npm - @nitida/sdk - Versions diffs - 0.20.1 → 0.22.0 - Mend

@nitida/sdk 0.20.1 → 0.22.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (22) hide show

package/README.md +1 -1
package/dist/expo.d.ts +3 -3
package/dist/expo.js.map +1 -1
package/dist/index.d.ts +13 -13
package/dist/index.js +6 -6
package/dist/index.js.map +1 -1
package/dist/react.d.ts +7 -7
package/dist/react.js +7 -7
package/dist/react.js.map +1 -1
package/dist/server.d.ts +9 -9
package/dist/server.js +7 -7
package/dist/server.js.map +1 -1
package/dist/web.d.ts +10 -10
package/dist/web.js +7 -7
package/dist/web.js.map +1 -1
package/package.json +1 -1
package/skills/nitida-sdk/SKILL.md +97 -0
package/src/expo/index.ts +3 -3
package/src/index.ts +17 -17
package/src/react/index.ts +10 -10
package/src/server/index.ts +10 -13
package/src/web/index.ts +10 -13

package/dist/web.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../src/index.ts","../src/web/index.ts"],"sourcesContent":["/*\n @nitida/sdk — universal client for the aquienpz multi-tenant asset\n * platform.\n \n One ergonomic facade over the underlying packages\n * (`@nitida/asset-client` URL builders + `@aquienpz/asset-uploader-web`\n * + the slot resolver). Auth is a Better Auth API key (`amk_rt_`)\n issued by aquienpz `bootstrap-project.ts`; tenant scope comes from\n * the key's metadata (`X-Tenant-Code` is log-only).\n \n Usage:\n \n import { AquienpzClient } from \"@nitida/sdk\";\n \n const aq = new AquienpzClient({\n * endpoint: \"https://aquienpz-asset-manager-xxx.run.app\",\n * apiKey: process.env.ASSET_MANAGER_RUNTIME_KEY!,\n * tenantCode: \"realtyone-cr\",\n * cdnBase: \"https://8ok.uk\", // optional override\n * tenantId: 4, // required for tenant-prefixed URLs\n * });\n \n // Slot system (recommended — admin can rebind without redeploys).\n * const hero = await aq.slots.resolve(\"storefront.cr.hero\");\n * const set = await aq.slots.resolveMany([\"a\", \"b\", \"c\"]);\n \n // Lower-level asset operations.\n * const asset = await aq.assets.byHash(sha);\n * const list = await aq.assets.list({ limit: 50 });\n \n // Upload bytes / files.\n * const up = await aq.upload(file, { fileName: \"cover.jpg\" });\n \n For React, see `@nitida/sdk/react` (useSlot, useSlots, useAsset).\n * @module @nitida/sdk\n /\n\nimport {\n type AssetDTO,\n type AssetVariant,\n configureSlotResolver,\n getAssetSrcSet,\n getAssetUrl,\n getHlsStreamingUrl,\n getSignedTransformUrl,\n getTransformSrcSet,\n getTransformUrl,\n getVideoTransformUrl,\n hasPreset,\n invalidateSlotCache,\n type ResolveSlotOptions,\n resolveSlot,\n resolveSlots,\n type SignedTransformOptions,\n type SlotDTO,\n type SlotResolution,\n setCdnBase,\n setTenantId,\n type TransformOptions,\n type VariantPreset,\n} from \"@nitida/asset-client\";\n\n// ---------------------------------------------------------------------------\n// Config\n// ---------------------------------------------------------------------------\n\n/\n Permissive constructor options for the root `AquienpzClient`.\n \n App code should NOT import this type directly — prefer the strict\n * variants from the subpaths:\n \n - `WebClientOptions` from `@nitida/sdk/web` (no `apiKey`)\n * - `ServerClientOptions` from `@nitida/sdk/server` (`apiKey` required)\n \n This root type is the union both modes resolve to; the underlying class\n * accepts both shapes so subpath wrappers can extend without duplication.\n /\nexport type AquienpzClientOptions = {\n /\n Base URL of the aquienpz asset-manager (Cloud Run service URL).\n \n May be relative (e.g. `/api/am`) ONLY in browser contexts where the\n * SDK resolves it against `window.location.origin`. Node/Bun consumers\n * must always pass an absolute URL.\n /\n endpoint: string;\n /\n Better Auth API key with the `amk_rt_` prefix.\n \n * Server-only. Omit when constructing from `@nitida/sdk/web` —\n * your BFF / route handler injects the bearer header in proxy mode.\n /\n apiKey?: string;\n /\n Extra headers merged into every request. The documented way for\n * mobile/Expo clients to authenticate a BFF that gates on the Better Auth\n * session: they can't send cookies automatically, so they pass\n * `{ Cookie: authClient.getCookie() }` here (see Better Auth Expo docs,\n * \"Making Authenticated Requests to Your Server\"). Web/server consumers omit\n * this — browsers attach the same-origin cookie and servers pass `apiKey`.\n /\n headers?: Record<string, string>;\n /* Tenant code — sent as `X-Tenant-Code` (log-only). Authoritative scope is the key's metadata.tenantId. /\n tenantCode: string;\n /* Numeric tenant id — used to build tenant-prefixed CDN URLs `<cdn>/<tenantId b36>/v/<sha>-<preset>.<ext>`. /\n tenantId: number;\n /* Override the public CDN base. Defaults to `https://8ok.uk`. /\n cdnBase?: string;\n /\n Tenant's HMAC signing key for transform URLs (Phase 3). Required\n * only when calling `aq.transform(asset, opts, { sign: true })`.\n \n Generated server-side per tenant (see `infra/sql/tenants_signed_transforms.sql`);\n * fetch via `GET /admin/tenants/:id` with an admin key. *Keep it\n server-side only** — do not ship in `NEXT_PUBLIC_` env vars. Sign\n URLs from a BFF route handler, or pre-sign at build time.\n /\n signingKey?: string;\n};\n\n// ---------------------------------------------------------------------------\n// URL construction\n// ---------------------------------------------------------------------------\n\n/\n Build a fully-qualified URL for an aquienpz endpoint path.\n \n Accepts both absolute endpoints (`https://aquienpz...run.app`) and\n * relative ones (`/api/am`) — the latter only works in browser contexts\n * (resolved against `window.location.origin`). Node/Bun throws a clear\n * error if a relative endpoint is configured.\n \n The native `URL` constructor throws on relative inputs, so every fetch\n * site in the SDK must go through this helper instead of `new URL(...)`.\n /\nfunction endpointUrl(\n opts: Pick<AquienpzClientOptions, \"endpoint\">,\n path: string,\n searchParams?: Record<string, string \| number \| boolean \| undefined>,\n): URL {\n const endpoint = opts.endpoint.replace(/\\/+$/, \"\");\n const isAbsolute = /^https?:\\/\\//i.test(endpoint);\n let base: string;\n if (isAbsolute) {\n base = `${endpoint}${path}`;\n } else if (typeof window !== \"undefined\" && window.location?.origin) {\n base = `${window.location.origin}${endpoint}${path}`;\n } else {\n throw new Error(\n `[@nitida/sdk] relative endpoint \"${endpoint}\" requires a browser; ` +\n \"pass an absolute URL when using the SDK from Node/Bun.\",\n );\n }\n const u = new URL(base);\n if (searchParams) {\n for (const [k, v] of Object.entries(searchParams)) {\n if (v !== undefined && v !== null && v !== \"\") {\n u.searchParams.set(k, String(v));\n }\n }\n }\n return u;\n}\n\n/* Build a request URL as a plain string (no search params). /\nfunction endpointHref(\n opts: Pick<AquienpzClientOptions, \"endpoint\">,\n path: string,\n): string {\n return endpointUrl(opts, path).toString();\n}\n\n/\n Auth headers — conditionally includes `Authorization` only when an\n * `apiKey` is present. In BFF-proxy mode (browser via `/web`) the\n * proxy injects the real bearer header, so we omit it here.\n /\nfunction authHeaders(opts: AquienpzClientOptions): Record<string, string> {\n const h: Record<string, string> = {\n // Caller-supplied headers first; `X-Tenant-Code` stays authoritative below.\n ...opts.headers,\n \"X-Tenant-Code\": opts.tenantCode,\n };\n if (opts.apiKey) h.Authorization = `Bearer ${opts.apiKey}`;\n return h;\n}\n\n// ---------------------------------------------------------------------------\n// Re-exports (so consumers don't double-import from asset-client)\n// ---------------------------------------------------------------------------\n\nexport type {\n AssetDTO,\n AssetVariant,\n ResolveSlotOptions,\n SignedTransformOptions,\n SlotDTO,\n SlotResolution,\n TransformEffect,\n TransformFit,\n TransformFormat,\n TransformGravity,\n TransformOptions,\n VariantPreset,\n} from \"@nitida/asset-client\";\nexport {\n computeVariantDimensions,\n extractAssetSha,\n getAssetDimensions,\n getAssetSrcSet,\n getAssetUrl,\n getHlsStreamingUrl,\n getSignedTransformUrl,\n getTenantId,\n getTransformSrcSet,\n getTransformUrl,\n getVideoTransformUrl,\n hasPreset,\n serializeTransform,\n setTenantId,\n signTransformUrl,\n} from \"@nitida/asset-client\";\n\n// ---------------------------------------------------------------------------\n// Sub-namespaces\n// ---------------------------------------------------------------------------\n\nclass SlotsApi {\n constructor(private readonly opts: AquienpzClientOptions) {}\n\n /* Resolve one slot — returns `{slot, preset, url}` or `{slot: null, url: null}` when unbound. /\n resolve(\n slotKey: string,\n options: ResolveSlotOptions = {},\n ): Promise<SlotResolution> {\n return resolveSlot(slotKey, options);\n }\n\n /* Bulk-resolve N slots in one HTTP round-trip. /\n resolveMany(\n slotKeys: string[],\n options: ResolveSlotOptions = {},\n ): Promise<Record<string, SlotResolution>> {\n return resolveSlots(slotKeys, options);\n }\n\n /* List slots for the tenant (admin). Optional prefix filter for tree views. /\n async list(\n opts: { prefix?: string; limit?: number } = {},\n ): Promise<SlotDTO[]> {\n const u = endpointUrl(this.opts, \"/slots\", {\n prefix: opts.prefix,\n limit: opts.limit,\n });\n const r = await fetch(u, { headers: this.headers() });\n if (!r.ok) throw new Error(`slots list ${r.status}: ${await r.text()}`);\n const body = (await r.json()) as { slots: SlotDTO[] };\n return body.slots;\n }\n\n /* Bind / rebind a slot to an asset. Admin-only operation. /\n async bind(\n slotKey: string,\n body: {\n assetId: string;\n preset?: VariantPreset;\n description?: string;\n updatedBy?: string;\n },\n ): Promise<{ ok: true; slotKey: string; assetId: string }> {\n const r = await fetch(\n endpointHref(this.opts, `/slots/${encodeURIComponent(slotKey)}`),\n {\n method: \"PUT\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n },\n );\n if (!r.ok) throw new Error(`slot bind ${r.status}: ${await r.text()}`);\n return (await r.json()) as { ok: true; slotKey: string; assetId: string };\n }\n\n /\n Recent bindings for a slot. Lets the admin audit who changed\n * what and restore a previous binding without remembering the\n * asset id. Default limit 20, max 100.\n /\n async history(\n slotKey: string,\n opts: { limit?: number } = {},\n ): Promise<SlotHistoryEntry[]> {\n const u = endpointUrl(\n this.opts,\n `/slots/${encodeURIComponent(slotKey)}/history`,\n { limit: opts.limit },\n );\n const r = await fetch(u, { headers: this.headers() });\n if (!r.ok) throw new Error(`slots history ${r.status}: ${await r.text()}`);\n const body = (await r.json()) as { history: SlotHistoryEntry[] };\n return body.history;\n }\n\n /\n Restore the slot to a previous binding. Equivalent to\n * `bind(key, { assetId: previous.assetId, action: \"restore\" })`\n * — the audit row is tagged `restore` instead of `bind`.\n /\n async restore(\n slotKey: string,\n args: { assetId: string; preset?: VariantPreset; updatedBy?: string },\n ): Promise<{ ok: true; slotKey: string; assetId: string }> {\n const r = await fetch(\n endpointHref(this.opts, `/slots/${encodeURIComponent(slotKey)}`),\n {\n method: \"PUT\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ ...args, action: \"restore\" }),\n },\n );\n if (!r.ok) throw new Error(`slot restore ${r.status}: ${await r.text()}`);\n return (await r.json()) as { ok: true; slotKey: string; assetId: string };\n }\n\n /* Remove a slot binding. The asset itself is left alone. /\n async unbind(slotKey: string): Promise<{ ok: true; removed: number }> {\n const r = await fetch(\n endpointHref(this.opts, `/slots/${encodeURIComponent(slotKey)}`),\n {\n method: \"DELETE\",\n headers: this.headers(),\n },\n );\n if (!r.ok) throw new Error(`slot unbind ${r.status}: ${await r.text()}`);\n return (await r.json()) as { ok: true; removed: number };\n }\n\n /* Invalidate the in-process cache after a slot rebind. /\n invalidateCache(slotKey?: string): void {\n invalidateSlotCache(slotKey);\n }\n\n private headers(): Record<string, string> {\n return authHeaders(this.opts);\n }\n}\n\n/\n Returned by `aq.assets.regenerate(...)`. The shape varies by kind —\n * images return immediately with the merged variant list; videos\n * return a dispatch handle (the actual transcode runs in a Cloud Run\n * Job and finishes async).\n /\nexport type RegenerateResult =\n \| {\n ok: true;\n kind: \"image\";\n /* Full variant set after the merge. /\n variants: AssetVariant[];\n /* Presets newly written this run. Useful for showing \"added X\". /\n newVariants: VariantPreset[];\n /\n Which source the server read to derive the new variants:\n * - `\"original\"` / `\"raw\"` → lossless source bytes (best)\n * - `\"xl\"` / `\"lg\"` / `\"md\"` / `\"sm\"` / `\"thumb\"` → a previously\n * encoded WebP variant was used as the source. Output is\n * re-encoded WebP — fine for thumb/sm from lg, lossier when\n * working from already-small sources.\n \n The no-upscale clamp still applies: deriving `lg` (1920) from\n * a 640 `sm` source produces a 640-side `lg` variant, not a\n * stretched 1920.\n /\n sourceUsed: VariantPreset \| \"raw\";\n }\n \| {\n ok: true;\n kind: \"video\";\n dispatch: unknown;\n regenerated: string[] \| \"default\";\n };\n\n/\n Wire shape returned by `POST /assets/upload-url`. Either the server\n * resolves the upload synchronously via dedup (`deduped: true` + existing\n * asset DTO) or it returns a presigned R2 PUT URL plus a `process` payload\n * the caller must POST to `/assets/process` after the PUT lands.\n /\nexport type UploadUrlResult =\n \| { deduped: true; asset: AssetDTO }\n \| {\n deduped: false;\n upload: { url: string; headers?: Record<string, string> };\n process: { url: string; body: Record<string, unknown> };\n };\n\n/\n VIDEO-only delivery knobs threaded into `/assets/process`. Ignored for\n * image / audio / other uploads. Both fields default to today's behavior when\n * omitted, so existing callers are unaffected.\n /\nexport type UploadVideoOptions = {\n /\n `false` → skip the auto-dispatched HLS adaptive ladder (240p–2160p). Use\n * for download-only assets served as a progressive `-v.mp4` and never\n * streamed (e.g. share-video reels) — it avoids a second Cloud Run Job no\n * one watches. Default/absent → the ladder is generated as before.\n /\n hls?: boolean;\n /\n `true` → when the uploaded MP4 is ALREADY web-safe (H.264 + yuv420p),\n * re-mux the `video` variant with `-c copy` instead of re-encoding. Use for\n * delivery-ready uploads (the bytes are already H.264 High / yuv420p /\n * +faststart / capped bitrate) to skip a wasteful re-encode + generational\n * quality loss. Falls back to a full re-encode automatically when the source\n * is not web-safe. Default/absent → unconditional re-encode (today's path).\n /\n passthrough?: boolean;\n};\n\n/* Input shape accepted by `aq.assets.presignUploadUrl(...)`. /\nexport type PresignUploadUrlOptions = {\n /* Full sha256 (64 hex) of the bytes that will be PUT to R2. /\n sha256: string;\n /* MIME type of the bytes (e.g. `image/jpeg`, `video/mp4`). /\n mime: string;\n /* Byte length of the upload payload. /\n bytes: number;\n /* Suggested file name; surfaces in admin dashboards + extension fallback. /\n fileName: string;\n /\n Variant ladder to generate after `/assets/process`. Defaults to\n * `[\"original\"]` server-side when omitted — same contract as `aq.upload`.\n /\n presets?: VariantPreset[];\n /\n Pre-compression size of the source (useful when the browser ran\n * compressorjs / heic2any before computing `bytes`). Surfaces in admin\n * dashboards under `assets.client_original_bytes`.\n /\n clientOriginalBytes?: number;\n /* VIDEO-only delivery knobs forwarded into `/assets/process`. See {@link UploadVideoOptions}. /\n video?: UploadVideoOptions;\n};\n\n/* Input shape accepted by `aq.assets.composeMarketing(...)`. /\nexport type ComposeMarketingSegment = {\n /* Public URL of the source clip (typically a `/t/.../video.mp4` transform). /\n sourceUrl: string;\n /* Optional clip duration in seconds (cap for that segment). /\n durationSec?: number;\n};\n\nexport type ComposeMarketingComposition = {\n /* Transition between consecutive segments. Default `\"cut\"`. /\n transition?: \"cut\" \| \"fade\";\n /* Optional audio track to mix on top of the final composition. /\n audioTrack?: { url: string };\n /* Final composition length in seconds (server may clamp). /\n finalDurationSec?: number;\n};\n\nexport type ComposeMarketingOptions = {\n /* Marketing-kit id this composition belongs to (server uses it for naming + dedup). /\n marketingKitId: string;\n /* Ordered clip segments to stitch. /\n segments: ComposeMarketingSegment[];\n /* Optional composition-level knobs (transitions, audio, duration). /\n composition?: ComposeMarketingComposition;\n};\n\nexport type ComposeMarketingResult = {\n /* Aquienpz asset id of the in-flight composition. Poll `aq.assets.waitReady(id)`. /\n assetId: string;\n /* Asset status at dispatch time — usually `\"processing\"`. /\n status: \"processing\" \| \"ready\" \| \"failed\";\n};\n\nclass AssetsApi {\n constructor(private readonly opts: AquienpzClientOptions) {}\n\n /* Look up an asset by full sha256 (64 hex). Returns null on 404. /\n async byHash(sha256: string): Promise<AssetDTO \| null> {\n const r = await fetch(\n endpointHref(this.opts, `/assets/by-hash/${sha256}`),\n { headers: this.headers() },\n );\n if (r.status === 404) return null;\n if (!r.ok) throw new Error(`assets byHash ${r.status}: ${await r.text()}`);\n return (await r.json()) as AssetDTO;\n }\n\n /* Bulk lookup by sha256s. /\n async byHashes(\n hashes: string[],\n ): Promise<{ existing: AssetDTO[]; missing: string[] }> {\n const r = await fetch(endpointHref(this.opts, \"/assets/by-hashes\"), {\n method: \"POST\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ hashes }),\n });\n if (!r.ok)\n throw new Error(`assets byHashes ${r.status}: ${await r.text()}`);\n return (await r.json()) as { existing: AssetDTO[]; missing: string[] };\n }\n\n /* Paginated list of recent assets for the tenant. /\n async list(\n opts: { limit?: number; cursor?: string; includeDeleted?: boolean } = {},\n ): Promise<{\n assets: AssetDTO[];\n nextCursor: string \| null;\n }> {\n const u = endpointUrl(this.opts, \"/assets\", {\n limit: opts.limit,\n cursor: opts.cursor,\n include_deleted: opts.includeDeleted ? \"true\" : undefined,\n });\n const r = await fetch(u, { headers: this.headers() });\n if (!r.ok) throw new Error(`assets list ${r.status}: ${await r.text()}`);\n return (await r.json()) as {\n assets: AssetDTO[];\n nextCursor: string \| null;\n };\n }\n\n /* Full DTO for an asset (admin view — includes audit-only fields). /\n async get(assetId: string): Promise<AssetDTO & Record<string, unknown>> {\n const r = await fetch(endpointHref(this.opts, `/assets/${assetId}`), {\n headers: this.headers(),\n });\n if (!r.ok) throw new Error(`asset get ${r.status}: ${await r.text()}`);\n return (await r.json()) as AssetDTO & Record<string, unknown>;\n }\n\n /\n Slot bindings pointing at an asset. Use this before deleting an\n * asset so the admin sees which storefront slots would suddenly\n * resolve to nothing.\n /\n async bindings(assetId: string): Promise<\n Array<{\n slotKey: string;\n preset: VariantPreset \| null;\n description: string \| null;\n updatedAt: string;\n updatedBy: string \| null;\n }>\n > {\n const r = await fetch(endpointHref(this.opts, `/assets/${assetId}/slots`), {\n headers: this.headers(),\n });\n if (!r.ok) throw new Error(`asset bindings ${r.status}: ${await r.text()}`);\n const body = (await r.json()) as {\n slots: Array<{\n slotKey: string;\n preset: VariantPreset \| null;\n description: string \| null;\n updatedAt: string;\n updatedBy: string \| null;\n }>;\n };\n return body.slots;\n }\n\n /\n Full variant list for an asset — preset, URL, dimensions, bytes.\n * Stronger-typed wrapper around `get()` that exposes only the\n * `variants` field with the proper `AssetVariant[]` shape.\n \n const v = await aq.assets.variants(logoId);\n * v.map((x) => x.preset); // → (\"thumb\" \| \"sm\" \| … \| \"original\")[]\n /\n async variants(assetId: string): Promise<AssetVariant[]> {\n const dto = await this.get(assetId);\n return Array.isArray((dto as { variants?: unknown }).variants)\n ? (dto as { variants: AssetVariant[] }).variants\n : [];\n }\n\n /\n Add or rebuild variants on an existing asset. Image presets are\n * MERGED with what's there — passing `{ presets: [\"thumb\"] }` adds\n * the thumb variant without touching `lg`, `sm`, `original`, etc.\n \n // Day 0: upload original-only logo\n * const { assetId } = await aq.upload(logoFile); // defaults to [\"original\"]\n \n // Day 7: need a thumb without re-uploading\n * await aq.assets.regenerate(assetId, { presets: [\"thumb\"] });\n \n const after = await aq.assets.variants(assetId);\n * after.map((v) => v.preset); // → [\"original\", \"thumb\"]\n \n Passing no presets re-runs the FULL default pipeline for that\n * asset's kind (thumb+sm+md+lg for images, poster+video for video).\n \n If the asset was uploaded original-only and the cleanup job has\n * already reaped `raw/`, the route falls back to reading the source\n * bytes from `variants/o.<ext>` — no need to re-upload.\n \n Video presets are filtered to `[\"poster\",\"video\",\"aiproxy\"]` and\n * dispatched to the Cloud Run Job (the call returns immediately\n * with a dispatch handle; poll `aq.assets.get(id).status` for\n * completion).