@nodetool-ai/agents 0.7.0-rc.22 → 0.8.1

package/dist/sandbox-media-ref.d.ts

@@ -0,0 +1,134 @@
+/**
+ * The `media.*` sandbox bridge: media refs in, media refs out.
+ *
+ * A `nodetool.code.Code` node receives a document/image/audio/video input as a
+ * bare ref object — `{type, uri, asset_id, data, metadata}` — whose `uri` may be
+ * `asset://<id>`, `/api/storage/<key>`, a signed https URL, `package://…`, a
+ * `data:` URI, or a plain file path. Host nodes resolve all of those through
+ * `loadMediaRefBytes`; the guest had no equivalent and could only look at the
+ * object. These bridges give it the same resolver, and the reverse direction:
+ * bytes the body computed become a ref the node can emit as an output.
+ *
+ * Both directions are capped (see {@link MAX_MEDIA_REF_BYTES}) and both need a
+ * `ProcessingContext`, the way `workspace.*` does.
+ */
+import { type MediaRefValue } from "@nodetool-ai/runtime";
+import type { ProcessingContext } from "@nodetool-ai/runtime";
+import { type GuestBytes } from "./sandbox-bytes.js";
+export { MEDIA_REF_MEMBERS } from "./sandbox-constants.js";
+/**
+ * Largest payload `media.*` moves in either direction.
+ *
+ * Host → guest, bytes cross as base64 and are then rebuilt as a `Uint8Array`,
+ * so the guest briefly holds ~2.3× the payload. At 16 MB that is ~37 MB against
+ * the 64 MB default guest heap, which leaves room for the program itself; the
+ * 25 MB `image.*` ceiling would not. Guest → host the same number bounds what
+ * one run can push into storage.
+ */
+export declare const MAX_MEDIA_REF_BYTES: number;
+/**
+ * Largest payload a builder inlines as a `data:` URI.
+ *
+ * A data URI rides inside every graph message that carries the ref, gets
+ * MsgPack'd on the wire, and is copied by every downstream node — a
+ * multi-megabyte video there is a real cost. So a builder writes to storage
+ * whenever the context has it, and only falls back to a data URI for a small
+ * payload in a storage-less context. Past this size with no storage, the call
+ * fails instead of inlining.
+ */
+export declare const MAX_DATA_URI_BYTES: number;
+/** The media kinds a ref builder can produce. */
+export type MediaRefKind = "document" | "image" | "audio" | "video";
+/** What `media.info` answers. */
+interface MediaRefInfo {
+    type: string;
+    mimeType: string;
+    uri: string;
+    size: number;
+}
+/** The host side of the guest's `media` namespace. */
+interface MediaRefBridge {
+    bytes(ref: unknown): Promise<GuestBytes>;
+    text(ref: unknown, options?: unknown): Promise<string>;
+    info(ref: unknown): Promise<MediaRefInfo>;
+    toDocument(bytes: unknown, options?: unknown): Promise<Record<string, unknown>>;
+    toImage(bytes: unknown, options?: unknown): Promise<Record<string, unknown>>;
+    toAudio(bytes: unknown, options?: unknown): Promise<Record<string, unknown>>;
+    toVideo(bytes: unknown, options?: unknown): Promise<Record<string, unknown>>;
+}
+export declare const DEFAULT_MIME: {
+    document: string;
+    image: string;
+    audio: string;
+    video: string;
+};
+export declare function mimeForPath(path: string): string | undefined;
+/**
+ * Locator fields on a generation result, in the order a chat action may read.
+ * `uri` is last: a generation also carries a host filesystem path there, and
+ * the guest must not follow it.
+ */
+export declare const MEDIA_LOCATOR_KEYS: readonly ["asset_uri", "asset_id", "url", "uri"];
+/**
+ * The one string `read_media_bytes` / `image.*` should load for a value.
+ * Accepts a generation result, its `asset_uri`, a bare asset id, or a URI.
+ *
+ * A remapped ref keeps both `uri` (the preferred locator) and `asset_id`.
+ * Prefer a non-filesystem URI so a bare id does not win over `asset://…`.
+ */
+export declare function mediaLocatorFrom(value: unknown): string;
+/**
+ * A string that names media, not an option like `"png"` or `"cover"`.
+ *
+ * A `data:` URI carries no `//`, and is what {@link storeOrInline} returns
+ * when the run has no storage, so it needs a branch of its own. The prefix is
+ * matched case-sensitively because every resolver downstream is, so a `DATA:`
+ * accepted here would be a locator none of them can dereference.
