@rebasepro/server 0.24.0 → 0.24.1-canary.g56af4a4

package/dist/GCSStorageController-DivE9bAx.js

@@ -0,0 +1,402 @@
+import { createRequire as __rebaseCreateRequire } from "module";
+import __rebaseProcess from "process";
+globalThis.process ??= __rebaseProcess;
+__rebaseCreateRequire(import.meta.url);
+import { n as __exportAll } from "./rolldown-runtime-dW7B1o5h.js";
+import { t as ApiError } from "./errors-D6_y86c5.js";
+import { c as listingPrefix, s as folderKey } from "./keys-GAVZqbqx.js";
+import { n as bufferWebStream, o as webStreamFrom, r as bytesView, t as validateUploadedFile } from "./upload-validation-Dd-fnsbA.js";
+//#region src/storage/GCSStorageController.ts
+var GCSStorageController_exports = /* @__PURE__ */ __exportAll({ GCSStorageController: () => GCSStorageController });
+var gcsModule = null;
+async function loadGCS() {
+	if (gcsModule) return gcsModule;
+	try {
+		gcsModule = await import("@google-cloud/storage");
+		return gcsModule;
+	} catch {
+		throw new Error("Google Cloud Storage is required for the GCS storage controller. Install it with: pnpm add @google-cloud/storage");
+	}
+}
+/**
+* Google Cloud Storage implementation of `StorageController`.
+*
+* Works with standard GCS buckets **and** Firebase Storage buckets
+* (e.g. `"my-project.appspot.com"`).
+*/
+var GCSStorageController = class {
+	config;
+	client = null;
+	constructor(config) {
+		this.config = config;
+	}
+	async getClient() {
+		if (this.client) return this.client;
+		const { Storage } = await loadGCS();
+		this.client = new Storage({
+			projectId: this.config.projectId,
+			keyFilename: this.config.keyFilename,
+			credentials: this.config.credentials
+		});
+		return this.client;
+	}
+	getType() {
+		return "gcs";
+	}
+	/**
+	* The configured bucket, and the logical `default` that maps to it.
+	* @see S3StorageController.knownBuckets
+	*/
+	knownBuckets() {
+		return ["default", this.config.bucket];
+	}
+	async putObject({ file, key, metadata, bucket }, options) {
+		if (options?.uploadLimits !== false) this.validateFile(file);
+		const usedBucket = this.getBucket(bucket);
+		await (await this.getClient()).bucket(usedBucket).file(key).save(() => byteChunks(file), {
+			contentType: file.type,
+			metadata: metadata ? { metadata: this.flattenMetadata(metadata) } : void 0
+		}).catch((error) => {
+			throw misconfiguredOr(error, usedBucket);
+		});
+		return {
+			key,
+			bucket: usedBucket,
+			storageUrl: `gs://${usedBucket}/${key}`
+		};
+	}
+	/**
+	* Read the object's metadata and nothing else — no signing.
+	*
+	* Signing needs a private key. With `keyFilename` or `credentials` the
+	* client has one; on Cloud Run, GKE or GCE it has only the metadata
+	* server's token, and falls back to the IAM Credentials `signBlob` API,
+	* which the runtime account may call on itself only when it holds
+	* `iam.serviceAccounts.signBlob` there. That is not a default grant.
+	*/
+	async getMetadata(key, bucket) {
+		let resolvedPath = key;
+		let resolvedBucket = this.getBucket(bucket);
+		const match = key.match(/^(gs|s3):\/\//);
+		if (match) {
+			const protocolLength = match[0].length;
+			const withoutProtocol = key.substring(protocolLength);
+			const firstSlash = withoutProtocol.indexOf("/");
+			if (firstSlash > 0) {
+				resolvedBucket = withoutProtocol.substring(0, firstSlash);
+				resolvedPath = withoutProtocol.substring(firstSlash + 1);
+			}
+		}
+		try {
+			const [fileMetadata] = await (await this.getClient()).bucket(resolvedBucket).file(resolvedPath).getMetadata();
+			return {
+				bucket: resolvedBucket,
+				fullPath: resolvedPath,
+				name: resolvedPath.split("/").pop() || resolvedPath,
+				size: Number(fileMetadata.size) || 0,
+				contentType: fileMetadata.contentType || "application/octet-stream",
+				customMetadata: fileMetadata.metadata || {}
+			};
+		} catch (error) {
+			if (isNotFoundError(error)) return null;
+			throw misconfiguredOr(error, resolvedBucket);
+		}
+	}
+	async getSignedUrl(key, bucket) {
+		const metadata = await this.getMetadata(key, bucket);
+		if (!metadata) return {
+			url: null,
+			fileNotFound: true
+		};
+		const [url] = await (await this.getClient()).bucket(metadata.bucket).file(metadata.fullPath).getSignedUrl({
+			action: "read",
+			expires: Date.now() + 3600 * 1e3
+		});
+		return {
+			url,
+			metadata
+		};
+	}
+	/**
+	* The object's bytes, type and version — all three of ONE generation.
+	*
+	* Described first, then read pinned to the generation described, as
+	* {@link getObjectStream} reads. It used to download and then ask for the
+	* metadata: an overwrite between the two calls answered the old bytes
+	* under the new generation's `updated`, and that `lastModified` keys the
+	* routes' `ETag` and transform cache, so the stale bytes — or a rendition
+	* of them — were served as current. A pinned read of a generation replaced
+	* since it was described fails, and the object is described again.
+	*/
+	async getObject(key, bucket) {
+		for (let attempt = 1;; attempt++) {
+			const located = await this.locate(key, bucket);
+			if (!located) return null;
+			let contents;
+			try {
+				contents = await this.readDecompressed(located);
+			} catch (error) {
+				if (isNotFoundError(error) && attempt < 3) continue;
+				if (isNotFoundError(error)) throw new Error(`The object "${located.key}" changed on every read; try again.`);
+				throw misconfiguredOr(error, located.bucket);
+			}
+			const contentType = located.meta.contentType || "application/octet-stream";
+			const updated = typeof located.meta.updated === "string" ? Date.parse(located.meta.updated) : NaN;
+			return new File([bytesView(contents)], located.key.split("/").pop() || located.key, {
+				type: contentType,
+				lastModified: Number.isNaN(updated) ? void 0 : updated
+			});
+		}
+	}
+	/**
+	* The bucket and key a call addresses: a `gs://` or `s3://` URL names its
+	* own bucket, anything else is a key in the given (or configured) bucket.