\n /\n async regenerate(\n assetId: string,\n opts: { presets?: VariantPreset[] } = {},\n ): Promise<RegenerateResult> {\n const r = await fetch(\n endpointHref(this.opts, `/assets/${assetId}/regenerate`),\n {\n method: \"POST\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify(opts.presets ? { presets: opts.presets } : {}),\n },\n );\n if (!r.ok)\n throw new Error(`asset regenerate ${r.status}: ${await r.text()}`);\n return (await r.json()) as RegenerateResult;\n }\n\n /* Merge metadata into an asset (role / slot / description / tags). /\n async patchMetadata(\n assetId: string,\n metadata: Record<string, unknown>,\n ): Promise<{ ok: true; metadata: Record<string, unknown> }> {\n const r = await fetch(endpointHref(this.opts, `/assets/${assetId}`), {\n method: \"PATCH\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ metadata }),\n });\n if (!r.ok) throw new Error(`asset patch ${r.status}: ${await r.text()}`);\n return (await r.json()) as { ok: true; metadata: Record<string, unknown> };\n }\n\n /\n Request a presigned R2 PUT URL for direct browser-side uploads.\n \n Mirrors the first half of `aq.upload()` — the caller (typically a\n * BFF / share-link dropzone) computes sha256 in the browser, then\n * uploads bytes straight to R2 with the returned `upload.url`, then\n * POSTs `process.body` to `/assets/process` (see {@link processAndWait})\n * once R2 has the bytes.\n \n If the sha is already known to the tenant the server short-circuits\n * with `{ deduped: true, asset }` — no PUT needed.\n \n @example The browser-direct flow, in full\n * ```ts\n * // SERVER (holds the amk_rt_* key — never the browser):\n * const presign = await aq.assets.presignUploadUrl({ sha256, mime, bytes, fileName, presets });\n * if (presign.deduped) return presign.asset; // those bytes already exist; none fly\n \n // BROWSER: PUT straight to presign.upload.url — the bytes never touch your server.\n * // ⚠️ R2 answers that preflight ITSELF, so your origin must be in the BUCKET's CORS policy.\n * // Symptom when it is not: \"PUT failed: network error\" with every earlier step green —\n * // and it cannot be fixed in this SDK, in your app, or in `storefront_origins`.\n \n // SERVER again, forwarding presign.process.body VERBATIM:\n * const asset = await aq.assets.processAndWait(presign.process.body, { timeoutMs: 300_000 });\n * ```\n \n Works for images AND video. A video answers immediately with\n * `{ assetId, status: \"processing\" }` while a Cloud Run Job transcodes, so\n * give `processAndWait` a bigger `timeoutMs` (a transcode + HLS ladder runs\n * 1–2 min; 300_000 is a sane floor).\n /\n async presignUploadUrl(\n opts: PresignUploadUrlOptions,\n ): Promise<UploadUrlResult> {\n const body: Record<string, unknown> = {\n sha256: opts.sha256,\n mime: opts.mime,\n bytes: opts.bytes,\n fileName: opts.fileName,\n };\n if (opts.presets && opts.presets.length > 0) body.presets = opts.presets;\n if (opts.clientOriginalBytes != null)\n body.clientOriginalBytes = opts.clientOriginalBytes;\n if (opts.video != null) body.video = opts.video;\n\n const r = await fetch(endpointHref(this.opts, \"/assets/upload-url\"), {\n method: \"POST\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n if (!r.ok) throw new Error(`upload-url ${r.status}: ${await r.text()}`);\n return (await r.json()) as UploadUrlResult;\n }\n\n /\n Dispatch `/assets/process` with the body returned by a prior\n * {@link presignUploadUrl} call, then poll until the asset transitions\n * to `ready` or `failed`. Throws on `failed` or timeout.\n \n Use this when bytes were uploaded directly from the browser to R2 —\n * `aq.upload()` already does presign + PUT + process + wait in one\n * step when the server holds the bytes.\n /\n async processAndWait(\n processBody: Record<string, unknown>,\n opts: { timeoutMs?: number } = {},\n ): Promise<AssetDTO> {\n const r = await fetch(endpointHref(this.opts, \"/assets/process\"), {\n method: \"POST\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify(processBody),\n });\n if (!r.ok) throw new Error(`process ${r.status}: ${await r.text()}`);\n const proc = (await r.json()) as { assetId?: string };\n if (!proc.assetId) throw new Error(\"process returned no assetId\");\n const final = await this.waitReady(proc.assetId, opts.timeoutMs);\n if (final.status === \"failed\") {\n throw new Error(\n `processAndWait: asset ${proc.assetId} ended status=failed`,\n );\n }\n return final;\n }\n\n /\n Poll `GET /assets/:id` until the asset transitions to `ready` or\n * `failed`. Returns the final DTO (whether ready OR failed — callers\n * decide whether to throw on `failed`). Throws on timeout.\n \n Default timeout is 5 minutes; videos / HLS ladders may need a\n * higher cap (pass `10 * 60_000` for compositions, transcodes).\n /\n async waitReady(assetId: string, timeoutMs = 5 60_000): Promise<AssetDTO> {\n const start = Date.now();\n let delay = 500;\n let last: AssetDTO \| null = null;\n while (Date.now() - start < timeoutMs) {\n last = (await this.get(assetId)) as AssetDTO;\n if (last.status === \"ready\" \|\| last.status === \"failed\") return last;\n await new Promise((r) => setTimeout(r, delay));\n delay = Math.min(delay * 1.5, 5_000);\n }\n if (!last) throw new Error(`waitReady: no asset ${assetId}`);\n throw new Error(`waitReady timeout for ${assetId}`);\n }\n\n /*\n Dispatch `POST /assets/compose-marketing` to stitch pre-uploaded clip\n * segments into a single MP4 composition. Returns the processing asset\n * id immediately — does NOT block on completion. Callers poll via\n * {@link waitReady} (typical timeout: 10 min for multi-segment kits).\n \n Tenant scope is inherited from the SDK client; `tenantCode` is added\n * to the request body so the Cloud Run Job can resolve it without\n * re-reading the header.\n /\n async composeMarketing(\n opts: ComposeMarketingOptions,\n ): Promise<ComposeMarketingResult> {\n const r = await fetch(\n endpointHref(this.opts, \"/assets/compose-marketing\"),\n {\n method: \"POST\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n tenantCode: this.opts.tenantCode,\n marketingKitId: opts.marketingKitId,\n segments: opts.segments,\n composition: opts.composition ?? {},\n }),\n },\n );\n if (!r.ok) {\n throw new Error(`compose-marketing ${r.status}: ${await r.text()}`);\n }\n const body = (await r.json()) as {\n asset?: { id: string; status: \"processing\" \| \"ready\" \| \"failed\" };\n assetId?: string;\n status?: \"processing\" \| \"ready\" \| \"failed\";\n };\n // Server returns `{ asset: { id, status }, dispatch? }`; some older\n // builds returned `{ assetId, status }` directly. Normalize both.\n const assetId = body.asset?.id ?? body.assetId;\n const status = body.asset?.status ?? body.status ?? \"processing\";\n if (!assetId) {\n throw new Error(\"compose-marketing: response missing assetId\");\n }\n return { assetId, status };\n }\n\n private headers(): Record<string, string> {\n return authHeaders(this.opts);\n }\n}\n\n// ---------------------------------------------------------------------------\n// Upload helpers\n// ---------------------------------------------------------------------------\n\n/\n Best-effort MIME from a file name's extension. Used as a fallback for `Uint8Array`\n * uploads (which carry no inherent type) so they still get classified correctly instead\n * of silently becoming `application/octet-stream` → `kind:\"other\"`. Returns `null` when\n * the extension is unknown.\n /\nconst MIME_BY_EXT: Record<string, string> = {\n webp: \"image/webp\",\n jpg: \"image/jpeg\",\n jpeg: \"image/jpeg\",\n png: \"image/png\",\n gif: \"image/gif\",\n avif: \"image/avif\",\n heic: \"image/heic\",\n heif: \"image/heif\",\n svg: \"image/svg+xml\",\n bmp: \"image/bmp\",\n tiff: \"image/tiff\",\n mp4: \"video/mp4\",\n webm: \"video/webm\",\n mov: \"video/quicktime\",\n m4v: \"video/x-m4v\",\n pdf: \"application/pdf\",\n};\nexport function mimeFromFileName(fileName: string \| undefined): string \| null {\n if (!fileName) return null;\n const ext = fileName.split(\".\").pop()?.toLowerCase();\n return ext ? (MIME_BY_EXT[ext] ?? null) : null;\n}\n\n/\n Subset of compressorjs options exposed through the SDK. Re-imported here\n * to avoid a hard import dependency on `./web` from this top-level module\n * (the /web subpath uses browser-only APIs). The runtime `compress`\n * implementation is lazy-loaded so Node/Bun callers don't pay the bundle\n * cost — see `aq.upload` below.\n /\nexport type CompressOptions = {\n quality?: number;\n mimeType?: \"image/jpeg\" \| \"image/webp\";\n maxWidth?: number;\n maxHeight?: number;\n convertSize?: number;\n strict?: boolean;\n keepOriginalDimensions?: boolean;\n convertHeic?: boolean;\n onProgress?: (\n stage: \"convertingHeic\" \| \"compressing\" \| \"compressingKeepingDimensions\",\n ) => void;\n};\n\nexport type UploadOptions = {\n fileName?: string;\n /\n MIME type of the bytes. Only needed for a `Uint8Array` input — a `File`/`Blob`\n * already carries its `.type`. Raw bytes have no inherent MIME, so without this (and\n * without an extension on `fileName` to infer from) they upload as\n * `application/octet-stream`, which the asset-manager classifies as `kind:\"other\"` —\n * meaning NO image/video variants are generated and `regenerate()` is unsupported.\n * Resolution order for the effective MIME: `Blob.type` → `contentType` →\n * inferred from `fileName`'s extension → `application/octet-stream`.\n \n aq.upload(bytes, { fileName: \"cover.webp\" }) // inferred → image/webp ✓\n * aq.upload(bytes, { contentType: \"image/webp\" }) // explicit ✓\n * aq.upload(bytes) // octet-stream → kind:\"other\" ⚠\n /\n contentType?: string;\n /* Computed sha256 of bytes. Skip to compute locally with WebCrypto (browser only). /\n sha256?: string;\n /\n Client-side compression before upload. Saves user bandwidth — typical\n * 5–10× reduction for raw phone photos. Browser-only; in Node/Bun this\n * silently no-ops with a console.warn and the raw bytes upload as-is.\n \n - `true` → use SDK `DEFAULT_COMPRESSION_OPTIONS` (webapp-tuned)\n * - `CompressOptions` → merge over defaults\n * - `false` / omit → no compression (current default behavior)\n \n Implementation is lazy-imported from `@nitida/sdk/web` so callers\n * that never set `compress` don't pay the compressorjs + heic2any\n * bundle cost. Skipped for non-image MIMEs (video, PDF) regardless of\n * this option — those go to the upload pipeline raw.\n \n @see {@link CompressOptions}\n * @see https://github.com/espaciofuturoio/aquienpz/tree/main/packages/sdk#client-side-compression-browsers\n /\n compress?: boolean \| CompressOptions;\n /\n Variant set to generate. Defaults to `[\"original\"]` —\n * if you omit this option, only the raw bytes land on the CDN\n * under the `o` path. Pass an explicit array to request more.\n \n Image presets (`thumb` 256 · `sm` 640 · `md` 1280 · `lg` 1920 ·\n * `xl` 3840 · `original`):\n * - `[\"original\"]` (default) → just the raw bytes. Right call for\n * logos / SVGs / anything you'll resize browser-side or via\n * `aq.assets.regenerate(id, { presets: [\"thumb\"] })` later.\n * - `[\"thumb\",\"sm\",\"md\",\"lg\"]` → the classic responsive ladder.\n * - `[\"thumb\",\"sm\",\"md\",\"lg\",\"xl\"]` → add 4K.\n \n Video presets (`poster`, `video`, `aiproxy`): omit `aiproxy` if\n * the tenant doesn't need the low-res transcode for AI captioning.\n \n No upscaling. Each size preset is a ceiling; a 1080×720 source\n * asked for `xl` (3840) yields a 1080×720 xl variant, not a stretched\n * 3840-wide image.\n \n Idempotent: you can always add missing variants later via\n * `aq.assets.regenerate(id, { presets: [...] })`. The platform\n * stores the source so regeneration doesn't require re-uploading.\n /\n presets?: VariantPreset[];\n /\n Max time to wait for the asset to transition to `ready` (or `failed`)\n * after dispatch. Default `5 * 60_000` (5 min). Bump higher for large\n * videos / HLS transcodes — aquienpz processing time scales with input\n * size and per-instance CPU.\n \n Throws `Error(\"waitReady timeout for <id>\")` if the deadline passes\n * without the asset transitioning. The asset row stays in aquienpz\n * (status=\"processing\") and the next byHash lookup will return it once\n * processing completes; the caller can resume with their own poll.\n /\n timeoutMs?: number;\n /\n VIDEO-only delivery knobs forwarded into `/assets/process`. See\n * {@link UploadVideoOptions}. Ignored for non-video uploads.\n \n // A delivery-ready reel: skip the unused HLS ladder + skip re-encode.\n * await aq.upload(mp4Bytes, {\n * fileName: \"reel.mp4\",\n * presets: [\"poster\", \"video\"],\n * video: { hls: false, passthrough: true },\n * });\n /\n video?: UploadVideoOptions;\n};\n\n/* Default preset set the SDK sends to `/assets/upload-url` when the caller omits `presets`. /\nconst DEFAULT_UPLOAD_PRESETS: VariantPreset[] = [\"original\"];\n\nexport type UploadResult = {\n assetId: string;\n sha256: string;\n cdnUrl: string;\n};\n\nasync function computeSha256(\n bytes: ArrayBuffer \| Uint8Array \| Blob,\n): Promise<string> {\n const buf =\n bytes instanceof Blob\n ? await bytes.arrayBuffer()\n : bytes instanceof Uint8Array\n ? (bytes.buffer as ArrayBuffer)\n : bytes;\n const digest = await crypto.subtle.digest(\"SHA-256\", buf);\n return [...new Uint8Array(digest)]\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n}\n\n// ---------------------------------------------------------------------------\n// Main facade\n// ---------------------------------------------------------------------------\n\n// ---------------------------------------------------------------------------\n// Usage (Cloudinary-style consumption dashboard data)\n// ---------------------------------------------------------------------------\n\n// ---------------------------------------------------------------------------\n// Slot history\n// ---------------------------------------------------------------------------\n\nexport type SlotHistoryEntry = {\n id: string;\n action: \"bind\" \| \"unbind\" \| \"restore\";\n preset: VariantPreset \| null;\n description: string \| null;\n updatedAt: string;\n updatedBy: string \| null;\n assetId: string \| null;\n /* Resolved DTO when the asset still exists; `null` after delete / 404. /\n asset: AssetDTO \| null;\n};\n\nexport type UsageSnapshot = {\n tenant: { id: number; code: string };\n storage: { totalBytes: number; assetCount: number };\n today: UsageWindow;\n last30Days: UsageWindow;\n};\n\nexport type UsageWindow = {\n reads: number;\n writes: number;\n lists: number;\n deletes: number;\n admins: number;\n upscales: number;\n processes: number;\n bytesIn: number;\n};\n\nexport type UsageDailyPoint = {\n date: string;\n reads: number;\n writes: number;\n lists: number;\n deletes: number;\n processes: number;\n bytesIn: number;\n bytesStored: number;\n};\n\nexport type UsagePerKey = {\n apiKeyId: string;\n prefix: string \| null;\n name: string \| null;\n opsTotal: number;\n bytesTotal: number;\n lastSeen: string;\n};\n\nclass UsageApi {\n constructor(private readonly opts: AquienpzClientOptions) {}\n\n /* Snapshot for the active tenant — storage + today + last 30 days totals. /\n async snapshot(): Promise<UsageSnapshot> {\n const r = await fetch(endpointHref(this.opts, \"/usage\"), {\n headers: this.headers(),\n });\n if (!r.ok) throw new Error(`usage snapshot ${r.status}: ${await r.text()}`);\n return (await r.json()) as UsageSnapshot;\n }\n\n /* Daily rollup for charts — 1..365 days, default 30. /\n async timeseries(days = 30): Promise<{\n tenant: { id: number; code: string };\n days: UsageDailyPoint[];\n }> {\n const r = await fetch(\n endpointUrl(this.opts, \"/usage/timeseries\", { days }),\n { headers: this.headers() },\n );\n if (!r.ok)\n throw new Error(`usage timeseries ${r.status}: ${await r.text()}`);\n return (await r.json()) as {\n tenant: { id: number; code: string };\n days: UsageDailyPoint[];\n };\n }\n\n /* Per-API-key breakdown for the current month. /\n async keys(): Promise<{\n tenant: { id: number; code: string };\n monthStart: string;\n keys: UsagePerKey[];\n }> {\n const r = await fetch(endpointHref(this.opts, \"/usage/keys\"), {\n headers: this.headers(),\n });\n if (!r.ok) throw new Error(`usage keys ${r.status}: ${await r.text()}`);\n return (await r.json()) as {\n tenant: { id: number; code: string };\n monthStart: string;\n keys: UsagePerKey[];\n };\n }\n\n private headers(): Record<string, string> {\n return authHeaders(this.opts);\n }\n}\n\nexport class AquienpzClient {\n readonly slots: SlotsApi;\n readonly assets: AssetsApi;\n readonly usage: UsageApi;\n /\n Effective options — read-only. Exposed so the `/web` and `/expo`\n * subpaths can inherit endpoint / apiKey / tenant scope from the\n * configured client without re-passing them per call site.\n /\n readonly opts: AquienpzClientOptions;\n\n constructor(opts: AquienpzClientOptions) {\n this.opts = opts;\n const cdn = opts.cdnBase ?? \"https://8ok.uk\";\n setCdnBase(cdn);\n // Configure the process-global tenant so every variant URL builder\n // (`getAssetUrl`, `urlFor`, `srcSetFor`, upload `cdnUrl`) emits the\n // tenant-prefixed path `<cdn>/<tid b36>/v/<sha>-<preset>.<ext>`.\n setTenantId(opts.tenantId);\n configureSlotResolver({\n endpoint: opts.endpoint,\n apiKey: opts.apiKey,\n tenantCode: opts.tenantCode,\n });\n this.slots = new SlotsApi(opts);\n this.assets = new AssetsApi(opts);\n this.usage = new UsageApi(opts);\n }\n\n /* Tenant id as base36 path segment (e.g. tenantId=4 → \"4/v/\"). /\n get tenantSegment(): string {\n return `${this.opts.tenantId.toString(36)}/v/`;\n }\n\n /* Build the canonical CDN URL deterministically from sha + preset. /\n urlFor(asset: Pick<AssetDTO, \"sha\">, preset: VariantPreset = \"lg\"): string {\n return getAssetUrl(asset, preset);\n }\n\n /* Build a responsive srcSet across the available image presets. /\n srcSetFor(asset: Pick<AssetDTO, \"sha\" \| \"presets\">): string {\n return getAssetSrcSet(asset);\n }\n\n /\n Build an on-the-fly transform URL — `<cdn>/t/<dsl>/<sha>.<ext>`.\n \n ## URL CONVENTION — transforms are NOT tenant-prefixed (variants are)\n * Two distinct delivery paths, by design:\n * - Variants / presets (`urlFor`, `srcSetFor`, upload `cdnUrl`):\n * `<cdn>/<tenantId b36>/v/<sha>-<preset>.<ext>` ← tenant-scoped (e.g. `/4/v/<sha>-lg.webp`)\n * - On-the-fly transforms (`transform`, `transformSrcSet`):\n * `<cdn>/t/<dsl>/<sha>.<ext>` ← GLOBAL, no tenant segment (`/t/...`)\n * The transform service is content-addressed by sha + resizes from the source on demand,\n * so it needs no tenant in the path. Prefixing a transform URL with `/<tenant>/t/...` 404s.\n * Consumers that build URLs by hand must NOT add the tenant segment to `/t/` URLs.\n \n Returns the canonical `lg` variant URL when called with empty options,\n * so callers can swap `urlFor()` for `transform()` without thinking.\n \n URLs with the same params in different order produce the same R2\n * cache entry (the server canonicalizes both sides). Safe to use as\n * stable cache keys.\n \n <Image\n * src={aq.transform(asset, { width: 1280 })}\n * srcSet={aq.transformSrcSet(asset, [640, 960, 1280, 1920])}\n * sizes=\"(max-width: 768px) 100vw, 50vw\"\n * />\n \n @see {@link TransformOptions} for the full param matrix.\n /\n // Overload 1: no signing — synchronous, on-ladder width only (strict).\n transform(asset: Pick<AssetDTO, \"sha\">, opts?: TransformOptions): string;\n // Overload 2: with { sign: true } — async; returns `?sig=<hmac>` URL.\n // Accepts SignedTransformOptions so a signed URL may carry an off-ladder\n // custom width (the signature earns the edge whitelist bypass).\n transform(\n asset: Pick<AssetDTO, \"sha\">,\n opts: SignedTransformOptions,\n signOpts: { sign: true },\n ): Promise<string>;\n transform(\n asset: Pick<AssetDTO, \"sha\">,\n opts: SignedTransformOptions = {},\n signOpts?: { sign: true },\n ): string \| Promise<string> {\n if (!signOpts?.sign) {\n // Unsigned path. Overload 1 constrains `width` to the ladder at every\n // public call site, so an off-ladder width can't reach here through the\n // typed API — narrow back to TransformOptions for the strict builder.\n return (\n getTransformUrl(asset, opts as TransformOptions) ??\n this.urlFor(asset, \"lg\")\n );\n }\n if (!this.opts.signingKey) {\n throw new Error(\n \"aq.transform({ sign: true }) requires `signingKey` in AquienpzClientOptions. \" +\n \"Pull the tenant's signing key from /admin/tenants/:id and pass it to the SDK constructor on a SERVER-side instance only.\",\n );\n }\n // Signed path — custom (off-ladder) widths allowed. Empty opts → no\n // transform DSL, fall back to the unsigned `lg` variant URL.\n return (\n getSignedTransformUrl(asset, opts, this.opts.signingKey) ??\n Promise.resolve(this.urlFor(asset, \"lg\"))\n );\n }\n\n /\n Build a responsive `srcSet` string. One transform URL per width; all\n * other options apply to every URL.\n \n Pass `{ sign: true }` to return signed URLs (async). Without it, the\n * call stays synchronous as before.\n /\n transformSrcSet(\n asset: Pick<AssetDTO, \"sha\">,\n widths: number[],\n extraOpts?: Omit<TransformOptions, \"width\">,\n ): string;\n transformSrcSet(\n asset: Pick<AssetDTO, \"sha\">,\n widths: number[],\n extraOpts: Omit<TransformOptions, \"width\">,\n signOpts: { sign: true },\n ): Promise<string>;\n transformSrcSet(\n asset: Pick<AssetDTO, \"sha\">,\n widths: number[],\n extraOpts: Omit<TransformOptions, \"width\"> = {},\n signOpts?: { sign: true },\n ): string \| Promise<string> {\n if (!signOpts?.sign) return getTransformSrcSet(asset, widths, extraOpts);\n if (!this.opts.signingKey) {\n throw new Error(\n \"aq.transformSrcSet({ sign: true }) requires `signingKey` in AquienpzClientOptions.\",\n );\n }\n const key = this.opts.signingKey;\n return Promise.all(\n widths.map(async (w) => {\n // Signed path → off-ladder widths allowed; build+sign via the\n // custom-width helper (the strict `getTransformUrl` would reject a\n // raw `number` width).\n const signed = await getSignedTransformUrl(\n asset,\n { ...extraOpts, width: w },\n key,\n );\n return signed ? `${signed} ${w}w` : null;\n }),\n ).then((parts) => parts.filter((s): s is string => s != null).join(\", \"));\n }\n\n /\n Build an on-the-fly VIDEO transform URL — Phase 4.\n \n Same DSL shape as `transform()` but the URL has a `.mp4` (default)\n * or `.webm` extension and the server routes the request to a Cloud\n * Run Job for ffmpeg encoding (vs the inline sharp pipeline for\n * images).