@rpcbase/server 0.551.0 → 0.553.0

package/dist/convertHeifToWebp-C-DGXZ2k.js

@@ -0,0 +1,169 @@
+import { queue } from "@rpcbase/worker";
+import sharp from "sharp";
+const MAX_HEIF_BYTES = 25 * 1024 * 1024;
+const MAX_HEIF_INPUT_PIXELS = 64 * 1024 * 1024;
+const WEBP_QUALITY = 82;
+const CONVERSION_TIMEOUT_MS = 6e4;
+const POLL_INTERVAL_MS = 250;
+const HEIF_DECODE_UNSUPPORTED = "heif_decode_unsupported";
+const heifMimeTypes = /* @__PURE__ */ new Set(["image/heic", "image/heif", "image/heic-sequence", "image/heif-sequence"]);
+const heifExtensions = /\.(?:heic|heif|heics|heifs)$/i;
+const hevcBrands = /* @__PURE__ */ new Set(["heic", "heix", "hevc", "hevx", "heim", "heis", "hevm", "hevs"]);
+const convertHeifToWebpTaskName = "rb-upload-convert-heif-to-webp";
+const delay = async (ms) => {
+  await new Promise((resolve) => setTimeout(resolve, ms));
+};
+const normalizeMimeType = (value) => value.trim().toLowerCase();
+const getFtypBrands = (sniff) => {
+  if (sniff.length < 12) return [];
+  const ftypOffset = sniff.indexOf(Buffer.from("ftyp"));
+  if (ftypOffset < 4 || ftypOffset > 32) return [];
+  const brands = [];
+  for (let offset = ftypOffset + 4; offset + 4 <= Math.min(sniff.length, ftypOffset + 80); offset += 4) {
+    const brand = sniff.subarray(offset, offset + 4).toString("ascii");
+    if (/^[a-zA-Z0-9 ]{4}$/.test(brand)) {
+      brands.push(brand.trim());
+    }
+  }
+  return brands.filter(Boolean);
+};
+const hasHeifDeclaration = ({
+  filename,
+  clientMimeType
+}) => heifMimeTypes.has(normalizeMimeType(clientMimeType)) || heifExtensions.test(filename);
+const looksLikeHevcHeif = (sniff) => getFtypBrands(sniff).some((brand) => hevcBrands.has(brand));
+const isHeifUpload = ({
+  filename,
+  clientMimeType,
+  sniff
+}) => hasHeifDeclaration({
+  filename,
+  clientMimeType
+}) || looksLikeHevcHeif(sniff);
+const toWebpFilename = (filename) => {
+  const trimmed = filename.trim();
+  if (!trimmed) return "image.webp";
+  if (heifExtensions.test(trimmed)) return trimmed.replace(heifExtensions, ".webp");
+  return `${trimmed}.webp`;
+};
+const isHeifDecodeUnsupportedError = (error) => {
+  const message = error instanceof Error ? error.message : String(error ?? "unknown");
+  const normalized = message.toLowerCase();
+  return message.startsWith(HEIF_DECODE_UNSUPPORTED) || normalized.includes("support for this compression format has not been built in") || normalized.includes("heif: error while loading plugin") || normalized.includes("unsupported feature: unsupported codec") || normalized.includes("no decoding plugin installed");
+};
+const getSharpHeifSupportDiagnostic = () => {
+  const suffixes = sharp.format.heif.input.fileSuffix ?? [];
+  const advertisedSuffixes = suffixes.length ? suffixes.join(", ") : "none";
+  const sharpVersion = sharp.versions.sharp ?? "unknown";
+  const vipsVersion = sharp.versions.vips ?? "unknown";
+  const heifVersion = sharp.versions.heif ?? "not reported";
+  return `Sharp ${sharpVersion} / libvips ${vipsVersion} / libheif ${heifVersion} advertises HEIF input suffixes: ${advertisedSuffixes}. iPhone HEIC/HEVC requires a libvips build with libheif, libde265 and x265/HEVC support. Install a compatible global libvips and reinstall sharp so it links against it.`;
+};
+const createHeifDecodeUnsupportedError = () => new Error(`${HEIF_DECODE_UNSUPPORTED}: ${getSharpHeifSupportDiagnostic()}`);
+const normalizeConversionError = (error) => {
+  const message = error instanceof Error ? error.message : String(error ?? "unknown");
+  if (message === "heif_too_large") {
+    return new Error(message);
+  }
+  if (message.startsWith(HEIF_DECODE_UNSUPPORTED)) {
+    return new Error(message);
+  }
+  if (isHeifDecodeUnsupportedError(error)) {
+    return createHeifDecodeUnsupportedError();
+  }
+  return new Error("heif_conversion_failed");
+};
+const convertHeifToWebp = async (input, payload) => {
+  try {
+    const output = await sharp(input, {
+      limitInputPixels: MAX_HEIF_INPUT_PIXELS
+    }).rotate().webp({
+      quality: WEBP_QUALITY,
+      effort: 4
+    }).toBuffer({
+      resolveWithObject: true
+    });
+    return {
+      dataBase64: output.data.toString("base64"),
+      filename: toWebpFilename(payload.filename),
+      mimeType: "image/webp",
+      metadata: {
+        sourceFilename: payload.filename,
+        sourceMimeType: payload.mimeType,
+        ...typeof output.info.width === "number" ? {
+          width: output.info.width
+        } : {},
+        ...typeof output.info.height === "number" ? {
+          height: output.info.height
+        } : {}
+      }
+    };
+  } catch (error) {
+    throw normalizeConversionError(error);
+  }
+};
+const convertHeifToWebpTask = async (payload, job) => {
+  const input = Buffer.from(payload.inputBase64, "base64");
+  await job.log(`convert ${payload.filename} (${input.length} bytes) to webp`);
+  return convertHeifToWebp(input, payload);
+};
+let isConvertHeifToWebpTaskRegistered = false;
+const registerConvertHeifToWebpTask = () => {
+  if (isConvertHeifToWebpTaskRegistered) return;
+  queue.registerTask(convertHeifToWebpTaskName, convertHeifToWebpTask);
+  isConvertHeifToWebpTaskRegistered = true;
+};
+const waitForConversionResult = async (job) => {
+  const startedAt = Date.now();
+  while (Date.now() - startedAt < CONVERSION_TIMEOUT_MS) {
+    const currentJob = job.id ? await queue.getJob(String(job.id)) : job;
+    if (!currentJob) {
+      throw new Error("heif_conversion_failed");
+    }
+    const state = await currentJob.getState();
+    if (state === "completed") {
+      return currentJob.returnvalue;
+    }
+    if (state === "failed") {
+      throw new Error(currentJob.failedReason || "heif_conversion_failed");
+    }
+    await delay(POLL_INTERVAL_MS);
+  }
+  throw new Error("heif_conversion_timeout");
+};
+const runConversionTask = async (input, payload) => {
+  const job = await queue.add(convertHeifToWebpTaskName, {
+    ...payload,
+    inputBase64: input.toString("base64")
+  }, {
+    attempts: 1,
+    removeOnComplete: 128,
+    removeOnFail: 128
+  });
+  return waitForConversionResult(job);
+};
+const convertHeifToWebpProcessor = {
+  id: "convert-heif-to-webp",
+  maxBytes: MAX_HEIF_BYTES,
+  match: isHeifUpload,
+  process: async (data, ctx) => {
+    if (data.length > MAX_HEIF_BYTES) {
+      throw new Error("heif_too_large");
+    }
+    const result = await runConversionTask(data, {
+      filename: ctx.filename,
+      mimeType: ctx.clientMimeType
+    });
+    return {
+      data: Buffer.from(result.dataBase64, "base64"),
+      filename: result.filename,
+      mimeType: result.mimeType,
+      metadata: result.metadata
+    };
+  }
+};
+export {
+  convertHeifToWebpProcessor as c,
+  registerConvertHeifToWebpTask as r
+};
+//# sourceMappingURL=convertHeifToWebp-C-DGXZ2k.js.map

package/dist/convertHeifToWebp-C-DGXZ2k.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"convertHeifToWebp-C-DGXZ2k.js","sources":["../src/uploads/api/file-uploads/processors/convertHeifToWebp.ts"],"sourcesContent":["import { queue, type Job } from \"@rpcbase/worker\"\nimport sharp from \"sharp\"\n\nimport type { UploadFileProcessor, UploadFileProcessorContext } from \"./index\"\n\n\nconst MAX_HEIF_BYTES = 25 * 1024 * 1024\nconst MAX_HEIF_INPUT_PIXELS = 64 * 1024 * 1024\nconst WEBP_QUALITY = 82\nconst CONVERSION_TIMEOUT_MS = 60_000\nconst POLL_INTERVAL_MS = 250\nconst HEIF_DECODE_UNSUPPORTED = \"heif_decode_unsupported\"\n\nconst heifMimeTypes = new Set([\n  \"image/heic\",\n  \"image/heif\",\n  \"image/heic-sequence\",\n  \"image/heif-sequence\",\n])\n\nconst heifExtensions = /\\.(?:heic|heif|heics|heifs)$/i\nconst hevcBrands = new Set([\"heic\", \"heix\", \"hevc\", \"hevx\", \"heim\", \"heis\", \"hevm\", \"hevs\"])\n\nexport const convertHeifToWebpTaskName = \"rb-upload-convert-heif-to-webp\"\n\nexport type ConvertHeifToWebpTaskPayload = {\n  filename: string\n  mimeType: string\n  inputBase64: string\n}\n\nexport type ConvertHeifToWebpTaskResult = {\n  dataBase64: string\n  filename: string\n  mimeType: \"image/webp\"\n  metadata: {\n    width?: number\n    height?: number\n    sourceFilename: string\n    sourceMimeType: string\n  }\n}\n\ndeclare module \"@rpcbase/worker\" {\n  interface WorkerTasksMap {\n    \"rb-upload-convert-heif-to-webp\": ConvertHeifToWebpTaskPayload\n  }\n}\n\nconst delay = async (ms: number): Promise<void> => {\n  await new Promise((resolve) => setTimeout(resolve, ms))\n}\n\nconst normalizeMimeType = (value: string): string => value.trim().toLowerCase()\n\nconst getFtypBrands = (sniff: Buffer): string[] => {\n  if (sniff.length < 12) return []\n\n  const ftypOffset = sniff.indexOf(Buffer.from(\"ftyp\"))\n  if (ftypOffset < 4 || ftypOffset > 32) return []\n\n  const brands: string[] = []\n  for (let offset = ftypOffset + 4; offset + 4 <= Math.min(sniff.length, ftypOffset + 80); offset += 4) {\n    const brand = sniff.subarray(offset, offset + 4).toString(\"ascii\")\n    if (/^[a-zA-Z0-9 ]{4}$/.test(brand)) {\n      brands.push(brand.trim())\n    }\n  }\n\n  return brands.filter(Boolean)\n}\n\nexport const hasHeifDeclaration = ({ filename, clientMimeType }: Pick<UploadFileProcessorContext, \"filename\" | \"clientMimeType\">): boolean =>\n  heifMimeTypes.has(normalizeMimeType(clientMimeType)) || heifExtensions.test(filename)\n\nexport const looksLikeHevcHeif = (sniff: Buffer): boolean => getFtypBrands(sniff).some((brand) => hevcBrands.has(brand))\n\nexport const isHeifUpload = ({ filename, clientMimeType, sniff }: UploadFileProcessorContext): boolean =>\n  hasHeifDeclaration({ filename, clientMimeType }) || looksLikeHevcHeif(sniff)\n\nexport const toWebpFilename = (filename: string): string => {\n  const trimmed = filename.trim()\n  if (!trimmed) return \"image.webp\"\n  if (heifExtensions.test(trimmed)) return trimmed.replace(heifExtensions, \".webp\")\n  return `${trimmed}.webp`\n}\n\nconst isHeifDecodeUnsupportedError = (error: unknown): boolean => {\n  const message = error instanceof Error ? error.message : String(error ?? \"unknown\")\n  const normalized = message.toLowerCase()\n  return (\n    message.startsWith(HEIF_DECODE_UNSUPPORTED) ||\n    normalized.includes(\"support for this compression format has not been built in\") ||\n    normalized.includes(\"heif: error while loading plugin\") ||\n    normalized.includes(\"unsupported feature: unsupported codec\") ||\n    normalized.includes(\"no decoding plugin installed\")\n  )\n}\n\nexport const getSharpHeifSupportDiagnostic = (): string => {\n  const suffixes = sharp.format.heif.input.fileSuffix ?? []\n  const advertisedSuffixes = suffixes.length ? suffixes.join(\", \") : \"none\"\n  const sharpVersion = sharp.versions.sharp ?? \"unknown\"\n  const vipsVersion = sharp.versions.vips ?? \"unknown\"\n  const heifVersion = sharp.versions.heif ?? \"not reported\"\n\n  return `Sharp ${sharpVersion} / libvips ${vipsVersion} / libheif ${heifVersion} advertises HEIF input suffixes: ${advertisedSuffixes}. iPhone HEIC/HEVC requires a libvips build with libheif, libde265 and x265/HEVC support. Install a compatible global libvips and reinstall sharp so it links against it.`\n}\n\nconst createHeifDecodeUnsupportedError = (): Error => new Error(`${HEIF_DECODE_UNSUPPORTED}: ${getSharpHeifSupportDiagnostic()}`)\n\nconst normalizeConversionError = (error: unknown): Error => {\n  const message = error instanceof Error ? error.message : String(error ?? \"unknown\")\n  if (message === \"heif_too_large\") {\n    return new Error(message)\n  }\n  if (message.startsWith(HEIF_DECODE_UNSUPPORTED)) {\n    return new Error(message)\n  }\n  if (isHeifDecodeUnsupportedError(error)) {\n    return createHeifDecodeUnsupportedError()\n  }\n  return new Error(\"heif_conversion_failed\")\n}\n\nexport const convertHeifToWebp = async (\n  input: Buffer,\n  payload: Pick<ConvertHeifToWebpTaskPayload, \"filename\" | \"mimeType\">,\n): Promise<ConvertHeifToWebpTaskResult> => {\n  try {\n    const output = await sharp(input, { limitInputPixels: MAX_HEIF_INPUT_PIXELS })\n      .rotate()\n      .webp({ quality: WEBP_QUALITY, effort: 4 })\n      .toBuffer({ resolveWithObject: true })\n\n    return {\n      dataBase64: output.data.toString(\"base64\"),\n      filename: toWebpFilename(payload.filename),\n      mimeType: \"image/webp\",\n      metadata: {\n        sourceFilename: payload.filename,\n        sourceMimeType: payload.mimeType,\n        ...(typeof output.info.width === \"number\" ? { width: output.info.width } : {}),\n        ...(typeof output.info.height === \"number\" ? { height: output.info.height } : {}),\n      },\n    }\n  } catch (error) {\n    throw normalizeConversionError(error)\n  }\n}\n\nconst convertHeifToWebpTask = async (payload: ConvertHeifToWebpTaskPayload, job: Job): Promise<ConvertHeifToWebpTaskResult> => {\n  const input = Buffer.from(payload.inputBase64, \"base64\")\n  await job.log(`convert ${payload.filename} (${input.length} bytes) to webp`)\n  return convertHeifToWebp(input, payload)\n}\n\nlet isConvertHeifToWebpTaskRegistered = false\n\nexport const registerConvertHeifToWebpTask = (): void => {\n  if (isConvertHeifToWebpTaskRegistered) return\n\n  queue.registerTask(convertHeifToWebpTaskName, convertHeifToWebpTask)\n  isConvertHeifToWebpTaskRegistered = true\n}\n\nconst waitForConversionResult = async (job: Job): Promise<ConvertHeifToWebpTaskResult> => {\n  const startedAt = Date.now()\n\n  while (Date.now() - startedAt < CONVERSION_TIMEOUT_MS) {\n    const currentJob = job.id ? await queue.getJob(String(job.id)) : job\n    if (!currentJob) {\n      throw new Error(\"heif_conversion_failed\")\n    }\n\n    const state = await currentJob.getState()\n    if (state === \"completed\") {\n      return currentJob.returnvalue as ConvertHeifToWebpTaskResult\n    }\n    if (state === \"failed\") {\n      throw new Error(currentJob.failedReason || \"heif_conversion_failed\")\n    }\n    await delay(POLL_INTERVAL_MS)\n  }\n\n  throw new Error(\"heif_conversion_timeout\")\n}\n\nconst runConversionTask = async (\n  input: Buffer,\n  payload: Pick<ConvertHeifToWebpTaskPayload, \"filename\" | \"mimeType\">,\n): Promise<ConvertHeifToWebpTaskResult> => {\n  const job = await queue.add(\n    convertHeifToWebpTaskName,\n    {\n      ...payload,\n      inputBase64: input.toString(\"base64\"),\n    },\n    {\n      attempts: 1,\n      removeOnComplete: 128,\n      removeOnFail: 128,\n    },\n  )\n\n  return waitForConversionResult(job)\n}\n\nexport const convertHeifToWebpProcessor: UploadFileProcessor = {\n  id: \"convert-heif-to-webp\",\n  maxBytes: MAX_HEIF_BYTES,\n  match: isHeifUpload,\n  process: async (data, ctx) => {\n    if (data.length > MAX_HEIF_BYTES) {\n      throw new Error(\"heif_too_large\")\n    }\n\n    const result = await runConversionTask(data, {\n      filename: ctx.filename,\n      mimeType: ctx.clientMimeType,\n    })\n\n    return {\n      data: Buffer.from(result.dataBase64, \"base64\"),\n      filename: result.filename,\n      mimeType: result.mimeType,\n      metadata: result.metadata,\n    }\n  },\n}\n"],"names":["MAX_HEIF_BYTES","MAX_HEIF_INPUT_PIXELS","WEBP_QUALITY","CONVERSION_TIMEOUT_MS","POLL_INTERVAL_MS","HEIF_DECODE_UNSUPPORTED","heifMimeTypes","Set","heifExtensions","hevcBrands","convertHeifToWebpTaskName","delay","ms","Promise","resolve","setTimeout","normalizeMimeType","value","trim","toLowerCase","getFtypBrands","sniff","length","ftypOffset","indexOf","Buffer","from","brands","offset","Math","min","brand","subarray","toString","test","push","filter","Boolean","hasHeifDeclaration","filename","clientMimeType","has","looksLikeHevcHeif","some","isHeifUpload","toWebpFilename","trimmed","replace","isHeifDecodeUnsupportedError","error","message","Error","String","normalized","startsWith","includes","getSharpHeifSupportDiagnostic","suffixes","sharp","format","heif","input","fileSuffix","advertisedSuffixes","join","sharpVersion","versions","vipsVersion","vips","heifVersion","createHeifDecodeUnsupportedError","normalizeConversionError","convertHeifToWebp","payload","output","limitInputPixels","rotate","webp","quality","effort","toBuffer","resolveWithObject","dataBase64","data","mimeType","metadata","sourceFilename","sourceMimeType","info","width","height","convertHeifToWebpTask","job","inputBase64","log","isConvertHeifToWebpTaskRegistered","registerConvertHeifToWebpTask","queue","registerTask","waitForConversionResult","startedAt","Date","now","currentJob","id","getJob","state","getState","returnvalue","failedReason","runConversionTask","add","attempts","removeOnComplete","removeOnFail","convertHeifToWebpProcessor","maxBytes","match","process","ctx","result"],"mappings":";;AAMA,MAAMA,iBAAiB,KAAK,OAAO;AACnC,MAAMC,wBAAwB,KAAK,OAAO;AAC1C,MAAMC,eAAe;AACrB,MAAMC,wBAAwB;AAC9B,MAAMC,mBAAmB;AACzB,MAAMC,0BAA0B;AAEhC,MAAMC,oCAAoBC,IAAI,CAC5B,cACA,cACA,uBACA,qBAAqB,CACtB;AAED,MAAMC,iBAAiB;AACvB,MAAMC,aAAa,oBAAIF,IAAI,CAAC,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,MAAM,CAAC;AAEpF,MAAMG,4BAA4B;AA0BzC,MAAMC,QAAQ,OAAOC,OAA8B;AACjD,QAAM,IAAIC,QAASC,CAAAA,YAAYC,WAAWD,SAASF,EAAE,CAAC;AACxD;AAEA,MAAMI,oBAAoBA,CAACC,UAA0BA,MAAMC,KAAAA,EAAOC,YAAAA;AAElE,MAAMC,gBAAgBA,CAACC,UAA4B;AACjD,MAAIA,MAAMC,SAAS,GAAI,QAAO,CAAA;AAE9B,QAAMC,aAAaF,MAAMG,QAAQC,OAAOC,KAAK,MAAM,CAAC;AACpD,MAAIH,aAAa,KAAKA,aAAa,WAAW,CAAA;AAE9C,QAAMI,SAAmB,CAAA;AACzB,WAASC,SAASL,aAAa,GAAGK,SAAS,KAAKC,KAAKC,IAAIT,MAAMC,QAAQC,aAAa,EAAE,GAAGK,UAAU,GAAG;AACpG,UAAMG,QAAQV,MAAMW,SAASJ,QAAQA,SAAS,CAAC,EAAEK,SAAS,OAAO;AACjE,QAAI,oBAAoBC,KAAKH,KAAK,GAAG;AACnCJ,aAAOQ,KAAKJ,MAAMb,MAAM;AAAA,IAC1B;AAAA,EACF;AAEA,SAAOS,OAAOS,OAAOC,OAAO;AAC9B;AAEO,MAAMC,qBAAqBA,CAAC;AAAA,EAAEC;AAAAA,EAAUC;AAAgF,MAC7HlC,cAAcmC,IAAIzB,kBAAkBwB,cAAc,CAAC,KAAKhC,eAAe0B,KAAKK,QAAQ;AAE/E,MAAMG,oBAAoBA,CAACrB,UAA2BD,cAAcC,KAAK,EAAEsB,KAAMZ,CAAAA,UAAUtB,WAAWgC,IAAIV,KAAK,CAAC;AAEhH,MAAMa,eAAeA,CAAC;AAAA,EAAEL;AAAAA,EAAUC;AAAAA,EAAgBnB;AAAkC,MACzFiB,mBAAmB;AAAA,EAAEC;AAAAA,EAAUC;AAAe,CAAC,KAAKE,kBAAkBrB,KAAK;AAEtE,MAAMwB,iBAAiBA,CAACN,aAA6B;AAC1D,QAAMO,UAAUP,SAASrB,KAAAA;AACzB,MAAI,CAAC4B,QAAS,QAAO;AACrB,MAAItC,eAAe0B,KAAKY,OAAO,UAAUA,QAAQC,QAAQvC,gBAAgB,OAAO;AAChF,SAAO,GAAGsC,OAAO;AACnB;AAEA,MAAME,+BAA+BA,CAACC,UAA4B;AAChE,QAAMC,UAAUD,iBAAiBE,QAAQF,MAAMC,UAAUE,OAAOH,SAAS,SAAS;AAClF,QAAMI,aAAaH,QAAQ/B,YAAAA;AAC3B,SACE+B,QAAQI,WAAWjD,uBAAuB,KAC1CgD,WAAWE,SAAS,2DAA2D,KAC/EF,WAAWE,SAAS,kCAAkC,KACtDF,WAAWE,SAAS,wCAAwC,KAC5DF,WAAWE,SAAS,8BAA8B;AAEtD;AAEO,MAAMC,gCAAgCA,MAAc;AACzD,QAAMC,WAAWC,MAAMC,OAAOC,KAAKC,MAAMC,cAAc,CAAA;AACvD,QAAMC,qBAAqBN,SAASnC,SAASmC,SAASO,KAAK,IAAI,IAAI;AACnE,QAAMC,eAAeP,MAAMQ,SAASR,SAAS;AAC7C,QAAMS,cAAcT,MAAMQ,SAASE,QAAQ;AAC3C,QAAMC,cAAcX,MAAMQ,SAASN,QAAQ;AAE3C,SAAO,SAASK,YAAY,cAAcE,WAAW,cAAcE,WAAW,oCAAoCN,kBAAkB;AACtI;AAEA,MAAMO,mCAAmCA,MAAa,IAAInB,MAAM,GAAG9C,uBAAuB,KAAKmD,8BAAAA,CAA+B,EAAE;AAEhI,MAAMe,2BAA2BA,CAACtB,UAA0B;AAC1D,QAAMC,UAAUD,iBAAiBE,QAAQF,MAAMC,UAAUE,OAAOH,SAAS,SAAS;AAClF,MAAIC,YAAY,kBAAkB;AAChC,WAAO,IAAIC,MAAMD,OAAO;AAAA,EAC1B;AACA,MAAIA,QAAQI,WAAWjD,uBAAuB,GAAG;AAC/C,WAAO,IAAI8C,MAAMD,OAAO;AAAA,EAC1B;AACA,MAAIF,6BAA6BC,KAAK,GAAG;AACvC,WAAOqB,iCAAAA;AAAAA,EACT;AACA,SAAO,IAAInB,MAAM,wBAAwB;AAC3C;AAEO,MAAMqB,oBAAoB,OAC/BX,OACAY,YACyC;AACzC,MAAI;AACF,UAAMC,SAAS,MAAMhB,MAAMG,OAAO;AAAA,MAAEc,kBAAkB1E;AAAAA,IAAAA,CAAuB,EAC1E2E,OAAAA,EACAC,KAAK;AAAA,MAAEC,SAAS5E;AAAAA,MAAc6E,QAAQ;AAAA,IAAA,CAAG,EACzCC,SAAS;AAAA,MAAEC,mBAAmB;AAAA,IAAA,CAAM;AAEvC,WAAO;AAAA,MACLC,YAAYR,OAAOS,KAAKlD,SAAS,QAAQ;AAAA,MACzCM,UAAUM,eAAe4B,QAAQlC,QAAQ;AAAA,MACzC6C,UAAU;AAAA,MACVC,UAAU;AAAA,QACRC,gBAAgBb,QAAQlC;AAAAA,QACxBgD,gBAAgBd,QAAQW;AAAAA,QACxB,GAAI,OAAOV,OAAOc,KAAKC,UAAU,WAAW;AAAA,UAAEA,OAAOf,OAAOc,KAAKC;AAAAA,QAAAA,IAAU,CAAA;AAAA,QAC3E,GAAI,OAAOf,OAAOc,KAAKE,WAAW,WAAW;AAAA,UAAEA,QAAQhB,OAAOc,KAAKE;AAAAA,QAAAA,IAAW,CAAA;AAAA,MAAC;AAAA,IACjF;AAAA,EAEJ,SAASzC,OAAO;AACd,UAAMsB,yBAAyBtB,KAAK;AAAA,EACtC;AACF;AAEA,MAAM0C,wBAAwB,OAAOlB,SAAuCmB,QAAmD;AAC7H,QAAM/B,QAAQpC,OAAOC,KAAK+C,QAAQoB,aAAa,QAAQ;AACvD,QAAMD,IAAIE,IAAI,WAAWrB,QAAQlC,QAAQ,KAAKsB,MAAMvC,MAAM,iBAAiB;AAC3E,SAAOkD,kBAAkBX,OAAOY,OAAO;AACzC;AAEA,IAAIsB,oCAAoC;AAEjC,MAAMC,gCAAgCA,MAAY;AACvD,MAAID,kCAAmC;AAEvCE,QAAMC,aAAaxF,2BAA2BiF,qBAAqB;AACnEI,sCAAoC;AACtC;AAEA,MAAMI,0BAA0B,OAAOP,QAAmD;AACxF,QAAMQ,YAAYC,KAAKC,IAAAA;AAEvB,SAAOD,KAAKC,QAAQF,YAAYjG,uBAAuB;AACrD,UAAMoG,aAAaX,IAAIY,KAAK,MAAMP,MAAMQ,OAAOrD,OAAOwC,IAAIY,EAAE,CAAC,IAAIZ;AACjE,QAAI,CAACW,YAAY;AACf,YAAM,IAAIpD,MAAM,wBAAwB;AAAA,IAC1C;AAEA,UAAMuD,QAAQ,MAAMH,WAAWI,SAAAA;AAC/B,QAAID,UAAU,aAAa;AACzB,aAAOH,WAAWK;AAAAA,IACpB;AACA,QAAIF,UAAU,UAAU;AACtB,YAAM,IAAIvD,MAAMoD,WAAWM,gBAAgB,wBAAwB;AAAA,IACrE;AACA,UAAMlG,MAAMP,gBAAgB;AAAA,EAC9B;AAEA,QAAM,IAAI+C,MAAM,yBAAyB;AAC3C;AAEA,MAAM2D,oBAAoB,OACxBjD,OACAY,YACyC;AACzC,QAAMmB,MAAM,MAAMK,MAAMc,IACtBrG,2BACA;AAAA,IACE,GAAG+D;AAAAA,IACHoB,aAAahC,MAAM5B,SAAS,QAAQ;AAAA,EAAA,GAEtC;AAAA,IACE+E,UAAU;AAAA,IACVC,kBAAkB;AAAA,IAClBC,cAAc;AAAA,EAAA,CAElB;AAEA,SAAOf,wBAAwBP,GAAG;AACpC;AAEO,MAAMuB,6BAAkD;AAAA,EAC7DX,IAAI;AAAA,EACJY,UAAUpH;AAAAA,EACVqH,OAAOzE;AAAAA,EACP0E,SAAS,OAAOnC,MAAMoC,QAAQ;AAC5B,QAAIpC,KAAK7D,SAAStB,gBAAgB;AAChC,YAAM,IAAImD,MAAM,gBAAgB;AAAA,IAClC;AAEA,UAAMqE,SAAS,MAAMV,kBAAkB3B,MAAM;AAAA,MAC3C5C,UAAUgF,IAAIhF;AAAAA,MACd6C,UAAUmC,IAAI/E;AAAAA,IAAAA,CACf;AAED,WAAO;AAAA,MACL2C,MAAM1D,OAAOC,KAAK8F,OAAOtC,YAAY,QAAQ;AAAA,MAC7C3C,UAAUiF,OAAOjF;AAAAA,MACjB6C,UAAUoC,OAAOpC;AAAAA,MACjBC,UAAUmC,OAAOnC;AAAAA,IAAAA;AAAAA,EAErB;AACF;"}

package/dist/{handler-Da2KGCRq.js → handler-BUjHw_zG.js}

@@ -1,8 +1,56 @@
 import { models, getTenantFilesystemDb } from "@rpcbase/db";
 import { GridFSBucket, ObjectId } from "mongodb";
-import { s as sanitizeSvgProcessor, c as convertHeifToWebpProcessor, g as getTenantId, b as buildUploadsAbility, a as getUploadSessionAccessQuery, e as ensureUploadIndexes, d as getBucketName, f as enqueueUploadPostProcessors, h as getModelCtx, i as getUserId, j as getChunkSizeBytes, k as getSessionTtlMs, l as computeSha256Hex, t as toBufferPayload, n as normalizeSha256Hex, m as getMaxClientUploadBytesPerSecond, o as getRawBodyLimitBytes } from "./uploads-BAxHzidK.js";
+import { e as enqueueUploadPostProcessors } from "./postProcessors-D27fGZP0.js";
+import { c as convertHeifToWebpProcessor } from "./convertHeifToWebp-C-DGXZ2k.js";
+import { JSDOM } from "jsdom";
+import createDOMPurify from "dompurify";
+import { a as getTenantId, b as buildUploadsAbility, c as getUploadSessionAccessQuery, e as ensureUploadIndexes, g as getBucketName, d as getModelCtx, f as getUserId, h as getChunkSizeBytes, i as getSessionTtlMs, j as computeSha256Hex, t as toBufferPayload, n as normalizeSha256Hex, k as getMaxClientUploadBytesPerSecond, l as getRawBodyLimitBytes } from "./shared-CJrm9Wjp.js";
 import { randomBytes } from "node:crypto";
 import { o as object, n as number, b as boolean, s as string, a as array, _ as _enum } from "./schemas-Cjdjgehl.js";
+const MAX_SVG_BYTES = 128 * 1024;
+const window = new JSDOM("").window;
+const DOMPurify = createDOMPurify(window);
+const normalizeForSniff = (raw) => raw.replace(/^\uFEFF/, "").trimStart();
+const looksLikeSvgText = (text) => {
+  const normalized = normalizeForSniff(text);
+  if (!normalized.startsWith("<")) return false;
+  return /<svg(?:\s|>)/i.test(normalized);
+};
+const looksLikeSvg = (sniff) => looksLikeSvgText(sniff.toString("utf8"));
+const sanitizeSvg = (svg) => DOMPurify.sanitize(svg, {
+  USE_PROFILES: {
+    svg: true,
+    svgFilters: true
+  }
+});
+const sanitizeSvgProcessor = {
+  id: "sanitize-svg",
+  maxBytes: MAX_SVG_BYTES,
+  match: ({
+    sniff
+  }) => looksLikeSvg(sniff),
+  process: (data) => {
+    if (data.length > MAX_SVG_BYTES) {
+      throw new Error("svg_too_large");
+    }
+    const svgText = data.toString("utf8");
+    if (!looksLikeSvgText(svgText)) {
+      throw new Error("svg_invalid");
+    }
+    const sanitized = sanitizeSvg(svgText);
+    if (!sanitized.trim() || !looksLikeSvgText(sanitized)) {
+      throw new Error("svg_sanitize_failed");
+    }
+    const sanitizedBuffer = Buffer.from(sanitized, "utf8");
+    if (sanitizedBuffer.length > MAX_SVG_BYTES) {
+      throw new Error("svg_too_large");
+    }
+    return {
+      data: sanitizedBuffer,
+      mimeType: "image/svg+xml"
+    };
+  }
+};
 const uploadProcessors = Object.freeze([sanitizeSvgProcessor, convertHeifToWebpProcessor]);
 const getMaxUploadProcessorBytes = () => uploadProcessors.reduce((max, processor) => Math.max(max, processor.maxBytes), 0);
 const selectUploadProcessors = (ctx) => uploadProcessors.filter((processor) => processor.match(ctx));
@@ -935,4 +983,4 @@ const handler = (api) => {
 export {
   handler as default
 };
-//# sourceMappingURL=handler-Da2KGCRq.js.map
+//# sourceMappingURL=handler-BUjHw_zG.js.map

package/dist/handler-BUjHw_zG.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-BUjHw_zG.js","sources":["../src/uploads/api/file-uploads/processors/sanitizeSvg.ts","../src/uploads/api/file-uploads/processors/index.ts","../src/uploads/api/file-uploads/handlers/completeUpload.ts","../src/uploads/api/file-uploads/handlers/getStatus.ts","../src/uploads/api/file-uploads/index.ts","../src/uploads/api/file-uploads/handlers/initUpload.ts","../src/uploads/api/file-uploads/handlers/uploadChunk.ts","../src/uploads/api/file-uploads/middleware/rawBodyParser.ts","../src/uploads/api/file-uploads/handler.ts"],"sourcesContent":["import { JSDOM } from \"jsdom\"\nimport createDOMPurify from \"dompurify\"\n\nimport type { UploadFileProcessor } from \"./index\"\n\n\nconst MAX_SVG_BYTES = 128 * 1024\n\nconst window = new JSDOM(\"\").window\nconst DOMPurify = createDOMPurify(window)\n\nconst normalizeForSniff = (raw: string): string => raw.replace(/^\\uFEFF/, \"\").trimStart()\n\nconst looksLikeSvgText = (text: string): boolean => {\n  const normalized = normalizeForSniff(text)\n  if (!normalized.startsWith(\"<\")) return false\n  return /<svg(?:\\s|>)/i.test(normalized)\n}\n\nexport const looksLikeSvg = (sniff: Buffer): boolean => looksLikeSvgText(sniff.toString(\"utf8\"))\n\nexport const sanitizeSvg = (svg: string): string =>\n  DOMPurify.sanitize(svg, {\n    USE_PROFILES: { svg: true, svgFilters: true },\n  })\n\nexport const sanitizeSvgProcessor: UploadFileProcessor = {\n  id: \"sanitize-svg\",\n  maxBytes: MAX_SVG_BYTES,\n  match: ({ sniff }) => looksLikeSvg(sniff),\n  process: (data): { data: Buffer; mimeType: string } => {\n    if (data.length > MAX_SVG_BYTES) {\n      throw new Error(\"svg_too_large\")\n    }\n\n    const svgText = data.toString(\"utf8\")\n    if (!looksLikeSvgText(svgText)) {\n      throw new Error(\"svg_invalid\")\n    }\n\n    const sanitized = sanitizeSvg(svgText)\n    if (!sanitized.trim() || !looksLikeSvgText(sanitized)) {\n      throw new Error(\"svg_sanitize_failed\")\n    }\n\n    const sanitizedBuffer = Buffer.from(sanitized, \"utf8\")\n    if (sanitizedBuffer.length > MAX_SVG_BYTES) {\n      throw new Error(\"svg_too_large\")\n    }\n\n    return { data: sanitizedBuffer, mimeType: \"image/svg+xml\" }\n  },\n}\n\n","import { convertHeifToWebpProcessor } from \"./convertHeifToWebp\"\nimport { sanitizeSvgProcessor } from \"./sanitizeSvg\"\n\n\nexport type UploadFileProcessorContext = {\n  filename: string\n  clientMimeType: string\n  totalSize: number\n  sniff: Buffer\n}\n\nexport type UploadFileProcessorResult = {\n  data: Buffer\n  filename?: string\n  mimeType?: string\n  metadata?: Record<string, unknown>\n}\n\nexport type UploadFileProcessor = {\n  id: string\n  maxBytes: number\n  match: (ctx: UploadFileProcessorContext) => boolean\n  process: (data: Buffer, ctx: UploadFileProcessorContext) => Promise<UploadFileProcessorResult> | UploadFileProcessorResult\n}\n\nexport const uploadProcessors = Object.freeze([sanitizeSvgProcessor, convertHeifToWebpProcessor] satisfies UploadFileProcessor[])\n\nexport const getMaxUploadProcessorBytes = (): number =>\n  uploadProcessors.reduce((max, processor) => Math.max(max, processor.maxBytes), 0)\n\nexport const selectUploadProcessors = (ctx: UploadFileProcessorContext): UploadFileProcessor[] =>\n  uploadProcessors.filter((processor) => processor.match(ctx))\n\nexport const applyUploadProcessors = async (\n  data: Buffer,\n  ctx: Omit<UploadFileProcessorContext, \"sniff\" | \"totalSize\">,\n): Promise<{ data: Buffer; filename: string; mimeType: string; applied: string[]; metadata: Record<string, unknown> }> => {\n  let currentData = data\n  let currentFilename = ctx.filename\n  let currentMimeType = ctx.clientMimeType\n  const applied: string[] = []\n  const metadata: Record<string, unknown> = {}\n\n  for (const processor of uploadProcessors) {\n    const processorCtx: UploadFileProcessorContext = {\n      filename: currentFilename,\n      clientMimeType: currentMimeType,\n      totalSize: currentData.length,\n      sniff: currentData,\n    }\n\n    if (!processor.match(processorCtx)) continue\n\n    if (currentData.length > processor.maxBytes) {\n      throw new Error(\"processor_input_too_large\")\n    }\n\n    const result = await processor.process(currentData, processorCtx)\n    currentData = result.data\n    if (typeof result.filename === \"string\" && result.filename.trim()) {\n      currentFilename = result.filename.trim()\n    }\n    if (typeof result.mimeType === \"string\" && result.mimeType.trim()) {\n      currentMimeType = result.mimeType.trim()\n    }\n    if (result.metadata && typeof result.metadata === \"object\") {\n      Object.assign(metadata, result.metadata)\n    }\n    applied.push(processor.id)\n  }\n\n  return {\n    data: currentData,\n    filename: currentFilename,\n    mimeType: currentMimeType,\n    applied,\n    metadata,\n  }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb, models } from \"@rpcbase/db\"\nimport { GridFSBucket } from \"mongodb\"\nimport type { Model } from \"mongoose\"\n\nimport * as Uploads from \"../index\"\nimport { enqueueUploadPostProcessors } from \"../postProcessors\"\nimport { applyUploadProcessors, getMaxUploadProcessorBytes, selectUploadProcessors } from \"../processors\"\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  buildUploadsAbility,\n  ensureUploadIndexes,\n  getBucketName,\n  getModelCtx,\n  getUploadSessionAccessQuery,\n  getTenantId,\n} from \"../shared\"\n\n\nconst waitForStreamFinished = async (stream: NodeJS.WritableStream): Promise<void> => new Promise((resolve, reject) => {\n  stream.once(\"finish\", resolve)\n  stream.once(\"error\", reject)\n})\n\nconst writeToStream = async (stream: NodeJS.WritableStream, chunk: Buffer): Promise<void> => {\n  const ok = stream.write(chunk)\n  if (ok) return\n  await new Promise<void>((resolve, reject) => {\n    const onDrain = () => {\n      cleanup()\n      resolve()\n    }\n\n    const onError = (error: unknown) => {\n      cleanup()\n      reject(error)\n    }\n\n    const cleanup = () => {\n      stream.off(\"drain\", onDrain)\n      stream.off(\"error\", onError)\n    }\n\n    stream.on(\"drain\", onDrain)\n    stream.on(\"error\", onError)\n  })\n}\n\nconst abortUploadStream = async (stream: unknown): Promise<void> => {\n  if (!stream) return\n  if (typeof (stream as { abort?: unknown }).abort === \"function\") {\n    try {\n      await (stream as { abort: () => Promise<void> | void }).abort()\n      return\n    } catch {\n      //\n    }\n  }\n  try {\n    ;(stream as { destroy?: () => void }).destroy?.