@humaan/payload-storage-imagekit 2.7.0 → 2.8.0

package/README.md

@@ -157,7 +157,7 @@ How it works:
 - **Per-document status:** each document records its actual ImageKit privacy at upload time in `imagekit.isPrivate` (hidden from the admin form). A file's privacy on ImageKit is fixed when it is uploaded, so this stored flag — not the collection's current setting — is the **source of truth** for delivery. This means existing files keep working if you later flip a collection's `private` setting. (Documents uploaded before this flag existed fall back to the collection setting.)
 - **Delivery:** files are served through Payload's own file route (`/api/<collection>/file/<filename>`), which enforces the collection's `access.read` control and then redirects to a freshly signed, expiring ImageKit URL. Nothing signed is ever persisted to the database.
 - **Admin thumbnails** are routed through the same Payload file route so they sign on demand and respect access control (including ImageKit's `ik-thumbnail.jpg` previews for videos and PDFs, with `/ik-video.mp4` applied first for videos without a `.mp4` or `.mov` extension).
-- **Admin indicators:** private collections get a note in their admin description (visible in the list and edit views). The ImageKit metadata group is hidden while uploading and shown after a file has been stored, with `imagekit.url` visible as a read-only field and `imagekit.isPrivate` shown as read-only when the stored file is private.
+- **Admin indicators:** private collections get a note in their admin description (visible in the list and edit views). The ImageKit metadata sits in a "Storage: ImageKit" panel that is collapsed by default, hidden while uploading and shown after a file has been stored, with `imagekit.url` visible as a read-only field and `imagekit.isPrivate` shown as read-only when the stored file is private.
 - **Signed URLs:** because the stored `imagekit.url` is the unsigned URL (which 401s for private files), private documents also expose a virtual `imagekit.signedUrl` field — a freshly signed, time-limited URL computed on each read (never persisted). Use it through Payload's API to reach the file directly on ImageKit. The access-control-gated alternative is the document's top-level `url` (the Payload file route).
 - **Access control is required.** Because signing happens at request time behind Payload access control, `disablePayloadAccessControl` cannot be combined with private collections — doing so throws at startup. Set per-collection `access.read` rules to control who can read each file.
 

package/dist/index.js

@@ -187,89 +187,100 @@ const imagekitAdapter = ({ apiRoute, client, clientUploads, privateSlugs, rootFo
             clientUploads,
             fields: [
                 {
-                    name: 'imagekit',
-                    type: 'group',
+                    // Presentational wrapper: tucks the ImageKit details into a closed panel without
+                    // changing the `imagekit.*` data paths.
+                    type: 'collapsible',
                     admin: {
                         condition: (data)=>hasStoredImageKitURL(data),
-                        disableListColumn: true,
-                        disableListFilter: true
+                        initCollapsed: true
                     },
                     fields: [
                         {
-                            name: 'fileId',
-                            type: 'text',
+                            name: 'imagekit',
+                            type: 'group',
                             admin: {
-                                hidden: true
-                            }
-                        },
-                        {
-                            name: 'url',
-                            type: 'text',
-                            admin: {
-                                readOnly: true
-                            },
-                            label: 'URL'
-                        },
-                        {
-                            name: 'isPrivate',
-                            type: 'checkbox',
-                            admin: {
-                                condition: (_data, siblingData)=>isDocumentPrivate({
-                                        imagekit: siblingData
-                                    }, isPrivate),
-                                description: "Indicates whether this file was uploaded to ImageKit as private. Private files are delivered through signed URLs. Changes to this collection's private option in payload.config only affect future uploads.",
-                                readOnly: true
+                                disableListColumn: true,
+                                disableListFilter: true
                             },
-                            label: 'Private file'
-                        },
-                        {
-                            name: 'signedUrl',
-                            type: 'text',
-                            admin: {
-                                // Only relevant for private files; the plain `url` works directly for public ones.
-                                condition: (_data, siblingData)=>isDocumentPrivate({
-                                        imagekit: siblingData
-                                    }, isPrivate),
-                                description: `Temporary signed URL for reaching this private file directly on ImageKit. Expires ${signedUrlExpiresIn} seconds after load and is regenerated on every read. Note: anyone with this URL can access the file until it expires — it is not gated by Payload access control.`,
-                                readOnly: true
-                            },
-                            hooks: {
-                                // Computed server-side on read so it is always freshly signed and never persisted.
-                                afterRead: [
-                                    ({ data, siblingData })=>{
-                                        if (!isDocumentPrivate({
-                                            imagekit: siblingData
-                                        }, isPrivate)) {
-                                            return undefined;
-                                        }
-                                        const filename = data?.filename;
-                                        if (!filename) {
-                                            return undefined;
-                                        }
-                                        const source = data || {};
-                                        const documentPrefix = path.posix.join(source.prefix || prefix, source._objectKey || '');
-                                        const storageFilePath = buildStoragePathData({
-                                            collectionPrefix: prefix,
-                                            docPrefix: documentPrefix,
-                                            filename
-                                        }).storageFilePath;
-                                        return buildSignedURL(`/${storageFilePath}`);
+                            fields: [
+                                {
+                                    name: 'fileId',
+                                    type: 'text',
+                                    admin: {
+                                        hidden: true
                                     }
-                                ]
-                            },
-                            label: 'Signed URL',
-                            virtual: true
-                        },
-                        {
-                            name: 'thumbnailUrl',
-                            type: 'text',
-                            admin: {
-                                hidden: true
-                            }
+                                },
+                                {
+                                    name: 'url',
+                                    type: 'text',
+                                    admin: {
+                                        readOnly: true
+                                    },
+                                    label: 'URL'
+                                },
+                                {
+                                    name: 'isPrivate',
+                                    type: 'checkbox',
+                                    admin: {
+                                        condition: (_data, siblingData)=>isDocumentPrivate({
+                                                imagekit: siblingData
+                                            }, isPrivate),
+                                        description: "Indicates whether this file was uploaded to ImageKit as private. Private files are delivered through signed URLs. Changes to this collection's private option in payload.config only affect future uploads.",
+                                        readOnly: true
+                                    },
+                                    label: 'Private file'
+                                },
+                                {
+                                    name: 'signedUrl',
+                                    type: 'text',
+                                    admin: {
+                                        // Only relevant for private files; the plain `url` works directly for public ones.
+                                        condition: (_data, siblingData)=>isDocumentPrivate({
+                                                imagekit: siblingData
+                                            }, isPrivate),
+                                        description: `Temporary signed URL for reaching this private file directly on ImageKit. Expires ${signedUrlExpiresIn} seconds after load and is regenerated on every read. Note: anyone with this URL can access the file until it expires — it is not gated by Payload access control.`,
+                                        readOnly: true
+                                    },
+                                    hooks: {
+                                        // Computed server-side on read so it is always freshly signed and never persisted.
+                                        afterRead: [
+                                            ({ data, siblingData })=>{
+                                                if (!isDocumentPrivate({
+                                                    imagekit: siblingData
+                                                }, isPrivate)) {
+                                                    return undefined;
+                                                }
+                                                const filename = data?.filename;
+                                                if (!filename) {
+                                                    return undefined;
+                                                }
+                                                const source = data || {};
+                                                const documentPrefix = path.posix.join(source.prefix || prefix, source._objectKey || '');
+                                                const storageFilePath = buildStoragePathData({
+                                                    collectionPrefix: prefix,
+                                                    docPrefix: documentPrefix,
+                                                    filename
+                                                }).storageFilePath;
+                                                return buildSignedURL(`/${storageFilePath}`);
+                                            }
+                                        ]
+                                    },
+                                    label: 'Signed URL',
+                                    virtual: true
+                                },
+                                {
+                                    name: 'thumbnailUrl',
+                                    type: 'text',
+                                    admin: {
+                                        hidden: true
+                                    }
+                                }
+                            ],
+                            interfaceName: 'imagekitFields',
+                            label: false
                         }
                     ],
-                    interfaceName: 'imagekitFields',
-                    label: 'ImageKit'
+                    label: 'Storage: ImageKit'
                 }
             ],
             generateURL: ({ filename, prefix: documentPrefix = '' })=>client.helper.buildSrc({
@@ -624,26 +635,34 @@ export const imagekitStorage = (pluginOptions)=>(config)=>{
             if (!configuredSlugs.has(collection.slug)) {
                 return collection;
             }
+            const withUniqueIdentity = (field)=>{
+                if ('name' in field && field.name === '_objectKey') {
+                    return {
+                        ...field,
+                        unique: true
+                    };
+                }
+                if (field.type === 'group' && 'name' in field && field.name === 'imagekit') {
+                    return {
+                        ...field,
+                        fields: field.fields.map((metadataField)=>'name' in metadataField && metadataField.name === 'fileId' ? {
+                                ...metadataField,
+                                unique: true
+                            } : metadataField)
+                    };
+                }
+                // The imagekit group sits inside the adapter's presentational "Storage: ImageKit" panel.
+                if (field.type === 'collapsible') {
+                    return {
+                        ...field,
+                        fields: field.fields.map(withUniqueIdentity)
+                    };
+                }
+                return field;
+            };
             return {
                 ...collection,
-                fields: collection.fields.map((field)=>{
-                    if ('name' in field && field.name === '_objectKey') {
-                        return {
-                            ...field,
-                            unique: true
-                        };
-                    }
-                    if (field.type === 'group' && 'name' in field && field.name === 'imagekit') {
-                        return {
-                            ...field,
-                            fields: field.fields.map((metadataField)=>'name' in metadataField && metadataField.name === 'fileId' ? {
-                                    ...metadataField,
-                                    unique: true
-                                } : metadataField)
-                        };
-                    }
-                    return field;
-                })
+                fields: collection.fields.map(withUniqueIdentity)
             };
         });
         return output;

