@jini-ai/integrations 0.1.0

package/dist/media-providers/dispatch/providers/volcengine.js

@@ -0,0 +1,95 @@
+/**
+ * Provider: Volcengine Ark (Doubao) — Seedream / Seededit image generation
+ * via an OpenAI-images-compatible `/images/generations` endpoint. Ported
+ * near-verbatim from Open Design's `apps/daemon/src/media/index.ts`
+ * `renderVolcengineImage` — see `source-map.md`.
+ *
+ * The response shape (`{ data: [{ b64_json | url }] }`) matches OpenAI's
+ * images API, so this routes through `openai-compatible.ts`'s already-
+ * ported URL-building/JSON-parsing/byte-extraction helpers rather than
+ * re-implementing them — same reasoning `grok.ts` already documents for
+ * the identical shape match.
+ *
+ * Unlike `grok.ts`, the origin does not sniff the downloaded bytes' magic
+ * number for `suggestedExt` here — Seedream/Seededit are documented to
+ * always return PNG, so the origin hardcodes `.png` and this port
+ * preserves that exactly rather than silently "upgrading" it to
+ * `sniffImageExt`.
+ *
+ * Also unlike `senseaudio.ts`/`aihubmix.ts` (ported alongside this batch),
+ * the origin's `entry.url` fallback download here is a plain `fetch`, not
+ * routed through `ssrf-guard.ts`'s `assertAndFetchExternalAsset` — this
+ * mirrors the real origin exactly (verified: `assertAndFetchExternalAsset`
+ * is only called from `renderSenseAudioImage`/`renderAIHubMixImage`/
+ * `renderAIHubMixVideo` in the actual source, never from
+ * `renderVolcengineImage`), not a gap this port introduced. Flagged here
+ * as a real asymmetry present in the origin itself, not silently smoothed
+ * over — the same asymmetry already exists for `openai.ts`/`grok.ts`'s own
+ * `entry.url` fallbacks, which are equally unguarded in the origin.
+ *
+ * A genuine origin quirk, preserved rather than "fixed": `openaiSizeFor`
+ * only special-cases `gpt-image-*`/`dall-e-3` catalog ids; every Volcengine
+ * catalog id (`doubao-seedream-*`/`doubao-seededit-*`) falls through to its
+ * default branch, so the request `size` is always `1024x1024` regardless of
+ * the requested aspect ratio. The origin's own inline comment flags this
+ * ("lefarcen + codex P2 on PR #1309") as a known review note rather than a
+ * silent bug, and calls `openaiSizeFor(ctx.model, ctx.aspect)` unchanged —
+ * this port keeps that exact call and behavior.
+ *
+ * 2026-07-21: migrated onto the generic vendor-adapter dispatch engine
+ * (`vendor-adapter.ts`/`vendor-registry.ts`). External behavior is
+ * unchanged (verified against `volcengine.test.ts`, which asserts
+ * URL/body/error-message/providerNote shape and passes unmodified) — only
+ * the internal implementation moved into a registered `VendorAdapter`. Not
+ * routed through `response-parsers.ts`'s factories — reuses
+ * `openai-compatible.ts`'s `parseOpenAICompatibleJson`/
+ * `bytesFromOpenAICompatibleData` helpers directly, same as before this
+ * pass (see `imagerouter.ts`'s module doc for the identical reasoning).
+ */
+import { buildOpenAIImageUrl, bytesFromOpenAICompatibleData, openaiSizeFor, parseOpenAICompatibleJson, withRequestInit } from '../openai-compatible.js';
+import { dispatchVendorRequest, requireApiKey } from '../vendor-adapter.js';
+import { mediaVendorRegistry } from '../vendor-registry.js';
+const NO_CREDENTIAL_MESSAGE = 'no Volcengine Ark credential — configure an API key or set ARK_API_KEY.';
+const volcengineImageAdapter = {
+    requireCredential: requireApiKey(NO_CREDENTIAL_MESSAGE),
+    buildRequest(ctx, credentials) {
+        const apiKey = credentials.apiKey; // requireCredential already validated this.
+        const baseUrl = (credentials.baseUrl || 'https://ark.cn-beijing.volces.com/api/v3').replace(/\/$/, '');
+        const body = {
+            model: ctx.wireModel,
+            prompt: ctx.prompt || 'A high-quality reference image.',
+            response_format: 'b64_json',
+            // openaiSizeFor branches on the catalog id (gpt-image-* vs dall-e-*
+            // accept different size enums), so it must see the pre-alias catalog
+            // model, not the post-alias wire name — matching `openai.ts`'s own
+            // `renderOpenAIImage` (which carries the same origin-code comment).
+            size: openaiSizeFor(ctx.model, ctx.aspect),
+        };
+        return {
+            url: buildOpenAIImageUrl(baseUrl, false),
+            init: withRequestInit(ctx, {
+                method: 'POST',
+                headers: {
+                    authorization: `Bearer ${apiKey}`,
+                    'content-type': 'application/json',
+                },
+                body: JSON.stringify(body),
+            }),
+            meta: undefined,
+        };
+    },
+    async parseResponse(resp, ctx) {
+        const data = await parseOpenAICompatibleJson(resp, 'volcengine image');
+        const bytes = await bytesFromOpenAICompatibleData(data, 'volcengine image', ctx.requestInit);
+        return {
+            bytes,
+            providerNote: `volcengine/${ctx.wireModel} · ${ctx.aspect} · ${bytes.length} bytes`,
+            suggestedExt: '.png',
+        };
+    },
+};
+mediaVendorRegistry.register('volcengine', 'image', volcengineImageAdapter);
+export async function renderVolcengineImage(ctx, credentials) {
+    return dispatchVendorRequest(volcengineImageAdapter, ctx, credentials);
+}
+//# sourceMappingURL=volcengine.js.map

