@nifrajs/image 0.1.0-alpha.1

package/dist/resolve.d.ts

@@ -0,0 +1,102 @@
+/**
+ * The pure attribute builder shared by every adapter `<Image>` — turns image props into CLS-safe,
+ * responsive `<img>` attributes (`src`/`srcSet`/`sizes`/`width`/`height`/`loading`/`decoding`/
+ * `fetchpriority`). The actual resize is delegated to an {@link ImageLoader} (a URL builder) — nifra
+ * bundles no codec; point the loader at your image CDN.
+ */
+/** Builds a variant URL for `src` at a target pixel `width` (and optional `quality`). */
+export type ImageLoader = (args: {
+    src: string;
+    width: number;
+    quality?: number;
+}) => string;
+/** Default loader: return the source unchanged (no transform). Use when there's no image CDN — you
+ * still get CLS-safe sizing + lazy loading, just no responsive variants. */
+export declare const identityLoader: ImageLoader;
+export interface CloudflareLoaderOptions {
+    /** Prefix for the source (e.g. an absolute origin) when `src` is a bare path. Default: none. */
+    readonly base?: string;
+}
+/**
+ * Cloudflare Images loader — builds `/cdn-cgi/image/<options>/<source>` URLs that the Cloudflare edge
+ * resizes on the fly (also emits `format=auto` for webp/avif negotiation). Works on Cloudflare Pages /
+ * Workers with Images enabled.
+ */
+export declare function cloudflareLoader(options?: CloudflareLoaderOptions): ImageLoader;
+export interface SelfHostedLoaderOptions {
+    /** Path/URL where `createImageHandler` (`@nifrajs/image/server`) is mounted, e.g. `"/_image"`. */
+    readonly endpoint: string;
+    /**
+     * HMAC secret for **signed URLs**. When set, each URL gets a stable `&s=` signature and the handler
+     * must be configured with the SAME `signing.secret` — it then rejects any unsigned/forged `(src, w, q)`,
+     * shutting down resize-bombing. ⚠️ The signer holds the secret, so a loader created with it is
+     * **server-only** — inject it like a session secret (from `env`), never import this config into a
+     * route/client module. Signatures are stable (no expiry), so SSR-signed URLs hydrate + cache identically.
+     */
+    readonly secret?: string;
+}
+/**
+ * Loader for nifra's **self-hosted** resize endpoint (`createImageHandler` from `@nifrajs/image/server`,
+ * backed by `Bun.Image`/sharp/WASM). Builds `<endpoint>?src=…&w=…[&q=…][&s=…]` (the endpoint negotiates
+ * the output format). Pure + dependency-free. For runtimes without a native codec, pair the endpoint
+ * with `wasmImageBackend`, or use the CDN `cloudflareLoader` instead.
+ */
+export declare function selfHostedLoader(options: SelfHostedLoaderOptions): ImageLoader;
+export interface SignImageUrlOptions {
+    /** HMAC secret — must match the handler's `signing.secret`. */
+    readonly secret: string;
+    /** Seconds until the URL expires (adds `&exp=`). Omit for a stable, cacheable-forever signed URL. */
+    readonly expiresIn?: number;
+}
+/**
+ * Mint a **signed** self-hosted image URL on the server — for cases the (stable) `selfHostedLoader`
+ * doesn't cover, chiefly **time-limited** access (`expiresIn`) to private images. Server-only (it holds
+ * the secret). Pair with a passthrough loader, or use the signed string as a plain `src`.
+ *
+ * ```ts
+ * const url = signImageUrl("/_image", { src: "/private/a.jpg", width: 800 }, { secret, expiresIn: 300 })
+ * ```
+ */
+export declare function signImageUrl(endpoint: string, image: {
+    src: string;
+    width: number;
+    quality?: number;
+}, options: SignImageUrlOptions): string;
+export interface ImageProps {
+    readonly src: string;
+    /** Intrinsic width (px) — **required**, reserves layout space (no CLS). */
+    readonly width: number;
+    /** Intrinsic height (px) — **required** (no CLS). */
+    readonly height: number;
+    /** Alt text — **required** for accessibility (use `alt=""` for decorative images). */
+    readonly alt: string;
+    /** `sizes` attribute for responsive selection (e.g. `"(max-width: 600px) 100vw, 600px"`). */
+    readonly sizes?: string;
+    /** Widths to generate `srcSet` entries for. Default: `[width, width*2]` (1×/2× retina). */
+    readonly widths?: readonly number[];
+    /** Quality passed to the loader. */
+    readonly quality?: number;
+    /** `lazy` (default) or `eager`. `priority` overrides this to eager. */
+    readonly loading?: "lazy" | "eager";
+    /** Mark the LCP image: `loading="eager"` + `fetchpriority="high"`. */
+    readonly priority?: boolean;
+}
+export interface ResolvedImage {
+    readonly src: string;
+    readonly srcSet?: string;
+    readonly sizes?: string;
+    readonly width: number;
+    readonly height: number;
+    readonly alt: string;
+    readonly loading: "lazy" | "eager";
+    readonly decoding: "async";
+    readonly fetchPriority?: "high";
+}
+/**
+ * Resolve {@link ImageProps} + an {@link ImageLoader} into `<img>` attributes. CLS-safe (`width`/
+ * `height` required + > 0, else a dev error), lazy + async-decoding by default, with a responsive
+ * `srcSet` built from `widths` via the loader. If every width produces the same URL (e.g.