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type {\n  Adapter,\n  ClientUploadsConfig,\n  CollectionOptions,\n} from '@payloadcms/plugin-cloud-storage/types'\nimport type {\n  CollectionConfig,\n  CollectionSlug,\n  Config,\n  PayloadRequest,\n  TypeWithID,\n  UploadCollectionSlug,\n  Where,\n} from 'payload'\n\nimport ImageKit, { toFile } from '@imagekit/nodejs'\nimport { cloudStoragePlugin } from '@payloadcms/plugin-cloud-storage'\nimport {\n  buildStoragePathData,\n  buildUploadStoragePathData,\n  getStorageFilePath,\n  initClientUploads,\n} from '@payloadcms/plugin-cloud-storage/utilities'\nimport { openAsBlob } from 'node:fs'\nimport path from 'node:path'\nimport { APIError } from 'payload'\nimport {\n  getRangeRequestInfo,\n  isXmlMimeType,\n  UPLOAD_CONTENT_SECURITY_POLICY,\n} from 'payload/internal'\nimport { validateMimeType } from 'payload/shared'\n\nimport type { VerifiedImageKitUpload } from './clientUploadVerification.js'\n\nimport { imageKitUploadAuthPath, isImageKitReceiptContext } from './clientUploads.js'\nimport {\n  createImageKitClientUploadVerifier,\n  getClientUploadStorageFilePath,\n} from './clientUploadVerification.js'\nimport { createImageKitUploadAuthHandler } from './endpoints/createImageKitUploadAuthHandler.js'\nimport {\n  getAdminThumbnailURL,\n  getPrivateAdminThumbnailURL,\n  isPdfMimeType,\n  isVideoMimeType,\n} from './getAdminThumbnailURL.js'\nimport { getImageKitThumbnailSrc, getVideoPosterSrc } from './imageTransforms.js'\n\nexport type ImageKitCollectionOptions = {\n  /**\n   * Override Payload's native focal-point picker (`upload.focalPoint`) for this\n   * collection.\n   */\n  focalPoint?: boolean\n  /**\n   * Upload files in this collection as ImageKit private files (`isPrivateFile: true`)\n   * and deliver them only through short-lived signed URLs, behind Payload access control.\n   */\n  private?: boolean\n}\ntype ImageKitCollectionConfig = ImageKitCollectionOptions | true\ntype ImageKitCollectionMap = Partial<Record<UploadCollectionSlug, ImageKitCollectionConfig>>\n\nconst DEFAULT_SIGNED_URL_EXPIRES_IN = 900\n/**\n * ImageKit re-encodes some uploads and serves the smaller derivative from the plain\n * delivery URL — a 1.9 MB MP4 can come back as 868 KB. That is exactly what we want\n * for visitors, but not when reading the file back to verify a client upload: the\n * bytes and the byte count would both belong to a file ImageKit's API never reported.\n * `orig-true` asks for the untouched original and does not disable optimisation for\n * anyone else.\n */\nconst ORIGINAL_FILE_TRANSFORMATION = 'orig-true'\n\nconst PRIVATE_COLLECTION_DESCRIPTION =\n  'Files in this collection are uploaded to ImageKit as private files and delivered through short-lived signed URLs.'\n\nconst isPrivateCollectionConfig = (value: ImageKitCollectionConfig | undefined): boolean =>\n  value !== true && typeof value === 'object' && value?.private === true\n\nconst XML_FAMILY_MIME_TYPES = ['application/xml', 'image/svg+xml', 'text/xml']\n\nconst collectionCanStoreXml = (collection: CollectionConfig): boolean => {\n  const upload = collection.upload\n\n  if (!upload || upload === true) {\n    return Boolean(upload)\n  }\n\n  // Payload skips MIME and content restrictions when this escape hatch is enabled.\n  if (upload.allowRestrictedFileTypes) {\n    return true\n  }\n\n  const allowedMimeTypes = upload.mimeTypes\n\n  return (\n    !allowedMimeTypes?.length ||\n    allowedMimeTypes.some((mimeType) => mimeType.includes('*') || isXmlMimeType(mimeType)) ||\n    XML_FAMILY_MIME_TYPES.some((mimeType) => validateMimeType(mimeType, allowedMimeTypes))\n  )\n}\n\n/**\n * Whether a specific document is private. The flag stored on the document at upload time\n * (`imagekit.isPrivate`) is the source of truth — a file's privacy on ImageKit is fixed\n * when it is uploaded and does not change if the collection's `private` setting changes\n * later. Falls back to the collection setting for documents uploaded before this flag existed.\n */\nconst isDocumentPrivate = (doc: unknown, collectionIsPrivate: boolean): boolean => {\n  const stored = (doc as { imagekit?: { isPrivate?: boolean } } | undefined)?.imagekit?.isPrivate\n\n  return typeof stored === 'boolean' ? stored : collectionIsPrivate\n}\ntype ImageKitReference = {\n  imagekit?: {\n    fileId?: string\n    isPrivate?: boolean\n    thumbnailUrl?: string\n    url?: string\n  }\n}\n\ntype UploadDocumentData = {\n  thumbnailURL?: string\n} & ImageKitReference\n\nexport type PayloadStorageImageKitConfig = {\n  alwaysInsertFields?: boolean\n  clientUploads?: ClientUploadsConfig\n  collections: ImageKitCollectionMap\n  disablePayloadAccessControl?: true\n  enabled?: boolean\n  /**\n   * Broad default for Payload's native focal-point picker (`upload.focalPoint`)\n   * on every configured collection. Focal points are disabled by default for\n   * configured collections, so prefer collection-level `focalPoint: true` for\n   * image collections. A collection's own `upload.focalPoint` still takes\n   * precedence.\n   */\n  focalPoint?: boolean\n  folder: string\n  privateKey: string\n  publicKey: string\n  /**\n   * Expiry (in seconds) applied to signed URLs generated for private collections.\n   * Defaults to 900 (15 minutes). URLs are signed fresh on every request, so a short\n   * window is safe.\n   */\n  signedUrlExpiresIn?: number\n  urlEndpoint: string\n}\n\nconst normalizeFolder = (folder: string): string => {\n  const normalized = folder.trim().replace(/^\\/+|\\/+$/g, '')\n\n  if (!normalized) {\n    throw new Error('imagekitStorage: `folder` is required.')\n  }\n\n  return `/${normalized}`\n}\n\nconst getCollectionFolder = (rootFolder: string, collectionSlug: string): string =>\n  path.posix.join(rootFolder, collectionSlug)\n\nconst findImageKitFileId = async (\n  imagekit: ImageKit,\n  filePath: string,\n): Promise<string | undefined> => {\n  const parentPath = path.posix.dirname(filePath)\n  const name = path.posix.basename(filePath)\n\n  const limit = 100\n\n  for (let skip = 0; ; skip += limit) {\n    const assets = await imagekit.assets.list({\n      type: 'file',\n      limit,\n      path: parentPath === '/' ? '/' : `${parentPath}/`,\n      skip,\n    })\n\n    const found = assets.find(\n      (asset) => 'fileId' in asset && asset.filePath === filePath && asset.name === name,\n    )\n\n    if (found && 'fileId' in found) {\n      return found.fileId\n    }\n\n    if (assets.length < limit) {\n      break\n    }\n  }\n\n  return undefined\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  !!value && typeof value === 'object'\n\nconst getStoredImageKitURL = (doc: unknown): string | undefined => {\n  const storedURL = (doc as ImageKitReference | undefined)?.imagekit?.url\n\n  return typeof storedURL === 'string' && storedURL.trim().length > 0 ? storedURL : undefined\n}\n\nconst hasStoredImageKitURL = (doc: unknown): boolean => !!getStoredImageKitURL(doc)\n\nconst findUploadDocumentByFilename = async ({\n  collection,\n  filename,\n  prefix,\n  req,\n}: {\n  collection: string\n  filename: string\n  prefix?: string\n  req: PayloadRequest\n}): Promise<null | TypeWithID> => {\n  const constraints: Where[] = [\n    {\n      filename: {\n        equals: filename,\n      },\n    },\n  ]\n\n  if (typeof prefix === 'string') {\n    constraints.push({\n      prefix: {\n        equals: prefix,\n      },\n    })\n  }\n\n  return req.payload.db.findOne({\n    collection,\n    req,\n    where: {\n      and: constraints,\n    },\n  })\n}\n\nconst applyVerifiedClientUploadToData = <T extends UploadDocumentData>(\n  data: T,\n  uploaded: VerifiedImageKitUpload,\n  buildThumbnailURL: (data: T) => string = getAdminThumbnailURL,\n  isPrivate: boolean,\n): T => {\n  data.imagekit = {\n    fileId: uploaded.fileId,\n    isPrivate,\n    thumbnailUrl: uploaded.thumbnailUrl,\n    url: uploaded.url,\n  }\n\n  // Preserve the admin preview when the original file was already uploaded client-side.\n  data.thumbnailURL = buildThumbnailURL(data)\n\n  return data\n}\n\nconst imagekitAdapter = ({\n  apiRoute,\n  client,\n  clientUploads,\n  privateSlugs,\n  rootFolder,\n  signedUrlExpiresIn,\n  urlEndpoint,\n  verifyClientUpload,\n}: {\n  apiRoute: string\n  client: ImageKit\n  clientUploads?: ClientUploadsConfig\n  privateSlugs: Set<string>\n  rootFolder: string\n  signedUrlExpiresIn: number\n  urlEndpoint: string\n  verifyClientUpload: ReturnType<typeof createImageKitClientUploadVerifier>\n}): Adapter => {\n  const fetchUploadedFile = async ({\n    fileSize,\n    fileURL,\n    mimeType,\n    range,\n  }: {\n    fileSize: number\n    fileURL: string\n    mimeType: string\n    range?: null | string\n  }): Promise<Response> => {\n    const rangeResult = getRangeRequestInfo({ fileSize, rangeHeader: range ?? null })\n\n    if (rangeResult.type === 'invalid') {\n      return new Response(null, {\n        headers: new Headers(rangeResult.headers),\n        status: rangeResult.status,\n      })\n    }\n\n    const normalizedRange =\n      rangeResult.type === 'partial'\n        ? `bytes=${rangeResult.rangeStart}-${rangeResult.rangeEnd}`\n        : undefined\n    // Payload cancels image probes after reading a bounded prefix. Next.js memoizes\n    // GET responses by teeing their streams; cancelling one branch can then wait\n    // forever for its unread cached sibling. An explicit signal opts out of that\n    // memoization, while no-store also excludes these reads from the data cache.\n    const response = await fetch(fileURL, {\n      cache: 'no-store',\n      ...(normalizedRange ? { headers: { Range: normalizedRange } } : {}),\n      signal: new AbortController().signal,\n    })\n\n    if (!response.ok || response.status !== rangeResult.status) {\n      void response.body?.cancel().catch(() => undefined)\n      throw new Error(\n        `imagekitStorage: ImageKit returned an unexpected file response (${response.status}).`,\n      )\n    }\n\n    const upstreamLength = response.headers.get('Content-Length')\n    const expectedLength = rangeResult.headers['Content-Length']\n    const upstreamRange = response.headers.get('Content-Range')\n    const expectedRange =\n      rangeResult.type === 'partial' ? rangeResult.headers['Content-Range'] : undefined\n\n    if (\n      (upstreamLength !== null && upstreamLength !== expectedLength) ||\n      (expectedRange && upstreamRange !== expectedRange)\n    ) {\n      void response.body?.cancel().catch(() => undefined)\n      throw new Error('imagekitStorage: ImageKit returned mismatched file content metadata.')\n    }\n\n    const headers = new Headers(rangeResult.headers)\n    headers.set('Content-Type', mimeType)\n    if (isXmlMimeType(mimeType)) {\n      headers.set('Content-Security-Policy', UPLOAD_CONTENT_SECURITY_POLICY)\n    }\n\n    return new Response(response.body, {\n      headers,\n      status: response.status,\n    })\n  }\n\n  return ({ collection, prefix = getCollectionFolder(rootFolder, collection.slug) }) => {\n    const isPrivate = privateSlugs.has(collection.slug)\n\n    // Sign a relative ImageKit path against the configured urlEndpoint. We always sign\n    // a computed path (never a stored absolute URL) because ImageKit's signature is\n    // derived from the path after stripping urlEndpoint, so the host must match.\n    const buildSignedURL = (src: string, tr?: null | string): string =>\n      client.helper.buildSrc({\n        expiresIn: signedUrlExpiresIn,\n        signed: true,\n        src,\n        transformation: tr ? [{ raw: tr }] : undefined,\n        urlEndpoint,\n      })\n\n    const buildThumbnailURL = (doc: UploadDocumentData): string =>\n      isDocumentPrivate(doc, isPrivate)\n        ? getPrivateAdminThumbnailURL(doc, collection.slug, apiRoute)\n        : getAdminThumbnailURL(doc)\n\n    return {\n      name: 'imagekit',\n      clientUploads,\n      fields: [\n        {\n          name: 'imagekit',\n          type: 'group',\n          admin: {\n            condition: (data) => hasStoredImageKitURL(data),\n            disableListColumn: true,\n            disableListFilter: true,\n          },\n          fields: [\n            {\n              name: 'fileId',\n              type: 'text',\n              admin: {\n                hidden: true,\n              },\n            },\n            {\n              name: 'url',\n              type: 'text',\n              admin: {\n                readOnly: true,\n              },\n              label: 'URL',\n            },\n            {\n              name: 'isPrivate',\n              type: 'checkbox',\n              admin: {\n                condition: (_data, siblingData) =>\n                  isDocumentPrivate({ imagekit: siblingData }, isPrivate),\n                description:\n                  \"Indicates whether this file was uploaded to ImageKit as private. Private files are delivered through signed URLs. Changes to this collection's private option in payload.config only affect future uploads.\",\n                readOnly: true,\n              },\n              label: 'Private file',\n            },\n            {\n              name: 'signedUrl',\n              type: 'text',\n              admin: {\n                // Only relevant for private files; the plain `url` works directly for public ones.\n                condition: (_data, siblingData) =>\n                  isDocumentPrivate({ imagekit: siblingData }, isPrivate),\n                description: `Temporary signed URL for reaching this private file directly on ImageKit. Expires ${signedUrlExpiresIn} seconds after load and is regenerated on every read. Note: anyone with this URL can access the file until it expires — it is not gated by Payload access control.`,\n                readOnly: true,\n              },\n              hooks: {\n                // Computed server-side on read so it is always freshly signed and never persisted.\n                afterRead: [\n                  ({ data, siblingData }) => {\n                    if (!isDocumentPrivate({ imagekit: siblingData }, isPrivate)) {\n                      return undefined\n                    }\n\n                    const filename = (data as { filename?: string } | undefined)?.filename\n\n                    if (!filename) {\n                      return undefined\n                    }\n\n                    const source = (data || {}) as { _objectKey?: string; prefix?: string }\n                    const documentPrefix = path.posix.join(\n                      source.prefix || prefix,\n                      source._objectKey || '',\n                    )\n                    const storageFilePath = buildStoragePathData({\n                      collectionPrefix: prefix,\n                      docPrefix: documentPrefix,\n                      filename,\n                    }).storageFilePath\n\n                    return buildSignedURL(`/${storageFilePath}`)\n                  },\n                ],\n              },\n              label: 'Signed URL',\n              virtual: true,\n            },\n            {\n              name: 'thumbnailUrl',\n              type: 'text',\n              admin: {\n                hidden: true,\n              },\n            },\n          ],\n          interfaceName: 'imagekitFields',\n          label: 'ImageKit',\n        },\n      ],\n      generateURL: ({ filename, prefix: documentPrefix = '' }) =>\n        client.helper.buildSrc({\n          src: `/${buildStoragePathData({\n            collectionPrefix: prefix,\n            docPrefix: documentPrefix,\n            filename,\n          }).storageFilePath}`,\n          urlEndpoint,\n        }),\n      handleDelete: async ({ doc, storageFilePath }) => {\n        const storedFileId = (doc as ImageKitReference & typeof doc).imagekit?.fileId\n        const fileId =\n          storedFileId || (await findImageKitFileId(client, `/${storageFilePath.replace(/^\\/+/, '')}`))\n\n        if (!fileId) {\n          return\n        }\n\n        await client.files.delete(fileId)\n      },\n      handleUpload: async ({ clientUploadContext, data, file, storageFilePath }) => {\n        if (clientUploadContext) {\n          const uploaded = await verifyClientUpload({\n            collectionSlug: collection.slug,\n            context: clientUploadContext,\n          })\n\n          return applyVerifiedClientUploadToData(data, uploaded, buildThumbnailURL, isPrivate)\n        }\n\n        // ImageKit's `toFile()` consumes async iterables before starting the request. A file-backed\n        // Blob keeps temporary-file uploads lazy so FormData can stream them from disk instead.