\n \n On the first request the route returns 202 Accepted with\n * `Retry-After: 10` while the Job runs (typically 5-30 s for a\n * short clip). The response body includes `outputUrl` which is the\n * eventual CDN URL — poll the same transform URL after the\n * retry-after window to get a 302 redirect to it.\n \n const url = aq.transformVideo(asset, {\n * width: 1080, height: 1920, fit: \"cover\",\n * start: 0, duration: 15,\n * });\n * // Pass to Video.js / <video src={url}>; on the first load it\n * // gets 202 + body.outputUrl; subsequent loads hit cache → 302.\n \n Video-specific DSL params:\n * - `start` (seconds, decimal OK)\n * - `duration` (seconds, 1..300)\n * - `format`: \"mp4\" (default) or \"webm\"\n \n The other params (`width`, `height`, `fit`) work identically to\n * image transforms. `gravity`, `quality`, `effect`, `dpr` are\n * accepted by the DSL but currently ignored on the video path.\n /\n transformVideo(\n asset: Pick<AssetDTO, \"sha\">,\n opts: TransformOptions = {},\n ): string {\n return getVideoTransformUrl(asset, opts) ?? this.urlFor(asset, \"lg\");\n }\n\n /\n Build the HLS master playlist URL for a VIDEO asset (Phase 5).\n \n Returns `<cdn>/t/format=hls(,start=…,duration=…)/<sha>.m3u8`. Pass\n * to an HLS-aware player:\n \n <video\n * src={aq.streamingUrl(asset)}\n * controls playsInline\n * // Video.js v10's @videojs/http-streaming ships native HLS —\n * // no plugin needed.\n * />\n \n On the first request the server returns 202 Accepted while a\n * Cloud Run Job builds the multi-rung ladder (typically 1-3 min for\n * a 90 s source — five rungs of 240p/360p/480p/720p/1080p @ AAC).\n * Subsequent requests hit the cache → 302 to the master.m3u8.\n \n Supports `start` + `duration` to ladder a sub-clip. Other DSL\n * params (width, height, fit) are ignored on the HLS path because\n * the rungs determine resolution.\n /\n streamingUrl(\n asset: Pick<AssetDTO, \"sha\">,\n opts: Omit<TransformOptions, \"format\"> = {},\n ): string {\n return getHlsStreamingUrl(asset, opts);\n }\n\n /\n Upload a file or raw bytes. Returns the new asset id + canonical\n * URL. Hash-deduped — uploading the same bytes twice returns the\n * existing asset.\n \n Browser-first: uses `Blob` + WebCrypto. For Node 20+, pass a\n * Uint8Array and a precomputed `sha256` (since `crypto.subtle` works\n * but isn't always available depending on the runtime).\n /\n /\n Upload bytes end to end: optional client compression → sha256 → presign → direct-to-R2 PUT\n * → `/assets/process` → wait until the asset is ready.\n \n ⚠️ `presets` decides what exists FOREVER. Omit it and only `original` is written; ask for\n * `[\"thumb\"]` and the bytes you just uploaded are not retrievable. A variant not requested in\n * this first ingest cannot be added later once the cleanup job reaps `raw/` — measured once as\n * \"97 files archived successfully, zero recoverable\".\n \n @example Deliver an image on a site (the responsive ladder)\n * ```ts\n * import { AquienpzClient } from \"@nitida/sdk/server\";\n \n const aq = new AquienpzClient({ endpoint, apiKey, tenantCode, tenantId });\n * const { assetId, sha256 } = await aq.upload(file, {\n * fileName: file.name,\n * presets: [\"thumb\", \"sm\", \"md\", \"lg\"],\n * });\n * ```\n \n @example ARCHIVE a file — you must ask for `original`\n * ```ts\n * await aq.upload(bytes, {\n * fileName: \"contrato.pdf\",\n * contentType: \"application/pdf\",\n * presets: [\"original\"], // without this the bytes are unrecoverable\n * });\n * ```\n \n @example Raw bytes need an explicit MIME\n * ```ts\n * await aq.upload(bytes, { fileName: \"track.mp3\", contentType: \"audio/mpeg\" });\n * // Without either, it stores as kind:\"other\" — no variants, and regenerate() is unsupported.\n * ```\n \n @example Video — and what does NOT work there\n * ```ts\n * // `original` is accepted and then silently DROPPED: /assets/process filters video presets to\n * // {poster, video, aiproxy, probe} before dispatching the transcode Job.\n * await aq.upload(clip, { fileName: \"tour.mp4\", presets: [\"poster\", \"video\"] });\n \n // Omit `aiproxy`/`probe` unless the asset really goes to a vision model — they cost Job time\n * // and permanent R2 objects that nothing else reads.\n * ```\n /\n async upload(\n input: File \| Blob \| Uint8Array,\n opts: UploadOptions = {},\n ): Promise<UploadResult> {\n // 1. Resolve incoming bytes + mime first (the source of truth for\n // \"should we compress this?\")\n const sourceIsBlob = input instanceof File \|\| input instanceof Blob;\n // A Uint8Array has no inherent MIME. Fall back to an explicit `contentType`, then to\n // the file extension, before octet-stream (which the asset-manager files as\n // `kind:\"other\"` — no variants). A File/Blob's own `.type` always wins when present.\n const sourceMime =\n (sourceIsBlob ? input.type : \"\") \|\|\n opts.contentType \|\|\n mimeFromFileName(opts.fileName) \|\|\n \"application/octet-stream\";\n if (!sourceIsBlob && sourceMime === \"application/octet-stream\") {\n console.warn(\n \"[@nitida/sdk] upload(Uint8Array): no MIME resolved (no `contentType`, no recognizable \" +\n '`fileName` extension) — the asset will be stored as kind:\"other\" with NO image/video ' +\n \"variants and regenerate() unsupported. Pass `contentType` or a `fileName` with an extension.\",\n );\n }\n\n // 2. Optional client-side compression. Image MIMEs only; non-image\n // sources pass through unchanged so a video or PDF upload still\n // works when the caller sets `compress: true` blanket-fashion.\n let bytes: Uint8Array;\n let effectiveMime: string;\n let clientOriginalBytes: number \| undefined;\n\n const wantCompression =\n !!opts.compress &&\n sourceIsBlob &&\n typeof window !== \"undefined\" &&\n sourceMime.startsWith(\"image/\");\n\n if (wantCompression) {\n const compressOpts =\n opts.compress === true ? {} : (opts.compress as CompressOptions);\n // Lazy: keeps compressorjs/heic2any out of bundles that don't use it.\n //\n // Resolve `./web` against `import.meta.url` at runtime so no static\n // analyzer — esbuild, tsup, `bun build --compile`, vite, rollup —\n // can follow the specifier. Holding the path in a plain `const`\n // was not enough: `bun build --compile` constant-folds simple\n // strings and still eagerly bundled `./web.js`, which\n // top-level-imports the browser-only peer deps\n // `@aquienpz/asset-uploader-web` / `@nitida/asset-compressor-web`\n // — neither installed on server consumers — crashing the\n // single-binary on boot with `Cannot find module\n // '@aquienpz/asset-uploader-web'`.\n //\n // The earlier `new URL(\"./web.js\", import.meta.url)` + `await import(URL)`\n // dance survived bun-compile but Turbopack still tracks the URL literal\n // and tries to resolve `./web.js` at build time (no such file exists in\n // src/, only src/web/index.ts), failing with \"Module not found\".\n //\n // Indirect-eval via the Function constructor is opaque to BOTH static\n // analyzers — neither bun-compile nor Turbopack can follow the string\n // back to a module specifier. The browser `typeof window` guard above\n // ensures the branch never runs on the server, so the indirection is\n // safe at runtime.\n // Build the URL inside the Function body too — Turbopack still tracks\n // `new URL(<any expr>, import.meta.url)` as a resolution pattern even\n // when the first arg isn't a literal, so we have to hide both the URL\n // construction AND the import() behind indirect eval.\n const dynImport = new Function(\n \"base\",\n \"return import(new URL('./' + 'web' + '.js', base).href)\",\n ) as (base: string) => Promise<typeof import(\"./web\")>;\n const { compressImage } = await dynImport(import.meta.url);\n const result = await compressImage(input as File \| Blob, compressOpts);\n bytes = new Uint8Array(await result.blob.arrayBuffer());\n clientOriginalBytes = result.originalBytes;\n effectiveMime = result.blob.type \|\| sourceMime;\n } else {\n if (opts.compress && !sourceIsBlob) {\n console.warn(\n \"[@nitida/sdk] compress: true requires a File or Blob input; got Uint8Array — uploading raw bytes.\",\n );\n } else if (opts.compress && typeof window === \"undefined\") {\n console.warn(\n \"[@nitida/sdk] compress: true is browser-only — uploading raw bytes.\",\n );\n } else if (opts.compress && !sourceMime.startsWith(\"image/\")) {\n // Silent: callers can set `compress: true` for batched mixed\n // media and not have to special-case images vs videos.\n }\n bytes =\n input instanceof Uint8Array\n ? input\n : new Uint8Array(await input.arrayBuffer());\n effectiveMime = sourceMime;\n }\n\n const sha = opts.sha256 ?? (await computeSha256(bytes));\n const mime = effectiveMime;\n const fileName =\n opts.fileName ??\n (input instanceof File ? input.name : `upload-${sha.slice(0, 8)}.bin`);\n\n // Dedup probe.\n const existing = await this.assets.byHash(sha);\n if (existing && existing.status === \"ready\") {\n return {\n assetId: existing.id,\n sha256: sha,\n cdnUrl: this.urlFor(existing, this.bestPresetForAsset(existing, mime)),\n };\n }\n\n // Presign + PUT + process. Delegates to `assets.presignUploadUrl()` so\n // the public method and `aq.upload()` share one code path; always\n // threads an explicit preset list so the default matches the SDK\n // contract (`[\"original\"]`) instead of inheriting the server's older\n // default (`thumb+sm+md+lg`).\n const presign = await this.assets.presignUploadUrl({\n sha256: sha,\n mime,\n bytes: bytes.byteLength,\n fileName,\n presets:\n opts.presets && opts.presets.length > 0\n ? opts.presets\n : DEFAULT_UPLOAD_PRESETS,\n ...(clientOriginalBytes != null && { clientOriginalBytes }),\n ...(opts.video != null && { video: opts.video }),\n });\n if (presign.deduped) {\n return {\n assetId: presign.asset.id,\n sha256: sha,\n cdnUrl: this.urlFor(presign.asset, this.defaultPresetForMime(mime)),\n };\n }\n\n const putR = await fetch(presign.upload.url, {\n method: \"PUT\",\n headers: { \"Content-Type\": mime, ...(presign.upload.headers ?? {}) },\n body: new Blob([bytes as unknown as ArrayBuffer], { type: mime }),\n });\n if (!putR.ok)\n throw new Error(`R2 PUT ${putR.status}: ${await putR.text()}`);\n\n const procR = await fetch(endpointHref(this.opts, presign.process.url), {\n method: \"POST\",\n headers: {\n ...authHeaders(this.opts),\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(presign.process.body),\n });\n if (!procR.ok)\n throw new Error(`process ${procR.status}: ${await procR.text()}`);\n const proc = (await procR.json()) as { assetId?: string; kind?: string };\n\n let assetId = proc.assetId;\n if (!assetId && proc.kind === \"video\") {\n // Videos are async — poll by-hash until the row lands.\n const start = Date.now();\n let delay = 1000;\n while (Date.now() - start < 60_000) {\n const dto = await this.assets.byHash(sha);\n if (dto?.id) {\n assetId = dto.id;\n break;\n }\n await new Promise((r) => setTimeout(r, delay));\n delay = Math.min(delay 1.5, 5_000);\n }\n }\n if (!assetId) throw new Error(\"upload: process returned no assetId\");\n\n // Wait until variants are ready so the URL works immediately.\n // Passing `undefined` keeps waitReady's own default (5 min). Callers\n // uploading large videos can opt in to a longer deadline via opts.timeoutMs.\n const final = await this.assets.waitReady(assetId, opts.timeoutMs);\n if (final.status !== \"ready\")\n throw new Error(`upload: asset ended status=${final.status}`);\n return {\n assetId,\n sha256: sha,\n cdnUrl: this.urlFor(final, this.bestPresetForAsset(final, mime)),\n };\n }\n\n private defaultPresetForMime(mime: string): VariantPreset {\n if (mime.startsWith(\"video/\")) return \"video\";\n // The `mp3` variant only exists AFTER /process transcodes it; at presign\n // time only the original is guaranteed to be playable, so bind to it.\n if (mime.startsWith(\"audio/\")) return \"original\";\n return \"lg\";\n }\n\n /*\n Pick a sensible preset to build a URL for, given the asset's actual\n * `presets` string. Falls back through the preference order\n * lg → md → sm → thumb → original (for images)\n * video → poster (for videos)\n * mp3 → original (for audio)\n * so an upload that was processed with e.g. `[\"original\"]` still\n * returns a non-404 URL in `aq.upload`'s result.\n /\n private bestPresetForAsset(asset: AssetDTO, mime: string): VariantPreset {\n const order: VariantPreset[] = mime.startsWith(\"video/\")\n ? [\"video\", \"poster\"]\n : mime.startsWith(\"audio/\")\n ? [\"mp3\", \"original\"] // prefer the cross-browser mp3, else the playable original; never image presets\n : [\"lg\", \"md\", \"sm\", \"thumb\", \"xl\", \"original\"];\n return (\n order.find((p) => hasPreset(asset, p)) ?? this.defaultPresetForMime(mime)\n );\n }\n}\n","/\n @nitida/sdk/web — browser entry point (BFF-proxy mode).\n \n Use this subpath from any browser context (Next.js client components,\n * Vite/CRA SPAs, browser extensions, web workers — anywhere `window`\n * exists). Bundles the core `AquienpzClient` PLUS browser-only helpers\n * (client-side image compression).\n \n // 1. In a client component (browser):\n * import { AquienpzClient } from \"@nitida/sdk/web\";\n \n const aq = new AquienpzClient({\n * // Point at your BFF route — the SDK calls\n * // `${endpoint}/assets/by-hash/...`, `${endpoint}/slots/...`, etc.\n * endpoint: \"/api/am\", // relative ⇒ same-origin proxy\n * tenantCode: \"realtyone-cr\",\n * tenantId: 1,\n * // NO apiKey — the type strips it. Your BFF injects the bearer.\n * });\n \n const result = await aq.upload(file, { compress: true });\n \n // 2. In a Next.js route handler (server) — proxy through to aquienpz:\n * // app/api/am/[...path]/route.ts\n * export async function GET(req: Request, { params }: ...) {\n * const path = params.path.join(\"/\");\n * const url = `${process.env.AQUIENPZ_URL}/${path}${new URL(req.url).search}`;\n * return fetch(url, {\n * headers: {\n * Authorization: `Bearer ${process.env.AQUIENPZ_API_KEY!}`,\n * \"X-Tenant-Code\": \"realtyone-cr\",\n * },\n * });\n * }\n \n Why no `apiKey` in the type: in browser code, a long-lived bearer key\n * would be shipped to every visitor in `NEXT_PUBLIC_`. The type omits\n it physically (TS build error at the call site) so security mistakes\n * are loud instead of silent. Same pattern as `@vercel/blob/client`,\n * `better-auth/client`, AI SDK's `/edge` subpath.\n \n Need to ship a server-rendered storefront with a long-lived key?\n * Import from `@nitida/sdk/server` instead — that subpath requires\n * `apiKey` and bundles cleanly only in Node/Bun/edge runtimes.\n \n Peer deps (auto-installed via npm peer deps — declared optional):\n * - `@aquienpz/asset-uploader-web` for multipart uploads\n * - `@nitida/asset-compressor-web` for client-side compression\n \n Both are lazy-imported; bundles that never call into them skip the cost.\n * @module @nitida/sdk/web\n /\n\nimport {\n type AquienpzClientOptions,\n AquienpzClient as BaseAquienpzClient,\n} from \"..\";\n\n/\n Browser-safe constructor options for `@nitida/sdk/web`.\n \n Identical to the root `AquienpzClientOptions` except `apiKey` and\n * `signingKey` are physically absent — passing them is a TypeScript\n * build error, not a runtime warning. In BFF-proxy mode your route\n * handler injects the bearer header server-side; the browser never\n * sees the long-lived key.\n \n const aq = new AquienpzClient({\n * endpoint: \"/api/am\", // OK: relative → same-origin BFF\n * tenantCode: \"realtyone-cr\",\n * tenantId: 1,\n * // apiKey: \"amk_rt_...\", // ERROR: TS error: not assignable\n * });\n /\nexport type WebClientOptions = Omit<\n AquienpzClientOptions,\n \"apiKey\" \| \"signingKey\"\n>;\n\n/\n Browser-safe `AquienpzClient` — same runtime as the root class, but\n * the constructor's type rejects `apiKey` / `signingKey`. Calls go\n * through your BFF (typically a same-origin route like `/api/am/...`).\n \n For server-side instantiation (Node/Bun/edge), import from\n * `@nitida/sdk/server` instead.\n /\nexport class AquienpzClient extends BaseAquienpzClient {\n constructor(opts: WebClientOptions) {\n super(opts as AquienpzClientOptions);\n }\n}\n\n// Re-export the rest of the surface (URL builders, types, etc.) so\n// browser consumers can satisfy 100% of their needs through this\n// single subpath.\nexport {\n type AssetDTO,\n type AssetVariant,\n type CompressOptions as ClientCompressOptions,\n computeVariantDimensions,\n extractAssetSha,\n getAssetDimensions,\n getAssetSrcSet,\n getAssetUrl,\n getHlsStreamingUrl,\n getSignedTransformUrl,\n getTransformSrcSet,\n getTransformUrl,\n getVideoTransformUrl,\n hasPreset,\n type RegenerateResult,\n type ResolveSlotOptions,\n type SignedTransformOptions,\n type SlotDTO,\n type SlotHistoryEntry,\n type SlotResolution,\n serializeTransform,\n signTransformUrl,\n type TransformEffect,\n type TransformFit,\n type TransformFormat,\n type TransformGravity,\n type TransformOptions,\n type UploadOptions,\n type UploadResult,\n type UsageDailyPoint,\n type UsagePerKey,\n type UsageSnapshot,\n type UsageWindow,\n type VariantPreset,\n} from \"..\";\n\n// Multipart uploader helpers are NOT re-exported from this subpath.\n//\n// `@aquienpz/asset-uploader-web` is an optional peer-dep that isn't on\n// npm yet, so a static `import` at module top broke every consumer of\n// `@nitida/sdk/web` (the bundler tries to resolve before the optional\n// peer check kicks in). The old `createWebUploader` + `UploadTask`\n// re-exports also don't fit BFF-proxy mode (they need a raw `authToken`\n// the BFF doesn't expose). The cleaner story is:\n//\n// - Files ≤50MB → `aq.upload(file)` (single PUT, atomic, BFF-friendly)\n// - Files >50MB → roadmap item for v0.18 (BFF-minted short-lived token\n// + resumable multipart). Track at\n// https://github.com/espaciofuturoio/aquienpz/issues\n//\n// Apps that need `UploadTask` directly today should depend on\n// `@aquienpz/asset-uploader-web` themselves once it's published.\n\n// ---------------------------------------------------------------------------\n// Client-side compression (Phase 1.5)\n// ---------------------------------------------------------------------------\n//\n// Wraps `@nitida/asset-compressor-web` with the SDK's\n// `DEFAULT_COMPRESSION_OPTIONS` — values derived from the realtyone-cr\n// webapp's production tuning (LISTING_STANDARD_: quality 0.80, max-edge\n// 3840px, WebP output, 5MB PNG→JPEG threshold, strict mode). Those defaults\n// differ from `@nitida/asset-compressor-web`'s own defaults (0.85 / 2880 /\n// convertSize=0) which target a slightly different audience; SDK callers\n// get the webapp-tuned values, package-direct callers keep theirs.\n\n// Types inlined from `@nitida/asset-compressor-web` to avoid even a\n// type-only `import` of the optional peer dep — TypeScript's `import type`\n// is erased at runtime, but some bundlers (Turbopack as of 2026-05) still\n// scan and warn on the path. Keeping these types local makes `/web`\n// importable in any project regardless of whether the compressor is\n// installed.\ntype CompressionOptions = {\n quality?: number;\n mimeType?: \"image/jpeg\" \| \"image/webp\";\n maxWidth?: number;\n maxHeight?: number;\n convertSize?: number;\n keepOriginalDimensions?: boolean;\n};\ntype CompressionStatusKey =\n \| \"convertingHeic\"\n \| \"compressing\"\n \| \"compressingKeepingDimensions\"\n \| (string & {});\n\nexport type CompressStage =\n \| \"convertingHeic\"\n \| \"compressing\"\n \| \"compressingKeepingDimensions\";\n\n/*\n Subset of compressorjs options exposed by the SDK. Matches the\n * webapp's `DEFAULT_COMPRESSION_OPTIONS` shape from the realtyone-cr\n * production back-office uploader.\n /\nexport type CompressOptions = {\n /* 0..1. Default 0.80 (`LISTING_STANDARD_IMAGE_QUALITY / 100`). /\n quality?: number;\n /* Output format. Default `\"image/webp\"` (`DEFAULT_IMAGE_TARGET_FORMAT`). /\n mimeType?: \"image/jpeg\" \| \"image/webp\";\n /* Max edge in pixels. Default 3840 (`LISTING_STANDARD_IMAGE_WIDTH`). /\n maxWidth?: number;\n /* Default 3840 (`LISTING_STANDARD_IMAGE_HEIGHT`). /\n maxHeight?: number;\n /\n compressorjs `convertSize`: PNG > this byte count auto-converts to\n * JPEG before the quality pass. Default 5 MB (5 * 1024 * 1024).\n /\n convertSize?: number;\n /* compressorjs strict mode. Default true. /\n strict?: boolean;\n /* Skip the resize pass (keep original dimensions). Default false. /\n keepOriginalDimensions?: boolean;\n /\n Convert HEIC/HEIF inputs to JPEG via heic2any first. Default true.\n * Has no effect on non-HEIC inputs.\n /\n convertHeic?: boolean;\n /* Optional progress hook. Useful for UI status indicators. /\n onProgress?: (stage: CompressStage) => void;\n};\n\n/\n Webapp-tuned defaults (LISTING_STANDARD_). These intentionally differ\n from `@nitida/asset-compressor-web`'s package-level defaults — the\n * SDK overrides at call time.\n /\nexport const DEFAULT_COMPRESSION_OPTIONS: Required<\n Omit<CompressOptions, \"keepOriginalDimensions\" \| \"convertHeic\" \| \"onProgress\">\n> = {\n quality: 0.8,\n mimeType: \"image/webp\",\n maxWidth: 3840,\n maxHeight: 3840,\n convertSize: 5 1024 * 1024,\n strict: true,\n};\n\nexport type CompressResult = {\n /** Compressed bytes wrapped as a Blob (browser-native). /\n blob: Blob;\n /* Size of the source before compression, in bytes. /\n originalBytes: number;\n};\n\n/\n Compress a single image. Browser-only; in Node/Bun this is a no-op that\n * returns the input unchanged (with a warning).\n \n Dynamically imports `@nitida/asset-compressor-web` so apps that never\n * call `compress: true` don't pay the compressorjs + heic2any bundle cost.\n /\nexport async function compressImage(\n file: File \| Blob,\n opts: CompressOptions = {},\n): Promise<CompressResult> {\n if (typeof window === \"undefined\") {\n console.warn(\n \"[@nitida/sdk/web] compressImage called outside a browser — returning input unchanged.\",\n );\n return { blob: file, originalBytes: file.size };\n }\n const finalOpts: Required<\n Omit<\n CompressOptions,\n \"keepOriginalDimensions\" \| \"convertHeic\" \| \"onProgress\"\n >\n > = { ...DEFAULT_COMPRESSION_OPTIONS, ...opts };\n // Map SDK CompressOptions → package CompressionOptions, omitting fields\n // the package doesn't understand (`strict`, `convertHeic`).