+ * {@link identityLoader}), `srcSet` is omitted (it'd be redundant).
+ */
+export declare function resolveImage(props: ImageProps, loader?: ImageLoader): ResolvedImage;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,yFAAyF;AACzF,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,MAAM,CAAA;AAE5F;4EAC4E;AAC5E,eAAO,MAAM,cAAc,EAAE,WAA8B,CAAA;AAE3D,MAAM,WAAW,uBAAuB;IACtC,gGAAgG;IAChG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,uBAA4B,GAAG,WAAW,CAOnF;AAED,MAAM,WAAW,uBAAuB;IACtC,kGAAkG;IAClG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,WAAW,CAU9E;AAED,MAAM,WAAW,mBAAmB;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,qGAAqG;IACrG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,EACvD,OAAO,EAAE,mBAAmB,GAC3B,MAAM,CAYR;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,sFAAsF;IACtF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,6FAA6F;IAC7F,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,oCAAoC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,uEAAuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IACnC,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAA;IAClC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAChC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,UAAU,EACjB,MAAM,GAAE,WAA4B,GACnC,aAAa,CAsCf"}

package/dist/resolve.js

@@ -0,0 +1,102 @@
+/**
+ * The pure attribute builder shared by every adapter `<Image>` — turns image props into CLS-safe,
+ * responsive `<img>` attributes (`src`/`srcSet`/`sizes`/`width`/`height`/`loading`/`decoding`/
+ * `fetchpriority`). The actual resize is delegated to an {@link ImageLoader} (a URL builder) — nifra
+ * bundles no codec; point the loader at your image CDN.
+ */
+import { signImageParams } from "./sign.js";
+/** Default loader: return the source unchanged (no transform). Use when there's no image CDN — you
+ * still get CLS-safe sizing + lazy loading, just no responsive variants. */
+export const identityLoader = ({ src }) => src;
+/**
+ * Cloudflare Images loader — builds `/cdn-cgi/image/<options>/<source>` URLs that the Cloudflare edge
+ * resizes on the fly (also emits `format=auto` for webp/avif negotiation). Works on Cloudflare Pages /
+ * Workers with Images enabled.
+ */
+export function cloudflareLoader(options = {}) {
+    const base = options.base ?? "";
+    return ({ src, width, quality }) => {
+        const params = `format=auto,width=${width}${quality !== undefined ? `,quality=${quality}` : ""}`;
+        const source = `${base}${src}`.replace(/^\//, ""); // the leading slash is provided by the prefix below
+        return `/cdn-cgi/image/${params}/${source}`;
+    };
+}
+/**
+ * Loader for nifra's **self-hosted** resize endpoint (`createImageHandler` from `@nifrajs/image/server`,
+ * backed by `Bun.Image`/sharp/WASM). Builds `<endpoint>?src=…&w=…[&q=…][&s=…]` (the endpoint negotiates
+ * the output format). Pure + dependency-free. For runtimes without a native codec, pair the endpoint
+ * with `wasmImageBackend`, or use the CDN `cloudflareLoader` instead.
+ */
+export function selfHostedLoader(options) {
+    const { endpoint, secret } = options;
+    return ({ src, width, quality }) => {
+        const w = String(width);
+        const q = quality !== undefined ? String(quality) : undefined;
+        const params = new URLSearchParams({ src, w });
+        if (q !== undefined)
+            params.set("q", q);
+        if (secret !== undefined)
+            params.set("s", signImageParams(secret, { src, w, q }));
+        return `${endpoint}?${params.toString()}`;
+    };
+}
+/**
+ * Mint a **signed** self-hosted image URL on the server — for cases the (stable) `selfHostedLoader`
+ * doesn't cover, chiefly **time-limited** access (`expiresIn`) to private images. Server-only (it holds
+ * the secret). Pair with a passthrough loader, or use the signed string as a plain `src`.
+ *
+ * ```ts
+ * const url = signImageUrl("/_image", { src: "/private/a.jpg", width: 800 }, { secret, expiresIn: 300 })
+ * ```
+ */
+export function signImageUrl(endpoint, image, options) {
+    const w = String(image.width);
+    const q = image.quality !== undefined ? String(image.quality) : undefined;
+    const exp = options.expiresIn !== undefined
+        ? String(Math.floor(Date.now() / 1000) + options.expiresIn)
+        : undefined;
+    const params = new URLSearchParams({ src: image.src, w });
+    if (q !== undefined)
+        params.set("q", q);
+    if (exp !== undefined)
+        params.set("exp", exp);
+    params.set("s", signImageParams(options.secret, { src: image.src, w, q, exp }));
+    return `${endpoint}?${params.toString()}`;
+}
+/**
+ * Resolve {@link ImageProps} + an {@link ImageLoader} into `<img>` attributes. CLS-safe (`width`/
+ * `height` required + > 0, else a dev error), lazy + async-decoding by default, with a responsive
+ * `srcSet` built from `widths` via the loader. If every width produces the same URL (e.g.