\n        const uploadSource = file.tempFilePath\n          ? await openAsBlob(file.tempFilePath, { type: file.mimeType })\n          : file.buffer\n        const uploadFile = await toFile(uploadSource, file.filename, { type: file.mimeType })\n        const uploadFolder = path.posix.dirname(`/${storageFilePath.replace(/^\\/+/, '')}`)\n        const uploadFilename = path.posix.basename(storageFilePath)\n\n        const uploaded = await client.files.upload({\n          file: uploadFile,\n          fileName: uploadFilename,\n          folder: uploadFolder,\n          useUniqueFileName: false,\n          ...(isPrivate ? { isPrivateFile: true } : {}),\n        })\n\n        data.imagekit = {\n          fileId: uploaded.fileId,\n          isPrivate,\n          thumbnailUrl: uploaded.thumbnailUrl,\n          url: uploaded.url,\n        }\n\n        // Set the root-level thumbnailURL that Payload's admin interface expects.\n        // `buildThumbnailURL` needs the filename, which Payload may not have copied onto\n        // `data` yet at this point, so fall back to the uploaded file's name.\n        data.thumbnailURL = buildThumbnailURL({\n          ...data,\n          filename: (data as { filename?: string }).filename || uploadFilename,\n        })\n\n        return data\n      },\n      requiresClientUploadReceipt: true,\n      staticHandler: async (req, args) => {\n        const requestURL = new URL(req.url || 'http://localhost')\n        const tr = requestURL.searchParams.get('tr')\n        const hasClientUploadContext = 'clientUploadContext' in args.params\n\n        if (hasClientUploadContext) {\n          const clientUploadContext = args.params.clientUploadContext\n\n          if (!isImageKitReceiptContext(clientUploadContext)) {\n            throw new APIError('Invalid ImageKit client upload context.', 400)\n          }\n\n          const uploadedFile = await verifyClientUpload({\n            collectionSlug: collection.slug,\n            context: clientUploadContext,\n          })\n          const expectedFilePath = getClientUploadStorageFilePath({\n            collectionPrefix: prefix,\n            context: clientUploadContext,\n          })\n          const verifiedFileURL = isPrivate\n            ? buildSignedURL(`/${expectedFilePath}`, ORIGINAL_FILE_TRANSFORMATION)\n            : client.helper.buildSrc({\n                src: `/${expectedFilePath}`,\n                transformation: [{ raw: ORIGINAL_FILE_TRANSFORMATION }],\n                urlEndpoint,\n              })\n\n          return fetchUploadedFile({\n            fileSize: uploadedFile.size,\n            fileURL: verifiedFileURL,\n            mimeType: uploadedFile.mimeType,\n            range: req.headers.get('Range'),\n          })\n        }\n\n        const doc =\n          args.doc ||\n          (await findUploadDocumentByFilename({\n            collection: args.params.collection,\n            filename: args.params.filename,\n            prefix: args.params.prefix,\n            req,\n          }))\n\n        const storageFilePath = await getStorageFilePath({\n          collection,\n          collectionPrefix: prefix,\n          doc: doc || undefined,\n          filename: args.params.filename,\n          prefixQueryParam: args.params.prefix,\n          req,\n        })\n        const imageKitPath = `/${storageFilePath.replace(/^\\/+/, '')}`\n        const mimeType = (doc as { mimeType?: string } | null)?.mimeType\n\n        // XML-family uploads (including SVG) must pass through Payload so its CSP is\n        // present even when ImageKit uses a custom, same-origin delivery domain.\n        if (typeof mimeType === 'string' && isXmlMimeType(mimeType)) {\n          const filesize = (doc as { filesize?: number } | null)?.filesize\n\n          if (typeof filesize !== 'number' || !Number.isSafeInteger(filesize) || filesize < 0) {\n            throw new APIError('Stored ImageKit file metadata is incomplete.', 500)\n          }\n\n          const fileURL = isDocumentPrivate(doc, isPrivate)\n            ? buildSignedURL(imageKitPath, ORIGINAL_FILE_TRANSFORMATION)\n            : client.helper.buildSrc({\n                src: imageKitPath,\n                transformation: [{ raw: ORIGINAL_FILE_TRANSFORMATION }],\n                urlEndpoint,\n              })\n\n          return fetchUploadedFile({\n            fileSize: filesize,\n            fileURL,\n            mimeType,\n            range: req.headers.get('Range'),\n          })\n        }\n\n        // Sign based on the document's stored status, not the collection's current\n        // setting, so files keep working if the collection's privacy is changed later.\n        if (isDocumentPrivate(doc, isPrivate)) {\n          let signSrc = imageKitPath\n\n          // A `tr` request for a video/PDF is a thumbnail request (the plain transform\n          // can't render a preview); serve ImageKit's generated thumbnail instead.\n          if (tr && isVideoMimeType(mimeType)) {\n            signSrc = getVideoPosterSrc(signSrc)\n          } else if (tr && isPdfMimeType(mimeType)) {\n            signSrc = getImageKitThumbnailSrc(signSrc)\n          }\n\n          return Response.redirect(buildSignedURL(signSrc, tr), 302)\n        }\n\n        const imageKitURL = client.helper.buildSrc({\n          src:\n            getStoredImageKitURL(doc) ||\n            imageKitPath,\n          transformation: tr ? [{ raw: tr }] : undefined,\n          urlEndpoint,\n        })\n\n        return Response.redirect(imageKitURL, 302)\n      },\n    }\n  }\n}\n\nconst toCloudStorageCollections = (\n  collections: ImageKitCollectionMap,\n  adapter: Adapter,\n  privateSlugs: Set<string>,\n  rootFolder: string,\n  disablePayloadAccessControl?: true,\n): Partial<Record<CollectionSlug, CollectionOptions>> => {\n  const mappedCollections: Partial<Record<CollectionSlug, CollectionOptions>> = {}\n\n  for (const collectionSlug of Object.keys(collections)) {\n    mappedCollections[collectionSlug] = {\n      adapter,\n      disableLocalStorage: true,\n      // Private files require Payload access control so URLs can be signed at serve time.\n      disablePayloadAccessControl: privateSlugs.has(collectionSlug)\n        ? undefined\n        : disablePayloadAccessControl,\n      prefix: getCollectionFolder(rootFolder, collectionSlug),\n    }\n  }\n\n  return mappedCollections\n}\n\nexport const imagekitStorage =\n  (pluginOptions: PayloadStorageImageKitConfig) =>\n  (config: Config): Config => {\n    const {\n      alwaysInsertFields,\n      clientUploads,\n      collections,\n      disablePayloadAccessControl,\n      enabled,\n      focalPoint,\n      folder,\n      privateKey,\n      publicKey,\n      signedUrlExpiresIn: signedUrlExpiresInOption,\n      urlEndpoint,\n    } = pluginOptions\n\n    if (!privateKey?.trim()) {\n      throw new Error('imagekitStorage: `privateKey` is required.')\n    }\n\n    if (!publicKey?.trim()) {\n      throw new Error('imagekitStorage: `publicKey` is required.')\n    }\n\n    if (!urlEndpoint?.trim()) {\n      throw new Error('imagekitStorage: `urlEndpoint` is required.')\n    }\n\n    if (!collections || Object.keys(collections).length === 0) {\n      throw new Error('imagekitStorage: `collections` must include at least one upload collection.')\n    }\n\n    const privateSlugs = new Set(\n      Object.entries(collections)\n        .filter(([, value]) => isPrivateCollectionConfig(value))\n        .map(([slug]) => slug),\n    )\n    const configuredSlugs = new Set(Object.keys(collections))\n\n    if (disablePayloadAccessControl && privateSlugs.size > 0) {\n      throw new Error(\n        'imagekitStorage: `disablePayloadAccessControl` cannot be used with private collections. Private files require Payload access control to remain enabled so URLs can be signed at serve time.',\n      )\n    }\n\n    if (disablePayloadAccessControl) {\n      const xmlCollectionSlugs = (config.collections || [])\n        .filter(\n          (collection) =>\n            configuredSlugs.has(collection.slug) && collectionCanStoreXml(collection),\n        )\n        .map((collection) => collection.slug)\n\n      if (xmlCollectionSlugs.length > 0) {\n        throw new Error(\n          `imagekitStorage: \\`disablePayloadAccessControl\\` cannot be used with collections that can store XML-family files (${xmlCollectionSlugs.join(', ')}). XML-family files require Payload's file route so its Content Security Policy is applied. Configure a MIME allow list that excludes SVG/XML, or keep Payload access control enabled.`,\n        )\n      }\n    }\n\n    const signedUrlExpiresIn =\n      typeof signedUrlExpiresInOption === 'number' && signedUrlExpiresInOption > 0\n        ? signedUrlExpiresInOption\n        : DEFAULT_SIGNED_URL_EXPIRES_IN\n    const apiRoute = config.routes?.api ?? '/api'\n\n    const rootFolder = normalizeFolder(folder)\n\n    const imageKitClient = new ImageKit({ privateKey })\n    const collectionSecurity = Object.fromEntries(\n      (config.collections || [])\n        .filter((collection) => configuredSlugs.has(collection.slug))\n        .map((collection) => [\n          collection.slug,\n          {\n            collection,\n            isPrivate: privateSlugs.has(collection.slug),\n            prefix: getCollectionFolder(rootFolder, collection.slug),\n          },\n        ]),\n    )\n    const verifyClientUpload = createImageKitClientUploadVerifier({\n      client: imageKitClient,\n      collections: collectionSecurity,\n    })\n    const adapter = imagekitAdapter({\n      apiRoute,\n      client: imageKitClient,\n      clientUploads,\n      privateSlugs,\n      rootFolder,\n      signedUrlExpiresIn,\n      urlEndpoint,\n      verifyClientUpload,\n    })\n\n    const configWithCropDisabled: Config = {\n      ...config,\n      collections: (config.collections || []).map((collection) => {\n        if (!configuredSlugs.has(collection.slug)) {\n          return collection\n        }\n\n        const isCollectionPrivate = privateSlugs.has(collection.slug)\n        const buildThumbnailURL = (doc: unknown): string =>\n          isDocumentPrivate(doc, isCollectionPrivate)\n            ? getPrivateAdminThumbnailURL(doc, collection.slug, apiRoute)\n            : getAdminThumbnailURL(doc)\n\n        const collectionOptions = collections[collection.slug]\n        const collectionFocalPoint =\n          collectionOptions !== true &&\n          typeof collectionOptions === 'object' &&\n          typeof collectionOptions.focalPoint === 'boolean'\n            ? collectionOptions.focalPoint\n            : undefined\n\n        // Surface a \"this is a private collection\" note in the list and edit views.\n        // Preserve an existing string description by appending; leave custom\n        // component descriptions untouched.\n        const existingDescription = collection.admin?.description\n        const baseAdmin = isCollectionPrivate\n          ? {\n              ...(collection.admin || {}),\n              description:\n                typeof existingDescription === 'string' && existingDescription.trim().length > 0\n                  ? `${existingDescription} ${PRIVATE_COLLECTION_DESCRIPTION}`\n                  : (existingDescription ?? PRIVATE_COLLECTION_DESCRIPTION),\n            }\n          : collection.admin\n\n        return {\n          ...collection,\n          admin: baseAdmin,\n          hooks: {\n            ...(collection.hooks || {}),\n            beforeChange: [\n              ...(collection.hooks?.beforeChange || []),\n              async ({ data, req }) => {\n                if (!isRecord(data) || !req.file?.clientUploadContext) {\n                  return data\n                }\n\n                const context = req.file.clientUploadContext\n                const requestMimeType = req.file.mimetype.split(';', 1)[0]?.trim().toLowerCase()\n                if (\n                  !isImageKitReceiptContext(context) ||\n                  context.filename !== data.filename ||\n                  context.filename !== req.file.name ||\n                  context.expectedMimeType !== requestMimeType ||\n                  // Payload can clear req.file.size when preparing an in-memory image.\n                  // generateFileData preserves the original size on the document.\n                  context.expectedSize !== data.filesize\n                ) {\n                  throw new APIError('ImageKit client upload reference does not match this request.', 400)\n                }\n\n                const uploaded = await verifyClientUpload({\n                  collectionSlug: collection.slug,\n                  context,\n                })\n                // A provider file can only be claimed once, including through legacy receipts.\n                // The unique file ID index also rejects concurrent claims.\n                const existing = await req.payload.db.findOne({\n                  collection: collection.slug,\n                  req,\n                  where: {\n                    'imagekit.fileId': {\n                      equals: uploaded.fileId,\n                    },\n                  },\n                })\n                if (existing) {\n                  throw new APIError('This ImageKit client upload receipt has already been used.', 400)\n                }\n\n                data.filename = uploaded.name\n                data.filesize = uploaded.size\n                data.mimeType = uploaded.mimeType\n\n                return applyVerifiedClientUploadToData(\n                  data,\n                  uploaded,\n                  buildThumbnailURL,\n                  isCollectionPrivate,\n                )\n              },\n            ],\n            beforeOperation: [\n              ...(collection.hooks?.beforeOperation || []),\n              ({ args, operation, req }) => {\n                if (\n                  (operation !== 'create' && operation !== 'update') ||\n                  req.context?.skipCloudStorage ||\n                  !req.file ||\n                  req.file.clientUploadContext ||\n                  !('data' in args) ||\n                  !isRecord(args.data) ||\n                  typeof args.data.prefix !== 'string'\n                ) {\n                  return args\n                }\n\n                // Payload checks filename uniqueness before cloud storage's beforeChange\n                // normalizes the prefix. Use the persisted form during that lookup too.\n                args.data.prefix = buildUploadStoragePathData({\n                  collectionPrefix: getCollectionFolder(rootFolder, collection.slug),\n                  docPrefix: args.data.prefix,\n                  filename: req.file.name,\n                }).sanitizedDocPrefix\n                return args\n              },\n            ],\n          },\n          upload: {\n            // Focal points are opt-in for configured collections. Plugin-level\n            // and collection-level options can override this default; a\n            // collection's own `upload.focalPoint` still wins because it is\n            // spread in afterwards.\n            focalPoint: false,\n            ...(typeof focalPoint === 'boolean' ? { focalPoint } : {}),\n            ...(typeof collectionFocalPoint === 'boolean'\n              ? { focalPoint: collectionFocalPoint }\n              : {}),\n            ...