+ */
+export declare function isMediaLocatorString(value: string): boolean;
+/** Whether `image.*` should treat the value as a media ref, not as nested data. */
+export declare function looksLikeMediaRef(value: unknown): boolean;
+/**
+ * Flatten a generation result (or a bare locator) to the ref `loadMediaRefBytes`
+ * understands. Prefers `asset_uri` so a host `file://` on the same object is
+ * never the path that is read.
+ */
+export declare function remapMediaRef(value: unknown): MediaRefValue;
+/**
+ * The filesystem path a ref's `uri` names, or `null` when it names something
+ * else (a data URI, an asset, a storage key, an http URL).
+ *
+ * Every form that reaches disk goes through here — `file://`, an absolute
+ * path, a `~`-prefixed path, and a bare relative path — so the caller has one
+ * place to apply containment. `loadMediaRefBytes` reads the first two itself
+ * with no check at all, which is why a filesystem-shaped uri never reaches it.
+ */
+export declare function filesystemPathForUri(uri: unknown): string | null;
+/**
+ * Read the bytes a media ref names, with this run's containment applied.
+ *
+ * Exported because media transforms accept refs anywhere they accept bytes.
+ * The guest passes a generator's `asset://…` result straight into the next
+ * operation, and the bytes stay on the host. `maxBytes` remains 16 MB for
+ * `media.*`, whose bytes enter the guest, while handle-based transforms use
+ * the larger per-run media budget.
+ */
+export declare function resolveRefBytes(where: string, ref: MediaRefValue, context: ProcessingContext, resolvePath?: (path: string) => Promise<string>, maxBytes?: number): Promise<Uint8Array>;
+/** The ref's mime type, from the ref itself, its data URI header, or its path. */
+export declare function mimeForRef(ref: MediaRefValue, fallback: string): string;
+/** What a host supplies alongside the context when it builds the bridge. */
+interface MediaRefBridgeOptions {
+    /**
+     * Resolve a guest-supplied filesystem path to the one path this run may
+     * read, or throw. The sandbox passes its own `resolveGuestPath`, so
+     * `media.*` and `workspace.*` are contained by one rule rather than two.
+     */
+    resolvePath?: (path: string) => Promise<string>;
+}
+/**
+ * Build the guest's `media` namespace. Every member is async, and every one
+ * fails with a named error when the run has no `ProcessingContext` — the same
+ * contract `workspace.*` follows, so nothing half-works.
+ */
+export declare function createMediaRefBridge(context?: ProcessingContext, options?: MediaRefBridgeOptions): MediaRefBridge;
+//# sourceMappingURL=sandbox-media-ref.d.ts.map

package/dist/sandbox-media-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-media-ref.d.ts","sourceRoot":"","sources":["../src/sandbox-media-ref.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAQ3D;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,QAAmB,CAAC;AAEpD;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,QAAkB,CAAC;AAElD,iDAAiD;AACjD,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEpE,iCAAiC;AACjC,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAED,sDAAsD;AACtD,UAAU,cAAc;IACtB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,UAAU,CACR,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC9E;AAED,eAAO,MAAM,YAAY;;;;;CAKe,CAAC;AAwCzC,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG5D;AAwBD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,YAC7B,WAAW,EACX,UAAU,EACV,KAAK,EACL,KAAK,CACG,CAAC;AAEX;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA4BvD;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAO3D;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAczD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAoB3D;AA6BD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAgBhE;AAkCD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,iBAAiB,EAC1B,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EAC/C,QAAQ,GAAE,MAA4B,GACrC,OAAO,CAAC,UAAU,CAAC,CAmBrB;AAED,kFAAkF;AAClF,wBAAgB,UAAU,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQvE;AA+GD,4EAA4E;AAC5E,UAAU,qBAAqB;IAC7B;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACjD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,CAAC,EAAE,iBAAiB,EAC3B,OAAO,GAAE,qBAA0B,GAClC,cAAc,CAwEhB"}

package/dist/sandbox-media-ref.js

@@ -0,0 +1,442 @@
+/**
+ * The `media.*` sandbox bridge: media refs in, media refs out.
