+      throw n = void 0, r;
+    }
+    const l = d.get(c.pathname);
+    return l ? F(i, l) : null;
+  };
+  async function o() {
+    const s = await R({ ...e, basePath: t });
+    return new Map(s.map((i) => [i.url, i]));
+  }
+}
+function F(e, t) {
+  const n = `"${A("sha256").update(t.body).digest("base64url").slice(0, 27)}"`, o = new Headers({
+    "cache-control": w,
+    "content-type": t.contentType,
+    etag: n
+  });
+  return e.headers.get("if-none-match") === n ? new Response(null, { headers: o, status: 304 }) : (o.set("content-length", String(t.body.byteLength)), new Response(
+    e.method === "HEAD" ? null : t.body,
+    { headers: o, status: 200 }
+  ));
+}
+const x = 64, P = 20 * 1024 * 1024;
+function V(e) {
+  const t = v(e.root), n = e.policy ?? {}, o = n.optimizerPath ?? I, s = e.cacheSize ?? x, i = e.fetch ?? ((l, r) => fetch(l, r)), c = /* @__PURE__ */ new Map();
+  return async function(r) {
+    const u = new URL(r.url), a = u.pathname === o ? void 0 : e.resolveVariant?.(u.pathname);
+    if (u.pathname !== o && !a)
+      return null;
+    if (r.method !== "GET" && r.method !== "HEAD")
+      return p(405, "Method Not Allowed", {
+        allow: "GET, HEAD"
+      });
+    if (a && !T(a.src, n))
+      return p(403, "The image policy does not allow this image source.");
+    const h = a ? { descriptor: a, ok: !0 } : $(u, n);
+    if (!h.ok)
+      return p(h.rejection.status, h.rejection.reason);
+    const y = b(
+      h.descriptor,
+      a ? null : r.headers.get("accept")
+    ), f = `${y}|${u.pathname}${u.search}`;
+    let m = c.get(f);
+    if (m)
+      c.delete(f);
+    else {
+      const g = await d(h.descriptor);
+      if (!g)
+        return p(404, "The image source does not exist.");
+      m = await E(g, {
+        format: y,
+        quality: h.descriptor.quality,
+        width: h.descriptor.width
+      });
+    }
+    for (c.set(f, m); c.size > s; )
+      c.delete(c.keys().next().value);
+    return k(
+      r,
+      m,
+      !a && h.descriptor.format === "auto"
+    );
+  };
+  async function d(l) {
+    if (l.sourceKind === "remote") {
+      const u = await i(l.src);
+      if (!u.ok)
+        return;
+      const a = new Uint8Array(await u.arrayBuffer());
+      return a.byteLength > P ? void 0 : a;
+    }
+    const r = M(t, l.src);
+    if (r)
+      try {
+        return new Uint8Array(await S(r));
+      } catch {
+        return;
+      }
+  }
+}
+function k(e, t, n) {
+  const o = `"${C(t.body)}"`, s = new Headers({
+    "cache-control": w,
+    "content-type": t.contentType,
+    etag: o
+  });
+  return n && s.set("vary", "accept"), e.headers.get("if-none-match") === o ? new Response(null, { headers: s, status: 304 }) : (s.set("content-length", String(t.body.byteLength)), new Response(
+    e.method === "HEAD" ? null : t.body,
+    { headers: s, status: 200 }
+  ));
+}
+function p(e, t, n = {}) {
+  return new Response(t, {
+    headers: { "content-type": "text/plain; charset=utf-8", ...n },
+    status: e
+  });
+}
+function M(e, t) {
+  let n;
+  try {
+    n = decodeURIComponent(L(t));
+  } catch {
+    return;
+  }
+  if (n.split(/[\\/]/).includes(".."))
+    return;
+  const o = v(e, `.${n}`);
+  return z(e, o).split(D).includes("..") ? void 0 : o;
+}
+function C(e) {
+  let t = 2166136261, n = 16777619;
+  for (const o of e)
+    t = Math.imul(t ^ o, 16777619) >>> 0, n = Math.imul(n ^ o, 2246822507) >>> 0;
+  return `${t.toString(36)}${n.toString(36)}${e.byteLength.toString(36)}`;
+}
+export {
+  V as a,
+  B as c
+};
+//# sourceMappingURL=image-CRerJ5BY.js.map

package/dist/chunks/image-CRerJ5BY.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-CRerJ5BY.js","sources":["../../src/node/font.ts","../../src/node/image.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport {\n  resolveFontAssets,\n  type FontAsset,\n  type FontAssetOptions,\n} from \"../platform/font-assets\";\nimport { defaultFontPath } from \"../platform/fonts\";\nimport { REVALIDATED_FILE_CACHE_CONTROL } from \"../static-files\";\nimport type { StaticFileHandler } from \"./static\";\n\nexport type FontAssetHandlerOptions = FontAssetOptions;\n\n// The handler answers the self-hosted font URLs that the document declares.\n// It returns null for every other path, so it composes with the static file\n// handler and the route pipeline. The image optimizer composes the same way.\nexport function createFontAssetHandler(\n  options: FontAssetHandlerOptions,\n): StaticFileHandler {\n  const basePath = options.basePath ?? defaultFontPath;\n  let pending: Promise<Map<string, FontAsset>> | undefined;\n\n  return async function handleFontRequest(request) {\n    const url = new URL(request.url);\n\n    if (!url.pathname.startsWith(`${basePath}/`)) {\n      return null;\n    }\n\n    if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n      return new Response(\"Method Not Allowed\", {\n        headers: {\n          allow: \"GET, HEAD\",\n          \"content-type\": \"text/plain; charset=utf-8\",\n        },\n        status: 405,\n      });\n    }\n\n    pending ??= loadAssets();\n\n    let assets: Map<string, FontAsset>;\n\n    try {\n      assets = await pending;\n    } catch (error) {\n      pending = undefined;\n      throw error;\n    }\n\n    const asset = assets.get(url.pathname);\n\n    return asset ? respond(request, asset) : null;\n  };\n\n  async function loadAssets() {\n    const assets = await resolveFontAssets({ ...options, basePath });\n\n    return new Map(assets.map((asset) => [asset.url, asset]));\n  }\n}\n\n// A font URL names the family, the weight, and the style rather than the\n// content of the file. A strong entity tag keeps a replaced file cheap to\n// revalidate, the same trade the image optimizer makes.\nfunction respond(request: Request, asset: FontAsset) {\n  const etag = `\"${createHash(\"sha256\").update(asset.body).digest(\"base64url\").slice(0, 27)}\"`;\n  const headers = new Headers({\n    \"cache-control\": REVALIDATED_FILE_CACHE_CONTROL,\n    \"content-type\": asset.contentType,\n    etag,\n  });\n\n  if (request.headers.get(\"if-none-match\") === etag) {\n    return new Response(null, { headers, status: 304 });\n  }\n\n  headers.set(\"content-length\", String(asset.body.byteLength));\n\n  // TYPE-EVIDENCE: the font body is an ArrayBuffer-backed view that the DOM body type accepts.\n  return new Response(\n    request.method === \"HEAD\" ? null : (asset.body as Uint8Array<ArrayBuffer>),\n    { headers, status: 200 },\n  );\n}\n","import { readFile } from \"node:fs/promises\";\nimport { relative, resolve, sep } from \"node:path\";\nimport {\n  negotiateImageFormat,\n  transformImage,\n  type EncodedImage,\n} from \"../platform/image-codec\";\nimport { defaultImageOptimizerPath } from \"../platform/image-url\";\nimport type { ImageVariantDescriptor } from \"../platform/image-url\";\nimport {\n  isAllowedImageSource,\n  parseImageOptimizerRequest,\n} from \"../platform/images\";\nimport type { ImagePolicy } from \"../platform/images\";\nimport { urlPath } from \"../platform/url\";\nimport type { StaticFileHandler } from \"./static\";\nimport { REVALIDATED_FILE_CACHE_CONTROL } from \"../static-files\";\n\nexport type ImageOptimizerFetch = (\n  input: string,\n  init?: { signal?: AbortSignal },\n) => Promise<Response>;\n\nexport type ImageOptimizerOptions = {\n  // The number of encoded variants that stay in memory. The optimizer keeps\n  // the most recent request at the front.\n  cacheSize?: number;\n  fetch?: ImageOptimizerFetch;\n  policy?: ImagePolicy;\n  // Maps a static loader variant path back to the transform behind it. The\n  // development server passes the recorded plans, so a page renders the same\n  // URL in development and in the static build.\n  resolveVariant?: (pathname: string) => ImageVariantDescriptor | undefined;\n  // The directory that holds every local source image, normally the client\n  // build output.\n  root: string;\n};\n\nconst defaultCacheSize = 64;\nconst maximumRemoteImageBytes = 20 * 1024 * 1024;\n\n// The optimizer answers the same URL that `planImageTransform` writes. It\n// returns null for every other path, so it composes with the static file\n// handler and the route pipeline.\nexport function createImageOptimizer(\n  options: ImageOptimizerOptions,\n): StaticFileHandler {\n  const root = resolve(options.root);\n  const policy = options.policy ?? {};\n  const optimizerPath = policy.optimizerPath ?? defaultImageOptimizerPath;\n  const cacheSize = options.cacheSize ?? defaultCacheSize;\n  const load = options.fetch ?? ((input, init) => fetch(input, init));\n  const cache = new Map<string, EncodedImage>();\n\n  return async function handleImageRequest(request) {\n    const url = new URL(request.url);\n    const variant = url.pathname === optimizerPath\n      ? undefined\n      : options.resolveVariant?.(url.pathname);\n\n    if (url.pathname !== optimizerPath && !variant) {\n      return null;\n    }\n\n    if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n      return plainText(405, \"Method Not Allowed\", {\n        allow: \"GET, HEAD\",\n      });\n    }\n\n    if (variant && !isAllowedImageSource(variant.src, policy)) {\n      return plainText(403, \"The image policy does not allow this image source.\");\n    }\n\n    const parsed = variant\n      ? ({ descriptor: variant, ok: true } as const)\n      : parseImageOptimizerRequest(url, policy);\n\n    if (!parsed.ok) {\n      return plainText(parsed.rejection.status, parsed.rejection.reason);\n    }\n\n    const format = negotiateImageFormat(\n      parsed.descriptor,\n      variant ? null : request.headers.get(\"accept\"),\n    );\n    const key = `${format}|${url.pathname}${url.search}`;\n    let encoded = cache.get(key);\n\n    if (encoded) {\n      cache.delete(key);\n    } else {\n      const source = await readSource(parsed.descriptor);\n\n      if (!source) {\n        return plainText(404, \"The image source does not exist.\");\n      }\n\n      encoded = await transformImage(source, {\n        format,\n        quality: parsed.descriptor.quality,\n        width: parsed.descriptor.width,\n      });\n    }\n\n    cache.set(key, encoded);\n\n    while (cache.size > cacheSize) {\n      // TYPE-EVIDENCE: the loop runs only while the cache holds an entry. The next key therefore exists as a string.\n      cache.delete(cache.keys().next().value as string);\n    }\n\n    return respond(\n      request,\n      encoded,\n      !variant && parsed.descriptor.format === \"auto\",\n    );\n  };\n\n  async function readSource(descriptor: ImageVariantDescriptor) {\n    if (descriptor.sourceKind === \"remote\") {\n      const response = await load(descriptor.src);\n\n      if (!response.ok) {\n        return undefined;\n      }\n\n      const body = new Uint8Array(await response.arrayBuffer());\n\n      return body.byteLength > maximumRemoteImageBytes ? undefined : body;\n    }\n\n    const file = resolveLocalFile(root, descriptor.src);\n\n    if (!file) {\n      return undefined;\n    }\n\n    try {\n      return new Uint8Array(await readFile(file));\n    } catch {\n      return undefined;\n    }\n  }\n}\n\n// The URL carries the source path rather than a content hash, so a long\n// immutable lifetime would outlive a replaced source file. A strong entity\n// tag keeps the revalidation cheap instead.\nfunction respond(request: Request, encoded: EncodedImage, varyOnAccept: boolean) {\n  const etag = `\"${weakHash(encoded.body)}\"`;\n  const headers = new Headers({\n    \"cache-control\": REVALIDATED_FILE_CACHE_CONTROL,\n    \"content-type\": encoded.contentType,\n    etag,\n  });\n\n  if (varyOnAccept) {\n    headers.set(\"vary\", \"accept\");\n  }\n\n  if (request.headers.get(\"if-none-match\") === etag) {\n    return new Response(null, { headers, status: 304 });\n  }\n\n  headers.set(\"content-length\", String(encoded.body.byteLength));\n\n  // TYPE-EVIDENCE: the encoded body is an ArrayBuffer-backed view that the DOM body type accepts.\n  return new Response(\n    request.method === \"HEAD\" ? null : (encoded.body as Uint8Array<ArrayBuffer>),\n    { headers, status: 200 },\n  );\n}\n\nfunction plainText(\n  status: number,\n  body: string,\n  extraHeaders: Record<string, string> = {},\n) {\n  return new Response(body, {\n    headers: { \"content-type\": \"text/plain; charset=utf-8\", ...extraHeaders },\n    status,\n  });\n}\n\nfunction resolveLocalFile(root: string, src: string) {\n  let decoded: string;\n\n  try {\n    decoded = decodeURIComponent(urlPath(src));\n  } catch {\n    return undefined;\n  }\n\n  if (decoded.split(/[\\\\/]/).includes(\"..\")) {\n    return undefined;\n  }\n\n  const file = resolve(root, `.${decoded}`);\n\n  return relative(root, file).split(sep).includes(\"..