()\n  } catch {\n    //\n  }\n}\n\nexport const completeUpload: ApiHandler<Record<string, never>, Uploads.CompleteResponsePayload, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<Uploads.CompleteResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const uploadId = String(ctx.req.params?.uploadId ?? \"\").trim()\n  if (!uploadId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_upload_id\" }\n  }\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  const modelCtx = getModelCtx(ctx, tenantId, ability)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  if (!ability.can(\"update\", \"RBUploadSession\")) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const existing = await UploadSession.findOne({ $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"read\")] }).lean()\n  if (!existing) {\n    ctx.res.status(404)\n    return { ok: false, error: \"not_found\" }\n  }\n\n  if (existing.status === \"done\" && existing.fileId) {\n    return { ok: true, fileId: existing.fileId }\n  }\n\n  const locked = await UploadSession.findOneAndUpdate(\n    { $and: [{ _id: uploadId }, { status: \"uploading\" }, getUploadSessionAccessQuery(ability, \"update\")] },\n    { $set: { status: \"assembling\" }, $unset: { error: \"\" } },\n    { returnDocument: \"after\" },\n  ).lean()\n\n  if (!locked) {\n    ctx.res.status(409)\n    return { ok: false, error: \"not_uploading\" }\n  }\n\n  await ensureUploadIndexes(UploadSession, UploadChunk)\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    await UploadSession.updateOne(\n      { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n      { $set: { status: \"error\", error: \"filesystem_db_unavailable\" } },\n    )\n    ctx.res.status(500)\n    return { ok: false, error: \"assembly_failed\" }\n  }\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n\n  const lockedUserId = typeof locked.userId === \"string\" ? locked.userId : undefined\n  const maxProcessorBytes = getMaxUploadProcessorBytes()\n  const shouldBufferForProcessing = locked.totalSize <= maxProcessorBytes\n  const declaredMimeType = locked.mimeType.trim().toLowerCase()\n  const declaredSvg = declaredMimeType === \"image/svg+xml\" || locked.filename.trim().toLowerCase().endsWith(\".svg\")\n\n  let uploadStream: NodeJS.WritableStream | null = null\n  let finalFilename = locked.filename\n  let finalMimeType = locked.mimeType\n  let finalSize = locked.totalSize\n  let inlineProcessors: string[] = []\n  let finalMetadata: Record<string, unknown> = {\n    uploadId,\n    tenantId,\n    mimeType: locked.mimeType,\n    totalSize: locked.totalSize,\n    ...(typeof locked.isPublic === \"boolean\" ? { isPublic: locked.isPublic } : {}),\n    ...(typeof locked.ownerKeyHash === \"string\" ? { ownerKeyHash: locked.ownerKeyHash } : {}),\n    ...(lockedUserId ? { userId: lockedUserId } : {}),\n  }\n\n  try {\n    if (!shouldBufferForProcessing && declaredSvg) {\n      throw new Error(\"svg_too_large\")\n    }\n\n    const cursor = UploadChunk.find({ uploadId }).sort({ index: 1 }).cursor() as unknown as AsyncIterable<UploadChunkDoc> & {\n      close: () => Promise<void>\n    }\n\n    let expectedIndex = 0\n    const chunks: Buffer[] = []\n    let bufferedBytes = 0\n\n    const pendingChunks: Buffer[] = []\n    const sniffParts: Buffer[] = []\n    let sniffBytes = 0\n\n    try {\n      for await (const chunkDoc of cursor) {\n        if (chunkDoc.index !== expectedIndex) {\n          throw new Error(\"missing_chunks\")\n        }\n\n        const chunk = chunkDoc.data\n\n        if (shouldBufferForProcessing) {\n          chunks.push(chunk)\n          bufferedBytes += chunk.length\n        } else if (!uploadStream) {\n          pendingChunks.push(chunk)\n\n          if (sniffBytes < maxProcessorBytes) {\n            const slice = chunk.subarray(0, Math.min(chunk.length, maxProcessorBytes - sniffBytes))\n            if (slice.length) {\n              sniffParts.push(slice)\n              sniffBytes += slice.length\n            }\n          }\n\n          if (sniffBytes >= maxProcessorBytes) {\n            const sniff = Buffer.concat(sniffParts, sniffBytes)\n            const processors = selectUploadProcessors({\n              filename: locked.filename,\n              clientMimeType: locked.mimeType,\n              totalSize: locked.totalSize,\n              sniff,\n            })\n\n            if (processors.length) {\n              throw new Error(processors.some((processor) => processor.id === \"sanitize-svg\") ? \"svg_too_large\" : \"processor_input_too_large\")\n            }\n\n            finalMetadata = {\n              uploadId,\n              tenantId,\n              mimeType: locked.mimeType,\n              totalSize: locked.totalSize,\n              ...(typeof locked.isPublic === \"boolean\" ? { isPublic: locked.isPublic } : {}),\n              ...(typeof locked.ownerKeyHash === \"string\" ? { ownerKeyHash: locked.ownerKeyHash } : {}),\n              ...(lockedUserId ? { userId: lockedUserId } : {}),\n            }\n            uploadStream = bucket.openUploadStream(locked.filename, {\n              metadata: finalMetadata,\n            })\n\n            for (const pending of pendingChunks) {\n              await writeToStream(uploadStream, pending)\n            }\n            pendingChunks.length = 0\n          }\n        } else {\n          await writeToStream(uploadStream, chunk)\n        }\n\n        expectedIndex += 1\n      }\n    } finally {\n      try {\n        await cursor.close()\n      } catch {\n        //\n      }\n    }\n\n    if (expectedIndex !== locked.chunksTotal) {\n      throw new Error(\"missing_chunks\")\n    }\n\n    if (shouldBufferForProcessing) {\n      const assembled = Buffer.concat(chunks, bufferedBytes)\n      const {\n        data: processed,\n        filename: processedFilename,\n        mimeType: processedMimeType,\n        applied,\n        metadata: processedMetadata,\n      } = await applyUploadProcessors(assembled, {\n        filename: locked.filename,\n        clientMimeType: locked.mimeType,\n      })\n\n      finalFilename = processedFilename\n      finalMimeType = processedMimeType\n      finalSize = processed.length\n      inlineProcessors = applied\n      finalMetadata = {\n        uploadId,\n        tenantId,\n        mimeType: processedMimeType,\n        totalSize: processed.length,\n        ...(applied.length ? { processors: applied, sourceTotalSize: locked.totalSize } : {}),\n        ...processedMetadata,\n        ...(typeof locked.isPublic === \"boolean\" ? { isPublic: locked.isPublic } : {}),\n        ...(typeof locked.ownerKeyHash === \"string\" ? { ownerKeyHash: locked.ownerKeyHash } : {}),\n        ...(lockedUserId ? { userId: lockedUserId } : {}),\n      }\n      uploadStream = bucket.openUploadStream(finalFilename, {\n        metadata: finalMetadata,\n      })\n\n      const finished = waitForStreamFinished(uploadStream)\n      uploadStream.end(processed)\n      await finished\n    } else {\n      if (!uploadStream) {\n        const sniff = Buffer.concat(sniffParts, sniffBytes)\n        const processors = selectUploadProcessors({\n          filename: locked.filename,\n          clientMimeType: locked.mimeType,\n          totalSize: locked.totalSize,\n          sniff,\n        })\n\n        if (processors.length) {\n          throw new Error(processors.some((processor) => processor.id === \"sanitize-svg\") ? \"svg_too_large\" : \"processor_input_too_large\")\n        }\n\n        finalMetadata = {\n          uploadId,\n          tenantId,\n          mimeType: locked.mimeType,\n          totalSize: locked.totalSize,\n          ...(typeof locked.isPublic === \"boolean\" ? { isPublic: locked.isPublic } : {}),\n          ...(typeof locked.ownerKeyHash === \"string\" ? { ownerKeyHash: locked.ownerKeyHash } : {}),\n          ...(lockedUserId ? { userId: lockedUserId } : {}),\n        }\n        uploadStream = bucket.openUploadStream(locked.filename, {\n          metadata: finalMetadata,\n        })\n\n        for (const pending of pendingChunks) {\n          await writeToStream(uploadStream, pending)\n        }\n        pendingChunks.length = 0\n      }\n\n      const finished = waitForStreamFinished(uploadStream)\n      uploadStream.end()\n      await finished\n    }\n\n    const fileId = String((uploadStream as unknown as { id?: unknown }).id ?? \"\")\n    if (!fileId) {\n      throw new Error(\"missing_file_id\")\n    }\n\n    await UploadSession.updateOne(\n      { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n      { $set: { status: \"done\", fileId, filename: finalFilename, mimeType: finalMimeType, totalSize: finalSize }, $unset: { error: \"\" } },\n    )\n\n    await enqueueUploadPostProcessors({\n      tenantId,\n      uploadId,\n      fileId,\n      filename: finalFilename,\n      mimeType: finalMimeType,\n      clientMimeType: locked.mimeType,\n      totalSize: finalSize,\n      ...(typeof locked.isPublic === \"boolean\" ? { isPublic: locked.isPublic } : {}),\n      ...(typeof locked.ownerKeyHash === \"string\" ? { ownerKeyHash: locked.ownerKeyHash } : {}),\n      ...(lockedUserId ? { userId: lockedUserId } : {}),\n      inlineProcessors,\n      metadata: finalMetadata,\n    }).catch((error) => {\n      console.error(\"Upload post processor enqueue failed\", {\n        tenantId,\n        uploadId,\n        fileId,\n        error,\n      })\n    })\n\n    try {\n      await UploadChunk.deleteMany({ uploadId })\n    } catch {\n      //\n    }\n\n    return { ok: true, fileId }\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error)\n\n    await abortUploadStream(uploadStream)\n\n    if (message === \"missing_chunks\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"uploading\" } },\n      )\n      ctx.res.status(409)\n      return { ok: false, error: \"missing_chunks\" }\n    }\n\n    if (message === \"svg_too_large\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(413)\n      return { ok: false, error: message }\n    }\n\n    if (message === \"heif_too_large\" || message === \"processor_input_too_large\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(413)\n      return { ok: false, error: message }\n    }\n\n    if (message.startsWith(\"heif_decode_unsupported\")) {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(415)\n      return { ok: false, error: message }\n    }\n\n    if (message === \"svg_invalid\" || message === \"svg_sanitize_failed\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(400)\n      return { ok: false, error: message }\n    }\n\n    await UploadSession.updateOne(\n      { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n      { $set: { status: \"error\", error: message } },\n    )\n\n    ctx.res.status(500)\n    return { ok: false, error: \"assembly_failed\" }\n  }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\nimport type { Model } from \"mongoose\"\n\nimport * as Uploads from \"../index\"\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  buildUploadsAbility,\n  getModelCtx,\n  getUploadSessionAccessQuery,\n  getTenantId,\n} from \"../shared\"\n\n\nexport const getStatus: ApiHandler<Record<string, never>, Uploads.StatusResponsePayload, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<Uploads.StatusResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const uploadId = String(ctx.req.params?.uploadId ?? \"\").trim()\n  if (!uploadId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_upload_id\" }\n  }\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  const modelCtx = getModelCtx(ctx, tenantId, ability)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  if (!ability.can(\"read\", \"RBUploadSession\")) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const session = await UploadSession.findOne({ $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"read\")] }).lean()\n  if (!session) {\n    ctx.res.status(404)\n    return { ok: false, error: \"not_found\" }\n  }\n\n  const receivedDocs = await UploadChunk.find(\n    { uploadId },\n    { index: 1, _id: 0 },\n  ).sort({ index: 1 }).lean()\n\n  const received = (receivedDocs as unknown as Array<{ index?: unknown }>)\n    .map((doc) => (typeof doc.index === \"number\" ? doc.index : -1))\n    .filter((n) => Number.isInteger(n) && n >= 0)\n\n  return {\n    ok: true,\n    status: session.status,\n    chunkSize: session.chunkSize,\n    chunksTotal: session.chunksTotal,\n    received,\n    ...(session.fileId ? { fileId: session.fileId } : {}),\n  }\n}\n","import { z } from \"zod\"\n\n\nexport const InitRoute = \"/api/rb/file-uploads\"\nexport const ChunkRoute = \"/api/rb/file-uploads/:uploadId/chunks/:index\"\nexport const StatusRoute = \"/api/rb/file-uploads/:uploadId/status\"\nexport const CompleteRoute = \"/api/rb/file-uploads/:uploadId/complete\"\n\nexport const initRequestSchema = z.object({\n  filename: z.string().min(1),\n  mimeType: z.string().min(1),\n  isPublic: z.boolean().optional(),\n  totalSize: z.number().int().min(1),\n})\n\nexport type InitRequestPayload = z.infer<typeof initRequestSchema>\n\nexport const initResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  uploadId: z.string().optional(),\n  uploadKey: z.string().optional(),\n  chunkSize: z.number().int().optional(),\n  chunksTotal: z.number().int().optional(),\n})\n\nexport type InitResponsePayload = z.infer<typeof initResponseSchema>\n\nexport const statusResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  status: z.enum([\"uploading\", \"assembling\", \"done\", \"error\"]).optional(),\n  chunkSize: z.number().int().optional(),\n  chunksTotal: z.number().int().optional(),\n  received: z.array(z.number().int().min(0)).optional(),\n  fileId: z.string().optional(),\n})\n\nexport type StatusResponsePayload = z.infer<typeof statusResponseSchema>\n\nexport const completeResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  fileId: z.string().optional(),\n})\n\nexport type CompleteResponsePayload = z.infer<typeof completeResponseSchema>\n","import { randomBytes } from \"node:crypto\"\n\nimport { ApiHandler } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\nimport { ObjectId } from \"mongodb\"\nimport type { Model } from \"mongoose\"\n\nimport * as Uploads from \"../index\"\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  buildUploadsAbility,\n  computeSha256Hex,\n  ensureUploadIndexes,\n  getChunkSizeBytes,\n  getModelCtx,\n  getSessionTtlMs,\n  getTenantId,\n  getUserId,\n} from \"../shared\"\n\n\nexport const initUpload: ApiHandler<Uploads.InitRequestPayload, Uploads.InitResponsePayload, SessionUser> = async (\n  payload,\n  ctx,\n): Promise<Uploads.InitResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const userId = getUserId(ctx)\n\n  const parsed = Uploads.initRequestSchema.safeParse(payload ?? {})\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const chunkSize = getChunkSizeBytes()\n  const { filename, mimeType, totalSize, isPublic } = parsed.data\n  const chunksTotal = Math.ceil(totalSize / chunkSize)\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  const modelCtx = getModelCtx(ctx, tenantId, ability)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  await ensureUploadIndexes(UploadSession, UploadChunk)\n\n  const uploadId = new ObjectId().toString()\n  const now = Date.now()\n  const expiresAt = new Date(now + getSessionTtlMs())\n\n  const uploadKey = userId ? null : randomBytes(32).toString(\"base64url\")\n  const ownerKeyHash = uploadKey ? computeSha256Hex(Buffer.from(uploadKey)) : undefined\n\n  await UploadSession.create({\n    _id: uploadId,\n    ...