@jini-ai/platform 0.1.0

package/dist/blob-storage.d.ts

@@ -0,0 +1,89 @@
+import { type SigV4Credentials } from './aws-sigv4.js';
+/** Metadata for a single stored blob. */
+export interface BlobFileMeta {
+    /** Path relative to the namespace root. Always uses forward slashes. */
+    path: string;
+    /** Total size in bytes. */
+    size: number;
+    /** Unix epoch milliseconds of last modification. */
+    mtimeMs: number;
+}
+/** The narrow contract every blob storage backend implements. */
+export interface BlobStorage {
+    /** Reads `<namespace>/<relpath>` into a Buffer. Throws a `StorageError('NOT_FOUND', ...)` when missing. */
+    readFile(namespace: string, relpath: string): Promise<Buffer>;
+    /** Writes `<namespace>/<relpath>`, creating parent directories/prefixes as needed. */
+    writeFile(namespace: string, relpath: string, body: Buffer): Promise<BlobFileMeta>;
+    /**
+     * Lists every file under `<namespace>/` recursively. The order is implementation-defined;
+     * callers that need deterministic order sort by `path`.
+     */
+    listFiles(namespace: string): Promise<BlobFileMeta[]>;
+    /** Deletes a single file under `<namespace>/`. Idempotent — missing files do not throw. */
+    deleteFile(namespace: string, relpath: string): Promise<void>;
+    /** Reports metadata for a single file without reading its bytes. Returns `null` when missing. */
+    statFile(namespace: string, relpath: string): Promise<BlobFileMeta | null>;
+}
+/** Error thrown by {@link BlobStorage} implementations, distinguishing not-found/traversal/IO failures. */
+export declare class StorageError extends Error {
+    readonly code: 'NOT_FOUND' | 'TRAVERSAL' | 'IO';
+    constructor(code: 'NOT_FOUND' | 'TRAVERSAL' | 'IO', message: string);
+}
+/**
+ * The local-disk default backend — a thin `fs/promises` wrapper rooted at a caller-supplied
+ * directory, with a traversal guard so a hostile `namespace`/`relpath` can never escape it.
+ */
+export declare class LocalBlobStorage implements BlobStorage {
+    private readonly root;
+    constructor(root: string);
+    readFile(namespace: string, relpath: string): Promise<Buffer>;
+    writeFile(namespace: string, relpath: string, body: Buffer): Promise<BlobFileMeta>;
+    listFiles(namespace: string): Promise<BlobFileMeta[]>;
+    deleteFile(namespace: string, relpath: string): Promise<void>;
+    statFile(namespace: string, relpath: string): Promise<BlobFileMeta | null>;
+    private resolvePath;
+}
+/**
+ * An S3-compatible blob backend. Signs requests inline with AWS SigV4 (see `./aws-sigv4.js`)
+ * using only `node:crypto` — no `@aws-sdk/*` dependency — targeting AWS S3 and any
+ * S3-compatible endpoint (MinIO, Aliyun OSS, Tencent COS, Huawei OBS, ...).
+ *
+ * Five operations:
+ *   readFile   → GET    /<key>
+ *   writeFile  → PUT    /<key>          (with x-amz-content-sha256)
+ *   deleteFile → DELETE /<key>
+ *   statFile   → HEAD   /<key>
+ *   listFiles  → GET    /?list-type=2&prefix=<namespace>/...
+ *
+ * Network is pluggable: pass `fetchFn` in the constructor (tests inject a stub; production
+ * defaults to `globalThis.fetch`).