+ * {@link identityLoader}), `srcSet` is omitted (it'd be redundant).
+ */
+export function resolveImage(props, loader = identityLoader) {
+    if (!Number.isFinite(props.width) ||
+        props.width <= 0 ||
+        !Number.isFinite(props.height) ||
+        props.height <= 0) {
+        throw new Error(`[nifra/image] <Image> requires positive width + height (got ${props.width}×${props.height}) — they reserve layout space to prevent CLS.`);
+    }
+    const eager = props.priority === true || props.loading === "eager";
+    const widths = [...new Set(props.widths ?? [props.width, props.width * 2])].sort((a, b) => a - b);
+    // Build the loader args, omitting `quality` when unset (exactOptionalPropertyTypes: no `undefined`).
+    const at = (w) => loader(props.quality === undefined
+        ? { src: props.src, width: w }
+        : { src: props.src, width: w, quality: props.quality });
+    const entries = widths.map((w) => ({ url: at(w), w }));
+    const allSame = entries.every((e) => e.url === entries[0]?.url);
+    const srcSet = allSame ? undefined : entries.map((e) => `${e.url} ${e.w}w`).join(", ");
+    // `src` is the 1× (intrinsic-width) variant — the fallback for browsers ignoring srcSet.
+    const base = {
+        src: at(props.width),
+        width: props.width,
+        height: props.height,
+        alt: props.alt,
+        loading: eager ? "eager" : "lazy",
+        decoding: "async",
+        ...(srcSet !== undefined ? { srcSet } : {}),
+        ...(props.sizes !== undefined ? { sizes: props.sizes } : {}),
+        ...(props.priority === true ? { fetchPriority: "high" } : {}),
+    };
+    return base;
+}
+//# sourceMappingURL=resolve.js.map

package/dist/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAK3C;4EAC4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAgB,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAA;AAO3D;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAmC,EAAE;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAA;IAC/B,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,qBAAqB,KAAK,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;QAChG,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA,CAAC,oDAAoD;QACtG,OAAO,kBAAkB,MAAM,IAAI,MAAM,EAAE,CAAA;IAC7C,CAAC,CAAA;AACH,CAAC;AAeD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IACpC,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QACvB,MAAM,CAAC,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC7D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAC9C,IAAI,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACvC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QACjF,OAAO,GAAG,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;IAC3C,CAAC,CAAA;AACH,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAgB,EAChB,KAAuD,EACvD,OAA4B;IAE5B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACzE,MAAM,GAAG,GACP,OAAO,CAAC,SAAS,KAAK,SAAS;QAC7B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;QAC3D,CAAC,CAAC,SAAS,CAAA;IACf,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IACzD,IAAI,CAAC,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IACvC,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IAC/E,OAAO,GAAG,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;AAC3C,CAAC;AAkCD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAiB,EACjB,SAAsB,cAAc;IAEpC,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAC7B,KAAK,CAAC,KAAK,IAAI,CAAC;QAChB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAC9B,KAAK,CAAC,MAAM,IAAI,CAAC,EACjB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+DAA+D,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,+CAA+C,CAC1I,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAA;IAClE,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAEjG,qGAAqG;IACrG,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE,CAC/B,MAAM,CACJ,KAAK,CAAC,OAAO,KAAK,SAAS;QACzB,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE;QAC9B,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CACzD,CAAA;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEtF,yFAAyF;IACzF,MAAM,IAAI,GAAkB;QAC1B,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;QACjC,QAAQ,EAAE,OAAO;QACjB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAA;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,57 @@
+/**
+ * `@nifrajs/image/server` — nifra's **self-hosted** image resize endpoint. `createImageHandler` returns a
+ * `(req: Request) => Promise<Response>` you mount at the path your {@link selfHostedLoader} points to
+ * (e.g. `"/_image"`). It validates the query, safely resolves the source (local file under a `root`, or
+ * a remote URL on an `allowedOrigins` allowlist — both **fail-closed** against SSRF), then decodes →
+ * resizes (never upscaling) → re-encodes via a pluggable {@link ImageBackend}. The default
+ * {@link bunImageBackend} uses `Bun.Image` (libjpeg-turbo / libspng / libwebp, off-thread).
+ *
+ * This subpath touches the filesystem and a native codec, so it is for **Node/Bun servers**, not the
+ * edge. On Workers / Vercel-Edge / Deno-Deploy there is no native codec — use the CDN `cloudflareLoader`
+ * from `@nifrajs/image` instead. The dependency-free core (`@nifrajs/image`) never imports this module.
