@vibesdotdev/media 0.0.0-stage → 1.0.0-rc.4

package/dist/uploads/client/uploads-client.js

@@ -0,0 +1,487 @@
+/**
+ * Uploads Client
+ *
+ * Runtime-resolved HTTP client for file uploads. Communicates with platform-web's
+ * storage endpoints at /api/storage/*.
+ *
+ * Cross-app upload access goes through getVibesUploadsClient(runtime) — never raw fetch
+ * against platform-web, never new UploadStorageService().
+ *
+ * Every id that reaches a URL is an opaque token and is percent-encoded into its
+ * path segment; every response is parsed by a schema; an error names the failed
+ * fact and the HTTP status, never the response body or any request value.
+ */
+import * as z from 'zod/v4';
+import { getLogger } from '@vibesdotdev/logging';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { BaseRuntimeClient } from '@vibesdotdev/kernel/client';
+import { OpaqueMediaIdSchema } from "../../schemas/opaque-id.js";
+import { attempt, failureLabel } from "../../utils/attempt.js";
+import { validateUpload } from "../schemas/common.js";
+import { uploadClientOptionsSchema, parseRequest } from "../schemas/requests.js";
+import { uploadServerResponseSchema } from "../schemas/forms.js";
+import { createShareLinkOptionsSchema, shareLinkResultSchema, shareLinkListResultSchema } from "../schemas/shares.js";
+/** The file metadata platform-web's `/meta` endpoint answers; fields beyond these are ignored. */
+const fileMetaSchema = z.looseObject({
+    id: z.string(),
+    title: z.string().optional(),
+    filename: z.string(),
+    originalFilename: z.string().optional(),
+    mediaType: z.string().optional(),
+    mimeType: z.string().optional(),
+    fileSize: z.number(),
+    isPublic: z.boolean(),
+    storageProviderId: z.string().optional(),
+    createdAt: z.string(),
+    updatedAt: z.string(),
+    thumbnailPath: z.string().nullish(),
+    width: z.number().nullish(),
+    height: z.number().nullish(),
+    userId: z.string().optional()
+});
+/** The page origin where there is a page: read from the global scope's `window`, absent in SSR, workers and node. */
+const PageHostSchema = z.looseObject({
+    window: z.looseObject({ location: z.looseObject({ origin: z.string().min(1) }) }).optional()
+});
+function browserWindowOrigin() {
+    const origin = PageHostSchema.safeParse(globalThis).data?.window?.location.origin;
+    return origin?.replace(/\/$/, '');
+}
+/** The taxonomy code an HTTP status maps to. */
+function codeForStatus(status) {
+    if (status === undefined)
+        return 'UNAVAILABLE';
+    if (status === 400 || status === 413 || status === 415 || status === 422)
+        return 'INVALID_INPUT';
+    if (status === 401)
+        return 'AUTH_REQUIRED';
+    if (status === 403)
+        return 'PERMISSION_DENIED';
+    if (status === 404)
+        return 'NOT_FOUND';
+    if (status === 409)
+        return 'CONFLICT';
+    if (status === 429)
+        return 'RATE_LIMITED';
+    if (status === 408 || status === 504)
+        return 'TIMEOUT';
+    return 'UNAVAILABLE';
+}
+/**
+ * Runtime-resolved uploads client extending BaseRuntimeClient.
+ *
+ * Communicates with apps/platform-web storage endpoints:
+ * - POST /api/storage/upload
+ * - GET /api/storage/files
+ * - GET /api/storage/files/[id]
+ * - DELETE /api/storage/files/[id]
+ */
+export class UploadsClient extends BaseRuntimeClient {
+    apiBaseUrl = null;
+    httpClient = null;
+    constructor(descriptor = { id: 'uploads', kind: 'runtime/client' }, context, runtime) {
+        super(descriptor, context, runtime);
+    }
+    async onLoad() {
+        await super.onLoad();
+        this.apiBaseUrl = await this.resolveUploadsApiBaseUrl();
+    }
+    dispose() {
+        this.httpClient = null;
+        super.dispose();
+    }
+    /**
+     * Upload a file to storage.
+     *
+     * POSTs to platform-web's /api/storage/upload endpoint.
+     * Creates the canonical mediaItems row via platform-web.
+     */
+    async upload(input) {
+        const parsed = parseRequest(uploadClientOptionsSchema, input);
+        if (!parsed.success) {
+            const reason = parsed.field === 'kind' ? 'upload-kind-invalid'
+                : parsed.field === 'sourceApp' || parsed.field === 'sourceId' ? 'upload-provenance-invalid'
+                    : parsed.field === 'maxSize' || parsed.field === 'allowList' ? 'upload-limits-invalid'
+                        : 'upload-options-invalid';
+            throw new UploadsClientError('The upload request is invalid.', { status: 400, reason });
+        }
+        const options = parsed.data;
+        this.validateUploadOptions(options);
+        await this.ensureLoaded();
+        // The internal endpoint reads the owning user from `x-vibes-user-id`;
+        // fail fast rather than letting platform-web reject the request.
