@humaan/payload-storage-imagekit 2.9.1 → 3.0.0-canary.0

package/dist/endpoints/createImageKitUploadAuthHandler.d.ts

@@ -1,26 +0,0 @@
-import type { ClientUploadsAccess } from '@payloadcms/plugin-cloud-storage/types';
-import type { PayloadHandler, UploadCollectionSlug } from 'payload';
-import type { createImageKitClientUploadVerifier } from '../clientUploadVerification.js';
-type ImageKitUploadCollection = {
-    isPrivate: boolean;
-    prefix: string;
-};
-type CreateImageKitUploadAuthHandlerArgs = {
-    access?: ClientUploadsAccess;
-    collections: Partial<Record<UploadCollectionSlug, ImageKitUploadCollection>>;
-    privateKey: string;
-    publicKey: string;
-    verifyClientUpload: ReturnType<typeof createImageKitClientUploadVerifier>;
-};
-/**
- * ImageKit evaluates `file.mime` against its own content detection, which can differ from
- * the browser's extension-based type (e.g. `.xltm` is detected as `.xlsx`). Constrain the
- * detected type with the rules completion verification applies, not the browser's claim.
- */
-export declare const getUploadChecks: ({ allowedMimeTypes, allowRestrictedFileTypes, filesize, }: {
-    allowedMimeTypes: string[];
-    allowRestrictedFileTypes: boolean;
-    filesize: number;
-}) => string;
-export declare const createImageKitUploadAuthHandler: ({ access, collections, privateKey, publicKey, verifyClientUpload, }: CreateImageKitUploadAuthHandlerArgs) => PayloadHandler;
-export {};

package/dist/endpoints/createImageKitUploadAuthHandler.js

@@ -1,215 +0,0 @@
-import { buildUploadStoragePathData } from '@payloadcms/plugin-cloud-storage/utilities';
-import { randomUUID } from 'node:crypto';
-import { posix } from 'node:path';
-import { APIError, Forbidden } from 'payload';
-import { assertClientUploadAccess, assertClientUploadAllowed, assertClientUploadFileSize, createClientUploadReceipt, getSafeFileName, verifyClientUploadReceipt } from 'payload/internal';
-import { getSanitizedUploadFilename, validateMimeType } from 'payload/shared';
-import { isImageKitReceiptContext } from '../clientUploads.js';
-import { createImageKitUploadToken } from '../imageKitUploadToken.js';
-const defaultAccess = ({ req })=>Boolean(req.user);
-const bytesToMB = (bytes)=>(bytes / 1024 / 1024).toFixed(2);
-const getMimeTypeEssence = (mimeType)=>(mimeType.split(';', 1)[0] || '').trim().toLowerCase();
-const getImageKitSafeFilename = (filename)=>getSanitizedUploadFilename(filename).replace(/[^\w.-]/g, '_');
-// ImageKit can't match Payload's `+xml` suffix rule, so name the XML-family types it may detect.
-const XML_FAMILY_MIME_TYPES = [
-    'application/atom+xml',
-    'application/mathml+xml',
-    'application/rdf+xml',
-    'application/rss+xml',
-    'application/xhtml+xml',
-    'application/xml',
-    'application/xslt+xml',
-    'image/svg+xml',
-    'text/xml'
-];
-/**
- * ImageKit evaluates `file.mime` against its own content detection, which can differ from
- * the browser's extension-based type (e.g. `.xltm` is detected as `.xlsx`). Constrain the
- * detected type with the rules completion verification applies, not the browser's claim.
- */ export const getUploadChecks = ({ allowedMimeTypes, allowRestrictedFileTypes, filesize })=>{
-    const checks = [
-        `"file.size" = ${filesize}`
-    ];
-    // Mirror Payload's validateMimeType, which drops the first `*` and matches by prefix.
-    // Entries with quotes or backslashes can't prefix a valid MIME type, so omit them.
-    const prefixes = allowedMimeTypes.map((mimeType)=>mimeType.replace('*', '')).filter((prefix)=>!/["\\]/.test(prefix));
-    if (allowedMimeTypes.length > 0 && !prefixes.includes('')) {
-        checks.push(`(${prefixes.map((prefix)=>`"file.mime" : "${prefix}"`).join(' OR ')})`);
-    }
-    if (!allowRestrictedFileTypes) {
-        checks.push(`"file.mime" NOT IN [${XML_FAMILY_MIME_TYPES.map((type)=>`"${type}"`).join(', ')}]`);
-    }
-    return checks.join(' AND ');
-};
-// Continue Payload's numeric suffix convention when the conflict exists only in ImageKit.