+ *
+ * A `nodetool.code.Code` node receives a document/image/audio/video input as a
+ * bare ref object — `{type, uri, asset_id, data, metadata}` — whose `uri` may be
+ * `asset://<id>`, `/api/storage/<key>`, a signed https URL, `package://…`, a
+ * `data:` URI, or a plain file path. Host nodes resolve all of those through
+ * `loadMediaRefBytes`; the guest had no equivalent and could only look at the
+ * object. These bridges give it the same resolver, and the reverse direction:
+ * bytes the body computed become a ref the node can emit as an output.
+ *
+ * Both directions are capped (see {@link MAX_MEDIA_REF_BYTES}) and both need a
+ * `ProcessingContext`, the way `workspace.*` does.
+ */
+import { importNodeBuiltin } from "@nodetool-ai/config";
+import { loadMediaRefBytes } from "@nodetool-ai/runtime";
+import { toGuestBytes } from "./sandbox-bytes.js";
+export { MEDIA_REF_MEMBERS } from "./sandbox-constants.js";
+import { isNonBlankString, isNonEmptyString, isRecord, isString } from "./utils/type-guards.js";
+/**
+ * Largest payload `media.*` moves in either direction.
+ *
+ * Host → guest, bytes cross as base64 and are then rebuilt as a `Uint8Array`,
+ * so the guest briefly holds ~2.3× the payload. At 16 MB that is ~37 MB against
+ * the 64 MB default guest heap, which leaves room for the program itself; the
+ * 25 MB `image.*` ceiling would not. Guest → host the same number bounds what
+ * one run can push into storage.
+ */
+export const MAX_MEDIA_REF_BYTES = 16 * 1024 * 1024;
+/**
+ * Largest payload a builder inlines as a `data:` URI.
+ *
+ * A data URI rides inside every graph message that carries the ref, gets
+ * MsgPack'd on the wire, and is copied by every downstream node — a
+ * multi-megabyte video there is a real cost. So a builder writes to storage
+ * whenever the context has it, and only falls back to a data URI for a small
+ * payload in a storage-less context. Past this size with no storage, the call
+ * fails instead of inlining.
+ */
+export const MAX_DATA_URI_BYTES = 4 * 1024 * 1024;
+export const DEFAULT_MIME = {
+    document: "application/octet-stream",
+    image: "image/png",
+    audio: "audio/mpeg",
+    video: "video/mp4"
+};
+const MIME_TO_EXT = {
+    "application/json": "json",
+    "application/octet-stream": "bin",
+    "application/pdf": "pdf",
+    "application/zip": "zip",
+    "audio/aac": "aac",
+    "audio/flac": "flac",
+    "audio/mp4": "m4a",
+    "audio/mpeg": "mp3",
+    "audio/ogg": "ogg",
+    "audio/wav": "wav",
+    "audio/x-wav": "wav",
+    "image/avif": "avif",
+    "image/gif": "gif",
+    "image/jpeg": "jpg",
+    "image/png": "png",
+    "image/svg+xml": "svg",
+    "image/webp": "webp",
+    "text/csv": "csv",
+    "text/html": "html",
+    "text/markdown": "md",
+    "text/plain": "txt",
+    "video/mp4": "mp4",
+    "video/quicktime": "mov",
+    "video/webm": "webm"
+};
+const EXT_TO_MIME = Object.entries(MIME_TO_EXT).reduce((acc, [mime, ext]) => {
+    if (!(ext in acc))
+        acc[ext] = mime;
+    return acc;
+}, {});
+function extForMime(mime) {
+    return MIME_TO_EXT[mime.toLowerCase()] ?? "bin";
+}
+export function mimeForPath(path) {
+    const match = /\.([A-Za-z0-9]+)(?:[?#].*)?$/.exec(path);
+    return match ? EXT_TO_MIME[match[1].toLowerCase()] : undefined;
+}
+function mimeFromDataUri(uri) {
+    const match = /^data:([^;,]+)[;,]/.exec(uri);
+    return match ? match[1] : undefined;
+}
+function asRecord(value) {
+    return isRecord(value) ? value : {};
+}
+function optionalString(options, key, where) {
+    const value = options[key];
+    if (value === undefined || value === null)
+        return undefined;
+    if (!isString(value)) {
+        throw new Error(`${where}: ${key} must be a string`);
+    }
+    return value;
+}
+/**
+ * Locator fields on a generation result, in the order a chat action may read.
+ * `uri` is last: a generation also carries a host filesystem path there, and
+ * the guest must not follow it.
+ */
+export const MEDIA_LOCATOR_KEYS = [
+    "asset_uri",
+    "asset_id",
+    "url",
+    "uri"
+];
+/**
+ * The one string `read_media_bytes` / `image.*` should load for a value.