+ */
+export interface S3BlobStorageOptions {
+    bucket: string;
+    region: string;
+    /** Optional path prefix inside the bucket. Lets multiple deployments share one bucket. */
+    prefix?: string;
+    /** S3-compatible endpoint URL (MinIO, Aliyun OSS, Tencent COS, Huawei OBS). Omit for AWS S3. */
+    endpoint?: string;
+    /** AWS access credentials. Callers typically resolve these from their own env/secret-manager convention. */
+    credentials: SigV4Credentials;
+    /** Pluggable fetch for tests. Defaults to `globalThis.fetch`. */
+    fetchFn?: typeof fetch;
+    /** Override for clock — tests pin signatures with this. Production leaves it undefined (`signSigV4` falls back to `new Date()`). */
+    now?: () => Date;
+}
+export declare class S3BlobStorage implements BlobStorage {
+    readonly options: S3BlobStorageOptions;
+    private readonly fetchFn;
+    constructor(options: S3BlobStorageOptions);
+    readFile(namespace: string, relpath: string): Promise<Buffer>;
+    writeFile(namespace: string, relpath: string, body: Buffer): Promise<BlobFileMeta>;
+    deleteFile(namespace: string, relpath: string): Promise<void>;
+    statFile(namespace: string, relpath: string): Promise<BlobFileMeta | null>;
+    listFiles(namespace: string): Promise<BlobFileMeta[]>;
+    /** Builds the canonical S3 key the impl uses. Exposed for tests so the prefix/namespace/relpath join is stable. */
+    keyFor(namespace: string, relpath: string): string;
+    private endpointBase;
+    private signedRequest;
+}
+//# sourceMappingURL=blob-storage.d.ts.map

package/dist/blob-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-storage.d.ts","sourceRoot":"","sources":["../src/blob-storage.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAkC,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvF,yCAAyC;AACzC,MAAM,WAAW,YAAY;IAC3B,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,2GAA2G;IAC3G,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,sFAAsF;IACtF,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACnF;;;OAGG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACtD,2FAA2F;IAC3F,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,iGAAiG;IACjG,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CAC5E;AAED,2GAA2G;AAC3G,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,GAAG,IAAI,CAAC;gBACpC,IAAI,EAAE,WAAW,GAAG,WAAW,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM;CAKpE;AAED;;;GAGG;AACH,qBAAa,gBAAiB,YAAW,WAAW;IACtC,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,MAAM;IAEnC,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAW7D,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAQlF,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IA4BrD,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS7D,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAWhF,OAAO,CAAC,WAAW;CAWpB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gGAAgG;IAChG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4GAA4G;IAC5G,WAAW,EAAE,gBAAgB,CAAC;IAC9B,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,oIAAoI;IACpI,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,qBAAa,aAAc,YAAW,WAAW;aAEnB,OAAO,EAAE,oBAAoB;IADzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;gBACX,OAAO,EAAE,oBAAoB;IAUnD,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAQ7D,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAOlF,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS7D,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAc1E,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAmC3D,mHAAmH;IACnH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAclD,OAAO,CAAC,YAAY;YAKN,aAAa;CAsC5B"}

package/dist/blob-storage.js

@@ -0,0 +1,315 @@
+/**
+ * @module blob-storage
+ *
+ * A narrow, backend-agnostic blob storage port — `readFile`/`writeFile`/`listFiles`/
+ * `deleteFile`/`statFile` scoped under an opaque `namespace` string — plus two
+ * implementations: {@link LocalBlobStorage} (the local-disk default) and
+ * {@link S3BlobStorage} (an S3-compatible backend: AWS S3, and any endpoint-compatible
+ * store such as MinIO, Aliyun OSS, Tencent COS, or Huawei OBS, signed inline via
+ * `./aws-sigv4.js`).
+ *
+ * `namespace` is deliberately opaque here — a top-level grouping key (a tenant id, a
+ * workspace id, a project id, whatever the host application scopes storage by) — this
+ * module carries no domain meaning for what a namespace *is*, only that paths are
+ * grouped and traversal-guarded underneath one.
+ */
+import path from 'node:path';
+import { promises as fsp } from 'node:fs';
+import { encodeS3PathSegment, signSigV4 } from './aws-sigv4.js';
+/** Error thrown by {@link BlobStorage} implementations, distinguishing not-found/traversal/IO failures. */
+export class StorageError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'StorageError';
+    }
+}
+/**
+ * The local-disk default backend — a thin `fs/promises` wrapper rooted at a caller-supplied
+ * directory, with a traversal guard so a hostile `namespace`/`relpath` can never escape it.