+ */
+import { type ImageBackend } from "./backend.js";
+export * from "./backend.js";
+export interface ImageHandlerOptions {
+    /** Codec backend. Default: {@link bunImageBackend} (requires the Bun runtime). */
+    readonly backend?: ImageBackend;
+    /** Absolute directory that local (path) sources resolve under. Path-traversal- and symlink-guarded.
+     * Omit to **disable local sources** (every path source → 403). */
+    readonly root?: string;
+    /** Exact origins (`https://cdn.example`) allowed for remote sources. Omitted/empty ⇒ **no remote
+     * sources** (fail-closed against SSRF). Only `http:`/`https:` URLs are ever considered. */
+    readonly allowedOrigins?: readonly string[];
+    /** Max bytes read from a source before rejecting (413). Default 20 MiB. */
+    readonly maxSourceBytes?: number;
+    /** Max source pixels (w×h) before rejecting (413) — decompression-bomb guard. Default 40 MP. */
+    readonly maxSourcePixels?: number;
+    /** Hard cap on the requested width; larger `?w` is clamped down. Default 3840. */
+    readonly maxWidth?: number;
+    /** Max concurrent transforms (codec work is CPU/memory-heavy). Excess requests queue. Default 4. */
+    readonly concurrency?: number;
+    /** `Cache-Control: public, max-age=<n>, immutable` seconds. Default 1 year. */
+    readonly cacheMaxAge?: number;
+    /** Quality used when `?q` is absent. Default 75. */
+    readonly defaultQuality?: number;
+    /** Remote-fetch timeout (ms). Default 10 000. */
+    readonly fetchTimeoutMs?: number;
+    /** `fetch` implementation for remote sources (injectable for custom timeouts/proxy and for tests).
+     * Default: the global `fetch`. */
+    readonly fetch?: typeof fetch;
+    /** Require **signed URLs**: every request must carry a valid `&s=` HMAC over `(src, w, q[, exp])` or
+     * it's rejected with `403`. Use the SAME `secret` as your `selfHostedLoader`/`signImageUrl`. This
+     * locks the endpoint to URLs your app minted — the defense against resize-bombing. */
+    readonly signing?: {
+        readonly secret: string;
+    };
+}
+/**
+ * Build the resize request handler. Mount its return value at the `selfHostedLoader` endpoint:
+ *
+ * ```ts
+ * const image = createImageHandler({ root: "./public", allowedOrigins: ["https://cdn.example"] })
+ * // inside your router: if (url.pathname === "/_image") return image(req)
+ * ```
+ */
+export declare function createImageHandler(options?: ImageHandlerOptions): (req: Request) => Promise<Response>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAEL,KAAK,YAAY,EAGlB,MAAM,cAAc,CAAA;AAOrB,cAAc,cAAc,CAAA;AAE5B,MAAM,WAAW,mBAAmB;IAClC,kFAAkF;IAClF,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAA;IAC/B;sEACkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB;+FAC2F;IAC3F,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3C,2EAA2E;IAC3E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,gGAAgG;IAChG,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,oGAAoG;IACpG,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,oDAAoD;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,iDAAiD;IACjD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC;sCACkC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IAC7B;;0FAEsF;IACtF,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAC/C;AAoBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,GAAE,mBAAwB,GAChC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAGrC"}

package/dist/server.js

@@ -0,0 +1,330 @@
+/**
+ * `@nifrajs/image/server` — nifra's **self-hosted** image resize endpoint. `createImageHandler` returns a
+ * `(req: Request) => Promise<Response>` you mount at the path your {@link selfHostedLoader} points to
+ * (e.g. `"/_image"`). It validates the query, safely resolves the source (local file under a `root`, or
+ * a remote URL on an `allowedOrigins` allowlist — both **fail-closed** against SSRF), then decodes →
+ * resizes (never upscaling) → re-encodes via a pluggable {@link ImageBackend}. The default
+ * {@link bunImageBackend} uses `Bun.Image` (libjpeg-turbo / libspng / libwebp, off-thread).
+ *
+ * This subpath touches the filesystem and a native codec, so it is for **Node/Bun servers**, not the
+ * edge. On Workers / Vercel-Edge / Deno-Deploy there is no native codec — use the CDN `cloudflareLoader`
+ * from `@nifrajs/image` instead. The dependency-free core (`@nifrajs/image`) never imports this module.
+ */
+import { readFile, realpath, stat } from "node:fs/promises";
+import { resolve as resolvePath, sep } from "node:path";
+import { bunImageBackend, ImageProcessingError, } from "./backend.js";
+import { verifyImageParams } from "./sign.js";
+// The codec seam + every official backend (Bun/sharp/WASM) live in the edge-safe `./backend.ts`
+// (`@nifrajs/image/backends`), importable WITHOUT this module's `node:fs` — so a WASM backend can ship to
+// the edge. Re-export them so `@nifrajs/image/server` stays the single import for Node servers.