+	*/
+	resolveLocation(key, bucket) {
+		const match = key.match(/^(gs|s3):\/\//);
+		if (match) {
+			const withoutProtocol = key.substring(match[0].length);
+			const firstSlash = withoutProtocol.indexOf("/");
+			if (firstSlash > 0) return {
+				bucket: withoutProtocol.substring(0, firstSlash),
+				key: withoutProtocol.substring(firstSlash + 1)
+			};
+		}
+		return {
+			bucket: this.getBucket(bucket),
+			key
+		};
+	}
+	/** The object's metadata and where it lives, or `null` when there is no such object. */
+	async locate(key, bucket) {
+		const location = this.resolveLocation(key, bucket);
+		const client = await this.getClient();
+		try {
+			const [meta] = await client.bucket(location.bucket).file(location.key).getMetadata();
+			return {
+				...location,
+				meta
+			};
+		} catch (error) {
+			if (isNotFoundError(error)) return null;
+			throw misconfiguredOr(error, location.bucket);
+		}
+	}
+	/**
+	* The generation just described, so an overwrite between describing an
+	* object and reading it fails the read instead of sending the new bytes
+	* under the old size and version.
+	*/
+	async pinnedFile(located) {
+		const client = await this.getClient();
+		const generation = located.meta.generation;
+		return client.bucket(located.bucket).file(located.key, generation !== void 0 ? { generation } : {});
+	}
+	/**
+	* An object stored gzip-encoded (`gsutil cp -z`) is decompressed on the way
+	* out, so its stored size is not the size served and a range of the one is
+	* not a range of the other. Such an object is read whole, as every object
+	* used to be; nothing this server writes is stored that way.
+	*/
+	async readDecompressed(located) {
+		const [contents] = await (await this.pinnedFile(located)).download();
+		return contents;
+	}
+	/** See {@link StorageController.statObject}. One metadata request; no body is read. */
+	async statObject(key, bucket) {
+		const located = await this.locate(key, bucket);
+		if (!located) return null;
+		const info = storedObjectInfo(located.meta);
+		if (located.meta.contentEncoding === "gzip") return {
+			...info,
+			size: (await this.readDecompressed(located)).byteLength
+		};
+		return info;
+	}
+	/**
+	* See {@link StorageController.getObjectStream}. One metadata request, then
+	* a read of exactly the requested bytes, handed on as they arrive.
+	*
+	* The metadata comes first, not after the download as `getObject` has it:
+	* it is what pins the read to one generation.
+	*/
+	async getObjectStream(key, options) {
+		const located = await this.locate(key, options?.bucket);
+		if (!located) return null;
+		const info = storedObjectInfo(located.meta);
+		const range = options?.range;
+		if (located.meta.contentEncoding === "gzip") {
+			const contents = await this.readDecompressed(located);
+			const inRange = range && range.end < contents.byteLength && range.start <= range.end;
+			return {
+				...info,
+				size: contents.byteLength,
+				stream: bufferWebStream(inRange ? contents.subarray(range.start, range.end + 1) : contents),
+				...inRange ? { range } : {}
+			};
+		}
+		const file = await this.pinnedFile(located);
+		return {
+			...info,
+			stream: webStreamFrom(() => file.createReadStream(range ? {
+				start: range.start,
+				end: range.end
+			} : {})),
+			...range ? { range } : {}
+		};
+	}
+	async deleteObject(key, bucket) {
+		let resolvedPath = key;
+		let resolvedBucket = this.getBucket(bucket);
+		const match = key.match(/^(gs|s3):\/\//);
+		if (match) {
+			const protocolLength = match[0].length;
+			const withoutProtocol = key.substring(protocolLength);
+			const firstSlash = withoutProtocol.indexOf("/");
+			if (firstSlash > 0) {
+				resolvedBucket = withoutProtocol.substring(0, firstSlash);
+				resolvedPath = withoutProtocol.substring(firstSlash + 1);
+			}
+		}
+		const gcsFile = (await this.getClient()).bucket(resolvedBucket).file(resolvedPath);
+		try {
+			await gcsFile.delete();
+		} catch (error) {
+			if (isNotFoundError(error)) return;
+			throw misconfiguredOr(error, resolvedBucket);
+		}
+	}
+	async listObjects(prefix, options) {
+		const resolvedBucket = this.getBucket(options?.bucket);
+		const gcsBucket = (await this.getClient()).bucket(resolvedBucket);
+		const folderPrefix = listingPrefix(prefix);
+		const [listed, , filesApiResponse] = await gcsBucket.getFiles({
+			prefix: folderPrefix,
+			delimiter: "/",
+			maxResults: options?.maxResults ?? 1e3,
+			pageToken: options?.pageToken,
+			autoPaginate: false
+		}).catch((error) => {
+			throw misconfiguredOr(error, resolvedBucket);
+		});
+		return {
+			items: listed.filter((file) => file.name !== folderPrefix).map((file) => ({
+				bucket: resolvedBucket,
+				fullPath: file.name,
+				name: file.name.split("/").pop() || "",
+				...listedFacts(file.metadata),
+				parent: null,
+				root: null,
+				toString: () => `gs://${resolvedBucket}/${file.name}`
+			})),
+			prefixes: (filesApiResponse?.prefixes ?? []).map((p) => {
+				const folder = folderKey(p);
+				return {
+					bucket: resolvedBucket,
+					fullPath: folder,
+					name: folder.split("/").pop() || "",
+					parent: null,
+					root: null,
+					toString: () => `gs://${resolvedBucket}/${folder}`
+				};
+			}),
+			nextPageToken: filesApiResponse?.nextPageToken
+		};
+	}
+	/** See {@link StorageController.maxFileSize}. */
+	maxFileSize() {
+		return this.config.maxFileSize ?? 52428800;
+	}
+	/**
+	* Validate file before upload
+	*/
+	validateFile(file) {
+		validateUploadedFile(file, this.maxFileSize(), this.config.allowedMimeTypes);
+	}
+	/**
+	* Get the bucket name — either from parameter or config.