+ */
+export class LocalBlobStorage {
+    root;
+    constructor(root) {
+        this.root = root;
+    }
+    async readFile(namespace, relpath) {
+        const abs = this.resolvePath(namespace, relpath);
+        try {
+            return await fsp.readFile(abs);
+        }
+        catch (err) {
+            const e = err;
+            if (e.code === 'ENOENT')
+                throw new StorageError('NOT_FOUND', `${namespace}/${relpath} not found`);
+            throw new StorageError('IO', `read failed: ${e.message}`);
+        }
+    }
+    async writeFile(namespace, relpath, body) {
+        const abs = this.resolvePath(namespace, relpath);
+        await fsp.mkdir(path.dirname(abs), { recursive: true });
+        await fsp.writeFile(abs, body);
+        const stat = await fsp.stat(abs);
+        return { path: normalizeRel(relpath), size: stat.size, mtimeMs: stat.mtimeMs };
+    }
+    async listFiles(namespace) {
+        const root = path.join(this.root, namespace);
+        const out = [];
+        const queue = [root];
+        while (queue.length > 0) {
+            const dir = queue.pop();
+            let entries;
+            try {
+                entries = await fsp.readdir(dir, { withFileTypes: true });
+            }
+            catch (err) {
+                if (err.code === 'ENOENT')
+                    return [];
+                throw new StorageError('IO', `list failed: ${err.message}`);
+            }
+            for (const entry of entries) {
+                const abs = path.join(dir, entry.name);
+                if (entry.isDirectory()) {
+                    queue.push(abs);
+                    continue;
+                }
+                if (!entry.isFile())
+                    continue;
+                const stat = await fsp.stat(abs);
+                const rel = path.relative(root, abs).split(path.sep).join('/');
+                out.push({ path: rel, size: stat.size, mtimeMs: stat.mtimeMs });
+            }
+        }
+        return out;
+    }
+    async deleteFile(namespace, relpath) {
+        const abs = this.resolvePath(namespace, relpath);
+        try {
+            await fsp.rm(abs, { force: true });
+        }
+        catch (err) {
+            throw new StorageError('IO', `delete failed: ${err.message}`);
+        }
+    }
+    async statFile(namespace, relpath) {
+        const abs = this.resolvePath(namespace, relpath);
+        try {
+            const stat = await fsp.stat(abs);
+            if (!stat.isFile())
+                return null;
+            return { path: normalizeRel(relpath), size: stat.size, mtimeMs: stat.mtimeMs };
+        }
+        catch {
+            return null;
+        }
+    }
+    resolvePath(namespace, relpath) {
+        if (!namespace || namespace.includes('/') || namespace.includes('\\') || namespace.includes('\0') || namespace.includes('..')) {
+            throw new StorageError('TRAVERSAL', `invalid namespace ${namespace}`);
+        }
+        const normalized = normalizeRel(relpath);
+        if (!normalized)
+            throw new StorageError('TRAVERSAL', 'empty relpath');
+        if (normalized.split('/').some((seg) => seg === '..' || seg === '.')) {
+            throw new StorageError('TRAVERSAL', `unsafe relpath ${relpath}`);
+        }
+        return path.join(this.root, namespace, ...normalized.split('/'));
+    }
+}
+export class S3BlobStorage {
+    options;
+    fetchFn;
+    constructor(options) {
+        this.options = options;
+        if (!options.bucket)
+            throw new StorageError('IO', 'S3BlobStorage requires a bucket');
+        if (!options.region)
+            throw new StorageError('IO', 'S3BlobStorage requires a region');
+        if (!options.credentials?.accessKeyId)
+            throw new StorageError('IO', 'S3BlobStorage requires credentials.accessKeyId');
+        if (!options.credentials?.secretAccessKey)
+            throw new StorageError('IO', 'S3BlobStorage requires credentials.secretAccessKey');
+        const fn = options.fetchFn ?? globalThis.fetch;
+        if (!fn)
+            throw new StorageError('IO', 'S3BlobStorage requires a fetch implementation');
+        this.fetchFn = fn;
+    }
+    async readFile(namespace, relpath) {
+        const key = this.keyFor(namespace, relpath);
+        const res = await this.signedRequest({ method: 'GET', key });
+        if (res.status === 404)
+            throw new StorageError('NOT_FOUND', `${namespace}/${relpath} not found`);
+        if (!res.ok)
+            throw new StorageError('IO', `S3 GET ${key} → ${res.status} ${res.statusText}: ${await safeText(res)}`);
+        return Buffer.from(await res.arrayBuffer());
+    }
+    async writeFile(namespace, relpath, body) {
+        const key = this.keyFor(namespace, relpath);
+        const res = await this.signedRequest({ method: 'PUT', key, body });
+        if (!res.ok)
+            throw new StorageError('IO', `S3 PUT ${key} → ${res.status} ${res.statusText}: ${await safeText(res)}`);
+        return { path: normalizeRel(relpath), size: body.byteLength, mtimeMs: Date.now() };
+    }
+    async deleteFile(namespace, relpath) {
+        const key = this.keyFor(namespace, relpath);
+        const res = await this.signedRequest({ method: 'DELETE', key });
+        // S3 returns 204 on successful delete; idempotent if missing.