+export * from "./backend.js";
+const MAX_SRC_LEN = 2048;
+/**
+ * Build the resize request handler. Mount its return value at the `selfHostedLoader` endpoint:
+ *
+ * ```ts
+ * const image = createImageHandler({ root: "./public", allowedOrigins: ["https://cdn.example"] })
+ * // inside your router: if (url.pathname === "/_image") return image(req)
+ * ```
+ */
+export function createImageHandler(options = {}) {
+    const cfg = resolveConfig(options);
+    return (req) => handle(req, cfg);
+}
+function resolveConfig(options) {
+    const concurrency = Math.max(1, options.concurrency ?? 4);
+    const sem = createSemaphore(concurrency);
+    return {
+        backend: options.backend ?? bunImageBackend(),
+        root: options.root !== undefined ? resolvePath(options.root) : null,
+        allowedOrigins: new Set(options.allowedOrigins ?? []),
+        maxSourceBytes: options.maxSourceBytes ?? 20 * 1024 * 1024,
+        maxSourcePixels: options.maxSourcePixels ?? 40_000_000,
+        maxWidth: options.maxWidth ?? 3840,
+        cacheMaxAge: options.cacheMaxAge ?? 31_536_000,
+        defaultQuality: options.defaultQuality ?? 75,
+        fetchTimeoutMs: options.fetchTimeoutMs ?? 10_000,
+        fetchImpl: options.fetch ?? globalThis.fetch,
+        signing: options.signing ?? null,
+        acquire: sem.acquire,
+        release: sem.release,
+    };
+}
+async function handle(req, cfg) {
+    // 1. Method — only safe reads. (HEAD shares the GET path; the body is stripped at the end.)
+    if (req.method !== "GET" && req.method !== "HEAD") {
+        return errorResponse(405, "method_not_allowed", { Allow: "GET, HEAD" });
+    }
+    // 2. Validate the query at the trust boundary (strict scalar parsing — no Number() coercion).
+    const url = new URL(req.url);
+    const src = url.searchParams.get("src");
+    if (src === null || src.length === 0 || src.length > MAX_SRC_LEN) {
+        return errorResponse(400, "invalid_src");
+    }
+    const requestedWidth = parsePositiveInt(url.searchParams.get("w"));
+    if (requestedWidth === null)
+        return errorResponse(400, "invalid_width");
+    const qParam = url.searchParams.get("q");
+    let quality = cfg.defaultQuality;
+    if (qParam !== null) {
+        const q = parsePositiveInt(qParam);
+        if (q === null)
+            return errorResponse(400, "invalid_quality");
+        quality = Math.min(100, q);
+    }
+    const width = Math.min(cfg.maxWidth, requestedWidth);
+    const wantsWebp = (req.headers.get("accept") ?? "").includes("image/webp");
+    // 2b. Signed-URL enforcement (when configured): reject any request we didn't mint. Verifies the
+    //     `&s=` HMAC over the raw (src, w, q[, exp]) — exactly what the loader/`signImageUrl` signed —
+    //     and the expiry. Done before the ETag/fetch so unsigned/forged requests cost nothing.
+    if (cfg.signing !== null) {
+        const sig = url.searchParams.get("s");
+        const ok = sig !== null &&
+            verifyImageParams(cfg.signing.secret, {
+                src,
+                w: url.searchParams.get("w") ?? "",
+                q: qParam ?? undefined,
+                exp: url.searchParams.get("exp") ?? undefined,
+            }, sig, Math.floor(Date.now() / 1000));
+        if (!ok)
+            return errorResponse(403, "invalid_signature");
+    }
+    // 3. Strong validator from the request-deterministic inputs, computed BEFORE any fetch/decode so a
+    //    conditional request short-circuits all expensive work. The clamped width is a pure function of
+    //    (src, requestedWidth), so (src, requestedWidth, quality, wantsWebp) fully keys the response.
+    const etag = `"${fnv1a(`${src}|${requestedWidth}|${quality}|${wantsWebp ? 1 : 0}`)}"`;
+    const cacheHeaders = {
+        "Cache-Control": `public, max-age=${cfg.cacheMaxAge}, immutable`,
+        ETag: etag,
+        Vary: "Accept",
+    };
+    if (ifNoneMatch(req, etag)) {
+        return new Response(null, { status: 304, headers: cacheHeaders });
+    }
+    // 4. Resolve + read the source under the SSRF policy (fail-closed: unknown source kind → 403/400).
+    const source = await readSource(src, cfg);
+    if (!source.ok)
+        return errorResponse(source.status, source.code);
+    // 5. Probe → enforce the portable pixel cap → clamp to intrinsic (never upscale) → transform.
+    //    The codec work is bounded by the concurrency semaphore.
