@mieweb/pulsevault 0.0.2 → 0.1.0

package/augment.d.ts

@@ -0,0 +1 @@
+export * from "./dist/augment.js";

package/augment.js

@@ -0,0 +1,3 @@
+// Legacy-resolver fallback for the "./augment" subpath export — see core.js
+// for why this file exists.
+export * from "./dist/augment.js";

package/core.d.ts

@@ -0,0 +1 @@
+export * from "./dist/core.js";

package/core.js

@@ -0,0 +1,7 @@
+// Legacy-resolver fallback for the "./core" subpath export. Modern
+// Node/bundlers resolve "@mieweb/pulsevault/core" via package.json's
+// "exports" map straight to dist/core.js and never reach this file — it
+// exists only for resolvers that don't understand "exports" subpath maps
+// (e.g. Meteor's bundler as of Meteor 3.4 / modules@0.20.3), which fall back
+// to plain relative-path resolution and need a real file at this path.
+export * from "./dist/core.js";

package/dist/app.d.ts

@@ -1,8 +1,8 @@
-import type { FastifyPluginAsync } from "fastify";
-import { type PulseVaultAuthorize } from "./routes/pulsevault.js";
-import type { PulseVaultOnUploadComplete } from "./lib/pulsevaultTus.js";
-import type { PulseVaultValidatePayload } from "./lib/magic.js";
-import type { PulseVaultStorage } from "./storage/types.js";
+import type { FastifyPluginAsync } from 'fastify';
+import { type PulseVaultAuthorize } from './routes/pulsevault.js';
+import type { PulseVaultOnUploadComplete, PulseVaultOnArtifactEvent } from './lib/pulsevaultTus.js';
+import type { PulseVaultValidatePayload } from './lib/magic.js';
+import type { PulseVaultStorage } from './storage/types.js';
 /**
  * Subset of `@fastify/send`'s cache-related options forwarded to the GET
  * route. All upload filenames are content-addressable (keyed by the upload
@@ -39,6 +39,14 @@ export type PulseVaultPluginOptions = {
      * explicit cap for their deployment. Use `Infinity` for no cap.
      */
     maxUploadSize: number;
+    /**
+     * Which upload strategy this deployment expects: `"beat"` uploads each
+     * clip individually (no client-side merge/re-encode pass) plus a manifest
+     * artifact for ordering, while `"merged"` expects one pre-merged video per
+     * pulse. Purely advertised via `GET /capabilities` for the client to branch
+     * on — `pulsevault` doesn't enforce either. Defaults to `"beat"`.
+     */
+    uploadUnit?: 'beat' | 'merged';
     /**
      * Fastify instance decorator name under which the storage adapter is
      * exposed. Defaults to `"pulseVault"`. Override when registering this
@@ -53,10 +61,21 @@ export type PulseVaultPluginOptions = {
      */
     decoratorName?: string;
     /**
-     * File extensions allowed in the upload `filename` metadata. Must include
-     * the leading dot; matched case-insensitively. Defaults to `[".mp4"]`.
+     * File extensions allowed per artifact kind. Accepts:
+     * - A flat array (`[".mp4"]`) — treated as video-only; project/captions
+     *   default. This is the legacy form for back-compat.
+     * - An object with optional `video`/`project`/`captions` keys; unset keys
+     *   fall back to their defaults.
+     * - Omitted entirely — defaults to
+     *   `{ video: [".mp4"], project: [".pulse", ".zip"], captions: [".srt"] }`.
+     *
+     * All extensions must include the leading dot and are matched case-insensitively.
      */
-    allowedExtensions?: readonly string[];
+    allowedExtensions?: readonly string[] | {
+        video?: readonly string[];
+        project?: readonly string[];
+        captions?: readonly string[];
+    };
     /**
      * Cache-control options forwarded to `@fastify/send` for the GET route.
      * When omitted, `@fastify/send`'s defaults apply (`Cache-Control: public,
@@ -68,47 +87,84 @@ export type PulseVaultPluginOptions = {
      * and before `resolve` on GET. Throw to reject the request; a thrown
      * `statusCode`/`status_code` number on the error is honored (default 403).
      *
-     * The hook is called with the `FastifyRequest`, so consumers can look up
-     * sessions, API keys, JWTs, etc. using whatever auth system they have
-     * registered higher up in the Fastify tree.
+     * The hook is called with the actual `FastifyRequest` (typed more loosely
+     * as `PulseVaultRequest` — the shared shape this option also uses under
+     * `@mieweb/pulsevault/core` — since only `.headers` is guaranteed; cast if
+     * you need Fastify-specific fields), so consumers can look up sessions,
+     * API keys, JWTs, etc. using whatever auth system they have registered
+     * higher up in the Fastify tree. Use `createCapabilityAuthorize` (from
+     * `./lib/capability-token.js`) for a secure-by-default option that doesn't
+     * require writing your own.
      *
      * When omitted, the plugin performs no authorization. For production
      * deployments you almost certainly want to set this — register your auth
      * plugin on the parent scope and let the hook verify ownership of the
-     * `videoid` before any bytes are written.
+     * `artifactId` before any bytes are written.
      */
     authorize?: PulseVaultAuthorize;
     /**
-     * Optional payload-validation hook. Runs *after* TUS writes the final byte
-     * but *before* the upload is marked ready or `onUploadComplete` fires.
-     * Throw to reject — the plugin will call `storage.remove` to free the
-     * bytes and return a 4xx (default 422) to the client. The sidecar never
-     * flips to `"ready"`, so the video is never served.