+	*/
+	getBucket(bucket) {
+		if (!bucket || bucket === "default") return this.config.bucket;
+		return bucket;
+	}
+	/**
+	* Flatten nested metadata to string values (GCS custom metadata requirement)
+	*/
+	flattenMetadata(metadata) {
+		const flattened = {};
+		for (const [key, value] of Object.entries(metadata)) if (typeof value === "string") flattened[key] = value;
+		else if (value !== void 0 && value !== null) flattened[key] = JSON.stringify(value);
+		return flattened;
+	}
+};
+/** A file's bytes, a chunk at a time — what `File.save` pipes from. */
+async function* byteChunks(file) {
+	const reader = file.stream().getReader();
+	try {
+		for (;;) {
+			const { done, value } = await reader.read();
+			if (done) return;
+			yield value;
+		}
+	} finally {
+		reader.releaseLock();
+	}
+}
+/** What a listing entry says about its object, from the metadata the listing carried. */
+function listedFacts(meta) {
+	if (!meta) return {};
+	const size = meta.size === void 0 ? NaN : Number(meta.size);
+	return {
+		...Number.isFinite(size) ? { size } : {},
+		...typeof meta.updated === "string" ? { updated: meta.updated } : {},
+		...typeof meta.contentType === "string" && meta.contentType ? { contentType: meta.contentType } : {}
+	};
+}
+/** What `statObject` reports, from an object's metadata. */
+function storedObjectInfo(meta) {
+	const updated = typeof meta.updated === "string" ? Date.parse(meta.updated) : NaN;
+	return {
+		size: Number(meta.size) || 0,
+		contentType: meta.contentType || "application/octet-stream",
+		lastModified: Number.isNaN(updated) ? Date.now() : updated
+	};
+}
+/**
+* Check whether an error represents a 404 / Not Found from the GCS client.
+*/
+function isNotFoundError(error) {
+	if (typeof error !== "object" || error === null) return false;
+	if (isMissingBucketError(error)) return false;
+	const err = error;
+	if (err["code"] === 404) return true;
+	if (typeof err["message"] === "string" && /not found/i.test(err["message"])) return true;
+	return false;
+}
+/** GCS's answer for a bucket that does not exist: a 404 whose message says so. */
+function isMissingBucketError(error) {
+	return "message" in error && typeof error.message === "string" && /bucket does not exist/i.test(error.message);
+}
+/**
+* A provider error that says this deployment's storage is misconfigured — the
+* bucket does not exist, or the credentials may not use it — as a
+* `502 STORAGE_MISCONFIGURED` naming the bucket; or the error as it was.
+*
+* These used to reach the caller as a bare 500 "Internal Server Error".
+*/
+function misconfiguredOr(error, bucket) {
+	if (typeof error !== "object" || error === null) return error;
+	if (isMissingBucketError(error)) return new ApiError(502, "STORAGE_MISCONFIGURED", `The storage bucket "${bucket}" does not exist. Check the bucket name this source is configured with (GCS_BUCKET, or GCS_BUCKET__<KEY> for a named source).`, {
+		bucket,
+		reason: "NoSuchBucket"
+	});
+	if ("code" in error && (error.code === 401 || error.code === 403)) return new ApiError(502, "STORAGE_MISCONFIGURED", `The storage provider refused this deployment's credentials for bucket "${bucket}". Check the service account and its permissions on the bucket.`, {
+		bucket,
+		reason: "AccessDenied"
+	});
+	return error;
+}
+//#endregion
+export { GCSStorageController_exports as n, GCSStorageController as t };
+
+//# sourceMappingURL=GCSStorageController-DivE9bAx.js.map

package/dist/GCSStorageController-DivE9bAx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GCSStorageController-DivE9bAx.js","names":[],"sources":["../src/storage/GCSStorageController.ts"],"sourcesContent":["/**\n * Google Cloud Storage controller (works with GCS and Firebase Storage)\n *\n * The `@google-cloud/storage` package is loaded lazily so it remains an\n * optional peer dependency — users who don't need GCS never pay for the\n * import cost or need it installed.\n */\n\nimport type { FileMetadata } from \"@google-cloud/storage\";\nimport {\n    StorageController,\n    GCSStorageConfig,\n    DEFAULT_MAX_FILE_SIZE,\n    type StoredObjectInfo,\n    type StoredObjectRange,\n    type PutObjectOptions,\n    type StoredObjectStream\n} from \"./types\";\nimport { folderKey, listingPrefix } from \"./keys\";\nimport { bufferWebStream, bytesView, webStreamFrom } from \"./streams\";\nimport { ApiError } from \"../api/errors\";\nimport { validateUploadedFile } from \"./upload-validation\";\nimport {\n    UploadFileProps,\n    UploadFileResult,\n    DownloadConfig,\n    DownloadMetadata,\n    StorageListResult,\n    StorageReference\n} from \"@rebasepro/types\";\n\n// ---------------------------------------------------------------------------\n// Lazy import of @google-cloud/storage\n// ---------------------------------------------------------------------------\n\nlet gcsModule: typeof import(\"@google-cloud/storage\") | null = null;\n\nasync function loadGCS(): Promise<typeof import(\"@google-cloud/storage\")> {\n    if (gcsModule) return gcsModule;\n    try {\n        gcsModule = await import(\"@google-cloud/storage\");\n        return gcsModule;\n    } catch {\n        throw new Error(\n            \"Google Cloud Storage is required for the GCS storage controller. \" +\n            \"Install it with: pnpm add @google-cloud/storage\"\n        );\n    }\n}\n\n// ---------------------------------------------------------------------------\n// GCSStorageController\n// ---------------------------------------------------------------------------\n\n/**\n * Google Cloud Storage implementation of `StorageController`.\n *\n * Works with standard GCS buckets **and** Firebase Storage buckets\n * (e.g. `\"my-project.appspot.com\"`).