package/dist/media-providers/dispatch/providers/volcengine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"volcengine.js","sourceRoot":"","sources":["../../../../src/media-providers/dispatch/providers/volcengine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,OAAO,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,aAAa,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAExJ,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,qBAAqB,GAAG,yEAAyE,CAAC;AAExG,MAAM,sBAAsB,GAAkB;IAC5C,iBAAiB,EAAE,aAAa,CAAC,qBAAqB,CAAC;IAEvD,YAAY,CAAC,GAAkB,EAAE,WAAgC;QAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,MAAO,CAAC,CAAC,4CAA4C;QAChF,MAAM,OAAO,GAAG,CAAC,WAAW,CAAC,OAAO,IAAI,0CAA0C,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACvG,MAAM,IAAI,GAA4B;YACpC,KAAK,EAAE,GAAG,CAAC,SAAS;YACpB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,iCAAiC;YACvD,eAAe,EAAE,UAAU;YAC3B,oEAAoE;YACpE,qEAAqE;YACrE,mEAAmE;YACnE,oEAAoE;YACpE,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC;SAC3C,CAAC;QAEF,OAAO;YACL,GAAG,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC;YACxC,IAAI,EAAE,eAAe,CAAC,GAAG,EAAE;gBACzB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,MAAM,EAAE;oBACjC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC;YACF,IAAI,EAAE,SAAS;SAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAc,EAAE,GAAkB;QACpD,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,6BAA6B,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAC7F,OAAO;YACL,KAAK;YACL,YAAY,EAAE,cAAc,GAAG,CAAC,SAAS,MAAM,GAAG,CAAC,MAAM,MAAM,KAAK,CAAC,MAAM,QAAQ;YACnF,YAAY,EAAE,MAAM;SACrB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,mBAAmB,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC;AAE5E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAkB,EAAE,WAAgC;IAC9F,OAAO,qBAAqB,CAAC,sBAAsB,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;AACzE,CAAC"}