+     * Optional payload-validation hook, called for every artifact kind with
+     * `ctx.kind` set accordingly. Runs *after* TUS writes the final byte but
+     * *before* the upload is marked ready or `onUploadComplete` fires. Throw to
+     * reject — the plugin will call `storage.remove` to free the bytes and
+     * return a 4xx (default 422) to the client. The sidecar never flips to
+     * `"ready"`, so the artifact is never served.
      *
-     * Use this for magic-byte sniffing, virus scanning, or any check that
-     * needs the final bytes. Ship-ready helpers are exported from this
-     * package — see `createMp4Sniffer`.
+     * Use this for magic-byte sniffing, checksum verification, virus scanning,
+     * or any check that needs the final bytes. Ship-ready helpers are exported
+     * from this package — see `createMp4Sniffer`, `createChecksumValidator`.
      */
     validatePayload?: PulseVaultValidatePayload;
     /**
-     * Optional post-upload hook. Fires once TUS writes the final byte *and*
+     * Optional post-upload hook, fired once TUS writes the final byte *and*
      * any `validatePayload` has passed, and after the adapter's `markReady`
-     * has run. Use this to flip consumer state (DB row, queue job, audit
-     * log). Throwing turns the upload into a 500 response; the video is
-     * marked ready at this point, so consumers that want all-or-nothing
-     * semantics should `storage.remove` before throwing.
+     * has run — for every artifact kind, with `ctx.kind` set accordingly. Use
+     * this to flip consumer state (DB row, queue job, audit log). Throwing
+     * turns the upload into a 500 response; the artifact is marked ready at
+     * this point, so consumers that want all-or-nothing semantics should
+     * `storage.remove` before throwing.
      */
     onUploadComplete?: PulseVaultOnUploadComplete;
+    /**
+     * Optional low-frequency event hook — fired on authorize rejection (create
+     * phase and delete/resolve, never per-chunk patch), upload completion, and
+     * payload-validation rejection. One hook covers both ops metrics and a
+     * compliance audit trail; see `OPERATIONS.md` for wiring examples.
+     */
+    onArtifactEvent?: PulseVaultOnArtifactEvent;
+    /**
+     * @deprecated Use `validatePayload` instead — it now receives `ctx.kind`
+     * and runs for every artifact kind, including `"project"`. Still honored
+     * this release (mapped onto `validatePayload` when `kind === "project"`),
+     * but will be removed in a future major version. Passing this triggers a
+     * one-time `DeprecationWarning` at registration.
+     */
+    validateProjectPayload?: PulseVaultValidatePayload;
+    /**
+     * @deprecated Use `onUploadComplete` instead — it now receives `ctx.kind`
+     * and runs for every artifact kind, including `"project"`. Still honored
+     * this release (mapped onto `onUploadComplete` when `kind === "project"`),
+     * but will be removed in a future major version. Passing this triggers a
+     * one-time `DeprecationWarning` at registration.
+     */
+    onProjectUploadComplete?: PulseVaultOnUploadComplete;
 };
 declare const _default: FastifyPluginAsync<PulseVaultPluginOptions>;
 export default _default;
-export { createLocalStorage } from "./storage/local.js";
-export type { LocalStorage, LocalStorageOptions } from "./storage/local.js";
-export type { PulseVaultResolution, PulseVaultStorage, ReserveUploadParams, } from "./storage/types.js";
-export type { PulseVaultAuthorize, PulseVaultAuthorizeContext, PulseVaultAuthorizePhase, } from "./routes/pulsevault.js";
-export type { PulseVaultOnUploadComplete } from "./lib/pulsevaultTus.js";
-export { sniffMp4, createMp4Sniffer } from "./lib/magic.js";
-export type { PulseVaultValidatePayload } from "./lib/magic.js";
-export { buildConfigureDestinationLink, buildUploadLink, } from "./lib/deeplinks.js";
-export type { ConfigureDestinationLinkOptions, UploadLinkOptions, } from "./lib/deeplinks.js";
+export { createLocalStorage } from './storage/local.js';
+export type { LocalStorage, LocalStorageOptions } from './storage/local.js';
+export { createS3Storage } from './storage/s3.js';
+export type { S3Storage, S3StorageOptions } from './storage/s3.js';
+export type { PulseVaultResolution, PulseVaultStorage, ReserveUploadParams, UploadKind, } from './storage/types.js';
+export type { PulseVaultAuthorize, PulseVaultAuthorizeContext, PulseVaultAuthorizePhase, } from './routes/pulsevault.js';
+export type { PulseVaultOnUploadComplete, PulseVaultOnArtifactEvent, PulseVaultArtifactEvent, } from './lib/pulsevaultTus.js';
+export { sniffMp4, createMp4Sniffer, createS3Mp4Sniffer } from './lib/magic.js';
+export type { PulseVaultValidatePayload } from './lib/magic.js';
+export { buildUploadLink } from './lib/deeplinks.js';
+export type { UploadLinkOptions } from './lib/deeplinks.js';
+export { issueCapabilityToken, verifyCapabilityToken, createCapabilityAuthorize, } from './lib/capability-token.js';
+export type { CapabilityTokenClaims, IssueCapabilityTokenOptions, VerifyCapabilityTokenOptions, LookupSecret, } from './lib/capability-token.js';
+export { createChecksumValidator, createS3ChecksumValidator, parseChecksumMetadata, } from './lib/checksum.js';
+export type { ChecksumAlgorithm, ParsedChecksum } from './lib/checksum.js';
+export type { PulseVaultRequest, PulseVaultLogger } from './lib/request.js';
 //# sourceMappingURL=app.d.ts.map