\") ? undefined : file;\n}\n\nfunction weakHash(body: Uint8Array) {\n  let low = 0x811c9dc5;\n  let high = 0x01000193;\n\n  for (const byte of body) {\n    low = Math.imul(low ^ byte, 0x01000193) >>> 0;\n    high = Math.imul(high ^ byte, 0x85ebca6b) >>> 0;\n  }\n\n  return `${low.toString(36)}${high.toString(36)}${body.byteLength.toString(36)}`;\n}\n"],"names":["createFontAssetHandler","options","basePath","defaultFontPath","pending","request","url","loadAssets","assets","error","asset","respond","resolveFontAssets","etag","createHash","headers","REVALIDATED_FILE_CACHE_CONTROL","defaultCacheSize","maximumRemoteImageBytes","createImageOptimizer","root","resolve","policy","optimizerPath","defaultImageOptimizerPath","cacheSize","load","input","init","cache","variant","plainText","isAllowedImageSource","parsed","parseImageOptimizerRequest","format","negotiateImageFormat","key","encoded","source","readSource","transformImage","descriptor","response","body","file","resolveLocalFile","readFile","varyOnAccept","weakHash","status","extraHeaders","src","decoded","urlPath","relative","sep","low","high","byte"],"mappings":";;;;;;AAeO,SAASA,EACdC,GACmB;AACnB,QAAMC,IAAWD,EAAQ,YAAYE;AACrC,MAAIC;AAEJ,SAAO,eAAiCC,GAAS;AAC/C,UAAMC,IAAM,IAAI,IAAID,EAAQ,GAAG;AAE/B,QAAI,CAACC,EAAI,SAAS,WAAW,GAAGJ,CAAQ,GAAG;AACzC,aAAO;AAGT,QAAIG,EAAQ,WAAW,SAASA,EAAQ,WAAW;AACjD,aAAO,IAAI,SAAS,sBAAsB;AAAA,QACxC,SAAS;AAAA,UACP,OAAO;AAAA,UACP,gBAAgB;AAAA,QAAA;AAAA,QAElB,QAAQ;AAAA,MAAA,CACT;AAGH,IAAAD,MAAYG,EAAA;AAEZ,QAAIC;AAEJ,QAAI;AACF,MAAAA,IAAS,MAAMJ;AAAA,IACjB,SAASK,GAAO;AACd,YAAAL,IAAU,QACJK;AAAA,IACR;AAEA,UAAMC,IAAQF,EAAO,IAAIF,EAAI,QAAQ;AAErC,WAAOI,IAAQC,EAAQN,GAASK,CAAK,IAAI;AAAA,EAC3C;AAEA,iBAAeH,IAAa;AAC1B,UAAMC,IAAS,MAAMI,EAAkB,EAAE,GAAGX,GAAS,UAAAC,GAAU;AAE/D,WAAO,IAAI,IAAIM,EAAO,IAAI,CAACE,MAAU,CAACA,EAAM,KAAKA,CAAK,CAAC,CAAC;AAAA,EAC1D;AACF;AAKA,SAASC,EAAQN,GAAkBK,GAAkB;AACnD,QAAMG,IAAO,IAAIC,EAAW,QAAQ,EAAE,OAAOJ,EAAM,IAAI,EAAE,OAAO,WAAW,EAAE,MAAM,GAAG,EAAE,CAAC,KACnFK,IAAU,IAAI,QAAQ;AAAA,IAC1B,iBAAiBC;AAAA,IACjB,gBAAgBN,EAAM;AAAA,IACtB,MAAAG;AAAA,EAAA,CACD;AAED,SAAIR,EAAQ,QAAQ,IAAI,eAAe,MAAMQ,IACpC,IAAI,SAAS,MAAM,EAAE,SAAAE,GAAS,QAAQ,KAAK,KAGpDA,EAAQ,IAAI,kBAAkB,OAAOL,EAAM,KAAK,UAAU,CAAC,GAGpD,IAAI;AAAA,IACTL,EAAQ,WAAW,SAAS,OAAQK,EAAM;AAAA,IAC1C,EAAE,SAAAK,GAAS,QAAQ,IAAA;AAAA,EAAI;AAE3B;AC7CA,MAAME,IAAmB,IACnBC,IAA0B,KAAK,OAAO;AAKrC,SAASC,EACdlB,GACmB;AACnB,QAAMmB,IAAOC,EAAQpB,EAAQ,IAAI,GAC3BqB,IAASrB,EAAQ,UAAU,CAAA,GAC3BsB,IAAgBD,EAAO,iBAAiBE,GACxCC,IAAYxB,EAAQ,aAAagB,GACjCS,IAAOzB,EAAQ,UAAU,CAAC0B,GAAOC,MAAS,MAAMD,GAAOC,CAAI,IAC3DC,wBAAY,IAAA;AAElB,SAAO,eAAkCxB,GAAS;AAChD,UAAMC,IAAM,IAAI,IAAID,EAAQ,GAAG,GACzByB,IAAUxB,EAAI,aAAaiB,IAC7B,SACAtB,EAAQ,iBAAiBK,EAAI,QAAQ;AAEzC,QAAIA,EAAI,aAAaiB,KAAiB,CAACO;AACrC,aAAO;AAGT,QAAIzB,EAAQ,WAAW,SAASA,EAAQ,WAAW;AACjD,aAAO0B,EAAU,KAAK,sBAAsB;AAAA,QAC1C,OAAO;AAAA,MAAA,CACR;AAGH,QAAID,KAAW,CAACE,EAAqBF,EAAQ,KAAKR,CAAM;AACtD,aAAOS,EAAU,KAAK,oDAAoD;AAG5E,UAAME,IAASH,IACV,EAAE,YAAYA,GAAS,IAAI,OAC5BI,EAA2B5B,GAAKgB,CAAM;AAE1C,QAAI,CAACW,EAAO;AACV,aAAOF,EAAUE,EAAO,UAAU,QAAQA,EAAO,UAAU,MAAM;AAGnE,UAAME,IAASC;AAAA,MACbH,EAAO;AAAA,MACPH,IAAU,OAAOzB,EAAQ,QAAQ,IAAI,QAAQ;AAAA,IAAA,GAEzCgC,IAAM,GAAGF,CAAM,IAAI7B,EAAI,QAAQ,GAAGA,EAAI,MAAM;AAClD,QAAIgC,IAAUT,EAAM,IAAIQ,CAAG;AAE3B,QAAIC;AACF,MAAAT,EAAM,OAAOQ,CAAG;AAAA,SACX;AACL,YAAME,IAAS,MAAMC,EAAWP,EAAO,UAAU;AAEjD,UAAI,CAACM;AACH,eAAOR,EAAU,KAAK,kCAAkC;AAG1D,MAAAO,IAAU,MAAMG,EAAeF,GAAQ;AAAA,QACrC,QAAAJ;AAAA,QACA,SAASF,EAAO,WAAW;AAAA,QAC3B,OAAOA,EAAO,WAAW;AAAA,MAAA,CAC1B;AAAA,IACH;AAIA,SAFAJ,EAAM,IAAIQ,GAAKC,CAAO,GAEfT,EAAM,OAAOJ;AAElB,MAAAI,EAAM,OAAOA,EAAM,KAAA,EAAO,KAAA,EAAO,KAAe;AAGlD,WAAOlB;AAAA,MACLN;AAAA,MACAiC;AAAA,MACA,CAACR,KAAWG,EAAO,WAAW,WAAW;AAAA,IAAA;AAAA,EAE7C;AAEA,iBAAeO,EAAWE,GAAoC;AAC5D,QAAIA,EAAW,eAAe,UAAU;AACtC,YAAMC,IAAW,MAAMjB,EAAKgB,EAAW,GAAG;AAE1C,UAAI,CAACC,EAAS;AACZ;AAGF,YAAMC,IAAO,IAAI,WAAW,MAAMD,EAAS,aAAa;AAExD,aAAOC,EAAK,aAAa1B,IAA0B,SAAY0B;AAAA,IACjE;AAEA,UAAMC,IAAOC,EAAiB1B,GAAMsB,EAAW,GAAG;AAElD,QAAKG;AAIL,UAAI;AACF,eAAO,IAAI,WAAW,MAAME,EAASF,CAAI,CAAC;AAAA,MAC5C,QAAQ;AACN;AAAA,MACF;AAAA,EACF;AACF;AAKA,SAASlC,EAAQN,GAAkBiC,GAAuBU,GAAuB;AAC/E,QAAMnC,IAAO,IAAIoC,EAASX,EAAQ,IAAI,CAAC,KACjCvB,IAAU,IAAI,QAAQ;AAAA,IAC1B,iBAAiBC;AAAA,IACjB,gBAAgBsB,EAAQ;AAAA,IACxB,MAAAzB;AAAA,EAAA,CACD;AAMD,SAJImC,KACFjC,EAAQ,IAAI,QAAQ,QAAQ,GAG1BV,EAAQ,QAAQ,IAAI,eAAe,MAAMQ,IACpC,IAAI,SAAS,MAAM,EAAE,SAAAE,GAAS,QAAQ,KAAK,KAGpDA,EAAQ,IAAI,kBAAkB,OAAOuB,EAAQ,KAAK,UAAU,CAAC,GAGtD,IAAI;AAAA,IACTjC,EAAQ,WAAW,SAAS,OAAQiC,EAAQ;AAAA,IAC5C,EAAE,SAAAvB,GAAS,QAAQ,IAAA;AAAA,EAAI;AAE3B;AAEA,SAASgB,EACPmB,GACAN,GACAO,IAAuC,CAAA,GACvC;AACA,SAAO,IAAI,SAASP,GAAM;AAAA,IACxB,SAAS,EAAE,gBAAgB,6BAA6B,GAAGO,EAAA;AAAA,IAC3D,QAAAD;AAAA,EAAA,CACD;AACH;AAEA,SAASJ,EAAiB1B,GAAcgC,GAAa;AACnD,MAAIC;AAEJ,MAAI;AACF,IAAAA,IAAU,mBAAmBC,EAAQF,CAAG,CAAC;AAAA,EAC3C,QAAQ;AACN;AAAA,EACF;AAEA,MAAIC,EAAQ,MAAM,OAAO,EAAE,SAAS,IAAI;AACtC;AAGF,QAAMR,IAAOxB,EAAQD,GAAM,IAAIiC,CAAO,EAAE;AAExC,SAAOE,EAASnC,GAAMyB,CAAI,EAAE,MAAMW,CAAG,EAAE,SAAS,IAAI,IAAI,SAAYX;AACtE;AAEA,SAASI,EAASL,GAAkB;AAClC,MAAIa,IAAM,YACNC,IAAO;AAEX,aAAWC,KAAQf;AACjB,IAAAa,IAAM,KAAK,KAAKA,IAAME,GAAM,QAAU,MAAM,GAC5CD,IAAO,KAAK,KAAKA,IAAOC,GAAM,UAAU,MAAM;AAGhD,SAAO,GAAGF,EAAI,SAAS,EAAE,CAAC,GAAGC,EAAK,SAAS,EAAE,CAAC,GAAGd,EAAK,WAAW,SAAS,EAAE,CAAC;AAC/E;"}

package/dist/chunks/{image-codec-Dh1POFhE.js → image-codec-CQ8Cwxwb.js}

@@ -1,7 +1,7 @@
 import { createHash as d } from "node:crypto";
 import { readFile as h, mkdir as p, writeFile as F } from "node:fs/promises";
 import { resolve as u, join as w, relative as b, sep as $ } from "node:path";
-import { d as v, f as S, a as N, r as E, b as J, c as O, i as j } from "./images-CG7ZzayG.js";
+import { d as v, f as S, b as N, r as E, c as J, e as O, g as j } from "./images-QgdmLyQ3.js";
 const y = 5 * 1024 * 1024;
 async function H(e) {
   const t = e.fonts ?? [];
@@ -138,4 +138,4 @@ export {
   H as r,
   q as t
 };
-//# sourceMappingURL=image-codec-Dh1POFhE.js.map
+//# sourceMappingURL=image-codec-CQ8Cwxwb.js.map

package/dist/chunks/{image-codec-Dh1POFhE.js.map → image-codec-CQ8Cwxwb.js.map}

@@ -1 +1 @@
-{"version":3,"file":"image-codec-Dh1POFhE.js","sources":["../../src/platform/font-assets.ts","../../src/platform/image-codec.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { mkdir, readFile, writeFile } from \"node:fs/promises\";\nimport { join, relative, resolve, sep } from \"node:path\";\nimport {\n  defaultFontPath,\n  fontAssetFileName,\n  fontFormat,\n  fontMediaType,\n  fontStylesheetUrl,\n  renderFontFaceCss,\n  type FontContribution,\n  type FontDefinition,\n} from \"./fonts\";\n\nexport type FontAssetFetch = (\n  input: string,\n  init?: { signal?: AbortSignal },\n) => Promise<Response>;\n\nexport type FontAssetOptions = {\n  basePath?: string;\n  // Where a downloaded font file stays between builds. A build that already\n  // downloaded a font reads it back and makes no network request.\n  cacheDir?: string;\n  fetch?: FontAssetFetch;\n  fonts?: FontContribution;\n  // The project directory that every local font source resolves against.\n  root: string;\n};\n\nexport type FontAsset = {\n  body: Uint8Array;\n  contentType: string;\n  // The output path, relative to the directory that the build publishes.\n  file: string;\n  url: string;\n};\n\nconst maximumFontBytes = 5 * 1024 * 1024;\n\n// One font declaration becomes one published file plus one stylesheet. The\n// build writes these files, and the Node handler serves the same set from\n// memory. Both derive every URL from the declaration, so they cannot drift.\nexport async function resolveFontAssets(\n  options: FontAssetOptions,\n): Promise<FontAsset[]> {\n  const fonts = options.fonts ?? [];\n\n  if (fonts.length === 0) {\n    return [];\n  }\n\n  const basePath = options.basePath ?? defaultFontPath;\n  const root = resolve(options.root);\n  const cacheDir = resolve(\n    options.cacheDir ?? join(root, \"node_modules\", \".demiurge\", \"fonts\"),\n  );\n  const load = options.fetch ?? ((input, init) => fetch(input, init));\n  const published = new Map<string, string>();\n  const assets: FontAsset[] = [];\n\n  for (const definition of fonts) {\n    if (!definition.selfHost) {\n      continue;\n    }\n\n    const name = fontAssetFileName(definition);\n    const claimed = published.get(name);\n\n    if (claimed !== undefined) {\n      if (claimed !== definition.src) {\n        throw new Error(\n          `Font family ${JSON.stringify(definition.family)} declares two sources that publish the same file ${JSON.stringify(name)}. Give one of them a different weight or style.`,\n        );\n      }\n\n      continue;\n    }\n\n    published.set(name, definition.src);\n    assets.push({\n      body: await readFontBody(definition, { cacheDir, load, root }),\n      contentType: fontMediaType(definition.src),\n      file: outputFile(basePath, name),\n      url: `${basePath}/${name}`,\n    });\n  }\n\n  const stylesheet = `${renderFontFaceCss(fonts, basePath)}\\n`;\n\n  assets.push({\n    body: new TextEncoder().encode(stylesheet),\n    contentType: \"text/css; charset=utf-8\",\n    file: outputFile(basePath, \"fonts.css\"),\n    url: fontStylesheetUrl(basePath),\n  });\n\n  return assets;\n}\n\nasync function readFontBody(\n  definition: FontDefinition,\n  context: { cacheDir: string; load: FontAssetFetch; root: string },\n) {\n  const body = definition.source === \"google\"\n    ? await downloadFontFile(definition, context)\n    : await readLocalFontFile(definition, context.root);\n\n  if (body.byteLength === 0) {\n    throw new Error(\n      `Font family ${JSON.stringify(definition.family)} resolved to an empty file.`,\n    );\n  }\n\n  if (body.byteLength > maximumFontBytes) {\n    throw new Error(\n      `Font family ${JSON.stringify(definition.family)} is larger than the ${maximumFontBytes} byte limit.`,\n    );\n  }\n\n  return body;\n}\n\nasync function readLocalFontFile(definition: FontDefinition, root: string) {\n  const file = resolve(root, definition.src.replace(/^\\/+/, \"\"));\n\n  if (relative(root, file).split(sep).includes(\"..\")) {\n    throw new Error(\n      `Font source escaped the project directory: ${JSON.stringify(definition.src)}.`,\n    );\n  }\n\n  try {\n    return new Uint8Array(await readFile(file));\n  } catch (error) {\n    throw new Error(\n      `Demiurge could not read the font file ${JSON.stringify(definition.src)} for family ${JSON.stringify(definition.family)}.`,\n      { cause: error },\n    );\n  }\n}\n\n// A downloaded font stays in the cache directory. The first build reaches the\n// font host once, and every later build reads the file from disk. A build that\n// runs without network access therefore keeps working.\nasync function downloadFontFile(\n  definition: FontDefinition,\n  context: { cacheDir: string; load: FontAssetFetch; root: string },\n) {\n  const digest = createHash(\"sha256\").update(definition.src).digest(\"hex\");\n  const cacheFile = join(\n    context.cacheDir,\n    `${digest.slice(0, 32)}.${fontFormat(definition.src)}`,\n  );\n\n  try {\n    return new Uint8Array(await readFile(cacheFile));\n  } catch {\n    // The cache holds no copy yet, so the font host answers this once.\n  }\n\n  let response: Response;\n\n  try {\n    response = await context.load(definition.src);\n  } catch (error) {\n    throw new Error(\n      `Demiurge could not download the font for family ${JSON.stringify(definition.family)} from ${JSON.stringify(definition.src)}.`,\n      { cause: error },\n    );\n  }\n\n  if (!response.ok) {\n    throw new Error(\n      `The font host answered ${response.status} for family ${JSON.stringify(definition.family)} at ${JSON.stringify(definition.src)}.`,\n    );\n  }\n\n  const body = new Uint8Array(await response.arrayBuffer());\n\n  await mkdir(context.cacheDir, { recursive: true });\n  await writeFile(cacheFile, body);\n\n  return body;\n}\n\nfunction outputFile(basePath: string, name: string) {\n  return `${basePath.replace(/^\\/+/, \"\")}/${name}`;\n}\n","import type { ImageFormat } from \"./images\";\nimport { imageSourceExtension, type ImageVariantDescriptor } from \"./image-url\";\n\nexport type EncodedImage = {\n  body: Uint8Array;\n  contentType: string;\n};\n\ntype SharpModule = {\n  default: (input: Uint8Array) => SharpPipeline;\n};\n\ntype SharpPipeline = {\n  avif: (options: { quality: number }) => SharpPipeline;\n  jpeg: (options: { quality: number }) => SharpPipeline;\n  png: () => SharpPipeline;\n  resize: (options: {\n    width: number;\n    withoutEnlargement: boolean;\n  }) => SharpPipeline;\n  toBuffer: () => Promise<Buffer>;\n  webp: (options: { quality: number }) => SharpPipeline;\n};\n\nconst contentTypes: Record<Exclude<ImageFormat, \"auto\">, string> = {\n  avif: \"image/avif\",\n  jpeg: \"image/jpeg\",\n  png: \"image/png\",\n  webp: \"image/webp\",\n};\n\nconst defaultQuality = 75;\n\nexport function imageContentType(format: Exclude<ImageFormat, \"auto\">) {\n  return contentTypes[format];\n}\n\n// `auto` lets the browser take the smallest format that it accepts. A client\n// that sends no usable `accept` header keeps the source format.\nexport function negotiateImageFormat(\n  descriptor: ImageVariantDescriptor,\n  accept: string | null,\n): Exclude<ImageFormat, \"auto\"> {\n  if (descriptor.format !== \"auto\") {\n    return descriptor.format;\n  }\n\n  const accepted = (accept ?? \"\").toLowerCase();\n\n  if (accepted.includes(\"image/avif\")) {\n    return \"avif\";\n  }\n\n  if (accepted.includes(\"image/webp\")) {\n    return \"webp\";\n  }\n\n  return sourceFormat(descriptor.src);\n}\n\nexport function sourceFormat(src: string): Exclude<ImageFormat, \"auto\"> {\n  const extension = imageSourceExtension(src);\n\n  if (extension === \"avif\") {\n    return \"avif\";\n  }\n\n  if (extension === \"webp\") {\n    return \"webp\";\n  }\n\n  if (extension === \"png\") {\n    return \"png\";\n  }\n\n  return \"jpeg\";\n}\n\nexport async function transformImage(\n  source: Uint8Array,\n  options: {\n    format: Exclude<ImageFormat, \"auto\">;\n    quality?: number;\n    width: number;\n  },\n): Promise<EncodedImage> {\n  const sharp = await loadImageCodec();\n  const quality = options.quality ?? defaultQuality;\n  const resized = sharp(source).resize({\n    width: options.width,\n    withoutEnlargement: true,\n  });\n\n  return {\n    body: new Uint8Array(await encode(resized, options.format, quality)),\n    contentType: contentTypes[options.format],\n  };\n}\n\nfunction encode(\n  pipeline: SharpPipeline,\n  format: Exclude<ImageFormat, \"auto\">,\n  quality: number,\n) {\n  if (format === \"png\") {\n    return pipeline.png().toBuffer();\n  }\n\n  if (format === \"jpeg\") {\n    return pipeline.jpeg({ quality }).toBuffer();\n  }\n\n  if (format === \"avif\") {\n    return pipeline.avif({ quality }).toBuffer();\n  }\n\n  return pipeline.webp({ quality }).toBuffer();\n}\n\n// `sharp` is an optional peer dependency. Only an application that optimizes\n// an image installs it, the same rule that ADR 0006 states for a host\n// adapter dependency.