@openinary/core 1.1.0

package/dist/utils/logger.js

@@ -0,0 +1,82 @@
+import pino from "pino";
+/**
+ * Get log level from environment variable
+ * Defaults to 'info' in production, 'debug' in development
+ */
+function getLogLevel() {
+    const envLevel = process.env.LOG_LEVEL?.toLowerCase();
+    const nodeEnv = process.env.NODE_ENV?.toLowerCase() || "development";
+    if (envLevel) {
+        return envLevel;
+    }
+    // Default levels by environment
+    if (nodeEnv === "production") {
+        return "info";
+    }
+    return "debug";
+}
+/**
+ * Serialize any error value into a plain object that survives JSON.stringify.
+ *
+ * Problem: Error.message / Error.stack / Error.name are non-enumerable, so
+ * JSON.stringify(new Error('x')) === '{}'. pino's transport worker thread
+ * uses structuredClone / JSON serialization internally, which drops those
+ * properties even when stdSerializers are configured.
+ *
+ * Solution: always call serializeError() before passing an error to pino so
+ * the resulting object only contains plain enumerable string fields.
+ */
+export function serializeError(error) {
+    if (error === null || error === undefined) {
+        return { message: String(error) };
+    }
+    if (error instanceof Error) {
+        const obj = {
+            type: error.constructor?.name ?? "Error",
+            message: error.message,
+            stack: error.stack,
+        };
+        // Capture any extra enumerable properties (e.g. `code` on fs errors)
+        for (const key of Object.keys(error)) {
+            if (!(key in obj)) {
+                obj[key] = error[key];
+            }
+        }
+        return obj;
+    }
+    if (typeof error === "object") {
+        return { ...error };
+    }
+    return { message: String(error) };
+}
+/**
+ * Create a structured logger instance
+ * - In development: pretty printed logs with colors
+ * - In production: JSON structured logs
+ */
+const logger = pino({
+    level: getLogLevel(),
+    // stdSerializers covers the JSON transport (production).
+    // In development (pino-pretty worker thread) we also call serializeError()
+    // explicitly at every log site to guarantee visibility.
+    serializers: {
+        error: pino.stdSerializers.err,
+        err: pino.stdSerializers.err,
+    },
+    transport: process.env.NODE_ENV === "production"
+        ? undefined // Use default JSON output in production
+        : {
+            target: "pino-pretty",
+            options: {
+                colorize: true,
+                translateTime: "HH:MM:ss Z",
+                ignore: "pid,hostname",
+                singleLine: false,
+            },
+        },
+    base: {
+        env: process.env.NODE_ENV || "development",
+    },
+});
+export default logger;
+//# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB;;;GAGG;AACH,SAAS,WAAW;IAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,aAAa,CAAC;IAErE,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,gCAAgC;IAChC,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,MAAM,GAAG,GAA4B;YACnC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,IAAI,OAAO;YACxC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;QACF,qEAAqE;QACrE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;gBAClB,GAAG,CAAC,GAAG,CAAC,GAAI,KAAa,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,GAAI,KAAgB,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,EAAE,WAAW,EAAE;IACpB,yDAAyD;IACzD,2EAA2E;IAC3E,wDAAwD;IACxD,WAAW,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG;QAC9B,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG;KAC7B;IACD,SAAS,EACP,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QACnC,CAAC,CAAC,SAAS,CAAC,wCAAwC;QACpD,CAAC,CAAC;YACE,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE;gBACP,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,YAAY;gBAC3B,MAAM,EAAE,cAAc;gBACtB,UAAU,EAAE,KAAK;aAClB;SACF;IACP,IAAI,EAAE;QACJ,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa;KAC3C;CACF,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/utils/parser.d.ts