+ * Accepts a generation result, its `asset_uri`, a bare asset id, or a URI.
+ *
+ * A remapped ref keeps both `uri` (the preferred locator) and `asset_id`.
+ * Prefer a non-filesystem URI so a bare id does not win over `asset://…`.
+ */
+export function mediaLocatorFrom(value) {
+    if (isNonBlankString(value)) {
+        return value.trim();
+    }
+    if (isRecord(value)) {
+        const record = value;
+        const values = [];
+        for (const key of MEDIA_LOCATOR_KEYS) {
+            const locator = record[key];
+            if (isNonBlankString(locator)) {
+                values.push(locator.trim());
+            }
+        }
+        const safeUri = values.find((candidate) => (candidate.includes("://") || candidate.startsWith("/api/")) &&
+            filesystemPathForUri(candidate) === null);
+        if (safeUri)
+            return safeUri;
+        if (isNonBlankString(record.asset_id)) {
+            return record.asset_id.trim();
+        }
+        if (values[0])
+            return values[0];
+    }
+    throw new Error("pass what a generation returned (its asset_uri), an asset id, " +
+        "a /api/storage/ key, or a data:/http(s) URL");
+}
+/**
+ * A string that names media, not an option like `"png"` or `"cover"`.
+ *
+ * A `data:` URI carries no `//`, and is what {@link storeOrInline} returns
+ * when the run has no storage, so it needs a branch of its own. The prefix is
+ * matched case-sensitively because every resolver downstream is, so a `DATA:`
+ * accepted here would be a locator none of them can dereference.
+ */
+export function isMediaLocatorString(value) {
+    const locator = value.trim();
+    return (locator.includes("://") ||
+        locator.startsWith("/api/") ||
+        (locator.startsWith("data:") && locator.length > "data:".length));
+}
+/** Whether `image.*` should treat the value as a media ref, not as nested data. */
+export function looksLikeMediaRef(value) {
+    if (isString(value)) {
+        return isMediaLocatorString(value);
+    }
+    if (!isRecord(value)) {
+        return false;
+    }
+    const record = value;
+    return (isString(record.uri) ||
+        isString(record.asset_id) ||
+        isString(record.asset_uri) ||
+        record.data !== undefined);
+}
+/**
+ * Flatten a generation result (or a bare locator) to the ref `loadMediaRefBytes`
+ * understands. Prefers `asset_uri` so a host `file://` on the same object is
+ * never the path that is read.
+ */
+export function remapMediaRef(value) {
+    if (isString(value)) {
+        const locator = value.trim();
+        return locator.includes("://") || locator.startsWith("/api/")
+            ? { uri: locator }
+            : { uri: locator, asset_id: locator };
+    }
+    const record = isRecord(value) ? value : {};
+    let locator;
+    try {
+        locator = mediaLocatorFrom(value);
+    }
+    catch {
+        locator = undefined;
+    }
+    return {
+        type: isString(record.type) ? record.type : undefined,
+        uri: locator,
+        asset_id: isString(record.asset_id) ? record.asset_id : undefined,
+        data: record.data
+    };
+}
+/** The ref argument, checked. A guest can pass anything, including `undefined`. */
+function requireRef(where, ref) {
+    if (isString(ref) && ref.length > 0) {
+        return { uri: ref };
+    }
+    if (!isRecord(ref)) {
+        throw new Error(`${where}: expected a media locator string or ref object ({type, uri, asset_id, data})`);
+    }
+    return ref;
+}
+/** How the ref reads in an error message, so the failure names what failed. */
+function describeRef(ref) {
+    if (isNonEmptyString(ref.uri)) {
+        return ref.uri.length > 200 ? `${ref.uri.slice(0, 200)}…` : ref.uri;
+    }
+    if (isNonEmptyString(ref.asset_id)) {
+        return `asset ${ref.asset_id}`;
+    }
+    return `a ${ref.type ?? "media"} ref with no uri, asset_id, or data`;
+}
+/** URI prefixes that name something other than a file on this host. */
+const NON_FILESYSTEM_PREFIXES = ["data:", "asset://", "package://", "/api/"];
+/**
+ * The filesystem path a ref's `uri` names, or `null` when it names something
+ * else (a data URI, an asset, a storage key, an http URL).