package/dist/media-providers/dispatch/response-parsers.d.ts

@@ -0,0 +1,44 @@
+import type { VendorResponseParser } from './vendor-adapter.js';
+type Resolvable<T, Args extends readonly unknown[]> = T | ((...args: Args) => T);
+export interface RawBytesParserOptions<Meta> {
+    /** Used in the `${tag} ${status}: ${truncated body}` message thrown on a non-OK response. A function receives the request's `meta` (e.g. so a dynamically-computed azure/non-azure tag survives the port — see `providers/openai.ts`). */
+    readonly errorTag: Resolvable<string, [meta: Meta]>;
+    /** Thrown verbatim when the response body decodes to zero bytes. */
+    readonly zeroBytesMessage: Resolvable<string, [meta: Meta]>;
+    /** Builds the successful `RenderResult.providerNote`. */
+    readonly note: (bytes: Buffer, meta: Meta) => string;
+    /** The successful `RenderResult.suggestedExt`. */
+    readonly suggestedExt: Resolvable<string, [bytes: Buffer, meta: Meta]>;
+}
+/**
+ * A `VendorResponseParser` for vendors that return raw bytes directly (no
+ * JSON envelope): non-OK -> read text, throw a tagged/truncated error;
+ * otherwise read the full body as bytes, throw on zero bytes, else build a
+ * `RenderResult` via `note`/`suggestedExt`. This is the exact control flow
+ * `fishaudio.ts`'s `renderFishAudioTTS` and `openai.ts`'s
+ * `renderOpenAISpeech` each independently hand-wrote before this pass.
+ */
+export declare function createRawBytesParser<Meta = undefined>(options: RawBytesParserOptions<Meta>): VendorResponseParser<Meta>;
+/** The `meta` shape `createHexEnvelopeAudioParser` needs to build a `providerNote` — the resolved wire model id and voice id, both already computed by the adapter's `buildRequest`. */
+export interface HexEnvelopeAudioMeta {
+    readonly wireModel: string;
+    readonly voiceId: string;
+}
+export interface HexEnvelopeAudioParserOptions {
+    /** Used verbatim as the tag in every error this parser can throw (`${errorTag} ${status}: ...`, `${errorTag} non-JSON: ...`, `${errorTag} api error ...: ...`, `${errorTag} response missing data.audio`, `${errorTag} decoded zero bytes`) — e.g. `'minimax tts'` / `'senseaudio tts'`. */
+    readonly errorTag: string;
+    /** Used as the `providerNote`'s `<providerId>/<wireModel> · <voiceId> · <seconds>s · <bytes> bytes` prefix — e.g. `'minimax'` / `'senseaudio'`. */
+    readonly providerId: string;
+}
+/**
+ * A `VendorResponseParser` for vendors whose TTS response wraps hex-encoded
+ * audio inside a `base_resp`-enveloped JSON body (an HTTP 200 can still be
+ * a *logical* failure) — the exact shape MiniMax's and SenseAudio's TTS
+ * endpoints both independently return, verified identical (down to the
+ * literal error-message templates) by reading both origin renderers in
+ * full. `extra_info.audio_length` is centiseconds; `seconds` is `'?'` when
+ * absent, matching both vendors' own formatting.
+ */
+export declare function createHexEnvelopeAudioParser<Meta extends HexEnvelopeAudioMeta>(options: HexEnvelopeAudioParserOptions): VendorResponseParser<Meta>;
+export {};
+//# sourceMappingURL=response-parsers.d.ts.map

package/dist/media-providers/dispatch/response-parsers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-parsers.d.ts","sourceRoot":"","sources":["../../../src/media-providers/dispatch/response-parsers.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,KAAK,UAAU,CAAC,CAAC,EAAE,IAAI,SAAS,SAAS,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC;AAMjF,MAAM,WAAW,qBAAqB,CAAC,IAAI;IACzC,0OAA0O;IAC1O,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACpD,oEAAoE;IACpE,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5D,yDAAyD;IACzD,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC;IACrD,kDAAkD;IAClD,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;CACxE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,GAAG,SAAS,EAAE,OAAO,EAAE,qBAAqB,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAiBvH;AAED,wLAAwL;AACxL,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAQD,MAAM,WAAW,6BAA6B;IAC5C,4RAA4R;IAC5R,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,mJAAmJ;IACnJ,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,SAAS,oBAAoB,EAC5E,OAAO,EAAE,6BAA6B,GACrC,oBAAoB,CAAC,IAAI,CAAC,CA+B5B"}