(typeof collection.upload === 'object' ? collection.upload : {}),\n            adminThumbnail: ({ doc }) => buildThumbnailURL(doc),\n            crop: false,\n          },\n        }\n      }),\n    }\n\n    const uploadCollections = Object.fromEntries(\n      Object.keys(collections).map((collectionSlug) => [\n        collectionSlug,\n        {\n          isPrivate: privateSlugs.has(collectionSlug),\n          prefix: getCollectionFolder(rootFolder, collectionSlug),\n        },\n      ]),\n    ) as Partial<\n      Record<UploadCollectionSlug, { isPrivate: boolean; prefix: string }>\n    >\n\n    initClientUploads({\n      clientHandler: '@humaan/payload-storage-imagekit/client#ImageKitUploadHandler',\n      collections: uploadCollections,\n      config: configWithCropDisabled,\n      enabled: enabled !== false && Boolean(clientUploads),\n      serverHandler: createImageKitUploadAuthHandler({\n        access: typeof clientUploads === 'object' ? clientUploads.access : undefined,\n        collections: uploadCollections,\n        privateKey,\n        publicKey,\n        verifyClientUpload,\n      }),\n      serverHandlerPath: imageKitUploadAuthPath,\n    })\n\n    const output = cloudStoragePlugin({\n      alwaysInsertFields,\n      collections: toCloudStorageCollections(\n        collections,\n        adapter,\n        privateSlugs,\n        rootFolder,\n        disablePayloadAccessControl,\n      ),\n      enabled,\n    })(configWithCropDisabled)\n\n    // Make the provider identity unique at persistence time to reject concurrent receipt replays.\n    // Keep the legacy object key index for existing uploads.\n    output.collections = (output.collections || []).map((collection) => {\n      if (!configuredSlugs.has(collection.slug)) {\n        return collection\n      }\n\n      return {\n        ...collection,\n        fields: collection.fields.map((field) => {\n          if ('name' in field && field.name === '_objectKey') {\n            return { ...field, unique: true }\n          }\n          if (field.type === 'group' && 'name' in field && field.name === 'imagekit') {\n            return {\n              ...field,\n              fields: field.fields.map((metadataField) =>\n                'name' in metadataField && metadataField.name === 'fileId'\n                  ? { ...metadataField, unique: true }\n                  : metadataField,\n              ),\n            }\n          }\n          return field\n        }),\n      }\n    })\n\n    return output\n  }\n\nexport { migrateFolder } from './migrate.js'\nexport type { MigrateFolderOptions, MigrationJobResult } from './migrate.js'\n\n// Backward-compatible alias\nexport const payloadStorageImagekit = imagekitStorage\nexport const payloadStorageImageKit = imagekitStorage\n\nexport type PayloadStorageImagekitConfig = PayloadStorageImageKitConfig\n"],"names":["ImageKit","toFile","cloudStoragePlugin","buildStoragePathData","buildUploadStoragePathData","getStorageFilePath","initClientUploads","openAsBlob","path","APIError","getRangeRequestInfo","isXmlMimeType","UPLOAD_CONTENT_SECURITY_POLICY","validateMimeType","imageKitUploadAuthPath","isImageKitReceiptContext","createImageKitClientUploadVerifier","getClientUploadStorageFilePath","createImageKitUploadAuthHandler","getAdminThumbnailURL","getPrivateAdminThumbnailURL","isPdfMimeType","isVideoMimeType","getImageKitThumbnailSrc","getVideoPosterSrc","DEFAULT_SIGNED_URL_EXPIRES_IN","ORIGINAL_FILE_TRANSFORMATION","PRIVATE_COLLECTION_DESCRIPTION","isPrivateCollectionConfig","value","private","XML_FAMILY_MIME_TYPES","collectionCanStoreXml","collection","upload","Boolean","allowRestrictedFileTypes","allowedMimeTypes","mimeTypes","length","some","mimeType","includes","isDocumentPrivate","doc","collectionIsPrivate","stored","imagekit","isPrivate","normalizeFolder","folder","normalized","trim","replace","Error","getCollectionFolder","rootFolder","collectionSlug","posix","join","findImageKitFileId","filePath","parentPath","dirname","name","basename","limit","skip","assets","list","type","found","find","asset","fileId","undefined","isRecord","getStoredImageKitURL","storedURL","url","hasStoredImageKitURL","findUploadDocumentByFilename","filename","prefix","req","constraints","equals","push","payload","db","findOne","where","and","applyVerifiedClientUploadToData","data","uploaded","buildThumbnailURL","thumbnailUrl","thumbnailURL","imagekitAdapter","apiRoute","client","clientUploads","privateSlugs","signedUrlExpiresIn","urlEndpoint","verifyClientUpload","fetchUploadedFile","fileSize","fileURL","range","rangeResult","rangeHeader","Response","headers","Headers","status","normalizedRange","rangeStart","rangeEnd","response","fetch","cache","Range","signal","AbortController","ok","body","cancel","catch","upstreamLength","get","expectedLength","upstreamRange","expectedRange","set","slug","has","buildSignedURL","src","tr","helper","buildSrc","expiresIn","signed","transformation","raw","fields","admin","condition","disableListColumn","disableListFilter","hidden","readOnly","label","_data","siblingData","description","hooks","afterRead","source","documentPrefix","_objectKey","storageFilePath","collectionPrefix","docPrefix","virtual","interfaceName","generateURL","handleDelete","storedFileId","files","delete","handleUpload","clientUploadContext","file","context","uploadSource","tempFilePath","buffer","uploadFile","uploadFolder","uploadFilename","fileName","useUniqueFileName","isPrivateFile","requiresClientUploadReceipt","staticHandler","args","requestURL","URL","searchParams","hasClientUploadContext","params","uploadedFile","expectedFilePath","verifiedFileURL","size","prefixQueryParam","imageKitPath","filesize","Number","isSafeInteger","signSrc","redirect","imageKitURL","toCloudStorageCollections","collections","adapter","disablePayloadAccessControl","mappedCollections","Object","keys","disableLocalStorage","imagekitStorage","pluginOptions","config","alwaysInsertFields","enabled","focalPoint","privateKey","publicKey","signedUrlExpiresInOption","Set","entries","filter","map","configuredSlugs","xmlCollectionSlugs","routes","api","imageKitClient","collectionSecurity","fromEntries","configWithCropDisabled","isCollectionPrivate","collectionOptions","collectionFocalPoint","existingDescription","baseAdmin","beforeChange","requestMimeType","mimetype","split","toLowerCase","expectedMimeType","expectedSize","existing","beforeOperation","operation","skipCloudStorage","sanitizedDocPrefix","adminThumbnail","crop","uploadCollections","clientHandler","serverHandler","access","serverHandlerPath","output","field","unique","metadataField","migrateFolder","payloadStorageImagekit","payloadStorageImageKit"],"mappings":"AAeA,OAAOA,YAAYC,MAAM,QAAQ,mBAAkB;AACnD,SAASC,kBAAkB,QAAQ,mCAAkC;AACrE,SACEC,oBAAoB,EACpBC,0BAA0B,EAC1BC,kBAAkB,EAClBC,iBAAiB,QACZ,6CAA4C;AACnD,SAASC,UAAU,QAAQ,UAAS;AACpC,OAAOC,UAAU,YAAW;AAC5B,SAASC,QAAQ,QAAQ,UAAS;AAClC,SACEC,mBAAmB,EACnBC,aAAa,EACbC,8BAA8B,QACzB,mBAAkB;AACzB,SAASC,gBAAgB,QAAQ,iBAAgB;AAIjD,SAASC,sBAAsB,EAAEC,wBAAwB,QAAQ,qBAAoB;AACrF,SACEC,kCAAkC,EAClCC,8BAA8B,QACzB,gCAA+B;AACtC,SAASC,+BAA+B,QAAQ,iDAAgD;AAChG,SACEC,oBAAoB,EACpBC,2BAA2B,EAC3BC,aAAa,EACbC,eAAe,QACV,4BAA2B;AAClC,SAASC,uBAAuB,EAAEC,iBAAiB,QAAQ,uBAAsB;AAiBjF,MAAMC,gCAAgC;AACtC;;;;;;;CAOC,GACD,MAAMC,+BAA+B;AAErC,MAAMC,iCACJ;AAEF,MAAMC,4BAA4B,CAACC,QACjCA,UAAU,QAAQ,OAAOA,UAAU,YAAYA,OAAOC,YAAY;AAEpE,MAAMC,wBAAwB;IAAC;IAAmB;IAAiB;CAAW;AAE9E,MAAMC,wBAAwB,CAACC;IAC7B,MAAMC,SAASD,WAAWC,MAAM;IAEhC,IAAI,CAACA,UAAUA,WAAW,MAAM;QAC9B,OAAOC,QAAQD;IACjB;IAEA,iFAAiF;IACjF,IAAIA,OAAOE,wBAAwB,EAAE;QACnC,OAAO;IACT;IAEA,MAAMC,mBAAmBH,OAAOI,SAAS;IAEzC,OACE,CAACD,kBAAkBE,UACnBF,iBAAiBG,IAAI,CAAC,CAACC,WAAaA,SAASC,QAAQ,CAAC,QAAQ/B,cAAc8B,cAC5EV,sBAAsBS,IAAI,CAAC,CAACC,WAAa5B,iBAAiB4B,UAAUJ;AAExE;AAEA;;;;;CAKC,GACD,MAAMM,oBAAoB,CAACC,KAAcC;IACvC,MAAMC,SAAUF,KAA4DG,UAAUC;IAEtF,OAAO,OAAOF,WAAW,YAAYA,SAASD;AAChD;AAwCA,MAAMI,kBAAkB,CAACC;IACvB,MAAMC,aAAaD,OAAOE,IAAI,GAAGC,OAAO,CAAC,cAAc;IAEvD,IAAI,CAACF,YAAY;QACf,MAAM,IAAIG,MAAM;IAClB;IAEA,OAAO,CAAC,CAAC,EAAEH,YAAY;AACzB;AAEA,MAAMI,sBAAsB,CAACC,YAAoBC,iBAC/CjD,KAAKkD,KAAK,CAACC,IAAI,CAACH,YAAYC;AAE9B,MAAMG,qBAAqB,OACzBb,UACAc;IAEA,MAAMC,aAAatD,KAAKkD,KAAK,CAACK,OAAO,CAACF;IACtC,MAAMG,OAAOxD,KAAKkD,KAAK,CAACO,QAAQ,CAACJ;IAEjC,MAAMK,QAAQ;IAEd,IAAK,IAAIC,OAAO,IAAKA,QAAQD,MAAO;QAClC,MAAME,SAAS,MAAMrB,SAASqB,MAAM,CAACC,IAAI,CAAC;YACxCC,MAAM;YACNJ;YACA1D,MAAMsD,eAAe,MAAM,MAAM,GAAGA,WAAW,CAAC,CAAC;YACjDK;QACF;QAEA,MAAMI,QAAQH,OAAOI,IAAI,CACvB,CAACC,QAAU,YAAYA,SAASA,MAAMZ,QAAQ,KAAKA,YAAYY,MAAMT,IAAI,KAAKA;QAGhF,IAAIO,SAAS,YAAYA,OAAO;YAC9B,OAAOA,MAAMG,MAAM;QACrB;QAEA,IAAIN,OAAO7B,MAAM,GAAG2B,OAAO;YACzB;QACF;IACF;IAEA,OAAOS;AACT;AAEA,MAAMC,WAAW,CAAC/C,QAChB,CAAC,CAACA,SAAS,OAAOA,UAAU;AAE9B,MAAMgD,uBAAuB,CAACjC;IAC5B,MAAMkC,YAAalC,KAAuCG,UAAUgC;IAEpE,OAAO,OAAOD,cAAc,YAAYA,UAAU1B,IAAI,GAAGb,MAAM,GAAG,IAAIuC,YAAYH;AACpF;AAEA,MAAMK,uBAAuB,CAACpC,MAA0B,CAAC,CAACiC,qBAAqBjC;AAE/E,MAAMqC,+BAA+B,OAAO,EAC1ChD,UAAU,EACViD,QAAQ,EACRC,MAAM,EACNC,GAAG,EAMJ;IACC,MAAMC,cAAuB;QAC3B;YACEH,UAAU;gBACRI,QAAQJ;YACV;QACF;KACD;IAED,IAAI,OAAOC,WAAW,UAAU;QAC9BE,YAAYE,IAAI,CAAC;YACfJ,QAAQ;gBACNG,QAAQH;YACV;QACF;IACF;IAEA,OAAOC,IAAII,OAAO,CAACC,EAAE,CAACC,OAAO,CAAC;QAC5BzD;QACAmD;QACAO,OAAO;YACLC,KAAKP;QACP;IACF;AACF;AAEA,MAAMQ,kCAAkC,CACtCC,MACAC,UACAC,oBAAyC7E,oBAAoB,EAC7D6B;IAEA8C,KAAK/C,QAAQ,GAAG;QACd2B,QAAQqB,SAASrB,MAAM;QACvB1B;QACAiD,cAAcF,SAASE,YAAY;QACnClB,KAAKgB,SAAShB,GAAG;IACnB;IAEA,sFAAsF;IACtFe,KAAKI,YAAY,GAAGF,kBAAkBF;IAEtC,OAAOA;AACT;AAEA,MAAMK,kBAAkB,CAAC,EACvBC,QAAQ,EACRC,MAAM,EACNC,aAAa,EACbC,YAAY,EACZ/C,UAAU,EACVgD,kBAAkB,EAClBC,WAAW,EACXC,kBAAkB,EAUnB;IACC,MAAMC,oBAAoB,OAAO,EAC/BC,QAAQ,EACRC,OAAO,EACPpE,QAAQ,EACRqE,KAAK,EAMN;QACC,MAAMC,cAAcrG,oBAAoB;YAAEkG;YAAUI,aAAaF,SAAS;QAAK;QAE/E,IAAIC,YAAYzC,IAAI,KAAK,WAAW;YAClC,OAAO,IAAI2C,SAAS,MAAM;gBACxBC,SAAS,IAAIC,QAAQJ,YAAYG,OAAO;gBACxCE,QAAQL,YAAYK,MAAM;YAC5B;QACF;QAEA,MAAMC,kBACJN,YAAYzC,IAAI,KAAK,YACjB,CAAC,MAAM,EAAEyC,YAAYO,UAAU,CAAC,CAAC,EAAEP,YAAYQ,QAAQ,EAAE,GACzD5C;QACN,gFAAgF;QAChF,6EAA6E;QAC7E,6EAA6E;QAC7E,6EAA6E;QAC7E,MAAM6C,WAAW,MAAMC,MAAMZ,SAAS;YACpCa,OAAO;YACP,GAAIL,kBAAkB;gBAAEH,SAAS;oBAAES,OAAON;gBAAgB;YAAE,IAAI,CAAC,CAAC;YAClEO,QAAQ,IAAIC,kBAAkBD,MAAM;QACtC;QAEA,IAAI,CAACJ,SAASM,EAAE,IAAIN,SAASJ,MAAM,KAAKL,YAAYK,MAAM,EAAE;YAC1D,KAAKI,SAASO,IAAI,EAAEC,SAASC,MAAM,IAAMtD;YACzC,MAAM,IAAIrB,MACR,CAAC,gEAAgE,EAAEkE,SAASJ,MAAM,CAAC,EAAE,CAAC;QAE1F;QAEA,MAAMc,iBAAiBV,SAASN,OAAO,CAACiB,GAAG,CAAC;QAC5C,MAAMC,iBAAiBrB,YAAYG,OAAO,CAAC,iBAAiB;QAC5D,MAAMmB,gBAAgBb,SAASN,OAAO,CAACiB,GAAG,CAAC;QAC3C,MAAMG,gBACJvB,YAAYzC,IAAI,KAAK,YAAYyC,YAAYG,OAAO,CAAC,gBAAgB,GAAGvC;QAE1E,IACE,AAACuD,mBAAmB,QAAQA,mBAAmBE,kBAC9CE,iBAAiBD,kBAAkBC,eACpC;YACA,KAAKd,SAASO,IAAI,EAAEC,SAASC,MAAM,IAAMtD;YACzC,MAAM,IAAIrB,MAAM;QAClB;QAEA,MAAM4D,UAAU,IAAIC,QAAQJ,YAAYG,OAAO;QAC/CA,QAAQqB,GAAG,CAAC,gBAAgB9F;QAC5B,IAAI9B,cAAc8B,WAAW;YAC3ByE,QAAQqB,GAAG,CAAC,2BAA2B3H;QACzC;QAEA,OAAO,IAAIqG,SAASO,SAASO,IAAI,EAAE;YACjCb;YACAE,QAAQI,SAASJ,MAAM;QACzB;IACF;IAEA,OAAO,CAAC,EAAEnF,UAAU,EAAEkD,SAAS5B,oBAAoBC,YAAYvB,WAAWuG,IAAI,CAAC,EAAE;QAC/E,MAAMxF,YAAYuD,aAAakC,GAAG,CAACxG,WAAWuG,IAAI;QAElD,mFAAmF;QACnF,gFAAgF;QAChF,6EAA6E;QAC7E,MAAME,iBAAiB,CAACC,KAAaC,KACnCvC,OAAOwC,MAAM,CAACC,QAAQ,CAAC;gBACrBC,WAAWvC;gBACXwC,QAAQ;gBACRL;gBACAM,gBAAgBL,KAAK;oBAAC;wBAAEM,KAAKN;oBAAG;iBAAE,GAAGjE;gBACrC8B;YACF;QAEF,MAAMT,oBAAoB,CAACpD,MACzBD,kBAAkBC,KAAKI,aACnB5B,4BAA4BwB,KAAKX,WAAWuG,IAAI,EAAEpC,YAClDjF,qBAAqByB;QAE3B,OAAO;YACLoB,MAAM;YACNsC;YACA6C,QAAQ;gBACN;oBACEnF,MAAM;oBACNM,MAAM;oBACN8E,OAAO;wBACLC,WAAW,CAACvD,OAASd,qBAAqBc;wBAC1CwD,mBAAmB;wBACnBC,mBAAmB;oBACrB;oBACAJ,QAAQ;wBACN;4BACEnF,MAAM;4BACNM,MAAM;4BACN8E,OAAO;gCACLI,QAAQ;4BACV;wBACF;wBACA;4BACExF,MAAM;4BACNM,MAAM;4BACN8E,OAAO;gCACLK,UAAU;4BACZ;4BACAC,OAAO;wBACT;wBACA;4BACE1F,MAAM;4BACNM,MAAM;4BACN8E,OAAO;gCACLC,WAAW,CAACM,OAAOC,cACjBjH,kBAAkB;wCAAEI,UAAU6G;oCAAY,GAAG5G;gCAC/C6G,aACE;gCACFJ,UAAU;4BACZ;4BACAC,OAAO;wBACT;wBACA;4BACE1F,MAAM;4BACNM,MAAM;4BACN8E,OAAO;gCACL,mFAAmF;gCACnFC,WAAW,CAACM,OAAOC,cACjBjH,kBAAkB;wCAAEI,UAAU6G;oCAAY,GAAG5G;gCAC/C6G,aAAa,CAAC,kFAAkF,EAAErD,mBAAmB,kKAAkK,CAAC;gCACxRiD,UAAU;4BACZ;4BACAK,OAAO;gCACL,mFAAmF;gCACnFC,WAAW;oCACT,CAAC,EAAEjE,IAAI,EAAE8D,WAAW,EAAE;wCACpB,IAAI,CAACjH,kBAAkB;4CAAEI,UAAU6G;wCAAY,GAAG5G,YAAY;4CAC5D,OAAO2B;wCACT;wCAEA,MAAMO,WAAYY,MAA4CZ;wCAE9D,IAAI,CAACA,UAAU;4CACb,OAAOP;wCACT;wCAEA,MAAMqF,SAAUlE,QAAQ,CAAC;wCACzB,MAAMmE,iBAAiBzJ,KAAKkD,KAAK,CAACC,IAAI,CACpCqG,OAAO7E,MAAM,IAAIA,QACjB6E,OAAOE,UAAU,IAAI;wCAEvB,MAAMC,kBAAkBhK,qBAAqB;4CAC3CiK,kBAAkBjF;4CAClBkF,WAAWJ;4CACX/E;wCACF,GAAGiF,eAAe;wCAElB,OAAOzB,eAAe,CAAC,CAAC,EAAEyB,iBAAiB;oCAC7C;iCACD;4BACH;4BACAT,OAAO;4BACPY,SAAS;wBACX;wBACA;4BACEtG,MAAM;4BACNM,MAAM;4BACN8E,OAAO;gCACLI,QAAQ;4BACV;wBACF;qBACD;oBACDe,eAAe;oBACfb,OAAO;gBACT;aACD;YACDc,aAAa,CAAC,EAAEtF,QAAQ,EAAEC,QAAQ8E,iBAAiB,EAAE,EAAE,GACrD5D,OAAOwC,MAAM,CAACC,QAAQ,CAAC;oBACrBH,KAAK,CAAC,CAAC,EAAExI,qBAAqB;wBAC5BiK,kBAAkBjF;wBAClBkF,WAAWJ;wBACX/E;oBACF,GAAGiF,eAAe,EAAE;oBACpB1D;gBACF;YACFgE,cAAc,OAAO,EAAE7H,GAAG,EAAEuH,eAAe,EAAE;gBAC3C,MAAMO,eAAe,AAAC9H,IAAuCG,QAAQ,EAAE2B;gBACvE,MAAMA,SACJgG,gBAAiB,MAAM9G,mBAAmByC,QAAQ,CAAC,CAAC,EAAE8D,gBAAgB9G,OAAO,CAAC,QAAQ,KAAK;gBAE7F,IAAI,CAACqB,QAAQ;oBACX;gBACF;gBAEA,MAAM2B,OAAOsE,KAAK,CAACC,MAAM,CAAClG;YAC5B;YACAmG,cAAc,OAAO,EAAEC,mBAAmB,EAAEhF,IAAI,EAAEiF,IAAI,EAAEZ,eAAe,EAAE;gBACvE,IAAIW,qBAAqB;oBACvB,MAAM/E,WAAW,MAAMW,mBAAmB;wBACxCjD,gBAAgBxB,WAAWuG,IAAI;wBAC/BwC,SAASF;oBACX;oBAEA,OAAOjF,gCAAgCC,MAAMC,UAAUC,mBAAmBhD;gBAC5E;gBAEA,4FAA4F;gBAC5F,wFAAwF;gBACxF,MAAMiI,eAAeF,KAAKG,YAAY,GAClC,MAAM3K,WAAWwK,KAAKG,YAAY,EAAE;oBAAE5G,MAAMyG,KAAKtI,QAAQ;gBAAC,KAC1DsI,KAAKI,MAAM;gBACf,MAAMC,aAAa,MAAMnL,OAAOgL,cAAcF,KAAK7F,QAAQ,EAAE;oBAAEZ,MAAMyG,KAAKtI,QAAQ;gBAAC;gBACnF,MAAM4I,eAAe7K,KAAKkD,KAAK,CAACK,OAAO,CAAC,CAAC,CAAC,EAAEoG,gBAAgB9G,OAAO,CAAC,QAAQ,KAAK;gBACjF,MAAMiI,iBAAiB9K,KAAKkD,KAAK,CAACO,QAAQ,CAACkG;gBAE3C,MAAMpE,WAAW,MAAMM,OAAOsE,KAAK,CAACzI,MAAM,CAAC;oBACzC6I,MAAMK;oBACNG,UAAUD;oBACVpI,QAAQmI;oBACRG,mBAAmB;oBACnB,GAAIxI,YAAY;wBAAEyI,eAAe;oBAAK,IAAI,CAAC,CAAC;gBAC9C;gBAEA3F,KAAK/C,QAAQ,GAAG;oBACd2B,QAAQqB,SAASrB,MAAM;oBACvB1B;oBACAiD,cAAcF,SAASE,YAAY;oBACnClB,KAAKgB,SAAShB,GAAG;gBACnB;gBAEA,0EAA0E;gBAC1E,iFAAiF;gBACjF,sEAAsE;gBACtEe,KAAKI,YAAY,GAAGF,kBAAkB;oBACpC,GAAGF,IAAI;oBACPZ,UAAU,AAACY,KAA+BZ,QAAQ,IAAIoG;gBACxD;gBAEA,OAAOxF;YACT;YACA4F,6BAA6B;YAC7BC,eAAe,OAAOvG,KAAKwG;gBACzB,MAAMC,aAAa,IAAIC,IAAI1G,IAAIL,GAAG,IAAI;gBACtC,MAAM6D,KAAKiD,WAAWE,YAAY,CAAC5D,GAAG,CAAC;gBACvC,MAAM6D,yBAAyB,yBAAyBJ,KAAKK,MAAM;gBAEnE,IAAID,wBAAwB;oBAC1B,MAAMlB,sBAAsBc,KAAKK,MAAM,CAACnB,mBAAmB;oBAE3D,IAAI,CAAC/J,yBAAyB+J,sBAAsB;wBAClD,MAAM,IAAIrK,SAAS,2CAA2C;oBAChE;oBAEA,MAAMyL,eAAe,MAAMxF,mBAAmB;wBAC5CjD,gBAAgBxB,WAAWuG,IAAI;wBAC/BwC,SAASF;oBACX;oBACA,MAAMqB,mBAAmBlL,+BAA+B;wBACtDmJ,kBAAkBjF;wBAClB6F,SAASF;oBACX;oBACA,MAAMsB,kBAAkBpJ,YACpB0F,eAAe,CAAC,CAAC,EAAEyD,kBAAkB,EAAEzK,gCACvC2E,OAAOwC,MAAM,CAACC,QAAQ,CAAC;wBACrBH,KAAK,CAAC,CAAC,EAAEwD,kBAAkB;wBAC3BlD,gBAAgB;4BAAC;gCAAEC,KAAKxH;4BAA6B;yBAAE;wBACvD+E;oBACF;oBAEJ,OAAOE,kBAAkB;wBACvBC,UAAUsF,aAAaG,IAAI;wBAC3BxF,SAASuF;wBACT3J,UAAUyJ,aAAazJ,QAAQ;wBAC/BqE,OAAO1B,IAAI8B,OAAO,CAACiB,GAAG,CAAC;oBACzB;gBACF;gBAEA,MAAMvF,MACJgJ,KAAKhJ,GAAG,IACP,MAAMqC,6BAA6B;oBAClChD,YAAY2J,KAAKK,MAAM,CAAChK,UAAU;oBAClCiD,UAAU0G,KAAKK,MAAM,CAAC/G,QAAQ;oBAC9BC,QAAQyG,KAAKK,MAAM,CAAC9G,MAAM;oBAC1BC;gBACF;gBAEF,MAAM+E,kBAAkB,MAAM9J,mBAAmB;oBAC/C4B;oBACAmI,kBAAkBjF;oBAClBvC,KAAKA,OAAO+B;oBACZO,UAAU0G,KAAKK,MAAM,CAAC/G,QAAQ;oBAC9BoH,kBAAkBV,KAAKK,MAAM,CAAC9G,MAAM;oBACpCC;gBACF;gBACA,MAAMmH,eAAe,CAAC,CAAC,EAAEpC,gBAAgB9G,OAAO,CAAC,QAAQ,KAAK;gBAC9D,MAAMZ,WAAYG,KAAsCH;gBAExD,6EAA6E;gBAC7E,yEAAyE;gBACzE,IAAI,OAAOA,aAAa,YAAY9B,cAAc8B,WAAW;oBAC3D,MAAM+J,WAAY5J,KAAsC4J;oBAExD,IAAI,OAAOA,aAAa,YAAY,CAACC,OAAOC,aAAa,CAACF,aAAaA,WAAW,GAAG;wBACnF,MAAM,IAAI/L,SAAS,gDAAgD;oBACrE;oBAEA,MAAMoG,UAAUlE,kBAAkBC,KAAKI,aACnC0F,eAAe6D,cAAc7K,gCAC7B2E,OAAOwC,MAAM,CAACC,QAAQ,CAAC;wBACrBH,KAAK4D;wBACLtD,gBAAgB;4BAAC;gCAAEC,KAAKxH;4BAA6B;yBAAE;wBACvD+E;oBACF;oBAEJ,OAAOE,kBAAkB;wBACvBC,UAAU4F;wBACV3F;wBACApE;wBACAqE,OAAO1B,IAAI8B,OAAO,CAACiB,GAAG,CAAC;oBACzB;gBACF;gBAEA,2EAA2E;gBAC3E,+EAA+E;gBAC/E,IAAIxF,kBAAkBC,KAAKI,YAAY;oBACrC,IAAI2J,UAAUJ;oBAEd,6EAA6E;oBAC7E,yEAAyE;oBACzE,IAAI3D,MAAMtH,gBAAgBmB,WAAW;wBACnCkK,UAAUnL,kBAAkBmL;oBAC9B,OAAO,IAAI/D,MAAMvH,cAAcoB,WAAW;wBACxCkK,UAAUpL,wBAAwBoL;oBACpC;oBAEA,OAAO1F,SAAS2F,QAAQ,CAAClE,eAAeiE,SAAS/D,KAAK;gBACxD;gBAEA,MAAMiE,cAAcxG,OAAOwC,MAAM,CAACC,QAAQ,CAAC;oBACzCH,KACE9D,qBAAqBjC,QACrB2J;oBACFtD,gBAAgBL,KAAK;wBAAC;4BAAEM,KAAKN;wBAAG;qBAAE,GAAGjE;oBACrC8B;gBACF;gBAEA,OAAOQ,SAAS2F,QAAQ,CAACC,aAAa;YACxC;QACF;IACF;AACF;AAEA,MAAMC,4BAA4B,CAChCC,aACAC,SACAzG,cACA/C,YACAyJ;IAEA,MAAMC,oBAAwE,CAAC;IAE/E,KAAK,MAAMzJ,kBAAkB0J,OAAOC,IAAI,CAACL,aAAc;QACrDG,iBAAiB,CAACzJ,eAAe,GAAG;YAClCuJ;YACAK,qBAAqB;YACrB,oFAAoF;YACpFJ,6BAA6B1G,aAAakC,GAAG,CAAChF,kBAC1CkB,YACAsI;YACJ9H,QAAQ5B,oBAAoBC,YAAYC;QAC1C;IACF;IAEA,OAAOyJ;AACT;AAEA,OAAO,MAAMI,kBACX,CAACC,gBACD,CAACC;QACC,MAAM,EACJC,kBAAkB,EAClBnH,aAAa,EACbyG,WAAW,EACXE,2BAA2B,EAC3BS,OAAO,EACPC,UAAU,EACVzK,MAAM,EACN0K,UAAU,EACVC,SAAS,EACTrH,oBAAoBsH,wBAAwB,EAC5CrH,WAAW,EACZ,GAAG8G;QAEJ,IAAI,CAACK,YAAYxK,QAAQ;YACvB,MAAM,IAAIE,MAAM;QAClB;QAEA,IAAI,CAACuK,WAAWzK,QAAQ;YACtB,MAAM,IAAIE,MAAM;QAClB;QAEA,IAAI,CAACmD,aAAarD,QAAQ;YACxB,MAAM,IAAIE,MAAM;QAClB;QAEA,IAAI,CAACyJ,eAAeI,OAAOC,IAAI,CAACL,aAAaxK,MAAM,KAAK,GAAG;YACzD,MAAM,IAAIe,MAAM;QAClB;QAEA,MAAMiD,eAAe,IAAIwH,IACvBZ,OAAOa,OAAO,CAACjB,aACZkB,MAAM,CAAC,CAAC,GAAGpM,MAAM,GAAKD,0BAA0BC,QAChDqM,GAAG,CAAC,CAAC,CAAC1F,KAAK,GAAKA;QAErB,MAAM2F,kBAAkB,IAAIJ,IAAIZ,OAAOC,IAAI,CAACL;QAE5C,IAAIE,+BAA+B1G,aAAa8F,IAAI,GAAG,GAAG;YACxD,MAAM,IAAI/I,MACR;QAEJ;QAEA,IAAI2J,6BAA6B;YAC/B,MAAMmB,qBAAqB,AAACZ,CAAAA,OAAOT,WAAW,IAAI,EAAE,AAAD,EAChDkB,MAAM,CACL,CAAChM,aACCkM,gBAAgB1F,GAAG,CAACxG,WAAWuG,IAAI,KAAKxG,sBAAsBC,aAEjEiM,GAAG,CAAC,CAACjM,aAAeA,WAAWuG,IAAI;YAEtC,IAAI4F,mBAAmB7L,MAAM,GAAG,GAAG;gBACjC,MAAM,IAAIe,MACR,CAAC,kHAAkH,EAAE8K,mBAAmBzK,IAAI,CAAC,MAAM,sLAAsL,CAAC;YAE9U;QACF;QAEA,MAAM6C,qBACJ,OAAOsH,6BAA6B,YAAYA,2BAA2B,IACvEA,2BACArM;QACN,MAAM2E,WAAWoH,OAAOa,MAAM,EAAEC,OAAO;QAEvC,MAAM9K,aAAaP,gBAAgBC;QAEnC,MAAMqL,iBAAiB,IAAIvO,SAAS;YAAE4N;QAAW;QACjD,MAAMY,qBAAqBrB,OAAOsB,WAAW,CAC3C,AAACjB,CAAAA,OAAOT,WAAW,IAAI,EAAE,AAAD,EACrBkB,MAAM,CAAC,CAAChM,aAAekM,gBAAgB1F,GAAG,CAACxG,WAAWuG,IAAI,GAC1D0F,GAAG,CAAC,CAACjM,aAAe;gBACnBA,WAAWuG,IAAI;gBACf;oBACEvG;oBACAe,WAAWuD,aAAakC,GAAG,CAACxG,WAAWuG,IAAI;oBAC3CrD,QAAQ5B,oBAAoBC,YAAYvB,WAAWuG,IAAI;gBACzD;aACD;QAEL,MAAM9B,qBAAqB1F,mCAAmC;YAC5DqF,QAAQkI;YACRxB,aAAayB;QACf;QACA,MAAMxB,UAAU7G,gBAAgB;YAC9BC;YACAC,QAAQkI;YACRjI;YACAC;YACA/C;YACAgD;YACAC;YACAC;QACF;QAEA,MAAMgI,yBAAiC;YACrC,GAAGlB,MAAM;YACTT,aAAa,AAACS,CAAAA,OAAOT,WAAW,IAAI,EAAE,AAAD,EAAGmB,GAAG,CAAC,CAACjM;gBAC3C,IAAI,CAACkM,gBAAgB1F,GAAG,CAACxG,WAAWuG,IAAI,GAAG;oBACzC,OAAOvG;gBACT;gBAEA,MAAM0M,sBAAsBpI,aAAakC,GAAG,CAACxG,WAAWuG,IAAI;gBAC5D,MAAMxC,oBAAoB,CAACpD,MACzBD,kBAAkBC,KAAK+L,uBACnBvN,4BAA4BwB,KAAKX,WAAWuG,IAAI,EAAEpC,YAClDjF,qBAAqByB;gBAE3B,MAAMgM,oBAAoB7B,WAAW,CAAC9K,WAAWuG,IAAI,CAAC;gBACtD,MAAMqG,uBACJD,sBAAsB,QACtB,OAAOA,sBAAsB,YAC7B,OAAOA,kBAAkBjB,UAAU,KAAK,YACpCiB,kBAAkBjB,UAAU,GAC5BhJ;gBAEN,4EAA4E;gBAC5E,qEAAqE;gBACrE,oCAAoC;gBACpC,MAAMmK,sBAAsB7M,WAAWmH,KAAK,EAAES;gBAC9C,MAAMkF,YAAYJ,sBACd;oBACE,GAAI1M,WAAWmH,KAAK,IAAI,CAAC,CAAC;oBAC1BS,aACE,OAAOiF,wBAAwB,YAAYA,oBAAoB1L,IAAI,GAAGb,MAAM,GAAG,IAC3E,GAAGuM,oBAAoB,CAAC,EAAEnN,gCAAgC,GACzDmN,uBAAuBnN;gBAChC,IACAM,WAAWmH,KAAK;gBAEpB,OAAO;oBACL,GAAGnH,UAAU;oBACbmH,OAAO2F;oBACPjF,OAAO;wBACL,GAAI7H,WAAW6H,KAAK,IAAI,CAAC,CAAC;wBAC1BkF,cAAc;+BACR/M,WAAW6H,KAAK,EAAEkF,gBAAgB,EAAE;4BACxC,OAAO,EAAElJ,IAAI,EAAEV,GAAG,EAAE;gCAClB,IAAI,CAACR,SAASkB,SAAS,CAACV,IAAI2F,IAAI,EAAED,qBAAqB;oCACrD,OAAOhF;gCACT;gCAEA,MAAMkF,UAAU5F,IAAI2F,IAAI,CAACD,mBAAmB;gCAC5C,MAAMmE,kBAAkB7J,IAAI2F,IAAI,CAACmE,QAAQ,CAACC,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE/L,OAAOgM;gCACnE,IACE,CAACrO,yBAAyBiK,YAC1BA,QAAQ9F,QAAQ,KAAKY,KAAKZ,QAAQ,IAClC8F,QAAQ9F,QAAQ,KAAKE,IAAI2F,IAAI,CAAC/G,IAAI,IAClCgH,QAAQqE,gBAAgB,KAAKJ,mBAC7B,qEAAqE;gCACrE,gEAAgE;gCAChEjE,QAAQsE,YAAY,KAAKxJ,KAAK0G,QAAQ,EACtC;oCACA,MAAM,IAAI/L,SAAS,iEAAiE;gCACtF;gCAEA,MAAMsF,WAAW,MAAMW,mBAAmB;oCACxCjD,gBAAgBxB,WAAWuG,IAAI;oCAC/BwC;gCACF;gCACA,+EAA+E;gCAC/E,2DAA2D;gCAC3D,MAAMuE,WAAW,MAAMnK,IAAII,OAAO,CAACC,EAAE,CAACC,OAAO,CAAC;oCAC5CzD,YAAYA,WAAWuG,IAAI;oCAC3BpD;oCACAO,OAAO;wCACL,mBAAmB;4CACjBL,QAAQS,SAASrB,MAAM;wCACzB;oCACF;gCACF;gCACA,IAAI6K,UAAU;oCACZ,MAAM,IAAI9O,SAAS,8DAA8D;gCACnF;gCAEAqF,KAAKZ,QAAQ,GAAGa,SAAS/B,IAAI;gCAC7B8B,KAAK0G,QAAQ,GAAGzG,SAASsG,IAAI;gCAC7BvG,KAAKrD,QAAQ,GAAGsD,SAAStD,QAAQ;gCAEjC,OAAOoD,gCACLC,MACAC,UACAC,mBACA2I;4BAEJ;yBACD;wBACDa,iBAAiB;+BACXvN,WAAW6H,KAAK,EAAE0F,mBAAmB,EAAE;4BAC3C,CAAC,EAAE5D,IAAI,EAAE6D,SAAS,EAAErK,GAAG,EAAE;gCACvB,IACE,AAACqK,cAAc,YAAYA,cAAc,YACzCrK,IAAI4F,OAAO,EAAE0E,oBACb,CAACtK,IAAI2F,IAAI,IACT3F,IAAI2F,IAAI,CAACD,mBAAmB,IAC5B,CAAE,CAAA,UAAUc,IAAG,KACf,CAAChH,SAASgH,KAAK9F,IAAI,KACnB,OAAO8F,KAAK9F,IAAI,CAACX,MAAM,KAAK,UAC5B;oCACA,OAAOyG;gCACT;gCAEA,yEAAyE;gCACzE,wEAAwE;gCACxEA,KAAK9F,IAAI,CAACX,MAAM,GAAG/E,2BAA2B;oCAC5CgK,kBAAkB7G,oBAAoBC,YAAYvB,WAAWuG,IAAI;oCACjE6B,WAAWuB,KAAK9F,IAAI,CAACX,MAAM;oCAC3BD,UAAUE,IAAI2F,IAAI,CAAC/G,IAAI;gCACzB,GAAG2L,kBAAkB;gCACrB,OAAO/D;4BACT;yBACD;oBACH;oBACA1J,QAAQ;wBACN,mEAAmE;wBACnE,4DAA4D;wBAC5D,gEAAgE;wBAChE,wBAAwB;wBACxByL,YAAY;wBACZ,GAAI,OAAOA,eAAe,YAAY;4BAAEA;wBAAW,IAAI,CAAC,CAAC;wBACzD,GAAI,OAAOkB,yBAAyB,YAChC;4BAAElB,YAAYkB;wBAAqB,IACnC,CAAC,CAAC;wBACN,GAAI,OAAO5M,WAAWC,MAAM,KAAK,WAAWD,WAAWC,MAAM,GAAG,CAAC,CAAC;wBAClE0N,gBAAgB,CAAC,EAAEhN,GAAG,EAAE,GAAKoD,kBAAkBpD;wBAC/CiN,MAAM;oBACR;gBACF;YACF;QACF;QAEA,MAAMC,oBAAoB3C,OAAOsB,WAAW,CAC1CtB,OAAOC,IAAI,CAACL,aAAamB,GAAG,CAAC,CAACzK,iBAAmB;gBAC/CA;gBACA;oBACET,WAAWuD,aAAakC,GAAG,CAAChF;oBAC5B0B,QAAQ5B,oBAAoBC,YAAYC;gBAC1C;aACD;QAKHnD,kBAAkB;YAChByP,eAAe;YACfhD,aAAa+C;YACbtC,QAAQkB;YACRhB,SAASA,YAAY,SAASvL,QAAQmE;YACtC0J,eAAe9O,gCAAgC;gBAC7C+O,QAAQ,OAAO3J,kBAAkB,WAAWA,cAAc2J,MAAM,GAAGtL;gBACnEoI,aAAa+C;gBACblC;gBACAC;gBACAnH;YACF;YACAwJ,mBAAmBpP;QACrB;QAEA,MAAMqP,SAASjQ,mBAAmB;YAChCuN;YACAV,aAAaD,0BACXC,aACAC,SACAzG,cACA/C,YACAyJ;YAEFS;QACF,GAAGgB;QAEH,8FAA8F;QAC9F,yDAAyD;QACzDyB,OAAOpD,WAAW,GAAG,AAACoD,CAAAA,OAAOpD,WAAW,IAAI,EAAE,AAAD,EAAGmB,GAAG,CAAC,CAACjM;YACnD,IAAI,CAACkM,gBAAgB1F,GAAG,CAACxG,WAAWuG,IAAI,GAAG;gBACzC,OAAOvG;YACT;YAEA,OAAO;gBACL,GAAGA,UAAU;gBACbkH,QAAQlH,WAAWkH,MAAM,CAAC+E,GAAG,CAAC,CAACkC;oBAC7B,IAAI,UAAUA,SAASA,MAAMpM,IAAI,KAAK,cAAc;wBAClD,OAAO;4BAAE,GAAGoM,KAAK;4BAAEC,QAAQ;wBAAK;oBAClC;oBACA,IAAID,MAAM9L,IAAI,KAAK,WAAW,UAAU8L,SAASA,MAAMpM,IAAI,KAAK,YAAY;wBAC1E,OAAO;4BACL,GAAGoM,KAAK;4BACRjH,QAAQiH,MAAMjH,MAAM,CAAC+E,GAAG,CAAC,CAACoC,gBACxB,UAAUA,iBAAiBA,cAActM,IAAI,KAAK,WAC9C;oCAAE,GAAGsM,aAAa;oCAAED,QAAQ;gCAAK,IACjCC;wBAER;oBACF;oBACA,OAAOF;gBACT;YACF;QACF;QAEA,OAAOD;IACT,EAAC;AAEH,SAASI,aAAa,QAAQ,eAAc;AAG5C,4BAA4B;AAC5B,OAAO,MAAMC,yBAAyBlD,gBAAe;AACrD,OAAO,MAAMmD,yBAAyBnD,gBAAe"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type {\n  Adapter,\n  ClientUploadsConfig,\n  CollectionOptions,\n} from '@payloadcms/plugin-cloud-storage/types'\nimport type {\n  CollectionConfig,\n  CollectionSlug,\n  Config,\n  Field,\n  PayloadRequest,\n  TypeWithID,\n  UploadCollectionSlug,\n  Where,\n} from 'payload'\n\nimport ImageKit, { toFile } from '@imagekit/nodejs'\nimport { cloudStoragePlugin } from '@payloadcms/plugin-cloud-storage'\nimport {\n  buildStoragePathData,\n  buildUploadStoragePathData,\n  getStorageFilePath,\n  initClientUploads,\n} from '@payloadcms/plugin-cloud-storage/utilities'\nimport { openAsBlob } from 'node:fs'\nimport path from 'node:path'\nimport { APIError } from 'payload'\nimport {\n  getRangeRequestInfo,\n  isXmlMimeType,\n  UPLOAD_CONTENT_SECURITY_POLICY,\n} from 'payload/internal'\nimport { validateMimeType } from 'payload/shared'\n\nimport type { VerifiedImageKitUpload } from './clientUploadVerification.js'\n\nimport { imageKitUploadAuthPath, isImageKitReceiptContext } from './clientUploads.js'\nimport {\n  createImageKitClientUploadVerifier,\n  getClientUploadStorageFilePath,\n} from './clientUploadVerification.js'\nimport { createImageKitUploadAuthHandler } from './endpoints/createImageKitUploadAuthHandler.js'\nimport {\n  getAdminThumbnailURL,\n  getPrivateAdminThumbnailURL,\n  isPdfMimeType,\n  isVideoMimeType,\n} from './getAdminThumbnailURL.js'\nimport { getImageKitThumbnailSrc, getVideoPosterSrc } from './imageTransforms.js'\n\nexport type ImageKitCollectionOptions = {\n  /**\n   * Override Payload's native focal-point picker (`upload.focalPoint`) for this\n   * collection.\n   */\n  focalPoint?: boolean\n  /**\n   * Upload files in this collection as ImageKit private files (`isPrivateFile: true`)\n   * and deliver them only through short-lived signed URLs, behind Payload access control.\n   */\n  private?: boolean\n}\ntype ImageKitCollectionConfig = ImageKitCollectionOptions | true\ntype ImageKitCollectionMap = Partial<Record<UploadCollectionSlug, ImageKitCollectionConfig>>\n\nconst DEFAULT_SIGNED_URL_EXPIRES_IN = 900\n/**\n * ImageKit re-encodes some uploads and serves the smaller derivative from the plain\n * delivery URL — a 1.9 MB MP4 can come back as 868 KB. That is exactly what we want\n * for visitors, but not when reading the file back to verify a client upload: the\n * bytes and the byte count would both belong to a file ImageKit's API never reported.\n * `orig-true` asks for the untouched original and does not disable optimisation for\n * anyone else.\n */\nconst ORIGINAL_FILE_TRANSFORMATION = 'orig-true'\n\nconst PRIVATE_COLLECTION_DESCRIPTION =\n  'Files in this collection are uploaded to ImageKit as private files and delivered through short-lived signed URLs.'\n\nconst isPrivateCollectionConfig = (value: ImageKitCollectionConfig | undefined): boolean =>\n  value !== true && typeof value === 'object' && value?.private === true\n\nconst XML_FAMILY_MIME_TYPES = ['application/xml', 'image/svg+xml', 'text/xml']\n\nconst collectionCanStoreXml = (collection: CollectionConfig): boolean => {\n  const upload = collection.upload\n\n  if (!upload || upload === true) {\n    return Boolean(upload)\n  }\n\n  // Payload skips MIME and content restrictions when this escape hatch is enabled.\n  if (upload.allowRestrictedFileTypes) {\n    return true\n  }\n\n  const allowedMimeTypes = upload.mimeTypes\n\n  return (\n    !allowedMimeTypes?.length ||\n    allowedMimeTypes.some((mimeType) => mimeType.includes('*') || isXmlMimeType(mimeType)) ||\n    XML_FAMILY_MIME_TYPES.some((mimeType) => validateMimeType(mimeType, allowedMimeTypes))\n  )\n}\n\n/**\n * Whether a specific document is private. The flag stored on the document at upload time\n * (`imagekit.isPrivate`) is the source of truth — a file's privacy on ImageKit is fixed\n * when it is uploaded and does not change if the collection's `private` setting changes\n * later. Falls back to the collection setting for documents uploaded before this flag existed.\n */\nconst isDocumentPrivate = (doc: unknown, collectionIsPrivate: boolean): boolean => {\n  const stored = (doc as { imagekit?: { isPrivate?: boolean } } | undefined)?.imagekit?.isPrivate\n\n  return typeof stored === 'boolean' ? stored : collectionIsPrivate\n}\ntype ImageKitReference = {\n  imagekit?: {\n    fileId?: string\n    isPrivate?: boolean\n    thumbnailUrl?: string\n    url?: string\n  }\n}\n\ntype UploadDocumentData = {\n  thumbnailURL?: string\n} & ImageKitReference\n\nexport type PayloadStorageImageKitConfig = {\n  alwaysInsertFields?: boolean\n  clientUploads?: ClientUploadsConfig\n  collections: ImageKitCollectionMap\n  disablePayloadAccessControl?: true\n  enabled?: boolean\n  /**\n   * Broad default for Payload's native focal-point picker (`upload.focalPoint`)\n   * on every configured collection. Focal points are disabled by default for\n   * configured collections, so prefer collection-level `focalPoint: true` for\n   * image collections. A collection's own `upload.focalPoint` still takes\n   * precedence.\n   */\n  focalPoint?: boolean\n  folder: string\n  privateKey: string\n  publicKey: string\n  /**\n   * Expiry (in seconds) applied to signed URLs generated for private collections.\n   * Defaults to 900 (15 minutes). URLs are signed fresh on every request, so a short\n   * window is safe.\n   */\n  signedUrlExpiresIn?: number\n  urlEndpoint: string\n}\n\nconst normalizeFolder = (folder: string): string => {\n  const normalized = folder.trim().replace(/^\\/+|\\/+$/g, '')\n\n  if (!normalized) {\n    throw new Error('imagekitStorage: `folder` is required.')\n  }\n\n  return `/${normalized}`\n}\n\nconst getCollectionFolder = (rootFolder: string, collectionSlug: string): string =>\n  path.posix.join(rootFolder, collectionSlug)\n\nconst findImageKitFileId = async (\n  imagekit: ImageKit,\n  filePath: string,\n): Promise<string | undefined> => {\n  const parentPath = path.posix.dirname(filePath)\n  const name = path.posix.basename(filePath)\n\n  const limit = 100\n\n  for (let skip = 0; ; skip += limit) {\n    const assets = await imagekit.assets.list({\n      type: 'file',\n      limit,\n      path: parentPath === '/' ? '/' : `${parentPath}/`,\n      skip,\n    })\n\n    const found = assets.find(\n      (asset) => 'fileId' in asset && asset.filePath === filePath && asset.name === name,\n    )\n\n    if (found && 'fileId' in found) {\n      return found.fileId\n    }\n\n    if (assets.length < limit) {\n      break\n    }\n  }\n\n  return undefined\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  !!value && typeof value === 'object'\n\nconst getStoredImageKitURL = (doc: unknown): string | undefined => {\n  const storedURL = (doc as ImageKitReference | undefined)?.imagekit?.url\n\n  return typeof storedURL === 'string' && storedURL.trim().length > 0 ? storedURL : undefined\n}\n\nconst hasStoredImageKitURL = (doc: unknown): boolean => !!getStoredImageKitURL(doc)\n\nconst findUploadDocumentByFilename = async ({\n  collection,\n  filename,\n  prefix,\n  req,\n}: {\n  collection: string\n  filename: string\n  prefix?: string\n  req: PayloadRequest\n}): Promise<null | TypeWithID> => {\n  const constraints: Where[] = [\n    {\n      filename: {\n        equals: filename,\n      },\n    },\n  ]\n\n  if (typeof prefix === 'string') {\n    constraints.push({\n      prefix: {\n        equals: prefix,\n      },\n    })\n  }\n\n  return req.payload.db.findOne({\n    collection,\n    req,\n    where: {\n      and: constraints,\n    },\n  })\n}\n\nconst applyVerifiedClientUploadToData = <T extends UploadDocumentData>(\n  data: T,\n  uploaded: VerifiedImageKitUpload,\n  buildThumbnailURL: (data: T) => string = getAdminThumbnailURL,\n  isPrivate: boolean,\n): T => {\n  data.imagekit = {\n    fileId: uploaded.fileId,\n    isPrivate,\n    thumbnailUrl: uploaded.thumbnailUrl,\n    url: uploaded.url,\n  }\n\n  // Preserve the admin preview when the original file was already uploaded client-side.\n  data.thumbnailURL = buildThumbnailURL(data)\n\n  return data\n}\n\nconst imagekitAdapter = ({\n  apiRoute,\n  client,\n  clientUploads,\n  privateSlugs,\n  rootFolder,\n  signedUrlExpiresIn,\n  urlEndpoint,\n  verifyClientUpload,\n}: {\n  apiRoute: string\n  client: ImageKit\n  clientUploads?: ClientUploadsConfig\n  privateSlugs: Set<string>\n  rootFolder: string\n  signedUrlExpiresIn: number\n  urlEndpoint: string\n  verifyClientUpload: ReturnType<typeof createImageKitClientUploadVerifier>\n}): Adapter => {\n  const fetchUploadedFile = async ({\n    fileSize,\n    fileURL,\n    mimeType,\n    range,\n  }: {\n    fileSize: number\n    fileURL: string\n    mimeType: string\n    range?: null | string\n  }): Promise<Response> => {\n    const rangeResult = getRangeRequestInfo({ fileSize, rangeHeader: range ?? null })\n\n    if (rangeResult.type === 'invalid') {\n      return new Response(null, {\n        headers: new Headers(rangeResult.headers),\n        status: rangeResult.status,\n      })\n    }\n\n    const normalizedRange =\n      rangeResult.type === 'partial'\n        ? `bytes=${rangeResult.rangeStart}-${rangeResult.rangeEnd}`\n        : undefined\n    // Payload cancels image probes after reading a bounded prefix. Next.js memoizes\n    // GET responses by teeing their streams; cancelling one branch can then wait\n    // forever for its unread cached sibling. An explicit signal opts out of that\n    // memoization, while no-store also excludes these reads from the data cache.