\n */\nexport class GCSStorageController implements StorageController {\n    private config: GCSStorageConfig;\n    private client: InstanceType<typeof import(\"@google-cloud/storage\").Storage> | null = null;\n\n    constructor(config: GCSStorageConfig) {\n        this.config = config;\n    }\n\n    // ------------------------------------------------------------------\n    // Lazy client initialisation\n    // ------------------------------------------------------------------\n\n    private async getClient(): Promise<InstanceType<typeof import(\"@google-cloud/storage\").Storage>> {\n        if (this.client) return this.client;\n        const { Storage } = await loadGCS();\n        this.client = new Storage({\n            projectId: this.config.projectId,\n            keyFilename: this.config.keyFilename,\n            credentials: this.config.credentials\n        });\n        return this.client;\n    }\n\n    // ------------------------------------------------------------------\n    // StorageController interface\n    // ------------------------------------------------------------------\n\n    getType(): \"gcs\" {\n        return \"gcs\";\n    }\n\n    /**\n     * The configured bucket, and the logical `default` that maps to it.\n     * @see S3StorageController.knownBuckets\n     */\n    knownBuckets(): string[] {\n        return [\"default\", this.config.bucket];\n    }\n\n    async putObject({\n        file,\n        key,\n        metadata,\n        bucket\n    }: UploadFileProps, options?: PutObjectOptions): Promise<UploadFileResult> {\n        if (options?.uploadLimits !== false) this.validateFile(file);\n\n        const usedBucket = this.getBucket(bucket);\n        const client = await this.getClient();\n        const gcsFile = client.bucket(usedBucket).file(key);\n\n        // Streamed from the file a chunk at a time. Read into one buffer first,\n        // it was held whole (twice, with the copy) for the length of the\n        // upload. Handed over as a function so the client can open it again to\n        // retry, which it does not do for a stream it was given once.\n        await gcsFile.save(() => byteChunks(file), {\n            contentType: file.type,\n            metadata: metadata ? { metadata: this.flattenMetadata(metadata) } : undefined\n        }).catch((error: unknown) => { throw misconfiguredOr(error, usedBucket); });\n\n        return {\n            key,\n            bucket: usedBucket,\n            storageUrl: `gs://${usedBucket}/${key}`\n        };\n    }\n\n    /**\n     * Read the object's metadata and nothing else — no signing.\n     *\n     * Signing needs a private key. With `keyFilename` or `credentials` the\n     * client has one; on Cloud Run, GKE or GCE it has only the metadata\n     * server's token, and falls back to the IAM Credentials `signBlob` API,\n     * which the runtime account may call on itself only when it holds\n     * `iam.serviceAccounts.signBlob` there. That is not a default grant.\n     */\n    async getMetadata(key: string, bucket?: string): Promise<DownloadMetadata | null> {\n        // Handle gs:// and s3:// URLs\n        let resolvedPath = key;\n        let resolvedBucket = this.getBucket(bucket);\n\n        const match = key.match(/^(gs|s3):\\/\\//);\n        if (match) {\n            const protocolLength = match[0].length;\n            const withoutProtocol = key.substring(protocolLength);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                resolvedBucket = withoutProtocol.substring(0, firstSlash);\n                resolvedPath = withoutProtocol.substring(firstSlash + 1);\n            }\n        }\n\n        try {\n            const client = await this.getClient();\n            const [fileMetadata] = await client.bucket(resolvedBucket).file(resolvedPath).getMetadata();\n\n            return {\n                bucket: resolvedBucket,\n                fullPath: resolvedPath,\n                name: resolvedPath.split(\"/\").pop() || resolvedPath,\n                size: Number(fileMetadata.size) || 0,\n                contentType: fileMetadata.contentType || \"application/octet-stream\",\n                customMetadata: (fileMetadata.metadata as Record<string, string> | undefined) || {}\n            };\n        } catch (error: unknown) {\n            if (isNotFoundError(error)) {\n                return null;\n            }\n            throw misconfiguredOr(error, resolvedBucket);\n        }\n    }\n\n    async getSignedUrl(key: string, bucket?: string): Promise<DownloadConfig> {\n        // Metadata first, to check existence and populate the response.\n        const metadata = await this.getMetadata(key, bucket);\n        if (!metadata) {\n            return {\n                url: null,\n                fileNotFound: true\n            };\n        }\n\n        const client = await this.getClient();\n        // Good for an hour. Server-side callers only: no route hands it out.\n        const [url] = await client.bucket(metadata.bucket).file(metadata.fullPath).getSignedUrl({\n            action: \"read\",\n            expires: Date.now() + 3600 * 1000\n        });\n\n        return {\n            url,\n            metadata\n        };\n    }\n\n    /**\n     * The object's bytes, type and version — all three of ONE generation.\n     *\n     * Described first, then read pinned to the generation described, as\n     * {@link getObjectStream} reads. It used to download and then ask for the\n     * metadata: an overwrite between the two calls answered the old bytes\n     * under the new generation's `updated`, and that `lastModified` keys the\n     * routes' `ETag` and transform cache, so the stale bytes — or a rendition\n     * of them — were served as current. A pinned read of a generation replaced\n     * since it was described fails, and the object is described again.