(userId ? { userId } : {}),\n    ...(ownerKeyHash ? { ownerKeyHash } : {}),\n    filename,\n    mimeType,\n    ...(typeof isPublic === \"boolean\" ? { isPublic } : {}),\n    totalSize,\n    chunkSize,\n    chunksTotal,\n    status: \"uploading\",\n    createdAt: new Date(now),\n    expiresAt,\n  })\n\n  return {\n    ok: true,\n    uploadId,\n    chunkSize,\n    chunksTotal,\n    ...(uploadKey ? { uploadKey } : {}),\n  }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\nimport type { Model } from \"mongoose\"\n\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  buildUploadsAbility,\n  computeSha256Hex,\n  ensureUploadIndexes,\n  getModelCtx,\n  getUploadSessionAccessQuery,\n  getTenantId,\n  normalizeSha256Hex,\n  toBufferPayload,\n} from \"../shared\"\n\n\ntype ChunkResponsePayload = {\n  ok: boolean\n  error?: string\n}\n\nexport const uploadChunk: ApiHandler<Buffer, ChunkResponsePayload, SessionUser> = async (\n  payload,\n  ctx,\n): Promise<ChunkResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const uploadId = String(ctx.req.params?.uploadId ?? \"\").trim()\n  const indexRaw = String(ctx.req.params?.index ?? \"\").trim()\n  const index = Number(indexRaw)\n\n  if (!uploadId || !Number.isInteger(index) || index < 0) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_chunk_ref\" }\n  }\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  const modelCtx = getModelCtx(ctx, tenantId, ability)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  if (!ability.can(\"update\", \"RBUploadSession\")) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const session = await UploadSession.findOne({ $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] }).lean()\n  if (!session) {\n    ctx.res.status(404)\n    return { ok: false, error: \"not_found\" }\n  }\n\n  if (session.status !== \"uploading\") {\n    ctx.res.status(409)\n    return { ok: false, error: \"not_uploading\" }\n  }\n\n  if (index >= session.chunksTotal) {\n    ctx.res.status(400)\n    return { ok: false, error: \"index_out_of_range\" }\n  }\n\n  const data = toBufferPayload(payload)\n  if (!data) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_body\" }\n  }\n\n  const expectedSize = index === session.chunksTotal - 1\n    ? session.totalSize - session.chunkSize * (session.chunksTotal - 1)\n    : session.chunkSize\n\n  if (data.length > expectedSize) {\n    ctx.res.status(413)\n    return { ok: false, error: \"chunk_too_large\" }\n  }\n\n  if (data.length !== expectedSize) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_chunk_size\" }\n  }\n\n  const checksumHeader = ctx.req.get(\"X-Chunk-SHA256\")\n  const sha256 = checksumHeader ? computeSha256Hex(data) : undefined\n\n  if (checksumHeader) {\n    const expectedSha256 = normalizeSha256Hex(checksumHeader)\n    if (sha256 !== expectedSha256) {\n      ctx.res.status(400)\n      return { ok: false, error: \"checksum_mismatch\" }\n    }\n  }\n\n  await ensureUploadIndexes(UploadSession, UploadChunk)\n\n  await UploadChunk.updateOne(\n    { uploadId, index },\n    {\n      $set: {\n        uploadId,\n        index,\n        data,\n        size: data.length,\n        sha256,\n        expiresAt: session.expiresAt,\n      },\n      $setOnInsert: {\n        createdAt: new Date(),\n      },\n    },\n    { upsert: true },\n  )\n\n  ctx.res.status(204)\n  return { ok: true }\n}\n","export const rawBodyParser = ({\n  limitBytes,\n  maxClientBytesPerSecond,\n}: {\n  limitBytes: number\n  maxClientBytesPerSecond?: number | null\n}) => {\n  return (req: any, res: any, next: any) => {\n    const contentType = typeof req?.headers?.[\"content-type\"] === \"string\"\n      ? String(req.headers[\"content-type\"])\n      : \"\"\n\n    if (!contentType.includes(\"application/octet-stream\")) {\n      next()\n      return\n    }\n\n    let total = 0\n    const chunks: Buffer[] = []\n    let done = false\n    let paused = false\n    let throttleTimeout: ReturnType<typeof setTimeout> | null = null\n\n    const rateBytesPerSecond = typeof maxClientBytesPerSecond === \"number\" && maxClientBytesPerSecond > 0\n      ? maxClientBytesPerSecond\n      : null\n\n    const cleanup = () => {\n      req.off(\"data\", onData)\n      req.off(\"end\", onEnd)\n      req.off(\"error\", onError)\n      req.off(\"aborted\", onAborted)\n      if (throttleTimeout) {\n        clearTimeout(throttleTimeout)\n        throttleTimeout = null\n      }\n    }\n\n    const finish = (error?: unknown) => {\n      if (done) return\n      done = true\n\n      cleanup()\n\n      if (error) {\n        next(error)\n        return\n      }\n\n      req.body = Buffer.concat(chunks, total)\n      next()\n    }\n\n    const onData = (chunk: any) => {\n      if (done) return\n      const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)\n      total += buffer.length\n\n      if (total > limitBytes) {\n        done = true\n        cleanup()\n        req.destroy()\n        res.status(413).json({ ok: false, error: \"chunk_too_large\" })\n        return\n      }\n\n      chunks.push(buffer)\n\n      if (!rateBytesPerSecond) return\n\n      const now = Date.now()\n      const clientKey = getClientKey(req)\n      const state = getClientRateState(clientKey, rateBytesPerSecond, now)\n      const waitMs = consumeRateBudget(state, buffer.length, rateBytesPerSecond, now)\n\n      if (waitMs > 0 && !paused) {\n        paused = true\n        req.pause()\n        throttleTimeout = setTimeout(() => {\n          throttleTimeout = null\n          paused = false\n          if (done) return\n          try {\n            req.resume()\n          } catch {\n            //\n          }\n        }, waitMs)\n      }\n    }\n\n    const onEnd = () => finish()\n    const onError = (err: unknown) => finish(err)\n    const onAborted = () => finish(new Error(\"request_aborted\"))\n\n    req.on(\"data\", onData)\n    req.on(\"end\", onEnd)\n    req.on(\"error\", onError)\n    req.on(\"aborted\", onAborted)\n  }\n}\n\ntype ClientRateState = {\n  tokens: number\n  lastRefillMs: number\n  lastSeenMs: number\n}\n\nconst MAX_BURST_SECONDS = 1\nconst STALE_CLIENT_MS = 15 * 60 * 1000\n\nconst clientRateStates = new Map<string, ClientRateState>()\nlet lastCleanupMs = 0\n\nconst getClientKey = (req: any): string => {\n  const rawClientIp = typeof req?.clientIp === \"string\" ? req.clientIp : \"\"\n  if (rawClientIp.trim()) return rawClientIp.trim()\n  const rawIp = typeof req?.ip === \"string\" ? req.ip : \"\"\n  return rawIp.trim() || \"unknown\"\n}\n\nconst maybeCleanupStates = (now: number) => {\n  if (now - lastCleanupMs < 60_000) return\n  lastCleanupMs = now\n\n  if (clientRateStates.size < 2000) return\n\n  for (const [key, state] of clientRateStates) {\n    if (now - state.lastSeenMs > STALE_CLIENT_MS) {\n      clientRateStates.delete(key)\n    }\n  }\n}\n\nconst getClientRateState = (key: string, rateBytesPerSecond: number, now: number): ClientRateState => {\n  maybeCleanupStates(now)\n\n  const capacity = rateBytesPerSecond * MAX_BURST_SECONDS\n  const existing = clientRateStates.get(key)\n  if (existing) {\n    existing.lastSeenMs = now\n    existing.tokens = Math.min(capacity, existing.tokens)\n    return existing\n  }\n\n  const next: ClientRateState = {\n    tokens: capacity,\n    lastRefillMs: now,\n    lastSeenMs: now,\n  }\n  clientRateStates.set(key, next)\n  return next\n}\n\nconst consumeRateBudget = (\n  state: ClientRateState,\n  bytes: number,\n  rateBytesPerSecond: number,\n  now: number,\n): number => {\n  const capacity = rateBytesPerSecond * MAX_BURST_SECONDS\n  const elapsedMs = Math.max(0, now - state.lastRefillMs)\n\n  if (elapsedMs > 0) {\n    state.tokens = Math.min(capacity, state.tokens + (elapsedMs * rateBytesPerSecond) / 1000)\n    state.lastRefillMs = now\n  }\n\n  state.tokens -= bytes\n\n  if (state.tokens >= 0) return 0\n  return Math.ceil((-state.tokens / rateBytesPerSecond) * 1000)\n}\n","import { Api } from \"@rpcbase/api\"\n\nimport { completeUpload } from \"./handlers/completeUpload\"\nimport { getStatus } from \"./handlers/getStatus\"\nimport { initUpload } from \"./handlers/initUpload\"\nimport { uploadChunk } from \"./handlers/uploadChunk\"\nimport { rawBodyParser } from \"./middleware/rawBodyParser\"\nimport { getChunkSizeBytes, getMaxClientUploadBytesPerSecond, getRawBodyLimitBytes, type SessionUser } from \"./shared\"\n\nimport * as Uploads from \"./index\"\n\n\nexport default (api: Api<SessionUser>) => {\n  const chunkSizeBytes = getChunkSizeBytes()\n  api.use(\n    Uploads.InitRoute,\n    rawBodyParser({\n      limitBytes: getRawBodyLimitBytes(chunkSizeBytes),\n      maxClientBytesPerSecond: getMaxClientUploadBytesPerSecond(),\n    }),\n  )\n\n  api.post(Uploads.InitRoute, initUpload)\n  api.put(Uploads.ChunkRoute, uploadChunk)\n  api.get(Uploads.StatusRoute, getStatus)\n  api.post(Uploads.CompleteRoute, completeUpload)\n}\n"],"names":["MAX_SVG_BYTES","window","JSDOM","DOMPurify","createDOMPurify","normalizeForSniff","raw","replace","trimStart","looksLikeSvgText","text","normalized","startsWith","test","looksLikeSvg","sniff","toString","sanitizeSvg","svg","sanitize","USE_PROFILES","svgFilters","sanitizeSvgProcessor","id","maxBytes","match","process","data","length","Error","svgText","sanitized","trim","sanitizedBuffer","Buffer","from","mimeType","uploadProcessors","Object","freeze","convertHeifToWebpProcessor","getMaxUploadProcessorBytes","reduce","max","processor","Math","selectUploadProcessors","ctx","filter","applyUploadProcessors","currentData","currentFilename","filename","currentMimeType","clientMimeType","applied","metadata","processorCtx","totalSize","result","assign","push","waitForStreamFinished","stream","Promise","resolve","reject","once","writeToStream","chunk","ok","write","onDrain","cleanup","onError","error","off","on","abortUploadStream","abort","destroy","completeUpload","_payload","tenantId","getTenantId","res","status","uploadId","String","req","params","ability","buildUploadsAbility","modelCtx","getModelCtx","UploadSession","UploadChunk","all","models","get","can","existing","findOne","$and","_id","getUploadSessionAccessQuery","lean","fileId","locked","findOneAndUpdate","$set","$unset","returnDocument","ensureUploadIndexes","fsDb","getTenantFilesystemDb","nativeDb","db","updateOne","bucketName","getBucketName","bucket","GridFSBucket","lockedUserId","userId","undefined","maxProcessorBytes","shouldBufferForProcessing","declaredMimeType","toLowerCase","declaredSvg","endsWith","uploadStream","finalFilename","finalMimeType","finalSize","inlineProcessors","finalMetadata","isPublic","ownerKeyHash","cursor","find","sort","index","expectedIndex","chunks","bufferedBytes","pendingChunks","sniffParts","sniffBytes","chunkDoc","slice","subarray","min","concat","processors","some","openUploadStream","pending","close","chunksTotal","assembled","processed","processedFilename","processedMimeType","processedMetadata","sourceTotalSize","finished","end","enqueueUploadPostProcessors","catch","console","deleteMany","message","getStatus","session","receivedDocs","received","map","doc","n","Number","isInteger","chunkSize","InitRoute","ChunkRoute","StatusRoute","CompleteRoute","initRequestSchema","z","string","boolean","optional","number","int","uploadKey","initUpload","payload","getUserId","parsed","Uploads","safeParse","success","getChunkSizeBytes","ceil","ObjectId","now","Date","expiresAt","getSessionTtlMs","randomBytes","computeSha256Hex","create","createdAt","uploadChunk","indexRaw","toBufferPayload","expectedSize","checksumHeader","sha256","expectedSha256","normalizeSha256Hex","size","$setOnInsert","upsert","rawBodyParser","limitBytes","maxClientBytesPerSecond","next","contentType","headers","includes","total","done","paused","throttleTimeout","rateBytesPerSecond","onData","onEnd","onAborted","clearTimeout","finish","body","buffer","isBuffer","json","clientKey","getClientKey","state","getClientRateState","waitMs","consumeRateBudget","pause","setTimeout","resume","err","MAX_BURST_SECONDS","STALE_CLIENT_MS","clientRateStates","Map","lastCleanupMs","rawClientIp","clientIp","rawIp","ip","maybeCleanupStates","key","lastSeenMs","delete","capacity","tokens","lastRefillMs","set","bytes","elapsedMs","api","chunkSizeBytes","use","getRawBodyLimitBytes","getMaxClientUploadBytesPerSecond","post","put"],"mappings":";;;;;;;;;AAMA,MAAMA,gBAAgB,MAAM;AAE5B,MAAMC,SAAS,IAAIC,MAAM,EAAE,EAAED;AAC7B,MAAME,YAAYC,gBAAgBH,MAAM;AAExC,MAAMI,oBAAoBA,CAACC,QAAwBA,IAAIC,QAAQ,WAAW,EAAE,EAAEC,UAAAA;AAE9E,MAAMC,mBAAmBA,CAACC,SAA0B;AAClD,QAAMC,aAAaN,kBAAkBK,IAAI;AACzC,MAAI,CAACC,WAAWC,WAAW,GAAG,EAAG,QAAO;AACxC,SAAO,gBAAgBC,KAAKF,UAAU;AACxC;AAEO,MAAMG,eAAeA,CAACC,UAA2BN,iBAAiBM,MAAMC,SAAS,MAAM,CAAC;AAExF,MAAMC,cAAcA,CAACC,QAC1Bf,UAAUgB,SAASD,KAAK;AAAA,EACtBE,cAAc;AAAA,IAAEF,KAAK;AAAA,IAAMG,YAAY;AAAA,EAAA;AACzC,CAAC;AAEI,MAAMC,uBAA4C;AAAA,EACvDC,IAAI;AAAA,EACJC,UAAUxB;AAAAA,EACVyB,OAAOA,CAAC;AAAA,IAAEV;AAAAA,EAAAA,MAAYD,aAAaC,KAAK;AAAA,EACxCW,SAASA,CAACC,SAA6C;AACrD,QAAIA,KAAKC,SAAS5B,eAAe;AAC/B,YAAM,IAAI6B,MAAM,eAAe;AAAA,IACjC;AAEA,UAAMC,UAAUH,KAAKX,SAAS,MAAM;AACpC,QAAI,CAACP,iBAAiBqB,OAAO,GAAG;AAC9B,YAAM,IAAID,MAAM,aAAa;AAAA,IAC/B;AAEA,UAAME,YAAYd,YAAYa,OAAO;AACrC,QAAI,CAACC,UAAUC,KAAAA,KAAU,CAACvB,iBAAiBsB,SAAS,GAAG;AACrD,YAAM,IAAIF,MAAM,qBAAqB;AAAA,IACvC;AAEA,UAAMI,kBAAkBC,OAAOC,KAAKJ,WAAW,MAAM;AACrD,QAAIE,gBAAgBL,SAAS5B,eAAe;AAC1C,YAAM,IAAI6B,MAAM,eAAe;AAAA,IACjC;AAEA,WAAO;AAAA,MAAEF,MAAMM;AAAAA,MAAiBG,UAAU;AAAA,IAAA;AAAA,EAC5C;AACF;AC3BO,MAAMC,mBAAmBC,OAAOC,OAAO,CAACjB,sBAAsBkB,0BAA0B,CAAiC;AAEzH,MAAMC,6BAA6BA,MACxCJ,iBAAiBK,OAAO,CAACC,KAAKC,cAAcC,KAAKF,IAAIA,KAAKC,UAAUpB,QAAQ,GAAG,CAAC;AAE3E,MAAMsB,yBAAyBA,CAACC,QACrCV,iBAAiBW,OAAQJ,CAAAA,cAAcA,UAAUnB,MAAMsB,GAAG,CAAC;AAEtD,MAAME,wBAAwB,OACnCtB,MACAoB,QACwH;AACxH,MAAIG,cAAcvB;AAClB,MAAIwB,kBAAkBJ,IAAIK;AAC1B,MAAIC,kBAAkBN,IAAIO;AAC1B,QAAMC,UAAoB,CAAA;AAC1B,QAAMC,WAAoC,CAAA;AAE1C,aAAWZ,aAAaP,kBAAkB;AACxC,UAAMoB,eAA2C;AAAA,MAC/CL,UAAUD;AAAAA,MACVG,gBAAgBD;AAAAA,MAChBK,WAAWR,YAAYtB;AAAAA,MACvBb,OAAOmC;AAAAA,IAAAA;AAGT,QAAI,CAACN,UAAUnB,MAAMgC,YAAY,EAAG;AAEpC,QAAIP,YAAYtB,SAASgB,UAAUpB,UAAU;AAC3C,YAAM,IAAIK,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM8B,SAAS,MAAMf,UAAUlB,QAAQwB,aAAaO,YAAY;AAChEP,kBAAcS,OAAOhC;AACrB,QAAI,OAAOgC,OAAOP,aAAa,YAAYO,OAAOP,SAASpB,QAAQ;AACjEmB,wBAAkBQ,OAAOP,SAASpB,KAAAA;AAAAA,IACpC;AACA,QAAI