@@ -0,0 +1,8 @@
+export declare const parseParams: (path: string) => Record<string, string>;
+/**
+ * Check if a path segment is a transformation definition (e.g. "w_300,h_300,c_fill").
+ * Every comma-separated part must be a valid key_value pair to avoid false positives
+ * on folder names like "w_photos", "f_family", or "bg_images".
+ */
+export declare const isTransformSegment: (segment: string) => boolean;
+//# sourceMappingURL=parser.d.ts.map

package/dist/utils/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/utils/parser.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,GAAI,MAAM,MAAM,2BAevC,CAAC;AAkCF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,GAAI,SAAS,MAAM,KAAG,OAIpD,CAAC"}

package/dist/utils/parser.js

@@ -0,0 +1,226 @@
+export const parseParams = (path) => {
+    const segments = path.split("/");
+    const params = {};
+    const tIndex = segments.indexOf("t");
+    if (tIndex !== -1 && segments.length > tIndex + 1) {
+        const transformSegment = segments[tIndex + 1];
+        if (isTransformSegment(transformSegment)) {
+            const transformParams = parseTransform(transformSegment);
+            Object.assign(params, transformParams);
+        }
+    }
+    return params;
+};
+/**
+ * Valid values for each transformation key.
+ * Used by isTransformSegment to reject folder names that happen to start with a known key.
+ */
+const TRANSFORM_VALUE_PATTERNS = {
+    w: /^\d+$|^auto$/,
+    h: /^\d+$|^auto$/,
+    c: /^(fill|lfill|fill_pad|fit|limit|mfit|scale|crop|thumb|pad|lpad)$/,
+    g: /^(center|c|north(?:_center)?|n|south(?:_center)?|s|east|e|west|w|faces?(?:_center)?|auto)$/,
+    q: /^\d+$|^auto$/,
+    f: /^(webp|jpe?g|png|avif|gif|psd|mp4|webm|mov|avi|mp3|wav|ogg|pdf|auto)$/,
+    a: /^-?\d+$|^auto$/,
+    ar: /^\d+:\d+$|^\d+(?:\.\d+)?$/,
+    b: /^(transparent|white|black|rgb:[0-9a-fA-F]{3,8}|#?[0-9a-fA-F]{3,8})$/,
+    bg: /^(transparent|white|black|rgb:[0-9a-fA-F]{3,8}|#?[0-9a-fA-F]{3,8})$/,
+    so: /^\d+(?:\.\d+)?$/,
+    eo: /^\d+(?:\.\d+)?$/,
+    t: /^(true|1|\d+)$/,
+    tt: /^\d+(?:\.\d+)?$/,
+    r: /^max$|^\d+(?::\d+){0,3}$/,
+};
+const isValidTransformPair = (part) => {
+    const underscoreIndex = part.indexOf("_");
+    if (underscoreIndex === -1)
+        return false;
+    const key = part.substring(0, underscoreIndex);
+    const value = part.substring(underscoreIndex + 1);
+    if (!value)
+        return false;
+    const pattern = TRANSFORM_VALUE_PATTERNS[key];
+    return pattern !== undefined && pattern.test(value);
+};
+/**
+ * Check if a path segment is a transformation definition (e.g. "w_300,h_300,c_fill").
+ * Every comma-separated part must be a valid key_value pair to avoid false positives
+ * on folder names like "w_photos", "f_family", or "bg_images".
+ */
+export const isTransformSegment = (segment) => {
+    if (!segment || segment.includes("."))
+        return false;
+    const parts = segment.split(",").filter(Boolean);
+    return parts.length > 0 && parts.every(isValidTransformPair);
+};
+/**
+ * Parse a single transformation segment into our
+ * internal parameter map.
+ */
+const parseTransform = (segment) => {
+    const params = {};
+    const parts = segment.split(",");
+    let width;
+    let height;
+    let cropMode;
+    let startOffset;
+    let endOffset;
+    for (const part of parts) {
+        if (!part)
+            continue;
+        const underscoreIndex = part.indexOf("_");
+        if (underscoreIndex === -1)
+            continue;
+        const key = part.substring(0, underscoreIndex);
+        const value = part.substring(underscoreIndex + 1);
+        switch (key) {
+            case "w":
+                width = value;
+                break;
+            case "h":
+                height = value;
+                break;
+            case "c":
+                cropMode = mapCropMode(value);
+                break;
+            case "g":
+                params.gravity = mapGravity(value);
+                break;
+            case "q":
+                // Quality (e.g. q_80, q_auto)
+                params.quality = value;
+                break;
+            case "f":
+                // Map directly, validation happens downstream
+                params.format = value;
+                break;
+            case "a":
+                // Angle of rotation (e.g. a_90, a_auto)
+                params.rotate = value;
+                break;
+            case "ar":
+                // Aspect ratio, usually like "16:9" already
+                params.aspect = value;
+                break;
+            case "b":
+            case "bg":
+                params.background = mapBackground(value);
+                break;
+            case "so":
+                // Start offset (in seconds) for video/audio
+                startOffset = value;
+                break;
+            case "eo":
+                // End offset (in seconds) for video/audio
+                endOffset = value;
+                break;
+            case "t":
+                // FIX H12: Parse thumbnail parameter
+                params.thumbnail = value;
+                break;
+            case "tt":
+                // FIX H12: Parse thumbnail time parameter
+                params.thumbnailTime = value;
+                break;
+            case "r":
+                params.radius = value;
+                break;
+            default:
+                // Ignore unsupported/unknown directives for now
+                break;
+        }
+    }
+    // Set width and/or height independently
+    if (width) {
+        params.width = width;
+    }
+    if (height) {
+        params.height = height;
+    }
+    // If both are present, also set resize for backwards compatibility
+    if (width && height) {
+        params.resize = `${width}x${height}`;
+    }
+    if (cropMode) {
+        params.crop = cropMode;
+    }
+    if (startOffset) {
+        params.startOffset = startOffset;
+    }
+    if (endOffset) {
+        params.endOffset = endOffset;
+    }
+    return params;
+};
+const mapCropMode = (value) => {
+    switch (value) {
+        case "fill":
+        case "lfill":
+        case "fill_pad":
+            return "fill";
+        case "fit":
+        case "limit":
+        case "mfit":
+            return "fit";
+        case "scale":
+            return "scale";
+        case "crop":
+        case "thumb":
+            return "crop";
+        case "pad":
+        case "lpad":
+            return "pad";
+        default:
+            return "fill";
+    }
+};
+const mapGravity = (value) => {
+    switch (value) {
+        case "center":
+        case "c":
+            return "center";
+        case "north":
+        case "north_center":
+        case "n":
+            return "north";
+        case "south":
+        case "south_center":
+        case "s":
+            return "south";
+        case "east":
+        case "e":
+            return "east";
+        case "west":
+        case "w":
+            return "west";
+        case "face":
+        case "faces":
+        case "face_center":
+            return "face";
+        case "auto":
+            return "auto";
+        default:
+            return "center";
+    }
+};
+const mapBackground = (value) => {
+    if (value.startsWith("rgb:")) {
+        const hex = value.substring("rgb:".length);
+        return `#${hex}`;
+    }
+    switch (value) {
+        case "transparent":
+            return "transparent";
+        case "white":
+            return "#ffffff";
+        case "black":
+            return "#000000";
+        default:
+            // Assume it's already a hex-like string
+            if (value.startsWith("#"))
+                return value;
+            return `#${value}`;
+    }
+};
+//# sourceMappingURL=parser.js.map