\nasync function loadImageCodec() {\n  let module: SharpModule;\n\n  try {\n    // TYPE-EVIDENCE: sharp ships no types. The local type describes the methods the codec calls.\n    module = (await import(\"sharp\")) as SharpModule;\n  } catch (error) {\n    throw new Error(\n      \"Demiurge image optimization requires the optional peer dependency sharp. Install sharp in the application.\",\n      { cause: error },\n    );\n  }\n\n  return module.default;\n}\n"],"names":["maximumFontBytes","resolveFontAssets","options","fonts","basePath","defaultFontPath","root","resolve","cacheDir","join","load","input","init","published","assets","definition","name","fontAssetFileName","claimed","readFontBody","fontMediaType","outputFile","stylesheet","renderFontFaceCss","fontStylesheetUrl","context","body","downloadFontFile","readLocalFontFile","file","relative","sep","readFile","error","digest","createHash","cacheFile","fontFormat","response","mkdir","writeFile","contentTypes","defaultQuality","negotiateImageFormat","descriptor","accept","accepted","sourceFormat","src","extension","imageSourceExtension","transformImage","source","sharp","loadImageCodec","quality","resized","encode","pipeline","format","module"],"mappings":";;;;AAsCA,MAAMA,IAAmB,IAAI,OAAO;AAKpC,eAAsBC,EACpBC,GACsB;AACtB,QAAMC,IAAQD,EAAQ,SAAS,CAAA;AAE/B,MAAIC,EAAM,WAAW;AACnB,WAAO,CAAA;AAGT,QAAMC,IAAWF,EAAQ,YAAYG,GAC/BC,IAAOC,EAAQL,EAAQ,IAAI,GAC3BM,IAAWD;AAAA,IACfL,EAAQ,YAAYO,EAAKH,GAAM,gBAAgB,aAAa,OAAO;AAAA,EAAA,GAE/DI,IAAOR,EAAQ,UAAU,CAACS,GAAOC,MAAS,MAAMD,GAAOC,CAAI,IAC3DC,wBAAgB,IAAA,GAChBC,IAAsB,CAAA;AAE5B,aAAWC,KAAcZ,GAAO;AAC9B,QAAI,CAACY,EAAW;AACd;AAGF,UAAMC,IAAOC,EAAkBF,CAAU,GACnCG,IAAUL,EAAU,IAAIG,CAAI;AAElC,QAAIE,MAAY,QAAW;AACzB,UAAIA,MAAYH,EAAW;AACzB,cAAM,IAAI;AAAA,UACR,eAAe,KAAK,UAAUA,EAAW,MAAM,CAAC,oDAAoD,KAAK,UAAUC,CAAI,CAAC;AAAA,QAAA;AAI5H;AAAA,IACF;AAEA,IAAAH,EAAU,IAAIG,GAAMD,EAAW,GAAG,GAClCD,EAAO,KAAK;AAAA,MACV,MAAM,MAAMK,EAAaJ,GAAY,EAAE,UAAAP,GAAU,MAAAE,GAAM,MAAAJ,GAAM;AAAA,MAC7D,aAAac,EAAcL,EAAW,GAAG;AAAA,MACzC,MAAMM,EAAWjB,GAAUY,CAAI;AAAA,MAC/B,KAAK,GAAGZ,CAAQ,IAAIY,CAAI;AAAA,IAAA,CACzB;AAAA,EACH;AAEA,QAAMM,IAAa,GAAGC,EAAkBpB,GAAOC,CAAQ,CAAC;AAAA;AAExD,SAAAU,EAAO,KAAK;AAAA,IACV,MAAM,IAAI,cAAc,OAAOQ,CAAU;AAAA,IACzC,aAAa;AAAA,IACb,MAAMD,EAAWjB,GAAU,WAAW;AAAA,IACtC,KAAKoB,EAAkBpB,CAAQ;AAAA,EAAA,CAChC,GAEMU;AACT;AAEA,eAAeK,EACbJ,GACAU,GACA;AACA,QAAMC,IAAOX,EAAW,WAAW,WAC/B,MAAMY,EAAiBZ,GAAYU,CAAO,IAC1C,MAAMG,EAAkBb,GAAYU,EAAQ,IAAI;AAEpD,MAAIC,EAAK,eAAe;AACtB,UAAM,IAAI;AAAA,MACR,eAAe,KAAK,UAAUX,EAAW,MAAM,CAAC;AAAA,IAAA;AAIpD,MAAIW,EAAK,aAAa1B;AACpB,UAAM,IAAI;AAAA,MACR,eAAe,KAAK,UAAUe,EAAW,MAAM,CAAC,uBAAuBf,CAAgB;AAAA,IAAA;AAI3F,SAAO0B;AACT;AAEA,eAAeE,EAAkBb,GAA4BT,GAAc;AACzE,QAAMuB,IAAOtB,EAAQD,GAAMS,EAAW,IAAI,QAAQ,QAAQ,EAAE,CAAC;AAE7D,MAAIe,EAASxB,GAAMuB,CAAI,EAAE,MAAME,CAAG,EAAE,SAAS,IAAI;AAC/C,UAAM,IAAI;AAAA,MACR,8CAA8C,KAAK,UAAUhB,EAAW,GAAG,CAAC;AAAA,IAAA;AAIhF,MAAI;AACF,WAAO,IAAI,WAAW,MAAMiB,EAASH,CAAI,CAAC;AAAA,EAC5C,SAASI,GAAO;AACd,UAAM,IAAI;AAAA,MACR,yCAAyC,KAAK,UAAUlB,EAAW,GAAG,CAAC,eAAe,KAAK,UAAUA,EAAW,MAAM,CAAC;AAAA,MACvH,EAAE,OAAOkB,EAAA;AAAA,IAAM;AAAA,EAEnB;AACF;AAKA,eAAeN,EACbZ,GACAU,GACA;AACA,QAAMS,IAASC,EAAW,QAAQ,EAAE,OAAOpB,EAAW,GAAG,EAAE,OAAO,KAAK,GACjEqB,IAAY3B;AAAA,IAChBgB,EAAQ;AAAA,IACR,GAAGS,EAAO,MAAM,GAAG,EAAE,CAAC,IAAIG,EAAWtB,EAAW,GAAG,CAAC;AAAA,EAAA;AAGtD,MAAI;AACF,WAAO,IAAI,WAAW,MAAMiB,EAASI,CAAS,CAAC;AAAA,EACjD,QAAQ;AAAA,EAER;AAEA,MAAIE;AAEJ,MAAI;AACF,IAAAA,IAAW,MAAMb,EAAQ,KAAKV,EAAW,GAAG;AAAA,EAC9C,SAASkB,GAAO;AACd,UAAM,IAAI;AAAA,MACR,mDAAmD,KAAK,UAAUlB,EAAW,MAAM,CAAC,SAAS,KAAK,UAAUA,EAAW,GAAG,CAAC;AAAA,MAC3H,EAAE,OAAOkB,EAAA;AAAA,IAAM;AAAA,EAEnB;AAEA,MAAI,CAACK,EAAS;AACZ,UAAM,IAAI;AAAA,MACR,0BAA0BA,EAAS,MAAM,eAAe,KAAK,UAAUvB,EAAW,MAAM,CAAC,OAAO,KAAK,UAAUA,EAAW,GAAG,CAAC;AAAA,IAAA;AAIlI,QAAMW,IAAO,IAAI,WAAW,MAAMY,EAAS,aAAa;AAExD,eAAMC,EAAMd,EAAQ,UAAU,EAAE,WAAW,IAAM,GACjD,MAAMe,EAAUJ,GAAWV,CAAI,GAExBA;AACT;AAEA,SAASL,EAAWjB,GAAkBY,GAAc;AAClD,SAAO,GAAGZ,EAAS,QAAQ,QAAQ,EAAE,CAAC,IAAIY,CAAI;AAChD;ACpKA,MAAMyB,IAA6D;AAAA,EACjE,MAAM;AAAA,EACN,MAAM;AAAA,EACN,KAAK;AAAA,EACL,MAAM;AACR,GAEMC,IAAiB;AAQhB,SAASC,EACdC,GACAC,GAC8B;AAC9B,MAAID,EAAW,WAAW;AACxB,WAAOA,EAAW;AAGpB,QAAME,KAAYD,KAAU,IAAI,YAAA;AAEhC,SAAIC,EAAS,SAAS,YAAY,IACzB,SAGLA,EAAS,SAAS,YAAY,IACzB,SAGFC,EAAaH,EAAW,GAAG;AACpC;AAEO,SAASG,EAAaC,GAA2C;AACtE,QAAMC,IAAYC,EAAqBF,CAAG;AAE1C,SAAIC,MAAc,SACT,SAGLA,MAAc,SACT,SAGLA,MAAc,QACT,QAGF;AACT;AAEA,eAAsBE,EACpBC,GACAlD,GAKuB;AACvB,QAAMmD,IAAQ,MAAMC,EAAA,GACdC,IAAUrD,EAAQ,WAAWwC,GAC7Bc,IAAUH,EAAMD,CAAM,EAAE,OAAO;AAAA,IACnC,OAAOlD,EAAQ;AAAA,IACf,oBAAoB;AAAA,EAAA,CACrB;AAED,SAAO;AAAA,IACL,MAAM,IAAI,WAAW,MAAMuD,EAAOD,GAAStD,EAAQ,QAAQqD,CAAO,CAAC;AAAA,IACnE,aAAad,EAAavC,EAAQ,MAAM;AAAA,EAAA;AAE5C;AAEA,SAASuD,EACPC,GACAC,GACAJ,GACA;AACA,SAAII,MAAW,QACND,EAAS,IAAA,EAAM,SAAA,IAGpBC,MAAW,SACND,EAAS,KAAK,EAAE,SAAAH,EAAA,CAAS,EAAE,SAAA,IAGhCI,MAAW,SACND,EAAS,KAAK,EAAE,SAAAH,EAAA,CAAS,EAAE,SAAA,IAG7BG,EAAS,KAAK,EAAE,SAAAH,EAAA,CAAS,EAAE,SAAA;AACpC;AAKA,eAAeD,IAAiB;AAC9B,MAAIM;AAEJ,MAAI;AAEF,IAAAA,IAAU,MAAM,OAAO,OAAO;AAAA,EAChC,SAAS3B,GAAO;AACd,UAAM,IAAI;AAAA,MACR;AAAA,MACA,EAAE,OAAOA,EAAA;AAAA,IAAM;AAAA,EAEnB;AAEA,SAAO2B,EAAO;AAChB;"}
+{"version":3,"file":"image-codec-CQ8Cwxwb.js","sources":["../../src/platform/font-assets.ts","../../src/platform/image-codec.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { mkdir, readFile, writeFile } from \"node:fs/promises\";\nimport { join, relative, resolve, sep } from \"node:path\";\nimport {\n  defaultFontPath,\n  fontAssetFileName,\n  fontFormat,\n  fontMediaType,\n  fontStylesheetUrl,\n  renderFontFaceCss,\n  type FontContribution,\n  type FontDefinition,\n} from \"./fonts\";\n\nexport type FontAssetFetch = (\n  input: string,\n  init?: { signal?: AbortSignal },\n) => Promise<Response>;\n\nexport type FontAssetOptions = {\n  basePath?: string;\n  // Where a downloaded font file stays between builds. A build that already\n  // downloaded a font reads it back and makes no network request.\n  cacheDir?: string;\n  fetch?: FontAssetFetch;\n  fonts?: FontContribution;\n  // The project directory that every local font source resolves against.\n  root: string;\n};\n\nexport type FontAsset = {\n  body: Uint8Array;\n  contentType: string;\n  // The output path, relative to the directory that the build publishes.\n  file: string;\n  url: string;\n};\n\nconst maximumFontBytes = 5 * 1024 * 1024;\n\n// One font declaration becomes one published file plus one stylesheet. The\n// build writes these files, and the Node handler serves the same set from\n// memory. Both derive every URL from the declaration, so they cannot drift.\nexport async function resolveFontAssets(\n  options: FontAssetOptions,\n): Promise<FontAsset[]> {\n  const fonts = options.fonts ?? [];\n\n  if (fonts.length === 0) {\n    return [];\n  }\n\n  const basePath = options.basePath ?? defaultFontPath;\n  const root = resolve(options.root);\n  const cacheDir = resolve(\n    options.cacheDir ?? join(root, \"node_modules\", \".demiurge\", \"fonts\"),\n  );\n  const load = options.fetch ?? ((input, init) => fetch(input, init));\n  const published = new Map<string, string>();\n  const assets: FontAsset[] = [];\n\n  for (const definition of fonts) {\n    if (!definition.selfHost) {\n      continue;\n    }\n\n    const name = fontAssetFileName(definition);\n    const claimed = published.get(name);\n\n    if (claimed !== undefined) {\n      if (claimed !== definition.src) {\n        throw new Error(\n          `Font family ${JSON.stringify(definition.family)} declares two sources that publish the same file ${JSON.stringify(name)}. Give one of them a different weight or style.`,\n        );\n      }\n\n      continue;\n    }\n\n    published.set(name, definition.src);\n    assets.push({\n      body: await readFontBody(definition, { cacheDir, load, root }),\n      contentType: fontMediaType(definition.src),\n      file: outputFile(basePath, name),\n      url: `${basePath}/${name}`,\n    });\n  }\n\n  const stylesheet = `${renderFontFaceCss(fonts, basePath)}\\n`;\n\n  assets.push({\n    body: new TextEncoder().encode(stylesheet),\n    contentType: \"text/css; charset=utf-8\",\n    file: outputFile(basePath, \"fonts.css\"),\n    url: fontStylesheetUrl(basePath),\n  });\n\n  return assets;\n}\n\nasync function readFontBody(\n  definition: FontDefinition,\n  context: { cacheDir: string; load: FontAssetFetch; root: string },\n) {\n  const body = definition.source === \"google\"\n    ? await downloadFontFile(definition, context)\n    : await readLocalFontFile(definition, context.root);\n\n  if (body.byteLength === 0) {\n    throw new Error(\n      `Font family ${JSON.stringify(definition.family)} resolved to an empty file.`,\n    );\n  }\n\n  if (body.byteLength > maximumFontBytes) {\n    throw new Error(\n      `Font family ${JSON.stringify(definition.family)} is larger than the ${maximumFontBytes} byte limit.`,\n    );\n  }\n\n  return body;\n}\n\nasync function readLocalFontFile(definition: FontDefinition, root: string) {\n  const file = resolve(root, definition.src.replace(/^\\/+/, \"\"));\n\n  if (relative(root, file).split(sep).includes(\"..\")) {\n    throw new Error(\n      `Font source escaped the project directory: ${JSON.stringify(definition.src)}.`,\n    );\n  }\n\n  try {\n    return new Uint8Array(await readFile(file));\n  } catch (error) {\n    throw new Error(\n      `Demiurge could not read the font file ${JSON.stringify(definition.src)} for family ${JSON.stringify(definition.family)}.`,\n      { cause: error },\n    );\n  }\n}\n\n// A downloaded font stays in the cache directory. The first build reaches the\n// font host once, and every later build reads the file from disk. A build that\n// runs without network access therefore keeps working.\nasync function downloadFontFile(\n  definition: FontDefinition,\n  context: { cacheDir: string; load: FontAssetFetch; root: string },\n) {\n  const digest = createHash(\"sha256\").update(definition.src).digest(\"hex\");\n  const cacheFile = join(\n    context.cacheDir,\n    `${digest.slice(0, 32)}.${fontFormat(definition.src)}`,\n  );\n\n  try {\n    return new Uint8Array(await readFile(cacheFile));\n  } catch {\n    // The cache holds no copy yet, so the font host answers this once.\n  }\n\n  let response: Response;\n\n  try {\n    response = await context.load(definition.src);\n  } catch (error) {\n    throw new Error(\n      `Demiurge could not download the font for family ${JSON.stringify(definition.family)} from ${JSON.stringify(definition.src)}.`,\n      { cause: error },\n    );\n  }\n\n  if (!response.ok) {\n    throw new Error(\n      `The font host answered ${response.status} for family ${JSON.stringify(definition.family)} at ${JSON.stringify(definition.src)}.`,\n    );\n  }\n\n  const body = new Uint8Array(await response.arrayBuffer());\n\n  await mkdir(context.cacheDir, { recursive: true });\n  await writeFile(cacheFile, body);\n\n  return body;\n}\n\nfunction outputFile(basePath: string, name: string) {\n  return `${basePath.replace(/^\\/+/, \"\")}/${name}`;\n}\n","import type { ImageFormat } from \"./images\";\nimport { imageSourceExtension, type ImageVariantDescriptor } from \"./image-url\";\n\nexport type EncodedImage = {\n  body: Uint8Array;\n  contentType: string;\n};\n\ntype SharpModule = {\n  default: (input: Uint8Array) => SharpPipeline;\n};\n\ntype SharpPipeline = {\n  avif: (options: { quality: number }) => SharpPipeline;\n  jpeg: (options: { quality: number }) => SharpPipeline;\n  png: () => SharpPipeline;\n  resize: (options: {\n    width: number;\n    withoutEnlargement: boolean;\n  }) => SharpPipeline;\n  toBuffer: () => Promise<Buffer>;\n  webp: (options: { quality: number }) => SharpPipeline;\n};\n\nconst contentTypes: Record<Exclude<ImageFormat, \"auto\">, string> = {\n  avif: \"image/avif\",\n  jpeg: \"image/jpeg\",\n  png: \"image/png\",\n  webp: \"image/webp\",\n};\n\nconst defaultQuality = 75;\n\nexport function imageContentType(format: Exclude<ImageFormat, \"auto\">) {\n  return contentTypes[format];\n}\n\n// `auto` lets the browser take the smallest format that it accepts. A client\n// that sends no usable `accept` header keeps the source format.\nexport function negotiateImageFormat(\n  descriptor: ImageVariantDescriptor,\n  accept: string | null,\n): Exclude<ImageFormat, \"auto\"> {\n  if (descriptor.format !