,OAAO2B,OAAOvB,aAAa,YAAYuB,OAAOvB,SAASJ,QAAQ;AACjEqB,wBAAkBM,OAAOvB,SAASJ,KAAAA;AAAAA,IACpC;AACA,QAAI2B,OAAOH,YAAY,OAAOG,OAAOH,aAAa,UAAU;AAC1DlB,aAAOsB,OAAOJ,UAAUG,OAAOH,QAAQ;AAAA,IACzC;AACAD,YAAQM,KAAKjB,UAAUrB,EAAE;AAAA,EAC3B;AAEA,SAAO;AAAA,IACLI,MAAMuB;AAAAA,IACNE,UAAUD;AAAAA,IACVf,UAAUiB;AAAAA,IACVE;AAAAA,IACAC;AAAAA,EAAAA;AAEJ;ACzDA,MAAMM,wBAAwB,OAAOC,WAAiD,IAAIC,QAAQ,CAACC,SAASC,WAAW;AACrHH,SAAOI,KAAK,UAAUF,OAAO;AAC7BF,SAAOI,KAAK,SAASD,MAAM;AAC7B,CAAC;AAED,MAAME,gBAAgB,OAAOL,QAA+BM,UAAiC;AAC3F,QAAMC,KAAKP,OAAOQ,MAAMF,KAAK;AAC7B,MAAIC,GAAI;AACR,QAAM,IAAIN,QAAc,CAACC,SAASC,WAAW;AAC3C,UAAMM,UAAUA,MAAM;AACpBC,cAAAA;AACAR,cAAAA;AAAAA,IACF;AAEA,UAAMS,UAAUA,CAACC,UAAmB;AAClCF,cAAAA;AACAP,aAAOS,KAAK;AAAA,IACd;AAEA,UAAMF,UAAUA,MAAM;AACpBV,aAAOa,IAAI,SAASJ,OAAO;AAC3BT,aAAOa,IAAI,SAASF,OAAO;AAAA,IAC7B;AAEAX,WAAOc,GAAG,SAASL,OAAO;AAC1BT,WAAOc,GAAG,SAASH,OAAO;AAAA,EAC5B,CAAC;AACH;AAEA,MAAMI,oBAAoB,OAAOf,WAAmC;AAClE,MAAI,CAACA,OAAQ;AACb,MAAI,OAAQA,OAA+BgB,UAAU,YAAY;AAC/D,QAAI;AACF,YAAOhB,OAAiDgB,MAAAA;AACxD;AAAA,IACF,QAAQ;AAAA,IACN;AAAA,EAEJ;AACA,MAAI;AACF;AAAEhB,WAAoCiB,UAAAA;AAAAA,EACxC,QAAQ;AAAA,EACN;AAEJ;AAEO,MAAMC,iBAAkG,OAC7GC,UACAnC,QAC6C;AAC7C,QAAMoC,WAAWC,YAAYrC,GAAG;AAChC,MAAI,CAACoC,UAAU;AACbpC,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMY,WAAWC,OAAOzC,IAAI0C,IAAIC,QAAQH,YAAY,EAAE,EAAEvD,KAAAA;AACxD,MAAI,CAACuD,UAAU;AACbxC,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMgB,UAAUC,oBAAoB7C,KAAKoC,QAAQ;AACjD,QAAMU,WAAWC,YAAY/C,KAAKoC,UAAUQ,OAAO;AAEnD,QAAM,CAACI,eAAeC,WAAW,IAAI,MAAMhC,QAAQiC,IAAI,CACrDC,OAAOC,IAAI,mBAAmBN,QAAQ,GACtCK,OAAOC,IAAI,iBAAiBN,QAAQ,CAAmC,CACxE;AAED,MAAI,CAACF,QAAQS,IAAI,UAAU,iBAAiB,GAAG;AAC7CrD,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM0B,WAAW,MAAMN,cAAcO,QAAQ;AAAA,IAAEC,MAAM,CAAC;AAAA,MAAEC,KAAKjB;AAAAA,IAAAA,GAAYkB,4BAA4Bd,SAAS,MAAM,CAAC;AAAA,EAAA,CAAG,EAAEe,KAAAA;AAC1H,MAAI,CAACL,UAAU;AACbtD,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,MAAI0B,SAASf,WAAW,UAAUe,SAASM,QAAQ;AACjD,WAAO;AAAA,MAAErC,IAAI;AAAA,MAAMqC,QAAQN,SAASM;AAAAA,IAAAA;AAAAA,EACtC;AAEA,QAAMC,SAAS,MAAMb,cAAcc,iBACjC;AAAA,IAAEN,MAAM,CAAC;AAAA,MAAEC,KAAKjB;AAAAA,IAAAA,GAAY;AAAA,MAAED,QAAQ;AAAA,IAAA,GAAemB,4BAA4Bd,SAAS,QAAQ,CAAC;AAAA,EAAA,GACnG;AAAA,IAAEmB,MAAM;AAAA,MAAExB,QAAQ;AAAA,IAAA;AAAA,IAAgByB,QAAQ;AAAA,MAAEpC,OAAO;AAAA,IAAA;AAAA,EAAG,GACtD;AAAA,IAAEqC,gBAAgB;AAAA,EAAA,CACpB,EAAEN,KAAAA;AAEF,MAAI,CAACE,QAAQ;AACX7D,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMsC,oBAAoBlB,eAAeC,WAAW;AAEpD,QAAMkB,OAAO,MAAMC,sBAAsBhC,QAAQ;AACjD,QAAMiC,WAAWF,KAAKG;AACtB,MAAI,CAACD,UAAU;AACb,UAAMrB,cAAcuB,UAClB;AAAA,MAAEf,MAAM,CAAC;AAAA,QAAEC,KAAKjB;AAAAA,MAAAA,GAAYkB,4BAA4Bd,SAAS,QAAQ,CAAC;AAAA,IAAA,GAC1E;AAAA,MAAEmB,MAAM;AAAA,QAAExB,QAAQ;AAAA,QAASX,OAAO;AAAA,MAAA;AAAA,IAA4B,CAChE;AACA5B,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AACA,QAAM4C,aAAaC,cAAAA;AACnB,QAAMC,SAAS,IAAIC,aAAaN,UAAU;AAAA,IAAEG;AAAAA,EAAAA,CAAY;AAExD,QAAMI,eAAe,OAAOf,OAAOgB,WAAW,WAAWhB,OAAOgB,SAASC;AACzE,QAAMC,oBAAoBrF,2BAAAA;AAC1B,QAAMsF,4BAA4BnB,OAAOlD,aAAaoE;AACtD,QAAME,mBAAmBpB,OAAOxE,SAASJ,KAAAA,EAAOiG,YAAAA;AAChD,QAAMC,cAAcF,qBAAqB,mBAAmBpB,OAAOxD,SAASpB,OAAOiG,YAAAA,EAAcE,SAAS,MAAM;AAEhH,MAAIC,eAA6C;AACjD,MAAIC,gBAAgBzB,OAAOxD;AAC3B,MAAIkF,gBAAgB1B,OAAOxE;AAC3B,MAAImG,YAAY3B,OAAOlD;AACvB,MAAI8E,mBAA6B,CAAA;AACjC,MAAIC,gBAAyC;AAAA,IAC3ClD;AAAAA,IACAJ;AAAAA,IACA/C,UAAUwE,OAAOxE;AAAAA,IACjBsB,WAAWkD,OAAOlD;AAAAA,IAClB,GAAI,OAAOkD,OAAO8B,aAAa,YAAY;AAAA,MAAEA,UAAU9B,OAAO8B;AAAAA,IAAAA,IAAa,CAAA;AAAA,IAC3E,GAAI,OAAO9B,OAAO+B,iBAAiB,WAAW;AAAA,MAAEA,cAAc/B,OAAO+B;AAAAA,IAAAA,IAAiB,CAAA;AAAA,IACtF,GAAIhB,eAAe;AAAA,MAAEC,QAAQD;AAAAA,IAAAA,IAAiB,CAAA;AAAA,EAAC;AAGjD,MAAI;AACF,QAAI,CAACI,6BAA6BG,aAAa;AAC7C,YAAM,IAAIrG,MAAM,eAAe;AAAA,IACjC;AAEA,UAAM+G,SAAS5C,YAAY6C,KAAK;AAAA,MAAEtD;AAAAA,IAAAA,CAAU,EAAEuD,KAAK;AAAA,MAAEC,OAAO;AAAA,IAAA,CAAG,EAAEH,OAAAA;AAIjE,QAAII,gBAAgB;AACpB,UAAMC,SAAmB,CAAA;AACzB,QAAIC,gBAAgB;AAEpB,UAAMC,gBAA0B,CAAA;AAChC,UAAMC,aAAuB,CAAA;AAC7B,QAAIC,aAAa;AAEjB,QAAI;AACF,uBAAiBC,YAAYV,QAAQ;AACnC,YAAIU,SAASP,UAAUC,eAAe;AACpC,gBAAM,IAAInH,MAAM,gBAAgB;AAAA,QAClC;AAEA,cAAMwC,QAAQiF,SAAS3H;AAEvB,YAAIoG,2BAA2B;AAC7BkB,iBAAOpF,KAAKQ,KAAK;AACjB6E,2BAAiB7E,MAAMzC;AAAAA,QACzB,WAAW,CAACwG,cAAc;AACxBe,wBAActF,KAAKQ,KAAK;AAExB,cAAIgF,aAAavB,mBAAmB;AAClC,kBAAMyB,QAAQlF,MAAMmF,SAAS,GAAG3G,KAAK4G,IAAIpF,MAAMzC,QAAQkG,oBAAoBuB,UAAU,CAAC;AACtF,gBAAIE,MAAM3H,QAAQ;AAChBwH,yBAAWvF,KAAK0F,KAAK;AACrBF,4BAAcE,MAAM3H;AAAAA,YACtB;AAAA,UACF;AAEA,cAAIyH,cAAcvB,mBAAmB;AACnC,kBAAM/G,QAAQmB,OAAOwH,OAAON,YAAYC,UAAU;AAClD,kBAAMM,aAAa7G,uBAAuB;AAAA,cACxCM,UAAUwD,OAAOxD;AAAAA,cACjBE,gBAAgBsD,OAAOxE;AAAAA,cACvBsB,WAAWkD,OAAOlD;AAAAA,cAClB3C;AAAAA,YAAAA,CACD;AAED,gBAAI4I,WAAW/H,QAAQ;AACrB,oBAAM,IAAIC,MAAM8H,WAAWC,KAAMhH,CAAAA,cAAcA,UAAUrB,OAAO,cAAc,IAAI,kBAAkB,2BAA2B;AAAA,YACjI;AAEAkH,4BAAgB;AAAA,cACdlD;AAAAA,cACAJ;AAAAA,cACA/C,UAAUwE,OAAOxE;AAAAA,cACjBsB,WAAWkD,OAAOlD;AAAAA,cAClB,GAAI,OAAOkD,OAAO8B,aAAa,YAAY;AAAA,gBAAEA,UAAU9B,OAAO8B;AAAAA,cAAAA,IAAa,CAAA;AAAA,cAC3E,GAAI,OAAO9B,OAAO+B,iBAAiB,WAAW;AAAA,gBAAEA,cAAc/B,OAAO+B;AAAAA,cAAAA,IAAiB,CAAA;AAAA,cACtF,GAAIhB,eAAe;AAAA,gBAAEC,QAAQD;AAAAA,cAAAA,IAAiB,CAAA;AAAA,YAAC;AAEjDS,2BAAeX,OAAOoC,iBAAiBjD,OAAOxD,UAAU;AAAA,cACtDI,UAAUiF;AAAAA,YAAAA,CACX;AAED,uBAAWqB,WAAWX,eAAe;AACnC,oBAAM/E,cAAcgE,cAAc0B,OAAO;AAAA,YAC3C;AACAX,0BAAcvH,SAAS;AAAA,UACzB;AAAA,QACF,OAAO;AACL,gBAAMwC,cAAcgE,cAAc/D,KAAK;AAAA,QACzC;AAEA2E,yBAAiB;AAAA,MACnB;AAAA,IACF,UAAA;AACE,UAAI;AACF,cAAMJ,OAAOmB,MAAAA;AAAAA,MACf,QAAQ;AAAA,MACN;AAAA,IAEJ;AAEA,QAAIf,kBAAkBpC,OAAOoD,aAAa;AACxC,YAAM,IAAInI,MAAM,gBAAgB;AAAA,IAClC;AAEA,QAAIkG,2BAA2B;AAC7B,YAAMkC,YAAY/H,OAAOwH,OAAOT,QAAQC,aAAa;AACrD,YAAM;AAAA,QACJvH,MAAMuI;AAAAA,QACN9G,UAAU+G;AAAAA,QACV/H,UAAUgI;AAAAA,QACV7G;AAAAA,QACAC,UAAU6G;AAAAA,MAAAA,IACR,MAAMpH,sBAAsBgH,WAAW;AAAA,QACzC7G,UAAUwD,OAAOxD;AAAAA,QACjBE,gBAAgBsD,OAAOxE;AAAAA,MAAAA,CACxB;AAEDiG,sBAAgB8B;AAChB7B,sBAAgB8B;AAChB7B,kBAAY2B,UAAUtI;AACtB4G,yBAAmBjF;AACnBkF,sBAAgB;AAAA,QACdlD;AAAAA,QACAJ;AAAAA,QACA/C,UAAUgI;AAAAA,QACV1G,WAAWwG,UAAUtI;AAAAA,QACrB,GAAI2B,QAAQ3B,SAAS;AAAA,UAAE+H,YAAYpG;AAAAA,UAAS+G,iBAAiB1D,OAAOlD;AAAAA,QAAAA,IAAc,CAAA;AAAA,QAClF,GAAG2G;AAAAA,QACH,GAAI,OAAOzD,OAAO8B,aAAa,YAAY;AAAA,UAAEA,UAAU9B,OAAO8B;AAAAA,QAAAA,IAAa,CAAA;AAAA,QAC3E,GAAI,OAAO9B,OAAO+B,iBAAiB,WAAW;AAAA,UAAEA,cAAc/B,OAAO+B;AAAAA,QAAAA,IAAiB,CAAA;AAAA,QACtF,GAAIhB,eAAe;AAAA,UAAEC,QAAQD;AAAAA,QAAAA,IAAiB,CAAA;AAAA,MAAC;AAEjDS,qBAAeX,OAAOoC,iBAAiBxB,eAAe;AAAA,QACpD7E,UAAUiF;AAAAA,MAAAA,CACX;AAED,YAAM8B,WAAWzG,sBAAsBsE,YAAY;AACnDA,mBAAaoC,IAAIN,SAAS;AAC1B,YAAMK;AAAAA,IACR,OAAO;AACL,UAAI,CAACnC,cAAc;AACjB,cAAMrH,QAAQmB,OAAOwH,OAAON,YAAYC,UAAU;AAClD,cAAMM,aAAa7G,uBAAuB;AAAA,UACxCM,UAAUwD,OAAOxD;AAAAA,UACjBE,gBAAgBsD,OAAOxE;AAAAA,UACvBsB,WAAWkD,OAAOlD;AAAAA,UAClB3C;AAAAA,QAAAA,CACD;AAED,YAAI4I,WAAW/H,QAAQ;AACrB,gBAAM,IAAIC,MAAM8H,WAAWC,KAAMhH,CAAAA,cAAcA,UAAUrB,OAAO,cAAc,IAAI,kBAAkB,2BAA2B;AAAA,QACjI;AAEAkH,wBAAgB;AAAA,UACdlD;AAAAA,UACAJ;AAAAA,UACA/C,UAAUwE,OAAOxE;AAAAA,UACjBsB,WAAWkD,OAAOlD;AAAAA,UAClB,GAAI,OAAOkD,OAAO8B,aAAa,YAAY;AAAA,YAAEA,UAAU9B,OAAO8B;AAAAA,UAAAA,IAAa,CAAA;AAAA,UAC3E,GAAI,OAAO9B,OAAO+B,iBAAiB,WAAW;AAAA,YAAEA,cAAc/B,OAAO+B;AAAAA,UAAAA,IAAiB,CAAA;AAAA,UACtF,GAAIhB,eAAe;AAAA,YAAEC,QAAQD;AAAAA,UAAAA,IAAiB,CAAA;AAAA,QAAC;AAEjDS,uBAAeX,OAAOoC,iBAAiBjD,OAAOxD,UAAU;AAAA,UACtDI,UAAUiF;AAAAA,QAAAA,CACX;AAED,mBAAWqB,WAAWX,eAAe;AACnC,gBAAM/E,cAAcgE,cAAc0B,OAAO;AAAA,QAC3C;AACAX,sBAAcvH,SAAS;AAAA,MACzB;AAEA,YAAM2I,WAAWzG,sBAAsBsE,YAAY;AACnDA,mBAAaoC,IAAAA;AACb,YAAMD;AAAAA,IACR;AAEA,UAAM5D,SAASnB,OAAQ4C,aAA6C7G,MAAM,EAAE;AAC5E,QAAI,CAACoF,QAAQ;AACX,YAAM,IAAI9E,MAAM,iBAAiB;AAAA,IACnC;AAEA,UAAMkE,cAAcuB,UAClB;AAAA,MAAEf,MAAM,CAAC;AAAA,QAAEC,KAAKjB;AAAAA,MAAAA,GAAYkB,4BAA4Bd,SAAS,QAAQ,CAAC;AAAA,IAAA,GAC1E;AAAA,MAAEmB,MAAM;AAAA,QAAExB,QAAQ;AAAA,QAAQqB;AAAAA,QAAQvD,UAAUiF;AAAAA,QAAejG,UAAUkG;AAAAA,QAAe5E,WAAW6E;AAAAA,MAAAA;AAAAA,MAAaxB,QAAQ;AAAA,QAAEpC,OAAO;AAAA,MAAA;AAAA,IAAG,CAClI;AAEA,UAAM8F,4BAA4B;AAAA,MAChCtF;AAAAA,MACAI;AAAAA,MACAoB;AAAAA,MACAvD,UAAUiF;AAAAA,MACVjG,UAAUkG;AAAAA,MACVhF,gBAAgBsD,OAAOxE;AAAAA,MACvBsB,WAAW6E;AAAAA,MACX,GAAI,OAAO3B,OAAO8B,aAAa,YAAY;AAAA,QAAEA,UAAU9B,OAAO8B;AAAAA,MAAAA,IAAa,CAAA;AAAA,MAC3E,GAAI,OAAO9B,OAAO+B,iBAAiB,WAAW;AAAA,QAAEA,cAAc/B,OAAO+B;AAAAA,MAAAA,IAAiB,CAAA;AAAA,MACtF,GAAIhB,eAAe;AAAA,QAAEC,QAAQD;AAAAA,MAAAA,IAAiB,CAAA;AAAA,MAC9Ca;AAAAA,MACAhF,UAAUiF;AAAAA,IAAAA,CACX,EAAEiC,MAAO/F,CAAAA,UAAU;AAClBgG,cAAQhG,MAAM,wCAAwC;AAAA,QACpDQ;AAAAA,QACAI;AAAAA,QACAoB;AAAAA,QACAhC;AAAAA,MAAAA,CACD;AAAA,IACH,CAAC;AAED,QAAI;AACF,YAAMqB,YAAY4E,WAAW;AAAA,QAAErF;AAAAA,MAAAA,CAAU;AAAA,IAC3C,QAAQ;AAAA,IACN;AAGF,WAAO;AAAA,MAAEjB,IAAI;AAAA,MAAMqC;AAAAA,IAAAA;AAAAA,EACrB,SAAShC,OAAO;AACd,UAAMkG,UAAUlG,iBAAiB9C,QAAQ8C,MAAMkG,UAAUrF,OAAOb,KAAK;AAErE,UAAMG,kBAAkBsD,YAAY;AAEpC,QAAIyC,YAAY,kBAAkB;AAChC,YAAM9E,cAAcuB,UAClB;AAAA,QAAEf,MAAM,CAAC;AAAA,UAAEC,KAAKjB;AAAAA,QAAAA,GAAYkB,4BAA4Bd,SAAS,QAAQ,CAAC;AAAA,MAAA,GAC1E;AAAA,QAAEmB,MAAM;AAAA,UAAExB,QAAQ;AAAA,QAAA;AAAA,MAAY,CAChC;AACAvC,UAAIsC,IAAIC,OAAO,GAAG;AAClB,aAAO;AAAA,QAAEhB,IAAI;AAAA,QAAOK,OAAO;AAAA,MAAA;AAAA,IAC7B;AAEA,QAAIkG,YAAY,iBAAiB;AAC/B,YAAM9E,cAAcuB,UAClB;AAAA,QAAEf,MAAM,CAAC;AAAA,UAAEC,KAAKjB;AAAAA,QAAAA,GAAYkB,4BAA4Bd,SAAS,QAAQ,CAAC;AAAA,MAAA,GAC1E;AAAA,QAAEmB,MAAM;AAAA,UAAExB,QAAQ;AAAA,UAASX,OAAOkG;AAAAA,QAAAA;AAAAA,MAAQ,CAC5C;AACA9H,UAAIsC,IAAIC,OAAO,GAAG;AAClB,aAAO;AAAA,QAAEhB,IAAI;AAAA,QAAOK,OAAOkG;AAAAA,MAAAA;AAAAA,IAC7B;AAEA,QAAIA,YAAY,oBAAoBA,YAAY,6BAA6B;AAC3E,YAAM9E,cAAcuB,UAClB;AAAA,QAAEf,MAAM,CAAC;AAAA,UAAEC,KAAKjB;AAAAA,QAAAA,GAAYkB,4BAA4Bd,SAAS,QAAQ,CAAC;AAAA,MAAA,GAC1E;AAAA,QAAEmB,MAAM;AAAA,UAAExB,QAAQ;AAAA,UAASX,OAAOkG;AAAAA,QAAAA;AAAAA,MAAQ,CAC5C;AACA9H,UAAIsC,IAAIC,OAAO,GAAG;AAClB,aAAO;AAAA,QAAEhB,IAAI;AAAA,QAAOK,OAAOkG;AAAAA,MAAAA;AAAAA,IAC7B;AAEA,QAAIA,QAAQjK,WAAW,yBAAyB,GAAG;AACjD,YAAMmF,cAAcuB,UAClB;AAAA,QAAEf,MAAM,CAAC;AAAA,UAAEC,KAAKjB;AAAAA,QAAAA,GAAYkB,4BAA4Bd,SAAS,QAAQ,CAAC;AAAA,MAAA,GAC1E;AAAA,QAAEmB,MAAM;AAAA,UAAExB,QAAQ;AAAA,UAASX,OAAOkG;AAAAA,QAAAA;AAAAA,MAAQ,CAC5C;AACA9H,UAAIsC,IAAIC,OAAO,GAAG;AAClB,aAAO;AAAA,QAAEhB,IAAI;AAAA,QAAOK,OAAOkG;AAAAA,MAAAA;AAAAA,IAC7B;AAEA,QAAIA,YAAY,iBAAiBA,YAAY,uBAAuB;AAClE,YAAM9E,cAAcuB,UAClB;AAAA,QAAEf,MAAM,CAAC;AAAA,UAAEC,KAAKjB;AAAAA,QAAAA,GAAYkB,4BAA4Bd,SAAS,QAAQ,CAAC;AAAA,MAAA,GAC1E;AAAA,QAAEmB,MAAM;AAAA,UAAExB,QAAQ;AAAA,UAASX,OAAOkG;AAAAA,QAAAA;AAAAA,MAAQ,CAC5C;AACA9H,UAAIsC,IAAIC,OAAO,GAAG;AAClB,aAAO;AAAA,QAAEhB,IAAI;AAAA,QAAOK,OAAOkG;AAAAA,MAAAA;AAAAA,IAC7B;AAEA,UAAM9E,cAAcuB,UAClB;AAAA,MAAEf,MAAM,CAAC;AAAA,QAAEC,KAAKjB;AAAAA,MAAAA,GAAYkB,4BAA4Bd,SAAS,QAAQ,CAAC;AAAA,IAAA,GAC1E;AAAA,MAAEmB,MAAM;AAAA,QAAExB,QAAQ;AAAA,QAASX,OAAOkG;AAAAA,MAAAA;AAAAA,IAAQ,CAC5C;AAEA9H,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AACF;AC3YO,MAAMmG,YAA2F,OACtG5F,UACAnC,QAC2C;AAC3C,QAAMoC,WAAWC,YAAYrC,GAAG;AAChC,MAAI,CAACoC,UAAU;AACbpC,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMY,WAAWC,OAAOzC,IAAI0C,IAAIC,QAAQH,YAAY,EAAE,EAAEvD,KAAAA;AACxD,MAAI,CAACuD,UAAU;AACbxC,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMgB,UAAUC,oBAAoB7C,KAAKoC,QAAQ;AACjD,QAAMU,WAAWC,YAAY/C,KAAKoC,UAAUQ,OAAO;AAEnD,QAAM,CAACI,eAAeC,WAAW,IAAI,MAAMhC,QAAQiC,IAAI,CACrDC,OAAOC,IAAI,mBAAmBN,QAAQ,GACtCK,OAAOC,IAAI,iBAAiBN,QAAQ,CAAmC,CACxE;AAED,MAAI,CAACF,QAAQS,IAAI,QAAQ,iBAAiB,GAAG;AAC3CrD,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMoG,UAAU,MAAMhF,cAAcO,QAAQ;AAAA,IAAEC,MAAM,CAAC;AAAA,MAAEC,KAAKjB;AAAAA,IAAAA,GAAYkB,4BAA4Bd,SAAS,MAAM,CAAC;AAAA,EAAA,CAAG,EAAEe,KAAAA;AACzH,MAAI,CAACqE,SAAS;AACZhI,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMqG,eAAe,MAAMhF,YAAY6C,KACrC;AAAA,IAAEtD;AAAAA,EAAAA,GACF;AAAA,IAAEwD,OAAO;AAAA,IAAGvC,KAAK;AAAA,EAAA,CACnB,EAAEsC,KAAK;AAAA,IAAEC,OAAO;AAAA,EAAA,CAAG,EAAErC,KAAAA;AAErB,QAAMuE,WAAYD,aACfE,IAAKC,SAAS,OAAOA,IAAIpC,UAAU,WAAWoC,IAAIpC,QAAQ,EAAG,EAC7D/F,OAAQoI,CAAAA,MAAMC,OAAOC,UAAUF,CAAC,KAAKA,KAAK,CAAC;AAE9C,SAAO;AAAA,IACL9G,IAAI;AAAA,IACJgB,QAAQyF,QAAQzF;AAAAA,IAChBiG,WAAWR,QAAQQ;AAAAA,IACnBvB,aAAae,QAAQf;AAAAA,IACrBiB;AAAAA,IACA,GAAIF,QAAQpE,SAAS;AAAA,MAAEA,QAAQoE,QAAQpE;AAAAA,IAAAA,IAAW,CAAA;AAAA,EAAC;AAEvD;ACjEO,MAAM6E,YAAY;AAClB,MAAMC,aAAa;AACnB,MAAMC,cAAc;AACpB,MAAMC,gBAAgB;AAEtB,MAAMC,oBAAoBC,OAAS;AAAA,EACxCzI,UAAUyI,OAAEC,EAASrC,IAAI,CAAC;AAAA,EAC1BrH,UAAUyJ,OAAEC,EAASrC,IAAI,CAAC;AAAA,EAC1Bf,UAAUmD,QAAEE,EAAUC,SAAAA;AAAAA,EACtBtI,WAAWmI,OAAEI,EAASC,IAAAA,EAAMzC,IAAI,CAAC;AACnC,CAAC;AAIiCoC,OAAS;AAAA,EACzCvH,IAAIuH,QAAEE;AAAAA,EACNpH,OAAOkH,OAAEC,EAASE,SAAAA;AAAAA,EAClBzG,UAAUsG,OAAEC,EAASE,SAAAA;AAAAA,EACrBG,WAAWN,OAAEC,EAASE,SAAAA;AAAAA,EACtBT,WAAWM,OAAEI,EAASC,IAAAA,EAAMF,SAAAA;AAAAA,EAC5BhC,aAAa6B,OAAEI,EAASC,IAAAA,EAAMF,SAAAA;AAChC,CAAC;AAImCH,OAAS;AAAA,EAC3CvH,IAAIuH,QAAEE;AAAAA,EACNpH,OAAOkH,OAAEC,EAASE,SAAAA;AAAAA,EAClB1G,QAAQuG,MAAO,CAAC,aAAa,cAAc,QAAQ,OAAO,CAAC,EAAEG,SAAAA;AAAAA,EAC7DT,WAAWM,OAAEI,EAASC,IAAAA,EAAMF,SAAAA;AAAAA,EAC5BhC,aAAa6B,OAAEI,EAASC,IAAAA,EAAMF,SAAAA;AAAAA,EAC9Bf,UAAUY,MAAQA,SAAWK,IAAAA,EAAMzC,IAAI,CAAC,CAAC,EAAEuC,SAAAA;AAAAA,EAC3CrF,QAAQkF,OAAEC,EAASE,SAAAA;AACrB,CAAC;AAIqCH,OAAS;AAAA,EAC7CvH,IAAIuH,QAAEE;AAAAA,EACNpH,OAAOkH,OAAEC,EAASE,SAAAA;AAAAA,EAClBrF,QAAQkF,OAAEC,EAASE,SAAAA;AACrB,CAAC;ACrBM,MAAMI,aAA+F,OAC1GC,SACAtJ,QACyC;AACzC,QAAMoC,WAAWC,YAAYrC,GAAG;AAChC,MAAI,CAACoC,UAAU;AACbpC,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMiD,SAAS0E,UAAUvJ,GAAG;AAE5B,QAAMwJ,SAASC,kBAA0BC,UAAUJ,WAAW,CAAA,CAAE;AAChE,MAAI,CAACE,OAAOG,SAAS;AACnB3J,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM4G,YAAYoB,kBAAAA;AAClB,QAAM;AAAA,IAAEvJ;AAAAA,IAAUhB;AAAAA,IAAUsB;AAAAA,IAAWgF;AAAAA,EAAAA,IAAa6D,OAAO5K;AAC3D,QAAMqI,cAAcnH,KAAK+J,KAAKlJ,YAAY6H,SAAS;AAEnD,QAAM5F,UAAUC,oBAAoB7C,KAAKoC,QAAQ;AACjD,QAAMU,WAAWC,YAAY/C,KAAKoC,UAAUQ,OAAO;AAEnD,QAAM,CAACI,eAAeC,WAAW,IAAI,MAAMhC,QAAQiC,IAAI,CACrDC,OAAOC,IAAI,mBAAmBN,QAAQ,GACtCK,OAAOC,IAAI,iBAAiBN,QAAQ,CAAmC,CACxE;AAED,QAAMoB,oBAAoBlB,eAAeC,WAAW;AAEpD,QAAMT,WAAW,IAAIsH,SAAAA,EAAW7L,SAAAA;AAChC,QAAM8L,MAAMC,KAAKD,IAAAA;AACjB,QAAME,YAAY,IAAID,KAAKD,MAAMG,iBAAiB;AAElD,QAAMd,YAAYvE,SAAS,OAAOsF,YAAY,EAAE,EAAElM,SAAS,WAAW;AACtE,QAAM2H,eAAewD,YAAYgB,iBAAiBjL,OAAOC,KAAKgK,SAAS,CAAC,IAAItE;AAE5E,QAAM9B,cAAcqH,OAAO;AAAA,IACzB5G,KAAKjB;AAAAA,IACL,GAAIqC,SAAS;AAAA,MAAEA;AAAAA,IAAAA,IAAW,CAAA;AAAA,IAC1B,GAAIe,eAAe;AAAA,MAAEA;AAAAA,IAAAA,IAAiB,CAAA;AAAA,IACtCvF;AAAAA,IACAhB;AAAAA,IACA,GAAI,OAAOsG,aAAa,YAAY;AAAA,MAAEA;AAAAA,IAAAA,IAAa,CAAA;AAAA,IACnDhF;AAAAA,IACA6H;AAAAA,IACAvB;AAAAA,IACA1E,QAAQ;AAAA,IACR+H,WAAW,IAAIN,KAAKD,GAAG;AAAA,IACvBE;AAAAA,EAAAA,CACD;AAED,SAAO;AAAA,IACL1I,IAAI;AAAA,IACJiB;AAAAA,IACAgG;AAAAA,IACAvB;AAAAA,IACA,GAAImC,YAAY;AAAA,MAAEA;AAAAA,IAAAA,IAAc,CAAA;AAAA,EAAC;AAErC;AC5DO,MAAMmB,cAAqE,OAChFjB,SACAtJ,QACkC;AAClC,QAAMoC,WAAWC,YAAYrC,GAAG;AAChC,MAAI,CAACoC,UAAU;AACbpC,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMY,WAAWC,OAAOzC,IAAI0C,IAAIC,QAAQH,YAAY,EAAE,EAAEvD,KAAAA;AACxD,QAAMuL,WAAW/H,OAAOzC,IAAI0C,IAAIC,QAAQqD,SAAS,EAAE,EAAE/G,KAAAA;AACrD,QAAM+G,QAAQsC,OAAOkC,QAAQ;AAE7B,MAAI,CAAChI,YAAY,CAAC8F,OAAOC,UAAUvC,KAAK,KAAKA,QAAQ,GAAG;AACtDhG,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMgB,UAAUC,oBAAoB7C,KAAKoC,QAAQ;AACjD,QAAMU,WAAWC,YAAY/C,KAAKoC,UAAUQ,OAAO;AAEnD,QAAM,CAACI,eAAeC,WAAW,IAAI,MAAMhC,QAAQiC,IAAI,CACrDC,OAAOC,IAAI,mBAAmBN,QAAQ,GACtCK,OAAOC,IAAI,iBAAiBN,QAAQ,CAAmC,CACxE;AAED,MAAI,CAACF,QAAQS,IAAI,UAAU,iBAAiB,GAAG;AAC7CrD,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMoG,UAAU,MAAMhF,cAAcO,QAAQ;AAAA,IAAEC,MAAM,CAAC;AAAA,MAAEC,KAAKjB;AAAAA,IAAAA,GAAYkB,4BAA4Bd,SAAS,QAAQ,CAAC;AAAA,EAAA,CAAG,EAAEe,KAAAA;AAC3H,MAAI,CAACqE,SAAS;AACZhI,