\n const packageOpts: CompressionOptions = {\n quality: finalOpts.quality,\n mimeType: finalOpts.mimeType,\n maxWidth: finalOpts.maxWidth,\n maxHeight: finalOpts.maxHeight,\n convertSize: finalOpts.convertSize,\n keepOriginalDimensions: opts.keepOriginalDimensions ?? false,\n };\n\n // String indirection defeats bundler static-analysis of dynamic\n // imports — Turbopack/webpack will leave this for the runtime to\n // resolve instead of failing the build when the optional peer dep\n // isn't installed. See feedback_bun_compile_dynamic_imports (same\n // trick used in reverse to opt OUT of bundling).\n const compressorPkg = \"@nitida/asset-compressor-web\";\n const { compressImage: doCompress } = (await import(\n / @vite-ignore / / webpackIgnore: true / compressorPkg\n )) as {\n compressImage: (\n args: unknown,\n ) => Promise<{ blob: Blob; originalSize: number }>;\n };\n const r = await doCompress({\n blob: file,\n filename: file instanceof File ? file.name : \"blob\",\n options: packageOpts,\n statusCallback: opts.onProgress\n ? (status: CompressionStatusKey) => {\n if (\n status === \"convertingHeic\" \|\|\n status === \"compressing\" \|\|\n status === \"compressingKeepingDimensions\"\n ) {\n opts.onProgress?.(status as CompressStage);\n }\n }\n : undefined,\n });\n return { blob: r.blob, originalBytes: r.originalSize };\n}\n\n/\n Compress a batch of images with adaptive concurrency\n * (navigator.hardwareConcurrency, capped at 8). Failures throw — pass\n * `try/catch` per file if you want per-file resilience, or call\n * `compressImage` in a loop yourself.\n */\nexport async function compressImages(\n files: Array<File \| Blob>,\n opts: CompressOptions = {},\n): Promise<CompressResult[]> {\n if (typeof window === \"undefined\") {\n console.warn(\n \"[@nitida/sdk/web] compressImages called outside a browser — returning inputs unchanged.\",\n );\n return files.map((f) => ({ blob: f, originalBytes: f.size }));\n }\n // Sequential per-file via the single-file helper — keeps the cancellation\n // story simple and the API surface narrow. The package's\n // `compressImages` adds an array-of-CompressedResult shape with\n // per-file ids that's overkill for the SDK's stated surface.\n const results: CompressResult[] = [];\n for (const f of files) {\n results.push(await compressImage(f, opts));\n }\n return results;\n}\n"],"mappings":";AAqCA;AAAA,EAGE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EAIA;AAAA,EACA;AAAA,OAGK;AAkJP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAAA;AAAA,EACA,eAAAC;AAAA,EACA,sBAAAC;AAAA,EACA,yBAAAC;AAAA,EACA;AAAA,EACA,sBAAAC;AAAA,EACA,mBAAAC;AAAA,EACA,wBAAAC;AAAA,EACA,aAAAC;AAAA,EACA;AAAA,EACA,eAAAC;AAAA,EACA;AAAA,OACK;AAtFP,SAAS,YACP,MACA,MACA,cACK;AACL,QAAM,WAAW,KAAK,SAAS,QAAQ,QAAQ,EAAE;AACjD,QAAM,aAAa,gBAAgB,KAAK,QAAQ;AAChD,MAAI;AACJ,MAAI,YAAY;AACd,WAAO,GAAG,QAAQ,GAAG,IAAI;AAAA,EAC3B,WAAW,OAAO,WAAW,eAAe,OAAO,UAAU,QAAQ;AACnE,WAAO,GAAG,OAAO,SAAS,MAAM,GAAG,QAAQ,GAAG,IAAI;AAAA,EACpD,OAAO;AACL,UAAM,IAAI;AAAA,MACR,oCAAoC,QAAQ;AAAA,IAE9C;AAAA,EACF;AACA,QAAM,IAAI,IAAI,IAAI,IAAI;AACtB,MAAI,cAAc;AAChB,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,YAAY,GAAG;AACjD,UAAI,MAAM,UAAa,MAAM,QAAQ,MAAM,IAAI;AAC7C,UAAE,aAAa,IAAI,GAAG,OAAO,CAAC,CAAC;AAAA,MACjC;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,aACP,MACA,MACQ;AACR,SAAO,YAAY,MAAM,IAAI,EAAE,SAAS;AAC1C;AAOA,SAAS,YAAY,MAAqD;AACxE,QAAM,IAA4B;AAAA;AAAA,IAEhC,GAAG,KAAK;AAAA,IACR,iBAAiB,KAAK;AAAA,EACxB;AACA,MAAI,KAAK,OAAQ,GAAE,gBAAgB,UAAU,KAAK,MAAM;AACxD,SAAO;AACT;AA0CA,IAAM,WAAN,MAAe;AAAA,EACb,YAA6B,MAA6B;AAA7B;AAAA,EAA8B;AAAA,EAA9B;AAAA;AAAA,EAG7B,QACE,SACA,UAA8B,CAAC,GACN;AACzB,WAAO,YAAY,SAAS,OAAO;AAAA,EACrC;AAAA;AAAA,EAGA,YACE,UACA,UAA8B,CAAC,GACU;AACzC,WAAO,aAAa,UAAU,OAAO;AAAA,EACvC;AAAA;AAAA,EAGA,MAAM,KACJ,OAA4C,CAAC,GACzB;AACpB,UAAM,IAAI,YAAY,KAAK,MAAM,UAAU;AAAA,MACzC,QAAQ,KAAK;AAAA,MACb,OAAO,KAAK;AAAA,IACd,CAAC;AACD,UAAM,IAAI,MAAM,MAAM,GAAG,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC;AACpD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,cAAc,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACtE,UAAM,OAAQ,MAAM,EAAE,KAAK;AAC3B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,MAAM,KACJ,SACA,MAMyD;AACzD,UAAM,IAAI,MAAM;AAAA,MACd,aAAa,KAAK,MAAM,UAAU,mBAAmB,OAAO,CAAC,EAAE;AAAA,MAC/D;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,QACjE,MAAM,KAAK,UAAU,IAAI;AAAA,MAC3B;AAAA,IACF;AACA,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,aAAa,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACrE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,QACJ,SACA,OAA2B,CAAC,GACC;AAC7B,UAAM,IAAI;AAAA,MACR,KAAK;AAAA,MACL,UAAU,mBAAmB,OAAO,CAAC;AAAA,MACrC,EAAE,OAAO,KAAK,MAAM;AAAA,IACtB;AACA,UAAM,IAAI,MAAM,MAAM,GAAG,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC;AACpD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,iBAAiB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACzE,UAAM,OAAQ,MAAM,EAAE,KAAK;AAC3B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,QACJ,SACA,MACyD;AACzD,UAAM,IAAI,MAAM;AAAA,MACd,aAAa,KAAK,MAAM,UAAU,mBAAmB,OAAO,CAAC,EAAE;AAAA,MAC/D;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,QACjE,MAAM,KAAK,UAAU,EAAE,GAAG,MAAM,QAAQ,UAAU,CAAC;AAAA,MACrD;AAAA,IACF;AACA,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,gBAAgB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACxE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA,EAGA,MAAM,OAAO,SAAyD;AACpE,UAAM,IAAI,MAAM;AAAA,MACd,aAAa,KAAK,MAAM,UAAU,mBAAmB,OAAO,CAAC,EAAE;AAAA,MAC/D;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,KAAK,QAAQ;AAAA,MACxB;AAAA,IACF;AACA,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,eAAe,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACvE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA,EAGA,gBAAgB,SAAwB;AACtC,wBAAoB,OAAO;AAAA,EAC7B;AAAA,EAEQ,UAAkC;AACxC,WAAO,YAAY,KAAK,IAAI;AAAA,EAC9B;AACF;AAqIA,IAAM,YAAN,MAAgB;AAAA,EACd,YAA6B,MAA6B;AAA7B;AAAA,EAA8B;AAAA,EAA9B;AAAA;AAAA,EAG7B,MAAM,OAAO,QAA0C;AACrD,UAAM,IAAI,MAAM;AAAA,MACd,aAAa,KAAK,MAAM,mBAAmB,MAAM,EAAE;AAAA,MACnD,EAAE,SAAS,KAAK,QAAQ,EAAE;AAAA,IAC5B;AACA,QAAI,EAAE,WAAW,IAAK,QAAO;AAC7B,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,iBAAiB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACzE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA,EAGA,MAAM,SACJ,QACsD;AACtD,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,mBAAmB,GAAG;AAAA,MAClE,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,MACjE,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;AAAA,IACjC,CAAC;AACD,QAAI,CAAC,EAAE;AACL,YAAM,IAAI,MAAM,mBAAmB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AAClE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA,EAGA,MAAM,KACJ,OAAsE,CAAC,GAItE;AACD,UAAM,IAAI,YAAY,KAAK,MAAM,WAAW;AAAA,MAC1C,OAAO,KAAK;AAAA,MACZ,QAAQ,KAAK;AAAA,MACb,iBAAiB,KAAK,iBAAiB,SAAS;AAAA,IAClD,CAAC;AACD,UAAM,IAAI,MAAM,MAAM,GAAG,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC;AACpD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,eAAe,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACvE,WAAQ,MAAM,EAAE,KAAK;AAAA,EAIvB;AAAA;AAAA,EAGA,MAAM,IAAI,SAA8D;AACtE,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,WAAW,OAAO,EAAE,GAAG;AAAA,MACnE,SAAS,KAAK,QAAQ;AAAA,IACxB,CAAC;AACD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,aAAa,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACrE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SAAS,SAQb;AACA,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,WAAW,OAAO,QAAQ,GAAG;AAAA,MACzE,SAAS,KAAK,QAAQ;AAAA,IACxB,CAAC;AACD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,kBAAkB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AAC1E,UAAM,OAAQ,MAAM,EAAE,KAAK;AAS3B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,SAAS,SAA0C;AACvD,UAAM,MAAM,MAAM,KAAK,IAAI,OAAO;AAClC,WAAO,MAAM,QAAS,IAA+B,QAAQ,IACxD,IAAqC,WACtC,CAAC;AAAA,EACP;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA4BA,MAAM,WACJ,SACA,OAAsC,CAAC,GACZ;AAC3B,UAAM,IAAI,MAAM;AAAA,MACd,aAAa,KAAK,MAAM,WAAW,OAAO,aAAa;AAAA,MACvD;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,QACjE,MAAM,KAAK,UAAU,KAAK,UAAU,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC;AAAA,MACpE;AAAA,IACF;AACA,QAAI,CAAC,EAAE;AACL,YAAM,IAAI,MAAM,oBAAoB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACnE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA,EAGA,MAAM,cACJ,SACA,UAC0D;AAC1D,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,WAAW,OAAO,EAAE,GAAG;AAAA,MACnE,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,MACjE,MAAM,KAAK,UAAU,EAAE,SAAS,CAAC;AAAA,IACnC,CAAC;AACD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,eAAe,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACvE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkCA,MAAM,iBACJ,MAC0B;AAC1B,UAAM,OAAgC;AAAA,MACpC,QAAQ,KAAK;AAAA,MACb,MAAM,KAAK;AAAA,MACX,OAAO,KAAK;AAAA,MACZ,UAAU,KAAK;AAAA,IACjB;AACA,QAAI,KAAK,WAAW,KAAK,QAAQ,SAAS,EAAG,MAAK,UAAU,KAAK;AACjE,QAAI,KAAK,uBAAuB;AAC9B,WAAK,sBAAsB,KAAK;AAClC,QAAI,KAAK,SAAS,KAAM,MAAK,QAAQ,KAAK;AAE1C,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,oBAAoB,GAAG;AAAA,MACnE,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,MACjE,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AACD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,cAAc,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACtE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,eACJ,aACA,OAA+B,CAAC,GACb;AACnB,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,iBAAiB,GAAG;AAAA,MAChE,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,MACjE,MAAM,KAAK,UAAU,WAAW;AAAA,IAClC,CAAC;AACD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,WAAW,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACnE,UAAM,OAAQ,MAAM,EAAE,KAAK;AAC3B,QAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,6BAA6B;AAChE,UAAM,QAAQ,MAAM,KAAK,UAAU,KAAK,SAAS,KAAK,SAAS;AAC/D,QAAI,MAAM,WAAW,UAAU;AAC7B,YAAM,IAAI;AAAA,QACR,yBAAyB,KAAK,OAAO;AAAA,MACvC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,UAAU,SAAiB,YAAY,IAAI,KAA2B;AAC1E,UAAM,QAAQ,KAAK,IAAI;AACvB,QAAI,QAAQ;AACZ,QAAI,OAAwB;AAC5B,WAAO,KAAK,IAAI,IAAI,QAAQ,WAAW;AACrC,aAAQ,MAAM,KAAK,IAAI,OAAO;AAC9B,UAAI,KAAK,WAAW,WAAW,KAAK,WAAW,SAAU,QAAO;AAChE,YAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC;AAC7C,cAAQ,KAAK,IAAI,QAAQ,KAAK,GAAK;AAAA,IACrC;AACA,QAAI,CAAC,KAAM,OAAM,IAAI,MAAM,uBAAuB,OAAO,EAAE;AAC3D,UAAM,IAAI,MAAM,yBAAyB,OAAO,EAAE;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,iBACJ,MACiC;AACjC,UAAM,IAAI,MAAM;AAAA,MACd,aAAa,KAAK,MAAM,2BAA2B;AAAA,MACnD;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,QACjE,MAAM,KAAK,UAAU;AAAA,UACnB,YAAY,KAAK,KAAK;AAAA,UACtB,gBAAgB,KAAK;AAAA,UACrB,UAAU,KAAK;AAAA,UACf,aAAa,KAAK,eAAe,CAAC;AAAA,QACpC,CAAC;AAAA,MACH;AAAA,IACF;AACA,QAAI,CAAC,EAAE,IAAI;AACT,YAAM,IAAI,MAAM,qBAAqB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AAAA,IACpE;AACA,UAAM,OAAQ,MAAM,EAAE,KAAK;AAO3B,UAAM,UAAU,KAAK,OAAO,MAAM,KAAK;AACvC,UAAM,SAAS,KAAK,OAAO,UAAU,KAAK,UAAU;AACpD,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,MAAM,6CAA6C;AAAA,IAC/D;AACA,WAAO,EAAE,SAAS,OAAO;AAAA,EAC3B;AAAA,EAEQ,UAAkC;AACxC,WAAO,YAAY,KAAK,IAAI;AAAA,EAC9B;AACF;AAYA,IAAM,cAAsC;AAAA,EAC1C,MAAM;AAAA,EACN,KAAK;AAAA,EACL,MAAM;AAAA,EACN,KAAK;AAAA,EACL,KAAK;AAAA,EACL,MAAM;AAAA,EACN,MAAM;AAAA,EACN,MAAM;AAAA,EACN,KAAK;AAAA,EACL,KAAK;AAAA,EACL,MAAM;AAAA,EACN,KAAK;AAAA,EACL,MAAM;AAAA,EACN,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AACP;AACO,SAAS,iBAAiB,UAA6C;AAC5E,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,MAAM,SAAS,MAAM,GAAG,EAAE,IAAI,GAAG,YAAY;AACnD,SAAO,MAAO,YAAY,GAAG,KAAK,OAAQ;AAC5C;AA+GA,IAAM,yBAA0C,CAAC,UAAU;AAQ3D,eAAe,cACb,OACiB;AACjB,QAAM,MACJ,iBAAiB,OACb,MAAM,MAAM,YAAY,IACxB,iBAAiB,aACd,MAAM,SACP;AACR,QAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,GAAG;AACxD,SAAO,CAAC,GAAG,IAAI,WAAW,MAAM,CAAC,EAC9B,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AACZ;AAgEA,IAAM,WAAN,MAAe;AAAA,EACb,YAA6B,MAA6B;AAA7B;AAAA,EAA8B;AAAA,EAA9B;AAAA;AAAA,EAG7B,MAAM,WAAmC;AACvC,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,QAAQ,GAAG;AAAA,MACvD,SAAS,KAAK,QAAQ;AAAA,IACxB,CAAC;AACD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,kBAAkB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AAC1E,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA,EAGA,MAAM,WAAW,OAAO,IAGrB;AACD,UAAM,IAAI,MAAM;AAAA,MACd,YAAY,KAAK,MAAM,qBAAqB,EAAE,KAAK,CAAC;AAAA,MACpD,EAAE,SAAS,KAAK,QAAQ,EAAE;AAAA,IAC5B;AACA,QAAI,CAAC,EAAE;AACL,YAAM,IAAI,MAAM,oBAAoB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACnE,WAAQ,MAAM,EAAE,KAAK;AAAA,EAIvB;AAAA;AAAA,EAGA,MAAM,OAIH;AACD,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,aAAa,GAAG;AAAA,MAC5D,SAAS,KAAK,QAAQ;AAAA,IACxB,CAAC;AACD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,cAAc,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACtE,WAAQ,MAAM,EAAE,KAAK;AAAA,EAKvB;AAAA,EAEQ,UAAkC;AACxC,WAAO,YAAY,KAAK,IAAI;AAAA,EAC9B;AACF;AAEO,IAAM,iBAAN,MAAqB;AAAA,EACjB;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,EAET,YAAY,MAA6B;AACvC,SAAK,OAAO;AACZ,UAAM,MAAM,KAAK,WAAW;AAC5B,eAAW,GAAG;AAId,gBAAY,KAAK,QAAQ;AACzB,0BAAsB;AAAA,MACpB,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,YAAY,KAAK;AAAA,IACnB,CAAC;AACD,SAAK,QAAQ,IAAI,SAAS,IAAI;AAC9B,SAAK,SAAS,IAAI,UAAU,IAAI;AAChC,SAAK,QAAQ,IAAI,SAAS,IAAI;AAAA,EAChC;AAAA;AAAA,EAGA,IAAI,gBAAwB;AAC1B,WAAO,GAAG,KAAK,KAAK,SAAS,SAAS,EAAE,CAAC;AAAA,EAC3C;AAAA;AAAA,EAGA,OAAO,OAA8B,SAAwB,MAAc;AACzE,WAAO,YAAY,OAAO,MAAM;AAAA,EAClC;AAAA;AAAA,EAGA,UAAU,OAAkD;AAC1D,WAAO,eAAe,KAAK;AAAA,EAC7B;AAAA,EAwCA,UACE,OACA,OAA+B,CAAC,GAChC,UAC0B;AAC1B,QAAI,CAAC,UAAU,MAAM;AAInB,aACE,gBAAgB,OAAO,IAAwB,KAC/C,KAAK,OAAO,OAAO,IAAI;AAAA,IAE3B;AACA,QAAI,CAAC,KAAK,KAAK,YAAY;AACzB,YAAM,IAAI;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AAGA,WACE,sBAAsB,OAAO,MAAM,KAAK,KAAK,UAAU,KACvD,QAAQ,QAAQ,KAAK,OAAO,OAAO,IAAI,CAAC;AAAA,EAE5C;AAAA,EAoBA,gBACE,OACA,QACA,YAA6C,CAAC,GAC9C,UAC0B;AAC1B,QAAI,CAAC,UAAU,KAAM,QAAO,mBAAmB,OAAO,QAAQ,SAAS;AACvE,QAAI,CAAC,KAAK,KAAK,YAAY;AACzB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAM,MAAM,KAAK,KAAK;AACtB,WAAO,QAAQ;AAAA,MACb,OAAO,IAAI,OAAO,MAAM;AAItB,cAAM,SAAS,MAAM;AAAA,UACnB;AAAA,UACA,EAAE,GAAG,WAAW,OAAO,EAAE;AAAA,UACzB;AAAA,QACF;AACA,eAAO,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM;AAAA,MACtC,CAAC;AAAA,IACH,EAAE,KAAK,CAAC,UAAU,MAAM,OAAO,CAAC,MAAmB,KAAK,IAAI,EAAE,KAAK,IAAI,CAAC;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgCA,eACE,OACA,OAAyB,CAAC,GAClB;AACR,WAAO,qBAAqB,OAAO,IAAI,KAAK,KAAK,OAAO,OAAO,IAAI;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,aACE,OACA,OAAyC,CAAC,GAClC;AACR,WAAO,mBAAmB,OAAO,IAAI;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwDA,MAAM,OACJ,OACA,OAAsB,CAAC,GACA;AAGvB,UAAM,eAAe,iBAAiB,QAAQ,iBAAiB;AAI/D,UAAM,cACH,eAAe,MAAM,OAAO,OAC7B,KAAK,eACL,iBAAiB,KAAK,QAAQ,KAC9B;AACF,QAAI,CAAC,gBAAgB,eAAe,4BAA4B;AAC9D,cAAQ;AAAA,QACN;AAAA,MAGF;AAAA,IACF;AAKA,QAAI;AACJ,QAAI;AACJ,QAAI;AAEJ,UAAM,kBACJ,CAAC,CAAC,KAAK,YACP,gBACA,OAAO,WAAW,eAClB,WAAW,WAAW,QAAQ;AAEhC,QAAI,iBAAiB;AACnB,YAAM,eACJ,KAAK,aAAa,OAAO,CAAC,IAAK,KAAK;AA4BtC,YAAM,YAAY,IAAI;AAAA,QACpB;AAAA,QACA;AAAA,MACF;AACA,YAAM,EAAE,eAAAC,eAAc,IAAI,MAAM,UAAU,YAAY,GAAG;AACzD,YAAM,SAAS,MAAMA,eAAc,OAAsB,YAAY;AACrE,cAAQ,IAAI,WAAW,MAAM,OAAO,KAAK,YAAY,CAAC;AACtD,4BAAsB,OAAO;AAC7B,sBAAgB,OAAO,KAAK,QAAQ;AAAA,IACtC,OAAO;AACL,UAAI,KAAK,YAAY,CAAC,cAAc;AAClC,gBAAQ;AAAA,UACN;AAAA,QACF;AAAA,MACF,WAAW,KAAK,YAAY,OAAO,WAAW,aAAa;AACzD,gBAAQ;AAAA,UACN;AAAA,QACF;AAAA,MACF,WAAW,KAAK,YAAY,CAAC,WAAW,WAAW,QAAQ,GAAG;AAAA,MAG9D;AACA,cACE,iBAAiB,aACb,QACA,IAAI,WAAW,MAAM,MAAM,YAAY,CAAC;AAC9C,sBAAgB;AAAA,IAClB;AAEA,UAAM,MAAM,KAAK,UAAW,MAAM,cAAc,KAAK;AACrD,UAAM,OAAO;AACb,UAAM,WACJ,KAAK,aACJ,iBAAiB,OAAO,MAAM,OAAO,UAAU,IAAI,MAAM,GAAG,CAAC,CAAC;AAGjE,UAAM,WAAW,MAAM,KAAK,OAAO,OAAO,GAAG;AAC7C,QAAI,YAAY,SAAS,WAAW,SAAS;AAC3C,aAAO;AAAA,QACL,SAAS,SAAS;AAAA,QAClB,QAAQ;AAAA,QACR,QAAQ,KAAK,OAAO,UAAU,KAAK,mBAAmB,UAAU,IAAI,CAAC;AAAA,MACvE;AAAA,IACF;AAOA,UAAM,UAAU,MAAM,KAAK,OAAO,iBAAiB;AAAA,MACjD,QAAQ;AAAA,MACR;AAAA,MACA,OAAO,MAAM;AAAA,MACb;AAAA,MACA,SACE,KAAK,WAAW,KAAK,QAAQ,SAAS,IAClC,KAAK,UACL;AAAA,MACN,GAAI,uBAAuB,QAAQ,EAAE,oBAAoB;AAAA,MACzD,GAAI,KAAK,SAAS,QAAQ,EAAE,OAAO,KAAK,MAAM;AAAA,IAChD,CAAC;AACD,QAAI,QAAQ,SAAS;AACnB,aAAO;AAAA,QACL,SAAS,QAAQ,MAAM;AAAA,QACvB,QAAQ;AAAA,QACR,QAAQ,KAAK,OAAO,QAAQ,OAAO,KAAK,qBAAqB,IAAI,CAAC;AAAA,MACpE;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,MAAM,QAAQ,OAAO,KAAK;AAAA,MAC3C,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,MAAM,GAAI,QAAQ,OAAO,WAAW,CAAC,EAAG;AAAA,MACnE,MAAM,IAAI,KAAK,CAAC,KAA+B,GAAG,EAAE,MAAM,KAAK,CAAC;AAAA,IAClE,CAAC;AACD,QAAI,CAAC,KAAK;AACR,YAAM,IAAI,MAAM,UAAU,KAAK,MAAM,KAAK,MAAM,KAAK,KAAK,CAAC,EAAE;AAE/D,UAAM,QAAQ,MAAM,MAAM,aAAa,KAAK,MAAM,QAAQ,QAAQ,GAAG,GAAG;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,GAAG,YAAY,KAAK,IAAI;AAAA,QACxB,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU,QAAQ,QAAQ,IAAI;AAAA,IAC3C,CAAC;AACD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,MAAM,WAAW,MAAM,MAAM,KAAK,MAAM,MAAM,KAAK,CAAC,EAAE;AAClE,UAAM,OAAQ,MAAM,MAAM,KAAK;AAE/B,QAAI,UAAU,KAAK;AACnB,QAAI,CAAC,WAAW,KAAK,SAAS,SAAS;AAErC,YAAM,QAAQ,KAAK,IAAI;AACvB,UAAI,QAAQ;AACZ,aAAO,KAAK,IAAI,IAAI,QAAQ,KAAQ;AAClC,cAAM,MAAM,MAAM,KAAK,OAAO,OAAO,GAAG;AACxC,YAAI,KAAK,IAAI;AACX,oBAAU,IAAI;AACd;AAAA,QACF;AACA,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC;AAC7C,gBAAQ,KAAK,IAAI,QAAQ,KAAK,GAAK;AAAA,MACrC;AAAA,IACF;AACA,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,qCAAqC;AAKnE,UAAM,QAAQ,MAAM,KAAK,OAAO,UAAU,SAAS,KAAK,SAAS;AACjE,QAAI,MAAM,WAAW;AACnB,YAAM,IAAI,MAAM,8BAA8B,MAAM,MAAM,EAAE;AAC9D,WAAO;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ,KAAK,OAAO,OAAO,KAAK,mBAAmB,OAAO,IAAI,CAAC;AAAA,IACjE;AAAA,EACF;AAAA,EAEQ,qBAAqB,MAA6B;AACxD,QAAI,KAAK,WAAW,QAAQ,EAAG,QAAO;AAGtC,QAAI,KAAK,WAAW,QAAQ,EAAG,QAAO;AACtC,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWQ,mBAAmB,OAAiB,MAA6B;AACvE,UAAM,QAAyB,KAAK,WAAW,QAAQ,IACnD,CAAC,SAAS,QAAQ,IAClB,KAAK,WAAW,QAAQ,IACtB,CAAC,OAAO,UAAU,IAClB,CAAC,MAAM,MAAM,MAAM,SAAS,MAAM,UAAU;AAClD,WACE,MAAM,KAAK,CAAC,MAAM,UAAU,OAAO,CAAC,CAAC,KAAK,KAAK,qBAAqB,IAAI;AAAA,EAE5E;AACF;;;ACl8CO,IAAMC,kBAAN,cAA6B,eAAmB;AAAA,EACrD,YAAY,MAAwB;AAClC,UAAM,IAA6B;AAAA,EACrC;AACF;AAqIO,IAAM,8BAET;AAAA,EACF,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,WAAW;AAAA,EACX,aAAa,IAAI,OAAO;AAAA,EACxB,QAAQ;AACV;AAgBA,eAAsB,cACpB,MACA,OAAwB,CAAC,GACA;AACzB,MAAI,OAAO,WAAW,aAAa;AACjC,YAAQ;AAAA,MACN;AAAA,IACF;AACA,WAAO,EAAE,MAAM,MAAM,eAAe,KAAK,KAAK;AAAA,EAChD;AACA,QAAM,YAKF,EAAE,GAAG,6BAA6B,GAAG,KAAK;AAG9C,QAAM,cAAkC;AAAA,IACtC,SAAS,UAAU;AAAA,IACnB,UAAU,UAAU;AAAA,IACpB,UAAU,UAAU;AAAA,IACpB,WAAW,UAAU;AAAA,IACrB,aAAa,UAAU;AAAA,IACvB,wBAAwB,KAAK,0BAA0B;AAAA,EACzD;AAOA,QAAM,gBAAgB;AACtB,QAAM,EAAE,eAAe,WAAW,IAAK,MAAM;AAAA;AAAA;AAAA,IACE;AAAA;AAM/C,QAAM,IAAI,MAAM,WAAW;AAAA,IACzB,MAAM;AAAA,IACN,UAAU,gBAAgB,OAAO,KAAK,OAAO;AAAA,IAC7C,SAAS;AAAA,IACT,gBAAgB,KAAK,aACjB,CAAC,WAAiC;AAChC,UACE,WAAW,oBACX,WAAW,iBACX,WAAW,gCACX;AACA,aAAK,aAAa,MAAuB;AAAA,MAC3C;AAAA,IACF,IACA;AAAA,EACN,CAAC;AACD,SAAO,EAAE,MAAM,EAAE,MAAM,eAAe,EAAE,aAAa;AACvD;AAQA,eAAsB,eACpB,OACA,OAAwB,CAAC,GACE;AAC3B,MAAI,OAAO,WAAW,aAAa;AACjC,YAAQ;AAAA,MACN;AAAA,IACF;AACA,WAAO,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,EAAE,KAAK,EAAE;AAAA,EAC9D;AAKA,QAAM,UAA4B,CAAC;AACnC,aAAW,KAAK,OAAO;AACrB,YAAQ,KAAK,MAAM,cAAc,GAAG,IAAI,CAAC;AAAA,EAC3C;AACA,SAAO;AACT;","names":["getAssetSrcSet","getAssetUrl","getHlsStreamingUrl","getSignedTransformUrl","getTransformSrcSet","getTransformUrl","getVideoTransformUrl","hasPreset","setTenantId","compressImage","AquienpzClient"]}