package/dist/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,OAAyB,EACvB,KAAK,mBAAmB,EAGzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,sEAAsE;IACtE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,wFAAwF;IACxF,OAAO,EAAE,iBAAiB,CAAC;IAC3B;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;;OAIG;IACH,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAC5C;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;CAC/C,CAAC;;AAgEF,wBAGG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,YAAY,EACV,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,YAAY,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EACL,6BAA6B,EAC7B,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,+BAA+B,EAC/B,iBAAiB,GAClB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,OAAyB,EAAE,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,KAAK,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAY5D;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,sEAAsE;IACtE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,wFAAwF;IACxF,OAAO,EAAE,iBAAiB,CAAC;IAC3B;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC/B;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,EACd,SAAS,MAAM,EAAE,GACjB;QAAE,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IAC7F;;;;OAIG;IACH,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAC5C;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;IAC9C;;;;;OAKG;IACH,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAC5C;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,yBAAyB,CAAC;IACnD;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,0BAA0B,CAAC;CACtD,CAAC;;AAsCF,wBAGG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnE,YAAY,EACV,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,GACX,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,0BAA0B,EAC1B,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAChF,YAAY,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,EAC5B,YAAY,GACb,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC3E,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/app.js

@@ -1,54 +1,44 @@
-import fp from "fastify-plugin";
-import pulseVaultRoutes, {} from "./routes/pulsevault.js";
-const DEFAULT_DECORATOR_NAME = "pulseVault";
-const DEFAULT_ALLOWED_EXTENSIONS = [".mp4"];
-const EXTENSION_REGEX = /^\.[^.\s/\\]+$/;
-function validateOptions(opts) {
-    if (opts.prefix !== "" && (!opts.prefix.startsWith("/") || opts.prefix.endsWith("/"))) {
-        throw new TypeError("`prefix` must be '' or start with '/' with no trailing slash (e.g. '/pulsevault')");
-    }
-    if (!(opts.maxUploadSize > 0)) {
-        throw new TypeError("`maxUploadSize` must be a positive number (use Infinity for no cap)");
-    }
-    if (opts.allowedExtensions) {
-        if (opts.allowedExtensions.length === 0) {
-            throw new TypeError("`allowedExtensions` must not be empty");
-        }
-        for (const ext of opts.allowedExtensions) {
-            if (!EXTENSION_REGEX.test(ext)) {
-                throw new TypeError(`\`allowedExtensions\` entry ${JSON.stringify(ext)} must start with '.' and contain no nested dots, slashes, or whitespace (e.g. '.mp4')`);
-            }
-        }
-    }
-}
+import fp from 'fastify-plugin';
+import pulseVaultRoutes, {} from './routes/pulsevault.js';
+import { normalizeAllowedExtensions, validateBasePath, validateMaxUploadSize, validateUploadUnit, validateAllowedExtensions, warnIfUsingDeprecatedProjectHooks, composeValidatePayload, composeOnUploadComplete, } from './lib/options.js';
+const DEFAULT_DECORATOR_NAME = 'pulseVault';
 const app = async (fastify, opts) => {
-    validateOptions(opts);
+    validateBasePath(opts.prefix, 'prefix');
+    validateMaxUploadSize(opts.maxUploadSize);
+    validateUploadUnit(opts.uploadUnit);
+    validateAllowedExtensions(opts.allowedExtensions);
+    warnIfUsingDeprecatedProjectHooks(opts);
     // Register the shutdown hook *before* awaiting initialize() so any partial
     // state the adapter allocates mid-init still gets cleaned up if Fastify
     // later tears the plugin down.
-    fastify.addHook("onClose", async () => {
+    fastify.addHook('onClose', async () => {
         await opts.storage.shutdown?.();
     });
     await opts.storage.initialize?.();
     const decoratorName = opts.decoratorName ?? DEFAULT_DECORATOR_NAME;
-    const allowedExtensions = (opts.allowedExtensions ?? DEFAULT_ALLOWED_EXTENSIONS).map((e) => e.toLowerCase());
+    const allowedExtensions = normalizeAllowedExtensions(opts.allowedExtensions);