\n     */\n    async getObject(key: string, bucket?: string): Promise<File | null> {\n        for (let attempt = 1; ; attempt++) {\n            const located = await this.locate(key, bucket);\n            if (!located) return null;\n\n            let contents: Buffer;\n            try {\n                contents = await this.readDecompressed(located);\n            } catch (error: unknown) {\n                // Replaced or deleted since it was described. Three\n                // overwrites inside one read is a write loop, not a race.\n                if (isNotFoundError(error) && attempt < 3) continue;\n                if (isNotFoundError(error)) {\n                    throw new Error(`The object \"${located.key}\" changed on every read; try again.`);\n                }\n                throw misconfiguredOr(error, located.bucket);\n            }\n\n            const contentType = located.meta.contentType || \"application/octet-stream\";\n            // The object's own version — see `S3StorageController.getObject`.\n            const updated = typeof located.meta.updated === \"string\" ? Date.parse(located.meta.updated) : NaN;\n            return new File([bytesView(contents)], located.key.split(\"/\").pop() || located.key, {\n                type: contentType,\n                lastModified: Number.isNaN(updated) ? undefined : updated\n            });\n        }\n    }\n\n    /**\n     * The bucket and key a call addresses: a `gs://` or `s3://` URL names its\n     * own bucket, anything else is a key in the given (or configured) bucket.\n     */\n    private resolveLocation(key: string, bucket?: string): { bucket: string; key: string } {\n        const match = key.match(/^(gs|s3):\\/\\//);\n        if (match) {\n            const withoutProtocol = key.substring(match[0].length);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                return { bucket: withoutProtocol.substring(0, firstSlash), key: withoutProtocol.substring(firstSlash + 1) };\n            }\n        }\n        return { bucket: this.getBucket(bucket), key };\n    }\n\n    /** The object's metadata and where it lives, or `null` when there is no such object. */\n    private async locate(key: string, bucket?: string): Promise<{ bucket: string; key: string; meta: FileMetadata } | null> {\n        const location = this.resolveLocation(key, bucket);\n        const client = await this.getClient();\n        try {\n            const [meta] = await client.bucket(location.bucket).file(location.key).getMetadata();\n            return { ...location, meta };\n        } catch (error: unknown) {\n            if (isNotFoundError(error)) return null;\n            throw misconfiguredOr(error, location.bucket);\n        }\n    }\n\n    /**\n     * The generation just described, so an overwrite between describing an\n     * object and reading it fails the read instead of sending the new bytes\n     * under the old size and version.\n     */\n    private async pinnedFile(located: { bucket: string; key: string; meta: FileMetadata }) {\n        const client = await this.getClient();\n        const generation = located.meta.generation;\n        return client.bucket(located.bucket).file(located.key, generation !== undefined ? { generation } : {});\n    }\n\n    /**\n     * An object stored gzip-encoded (`gsutil cp -z`) is decompressed on the way\n     * out, so its stored size is not the size served and a range of the one is\n     * not a range of the other. Such an object is read whole, as every object\n     * used to be; nothing this server writes is stored that way.\n     */\n    private async readDecompressed(located: { bucket: string; key: string; meta: FileMetadata }): Promise<Buffer> {\n        const [contents] = await (await this.pinnedFile(located)).download();\n        return contents;\n    }\n\n    /** See {@link StorageController.statObject}. One metadata request; no body is read. */\n    async statObject(key: string, bucket?: string): Promise<StoredObjectInfo | null> {\n        const located = await this.locate(key, bucket);\n        if (!located) return null;\n        const info = storedObjectInfo(located.meta);\n        if (located.meta.contentEncoding === \"gzip\") {\n            return { ...info, size: (await this.readDecompressed(located)).byteLength };\n        }\n        return info;\n    }\n\n    /**\n     * See {@link StorageController.getObjectStream}. One metadata request, then\n     * a read of exactly the requested bytes, handed on as they arrive.\n     *\n     * The metadata comes first, not after the download as `getObject` has it:\n     * it is what pins the read to one generation.\n     */\n    async getObjectStream(\n        key: string,\n        options?: { bucket?: string; range?: StoredObjectRange }\n    ): Promise<StoredObjectStream | null> {\n        const located = await this.locate(key, options?.bucket);\n        if (!located) return null;\n        const info = storedObjectInfo(located.meta);\n        const range = options?.range;\n\n        if (located.meta.contentEncoding === \"gzip\") {\n            const contents = await this.readDecompressed(located);\n            const inRange = range && range.end < contents.byteLength && range.start <= range.end;\n            return {\n                ...info,\n                size: contents.byteLength,\n                stream: bufferWebStream(inRange ? contents.subarray(range.start, range.end + 1) : contents),\n                ...(inRange ? { range } : {})\n            };\n        }\n\n        const file = await this.pinnedFile(located);\n        return {\n            ...info,\n            // Opened on the first read: nothing is requested from the bucket\n            // for a stream the caller ends up not reading.