+        if (!res.ok && res.status !== 404) {
+            throw new StorageError('IO', `S3 DELETE ${key} → ${res.status} ${res.statusText}: ${await safeText(res)}`);
+        }
+    }
+    async statFile(namespace, relpath) {
+        const key = this.keyFor(namespace, relpath);
+        const res = await this.signedRequest({ method: 'HEAD', key });
+        if (res.status === 404)
+            return null;
+        if (!res.ok)
+            throw new StorageError('IO', `S3 HEAD ${key} → ${res.status} ${res.statusText}`);
+        const contentLength = Number(res.headers.get('content-length') ?? '0');
+        const lastModified = res.headers.get('last-modified');
+        return {
+            path: normalizeRel(relpath),
+            size: Number.isFinite(contentLength) ? contentLength : 0,
+            mtimeMs: lastModified ? Date.parse(lastModified) : Date.now(),
+        };
+    }
+    async listFiles(namespace) {
+        const namespacePrefix = this.keyFor(namespace, '');
+        const out = [];
+        let continuationToken;
+        // Cap iterations so a hostile bucket can't loop forever.
+        for (let pages = 0; pages < 1000; pages++) {
+            const params = [
+                ['list-type', '2'],
+                ['prefix', namespacePrefix],
+            ];
+            if (continuationToken)
+                params.push(['continuation-token', continuationToken]);
+            params.sort((a, b) => a[0].localeCompare(b[0]));
+            const query = params.map(([k, v]) => `${encodeURIComponent(k)}=${encodeURIComponent(v)}`).join('&');
+            const res = await this.signedRequest({ method: 'GET', key: '', extraQuery: query });
+            if (!res.ok) {
+                throw new StorageError('IO', `S3 LIST ${namespacePrefix} → ${res.status} ${res.statusText}: ${await safeText(res)}`);
+            }
+            const xml = await res.text();
+            const { entries, isTruncated, nextToken } = parseListBucketV2Xml(xml);
+            for (const e of entries) {
+                // Strip the per-bucket namespacePrefix to surface namespace-relative paths.
+                // `namespacePrefix` is `keyFor(namespace, '')`, which always includes at least the
+                // (non-empty, `keyFor`-validated) namespace segment and never a trailing slash — so it's
+                // always non-empty and the +1 separator always applies.
+                const relStart = namespacePrefix.length + 1;
+                const rel = e.key.slice(relStart).replace(/^\/+/, '');
+                if (!rel)
+                    continue; // skip the prefix marker itself
+                out.push({ path: rel, size: e.size, mtimeMs: e.lastModifiedMs });
+            }
+            if (!isTruncated || !nextToken)
+                break;
+            continuationToken = nextToken;
+        }
+        return out;
+    }
+    /** Builds the canonical S3 key the impl uses. Exposed for tests so the prefix/namespace/relpath join is stable. */
+    keyFor(namespace, relpath) {
+        if (!namespace || namespace.includes('/') || namespace.includes('\\') || namespace.includes('..')) {
+            throw new StorageError('TRAVERSAL', `invalid namespace ${namespace}`);
+        }
+        const normalized = relpath ? normalizeRel(relpath) : '';
+        if (normalized.split('/').some((seg) => seg === '..' || seg === '.')) {
+            throw new StorageError('TRAVERSAL', `unsafe relpath ${relpath}`);
+        }
+        const segments = [this.options.prefix?.replace(/^\/+|\/+$/g, ''), namespace, normalized].filter((s) => typeof s === 'string' && s.length > 0);
+        return segments.join('/');
+    }
+    endpointBase() {
+        if (this.options.endpoint)
+            return this.options.endpoint.replace(/\/+$/, '');
+        return `https://${this.options.bucket}.s3.${this.options.region}.amazonaws.com`;
+    }
+    async signedRequest(args) {
+        const base = this.endpointBase();
+        const baseHost = new URL(base).host;
+        // Path-style for endpoint overrides (typical for S3-compat services + MinIO test setups);
+        // virtual-host-style when endpoint is omitted (default AWS S3).