== \"auto\") {\n    return descriptor.format;\n  }\n\n  const accepted = (accept ?? \"\").toLowerCase();\n\n  if (accepted.includes(\"image/avif\")) {\n    return \"avif\";\n  }\n\n  if (accepted.includes(\"image/webp\")) {\n    return \"webp\";\n  }\n\n  return sourceFormat(descriptor.src);\n}\n\nexport function sourceFormat(src: string): Exclude<ImageFormat, \"auto\"> {\n  const extension = imageSourceExtension(src);\n\n  if (extension === \"avif\") {\n    return \"avif\";\n  }\n\n  if (extension === \"webp\") {\n    return \"webp\";\n  }\n\n  if (extension === \"png\") {\n    return \"png\";\n  }\n\n  return \"jpeg\";\n}\n\nexport async function transformImage(\n  source: Uint8Array,\n  options: {\n    format: Exclude<ImageFormat, \"auto\">;\n    quality?: number;\n    width: number;\n  },\n): Promise<EncodedImage> {\n  const sharp = await loadImageCodec();\n  const quality = options.quality ?? defaultQuality;\n  const resized = sharp(source).resize({\n    width: options.width,\n    withoutEnlargement: true,\n  });\n\n  return {\n    body: new Uint8Array(await encode(resized, options.format, quality)),\n    contentType: contentTypes[options.format],\n  };\n}\n\nfunction encode(\n  pipeline: SharpPipeline,\n  format: Exclude<ImageFormat, \"auto\">,\n  quality: number,\n) {\n  if (format === \"png\") {\n    return pipeline.png().toBuffer();\n  }\n\n  if (format === \"jpeg\") {\n    return pipeline.jpeg({ quality }).toBuffer();\n  }\n\n  if (format === \"avif\") {\n    return pipeline.avif({ quality }).toBuffer();\n  }\n\n  return pipeline.webp({ quality }).toBuffer();\n}\n\n// `sharp` is an optional peer dependency. Only an application that optimizes\n// an image installs it, the same rule that ADR 0006 states for a host\n// adapter dependency.\nasync function loadImageCodec() {\n  let module: SharpModule;\n\n  try {\n    // TYPE-EVIDENCE: sharp ships no types. The local type describes the methods the codec calls.\n    module = (await import(\"sharp\")) as SharpModule;\n  } catch (error) {\n    throw new Error(\n      \"Demiurge image optimization requires the optional peer dependency sharp. Install sharp in the application.\",\n      { cause: error },\n    );\n  }\n\n  return module.default;\n}\n"],"names":["maximumFontBytes","resolveFontAssets","options","fonts","basePath","defaultFontPath","root","resolve","cacheDir","join","load","input","init","published","assets","definition","name","fontAssetFileName","claimed","readFontBody","fontMediaType","outputFile","stylesheet","renderFontFaceCss","fontStylesheetUrl","context","body","downloadFontFile","readLocalFontFile","file","relative","sep","readFile","error","digest","createHash","cacheFile","fontFormat","response","mkdir","writeFile","contentTypes","defaultQuality","negotiateImageFormat","descriptor","accept","accepted","sourceFormat","src","extension","imageSourceExtension","transformImage","source","sharp","loadImageCodec","quality","resized","encode","pipeline","format","module"],"mappings":";;;;AAsCA,MAAMA,IAAmB,IAAI,OAAO;AAKpC,eAAsBC,EACpBC,GACsB;AACtB,QAAMC,IAAQD,EAAQ,SAAS,CAAA;AAE/B,MAAIC,EAAM,WAAW;AACnB,WAAO,CAAA;AAGT,QAAMC,IAAWF,EAAQ,YAAYG,GAC/BC,IAAOC,EAAQL,EAAQ,IAAI,GAC3BM,IAAWD;AAAA,IACfL,EAAQ,YAAYO,EAAKH,GAAM,gBAAgB,aAAa,OAAO;AAAA,EAAA,GAE/DI,IAAOR,EAAQ,UAAU,CAACS,GAAOC,MAAS,MAAMD,GAAOC,CAAI,IAC3DC,wBAAgB,IAAA,GAChBC,IAAsB,CAAA;AAE5B,aAAWC,KAAcZ,GAAO;AAC9B,QAAI,CAACY,EAAW;AACd;AAGF,UAAMC,IAAOC,EAAkBF,CAAU,GACnCG,IAAUL,EAAU,IAAIG,CAAI;AAElC,QAAIE,MAAY,QAAW;AACzB,UAAIA,MAAYH,EAAW;AACzB,cAAM,IAAI;AAAA,UACR,eAAe,KAAK,UAAUA,EAAW,MAAM,CAAC,oDAAoD,KAAK,UAAUC,CAAI,CAAC;AAAA,QAAA;AAI5H;AAAA,IACF;AAEA,IAAAH,EAAU,IAAIG,GAAMD,EAAW,GAAG,GAClCD,EAAO,KAAK;AAAA,MACV,MAAM,MAAMK,EAAaJ,GAAY,EAAE,UAAAP,GAAU,MAAAE,GAAM,MAAAJ,GAAM;AAAA,MAC7D,aAAac,EAAcL,EAAW,GAAG;AAAA,MACzC,MAAMM,EAAWjB,GAAUY,CAAI;AAAA,MAC/B,KAAK,GAAGZ,CAAQ,IAAIY,CAAI;AAAA,IAAA,CACzB;AAAA,EACH;AAEA,QAAMM,IAAa,GAAGC,EAAkBpB,GAAOC,CAAQ,CAAC;AAAA;AAExD,SAAAU,EAAO,KAAK;AAAA,IACV,MAAM,IAAI,cAAc,OAAOQ,CAAU;AAAA,IACzC,aAAa;AAAA,IACb,MAAMD,EAAWjB,GAAU,WAAW;AAAA,IACtC,KAAKoB,EAAkBpB,CAAQ;AAAA,EAAA,CAChC,GAEMU;AACT;AAEA,eAAeK,EACbJ,GACAU,GACA;AACA,QAAMC,IAAOX,EAAW,WAAW,WAC/B,MAAMY,EAAiBZ,GAAYU,CAAO,IAC1C,MAAMG,EAAkBb,GAAYU,EAAQ,IAAI;AAEpD,MAAIC,EAAK,eAAe;AACtB,UAAM,IAAI;AAAA,MACR,eAAe,KAAK,UAAUX,EAAW,MAAM,CAAC;AAAA,IAAA;AAIpD,MAAIW,EAAK,aAAa1B;AACpB,UAAM,IAAI;AAAA,MACR,eAAe,KAAK,UAAUe,EAAW,MAAM,CAAC,uBAAuBf,CAAgB;AAAA,IAAA;AAI3F,SAAO0B;AACT;AAEA,eAAeE,EAAkBb,GAA4BT,GAAc;AACzE,QAAMuB,IAAOtB,EAAQD,GAAMS,EAAW,IAAI,QAAQ,QAAQ,EAAE,CAAC;AAE7D,MAAIe,EAASxB,GAAMuB,CAAI,EAAE,MAAME,CAAG,EAAE,SAAS,IAAI;AAC/C,UAAM,IAAI;AAAA,MACR,8CAA8C,KAAK,UAAUhB,EAAW,GAAG,CAAC;AAAA,IAAA;AAIhF,MAAI;AACF,WAAO,IAAI,WAAW,MAAMiB,EAASH,CAAI,CAAC;AAAA,EAC5C,SAASI,GAAO;AACd,UAAM,IAAI;AAAA,MACR,yCAAyC,KAAK,UAAUlB,EAAW,GAAG,CAAC,eAAe,KAAK,UAAUA,EAAW,MAAM,CAAC;AAAA,MACvH,EAAE,OAAOkB,EAAA;AAAA,IAAM;AAAA,EAEnB;AACF;AAKA,eAAeN,EACbZ,GACAU,GACA;AACA,QAAMS,IAASC,EAAW,QAAQ,EAAE,OAAOpB,EAAW,GAAG,EAAE,OAAO,KAAK,GACjEqB,IAAY3B;AAAA,IAChBgB,EAAQ;AAAA,IACR,GAAGS,EAAO,MAAM,GAAG,EAAE,CAAC,IAAIG,EAAWtB,EAAW,GAAG,CAAC;AAAA,EAAA;AAGtD,MAAI;AACF,WAAO,IAAI,WAAW,MAAMiB,EAASI,CAAS,CAAC;AAAA,EACjD,QAAQ;AAAA,EAER;AAEA,MAAIE;AAEJ,MAAI;AACF,IAAAA,IAAW,MAAMb,EAAQ,KAAKV,EAAW,GAAG;AAAA,EAC9C,SAASkB,GAAO;AACd,UAAM,IAAI;AAAA,MACR,mDAAmD,KAAK,UAAUlB,EAAW,MAAM,CAAC,SAAS,KAAK,UAAUA,EAAW,GAAG,CAAC;AAAA,MAC3H,EAAE,OAAOkB,EAAA;AAAA,IAAM;AAAA,EAEnB;AAEA,MAAI,CAACK,EAAS;AACZ,UAAM,IAAI;AAAA,MACR,0BAA0BA,EAAS,MAAM,eAAe,KAAK,UAAUvB,EAAW,MAAM,CAAC,OAAO,KAAK,UAAUA,EAAW,GAAG,CAAC;AAAA,IAAA;AAIlI,QAAMW,IAAO,IAAI,WAAW,MAAMY,EAAS,aAAa;AAExD,eAAMC,EAAMd,EAAQ,UAAU,EAAE,WAAW,IAAM,GACjD,MAAMe,EAAUJ,GAAWV,CAAI,GAExBA;AACT;AAEA,SAASL,EAAWjB,GAAkBY,GAAc;AAClD,SAAO,GAAGZ,EAAS,QAAQ,QAAQ,EAAE,CAAC,IAAIY,CAAI;AAChD;ACpKA,MAAMyB,IAA6D;AAAA,EACjE,MAAM;AAAA,EACN,MAAM;AAAA,EACN,KAAK;AAAA,EACL,MAAM;AACR,GAEMC,IAAiB;AAQhB,SAASC,EACdC,GACAC,GAC8B;AAC9B,MAAID,EAAW,WAAW;AACxB,WAAOA,EAAW;AAGpB,QAAME,KAAYD,KAAU,IAAI,YAAA;AAEhC,SAAIC,EAAS,SAAS,YAAY,IACzB,SAGLA,EAAS,SAAS,YAAY,IACzB,SAGFC,EAAaH,EAAW,GAAG;AACpC;AAEO,SAASG,EAAaC,GAA2C;AACtE,QAAMC,IAAYC,EAAqBF,CAAG;AAE1C,SAAIC,MAAc,SACT,SAGLA,MAAc,SACT,SAGLA,MAAc,QACT,QAGF;AACT;AAEA,eAAsBE,EACpBC,GACAlD,GAKuB;AACvB,QAAMmD,IAAQ,MAAMC,EAAA,GACdC,IAAUrD,EAAQ,WAAWwC,GAC7Bc,IAAUH,EAAMD,CAAM,EAAE,OAAO;AAAA,IACnC,OAAOlD,EAAQ;AAAA,IACf,oBAAoB;AAAA,EAAA,CACrB;AAED,SAAO;AAAA,IACL,MAAM,IAAI,WAAW,MAAMuD,EAAOD,GAAStD,EAAQ,QAAQqD,CAAO,CAAC;AAAA,IACnE,aAAad,EAAavC,EAAQ,MAAM;AAAA,EAAA;AAE5C;AAEA,SAASuD,EACPC,GACAC,GACAJ,GACA;AACA,SAAII,MAAW,QACND,EAAS,IAAA,EAAM,SAAA,IAGpBC,MAAW,SACND,EAAS,KAAK,EAAE,SAAAH,EAAA,CAAS,EAAE,SAAA,IAGhCI,MAAW,SACND,EAAS,KAAK,EAAE,SAAAH,EAAA,CAAS,EAAE,SAAA,IAG7BG,EAAS,KAAK,EAAE,SAAAH,EAAA,CAAS,EAAE,SAAA;AACpC;AAKA,eAAeD,IAAiB;AAC9B,MAAIM;AAEJ,MAAI;AAEF,IAAAA,IAAU,MAAM,OAAO,OAAO;AAAA,EAChC,SAAS3B,GAAO;AACd,UAAM,IAAI;AAAA,MACR;AAAA,MACA,EAAE,OAAOA,EAAA;AAAA,IAAM;AAAA,EAEnB;AAEA,SAAO2B,EAAO;AAChB;"}

package/dist/chunks/{images-CG7ZzayG.js → images-QgdmLyQ3.js}

@@ -1,4 +1,4 @@
-import { p as P } from "./index-0MNiR_wo.js";
+import { p as P } from "./links-iU22QkCE.js";
 function j(t) {
   return t.split("?")[0].split("#")[0];
 }
@@ -322,26 +322,26 @@ function c(t, e) {
   return { ok: !1, rejection: { reason: e, status: t } };
 }
 export {
-  R as a,
-  F as b,
-  m as c,
+  z as a,
+  R as b,
+  F as c,
   u as d,
-  z as e,
+  m as e,
   N as f,
-  et as g,
-  nt as h,
-  b as i,
-  ot as j,
+  b as g,
+  et as h,
+  nt as i,
+  tt as j,
   at as k,
   B as l,
   rt as m,
   G as n,
   I as o,
-  tt as p,
+  ot as p,
   X as q,
   Y as r,
   L as s,
   Z as t,
   j as u
 };
-//# sourceMappingURL=images-CG7ZzayG.js.map
+//# sourceMappingURL=images-QgdmLyQ3.js.map

package/dist/chunks/{images-CG7ZzayG.js.map → images-QgdmLyQ3.js.map}

@@ -1 +1 @@
-{"version":3,"file":"images-CG7ZzayG.js","sources":["../../src/platform/url.ts","../../src/platform/fonts.ts","../../src/platform/image-url.ts","../../src/platform/images.ts"],"sourcesContent":["/**\n * Drops the query string and the fragment from a URL or path, leaving the\n * path portion. Both are cut at the first occurrence, so a `?` inside a\n * fragment and a `#` inside a query are handled the way a browser handles\n * them: the earlier delimiter wins.\n */\nexport function urlPath(url: string) {\n  return url.split(\"?\")[0]!.split(\"#\")[0]!;\n}\n\n/**\n * Resolves the file extension of a URL or path, lower-cased and without the\n * leading dot. The query string and the fragment are ignored, and only the\n * last path segment is considered, so a dot in a directory name never leaks\n * into the answer.\n *\n * A name with no dot and a name ending in a dot both answer the empty\n * string, which no caller's extension table names, so an unparseable name is\n * reported as unknown rather than mistaken for a format.\n */\nexport function urlExtension(url: string) {\n  const name = urlPath(url).split(\"/\").at(-1)!;\n\n  return name.includes(\".\") ? name.split(\".\").at(-1)!.toLowerCase() : \"\";\n}\n","import { preload } from \"../document/links\";\nimport { urlExtension } from \"./url\";\nimport type { LinkTag } from \"../document\";\n\nexport type FontStyle = \"normal\" | \"italic\" | \"oblique\";\n\nexport type FontFormat = \"otf\" | \"ttf\" | \"woff\" | \"woff2\";\n\nexport type FontDefinition = {\n  display: \"auto\" | \"block\" | \"fallback\" | \"optional\" | \"swap\";\n  family: string;\n  kind: \"font\";\n  // A self-hosted font is published from the application origin, so `'self'`\n  // covers it. A font left on a third-party host stays a `font-src` entry and\n  // a privacy question, and `fontSources` makes that cost visible.\n  selfHost: boolean;\n  source: \"google\" | \"local\";\n  src: string;\n  style: FontStyle;\n  weight: number | `${number} ${number}`;\n};\n\nexport type LocalFontOptions = {\n  display?: FontDefinition[\"display\"];\n  name: string;\n  src: string;\n  style?: FontStyle;\n  weight?: FontDefinition[\"weight\"];\n};\n\nexport type GoogleFontOptions = {\n  display?: FontDefinition[\"display\"];\n  family: string;\n  selfHost?: boolean;\n  src: string;\n  style?: FontStyle;\n  weight?: FontDefinition[\"weight\"];\n};\n\nexport type FontContribution = readonly FontDefinition[];\n\n// The framework publishes every self-hosted font under one path. The build\n// writes the files, and the Node handler serves the same URLs at request time.\nexport const defaultFontPath = \"/_demiurge/font\";\n\nconst fontFormats: Record<string, FontFormat> = {\n  otf: \"otf\",\n  ttf: \"ttf\",\n  woff: \"woff\",\n  woff2: \"woff2\",\n};\n\nconst fontFaceFormats: Record<FontFormat, string> = {\n  otf: \"opentype\",\n  ttf: \"truetype\",\n  woff: \"woff\",\n  woff2: \"woff2\",\n};\n\nconst fontMediaTypes: Record<FontFormat, string> = {\n  otf: \"font/otf\",\n  ttf: \"font/ttf\",\n  woff: \"font/woff\",\n  woff2: \"font/woff2\",\n};\n\nexport const font = {\n  // A Google font needs the file URL that the Google stylesheet points at.\n  // The framework reads no third-party stylesheet, because that request is\n  // the privacy cost self-hosting removes.\n  google(options: GoogleFontOptions): FontDefinition {\n    const src = options.src.trim();\n\n    if (!isRemoteSource(src)) {\n      throw new Error(\n        `Google font ${JSON.stringify(options.family)} needs an https font file URL as its source.`,\n      );\n    }\n\n    assertKnownFormat(src);\n\n    return {\n      display: options.display ?? \"swap\",\n      family: options.family,\n      kind: \"font\",\n      selfHost: options.selfHost ?? true,\n      source: \"google\",\n      src,\n      style: options.style ?? \"normal\",\n      weight: options.weight ?? 400,\n    };\n  },\n  // A local font names a file in the project. The build reads that file and\n  // publishes it, so the file does not have to sit in the public directory.\n  local(options: LocalFontOptions): FontDefinition {\n    const src = options.src.trim();\n\n    if (!src) {\n      throw new Error(\"Local font source must not be empty.\");\n    }\n\n    if (isRemoteSource(src)) {\n      throw new Error(\n        `Local font ${JSON.stringify(options.name)} must name a project file rather than a URL.`,\n      );\n    }\n\n    assertKnownFormat(src);\n\n    return {\n      display: options.display ?? \"swap\",\n      family: options.name,\n      kind: \"font\",\n      selfHost: true,\n      source: \"local\",\n      src,\n      style: options.style ?? \"normal\",\n      weight: options.weight ?? 400,\n    };\n  },\n};\n\nexport function defineFonts(fonts: FontContribution): FontContribution {\n  return [...fonts];\n}\n\n// The published file name derives from the declaration alone. The renderer\n// and the build therefore agree on every URL without sharing any state.\nexport function fontAssetFileName(definition: FontDefinition) {\n  const family = slug(definition.family);\n  const weight = slug(String(definition.weight));\n\n  return `${family}-${weight}-${definition.style}.${fontFormat(definition.src)}`;\n}\n\nexport function fontAssetUrl(\n  definition: FontDefinition,\n  basePath: string = defaultFontPath,\n) {\n  return definition.selfHost\n    ? `${basePath}/${fontAssetFileName(definition)}`\n    : definition.src;\n}\n\nexport function fontStylesheetUrl(basePath: string = defaultFontPath) {\n  return `${basePath}/fonts.css`;\n}\n\nexport function fontMediaType(file: string) {\n  return fontMediaTypes[fontFormat(file)];\n}\n\nexport function fontFormat(file: string): FontFormat {\n  const format = fontFormats[urlExtension(file)];\n\n  if (!format) {\n    throw new Error(\n      `Font source ${JSON.stringify(file)} has no known font extension.`,\n    );\n  }\n\n  return format;\n}\n\n// The stylesheet and the preload links are the whole document contribution.\n// An application spreads them into `links` in its root layout.\nexport function fontLinks(\n  fonts: FontContribution,\n  basePath: string = defaultFontPath,\n): LinkTag[] {\n  if (fonts.length === 0) {\n    return [];\n  }\n\n  return [\n    {\n      href: fontStylesheetUrl(basePath),\n      kind: \"link\" as const,\n      rel: \"stylesheet\",\n    },\n    ...fontPreloadLinks(fonts, basePath),\n  ];\n}\n\nexport function fontPreloadLinks(\n  fonts: FontContribution,\n  basePath: string = defaultFontPath,\n): LinkTag[] {\n  return fonts.map((definition) =>\n    preload(fontAssetUrl(definition, basePath), {\n      as: \"font\",\n      // A font request runs in CORS mode even on the same origin. A preload\n      // without this attribute fetches the file twice.