package/dist/utils/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../src/utils/parser.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAE9C,IAAI,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzC,MAAM,eAAe,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC;YACzD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,wBAAwB,GAAqC;IACjE,CAAC,EAAG,cAAc;IAClB,CAAC,EAAG,cAAc;IAClB,CAAC,EAAG,kEAAkE;IACtE,CAAC,EAAG,4FAA4F;IAChG,CAAC,EAAG,cAAc;IAClB,CAAC,EAAG,uEAAuE;IAC3E,CAAC,EAAG,gBAAgB;IACpB,EAAE,EAAE,2BAA2B;IAC/B,CAAC,EAAG,qEAAqE;IACzE,EAAE,EAAE,qEAAqE;IACzE,EAAE,EAAE,iBAAiB;IACrB,EAAE,EAAE,iBAAiB;IACrB,CAAC,EAAG,gBAAgB;IACpB,EAAE,EAAE,iBAAiB;IACrB,CAAC,EAAG,0BAA0B;CAC/B,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,IAAY,EAAW,EAAE;IACrD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,eAAe,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAW,EAAE;IAC7D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;AAC/D,CAAC,CAAC;AAsBF;;;GAGG;AACH,MAAM,cAAc,GAAG,CACrB,OAAe,EACS,EAAE;IAC1B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEjC,IAAI,KAAyB,CAAC;IAC9B,IAAI,MAA0B,CAAC;IAC/B,IAAI,QAA4B,CAAC;IACjC,IAAI,WAA+B,CAAC;IACpC,IAAI,SAA6B,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,eAAe,KAAK,CAAC,CAAC;YAAE,SAAS;QAErC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,eAAe,CAAiB,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC;QAElD,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,GAAG;gBACN,KAAK,GAAG,KAAK,CAAC;gBACd,MAAM;YACR,KAAK,GAAG;gBACN,MAAM,GAAG,KAAK,CAAC;gBACf,MAAM;YACR,KAAK,GAAG;gBACN,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;gBAC9B,MAAM;YACR,KAAK,GAAG;gBACN,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;gBACnC,MAAM;YACR,KAAK,GAAG;gBACN,8BAA8B;gBAC9B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;gBACvB,MAAM;YACR,KAAK,GAAG;gBACN,8CAA8C;gBAC9C,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;gBACtB,MAAM;YACR,KAAK,GAAG;gBACN,wCAAwC;gBACxC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;gBACtB,MAAM;YACR,KAAK,IAAI;gBACP,4CAA4C;gBAC5C,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;gBACtB,MAAM;YACR,KAAK,GAAG,CAAC;YACT,KAAK,IAAI;gBACP,MAAM,CAAC,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;gBACzC,MAAM;YACR,KAAK,IAAI;gBACP,4CAA4C;gBAC5C,WAAW,GAAG,KAAK,CAAC;gBACpB,MAAM;YACR,KAAK,IAAI;gBACP,0CAA0C;gBAC1C,SAAS,GAAG,KAAK,CAAC;gBAClB,MAAM;YACR,KAAK,GAAG;gBACN,qCAAqC;gBACrC,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC;gBACzB,MAAM;YACR,KAAK,IAAI;gBACP,0CAA0C;gBAC1C,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC;gBAC7B,MAAM;YACR,KAAK,GAAG;gBACN,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;gBACtB,MAAM;YACR;gBACE,gDAAgD;gBAChD,MAAM;QACV,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IACD,mEAAmE;IACnE,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,MAAM,GAAG,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC;IACvC,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;IACzB,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;IACnC,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,KAAa,EAAU,EAAE;IAC5C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC;QACb,KAAK,UAAU;YACb,OAAO,MAAM,CAAC;QAChB,KAAK,KAAK,CAAC;QACX,KAAK,OAAO,CAAC;QACb,KAAK,MAAM;YACT,OAAO,KAAK,CAAC;QACf,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO;YACV,OAAO,MAAM,CAAC;QAChB,KAAK,KAAK,CAAC;QACX,KAAK,MAAM;YACT,OAAO,KAAK,CAAC;QACf;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE;IAC3C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,GAAG;YACN,OAAO,QAAQ,CAAC;QAClB,KAAK,OAAO,CAAC;QACb,KAAK,cAAc,CAAC;QACpB,KAAK,GAAG;YACN,OAAO,OAAO,CAAC;QACjB,KAAK,OAAO,CAAC;QACb,KAAK,cAAc,CAAC;QACpB,KAAK,GAAG;YACN,OAAO,OAAO,CAAC;QACjB,KAAK,MAAM,CAAC;QACZ,KAAK,GAAG;YACN,OAAO,MAAM,CAAC;QAChB,KAAK,MAAM,CAAC;QACZ,KAAK,GAAG;YACN,OAAO,MAAM,CAAC;QAChB,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC;QACb,KAAK,aAAa;YAChB,OAAO,MAAM,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAa,EAAU,EAAE;IAC9C,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,aAAa;YAChB,OAAO,aAAa,CAAC;QACvB,KAAK,OAAO;YACV,OAAO,SAAS,CAAC;QACnB,KAAK,OAAO;YACV,OAAO,SAAS,CAAC;QACnB;YACE,wCAAwC;YACxC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YACxC,OAAO,IAAI,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC,CAAC"}