+        let pathSegment;
+        const host = baseHost;
+        if (this.options.endpoint) {
+            const segments = [this.options.bucket, ...args.key.split('/').filter(Boolean).map(encodeS3PathSegment)];
+            pathSegment = '/' + segments.join('/');
+        }
+        else {
+            const segments = args.key.split('/').filter(Boolean).map(encodeS3PathSegment);
+            pathSegment = segments.length === 0 ? '/' : '/' + segments.join('/');
+        }
+        const headers = { host };
+        const body = args.body ?? Buffer.alloc(0);
+        const now = this.options.now ? this.options.now() : new Date();
+        signSigV4({
+            method: args.method,
+            path: pathSegment,
+            query: args.extraQuery ?? '',
+            headers,
+            body,
+            region: this.options.region,
+            service: 's3',
+            credentials: this.options.credentials,
+            now,
+        });
+        const url = `${base.replace(/\/+$/, '')}${pathSegment}${args.extraQuery ? `?${args.extraQuery}` : ''}`;
+        const init = {
+            method: args.method,
+            headers,
+            ...(args.body ? { body: args.body } : {}),
+        };
+        return this.fetchFn(url, init);
+    }
+}
+function parseListBucketV2Xml(xml) {
+    const entries = [];
+    // Lightweight XML scrape — accepts S3 / S3-compat shapes:
+    //   <Contents><Key>...</Key><LastModified>2026-...</LastModified><Size>1234</Size></Contents>
+    // and a single <NextContinuationToken>...</NextContinuationToken> and <IsTruncated>true|false</IsTruncated>.
+    const contentsRe = /<Contents\b[^>]*>([\s\S]*?)<\/Contents>/g;
+    let m;
+    while ((m = contentsRe.exec(xml)) !== null) {
+        // `contentsRe`'s one capturing group is mandatory (not `(...)?`), so a successful `.exec()`
+        // always populates it — TypeScript's `RegExpExecArray` types every group as possibly
+        // `undefined` regardless, so this is a type-checker-only fallback with no real runtime path.
+        const block = m[1];
+        const key = pluckTag(block, 'Key');
+        const size = Number(pluckTag(block, 'Size') ?? '0');
+        const lastModifiedRaw = pluckTag(block, 'LastModified');
+        if (!key)
+            continue;
+        entries.push({
+            key,
+            size: Number.isFinite(size) ? size : 0,
+            lastModifiedMs: lastModifiedRaw ? Date.parse(lastModifiedRaw) : Date.now(),
+        });
+    }
+    const isTruncated = (pluckTag(xml, 'IsTruncated') ?? 'false').toLowerCase() === 'true';
+    const nextToken = pluckTag(xml, 'NextContinuationToken') ?? undefined;
+    return nextToken ? { entries, isTruncated, nextToken } : { entries, isTruncated };
+}
+function pluckTag(text, tag) {
+    const re = new RegExp(`<${tag}[^>]*>([\\s\\S]*?)<\\/${tag}>`);
+    const m = re.exec(text);
+    return m ? m[1] : undefined;
+}
+async function safeText(res) {
+    try {
+        return (await res.text()).slice(0, 256);
+    }
+    catch {
+        return '';
+    }
+}
+function normalizeRel(relpath) {
+    return String(relpath || '')
+        .replace(/^[\\/]+/, '')
+        .replace(/[\\]+/g, '/')
+        .replace(/\/+/g, '/');
+}
+//# sourceMappingURL=blob-storage.js.map

package/dist/blob-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-storage.js","sourceRoot":"","sources":["../src/blob-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAyB,MAAM,gBAAgB,CAAC;AA6BvF,2GAA2G;AAC3G,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmC;IAChD,YAAY,IAAsC,EAAE,OAAe;QACjE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACE;IAA7B,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7C,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,OAAe;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAA4B,CAAC;YACvC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,GAAG,SAAS,IAAI,OAAO,YAAY,CAAC,CAAC;YAClG,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,OAAe,EAAE,IAAY;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAmB,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;YACzB,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,EAAE,CAAC;gBAChE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,gBAAiB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBACxB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAChB,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;oBAAE,SAAS;gBAC9B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC/D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,OAAe;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,OAAe;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;YAChC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACjF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,SAAiB,EAAE,OAAe;QACpD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9H,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,qBAAqB,SAAS,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QACtE,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,kBAAkB,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,CAAC;CACF;AAgCD,MAAM,OAAO,aAAa;IAEI;IADX,OAAO,CAAe;IACvC,YAA4B,OAA6