+    await cfg.acquire();
+    try {
+        const probe = await cfg.backend.probe(source.bytes);
+        if (probe.width * probe.height > cfg.maxSourcePixels) {
+            return errorResponse(413, "source_too_large");
+        }
+        const targetWidth = Math.max(1, Math.min(width, probe.width));
+        const format = negotiateFormat(probe.format, wantsWebp);
+        const out = await cfg.backend.transform({
+            bytes: source.bytes,
+            width: targetWidth,
+            quality,
+            format,
+        });
+        const headers = new Headers(cacheHeaders);
+        headers.set("Content-Type", out.contentType);
+        headers.set("Content-Length", String(out.bytes.byteLength));
+        headers.set("X-Content-Type-Options", "nosniff"); // never let a client sniff the re-encoded bytes
+        // HEAD: identical headers, no body.
+        if (req.method === "HEAD")
+            return new Response(null, { status: 200, headers });
+        return new Response(out.bytes, { status: 200, headers });
+    }
+    catch (err) {
+        if (err instanceof ImageProcessingError) {
+            if (err.kind === "too_large")
+                return errorResponse(413, "source_too_large");
+            return errorResponse(415, "unsupported_media_type"); // decode | unsupported
+        }
+        // Unexpected — never leak internals to the client.
+        return errorResponse(500, "internal_error");
+    }
+    finally {
+        cfg.release();
+    }
+}
+/**
+ * Resolve `src` to bytes under the SSRF policy. A value that parses as an absolute URL is "remote" and
+ * must be `http(s)` **and** on the `allowedOrigins` allowlist; anything else is a local path resolved
+ * under `root` with traversal + symlink containment checks. Both branches fail closed.
+ */
+async function readSource(src, cfg) {
+    const asUrl = tryParseUrl(src);
+    if (asUrl !== null) {
+        if (asUrl.protocol !== "http:" && asUrl.protocol !== "https:") {
+            return { ok: false, status: 400, code: "unsupported_scheme" };
+        }
+        if (!cfg.allowedOrigins.has(asUrl.origin)) {
+            return { ok: false, status: 403, code: "source_not_allowed" };
+        }
+        return fetchRemote(asUrl, cfg);
+    }
+    return readLocal(src, cfg);
+}
+async function fetchRemote(url, cfg) {
+    let res;
+    try {
+        res = await cfg.fetchImpl(url, {
+            redirect: "error", // a redirect could bounce to a disallowed origin — refuse it.
+            signal: AbortSignal.timeout(cfg.fetchTimeoutMs),
+            headers: { Accept: "image/*" },
+        });
+    }
+    catch (err) {
+        const name = err instanceof Error ? err.name : "";
+        return name === "TimeoutError"
+            ? { ok: false, status: 504, code: "upstream_timeout" }
+            : { ok: false, status: 502, code: "upstream_unreachable" };
+    }
+    if (!res.ok)
+        return { ok: false, status: 502, code: "upstream_error" };
+    const bytes = await readBoundedBytes(res, cfg.maxSourceBytes);
+    if (bytes === null)
+        return { ok: false, status: 413, code: "source_too_large" };
+    return { ok: true, bytes };
+}
+async function readLocal(src, cfg) {
+    if (cfg.root === null)
+        return { ok: false, status: 403, code: "source_not_allowed" };
+    // `src` is already percent-decoded by URLSearchParams — do NOT decode again (double-decode bypass).
+    if (src.includes("\0"))
+        return { ok: false, status: 400, code: "invalid_src" };
+    // Strip leading slashes so a site-absolute ("/hero.jpg") or protocol-relative ("//evil") path is
+    // treated as root-relative; `resolve` then collapses any "../" and the containment check rejects it.
+    const rel = src.replace(/^\/+/, "");
+    const resolved = resolvePath(cfg.root, rel);
+    if (resolved !== cfg.root && !resolved.startsWith(cfg.root + sep)) {
+        return { ok: false, status: 403, code: "source_not_allowed" };
+    }
+    let info;
+    try {
+        info = await stat(resolved);
+    }
+    catch {
+        return { ok: false, status: 404, code: "source_not_found" };
+    }
+    if (!info.isFile())
+        return { ok: false, status: 404, code: "source_not_found" };
+    if (info.size > cfg.maxSourceBytes)
+        return { ok: false, status: 413, code: "source_too_large" };
+    // Defense-in-depth: a symlink inside root could point outside it — re-check the real path.