     fastify.decorate(decoratorName, opts.storage);
     await fastify.register(pulseVaultRoutes, {
         prefix: opts.prefix,
         storage: opts.storage,
         maxUploadSize: opts.maxUploadSize,
+        uploadUnit: opts.uploadUnit ?? 'beat',
         allowedExtensions,
         cache: opts.cache,
         authorize: opts.authorize,
-        validatePayload: opts.validatePayload,
-        onUploadComplete: opts.onUploadComplete,
+        validatePayload: composeValidatePayload(opts.validatePayload, opts.validateProjectPayload),
+        onUploadComplete: composeOnUploadComplete(opts.onUploadComplete, opts.onProjectUploadComplete),
+        onArtifactEvent: opts.onArtifactEvent,
     });
 };
 export default fp(app, {
-    name: "pulsevault",
-    fastify: "5.x",
+    name: 'pulsevault',
+    fastify: '5.x',
 });
-export { createLocalStorage } from "./storage/local.js";
-export { sniffMp4, createMp4Sniffer } from "./lib/magic.js";
-export { buildConfigureDestinationLink, buildUploadLink, } from "./lib/deeplinks.js";
+export { createLocalStorage } from './storage/local.js';
+export { createS3Storage } from './storage/s3.js';
+export { sniffMp4, createMp4Sniffer, createS3Mp4Sniffer } from './lib/magic.js';
+export { buildUploadLink } from './lib/deeplinks.js';
+export { issueCapabilityToken, verifyCapabilityToken, createCapabilityAuthorize, } from './lib/capability-token.js';
+export { createChecksumValidator, createS3ChecksumValidator, parseChecksumMetadata, } from './lib/checksum.js';
 //# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAChC,OAAO,gBAAgB,EAAE,EAIxB,MAAM,wBAAwB,CAAC;AAwGhC,MAAM,sBAAsB,GAAG,YAAY,CAAC;AAC5C,MAAM,0BAA0B,GAAsB,CAAC,MAAM,CAAC,CAAC;AAC/D,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEzC,SAAS,eAAe,CAAC,IAA6B;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,SAAS,CACjB,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CACjB,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,SAAS,CACjB,+BAA+B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,uFAAuF,CAC1I,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,GAAG,GAAgD,KAAK,EAC5D,OAAO,EACP,IAAI,EACJ,EAAE;IACF,eAAe,CAAC,IAAI,CAAC,CAAC;IAEtB,2EAA2E;IAC3E,wEAAwE;IACxE,+BAA+B;IAC/B,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;IAElC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACnE,MAAM,iBAAiB,GAAG,CACxB,IAAI,CAAC,iBAAiB,IAAI,0BAA0B,CACrD,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAE9B,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAE9C,MAAM,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EAAE;QACvC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,iBAAiB;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,EAAE,CAAC,GAAG,EAAE;IACrB,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,KAAK;CACf,CAAC,CAAC;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAaxD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,EACL,6BAA6B,EAC7B,eAAe,GAChB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAChC,OAAO,gBAAgB,EAAE,EAA4B,MAAM,wBAAwB,CAAC;AAIpF,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,yBAAyB,EACzB,iCAAiC,EACjC,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAoJ1B,MAAM,sBAAsB,GAAG,YAAY,CAAC;AAE5C,MAAM,GAAG,GAAgD,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IAC/E,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACxC,qBAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1C,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpC,yBAAyB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAClD,iCAAiC,CAAC,IAAI,CAAC,CAAC;IAExC,2EAA2E;IAC3E,wEAAwE;IACxE,+BAA+B;IAC/B,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;IAElC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACnE,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAE7E,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAE9C,MAAM,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EAAE;QACvC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,MAAM;QACrC,iBAAiB;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,eAAe,EAAE,sBAAsB,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,sBAAsB,CAAC;QAC1F,gBAAgB,EAAE,uBAAuB,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,uBAAuB,CAAC;QAC9F,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,EAAE,CAAC,GAAG,EAAE;IACrB,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,KAAK;CACf,CAAC,CAAC;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAkBlD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEhF,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AAOnC,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC"}