B;QAA7B,YAAO,GAAP,OAAO,CAAsB;QACvD,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW;YAAE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,gDAAgD,CAAC,CAAC;QACtH,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,eAAe;YAAE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,oDAAoD,CAAC,CAAC;QAC9H,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC;QAC/C,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,+CAA+C,CAAC,CAAC;QACvF,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,OAAe;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,GAAG,SAAS,IAAI,OAAO,YAAY,CAAC,CAAC;QACjG,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrH,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,OAAe,EAAE,IAAY;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrH,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,OAAe;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QAChE,8DAA8D;QAC9D,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAClC,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,OAAe;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9F,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACtD,OAAO;YACL,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC;YAC3B,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACxD,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;SAC9D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,GAAG,GAAmB,EAAE,CAAC;QAC/B,IAAI,iBAAqC,CAAC;QAC1C,yDAAyD;QACzD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC1C,MAAM,MAAM,GAA4B;gBACtC,CAAC,WAAW,EAAE,GAAG,CAAC;gBAClB,CAAC,QAAQ,EAAE,eAAe,CAAC;aAC5B,CAAC;YACF,IAAI,iBAAiB;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC9E,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpG,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,WAAW,eAAe,MAAM,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvH,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACtE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,4EAA4E;gBAC5E,mFAAmF;gBACnF,yFAAyF;gBACzF,wDAAwD;gBACxD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC5C,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACtD,IAAI,CAAC,GAAG;oBAAE,SAAS,CAAC,gCAAgC;gBACpD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS;gBAAE,MAAM;YACtC,iBAAiB,GAAG,SAAS,CAAC;QAChC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mHAAmH;IACnH,MAAM,CAAC,SAAiB,EAAE,OAAe;QACvC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClG,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,qBAAqB,SAAS,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,kBAAkB,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,MAAM,CAC7F,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAC1D,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5E,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,MAAM,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,gBAAgB,CAAC;IAClF,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAyE;QACnG,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QACpC,0FAA0F;QAC1F,gEAAgE;QAChE,IAAI,WAAmB,CAAC;QACxB,MAAM,IAAI,GAAG,QAAQ,CAAC;QACtB,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACxG,WAAW,GAAG,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YAC9E,WAAW,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,IAAI,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAC/D,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;YAC5B,OAAO;YACP,IAAI;YACJ,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACrC,GAAG;SACJ,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACvG,MAAM,IAAI,GAAgB;YACxB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO;YACP,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;CACF;AAQD,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,0DAA0D;IAC1D,8FAA8F;IAC9F,6GAA6G;IAC7G,MAAM,UAAU,GAAG,0CAA0C,CAAC;IAC9D,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3C,4FAA4F;QAC5F,qFAAqF;QACrF,6FAA6F;QAC7F,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACpB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;QACpD,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,OAAO,CAAC,IAAI,CAAC;YACX,GAAG;YACH,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;SAC3E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;IACvF,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC,IAAI,SAAS,CAAC;IACtE,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAW;IACzC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,yBAAyB,GAAG,GAAG,CAAC,CAAC;IAC9D,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;SACzB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC"}

package/dist/command.d.ts

@@ -0,0 +1,32 @@
+export type CommandInvocation = {
+    args: string[];
+    command: string;
+    windowsVerbatimArguments?: boolean;
+};
+export type CommandInvocationRequest = {
+    args?: string[];
+    command: string;
+    env?: NodeJS.ProcessEnv;
+};
+/**
+ * Resolve a command request into the concrete invocation to spawn. On Windows,
+ * `.bat` / `.cmd` targets are rewrapped as a `cmd.exe /d /s /c "..."` shim with
+ * `windowsVerbatimArguments` so quoting and percent-expansion behave safely;
+ * every other case passes the command and args straight through.