-const nextFilename = (filename)=>{
-    const { name, ext } = posix.parse(filename);
-    const suffix = /^(.*)-(\d+)$/.exec(name);
-    return `${suffix ? `${suffix[1]}-${Number(suffix[2]) + 1}` : `${name}-1`}${ext}`;
-};
-export const createImageKitUploadAuthHandler = ({ access = defaultAccess, collections, privateKey, publicKey, verifyClientUpload })=>{
-    return async (req)=>{
-        if (!req.json) {
-            throw new APIError('Content-Type expected to be application/json', 400);
-        }
-        const body = await req.json();
-        const { action, collectionSlug, fileId, signedReceipt } = body;
-        let { filename, filesize, mimeType } = body;
-        if (typeof collectionSlug !== 'string' || !Object.hasOwn(collections, collectionSlug)) {
-            throw new APIError('Invalid upload payload.', 400);
-        }
-        await assertClientUploadAccess({
-            collectionSlug,
-            req
-        });
-        const imageKitCollection = collections[collectionSlug];
-        if (!imageKitCollection) {
-            throw new APIError(`Collection ${collectionSlug} was not found in ImageKit options.`, 400);
-        }
-        if (!await access({
-            collectionSlug,
-            req
-        })) {
-            throw new Forbidden(req.t);
-        }
-        if (action === 'complete') {
-            if (typeof fileId !== 'string' || !fileId.trim() || typeof signedReceipt !== 'string') {
-                throw new APIError('Invalid ImageKit upload completion payload.', 400);
-            }
-            const receipt = verifyClientUploadReceipt({
-                collectionSlug,
-                req,
-                signedReceipt
-            });
-            if (!isImageKitReceiptContext(receipt.context) || receipt.filename !== receipt.context.filename || receipt.context.fileId !== undefined && receipt.context.fileId !== fileId) {
-                throw new APIError('Invalid ImageKit client upload context.', 400);
-            }
-            // The browser supplies a lookup ID, not proof. Check provider state against the
-            // original signed authorization before including that ID in a new signed receipt.
-            const context = {
-                ...receipt.context,
-                fileId
-            };
-            await verifyClientUpload({
-                collectionSlug,
-                context
-            });
-            delete context.uploadTag;
-            const response = {
-                clientUploadContext: {
-                    _objectKey: context._objectKey,
-                    prefix: context.prefix,
-                    signedReceipt: createClientUploadReceipt({
-                        collectionSlug,
-                        context,
-                        filename: context.filename,
-                        req
-                    })
-                }
-            };
-            return Response.json(response, {
-                headers: {
-                    'Cache-Control': 'no-store'
-                }
-            });
-        }
-        if (action === 'retry') {
-            if (typeof signedReceipt !== 'string') {
-                throw new APIError('Invalid ImageKit upload retry payload.', 400);
-            }
-            const receipt = verifyClientUploadReceipt({
-                collectionSlug,
-                req,
-                signedReceipt
-            });
-            if (!isImageKitReceiptContext(receipt.context) || receipt.filename !== receipt.context.filename || receipt.context.fileId !== undefined) {
-                throw new APIError('Invalid ImageKit upload retry payload.', 400);