package/dist/media-providers/dispatch/response-parsers.js

@@ -0,0 +1,103 @@
+/**
+ * Reusable `VendorResponseParser` factories for the two response shapes
+ * that genuinely repeat, byte-for-byte, across multiple already-ported
+ * vendors (verified by reading their real bodies — see `source-map.md`'s
+ * 2026-07-21 dispatch-engine-generalization section, not assumed from
+ * their doc comments alone):
+ *
+ * - `createRawBytesParser` — "POST JSON, get raw audio/image bytes back
+ *   directly (no envelope)" — used today by `providers/fishaudio.ts`'s
+ *   `renderFishAudioTTS` and `providers/openai.ts`'s `renderOpenAISpeech`.
+ *   xAI TTS (`grok.ts`'s `renderXAITTS`) and ElevenLabs's two renderers
+ *   have the identical shape and are natural future migrations onto this
+ *   same parser, not yet done this pass (see source-map.md for why).
+ * - `createHexEnvelopeAudioParser` — "POST JSON, get hex-encoded audio back
+ *   inside a `base_resp`-enveloped JSON body" — used today by
+ *   `providers/minimax.ts` and `providers/senseaudio.ts`'s TTS renderers,
+ *   which were verified (by reading both files in full) to share this
+ *   exact structure down to the literal error-message templates, modulo a
+ *   provider-tag string.
+ *
+ * Not every vendor's response shape fits either factory (e.g. OpenAI's own
+ * image response, whose non-JSON error message is NOT azure-tag-aware
+ * while its non-ok error message IS — see `providers/openai.ts`'s
+ * `parseOpenAIImageResponse` — or SenseAudio's image response, which needs
+ * a second SSRF-guarded fetch mid-parse). Those stay custom
+ * `VendorResponseParser` functions, which is the expected, legitimate
+ * outcome for a vendor whose wire shape doesn't actually match another
+ * vendor's — see this package's `vendor-adapter.ts` module doc for why
+ * `parseResponse` is a function, not a further declarative shape.
+ */
+import { truncate } from './openai-compatible.js';
+function resolve(value, args) {
+    return typeof value === 'function' ? value(...args) : value;
+}
+/**
+ * A `VendorResponseParser` for vendors that return raw bytes directly (no
+ * JSON envelope): non-OK -> read text, throw a tagged/truncated error;
+ * otherwise read the full body as bytes, throw on zero bytes, else build a
+ * `RenderResult` via `note`/`suggestedExt`. This is the exact control flow
+ * `fishaudio.ts`'s `renderFishAudioTTS` and `openai.ts`'s
+ * `renderOpenAISpeech` each independently hand-wrote before this pass.
+ */
+export function createRawBytesParser(options) {
+    return async (resp, _ctx, request) => {
+        if (!resp.ok) {
+            const text = await resp.text();
+            const tag = resolve(options.errorTag, [request.meta]);
+            throw new Error(`${tag} ${resp.status}: ${truncate(text, 240)}`);
+        }
+        const bytes = Buffer.from(await resp.arrayBuffer());
+        if (bytes.length === 0) {
+            throw new Error(resolve(options.zeroBytesMessage, [request.meta]));
+        }
+        return {
+            bytes,
+            providerNote: options.note(bytes, request.meta),
+            suggestedExt: resolve(options.suggestedExt, [bytes, request.meta]),
+        };
+    };
+}
+/**
+ * A `VendorResponseParser` for vendors whose TTS response wraps hex-encoded
+ * audio inside a `base_resp`-enveloped JSON body (an HTTP 200 can still be
+ * a *logical* failure) — the exact shape MiniMax's and SenseAudio's TTS
+ * endpoints both independently return, verified identical (down to the
+ * literal error-message templates) by reading both origin renderers in
+ * full. `extra_info.audio_length` is centiseconds; `seconds` is `'?'` when
+ * absent, matching both vendors' own formatting.
+ */
+export function createHexEnvelopeAudioParser(options) {
+    return async (resp, _ctx, request) => {
+        const respText = await resp.text();
+        if (!resp.ok) {
+            throw new Error(`${options.errorTag} ${resp.status}: ${truncate(respText, 240)}`);
+        }
+        let data;
+        try {
+            data = JSON.parse(respText);
+        }
+        catch {
+            throw new Error(`${options.errorTag} non-JSON: ${truncate(respText, 200)}`);
+        }
+        if (data.base_resp && data.base_resp.status_code !== 0) {
+            throw new Error(`${options.errorTag} api error ${data.base_resp.status_code}: ${data.base_resp.status_msg || 'unknown'}`);
+        }
+        const hex = data.data?.audio;
+        if (typeof hex !== 'string' || !hex) {
+            throw new Error(`${options.errorTag} response missing data.audio`);
+        }
+        const bytes = Buffer.from(hex, 'hex');
+        if (bytes.length === 0) {
+            throw new Error(`${options.errorTag} decoded zero bytes`);
+        }
+        const audioLength = data.extra_info?.audio_length;
+        const seconds = audioLength ? Math.round(audioLength / 100) / 10 : '?';
+        return {
+            bytes,
+            providerNote: `${options.providerId}/${request.meta.wireModel} · ${request.meta.voiceId} · ${seconds}s · ${bytes.length} bytes`,
+            suggestedExt: '.mp3',
+        };
+    };
+}
+//# sourceMappingURL=response-parsers.js.map

package/dist/media-providers/dispatch/response-parsers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-parsers.js","sourceRoot":"","sources":["../../../src/media-providers/dispatch/response-parsers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAKlD,SAAS,OAAO,CAAqC,KAA0B,EAAE,IAAU;IACzF,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAE,KAA8B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACxF,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAmB,OAAoC;IACzF,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QACnC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,OAAO;YACL,KAAK;YACL,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC;YAC/C,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;SACnE,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAqBD;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAsC;IAEtC,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,IAA8B,CAAC;QACnC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,QAAQ,cAAc,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,KAAK,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,QAAQ,cAAc,IAAI,CAAC,SAAS,CAAC,WAAW,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC,CAAC;QAC5H,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,QAAQ,8BAA8B,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC;QAClD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACvE,OAAO;YACL,KAAK;YACL,YAAY,EAAE,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,MAAM,OAAO,OAAO,KAAK,CAAC,MAAM,QAAQ;YAC/H,YAAY,EAAE,MAAM;SACrB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/media-providers/dispatch/ssrf-guard.d.ts