package/dist/augment.d.ts

@@ -1,9 +1,9 @@
-import type { PulseVaultStorage } from "./storage/types.js";
+import type { PulseVaultStorage, UploadKind } from './storage/types.js';
 /**
  * Opt-in TypeScript augmentation for the default `pulseVault` decorator and
  * the per-request `request.pulseVault` context that the plugin sets when it
- * recognizes a videoid on the incoming request. Import for side effects in
- * one place in your app when you register the plugin with the default
+ * recognizes an artifactId on the incoming request. Import for side effects
+ * in one place in your app when you register the plugin with the default
  * `decoratorName`:
  *
  * ```ts
@@ -19,25 +19,32 @@ import type { PulseVaultStorage } from "./storage/types.js";
  *     myCustomName: PulseVaultStorage;
  *   }
  *   interface FastifyRequest {
- *     pulseVault?: { videoid: string };
+ *     pulseVault?: { artifactId: string };
  *   }
  * }
  * ```
+ *
+ * **Breaking change**: this field was named `videoid` before this release.
+ * It's renamed to `artifactId` here as a deliberate, separate breaking change
+ * from the wire-format rename — update any code reading
+ * `request.pulseVault.videoid` to `request.pulseVault.artifactId`.
  */
-declare module "fastify" {
+declare module 'fastify' {
     interface FastifyInstance {
         pulseVault: PulseVaultStorage;
     }
     interface FastifyRequest {
         /**
-         * Populated by the plugin when it can extract a videoid from the
+         * Populated by the plugin when it can extract an artifactId from the
          * incoming request (from `Upload-Metadata` on POST, the URL id on
          * PATCH/HEAD/DELETE, or the route param on GET). Present on every
          * request the plugin routes serve that refer to a valid UUID — use it
          * from your own `preHandler` / auth hooks to avoid re-parsing.
          */
         pulseVault?: {
-            videoid: string;
+            artifactId: string;
+            kind: UploadKind;
+            relatedTo?: string;
         };
     }
 }

package/dist/augment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"augment.d.ts","sourceRoot":"","sources":["../src/augment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,UAAU,EAAE,iBAAiB,CAAC;KAC/B;IACD,UAAU,cAAc;QACtB;;;;;;WAMG;QACH,UAAU,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;KAClC;CACF;AAED,OAAO,EAAE,CAAC"}
+{"version":3,"file":"augment.d.ts","sourceRoot":"","sources":["../src/augment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,UAAU,EAAE,iBAAiB,CAAC;KAC/B;IACD,UAAU,cAAc;QACtB;;;;;;WAMG;QACH,UAAU,CAAC,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,UAAU,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3E;CACF;AAED,OAAO,EAAE,CAAC"}

package/dist/augment.js.map

@@ -1 +1 @@
-{"version":3,"file":"augment.js","sourceRoot":"","sources":["../src/augment.ts"],"names":[],"mappings":"AA2CA,OAAO,EAAE,CAAC"}
+{"version":3,"file":"augment.js","sourceRoot":"","sources":["../src/augment.ts"],"names":[],"mappings":"AAgDA,OAAO,EAAE,CAAC"}