-            }
-            filename = nextFilename(receipt.context.filename);
-            filesize = receipt.context.expectedSize;
-            mimeType = receipt.context.expectedMimeType;
-        }
-        if (action !== undefined && action !== 'retry' || typeof filename !== 'string' || typeof mimeType !== 'string') {
-            throw new APIError('Invalid upload payload.', 400);
-        }
-        assertClientUploadAllowed({
-            collection: req.payload.collections[collectionSlug]?.config,
-            filename,
-            mimeType
-        });
-        assertClientUploadFileSize(filesize);
-        const requestedSize = filesize;
-        const expectedMimeType = getMimeTypeEssence(mimeType);
-        if (!expectedMimeType) {
-            throw new APIError('A valid MIME type is required for ImageKit client uploads.', 400);
-        }
-        const collectionConfig = req.payload.collections[collectionSlug]?.config;
-        const allowedMimeTypes = collectionConfig && typeof collectionConfig.upload === 'object' && Array.isArray(collectionConfig.upload.mimeTypes) ? collectionConfig.upload.mimeTypes : [];
-        if (allowedMimeTypes.length > 0 && !validateMimeType(expectedMimeType, allowedMimeTypes)) {
-            throw new APIError(`File type ${expectedMimeType} is not allowed.`, 400);
-        }
-        const filesizeLimit = req.payload.config.upload.limits?.fileSize;
-        if (typeof filesizeLimit === 'number' && Number.isFinite(filesizeLimit) && requestedSize > filesizeLimit) {
-            throw new APIError(`Exceeded file size limit. Limit: ${bytesToMB(filesizeLimit)}MB, got: ${bytesToMB(requestedSize)}MB`, 400);
-        }
-        const sanitizedFilename = await getSafeFileName({
-            collectionSlug,
-            desiredFilename: getImageKitSafeFilename(filename),
-            req
-        });
-        const resolved = buildUploadStoragePathData({
-            collectionPrefix: imageKitCollection.prefix,
-            docPrefix: imageKitCollection.prefix,
-            filename: sanitizedFilename
-        });
-        const folder = `/${resolved.storageFilePath.slice(0, -(sanitizedFilename.length + 1))}`;
-        const uploadTag = `payload-upload-${randomUUID()}`;
-        const uploadPayload = {
-            checks: getUploadChecks({
-                allowedMimeTypes,
-                allowRestrictedFileTypes: typeof collectionConfig?.upload === 'object' && Boolean(collectionConfig.upload.allowRestrictedFileTypes),
-                filesize: requestedSize
-            }),
-            fileName: sanitizedFilename,
-            folder,
-            isPrivateFile: imageKitCollection.isPrivate ? 'true' : 'false',
-            overwriteFile: 'false',
-            tags: uploadTag,
-            useUniqueFileName: 'false'
-        };
-        const receiptContext = {
-            collectionSlug,
-            expectedMimeType,
-            expectedSize: requestedSize,
-            filename: sanitizedFilename,
-            isPrivate: imageKitCollection.isPrivate,
-            prefix: resolved.sanitizedDocPrefix,
-            uploadTag
-        };
-        const response = {
-            clientUploadContext: {
-                prefix: resolved.sanitizedDocPrefix,
-                signedReceipt: createClientUploadReceipt({
-                    collectionSlug,
-                    context: receiptContext,
-                    filename: sanitizedFilename,
-                    req
-                })
-            },
-            filename: sanitizedFilename,
-            token: createImageKitUploadToken({