@@ -0,0 +1,51 @@
+export interface DnsLookupAddress {
+    readonly address: string;
+    readonly family: number;
+}
+export type DnsLookupFn = (hostname: string) => Promise<readonly DnsLookupAddress[]>;
+/** `localhost`, `::1`, `127.0.0.0/8`, and their IPv4-mapped-IPv6 equivalents — the carve-out for local providers (e.g. Ollama), consulted before the blocklist so loopback is never rejected as "internal". */
+export declare function isLoopbackApiHost(hostname: string): boolean;
+/** The unspecified address, RFC1918/CGNAT/link-local/multicast IPv4 (via `isBlockedIpv4`), unique-local (`fc00::/7`) and link-local (`fe80::/10`) IPv6, and their IPv4-mapped-IPv6 equivalents. */
+export declare function isBlockedExternalApiHostname(hostname: string): boolean;
+/**
+ * DNS-aware companion to the sync hostname check: resolves the hostname and
+ * re-runs the block-list against every address it actually resolves to, so
+ * a public DNS name pointing at internal infrastructure
+ * (`internal.example.com` -> `10.0.0.5`) can't slip through a hostname-only
+ * check. DNS lookup failures are not treated as a security signal — a
+ * transient resolver hiccup shouldn't turn into a false "blocked" result
+ * when `fetch` is about to surface its own connection error anyway; the
+ * sync check above already rejected the obvious literal-IP cases.
+ */
+export declare function validateBaseUrlResolved(baseUrl: string, lookup?: DnsLookupFn): Promise<{
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+    forbidden: boolean;
+}>;
+/**
+ * SSRF guard for asset URLs handed back inside a successful API response —
+ * typically a `data.url`/`data.video_url` pointing at the gateway's CDN,
+ * attacker-controllable when the upstream gateway is compromised or
+ * misconfigured. Returns a discriminated union so callers don't have to
+ * repeat the resolved-validation plumbing.
+ */
+export declare function assertExternalAssetUrl(rawUrl: string, lookup?: DnsLookupFn): Promise<{
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+}>;
+/**
+ * Validates an upstream-controlled asset URL and fetches it with the SSRF
+ * guard pinned through redirects: runs `assertExternalAssetUrl` on the
+ * literal URL, then forces `redirect: 'error'` so a validated public URL
+ * that 302s into loopback/RFC1918/metadata space is rejected before any
+ * bytes are read. Throws on a blocked host (so the redirect-bypass can't be
+ * forgotten at a call site); the forced `redirect` is spread last so it
+ * overrides any value the caller passed in `init`. Callers keep their own
+ * `!resp.ok` HTTP-status handling.
+ */
+export declare function assertAndFetchExternalAsset(url: string, init?: RequestInit, lookup?: DnsLookupFn): Promise<Response>;
+//# sourceMappingURL=ssrf-guard.d.ts.map

package/dist/media-providers/dispatch/ssrf-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf-guard.d.ts","sourceRoot":"","sources":["../../../src/media-providers/dispatch/ssrf-guard.ts"],"names":[],"mappings":"AAqCA,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAAC;AA4DrF,+MAA+M;AAC/M,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAM3D;AAED,mMAAmM;AACnM,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAQtE;AA4BD;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,WAA8B,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAyB/K;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,WAA8B,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAYzJ;AAED;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,EAAE,MAAM,GAAE,WAA8B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAKhJ"}