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,MAAIoG,QAAQzF,WAAW,aAAa;AAClCvC,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,MAAIoE,SAASgC,QAAQf,aAAa;AAChCjH,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMhD,OAAO6L,gBAAgBnB,OAAO;AACpC,MAAI,CAAC1K,MAAM;AACToB,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM8I,eAAe1E,UAAUgC,QAAQf,cAAc,IACjDe,QAAQrH,YAAYqH,QAAQQ,aAAaR,QAAQf,cAAc,KAC/De,QAAQQ;AAEZ,MAAI5J,KAAKC,SAAS6L,cAAc;AAC9B1K,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,MAAIhD,KAAKC,WAAW6L,cAAc;AAChC1K,QAAIsC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,IAAI;AAAA,MAAOK,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM+I,iBAAiB3K,IAAI0C,IAAIU,IAAI,gBAAgB;AACnD,QAAMwH,SAASD,iBAAiBP,iBAAiBxL,IAAI,IAAIkG;AAEzD,MAAI6F,gBAAgB;AAClB,UAAME,iBAAiBC,mBAAmBH,cAAc;AACxD,QAAIC,WAAWC,gBAAgB;AAC7B7K,UAAIsC,IAAIC,OAAO,GAAG;AAClB,aAAO;AAAA,QAAEhB,IAAI;AAAA,QAAOK,OAAO;AAAA,MAAA;AAAA,IAC7B;AAAA,EACF;AAEA,QAAMsC,oBAAoBlB,eAAeC,WAAW;AAEpD,QAAMA,YAAYsB,UAChB;AAAA,IAAE/B;AAAAA,IAAUwD;AAAAA,EAAAA,GACZ;AAAA,IACEjC,MAAM;AAAA,MACJvB;AAAAA,MACAwD;AAAAA,MACApH;AAAAA,MACAmM,MAAMnM,KAAKC;AAAAA,MACX+L;AAAAA,MACAX,WAAWjC,QAAQiC;AAAAA,IAAAA;AAAAA,IAErBe,cAAc;AAAA,MACZV,+BAAeN,KAAAA;AAAAA,IAAK;AAAA,EACtB,GAEF;AAAA,IAAEiB,QAAQ;AAAA,EAAA,CACZ;AAEAjL,MAAIsC,IAAIC,OAAO,GAAG;AAClB,SAAO;AAAA,IAAEhB,IAAI;AAAA,EAAA;AACf;AC7HO,MAAM2J,gBAAgBA,CAAC;AAAA,EAC5BC;AAAAA,EACAC;AAIF,MAAM;AACJ,SAAO,CAAC1I,KAAUJ,KAAU+I,SAAc;AACxC,UAAMC,cAAc,OAAO5I,KAAK6I,UAAU,cAAc,MAAM,WAC1D9I,OAAOC,IAAI6I,QAAQ,cAAc,CAAC,IAClC;AAEJ,QAAI,CAACD,YAAYE,SAAS,0BAA0B,GAAG;AACrDH,WAAAA;AACA;AAAA,IACF;AAEA,QAAII,QAAQ;AACZ,UAAMvF,SAAmB,CAAA;AACzB,QAAIwF,OAAO;AACX,QAAIC,SAAS;AACb,QAAIC,kBAAwD;AAE5D,UAAMC,qBAAqB,OAAOT,4BAA4B,YAAYA,0BAA0B,IAChGA,0BACA;AAEJ,UAAM1J,UAAUA,MAAM;AACpBgB,UAAIb,IAAI,QAAQiK,MAAM;AACtBpJ,UAAIb,IAAI,OAAOkK,KAAK;AACpBrJ,UAAIb,IAAI,SAASF,OAAO;AACxBe,UAAIb,IAAI,WAAWmK,SAAS;AAC5B,UAAIJ,iBAAiB;AACnBK,qBAAaL,eAAe;AAC5BA,0BAAkB;AAAA,MACpB;AAAA,IACF;AAEA,UAAMM,SAASA,CAACtK,UAAoB;AAClC,UAAI8J,KAAM;AACVA,aAAO;AAEPhK,cAAAA;AAEA,UAAIE,OAAO;AACTyJ,aAAKzJ,KAAK;AACV;AAAA,MACF;AAEAc,UAAIyJ,OAAOhN,OAAOwH,OAAOT,QAAQuF,KAAK;AACtCJ,WAAAA;AAAAA,IACF;AAEA,UAAMS,SAASA,CAACxK,UAAe;AAC7B,UAAIoK,KAAM;AACV,YAAMU,SAASjN,OAAOkN,SAAS/K,KAAK,IAAIA,QAAQnC,OAAOC,KAAKkC,KAAK;AACjEmK,eAASW,OAAOvN;AAEhB,UAAI4M,QAAQN,YAAY;AACtBO,eAAO;AACPhK,gBAAAA;AACAgB,YAAIT,QAAAA;AACJK,YAAIC,OAAO,GAAG,EAAE+J,KAAK;AAAA,UAAE/K,IAAI;AAAA,UAAOK,OAAO;AAAA,QAAA,CAAmB;AAC5D;AAAA,MACF;AAEAsE,aAAOpF,KAAKsL,MAAM;AAElB,UAAI,CAACP,mBAAoB;AAEzB,YAAM9B,MAAMC,KAAKD,IAAAA;AACjB,YAAMwC,YAAYC,aAAa9J,GAAG;AAClC,YAAM+J,QAAQC,mBAAmBH,WAAWV,oBAAoB9B,GAAG;AACnE,YAAM4C,SAASC,kBAAkBH,OAAOL,OAAOvN,QAAQgN,oBAAoB9B,GAAG;AAE9E,UAAI4C,SAAS,KAAK,CAAChB,QAAQ;AACzBA,iBAAS;AACTjJ,YAAImK,MAAAA;AACJjB,0BAAkBkB,WAAW,MAAM;AACjClB,4BAAkB;AAClBD,mBAAS;AACT,cAAID,KAAM;AACV,cAAI;AACFhJ,gBAAIqK,OAAAA;AAAAA,UACN,QAAQ;AAAA,UACN;AAAA,QAEJ,GAAGJ,MAAM;AAAA,MACX;AAAA,IACF;AAEA,UAAMZ,QAAQA,MAAMG,OAAAA;AACpB,UAAMvK,UAAUA,CAACqL,QAAiBd,OAAOc,GAAG;AAC5C,UAAMhB,YAAYA,MAAME,OAAO,IAAIpN,MAAM,iBAAiB,CAAC;AAE3D4D,QAAIZ,GAAG,QAAQgK,MAAM;AACrBpJ,QAAIZ,GAAG,OAAOiK,KAAK;AACnBrJ,QAAIZ,GAAG,SAASH,OAAO;AACvBe,QAAIZ,GAAG,WAAWkK,SAAS;AAAA,EAC7B;AACF;AAQA,MAAMiB,oBAAoB;AAC1B,MAAMC,kBAAkB,KAAK,KAAK;AAElC,MAAMC,uCAAuBC,IAAAA;AAC7B,IAAIC,gBAAgB;AAEpB,MAAMb,eAAeA,CAAC9J,QAAqB;AACzC,QAAM4K,cAAc,OAAO5K,KAAK6K,aAAa,WAAW7K,IAAI6K,WAAW;AACvE,MAAID,YAAYrO,KAAAA,EAAQ,QAAOqO,YAAYrO,KAAAA;AAC3C,QAAMuO,QAAQ,OAAO9K,KAAK+K,OAAO,WAAW/K,IAAI+K,KAAK;AACrD,SAAOD,MAAMvO,UAAU;AACzB;AAEA,MAAMyO,qBAAqBA,CAAC3D,QAAgB;AAC1C,MAAIA,MAAMsD,gBAAgB,IAAQ;AAClCA,kBAAgBtD;AAEhB,MAAIoD,iBAAiBpC,OAAO,IAAM;AAElC,aAAW,CAAC4C,KAAKlB,KAAK,KAAKU,kBAAkB;AAC3C,QAAIpD,MAAM0C,MAAMmB,aAAaV,iBAAiB;AAC5CC,uBAAiBU,OAAOF,GAAG;AAAA,IAC7B;AAAA,EACF;AACF;AAEA,MAAMjB,qBAAqBA,CAACiB,KAAa9B,oBAA4B9B,QAAiC;AACpG2D,qBAAmB3D,GAAG;AAEtB,QAAM+D,WAAWjC,qBAAqBoB;AACtC,QAAM3J,WAAW6J,iBAAiB/J,IAAIuK,GAAG;AACzC,MAAIrK,UAAU;AACZA,aAASsK,aAAa7D;AACtBzG,aAASyK,SAASjO,KAAK4G,IAAIoH,UAAUxK,SAASyK,MAAM;AACpD,WAAOzK;AAAAA,EACT;AAEA,QAAM+H,OAAwB;AAAA,IAC5B0C,QAAQD;AAAAA,IACRE,cAAcjE;AAAAA,IACd6D,YAAY7D;AAAAA,EAAAA;AAEdoD,mBAAiBc,IAAIN,KAAKtC,IAAI;AAC9B,SAAOA;AACT;AAEA,MAAMuB,oBAAoBA,CACxBH,OACAyB,OACArC,oBACA9B,QACW;AACX,QAAM+D,WAAWjC,qBAAqBoB;AACtC,QAAMkB,YAAYrO,KAAKF,IAAI,GAAGmK,MAAM0C,MAAMuB,YAAY;AAEtD,MAAIG,YAAY,GAAG;AACjB1B,UAAMsB,SAASjO,KAAK4G,IAAIoH,UAAUrB,MAAMsB,SAAUI,YAAYtC,qBAAsB,GAAI;AACxFY,UAAMuB,eAAejE;AAAAA,EACvB;AAEA0C,QAAMsB,UAAUG;AAEhB,MAAIzB,MAAMsB,UAAU,EAAG,QAAO;AAC9B,SAAOjO,KAAK+J,KAAM,CAAC4C,MAAMsB,SAASlC,qBAAsB,GAAI;AAC9D;AChKA,MAAA,UAAe,CAACuC,QAA0B;AACxC,QAAMC,iBAAiBzE,kBAAAA;AACvBwE,MAAIE,IACF7E,WACAyB,cAAc;AAAA,IACZC,YAAYoD,qBAAqBF,cAAc;AAAA,IAC/CjD,yBAAyBoD,iCAAAA;AAAAA,EAAiC,CAC3D,CACH;AAEAJ,MAAIK,KAAKhF,WAAmBJ,UAAU;AACtC+E,MAAIM,IAAIjF,YAAoBc,WAAW;AACvC6D,MAAIhL,IAAIqG,aAAqB1B,SAAS;AACtCqG,MAAIK,KAAKhF,eAAuBvH,cAAc;AAChD;"}

package/dist/{handler-Cn5I8j8k.js → handler-F0gFTzvh.js}

@@ -1,6 +1,6 @@
 import { getTenantFilesystemDb } from "@rpcbase/db";
 import { ObjectId, GridFSBucket } from "mongodb";
-import { g as getTenantId, d as getBucketName, i as getUserId, p as getUploadKeyHash } from "./uploads-BAxHzidK.js";
+import { a as getTenantId, g as getBucketName, f as getUserId, m as getUploadKeyHash } from "./shared-CJrm9Wjp.js";
 const resolveHeaderString$1 = (value) => {
   if (typeof value !== "string") return null;
   const normalized = value.trim();
@@ -272,4 +272,4 @@ const handler = (api) => {
 export {
   handler as default
 };
-//# sourceMappingURL=handler-Cn5I8j8k.js.map
+//# sourceMappingURL=handler-F0gFTzvh.js.map

package/dist/{handler-Cn5I8j8k.js.map → handler-F0gFTzvh.js.map}

@@ -1 +1 @@
-{"version":3,"file":"handler-Cn5I8j8k.js","sources":["../src/uploads/api/files/handlers/deleteFile.ts","../src/uploads/api/files/handlers/getFile.ts","../src/uploads/api/files/index.ts","../src/uploads/api/files/handler.ts"],"sourcesContent":["import { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb } from \"@rpcbase/db\"\nimport { GridFSBucket, ObjectId } from \"mongodb\"\n\nimport { getBucketName, getTenantId, getUploadKeyHash, getUserId, type SessionUser } from \"../../file-uploads/shared\"\n\n\ntype DeleteResponsePayload = {\n  ok: boolean\n  error?: string\n}\n\nconst resolveHeaderString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst isFileNotFoundError = (error: unknown): boolean => {\n  const message = error instanceof Error ? error.message : String(error)\n  return message.includes(\"FileNotFound\")\n}\n\nconst deleteGridFsFile = async (bucket: GridFSBucket, fileId: ObjectId): Promise<void> => {\n  try {\n    await bucket.delete(fileId)\n  } catch (error) {\n    if (!isFileNotFoundError(error)) throw error\n  }\n}\n\nexport const deleteFile: ApiHandler<Record<string, never>, DeleteResponsePayload, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<DeleteResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const fileIdRaw = String(ctx.req.params?.fileId ?? \"\").trim()\n  let fileObjectId: ObjectId\n  try {\n    fileObjectId = new ObjectId(fileIdRaw)\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_file_id\" }\n  }\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    ctx.res.status(500)\n    return { ok: false, error: \"filesystem_db_unavailable\" }\n  }\n\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n\n  const userId = getUserId(ctx)\n  const uploadKeyHash = getUploadKeyHash(ctx)\n  if (!userId && !uploadKeyHash) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray()\n  if (!file) {\n    ctx.res.status(204)\n    return { ok: true }\n  }\n\n  const metadataUserId = resolveHeaderString((file as any)?.metadata?.userId)\n  const ownerKeyHash = resolveHeaderString((file as any)?.metadata?.ownerKeyHash)\n\n  const authorizedByUser = Boolean(userId && metadataUserId && userId === metadataUserId)\n  const authorizedByKey = Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)\n\n  if (!authorizedByUser && !authorizedByKey) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  try {\n    const variants = await bucket.find({ \"metadata.variantOf\": fileObjectId.toHexString() }).toArray()\n    const variantIds = variants\n      .map((variant) => (variant as any)?._id)\n      .filter((id): id is ObjectId => id instanceof ObjectId)\n\n    await deleteGridFsFile(bucket, fileObjectId)\n    for (const variantId of variantIds) {\n      await deleteGridFsFile(bucket, variantId)\n    }\n  } catch {\n    ctx.res.status(500)\n    return { ok: false, error: \"delete_failed\" }\n  }\n\n  ctx.res.status(204)\n  return { ok: true }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb } from \"@rpcbase/db\"\nimport { GridFSBucket, ObjectId } from \"mongodb\"\n\nimport { getBucketName, getTenantId, getUploadKeyHash, getUserId, type SessionUser } from \"../../file-uploads/shared\"\n\n\nconst resolveHeaderString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst resolveHeaderBoolean = (value: unknown): boolean | null => {\n  if (typeof value === \"boolean\") return value\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim().toLowerCase()\n  if (!normalized) return null\n  if (normalized === \"true\") return true\n  if (normalized === \"false\") return false\n  return null\n}\n\nconst escapeHeaderFilename = (filename: string): string => filename.replace(/[\\\\\"]/g, \"_\")\n\nconst parseRequestedWidth = (value: unknown): number | null => {\n  if (typeof value !== \"string\") return null\n  const parsed = Number(value.trim())\n  if (!Number.isFinite(parsed) || parsed <= 0) return null\n  return Math.floor(parsed)\n}\n\nconst resolveImageVariants = (file: unknown): Record<string, unknown> | null => {\n  const metadata = (file as any)?.metadata\n  if (!metadata || typeof metadata !== \"object\") return null\n  const image = (metadata as Record<string, unknown>).image\n  if (!image || typeof image !== \"object\") return null\n  const variants = (image as Record<string, unknown>).variants\n  if (!variants || typeof variants !== \"object\") return null\n  return variants as Record<string, unknown>\n}\n\nconst resolveVariantFileId = (variant: unknown): ObjectId | null => {\n  if (!variant || typeof variant !== \"object\") return null\n  const fileId = (variant as Record<string, unknown>).fileId\n  if (typeof fileId !== \"string\") return null\n  try {\n    return new ObjectId(fileId)\n  } catch {\n    return null\n  }\n}\n\nconst selectVariantFileId = (file: unknown, requestedWidth: number | null, requestedVariant: unknown): ObjectId | null => {\n  const variants = resolveImageVariants(file)\n  if (!variants) return null\n\n  let aliasWidth: number | null = null\n  if (typeof requestedVariant === \"string\") {\n    const normalized = requestedVariant.trim().toLowerCase()\n    aliasWidth = normalized === \"thumb\" ? 320 : normalized === \"small\" ? 640 : normalized === \"medium\" ? 960 : normalized === \"large\" ? 1600 : null\n    if (aliasWidth) {\n      const variantFileId = resolveVariantFileId(variants[String(aliasWidth)])\n      if (variantFileId) return variantFileId\n    }\n  }\n\n  const targetWidth = aliasWidth ?? requestedWidth\n  if (!targetWidth) return null\n\n  const widths = Object.keys(variants)\n    .map((width) => Number(width))\n    .filter((width) => Number.isInteger(width) && width > 0)\n    .sort((a, b) => a - b)\n\n  const selectedWidth = widths.reduce<number | null>((selected, width) => {\n    if (selected === null) return width\n\n    const selectedDistance = Math.abs(selected - targetWidth)\n    const distance = Math.abs(width - targetWidth)\n    if (distance < selectedDistance) return width\n    if (distance === selectedDistance && width > selected) return width\n    return selected\n  }, null)\n  return selectedWidth ? resolveVariantFileId(variants[String(selectedWidth)]) : null\n}\n\nexport const getFile: ApiHandler<Record<string, never>, Record<string, never>, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<Record<string, never>> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400).end()\n    return {}\n  }\n\n  const fileIdRaw = String(ctx.req.params?.fileId ?? \"\").trim()\n  let fileObjectId: ObjectId\n  try {\n    fileObjectId = new ObjectId(fileIdRaw)\n  } catch {\n    ctx.res.status(400).end()\n    return {}\n  }\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    ctx.res.status(500).end()\n    return {}\n  }\n\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n\n  const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray()\n  if (!file) {\n    ctx.res.status(404).end()\n    return {}\n  }\n\n  const isPublic = resolveHeaderBoolean((file as any)?.metadata?.isPublic) ?? false\n  if (!isPublic) {\n    const userId = getUserId(ctx)\n    const uploadKeyHash = getUploadKeyHash(ctx)\n    const metadataUserId = resolveHeaderString((file as any)?.metadata?.userId)\n    const ownerKeyHash = resolveHeaderString((file as any)?.metadata?.ownerKeyHash)\n\n    const authorizedByUser = Boolean(userId && metadataUserId && userId === metadataUserId)\n    const authorizedByKey = Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)\n\n    if (!authorizedByUser && !authorizedByKey) {\n      ctx.res.status(401).end()\n      return {}\n    }\n  }\n\n  const requestedWidth = parseRequestedWidth((ctx.req.query as any)?.w)\n  const variantFileObjectId = selectVariantFileId(file, requestedWidth, (ctx.req.query as any)?.variant)\n  const [variantFile] = variantFileObjectId\n    ? await bucket.find({ _id: variantFileObjectId }).limit(1).toArray()\n    : []\n  const selectedFileObjectId = variantFile ? variantFileObjectId as ObjectId : fileObjectId\n  const selectedFile = variantFile ?? file\n\n  const mimeTypeFromMetadata = resolveHeaderString((selectedFile as any)?.metadata?.mimeType)\n  const mimeType = mimeTypeFromMetadata ?? \"application/octet-stream\"\n  const filenameFromDb = resolveHeaderString((selectedFile as any)?.filename)\n  const filename = filenameFromDb ?? fileIdRaw\n  const filenameSafe = escapeHeaderFilename(filename)\n\n  const cacheControl = \"private, max-age=0, must-revalidate\"\n  const md5 = resolveHeaderString((selectedFile as any)?.md5)\n  const uploadDate = (selectedFile as any)?.uploadDate instanceof Date ? (selectedFile as any).uploadDate : null\n  const etagValue = md5 ?? `${selectedFileObjectId.toHexString()}-${String((selectedFile as any)?.length ?? 0)}-${String(uploadDate?.getTime() ?? 0)}`\n  const etag = md5 ? `\"${etagValue}\"` : `W/\"${etagValue}\"`\n  const ifNoneMatch = resolveHeaderString((ctx.req.headers as any)?.[\"if-none-match\"])\n  if (ifNoneMatch) {\n    const candidates = ifNoneMatch.split(\",\").map((value) => value.trim()).filter(Boolean)\n    if (candidates.includes(\"*\") || candidates.includes(etag)) {\n      ctx.res.status(304)\n      ctx.res.setHeader(\"Cache-Control\", cacheControl)\n      ctx.res.setHeader(\"ETag\", etag)\n      ctx.res.end()\n      return {}\n    }\n  }\n\n  ctx.res.status(200)\n  ctx.res.setHeader(\"Content-Type\", mimeType)\n  ctx.res.setHeader(\"Content-Length\", String((selectedFile as any)?.length ?? 