+ *
+ * Every form that reaches disk goes through here — `file://`, an absolute
+ * path, a `~`-prefixed path, and a bare relative path — so the caller has one
+ * place to apply containment. `loadMediaRefBytes` reads the first two itself
+ * with no check at all, which is why a filesystem-shaped uri never reaches it.
+ */
+export function filesystemPathForUri(uri) {
+    if (!isNonEmptyString(uri))
+        return null;
+    const lower = uri.toLowerCase();
+    if (NON_FILESYSTEM_PREFIXES.some((prefix) => lower.startsWith(prefix))) {
+        return null;
+    }
+    if (lower.startsWith("file://")) {
+        // Strip the scheme rather than calling fileURLToPath: this feeds a
+        // resolver, not an fs call, and a malformed URL should be refused by
+        // containment rather than throw a different error here.
+        const path = uri.slice("file://".length);
+        return path === "" ? null : decodeURIComponent(path);
+    }
+    // Any other scheme (http, https, memory, s3, …) is not a path.
+    if (/^[a-z][a-z0-9+.-]*:\/\//i.test(uri))
+        return null;
+    return uri;
+}
+/**
+ * Read a path the run is allowed to read.
+ *
+ * `resolvePath` is the sandbox's own `resolveGuestPath`, so this honors the
+ * run's `filesystemAccess` scope: workspace mode resolves under the workspace
+ * root and refuses an escape, host mode expands `~` and reads anywhere. A run
+ * built without a resolver reads no files at all — failing closed matters more
+ * than serving a caller that never passed one.
+ */
+async function readContainedPath(where, path, resolvePath) {
+    if (!resolvePath) {
+        throw new Error(`${where}: reading a filesystem path is not available in this run`);
+    }
+    const fullPath = await resolvePath(path);
+    const fs = await importNodeBuiltin("node:fs/promises");
+    if (!fs)
+        return null;
+    try {
+        return new Uint8Array(await fs.readFile(fullPath));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Read the bytes a media ref names, with this run's containment applied.
+ *
+ * Exported because media transforms accept refs anywhere they accept bytes.
+ * The guest passes a generator's `asset://…` result straight into the next
+ * operation, and the bytes stay on the host. `maxBytes` remains 16 MB for
+ * `media.*`, whose bytes enter the guest, while handle-based transforms use
+ * the larger per-run media budget.
+ */
+export async function resolveRefBytes(where, ref, context, resolvePath, maxBytes = MAX_MEDIA_REF_BYTES) {
+    // A filesystem-shaped uri is withheld from `loadMediaRefBytes`, whose own
+    // absolute and `file://` branches read any path this process can reach. The
+    // ref's inline data, asset id and storage key still resolve there; only the
+    // path is ours to contain.
+    const path = filesystemPathForUri(ref.uri);
+    const safeRef = path === null ? ref : { ...ref, uri: undefined };
+    const resolved = (await loadMediaRefBytes(safeRef, context)) ??
+        (path === null ? null : await readContainedPath(where, path, resolvePath));
+    if (!resolved) {
+        throw new Error(`${where}: could not read ${describeRef(ref)}`);
+    }
+    if (resolved.length > maxBytes) {
+        throw new Error(`${where}: ${describeRef(ref)} is ${resolved.length} bytes, over the ${maxBytes} byte limit`);
+    }
+    return resolved;
+}
+/** The ref's mime type, from the ref itself, its data URI header, or its path. */
+export function mimeForRef(ref, fallback) {
+    const declared = ref.mimeType;
+    if (isNonEmptyString(declared))
+        return declared;
+    const uri = isString(ref.uri) ? ref.uri : "";
+    if (uri.startsWith("data:")) {
+        return mimeFromDataUri(uri) ?? fallback;
+    }
+    return mimeForPath(uri) ?? fallback;
+}
+/** The bytes argument of an output builder, checked against the ceiling. */
+function requireOutputBytes(where, value) {
+    if (!(value instanceof Uint8Array)) {
+        throw new Error(`${where}: bytes must be a Uint8Array (e.g. from media.bytes or workspace.readBytes)`);
+    }
+    if (value.length === 0) {
+        throw new Error(`${where}: bytes is empty`);
+    }
+    if (value.length > MAX_MEDIA_REF_BYTES) {
+        throw new Error(`${where}: ${value.length} bytes is over the ${MAX_MEDIA_REF_BYTES} byte limit`);
+    }
+    return value;
+}
+function encodeBase64(bytes) {
+    if (typeof Buffer !== "undefined") {
+        return Buffer.from(bytes).toString("base64");
+    }
+    const chunks = [];
+    const CHUNK = 0x8000;
+    for (let i = 0; i < bytes.length; i += CHUNK) {
+        chunks.push(String.fromCharCode(...bytes.subarray(i, i + CHUNK)));
+    }
+    return btoa(chunks.join(""));
+}
+/**
+ * Turn bytes into a portable locator.