\n    const response = await fetch(fileURL, {\n      cache: 'no-store',\n      ...(normalizedRange ? { headers: { Range: normalizedRange } } : {}),\n      signal: new AbortController().signal,\n    })\n\n    if (!response.ok || response.status !== rangeResult.status) {\n      void response.body?.cancel().catch(() => undefined)\n      throw new Error(\n        `imagekitStorage: ImageKit returned an unexpected file response (${response.status}).`,\n      )\n    }\n\n    const upstreamLength = response.headers.get('Content-Length')\n    const expectedLength = rangeResult.headers['Content-Length']\n    const upstreamRange = response.headers.get('Content-Range')\n    const expectedRange =\n      rangeResult.type === 'partial' ? rangeResult.headers['Content-Range'] : undefined\n\n    if (\n      (upstreamLength !== null && upstreamLength !== expectedLength) ||\n      (expectedRange && upstreamRange !== expectedRange)\n    ) {\n      void response.body?.cancel().catch(() => undefined)\n      throw new Error('imagekitStorage: ImageKit returned mismatched file content metadata.')\n    }\n\n    const headers = new Headers(rangeResult.headers)\n    headers.set('Content-Type', mimeType)\n    if (isXmlMimeType(mimeType)) {\n      headers.set('Content-Security-Policy', UPLOAD_CONTENT_SECURITY_POLICY)\n    }\n\n    return new Response(response.body, {\n      headers,\n      status: response.status,\n    })\n  }\n\n  return ({ collection, prefix = getCollectionFolder(rootFolder, collection.slug) }) => {\n    const isPrivate = privateSlugs.has(collection.slug)\n\n    // Sign a relative ImageKit path against the configured urlEndpoint. We always sign\n    // a computed path (never a stored absolute URL) because ImageKit's signature is\n    // derived from the path after stripping urlEndpoint, so the host must match.\n    const buildSignedURL = (src: string, tr?: null | string): string =>\n      client.helper.buildSrc({\n        expiresIn: signedUrlExpiresIn,\n        signed: true,\n        src,\n        transformation: tr ? [{ raw: tr }] : undefined,\n        urlEndpoint,\n      })\n\n    const buildThumbnailURL = (doc: UploadDocumentData): string =>\n      isDocumentPrivate(doc, isPrivate)\n        ? getPrivateAdminThumbnailURL(doc, collection.slug, apiRoute)\n        : getAdminThumbnailURL(doc)\n\n    return {\n      name: 'imagekit',\n      clientUploads,\n      fields: [\n        {\n          // Presentational wrapper: tucks the ImageKit details into a closed panel without\n          // changing the `imagekit.*` data paths.\n          type: 'collapsible',\n          admin: {\n            condition: (data) => hasStoredImageKitURL(data),\n            initCollapsed: true,\n          },\n          fields: [\n            {\n              name: 'imagekit',\n              type: 'group',\n              admin: {\n                disableListColumn: true,\n                disableListFilter: true,\n              },\n              fields: [\n                {\n                  name: 'fileId',\n                  type: 'text',\n                  admin: {\n                    hidden: true,\n                  },\n                },\n                {\n                  name: 'url',\n                  type: 'text',\n                  admin: {\n                    readOnly: true,\n                  },\n                  label: 'URL',\n                },\n                {\n                  name: 'isPrivate',\n                  type: 'checkbox',\n                  admin: {\n                    condition: (_data, siblingData) =>\n                      isDocumentPrivate({ imagekit: siblingData }, isPrivate),\n                    description:\n                      \"Indicates whether this file was uploaded to ImageKit as private. Private files are delivered through signed URLs. Changes to this collection's private option in payload.config only affect future uploads.\",\n                    readOnly: true,\n                  },\n                  label: 'Private file',\n                },\n                {\n                  name: 'signedUrl',\n                  type: 'text',\n                  admin: {\n                    // Only relevant for private files; the plain `url` works directly for public ones.\n                    condition: (_data, siblingData) =>\n                      isDocumentPrivate({ imagekit: siblingData }, isPrivate),\n                    description: `Temporary signed URL for reaching this private file directly on ImageKit. Expires ${signedUrlExpiresIn} seconds after load and is regenerated on every read. Note: anyone with this URL can access the file until it expires — it is not gated by Payload access control.`,\n                    readOnly: true,\n                  },\n                  hooks: {\n                    // Computed server-side on read so it is always freshly signed and never persisted.\n                    afterRead: [\n                      ({ data, siblingData }) => {\n                        if (!isDocumentPrivate({ imagekit: siblingData }, isPrivate)) {\n                          return undefined\n                        }\n\n                        const filename = (data as { filename?: string } | undefined)?.filename\n\n                        if (!filename) {\n                          return undefined\n                        }\n\n                        const source = (data || {}) as { _objectKey?: string; prefix?: string }\n                        const documentPrefix = path.posix.join(\n                          source.prefix || prefix,\n                          source._objectKey || '',\n                        )\n                        const storageFilePath = buildStoragePathData({\n                          collectionPrefix: prefix,\n                          docPrefix: documentPrefix,\n                          filename,\n                        }).storageFilePath\n\n                        return buildSignedURL(`/${storageFilePath}`)\n                      },\n                    ],\n                  },\n                  label: 'Signed URL',\n                  virtual: true,\n                },\n                {\n                  name: 'thumbnailUrl',\n                  type: 'text',\n                  admin: {\n                    hidden: true,\n                  },\n                },\n              ],\n              interfaceName: 'imagekitFields',\n              label: false,\n            },\n          ],\n          label: 'Storage: ImageKit',\n        },\n      ],\n      generateURL: ({ filename, prefix: documentPrefix = '' }) =>\n        client.helper.buildSrc({\n          src: `/${buildStoragePathData({\n            collectionPrefix: prefix,\n            docPrefix: documentPrefix,\n            filename,\n          }).storageFilePath}`,\n          urlEndpoint,\n        }),\n      handleDelete: async ({ doc, storageFilePath }) => {\n        const storedFileId = (doc as ImageKitReference & typeof doc).imagekit?.fileId\n        const fileId =\n          storedFileId || (await findImageKitFileId(client, `/${storageFilePath.replace(/^\\/+/, '')}`))\n\n        if (!fileId) {\n          return\n        }\n\n        await client.files.delete(fileId)\n      },\n      handleUpload: async ({ clientUploadContext, data, file, storageFilePath }) => {\n        if (clientUploadContext) {\n          const uploaded = await verifyClientUpload({\n            collectionSlug: collection.slug,\n            context: clientUploadContext,\n          })\n\n          return applyVerifiedClientUploadToData(data, uploaded, buildThumbnailURL, isPrivate)\n        }\n\n        // ImageKit's `toFile()` consumes async iterables before starting the request. A file-backed\n        // Blob keeps temporary-file uploads lazy so FormData can stream them from disk instead.\n        const uploadSource = file.tempFilePath\n          ? await openAsBlob(file.tempFilePath, { type: file.mimeType })\n          : file.buffer\n        const uploadFile = await toFile(uploadSource, file.filename, { type: file.mimeType })\n        const uploadFolder = path.posix.dirname(`/${storageFilePath.replace(/^\\/+/, '')}`)\n        const uploadFilename = path.posix.basename(storageFilePath)\n\n        const uploaded = await client.files.upload({\n          file: uploadFile,\n          fileName: uploadFilename,\n          folder: uploadFolder,\n          useUniqueFileName: false,\n          ...(isPrivate ? { isPrivateFile: true } : {}),\n        })\n\n        data.imagekit = {\n          fileId: uploaded.fileId,\n          isPrivate,\n          thumbnailUrl: uploaded.thumbnailUrl,\n          url: uploaded.url,\n        }\n\n        // Set the root-level thumbnailURL that Payload's admin interface expects.\n        // `buildThumbnailURL` needs the filename, which Payload may not have copied onto\n        // `data` yet at this point, so fall back to the uploaded file's name.\n        data.thumbnailURL = buildThumbnailURL({\n          ...data,\n          filename: (data as { filename?: string }).filename || uploadFilename,\n        })\n\n        return data\n      },\n      requiresClientUploadReceipt: true,\n      staticHandler: async (req, args) => {\n        const requestURL = new URL(req.url || 'http://localhost')\n        const tr = requestURL.searchParams.get('tr')\n        const hasClientUploadContext = 'clientUploadContext' in args.params\n\n        if (hasClientUploadContext) {\n          const clientUploadContext = args.params.clientUploadContext\n\n          if (!isImageKitReceiptContext(clientUploadContext)) {\n            throw new APIError('Invalid ImageKit client upload context.', 400)\n          }\n\n          const uploadedFile = await verifyClientUpload({\n            collectionSlug: collection.slug,\n            context: clientUploadContext,\n          })\n          const expectedFilePath = getClientUploadStorageFilePath({\n            collectionPrefix: prefix,\n            context: clientUploadContext,\n          })\n          const verifiedFileURL = isPrivate\n            ? buildSignedURL(`/${expectedFilePath}`, ORIGINAL_FILE_TRANSFORMATION)\n            : client.helper.buildSrc({\n                src: `/${expectedFilePath}`,\n                transformation: [{ raw: ORIGINAL_FILE_TRANSFORMATION }],\n                urlEndpoint,\n              })\n\n          return fetchUploadedFile({\n            fileSize: uploadedFile.size,\n            fileURL: verifiedFileURL,\n            mimeType: uploadedFile.mimeType,\n            range: req.headers.get('Range'),\n          })\n        }\n\n        const doc =\n          args.doc ||\n          (await findUploadDocumentByFilename({\n            collection: args.params.collection,\n            filename: args.params.filename,\n            prefix: args.params.prefix,\n            req,\n          }))\n\n        const storageFilePath = await getStorageFilePath({\n          collection,\n          collectionPrefix: prefix,\n          doc: doc || undefined,\n          filename: args.params.filename,\n          prefixQueryParam: args.params.prefix,\n          req,\n        })\n        const imageKitPath = `/${storageFilePath.replace(/^\\/+/, '')}`\n        const mimeType = (doc as { mimeType?: string } | null)?.mimeType\n\n        // XML-family uploads (including SVG) must pass through Payload so its CSP is\n        // present even when ImageKit uses a custom, same-origin delivery domain.\n        if (typeof mimeType === 'string' && isXmlMimeType(mimeType)) {\n          const filesize = (doc as { filesize?: number } | null)?.filesize\n\n          if (typeof filesize !== 'number' || !Number.isSafeInteger(filesize) || filesize < 0) {\n            throw new APIError('Stored ImageKit file metadata is incomplete.', 500)\n          }\n\n          const fileURL = isDocumentPrivate(doc, isPrivate)\n            ? buildSignedURL(imageKitPath, ORIGINAL_FILE_TRANSFORMATION)\n            : client.helper.buildSrc({\n                src: imageKitPath,\n                transformation: [{ raw: ORIGINAL_FILE_TRANSFORMATION }],\n                urlEndpoint,\n              })\n\n          return fetchUploadedFile({\n            fileSize: filesize,\n            fileURL,\n            mimeType,\n            range: req.headers.get('Range'),\n          })\n        }\n\n        // Sign based on the document's stored status, not the collection's current\n        // setting, so files keep working if the collection's privacy is changed later.\n        if (isDocumentPrivate(doc, isPrivate)) {\n          let signSrc = imageKitPath\n\n          // A `tr` request for a video/PDF is a thumbnail request (the plain transform\n          // can't render a preview); serve ImageKit's generated thumbnail instead.\n          if (tr && isVideoMimeType(mimeType)) {\n            signSrc = getVideoPosterSrc(signSrc)\n          } else if (tr && isPdfMimeType(mimeType)) {\n            signSrc = getImageKitThumbnailSrc(signSrc)\n          }\n\n          return Response.redirect(buildSignedURL(signSrc, tr), 302)\n        }\n\n        const imageKitURL = client.helper.buildSrc({\n          src:\n            getStoredImageKitURL(doc) ||\n            imageKitPath,\n          transformation: tr ? [{ raw: tr }] : undefined,\n          urlEndpoint,\n        })\n\n        return Response.redirect(imageKitURL, 302)\n      },\n    }\n  }\n}\n\nconst toCloudStorageCollections = (\n  collections: ImageKitCollectionMap,\n  adapter: Adapter,\n  privateSlugs: Set<string>,\n  rootFolder: string,\n  disablePayloadAccessControl?: true,\n): Partial<Record<CollectionSlug, CollectionOptions>> => {\n  const mappedCollections: Partial<Record<CollectionSlug, CollectionOptions>> = {}\n\n  for (const collectionSlug of Object.keys(collections)) {\n    mappedCollections[collectionSlug] = {\n      adapter,\n      disableLocalStorage: true,\n      // Private files require Payload access control so URLs can be signed at serve time.\n      disablePayloadAccessControl: privateSlugs.has(collectionSlug)\n        ? undefined\n        : disablePayloadAccessControl,\n      prefix: getCollectionFolder(rootFolder, collectionSlug),\n    }\n  }\n\n  return mappedCollections\n}\n\nexport const imagekitStorage =\n  (pluginOptions: PayloadStorageImageKitConfig) =>\n  (config: Config): Config => {\n    const {\n      alwaysInsertFields,\n      clientUploads,\n      collections,\n      disablePayloadAccessControl,\n      enabled,\n      focalPoint,\n      folder,\n      privateKey,\n      publicKey,\n      signedUrlExpiresIn: signedUrlExpiresInOption,\n      urlEndpoint,\n    } = pluginOptions\n\n    if (!privateKey?.trim()) {\n      throw new Error('imagekitStorage: `privateKey` is required.')\n    }\n\n    if (!publicKey?.trim()) {\n      throw new Error('imagekitStorage: `publicKey` is required.')\n    }\n\n    if (!urlEndpoint?.trim()) {\n      throw new Error('imagekitStorage: `urlEndpoint` is required.')\n    }\n\n    if (!collections || Object.keys(collections).length === 0) {\n      throw new Error('imagekitStorage: `collections` must include at least one upload collection.')