0))\n  ctx.res.setHeader(\"Content-Disposition\", `inline; filename=\"${filenameSafe}\"`)\n  ctx.res.setHeader(\"Cache-Control\", cacheControl)\n  ctx.res.setHeader(\"ETag\", etag)\n  ctx.res.setHeader(\"X-Content-Type-Options\", \"nosniff\")\n  if (mimeType === \"image/svg+xml\") {\n    ctx.res.setHeader(\n      \"Content-Security-Policy\",\n      \"default-src 'none'; style-src 'unsafe-inline'; sandbox; base-uri 'none'; form-action 'none'\",\n    )\n  }\n  ctx.res.flushHeaders()\n\n  if (ctx.req.method === \"HEAD\") {\n    ctx.res.end()\n    return {}\n  }\n\n  const stream = bucket.openDownloadStream(selectedFileObjectId)\n\n  stream.on(\"error\", () => {\n    try {\n      ctx.res.destroy()\n    } catch {\n      //\n    }\n  })\n\n  stream.pipe(ctx.res)\n  return {}\n}\n","export const Route = \"/api/rb/files/:fileId\"\n\nexport const GetRoute = Route\nexport const DeleteRoute = Route\n","import { Api } from \"@rpcbase/api\"\n\nimport { deleteFile } from \"./handlers/deleteFile\"\nimport { getFile } from \"./handlers/getFile\"\n\nimport * as Files from \"./index\"\n\n\nexport default (api: Api) => {\n  api.get(Files.GetRoute, getFile)\n  api.delete(Files.DeleteRoute, deleteFile)\n}\n"],"names":["resolveHeaderString","value","normalized","trim","isFileNotFoundError","error","message","Error","String","includes","deleteGridFsFile","bucket","fileId","delete","deleteFile","_payload","ctx","tenantId","getTenantId","res","status","ok","fileIdRaw","req","params","fileObjectId","ObjectId","fsDb","getTenantFilesystemDb","nativeDb","db","bucketName","getBucketName","GridFSBucket","userId","getUserId","uploadKeyHash","getUploadKeyHash","file","find","_id","limit","toArray","metadataUserId","metadata","ownerKeyHash","authorizedByUser","Boolean","authorizedByKey","variants","toHexString","variantIds","map","variant","filter","id","variantId","resolveHeaderBoolean","toLowerCase","escapeHeaderFilename","filename","replace","parseRequestedWidth","parsed","Number","isFinite","Math","floor","resolveImageVariants","image","resolveVariantFileId","selectVariantFileId","requestedWidth","requestedVariant","aliasWidth","variantFileId","targetWidth","widths","Object","keys","width","isInteger","sort","a","b","selectedWidth","reduce","selected","selectedDistance","abs","distance","getFile","end","isPublic","query","w","variantFileObjectId","variantFile","selectedFileObjectId","selectedFile","mimeTypeFromMetadata","mimeType","filenameFromDb","filenameSafe","cacheControl","md5","uploadDate","Date","etagValue","length","getTime","etag","ifNoneMatch","headers","candidates","split","setHeader","flushHeaders","method","stream","openDownloadStream","on","destroy","pipe","Route","GetRoute","DeleteRoute","api","get","Files"],"mappings":";;;AAYA,MAAMA,wBAAsBA,CAACC,UAAkC;AAC7D,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAMC,aAAaD,MAAME,KAAAA;AACzB,SAAOD,aAAaA,aAAa;AACnC;AAEA,MAAME,sBAAsBA,CAACC,UAA4B;AACvD,QAAMC,UAAUD,iBAAiBE,QAAQF,MAAMC,UAAUE,OAAOH,KAAK;AACrE,SAAOC,QAAQG,SAAS,cAAc;AACxC;AAEA,MAAMC,mBAAmB,OAAOC,QAAsBC,WAAoC;AACxF,MAAI;AACF,UAAMD,OAAOE,OAAOD,MAAM;AAAA,EAC5B,SAASP,OAAO;AACd,QAAI,CAACD,oBAAoBC,KAAK,EAAG,OAAMA;AAAAA,EACzC;AACF;AAEO,MAAMS,aAAoF,OAC/FC,UACAC,QACmC;AACnC,QAAMC,WAAWC,YAAYF,GAAG;AAChC,MAAI,CAACC,UAAU;AACbD,QAAIG,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEC,IAAI;AAAA,MAAOhB,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMiB,YAAYd,OAAOQ,IAAIO,IAAIC,QAAQZ,UAAU,EAAE,EAAET,KAAAA;AACvD,MAAIsB;AACJ,MAAI;AACFA,mBAAe,IAAIC,SAASJ,SAAS;AAAA,EACvC,QAAQ;AACNN,QAAIG,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEC,IAAI;AAAA,MAAOhB,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMsB,OAAO,MAAMC,sBAAsBX,QAAQ;AACjD,QAAMY,WAAWF,KAAKG;AACtB,MAAI,CAACD,UAAU;AACbb,QAAIG,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEC,IAAI;AAAA,MAAOhB,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM0B,aAAaC,cAAAA;AACnB,QAAMrB,SAAS,IAAIsB,aAAaJ,UAAU;AAAA,IAAEE;AAAAA,EAAAA,CAAY;AAExD,QAAMG,SAASC,UAAUnB,GAAG;AAC5B,QAAMoB,gBAAgBC,iBAAiBrB,GAAG;AAC1C,MAAI,CAACkB,UAAU,CAACE,eAAe;AAC7BpB,QAAIG,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEC,IAAI;AAAA,MAAOhB,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM,CAACiC,IAAI,IAAI,MAAM3B,OAAO4B,KAAK;AAAA,IAAEC,KAAKf;AAAAA,EAAAA,CAAc,EAAEgB,MAAM,CAAC,EAAEC,QAAAA;AACjE,MAAI,CAACJ,MAAM;AACTtB,QAAIG,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEC,IAAI;AAAA,IAAA;AAAA,EACf;AAEA,QAAMsB,iBAAiB3C,sBAAqBsC,MAAcM,UAAUV,MAAM;AAC1E,QAAMW,eAAe7C,sBAAqBsC,MAAcM,UAAUC,YAAY;AAE9E,QAAMC,mBAAmBC,QAAQb,UAAUS,kBAAkBT,WAAWS,cAAc;AACtF,QAAMK,kBAAkBD,QAAQX,iBAAiBS,gBAAgBT,kBAAkBS,YAAY;AAE/F,MAAI,CAACC,oBAAoB,CAACE,iBAAiB;AACzChC,QAAIG,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEC,IAAI;AAAA,MAAOhB,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,MAAI;AACF,UAAM4C,WAAW,MAAMtC,OAAO4B,KAAK;AAAA,MAAE,sBAAsBd,aAAayB,YAAAA;AAAAA,IAAY,CAAG,EAAER,QAAAA;AACzF,UAAMS,aAAaF,SAChBG,IAAKC,CAAAA,YAAaA,SAAiBb,GAAG,EACtCc,OAAO,CAACC,OAAuBA,cAAc7B,QAAQ;AAExD,UAAMhB,iBAAiBC,QAAQc,YAAY;AAC3C,eAAW+B,aAAaL,YAAY;AAClC,YAAMzC,iBAAiBC,QAAQ6C,SAAS;AAAA,IAC1C;AAAA,EACF,QAAQ;AACNxC,QAAIG,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEC,IAAI;AAAA,MAAOhB,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEAW,MAAIG,IAAIC,OAAO,GAAG;AAClB,SAAO;AAAA,IAAEC,IAAI;AAAA,EAAA;AACf;AC9FA,MAAMrB,sBAAsBA,CAACC,UAAkC;AAC7D,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAMC,aAAaD,MAAME,KAAAA;AACzB,SAAOD,aAAaA,aAAa;AACnC;AAEA,MAAMuD,uBAAuBA,CAACxD,UAAmC;AAC/D,MAAI,OAAOA,UAAU,UAAW,QAAOA;AACvC,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAMC,aAAaD,MAAME,KAAAA,EAAOuD,YAAAA;AAChC,MAAI,CAACxD,WAAY,QAAO;AACxB,MAAIA,eAAe,OAAQ,QAAO;AAClC,MAAIA,eAAe,QAAS,QAAO;AACnC,SAAO;AACT;AAEA,MAAMyD,uBAAuBA,CAACC,aAA6BA,SAASC,QAAQ,UAAU,GAAG;AAEzF,MAAMC,sBAAsBA,CAAC7D,UAAkC;AAC7D,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAM8D,SAASC,OAAO/D,MAAME,KAAAA,CAAM;AAClC,MAAI,CAAC6D,OAAOC,SAASF,MAAM,KAAKA,UAAU,EAAG,QAAO;AACpD,SAAOG,KAAKC,MAAMJ,MAAM;AAC1B;AAEA,MAAMK,uBAAuBA,CAAC9B,SAAkD;AAC9E,QAAMM,WAAYN,MAAcM;AAChC,MAAI,CAACA,YAAY,OAAOA,aAAa,SAAU,QAAO;AACtD,QAAMyB,QAASzB,SAAqCyB;AACpD,MAAI,CAACA,SAAS,OAAOA,UAAU,SAAU,QAAO;AAChD,QAAMpB,WAAYoB,MAAkCpB;AACpD,MAAI,CAACA,YAAY,OAAOA,aAAa,SAAU,QAAO;AACtD,SAAOA;AACT;AAEA,MAAMqB,uBAAuBA,CAACjB,YAAsC;AAClE,MAAI,CAACA,WAAW,OAAOA,YAAY,SAAU,QAAO;AACpD,QAAMzC,SAAUyC,QAAoCzC;AACpD,MAAI,OAAOA,WAAW,SAAU,QAAO;AACvC,MAAI;AACF,WAAO,IAAIc,SAASd,MAAM;AAAA,EAC5B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,MAAM2D,sBAAsBA,CAACjC,MAAekC,gBAA+BC,qBAA+C;AACxH,QAAMxB,WAAWmB,qBAAqB9B,IAAI;AAC1C,MAAI,CAACW,SAAU,QAAO;AAEtB,MAAIyB,aAA4B;AAChC,MAAI,OAAOD,qBAAqB,UAAU;AACxC,UAAMvE,aAAauE,iBAAiBtE,KAAAA,EAAOuD,YAAAA;AAC3CgB,iBAAaxE,eAAe,UAAU,MAAMA,eAAe,UAAU,MAAMA,eAAe,WAAW,MAAMA,eAAe,UAAU,OAAO;AAC3I,QAAIwE,YAAY;AACd,YAAMC,gBAAgBL,qBAAqBrB,SAASzC,OAAOkE,UAAU,CAAC,CAAC;AACvE,UAAIC,cAAe,QAAOA;AAAAA,IAC5B;AAAA,EACF;AAEA,QAAMC,cAAcF,cAAcF;AAClC,MAAI,CAACI,YAAa,QAAO;AAEzB,QAAMC,SAASC,OAAOC,KAAK9B,QAAQ,EAChCG,IAAK4B,CAAAA,UAAUhB,OAAOgB,KAAK,CAAC,EAC5B1B,OAAQ0B,WAAUhB,OAAOiB,UAAUD,KAAK,KAAKA,QAAQ,CAAC,EACtDE,KAAK,CAACC,GAAGC,MAAMD,IAAIC,CAAC;AAEvB,QAAMC,gBAAgBR,OAAOS,OAAsB,CAACC,UAAUP,UAAU;AACtE,QAAIO,aAAa,KAAM,QAAOP;AAE9B,UAAMQ,mBAAmBtB,KAAKuB,IAAIF,WAAWX,WAAW;AACxD,UAAMc,WAAWxB,KAAKuB,IAAIT,QAAQJ,WAAW;AAC7C,QAAIc,WAAWF,iBAAkB,QAAOR;AACxC,QAAIU,aAAaF,oBAAoBR,QAAQO,SAAU,QAAOP;AAC9D,WAAOO;AAAAA,EACT,GAAG,IAAI;AACP,SAAOF,gBAAgBf,qBAAqBrB,SAASzC,OAAO6E,aAAa,CAAC,CAAC,IAAI;AACjF;AAEO,MAAMM,UAAiF,OAC5F5E,UACAC,QACmC;AACnC,QAAMC,WAAWC,YAAYF,GAAG;AAChC,MAAI,CAACC,UAAU;AACbD,QAAIG,IAAIC,OAAO,GAAG,EAAEwE,IAAAA;AACpB,WAAO,CAAA;AAAA,EACT;AAEA,QAAMtE,YAAYd,OAAOQ,IAAIO,IAAIC,QAAQZ,UAAU,EAAE,EAAET,KAAAA;AACvD,MAAIsB;AACJ,MAAI;AACFA,mBAAe,IAAIC,SAASJ,SAAS;AAAA,EACvC,QAAQ;AACNN,QAAIG,IAAIC,OAAO,GAAG,EAAEwE,IAAAA;AACpB,WAAO,CAAA;AAAA,EACT;AAEA,QAAMjE,OAAO,MAAMC,sBAAsBX,QAAQ;AACjD,QAAMY,WAAWF,KAAKG;AACtB,MAAI,CAACD,UAAU;AACbb,QAAIG,IAAIC,OAAO,GAAG,EAAEwE,IAAAA;AACpB,WAAO,CAAA;AAAA,EACT;AAEA,QAAM7D,aAAaC,cAAAA;AACnB,QAAMrB,SAAS,IAAIsB,aAAaJ,UAAU;AAAA,IAAEE;AAAAA,EAAAA,CAAY;AAExD,QAAM,CAACO,IAAI,IAAI,MAAM3B,OAAO4B,KAAK;AAAA,IAAEC,KAAKf;AAAAA,EAAAA,CAAc,EAAEgB,MAAM,CAAC,EAAEC,QAAAA;AACjE,MAAI,CAACJ,MAAM;AACTtB,QAAIG,IAAIC,OAAO,GAAG,EAAEwE,IAAAA;AACpB,WAAO,CAAA;AAAA,EACT;AAEA,QAAMC,WAAWpC,qBAAsBnB,MAAcM,UAAUiD,QAAQ,KAAK;AAC5E,MAAI,CAACA,UAAU;AACb,UAAM3D,SAASC,UAAUnB,GAAG;AAC5B,UAAMoB,gBAAgBC,iBAAiBrB,GAAG;AAC1C,UAAM2B,iBAAiB3C,oBAAqBsC,MAAcM,UAAUV,MAAM;AAC1E,UAAMW,eAAe7C,oBAAqBsC,MAAcM,UAAUC,YAAY;AAE9E,UAAMC,mBAAmBC,QAAQb,UAAUS,kBAAkBT,WAAWS,cAAc;AACtF,UAAMK,kBAAkBD,QAAQX,iBAAiBS,gBAAgBT,kBAAkBS,YAAY;AAE/F,QAAI,CAACC,oBAAoB,CAACE,iBAAiB;AACzChC,UAAIG,IAAIC,OAAO,GAAG,EAAEwE,IAAAA;AACpB,aAAO,CAAA;AAAA,IACT;AAAA,EACF;AAEA,QAAMpB,iBAAiBV,oBAAqB9C,IAAIO,IAAIuE,OAAeC,CAAC;AACpE,QAAMC,sBAAsBzB,oBAAoBjC,MAAMkC,gBAAiBxD,IAAIO,IAAIuE,OAAezC,OAAO;AACrG,QAAM,CAAC4C,WAAW,IAAID,sBAClB,MAAMrF,OAAO4B,KAAK;AAAA,IAAEC,KAAKwD;AAAAA,EAAAA,CAAqB,EAAEvD,MAAM,CAAC,EAAEC,QAAAA,IACzD,CAAA;AACJ,QAAMwD,uBAAuBD,cAAcD,sBAAkCvE;AAC7E,QAAM0E,eAAeF,eAAe3D;AAEpC,QAAM8D,uBAAuBpG,oBAAqBmG,cAAsBvD,UAAUyD,QAAQ;AAC1F,QAAMA,WAAWD,wBAAwB;AACzC,QAAME,iBAAiBtG,oBAAqBmG,cAAsBvC,QAAQ;AAC1E,QAAMA,WAAW0C,kBAAkBhF;AACnC,QAAMiF,eAAe5C,qBAAqBC,QAAQ;AAElD,QAAM4C,eAAe;AACrB,QAAMC,MAAMzG,oBAAqBmG,cAAsBM,GAAG;AAC1D,QAAMC,aAAcP,cAAsBO,sBAAsBC,OAAQR,aAAqBO,aAAa;AAC1G,QAAME,YAAYH,OAAO,GAAGP,qBAAqBhD,YAAAA,CAAa,IAAI1C,OAAQ2F,cAAsBU,UAAU,CAAC,CAAC,IAAIrG,OAAOkG,YAAYI,QAAAA,KAAa,CAAC,CAAC;AAClJ,QAAMC,OAAON,MAAM,IAAIG,SAAS,MAAM,MAAMA,SAAS;AACrD,QAAMI,cAAchH,oBAAqBgB,IAAIO,IAAI0F,UAAkB,eAAe,CAAC;AACnF,MAAID,aAAa;AACf,UAAME,aAAaF,YAAYG,MAAM,GAAG,EAAE/D,IAAKnD,CAAAA,UAAUA,MAAME,KAAAA,CAAM,EAAEmD,OAAOP,OAAO;AACrF,QAAImE,WAAWzG,SAAS,GAAG,KAAKyG,WAAWzG,SAASsG,IAAI,GAAG;AACzD/F,UAAIG,IAAIC,OAAO,GAAG;AAClBJ,UAAIG,IAAIiG,UAAU,iBAAiBZ,YAAY;AAC/CxF,UAAIG,IAAIiG,UAAU,QAAQL,IAAI;AAC9B/F,UAAIG,IAAIyE,IAAAA;AACR,aAAO,CAAA;AAAA,IACT;AAAA,EACF;AAEA5E,MAAIG,IAAIC,OAAO,GAAG;AAClBJ,MAAIG,IAAIiG,UAAU,gBAAgBf,QAAQ;AAC1CrF,MAAIG,IAAIiG,UAAU,kBAAkB5G,OAAQ2F,cAAsBU,UAAU,CAAC,CAAC;AAC9E7F,MAAIG,IAAIiG,UAAU,uBAAuB,qBAAqBb,YAAY,GAAG;AAC7EvF,MAAIG,IAAIiG,UAAU,iBAAiBZ,YAAY;AAC/CxF,MAAIG,IAAIiG,UAAU,QAAQL,IAAI;AAC9B/F,MAAIG,IAAIiG,UAAU,0BAA0B,SAAS;AACrD,MAAIf,aAAa,iBAAiB;AAChCrF,QAAIG,IAAIiG,UACN,2BACA,6FACF;AAAA,EACF;AACApG,MAAIG,IAAIkG,aAAAA;AAER,MAAIrG,IAAIO,IAAI+F,WAAW,QAAQ;AAC7BtG,QAAIG,IAAIyE,IAAAA;AACR,WAAO,CAAA;AAAA,EACT;AAEA,QAAM2B,SAAS5G,OAAO6G,mBAAmBtB,oBAAoB;AAE7DqB,SAAOE,GAAG,SAAS,MAAM;AACvB,QAAI;AACFzG,UAAIG,IAAIuG,QAAAA;AAAAA,IACV,QAAQ;AAAA,IACN;AAAA,EAEJ,CAAC;AAEDH,SAAOI,KAAK3G,IAAIG,GAAG;AACnB,SAAO,CAAA;AACT;ACzMO,MAAMyG,QAAQ;AAEd,MAAMC,WAAWD;AACjB,MAAME,cAAcF;ACK3B,MAAA,UAAe,CAACG,QAAa;AAC3BA,MAAIC,IAAIC,UAAgBtC,OAAO;AAC/BoC,MAAIlH,OAAOoH,aAAmBnH,UAAU;AAC1C;"}
+{"version":3,"file":"handler-F0gFTzvh.js","sources":["../src/uploads/api/files/handlers/deleteFile.ts","../src/uploads/api/files/handlers/getFile.ts","../src/uploads/api/files/index.ts","../src/uploads/api/files/handler.ts"],"sourcesContent":["import { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb } from \"@rpcbase/db\"\nimport { GridFSBucket, ObjectId } from \"mongodb\"\n\nimport { getBucketName, getTenantId, getUploadKeyHash, getUserId, type SessionUser } from \"../../file-uploads/shared\"\n\n\ntype DeleteResponsePayload = {\n  ok: boolean\n  error?: string\n}\n\nconst resolveHeaderString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst isFileNotFoundError = (error: unknown): boolean => {\n  const message = error instanceof Error ? error.message : String(error)\n  return message.includes(\"FileNotFound\")\n}\n\nconst deleteGridFsFile = async (bucket: GridFSBucket, fileId: ObjectId): Promise<void> => {\n  try {\n    await bucket.delete(fileId)\n  } catch (error) {\n    if (!isFileNotFoundError(error)) throw error\n  }\n}\n\nexport const deleteFile: ApiHandler<Record<string, never>, DeleteResponsePayload, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<DeleteResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const fileIdRaw = String(ctx.req.params?.fileId ?? \"\").trim()\n  let fileObjectId: ObjectId\n  try {\n    fileObjectId = new ObjectId(fileIdRaw)\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_file_id\" }\n  }\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    ctx.res.status(500)\n    return { ok: false, error: \"filesystem_db_unavailable\" }\n  }\n\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n\n  const userId = getUserId(ctx)\n  const uploadKeyHash = getUploadKeyHash(ctx)\n  if (!userId && !uploadKeyHash) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray()\n  if (!file) {\n    ctx.res.status(204)\n    return { ok: true }\n  }\n\n  const metadataUserId = resolveHeaderString((file as any)?.metadata?.userId)\n  const ownerKeyHash = resolveHeaderString((file as any)?.metadata?.ownerKeyHash)\n\n  const authorizedByUser = Boolean(userId && metadataUserId && userId === metadataUserId)\n  const authorizedByKey = Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)\n\n  if (!authorizedByUser && !authorizedByKey) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  try {\n    const variants = await bucket.find({ \"metadata.variantOf\": fileObjectId.toHexString() }).toArray()\n    const variantIds = variants\n      .map((variant) => (variant as any)?._id)\n      .filter((id): id is ObjectId => id instanceof ObjectId)\n\n    await deleteGridFsFile(bucket, fileObjectId)\n    for (const variantId of variantIds) {\n      await deleteGridFsFile(bucket, variantId)\n    }\n  } catch {\n    ctx.res.status(500)\n    return { ok: false, error: \"delete_failed\" }\n  }\n\n  ctx.res.status(204)\n  return { ok: true }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb } from \"@rpcbase/db\"\nimport { GridFSBucket, ObjectId } from \"mongodb\"\n\nimport { getBucketName, getTenantId, getUploadKeyHash, getUserId, type SessionUser } from \"../../file-uploads/shared\"\n\n\nconst resolveHeaderString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst resolveHeaderBoolean = (value: unknown): boolean | null => {\n  if (typeof value === \"boolean\") return value\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim().toLowerCase()\n  if (!normalized) return null\n  if (normalized === \"true\") return true\n  if (normalized === \"false\") return false\n  return null\n}\n\nconst escapeHeaderFilename = (filename: string): string => filename.replace(/[\\\\\"]/g, \"_\")\n\nconst parseRequestedWidth = (value: unknown): number | null => {\n  if (typeof value !== \"string\") return null\n  const parsed = Number(value.trim())\n  if (!Number.isFinite(parsed) || parsed <= 0) return null\n  return Math.floor(parsed)\n}\n\nconst resolveImageVariants = (file: unknown): Record<string, unknown> | null => {\n  const metadata = (file as any)?.metadata\n  if (!metadata || typeof metadata !== \"object\") return null\n  const image = (metadata as Record<string, unknown>).image\n  if (!image || typeof image !== \"object\") return null\n  const variants = (image as Record<string, unknown>).variants\n  if (!variants || typeof variants !== \"object\") return null\n  return variants as Record<string, unknown>\n}\n\nconst resolveVariantFileId = (variant: unknown): ObjectId | null => {\n  if (!variant || typeof variant !== \"object\") return null\n  const fileId = (variant as Record<string, unknown>).fileId\n  if (typeof fileId !== \"string\") return null\n  try {\n    return new ObjectId(fileId)\n  } catch {\n    return null\n  }\n}\n\nconst selectVariantFileId = (file: unknown, requestedWidth: number | null, requestedVariant: unknown): ObjectId | null => {\n  const variants = resolveImageVariants(file)\n  if (!variants) return null\n\n  let aliasWidth: number | null = null\n  if (typeof requestedVariant === \"string\") {\n    const normalized = requestedVariant.trim().toLowerCase()\n    aliasWidth = normalized === \"thumb\" ? 320 : normalized === \"small\" ? 640 : normalized === \"medium\" ? 960 : normalized === \"large\" ? 1600 : null\n    if (aliasWidth) {\n      const variantFileId = resolveVariantFileId(variants[String(aliasWidth)])\n      if (variantFileId) return variantFileId\n    }\n  }\n\n  const targetWidth = aliasWidth ?? requestedWidth\n  if (!targetWidth) return null\n\n  const widths = Object.keys(variants)\n    .map((width) => Number(width))\n    .filter((width) => Number.isInteger(width) && width > 0)\n    .sort((a, b) => a - b)\n\n  const selectedWidth = widths.reduce<number | null>((selected, width) => {\n    if (selected === null) return width\n\n    const selectedDistance = Math.abs(selected - targetWidth)\n    const distance = Math.abs(width - targetWidth)\n    if (distance < selectedDistance) return width\n    if (distance === selectedDistance && width > selected) return width\n    return selected\n  }, null)\n  return selectedWidth ? resolveVariantFileId(variants[String(selectedWidth)]) : null\n}\n\nexport const getFile: ApiHandler<Record<string, never>, Record<string, never>, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<Record<string, never>> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400).end()\n    return {}\n  }\n\n  const fileIdRaw = String(ctx.req.params?.fileId ?? \"\").trim()\n  let fileObjectId: ObjectId\n  try {\n    fileObjectId = new ObjectId(fileIdRaw)\n  } catch {\n    ctx.res.status(400).end()\n    return {}\n  }\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    ctx.res.status(500).end()\n    return {}\n  }\n\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n\n  const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray()\n  if (!file) {\n    ctx.res.status(404).end()\n    return {}\n  }\n\n  const isPublic = resolveHeaderBoolean((file as any)?.metadata?.isPublic) ?? false\n  if (!isPublic) {\n    const userId = getUserId(ctx)\n    const uploadKeyHash = getUploadKeyHash(ctx)\n    const metadataUserId = resolveHeaderString((file as any)?.metadata?.userId)\n    const ownerKeyHash = resolveHeaderString((file as any)?.metadata?.ownerKeyHash)\n\n    const authorizedByUser = Boolean(userId && metadataUserId && userId === metadataUserId)\n    const authorizedByKey = Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)\n\n    if (!authorizedByUser && !authorizedByKey) {\n      ctx.res.status(401).end()\n      return {}\n    }\n  }\n\n  const requestedWidth = parseRequestedWidth((ctx.req.query as any)?.w)\n  const variantFileObjectId = selectVariantFileId(file, requestedWidth, (ctx.req.query as any)?.variant)\n  const [variantFile] = variantFileObjectId\n    ? await bucket.find({ _id: variantFileObjectId }).limit(1).toArray()\n    : []\n  const selectedFileObjectId = variantFile ? variantFileObjectId as ObjectId : fileObjectId\n  const selectedFile = variantFile ?? file\n\n  const mimeTypeFromMetadata = resolveHeaderString((selectedFile as any)?.metadata?.mimeType)\n  const mimeType = mimeTypeFromMetadata ?? \"application/octet-stream\"\n  const filenameFromDb = resolveHeaderString((selectedFile as any)?.filename)\n  const filename = filenameFromDb ?? fileIdRaw\n  const filenameSafe = escapeHeaderFilename(filename)\n\n  const cacheControl = \"private, max-age=0, must-revalidate\"\n  const md5 = resolveHeaderString((selectedFile as any)?.md5)\n  const uploadDate = (selectedFile as any)?.uploadDate instanceof Date ? (selectedFile as any).uploadDate : null\n  const etagValue = md5 ?? `${selectedFileObjectId.toHexString()}-${String((selectedFile as any)?.length ?? 0)}-${String(uploadDate?.getTime() ?? 0)}`\n  const etag = md5 ? `\"${etagValue}\"` : `W/\"${etagValue}\"`\n  const ifNoneMatch = resolveHeaderString((ctx.req.headers as any)?.[\"if-none-match\"])\n  if (ifNoneMatch) {\n    const candidates = ifNoneMatch.split(\",\").map((value) => value.trim()).filter(Boolean)\n    if (candidates.includes(\"*\") || candidates.includes(etag)) {\n      ctx.res.status(304)\n      ctx.res.setHeader(\"Cache-Control\", cacheControl)\n      ctx.res.setHeader(\"ETag\", etag)\n      ctx.res.end()\n      return {}\n    }\n  }\n\n  ctx.res.status(200)\n  ctx.res.setHeader(\"Content-Type\", mimeType)\n  ctx.res.setHeader(\"Content-Length\", String((selectedFile as any)?.length ?? 0))\n  ctx.res.setHeader(\"Content-Disposition\", `inline; filename=\"${filenameSafe}\"`)\n  ctx.res.setHeader(\"Cache-Control\", cacheControl)\n  ctx.res.setHeader(\"ETag\", etag)\n  ctx.res.setHeader(\"X-Content-Type-Options\", \"nosniff\")\n  if (mimeType === \"image/svg+xml\") {\n    ctx.res.setHeader(\n      \"Content-Security-Policy\",\n      \"default-src 'none'; style-src 'unsafe-inline'; sandbox; base-uri 'none'; form-action 'none'\",\n    )\n  }\n  ctx.res.flushHeaders()\n\n  if (ctx.req.method === \"HEAD\") {\n    ctx.res.end()\n    return {}\n  }\n\n  const stream = bucket.openDownloadStream(selectedFileObjectId)\n\n  stream.on(\"error\", () => {\n    try {\n      ctx.res.destroy()\n    } catch {\n      //\n    }\n  })\n\n  stream.pipe(ctx.res)\n  return {}\n}\n","export const Route = \"/api/rb/files/:fileId\"\n\nexport const GetRoute = Route\nexport const DeleteRoute = Route\n","import { Api } from \"@rpcbase/api\"\n\nimport { deleteFile } from \"./handlers/deleteFile\"\nimport { getFile } from \"./handlers/getFile\"\n\nimport * as Files from \"./index\"\n\n\nexport default (api: Api) => {\n  api.get(Files.GetRoute, getFile)\n  api.delete(Files.DeleteRoute, deleteFile)\n}\n"],"names":["resolveHeaderString","value","normalized","trim","isFileNotFoundError","error","message","Error","String","includes","deleteGridFsFile","bucket","fileId","delete","deleteFile","_payload","ctx","tenantId","getTenantId","res","status","ok","fileIdRaw","req","params","fileObjectId","ObjectId","fsDb","getTenantFilesystemDb","nativeDb","db","bucketName","getBucketName","GridFSBucket","userId","getUserId","uploadKeyHash","getUploadKeyHash","file","find","_id","limit","toArray","metadataUserId","metadata","ownerKeyHash","authorizedByUser","Boolean","authorizedByKey","variants","toHexString","variantIds","map","variant","filter","id","variantId","resolveHeaderBoolean","toLowerCase","escapeHeaderFilename","filename","replace","parseRequestedWidth","parsed","Number","isFinite","Math","floor","resolveImageVariants","image","resolveVariantFileId","selectVariantFileId","requestedWidth","requestedVariant","aliasWidth","variantFileId","targetWidth","widths","Object","keys","width","isInteger","sort","a","b","selectedWidth","reduce","selected","selectedDistance","abs","distance","getFile","end","isPublic","query","w","variantFileObjectId","variantFile","selectedFileObjectId","selectedFile","mimeTypeFromMetadata","mimeType","filenameFromDb","filenameSafe","cacheControl","md5","uploadDate","Date","etagValue","length","getTime","etag","ifNoneMatch","headers","candidates","split","setHeader","flushHeaders","method","stream","openDownloadStream","on","destroy","pipe","Route","GetRoute","DeleteRoute","api","get","Files"],"mappings":";;;AAYA,MAAMA,wBAAsBA,CAACC,UAAkC;AAC7D,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAMC,aAAaD,MAAME,KAAAA;AACzB,SAAOD,aAAaA,aAAa;AACnC;AAEA,MAAME,sBAAsBA,CAACC,UAA4B;AACvD,QAAMC,UAAUD,iBAAiBE,QAAQF,MAAMC,UAAUE,OAAOH,KAAK;AACrE,SAAOC,QAAQG,SAAS,cAAc;AACxC;AAEA,MAAMC,mBAAmB,OAAOC,QAAsBC,WAAoC;AACxF,MAAI;AACF,UAAMD,OAAOE,OAAOD,MAAM;AAAA,EAC5B,SAASP,OAAO;AACd,QAAI,CAACD,oBAAoBC,KAAK,EAAG,OAAMA;AAAAA,EACzC;AACF;AAEO,MAAMS,aAAoF,OAC/FC,UACAC,QACmC;AACnC,QAAMC,WAAWC,YAAYF,GAAG;AAChC,MAAI,CAACC,UAAU;AACbD,QAAIG,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEC,IAAI;AAAA,MAAOhB,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMiB,YAAYd,OAAOQ,IAAIO,IAAIC,QAAQZ,UAAU,EAAE,EAAET,KAAAA;AACvD,MAAIsB;AACJ,MAAI;AACFA,mBAAe,IAAIC,SAASJ,SAAS;AAAA,EACvC,QAAQ;AACNN,QAAIG,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEC,IAAI;AAAA,MAAOhB,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMsB,OAAO,MAAMC,sBAAsBX,QAAQ;AACjD,QAAMY,WAAWF,KAAKG;AACtB,MAAI,CAACD,UAAU;AACbb,QAAIG,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEC,IAAI;AAAA,MAAOhB,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM0B,aAAaC,cAAAA;AACnB,QAAMrB,SAAS,IAAIsB,aAAaJ,UAAU;AAAA,IAAEE;AAAAA,EAAAA,CAAY;AAExD,QAAMG,SAASC,UAAUnB,GAAG;AAC5B,QAAMoB,gBAAgBC,iBAAiBrB,GAAG;AAC1C,MAAI,CAACkB,UAAU,CAACE,eAAe;AAC7BpB,QAAIG,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEC,IAAI;AAAA,MAAOhB,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM,CAACiC,IAAI,IAAI,MAAM3B,OAAO4B,KAAK;AAAA,IAAEC,KAAKf;AAAAA,EAAAA,CAAc,EAAEgB,MAAM,CAAC,EAAEC,QAAAA;AACjE,MAAI,CAACJ,MAAM;AACTtB,QAAIG,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEC,IAAI;AAAA,IAAA;AAAA,EACf;AAEA,QAAMsB,iBAAiB3C,sBAAqBsC,MAAcM,UAAUV,MAAM;AAC1E,QAAMW,eAAe7C,sBAAqBsC,MAAcM,UAAUC,YAAY;AAE9E,QAAMC,mBAAmBC,QAAQb,UAAUS,kBAAkBT,WAAWS,cAAc;AACtF,QAAMK,kBAAkBD,QAAQX,iBAAiBS,gBAAgBT,kBAAkBS,YAAY;AAE/F,MAAI,CAACC,oBAAoB,CAACE,iBAAiB;AACzChC,QAAIG,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEC,IAAI;AAAA,MAAOhB,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,MAAI;AACF,UAAM4C,WAAW,MAAMtC,OAAO4B,KAAK;AAAA,MAAE,sBAAsBd,aAAayB,YAAAA;AAAAA,IAAY,CAAG,EAAER,QAAAA;AACzF,UAAMS,aAAaF,SAChBG,IAAKC,CAAAA,YAAaA,SAAiBb,GAAG,EACtCc,OAAO,CAACC,OAAuBA,cAAc7B,QAAQ;AAExD,UAAMhB,iBAAiBC,QAAQc,YAAY;AAC3C,eAAW+B,aAAaL,YAAY;AAClC,YAAMzC,iBAAiBC,QAAQ6C,SAAS;AAAA,IAC1C;AAAA,EACF,QAAQ;AACNxC,QAAIG,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEC,IAAI;AAAA,MAAOhB,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEAW,MAAIG,IAAIC,OAAO,GAAG;AAClB,SAAO;AAAA,IAAEC,IAAI;AAAA,EAAA;AACf;AC9FA,MAAMrB,sBAAsBA,CAACC,UAAkC;AAC7D,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAMC,aAAaD,MAAME,KAAAA;AACzB,SAAOD,aAAaA,aAAa;AACnC;AAEA,MAAMuD,uBAAuBA,CAACxD,UAAmC;AAC/D,MAAI,OAAOA,UAAU,UAAW,QAAOA;AACvC,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAMC,aAAaD,MAAME,KAAAA,EAAOuD,YAAAA;AAChC,MAAI,CAACxD,WAAY,QAAO;AACxB,MAAIA,eAAe,OAAQ,QAAO;AAClC,MAAIA,eAAe,QAAS,QAAO;AACnC,SAAO;AACT;AAEA,MAAMyD,uBAAuBA,CAACC,aAA6BA,SAASC,QAAQ,UAAU,GAAG;AAEzF,MAAMC,sBAAsBA,CAAC7D,UAAkC;AAC7D,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAM8D,SAASC,OAAO/D,MAAME,KAAAA,CAAM;AAClC,MAAI,CAAC6D,OAAOC,SAASF,MAAM,KAAKA,UAAU,EAAG,QAAO;AACpD,SAAOG,KAAKC,MAAMJ,MAAM;AAC1B;AAEA,MAAMK,uBAAuBA,CAAC9B,SAAkD;AAC9E,QAAMM,WAAYN,MAAcM;AAChC,MAAI,CAACA,YAAY,OAAOA,aAAa,SAAU,QAAO;AACtD,QAAMyB,QAASzB,SAAqCyB;AACpD,MAAI,CAACA,SAAS,OAAOA,UAAU,SAAU,QAAO;AAChD,QAAMpB,WAAYoB,MAAkCpB;AACpD,MAAI,CAACA,YAAY,OAAOA,aAAa,SAAU,QAAO;AACtD,SAAOA;AACT;AAEA,MAAMqB,uBAAuBA,CAACjB,YAAsC;AAClE,MAAI,CAACA,WAAW,OAAOA,YAAY,SAAU,QAAO;AACpD,QAAMzC,SAAUyC,QAAoCzC;AACpD,MAAI,OAAOA,WAAW,SAAU,QAAO;AACvC,MAAI;AACF,WAAO,IAAIc,SAASd,MAAM;AAAA,EAC5B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,MAAM2D,sBAAsBA,CAACjC,MAAekC,gBAA+BC,qBAA+C;AACxH,QAAMxB,WAAWmB,qBAAqB9B,IAAI;AAC1C,MAAI,CAACW,SAAU,QAAO;AAEtB,MAAIyB,aAA4B;AAChC,MAAI,OAAOD,qBAAqB,UAAU;AACxC,UAAMvE,aAAauE,iBAAiBtE,KAAAA,EAAOuD,YAAAA;AAC3CgB,iBAAaxE,eAAe,UAAU,MAAMA,eAAe,UAAU,MAAMA,eAAe,WAAW,MAAMA,eAAe,UAAU,OAAO;AAC3I,QAAIwE,YAAY;AACd,YAAMC,gBAAgBL,qBAAqBrB,SAASzC,OAAOkE,UAAU,CAAC,CAAC;AACvE,UAAIC,cAAe,QAAOA;AAAAA,IAC5B;AAAA,EACF;AAEA,QAAMC,cAAcF,cAAcF;AAClC,MAAI,CAACI,YAAa,QAAO;AAEzB,QAAMC,SAASC,OAAOC,KAAK9B,QAAQ,EAChCG,IAAK4B,CAAAA,UAAUhB,OAAOgB,KAAK,CAAC,EAC5B1B,OAAQ0B,WAAUhB,OAAOiB,UAAUD,KAAK,KAAKA,QAAQ,CAAC,EACtDE,KAAK,CAACC,GAAGC,MAAMD,IAAIC,CAAC;AAEvB,QAAMC,gBAAgBR,OAAOS,OAAsB,CAACC,UAAUP,UAAU;AACtE,QAAIO,aAAa,KAAM,QAAOP;AAE9B,UAAMQ,mBAAmBtB,KAAKuB,IAAIF,WAAWX,WAAW;AACxD,UAAMc,WAAWxB,KAAKuB,IAAIT,QAAQJ,WAAW;AAC7C,QAAIc,WAAWF,iBAAkB,QAAOR;AACxC,QAAIU,aAAaF,oBAAoBR,QAAQO,SAAU,QAAOP;AAC9D,WAAOO;AAAAA,EACT,GAAG,IAAI;AACP,SAAOF,gBAAgBf,qBAAqBrB,SAASzC,OAAO6E,aAAa,CAAC,CAAC,IAAI;AACjF;AAEO,MAAMM,UAAiF,OAC5F5E,UACAC,QACmC;AACnC,QAAMC,WAAWC,YAAYF,GAAG;AAChC,MAAI,CAACC,UAAU;AACbD,QAAIG,IAAIC,OAAO,GAAG,EAAEwE,IAAAA;AACpB,WAAO,CAAA;AAAA,EACT;AAEA,QAAMtE,YAAYd,OAAOQ,IAAIO,IAAIC,QAAQZ,UAAU,EAAE,EAAET,KAAAA;AACvD,MAAIsB;AACJ,MAAI;AACFA,mBAAe,IAAIC,SAASJ,SAAS;AAAA,EACvC,QAAQ;AACNN,QAAIG,IAAIC,OAAO,GAAG,EAAEwE,IAAAA;AACpB,WAAO,CAAA;AAAA,EACT;AAEA,QAAMjE,OAAO,MAAMC,sBAAsBX,QAAQ;AACjD,QAAMY,WAAWF,KAAKG;AACtB,MAAI,CAACD,UAAU;AACbb,QAAIG,IAAIC,OAAO,GAAG,EAAEwE,IAAAA;AACpB,WAAO,CAAA;AAAA,EACT;AAEA,QAAM7D,aAAaC,cAAAA;AACnB,QAAMrB,SAAS,IAAIsB,aAAaJ,UAAU;AAAA,IAAEE;AAAAA,EAAAA,CAAY;AAExD,QAAM,CAACO,IAAI,IAAI,MAAM3B,OAAO4B,KAAK;AAAA,IAAEC,KAAKf;AAAAA,EAAAA,CAAc,EAAEgB,MAAM,CAAC,EAAEC,QAAAA;AACjE,MAAI,CAACJ,MAAM;AACTtB,QAAIG,IAAIC,OAAO,GAAG,EAAEwE,IAAAA;AACpB,WAAO,CAAA;AAAA,EACT;AAEA,QAAMC,WAAWpC,qBAAsBnB,MAAcM,UAAUiD,QAAQ,KAAK;AAC5E,MAAI,CAACA,UAAU;AACb,UAAM3D,SAASC,UAAUnB,GAAG;AAC5B,UAAMoB,gBAAgBC,iBAAiBrB,GAAG;AAC1C,UAAM2B,iBAAiB3C,oBAAqBsC,MAAcM,UAAUV,MAAM;AAC1E,UAAMW,eAAe7C,oBAAqBsC,MAAcM,UAAUC,YAAY;AAE9E,UAAMC,mBAAmBC,QAAQb,UAAUS,kBAAkBT,WAAWS,cAAc;AACtF,UAAMK,kBAAkBD,QAAQX,iBAAiBS,gBAAgBT,kBAAkBS,YAAY;AAE/F,QAAI,CAACC,oBAAoB,CAACE,iBAAiB;AACzChC,UAAIG,IAAIC,OAAO,GAAG,EAAEwE,IAAAA;AACpB,aAAO,CAAA;AAAA,IACT;AAAA,EACF;AAEA,QAAMpB,iBAAiBV,oBAAqB9C,IAAIO,IAAIuE,OAAeC,CAAC;AACpE,QAAMC,sBAAsBzB,oBAAoBjC,MAAMkC,gBAAiBxD,IAAIO,IAAIuE,OAAezC,OAAO;AACrG,QAAM,CAAC4C,WAAW,IAAID,sBAClB,MAAMrF,OAAO4B,KAAK;AAAA,IAAEC,KAAKwD;AAAAA,EAAAA,CAAqB,EAAEvD,MAAM,CAAC,EAAEC,QAAAA,IACzD,CAAA;AACJ,QAAMwD,uBAAuBD,cAAcD,sBAAkCvE;AAC7E,QAAM0E,eAAeF,eAAe3D;AAEpC,QAAM8D,uBAAuBpG,oBAAqBmG,cAAsBvD,UAAUyD,QAAQ;AAC1F,QAAMA,WAAWD,wBAAwB;AACzC,QAAME,iBAAiBtG,oBAAqBmG,cAAsBvC,QAAQ;AAC1E,QAAMA,WAAW0C,kBAAkBhF;AACnC,QAAMiF,eAAe5C,qBAAqBC,QAAQ;AAElD,QAAM4C,eAAe;AACrB,QAAMC,MAAMzG,oBAAqBmG,cAAsBM,GAAG;AAC1D,QAAMC,aAAcP,cAAsBO,sBAAsBC,OAAQR,aAAqBO,aAAa;AAC1G,QAAME,YAAYH,OAAO,GAAGP,qBAAqBhD,YAAAA,CAAa,IAAI1C,OAAQ2F,cAAsBU,UAAU,CAAC,CAAC,IAAIrG,OAAOkG,YAAYI,QAAAA,KAAa,CAAC,CAAC;AAClJ,QAAMC,OAAON,MAAM,IAAIG,SAAS,MAAM,MAAMA,SAAS;AACrD,QAAMI,cAAchH,oBAAqBgB,IAAIO,IAAI0F,UAAkB,eAAe,CAAC;AACnF,MAAID,aAAa;AACf,UAAME,aAAaF,YAAYG,MAAM,GAAG,EAAE/D,IAAKnD,CAAAA,UAAUA,MAAME,KAAAA,CAAM,EAAEmD,OAAOP,OAAO;AACrF,QAAImE,WAAWzG,SAAS,GAAG,KAAKyG,WAAWzG,SAASsG,IAAI,GAAG;AACzD/F,UAAIG,IAAIC,OAAO,GAAG;AAClBJ,UAAIG,IAAIiG,UAAU,iBAAiBZ,YAAY;AAC/CxF,UAAIG,IAAIiG,UAAU,QAAQL,IAAI;AAC9B/F,UAAIG,IAAIyE,IAAAA;AACR,aAAO,CAAA;AAAA,IACT;AAAA,EACF;AAEA5E,MAAIG,IAAIC,OAAO,GAAG;AAClBJ,MAAIG,IAAIiG,UAAU,gBAAgBf,QAAQ;AAC1CrF,MAAIG,IAAIiG,UAAU,kBAAkB5G,OAAQ2F,cAAsBU,UAAU,CAAC,CAAC;AAC9E7F,MAAIG,IAAIiG,UAAU,uBAAuB,qBAAqBb,YAAY,GAAG;AAC7EvF,MAAIG,IAAIiG,UAAU,iBAAiBZ,YAAY;AAC/CxF,MAAIG,IAAIiG,UAAU,QAAQL,IAAI;AAC9B/F,MAAIG,IAAIiG,UAAU,0BAA0B,SAAS;AACrD,MAAIf,aAAa,iBAAiB;AAChCrF,QAAIG,IAAIiG,UACN,2BACA,6FACF;AAAA,EACF;AACApG,MAAIG,IAAIkG,aAAAA;AAER,MAAIrG,IAAIO,IAAI+F,WAAW,QAAQ;AAC7BtG,QAAIG,IAAIyE,IAAAA;AACR,WAAO,CAAA;AAAA,EACT;AAEA,QAAM2B,SAAS5G,OAAO6G,mBAAmBtB,oBAAoB;AAE7DqB,SAAOE,GAAG,SAAS,MAAM;AACvB,QAAI;AACFzG,UAAIG,IAAIuG,QAAAA;AAAAA,IACV,QAAQ;AAAA,IACN;AAAA,EAEJ,CAAC;AAEDH,SAAOI,KAAK3G,IAAIG,GAAG;AACnB,SAAO,CAAA;AACT;ACzMO,MAAMyG,QAAQ;AAEd,MAAMC,WAAWD;AACjB,MAAME,cAAcF;ACK3B,MAAA,UAAe,CAACG,QAAa;AAC3BA,MAAIC,IAAIC,UAAgBtC,OAAO;AAC/BoC,MAAIlH,OAAOoH,aAAmBnH,UAAU;AAC1C;"}