1	+ {"version":3,"sources":["../src/index.ts","../src/web/index.ts"],"sourcesContent":["/*\n @nitida/sdk — universal client for the aquienpz multi-tenant asset\n * platform.\n \n One ergonomic facade over the underlying packages\n * (`@nitida/asset-client` URL builders + `@aquienpz/asset-uploader-web`\n * + the slot resolver). Auth is a Better Auth API key (`amk_rt_`)\n issued by aquienpz `bootstrap-project.ts`; tenant scope comes from\n * the key's metadata (`X-Tenant-Code` is log-only).\n \n Usage:\n \n import { NitidaClient } from \"@nitida/sdk\";\n \n const aq = new NitidaClient({\n * endpoint: \"https://aquienpz-asset-manager-xxx.run.app\",\n * apiKey: process.env.ASSET_MANAGER_RUNTIME_KEY!,\n * tenantCode: \"realtyone-cr\",\n * cdnBase: \"https://8ok.uk\", // optional override\n * tenantId: 4, // required for tenant-prefixed URLs\n * });\n \n // Slot system (recommended — admin can rebind without redeploys).\n * const hero = await aq.slots.resolve(\"storefront.cr.hero\");\n * const set = await aq.slots.resolveMany([\"a\", \"b\", \"c\"]);\n \n // Lower-level asset operations.\n * const asset = await aq.assets.byHash(sha);\n * const list = await aq.assets.list({ limit: 50 });\n \n // Upload bytes / files.\n * const up = await aq.upload(file, { fileName: \"cover.jpg\" });\n \n For React, see `@nitida/sdk/react` (useSlot, useSlots, useAsset).\n * @module @nitida/sdk\n /\n\nimport {\n type AssetDTO,\n type AssetVariant,\n configureSlotResolver,\n getAssetSrcSet,\n getAssetUrl,\n getHlsStreamingUrl,\n getSignedTransformUrl,\n getTransformSrcSet,\n getTransformUrl,\n getVideoTransformUrl,\n hasPreset,\n invalidateSlotCache,\n type ResolveSlotOptions,\n resolveSlot,\n resolveSlots,\n type SignedTransformOptions,\n type SlotDTO,\n type SlotResolution,\n setCdnBase,\n setTenantId,\n type TransformOptions,\n type VariantPreset,\n} from \"@nitida/asset-client\";\n\n// ---------------------------------------------------------------------------\n// Config\n// ---------------------------------------------------------------------------\n\n/\n Permissive constructor options for the root `NitidaClient`.\n \n App code should NOT import this type directly — prefer the strict\n * variants from the subpaths:\n \n - `WebClientOptions` from `@nitida/sdk/web` (no `apiKey`)\n * - `ServerClientOptions` from `@nitida/sdk/server` (`apiKey` required)\n \n This root type is the union both modes resolve to; the underlying class\n * accepts both shapes so subpath wrappers can extend without duplication.\n /\nexport type NitidaClientOptions = {\n /\n Base URL of the aquienpz asset-manager (Cloud Run service URL).\n \n May be relative (e.g. `/api/am`) ONLY in browser contexts where the\n * SDK resolves it against `window.location.origin`. Node/Bun consumers\n * must always pass an absolute URL.\n /\n endpoint: string;\n /\n Better Auth API key with the `amk_rt_` prefix.\n \n * Server-only. Omit when constructing from `@nitida/sdk/web` —\n * your BFF / route handler injects the bearer header in proxy mode.\n /\n apiKey?: string;\n /\n Extra headers merged into every request. The documented way for\n * mobile/Expo clients to authenticate a BFF that gates on the Better Auth\n * session: they can't send cookies automatically, so they pass\n * `{ Cookie: authClient.getCookie() }` here (see Better Auth Expo docs,\n * \"Making Authenticated Requests to Your Server\"). Web/server consumers omit\n * this — browsers attach the same-origin cookie and servers pass `apiKey`.\n /\n headers?: Record<string, string>;\n /* Tenant code — sent as `X-Tenant-Code` (log-only). Authoritative scope is the key's metadata.tenantId. /\n tenantCode: string;\n /* Numeric tenant id — used to build tenant-prefixed CDN URLs `<cdn>/<tenantId b36>/v/<sha>-<preset>.<ext>`. /\n tenantId: number;\n /* Override the public CDN base. Defaults to `https://8ok.uk`. /\n cdnBase?: string;\n /\n Tenant's HMAC signing key for transform URLs (Phase 3). Required\n * only when calling `aq.transform(asset, opts, { sign: true })`.\n \n Generated server-side per tenant (see `infra/sql/tenants_signed_transforms.sql`);\n * fetch via `GET /admin/tenants/:id` with an admin key. *Keep it\n server-side only** — do not ship in `NEXT_PUBLIC_` env vars. Sign\n URLs from a BFF route handler, or pre-sign at build time.\n /\n signingKey?: string;\n};\n\n// ---------------------------------------------------------------------------\n// URL construction\n// ---------------------------------------------------------------------------\n\n/\n Build a fully-qualified URL for an aquienpz endpoint path.\n \n Accepts both absolute endpoints (`https://aquienpz...run.app`) and\n * relative ones (`/api/am`) — the latter only works in browser contexts\n * (resolved against `window.location.origin`). Node/Bun throws a clear\n * error if a relative endpoint is configured.\n \n The native `URL` constructor throws on relative inputs, so every fetch\n * site in the SDK must go through this helper instead of `new URL(...)`.\n /\nfunction endpointUrl(\n opts: Pick<NitidaClientOptions, \"endpoint\">,\n path: string,\n searchParams?: Record<string, string \| number \| boolean \| undefined>,\n): URL {\n const endpoint = opts.endpoint.replace(/\\/+$/, \"\");\n const isAbsolute = /^https?:\\/\\//i.test(endpoint);\n let base: string;\n if (isAbsolute) {\n base = `${endpoint}${path}`;\n } else if (typeof window !== \"undefined\" && window.location?.origin) {\n base = `${window.location.origin}${endpoint}${path}`;\n } else {\n throw new Error(\n `[@nitida/sdk] relative endpoint \"${endpoint}\" requires a browser; ` +\n \"pass an absolute URL when using the SDK from Node/Bun.\",\n );\n }\n const u = new URL(base);\n if (searchParams) {\n for (const [k, v] of Object.entries(searchParams)) {\n if (v !== undefined && v !== null && v !== \"\") {\n u.searchParams.set(k, String(v));\n }\n }\n }\n return u;\n}\n\n/* Build a request URL as a plain string (no search params). /\nfunction endpointHref(\n opts: Pick<NitidaClientOptions, \"endpoint\">,\n path: string,\n): string {\n return endpointUrl(opts, path).toString();\n}\n\n/\n Auth headers — conditionally includes `Authorization` only when an\n * `apiKey` is present. In BFF-proxy mode (browser via `/web`) the\n * proxy injects the real bearer header, so we omit it here.\n /\nfunction authHeaders(opts: NitidaClientOptions): Record<string, string> {\n const h: Record<string, string> = {\n // Caller-supplied headers first; `X-Tenant-Code` stays authoritative below.\n ...opts.headers,\n \"X-Tenant-Code\": opts.tenantCode,\n };\n if (opts.apiKey) h.Authorization = `Bearer ${opts.apiKey}`;\n return h;\n}\n\n// ---------------------------------------------------------------------------\n// Re-exports (so consumers don't double-import from asset-client)\n// ---------------------------------------------------------------------------\n\nexport type {\n AssetDTO,\n AssetVariant,\n ResolveSlotOptions,\n SignedTransformOptions,\n SlotDTO,\n SlotResolution,\n TransformEffect,\n TransformFit,\n TransformFormat,\n TransformGravity,\n TransformOptions,\n VariantPreset,\n} from \"@nitida/asset-client\";\nexport {\n computeVariantDimensions,\n extractAssetSha,\n getAssetDimensions,\n getAssetSrcSet,\n getAssetUrl,\n getHlsStreamingUrl,\n getSignedTransformUrl,\n getTenantId,\n getTransformSrcSet,\n getTransformUrl,\n getVideoTransformUrl,\n hasPreset,\n serializeTransform,\n setTenantId,\n signTransformUrl,\n} from \"@nitida/asset-client\";\n\n// ---------------------------------------------------------------------------\n// Sub-namespaces\n// ---------------------------------------------------------------------------\n\nclass SlotsApi {\n constructor(private readonly opts: NitidaClientOptions) {}\n\n /* Resolve one slot — returns `{slot, preset, url}` or `{slot: null, url: null}` when unbound. /\n resolve(\n slotKey: string,\n options: ResolveSlotOptions = {},\n ): Promise<SlotResolution> {\n return resolveSlot(slotKey, options);\n }\n\n /* Bulk-resolve N slots in one HTTP round-trip. /\n resolveMany(\n slotKeys: string[],\n options: ResolveSlotOptions = {},\n ): Promise<Record<string, SlotResolution>> {\n return resolveSlots(slotKeys, options);\n }\n\n /* List slots for the tenant (admin). Optional prefix filter for tree views. /\n async list(\n opts: { prefix?: string; limit?: number } = {},\n ): Promise<SlotDTO[]> {\n const u = endpointUrl(this.opts, \"/slots\", {\n prefix: opts.prefix,\n limit: opts.limit,\n });\n const r = await fetch(u, { headers: this.headers() });\n if (!r.ok) throw new Error(`slots list ${r.status}: ${await r.text()}`);\n const body = (await r.json()) as { slots: SlotDTO[] };\n return body.slots;\n }\n\n /* Bind / rebind a slot to an asset. Admin-only operation. /\n async bind(\n slotKey: string,\n body: {\n assetId: string;\n preset?: VariantPreset;\n description?: string;\n updatedBy?: string;\n },\n ): Promise<{ ok: true; slotKey: string; assetId: string }> {\n const r = await fetch(\n endpointHref(this.opts, `/slots/${encodeURIComponent(slotKey)}`),\n {\n method: \"PUT\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n },\n );\n if (!r.ok) throw new Error(`slot bind ${r.status}: ${await r.text()}`);\n return (await r.json()) as { ok: true; slotKey: string; assetId: string };\n }\n\n /\n Recent bindings for a slot. Lets the admin audit who changed\n * what and restore a previous binding without remembering the\n * asset id. Default limit 20, max 100.\n /\n async history(\n slotKey: string,\n opts: { limit?: number } = {},\n ): Promise<SlotHistoryEntry[]> {\n const u = endpointUrl(\n this.opts,\n `/slots/${encodeURIComponent(slotKey)}/history`,\n { limit: opts.limit },\n );\n const r = await fetch(u, { headers: this.headers() });\n if (!r.ok) throw new Error(`slots history ${r.status}: ${await r.text()}`);\n const body = (await r.json()) as { history: SlotHistoryEntry[] };\n return body.history;\n }\n\n /\n Restore the slot to a previous binding. Equivalent to\n * `bind(key, { assetId: previous.assetId, action: \"restore\" })`\n * — the audit row is tagged `restore` instead of `bind`.\n /\n async restore(\n slotKey: string,\n args: { assetId: string; preset?: VariantPreset; updatedBy?: string },\n ): Promise<{ ok: true; slotKey: string; assetId: string }> {\n const r = await fetch(\n endpointHref(this.opts, `/slots/${encodeURIComponent(slotKey)}`),\n {\n method: \"PUT\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ ...args, action: \"restore\" }),\n },\n );\n if (!r.ok) throw new Error(`slot restore ${r.status}: ${await r.text()}`);\n return (await r.json()) as { ok: true; slotKey: string; assetId: string };\n }\n\n /* Remove a slot binding. The asset itself is left alone. /\n async unbind(slotKey: string): Promise<{ ok: true; removed: number }> {\n const r = await fetch(\n endpointHref(this.opts, `/slots/${encodeURIComponent(slotKey)}`),\n {\n method: \"DELETE\",\n headers: this.headers(),\n },\n );\n if (!r.ok) throw new Error(`slot unbind ${r.status}: ${await r.text()}`);\n return (await r.json()) as { ok: true; removed: number };\n }\n\n /* Invalidate the in-process cache after a slot rebind. /\n invalidateCache(slotKey?: string): void {\n invalidateSlotCache(slotKey);\n }\n\n private headers(): Record<string, string> {\n return authHeaders(this.opts);\n }\n}\n\n/\n Returned by `aq.assets.regenerate(...)`. The shape varies by kind —\n * images return immediately with the merged variant list; videos\n * return a dispatch handle (the actual transcode runs in a Cloud Run\n * Job and finishes async).\n /\nexport type RegenerateResult =\n \| {\n ok: true;\n kind: \"image\";\n /* Full variant set after the merge. /\n variants: AssetVariant[];\n /* Presets newly written this run. Useful for showing \"added X\". /\n newVariants: VariantPreset[];\n /\n Which source the server read to derive the new variants:\n * - `\"original\"` / `\"raw\"` → lossless source bytes (best)\n * - `\"xl\"` / `\"lg\"` / `\"md\"` / `\"sm\"` / `\"thumb\"` → a previously\n * encoded WebP variant was used as the source. Output is\n * re-encoded WebP — fine for thumb/sm from lg, lossier when\n * working from already-small sources.\n \n The no-upscale clamp still applies: deriving `lg` (1920) from\n * a 640 `sm` source produces a 640-side `lg` variant, not a\n * stretched 1920.\n /\n sourceUsed: VariantPreset \| \"raw\";\n }\n \| {\n ok: true;\n kind: \"video\";\n dispatch: unknown;\n regenerated: string[] \| \"default\";\n };\n\n/\n Wire shape returned by `POST /assets/upload-url`. Either the server\n * resolves the upload synchronously via dedup (`deduped: true` + existing\n * asset DTO) or it returns a presigned R2 PUT URL plus a `process` payload\n * the caller must POST to `/assets/process` after the PUT lands.\n /\nexport type UploadUrlResult =\n \| { deduped: true; asset: AssetDTO }\n \| {\n deduped: false;\n upload: { url: string; headers?: Record<string, string> };\n process: { url: string; body: Record<string, unknown> };\n };\n\n/\n VIDEO-only delivery knobs threaded into `/assets/process`. Ignored for\n * image / audio / other uploads. Both fields default to today's behavior when\n * omitted, so existing callers are unaffected.\n /\nexport type UploadVideoOptions = {\n /\n `false` → skip the auto-dispatched HLS adaptive ladder (240p–2160p). Use\n * for download-only assets served as a progressive `-v.mp4` and never\n * streamed (e.g. share-video reels) — it avoids a second Cloud Run Job no\n * one watches. Default/absent → the ladder is generated as before.\n /\n hls?: boolean;\n /\n `true` → when the uploaded MP4 is ALREADY web-safe (H.264 + yuv420p),\n * re-mux the `video` variant with `-c copy` instead of re-encoding. Use for\n * delivery-ready uploads (the bytes are already H.264 High / yuv420p /\n * +faststart / capped bitrate) to skip a wasteful re-encode + generational\n * quality loss. Falls back to a full re-encode automatically when the source\n * is not web-safe. Default/absent → unconditional re-encode (today's path).\n /\n passthrough?: boolean;\n};\n\n/* Input shape accepted by `aq.assets.presignUploadUrl(...)`. /\nexport type PresignUploadUrlOptions = {\n /* Full sha256 (64 hex) of the bytes that will be PUT to R2. /\n sha256: string;\n /* MIME type of the bytes (e.g. `image/jpeg`, `video/mp4`). /\n mime: string;\n /* Byte length of the upload payload. /\n bytes: number;\n /* Suggested file name; surfaces in admin dashboards + extension fallback. /\n fileName: string;\n /\n Variant ladder to generate after `/assets/process`. Defaults to\n * `[\"original\"]` server-side when omitted — same contract as `aq.upload`.\n /\n presets?: VariantPreset[];\n /\n Pre-compression size of the source (useful when the browser ran\n * compressorjs / heic2any before computing `bytes`). Surfaces in admin\n * dashboards under `assets.client_original_bytes`.\n /\n clientOriginalBytes?: number;\n /* VIDEO-only delivery knobs forwarded into `/assets/process`. See {@link UploadVideoOptions}. /\n video?: UploadVideoOptions;\n};\n\n/* Input shape accepted by `aq.assets.composeMarketing(...)`. /\nexport type ComposeMarketingSegment = {\n /* Public URL of the source clip (typically a `/t/.../video.mp4` transform). /\n sourceUrl: string;\n /* Optional clip duration in seconds (cap for that segment). /\n durationSec?: number;\n};\n\nexport type ComposeMarketingComposition = {\n /* Transition between consecutive segments. Default `\"cut\"`. /\n transition?: \"cut\" \| \"fade\";\n /* Optional audio track to mix on top of the final composition. /\n audioTrack?: { url: string };\n /* Final composition length in seconds (server may clamp). /\n finalDurationSec?: number;\n};\n\nexport type ComposeMarketingOptions = {\n /* Marketing-kit id this composition belongs to (server uses it for naming + dedup). /\n marketingKitId: string;\n /* Ordered clip segments to stitch. /\n segments: ComposeMarketingSegment[];\n /* Optional composition-level knobs (transitions, audio, duration). /\n composition?: ComposeMarketingComposition;\n};\n\nexport type ComposeMarketingResult = {\n /* Aquienpz asset id of the in-flight composition. Poll `aq.assets.waitReady(id)`. /\n assetId: string;\n /* Asset status at dispatch time — usually `\"processing\"`. /\n status: \"processing\" \| \"ready\" \| \"failed\";\n};\n\nclass AssetsApi {\n constructor(private readonly opts: NitidaClientOptions) {}\n\n /* Look up an asset by full sha256 (64 hex). Returns null on 404. /\n async byHash(sha256: string): Promise<AssetDTO \| null> {\n const r = await fetch(\n endpointHref(this.opts, `/assets/by-hash/${sha256}`),\n { headers: this.headers() },\n );\n if (r.status === 404) return null;\n if (!r.ok) throw new Error(`assets byHash ${r.status}: ${await r.text()}`);\n return (await r.json()) as AssetDTO;\n }\n\n /* Bulk lookup by sha256s. /\n async byHashes(\n hashes: string[],\n ): Promise<{ existing: AssetDTO[]; missing: string[] }> {\n const r = await fetch(endpointHref(this.opts, \"/assets/by-hashes\"), {\n method: \"POST\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ hashes }),\n });\n if (!r.ok)\n throw new Error(`assets byHashes ${r.status}: ${await r.text()}`);\n return (await r.json()) as { existing: AssetDTO[]; missing: string[] };\n }\n\n /* Paginated list of recent assets for the tenant. /\n async list(\n opts: { limit?: number; cursor?: string; includeDeleted?: boolean } = {},\n ): Promise<{\n assets: AssetDTO[];\n nextCursor: string \| null;\n }> {\n const u = endpointUrl(this.opts, \"/assets\", {\n limit: opts.limit,\n cursor: opts.cursor,\n include_deleted: opts.includeDeleted ? \"true\" : undefined,\n });\n const r = await fetch(u, { headers: this.headers() });\n if (!r.ok) throw new Error(`assets list ${r.status}: ${await r.text()}`);\n return (await r.json()) as {\n assets: AssetDTO[];\n nextCursor: string \| null;\n };\n }\n\n /* Full DTO for an asset (admin view — includes audit-only fields). /\n async get(assetId: string): Promise<AssetDTO & Record<string, unknown>> {\n const r = await fetch(endpointHref(this.opts, `/assets/${assetId}`), {\n headers: this.headers(),\n });\n if (!r.ok) throw new Error(`asset get ${r.status}: ${await r.text()}`);\n return (await r.json()) as AssetDTO & Record<string, unknown>;\n }\n\n /\n Slot bindings pointing at an asset. Use this before deleting an\n * asset so the admin sees which storefront slots would suddenly\n * resolve to nothing.\n /\n async bindings(assetId: string): Promise<\n Array<{\n slotKey: string;\n preset: VariantPreset \| null;\n description: string \| null;\n updatedAt: string;\n updatedBy: string \| null;\n }>\n > {\n const r = await fetch(endpointHref(this.opts, `/assets/${assetId}/slots`), {\n headers: this.headers(),\n });\n if (!r.ok) throw new Error(`asset bindings ${r.status}: ${await r.text()}`);\n const body = (await r.json()) as {\n slots: Array<{\n slotKey: string;\n preset: VariantPreset \| null;\n description: string \| null;\n updatedAt: string;\n updatedBy: string \| null;\n }>;\n };\n return body.slots;\n }\n\n /\n Full variant list for an asset — preset, URL, dimensions, bytes.\n * Stronger-typed wrapper around `get()` that exposes only the\n * `variants` field with the proper `AssetVariant[]` shape.\n \n const v = await aq.assets.variants(logoId);\n * v.map((x) => x.preset); // → (\"thumb\" \| \"sm\" \| … \| \"original\")[]\n /\n async variants(assetId: string): Promise<AssetVariant[]> {\n const dto = await this.get(assetId);\n return Array.isArray((dto as { variants?: unknown }).variants)\n ? (dto as { variants: AssetVariant[] }).variants\n : [];\n }\n\n /\n Add or rebuild variants on an existing asset. Image presets are\n * MERGED with what's there — passing `{ presets: [\"thumb\"] }` adds\n * the thumb variant without touching `lg`, `sm`, `original`, etc.\n \n // Day 0: upload original-only logo\n * const { assetId } = await aq.upload(logoFile); // defaults to [\"original\"]\n \n // Day 7: need a thumb without re-uploading\n * await aq.assets.regenerate(assetId, { presets: [\"thumb\"] });\n \n const after = await aq.assets.variants(assetId);\n * after.map((v) => v.preset); // → [\"original\", \"thumb\"]\n \n Passing no presets re-runs the FULL default pipeline for that\n * asset's kind (thumb+sm+md+lg for images, poster+video for video).\n \n If the asset was uploaded original-only and the cleanup job has\n * already reaped `raw/`, the route falls back to reading the source\n * bytes from `variants/o.<ext>` — no need to re-upload.\n \n Video presets are filtered to `[\"poster\",\"video\",\"aiproxy\"]` and\n * dispatched to the Cloud Run Job (the call returns immediately\n * with a dispatch handle; poll `aq.assets.get(id).status` for\n * completion).\n /\n async regenerate(\n assetId: string,\n opts: { presets?: VariantPreset[] } = {},\n ): Promise<RegenerateResult> {\n const r = await fetch(\n endpointHref(this.opts, `/assets/${assetId}/regenerate`),\n {\n method: \"POST\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify(opts.presets ? { presets: opts.presets } : {}),\n },\n );\n if (!r.ok)\n throw new Error(`asset regenerate ${r.status}: ${await r.text()}`);\n return (await r.json()) as RegenerateResult;\n }\n\n /* Merge metadata into an asset (role / slot / description / tags). /\n async patchMetadata(\n assetId: string,\n metadata: Record<string, unknown>,\n ): Promise<{ ok: true; metadata: Record<string, unknown> }> {\n const r = await fetch(endpointHref(this.opts, `/assets/${assetId}`), {\n method: \"PATCH\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ metadata }),\n });\n if (!r.ok) throw new Error(`asset patch ${r.status}: ${await r.text()}`);\n return (await r.json()) as { ok: true; metadata: Record<string, unknown> };\n }\n\n /\n Request a presigned R2 PUT URL for direct browser-side uploads.\n \n Mirrors the first half of `aq.upload()` — the caller (typically a\n * BFF / share-link dropzone) computes sha256 in the browser, then\n * uploads bytes straight to R2 with the returned `upload.url`, then\n * POSTs `process.body` to `/assets/process` (see {@link processAndWait})\n * once R2 has the bytes.\n \n If the sha is already known to the tenant the server short-circuits\n * with `{ deduped: true, asset }` — no PUT needed.\n \n @example The browser-direct flow, in full\n * ```ts\n * // SERVER (holds the amk_rt_* key — never the browser):\n * const presign = await aq.assets.presignUploadUrl({ sha256, mime, bytes, fileName, presets });\n * if (presign.deduped) return presign.asset; // those bytes already exist; none fly\n \n // BROWSER: PUT straight to presign.upload.url — the bytes never touch your server.\n * // ⚠️ R2 answers that preflight ITSELF, so your origin must be in the BUCKET's CORS policy.\n * // Symptom when it is not: \"PUT failed: network error\" with every earlier step green —\n * // and it cannot be fixed in this SDK, in your app, or in `storefront_origins`.\n \n // SERVER again, forwarding presign.process.body VERBATIM:\n * const asset = await aq.assets.processAndWait(presign.process.body, { timeoutMs: 300_000 });\n * ```\n \n Works for images AND video. A video answers immediately with\n * `{ assetId, status: \"processing\" }` while a Cloud Run Job transcodes, so\n * give `processAndWait` a bigger `timeoutMs` (a transcode + HLS ladder runs\n * 1–2 min; 300_000 is a sane floor).\n /\n async presignUploadUrl(\n opts: PresignUploadUrlOptions,\n ): Promise<UploadUrlResult> {\n const body: Record<string, unknown> = {\n sha256: opts.sha256,\n mime: opts.mime,\n bytes: opts.bytes,\n fileName: opts.fileName,\n };\n if (opts.presets && opts.presets.length > 0) body.presets = opts.presets;\n if (opts.clientOriginalBytes != null)\n body.clientOriginalBytes = opts.clientOriginalBytes;\n if (opts.video != null) body.video = opts.video;\n\n const r = await fetch(endpointHref(this.opts, \"/assets/upload-url\"), {\n method: \"POST\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n if (!r.ok) throw new Error(`upload-url ${r.status}: ${await r.text()}`);\n return (await r.json()) as UploadUrlResult;\n }\n\n /\n Dispatch `/assets/process` with the body returned by a prior\n * {@link presignUploadUrl} call, then poll until the asset transitions\n * to `ready` or `failed`. Throws on `failed` or timeout.\n \n Use this when bytes were uploaded directly from the browser to R2 —\n * `aq.upload()` already does presign + PUT + process + wait in one\n * step when the server holds the bytes.