package/dist/media-providers/dispatch/ssrf-guard.js

@@ -0,0 +1,215 @@
+/**
+ * SSRF guard for asset URLs returned *inside* a provider's successful
+ * response body (e.g. SenseAudio image's `url`, AIHubMix image's
+ * `data[].url` fallback) — these are attacker-controllable whenever the
+ * upstream gateway is compromised or misconfigured, unlike a caller-
+ * configured `baseUrl`, which a host operator chose deliberately. Ported
+ * near-verbatim from Open Design's `apps/daemon/src/connectionTest.ts`
+ * (`assertAndFetchExternalAsset`/`assertExternalAssetUrl`/
+ * `validateBaseUrlResolved`) plus the sync hostname classifiers from
+ * `packages/contracts/src/api/connectionTest.ts` (`isLoopbackApiHost`/
+ * `isBlockedExternalApiHostname`/`validateBaseUrl`) — see `source-map.md`.
+ *
+ * Scope note: the origin's `validateBaseUrlResolved` also accepts an
+ * operator-declared `allowedInternalHosts` allowlist
+ * (`ValidateBaseUrlOptions`/`isAllowlistedInternalHost`, fed from an
+ * `OD_ALLOWED_INTERNAL_HOSTS`-style env var) — but that allowlist is used
+ * ONLY by a *different* exported function, `validateUserProviderBaseUrl`,
+ * for base URLs a host operator deliberately configured. The origin's own
+ * doc comment on `validateUserProviderBaseUrl` states the allowlist is for
+ * "user-configured endpoints" and warns it must never reach "the
+ * attacker-controllable asset-download SSRF guard" — i.e. never this
+ * module's call path. Proof, not assumption: `assertExternalAssetUrl` calls
+ * `validateBaseUrlResolved(rawUrl)` with no options argument, so
+ * `allowedInternalHosts` is always `undefined` here, and
+ * `isAllowlistedInternalHost` returns `false` unconditionally whenever its
+ * `allowedInternalHosts` argument is empty/absent (its own first line is
+ * `if (!allowedInternalHosts || allowedInternalHosts.length === 0) return
+ * false;`) — so the allowlist branch is provably dead code on this call
+ * path and is not ported. This module implements only the strict,
+ * non-configurable variant the asset-download path actually uses; a host
+ * that wants an operator-configurable internal-host allowlist for its own
+ * *user-supplied* base URLs (a different feature, not exercised by any
+ * vendor ported into this package) would need to build that separately.
+ */
+import { promises as dnsPromises } from 'node:dns';
+import { FETCH_TIMEOUT_MS, fetchWithTimeout } from '@jini-ai/platform';
+const defaultDnsLookup = async (hostname) => {
+    const result = await dnsPromises.lookup(hostname, { all: true, family: 0 });
+    return result.map(({ address, family }) => ({ address, family }));
+};
+/** Strips IPv6 brackets, lowercases, and drops a trailing-dot FQDN suffix (RFC 1034) so `Localhost.`/`[::1]` compare equal to their canonical forms. */
+function normalizeBracketedIpv6(hostname) {
+    const stripped = hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname;
+    return stripped.toLowerCase().replace(/\.+$/, '');
+}
+function parseIpv4(hostname) {
+    const parts = hostname.split('.');
+    if (parts.length !== 4)
+        return null;
+    const parsed = parts.map((part) => {
+        if (!/^\d{1,3}$/.test(part))
+            return null;
+        const value = Number(part);
+        return value >= 0 && value <= 255 ? value : null;
+    });
+    if (parsed.some((part) => part === null))
+        return null;
+    return parsed;
+}
+function isLoopbackIpv4(hostname) {
+    const parts = parseIpv4(hostname);
+    return Boolean(parts && parts[0] === 127);
+}
+/** `0.0.0.0`, CGNAT (100.64/10), link-local (169.254/16), RFC1918 private ranges, and multicast/reserved (>= 224.0.0.0). */
+function isBlockedIpv4(hostname) {
+    const parts = parseIpv4(hostname);
+    if (!parts)
+        return false;
+    const [a, b] = parts;
+    return a === 0 || (a === 100 && b >= 64 && b <= 127) || (a === 169 && b === 254) || a === 10 || (a === 192 && b === 168) || (a === 172 && b >= 16 && b <= 31) || a >= 224;
+}
+/** Recovers the dotted-quad IPv4 address from an IPv4-mapped IPv6 literal (`::ffff:a.b.c.d` or `::ffff:HHHH:HHHH`), or `null` if `hostname` isn't one. */
+function ipv4MappedToDotted(hostname) {
+    const host = normalizeBracketedIpv6(hostname);
+    const mapped = /^::ffff:(.+)$/i.exec(host)?.[1];
+    if (!mapped)
+        return null;
+    if (parseIpv4(mapped.toLowerCase()))
+        return mapped.toLowerCase();
+    const hexParts = mapped.split(':');
+    if (hexParts.length !== 2 || !hexParts.every((part) => /^[0-9a-f]{1,4}$/i.test(part))) {
+        return null;
+    }
+    // hexParts.length === 2 is already proven above, and the `.every(...)`
+    // regex above already requires each element to be a non-empty 1-4-digit
+    // hex string — so hexParts[0]/[1] can never be `undefined` here despite
+    // noUncheckedIndexedAccess's static `string | undefined` type. Asserted
+    // rather than re-guarded with a dead runtime check, matching this
+    // package's established convention (see `engine.ts`'s `allowed[0]!`).
+    const hi = hexParts[0];
+    const lo = hexParts[1];
+    const value = (Number.parseInt(hi, 16) << 16) | Number.parseInt(lo, 16);
+    return [(value >>> 24) & 255, (value >>> 16) & 255, (value >>> 8) & 255, value & 255].join('.');
+}
+/** `localhost`, `::1`, `127.0.0.0/8`, and their IPv4-mapped-IPv6 equivalents — the carve-out for local providers (e.g. Ollama), consulted before the blocklist so loopback is never rejected as "internal". */