\n      crossOrigin: \"anonymous\",\n      type: fontMediaType(definition.src),\n    })\n  );\n}\n\nexport function renderFontFaceCss(\n  fonts: FontContribution,\n  basePath: string = defaultFontPath,\n) {\n  return fonts\n    .map((definition) => {\n      const url = fontAssetUrl(definition, basePath);\n\n      return [\n        \"@font-face {\",\n        `  font-family: \"${escapeCss(definition.family)}\";`,\n        `  src: url(\"${escapeCss(url)}\") format(\"${\n          fontFaceFormats[fontFormat(definition.src)]\n        }\");`,\n        `  font-style: ${definition.style};`,\n        `  font-weight: ${definition.weight};`,\n        `  font-display: ${definition.display};`,\n        \"}\",\n      ].join(\"\\n\");\n    })\n    .join(\"\\n\");\n}\n\n// A self-hosted font set collapses to `'self'`, which every framework preset\n// already declares. A third-party host has to be named here instead.\nexport function fontSources(fonts: FontContribution): string[] {\n  const origins = new Set<string>();\n\n  for (const definition of fonts) {\n    if (!definition.selfHost) {\n      origins.add(new URL(definition.src).origin);\n    }\n  }\n\n  return [\"'self'\", ...[...origins].sort()];\n}\n\nfunction isRemoteSource(src: string) {\n  return /^https?:\\/\\//i.test(src);\n}\n\nfunction assertKnownFormat(src: string) {\n  fontFormat(src);\n}\n\nfunction slug(value: string) {\n  return value\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\") || \"font\";\n}\n\nfunction escapeCss(value: string) {\n  return value.replace(/[\\\\\"]/g, \"\\\\$&\");\n}\n","import type { ImageFormat } from \"./images\";\nimport { urlExtension } from \"./url\";\n\nexport type ImageSourceKind = \"local\" | \"remote\";\n\n// The descriptor is the complete input of one variant. The build pipeline and\n// the runtime optimizer both derive a file name and an encoded body from it.\nexport type ImageVariantDescriptor = {\n  format: ImageFormat;\n  quality?: number;\n  sourceKind: ImageSourceKind;\n  src: string;\n  width: number;\n};\n\nexport const defaultImageOptimizerPath = \"/_demiurge/image\";\n\nconst formatExtensions: Record<Exclude<ImageFormat, \"auto\">, string> = {\n  avif: \"avif\",\n  jpeg: \"jpg\",\n  png: \"png\",\n  webp: \"webp\",\n};\n\nconst extensionFormats: Record<string, Exclude<ImageFormat, \"auto\">> = {\n  avif: \"avif\",\n  jpeg: \"jpeg\",\n  jpg: \"jpeg\",\n  png: \"png\",\n  webp: \"webp\",\n};\n\nconst variantNamePattern = /^(.+)\\.w(\\d{1,5})(?:\\.q(\\d{1,3}))?\\.([a-z0-9]+)$/;\n\nexport function createImageOptimizerUrl(\n  descriptor: ImageVariantDescriptor,\n  optimizerPath: string,\n) {\n  const params = new URLSearchParams({\n    src: descriptor.src,\n    w: String(descriptor.width),\n  });\n\n  if (descriptor.quality !== undefined) {\n    params.set(\"q\", String(descriptor.quality));\n  }\n\n  if (descriptor.format !== \"auto\") {\n    params.set(\"f\", descriptor.format);\n  }\n\n  return `${optimizerPath}?${params.toString()}`;\n}\n\n// A static build has no optimizer process, so the variant path must describe\n// the complete transform. The build reads the path back and emits the file,\n// and no shared state has to cross the build and render boundary.\nexport function createImageVariantPath(\n  descriptor: ImageVariantDescriptor,\n  optimizerPath: string,\n) {\n  if (descriptor.sourceKind === \"remote\") {\n    throw new Error(\n      `Image source ${JSON.stringify(descriptor.src)} is remote. A static image loader can only emit a local image.`,\n    );\n  }\n\n  const quality = descriptor.quality === undefined\n    ? \"\"\n    : `.q${descriptor.quality}`;\n\n  return `${optimizerPath}${descriptor.src}.w${descriptor.width}${quality}.${\n    resolveVariantExtension(descriptor)\n  }`;\n}\n\nexport function parseImageVariantPath(\n  pathname: string,\n  optimizerPath: string,\n): ImageVariantDescriptor | undefined {\n  if (!pathname.startsWith(`${optimizerPath}/`)) {\n    return undefined;\n  }\n\n  const match = variantNamePattern.exec(pathname.slice(optimizerPath.length));\n\n  if (!match) {\n    return undefined;\n  }\n\n  const [, src, rawWidth, rawQuality, extension] = match;\n  const format = extensionFormats[extension!];\n  const width = Number(rawWidth);\n  const quality = rawQuality === undefined ? undefined : Number(rawQuality);\n\n  if (\n    !format ||\n    !imageSourceExtension(src!) ||\n    width <= 0 ||\n    (quality !== undefined && (quality < 1 || quality > 100))\n  ) {\n    return undefined;\n  }\n\n  return { format, quality, sourceKind: \"local\", src: src!, width };\n}\n\nexport function resolveVariantExtension(descriptor: ImageVariantDescriptor) {\n  if (descriptor.format !== \"auto\") {\n    return formatExtensions[descriptor.format];\n  }\n\n  const extension = imageSourceExtension(descriptor.src);\n\n  if (!extension) {\n    throw new Error(\n      `Image source ${JSON.stringify(descriptor.src)} has no known image extension. Declare an explicit format.`,\n    );\n  }\n\n  return extension === \"jpeg\" ? \"jpg\" : extension;\n}\n\nexport function imageSourceExtension(src: string) {\n  const extension = urlExtension(src);\n\n  return extension in extensionFormats ? extension : undefined;\n}\n\n// The build and the development server both find variants by reading the\n// documents that the application rendered. A variant that no document\n// references is a variant that nothing can request.\nexport function collectImageVariantPaths(html: string, optimizerPath: string) {\n  const pattern = new RegExp(\n    `${escapeRegExp(optimizerPath)}/[^\"'\\\\s,)<>]+`,\n    \"g\",\n  );\n\n  return [...new Set(html.match(pattern) ?? [])];\n}\n\nfunction escapeRegExp(value: string) {\n  return value.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n","import {\n  createImageOptimizerUrl,\n  createImageVariantPath,\n  defaultImageOptimizerPath,\n  type ImageVariantDescriptor,\n} from \"./image-url\";\n\n// `optimizer` points every variant at a request-time endpoint. `static`\n// points every variant at a file that the static build emits.\nexport type ImageLoader = \"optimizer\" | \"static\";\n\nexport type ImageFormat = \"auto\" | \"avif\" | \"webp\" | \"jpeg\" | \"png\";\n\nexport type RemoteImagePattern = {\n  hostname: string;\n  pathname?: string;\n  port?: string;\n  protocol?: \"http:\" | \"https:\";\n};\n\nexport type ImagePolicy = {\n  loader?: ImageLoader;\n  local?: boolean;\n  optimizerPath?: string;\n  remote?: readonly (string | RemoteImagePattern)[];\n};\n\nexport type ImageTransformOptions = {\n  alt: string;\n  format?: ImageFormat;\n  height: number;\n  priority?: boolean;\n  quality?: number;\n  sizes?: string;\n  src: string;\n  width: number;\n  widths?: readonly number[];\n};\n\nexport type ImageVariant = {\n  format: ImageFormat;\n  height: number;\n  src: string;\n  width: number;\n};\n\nexport type ImageTransformPlan = {\n  alt: string;\n  decoding: \"async\";\n  fetchPriority?: \"high\";\n  height: number;\n  loading: \"eager\" | \"lazy\";\n  sizes?: string;\n  source: {\n    kind: \"local\" | \"remote\";\n    src: string;\n  };\n  src: string;\n  srcSet: string;\n  variants: ImageVariant[];\n  width: number;\n};\n\nexport function defineImages(policy: ImagePolicy): ImagePolicy {\n  return policy;\n}\n\nexport function isAllowedImageSource(src: string, policy: ImagePolicy = {}) {\n  return classifyImageSource(src, policy) !== null;\n}\n\nexport function planImageTransform(\n  options: ImageTransformOptions,\n  policy: ImagePolicy = {},\n): ImageTransformPlan {\n  const source = classifyImageSource(options.src, policy);\n\n  if (!source) {\n    throw new Error(`Image source \"${options.src}\" is not allowed by the image policy.`);\n  }\n\n  validateImageDimension(\"width\", options.width);\n  validateImageDimension(\"height\", options.height);\n  validateImageQuality(options.quality);\n\n  const format = options.format ?? \"auto\";\n  const loader = policy.loader ?? \"optimizer\";\n  const optimizerPath = policy.optimizerPath ?? defaultImageOptimizerPath;\n  const widths = normalizeVariantWidths(options.width, options.widths);\n  const variants = widths.map((width) => {\n    const height = Math.round((options.height / options.width) * width);\n    const descriptor: ImageVariantDescriptor = {\n      format,\n      quality: options.quality,\n      sourceKind: source.kind,\n      src: source.kind === \"remote\" ? source.src : options.src,\n      width,\n    };\n\n    return {\n      format,\n      height,\n      src: loader === \"static\"\n        ? createImageVariantPath(descriptor, optimizerPath)\n        : createImageOptimizerUrl(descriptor, optimizerPath),\n      width,\n    };\n  });\n  const primaryVariant = variants[0];\n\n  return {\n    alt: options.alt,\n    decoding: \"async\",\n    fetchPriority: options.priority ? \"high\" : undefined,\n    height: options.height,\n    loading: options.priority ? \"eager\" : \"lazy\",\n    sizes: options.sizes,\n    source,\n    src: primaryVariant.src,\n    srcSet: variants\n      .map((variant) => `${variant.src} ${variant.width}w`)\n      .join(\", \"),\n    variants,\n    width: options.width,\n  };\n}\n\nfunction classifyImageSource(\n  src: string,\n  policy: ImagePolicy,\n): ImageTransformPlan[\"source\"] | null {\n  if (src.startsWith(\"/\") && !src.startsWith(\"//\")) {\n    return policy.local === false ? null : { kind: \"local\", src };\n  }\n\n  let url: URL;\n\n  try {\n    url = new URL(src);\n  } catch {\n    return null;\n  }\n\n  if (url.protocol !== \"https:\" && url.protocol !== \"http:\") {\n    return null;\n  }\n\n  return isAllowedRemoteImage(url, policy.remote ?? [])\n    ? { kind: \"remote\", src: url.toString() }\n    : null;\n}\n\nfunction isAllowedRemoteImage(\n  url: URL,\n  remotes: readonly (string | RemoteImagePattern)[],\n) {\n  return remotes.some((remote) =>\n    typeof remote === \"string\"\n      ? matchesRemoteOrigin(url, remote)\n      : matchesRemotePattern(url, remote),\n  );\n}\n\nfunction matchesRemoteOrigin(url: URL, origin: string) {\n  try {\n    return url.origin === new URL(origin).origin;\n  } catch {\n    return false;\n  }\n}\n\nfunction matchesRemotePattern(url: URL, pattern: RemoteImagePattern) {\n  if (pattern.protocol && url.protocol !== pattern.protocol) {\n    return false;\n  }\n\n  if (url.hostname !== pattern.hostname) {\n    return false;\n  }\n\n  if (pattern.port !== undefined && url.port !== pattern.port) {\n    return false;\n  }\n\n  return pattern.pathname\n    ? matchesPathnamePattern(url.pathname, pattern.pathname)\n    : true;\n}\n\nfunction matchesPathnamePattern(pathname: string, pattern: string) {\n  if (pattern.endsWith(\"*\")) {\n    return pathname.startsWith(pattern.slice(0, -1));\n  }\n\n  return pathname === pattern;\n}\n\nfunction validateImageDimension(name: \"height\" | \"width\", value: number) {\n  if (!Number.isInteger(value) || value <= 0) {\n    throw new Error(`Image ${name} must be a positive integer.`);\n  }\n}\n\nfunction validateImageQuality(quality: number | undefined) {\n  if (quality === undefined) {\n    return;\n  }\n\n  if (!Number.isInteger(quality) || quality < 1 || quality > 100) {\n    throw new Error(\"Image quality must be an integer between 1 and 100.\");\n  }\n}\n\nfunction normalizeVariantWidths(width: number, widths: readonly number[] | undefined) {\n  const candidates = widths ?? [width, width * 2];\n  const uniqueWidths = [...new Set(candidates)];\n\n  for (const candidate of uniqueWidths) {\n    validateImageDimension(\"width\", candidate);\n  }\n\n  return uniqueWidths.sort((left, right) => left - right);\n}\n\nexport type ImageRequestRejection = {\n  reason: string;\n  status: 400 | 403;\n};\n\nexport type ImageRequestResult =\n  | { descriptor: ImageVariantDescriptor; ok: true }\n  | { ok: false; rejection: ImageRequestRejection };\n\nconst imageFormats = new Set<ImageFormat>([\n  \"avif\",\n  \"jpeg\",\n  \"png\",\n  \"webp\",\n]);\n\n// The runtime optimizer reads a query that any client can write. It repeats\n// the policy check that the planner made, so an unallowed source never\n// reaches the file system or the network.\nexport function parseImageOptimizerRequest(\n  url: URL,\n  policy: ImagePolicy = {},\n): ImageRequestResult {\n  const src = url.searchParams.get(\"src\");\n\n  if (!src) {\n    return reject(400, \"The image request must declare a src parameter.\");\n  }\n\n  const source = classifyImageSource(src, policy);\n\n  if (!source) {\n    return reject(403, \"The image policy does not allow this image source.\");\n  }\n\n  const width = Number(url.searchParams.get(\"w\"));\n\n  if (!Number.isInteger(width) || width <= 0) {\n    return reject(400, \"The image width must be a positive integer.\");\n  }\n\n  const rawQuality = url.searchParams.get(\"q\");\n  const quality = rawQuality === null ? undefined : Number(rawQuality);\n\n  if (\n    quality !== undefined &&\n    (!Number.isInteger(quality) || quality < 1 || quality > 100)\n  ) {\n    return reject(400, \"The image quality must be an integer from 1 through 100.\");\n  }\n\n  const rawFormat = url.searchParams.get(\"f\");\n\n  // TYPE-EVIDENCE: the set membership check confirms the raw format is a known image format. The cast matches that check.\n  if (rawFormat !== null && !imageFormats.has(rawFormat as ImageFormat)) {\n    return reject(400, \"The image format is not supported.\");\n  }\n\n  // TYPE-EVIDENCE: the raw format value is a string that names an image format or is null. The cast labels it with the format union.