+ *
+ * @param request - The command, optional args, and env to base the invocation on.
+ * @returns The `{ command, args }` (plus `windowsVerbatimArguments` when a shim is used) to spawn.
+ */
+export declare function createCommandInvocation({ args, command, env }: CommandInvocationRequest): CommandInvocation;
+/**
+ * Build the invocation for re-entering the repo-pinned package manager. Prefers
+ * `npm_execpath` (routing Node-loadable managers through `process.execPath`),
+ * and otherwise falls back to `corepack pnpm …` so Corepack-only setups without
+ * a global `pnpm` on PATH still work. See #2438.
+ *
+ * @param args - Arguments to pass to the package manager.
+ * @param env - Environment to read `npm_execpath` / `ComSpec` from (defaults to `process.env`).
+ * @returns The `{ command, args }` invocation that runs the package manager.
+ */
+export declare function createPackageManagerInvocation(args: string[], env?: NodeJS.ProcessEnv): CommandInvocation;
+//# sourceMappingURL=command.d.ts.map

package/dist/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAKhB,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,CAAC;AA+CF;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,IAAS,EAAE,OAAO,EAAE,GAAiB,EAAE,EAAE,wBAAwB,GAAG,iBAAiB,CAK9H;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,CAkBtH"}

package/dist/command.js

@@ -0,0 +1,101 @@
+/**
+ * @module command
+ *
+ * Cross-platform command-invocation construction. Turns a requested
+ * `{ command, args, env }` into the concrete `{ command, args }` (plus the
+ * Windows-only `windowsVerbatimArguments` flag) that `child_process.spawn` /
+ * `execFile` must receive so `.bat` / `.cmd` shims and Corepack-only package
+ * managers launch correctly on every platform.
+ *
+ * Consumed by the `process` module's spawn helpers; owns no process lifecycle
+ * itself.
+ */
+import { extname } from "node:path";
+// `cmd.exe /s /c "..."` runs percent-expansion on the inner line *regardless*
+// of whether the `%name%` pair sits inside a `"..."` quoted segment, so a
+// `.cmd` / `.bat` shim spawn with an attacker-influenced argv (e.g. an LLM
+// adapter that ships the user prompt as a positional argument) lets a stray
+// `%DEEPSEEK_API_KEY%` substring substitute live env values into the line
+// before the child sees it. Plain quote-doubling is not enough on its own.
+//
+// The fix is to break each potential `%var%` pair by toggling out of the
+// outer quote with `"^%"`: cmd treats the `^` as the standard escape for the
+// next char (here, `%`), making it literal and skipping percent-expansion;
+// `CommandLineToArgvW` then concatenates the surrounding quote segments back
+// into one literal arg with the `%` preserved. The two layers cancel, so the
+// child receives the original arg byte-for-byte while cmd never has a chance
+// to expand anything inside it.
+function quoteWindowsCommandArg(value) {
+    if (!/[\s"&<>|^%]/.test(value))
+        return value;
+    const escaped = value.replace(/"/g, '""').replace(/%/g, '"^%"');
+    return `"${escaped}"`;
+}
+// Build the `cmd.exe /d /s /c "<line>"` invocation Node uses internally for
+// `shell: true`. The outer `"..."` plus `windowsVerbatimArguments: true` is
+// the only shape that survives both layers of quoting:
+//
+// 1. Node would otherwise escape each argv element with CommandLineToArgvW
+//    rules (turning `"path with space"` into `\"path with space\"`), which
+//    cmd.exe does not understand.
+// 2. cmd.exe with `/s /c` strips exactly one leading and one trailing `"`
+//    from the rest of the command line. The outer wrap absorbs that strip
+//    so any inner per-arg quoting stays intact.