package/dist/core.d.ts

@@ -0,0 +1,108 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { type PulseVaultOnUploadComplete, type PulseVaultOnArtifactEvent } from './lib/pulsevaultTus.js';
+import type { PulseVaultValidatePayload } from './lib/magic.js';
+import type { PulseVaultAuthorize } from './lib/authorize.js';
+import { type PulseVaultLogger } from './lib/request.js';
+import type { PulseVaultStorage } from './storage/types.js';
+import { type PulseVaultAllowedExtensionsInput } from './lib/options.js';
+/** Wire protocol version this release implements. See `/capabilities` and `PROTOCOL.md`. */
+export declare const PROTOCOL_VERSION = 1;
+export type PulseVaultCoreCacheOptions = {
+    cacheControl?: boolean;
+    maxAge?: string | number;
+    immutable?: boolean;
+};
+export type PulseVaultCoreOptions = {
+    /** Storage adapter. Use `createLocalStorage(...)` for filesystem-backed deployments. */
+    storage: PulseVaultStorage;
+    /**
+     * URL path prefix where the core's routes are mounted, e.g. `"/pulsevault"`.
+     * Use `""` to mount at the root. Unlike the Fastify plugin, there's no
+     * framework-level prefix mechanism to lean on here — the core needs this
+     * explicitly to compute the tus base path and to strip it from incoming
+     * request URLs.
+     */
+    basePath: string;
+    /**
+     * Whether `handler` should itself match/strip `basePath` from incoming
+     * request URLs. Defaults to `true` — correct for a raw
+     * `http.createServer` callback, or any host that hands `handler` the
+     * request's full, unmodified URL (unmatched paths 404). Set to `false`
+     * when mounting via a framework that already strips its own mount prefix
+     * before calling middleware — Express's `app.use(basePath, handler)`, or
+     * Connect/Meteor's `WebApp.connectHandlers.use(basePath, handler)` — so
+     * `handler` treats `req.url` as already relative to `basePath`. Either
+     * way, `basePath` is still used to build the tus `Location` header
+     * returned to clients.
+     */
+    stripBasePath?: boolean;
+    /** Max TUS upload size in bytes. Required — consumers must choose an explicit cap. Use `Infinity` for no cap. */
+    maxUploadSize: number;
+    /** Which upload strategy this deployment expects. Purely advertised via `GET /capabilities`. Defaults to `"beat"`. */
+    uploadUnit?: 'beat' | 'merged';
+    /** File extensions allowed per artifact kind. See the Fastify plugin's `allowedExtensions` for the full shape. */
+    allowedExtensions?: PulseVaultAllowedExtensionsInput;
+    /** Cache-control options forwarded to `@fastify/send` for the GET route. */
+    cache?: PulseVaultCoreCacheOptions;
+    /** Optional authorization hook. See the Fastify plugin's `authorize` option for semantics. */
+    authorize?: PulseVaultAuthorize;
+    /** Optional payload-validation hook. See the Fastify plugin's `validatePayload` option for semantics. */
+    validatePayload?: PulseVaultValidatePayload;
+    /** Optional post-upload hook. See the Fastify plugin's `onUploadComplete` option for semantics. */
+    onUploadComplete?: PulseVaultOnUploadComplete;
+    /** Optional low-frequency event hook. See the Fastify plugin's `onArtifactEvent` option for semantics. */
+    onArtifactEvent?: PulseVaultOnArtifactEvent;
+    /** Logger for internal diagnostics (authorize rejections, tus handler failures). Defaults to `console`. */
+    logger?: PulseVaultLogger;
+    /** @deprecated Use `validatePayload` instead — see the Fastify plugin's option of the same name. */