\n  return {\n    descriptor: {\n      format: (rawFormat as ImageFormat | null) ?? \"auto\",\n      quality,\n      sourceKind: source.kind,\n      src: source.src,\n      width,\n    },\n    ok: true,\n  };\n}\n\nfunction reject(status: 400 | 403, reason: string): ImageRequestResult {\n  return { ok: false, rejection: { reason, status } };\n}\n"],"names":["urlPath","url","urlExtension","name","defaultFontPath","fontFormats","fontFaceFormats","fontMediaTypes","font","options","src","isRemoteSource","assertKnownFormat","defineFonts","fonts","fontAssetFileName","definition","family","slug","weight","fontFormat","fontAssetUrl","basePath","fontStylesheetUrl","fontMediaType","file","format","fontLinks","fontPreloadLinks","preload","renderFontFaceCss","escapeCss","fontSources","origins","value","defaultImageOptimizerPath","formatExtensions","extensionFormats","variantNamePattern","createImageOptimizerUrl","descriptor","optimizerPath","params","createImageVariantPath","quality","resolveVariantExtension","parseImageVariantPath","pathname","match","rawWidth","rawQuality","extension","width","imageSourceExtension","collectImageVariantPaths","html","pattern","escapeRegExp","defineImages","policy","isAllowedImageSource","classifyImageSource","planImageTransform","source","validateImageDimension","validateImageQuality","loader","variants","normalizeVariantWidths","height","primaryVariant","variant","isAllowedRemoteImage","remotes","remote","matchesRemoteOrigin","matchesRemotePattern","origin","matchesPathnamePattern","widths","candidates","uniqueWidths","candidate","left","right","imageFormats","parseImageOptimizerRequest","reject","rawFormat","status","reason"],"mappings":";AAMO,SAASA,EAAQC,GAAa;AACnC,SAAOA,EAAI,MAAM,GAAG,EAAE,CAAC,EAAG,MAAM,GAAG,EAAE,CAAC;AACxC;AAYO,SAASC,EAAaD,GAAa;AACxC,QAAME,IAAOH,EAAQC,CAAG,EAAE,MAAM,GAAG,EAAE,GAAG,EAAE;AAE1C,SAAOE,EAAK,SAAS,GAAG,IAAIA,EAAK,MAAM,GAAG,EAAE,GAAG,EAAE,EAAG,YAAA,IAAgB;AACtE;ACmBO,MAAMC,IAAkB,mBAEzBC,IAA0C;AAAA,EAC9C,KAAK;AAAA,EACL,KAAK;AAAA,EACL,MAAM;AAAA,EACN,OAAO;AACT,GAEMC,IAA8C;AAAA,EAClD,KAAK;AAAA,EACL,KAAK;AAAA,EACL,MAAM;AAAA,EACN,OAAO;AACT,GAEMC,IAA6C;AAAA,EACjD,KAAK;AAAA,EACL,KAAK;AAAA,EACL,MAAM;AAAA,EACN,OAAO;AACT,GAEaC,IAAO;AAAA;AAAA;AAAA;AAAA,EAIlB,OAAOC,GAA4C;AACjD,UAAMC,IAAMD,EAAQ,IAAI,KAAA;AAExB,QAAI,CAACE,EAAeD,CAAG;AACrB,YAAM,IAAI;AAAA,QACR,eAAe,KAAK,UAAUD,EAAQ,MAAM,CAAC;AAAA,MAAA;AAIjD,WAAAG,EAAkBF,CAAG,GAEd;AAAA,MACL,SAASD,EAAQ,WAAW;AAAA,MAC5B,QAAQA,EAAQ;AAAA,MAChB,MAAM;AAAA,MACN,UAAUA,EAAQ,YAAY;AAAA,MAC9B,QAAQ;AAAA,MACR,KAAAC;AAAA,MACA,OAAOD,EAAQ,SAAS;AAAA,MACxB,QAAQA,EAAQ,UAAU;AAAA,IAAA;AAAA,EAE9B;AAAA;AAAA;AAAA,EAGA,MAAMA,GAA2C;AAC/C,UAAMC,IAAMD,EAAQ,IAAI,KAAA;AAExB,QAAI,CAACC;AACH,YAAM,IAAI,MAAM,sCAAsC;AAGxD,QAAIC,EAAeD,CAAG;AACpB,YAAM,IAAI;AAAA,QACR,cAAc,KAAK,UAAUD,EAAQ,IAAI,CAAC;AAAA,MAAA;AAI9C,WAAAG,EAAkBF,CAAG,GAEd;AAAA,MACL,SAASD,EAAQ,WAAW;AAAA,MAC5B,QAAQA,EAAQ;AAAA,MAChB,MAAM;AAAA,MACN,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAAC;AAAA,MACA,OAAOD,EAAQ,SAAS;AAAA,MACxB,QAAQA,EAAQ,UAAU;AAAA,IAAA;AAAA,EAE9B;AACF;AAEO,SAASI,EAAYC,GAA2C;AACrE,SAAO,CAAC,GAAGA,CAAK;AAClB;AAIO,SAASC,EAAkBC,GAA4B;AAC5D,QAAMC,IAASC,EAAKF,EAAW,MAAM,GAC/BG,IAASD,EAAK,OAAOF,EAAW,MAAM,CAAC;AAE7C,SAAO,GAAGC,CAAM,IAAIE,CAAM,IAAIH,EAAW,KAAK,IAAII,EAAWJ,EAAW,GAAG,CAAC;AAC9E;AAEO,SAASK,EACdL,GACAM,IAAmBlB,GACnB;AACA,SAAOY,EAAW,WACd,GAAGM,CAAQ,IAAIP,EAAkBC,CAAU,CAAC,KAC5CA,EAAW;AACjB;AAEO,SAASO,EAAkBD,IAAmBlB,GAAiB;AACpE,SAAO,GAAGkB,CAAQ;AACpB;AAEO,SAASE,EAAcC,GAAc;AAC1C,SAAOlB,EAAea,EAAWK,CAAI,CAAC;AACxC;AAEO,SAASL,EAAWK,GAA0B;AACnD,QAAMC,IAASrB,EAAYH,EAAauB,CAAI,CAAC;AAE7C,MAAI,CAACC;AACH,UAAM,IAAI;AAAA,MACR,eAAe,KAAK,UAAUD,CAAI,CAAC;AAAA,IAAA;AAIvC,SAAOC;AACT;AAIO,SAASC,EACdb,GACAQ,IAAmBlB,GACR;AACX,SAAIU,EAAM,WAAW,IACZ,CAAA,IAGF;AAAA,IACL;AAAA,MACE,MAAMS,EAAkBD,CAAQ;AAAA,MAChC,MAAM;AAAA,MACN,KAAK;AAAA,IAAA;AAAA,IAEP,GAAGM,EAAiBd,GAAOQ,CAAQ;AAAA,EAAA;AAEvC;AAEO,SAASM,EACdd,GACAQ,IAAmBlB,GACR;AACX,SAAOU,EAAM;AAAA,IAAI,CAACE,MAChBa,EAAQR,EAAaL,GAAYM,CAAQ,GAAG;AAAA,MAC1C,IAAI;AAAA;AAAA;AAAA,MAGJ,aAAa;AAAA,MACb,MAAME,EAAcR,EAAW,GAAG;AAAA,IAAA,CACnC;AAAA,EAAA;AAEL;AAEO,SAASc,EACdhB,GACAQ,IAAmBlB,GACnB;AACA,SAAOU,EACJ,IAAI,CAACE,MAAe;AACnB,UAAMf,IAAMoB,EAAaL,GAAYM,CAAQ;AAE7C,WAAO;AAAA,MACL;AAAA,MACA,mBAAmBS,EAAUf,EAAW,MAAM,CAAC;AAAA,MAC/C,eAAee,EAAU9B,CAAG,CAAC,cAC3BK,EAAgBc,EAAWJ,EAAW,GAAG,CAAC,CAC5C;AAAA,MACA,iBAAiBA,EAAW,KAAK;AAAA,MACjC,kBAAkBA,EAAW,MAAM;AAAA,MACnC,mBAAmBA,EAAW,OAAO;AAAA,MACrC;AAAA,IAAA,EACA,KAAK;AAAA,CAAI;AAAA,EACb,CAAC,EACA,KAAK;AAAA,CAAI;AACd;AAIO,SAASgB,EAAYlB,GAAmC;AAC7D,QAAMmB,wBAAc,IAAA;AAEpB,aAAWjB,KAAcF;AACvB,IAAKE,EAAW,YACdiB,EAAQ,IAAI,IAAI,IAAIjB,EAAW,GAAG,EAAE,MAAM;AAI9C,SAAO,CAAC,UAAU,GAAG,CAAC,GAAGiB,CAAO,EAAE,MAAM;AAC1C;AAEA,SAAStB,EAAeD,GAAa;AACnC,SAAO,gBAAgB,KAAKA,CAAG;AACjC;AAEA,SAASE,EAAkBF,GAAa;AACtC,EAAAU,EAAWV,CAAG;AAChB;AAEA,SAASQ,EAAKgB,GAAe;AAC3B,SAAOA,EACJ,cACA,QAAQ,eAAe,GAAG,EAC1B,QAAQ,YAAY,EAAE,KAAK;AAChC;AAEA,SAASH,EAAUG,GAAe;AAChC,SAAOA,EAAM,QAAQ,UAAU,MAAM;AACvC;AC9OO,MAAMC,IAA4B,oBAEnCC,IAAiE;AAAA,EACrE,MAAM;AAAA,EACN,MAAM;AAAA,EACN,KAAK;AAAA,EACL,MAAM;AACR,GAEMC,IAAiE;AAAA,EACrE,MAAM;AAAA,EACN,MAAM;AAAA,EACN,KAAK;AAAA,EACL,KAAK;AAAA,EACL,MAAM;AACR,GAEMC,IAAqB;AAEpB,SAASC,EACdC,GACAC,GACA;AACA,QAAMC,IAAS,IAAI,gBAAgB;AAAA,IACjC,KAAKF,EAAW;AAAA,IAChB,GAAG,OAAOA,EAAW,KAAK;AAAA,EAAA,CAC3B;AAED,SAAIA,EAAW,YAAY,UACzBE,EAAO,IAAI,KAAK,OAAOF,EAAW,OAAO,CAAC,GAGxCA,EAAW,WAAW,UACxBE,EAAO,IAAI,KAAKF,EAAW,MAAM,GAG5B,GAAGC,CAAa,IAAIC,EAAO,UAAU;AAC9C;AAKO,SAASC,EACdH,GACAC,GACA;AACA,MAAID,EAAW,eAAe;AAC5B,UAAM,IAAI;AAAA,MACR,gBAAgB,KAAK,UAAUA,EAAW,GAAG,CAAC;AAAA,IAAA;AAIlD,QAAMI,IAAUJ,EAAW,YAAY,SACnC,KACA,KAAKA,EAAW,OAAO;AAE3B,SAAO,GAAGC,CAAa,GAAGD,EAAW,GAAG,KAAKA,EAAW,KAAK,GAAGI,CAAO,IACrEC,EAAwBL,CAAU,CACpC;AACF;AAEO,SAASM,GACdC,GACAN,GACoC;AACpC,MAAI,CAACM,EAAS,WAAW,GAAGN,CAAa,GAAG;AAC1C;AAGF,QAAMO,IAAQV,EAAmB,KAAKS,EAAS,MAAMN,EAAc,MAAM,CAAC;AAE1E,MAAI,CAACO;AACH;AAGF,QAAM,CAAA,EAAGtC,GAAKuC,GAAUC,GAAYC,CAAS,IAAIH,GAC3CtB,IAASW,EAAiBc,CAAU,GACpCC,IAAQ,OAAOH,CAAQ,GACvBL,IAAUM,MAAe,SAAY,SAAY,OAAOA,CAAU;AAExE,MACE,GAACxB,KACD,CAAC2B,EAAqB3C,CAAI,KAC1B0C,KAAS,KACRR,MAAY,WAAcA,IAAU,KAAKA,IAAU;AAKtD,WAAO,EAAE,QAAAlB,GAAQ,SAAAkB,GAAS,YAAY,SAAS,KAAAlC,GAAW,OAAA0C,EAAA;AAC5D;AAEO,SAASP,EAAwBL,GAAoC;AAC1E,MAAIA,EAAW,WAAW;AACxB,WAAOJ,EAAiBI,EAAW,MAAM;AAG3C,QAAMW,IAAYE,EAAqBb,EAAW,GAAG;AAErD,MAAI,CAACW;AACH,UAAM,IAAI;AAAA,MACR,gBAAgB,KAAK,UAAUX,EAAW,GAAG,CAAC;AAAA,IAAA;AAIlD,SAAOW,MAAc,SAAS,QAAQA;AACxC;AAEO,SAASE,EAAqB3C,GAAa;AAChD,QAAMyC,IAAYjD,EAAaQ,CAAG;AAElC,SAAOyC,KAAad,IAAmBc,IAAY;AACrD;AAKO,SAASG,GAAyBC,GAAcd,GAAuB;AAC5E,QAAMe,IAAU,IAAI;AAAA,IAClB,GAAGC,EAAahB,CAAa,CAAC;AAAA,IAC9B;AAAA,EAAA;AAGF,SAAO,CAAC,GAAG,IAAI,IAAIc,EAAK,MAAMC,CAAO,KAAK,CAAA,CAAE,CAAC;AAC/C;AAEA,SAASC,EAAavB,GAAe;AACnC,SAAOA,EAAM,QAAQ,uBAAuB,MAAM;AACpD;AChFO,SAASwB,GAAaC,GAAkC;AAC7D,SAAOA;AACT;AAEO,SAASC,GAAqBlD,GAAaiD,IAAsB,IAAI;AAC1E,SAAOE,EAAoBnD,GAAKiD,CAAM,MAAM;AAC9C;AAEO,SAASG,GACdrD,GACAkD,IAAsB,IACF;AACpB,QAAMI,IAASF,EAAoBpD,EAAQ,KAAKkD,CAAM;AAEtD,MAAI,CAACI;AACH,UAAM,IAAI,MAAM,iBAAiBtD,EAAQ,GAAG,uCAAuC;AAGrF,EAAAuD,EAAuB,SAASvD,EAAQ,KAAK,GAC7CuD,EAAuB,UAAUvD,EAAQ,MAAM,GAC/CwD,EAAqBxD,EAAQ,OAAO;AAEpC,QAAMiB,IAASjB,EAAQ,UAAU,QAC3ByD,IAASP,EAAO,UAAU,aAC1BlB,IAAgBkB,EAAO,iBAAiBxB,GAExCgC,IADSC,EAAuB3D,EAAQ,OAAOA,EAAQ,MAAM,EAC3C,IAAI,CAAC2C,MAAU;AACrC,UAAMiB,IAAS,KAAK,MAAO5D,EAAQ,SAASA,EAAQ,QAAS2C,CAAK,GAC5DZ,IAAqC;AAAA,MACzC,QAAAd;AAAA,MACA,SAASjB,EAAQ;AAAA,MACjB,YAAYsD,EAAO;AAAA,MACnB,KAAKA,EAAO,SAAS,WAAWA,EAAO,MAAMtD,EAAQ;AAAA,MACrD,OAAA2C;AAAA,IAAA;AAGF,WAAO;AAAA,MACL,QAAA1B;AAAA,MACA,QAAA2C;AAAA,MACA,KAAKH,MAAW,WACZvB,EAAuBH,GAAYC,CAAa,IAChDF,EAAwBC,GAAYC,CAAa;AAAA,MACrD,OAAAW;AAAA,IAAA;AAAA,EAEJ,CAAC,GACKkB,IAAiBH,EAAS,CAAC;AAEjC,SAAO;AAAA,IACL,KAAK1D,EAAQ;AAAA,IACb,UAAU;AAAA,IACV,eAAeA,EAAQ,WAAW,SAAS;AAAA,IAC3C,QAAQA,EAAQ;AAAA,IAChB,SAASA,EAAQ,WAAW,UAAU;AAAA,IACtC,OAAOA,EAAQ;AAAA,IACf,QAAAsD;AAAA,IACA,KAAKO,EAAe;AAAA,IACpB,QAAQH,EACL,IAAI,CAACI,MAAY,GAAGA,EAAQ,GAAG,IAAIA,EAAQ,KAAK,GAAG,EACnD,KAAK,IAAI;AAAA,IACZ,UAAAJ;AAAA,IACA,OAAO1D,EAAQ;AAAA,EAAA;AAEnB;AAEA,SAASoD,EACPnD,GACAiD,GACqC;AACrC,MAAIjD,EAAI,WAAW,GAAG,KAAK,CAACA,EAAI,WAAW,IAAI;AAC7C,WAAOiD,EAAO,UAAU,KAAQ,OAAO,EAAE,MAAM,SAAS,KAAAjD,EAAA;AAG1D,MAAIT;AAEJ,MAAI;AACF,IAAAA,IAAM,IAAI,IAAIS,CAAG;AAAA,EACnB,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,SAAIT,EAAI,aAAa,YAAYA,EAAI,aAAa,UACzC,OAGFuE,EAAqBvE,GAAK0D,EAAO,UAAU,CAAA,CAAE,IAChD,EAAE,MAAM,UAAU,KAAK1D,EAAI,SAAA,MAC3B;AACN;AAEA,SAASuE,EACPvE,GACAwE,GACA;AACA,SAAOA,EAAQ;AAAA,IAAK,CAACC,MACnB,OAAOA,KAAW,WACdC,EAAoB1E,GAAKyE,CAAM,IAC/BE,EAAqB3E,GAAKyE,CAAM;AAAA,EAAA;AAExC;AAEA,SAASC,EAAoB1E,GAAU4E,GAAgB;AACrD,MAAI;AACF,WAAO5E,EAAI,WAAW,IAAI,IAAI4E,CAAM,EAAE;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAASD,EAAqB3E,GAAUuD,GAA6B;AASnE,SARIA,EAAQ,YAAYvD,EAAI,aAAauD,EAAQ,YAI7CvD,EAAI,aAAauD,EAAQ,YAIzBA,EAAQ,SAAS,UAAavD,EAAI,SAASuD,EAAQ,OAC9C,KAGFA,EAAQ,WACXsB,EAAuB7E,EAAI,UAAUuD,EAAQ,QAAQ,IACrD;AACN;AAEA,SAASsB,EAAuB/B,GAAkBS,GAAiB;AACjE,SAAIA,EAAQ,SAAS,GAAG,IACfT,EAAS,WAAWS,EAAQ,MAAM,GAAG,EAAE,CAAC,IAG1CT,MAAaS;AACtB;AAEA,SAASQ,EAAuB7D,GAA0B+B,GAAe;AACvE,MAAI,CAAC,OAAO,UAAUA,CAAK,KAAKA,KAAS;AACvC,UAAM,IAAI,MAAM,SAAS/B,CAAI,8BAA8B;AAE/D;AAEA,SAAS8D,EAAqBrB,GAA6B;AACzD,MAAIA,MAAY,WAIZ,CAAC,OAAO,UAAUA,CAAO,KAAKA,IAAU,KAAKA,IAAU;AACzD,UAAM,IAAI,MAAM,qDAAqD;AAEzE;AAEA,SAASwB,EAAuBhB,GAAe2B,GAAuC;AACpF,QAAMC,IAAaD,KAAU,CAAC3B,GAAOA,IAAQ,CAAC,GACxC6B,IAAe,CAAC,GAAG,IAAI,IAAID,CAAU,CAAC;AAE5C,aAAWE,KAAaD;AACtB,IAAAjB,EAAuB,SAASkB,CAAS;AAG3C,SAAOD,EAAa,KAAK,CAACE,GAAMC,MAAUD,IAAOC,CAAK;AACxD;AAWA,MAAMC,wBAAmB,IAAiB;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKM,SAASC,GACdrF,GACA0D,IAAsB,IACF;AACpB,QAAMjD,IAAMT,EAAI,aAAa,IAAI,KAAK;AAEtC,MAAI,CAACS;AACH,WAAO6E,EAAO,KAAK,iDAAiD;AAGtE,QAAMxB,IAASF,EAAoBnD,GAAKiD,CAAM;AAE9C,MAAI,CAACI;AACH,WAAOwB,EAAO,KAAK,oDAAoD;AAGzE,QAAMnC,IAAQ,OAAOnD,EAAI,aAAa,IAAI,GAAG,CAAC;AAE9C,MAAI,CAAC,OAAO,UAAUmD,CAAK,KAAKA,KAAS;AACvC,WAAOmC,EAAO,KAAK,6CAA6C;AAGlE,QAAMrC,IAAajD,EAAI,aAAa,IAAI,GAAG,GACrC2C,IAAUM,MAAe,OAAO,SAAY,OAAOA,CAAU;AAEnE,MACEN,MAAY,WACX,CAAC,OAAO,UAAUA,CAAO,KAAKA,IAAU,KAAKA,IAAU;AAExD,WAAO2C,EAAO,KAAK,0DAA0D;AAG/E,QAAMC,IAAYvF,EAAI,aAAa,IAAI,GAAG;AAG1C,SAAIuF,MAAc,QAAQ,CAACH,EAAa,IAAIG,CAAwB,IAC3DD,EAAO,KAAK,oCAAoC,IAIlD;AAAA,IACL,YAAY;AAAA,MACV,QAASC,KAAoC;AAAA,MAC7C,SAAA5C;AAAA,MACA,YAAYmB,EAAO;AAAA,MACnB,KAAKA,EAAO;AAAA,MACZ,OAAAX;AAAA,IAAA;AAAA,IAEF,IAAI;AAAA,EAAA;AAER;AAEA,SAASmC,EAAOE,GAAmBC,GAAoC;AACrE,SAAO,EAAE,IAAI,IAAO,WAAW,EAAE,QAAAA,GAAQ,QAAAD,IAAO;AAClD;"}
+{"version":3,"file":"images-QgdmLyQ3.js","sources":["../../src/platform/url.ts","../../src/platform/fonts.ts","../../src/platform/image-url.ts","../../src/platform/images.ts"],"sourcesContent":["/**\n * Drops the query string and the fragment from a URL or path, leaving the\n * path portion. Both are cut at the first occurrence, so a `?` inside a\n * fragment and a `#` inside a query are handled the way a browser handles\n * them: the earlier delimiter wins.\n */\nexport function urlPath(url: string) {\n  return url.split(\"?\")[0]!.split(\"#\")[0]!;\n}\n\n/**\n * Resolves the file extension of a URL or path, lower-cased and without the\n * leading dot. The query string and the fragment are ignored, and only the\n * last path segment is considered, so a dot in a directory name never leaks\n * into the answer.\n *\n * A name with no dot and a name ending in a dot both answer the empty\n * string, which no caller's extension table names, so an unparseable name is\n * reported as unknown rather than mistaken for a format.\n */\nexport function urlExtension(url: string) {\n  const name = urlPath(url).split(\"/\").at(-1)!;\n\n  return name.includes(\".\") ? name.split(\".\").at(-1)!.toLowerCase() : \"\";\n}\n","import { preload } from \"../document/links\";\nimport { urlExtension } from \"./url\";\nimport type { LinkTag } from \"../document\";\n\nexport type FontStyle = \"normal\" | \"italic\" | \"oblique\";\n\nexport type FontFormat = \"otf\" | \"ttf\" | \"woff\" | \"woff2\";\n\nexport type FontDefinition = {\n  display: \"auto\" | \"block\" | \"fallback\" | \"optional\" | \"swap\";\n  family: string;\n  kind: \"font\";\n  // A self-hosted font is published from the application origin, so `'self'`\n  // covers it. A font left on a third-party host stays a `font-src` entry and\n  // a privacy question, and `fontSources` makes that cost visible.\n  selfHost: boolean;\n  source: \"google\" | \"local\";\n  src: string;\n  style: FontStyle;\n  weight: number | `${number} ${number}`;\n};\n\nexport type LocalFontOptions = {\n  display?: FontDefinition[\"display\"];\n  name: string;\n  src: string;\n  style?: FontStyle;\n  weight?: FontDefinition[\"weight\"];\n};\n\nexport type GoogleFontOptions = {\n  display?: FontDefinition[\"display\"];\n  family: string;\n  selfHost?: boolean;\n  src: string;\n  style?: FontStyle;\n  weight?: FontDefinition[\"weight\"];\n};\n\nexport type FontContribution = readonly FontDefinition[];\n\n// The framework publishes every self-hosted font under one path. The build\n// writes the files, and the Node handler serves the same URLs at request time.\nexport const defaultFontPath = \"/_demiurge/font\";\n\nconst fontFormats: Record<string, FontFormat> = {\n  otf: \"otf\",\n  ttf: \"ttf\",\n  woff: \"woff\",\n  woff2: \"woff2\",\n};\n\nconst fontFaceFormats: Record<FontFormat, string> = {\n  otf: \"opentype\",\n  ttf: \"truetype\",\n  woff: \"woff\",\n  woff2: \"woff2\",\n};\n\nconst fontMediaTypes: Record<FontFormat, string> = {\n  otf: \"font/otf\",\n  ttf: \"font/ttf\",\n  woff: \"font/woff\",\n  woff2: \"font/woff2\",\n};\n\nexport const font = {\n  // A Google font needs the file URL that the Google stylesheet points at.\n  // The framework reads no third-party stylesheet, because that request is\n  // the privacy cost self-hosting removes.