\n    }\n\n    const privateSlugs = new Set(\n      Object.entries(collections)\n        .filter(([, value]) => isPrivateCollectionConfig(value))\n        .map(([slug]) => slug),\n    )\n    const configuredSlugs = new Set(Object.keys(collections))\n\n    if (disablePayloadAccessControl && privateSlugs.size > 0) {\n      throw new Error(\n        'imagekitStorage: `disablePayloadAccessControl` cannot be used with private collections. Private files require Payload access control to remain enabled so URLs can be signed at serve time.',\n      )\n    }\n\n    if (disablePayloadAccessControl) {\n      const xmlCollectionSlugs = (config.collections || [])\n        .filter(\n          (collection) =>\n            configuredSlugs.has(collection.slug) && collectionCanStoreXml(collection),\n        )\n        .map((collection) => collection.slug)\n\n      if (xmlCollectionSlugs.length > 0) {\n        throw new Error(\n          `imagekitStorage: \\`disablePayloadAccessControl\\` cannot be used with collections that can store XML-family files (${xmlCollectionSlugs.join(', ')}). XML-family files require Payload's file route so its Content Security Policy is applied. Configure a MIME allow list that excludes SVG/XML, or keep Payload access control enabled.`,\n        )\n      }\n    }\n\n    const signedUrlExpiresIn =\n      typeof signedUrlExpiresInOption === 'number' && signedUrlExpiresInOption > 0\n        ? signedUrlExpiresInOption\n        : DEFAULT_SIGNED_URL_EXPIRES_IN\n    const apiRoute = config.routes?.api ?? '/api'\n\n    const rootFolder = normalizeFolder(folder)\n\n    const imageKitClient = new ImageKit({ privateKey })\n    const collectionSecurity = Object.fromEntries(\n      (config.collections || [])\n        .filter((collection) => configuredSlugs.has(collection.slug))\n        .map((collection) => [\n          collection.slug,\n          {\n            collection,\n            isPrivate: privateSlugs.has(collection.slug),\n            prefix: getCollectionFolder(rootFolder, collection.slug),\n          },\n        ]),\n    )\n    const verifyClientUpload = createImageKitClientUploadVerifier({\n      client: imageKitClient,\n      collections: collectionSecurity,\n    })\n    const adapter = imagekitAdapter({\n      apiRoute,\n      client: imageKitClient,\n      clientUploads,\n      privateSlugs,\n      rootFolder,\n      signedUrlExpiresIn,\n      urlEndpoint,\n      verifyClientUpload,\n    })\n\n    const configWithCropDisabled: Config = {\n      ...config,\n      collections: (config.collections || []).map((collection) => {\n        if (!configuredSlugs.has(collection.slug)) {\n          return collection\n        }\n\n        const isCollectionPrivate = privateSlugs.has(collection.slug)\n        const buildThumbnailURL = (doc: unknown): string =>\n          isDocumentPrivate(doc, isCollectionPrivate)\n            ? getPrivateAdminThumbnailURL(doc, collection.slug, apiRoute)\n            : getAdminThumbnailURL(doc)\n\n        const collectionOptions = collections[collection.slug]\n        const collectionFocalPoint =\n          collectionOptions !== true &&\n          typeof collectionOptions === 'object' &&\n          typeof collectionOptions.focalPoint === 'boolean'\n            ? collectionOptions.focalPoint\n            : undefined\n\n        // Surface a \"this is a private collection\" note in the list and edit views.\n        // Preserve an existing string description by appending; leave custom\n        // component descriptions untouched.\n        const existingDescription = collection.admin?.description\n        const baseAdmin = isCollectionPrivate\n          ? {\n              ...(collection.admin || {}),\n              description:\n                typeof existingDescription === 'string' && existingDescription.trim().length > 0\n                  ? `${existingDescription} ${PRIVATE_COLLECTION_DESCRIPTION}`\n                  : (existingDescription ?? PRIVATE_COLLECTION_DESCRIPTION),\n            }\n          : collection.admin\n\n        return {\n          ...collection,\n          admin: baseAdmin,\n          hooks: {\n            ...(collection.hooks || {}),\n            beforeChange: [\n              ...(collection.hooks?.beforeChange || []),\n              async ({ data, req }) => {\n                if (!isRecord(data) || !req.file?.clientUploadContext) {\n                  return data\n                }\n\n                const context = req.file.clientUploadContext\n                const requestMimeType = req.file.mimetype.split(';', 1)[0]?.trim().toLowerCase()\n                if (\n                  !isImageKitReceiptContext(context) ||\n                  context.filename !== data.filename ||\n                  context.filename !== req.file.name ||\n                  context.expectedMimeType !== requestMimeType ||\n                  // Payload can clear req.file.size when preparing an in-memory image.\n                  // generateFileData preserves the original size on the document.\n                  context.expectedSize !== data.filesize\n                ) {\n                  throw new APIError('ImageKit client upload reference does not match this request.', 400)\n                }\n\n                const uploaded = await verifyClientUpload({\n                  collectionSlug: collection.slug,\n                  context,\n                })\n                // A provider file can only be claimed once, including through legacy receipts.\n                // The unique file ID index also rejects concurrent claims.\n                const existing = await req.payload.db.findOne({\n                  collection: collection.slug,\n                  req,\n                  where: {\n                    'imagekit.fileId': {\n                      equals: uploaded.fileId,\n                    },\n                  },\n                })\n                if (existing) {\n                  throw new APIError('This ImageKit client upload receipt has already been used.', 400)\n                }\n\n                data.filename = uploaded.name\n                data.filesize = uploaded.size\n                data.mimeType = uploaded.mimeType\n\n                return applyVerifiedClientUploadToData(\n                  data,\n                  uploaded,\n                  buildThumbnailURL,\n                  isCollectionPrivate,\n                )\n              },\n            ],\n            beforeOperation: [\n              ...(collection.hooks?.beforeOperation || []),\n              ({ args, operation, req }) => {\n                if (\n                  (operation !== 'create' && operation !== 'update') ||\n                  req.context?.skipCloudStorage ||\n                  !req.file ||\n                  req.file.clientUploadContext ||\n                  !('data' in args) ||\n                  !isRecord(args.data) ||\n                  typeof args.data.prefix !== 'string'\n                ) {\n                  return args\n                }\n\n                // Payload checks filename uniqueness before cloud storage's beforeChange\n                // normalizes the prefix. Use the persisted form during that lookup too.\n                args.data.prefix = buildUploadStoragePathData({\n                  collectionPrefix: getCollectionFolder(rootFolder, collection.slug),\n                  docPrefix: args.data.prefix,\n                  filename: req.file.name,\n                }).sanitizedDocPrefix\n                return args\n              },\n            ],\n          },\n          upload: {\n            // Focal points are opt-in for configured collections. Plugin-level\n            // and collection-level options can override this default; a\n            // collection's own `upload.focalPoint` still wins because it is\n            // spread in afterwards.\n            focalPoint: false,\n            ...(typeof focalPoint === 'boolean' ? { focalPoint } : {}),\n            ...(typeof collectionFocalPoint === 'boolean'\n              ? { focalPoint: collectionFocalPoint }\n              : {}),\n            ...(typeof collection.upload === 'object' ? collection.upload : {}),\n            adminThumbnail: ({ doc }) => buildThumbnailURL(doc),\n            crop: false,\n          },\n        }\n      }),\n    }\n\n    const uploadCollections = Object.fromEntries(\n      Object.keys(collections).map((collectionSlug) => [\n        collectionSlug,\n        {\n          isPrivate: privateSlugs.has(collectionSlug),\n          prefix: getCollectionFolder(rootFolder, collectionSlug),\n        },\n      ]),\n    ) as Partial<\n      Record<UploadCollectionSlug, { isPrivate: boolean; prefix: string }>\n    >\n\n    initClientUploads({\n      clientHandler: '@humaan/payload-storage-imagekit/client#ImageKitUploadHandler',\n      collections: uploadCollections,\n      config: configWithCropDisabled,\n      enabled: enabled !== false && Boolean(clientUploads),\n      serverHandler: createImageKitUploadAuthHandler({\n        access: typeof clientUploads === 'object' ? clientUploads.access : undefined,\n        collections: uploadCollections,\n        privateKey,\n        publicKey,\n        verifyClientUpload,\n      }),\n      serverHandlerPath: imageKitUploadAuthPath,\n    })\n\n    const output = cloudStoragePlugin({\n      alwaysInsertFields,\n      collections: toCloudStorageCollections(\n        collections,\n        adapter,\n        privateSlugs,\n        rootFolder,\n        disablePayloadAccessControl,\n      ),\n      enabled,\n    })(configWithCropDisabled)\n\n    // Make the provider identity unique at persistence time to reject concurrent receipt replays.\n    // Keep the legacy object key index for existing uploads.\n    output.collections = (output.collections || []).map((collection) => {\n      if (!configuredSlugs.has(collection.slug)) {\n        return collection\n      }\n\n      const withUniqueIdentity = (field: Field): Field => {\n        if ('name' in field && field.name === '_objectKey') {\n          return { ...field, unique: true } as Field\n        }\n        if (field.type === 'group' && 'name' in field && field.name === 'imagekit') {\n          return {\n            ...field,\n            fields: field.fields.map((metadataField) =>\n              'name' in metadataField && metadataField.name === 'fileId'\n                ? { ...metadataField, unique: true }\n                : metadataField,\n            ),\n          }\n        }\n        // The imagekit group sits inside the adapter's presentational \"Storage: ImageKit\" panel.\n        if (field.type === 'collapsible') {\n          return { ...field, fields: field.fields.map(withUniqueIdentity) }\n        }\n        return field\n      }\n\n      return {\n        ...collection,\n        fields: collection.fields.map(withUniqueIdentity),\n      }\n    })\n\n    return output\n  }\n\nexport { migrateFolder } from './migrate.js'\nexport type { MigrateFolderOptions, MigrationJobResult } from './migrate.js'\n\n// Backward-compatible alias\nexport const payloadStorageImagekit = imagekitStorage\nexport const payloadStorageImageKit = imagekitStorage\n\nexport type PayloadStorageImagekitConfig = PayloadStorageImageKitConfig\n"],"names":["ImageKit","toFile","cloudStoragePlugin","buildStoragePathData","buildUploadStoragePathData","getStorageFilePath","initClientUploads","openAsBlob","path","APIError","getRangeRequestInfo","isXmlMimeType","UPLOAD_CONTENT_SECURITY_POLICY","validateMimeType","imageKitUploadAuthPath","isImageKitReceiptContext","createImageKitClientUploadVerifier","getClientUploadStorageFilePath","createImageKitUploadAuthHandler","getAdminThumbnailURL","getPrivateAdminThumbnailURL","isPdfMimeType","isVideoMimeType","getImageKitThumbnailSrc","getVideoPosterSrc","DEFAULT_SIGNED_URL_EXPIRES_IN","ORIGINAL_FILE_TRANSFORMATION","PRIVATE_COLLECTION_DESCRIPTION","isPrivateCollectionConfig","value","private","XML_FAMILY_MIME_TYPES","collectionCanStoreXml","collection","upload","Boolean","allowRestrictedFileTypes","allowedMimeTypes","mimeTypes","length","some","mimeType","includes","isDocumentPrivate","doc","collectionIsPrivate","stored","imagekit","isPrivate","normalizeFolder","folder","normalized","trim","replace","Error","getCollectionFolder","rootFolder","collectionSlug","posix","join","findImageKitFileId","filePath","parentPath","dirname","name","basename","limit","skip","assets","list","type","found","find","asset","fileId","undefined","isRecord","getStoredImageKitURL","storedURL","url","hasStoredImageKitURL","findUploadDocumentByFilename","filename","prefix","req","constraints","equals","push","payload","db","findOne","where","and","applyVerifiedClientUploadToData","data","uploaded","buildThumbnailURL","thumbnailUrl","thumbnailURL","imagekitAdapter","apiRoute","client","clientUploads","privateSlugs","signedUrlExpiresIn","urlEndpoint","verifyClientUpload","fetchUploadedFile","fileSize","fileURL","range","rangeResult","rangeHeader","Response","headers","Headers","status","normalizedRange","rangeStart","rangeEnd","response","fetch","cache","Range","signal","AbortController","ok","body","cancel","catch","upstreamLength","get","expectedLength","upstreamRange","expectedRange","set","slug","has","buildSignedURL","src","tr","helper","buildSrc","expiresIn","signed","transformation","raw","fields","admin","condition","initCollapsed","disableListColumn","disableListFilter","hidden","readOnly","label","_data","siblingData","description","hooks","afterRead","source","documentPrefix","_objectKey","storageFilePath","collectionPrefix","docPrefix","virtual","interfaceName","generateURL","handleDelete","storedFileId","files","delete","handleUpload","clientUploadContext","file","context","uploadSource","tempFilePath","buffer","uploadFile","uploadFolder","uploadFilename","fileName","useUniqueFileName","isPrivateFile","requiresClientUploadReceipt","staticHandler","args","requestURL","URL","searchParams","hasClientUploadContext","params","uploadedFile","expectedFilePath","verifiedFileURL","size","prefixQueryParam","imageKitPath","filesize","Number","isSafeInteger","signSrc","redirect","imageKitURL","toCloudStorageCollections","collections","adapter","disablePayloadAccessControl","mappedCollections","Object","keys","disableLocalStorage","imagekitStorage","pluginOptions","config","alwaysInsertFields","enabled","focalPoint","privateKey","publicKey","signedUrlExpiresInOption","Set","entries","filter","map","configuredSlugs","xmlCollectionSlugs","routes","api","imageKitClient","collectionSecurity","fromEntries","configWithCropDisabled","isCollectionPrivate","collectionOptions","collectionFocalPoint","existingDescription","baseAdmin","beforeChange","requestMimeType","mimetype","split","toLowerCase","expectedMimeType","expectedSize","existing","beforeOperation","operation","skipCloudStorage","sanitizedDocPrefix","adminThumbnail","crop","uploadCollections","clientHandler","serverHandler","access","serverHandlerPath","output","withUniqueIdentity","field","unique","metadataField","migrateFolder","payloadStorageImagekit","payloadStorageImageKit"],"mappings":"AAgBA,OAAOA,YAAYC,MAAM,QAAQ,mBAAkB;AACnD,SAASC,kBAAkB,QAAQ,mCAAkC;AACrE,SACEC,oBAAoB,EACpBC,0BAA0B,EAC1BC,kBAAkB,EAClBC,iBAAiB,QACZ,6CAA4C;AACnD,SAASC,UAAU,QAAQ,UAAS;AACpC,OAAOC,UAAU,YAAW;AAC5B,SAASC,QAAQ,QAAQ,UAAS;AAClC,SACEC,mBAAmB,EACnBC,aAAa,EACbC,8BAA8B,QACzB,mBAAkB;AACzB,SAASC,gBAAgB,QAAQ,iBAAgB;AAIjD,SAASC,sBAAsB,EAAEC,wBAAwB,QAAQ,qBAAoB;AACrF,SACEC,kCAAkC,EAClCC,8BAA8B,QACzB,gCAA+B;AACtC,SAASC,+BAA+B,QAAQ,iDAAgD;AAChG,SACEC,oBAAoB,EACpBC,2BAA2B,EAC3BC,aAAa,EACbC,eAAe,QACV,4BAA2B;AAClC,SAASC,uBAAuB,EAAEC,iBAAiB,QAAQ,uBAAsB;AAiBjF,MAAMC,gCAAgC;AACtC;;;;;;;CAOC,GACD,MAAMC,+BAA+B;AAErC,MAAMC,iCACJ;AAEF,MAAMC,4BAA4B,CAACC,QACjCA,UAAU,QAAQ,OAAOA,UAAU,YAAYA,OAAOC,YAAY;AAEpE,MAAMC,wBAAwB;IAAC;IAAmB;IAAiB;CAAW;AAE9E,MAAMC,wBAAwB,CAACC;IAC7B,MAAMC,SAASD,WAAWC,MAAM;IAEhC,IAAI,CAACA,UAAUA,WAAW,MAAM;QAC9B,OAAOC,QAAQD;IACjB;IAEA,iFAAiF;IACjF,IAAIA,OAAOE,wBAAwB,EAAE;QACnC,OAAO;IACT;IAEA,MAAMC,mBAAmBH,OAAOI,SAAS;IAEzC,OACE,CAACD,kBAAkBE,UACnBF,iBAAiBG,IAAI,CAAC,CAACC,WAAaA,SAASC,QAAQ,CAAC,QAAQ/B,cAAc8B,cAC5EV,sBAAsBS,IAAI,CAAC,CAACC,WAAa5B,