+    validateProjectPayload?: PulseVaultValidatePayload;
+    /** @deprecated Use `onUploadComplete` instead — see the Fastify plugin's option of the same name. */
+    onProjectUploadComplete?: PulseVaultOnUploadComplete;
+};
+type ConnectNext = (err?: unknown) => void;
+export type PulseVaultCore = {
+    /**
+     * Connect-style request handler — mount directly as Express middleware
+     * (`app.use(basePath, core.handler)`), Meteor middleware
+     * (`WebApp.connectHandlers.use(basePath, core.handler)`), or a bare
+     * `http.createServer` callback. `next` is optional so it also works as a
+     * raw `http.createServer((req, res) => core.handler(req, res))` handler.
+     */
+    handler: (req: IncomingMessage, res: ServerResponse, next?: ConnectNext) => Promise<void>;
+    /** One-time teardown — calls `storage.shutdown?.()`. */
+    shutdown: () => Promise<void>;
+    /** Handles a TUS create/patch/head/delete request directly (any method under `/upload`). */
+    handleTus: (req: IncomingMessage, res: ServerResponse) => Promise<void>;
+    /** Writes the `GET /capabilities` JSON payload. */
+    handleCapabilities: (req: IncomingMessage, res: ServerResponse) => Promise<void>;
+    /** Resolves and streams/redirects `GET /artifacts/:artifactId`. */
+    handleArtifactGet: (req: IncomingMessage, res: ServerResponse, artifactId: string, token: string | undefined) => Promise<void>;
+    /** Handles `DELETE /artifacts/:artifactId`. */
+    handleArtifactDelete: (req: IncomingMessage, res: ServerResponse, artifactId: string) => Promise<void>;
+};
+/**
+ * Build the framework-agnostic core: the same authorize/validatePayload/
+ * onUploadComplete/onArtifactEvent orchestration, tus glue, capabilities
+ * payload, and artifact GET/DELETE logic the Fastify plugin uses, operating
+ * on raw `(req, res)` instead of Fastify's `request`/`reply` wrappers. Both
+ * the Fastify plugin and this factory ultimately call into the same
+ * `lib/pulsevaultTus.js` tus server, so behavior can't drift between them.
+ */
+export declare function createPulseVaultCore(options: PulseVaultCoreOptions): PulseVaultCore;
+export { createLocalStorage } from './storage/local.js';
+export type { LocalStorage, LocalStorageOptions } from './storage/local.js';
+export { createS3Storage } from './storage/s3.js';
+export type { S3Storage, S3StorageOptions } from './storage/s3.js';
+export type { PulseVaultResolution, PulseVaultStorage, ReserveUploadParams, UploadKind, } from './storage/types.js';
+export type { PulseVaultAuthorize, PulseVaultAuthorizeContext, PulseVaultAuthorizePhase, } from './lib/authorize.js';
+export type { PulseVaultOnUploadComplete, PulseVaultOnArtifactEvent, PulseVaultArtifactEvent, } from './lib/pulsevaultTus.js';
+export { sniffMp4, createMp4Sniffer, createS3Mp4Sniffer } from './lib/magic.js';
+export type { PulseVaultValidatePayload } from './lib/magic.js';
+export { buildUploadLink } from './lib/deeplinks.js';
+export type { UploadLinkOptions } from './lib/deeplinks.js';
+export { issueCapabilityToken, verifyCapabilityToken, createCapabilityAuthorize, } from './lib/capability-token.js';
+export type { CapabilityTokenClaims, IssueCapabilityTokenOptions, VerifyCapabilityTokenOptions, LookupSecret, } from './lib/capability-token.js';
+export { createChecksumValidator, createS3ChecksumValidator, parseChecksumMetadata, } from './lib/checksum.js';
+export type { ChecksumAlgorithm, ParsedChecksum } from './lib/checksum.js';
+export { type PulseVaultRequest, type PulseVaultLogger } from './lib/request.js';
+//# sourceMappingURL=core.d.ts.map