\n  google(options: GoogleFontOptions): FontDefinition {\n    const src = options.src.trim();\n\n    if (!isRemoteSource(src)) {\n      throw new Error(\n        `Google font ${JSON.stringify(options.family)} needs an https font file URL as its source.`,\n      );\n    }\n\n    assertKnownFormat(src);\n\n    return {\n      display: options.display ?? \"swap\",\n      family: options.family,\n      kind: \"font\",\n      selfHost: options.selfHost ?? true,\n      source: \"google\",\n      src,\n      style: options.style ?? \"normal\",\n      weight: options.weight ?? 400,\n    };\n  },\n  // A local font names a file in the project. The build reads that file and\n  // publishes it, so the file does not have to sit in the public directory.\n  local(options: LocalFontOptions): FontDefinition {\n    const src = options.src.trim();\n\n    if (!src) {\n      throw new Error(\"Local font source must not be empty.\");\n    }\n\n    if (isRemoteSource(src)) {\n      throw new Error(\n        `Local font ${JSON.stringify(options.name)} must name a project file rather than a URL.`,\n      );\n    }\n\n    assertKnownFormat(src);\n\n    return {\n      display: options.display ?? \"swap\",\n      family: options.name,\n      kind: \"font\",\n      selfHost: true,\n      source: \"local\",\n      src,\n      style: options.style ?? \"normal\",\n      weight: options.weight ?? 400,\n    };\n  },\n};\n\nexport function defineFonts(fonts: FontContribution): FontContribution {\n  return [...fonts];\n}\n\n// The published file name derives from the declaration alone. The renderer\n// and the build therefore agree on every URL without sharing any state.\nexport function fontAssetFileName(definition: FontDefinition) {\n  const family = slug(definition.family);\n  const weight = slug(String(definition.weight));\n\n  return `${family}-${weight}-${definition.style}.${fontFormat(definition.src)}`;\n}\n\nexport function fontAssetUrl(\n  definition: FontDefinition,\n  basePath: string = defaultFontPath,\n) {\n  return definition.selfHost\n    ? `${basePath}/${fontAssetFileName(definition)}`\n    : definition.src;\n}\n\nexport function fontStylesheetUrl(basePath: string = defaultFontPath) {\n  return `${basePath}/fonts.css`;\n}\n\nexport function fontMediaType(file: string) {\n  return fontMediaTypes[fontFormat(file)];\n}\n\nexport function fontFormat(file: string): FontFormat {\n  const format = fontFormats[urlExtension(file)];\n\n  if (!format) {\n    throw new Error(\n      `Font source ${JSON.stringify(file)} has no known font extension.`,\n    );\n  }\n\n  return format;\n}\n\n// The stylesheet and the preload links are the whole document contribution.\n// An application spreads them into `links` in its root layout.\nexport function fontLinks(\n  fonts: FontContribution,\n  basePath: string = defaultFontPath,\n): LinkTag[] {\n  if (fonts.length === 0) {\n    return [];\n  }\n\n  return [\n    {\n      href: fontStylesheetUrl(basePath),\n      kind: \"link\" as const,\n      rel: \"stylesheet\",\n    },\n    ...fontPreloadLinks(fonts, basePath),\n  ];\n}\n\nexport function fontPreloadLinks(\n  fonts: FontContribution,\n  basePath: string = defaultFontPath,\n): LinkTag[] {\n  return fonts.map((definition) =>\n    preload(fontAssetUrl(definition, basePath), {\n      as: \"font\",\n      // A font request runs in CORS mode even on the same origin. A preload\n      // without this attribute fetches the file twice.\n      crossOrigin: \"anonymous\",\n      type: fontMediaType(definition.src),\n    })\n  );\n}\n\nexport function renderFontFaceCss(\n  fonts: FontContribution,\n  basePath: string = defaultFontPath,\n) {\n  return fonts\n    .map((definition) => {\n      const url = fontAssetUrl(definition, basePath);\n\n      return [\n        \"@font-face {\",\n        `  font-family: \"${escapeCss(definition.family)}\";`,\n        `  src: url(\"${escapeCss(url)}\") format(\"${\n          fontFaceFormats[fontFormat(definition.src)]\n        }\");`,\n        `  font-style: ${definition.style};`,\n        `  font-weight: ${definition.weight};`,\n        `  font-display: ${definition.display};`,\n        \"}\",\n      ].join(\"\\n\");\n    })\n    .join(\"\\n\");\n}\n\n// A self-hosted font set collapses to `'self'`, which every framework preset\n// already declares. A third-party host has to be named here instead.\nexport function fontSources(fonts: FontContribution): string[] {\n  const origins = new Set<string>();\n\n  for (const definition of fonts) {\n    if (!definition.selfHost) {\n      origins.add(new URL(definition.src).origin);\n    }\n  }\n\n  return [\"'self'\", ...[...origins].sort()];\n}\n\nfunction isRemoteSource(src: string) {\n  return /^https?:\\/\\//i.test(src);\n}\n\nfunction assertKnownFormat(src: string) {\n  fontFormat(src);\n}\n\nfunction slug(value: string) {\n  return value\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\") || \"font\";\n}\n\nfunction escapeCss(value: string) {\n  return value.replace(/[\\\\\"]/g, \"\\\\$&\");\n}\n","import type { ImageFormat } from \"./images\";\nimport { urlExtension } from \"./url\";\n\nexport type ImageSourceKind = \"local\" | \"remote\";\n\n// The descriptor is the complete input of one variant. The build pipeline and\n// the runtime optimizer both derive a file name and an encoded body from it.\nexport type ImageVariantDescriptor = {\n  format: ImageFormat;\n  quality?: number;\n  sourceKind: ImageSourceKind;\n  src: string;\n  width: number;\n};\n\nexport const defaultImageOptimizerPath = \"/_demiurge/image\";\n\nconst formatExtensions: Record<Exclude<ImageFormat, \"auto\">, string> = {\n  avif: \"avif\",\n  jpeg: \"jpg\",\n  png: \"png\",\n  webp: \"webp\",\n};\n\nconst extensionFormats: Record<string, Exclude<ImageFormat, \"auto\">> = {\n  avif: \"avif\",\n  jpeg: \"jpeg\",\n  jpg: \"jpeg\",\n  png: \"png\",\n  webp: \"webp\",\n};\n\nconst variantNamePattern = /^(.+)\\.w(\\d{1,5})(?:\\.q(\\d{1,3}))?\\.([a-z0-9]+)$/;\n\nexport function createImageOptimizerUrl(\n  descriptor: ImageVariantDescriptor,\n  optimizerPath: string,\n) {\n  const params = new URLSearchParams({\n    src: descriptor.src,\n    w: String(descriptor.width),\n  });\n\n  if (descriptor.quality !== undefined) {\n    params.set(\"q\", String(descriptor.quality));\n  }\n\n  if (descriptor.format !== \"auto\") {\n    params.set(\"f\", descriptor.format);\n  }\n\n  return `${optimizerPath}?${params.toString()}`;\n}\n\n// A static build has no optimizer process, so the variant path must describe\n// the complete transform. The build reads the path back and emits the file,\n// and no shared state has to cross the build and render boundary.\nexport function createImageVariantPath(\n  descriptor: ImageVariantDescriptor,\n  optimizerPath: string,\n) {\n  if (descriptor.sourceKind === \"remote\") {\n    throw new Error(\n      `Image source ${JSON.stringify(descriptor.src)} is remote. A static image loader can only emit a local image.`,\n    );\n  }\n\n  const quality = descriptor.quality === undefined\n    ? \"\"\n    : `.q${descriptor.quality}`;\n\n  return `${optimizerPath}${descriptor.src}.w${descriptor.width}${quality}.${\n    resolveVariantExtension(descriptor)\n  }`;\n}\n\nexport function parseImageVariantPath(\n  pathname: string,\n  optimizerPath: string,\n): ImageVariantDescriptor | undefined {\n  if (!pathname.startsWith(`${optimizerPath}/`)) {\n    return undefined;\n  }\n\n  const match = variantNamePattern.exec(pathname.slice(optimizerPath.length));\n\n  if (!match) {\n    return undefined;\n  }\n\n  const [, src, rawWidth, rawQuality, extension] = match;\n  const format = extensionFormats[extension!];\n  const width = Number(rawWidth);\n  const quality = rawQuality === undefined ? undefined : Number(rawQuality);\n\n  if (\n    !format ||\n    !imageSourceExtension(src!) ||\n    width <= 0 ||\n    (quality !== undefined && (quality < 1 || quality > 100))\n  ) {\n    return undefined;\n  }\n\n  return { format, quality, sourceKind: \"local\", src: src!, width };\n}\n\nexport function resolveVariantExtension(descriptor: ImageVariantDescriptor) {\n  if (descriptor.format !== \"auto\") {\n    return formatExtensions[descriptor.format];\n  }\n\n  const extension = imageSourceExtension(descriptor.src);\n\n  if (!extension) {\n    throw new Error(\n      `Image source ${JSON.stringify(descriptor.src)} has no known image extension. Declare an explicit format.`,\n    );\n  }\n\n  return extension === \"jpeg\" ? \"jpg\" : extension;\n}\n\nexport function imageSourceExtension(src: string) {\n  const extension = urlExtension(src);\n\n  return extension in extensionFormats ? extension : undefined;\n}\n\n// The build and the development server both find variants by reading the\n// documents that the application rendered. A variant that no document\n// references is a variant that nothing can request.\nexport function collectImageVariantPaths(html: string, optimizerPath: string) {\n  const pattern = new RegExp(\n    `${escapeRegExp(optimizerPath)}/[^\"'\\\\s,)<>]+`,\n    \"g\",\n  );\n\n  return [...new Set(html.match(pattern) ?? [])];\n}\n\nfunction escapeRegExp(value: string) {\n  return value.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n","import {\n  createImageOptimizerUrl,\n  createImageVariantPath,\n  defaultImageOptimizerPath,\n  type ImageVariantDescriptor,\n} from \"./image-url\";\n\n// `optimizer` points every variant at a request-time endpoint. `static`\n// points every variant at a file that the static build emits.\nexport type ImageLoader = \"optimizer\" | \"static\";\n\nexport type ImageFormat = \"auto\" | \"avif\" | \"webp\" | \"jpeg\" | \"png\";\n\nexport type RemoteImagePattern = {\n  hostname: string;\n  pathname?: string;\n  port?: string;\n  protocol?: \"http:\" | \"https:\";\n};\n\nexport type ImagePolicy = {\n  loader?: ImageLoader;\n  local?: boolean;\n  optimizerPath?: string;\n  remote?: readonly (string | RemoteImagePattern)[];\n};\n\nexport type ImageTransformOptions = {\n  alt: string;\n  format?: ImageFormat;\n  height: number;\n  priority?: boolean;\n  quality?: number;\n  sizes?: string;\n  src: string;\n  width: number;\n  widths?: readonly number[];\n};\n\nexport type ImageVariant = {\n  format: ImageFormat;\n  height: number;\n  src: string;\n  width: number;\n};\n\nexport type ImageTransformPlan = {\n  alt: string;\n  decoding: \"async\";\n  fetchPriority?: \"high\";\n  height: number;\n  loading: \"eager\" | \"lazy\";\n  sizes?: string;\n  source: {\n    kind: \"local\" | \"remote\";\n    src: string;\n  };\n  src: string;\n  srcSet: string;\n  variants: ImageVariant[];\n  width: number;\n};\n\nexport function defineImages(policy: ImagePolicy): ImagePolicy {\n  return policy;\n}\n\nexport function isAllowedImageSource(src: string, policy: ImagePolicy = {}) {\n  return classifyImageSource(src, policy) !== null;\n}\n\nexport function planImageTransform(\n  options: ImageTransformOptions,\n  policy: ImagePolicy = {},\n): ImageTransformPlan {\n  const source = classifyImageSource(options.src, policy);\n\n  if (!source) {\n    throw new Error(`Image source \"${options.src}\" is not allowed by the image policy.`);\n  }\n\n  validateImageDimension(\"width\", options.width);\n  validateImageDimension(\"height\", options.height);\n  validateImageQuality(options.quality);\n\n  const format = options.format ?? \"auto\";\n  const loader = policy.loader ?? \"optimizer\";\n  const optimizerPath = policy.optimizerPath ?? defaultImageOptimizerPath;\n  const widths = normalizeVariantWidths(options.width, options.widths);\n  const variants = widths.map((width) => {\n    const height = Math.round((options.height / options.width) * width);\n    const descriptor: ImageVariantDescriptor = {\n      format,\n      quality: options.quality,\n      sourceKind: source.kind,\n      src: source.kind === \"remote\" ? source.src : options.src,\n      width,\n    };\n\n    return {\n      format,\n      height,\n      src: loader === \"static\"\n        ? createImageVariantPath(descriptor, optimizerPath)\n        : createImageOptimizerUrl(descriptor, optimizerPath),\n      width,\n    };\n  });\n  const primaryVariant = variants[0];\n\n  return {\n    alt: options.alt,\n    decoding: \"async\",\n    fetchPriority: options.priority ? \"high\" : undefined,\n    height: options.height,\n    loading: options.priority ? \"eager\" : \"lazy\",\n    sizes: options.sizes,\n    source,\n    src: primaryVariant.src,\n    srcSet: variants\n      .map((variant) => `${variant.src} ${variant.width}w`)\n      .join(\", \"),\n    variants,\n    width: options.width,\n  };\n}\n\nfunction classifyImageSource(\n  src: string,\n  policy: ImagePolicy,\n): ImageTransformPlan[\"source\"] | null {\n  if (src.startsWith(\"/\") && !src.startsWith(\"//\")) {\n    return policy.local === false ? null : { kind: \"local\", src };\n  }\n\n  let url: URL;\n\n  try {\n    url = new URL(src);\n  } catch {\n    return null;\n  }\n\n  if (url.protocol !== \"https:\" && url.protocol !== \"http:\") {\n    return null;\n  }\n\n  return isAllowedRemoteImage(url, policy.remote ?? [])\n    ? { kind: \"remote\", src: url.toString() }\n    : null;\n}\n\nfunction isAllowedRemoteImage(\n  url: URL,\n  remotes: readonly (string | RemoteImagePattern)[],\n) {\n  return remotes.some((remote) =>\n    typeof remote === \"string\"\n      ? matchesRemoteOrigin(url, remote)\n      : matchesRemotePattern(url, remote),\n  );\n}\n\nfunction matchesRemoteOrigin(url: URL, origin: string) {\n  try {\n    return url.origin === new URL(origin).origin;\n  } catch {\n    return false;\n  }\n}\n\nfunction matchesRemotePattern(url: URL, pattern: RemoteImagePattern) {\n  if (pattern.protocol && url.protocol !