\n /\n async processAndWait(\n processBody: Record<string, unknown>,\n opts: { timeoutMs?: number } = {},\n ): Promise<AssetDTO> {\n const r = await fetch(endpointHref(this.opts, \"/assets/process\"), {\n method: \"POST\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify(processBody),\n });\n if (!r.ok) throw new Error(`process ${r.status}: ${await r.text()}`);\n const proc = (await r.json()) as { assetId?: string };\n if (!proc.assetId) throw new Error(\"process returned no assetId\");\n const final = await this.waitReady(proc.assetId, opts.timeoutMs);\n if (final.status === \"failed\") {\n throw new Error(\n `processAndWait: asset ${proc.assetId} ended status=failed`,\n );\n }\n return final;\n }\n\n /\n Poll `GET /assets/:id` until the asset transitions to `ready` or\n * `failed`. Returns the final DTO (whether ready OR failed — callers\n * decide whether to throw on `failed`). Throws on timeout.\n \n Default timeout is 5 minutes; videos / HLS ladders may need a\n * higher cap (pass `10 * 60_000` for compositions, transcodes).\n /\n async waitReady(assetId: string, timeoutMs = 5 60_000): Promise<AssetDTO> {\n const start = Date.now();\n let delay = 500;\n let last: AssetDTO \| null = null;\n while (Date.now() - start < timeoutMs) {\n last = (await this.get(assetId)) as AssetDTO;\n if (last.status === \"ready\" \|\| last.status === \"failed\") return last;\n await new Promise((r) => setTimeout(r, delay));\n delay = Math.min(delay * 1.5, 5_000);\n }\n if (!last) throw new Error(`waitReady: no asset ${assetId}`);\n throw new Error(`waitReady timeout for ${assetId}`);\n }\n\n /*\n Dispatch `POST /assets/compose-marketing` to stitch pre-uploaded clip\n * segments into a single MP4 composition. Returns the processing asset\n * id immediately — does NOT block on completion. Callers poll via\n * {@link waitReady} (typical timeout: 10 min for multi-segment kits).\n \n Tenant scope is inherited from the SDK client; `tenantCode` is added\n * to the request body so the Cloud Run Job can resolve it without\n * re-reading the header.\n /\n async composeMarketing(\n opts: ComposeMarketingOptions,\n ): Promise<ComposeMarketingResult> {\n const r = await fetch(\n endpointHref(this.opts, \"/assets/compose-marketing\"),\n {\n method: \"POST\",\n headers: { ...this.headers(), \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n tenantCode: this.opts.tenantCode,\n marketingKitId: opts.marketingKitId,\n segments: opts.segments,\n composition: opts.composition ?? {},\n }),\n },\n );\n if (!r.ok) {\n throw new Error(`compose-marketing ${r.status}: ${await r.text()}`);\n }\n const body = (await r.json()) as {\n asset?: { id: string; status: \"processing\" \| \"ready\" \| \"failed\" };\n assetId?: string;\n status?: \"processing\" \| \"ready\" \| \"failed\";\n };\n // Server returns `{ asset: { id, status }, dispatch? }`; some older\n // builds returned `{ assetId, status }` directly. Normalize both.\n const assetId = body.asset?.id ?? body.assetId;\n const status = body.asset?.status ?? body.status ?? \"processing\";\n if (!assetId) {\n throw new Error(\"compose-marketing: response missing assetId\");\n }\n return { assetId, status };\n }\n\n private headers(): Record<string, string> {\n return authHeaders(this.opts);\n }\n}\n\n// ---------------------------------------------------------------------------\n// Upload helpers\n// ---------------------------------------------------------------------------\n\n/\n Best-effort MIME from a file name's extension. Used as a fallback for `Uint8Array`\n * uploads (which carry no inherent type) so they still get classified correctly instead\n * of silently becoming `application/octet-stream` → `kind:\"other\"`. Returns `null` when\n * the extension is unknown.\n /\nconst MIME_BY_EXT: Record<string, string> = {\n webp: \"image/webp\",\n jpg: \"image/jpeg\",\n jpeg: \"image/jpeg\",\n png: \"image/png\",\n gif: \"image/gif\",\n avif: \"image/avif\",\n heic: \"image/heic\",\n heif: \"image/heif\",\n svg: \"image/svg+xml\",\n bmp: \"image/bmp\",\n tiff: \"image/tiff\",\n mp4: \"video/mp4\",\n webm: \"video/webm\",\n mov: \"video/quicktime\",\n m4v: \"video/x-m4v\",\n pdf: \"application/pdf\",\n};\nexport function mimeFromFileName(fileName: string \| undefined): string \| null {\n if (!fileName) return null;\n const ext = fileName.split(\".\").pop()?.toLowerCase();\n return ext ? (MIME_BY_EXT[ext] ?? null) : null;\n}\n\n/\n Subset of compressorjs options exposed through the SDK. Re-imported here\n * to avoid a hard import dependency on `./web` from this top-level module\n * (the /web subpath uses browser-only APIs). The runtime `compress`\n * implementation is lazy-loaded so Node/Bun callers don't pay the bundle\n * cost — see `aq.upload` below.\n /\nexport type CompressOptions = {\n quality?: number;\n mimeType?: \"image/jpeg\" \| \"image/webp\";\n maxWidth?: number;\n maxHeight?: number;\n convertSize?: number;\n strict?: boolean;\n keepOriginalDimensions?: boolean;\n convertHeic?: boolean;\n onProgress?: (\n stage: \"convertingHeic\" \| \"compressing\" \| \"compressingKeepingDimensions\",\n ) => void;\n};\n\nexport type UploadOptions = {\n fileName?: string;\n /\n MIME type of the bytes. Only needed for a `Uint8Array` input — a `File`/`Blob`\n * already carries its `.type`. Raw bytes have no inherent MIME, so without this (and\n * without an extension on `fileName` to infer from) they upload as\n * `application/octet-stream`, which the asset-manager classifies as `kind:\"other\"` —\n * meaning NO image/video variants are generated and `regenerate()` is unsupported.\n * Resolution order for the effective MIME: `Blob.type` → `contentType` →\n * inferred from `fileName`'s extension → `application/octet-stream`.\n \n aq.upload(bytes, { fileName: \"cover.webp\" }) // inferred → image/webp ✓\n * aq.upload(bytes, { contentType: \"image/webp\" }) // explicit ✓\n * aq.upload(bytes) // octet-stream → kind:\"other\" ⚠\n /\n contentType?: string;\n /* Computed sha256 of bytes. Skip to compute locally with WebCrypto (browser only). /\n sha256?: string;\n /\n Client-side compression before upload. Saves user bandwidth — typical\n * 5–10× reduction for raw phone photos. Browser-only; in Node/Bun this\n * silently no-ops with a console.warn and the raw bytes upload as-is.\n \n - `true` → use SDK `DEFAULT_COMPRESSION_OPTIONS` (webapp-tuned)\n * - `CompressOptions` → merge over defaults\n * - `false` / omit → no compression (current default behavior)\n \n Implementation is lazy-imported from `@nitida/sdk/web` so callers\n * that never set `compress` don't pay the compressorjs + heic2any\n * bundle cost. Skipped for non-image MIMEs (video, PDF) regardless of\n * this option — those go to the upload pipeline raw.\n \n @see {@link CompressOptions}\n * @see https://github.com/espaciofuturoio/aquienpz/tree/main/packages/sdk#client-side-compression-browsers\n /\n compress?: boolean \| CompressOptions;\n /\n Variant set to generate. Defaults to `[\"original\"]` —\n * if you omit this option, only the raw bytes land on the CDN\n * under the `o` path. Pass an explicit array to request more.\n \n Image presets (`thumb` 256 · `sm` 640 · `md` 1280 · `lg` 1920 ·\n * `xl` 3840 · `original`):\n * - `[\"original\"]` (default) → just the raw bytes. Right call for\n * logos / SVGs / anything you'll resize browser-side or via\n * `aq.assets.regenerate(id, { presets: [\"thumb\"] })` later.\n * - `[\"thumb\",\"sm\",\"md\",\"lg\"]` → the classic responsive ladder.\n * - `[\"thumb\",\"sm\",\"md\",\"lg\",\"xl\"]` → add 4K.\n \n Video presets (`poster`, `video`, `aiproxy`): omit `aiproxy` if\n * the tenant doesn't need the low-res transcode for AI captioning.\n \n No upscaling. Each size preset is a ceiling; a 1080×720 source\n * asked for `xl` (3840) yields a 1080×720 xl variant, not a stretched\n * 3840-wide image.\n \n Idempotent: you can always add missing variants later via\n * `aq.assets.regenerate(id, { presets: [...] })`. The platform\n * stores the source so regeneration doesn't require re-uploading.\n /\n presets?: VariantPreset[];\n /\n Max time to wait for the asset to transition to `ready` (or `failed`)\n * after dispatch. Default `5 * 60_000` (5 min). Bump higher for large\n * videos / HLS transcodes — aquienpz processing time scales with input\n * size and per-instance CPU.\n \n Throws `Error(\"waitReady timeout for <id>\")` if the deadline passes\n * without the asset transitioning. The asset row stays in aquienpz\n * (status=\"processing\") and the next byHash lookup will return it once\n * processing completes; the caller can resume with their own poll.\n /\n timeoutMs?: number;\n /\n VIDEO-only delivery knobs forwarded into `/assets/process`. See\n * {@link UploadVideoOptions}. Ignored for non-video uploads.\n \n // A delivery-ready reel: skip the unused HLS ladder + skip re-encode.\n * await aq.upload(mp4Bytes, {\n * fileName: \"reel.mp4\",\n * presets: [\"poster\", \"video\"],\n * video: { hls: false, passthrough: true },\n * });\n /\n video?: UploadVideoOptions;\n};\n\n/* Default preset set the SDK sends to `/assets/upload-url` when the caller omits `presets`. /\nconst DEFAULT_UPLOAD_PRESETS: VariantPreset[] = [\"original\"];\n\nexport type UploadResult = {\n assetId: string;\n sha256: string;\n cdnUrl: string;\n};\n\nasync function computeSha256(\n bytes: ArrayBuffer \| Uint8Array \| Blob,\n): Promise<string> {\n const buf =\n bytes instanceof Blob\n ? await bytes.arrayBuffer()\n : bytes instanceof Uint8Array\n ? (bytes.buffer as ArrayBuffer)\n : bytes;\n const digest = await crypto.subtle.digest(\"SHA-256\", buf);\n return [...new Uint8Array(digest)]\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n}\n\n// ---------------------------------------------------------------------------\n// Main facade\n// ---------------------------------------------------------------------------\n\n// ---------------------------------------------------------------------------\n// Usage (Cloudinary-style consumption dashboard data)\n// ---------------------------------------------------------------------------\n\n// ---------------------------------------------------------------------------\n// Slot history\n// ---------------------------------------------------------------------------\n\nexport type SlotHistoryEntry = {\n id: string;\n action: \"bind\" \| \"unbind\" \| \"restore\";\n preset: VariantPreset \| null;\n description: string \| null;\n updatedAt: string;\n updatedBy: string \| null;\n assetId: string \| null;\n /* Resolved DTO when the asset still exists; `null` after delete / 404. /\n asset: AssetDTO \| null;\n};\n\nexport type UsageSnapshot = {\n tenant: { id: number; code: string };\n storage: { totalBytes: number; assetCount: number };\n today: UsageWindow;\n last30Days: UsageWindow;\n};\n\nexport type UsageWindow = {\n reads: number;\n writes: number;\n lists: number;\n deletes: number;\n admins: number;\n upscales: number;\n processes: number;\n bytesIn: number;\n};\n\nexport type UsageDailyPoint = {\n date: string;\n reads: number;\n writes: number;\n lists: number;\n deletes: number;\n processes: number;\n bytesIn: number;\n bytesStored: number;\n};\n\nexport type UsagePerKey = {\n apiKeyId: string;\n prefix: string \| null;\n name: string \| null;\n opsTotal: number;\n bytesTotal: number;\n lastSeen: string;\n};\n\nclass UsageApi {\n constructor(private readonly opts: NitidaClientOptions) {}\n\n /* Snapshot for the active tenant — storage + today + last 30 days totals. /\n async snapshot(): Promise<UsageSnapshot> {\n const r = await fetch(endpointHref(this.opts, \"/usage\"), {\n headers: this.headers(),\n });\n if (!r.ok) throw new Error(`usage snapshot ${r.status}: ${await r.text()}`);\n return (await r.json()) as UsageSnapshot;\n }\n\n /* Daily rollup for charts — 1..365 days, default 30. /\n async timeseries(days = 30): Promise<{\n tenant: { id: number; code: string };\n days: UsageDailyPoint[];\n }> {\n const r = await fetch(\n endpointUrl(this.opts, \"/usage/timeseries\", { days }),\n { headers: this.headers() },\n );\n if (!r.ok)\n throw new Error(`usage timeseries ${r.status}: ${await r.text()}`);\n return (await r.json()) as {\n tenant: { id: number; code: string };\n days: UsageDailyPoint[];\n };\n }\n\n /* Per-API-key breakdown for the current month. /\n async keys(): Promise<{\n tenant: { id: number; code: string };\n monthStart: string;\n keys: UsagePerKey[];\n }> {\n const r = await fetch(endpointHref(this.opts, \"/usage/keys\"), {\n headers: this.headers(),\n });\n if (!r.ok) throw new Error(`usage keys ${r.status}: ${await r.text()}`);\n return (await r.json()) as {\n tenant: { id: number; code: string };\n monthStart: string;\n keys: UsagePerKey[];\n };\n }\n\n private headers(): Record<string, string> {\n return authHeaders(this.opts);\n }\n}\n\nexport class NitidaClient {\n readonly slots: SlotsApi;\n readonly assets: AssetsApi;\n readonly usage: UsageApi;\n /\n Effective options — read-only. Exposed so the `/web` and `/expo`\n * subpaths can inherit endpoint / apiKey / tenant scope from the\n * configured client without re-passing them per call site.\n /\n readonly opts: NitidaClientOptions;\n\n constructor(opts: NitidaClientOptions) {\n this.opts = opts;\n const cdn = opts.cdnBase ?? \"https://8ok.uk\";\n setCdnBase(cdn);\n // Configure the process-global tenant so every variant URL builder\n // (`getAssetUrl`, `urlFor`, `srcSetFor`, upload `cdnUrl`) emits the\n // tenant-prefixed path `<cdn>/<tid b36>/v/<sha>-<preset>.<ext>`.\n setTenantId(opts.tenantId);\n configureSlotResolver({\n endpoint: opts.endpoint,\n apiKey: opts.apiKey,\n tenantCode: opts.tenantCode,\n });\n this.slots = new SlotsApi(opts);\n this.assets = new AssetsApi(opts);\n this.usage = new UsageApi(opts);\n }\n\n /* Tenant id as base36 path segment (e.g. tenantId=4 → \"4/v/\"). /\n get tenantSegment(): string {\n return `${this.opts.tenantId.toString(36)}/v/`;\n }\n\n /* Build the canonical CDN URL deterministically from sha + preset. /\n urlFor(asset: Pick<AssetDTO, \"sha\">, preset: VariantPreset = \"lg\"): string {\n return getAssetUrl(asset, preset);\n }\n\n /* Build a responsive srcSet across the available image presets. /\n srcSetFor(asset: Pick<AssetDTO, \"sha\" \| \"presets\">): string {\n return getAssetSrcSet(asset);\n }\n\n /\n Build an on-the-fly transform URL — `<cdn>/t/<dsl>/<sha>.<ext>`.\n \n ## URL CONVENTION — transforms are NOT tenant-prefixed (variants are)\n * Two distinct delivery paths, by design:\n * - Variants / presets (`urlFor`, `srcSetFor`, upload `cdnUrl`):\n * `<cdn>/<tenantId b36>/v/<sha>-<preset>.<ext>` ← tenant-scoped (e.g. `/4/v/<sha>-lg.webp`)\n * - On-the-fly transforms (`transform`, `transformSrcSet`):\n * `<cdn>/t/<dsl>/<sha>.<ext>` ← GLOBAL, no tenant segment (`/t/...`)\n * The transform service is content-addressed by sha + resizes from the source on demand,\n * so it needs no tenant in the path. Prefixing a transform URL with `/<tenant>/t/...` 404s.\n * Consumers that build URLs by hand must NOT add the tenant segment to `/t/` URLs.\n \n Returns the canonical `lg` variant URL when called with empty options,\n * so callers can swap `urlFor()` for `transform()` without thinking.\n \n URLs with the same params in different order produce the same R2\n * cache entry (the server canonicalizes both sides). Safe to use as\n * stable cache keys.\n \n <Image\n * src={aq.transform(asset, { width: 1280 })}\n * srcSet={aq.transformSrcSet(asset, [640, 960, 1280, 1920])}\n * sizes=\"(max-width: 768px) 100vw, 50vw\"\n * />\n \n @see {@link TransformOptions} for the full param matrix.\n /\n // Overload 1: no signing — synchronous, on-ladder width only (strict).\n transform(asset: Pick<AssetDTO, \"sha\">, opts?: TransformOptions): string;\n // Overload 2: with { sign: true } — async; returns `?sig=<hmac>` URL.\n // Accepts SignedTransformOptions so a signed URL may carry an off-ladder\n // custom width (the signature earns the edge whitelist bypass).\n transform(\n asset: Pick<AssetDTO, \"sha\">,\n opts: SignedTransformOptions,\n signOpts: { sign: true },\n ): Promise<string>;\n transform(\n asset: Pick<AssetDTO, \"sha\">,\n opts: SignedTransformOptions = {},\n signOpts?: { sign: true },\n ): string \| Promise<string> {\n if (!signOpts?.sign) {\n // Unsigned path. Overload 1 constrains `width` to the ladder at every\n // public call site, so an off-ladder width can't reach here through the\n // typed API — narrow back to TransformOptions for the strict builder.\n return (\n getTransformUrl(asset, opts as TransformOptions) ??\n this.urlFor(asset, \"lg\")\n );\n }\n if (!this.opts.signingKey) {\n throw new Error(\n \"aq.transform({ sign: true }) requires `signingKey` in NitidaClientOptions. \" +\n \"Pull the tenant's signing key from /admin/tenants/:id and pass it to the SDK constructor on a SERVER-side instance only.\",\n );\n }\n // Signed path — custom (off-ladder) widths allowed. Empty opts → no\n // transform DSL, fall back to the unsigned `lg` variant URL.\n return (\n getSignedTransformUrl(asset, opts, this.opts.signingKey) ??\n Promise.resolve(this.urlFor(asset, \"lg\"))\n );\n }\n\n /\n Build a responsive `srcSet` string. One transform URL per width; all\n * other options apply to every URL.\n \n Pass `{ sign: true }` to return signed URLs (async). Without it, the\n * call stays synchronous as before.\n /\n transformSrcSet(\n asset: Pick<AssetDTO, \"sha\">,\n widths: number[],\n extraOpts?: Omit<TransformOptions, \"width\">,\n ): string;\n transformSrcSet(\n asset: Pick<AssetDTO, \"sha\">,\n widths: number[],\n extraOpts: Omit<TransformOptions, \"width\">,\n signOpts: { sign: true },\n ): Promise<string>;\n transformSrcSet(\n asset: Pick<AssetDTO, \"sha\">,\n widths: number[],\n extraOpts: Omit<TransformOptions, \"width\"> = {},\n signOpts?: { sign: true },\n ): string \| Promise<string> {\n if (!signOpts?.sign) return getTransformSrcSet(asset, widths, extraOpts);\n if (!this.opts.signingKey) {\n throw new Error(\n \"aq.transformSrcSet({ sign: true }) requires `signingKey` in NitidaClientOptions.\",\n );\n }\n const key = this.opts.signingKey;\n return Promise.all(\n widths.map(async (w) => {\n // Signed path → off-ladder widths allowed; build+sign via the\n // custom-width helper (the strict `getTransformUrl` would reject a\n // raw `number` width).\n const signed = await getSignedTransformUrl(\n asset,\n { ...extraOpts, width: w },\n key,\n );\n return signed ? `${signed} ${w}w` : null;\n }),\n ).then((parts) => parts.filter((s): s is string => s != null).join(\", \"));\n }\n\n /\n Build an on-the-fly VIDEO transform URL — Phase 4.\n \n Same DSL shape as `transform()` but the URL has a `.mp4` (default)\n * or `.webm` extension and the server routes the request to a Cloud\n * Run Job for ffmpeg encoding (vs the inline sharp pipeline for\n * images).\n \n On the first request the route returns 202 Accepted with\n * `Retry-After: 10` while the Job runs (typically 5-30 s for a\n * short clip). The response body includes `outputUrl` which is the\n * eventual CDN URL — poll the same transform URL after the\n * retry-after window to get a 302 redirect to it.\n \n const url = aq.transformVideo(asset, {\n * width: 1080, height: 1920, fit: \"cover\",\n * start: 0, duration: 15,\n * });\n * // Pass to Video.js / <video src={url}>; on the first load it\n * // gets 202 + body.outputUrl; subsequent loads hit cache → 302.\n \n Video-specific DSL params:\n * - `start` (seconds, decimal OK)\n * - `duration` (seconds, 1..300)\n * - `format`: \"mp4\" (default) or \"webm\"\n \n The other params (`width`, `height`, `fit`) work identically to\n * image transforms. `gravity`, `quality`, `effect`, `dpr` are\n * accepted by the DSL but currently ignored on the video path.\n /\n transformVideo(\n asset: Pick<AssetDTO, \"sha\">,\n opts: TransformOptions = {},\n ): string {\n return getVideoTransformUrl(asset, opts) ?? this.urlFor(asset, \"lg\");\n }\n\n /\n Build the HLS master playlist URL for a VIDEO asset (Phase 5).\n \n Returns `<cdn>/t/format=hls(,start=…,duration=…)/<sha>.m3u8`. Pass\n * to an HLS-aware player:\n \n <video\n * src={aq.streamingUrl(asset)}\n * controls playsInline\n * // Video.js v10's @videojs/http-streaming ships native HLS —\n * // no plugin needed.\n * />\n \n On the first request the server returns 202 Accepted while a\n * Cloud Run Job builds the multi-rung ladder (typically 1-3 min for\n * a 90 s source — five rungs of 240p/360p/480p/720p/1080p @ AAC).\n * Subsequent requests hit the cache → 302 to the master.m3u8.\n \n Supports `start` + `duration` to ladder a sub-clip. Other DSL\n * params (width, height, fit) are ignored on the HLS path because\n * the rungs determine resolution.\n /\n streamingUrl(\n asset: Pick<AssetDTO, \"sha\">,\n opts: Omit<TransformOptions, \"format\"> = {},\n ): string {\n return getHlsStreamingUrl(asset, opts);\n }\n\n /\n Upload a file or raw bytes. Returns the new asset id + canonical\n * URL. Hash-deduped — uploading the same bytes twice returns the\n * existing asset.\n \n Browser-first: uses `Blob` + WebCrypto. For Node 20+, pass a\n * Uint8Array and a precomputed `sha256` (since `crypto.subtle` works\n * but isn't always available depending on the runtime).\n /\n /\n Upload bytes end to end: optional client compression → sha256 → presign → direct-to-R2 PUT\n * → `/assets/process` → wait until the asset is ready.\n \n ⚠️ `presets` decides what exists FOREVER. Omit it and only `original` is written; ask for\n * `[\"thumb\"]` and the bytes you just uploaded are not retrievable. A variant not requested in\n * this first ingest cannot be added later once the cleanup job reaps `raw/` — measured once as\n * \"97 files archived successfully, zero recoverable\".\n \n @example Deliver an image on a site (the responsive ladder)\n * ```ts\n * import { NitidaClient } from \"@nitida/sdk/server\";\n \n const aq = new NitidaClient({ endpoint, apiKey, tenantCode, tenantId });\n * const { assetId, sha256 } = await aq.upload(file, {\n * fileName: file.name,\n * presets: [\"thumb\", \"sm\", \"md\", \"lg\"],\n * });\n * ```\n \n @example ARCHIVE a file — you must ask for `original`\n * ```ts\n * await aq.upload(bytes, {\n * fileName: \"contrato.pdf\",\n * contentType: \"application/pdf\",\n * presets: [\"original\"], // without this the bytes are unrecoverable\n * });\n * ```\n \n @example Raw bytes need an explicit MIME\n * ```ts\n * await aq.upload(bytes, { fileName: \"track.mp3\", contentType: \"audio/mpeg\" });\n * // Without either, it stores as kind:\"other\" — no variants, and regenerate() is unsupported.