package/dist/utils/signature.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Signature utility for authenticated delivery URLs
+ * Uses HMAC-SHA256 for cryptographically secure signatures
+ */
+export declare const SIGNATURE_LENGTH = 16;
+/**
+ * Sanitizes a file path to prevent path traversal attacks
+ * @param filePath - The file path to sanitize
+ * @returns Sanitized file path
+ */
+export declare function sanitizeFilePath(filePath: string): string;
+/**
+ * Generates a cryptographically secure signature for authenticated URLs
+ * @param transformations - The transformation string (e.g., "c_fill,w_300,h_250")
+ * @param filePath - The file path
+ * @param secret - The API secret key
+ * @returns The signature (first SIGNATURE_LENGTH characters of HMAC-SHA256)
+ */
+export declare function generateSignature(transformations: string, filePath: string, secret: string): string;
+/**
+ * Verifies a signature using timing-safe comparison
+ * @param providedSignature - The signature provided in the URL
+ * @param transformations - The transformation string
+ * @param filePath - The file path
+ * @param secret - The API secret key
+ * @returns True if the signature is valid, false otherwise
+ */
+export declare function verifySignature(providedSignature: string, transformations: string, filePath: string, secret: string): boolean;
+/**
+ * Validates that the API_SECRET is properly configured
+ * @param secret - The API secret to validate
+ * @throws Error if the secret is not configured or is too weak
+ */
+export declare function validateApiSecret(secret: string | undefined): void;
+//# sourceMappingURL=signature.d.ts.map