-                privateKey,
-                publicKey,
-                uploadPayload
-            }),
-            uploadPayload
-        };
-        return Response.json(response, {
-            headers: {
-                'Cache-Control': 'no-store'
-            }
-        });
-    };
-};
-
-//# sourceMappingURL=createImageKitUploadAuthHandler.js.map

package/dist/endpoints/createImageKitUploadAuthHandler.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/endpoints/createImageKitUploadAuthHandler.ts"],"sourcesContent":["import type { ClientUploadsAccess } from '@payloadcms/plugin-cloud-storage/types'\nimport type { PayloadHandler, UploadCollectionSlug } from 'payload'\n\nimport { buildUploadStoragePathData } from '@payloadcms/plugin-cloud-storage/utilities'\nimport { randomUUID } from 'node:crypto'\nimport { posix } from 'node:path'\nimport { APIError, Forbidden } from 'payload'\nimport {\n  assertClientUploadAccess,\n  assertClientUploadAllowed,\n  assertClientUploadFileSize,\n  createClientUploadReceipt,\n  getSafeFileName,\n  verifyClientUploadReceipt,\n} from 'payload/internal'\nimport { getSanitizedUploadFilename, validateMimeType } from 'payload/shared'\n\nimport type {\n  ImageKitReceiptContext,\n  ImageKitUploadAuthorization,\n  ImageKitUploadCompletion,\n  ImageKitUploadPayload,\n} from '../clientUploads.js'\nimport type { createImageKitClientUploadVerifier } from '../clientUploadVerification.js'\n\nimport { isImageKitReceiptContext } from '../clientUploads.js'\nimport { createImageKitUploadToken } from '../imageKitUploadToken.js'\n\ntype ImageKitUploadCollection = {\n  isPrivate: boolean\n  prefix: string\n}\n\ntype CreateImageKitUploadAuthHandlerArgs = {\n  access?: ClientUploadsAccess\n  collections: Partial<Record<UploadCollectionSlug, ImageKitUploadCollection>>\n  privateKey: string\n  publicKey: string\n  verifyClientUpload: ReturnType<typeof createImageKitClientUploadVerifier>\n}\n\nconst defaultAccess: ClientUploadsAccess = ({ req }) => Boolean(req.user)\n\nconst bytesToMB = (bytes: number): string => (bytes / 1024 / 1024).toFixed(2)\n\nconst getMimeTypeEssence = (mimeType: string): string =>\n  (mimeType.split(';', 1)[0] || '').trim().toLowerCase()\n\nconst getImageKitSafeFilename = (filename: string): string =>\n  getSanitizedUploadFilename(filename).replace(/[^\\w.-]/g, '_')\n\n// ImageKit can't match Payload's `+xml` suffix rule, so name the XML-family types it may detect.\nconst XML_FAMILY_MIME_TYPES = [\n  'application/atom+xml',\n  'application/mathml+xml',\n  'application/rdf+xml',\n  'application/rss+xml',\n  'application/xhtml+xml',\n  'application/xml',\n  'application/xslt+xml',\n  'image/svg+xml',\n  'text/xml',\n]\n\n/**\n * ImageKit evaluates `file.mime` against its own content detection, which can differ from\n * the browser's extension-based type (e.g. `.xltm` is detected as `.xlsx`). Constrain the\n * detected type with the rules completion verification applies, not the browser's claim.\n */\nexport const getUploadChecks = ({\n  allowedMimeTypes,\n  allowRestrictedFileTypes,\n  filesize,\n}: {\n  allowedMimeTypes: string[]\n  allowRestrictedFileTypes: boolean\n  filesize: number\n}): string => {\n  const checks = [`\"file.size\" = ${filesize}`]\n  // Mirror Payload's validateMimeType, which drops the first `*` and matches by prefix.\n  // Entries with quotes or backslashes can't prefix a valid MIME type, so omit them.\n  const prefixes = allowedMimeTypes\n    .map((mimeType) => mimeType.replace('*', ''))\n    .filter((prefix) => !