\n            stream: webStreamFrom(() => file.createReadStream(range ? { start: range.start, end: range.end } : {})),\n            ...(range ? { range } : {})\n        };\n    }\n\n    async deleteObject(key: string, bucket?: string): Promise<void> {\n        // Handle gs:// and s3:// URLs\n        let resolvedPath = key;\n        let resolvedBucket = this.getBucket(bucket);\n\n        const match = key.match(/^(gs|s3):\\/\\//);\n        if (match) {\n            const protocolLength = match[0].length;\n            const withoutProtocol = key.substring(protocolLength);\n            const firstSlash = withoutProtocol.indexOf(\"/\");\n            if (firstSlash > 0) {\n                resolvedBucket = withoutProtocol.substring(0, firstSlash);\n                resolvedPath = withoutProtocol.substring(firstSlash + 1);\n            }\n        }\n\n        const client = await this.getClient();\n        const gcsFile = client.bucket(resolvedBucket).file(resolvedPath);\n\n        // Not `ignoreNotFound`: the client ignores every 404 with it, a missing\n        // bucket's included, so a typo in the bucket name deleted \"successfully\".\n        try {\n            await gcsFile.delete();\n        } catch (error: unknown) {\n            if (isNotFoundError(error)) return;\n            throw misconfiguredOr(error, resolvedBucket);\n        }\n    }\n\n    async listObjects(prefix: string, options?: {\n        bucket?: string;\n        maxResults?: number;\n        pageToken?: string;\n    }): Promise<StorageListResult> {\n        const resolvedBucket = this.getBucket(options?.bucket);\n        const client = await this.getClient();\n        const gcsBucket = client.bucket(resolvedBucket);\n\n        // Fetch files (objects) matching the prefix\n        const folderPrefix = listingPrefix(prefix);\n        const [listed, , filesApiResponse] = await gcsBucket.getFiles({\n            prefix: folderPrefix,\n            delimiter: \"/\",\n            maxResults: options?.maxResults ?? 1000,\n            pageToken: options?.pageToken,\n            autoPaginate: false\n        }).catch((error: unknown) => { throw misconfiguredOr(error, resolvedBucket); });\n\n        // The folder's own marker object is not something in the folder —\n        // see `S3StorageController.listObjects`.\n        const files = listed.filter(file => file.name !== folderPrefix);\n        const items: StorageReference[] = files.map(file => ({\n            bucket: resolvedBucket,\n            fullPath: file.name,\n            name: file.name.split(\"/\").pop() || \"\",\n            // Each listed object arrives with its full metadata, so a folder\n            // can be shown without a metadata request per file.\n            ...listedFacts(file.metadata),\n            parent: null as never,\n            root: null as never,\n            toString: () => `gs://${resolvedBucket}/${file.name}`\n        }));\n\n        // Common prefixes (folder-like entries) come from the API response\n        const apiPrefixes: string[] =\n            (filesApiResponse as Record<string, unknown> | undefined)?.prefixes as string[] ?? [];\n\n        const prefixes: StorageReference[] = apiPrefixes.map(p => {\n            // Without the trailing slash GCS puts on a common prefix, so a\n            // `fullPath` from a listing is a key any controller accepts.\n            const folder = folderKey(p);\n            return {\n                bucket: resolvedBucket,\n                fullPath: folder,\n                name: folder.split(\"/\").pop() || \"\",\n                parent: null as never,\n                root: null as never,\n                toString: () => `gs://${resolvedBucket}/${folder}`\n            };\n        });\n\n        // The next page token is returned on the query object (second element)\n        const nextPageToken =\n            (filesApiResponse as Record<string, unknown> | undefined)?.nextPageToken as string | undefined;\n\n        return {\n            items,\n            prefixes,\n            nextPageToken\n        };\n    }\n\n    // ------------------------------------------------------------------\n    // Private helpers\n    // ------------------------------------------------------------------\n\n    /** See {@link StorageController.maxFileSize}. */\n    maxFileSize(): number {\n        return this.config.maxFileSize ?? DEFAULT_MAX_FILE_SIZE;\n    }\n\n    /**\n     * Validate file before upload\n     */\n    private validateFile(file: File): void {\n        validateUploadedFile(file, this.maxFileSize(), this.config.allowedMimeTypes);\n    }\n\n    /**\n     * Get the bucket name — either from parameter or config.\n     */\n    private getBucket(bucket?: string): string {\n        // \"default\" is a logical bucket name used by local storage;\n        // for GCS it should resolve to the configured bucket.\n        if (!bucket || bucket === \"default\") return this.config.bucket;\n        return bucket;\n    }\n\n    /**\n     * Flatten nested metadata to string values (GCS custom metadata requirement)\n     */\n    private flattenMetadata(metadata: Record<string, unknown>): Record<string, string> {\n        const flattened: Record<string, string> = {};\n        for (const [key, value] of Object.entries(metadata)) {\n            if (typeof value === \"string\") {\n                flattened[key] = value;\n            } else if (value !== undefined && value !