package/dist/utils/signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../src/utils/signature.ts"],"names":[],"mappings":"AAIA;;;GAGG;AAEH,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAazD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,MAAM,CAmBR;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,iBAAiB,EAAE,MAAM,EACzB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAiCT;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAiBlE"}

package/dist/utils/signature.js

@@ -0,0 +1,100 @@
+import crypto from 'crypto';
+import path from 'path';
+import logger, { serializeError } from './logger.js';
+/**
+ * Signature utility for authenticated delivery URLs
+ * Uses HMAC-SHA256 for cryptographically secure signatures
+ */
+export const SIGNATURE_LENGTH = 16; // 64 bits of entropy
+/**
+ * Sanitizes a file path to prevent path traversal attacks
+ * @param filePath - The file path to sanitize
+ * @returns Sanitized file path
+ */
+export function sanitizeFilePath(filePath) {
+    // Normalize the path to resolve any '..' or '.' segments
+    const normalized = path.normalize(filePath);
+    // Remove any leading path traversal sequences
+    const sanitized = normalized.replace(/^(\.\.[/\\])+/, '');
+    // Additional check: reject paths that still contain '..'
+    if (sanitized.includes('..')) {
+        throw new Error('Invalid file path: path traversal detected');
+    }
+    return sanitized;
+}
+/**
+ * Generates a cryptographically secure signature for authenticated URLs
+ * @param transformations - The transformation string (e.g., "c_fill,w_300,h_250")
+ * @param filePath - The file path
+ * @param secret - The API secret key
+ * @returns The signature (first SIGNATURE_LENGTH characters of HMAC-SHA256)
+ */
+export function generateSignature(transformations, filePath, secret) {
+    if (!secret) {
+        throw new Error('API_SECRET is required for signature generation');
+    }
+    // Sanitize the file path to prevent path traversal
+    const sanitizedPath = sanitizeFilePath(filePath);
+    // Create the string to sign
+    const stringToSign = transformations
+        ? `${transformations}/${sanitizedPath}`
+        : sanitizedPath;
+    // Generate HMAC-SHA256 signature
+    const hmac = crypto.createHmac('sha256', secret);
+    hmac.update(stringToSign);
+    const signature = hmac.digest('hex').substring(0, SIGNATURE_LENGTH);
+    return signature;
+}
+/**
+ * Verifies a signature using timing-safe comparison
+ * @param providedSignature - The signature provided in the URL
+ * @param transformations - The transformation string
+ * @param filePath - The file path
+ * @param secret - The API secret key
+ * @returns True if the signature is valid, false otherwise
+ */
+export function verifySignature(providedSignature, transformations, filePath, secret) {
+    if (!secret) {
+        logger.error('API_SECRET is not configured for signature verification');
+        return false;
+    }
+    // Validate signature length
+    if (providedSignature.length !== SIGNATURE_LENGTH) {
+        logger.warn({ providedLength: providedSignature.length, expectedLength: SIGNATURE_LENGTH }, 'Invalid signature length');
+        return false;
+    }
+    try {
+        // Generate the expected signature
+        const expectedSignature = generateSignature(transformations, filePath, secret);
+        // Use timing-safe comparison to prevent timing attacks
+        const providedBuffer = Buffer.from(providedSignature, 'utf8');
+        const expectedBuffer = Buffer.from(expectedSignature, 'utf8');
+        // Both buffers must have the same length for timingSafeEqual
+        if (providedBuffer.length !== expectedBuffer.length) {
+            return false;
+        }
+        return crypto.timingSafeEqual(providedBuffer, expectedBuffer);
+    }
+    catch (error) {
+        logger.error({ error: serializeError(error) }, 'Error during signature verification');
+        return false;
+    }
+}
+/**
+ * Validates that the API_SECRET is properly configured
+ * @param secret - The API secret to validate
+ * @throws Error if the secret is not configured or is too weak
+ */
+export function validateApiSecret(secret) {
+    if (!secret) {
+        throw new Error('API_SECRET environment variable is required for authenticated delivery URLs. ' +
+            'Please set a strong secret key in your environment configuration.');
+    }
+    // Ensure the secret is reasonably strong (at least 16 characters)
+    if (secret.length < 16) {
+        throw new Error('API_SECRET must be at least 16 characters long for adequate security. ' +
+            `Current length: ${secret.length}`);
+    }
+    logger.info('API_SECRET validation passed');
+}
+//# sourceMappingURL=signature.js.map