+    try {
+        const real = await realpath(resolved);
+        const realRoot = await realpath(cfg.root);
+        if (real !== realRoot && !real.startsWith(realRoot + sep)) {
+            return { ok: false, status: 403, code: "source_not_allowed" };
+        }
+    }
+    catch {
+        return { ok: false, status: 404, code: "source_not_found" };
+    }
+    return { ok: true, bytes: new Uint8Array(await readFile(resolved)) };
+}
+/** Read a response body, aborting (→ null) once `limit` bytes are exceeded. Trusts neither the
+ * `Content-Length` header (checked as a fast reject) nor an absent one — the running total is the gate. */
+async function readBoundedBytes(res, limit) {
+    const declared = res.headers.get("content-length");
+    if (declared !== null && /^\d+$/.test(declared) && Number(declared) > limit)
+        return null;
+    const reader = res.body?.getReader();
+    if (reader === undefined) {
+        const buf = new Uint8Array(await res.arrayBuffer());
+        return buf.byteLength > limit ? null : buf;
+    }
+    const chunks = [];
+    let total = 0;
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        total += value.byteLength;
+        if (total > limit) {
+            await reader.cancel();
+            return null;
+        }
+        chunks.push(value);
+    }
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const c of chunks) {
+        out.set(c, offset);
+        offset += c.byteLength;
+    }
+    return out;
+}
+/** Prefer WebP when the client advertises it (supports alpha + best compression). Otherwise preserve a
+ * JPEG source as JPEG; everything else falls back to PNG (lossless, keeps any alpha). `Vary: Accept`
+ * keeps the WebP / non-WebP variants cached separately. */
+function negotiateFormat(sourceFormat, wantsWebp) {
+    if (wantsWebp)
+        return "webp";
+    if (sourceFormat === "jpeg" || sourceFormat === "jpg")
+        return "jpeg";
+    return "png";
+}
+/** Strict positive-integer parse: canonical decimal digits only (rejects signs, decimals, `1e3`, `0x`,
+ * whitespace, empty). Returns null on any non-canonical input. */
+function parsePositiveInt(raw) {
+    if (raw === null || !/^\d+$/.test(raw))
+        return null;
+    const n = Number(raw);
+    return Number.isSafeInteger(n) && n >= 1 ? n : null;
+}
+function tryParseUrl(src) {
+    try {
+        return new URL(src);
+    }
+    catch {
+        return null;
+    }
+}
+function ifNoneMatch(req, etag) {
+    const header = req.headers.get("if-none-match");
+    if (header === null)
+        return false;
+    if (header.trim() === "*")
+        return true;
+    return header.split(",").some((t) => t.trim() === etag);
+}
+/** 32-bit FNV-1a over a short key string → hex. Used only as a cache validator (ETag), not security. */
+function fnv1a(input) {
+    let h = 0x811c9dc5;
+    for (let i = 0; i < input.length; i++) {
+        h ^= input.charCodeAt(i);
+        h = Math.imul(h, 0x01000193);
+    }
+    return (h >>> 0).toString(16);
+}
+function errorResponse(status, code, extraHeaders = {}) {
+    return new Response(JSON.stringify({ error: code }), {
+        status,
+        headers: { "Content-Type": "application/json; charset=utf-8", ...extraHeaders },
+    });
+}
+/**
+ * Async counting semaphore with direct slot hand-off — a released slot is passed straight to the next
+ * waiter (the active count is never transiently decremented), so a concurrent `acquire()` can't slip
+ * past the limit in the microtask gap. Bounds concurrent codec work.
+ */
+function createSemaphore(max) {
+    let active = 0;
+    const waiters = [];
+    const acquire = async () => {
+        if (active < max) {
+            active++;
+            return;
+        }
+        await new Promise((res) => waiters.push(res)); // slot handed over by release(), active unchanged
+    };
+    const release = () => {
+        const next = waiters.shift();
+        if (next !== undefined) {
+            next(); // hand the slot to the waiter without touching `active`
+        }
+        else {
+            active--;
+        }
+    };
+    return { acquire, release };
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAEvD,OAAO,EACL,eAAe,EAEf,oBAAoB,GAErB,MAAM,cAAc,CAAA;AAErB,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAE7C,gGAAgG;AAChG,0GAA0G;AAC1G,gGAAgG;AAChG,cAAc,cAAc,CAAA;AAkC5B,MAAM,WAAW,GAAG,IAAI,CAAA;AAkBxB;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAA+B,EAAE;IAEjC,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IAClC,OAAO,CAAC,GAAY,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,OAA4B;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAA;IACzD,MAAM,GAAG,GAAG,eAAe,CAAC,WAAW,CAAC,CAAA;IACxC,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe,EAAE;QAC7C,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QACnE,cAAc,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;QACrD,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI;QAC1D,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,UAAU;QACtD,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,UAAU;QAC9C,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE;QAC5C,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,MAAM;QAChD,SAAS,EAAE,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK;QAC5C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;QAChC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAA;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAY,EAAE,GAAmB;IACrD,4FAA4F;IAC5F,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClD,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;IACzE,CAAC;IAED,8FAA8F;IAC9F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACvC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QACjE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAC1C,CAAC;IACD,MAAM,cAAc,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAClE,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,OAAO,GAAG,GAAG,CAAC,cAAc,CAAA;IAChC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAClC,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,aAAa,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAA;QAC5D,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IAC5B,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAA;IACpD,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IAE1E,gGAAgG;IAChG,mGAAmG;IACnG,2FAA2F;IAC3F,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,EAAE,GACN,GAAG,KAAK,IAAI;YACZ,iBAAiB,CACf,GAAG,CAAC,OAAO,CAAC,MAAM,EAClB;gBACE,GAAG;gBACH