+//
+// Without this, paths containing spaces (`C:\Users\First Last\...\foo.cmd`)
+// get split on the first space and cmd.exe reports "not recognized as an
+// internal or external command" — see issue #315.
+function buildCmdShimInvocation(command, args, env) {
+    const inner = [command, ...args].map(quoteWindowsCommandArg).join(" ");
+    return {
+        args: ["/d", "/s", "/c", `"${inner}"`],
+        command: env.ComSpec ?? process.env.ComSpec ?? "cmd.exe",
+        windowsVerbatimArguments: true,
+    };
+}
+const nodeLoadablePackageManagerExtensions = new Set([".js", ".cjs", ".mjs"]);
+/**
+ * Resolve a command request into the concrete invocation to spawn. On Windows,
+ * `.bat` / `.cmd` targets are rewrapped as a `cmd.exe /d /s /c "..."` shim with
+ * `windowsVerbatimArguments` so quoting and percent-expansion behave safely;
+ * every other case passes the command and args straight through.
+ *
+ * @param request - The command, optional args, and env to base the invocation on.
+ * @returns The `{ command, args }` (plus `windowsVerbatimArguments` when a shim is used) to spawn.
+ */
+export function createCommandInvocation({ args = [], command, env = process.env }) {
+    if (process.platform === "win32" && /\.(bat|cmd)$/i.test(command)) {
+        return buildCmdShimInvocation(command, args, env);
+    }
+    return { args, command };
+}
+/**
+ * Build the invocation for re-entering the repo-pinned package manager. Prefers
+ * `npm_execpath` (routing Node-loadable managers through `process.execPath`),
+ * and otherwise falls back to `corepack pnpm …` so Corepack-only setups without
+ * a global `pnpm` on PATH still work. See #2438.
+ *
+ * @param args - Arguments to pass to the package manager.
+ * @param env - Environment to read `npm_execpath` / `ComSpec` from (defaults to `process.env`).
+ * @returns The `{ command, args }` invocation that runs the package manager.
+ */
+export function createPackageManagerInvocation(args, env = process.env) {
+    const execPath = env.npm_execpath;
+    if (execPath) {
+        if (nodeLoadablePackageManagerExtensions.has(extname(execPath).toLowerCase())) {
+            return { args: [execPath, ...args], command: process.execPath };
+        }
+        return createCommandInvocation({ args, command: execPath, env });
+    }
+    // No `npm_execpath` — common on Corepack-only setups (e.g. native Windows
+    // PowerShell where `corepack pnpm` works but no standalone `pnpm` lives on
+    // PATH). Route nested invocations through `corepack pnpm …` instead of
+    // assuming a global `pnpm` binary: `corepack pnpm …` runs the repo-pinned
+    // package manager out of the box, while a bare `pnpm` only resolves when a
+    // separate global install or a `corepack enable` shim is present. See #2438.
+    if (process.platform === "win32") {
+        return buildCmdShimInvocation("corepack", ["pnpm", ...args], env);
+    }
+    return { args: ["pnpm", ...args], command: "corepack" };
+}
+//# sourceMappingURL=command.js.map

package/dist/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkBpC,8EAA8E;AAC9E,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,yEAAyE;AACzE,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,gCAAgC;AAChC,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChE,OAAO,IAAI,OAAO,GAAG,CAAC;AACxB,CAAC;AAED,4EAA4E;AAC5E,4EAA4E;AAC5E,uDAAuD;AACvD,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,kCAAkC;AAClC,0EAA0E;AAC1E,0EAA0E;AAC1E,gDAAgD;AAChD,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,kDAAkD;AAClD,SAAS,sBAAsB,CAAC,OAAe,EAAE,IAAc,EAAE,GAAsB;IACrF,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvE,OAAO;QACL,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,KAAK,GAAG,CAAC;QACtC,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS;QACxD,wBAAwB,EAAE,IAAI;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,oCAAoC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9E;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAA4B;IACzG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,OAAO,sBAAsB,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B,CAAC,IAAc,EAAE,MAAyB,OAAO,CAAC,GAAG;IACjG,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC;IAClC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,oCAAoC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC9E,OAAO,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QAClE,CAAC;QACD,OAAO,uBAAuB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,sBAAsB,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AAC1D,CAAC"}