package/dist/utils/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../src/utils/signature.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAElD;;;GAGG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC,CAAC,qBAAqB;AAEzD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,yDAAyD;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE5C,8CAA8C;IAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAE1D,yDAAyD;IACzD,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,eAAuB,EACvB,QAAgB,EAChB,MAAc;IAEd,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,mDAAmD;IACnD,MAAM,aAAa,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAEjD,4BAA4B;IAC5B,MAAM,YAAY,GAAG,eAAe;QAClC,CAAC,CAAC,GAAG,eAAe,IAAI,aAAa,EAAE;QACvC,CAAC,CAAC,aAAa,CAAC;IAElB,iCAAiC;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAEpE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,iBAAyB,EACzB,eAAuB,EACvB,QAAgB,EAChB,MAAc;IAEd,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,4BAA4B;IAC5B,IAAI,iBAAiB,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,CACT,EAAE,cAAc,EAAE,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,EAC9E,0BAA0B,CAC3B,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,kCAAkC;QAClC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,eAAe,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE/E,uDAAuD;QACvD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAE9D,6DAA6D;QAC7D,IAAI,cAAc,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,qCAAqC,CAAC,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA0B;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC/E,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,wEAAwE;YACxE,mBAAmB,MAAM,CAAC,MAAM,EAAE,CACnC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;AAC9C,CAAC"}

package/dist/utils/storage/cache.d.ts

@@ -0,0 +1,41 @@
+import { CacheEntry } from './types';
+export declare class StorageCache {
+    private existsCache;
+    private readonly CACHE_TTL;
+    private readonly NEGATIVE_CACHE_TTL;
+    private readonly MAX_CACHE_SIZE;
+    constructor();
+    /**
+     * Gets a cache entry
+     */
+    get(key: string): CacheEntry | undefined;
+    /**
+     * Sets a cache entry with size management
+     */
+    set(key: string, entry: CacheEntry): void;
+    /**
+     * Deletes a cache entry
+     */
+    delete(key: string): void;
+    /**
+     * Checks if cache hit is valid
+     */
+    isValidHit(key: string): boolean;
+    /**
+     * Gets cache size
+     */
+    get size(): number;
+    /**
+     * Gets all cache keys
+     */
+    getAllKeys(): string[];
+    /**
+     * Clears all cache entries
+     */
+    clear(): void;
+    /**
+     * Automatic cache cleanup (LRU + TTL)
+     */
+    private cleanup;
+}
+//# sourceMappingURL=cache.d.ts.map