/[\"\\\\]/.test(prefix))\n\n  if (allowedMimeTypes.length > 0 && !prefixes.includes('')) {\n    checks.push(`(${prefixes.map((prefix) => `\"file.mime\" : \"${prefix}\"`).join(' OR ')})`)\n  }\n\n  if (!allowRestrictedFileTypes) {\n    checks.push(`\"file.mime\" NOT IN [${XML_FAMILY_MIME_TYPES.map((type) => `\"${type}\"`).join(', ')}]`)\n  }\n\n  return checks.join(' AND ')\n}\n\n// Continue Payload's numeric suffix convention when the conflict exists only in ImageKit.\nconst nextFilename = (filename: string): string => {\n  const { name, ext } = posix.parse(filename)\n  const suffix = /^(.*)-(\\d+)$/.exec(name)\n  return `${suffix ? `${suffix[1]}-${Number(suffix[2]) + 1}` : `${name}-1`}${ext}`\n}\n\nexport const createImageKitUploadAuthHandler = ({\n  access = defaultAccess,\n  collections,\n  privateKey,\n  publicKey,\n  verifyClientUpload,\n}: CreateImageKitUploadAuthHandlerArgs): PayloadHandler => {\n  return async (req) => {\n    if (!req.json) {\n      throw new APIError('Content-Type expected to be application/json', 400)\n    }\n\n    const body = (await req.json()) as {\n      action?: unknown\n      collectionSlug?: unknown\n      fileId?: unknown\n      filename?: unknown\n      filesize?: unknown\n      mimeType?: unknown\n      signedReceipt?: unknown\n    }\n    const { action, collectionSlug, fileId, signedReceipt } = body\n    let { filename, filesize, mimeType } = body\n\n    if (typeof collectionSlug !== 'string' || !Object.hasOwn(collections, collectionSlug)) {\n      throw new APIError('Invalid upload payload.', 400)\n    }\n\n    await assertClientUploadAccess({ collectionSlug, req })\n\n    const imageKitCollection = collections[collectionSlug]\n    if (!imageKitCollection) {\n      throw new APIError(`Collection ${collectionSlug} was not found in ImageKit options.`, 400)\n    }\n\n    if (!(await access({ collectionSlug, req }))) {\n      throw new Forbidden(req.t)\n    }\n\n    if (action === 'complete') {\n      if (typeof fileId !== 'string' || !fileId.trim() || typeof signedReceipt !== 'string') {\n        throw new APIError('Invalid ImageKit upload completion payload.', 400)\n      }\n      const receipt = verifyClientUploadReceipt({ collectionSlug, req, signedReceipt })\n      if (\n        !isImageKitReceiptContext(receipt.context) ||\n        receipt.filename !== receipt.context.filename ||\n        (receipt.context.fileId !== undefined && receipt.context.fileId !== fileId)\n      ) {\n        throw new APIError('Invalid ImageKit client upload context.', 400)\n      }\n\n      // The browser supplies a lookup ID, not proof. Check provider state against the\n      // original signed authorization before including that ID in a new signed receipt.\n      const context: ImageKitReceiptContext = { ...receipt.context, fileId }\n      await verifyClientUpload({ collectionSlug, context })\n      delete context.uploadTag\n      const response: ImageKitUploadCompletion = {\n        clientUploadContext: {\n          _objectKey: context._objectKey,\n          prefix: context.prefix,\n          signedReceipt: createClientUploadReceipt({\n            collectionSlug,\n            context,\n            filename: context.filename,\n            req,\n          }),\n        },\n      }\n      return Response.json(response, { headers: { 'Cache-Control': 'no-store' } })\n    }\n\n    if (action === 'retry') {\n      if (typeof signedReceipt !== 'string') {\n        throw new APIError('Invalid ImageKit upload retry payload.', 400)\n      }\n      const receipt = verifyClientUploadReceipt({ collectionSlug, req, signedReceipt })\n      if (\n        !isImageKitReceiptContext(receipt.context) ||\n        receipt.filename !