\n * ```\n \n @example Video — and what does NOT work there\n * ```ts\n * // `original` is accepted and then silently DROPPED: /assets/process filters video presets to\n * // {poster, video, aiproxy, probe} before dispatching the transcode Job.\n * await aq.upload(clip, { fileName: \"tour.mp4\", presets: [\"poster\", \"video\"] });\n \n // Omit `aiproxy`/`probe` unless the asset really goes to a vision model — they cost Job time\n * // and permanent R2 objects that nothing else reads.\n * ```\n /\n async upload(\n input: File \| Blob \| Uint8Array,\n opts: UploadOptions = {},\n ): Promise<UploadResult> {\n // 1. Resolve incoming bytes + mime first (the source of truth for\n // \"should we compress this?\")\n const sourceIsBlob = input instanceof File \|\| input instanceof Blob;\n // A Uint8Array has no inherent MIME. Fall back to an explicit `contentType`, then to\n // the file extension, before octet-stream (which the asset-manager files as\n // `kind:\"other\"` — no variants). A File/Blob's own `.type` always wins when present.\n const sourceMime =\n (sourceIsBlob ? input.type : \"\") \|\|\n opts.contentType \|\|\n mimeFromFileName(opts.fileName) \|\|\n \"application/octet-stream\";\n if (!sourceIsBlob && sourceMime === \"application/octet-stream\") {\n console.warn(\n \"[@nitida/sdk] upload(Uint8Array): no MIME resolved (no `contentType`, no recognizable \" +\n '`fileName` extension) — the asset will be stored as kind:\"other\" with NO image/video ' +\n \"variants and regenerate() unsupported. Pass `contentType` or a `fileName` with an extension.\",\n );\n }\n\n // 2. Optional client-side compression. Image MIMEs only; non-image\n // sources pass through unchanged so a video or PDF upload still\n // works when the caller sets `compress: true` blanket-fashion.\n let bytes: Uint8Array;\n let effectiveMime: string;\n let clientOriginalBytes: number \| undefined;\n\n const wantCompression =\n !!opts.compress &&\n sourceIsBlob &&\n typeof window !== \"undefined\" &&\n sourceMime.startsWith(\"image/\");\n\n if (wantCompression) {\n const compressOpts =\n opts.compress === true ? {} : (opts.compress as CompressOptions);\n // Lazy: keeps compressorjs/heic2any out of bundles that don't use it.\n //\n // Resolve `./web` against `import.meta.url` at runtime so no static\n // analyzer — esbuild, tsup, `bun build --compile`, vite, rollup —\n // can follow the specifier. Holding the path in a plain `const`\n // was not enough: `bun build --compile` constant-folds simple\n // strings and still eagerly bundled `./web.js`, which\n // top-level-imports the browser-only peer deps\n // `@aquienpz/asset-uploader-web` / `@nitida/asset-compressor-web`\n // — neither installed on server consumers — crashing the\n // single-binary on boot with `Cannot find module\n // '@aquienpz/asset-uploader-web'`.\n //\n // The earlier `new URL(\"./web.js\", import.meta.url)` + `await import(URL)`\n // dance survived bun-compile but Turbopack still tracks the URL literal\n // and tries to resolve `./web.js` at build time (no such file exists in\n // src/, only src/web/index.ts), failing with \"Module not found\".\n //\n // Indirect-eval via the Function constructor is opaque to BOTH static\n // analyzers — neither bun-compile nor Turbopack can follow the string\n // back to a module specifier. The browser `typeof window` guard above\n // ensures the branch never runs on the server, so the indirection is\n // safe at runtime.\n // Build the URL inside the Function body too — Turbopack still tracks\n // `new URL(<any expr>, import.meta.url)` as a resolution pattern even\n // when the first arg isn't a literal, so we have to hide both the URL\n // construction AND the import() behind indirect eval.\n const dynImport = new Function(\n \"base\",\n \"return import(new URL('./' + 'web' + '.js', base).href)\",\n ) as (base: string) => Promise<typeof import(\"./web\")>;\n const { compressImage } = await dynImport(import.meta.url);\n const result = await compressImage(input as File \| Blob, compressOpts);\n bytes = new Uint8Array(await result.blob.arrayBuffer());\n clientOriginalBytes = result.originalBytes;\n effectiveMime = result.blob.type \|\| sourceMime;\n } else {\n if (opts.compress && !sourceIsBlob) {\n console.warn(\n \"[@nitida/sdk] compress: true requires a File or Blob input; got Uint8Array — uploading raw bytes.\",\n );\n } else if (opts.compress && typeof window === \"undefined\") {\n console.warn(\n \"[@nitida/sdk] compress: true is browser-only — uploading raw bytes.\",\n );\n } else if (opts.compress && !sourceMime.startsWith(\"image/\")) {\n // Silent: callers can set `compress: true` for batched mixed\n // media and not have to special-case images vs videos.\n }\n bytes =\n input instanceof Uint8Array\n ? input\n : new Uint8Array(await input.arrayBuffer());\n effectiveMime = sourceMime;\n }\n\n const sha = opts.sha256 ?? (await computeSha256(bytes));\n const mime = effectiveMime;\n const fileName =\n opts.fileName ??\n (input instanceof File ? input.name : `upload-${sha.slice(0, 8)}.bin`);\n\n // Dedup probe.\n const existing = await this.assets.byHash(sha);\n if (existing && existing.status === \"ready\") {\n return {\n assetId: existing.id,\n sha256: sha,\n cdnUrl: this.urlFor(existing, this.bestPresetForAsset(existing, mime)),\n };\n }\n\n // Presign + PUT + process. Delegates to `assets.presignUploadUrl()` so\n // the public method and `aq.upload()` share one code path; always\n // threads an explicit preset list so the default matches the SDK\n // contract (`[\"original\"]`) instead of inheriting the server's older\n // default (`thumb+sm+md+lg`).\n const presign = await this.assets.presignUploadUrl({\n sha256: sha,\n mime,\n bytes: bytes.byteLength,\n fileName,\n presets:\n opts.presets && opts.presets.length > 0\n ? opts.presets\n : DEFAULT_UPLOAD_PRESETS,\n ...(clientOriginalBytes != null && { clientOriginalBytes }),\n ...(opts.video != null && { video: opts.video }),\n });\n if (presign.deduped) {\n return {\n assetId: presign.asset.id,\n sha256: sha,\n cdnUrl: this.urlFor(presign.asset, this.defaultPresetForMime(mime)),\n };\n }\n\n const putR = await fetch(presign.upload.url, {\n method: \"PUT\",\n headers: { \"Content-Type\": mime, ...(presign.upload.headers ?? {}) },\n body: new Blob([bytes as unknown as ArrayBuffer], { type: mime }),\n });\n if (!putR.ok)\n throw new Error(`R2 PUT ${putR.status}: ${await putR.text()}`);\n\n const procR = await fetch(endpointHref(this.opts, presign.process.url), {\n method: \"POST\",\n headers: {\n ...authHeaders(this.opts),\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(presign.process.body),\n });\n if (!procR.ok)\n throw new Error(`process ${procR.status}: ${await procR.text()}`);\n const proc = (await procR.json()) as { assetId?: string; kind?: string };\n\n let assetId = proc.assetId;\n if (!assetId && proc.kind === \"video\") {\n // Videos are async — poll by-hash until the row lands.\n const start = Date.now();\n let delay = 1000;\n while (Date.now() - start < 60_000) {\n const dto = await this.assets.byHash(sha);\n if (dto?.id) {\n assetId = dto.id;\n break;\n }\n await new Promise((r) => setTimeout(r, delay));\n delay = Math.min(delay 1.5, 5_000);\n }\n }\n if (!assetId) throw new Error(\"upload: process returned no assetId\");\n\n // Wait until variants are ready so the URL works immediately.\n // Passing `undefined` keeps waitReady's own default (5 min). Callers\n // uploading large videos can opt in to a longer deadline via opts.timeoutMs.\n const final = await this.assets.waitReady(assetId, opts.timeoutMs);\n if (final.status !== \"ready\")\n throw new Error(`upload: asset ended status=${final.status}`);\n return {\n assetId,\n sha256: sha,\n cdnUrl: this.urlFor(final, this.bestPresetForAsset(final, mime)),\n };\n }\n\n private defaultPresetForMime(mime: string): VariantPreset {\n if (mime.startsWith(\"video/\")) return \"video\";\n // The `mp3` variant only exists AFTER /process transcodes it; at presign\n // time only the original is guaranteed to be playable, so bind to it.\n if (mime.startsWith(\"audio/\")) return \"original\";\n return \"lg\";\n }\n\n /*\n Pick a sensible preset to build a URL for, given the asset's actual\n * `presets` string. Falls back through the preference order\n * lg → md → sm → thumb → original (for images)\n * video → poster (for videos)\n * mp3 → original (for audio)\n * so an upload that was processed with e.g. `[\"original\"]` still\n * returns a non-404 URL in `aq.upload`'s result.\n /\n private bestPresetForAsset(asset: AssetDTO, mime: string): VariantPreset {\n const order: VariantPreset[] = mime.startsWith(\"video/\")\n ? [\"video\", \"poster\"]\n : mime.startsWith(\"audio/\")\n ? [\"mp3\", \"original\"] // prefer the cross-browser mp3, else the playable original; never image presets\n : [\"lg\", \"md\", \"sm\", \"thumb\", \"xl\", \"original\"];\n return (\n order.find((p) => hasPreset(asset, p)) ?? this.defaultPresetForMime(mime)\n );\n }\n}\n","/\n @nitida/sdk/web — browser entry point (BFF-proxy mode).\n \n Use this subpath from any browser context (Next.js client components,\n * Vite/CRA SPAs, browser extensions, web workers — anywhere `window`\n * exists). Bundles the core `NitidaClient` PLUS browser-only helpers\n * (client-side image compression).\n \n // 1. In a client component (browser):\n * import { NitidaClient } from \"@nitida/sdk/web\";\n \n const aq = new NitidaClient({\n * // Point at your BFF route — the SDK calls\n * // `${endpoint}/assets/by-hash/...`, `${endpoint}/slots/...`, etc.\n * endpoint: \"/api/am\", // relative ⇒ same-origin proxy\n * tenantCode: \"realtyone-cr\",\n * tenantId: 1,\n * // NO apiKey — the type strips it. Your BFF injects the bearer.\n * });\n \n const result = await aq.upload(file, { compress: true });\n \n // 2. In a Next.js route handler (server) — proxy through to aquienpz:\n * // app/api/am/[...path]/route.ts\n * export async function GET(req: Request, { params }: ...) {\n * const path = params.path.join(\"/\");\n * const url = `${process.env.AQUIENPZ_URL}/${path}${new URL(req.url).search}`;\n * return fetch(url, {\n * headers: {\n * Authorization: `Bearer ${process.env.AQUIENPZ_API_KEY!}`,\n * \"X-Tenant-Code\": \"realtyone-cr\",\n * },\n * });\n * }\n \n Why no `apiKey` in the type: in browser code, a long-lived bearer key\n * would be shipped to every visitor in `NEXT_PUBLIC_`. The type omits\n it physically (TS build error at the call site) so security mistakes\n * are loud instead of silent. Same pattern as `@vercel/blob/client`,\n * `better-auth/client`, AI SDK's `/edge` subpath.\n \n Need to ship a server-rendered storefront with a long-lived key?\n * Import from `@nitida/sdk/server` instead — that subpath requires\n * `apiKey` and bundles cleanly only in Node/Bun/edge runtimes.\n \n Peer deps (auto-installed via npm peer deps — declared optional):\n * - `@aquienpz/asset-uploader-web` for multipart uploads\n * - `@nitida/asset-compressor-web` for client-side compression\n \n Both are lazy-imported; bundles that never call into them skip the cost.\n * @module @nitida/sdk/web\n /\n\nimport { NitidaClient as BaseNitidaClient, type NitidaClientOptions } from \"..\";\n\n/\n Browser-safe constructor options for `@nitida/sdk/web`.\n \n Identical to the root `NitidaClientOptions` except `apiKey` and\n * `signingKey` are physically absent — passing them is a TypeScript\n * build error, not a runtime warning. In BFF-proxy mode your route\n * handler injects the bearer header server-side; the browser never\n * sees the long-lived key.\n \n const aq = new NitidaClient({\n * endpoint: \"/api/am\", // OK: relative → same-origin BFF\n * tenantCode: \"realtyone-cr\",\n * tenantId: 1,\n * // apiKey: \"amk_rt_...\", // ERROR: TS error: not assignable\n * });\n /\nexport type WebClientOptions = Omit<\n NitidaClientOptions,\n \"apiKey\" \| \"signingKey\"\n>;\n\n/\n Browser-safe `NitidaClient` — same runtime as the root class, but\n * the constructor's type rejects `apiKey` / `signingKey`. Calls go\n * through your BFF (typically a same-origin route like `/api/am/...`).\n \n For server-side instantiation (Node/Bun/edge), import from\n * `@nitida/sdk/server` instead.\n /\nexport class NitidaClient extends BaseNitidaClient {\n constructor(opts: WebClientOptions) {\n super(opts as NitidaClientOptions);\n }\n}\n\n// Re-export the rest of the surface (URL builders, types, etc.) so\n// browser consumers can satisfy 100% of their needs through this\n// single subpath.\nexport {\n type AssetDTO,\n type AssetVariant,\n type CompressOptions as ClientCompressOptions,\n computeVariantDimensions,\n extractAssetSha,\n getAssetDimensions,\n getAssetSrcSet,\n getAssetUrl,\n getHlsStreamingUrl,\n getSignedTransformUrl,\n getTransformSrcSet,\n getTransformUrl,\n getVideoTransformUrl,\n hasPreset,\n type RegenerateResult,\n type ResolveSlotOptions,\n type SignedTransformOptions,\n type SlotDTO,\n type SlotHistoryEntry,\n type SlotResolution,\n serializeTransform,\n signTransformUrl,\n type TransformEffect,\n type TransformFit,\n type TransformFormat,\n type TransformGravity,\n type TransformOptions,\n type UploadOptions,\n type UploadResult,\n type UsageDailyPoint,\n type UsagePerKey,\n type UsageSnapshot,\n type UsageWindow,\n type VariantPreset,\n} from \"..\";\n\n// Multipart uploader helpers are NOT re-exported from this subpath.\n//\n// `@aquienpz/asset-uploader-web` is an optional peer-dep that isn't on\n// npm yet, so a static `import` at module top broke every consumer of\n// `@nitida/sdk/web` (the bundler tries to resolve before the optional\n// peer check kicks in). The old `createWebUploader` + `UploadTask`\n// re-exports also don't fit BFF-proxy mode (they need a raw `authToken`\n// the BFF doesn't expose). The cleaner story is:\n//\n// - Files ≤50MB → `aq.upload(file)` (single PUT, atomic, BFF-friendly)\n// - Files >50MB → roadmap item for v0.18 (BFF-minted short-lived token\n// + resumable multipart). Track at\n// https://github.com/espaciofuturoio/aquienpz/issues\n//\n// Apps that need `UploadTask` directly today should depend on\n// `@aquienpz/asset-uploader-web` themselves once it's published.\n\n// ---------------------------------------------------------------------------\n// Client-side compression (Phase 1.5)\n// ---------------------------------------------------------------------------\n//\n// Wraps `@nitida/asset-compressor-web` with the SDK's\n// `DEFAULT_COMPRESSION_OPTIONS` — values derived from the realtyone-cr\n// webapp's production tuning (LISTING_STANDARD_: quality 0.80, max-edge\n// 3840px, WebP output, 5MB PNG→JPEG threshold, strict mode). Those defaults\n// differ from `@nitida/asset-compressor-web`'s own defaults (0.85 / 2880 /\n// convertSize=0) which target a slightly different audience; SDK callers\n// get the webapp-tuned values, package-direct callers keep theirs.\n\n// Types inlined from `@nitida/asset-compressor-web` to avoid even a\n// type-only `import` of the optional peer dep — TypeScript's `import type`\n// is erased at runtime, but some bundlers (Turbopack as of 2026-05) still\n// scan and warn on the path. Keeping these types local makes `/web`\n// importable in any project regardless of whether the compressor is\n// installed.\ntype CompressionOptions = {\n quality?: number;\n mimeType?: \"image/jpeg\" \| \"image/webp\";\n maxWidth?: number;\n maxHeight?: number;\n convertSize?: number;\n keepOriginalDimensions?: boolean;\n};\ntype CompressionStatusKey =\n \| \"convertingHeic\"\n \| \"compressing\"\n \| \"compressingKeepingDimensions\"\n \| (string & {});\n\nexport type CompressStage =\n \| \"convertingHeic\"\n \| \"compressing\"\n \| \"compressingKeepingDimensions\";\n\n/*\n Subset of compressorjs options exposed by the SDK. Matches the\n * webapp's `DEFAULT_COMPRESSION_OPTIONS` shape from the realtyone-cr\n * production back-office uploader.\n /\nexport type CompressOptions = {\n /* 0..1. Default 0.80 (`LISTING_STANDARD_IMAGE_QUALITY / 100`). /\n quality?: number;\n /* Output format. Default `\"image/webp\"` (`DEFAULT_IMAGE_TARGET_FORMAT`). /\n mimeType?: \"image/jpeg\" \| \"image/webp\";\n /* Max edge in pixels. Default 3840 (`LISTING_STANDARD_IMAGE_WIDTH`). /\n maxWidth?: number;\n /* Default 3840 (`LISTING_STANDARD_IMAGE_HEIGHT`). /\n maxHeight?: number;\n /\n compressorjs `convertSize`: PNG > this byte count auto-converts to\n * JPEG before the quality pass. Default 5 MB (5 * 1024 * 1024).\n /\n convertSize?: number;\n /* compressorjs strict mode. Default true. /\n strict?: boolean;\n /* Skip the resize pass (keep original dimensions). Default false. /\n keepOriginalDimensions?: boolean;\n /\n Convert HEIC/HEIF inputs to JPEG via heic2any first. Default true.\n * Has no effect on non-HEIC inputs.\n /\n convertHeic?: boolean;\n /* Optional progress hook. Useful for UI status indicators. /\n onProgress?: (stage: CompressStage) => void;\n};\n\n/\n Webapp-tuned defaults (LISTING_STANDARD_). These intentionally differ\n from `@nitida/asset-compressor-web`'s package-level defaults — the\n * SDK overrides at call time.\n /\nexport const DEFAULT_COMPRESSION_OPTIONS: Required<\n Omit<CompressOptions, \"keepOriginalDimensions\" \| \"convertHeic\" \| \"onProgress\">\n> = {\n quality: 0.8,\n mimeType: \"image/webp\",\n maxWidth: 3840,\n maxHeight: 3840,\n convertSize: 5 1024 * 1024,\n strict: true,\n};\n\nexport type CompressResult = {\n /** Compressed bytes wrapped as a Blob (browser-native). /\n blob: Blob;\n /* Size of the source before compression, in bytes. /\n originalBytes: number;\n};\n\n/\n Compress a single image. Browser-only; in Node/Bun this is a no-op that\n * returns the input unchanged (with a warning).\n \n Dynamically imports `@nitida/asset-compressor-web` so apps that never\n * call `compress: true` don't pay the compressorjs + heic2any bundle cost.\n /\nexport async function compressImage(\n file: File \| Blob,\n opts: CompressOptions = {},\n): Promise<CompressResult> {\n if (typeof window === \"undefined\") {\n console.warn(\n \"[@nitida/sdk/web] compressImage called outside a browser — returning input unchanged.\",\n );\n return { blob: file, originalBytes: file.size };\n }\n const finalOpts: Required<\n Omit<\n CompressOptions,\n \"keepOriginalDimensions\" \| \"convertHeic\" \| \"onProgress\"\n >\n > = { ...DEFAULT_COMPRESSION_OPTIONS, ...opts };\n // Map SDK CompressOptions → package CompressionOptions, omitting fields\n // the package doesn't understand (`strict`, `convertHeic`).\n const packageOpts: CompressionOptions = {\n quality: finalOpts.quality,\n mimeType: finalOpts.mimeType,\n maxWidth: finalOpts.maxWidth,\n maxHeight: finalOpts.maxHeight,\n convertSize: finalOpts.convertSize,\n keepOriginalDimensions: opts.keepOriginalDimensions ?? false,\n };\n\n // String indirection defeats bundler static-analysis of dynamic\n // imports — Turbopack/webpack will leave this for the runtime to\n // resolve instead of failing the build when the optional peer dep\n // isn't installed. See feedback_bun_compile_dynamic_imports (same\n // trick used in reverse to opt OUT of bundling).\n const compressorPkg = \"@nitida/asset-compressor-web\";\n const { compressImage: doCompress } = (await import(\n / @vite-ignore / / webpackIgnore: true / compressorPkg\n )) as {\n compressImage: (\n args: unknown,\n ) => Promise<{ blob: Blob; originalSize: number }>;\n };\n const r = await doCompress({\n blob: file,\n filename: file instanceof File ? file.name : \"blob\",\n options: packageOpts,\n statusCallback: opts.onProgress\n ? (status: CompressionStatusKey) => {\n if (\n status === \"convertingHeic\" \|\|\n status === \"compressing\" \|\|\n status === \"compressingKeepingDimensions\"\n ) {\n opts.onProgress?.(status as CompressStage);\n }\n }\n : undefined,\n });\n return { blob: r.blob, originalBytes: r.originalSize };\n}\n\n/\n Compress a batch of images with adaptive concurrency\n * (navigator.hardwareConcurrency, capped at 8). Failures throw — pass\n * `try/catch` per file if you want per-file resilience, or call\n * `compressImage` in a loop yourself.\n */\nexport async function compressImages(\n files: Array<File \| Blob>,\n opts: CompressOptions = {},\n): Promise<CompressResult[]> {\n if (typeof window === \"undefined\") {\n console.warn(\n \"[@nitida/sdk/web] compressImages called outside a browser — returning inputs unchanged.\",\n );\n return files.map((f) => ({ blob: f, originalBytes: f.size }));\n }\n // Sequential per-file via the single-file helper — keeps the cancellation\n // story simple and the API surface narrow. The package's\n // `compressImages` adds an array-of-CompressedResult shape with\n // per-file ids that's overkill for the SDK's stated surface.