== null) {\n                flattened[key] = JSON.stringify(value);\n            }\n        }\n        return flattened;\n    }\n}\n\n// ---------------------------------------------------------------------------\n// Error helpers\n// ---------------------------------------------------------------------------\n\n/** A file's bytes, a chunk at a time — what `File.save` pipes from. */\nasync function* byteChunks(file: Blob): AsyncGenerator<Uint8Array> {\n    const reader = file.stream().getReader();\n    try {\n        for (;;) {\n            const { done, value } = await reader.read();\n            if (done) return;\n            yield value;\n        }\n    } finally {\n        reader.releaseLock();\n    }\n}\n\n/** What a listing entry says about its object, from the metadata the listing carried. */\nfunction listedFacts(meta: FileMetadata | undefined): Pick<StorageReference, \"size\" | \"updated\" | \"contentType\"> {\n    if (!meta) return {};\n    const size = meta.size === undefined ? NaN : Number(meta.size);\n    return {\n        ...(Number.isFinite(size) ? { size } : {}),\n        ...(typeof meta.updated === \"string\" ? { updated: meta.updated } : {}),\n        ...(typeof meta.contentType === \"string\" && meta.contentType ? { contentType: meta.contentType } : {})\n    };\n}\n\n/** What `statObject` reports, from an object's metadata. */\nfunction storedObjectInfo(meta: FileMetadata): StoredObjectInfo {\n    // The object's own version — see `S3StorageController.getObject`.\n    const updated = typeof meta.updated === \"string\" ? Date.parse(meta.updated) : NaN;\n    return {\n        size: Number(meta.size) || 0,\n        contentType: meta.contentType || \"application/octet-stream\",\n        lastModified: Number.isNaN(updated) ? Date.now() : updated\n    };\n}\n\n/**\n * Check whether an error represents a 404 / Not Found from the GCS client.\n */\nfunction isNotFoundError(error: unknown): boolean {\n    if (typeof error !== \"object\" || error === null) return false;\n    // A missing bucket is a 404 too. Read as a missing object, a typo in the\n    // bucket name made every file \"not found\" and every delete a success.\n    if (isMissingBucketError(error)) return false;\n    const err = error as Record<string, unknown>;\n    if (err[\"code\"] === 404) return true;\n    if (typeof err[\"message\"] === \"string\" && /not found/i.test(err[\"message\"])) return true;\n    return false;\n}\n\n/** GCS's answer for a bucket that does not exist: a 404 whose message says so. */\nfunction isMissingBucketError(error: object): boolean {\n    return \"message\" in error && typeof error.message === \"string\" && /bucket does not exist/i.test(error.message);\n}\n\n/**\n * A provider error that says this deployment's storage is misconfigured — the\n * bucket does not exist, or the credentials may not use it — as a\n * `502 STORAGE_MISCONFIGURED` naming the bucket; or the error as it was.\n *\n * These used to reach the caller as a bare 500 \"Internal Server Error\".\n */\nfunction misconfiguredOr(error: unknown, bucket: string): unknown {\n    if (typeof error !== \"object\" || error === null) return error;\n    if (isMissingBucketError(error)) {\n        return new ApiError(502, \"STORAGE_MISCONFIGURED\",\n            `The storage bucket \"${bucket}\" does not exist. Check the bucket name this source is configured with (GCS_BUCKET, or GCS_BUCKET__<KEY> for a named source).`,\n            { bucket, reason: \"NoSuchBucket\" });\n    }\n    if (\"code\" in error && (error.code === 401 || error.code === 403)) {\n        return new ApiError(502, \"STORAGE_MISCONFIGURED\",\n            `The storage provider refused this deployment's credentials for bucket \"${bucket}\". Check the service account and its permissions on the bucket.`,\n            { bucket, reason: \"AccessDenied\" });\n    }\n    return error;\n}\n"],"mappings":";;;;;;;;;;AAmCA,IAAI,YAA2D;AAE/D,eAAe,UAA2D;CACtE,IAAI,WAAW,OAAO;CACtB,IAAI;EACA,YAAY,MAAM,OAAO;EACzB,OAAO;CACX,QAAQ;EACJ,MAAM,IAAI,MACN,kHAEJ;CACJ;AACJ;;;;;;;AAYA,IAAa,uBAAb,MAA+D;CAC3D;CACA,SAAsF;CAEtF,YAAY,QAA0B;EAClC,KAAK,SAAS;CAClB;CAMA,MAAc,YAAmF;EAC7F,IAAI,KAAK,QAAQ,OAAO,KAAK;EAC7B,MAAM,EAAE,YAAY,MAAM,QAAQ;EAClC,KAAK,SAAS,IAAI,QAAQ;GACtB,WAAW,KAAK,OAAO;GACvB,aAAa,KAAK,OAAO;GACzB,aAAa,KAAK,OAAO;EAC7B,CAAC;EACD,OAAO,KAAK;CAChB;CAMA,UAAiB;EACb,OAAO;CACX;;;;;CAMA,eAAyB;EACrB,OAAO,CAAC,WAAW,KAAK,OAAO,MAAM;CACzC;CAEA,MAAM,UAAU,EACZ,MACA,KACA,UACA,UACgB,SAAuD;EACvE,IAAI,SAAS,iBAAiB,OAAO,KAAK,aAAa,IAAI;EAE3D,MAAM,aAAa,KAAK,UAAU,MAAM;EAQxC,OANgB,MADK,KAAK,UAAU,EAAA,CACb,OAAO,UAAU,CAAC,CAAC,KAAK,GAMzC,CAAA,CAAQ,WAAW,WAAW,IAAI,GAAG;GACvC,aAAa,KAAK;GAClB,UAAU,WAAW,EAAE,UAAU,KAAK,gBAAgB,QAAQ,EAAE,IAAI,KAAA;EACxE,CAAC,CAAC,CAAC,OAAO,UAAmB;GAAE,MAAM,gBAAgB,OAAO,UAAU;EAAG,CAAC;EAE1E,OAAO;GACH;GACA,QAAQ;GACR,YAAY,QAAQ,WAAW,GAAG;EACtC;CACJ;;;;;;;;;;CAWA,MAAM,YAAY,KAAa,QAAmD;EAE9E,IAAI,eAAe;EACnB,IAAI,iBAAiB,KAAK,UAAU,MAAM;EAE1C,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,iBAAiB,MAAM,EAAE,CAAC;GAChC,MAAM,kBAAkB,IAAI,UAAU,cAAc;GACpD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GAAG;IAChB,iBAAiB,gBAAgB,UAAU,GAAG,UAAU;IACxD,eAAe,gBAAgB,UAAU,aAAa,CAAC;GAC3D;EACJ;EAEA,IAAI;GAEA,MAAM,CAAC,gBAAgB,OAAM,MADR,KAAK,UAAU,EAAA,CACA,OAAO,cAAc,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,YAAY;GAE1F,OAAO;IACH,QAAQ;IACR,UAAU;IACV,MAAM,aAAa,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;IACvC,MAAM,OAAO,aAAa,IAAI,KAAK;IACnC,aAAa,aAAa,eAAe;IACzC,gBAAiB,aAAa,YAAmD,CAAC;GACtF;EACJ,SAAS,OAAgB;GACrB,IAAI,gBAAgB,KAAK,GACrB,OAAO;GAEX,MAAM,gBAAgB,OAAO,cAAc;EAC/C;CACJ;CAEA,MAAM,aAAa,KAAa,QAA0C;EAEtE,MAAM,WAAW,MAAM,KAAK,YAAY,KAAK,MAAM;EACnD,IAAI,CAAC,UACD,OAAO;GACH,KAAK;GACL,cAAc;EAClB;EAKJ,MAAM,CAAC,OAAO,OAAM,MAFC,KAAK,UAAU,EAAA,CAET,OAAO,SAAS,MAAM,CAAC,CAAC,KAAK,SAAS,QAAQ,CAAC,CAAC,aAAa;GACpF,QAAQ;GACR,SAAS,KAAK,IAAI,IAAI,OAAO;EACjC,CAAC;EAED,OAAO;GACH;GACA;EACJ;CACJ;;;;;;;;;;;;CAaA,MAAM,UAAU,KAAa,