+export function isLoopbackApiHost(hostname) {
+    const host = normalizeBracketedIpv6(hostname);
+    if (host === 'localhost' || host === '::1')
+        return true;
+    if (isLoopbackIpv4(host))
+        return true;
+    const mapped = ipv4MappedToDotted(host);
+    return Boolean(mapped && isLoopbackIpv4(mapped));
+}
+/** The unspecified address, RFC1918/CGNAT/link-local/multicast IPv4 (via `isBlockedIpv4`), unique-local (`fc00::/7`) and link-local (`fe80::/10`) IPv6, and their IPv4-mapped-IPv6 equivalents. */
+export function isBlockedExternalApiHostname(hostname) {
+    const host = normalizeBracketedIpv6(hostname);
+    if (host === '::')
+        return true;
+    if (isBlockedIpv4(host))
+        return true;
+    if (/^f[cd][0-9a-f]{2}:/i.test(host))
+        return true;
+    if (/^fe[89ab][0-9a-f]:/i.test(host))
+        return true;
+    const mapped = ipv4MappedToDotted(host);
+    return Boolean(mapped && isBlockedIpv4(mapped));
+}
+/** Whether `hostname` is already a literal IPv4/IPv6 address (as opposed to a DNS name) — skips the DNS-resolve step in `validateBaseUrlResolved` since there's nothing further to resolve. */
+function looksLikeIpLiteral(hostname) {
+    const host = hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname;
+    if (/^\d{1,3}(?:\.\d{1,3}){3}$/.test(host))
+        return true;
+    return host.includes(':');
+}
+function validateBaseUrlSync(baseUrl) {
+    let parsed;
+    try {
+        parsed = new URL(String(baseUrl).replace(/\/+$/, ''));
+    }
+    catch {
+        return { ok: false, error: 'Invalid baseUrl', forbidden: false };
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        return { ok: false, error: 'Only http/https allowed', forbidden: false };
+    }
+    const hostname = parsed.hostname.toLowerCase();
+    if (!isLoopbackApiHost(hostname) && isBlockedExternalApiHostname(hostname)) {
+        return { ok: false, error: 'Internal IPs blocked', forbidden: true };
+    }
+    return { ok: true, parsed };
+}
+/**
+ * DNS-aware companion to the sync hostname check: resolves the hostname and
+ * re-runs the block-list against every address it actually resolves to, so
+ * a public DNS name pointing at internal infrastructure
+ * (`internal.example.com` -> `10.0.0.5`) can't slip through a hostname-only
+ * check. DNS lookup failures are not treated as a security signal — a
+ * transient resolver hiccup shouldn't turn into a false "blocked" result
+ * when `fetch` is about to surface its own connection error anyway; the
+ * sync check above already rejected the obvious literal-IP cases.
+ */
+export async function validateBaseUrlResolved(baseUrl, lookup = defaultDnsLookup) {
+    const sync = validateBaseUrlSync(baseUrl);
+    if (!sync.ok)
+        return sync;
+    const hostname = sync.parsed.hostname.toLowerCase();
+    if (isLoopbackApiHost(hostname) || looksLikeIpLiteral(hostname)) {
+        return { ok: true };
+    }
+    let addresses;
+    try {
+        addresses = await lookup(hostname);
+    }
+    catch {
+        return { ok: true };
+    }
+    for (const addr of addresses) {
+        const ip = String(addr.address).toLowerCase();
+        if (isLoopbackApiHost(ip))
+            continue;
+        if (isBlockedExternalApiHostname(ip)) {
+            return { ok: false, error: 'Internal IPs blocked', forbidden: true };
+        }
+    }
+    return { ok: true };
+}
+/**
+ * SSRF guard for asset URLs handed back inside a successful API response —
+ * typically a `data.url`/`data.video_url` pointing at the gateway's CDN,
+ * attacker-controllable when the upstream gateway is compromised or
+ * misconfigured. Returns a discriminated union so callers don't have to
+ * repeat the resolved-validation plumbing.
+ */
+export async function assertExternalAssetUrl(rawUrl, lookup = defaultDnsLookup) {
+    if (typeof rawUrl !== 'string' || !rawUrl) {
+        return { ok: false, error: 'empty download url' };
+    }
+    const validated = await validateBaseUrlResolved(rawUrl, lookup);
+    if (!validated.ok) {
+        return {
+            ok: false,
+            error: validated.forbidden ? `blocked download url (${validated.error})` : `invalid download url: ${validated.error}`,
+        };
+    }
+    return { ok: true };
+}
+/**
+ * Validates an upstream-controlled asset URL and fetches it with the SSRF
+ * guard pinned through redirects: runs `assertExternalAssetUrl` on the
+ * literal URL, then forces `redirect: 'error'` so a validated public URL
+ * that 302s into loopback/RFC1918/metadata space is rejected before any
+ * bytes are read. Throws on a blocked host (so the redirect-bypass can't be
+ * forgotten at a call site); the forced `redirect` is spread last so it
+ * overrides any value the caller passed in `init`. Callers keep their own
+ * `!resp.ok` HTTP-status handling.
+ */
+export async function assertAndFetchExternalAsset(url, init = {}, lookup = defaultDnsLookup) {
+    const check = await assertExternalAssetUrl(url, lookup);
+    if (!check.ok)
+        throw new Error(check.error);
+    // Downloading an already-generated asset, not waiting on generation — UPLOAD-class (2min).
+    return fetchWithTimeout(url, { ...init, redirect: 'error' }, { timeoutMs: FETCH_TIMEOUT_MS.UPLOAD });
+}
+//# sourceMappingURL=ssrf-guard.js.map