package/dist/core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,EAIL,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC/B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAG9D,OAAO,EAAE,KAAK,gBAAgB,EAAiB,MAAM,kBAAkB,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAc,MAAM,oBAAoB,CAAC;AACxE,OAAO,EASL,KAAK,gCAAgC,EACtC,MAAM,kBAAkB,CAAC;AAE1B,4FAA4F;AAC5F,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAIlC,MAAM,MAAM,0BAA0B,GAAG;IACvC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,wFAAwF;IACxF,OAAO,EAAE,iBAAiB,CAAC;IAC3B;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iHAAiH;IACjH,aAAa,EAAE,MAAM,CAAC;IACtB,sHAAsH;IACtH,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC/B,kHAAkH;IAClH,iBAAiB,CAAC,EAAE,gCAAgC,CAAC;IACrD,4EAA4E;IAC5E,KAAK,CAAC,EAAE,0BAA0B,CAAC;IACnC,8FAA8F;IAC9F,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,yGAAyG;IACzG,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAC5C,mGAAmG;IACnG,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;IAC9C,0GAA0G;IAC1G,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAC5C,2GAA2G;IAC3G,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,oGAAoG;IACpG,sBAAsB,CAAC,EAAE,yBAAyB,CAAC;IACnD,qGAAqG;IACrG,uBAAuB,CAAC,EAAE,0BAA0B,CAAC;CACtD,CAAC;AAEF,KAAK,WAAW,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;AAE3C,MAAM,MAAM,cAAc,GAAG;IAC3B;;;;;;OAMG;IACH,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1F,wDAAwD;IACxD,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,4FAA4F;IAC5F,SAAS,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,mDAAmD;IACnD,kBAAkB,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF,mEAAmE;IACnE,iBAAiB,EAAE,CACjB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,GAAG,SAAS,KACtB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,+CAA+C;IAC/C,oBAAoB,EAAE,CACpB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,MAAM,KACf,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB,CAAC;AAkKF;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,cAAc,CA0SnF;AAKD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnE,YAAY,EACV,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,GACX,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,0BAA0B,EAC1B,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAChF,YAAY,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,EAC5B,YAAY,GACb,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}