QAAuC;EAChE,KAAK,IAAI,UAAU,IAAK,WAAW;GAC/B,MAAM,UAAU,MAAM,KAAK,OAAO,KAAK,MAAM;GAC7C,IAAI,CAAC,SAAS,OAAO;GAErB,IAAI;GACJ,IAAI;IACA,WAAW,MAAM,KAAK,iBAAiB,OAAO;GAClD,SAAS,OAAgB;IAGrB,IAAI,gBAAgB,KAAK,KAAK,UAAU,GAAG;IAC3C,IAAI,gBAAgB,KAAK,GACrB,MAAM,IAAI,MAAM,eAAe,QAAQ,IAAI,oCAAoC;IAEnF,MAAM,gBAAgB,OAAO,QAAQ,MAAM;GAC/C;GAEA,MAAM,cAAc,QAAQ,KAAK,eAAe;GAEhD,MAAM,UAAU,OAAO,QAAQ,KAAK,YAAY,WAAW,KAAK,MAAM,QAAQ,KAAK,OAAO,IAAI;GAC9F,OAAO,IAAI,KAAK,CAAC,UAAU,QAAQ,CAAC,GAAG,QAAQ,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,KAAK;IAChF,MAAM;IACN,cAAc,OAAO,MAAM,OAAO,IAAI,KAAA,IAAY;GACtD,CAAC;EACL;CACJ;;;;;CAMA,gBAAwB,KAAa,QAAkD;EACnF,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,kBAAkB,IAAI,UAAU,MAAM,EAAE,CAAC,MAAM;GACrD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GACb,OAAO;IAAE,QAAQ,gBAAgB,UAAU,GAAG,UAAU;IAAG,KAAK,gBAAgB,UAAU,aAAa,CAAC;GAAE;EAElH;EACA,OAAO;GAAE,QAAQ,KAAK,UAAU,MAAM;GAAG;EAAI;CACjD;;CAGA,MAAc,OAAO,KAAa,QAAsF;EACpH,MAAM,WAAW,KAAK,gBAAgB,KAAK,MAAM;EACjD,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,IAAI;GACA,MAAM,CAAC,QAAQ,MAAM,OAAO,OAAO,SAAS,MAAM,CAAC,CAAC,KAAK,SAAS,GAAG,CAAC,CAAC,YAAY;GACnF,OAAO;IAAE,GAAG;IAAU;GAAK;EAC/B,SAAS,OAAgB;GACrB,IAAI,gBAAgB,KAAK,GAAG,OAAO;GACnC,MAAM,gBAAgB,OAAO,SAAS,MAAM;EAChD;CACJ;;;;;;CAOA,MAAc,WAAW,SAA8D;EACnF,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,MAAM,aAAa,QAAQ,KAAK;EAChC,OAAO,OAAO,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,QAAQ,KAAK,eAAe,KAAA,IAAY,EAAE,WAAW,IAAI,CAAC,CAAC;CACzG;;;;;;;CAQA,MAAc,iBAAiB,SAA+E;EAC1G,MAAM,CAAC,YAAY,OAAO,MAAM,KAAK,WAAW,OAAO,EAAA,CAAG,SAAS;EACnE,OAAO;CACX;;CAGA,MAAM,WAAW,KAAa,QAAmD;EAC7E,MAAM,UAAU,MAAM,KAAK,OAAO,KAAK,MAAM;EAC7C,IAAI,CAAC,SAAS,OAAO;EACrB,MAAM,OAAO,iBAAiB,QAAQ,IAAI;EAC1C,IAAI,QAAQ,KAAK,oBAAoB,QACjC,OAAO;GAAE,GAAG;GAAM,OAAO,MAAM,KAAK,iBAAiB,OAAO,EAAA,CAAG;EAAW;EAE9E,OAAO;CACX;;;;;;;;CASA,MAAM,gBACF,KACA,SACkC;EAClC,MAAM,UAAU,MAAM,KAAK,OAAO,KAAK,SAAS,MAAM;EACtD,IAAI,CAAC,SAAS,OAAO;EACrB,MAAM,OAAO,iBAAiB,QAAQ,IAAI;EAC1C,MAAM,QAAQ,SAAS;EAEvB,IAAI,QAAQ,KAAK,oBAAoB,QAAQ;GACzC,MAAM,WAAW,MAAM,KAAK,iBAAiB,OAAO;GACpD,MAAM,UAAU,SAAS,MAAM,MAAM,SAAS,cAAc,MAAM,SAAS,MAAM;GACjF,OAAO;IACH,GAAG;IACH,MAAM,SAAS;IACf,QAAQ,gBAAgB,UAAU,SAAS,SAAS,MAAM,OAAO,MAAM,MAAM,CAAC,IAAI,QAAQ;IAC1F,GAAI,UAAU,EAAE,MAAM,IAAI,CAAC;GAC/B;EACJ;EAEA,MAAM,OAAO,MAAM,KAAK,WAAW,OAAO;EAC1C,OAAO;GACH,GAAG;GAGH,QAAQ,oBAAoB,KAAK,iBAAiB,QAAQ;IAAE,OAAO,MAAM;IAAO,KAAK,MAAM;GAAI,IAAI,CAAC,CAAC,CAAC;GACtG,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;EAC7B;CACJ;CAEA,MAAM,aAAa,KAAa,QAAgC;EAE5D,IAAI,eAAe;EACnB,IAAI,iBAAiB,KAAK,UAAU,MAAM;EAE1C,MAAM,QAAQ,IAAI,MAAM,eAAe;EACvC,IAAI,OAAO;GACP,MAAM,iBAAiB,MAAM,EAAE,CAAC;GAChC,MAAM,kBAAkB,IAAI,UAAU,cAAc;GACpD,MAAM,aAAa,gBAAgB,QAAQ,GAAG;GAC9C,IAAI,aAAa,GAAG;IAChB,iBAAiB,gBAAgB,UAAU,GAAG,UAAU;IACxD,eAAe,gBAAgB,UAAU,aAAa,CAAC;GAC3D;EACJ;EAGA,MAAM,WAAU,MADK,KAAK,UAAU,EAAA,CACb,OAAO,cAAc,CAAC,CAAC,KAAK,YAAY;EAI/D,IAAI;GACA,MAAM,QAAQ,OAAO;EACzB,SAAS,OAAgB;GACrB,IAAI,gBAAgB,KAAK,GAAG;GAC5B,MAAM,gBAAgB,OAAO,cAAc;EAC/C;CACJ;CAEA,MAAM,YAAY,QAAgB,SAIH;EAC3B,MAAM,iBAAiB,KAAK,UAAU,SAAS,MAAM;EAErD,MAAM,aAAY,MADG,KAAK,UAAU,EAAA,CACX,OAAO,cAAc;EAG9C,MAAM,eAAe,cAAc,MAAM;EACzC,MAAM,CAAC,UAAU,oBAAoB,MAAM,UAAU,SAAS;GAC1D,QAAQ;GACR,WAAW;GACX,YAAY,SAAS,cAAc;GACnC,WAAW,SAAS;GACpB,cAAc;EAClB,CAAC,CAAC,CAAC,OAAO,UAAmB;GAAE,MAAM,gBAAgB,OAAO,cAAc;EAAG,CAAC;EAuC9E,OAAO;GACH,OApCU,OAAO,QAAO,SAAQ,KAAK,SAAS,YAChB,CAAA,CAAM,KAAI,UAAS;IACjD,QAAQ;IACR,UAAU,KAAK;IACf,MAAM,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;IAGpC,GAAG,YAAY,KAAK,QAAQ;IAC5B,QAAQ;IACR,MAAM;IACN,gBAAgB,QAAQ,eAAe,GAAG,KAAK;GACnD,EAyBI;GACA,WAtBC,kBAA0D,YAAwB,CAAC,EAAA,CAEvC,KAAI,MAAK;IAGtD,MAAM,SAAS,UAAU,CAAC;IAC1B,OAAO;KACH,QAAQ;KACR,UAAU;KACV,MAAM,OAAO,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;KACjC,QAAQ;KACR,MAAM;KACN,gBAAgB,QAAQ,eAAe,GAAG;IAC9C;GACJ,CAQI;GACA,eALC,kBAA0D;EAM/D;CACJ;;CAOA,cAAsB;EAClB,OAAO,KAAK,OAAO,eAAA;CACvB;;;;CAKA,aAAqB,MAAkB;EACnC,qBAAqB,MAAM,KAAK,YAAY,GAAG,KAAK,OAAO,gBAAgB;CAC/E;;;;CAKA,UAAkB,QAAyB;EAGvC,IAAI,CAAC,UAAU,WAAW,WAAW,OAAO,KAAK,OAAO;EACxD,OAAO;CACX;;;;CAKA,gBAAwB,UAA2D;EAC/E,MAAM,YAAoC,CAAC;EAC3C,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAC9C,IAAI,OAAO,UAAU,UACjB,UAAU,OAAO;OACd,IAAI,UAAU,KAAA,KAAa,UAAU,MACxC,UAAU,OAAO,KAAK,UAAU,KAAK;EAG7C,OAAO;CACX;AACJ;;AAOA,gBAAgB,WAAW,MAAwC;CAC/D,MAAM,SAAS,KAAK,OAAO,CAAC,CAAC,UAAU;CACvC,IAAI;EACA,SAAS;GACL,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,MAAM;EACV;CACJ,UAAU;EACN,OAAO,YAAY;CACvB;AACJ;;AAGA,SAAS,YAAY,MAA4F;CAC7G,IAAI,CAAC,MAAM,OAAO,CAAC;CACnB,MAAM,OAAO,KAAK,SAAS,KAAA,IAAY,MAAM,OAAO,KAAK,IAAI;CAC7D,OAAO;EACH,GAAI,OAAO,SAAS,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC;EACxC,GAAI,OAAO,KAAK,YAAY,WAAW,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;EACpE,GAAI,OAAO,KAAK,gBAAgB,YAAY,KAAK,cAAc,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC;CACxG;AACJ;;AAGA,SAAS,iBAAiB,MAAsC;CAE5D,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,MAAM,KAAK,OAAO,IAAI;CAC9E,OAAO;EACH,MAAM,OAAO,KAAK,IAAI,KAAK;EAC3B,aAAa,KAAK,eAAe;EACjC,cAAc,OAAO,MAAM,OAAO,IAAI,KAAK,IAAI,IAAI;CACvD;AACJ;;;;AAKA,SAAS,gBAAgB,OAAyB;CAC9C,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CAGxD,IAAI,qBAAqB,KAAK,GAAG,OAAO;CACxC,MAAM,MAAM;CACZ,IAAI,IAAI,YAAY,KAAK,OAAO;CAChC,IAAI,OAAO,IAAI,eAAe,YAAY,aAAa,KAAK,IAAI,UAAU,GAAG,OAAO;CACpF,OAAO;AACX;;AAGA,SAAS,qBAAqB,OAAwB;CAClD,OAAO,aAAa,SAAS,OAAO,MAAM,YAAY,YAAY,yBAAyB,KAAK,MAAM,OAAO;AACjH;;;;;;;;AASA,SAAS,gBAAgB,OAAgB,QAAyB;CAC9D,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,IAAI,qBAAqB,KAAK,GAC1B,OAAO,IAAI,SAAS,KAAK,yBACrB,uBAAuB,OAAO,gIAC9B;EAAE;EAAQ,QAAQ;CAAe,CAAC;CAE1C,IAAI,UAAU,UAAU,MAAM,SAAS,OAAO,MAAM,SAAS,MACzD,OAAO,IAAI,SAAS,KAAK,yBACrB,0EAA0E,OAAO,kEACjF;EAAE;EAAQ,QAAQ;CAAe,CAAC;CAE1C,OAAO;AACX"}