package/dist/media-providers/dispatch/ssrf-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf-guard.js","sourceRoot":"","sources":["../../../src/media-providers/dispatch/ssrf-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AASvE,MAAM,gBAAgB,GAAgB,KAAK,EAAE,QAAQ,EAAE,EAAE;IACvD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF,wJAAwJ;AACxJ,SAAS,sBAAsB,CAAC,QAAgB;IAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvG,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAChC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,MAA0C,CAAC;AACpD,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,OAAO,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED,4HAA4H;AAC5H,SAAS,aAAa,CAAC,QAAgB;IACrC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;IACrB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;AAC5K,CAAC;AAED,0JAA0J;AAC1J,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,IAAI,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC;IACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACtF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,kEAAkE;IAClE,sEAAsE;IACtE,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IACxB,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IACxB,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,GAAG,EAAE,KAAK,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClG,CAAC;AAED,+MAA+M;AAC/M,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,IAAI,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,mMAAmM;AACnM,MAAM,UAAU,4BAA4B,CAAC,QAAgB;IAC3D,MAAM,IAAI,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,+LAA+L;AAC/L,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACnG,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAID,SAAS,mBAAmB,CAAC,OAAe;IAC1C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,4BAA4B,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAe,EAAE,SAAsB,gBAAgB;IACnG,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpD,IAAI,iBAAiB,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,IAAI,SAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,iBAAiB,CAAC,EAAE,CAAC;YAAE,SAAS;QACpC,IAAI,4BAA4B,CAAC,EAAE,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAc,EAAE,SAAsB,gBAAgB;IACjG,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,yBAAyB,SAAS,CAAC,KAAK,EAAE;SACtH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,GAAW,EAAE,OAAoB,EAAE,EAAE,SAAsB,gBAAgB;IAC3H,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,2FAA2F;IAC3F,OAAO,gBAAgB,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;AACvG,CAAC"}

package/dist/media-providers/dispatch/stub.d.ts

@@ -0,0 +1,5 @@
+import type { RenderContext, RenderResult } from './types.js';
+export declare function renderStub(ctx: RenderContext, providerId: string, integrated: boolean): Promise<RenderResult>;
+/** Renders a labelled placeholder SVG for the image surface (an explicit opt-in alternative to the PNG placeholder). */
+export declare function svgPlaceholder(ctx: RenderContext): string;
+//# sourceMappingURL=stub.d.ts.map

package/dist/media-providers/dispatch/stub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stub.d.ts","sourceRoot":"","sources":["../../../src/media-providers/dispatch/stub.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE9D,wBAAsB,UAAU,CAAC,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAyCnH;AAED,wHAAwH;AACxH,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAazD"}