+ *
+ * `createAsset` wins: the ref is `asset://<id>` plus `asset_id`, which any
+ * host can resolve. Otherwise the bytes go to storage under a sandbox key
+ * and the locator is `/api/storage/<key>` — never the `file://` path
+ * `store()` returns on the local adapter. Without storage a small payload
+ * becomes a `data:` URI and a large one is refused.
+ */
+async function storeOrInline(where, bytes, mimeType, filename, context) {
+    if (context.hasModelInterface?.("createAsset")) {
+        const ext = extForMime(mimeType);
+        const name = filename ?? `sandbox-${crypto.randomUUID()}.${ext}`;
+        const created = (await context.createAsset({
+            name,
+            contentType: mimeType,
+            content: bytes
+        }));
+        if (isNonEmptyString(created?.id)) {
+            return { uri: `asset://${created.id}`, asset_id: created.id };
+        }
+    }
+    if (context.storage) {
+        const key = `sandbox/${crypto.randomUUID()}.${extForMime(mimeType)}`;
+        await context.storage.store(key, bytes, mimeType);
+        return { uri: `/api/storage/${key}`, asset_id: null };
+    }
+    if (bytes.length > MAX_DATA_URI_BYTES) {
+        throw new Error(`${where}: ${bytes.length} bytes needs storage, which this run has none of; a data URI is capped at ${MAX_DATA_URI_BYTES} bytes`);
+    }
+    return {
+        uri: `data:${mimeType};base64,${encodeBase64(bytes)}`,
+        asset_id: null
+    };
+}
+async function buildRef(kind, where, rawBytes, rawOptions, context) {
+    const bytes = requireOutputBytes(where, rawBytes);
+    const options = asRecord(rawOptions);
+    const filename = optionalString(options, "filename", where);
+    const mimeType = optionalString(options, "mimeType", where) ??
+        (filename ? mimeForPath(filename) : undefined) ??
+        DEFAULT_MIME[kind];
+    const { uri, asset_id } = await storeOrInline(where, bytes, mimeType, filename, context);
+    const ref = { type: kind, uri, asset_id };
+    if (kind !== "document") {
+        ref.mimeType = mimeType;
+    }
+    if (filename) {
+        ref.metadata = { filename };
+    }
+    return ref;
+}
+function withoutContext(member) {
+    throw new Error(`media.${member} is not available without a context`);
+}
+/**
+ * Build the guest's `media` namespace. Every member is async, and every one
+ * fails with a named error when the run has no `ProcessingContext` — the same
+ * contract `workspace.*` follows, so nothing half-works.
+ */
+export function createMediaRefBridge(context, options = {}) {
+    if (!context) {
+        return {
+            bytes: async () => withoutContext("bytes"),
+            text: async () => withoutContext("text"),
+            info: async () => withoutContext("info"),
+            toDocument: async () => withoutContext("toDocument"),
+            toImage: async () => withoutContext("toImage"),
+            toAudio: async () => withoutContext("toAudio"),
+            toVideo: async () => withoutContext("toVideo")
+        };
+    }
+    return {
+        bytes: async (ref) => {
+            const where = "media.bytes";
+            return toGuestBytes(await resolveRefBytes(where, requireRef(where, ref), context, options.resolvePath));
+        },
+        text: async (ref, opts) => {
+            const where = "media.text";
+            const bytes = await resolveRefBytes(where, requireRef(where, ref), context, options.resolvePath);
+            const encoding = optionalString(asRecord(opts), "encoding", where) ?? "utf-8";
+            try {
+                return new TextDecoder(encoding).decode(bytes);
+            }
+            catch {
+                throw new Error(`${where}: unsupported encoding "${encoding}"`);
+            }
+        },
+        info: async (ref) => {
+            const where = "media.info";
+            const value = requireRef(where, ref);
+            const bytes = await resolveRefBytes(where, value, context, options.resolvePath);
+            const kind = isString(value.type) ? value.type : "document";
+            const fallback = DEFAULT_MIME[kind] ?? DEFAULT_MIME.document;
+            return {
+                type: kind,
+                mimeType: mimeForRef(value, fallback),
+                uri: isString(value.uri) ? value.uri : "",
+                size: bytes.length
+            };
+        },
+        toDocument: (bytes, options) => buildRef("document", "media.toDocument", bytes, options, context),