== pattern.protocol) {\n    return false;\n  }\n\n  if (url.hostname !== pattern.hostname) {\n    return false;\n  }\n\n  if (pattern.port !== undefined && url.port !== pattern.port) {\n    return false;\n  }\n\n  return pattern.pathname\n    ? matchesPathnamePattern(url.pathname, pattern.pathname)\n    : true;\n}\n\nfunction matchesPathnamePattern(pathname: string, pattern: string) {\n  if (pattern.endsWith(\"*\")) {\n    return pathname.startsWith(pattern.slice(0, -1));\n  }\n\n  return pathname === pattern;\n}\n\nfunction validateImageDimension(name: \"height\" | \"width\", value: number) {\n  if (!Number.isInteger(value) || value <= 0) {\n    throw new Error(`Image ${name} must be a positive integer.`);\n  }\n}\n\nfunction validateImageQuality(quality: number | undefined) {\n  if (quality === undefined) {\n    return;\n  }\n\n  if (!Number.isInteger(quality) || quality < 1 || quality > 100) {\n    throw new Error(\"Image quality must be an integer between 1 and 100.\");\n  }\n}\n\nfunction normalizeVariantWidths(width: number, widths: readonly number[] | undefined) {\n  const candidates = widths ?? [width, width * 2];\n  const uniqueWidths = [...new Set(candidates)];\n\n  for (const candidate of uniqueWidths) {\n    validateImageDimension(\"width\", candidate);\n  }\n\n  return uniqueWidths.sort((left, right) => left - right);\n}\n\nexport type ImageRequestRejection = {\n  reason: string;\n  status: 400 | 403;\n};\n\nexport type ImageRequestResult =\n  | { descriptor: ImageVariantDescriptor; ok: true }\n  | { ok: false; rejection: ImageRequestRejection };\n\nconst imageFormats = new Set<ImageFormat>([\n  \"avif\",\n  \"jpeg\",\n  \"png\",\n  \"webp\",\n]);\n\n// The runtime optimizer reads a query that any client can write. It repeats\n// the policy check that the planner made, so an unallowed source never\n// reaches the file system or the network.\nexport function parseImageOptimizerRequest(\n  url: URL,\n  policy: ImagePolicy = {},\n): ImageRequestResult {\n  const src = url.searchParams.get(\"src\");\n\n  if (!src) {\n    return reject(400, \"The image request must declare a src parameter.\");\n  }\n\n  const source = classifyImageSource(src, policy);\n\n  if (!source) {\n    return reject(403, \"The image policy does not allow this image source.\");\n  }\n\n  const width = Number(url.searchParams.get(\"w\"));\n\n  if (!Number.isInteger(width) || width <= 0) {\n    return reject(400, \"The image width must be a positive integer.\");\n  }\n\n  const rawQuality = url.searchParams.get(\"q\");\n  const quality = rawQuality === null ? undefined : Number(rawQuality);\n\n  if (\n    quality !== undefined &&\n    (!Number.isInteger(quality) || quality < 1 || quality > 100)\n  ) {\n    return reject(400, \"The image quality must be an integer from 1 through 100.\");\n  }\n\n  const rawFormat = url.searchParams.get(\"f\");\n\n  // TYPE-EVIDENCE: the set membership check confirms the raw format is a known image format. The cast matches that check.\n  if (rawFormat !== null && !imageFormats.has(rawFormat as ImageFormat)) {\n    return reject(400, \"The image format is not supported.\");\n  }\n\n  // TYPE-EVIDENCE: the raw format value is a string that names an image format or is null. The cast labels it with the format union.\n  return {\n    descriptor: {\n      format: (rawFormat as ImageFormat | null) ?? \"auto\",\n      quality,\n      sourceKind: source.kind,\n      src: source.src,\n      width,\n    },\n    ok: true,\n  };\n}\n\nfunction reject(status: 400 | 403, reason: string): ImageRequestResult {\n  return { ok: false, rejection: { reason, status } };\n}\n"],"names":["urlPath","url","urlExtension","name","defaultFontPath","fontFormats","fontFaceFormats","fontMediaTypes","font","options","src","isRemoteSource","assertKnownFormat","defineFonts","fonts","fontAssetFileName","definition","family","slug","weight","fontFormat","fontAssetUrl","basePath","fontStylesheetUrl","fontMediaType","file","format","fontLinks","fontPreloadLinks","preload","renderFontFaceCss","escapeCss","fontSources","origins","value","defaultImageOptimizerPath","formatExtensions","extensionFormats","variantNamePattern","createImageOptimizerUrl","descriptor","optimizerPath","params","createImageVariantPath","quality","resolveVariantExtension","parseImageVariantPath","pathname","match","rawWidth","rawQuality","extension","width","imageSourceExtension","collectImageVariantPaths","html","pattern","escapeRegExp","defineImages","policy","isAllowedImageSource","classifyImageSource","planImageTransform","source","validateImageDimension","validateImageQuality","loader","variants","normalizeVariantWidths","height","primaryVariant","variant","isAllowedRemoteImage","remotes","remote","matchesRemoteOrigin","matchesRemotePattern","origin","matchesPathnamePattern","widths","candidates","uniqueWidths","candidate","left","right","imageFormats","parseImageOptimizerRequest","reject","rawFormat","status","reason"],"mappings":";AAMO,SAASA,EAAQC,GAAa;AACnC,SAAOA,EAAI,MAAM,GAAG,EAAE,CAAC,EAAG,MAAM,GAAG,EAAE,CAAC;AACxC;AAYO,SAASC,EAAaD,GAAa;AACxC,QAAME,IAAOH,EAAQC,CAAG,EAAE,MAAM,GAAG,EAAE,GAAG,EAAE;AAE1C,SAAOE,EAAK,SAAS,GAAG,IAAIA,EAAK,MAAM,GAAG,EAAE,GAAG,EAAE,EAAG,YAAA,IAAgB;AACtE;ACmBO,MAAMC,IAAkB,mBAEzBC,IAA0C;AAAA,EAC9C,KAAK;AAAA,EACL,KAAK;AAAA,EACL,MAAM;AAAA,EACN,OAAO;AACT,GAEMC,IAA8C;AAAA,EAClD,KAAK;AAAA,EACL,KAAK;AAAA,EACL,MAAM;AAAA,EACN,OAAO;AACT,GAEMC,IAA6C;AAAA,EACjD,KAAK;AAAA,EACL,KAAK;AAAA,EACL,MAAM;AAAA,EACN,OAAO;AACT,GAEaC,IAAO;AAAA;AAAA;AAAA;AAAA,EAIlB,OAAOC,GAA4C;AACjD,UAAMC,IAAMD,EAAQ,IAAI,KAAA;AAExB,QAAI,CAACE,EAAeD,CAAG;AACrB,YAAM,IAAI;AAAA,QACR,eAAe,KAAK,UAAUD,EAAQ,MAAM,CAAC;AAAA,MAAA;AAIjD,WAAAG,EAAkBF,CAAG,GAEd;AAAA,MACL,SAASD,EAAQ,WAAW;AAAA,MAC5B,QAAQA,EAAQ;AAAA,MAChB,MAAM;AAAA,MACN,UAAUA,EAAQ,YAAY;AAAA,MAC9B,QAAQ;AAAA,MACR,KAAAC;AAAA,MACA,OAAOD,EAAQ,SAAS;AAAA,MACxB,QAAQA,EAAQ,UAAU;AAAA,IAAA;AAAA,EAE9B;AAAA;AAAA;AAAA,EAGA,MAAMA,GAA2C;AAC/C,UAAMC,IAAMD,EAAQ,IAAI,KAAA;AAExB,QAAI,CAACC;AACH,YAAM,IAAI,MAAM,sCAAsC;AAGxD,QAAIC,EAAeD,CAAG;AACpB,YAAM,IAAI;AAAA,QACR,cAAc,KAAK,UAAUD,EAAQ,IAAI,CAAC;AAAA,MAAA;AAI9C,WAAAG,EAAkBF,CAAG,GAEd;AAAA,MACL,SAASD,EAAQ,WAAW;AAAA,MAC5B,QAAQA,EAAQ;AAAA,MAChB,MAAM;AAAA,MACN,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAAC;AAAA,MACA,OAAOD,EAAQ,SAAS;AAAA,MACxB,QAAQA,EAAQ,UAAU;AAAA,IAAA;AAAA,EAE9B;AACF;AAEO,SAASI,EAAYC,GAA2C;AACrE,SAAO,CAAC,GAAGA,CAAK;AAClB;AAIO,SAASC,EAAkBC,GAA4B;AAC5D,QAAMC,IAASC,EAAKF,EAAW,MAAM,GAC/BG,IAASD,EAAK,OAAOF,EAAW,MAAM,CAAC;AAE7C,SAAO,GAAGC,CAAM,IAAIE,CAAM,IAAIH,EAAW,KAAK,IAAII,EAAWJ,EAAW,GAAG,CAAC;AAC9E;AAEO,SAASK,EACdL,GACAM,IAAmBlB,GACnB;AACA,SAAOY,EAAW,WACd,GAAGM,CAAQ,IAAIP,EAAkBC,CAAU,CAAC,KAC5CA,EAAW;AACjB;AAEO,SAASO,EAAkBD,IAAmBlB,GAAiB;AACpE,SAAO,GAAGkB,CAAQ;AACpB;AAEO,SAASE,EAAcC,GAAc;AAC1C,SAAOlB,EAAea,EAAWK,CAAI,CAAC;AACxC;AAEO,SAASL,EAAWK,GAA0B;AACnD,QAAMC,IAASrB,EAAYH,EAAauB,CAAI,CAAC;AAE7C,MAAI,CAACC;AACH,UAAM,IAAI;AAAA,MACR,eAAe,KAAK,UAAUD,CAAI,CAAC;AAAA,IAAA;AAIvC,SAAOC;AACT;AAIO,SAASC,EACdb,GACAQ,IAAmBlB,GACR;AACX,SAAIU,EAAM,WAAW,IACZ,CAAA,IAGF;AAAA,IACL;AAAA,MACE,MAAMS,EAAkBD,CAAQ;AAAA,MAChC,MAAM;AAAA,MACN,KAAK;AAAA,IAAA;AAAA,IAEP,GAAGM,EAAiBd,GAAOQ,CAAQ;AAAA,EAAA;AAEvC;AAEO,SAASM,EACdd,GACAQ,IAAmBlB,GACR;AACX,SAAOU,EAAM;AAAA,IAAI,CAACE,MAChBa,EAAQR,EAAaL,GAAYM,CAAQ,GAAG;AAAA,MAC1C,IAAI;AAAA;AAAA;AAAA,MAGJ,aAAa;AAAA,MACb,MAAME,EAAcR,EAAW,GAAG;AAAA,IAAA,CACnC;AAAA,EAAA;AAEL;AAEO,SAASc,EACdhB,GACAQ,IAAmBlB,GACnB;AACA,SAAOU,EACJ,IAAI,CAACE,MAAe;AACnB,UAAMf,IAAMoB,EAAaL,GAAYM,CAAQ;AAE7C,WAAO;AAAA,MACL;AAAA,MACA,mBAAmBS,EAAUf,EAAW,MAAM,CAAC;AAAA,MAC/C,eAAee,EAAU9B,CAAG,CAAC,cAC3BK,EAAgBc,EAAWJ,EAAW,GAAG,CAAC,CAC5C;AAAA,MACA,iBAAiBA,EAAW,KAAK;AAAA,MACjC,kBAAkBA,EAAW,MAAM;AAAA,MACnC,mBAAmBA,EAAW,OAAO;AAAA,MACrC;AAAA,IAAA,EACA,KAAK;AAAA,CAAI;AAAA,EACb,CAAC,EACA,KAAK;AAAA,CAAI;AACd;AAIO,SAASgB,EAAYlB,GAAmC;AAC7D,QAAMmB,wBAAc,IAAA;AAEpB,aAAWjB,KAAcF;AACvB,IAAKE,EAAW,YACdiB,EAAQ,IAAI,IAAI,IAAIjB,EAAW,GAAG,EAAE,MAAM;AAI9C,SAAO,CAAC,UAAU,GAAG,CAAC,GAAGiB,CAAO,EAAE,MAAM;AAC1C;AAEA,SAAStB,EAAeD,GAAa;AACnC,SAAO,gBAAgB,KAAKA,CAAG;AACjC;AAEA,SAASE,EAAkBF,GAAa;AACtC,EAAAU,EAAWV,CAAG;AAChB;AAEA,SAASQ,EAAKgB,GAAe;AAC3B,SAAOA,EACJ,cACA,QAAQ,eAAe,GAAG,EAC1B,QAAQ,YAAY,EAAE,KAAK;AAChC;AAEA,SAASH,EAAUG,GAAe;AAChC,SAAOA,EAAM,QAAQ,UAAU,MAAM;AACvC;AC9OO,MAAMC,IAA4B,oBAEnCC,IAAiE;AAAA,EACrE,MAAM;AAAA,EACN,MAAM;AAAA,EACN,KAAK;AAAA,EACL,MAAM;AACR,GAEMC,IAAiE;AAAA,EACrE,MAAM;AAAA,EACN,MAAM;AAAA,EACN,KAAK;AAAA,EACL,KAAK;AAAA,EACL,MAAM;AACR,GAEMC,IAAqB;AAEpB,SAASC,EACdC,GACAC,GACA;AACA,QAAMC,IAAS,IAAI,gBAAgB;AAAA,IACjC,KAAKF,EAAW;AAAA,IAChB,GAAG,OAAOA,EAAW,KAAK;AAAA,EAAA,CAC3B;AAED,SAAIA,EAAW,YAAY,UACzBE,EAAO,IAAI,KAAK,OAAOF,EAAW,OAAO,CAAC,GAGxCA,EAAW,WAAW,UACxBE,EAAO,IAAI,KAAKF,EAAW,MAAM,GAG5B,GAAGC,CAAa,IAAIC,EAAO,UAAU;AAC9C;AAKO,SAASC,EACdH,GACAC,GACA;AACA,MAAID,EAAW,eAAe;AAC5B,UAAM,IAAI;AAAA,MACR,gBAAgB,KAAK,UAAUA,EAAW,GAAG,CAAC;AAAA,IAAA;AAIlD,QAAMI,IAAUJ,EAAW,YAAY,SACnC,KACA,KAAKA,EAAW,OAAO;AAE3B,SAAO,GAAGC,CAAa,GAAGD,EAAW,GAAG,KAAKA,EAAW,KAAK,GAAGI,CAAO,IACrEC,EAAwBL,CAAU,CACpC;AACF;AAEO,SAASM,GACdC,GACAN,GACoC;AACpC,MAAI,CAACM,EAAS,WAAW,GAAGN,CAAa,GAAG;AAC1C;AAGF,QAAMO,IAAQV,EAAmB,KAAKS,EAAS,MAAMN,EAAc,MAAM,CAAC;AAE1E,MAAI,CAACO;AACH;AAGF,QAAM,CAAA,EAAGtC,GAAKuC,GAAUC,GAAYC,CAAS,IAAIH,GAC3CtB,IAASW,EAAiBc,CAAU,GACpCC,IAAQ,OAAOH,CAAQ,GACvBL,IAAUM,MAAe,SAAY,SAAY,OAAOA,CAAU;AAExE,MACE,GAACxB,KACD,CAAC2B,EAAqB3C,CAAI,KAC1B0C,KAAS,KACRR,MAAY,WAAcA,IAAU,KAAKA,IAAU;AAKtD,WAAO,EAAE,QAAAlB,GAAQ,SAAAkB,GAAS,YAAY,SAAS,KAAAlC,GAAW,OAAA0C,EAAA;AAC5D;AAEO,SAASP,EAAwBL,GAAoC;AAC1E,MAAIA,EAAW,WAAW;AACxB,WAAOJ,EAAiBI,EAAW,MAAM;AAG3C,QAAMW,IAAYE,EAAqBb,EAAW,GAAG;AAErD,MAAI,CAACW;AACH,UAAM,IAAI;AAAA,MACR,gBAAgB,KAAK,UAAUX,EAAW,GAAG,CAAC;AAAA,IAAA;AAIlD,SAAOW,MAAc,SAAS,QAAQA;AACxC;AAEO,SAASE,EAAqB3C,GAAa;AAChD,QAAMyC,IAAYjD,EAAaQ,CAAG;AAElC,SAAOyC,KAAad,IAAmBc,IAAY;AACrD;AAKO,SAASG,GAAyBC,GAAcd,GAAuB;AAC5E,QAAMe,IAAU,IAAI;AAAA,IAClB,GAAGC,EAAahB,CAAa,CAAC;AAAA,IAC9B;AAAA,EAAA;AAGF,SAAO,CAAC,GAAG,IAAI,IAAIc,EAAK,MAAMC,CAAO,KAAK,CAAA,CAAE,CAAC;AAC/C;AAEA,SAASC,EAAavB,GAAe;AACnC,SAAOA,EAAM,QAAQ,uBAAuB,MAAM;AACpD;AChFO,SAASwB,GAAaC,GAAkC;AAC7D,SAAOA;AACT;AAEO,SAASC,GAAqBlD,GAAaiD,IAAsB,IAAI;AAC1E,SAAOE,EAAoBnD,GAAKiD,CAAM,MAAM;AAC9C;AAEO,SAASG,GACdrD,GACAkD,IAAsB,IACF;AACpB,QAAMI,IAASF,EAAoBpD,EAAQ,KAAKkD,CAAM;AAEtD,MAAI,CAACI;AACH,UAAM,IAAI,MAAM,iBAAiBtD,EAAQ,GAAG,uCAAuC;AAGrF,EAAAuD,EAAuB,SAASvD,EAAQ,KAAK,GAC7CuD,EAAuB,UAAUvD,EAAQ,MAAM,GAC/CwD,EAAqBxD,EAAQ,OAAO;AAEpC,QAAMiB,IAASjB,EAAQ,UAAU,QAC3ByD,IAASP,EAAO,UAAU,aAC1BlB,IAAgBkB,EAAO,iBAAiBxB,GAExCgC,IADSC,EAAuB3D,EAAQ,OAAOA,EAAQ,MAAM,EAC3C,IAAI,CAAC2C,MAAU;AACrC,UAAMiB,IAAS,KAAK,MAAO5D,EAAQ,SAASA,EAAQ,QAAS2C,CAAK,GAC5DZ,IAAqC;AAAA,MACzC,QAAAd;AAAA,MACA,SAASjB,EAAQ;AAAA,MACjB,YAAYsD,EAAO;AAAA,MACnB,KAAKA,EAAO,SAAS,WAAWA,EAAO,MAAMtD,EAAQ;AAAA,MACrD,OAAA2C;AAAA,IAAA;AAGF,WAAO;AAAA,MACL,QAAA1B;AAAA,MACA,QAAA2C;AAAA,MACA,KAAKH,MAAW,WACZvB,EAAuBH,GAAYC,CAAa,IAChDF,EAAwBC,GAAYC,CAAa;AAAA,MACrD,OAAAW;AAAA,IAAA;AAAA,EAEJ,CAAC,GACKkB,IAAiBH,EAAS,CAAC;AAEjC,SAAO;AAAA,IACL,KAAK1D,EAAQ;AAAA,IACb,UAAU;AAAA,IACV,eAAeA,EAAQ,WAAW,SAAS;AAAA,IAC3C,QAAQA,EAAQ;AAAA,IAChB,SAASA,EAAQ,WAAW,UAAU;AAAA,IACtC,OAAOA,EAAQ;AAAA,IACf,QAAAsD;AAAA,IACA,KAAKO,EAAe;AAAA,IACpB,QAAQH,EACL,IAAI,CAACI,MAAY,GAAGA,EAAQ,GAAG,IAAIA,EAAQ,KAAK,GAAG,EACnD,KAAK,IAAI;AAAA,IACZ,UAAAJ;AAAA,IACA,OAAO1D,EAAQ;AAAA,EAAA;AAEnB;AAEA,SAASoD,EACPnD,GACAiD,GACqC;AACrC,MAAIjD,EAAI,WAAW,GAAG,KAAK,CAACA,EAAI,WAAW,IAAI;AAC7C,WAAOiD,EAAO,UAAU,KAAQ,OAAO,EAAE,MAAM,SAAS,KAAAjD,EAAA;AAG1D,MAAIT;AAEJ,MAAI;AACF,IAAAA,IAAM,IAAI,IAAIS,CAAG;AAAA,EACnB,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,SAAIT,EAAI,aAAa,YAAYA,EAAI,aAAa,UACzC,OAGFuE,EAAqBvE,GAAK0D,EAAO,UAAU,CAAA,CAAE,IAChD,EAAE,MAAM,UAAU,KAAK1D,EAAI,SAAA,MAC3B;AACN;AAEA,SAASuE,EACPvE,GACAwE,GACA;AACA,SAAOA,EAAQ;AAAA,IAAK,CAACC,MACnB,OAAOA,KAAW,WACdC,EAAoB1E,GAAKyE,CAAM,IAC/BE,EAAqB3E,GAAKyE,CAAM;AAAA,EAAA;AAExC;AAEA,SAASC,EAAoB1E,GAAU4E,GAAgB;AACrD,MAAI;AACF,WAAO5E,EAAI,WAAW,IAAI,IAAI4E,CAAM,EAAE;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAASD,EAAqB3E,GAAUuD,GAA6B;AASnE,SARIA,EAAQ,YAAYvD,EAAI,aAAauD,EAAQ,YAI7CvD,EAAI,aAAauD,EAAQ,YAIzBA,EAAQ,SAAS,UAAavD,EAAI,SAASuD,EAAQ,OAC9C,KAGFA,EAAQ,WACXsB,EAAuB7E,EAAI,UAAUuD,EAAQ,QAAQ,IACrD;AACN;AAEA,SAASsB,EAAuB/B,GAAkBS,GAAiB;AACjE,SAAIA,EAAQ,SAAS,GAAG,IACfT,EAAS,WAAWS,EAAQ,MAAM,GAAG,EAAE,CAAC,IAG1CT,MAAaS;AACtB;AAEA,SAASQ,EAAuB7D,GAA0B+B,GAAe;AACvE,MAAI,CAAC,OAAO,UAAUA,CAAK,KAAKA,KAAS;AACvC,UAAM,IAAI,MAAM,SAAS/B,CAAI,8BAA8B;AAE/D;AAEA,SAAS8D,EAAqBrB,GAA6B;AACzD,MAAIA,MAAY,WAIZ,CAAC,OAAO,UAAUA,CAAO,KAAKA,IAAU,KAAKA,IAAU;AACzD,UAAM,IAAI,MAAM,qDAAqD;AAEzE;AAEA,SAASwB,EAAuBhB,GAAe2B,GAAuC;AACpF,QAAMC,IAAaD,KAAU,CAAC3B,GAAOA,IAAQ,CAAC,GACxC6B,IAAe,CAAC,GAAG,IAAI,IAAID,CAAU,CAAC;AAE5C,aAAWE,KAAaD;AACtB,IAAAjB,EAAuB,SAASkB,CAAS;AAG3C,SAAOD,EAAa,KAAK,CAACE,GAAMC,MAAUD,IAAOC,CAAK;AACxD;AAWA,MAAMC,wBAAmB,IAAiB;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKM,SAASC,GACdrF,GACA0D,IAAsB,IACF;AACpB,QAAMjD,IAAMT,EAAI,aAAa,IAAI,KAAK;AAEtC,MAAI,CAACS;AACH,WAAO6E,EAAO,KAAK,iDAAiD;AAGtE,QAAMxB,IAASF,EAAoBnD,GAAKiD,CAAM;AAE9C,MAAI,CAACI;AACH,WAAOwB,EAAO,KAAK,oDAAoD;AAGzE,QAAMnC,IAAQ,OAAOnD,EAAI,aAAa,IAAI,GAAG,CAAC;AAE9C,MAAI,CAAC,OAAO,UAAUmD,CAAK,KAAKA,KAAS;AACvC,WAAOmC,EAAO,KAAK,6CAA6C;AAGlE,QAAMrC,IAAajD,EAAI,aAAa,IAAI,GAAG,GACrC2C,IAAUM,MAAe,OAAO,SAAY,OAAOA,CAAU;AAEnE,MACEN,MAAY,WACX,CAAC,OAAO,UAAUA,CAAO,KAAKA,IAAU,KAAKA,IAAU;AAExD,WAAO2C,EAAO,KAAK,0DAA0D;AAG/E,QAAMC,IAAYvF,EAAI,aAAa,IAAI,GAAG;AAG1C,SAAIuF,MAAc,QAAQ,CAACH,EAAa,IAAIG,CAAwB,IAC3DD,EAAO,KAAK,oCAAoC,IAIlD;AAAA,IACL,YAAY;AAAA,MACV,QAASC,KAAoC;AAAA,MAC7C,SAAA5C;AAAA,MACA,YAAYmB,EAAO;AAAA,MACnB,KAAKA,EAAO;AAAA,MACZ,OAAAX;AAAA,IAAA;AAAA,IAEF,IAAI;AAAA,EAAA;AAER;AAEA,SAASmC,EAAOE,GAAmBC,GAAoC;AACrE,SAAO,EAAE,IAAI,IAAO,WAAW,EAAE,QAAAA,GAAQ,QAAAD,IAAO;AAClD;"}