== receipt.context.filename ||\n        receipt.context.fileId !== undefined\n      ) {\n        throw new APIError('Invalid ImageKit upload retry payload.', 400)\n      }\n      filename = nextFilename(receipt.context.filename)\n      filesize = receipt.context.expectedSize\n      mimeType = receipt.context.expectedMimeType\n    }\n\n    if (\n      (action !== undefined && action !== 'retry') ||\n      typeof filename !== 'string' ||\n      typeof mimeType !== 'string'\n    ) {\n      throw new APIError('Invalid upload payload.', 400)\n    }\n\n    assertClientUploadAllowed({\n      collection: req.payload.collections[collectionSlug]?.config,\n      filename,\n      mimeType,\n    })\n    assertClientUploadFileSize(filesize)\n\n    const requestedSize = filesize as number\n    const expectedMimeType = getMimeTypeEssence(mimeType)\n    if (!expectedMimeType) {\n      throw new APIError('A valid MIME type is required for ImageKit client uploads.', 400)\n    }\n\n    const collectionConfig = req.payload.collections[collectionSlug]?.config\n    const allowedMimeTypes =\n      collectionConfig &&\n      typeof collectionConfig.upload === 'object' &&\n      Array.isArray(collectionConfig.upload.mimeTypes)\n        ? collectionConfig.upload.mimeTypes\n        : []\n\n    if (allowedMimeTypes.length > 0 && !validateMimeType(expectedMimeType, allowedMimeTypes)) {\n      throw new APIError(`File type ${expectedMimeType} is not allowed.`, 400)\n    }\n\n    const filesizeLimit = req.payload.config.upload.limits?.fileSize\n\n    if (\n      typeof filesizeLimit === 'number' &&\n      Number.isFinite(filesizeLimit) &&\n      requestedSize > filesizeLimit\n    ) {\n      throw new APIError(\n        `Exceeded file size limit. Limit: ${bytesToMB(filesizeLimit)}MB, got: ${bytesToMB(requestedSize)}MB`,\n        400,\n      )\n    }\n\n    const sanitizedFilename = await getSafeFileName({\n      collectionSlug,\n      desiredFilename: getImageKitSafeFilename(filename),\n      req,\n    })\n    const resolved = buildUploadStoragePathData({\n      collectionPrefix: imageKitCollection.prefix,\n      docPrefix: imageKitCollection.prefix,\n      filename: sanitizedFilename,\n    })\n    const folder = `/${resolved.storageFilePath.slice(0, -(sanitizedFilename.length + 1))}`\n    const uploadTag = `payload-upload-${randomUUID()}`\n    const uploadPayload: ImageKitUploadPayload = {\n      checks: getUploadChecks({\n        allowedMimeTypes,\n        allowRestrictedFileTypes:\n          typeof collectionConfig?.upload === 'object' &&\n          Boolean(collectionConfig.upload.allowRestrictedFileTypes),\n        filesize: requestedSize,\n      }),\n      fileName: sanitizedFilename,\n      folder,\n      isPrivateFile: imageKitCollection.isPrivate ? 'true' : 'false',\n      overwriteFile: 'false',\n      tags: uploadTag,\n      useUniqueFileName: 'false',\n    }\n    const receiptContext: ImageKitReceiptContext = {\n      collectionSlug,\n      expectedMimeType,\n      expectedSize: requestedSize,\n      filename: sanitizedFilename,\n      isPrivate: imageKitCollection.isPrivate,\n      prefix: resolved.sanitizedDocPrefix,\n      uploadTag,\n    }\n    const response: ImageKitUploadAuthorization = {\n      clientUploadContext: {\n        prefix: resolved.sanitizedDocPrefix,\n        signedReceipt: createClientUploadReceipt({\n          collectionSlug,\n          context: receiptContext,\n          filename: sanitizedFilename,\n          req,\n        }),\n      },\n      filename: sanitizedFilename,\n      token: createImageKitUploadToken({ privateKey, publicKey, uploadPayload }),\n      uploadPayload,\n    }\n\n    return Response.json(response, {\n      headers: {\n        'Cache-Control': 'no-store',\n      },\n    })\n  }\n}\n"],"names":["buildUploadStoragePathData","randomUUID","posix","APIError","Forbidden","assertClientUploadAccess","assertClientUploadAllowed","assertClientUploadFileSize","createClientUploadReceipt","getSafeFileName","verifyClientUploadReceipt","getSanitizedUploadFilename","validateMimeType","isImageKitReceiptContext","createImageKitUploadToken","defaultAccess","req","Boolean","user","bytesToMB","bytes","toFixed","getMimeTypeEssence","mimeType","split","trim","toLowerCase","getImageKitSafeFilename","filename","replace","XML_FAMILY_MIME_TYPES","getUploadChecks","allowedMimeTypes","allowRestrictedFileTypes","filesize","checks","prefixes","map","filter","prefix","test","length","includes","push","join","type","nextFilename","name","ext","parse","suffix","exec","Number","createImageKitUploadAuthHandler","access","collections","privateKey","publicKey","verifyClientUpload","json","body","action","collectionSlug","fileId","signedReceipt","Object","hasOwn","imageKitCollection","t","receipt","context","undefined","uploadTag","response","clientUploadContext","_objectKey","Response","headers","expectedSize","expectedMimeType","collection","payload","config","requestedSize","collectionConfig","upload","Array","isArray","mimeTypes","filesizeLimit","limits","fileSize","isFinite","sanitizedFilename","desiredFilename","resolved","collectionPrefix","docPrefix","folder","storageFilePath","slice","uploadPayload","fileName","isPrivateFile","isPrivate","overwriteFile","tags","useUniqueFileName","receiptContext","sanitizedDocPrefix","token"],"mappings":"AAGA,SAASA,0BAA0B,QAAQ,6CAA4C;AACvF,SAASC,UAAU,QAAQ,cAAa;AACxC,SAASC,KAAK,QAAQ,YAAW;AACjC,SAASC,QAAQ,EAAEC,SAAS,QAAQ,UAAS;AAC7C,SACEC,wBAAwB,EACxBC,yBAAyB,EACzBC,0BAA0B,EAC1BC,yBAAyB,EACzBC,eAAe,EACfC,yBAAyB,QACpB,mBAAkB;AACzB,SAASC,0BAA0B,EAAEC,gBAAgB,QAAQ,iBAAgB;AAU7E,SAASC,wBAAwB,QAAQ,sBAAqB;AAC9D,SAASC,yBAAyB,QAAQ,4BAA2B;AAerE,MAAMC,gBAAqC,CAAC,EAAEC,GAAG,EAAE,GAAKC,QAAQD,IAAIE,IAAI;AAExE,MAAMC,YAAY,CAACC,QAA0B,AAACA,CAAAA,QAAQ,OAAO,IAAG,EAAGC,OAAO,CAAC;AAE3E,MAAMC,qBAAqB,CAACC,WAC1B,AAACA,CAAAA,SAASC,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAC,EAAGC,IAAI,GAAGC,WAAW;AAEtD,MAAMC,0BAA0B,CAACC,WAC/BjB,2BAA2BiB,UAAUC,OAAO,CAAC,YAAY;AAE3D,iGAAiG;AACjG,MAAMC,wBAAwB;IAC5B;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAED;;;;CAIC,GACD,OAAO,MAAMC,kBAAkB,CAAC,EAC9BC,gBAAgB,EAChBC,wBAAwB,EACxBC,QAAQ,EAKT;IACC,MAAMC,SAAS;QAAC,CAAC,cAAc,EAAED,UAAU;KAAC;IAC5C,sFAAsF;IACtF,mFAAmF;IACnF,MAAME,WAAWJ,iBACdK,GAAG,CAAC,CAACd,WAAaA,SAASM,OAAO,CAAC,KAAK,KACxCS,MAAM,CAAC,CAACC,SAAW,CAAC,QAAQC,IAAI,CAACD;IAEpC,IAAIP,iBAAiBS,MAAM,GAAG,KAAK,CAACL,SAASM,QAAQ,CAAC,KAAK;QACzDP,OAAOQ,IAAI,CAAC,CAAC,CAAC,EAAEP,SAASC,GAAG,CAAC,CAACE,SAAW,CAAC,eAAe,EAAEA,OAAO,CAAC,CAAC,EAAEK,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvF;IAEA,IAAI,CAACX,0BAA0B;QAC7BE,OAAOQ,IAAI,CAAC,CAAC,oBAAoB,EAAEb,sBAAsBO,GAAG,CAAC,CAACQ,OAAS,CAAC,CAAC,EAAEA,KAAK,CAAC,CAAC,EAAED,IAAI,CAAC,MAAM,CAAC,CAAC;IACnG;IAEA,OAAOT,OAAOS,IAAI,CAAC;AACrB,EAAC;AAED,0FAA0F;AAC1F,MAAME,eAAe,CAAClB;IACpB,MAAM,EAAEmB,IAAI,EAAEC,GAAG,EAAE,GAAG9C,MAAM+C,KAAK,CAACrB;IAClC,MAAMsB,SAAS,eAAeC,IAAI,CAACJ;IACnC,OAAO,GAAGG,SAAS,GAAGA,MAAM,CAAC,EAAE,CAAC,CAAC,EAAEE,OAAOF,MAAM,CAAC,EAAE,IAAI,GAAG,GAAG,GAAGH,KAAK,EAAE,CAAC,GAAGC,KAAK;AAClF;AAEA,OAAO,MAAMK,kCAAkC,CAAC,EAC9CC,SAASvC,aAAa,EACtBwC,WAAW,EACXC,UAAU,EACVC,SAAS,EACTC,kBAAkB,EACkB;IACpC,OAAO,OAAO1C;QACZ,IAAI,CAACA,IAAI2C,IAAI,EAAE;YACb,MAAM,IAAIxD,SAAS,gDAAgD;QACrE;QAEA,MAAMyD,OAAQ,MAAM5C,IAAI2C,IAAI;QAS5B,MAAM,EAAEE,MAAM,EAAEC,cAAc,EAAEC,MAAM,EAAEC,aAAa,EAAE,GAAGJ;QAC1D,IAAI,EAAEhC,QAAQ,EAAEM,QAAQ,EAAEX,QAAQ,EAAE,GAAGqC;QAEvC,IAAI,OAAOE,mBAAmB,YAAY,CAACG,OAAOC,MAAM,CAACX,aAAaO,iBAAiB;YACrF,MAAM,IAAI3D,SAAS,2BAA2B;QAChD;QAEA,MAAME,yBAAyB;YAAEyD;YAAgB9C;QAAI;QAErD,MAAMmD,qBAAqBZ,WAAW,CAACO,eAAe;QACtD,IAAI,CAACK,oBAAoB;YACvB,MAAM,IAAIhE,SAAS,CAAC,WAAW,EAAE2D,eAAe,mCAAmC,CAAC,EAAE;QACxF;QAEA,IAAI,CAAE,MAAMR,OAAO;YAAEQ;YAAgB9C;QAAI,IAAK;YAC5C,MAAM,IAAIZ,UAAUY,IAAIoD,CAAC;QAC3B;QAEA,IAAIP,WAAW,YAAY;YACzB,IAAI,OAAOE,WAAW,YAAY,CAACA,OAAOtC,IAAI,MAAM,OAAOuC,kBAAkB,UAAU;gBACrF,MAAM,IAAI7D,SAAS,+CAA+C;YACpE;YACA,MAAMkE,UAAU3D,0BAA0B;gBAAEoD;gBAAgB9C;gBAAKgD;YAAc;YAC/E,IACE,CAACnD,yBAAyBwD,QAAQC,OAAO,KACzCD,QAAQzC,QAAQ,KAAKyC,QAAQC,OAAO,CAAC1C,QAAQ,IAC5CyC,QAAQC,OAAO,CAACP,MAAM,KAAKQ,aAAaF,QAAQC,OAAO,CAACP,MAAM,KAAKA,QACpE;gBACA,MAAM,IAAI5D,SAAS,2CAA2C;YAChE;YAEA,gFAAgF;YAChF,kFAAkF;YAClF,MAAMmE,UAAkC;gBAAE,GAAGD,QAAQC,OAAO;gBAAEP;YAAO;YACrE,MAAML,mBAAmB;gBAAEI;gBAAgBQ;YAAQ;YACnD,OAAOA,QAAQE,SAAS;YACxB,MAAMC,WAAqC;gBACzCC,qBAAqB;oBACnBC,YAAYL,QAAQK,UAAU;oBAC9BpC,QAAQ+B,QAAQ/B,MAAM;oBACtByB,eAAexD,0BAA0B;wBACvCsD;wBACAQ;wBACA1C,UAAU0C,QAAQ1C,QAAQ;wBAC1BZ;oBACF;gBACF;YACF;YACA,OAAO4D,SAASjB,IAAI,CAACc,UAAU;gBAAEI,SAAS;oBAAE,iBAAiB;gBAAW;YAAE;QAC5E;QAEA,IAAIhB,WAAW,SAAS;YACtB,IAAI,OAAOG,kBAAkB,UAAU;gBACrC,MAAM,IAAI7D,SAAS,0CAA0C;YAC/D;YACA,MAAMkE,UAAU3D,0BAA0B;gBAAEoD;gBAAgB9C;gBAAKgD;YAAc;YAC/E,IACE,CAACnD,yBAAyBwD,QAAQC,OAAO,KACzCD,QAAQzC,QAAQ,KAAKyC,QAAQC,OAAO,CAAC1C,QAAQ,IAC7CyC,QAAQC,OAAO,CAACP,MAAM,KAAKQ,WAC3B;gBACA,MAAM,IAAIpE,SAAS,0CAA0C;YAC/D;YACAyB,WAAWkB,aAAauB,QAAQC,OAAO,CAAC1C,QAAQ;YAChDM,WAAWmC,QAAQC,OAAO,CAACQ,YAAY;YACvCvD,WAAW8C,QAAQC,OAAO,CAACS,gBAAgB;QAC7C;QAEA,IACE,AAAClB,WAAWU,aAAaV,WAAW,WACpC,OAAOjC,aAAa,YACpB,OAAOL,aAAa,UACpB;YACA,MAAM,IAAIpB,SAAS,2BAA2B;QAChD;QAEAG,0BAA0B;YACxB0E,YAAYhE,IAAIiE,OAAO,CAAC1B,WAAW,CAACO,eAAe,EAAEoB;YACrDtD;YACAL;QACF;QACAhB,2BAA2B2B;QAE3B,MAAMiD,gBAAgBjD;QACtB,MAAM6C,mBAAmBzD,mBAAmBC;QAC5C,IAAI,CAACwD,kBAAkB;YACrB,MAAM,IAAI5E,SAAS,8DAA8D;QACnF;QAEA,MAAMiF,mBAAmBpE,IAAIiE,OAAO,CAAC1B,WAAW,CAACO,eAAe,EAAEoB;QAClE,MAAMlD,mBACJoD,oBACA,OAAOA,iBAAiBC,MAAM,KAAK,YACnCC,MAAMC,OAAO,CAACH,iBAAiBC,MAAM,CAACG,SAAS,IAC3CJ,iBAAiBC,MAAM,CAACG,SAAS,GACjC,EAAE;QAER,IAAIxD,iBAAiBS,MAAM,GAAG,KAAK,CAAC7B,iBAAiBmE,kBAAkB/C,mBAAmB;YACxF,MAAM,IAAI7B,SAAS,CAAC,UAAU,EAAE4E,iBAAiB,gBAAgB,CAAC,EAAE;QACtE;QAEA,MAAMU,gBAAgBzE,IAAIiE,OAAO,CAACC,MAAM,CAACG,MAAM,CAACK,MAAM,EAAEC;QAExD,IACE,OAAOF,kBAAkB,YACzBrC,OAAOwC,QAAQ,CAACH,kBAChBN,gBAAgBM,eAChB;YACA,MAAM,IAAItF,SACR,CAAC,iCAAiC,EAAEgB,UAAUsE,eAAe,SAAS,EAAEtE,UAAUgE,eAAe,EAAE,CAAC,EACpG;QAEJ;QAEA,MAAMU,oBAAoB,MAAMpF,gBAAgB;YAC9CqD;YACAgC,iBAAiBnE,wBAAwBC;YACzCZ;QACF;QACA,MAAM+E,WAAW/F,2BAA2B;YAC1CgG,kBAAkB7B,mBAAmB5B,MAAM;YAC3C0D,WAAW9B,mBAAmB5B,MAAM;YACpCX,UAAUiE;QACZ;QACA,MAAMK,SAAS,CAAC,CAAC,EAAEH,SAASI,eAAe,CAACC,KAAK,CAAC,GAAG,CAAEP,CAAAA,kBAAkBpD,MAAM,GAAG,CAAA,IAAK;QACvF,MAAM+B,YAAY,CAAC,eAAe,EAAEvE,cAAc;QAClD,MAAMoG,gBAAuC;YAC3ClE,QAAQJ,gBAAgB;gBACtBC;gBACAC,0BACE,OAAOmD,kBAAkBC,WAAW,YACpCpE,QAAQmE,iBAAiBC,MAAM,CAACpD,wBAAwB;gBAC1DC,UAAUiD;YACZ;YACAmB,UAAUT;YACVK;YACAK,eAAepC,mBAAmBqC,SAAS,GAAG,SAAS;YACvDC,eAAe;YACfC,MAAMlC;YACNmC,mBAAmB;QACrB;QACA,MAAMC,iBAAyC;YAC7C9C;YACAiB;YACAD,cAAcK;YACdvD,UAAUiE;YACVW,WAAWrC,mBAAmBqC,SAAS;YACvCjE,QAAQwD,SAASc,kBAAkB;YACnCrC;QACF;QACA,MAAMC,WAAwC;YAC5CC,qBAAqB;gBACnBnC,QAAQwD,SAASc,kBAAkB;gBACnC7C,eAAexD,0BAA0B;oBACvCsD;oBACAQ,SAASsC;oBACThF,UAAUiE;oBACV7E;gBACF;YACF;YACAY,UAAUiE;YACViB,OAAOhG,0BAA0B;gBAAE0C;gBAAYC;gBAAW4C;YAAc;YACxEA;QACF;QAEA,OAAOzB,SAASjB,IAAI,CAACc,UAAU;YAC7BI,SAAS;gBACP,iBAAiB;YACnB;QACF;IACF;AACF,EAAC"}