+        toImage: (bytes, options) => buildRef("image", "media.toImage", bytes, options, context),
+        toAudio: (bytes, options) => buildRef("audio", "media.toAudio", bytes, options, context),
+        toVideo: (bytes, options) => buildRef("video", "media.toVideo", bytes, options, context)
+    };
+}
+//# sourceMappingURL=sandbox-media-ref.js.map

package/dist/sandbox-media-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-media-ref.js","sourceRoot":"","sources":["../src/sandbox-media-ref.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAsB,MAAM,sBAAsB,CAAC;AAG7E,OAAO,EAAE,YAAY,EAAmB,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,QAAQ,EACR,QAAQ,EACT,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEpD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AA2BlD,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,QAAQ,EAAE,0BAA0B;IACpC,KAAK,EAAE,WAAW;IAClB,KAAK,EAAE,YAAY;IACnB,KAAK,EAAE,WAAW;CACoB,CAAC;AAEzC,MAAM,WAAW,GAA2B;IAC1C,kBAAkB,EAAE,MAAM;IAC1B,0BAA0B,EAAE,KAAK;IACjC,iBAAiB,EAAE,KAAK;IACxB,iBAAiB,EAAE,KAAK;IACxB,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,MAAM;IACpB,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,KAAK;IAClB,WAAW,EAAE,KAAK;IAClB,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE,MAAM;IACpB,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,KAAK;IAClB,eAAe,EAAE,KAAK;IACtB,YAAY,EAAE,MAAM;IACpB,UAAU,EAAE,KAAK;IACjB,WAAW,EAAE,MAAM;IACnB,eAAe,EAAE,IAAI;IACrB,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,KAAK;IAClB,iBAAiB,EAAE,KAAK;IACxB,YAAY,EAAE,MAAM;CACrB,CAAC;AAEF,MAAM,WAAW,GAA2B,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAE5E,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE;IACrB,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACnC,OAAO,GAAG,CAAC;AACb,CAAC,EAAE,EAAE,CAAC,CAAC;AAEP,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CACrB,OAAgC,EAChC,GAAW,EACX,KAAa;IAEb,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,GAAG,mBAAmB,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,WAAW;IACX,UAAU;IACV,KAAK;IACL,KAAK;CACG,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CACzB,CAAC,SAAS,EAAE,EAAE,CACZ,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC5D,oBAAoB,CAAC,SAAS,CAAC,KAAK,IAAI,CAC3C,CAAC;QACF,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,IAAI,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,IAAI,KAAK,CACb,gEAAgE;QAC9D,6CAA6C,CAChD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvB,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAC3B,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC;IACrB,OAAO,CACL,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;QACpB,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;QACzB,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;QAC1B,MAAM,CAAC,IAAI,KAAK,SAAS,CAC1B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YAC3D,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE;YAClB,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,MAAM,GAA4B,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACrD,GAAG,EAAE,OAAO;QACZ,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACjE,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,UAAU,CAAC,KAAa,EAAE,GAAY;IAC7C,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,+EAA+E,CACxF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAAC,GAAkB;IACrC,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,CAAC;IACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,OAAO,SAAS,GAAG,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,GAAG,CAAC,IAAI,IAAI,OAAO,qCAAqC,CAAC;AACvE,CAAC;AAED,uEAAuE;AACvE,MAAM,uBAAuB,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AAE7E;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,mEAAmE;QACnE,qEAAqE;QACrE,wDAAwD;QACxD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IACD,+DAA+D;IAC/D,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,iBAAiB,CAC9B,KAAa,EACb,IAAY,EACZ,WAA+C;IAE/C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,0DAA0D,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,EAAE,GACN,MAAM,iBAAiB,CACrB,kBAAkB,CACnB,CAAC;IACJ,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAa,EACb,GAAkB,EAClB,OAA0B,EAC1B,WAA+C,EAC/C,QAAQ,GAAW,mBAAmB;IAEtC,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,2BAA2B;IAC3B,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IACjE,MAAM,QAAQ,GACZ,CAAC,MAAM,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,KAAK,WAAW,CAAC,GAAG,CAAC,OAAO,QAAQ,CAAC,MAAM,oBAAoB,QAAQ,aAAa,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,UAAU,CAAC,GAAkB,EAAE,QAAgB;IAC7D,MAAM,QAAQ,GAAI,GAA8B,CAAC,QAAQ,CAAC;IAC1D,IAAI,gBAAgB,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,eAAe,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC;IAC1C,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC;AACtC,CAAC;AAED,4EAA4E;AAC5E,SAAS,kBAAkB,CAAC,KAAa,EAAE,KAAc;IACvD,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,6EAA6E,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,KAAK,KAAK,CAAC,MAAM,sBAAsB,mBAAmB,aAAa,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB;IACrC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,aAAa,CAC1B,KAAa,EACb,KAAiB,EACjB,QAAgB,EAChB,QAA4B,EAC5B,OAA0B;IAE1B,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,QAAQ,IAAI,WAAW,MAAM,CAAC,UAAU,EAAE,IAAI,GAAG,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC;YACzC,IAAI;YACJ,WAAW,EAAE,QAAQ;YACrB,OAAO,EAAE,KAAK;SACf,CAAC,CAAqB,CAAC;QACxB,IAAI,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,GAAG,EAAE,WAAW,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;QAChE,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,WAAW,MAAM,CAAC,UAAU,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrE,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAClD,OAAO,EAAE,GAAG,EAAE,gBAAgB,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,KAAK,KAAK,CAAC,MAAM,6EAA6E,kBAAkB,QAAQ,CACjI,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,EAAE,QAAQ,QAAQ,WAAW,YAAY,CAAC,KAAK,CAAC,EAAE;QACrD,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,IAAkB,EAClB,KAAa,EACb,QAAiB,EACjB,UAAmB,EACnB,OAA0B;IAE1B,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,QAAQ,GACZ,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC;QAC1C,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,YAAY,CAAC,IAAI,CAAC,CAAC;IACrB,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAC3C,KAAK,EACL,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,OAAO,CACR,CAAC;IACF,MAAM,GAAG,GAA4B,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IACnE,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC1B,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,GAAG,CAAC,QAAQ,GAAG,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,IAAI,KAAK,CAAC,SAAS,MAAM,qCAAqC,CAAC,CAAC;AACxE,CAAC;AAYD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAA2B,EAC3B,OAAO,GAA0B,EAAE;IAEnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC;YAC1C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC;YACxC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC;YACxC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,YAAY,CAAC;YACpD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;YAC9C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;YAC9C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK,EAAE,GAAY,EAAuB,EAAE;YACjD,MAAM,KAAK,GAAG,aAAa,CAAC;YAC5B,OAAO,YAAY,CACjB,MAAM,eAAe,CACnB,KAAK,EACL,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,EACtB,OAAO,EACP,OAAO,CAAC,WAAW,CACpB,CACF,CAAC;QACJ,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,GAAY,EAAE,IAAc,EAAmB,EAAE;YAC5D,MAAM,KAAK,GAAG,YAAY,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,eAAe,CACjC,KAAK,EACL,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,EACtB,OAAO,EACP,OAAO,CAAC,WAAW,CACpB,CAAC;YACF,MAAM,QAAQ,GACZ,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC;YAC/D,IAAI,CAAC;gBACH,OAAO,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,QAAQ,GAAG,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,GAAY,EAAyB,EAAE;YAClD,MAAM,KAAK,GAAG,YAAY,CAAC;YAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,eAAe,CACjC,KAAK,EACL,KAAK,EACL,OAAO,EACP,OAAO,CAAC,WAAW,CACpB,CAAC;YACF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YAC5D,MAAM,QAAQ,GACZ,YAAY,CAAC,IAAoB,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC;YAC9D,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC;gBACrC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;gBACzC,IAAI,EAAE,KAAK,CAAC,MAAM;aACnB,CAAC;QACJ,CAAC;QAED,UAAU,EAAE,CAAC,KAAc,EAAE,OAAiB,EAAE,EAAE,CAChD,QAAQ,CAAC,UAAU,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;QACnE,OAAO,EAAE,CAAC,KAAc,EAAE,OAAiB,EAAE,EAAE,CAC7C,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;QAC7D,OAAO,EAAE,CAAC,KAAc,EAAE,OAAiB,EAAE,EAAE,CAC7C,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;QAC7D,OAAO,EAAE,CAAC,KAAc,EAAE,OAAiB,EAAE,EAAE,CAC7C,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;KAC9D,CAAC;AACJ,CAAC"}