package/dist/utils/storage/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/utils/storage/cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,qBAAa,YAAY;IACvB,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAa;IACvC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAa;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;;IAOxC;;OAEG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAkBxC;;OAEG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI;IASzC;;OAEG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIzB;;OAEG;IACH,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAKhC;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,UAAU,IAAI,MAAM,EAAE;IAItB;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,OAAO,CAAC,OAAO;CAuBhB"}

package/dist/utils/storage/cache.js

@@ -0,0 +1,90 @@
+export class StorageCache {
+    existsCache = new Map();
+    CACHE_TTL = 60 * 1000; // 1 minute (reduced from 5 minutes to detect deletions faster)
+    NEGATIVE_CACHE_TTL = 30 * 1000; // 30 seconds for "not found"
+    MAX_CACHE_SIZE = 10000; // Maximum 10k entries
+    constructor() {
+        // Automatic cache cleanup every 10 minutes
+        setInterval(() => this.cleanup(), 10 * 60 * 1000);
+    }
+    /**
+     * Gets a cache entry
+     */
+    get(key) {
+        const cached = this.existsCache.get(key);
+        if (cached) {
+            const age = Date.now() - cached.timestamp;
+            const ttl = cached.exists ? this.CACHE_TTL : this.NEGATIVE_CACHE_TTL;
+            if (age < ttl) {
+                return cached;
+            }
+            // Remove expired entry
+            this.existsCache.delete(key);
+        }
+        return undefined;
+    }
+    /**
+     * Sets a cache entry with size management
+     */
+    set(key, entry) {
+        // Cleanup if cache becomes too large
+        if (this.existsCache.size >= this.MAX_CACHE_SIZE) {
+            this.cleanup();
+        }
+        this.existsCache.set(key, entry);
+    }
+    /**
+     * Deletes a cache entry
+     */
+    delete(key) {
+        this.existsCache.delete(key);
+    }
+    /**
+     * Checks if cache hit is valid
+     */
+    isValidHit(key) {
+        const cached = this.get(key);
+        return cached !== undefined;
+    }
+    /**
+     * Gets cache size
+     */
+    get size() {
+        return this.existsCache.size;
+    }
+    /**
+     * Gets all cache keys
+     */
+    getAllKeys() {
+        return Array.from(this.existsCache.keys());
+    }
+    /**
+     * Clears all cache entries
+     */
+    clear() {
+        this.existsCache.clear();
+    }
+    /**
+     * Automatic cache cleanup (LRU + TTL)
+     */
+    cleanup() {
+        const now = Date.now();
+        for (const [key, value] of this.existsCache.entries()) {
+            const age = now - value.timestamp;
+            const ttl = value.exists ? this.CACHE_TTL : this.NEGATIVE_CACHE_TTL;
+            if (age > ttl) {
+                this.existsCache.delete(key);
+            }
+        }
+        // If still too large, remove the oldest entries
+        if (this.existsCache.size > this.MAX_CACHE_SIZE * 0.8) {
+            const entries = Array.from(this.existsCache.entries())
+                .sort((a, b) => a[1].timestamp - b[1].timestamp);
+            const toRemove = entries.slice(0, Math.floor(entries.length * 0.2));
+            toRemove.forEach(([key]) => {
+                this.existsCache.delete(key);
+            });
+        }
+    }
+}
+//# sourceMappingURL=cache.js.map

package/dist/utils/storage/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../../src/utils/storage/cache.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,YAAY;IACf,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;IACnC,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,+DAA+D;IACtF,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,6BAA6B;IAC7D,cAAc,GAAG,KAAK,CAAC,CAAC,sBAAsB;IAE/D;QACE,2CAA2C;QAC3C,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,GAAW;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEzC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC;YAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;YAErE,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;gBACd,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,uBAAuB;YACvB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,GAAW,EAAE,KAAiB;QAChC,qCAAqC;QACrC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,GAAW;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,MAAM,KAAK,SAAS,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC;YAClC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;YAEpE,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;gBACd,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,cAAc,GAAG,GAAG,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;iBACnD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAEnD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;YACpE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE;gBACzB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}