\n const results: CompressResult[] = [];\n for (const f of files) {\n results.push(await compressImage(f, opts));\n }\n return results;\n}\n"],"mappings":";AAqCA;AAAA,EAGE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EAIA;AAAA,EACA;AAAA,OAGK;AAkJP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAAA;AAAA,EACA,eAAAC;AAAA,EACA,sBAAAC;AAAA,EACA,yBAAAC;AAAA,EACA;AAAA,EACA,sBAAAC;AAAA,EACA,mBAAAC;AAAA,EACA,wBAAAC;AAAA,EACA,aAAAC;AAAA,EACA;AAAA,EACA,eAAAC;AAAA,EACA;AAAA,OACK;AAtFP,SAAS,YACP,MACA,MACA,cACK;AACL,QAAM,WAAW,KAAK,SAAS,QAAQ,QAAQ,EAAE;AACjD,QAAM,aAAa,gBAAgB,KAAK,QAAQ;AAChD,MAAI;AACJ,MAAI,YAAY;AACd,WAAO,GAAG,QAAQ,GAAG,IAAI;AAAA,EAC3B,WAAW,OAAO,WAAW,eAAe,OAAO,UAAU,QAAQ;AACnE,WAAO,GAAG,OAAO,SAAS,MAAM,GAAG,QAAQ,GAAG,IAAI;AAAA,EACpD,OAAO;AACL,UAAM,IAAI;AAAA,MACR,oCAAoC,QAAQ;AAAA,IAE9C;AAAA,EACF;AACA,QAAM,IAAI,IAAI,IAAI,IAAI;AACtB,MAAI,cAAc;AAChB,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,YAAY,GAAG;AACjD,UAAI,MAAM,UAAa,MAAM,QAAQ,MAAM,IAAI;AAC7C,UAAE,aAAa,IAAI,GAAG,OAAO,CAAC,CAAC;AAAA,MACjC;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,aACP,MACA,MACQ;AACR,SAAO,YAAY,MAAM,IAAI,EAAE,SAAS;AAC1C;AAOA,SAAS,YAAY,MAAmD;AACtE,QAAM,IAA4B;AAAA;AAAA,IAEhC,GAAG,KAAK;AAAA,IACR,iBAAiB,KAAK;AAAA,EACxB;AACA,MAAI,KAAK,OAAQ,GAAE,gBAAgB,UAAU,KAAK,MAAM;AACxD,SAAO;AACT;AA0CA,IAAM,WAAN,MAAe;AAAA,EACb,YAA6B,MAA2B;AAA3B;AAAA,EAA4B;AAAA,EAA5B;AAAA;AAAA,EAG7B,QACE,SACA,UAA8B,CAAC,GACN;AACzB,WAAO,YAAY,SAAS,OAAO;AAAA,EACrC;AAAA;AAAA,EAGA,YACE,UACA,UAA8B,CAAC,GACU;AACzC,WAAO,aAAa,UAAU,OAAO;AAAA,EACvC;AAAA;AAAA,EAGA,MAAM,KACJ,OAA4C,CAAC,GACzB;AACpB,UAAM,IAAI,YAAY,KAAK,MAAM,UAAU;AAAA,MACzC,QAAQ,KAAK;AAAA,MACb,OAAO,KAAK;AAAA,IACd,CAAC;AACD,UAAM,IAAI,MAAM,MAAM,GAAG,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC;AACpD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,cAAc,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACtE,UAAM,OAAQ,MAAM,EAAE,KAAK;AAC3B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,MAAM,KACJ,SACA,MAMyD;AACzD,UAAM,IAAI,MAAM;AAAA,MACd,aAAa,KAAK,MAAM,UAAU,mBAAmB,OAAO,CAAC,EAAE;AAAA,MAC/D;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,QACjE,MAAM,KAAK,UAAU,IAAI;AAAA,MAC3B;AAAA,IACF;AACA,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,aAAa,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACrE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,QACJ,SACA,OAA2B,CAAC,GACC;AAC7B,UAAM,IAAI;AAAA,MACR,KAAK;AAAA,MACL,UAAU,mBAAmB,OAAO,CAAC;AAAA,MACrC,EAAE,OAAO,KAAK,MAAM;AAAA,IACtB;AACA,UAAM,IAAI,MAAM,MAAM,GAAG,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC;AACpD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,iBAAiB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACzE,UAAM,OAAQ,MAAM,EAAE,KAAK;AAC3B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,QACJ,SACA,MACyD;AACzD,UAAM,IAAI,MAAM;AAAA,MACd,aAAa,KAAK,MAAM,UAAU,mBAAmB,OAAO,CAAC,EAAE;AAAA,MAC/D;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,QACjE,MAAM,KAAK,UAAU,EAAE,GAAG,MAAM,QAAQ,UAAU,CAAC;AAAA,MACrD;AAAA,IACF;AACA,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,gBAAgB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACxE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA,EAGA,MAAM,OAAO,SAAyD;AACpE,UAAM,IAAI,MAAM;AAAA,MACd,aAAa,KAAK,MAAM,UAAU,mBAAmB,OAAO,CAAC,EAAE;AAAA,MAC/D;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,KAAK,QAAQ;AAAA,MACxB;AAAA,IACF;AACA,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,eAAe,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACvE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA,EAGA,gBAAgB,SAAwB;AACtC,wBAAoB,OAAO;AAAA,EAC7B;AAAA,EAEQ,UAAkC;AACxC,WAAO,YAAY,KAAK,IAAI;AAAA,EAC9B;AACF;AAqIA,IAAM,YAAN,MAAgB;AAAA,EACd,YAA6B,MAA2B;AAA3B;AAAA,EAA4B;AAAA,EAA5B;AAAA;AAAA,EAG7B,MAAM,OAAO,QAA0C;AACrD,UAAM,IAAI,MAAM;AAAA,MACd,aAAa,KAAK,MAAM,mBAAmB,MAAM,EAAE;AAAA,MACnD,EAAE,SAAS,KAAK,QAAQ,EAAE;AAAA,IAC5B;AACA,QAAI,EAAE,WAAW,IAAK,QAAO;AAC7B,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,iBAAiB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACzE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA,EAGA,MAAM,SACJ,QACsD;AACtD,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,mBAAmB,GAAG;AAAA,MAClE,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,MACjE,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;AAAA,IACjC,CAAC;AACD,QAAI,CAAC,EAAE;AACL,YAAM,IAAI,MAAM,mBAAmB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AAClE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA,EAGA,MAAM,KACJ,OAAsE,CAAC,GAItE;AACD,UAAM,IAAI,YAAY,KAAK,MAAM,WAAW;AAAA,MAC1C,OAAO,KAAK;AAAA,MACZ,QAAQ,KAAK;AAAA,MACb,iBAAiB,KAAK,iBAAiB,SAAS;AAAA,IAClD,CAAC;AACD,UAAM,IAAI,MAAM,MAAM,GAAG,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC;AACpD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,eAAe,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACvE,WAAQ,MAAM,EAAE,KAAK;AAAA,EAIvB;AAAA;AAAA,EAGA,MAAM,IAAI,SAA8D;AACtE,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,WAAW,OAAO,EAAE,GAAG;AAAA,MACnE,SAAS,KAAK,QAAQ;AAAA,IACxB,CAAC;AACD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,aAAa,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACrE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SAAS,SAQb;AACA,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,WAAW,OAAO,QAAQ,GAAG;AAAA,MACzE,SAAS,KAAK,QAAQ;AAAA,IACxB,CAAC;AACD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,kBAAkB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AAC1E,UAAM,OAAQ,MAAM,EAAE,KAAK;AAS3B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,SAAS,SAA0C;AACvD,UAAM,MAAM,MAAM,KAAK,IAAI,OAAO;AAClC,WAAO,MAAM,QAAS,IAA+B,QAAQ,IACxD,IAAqC,WACtC,CAAC;AAAA,EACP;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA4BA,MAAM,WACJ,SACA,OAAsC,CAAC,GACZ;AAC3B,UAAM,IAAI,MAAM;AAAA,MACd,aAAa,KAAK,MAAM,WAAW,OAAO,aAAa;AAAA,MACvD;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,QACjE,MAAM,KAAK,UAAU,KAAK,UAAU,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC;AAAA,MACpE;AAAA,IACF;AACA,QAAI,CAAC,EAAE;AACL,YAAM,IAAI,MAAM,oBAAoB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACnE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA,EAGA,MAAM,cACJ,SACA,UAC0D;AAC1D,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,WAAW,OAAO,EAAE,GAAG;AAAA,MACnE,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,MACjE,MAAM,KAAK,UAAU,EAAE,SAAS,CAAC;AAAA,IACnC,CAAC;AACD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,eAAe,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACvE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkCA,MAAM,iBACJ,MAC0B;AAC1B,UAAM,OAAgC;AAAA,MACpC,QAAQ,KAAK;AAAA,MACb,MAAM,KAAK;AAAA,MACX,OAAO,KAAK;AAAA,MACZ,UAAU,KAAK;AAAA,IACjB;AACA,QAAI,KAAK,WAAW,KAAK,QAAQ,SAAS,EAAG,MAAK,UAAU,KAAK;AACjE,QAAI,KAAK,uBAAuB;AAC9B,WAAK,sBAAsB,KAAK;AAClC,QAAI,KAAK,SAAS,KAAM,MAAK,QAAQ,KAAK;AAE1C,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,oBAAoB,GAAG;AAAA,MACnE,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,MACjE,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AACD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,cAAc,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACtE,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,eACJ,aACA,OAA+B,CAAC,GACb;AACnB,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,iBAAiB,GAAG;AAAA,MAChE,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,MACjE,MAAM,KAAK,UAAU,WAAW;AAAA,IAClC,CAAC;AACD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,WAAW,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACnE,UAAM,OAAQ,MAAM,EAAE,KAAK;AAC3B,QAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,6BAA6B;AAChE,UAAM,QAAQ,MAAM,KAAK,UAAU,KAAK,SAAS,KAAK,SAAS;AAC/D,QAAI,MAAM,WAAW,UAAU;AAC7B,YAAM,IAAI;AAAA,QACR,yBAAyB,KAAK,OAAO;AAAA,MACvC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,UAAU,SAAiB,YAAY,IAAI,KAA2B;AAC1E,UAAM,QAAQ,KAAK,IAAI;AACvB,QAAI,QAAQ;AACZ,QAAI,OAAwB;AAC5B,WAAO,KAAK,IAAI,IAAI,QAAQ,WAAW;AACrC,aAAQ,MAAM,KAAK,IAAI,OAAO;AAC9B,UAAI,KAAK,WAAW,WAAW,KAAK,WAAW,SAAU,QAAO;AAChE,YAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC;AAC7C,cAAQ,KAAK,IAAI,QAAQ,KAAK,GAAK;AAAA,IACrC;AACA,QAAI,CAAC,KAAM,OAAM,IAAI,MAAM,uBAAuB,OAAO,EAAE;AAC3D,UAAM,IAAI,MAAM,yBAAyB,OAAO,EAAE;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,iBACJ,MACiC;AACjC,UAAM,IAAI,MAAM;AAAA,MACd,aAAa,KAAK,MAAM,2BAA2B;AAAA,MACnD;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,gBAAgB,mBAAmB;AAAA,QACjE,MAAM,KAAK,UAAU;AAAA,UACnB,YAAY,KAAK,KAAK;AAAA,UACtB,gBAAgB,KAAK;AAAA,UACrB,UAAU,KAAK;AAAA,UACf,aAAa,KAAK,eAAe,CAAC;AAAA,QACpC,CAAC;AAAA,MACH;AAAA,IACF;AACA,QAAI,CAAC,EAAE,IAAI;AACT,YAAM,IAAI,MAAM,qBAAqB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AAAA,IACpE;AACA,UAAM,OAAQ,MAAM,EAAE,KAAK;AAO3B,UAAM,UAAU,KAAK,OAAO,MAAM,KAAK;AACvC,UAAM,SAAS,KAAK,OAAO,UAAU,KAAK,UAAU;AACpD,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,MAAM,6CAA6C;AAAA,IAC/D;AACA,WAAO,EAAE,SAAS,OAAO;AAAA,EAC3B;AAAA,EAEQ,UAAkC;AACxC,WAAO,YAAY,KAAK,IAAI;AAAA,EAC9B;AACF;AAYA,IAAM,cAAsC;AAAA,EAC1C,MAAM;AAAA,EACN,KAAK;AAAA,EACL,MAAM;AAAA,EACN,KAAK;AAAA,EACL,KAAK;AAAA,EACL,MAAM;AAAA,EACN,MAAM;AAAA,EACN,MAAM;AAAA,EACN,KAAK;AAAA,EACL,KAAK;AAAA,EACL,MAAM;AAAA,EACN,KAAK;AAAA,EACL,MAAM;AAAA,EACN,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AACP;AACO,SAAS,iBAAiB,UAA6C;AAC5E,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,MAAM,SAAS,MAAM,GAAG,EAAE,IAAI,GAAG,YAAY;AACnD,SAAO,MAAO,YAAY,GAAG,KAAK,OAAQ;AAC5C;AA+GA,IAAM,yBAA0C,CAAC,UAAU;AAQ3D,eAAe,cACb,OACiB;AACjB,QAAM,MACJ,iBAAiB,OACb,MAAM,MAAM,YAAY,IACxB,iBAAiB,aACd,MAAM,SACP;AACR,QAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,GAAG;AACxD,SAAO,CAAC,GAAG,IAAI,WAAW,MAAM,CAAC,EAC9B,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AACZ;AAgEA,IAAM,WAAN,MAAe;AAAA,EACb,YAA6B,MAA2B;AAA3B;AAAA,EAA4B;AAAA,EAA5B;AAAA;AAAA,EAG7B,MAAM,WAAmC;AACvC,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,QAAQ,GAAG;AAAA,MACvD,SAAS,KAAK,QAAQ;AAAA,IACxB,CAAC;AACD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,kBAAkB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AAC1E,WAAQ,MAAM,EAAE,KAAK;AAAA,EACvB;AAAA;AAAA,EAGA,MAAM,WAAW,OAAO,IAGrB;AACD,UAAM,IAAI,MAAM;AAAA,MACd,YAAY,KAAK,MAAM,qBAAqB,EAAE,KAAK,CAAC;AAAA,MACpD,EAAE,SAAS,KAAK,QAAQ,EAAE;AAAA,IAC5B;AACA,QAAI,CAAC,EAAE;AACL,YAAM,IAAI,MAAM,oBAAoB,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACnE,WAAQ,MAAM,EAAE,KAAK;AAAA,EAIvB;AAAA;AAAA,EAGA,MAAM,OAIH;AACD,UAAM,IAAI,MAAM,MAAM,aAAa,KAAK,MAAM,aAAa,GAAG;AAAA,MAC5D,SAAS,KAAK,QAAQ;AAAA,IACxB,CAAC;AACD,QAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,cAAc,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE;AACtE,WAAQ,MAAM,EAAE,KAAK;AAAA,EAKvB;AAAA,EAEQ,UAAkC;AACxC,WAAO,YAAY,KAAK,IAAI;AAAA,EAC9B;AACF;AAEO,IAAM,eAAN,MAAmB;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,EAET,YAAY,MAA2B;AACrC,SAAK,OAAO;AACZ,UAAM,MAAM,KAAK,WAAW;AAC5B,eAAW,GAAG;AAId,gBAAY,KAAK,QAAQ;AACzB,0BAAsB;AAAA,MACpB,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,YAAY,KAAK;AAAA,IACnB,CAAC;AACD,SAAK,QAAQ,IAAI,SAAS,IAAI;AAC9B,SAAK,SAAS,IAAI,UAAU,IAAI;AAChC,SAAK,QAAQ,IAAI,SAAS,IAAI;AAAA,EAChC;AAAA;AAAA,EAGA,IAAI,gBAAwB;AAC1B,WAAO,GAAG,KAAK,KAAK,SAAS,SAAS,EAAE,CAAC;AAAA,EAC3C;AAAA;AAAA,EAGA,OAAO,OAA8B,SAAwB,MAAc;AACzE,WAAO,YAAY,OAAO,MAAM;AAAA,EAClC;AAAA;AAAA,EAGA,UAAU,OAAkD;AAC1D,WAAO,eAAe,KAAK;AAAA,EAC7B;AAAA,EAwCA,UACE,OACA,OAA+B,CAAC,GAChC,UAC0B;AAC1B,QAAI,CAAC,UAAU,MAAM;AAInB,aACE,gBAAgB,OAAO,IAAwB,KAC/C,KAAK,OAAO,OAAO,IAAI;AAAA,IAE3B;AACA,QAAI,CAAC,KAAK,KAAK,YAAY;AACzB,YAAM,IAAI;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AAGA,WACE,sBAAsB,OAAO,MAAM,KAAK,KAAK,UAAU,KACvD,QAAQ,QAAQ,KAAK,OAAO,OAAO,IAAI,CAAC;AAAA,EAE5C;AAAA,EAoBA,gBACE,OACA,QACA,YAA6C,CAAC,GAC9C,UAC0B;AAC1B,QAAI,CAAC,UAAU,KAAM,QAAO,mBAAmB,OAAO,QAAQ,SAAS;AACvE,QAAI,CAAC,KAAK,KAAK,YAAY;AACzB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAM,MAAM,KAAK,KAAK;AACtB,WAAO,QAAQ;AAAA,MACb,OAAO,IAAI,OAAO,MAAM;AAItB,cAAM,SAAS,MAAM;AAAA,UACnB;AAAA,UACA,EAAE,GAAG,WAAW,OAAO,EAAE;AAAA,UACzB;AAAA,QACF;AACA,eAAO,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM;AAAA,MACtC,CAAC;AAAA,IACH,EAAE,KAAK,CAAC,UAAU,MAAM,OAAO,CAAC,MAAmB,KAAK,IAAI,EAAE,KAAK,IAAI,CAAC;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgCA,eACE,OACA,OAAyB,CAAC,GAClB;AACR,WAAO,qBAAqB,OAAO,IAAI,KAAK,KAAK,OAAO,OAAO,IAAI;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,aACE,OACA,OAAyC,CAAC,GAClC;AACR,WAAO,mBAAmB,OAAO,IAAI;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwDA,MAAM,OACJ,OACA,OAAsB,CAAC,GACA;AAGvB,UAAM,eAAe,iBAAiB,QAAQ,iBAAiB;AAI/D,UAAM,cACH,eAAe,MAAM,OAAO,OAC7B,KAAK,eACL,iBAAiB,KAAK,QAAQ,KAC9B;AACF,QAAI,CAAC,gBAAgB,eAAe,4BAA4B;AAC9D,cAAQ;AAAA,QACN;AAAA,MAGF;AAAA,IACF;AAKA,QAAI;AACJ,QAAI;AACJ,QAAI;AAEJ,UAAM,kBACJ,CAAC,CAAC,KAAK,YACP,gBACA,OAAO,WAAW,eAClB,WAAW,WAAW,QAAQ;AAEhC,QAAI,iBAAiB;AACnB,YAAM,eACJ,KAAK,aAAa,OAAO,CAAC,IAAK,KAAK;AA4BtC,YAAM,YAAY,IAAI;AAAA,QACpB;AAAA,QACA;AAAA,MACF;AACA,YAAM,EAAE,eAAAC,eAAc,IAAI,MAAM,UAAU,YAAY,GAAG;AACzD,YAAM,SAAS,MAAMA,eAAc,OAAsB,YAAY;AACrE,cAAQ,IAAI,WAAW,MAAM,OAAO,KAAK,YAAY,CAAC;AACtD,4BAAsB,OAAO;AAC7B,sBAAgB,OAAO,KAAK,QAAQ;AAAA,IACtC,OAAO;AACL,UAAI,KAAK,YAAY,CAAC,cAAc;AAClC,gBAAQ;AAAA,UACN;AAAA,QACF;AAAA,MACF,WAAW,KAAK,YAAY,OAAO,WAAW,aAAa;AACzD,gBAAQ;AAAA,UACN;AAAA,QACF;AAAA,MACF,WAAW,KAAK,YAAY,CAAC,WAAW,WAAW,QAAQ,GAAG;AAAA,MAG9D;AACA,cACE,iBAAiB,aACb,QACA,IAAI,WAAW,MAAM,MAAM,YAAY,CAAC;AAC9C,sBAAgB;AAAA,IAClB;AAEA,UAAM,MAAM,KAAK,UAAW,MAAM,cAAc,KAAK;AACrD,UAAM,OAAO;AACb,UAAM,WACJ,KAAK,aACJ,iBAAiB,OAAO,MAAM,OAAO,UAAU,IAAI,MAAM,GAAG,CAAC,CAAC;AAGjE,UAAM,WAAW,MAAM,KAAK,OAAO,OAAO,GAAG;AAC7C,QAAI,YAAY,SAAS,WAAW,SAAS;AAC3C,aAAO;AAAA,QACL,SAAS,SAAS;AAAA,QAClB,QAAQ;AAAA,QACR,QAAQ,KAAK,OAAO,UAAU,KAAK,mBAAmB,UAAU,IAAI,CAAC;AAAA,MACvE;AAAA,IACF;AAOA,UAAM,UAAU,MAAM,KAAK,OAAO,iBAAiB;AAAA,MACjD,QAAQ;AAAA,MACR;AAAA,MACA,OAAO,MAAM;AAAA,MACb;AAAA,MACA,SACE,KAAK,WAAW,KAAK,QAAQ,SAAS,IAClC,KAAK,UACL;AAAA,MACN,GAAI,uBAAuB,QAAQ,EAAE,oBAAoB;AAAA,MACzD,GAAI,KAAK,SAAS,QAAQ,EAAE,OAAO,KAAK,MAAM;AAAA,IAChD,CAAC;AACD,QAAI,QAAQ,SAAS;AACnB,aAAO;AAAA,QACL,SAAS,QAAQ,MAAM;AAAA,QACvB,QAAQ;AAAA,QACR,QAAQ,KAAK,OAAO,QAAQ,OAAO,KAAK,qBAAqB,IAAI,CAAC;AAAA,MACpE;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,MAAM,QAAQ,OAAO,KAAK;AAAA,MAC3C,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,MAAM,GAAI,QAAQ,OAAO,WAAW,CAAC,EAAG;AAAA,MACnE,MAAM,IAAI,KAAK,CAAC,KAA+B,GAAG,EAAE,MAAM,KAAK,CAAC;AAAA,IAClE,CAAC;AACD,QAAI,CAAC,KAAK;AACR,YAAM,IAAI,MAAM,UAAU,KAAK,MAAM,KAAK,MAAM,KAAK,KAAK,CAAC,EAAE;AAE/D,UAAM,QAAQ,MAAM,MAAM,aAAa,KAAK,MAAM,QAAQ,QAAQ,GAAG,GAAG;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,GAAG,YAAY,KAAK,IAAI;AAAA,QACxB,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU,QAAQ,QAAQ,IAAI;AAAA,IAC3C,CAAC;AACD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,MAAM,WAAW,MAAM,MAAM,KAAK,MAAM,MAAM,KAAK,CAAC,EAAE;AAClE,UAAM,OAAQ,MAAM,MAAM,KAAK;AAE/B,QAAI,UAAU,KAAK;AACnB,QAAI,CAAC,WAAW,KAAK,SAAS,SAAS;AAErC,YAAM,QAAQ,KAAK,IAAI;AACvB,UAAI,QAAQ;AACZ,aAAO,KAAK,IAAI,IAAI,QAAQ,KAAQ;AAClC,cAAM,MAAM,MAAM,KAAK,OAAO,OAAO,GAAG;AACxC,YAAI,KAAK,IAAI;AACX,oBAAU,IAAI;AACd;AAAA,QACF;AACA,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC;AAC7C,gBAAQ,KAAK,IAAI,QAAQ,KAAK,GAAK;AAAA,MACrC;AAAA,IACF;AACA,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,qCAAqC;AAKnE,UAAM,QAAQ,MAAM,KAAK,OAAO,UAAU,SAAS,KAAK,SAAS;AACjE,QAAI,MAAM,WAAW;AACnB,YAAM,IAAI,MAAM,8BAA8B,MAAM,MAAM,EAAE;AAC9D,WAAO;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ,KAAK,OAAO,OAAO,KAAK,mBAAmB,OAAO,IAAI,CAAC;AAAA,IACjE;AAAA,EACF;AAAA,EAEQ,qBAAqB,MAA6B;AACxD,QAAI,KAAK,WAAW,QAAQ,EAAG,QAAO;AAGtC,QAAI,KAAK,WAAW,QAAQ,EAAG,QAAO;AACtC,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWQ,mBAAmB,OAAiB,MAA6B;AACvE,UAAM,QAAyB,KAAK,WAAW,QAAQ,IACnD,CAAC,SAAS,QAAQ,IAClB,KAAK,WAAW,QAAQ,IACtB,CAAC,OAAO,UAAU,IAClB,CAAC,MAAM,MAAM,MAAM,SAAS,MAAM,UAAU;AAClD,WACE,MAAM,KAAK,CAAC,MAAM,UAAU,OAAO,CAAC,CAAC,KAAK,KAAK,qBAAqB,IAAI;AAAA,EAE5E;AACF;;;ACr8CO,IAAMC,gBAAN,cAA2B,aAAiB;AAAA,EACjD,YAAY,MAAwB;AAClC,UAAM,IAA2B;AAAA,EACnC;AACF;AAqIO,IAAM,8BAET;AAAA,EACF,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,WAAW;AAAA,EACX,aAAa,IAAI,OAAO;AAAA,EACxB,QAAQ;AACV;AAgBA,eAAsB,cACpB,MACA,OAAwB,CAAC,GACA;AACzB,MAAI,OAAO,WAAW,aAAa;AACjC,YAAQ;AAAA,MACN;AAAA,IACF;AACA,WAAO,EAAE,MAAM,MAAM,eAAe,KAAK,KAAK;AAAA,EAChD;AACA,QAAM,YAKF,EAAE,GAAG,6BAA6B,GAAG,KAAK;AAG9C,QAAM,cAAkC;AAAA,IACtC,SAAS,UAAU;AAAA,IACnB,UAAU,UAAU;AAAA,IACpB,UAAU,UAAU;AAAA,IACpB,WAAW,UAAU;AAAA,IACrB,aAAa,UAAU;AAAA,IACvB,wBAAwB,KAAK,0BAA0B;AAAA,EACzD;AAOA,QAAM,gBAAgB;AACtB,QAAM,EAAE,eAAe,WAAW,IAAK,MAAM;AAAA;AAAA;AAAA,IACE;AAAA;AAM/C,QAAM,IAAI,MAAM,WAAW;AAAA,IACzB,MAAM;AAAA,IACN,UAAU,gBAAgB,OAAO,KAAK,OAAO;AAAA,IAC7C,SAAS;AAAA,IACT,gBAAgB,KAAK,aACjB,CAAC,WAAiC;AAChC,UACE,WAAW,oBACX,WAAW,iBACX,WAAW,gCACX;AACA,aAAK,aAAa,MAAuB;AAAA,MAC3C;AAAA,IACF,IACA;AAAA,EACN,CAAC;AACD,SAAO,EAAE,MAAM,EAAE,MAAM,eAAe,EAAE,aAAa;AACvD;AAQA,eAAsB,eACpB,OACA,OAAwB,CAAC,GACE;AAC3B,MAAI,OAAO,WAAW,aAAa;AACjC,YAAQ;AAAA,MACN;AAAA,IACF;AACA,WAAO,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,EAAE,KAAK,EAAE;AAAA,EAC9D;AAKA,QAAM,UAA4B,CAAC;AACnC,aAAW,KAAK,OAAO;AACrB,YAAQ,KAAK,MAAM,cAAc,GAAG,IAAI,CAAC;AAAA,EAC3C;AACA,SAAO;AACT;","names":["getAssetSrcSet","getAssetUrl","getHlsStreamingUrl","getSignedTransformUrl","getTransformSrcSet","getTransformUrl","getVideoTransformUrl","hasPreset","setTenantId","compressImage","NitidaClient"]}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@nitida/sdk",
-  "version": "0.20.1",
+  "version": "0.22.0",
   "description": "nitida — the media SDK: browser and mobile upload with resume, client-side compression, on-the-fly transforms behind a CDN, video transcode, HLS ladders and AI proxies. Multi-tenant.",
   "private": false,
   "publishConfig": {

package/skills/nitida-sdk/SKILL.md CHANGED Viewed

@@ -304,3 +304,100 @@ Measured 2026-08-15 building `neo/apps/media-harness`, the bench for this SDK. R
 | audio won't serve | stored as `kind:"other"` — re-upload with an explicit `contentType:"audio/mpeg"` so it's `kind:"audio"` + gets the `mp3` preset (audio IS supported as of 2026-07-01; see §3) |
 > Source of truth for deeper detail: `docs/ASSET_MANAGER_V2.md`, `docs/CLIENT_OPERATIONS.md`, `docs/TENANT_ONBOARDING.md`, and `packages/asset-client/src/{transform.ts,index.ts}`.
+## 8. The rest of the surface — the gaps this guide used to have
+### 8a. `presets` defaults to `["original"]`, NOT the ladder
+Both the SDK (`DEFAULT_UPLOAD_PRESETS`) and the server default to **original
+only** — a bare upload must never silently spend 4× the storage budget. Ask for
+the ladder by name or `srcSetFor()` will come back nearly empty:
+```ts
+await nt.upload(file, { presets: ["original", "thumb", "md", "lg"] });
+```
+### 8b. Non-image uploads: four paths, decided by MIME
+| MIME | path | result |
+|---|---|---|
+| `image/*` | ladder | WebP variants + palette + dimensions |
+| `video/*` | Cloud Run Job | poster · mp4 · HLS · optional `aiproxy`/`probe` |
+| `audio/*` | inline transcode | `mp3` variant (mono ~96 kbps) **+** untouched original |
+| anything else | **passthrough** | raw bytes under `original`, `ready` immediately |
+Passthrough covers PDF, xlsx, csv, zip, fonts, glb. You get storage, dedup and
+CDN delivery — and **no** thumbnail, **no** text extraction, **no** transforms,
+**no** virus scan. `kind` is `document` for PDF, `other` for the rest.
+⚠️ For non-images the stored extension comes from the **filename**, and
+`original` is the only variant there is. `upload(bytes)` with no `fileName` and
+no `contentType` → `application/octet-stream` → `-o.bin`, which no browser
+knows how to open. Resolution order: `Blob.type` → `contentType` → `fileName`
+extension → octet-stream.
+**Archiving a video's source bytes:** video presets silently drop `original`.
+Upload it under a non-video name (`master.mp4.bin`) to take the passthrough
+branch — in ADDITION to the normal video upload, not instead of it.
+### 8c. Transparency
+`acceptedEncodings` returns `["image/png"]` for a PNG request — **no JPEG
+fallback exists on that path**, because asking for PNG means lossless-or-alpha
+on purpose. Any JPEG encode composites onto **white** first; without that,
+transparent pixels encode as BLACK.
+- keep alpha → `compress: { mimeType: "image/png" }`
+- WebP keeps alpha too — but WebKit cannot encode WebP at all (see 8d), so a
+  WebP request there falls back to JPEG and **flattens**.
+### 8d. WebKit cannot encode WebP — and it mostly does not matter
+MDN compat data: `canvas.toBlob(type="image/webp")` is **unsupported in
+Safari**, macOS included; every iOS browser is WebKit, so all inherit it.
+Measured iOS 27 / Chrome 151, 9.1 MP photo: `2.05 MB → 743.7 kB` as `jpeg`.
+**Delivery is WebP regardless** — the server re-encodes every variant with
+sharp. The fallback only costs upload bytes (measured: WebP is **41% smaller**
+than JPEG at the same quality) and leaves the archived `original` as JPEG.
+### 8e. Palette — free, synchronous, on the DTO
+Extracted during processing for every image; by the time an asset is `ready`
+its palette is on it. `getAssetPalette(asset)` → dominant + 6 swatches, each
+with a luminance-derived text colour. Use for ambient backgrounds and load
+placeholders.
+### 8f. AI proxies — we produce, YOU analyse
+`aiproxy` (5 fps, 720p, CRF 28) and `probe` (stills at even offsets) are
+**artifacts, not features**. The platform generates them and fires a
+fire-and-forget webhook carrying `aiProxyUrl` + probe URLs. **Nothing here runs
+a model.** Captioning, moderation, embeddings and storage are the consumer's
+job. Skip `aiproxy` when nothing reads it — it is an extra encode per video.
+### 8g. Signed URLs, upscale, usage
+- **Custom width** → only via `getSignedTransformUrl` / `transform(..., {sign:true})`.
+  `TransformOptions.width` is the ladder union; `SignedTransformOptions.width`
+  is `number`. Unsigned off-ladder = 400 at the edge (DoS guard). Sign
+  server-side.
+- **Upscale** → `POST /assets/:id/upscale`, idempotent on
+  `(tenant, sha, preset, provider)`, async, with `/poll` as the missed-webhook
+  fallback.
+- **Usage** → `nt.usage.snapshot() | timeseries(days) | keys()`. Wire `keys()`
+  early: per-key attribution is the cheap answer to "what caused this spike".
+### 8h. Mobile
+`createExpoUploader(client, opts)` delegates transport to a **native background
+session** (URLSession / WorkManager), so the upload survives backgrounding,
+screen lock and JS suspension. `@nitida/sdk/native` mirrors the web compressor's
+API exactly. **Mobile batches sequentially (concurrency 1)** — four concurrent
+pipelines get the process OOM-killed on low-end Android, not finished sooner.
+### 8i. Failure isolation
+Only object storage is a hard dependency. Cloud Run down → video stays
+`processing`, images fine. Webhooks down → **nothing**; they are fire-and-forget
+so an upload never fails because a consumer was unavailable.

package/src/expo/index.ts CHANGED Viewed

@@ -13,7 +13,7 @@
  *
  *   import { createExpoUploader, listResumableSessions } from "@nitida/sdk/expo";
  *
- *   const aq = new AquienpzClient({ ... });
+ *   const aq = new NitidaClient({ ... });
  *
  *   // Resume any uploads from a prior app launch on boot.
  *   const resumable = await listResumableSessions();
@@ -35,7 +35,7 @@ import {
   UploadTask,
   type UploadTaskOptions,
 } from "@aquienpz/asset-uploader-expo";
-import type { AquienpzClient } from "..";
+import type { NitidaClient } from "..";
 export type ExpoUploadOptions = Omit<
   UploadTaskOptions,
@@ -49,7 +49,7 @@ export type ExpoUploadOptions = Omit<
  * concurrency).
  */
 export function createExpoUploader(
-  client: AquienpzClient,
+  client: NitidaClient,
   options: ExpoUploadOptions,
 ): UploadTask {
   const access = client as unknown as {