iBAAiB4B,UAAUJ;AAExE;AAEA;;;;;CAKC,GACD,MAAMM,oBAAoB,CAACC,KAAcC;IACvC,MAAMC,SAAUF,KAA4DG,UAAUC;IAEtF,OAAO,OAAOF,WAAW,YAAYA,SAASD;AAChD;AAwCA,MAAMI,kBAAkB,CAACC;IACvB,MAAMC,aAAaD,OAAOE,IAAI,GAAGC,OAAO,CAAC,cAAc;IAEvD,IAAI,CAACF,YAAY;QACf,MAAM,IAAIG,MAAM;IAClB;IAEA,OAAO,CAAC,CAAC,EAAEH,YAAY;AACzB;AAEA,MAAMI,sBAAsB,CAACC,YAAoBC,iBAC/CjD,KAAKkD,KAAK,CAACC,IAAI,CAACH,YAAYC;AAE9B,MAAMG,qBAAqB,OACzBb,UACAc;IAEA,MAAMC,aAAatD,KAAKkD,KAAK,CAACK,OAAO,CAACF;IACtC,MAAMG,OAAOxD,KAAKkD,KAAK,CAACO,QAAQ,CAACJ;IAEjC,MAAMK,QAAQ;IAEd,IAAK,IAAIC,OAAO,IAAKA,QAAQD,MAAO;QAClC,MAAME,SAAS,MAAMrB,SAASqB,MAAM,CAACC,IAAI,CAAC;YACxCC,MAAM;YACNJ;YACA1D,MAAMsD,eAAe,MAAM,MAAM,GAAGA,WAAW,CAAC,CAAC;YACjDK;QACF;QAEA,MAAMI,QAAQH,OAAOI,IAAI,CACvB,CAACC,QAAU,YAAYA,SAASA,MAAMZ,QAAQ,KAAKA,YAAYY,MAAMT,IAAI,KAAKA;QAGhF,IAAIO,SAAS,YAAYA,OAAO;YAC9B,OAAOA,MAAMG,MAAM;QACrB;QAEA,IAAIN,OAAO7B,MAAM,GAAG2B,OAAO;YACzB;QACF;IACF;IAEA,OAAOS;AACT;AAEA,MAAMC,WAAW,CAAC/C,QAChB,CAAC,CAACA,SAAS,OAAOA,UAAU;AAE9B,MAAMgD,uBAAuB,CAACjC;IAC5B,MAAMkC,YAAalC,KAAuCG,UAAUgC;IAEpE,OAAO,OAAOD,cAAc,YAAYA,UAAU1B,IAAI,GAAGb,MAAM,GAAG,IAAIuC,YAAYH;AACpF;AAEA,MAAMK,uBAAuB,CAACpC,MAA0B,CAAC,CAACiC,qBAAqBjC;AAE/E,MAAMqC,+BAA+B,OAAO,EAC1ChD,UAAU,EACViD,QAAQ,EACRC,MAAM,EACNC,GAAG,EAMJ;IACC,MAAMC,cAAuB;QAC3B;YACEH,UAAU;gBACRI,QAAQJ;YACV;QACF;KACD;IAED,IAAI,OAAOC,WAAW,UAAU;QAC9BE,YAAYE,IAAI,CAAC;YACfJ,QAAQ;gBACNG,QAAQH;YACV;QACF;IACF;IAEA,OAAOC,IAAII,OAAO,CAACC,EAAE,CAACC,OAAO,CAAC;QAC5BzD;QACAmD;QACAO,OAAO;YACLC,KAAKP;QACP;IACF;AACF;AAEA,MAAMQ,kCAAkC,CACtCC,MACAC,UACAC,oBAAyC7E,oBAAoB,EAC7D6B;IAEA8C,KAAK/C,QAAQ,GAAG;QACd2B,QAAQqB,SAASrB,MAAM;QACvB1B;QACAiD,cAAcF,SAASE,YAAY;QACnClB,KAAKgB,SAAShB,GAAG;IACnB;IAEA,sFAAsF;IACtFe,KAAKI,YAAY,GAAGF,kBAAkBF;IAEtC,OAAOA;AACT;AAEA,MAAMK,kBAAkB,CAAC,EACvBC,QAAQ,EACRC,MAAM,EACNC,aAAa,EACbC,YAAY,EACZ/C,UAAU,EACVgD,kBAAkB,EAClBC,WAAW,EACXC,kBAAkB,EAUnB;IACC,MAAMC,oBAAoB,OAAO,EAC/BC,QAAQ,EACRC,OAAO,EACPpE,QAAQ,EACRqE,KAAK,EAMN;QACC,MAAMC,cAAcrG,oBAAoB;YAAEkG;YAAUI,aAAaF,SAAS;QAAK;QAE/E,IAAIC,YAAYzC,IAAI,KAAK,WAAW;YAClC,OAAO,IAAI2C,SAAS,MAAM;gBACxBC,SAAS,IAAIC,QAAQJ,YAAYG,OAAO;gBACxCE,QAAQL,YAAYK,MAAM;YAC5B;QACF;QAEA,MAAMC,kBACJN,YAAYzC,IAAI,KAAK,YACjB,CAAC,MAAM,EAAEyC,YAAYO,UAAU,CAAC,CAAC,EAAEP,YAAYQ,QAAQ,EAAE,GACzD5C;QACN,gFAAgF;QAChF,6EAA6E;QAC7E,6EAA6E;QAC7E,6EAA6E;QAC7E,MAAM6C,WAAW,MAAMC,MAAMZ,SAAS;YACpCa,OAAO;YACP,GAAIL,kBAAkB;gBAAEH,SAAS;oBAAES,OAAON;gBAAgB;YAAE,IAAI,CAAC,CAAC;YAClEO,QAAQ,IAAIC,kBAAkBD,MAAM;QACtC;QAEA,IAAI,CAACJ,SAASM,EAAE,IAAIN,SAASJ,MAAM,KAAKL,YAAYK,MAAM,EAAE;YAC1D,KAAKI,SAASO,IAAI,EAAEC,SAASC,MAAM,IAAMtD;YACzC,MAAM,IAAIrB,MACR,CAAC,gEAAgE,EAAEkE,SAASJ,MAAM,CAAC,EAAE,CAAC;QAE1F;QAEA,MAAMc,iBAAiBV,SAASN,OAAO,CAACiB,GAAG,CAAC;QAC5C,MAAMC,iBAAiBrB,YAAYG,OAAO,CAAC,iBAAiB;QAC5D,MAAMmB,gBAAgBb,SAASN,OAAO,CAACiB,GAAG,CAAC;QAC3C,MAAMG,gBACJvB,YAAYzC,IAAI,KAAK,YAAYyC,YAAYG,OAAO,CAAC,gBAAgB,GAAGvC;QAE1E,IACE,AAACuD,mBAAmB,QAAQA,mBAAmBE,kBAC9CE,iBAAiBD,kBAAkBC,eACpC;YACA,KAAKd,SAASO,IAAI,EAAEC,SAASC,MAAM,IAAMtD;YACzC,MAAM,IAAIrB,MAAM;QAClB;QAEA,MAAM4D,UAAU,IAAIC,QAAQJ,YAAYG,OAAO;QAC/CA,QAAQqB,GAAG,CAAC,gBAAgB9F;QAC5B,IAAI9B,cAAc8B,WAAW;YAC3ByE,QAAQqB,GAAG,CAAC,2BAA2B3H;QACzC;QAEA,OAAO,IAAIqG,SAASO,SAASO,IAAI,EAAE;YACjCb;YACAE,QAAQI,SAASJ,MAAM;QACzB;IACF;IAEA,OAAO,CAAC,EAAEnF,UAAU,EAAEkD,SAAS5B,oBAAoBC,YAAYvB,WAAWuG,IAAI,CAAC,EAAE;QAC/E,MAAMxF,YAAYuD,aAAakC,GAAG,CAACxG,WAAWuG,IAAI;QAElD,mFAAmF;QACnF,gFAAgF;QAChF,6EAA6E;QAC7E,MAAME,iBAAiB,CAACC,KAAaC,KACnCvC,OAAOwC,MAAM,CAACC,QAAQ,CAAC;gBACrBC,WAAWvC;gBACXwC,QAAQ;gBACRL;gBACAM,gBAAgBL,KAAK;oBAAC;wBAAEM,KAAKN;oBAAG;iBAAE,GAAGjE;gBACrC8B;YACF;QAEF,MAAMT,oBAAoB,CAACpD,MACzBD,kBAAkBC,KAAKI,aACnB5B,4BAA4BwB,KAAKX,WAAWuG,IAAI,EAAEpC,YAClDjF,qBAAqByB;QAE3B,OAAO;YACLoB,MAAM;YACNsC;YACA6C,QAAQ;gBACN;oBACE,iFAAiF;oBACjF,wCAAwC;oBACxC7E,MAAM;oBACN8E,OAAO;wBACLC,WAAW,CAACvD,OAASd,qBAAqBc;wBAC1CwD,eAAe;oBACjB;oBACAH,QAAQ;wBACN;4BACEnF,MAAM;4BACNM,MAAM;4BACN8E,OAAO;gCACLG,mBAAmB;gCACnBC,mBAAmB;4BACrB;4BACAL,QAAQ;gCACN;oCACEnF,MAAM;oCACNM,MAAM;oCACN8E,OAAO;wCACLK,QAAQ;oCACV;gCACF;gCACA;oCACEzF,MAAM;oCACNM,MAAM;oCACN8E,OAAO;wCACLM,UAAU;oCACZ;oCACAC,OAAO;gCACT;gCACA;oCACE3F,MAAM;oCACNM,MAAM;oCACN8E,OAAO;wCACLC,WAAW,CAACO,OAAOC,cACjBlH,kBAAkB;gDAAEI,UAAU8G;4CAAY,GAAG7G;wCAC/C8G,aACE;wCACFJ,UAAU;oCACZ;oCACAC,OAAO;gCACT;gCACA;oCACE3F,MAAM;oCACNM,MAAM;oCACN8E,OAAO;wCACL,mFAAmF;wCACnFC,WAAW,CAACO,OAAOC,cACjBlH,kBAAkB;gDAAEI,UAAU8G;4CAAY,GAAG7G;wCAC/C8G,aAAa,CAAC,kFAAkF,EAAEtD,mBAAmB,kKAAkK,CAAC;wCACxRkD,UAAU;oCACZ;oCACAK,OAAO;wCACL,mFAAmF;wCACnFC,WAAW;4CACT,CAAC,EAAElE,IAAI,EAAE+D,WAAW,EAAE;gDACpB,IAAI,CAAClH,kBAAkB;oDAAEI,UAAU8G;gDAAY,GAAG7G,YAAY;oDAC5D,OAAO2B;gDACT;gDAEA,MAAMO,WAAYY,MAA4CZ;gDAE9D,IAAI,CAACA,UAAU;oDACb,OAAOP;gDACT;gDAEA,MAAMsF,SAAUnE,QAAQ,CAAC;gDACzB,MAAMoE,iBAAiB1J,KAAKkD,KAAK,CAACC,IAAI,CACpCsG,OAAO9E,MAAM,IAAIA,QACjB8E,OAAOE,UAAU,IAAI;gDAEvB,MAAMC,kBAAkBjK,qBAAqB;oDAC3CkK,kBAAkBlF;oDAClBmF,WAAWJ;oDACXhF;gDACF,GAAGkF,eAAe;gDAElB,OAAO1B,eAAe,CAAC,CAAC,EAAE0B,iBAAiB;4CAC7C;yCACD;oCACH;oCACAT,OAAO;oCACPY,SAAS;gCACX;gCACA;oCACEvG,MAAM;oCACNM,MAAM;oCACN8E,OAAO;wCACLK,QAAQ;oCACV;gCACF;6BACD;4BACDe,eAAe;4BACfb,OAAO;wBACT;qBACD;oBACDA,OAAO;gBACT;aACD;YACDc,aAAa,CAAC,EAAEvF,QAAQ,EAAEC,QAAQ+E,iBAAiB,EAAE,EAAE,GACrD7D,OAAOwC,MAAM,CAACC,QAAQ,CAAC;oBACrBH,KAAK,CAAC,CAAC,EAAExI,qBAAqB;wBAC5BkK,kBAAkBlF;wBAClBmF,WAAWJ;wBACXhF;oBACF,GAAGkF,eAAe,EAAE;oBACpB3D;gBACF;YACFiE,cAAc,OAAO,EAAE9H,GAAG,EAAEwH,eAAe,EAAE;gBAC3C,MAAMO,eAAe,AAAC/H,IAAuCG,QAAQ,EAAE2B;gBACvE,MAAMA,SACJiG,gBAAiB,MAAM/G,mBAAmByC,QAAQ,CAAC,CAAC,EAAE+D,gBAAgB/G,OAAO,CAAC,QAAQ,KAAK;gBAE7F,IAAI,CAACqB,QAAQ;oBACX;gBACF;gBAEA,MAAM2B,OAAOuE,KAAK,CAACC,MAAM,CAACnG;YAC5B;YACAoG,cAAc,OAAO,EAAEC,mBAAmB,EAAEjF,IAAI,EAAEkF,IAAI,EAAEZ,eAAe,EAAE;gBACvE,IAAIW,qBAAqB;oBACvB,MAAMhF,WAAW,MAAMW,mBAAmB;wBACxCjD,gBAAgBxB,WAAWuG,IAAI;wBAC/ByC,SAASF;oBACX;oBAEA,OAAOlF,gCAAgCC,MAAMC,UAAUC,mBAAmBhD;gBAC5E;gBAEA,4FAA4F;gBAC5F,wFAAwF;gBACxF,MAAMkI,eAAeF,KAAKG,YAAY,GAClC,MAAM5K,WAAWyK,KAAKG,YAAY,EAAE;oBAAE7G,MAAM0G,KAAKvI,QAAQ;gBAAC,KAC1DuI,KAAKI,MAAM;gBACf,MAAMC,aAAa,MAAMpL,OAAOiL,cAAcF,KAAK9F,QAAQ,EAAE;oBAAEZ,MAAM0G,KAAKvI,QAAQ;gBAAC;gBACnF,MAAM6I,eAAe9K,KAAKkD,KAAK,CAACK,OAAO,CAAC,CAAC,CAAC,EAAEqG,gBAAgB/G,OAAO,CAAC,QAAQ,KAAK;gBACjF,MAAMkI,iBAAiB/K,KAAKkD,KAAK,CAACO,QAAQ,CAACmG;gBAE3C,MAAMrE,WAAW,MAAMM,OAAOuE,KAAK,CAAC1I,MAAM,CAAC;oBACzC8I,MAAMK;oBACNG,UAAUD;oBACVrI,QAAQoI;oBACRG,mBAAmB;oBACnB,GAAIzI,YAAY;wBAAE0I,eAAe;oBAAK,IAAI,CAAC,CAAC;gBAC9C;gBAEA5F,KAAK/C,QAAQ,GAAG;oBACd2B,QAAQqB,SAASrB,MAAM;oBACvB1B;oBACAiD,cAAcF,SAASE,YAAY;oBACnClB,KAAKgB,SAAShB,GAAG;gBACnB;gBAEA,0EAA0E;gBAC1E,iFAAiF;gBACjF,sEAAsE;gBACtEe,KAAKI,YAAY,GAAGF,kBAAkB;oBACpC,GAAGF,IAAI;oBACPZ,UAAU,AAACY,KAA+BZ,QAAQ,IAAIqG;gBACxD;gBAEA,OAAOzF;YACT;YACA6F,6BAA6B;YAC7BC,eAAe,OAAOxG,KAAKyG;gBACzB,MAAMC,aAAa,IAAIC,IAAI3G,IAAIL,GAAG,IAAI;gBACtC,MAAM6D,KAAKkD,WAAWE,YAAY,CAAC7D,GAAG,CAAC;gBACvC,MAAM8D,yBAAyB,yBAAyBJ,KAAKK,MAAM;gBAEnE,IAAID,wBAAwB;oBAC1B,MAAMlB,sBAAsBc,KAAKK,MAAM,CAACnB,mBAAmB;oBAE3D,IAAI,CAAChK,yBAAyBgK,sBAAsB;wBAClD,MAAM,IAAItK,SAAS,2CAA2C;oBAChE;oBAEA,MAAM0L,eAAe,MAAMzF,mBAAmB;wBAC5CjD,gBAAgBxB,WAAWuG,IAAI;wBAC/ByC,SAASF;oBACX;oBACA,MAAMqB,mBAAmBnL,+BAA+B;wBACtDoJ,kBAAkBlF;wBAClB8F,SAASF;oBACX;oBACA,MAAMsB,kBAAkBrJ,YACpB0F,eAAe,CAAC,CAAC,EAAE0D,kBAAkB,EAAE1K,gCACvC2E,OAAOwC,MAAM,CAACC,QAAQ,CAAC;wBACrBH,KAAK,CAAC,CAAC,EAAEyD,kBAAkB;wBAC3BnD,gBAAgB;4BAAC;gCAAEC,KAAKxH;4BAA6B;yBAAE;wBACvD+E;oBACF;oBAEJ,OAAOE,kBAAkB;wBACvBC,UAAUuF,aAAaG,IAAI;wBAC3BzF,SAASwF;wBACT5J,UAAU0J,aAAa1J,QAAQ;wBAC/BqE,OAAO1B,IAAI8B,OAAO,CAACiB,GAAG,CAAC;oBACzB;gBACF;gBAEA,MAAMvF,MACJiJ,KAAKjJ,GAAG,IACP,MAAMqC,6BAA6B;oBAClChD,YAAY4J,KAAKK,MAAM,CAACjK,UAAU;oBAClCiD,UAAU2G,KAAKK,MAAM,CAAChH,QAAQ;oBAC9BC,QAAQ0G,KAAKK,MAAM,CAAC/G,MAAM;oBAC1BC;gBACF;gBAEF,MAAMgF,kBAAkB,MAAM/J,mBAAmB;oBAC/C4B;oBACAoI,kBAAkBlF;oBAClBvC,KAAKA,OAAO+B;oBACZO,UAAU2G,KAAKK,MAAM,CAAChH,QAAQ;oBAC9BqH,kBAAkBV,KAAKK,MAAM,CAAC/G,MAAM;oBACpCC;gBACF;gBACA,MAAMoH,eAAe,CAAC,CAAC,EAAEpC,gBAAgB/G,OAAO,CAAC,QAAQ,KAAK;gBAC9D,MAAMZ,WAAYG,KAAsCH;gBAExD,6EAA6E;gBAC7E,yEAAyE;gBACzE,IAAI,OAAOA,aAAa,YAAY9B,cAAc8B,WAAW;oBAC3D,MAAMgK,WAAY7J,KAAsC6J;oBAExD,IAAI,OAAOA,aAAa,YAAY,CAACC,OAAOC,aAAa,CAACF,aAAaA,WAAW,GAAG;wBACnF,MAAM,IAAIhM,SAAS,gDAAgD;oBACrE;oBAEA,MAAMoG,UAAUlE,kBAAkBC,KAAKI,aACnC0F,eAAe8D,cAAc9K,gCAC7B2E,OAAOwC,MAAM,CAACC,QAAQ,CAAC;wBACrBH,KAAK6D;wBACLvD,gBAAgB;4BAAC;gCAAEC,KAAKxH;4BAA6B;yBAAE;wBACvD+E;oBACF;oBAEJ,OAAOE,kBAAkB;wBACvBC,UAAU6F;wBACV5F;wBACApE;wBACAqE,OAAO1B,IAAI8B,OAAO,CAACiB,GAAG,CAAC;oBACzB;gBACF;gBAEA,2EAA2E;gBAC3E,+EAA+E;gBAC/E,IAAIxF,kBAAkBC,KAAKI,YAAY;oBACrC,IAAI4J,UAAUJ;oBAEd,6EAA6E;oBAC7E,yEAAyE;oBACzE,IAAI5D,MAAMtH,gBAAgBmB,WAAW;wBACnCmK,UAAUpL,kBAAkBoL;oBAC9B,OAAO,IAAIhE,MAAMvH,cAAcoB,WAAW;wBACxCmK,UAAUrL,wBAAwBqL;oBACpC;oBAEA,OAAO3F,SAAS4F,QAAQ,CAACnE,eAAekE,SAAShE,KAAK;gBACxD;gBAEA,MAAMkE,cAAczG,OAAOwC,MAAM,CAACC,QAAQ,CAAC;oBACzCH,KACE9D,qBAAqBjC,QACrB4J;oBACFvD,gBAAgBL,KAAK;wBAAC;4BAAEM,KAAKN;wBAAG;qBAAE,GAAGjE;oBACrC8B;gBACF;gBAEA,OAAOQ,SAAS4F,QAAQ,CAACC,aAAa;YACxC;QACF;IACF;AACF;AAEA,MAAMC,4BAA4B,CAChCC,aACAC,SACA1G,cACA/C,YACA0J;IAEA,MAAMC,oBAAwE,CAAC;IAE/E,KAAK,MAAM1J,kBAAkB2J,OAAOC,IAAI,CAACL,aAAc;QACrDG,iBAAiB,CAAC1J,eAAe,GAAG;YAClCwJ;YACAK,qBAAqB;YACrB,oFAAoF;YACpFJ,6BAA6B3G,aAAakC,GAAG,CAAChF,kBAC1CkB,YACAuI;YACJ/H,QAAQ5B,oBAAoBC,YAAYC;QAC1C;IACF;IAEA,OAAO0J;AACT;AAEA,OAAO,MAAMI,kBACX,CAACC,gBACD,CAACC;QACC,MAAM,EACJC,kBAAkB,EAClBpH,aAAa,EACb0G,WAAW,EACXE,2BAA2B,EAC3BS,OAAO,EACPC,UAAU,EACV1K,MAAM,EACN2K,UAAU,EACVC,SAAS,EACTtH,oBAAoBuH,wBAAwB,EAC5CtH,WAAW,EACZ,GAAG+G;QAEJ,IAAI,CAACK,YAAYzK,QAAQ;YACvB,MAAM,IAAIE,MAAM;QAClB;QAEA,IAAI,CAACwK,WAAW1K,QAAQ;YACtB,MAAM,IAAIE,MAAM;QAClB;QAEA,IAAI,CAACmD,aAAarD,QAAQ;YACxB,MAAM,IAAIE,MAAM;QAClB;QAEA,IAAI,CAAC0J,eAAeI,OAAOC,IAAI,CAACL,aAAazK,MAAM,KAAK,GAAG;YACzD,MAAM,IAAIe,MAAM;QAClB;QAEA,MAAMiD,eAAe,IAAIyH,IACvBZ,OAAOa,OAAO,CAACjB,aACZkB,MAAM,CAAC,CAAC,GAAGrM,MAAM,GAAKD,0BAA0BC,QAChDsM,GAAG,CAAC,CAAC,CAAC3F,KAAK,GAAKA;QAErB,MAAM4F,kBAAkB,IAAIJ,IAAIZ,OAAOC,IAAI,CAACL;QAE5C,IAAIE,+BAA+B3G,aAAa+F,IAAI,GAAG,GAAG;YACxD,MAAM,IAAIhJ,MACR;QAEJ;QAEA,IAAI4J,6BAA6B;YAC/B,MAAMmB,qBAAqB,AAACZ,CAAAA,OAAOT,WAAW,IAAI,EAAE,AAAD,EAChDkB,MAAM,CACL,CAACjM,aACCmM,gBAAgB3F,GAAG,CAACxG,WAAWuG,IAAI,KAAKxG,sBAAsBC,aAEjEkM,GAAG,CAAC,CAAClM,aAAeA,WAAWuG,IAAI;YAEtC,IAAI6F,mBAAmB9L,MAAM,GAAG,GAAG;gBACjC,MAAM,IAAIe,MACR,CAAC,kHAAkH,EAAE+K,mBAAmB1K,IAAI,CAAC,MAAM,sLAAsL,CAAC;YAE9U;QACF;QAEA,MAAM6C,qBACJ,OAAOuH,6BAA6B,YAAYA,2BAA2B,IACvEA,2BACAtM;QACN,MAAM2E,WAAWqH,OAAOa,MAAM,EAAEC,OAAO;QAEvC,MAAM/K,aAAaP,gBAAgBC;QAEnC,MAAMsL,iBAAiB,IAAIxO,SAAS;YAAE6N;QAAW;QACjD,MAAMY,qBAAqBrB,OAAOsB,WAAW,CAC3C,AAACjB,CAAAA,OAAOT,WAAW,IAAI,EAAE,AAAD,EACrBkB,MAAM,CAAC,CAACjM,aAAemM,gBAAgB3F,GAAG,CAACxG,WAAWuG,IAAI,GAC1D2F,GAAG,CAAC,CAAClM,aAAe;gBACnBA,WAAWuG,IAAI;gBACf;oBACEvG;oBACAe,WAAWuD,aAAakC,GAAG,CAACxG,WAAWuG,IAAI;oBAC3CrD,QAAQ5B,oBAAoBC,YAAYvB,WAAWuG,IAAI;gBACzD;aACD;QAEL,MAAM9B,qBAAqB1F,mCAAmC;YAC5DqF,QAAQmI;YACRxB,aAAayB;QACf;QACA,MAAMxB,UAAU9G,gBAAgB;YAC9BC;YACAC,QAAQmI;YACRlI;YACAC;YACA/C;YACAgD;YACAC;YACAC;QACF;QAEA,MAAMiI,yBAAiC;YACrC,GAAGlB,MAAM;YACTT,aAAa,AAACS,CAAAA,OAAOT,WAAW,IAAI,EAAE,AAAD,EAAGmB,GAAG,CAAC,CAAClM;gBAC3C,IAAI,CAACmM,gBAAgB3F,GAAG,CAACxG,WAAWuG,IAAI,GAAG;oBACzC,OAAOvG;gBACT;gBAEA,MAAM2M,sBAAsBrI,aAAakC,GAAG,CAACxG,WAAWuG,IAAI;gBAC5D,MAAMxC,oBAAoB,CAACpD,MACzBD,kBAAkBC,KAAKgM,uBACnBxN,4BAA4BwB,KAAKX,WAAWuG,IAAI,EAAEpC,YAClDjF,qBAAqByB;gBAE3B,MAAMiM,oBAAoB7B,WAAW,CAAC/K,WAAWuG,IAAI,CAAC;gBACtD,MAAMsG,uBACJD,sBAAsB,QACtB,OAAOA,sBAAsB,YAC7B,OAAOA,kBAAkBjB,UAAU,KAAK,YACpCiB,kBAAkBjB,UAAU,GAC5BjJ;gBAEN,4EAA4E;gBAC5E,qEAAqE;gBACrE,oCAAoC;gBACpC,MAAMoK,sBAAsB9M,WAAWmH,KAAK,EAAEU;gBAC9C,MAAMkF,YAAYJ,sBACd;oBACE,GAAI3M,WAAWmH,KAAK,IAAI,CAAC,CAAC;oBAC1BU,aACE,OAAOiF,wBAAwB,YAAYA,oBAAoB3L,IAAI,GAAGb,MAAM,GAAG,IAC3E,GAAGwM,oBAAoB,CAAC,EAAEpN,gCAAgC,GACzDoN,uBAAuBpN;gBAChC,IACAM,WAAWmH,KAAK;gBAEpB,OAAO;oBACL,GAAGnH,UAAU;oBACbmH,OAAO4F;oBACPjF,OAAO;wBACL,GAAI9H,WAAW8H,KAAK,IAAI,CAAC,CAAC;wBAC1BkF,cAAc;+BACRhN,WAAW8H,KAAK,EAAEkF,gBAAgB,EAAE;4BACxC,OAAO,EAAEnJ,IAAI,EAAEV,GAAG,EAAE;gCAClB,IAAI,CAACR,SAASkB,SAAS,CAACV,IAAI4F,IAAI,EAAED,qBAAqB;oCACrD,OAAOjF;gCACT;gCAEA,MAAMmF,UAAU7F,IAAI4F,IAAI,CAACD,mBAAmB;gCAC5C,MAAMmE,kBAAkB9J,IAAI4F,IAAI,CAACmE,QAAQ,CAACC,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAEhM,OAAOiM;gCACnE,IACE,CAACtO,yBAAyBkK,YAC1BA,QAAQ/F,QAAQ,KAAKY,KAAKZ,QAAQ,IAClC+F,QAAQ/F,QAAQ,KAAKE,IAAI4F,IAAI,CAAChH,IAAI,IAClCiH,QAAQqE,gBAAgB,KAAKJ,mBAC7B,qEAAqE;gCACrE,gEAAgE;gCAChEjE,QAAQsE,YAAY,KAAKzJ,KAAK2G,QAAQ,EACtC;oCACA,MAAM,IAAIhM,SAAS,iEAAiE;gCACtF;gCAEA,MAAMsF,WAAW,MAAMW,mBAAmB;oCACxCjD,gBAAgBxB,WAAWuG,IAAI;oCAC/ByC;gCACF;gCACA,+EAA+E;gCAC/E,2DAA2D;gCAC3D,MAAMuE,WAAW,MAAMpK,IAAII,OAAO,CAACC,EAAE,CAACC,OAAO,CAAC;oCAC5CzD,YAAYA,WAAWuG,IAAI;oCAC3BpD;oCACAO,OAAO;wCACL,mBAAmB;4CACjBL,QAAQS,SAASrB,MAAM;wCACzB;oCACF;gCACF;gCACA,IAAI8K,UAAU;oCACZ,MAAM,IAAI/O,SAAS,8DAA8D;gCACnF;gCAEAqF,KAAKZ,QAAQ,GAAGa,SAAS/B,IAAI;gCAC7B8B,KAAK2G,QAAQ,GAAG1G,SAASuG,IAAI;gCAC7BxG,KAAKrD,QAAQ,GAAGsD,SAAStD,QAAQ;gCAEjC,OAAOoD,gCACLC,MACAC,UACAC,mBACA4I;4BAEJ;yBACD;wBACDa,iBAAiB;+BACXxN,WAAW8H,KAAK,EAAE0F,mBAAmB,EAAE;4BAC3C,CAAC,EAAE5D,IAAI,EAAE6D,SAAS,EAAEtK,GAAG,EAAE;gCACvB,IACE,AAACsK,cAAc,YAAYA,cAAc,YACzCtK,IAAI6F,OAAO,EAAE0E,oBACb,CAACvK,IAAI4F,IAAI,IACT5F,IAAI4F,IAAI,CAACD,mBAAmB,IAC5B,CAAE,CAAA,UAAUc,IAAG,KACf,CAACjH,SAASiH,KAAK/F,IAAI,KACnB,OAAO+F,KAAK/F,IAAI,CAACX,MAAM,KAAK,UAC5B;oCACA,OAAO0G;gCACT;gCAEA,yEAAyE;gCACzE,wEAAwE;gCACxEA,KAAK/F,IAAI,CAACX,MAAM,GAAG/E,2BAA2B;oCAC5CiK,kBAAkB9G,oBAAoBC,YAAYvB,WAAWuG,IAAI;oCACjE8B,WAAWuB,KAAK/F,IAAI,CAACX,MAAM;oCAC3BD,UAAUE,IAAI4F,IAAI,CAAChH,IAAI;gCACzB,GAAG4L,kBAAkB;gCACrB,OAAO/D;4BACT;yBACD;oBACH;oBACA3J,QAAQ;wBACN,mEAAmE;wBACnE,4DAA4D;wBAC5D,gEAAgE;wBAChE,wBAAwB;wBACxB0L,YAAY;wBACZ,GAAI,OAAOA,eAAe,YAAY;4BAAEA;wBAAW,IAAI,CAAC,CAAC;wBACzD,GAAI,OAAOkB,yBAAyB,YAChC;4BAAElB,YAAYkB;wBAAqB,IACnC,CAAC,CAAC;wBACN,GAAI,OAAO7M,WAAWC,MAAM,KAAK,WAAWD,WAAWC,MAAM,GAAG,CAAC,CAAC;wBAClE2N,gBAAgB,CAAC,EAAEjN,GAAG,EAAE,GAAKoD,kBAAkBpD;wBAC/CkN,MAAM;oBACR;gBACF;YACF;QACF;QAEA,MAAMC,oBAAoB3C,OAAOsB,WAAW,CAC1CtB,OAAOC,IAAI,CAACL,aAAamB,GAAG,CAAC,CAAC1K,iBAAmB;gBAC/CA;gBACA;oBACET,WAAWuD,aAAakC,GAAG,CAAChF;oBAC5B0B,QAAQ5B,oBAAoBC,YAAYC;gBAC1C;aACD;QAKHnD,kBAAkB;YAChB0P,eAAe;YACfhD,aAAa+C;YACbtC,QAAQkB;YACRhB,SAASA,YAAY,SAASxL,QAAQmE;YACtC2J,eAAe/O,gCAAgC;gBAC7CgP,QAAQ,OAAO5J,kBAAkB,WAAWA,cAAc4J,MAAM,GAAGvL;gBACnEqI,aAAa+C;gBACblC;gBACAC;gBACApH;YACF;YACAyJ,mBAAmBrP;QACrB;QAEA,MAAMsP,SAASlQ,mBAAmB;YAChCwN;YACAV,aAAaD,0BACXC,aACAC,SACA1G,cACA/C,YACA0J;YAEFS;QACF,GAAGgB;QAEH,8FAA8F;QAC9F,yDAAyD;QACzDyB,OAAOpD,WAAW,GAAG,AAACoD,CAAAA,OAAOpD,WAAW,IAAI,EAAE,AAAD,EAAGmB,GAAG,CAAC,CAAClM;YACnD,IAAI,CAACmM,gBAAgB3F,GAAG,CAACxG,WAAWuG,IAAI,GAAG;gBACzC,OAAOvG;YACT;YAEA,MAAMoO,qBAAqB,CAACC;gBAC1B,IAAI,UAAUA,SAASA,MAAMtM,IAAI,KAAK,cAAc;oBAClD,OAAO;wBAAE,GAAGsM,KAAK;wBAAEC,QAAQ;oBAAK;gBAClC;gBACA,IAAID,MAAMhM,IAAI,KAAK,WAAW,UAAUgM,SAASA,MAAMtM,IAAI,KAAK,YAAY;oBAC1E,OAAO;wBACL,GAAGsM,KAAK;wBACRnH,QAAQmH,MAAMnH,MAAM,CAACgF,GAAG,CAAC,CAACqC,gBACxB,UAAUA,iBAAiBA,cAAcxM,IAAI,KAAK,WAC9C;gCAAE,GAAGwM,aAAa;gCAAED,QAAQ;4BAAK,IACjCC;oBAER;gBACF;gBACA,yFAAyF;gBACzF,IAAIF,MAAMhM,IAAI,KAAK,eAAe;oBAChC,OAAO;wBAAE,GAAGgM,KAAK;wBAAEnH,QAAQmH,MAAMnH,MAAM,CAACgF,GAAG,CAACkC;oBAAoB;gBAClE;gBACA,OAAOC;YACT;YAEA,OAAO;gBACL,GAAGrO,UAAU;gBACbkH,QAAQlH,WAAWkH,MAAM,CAACgF,GAAG,CAACkC;YAChC;QACF;QAEA,OAAOD;IACT,EAAC;AAEH,SAASK,aAAa,QAAQ,eAAc;AAG5C,4BAA4B;AAC5B,OAAO,MAAMC,yBAAyBnD,gBAAe;AACrD,OAAO,MAAMoD,yBAAyBpD,gBAAe"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@humaan/payload-storage-imagekit",
-  "version": "2.7.0",
+  "version": "2.8.0",
   "description": "ImageKit storage adapter plugin for Payload CMS uploads",
   "license": "MIT",
   "type": "module",
@@ -55,10 +55,10 @@
     "copyfiles": "2.4.1",
     "cross-env": "10.1.0",
     "eslint": "^9.39.5",
-    "eslint-config-next": "16.3.5",
+    "eslint-config-next": "16.3.6",
     "graphql": "^16.14.2",
     "mongodb-memory-server": "11.2.0",
-    "next": "16.3.5",
+    "next": "16.3.6",
     "open": "^11.0.4",
     "payload": "3.90.1",
     "prettier": "^3.9.8",