,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE;gBAClC,CAAC,EAAE,MAAM,IAAI,SAAS;gBACtB,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS;aAC9C,EACD,GAAG,EACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAC9B,CAAA;QACH,IAAI,CAAC,EAAE;YAAE,OAAO,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;IACzD,CAAC;IAED,mGAAmG;IACnG,oGAAoG;IACpG,kGAAkG;IAClG,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,cAAc,IAAI,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAA;IACrF,MAAM,YAAY,GAA2B;QAC3C,eAAe,EAAE,mBAAmB,GAAG,CAAC,WAAW,aAAa;QAChE,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,QAAQ;KACf,CAAA;IACD,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAA;IACnE,CAAC;IAED,mGAAmG;IACnG,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACzC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;IAEhE,8FAA8F;IAC9F,6DAA6D;IAC7D,MAAM,GAAG,CAAC,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACnD,IAAI,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;YACrD,OAAO,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;QAC/C,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;QAC7D,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QACvD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;YACtC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,WAAW;YAClB,OAAO;YACP,MAAM;SACP,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,CAAA;QACzC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,WAAW,CAAC,CAAA;QAC5C,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;QAC3D,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA,CAAC,gDAAgD;QACjG,oCAAoC;QACpC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;QAC9E,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;YACxC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;YAC3E,OAAO,aAAa,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAA,CAAC,uBAAuB;QAC7E,CAAC;QACD,mDAAmD;QACnD,OAAO,aAAa,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;IAC7C,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,OAAO,EAAE,CAAA;IACf,CAAC;AACH,CAAC;AAMD;;;;GAIG;AACH,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,GAAmB;IACxD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAA;QAC/D,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAA;QAC/D,CAAC;QACD,OAAO,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC;IACD,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;AAC5B,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAQ,EAAE,GAAmB;IACtD,IAAI,GAAa,CAAA;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YAC7B,QAAQ,EAAE,OAAO,EAAE,8DAA8D;YACjF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YAC/C,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;SAC/B,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;QACjD,OAAO,IAAI,KAAK,cAAc;YAC5B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE;YACtD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAA;IAC9D,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;IACtE,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,cAAc,CAAC,CAAA;IAC7D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAA;IAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AAC5B,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,GAAmB;IACvD,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAA;IACpF,oGAAoG;IACpG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;IAC9E,iGAAiG;IACjG,qGAAqG;IACrG,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC3C,IAAI,QAAQ,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAA;IAC/D,CAAC;IACD,IAAI,IAAsC,CAAA;IAC1C,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAA;IAC7D,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAA;IAC/E,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,cAAc;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAA;IAC/F,2FAA2F;IAC3F,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACrC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAA;QAC/D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAA;IAC7D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAA;AACtE,CAAC;AAED;2GAC2G;AAC3G,KAAK,UAAU,gBAAgB,CAAC,GAAa,EAAE,KAAa;IAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAClD,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK;QAAE,OAAO,IAAI,CAAA;IACxF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAA;IACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;QACnD,OAAO,GAAG,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAA;IAC5C,CAAC;IACD,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAC3C,IAAI,IAAI;YAAE,MAAK;QACf,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;QACzB,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;YAClB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAA;YACrB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QAClB,MAAM,IAAI,CAAC,CAAC,UAAU,CAAA;IACxB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;2DAE2D;AAC3D,SAAS,eAAe,CAAC,YAAoB,EAAE,SAAkB;IAC/D,IAAI,SAAS;QAAE,OAAO,MAAM,CAAA;IAC5B,IAAI,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,KAAK;QAAE,OAAO,MAAM,CAAA;IACpE,OAAO,KAAK,CAAA;AACd,CAAC;AAED;kEACkE;AAClE,SAAS,gBAAgB,CAAC,GAAkB;IAC1C,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACnD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACrB,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACrD,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAY,EAAE,IAAY;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IAC/C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACjC,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAA;AACzD,CAAC;AAED,wGAAwG;AACxG,SAAS,KAAK,CAAC,KAAa;IAC1B,IAAI,CAAC,GAAG,UAAU,CAAA;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACxB,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;IAC9B,CAAC;IACD,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;AAC/B,CAAC;AAED,SAAS,aAAa,CACpB,MAAc,EACd,IAAY,EACZ,eAAuC,EAAE;IAEzC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE;QACnD,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,GAAG,YAAY,EAAE;KAChF,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,OAAO,GAAsB,EAAE,CAAA;IACrC,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YACjB,MAAM,EAAE,CAAA;YACR,OAAM;QACR,CAAC;QACD,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA,CAAC,kDAAkD;IACxG,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;QAC5B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,EAAE,CAAA,CAAC,wDAAwD;QACjE,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAA;QACV,CAAC;IACH,CAAC,CAAA;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;AAC7B,CAAC"}