+        if (options.serviceToken && !options.userId) {
+            throw new UploadsClientError('Internal-service uploads require a userId.', {
+                status: 400,
+                reason: 'upload-service-token-without-user'
+            });
+        }
+        const url = await this.buildUploadUrl(options);
+        const formData = new FormData();
+        const filePart = options.file instanceof Blob
+            ? options.file
+            : new Blob([new Uint8Array(options.file)], options.contentType ? { type: options.contentType } : undefined);
+        formData.append('file', filePart, options.originalName || 'upload');
+        if (options.originalName) {
+            formData.append('title', options.originalName);
+        }
+        const headers = {};
+        if (options.serviceToken) {
+            headers['Authorization'] = `Bearer ${options.serviceToken}`;
+            if (options.userId)
+                headers['x-vibes-user-id'] = options.userId;
+            if (options.organizationId)
+                headers['x-vibes-organization-id'] = options.organizationId;
+        }
+        const init = { method: 'POST', headers, body: formData };
+        if (!options.serviceToken)
+            init.credentials = 'include';
+        const response = await this.fetch(url.toString(), init);
+        if (!response.ok)
+            throw httpFailure('Upload', response.status);
+        const data = await this.readJson(response, uploadServerResponseSchema, 'upload');
+        return {
+            id: data.id,
+            url: data.url,
+            name: data.filename ?? options.originalName,
+            contentType: data.mediaType ?? options.contentType,
+            size: data.fileSize,
+            storagePath: `/api/storage/files/${encodeURIComponent(data.id)}`
+        };
+    }
+    /**
+     * Get file metadata for one or more file IDs.
+     *
+     * GETs from platform-web's /api/storage/files endpoint.
+     */
+    async getFiles(ids) {
+        await this.ensureLoaded();
+        // Fetch each file individually since the API is per-file
+        const results = [];
+        for (const id of ids) {
+            const fetched = await attempt(() => this.getFile(id));
+            if (!fetched.ok) {
+                // Skipped, not dropped: the failure's class and reason are logged, never its text or the id.
+                getLogger('media', this.runtime).child({ context: 'uploads.client' }).warn('uploads.getFiles: skipped unfetchable file', { failure: failureLabel(fetched.failure) });
+            }
+            else if (fetched.value) {
+                results.push(fetched.value);
+            }
+        }
+        return results;
+    }
+    /**
+     * Get a single file's metadata.
+     *
+     * Calls the JSON metadata endpoint (/api/storage/files/[id]/meta) rather than
+     * issuing a HEAD against the binary-download route. The download route returns
+     * a binary stream (or 302 redirect) and does not expose filename or MIME type
+     * in headers, so a HEAD request cannot populate a usable FileRecord.
+     */
+    async getFile(id, serviceToken) {
+        await this.ensureLoaded();
+        const headers = {};
+        if (serviceToken) {
+            headers['Authorization'] = `Bearer ${serviceToken}`;
+        }
+        const metaInit = { method: 'GET', headers };
+        if (!serviceToken)
+            metaInit.credentials = 'include';
+        const response = await this.fetch(`${this.apiBaseUrl}/api/storage/files/${idSegment(id)}/meta`, metaInit);
+        if (response.status === 404) {
+            return null;
+        }
+        if (!response.ok)
+            throw httpFailure('Get file metadata', response.status);
+        const data = await this.readJson(response, fileMetaSchema, 'file metadata');
+        return {
+            id: data.id,
+            title: data.title,
+            filename: data.filename,
+            originalFilename: data.originalFilename,
+            mediaType: data.mediaType,
+            mimeType: data.mimeType,
+            fileSize: data.fileSize,
+            isPublic: data.isPublic,
+            storageProviderId: data.storageProviderId,
+            createdAt: data.createdAt,
+            updatedAt: data.updatedAt,
+            thumbnailPath: data.thumbnailPath ?? undefined,
+            width: data.width ?? undefined,
+            height: data.height ?? undefined
+        };
+    }
+    /**
+     * Get the public serve URL for a file.
+     *
+     * Returns the path that can be used to serve/download the file.
+     */
+    getServeUrl(fileId) {
+        const baseUrl = this.apiBaseUrl;
+        if (!baseUrl) {
+            throw new UploadsClientError('Uploads origin is not resolved; load the client first.', {
+                status: 503,
+                reason: 'uploads-origin-unresolved'
+            });
+        }
+        return `${baseUrl}/api/storage/files/${idSegment(fileId)}`;
+    }
+    /**
+     * Create a revocable, public share link for a file (owner-only).
+     *
+     * POSTs to platform-web's `/api/storage/files/[id]/shares`. The returned
+     * `shareUrl` is an absolute, anonymously-fetchable URL pointing at the
+     * session-bypassed `/api/storage/shared/[token]` serving route — never the
+     * private files/[id] path. Egress on share downloads is billed to the owner.
+     */
+    async createShareLink(fileId, options = {}) {
+        const parsed = parseRequest(createShareLinkOptionsSchema, options);
+        if (!parsed.success) {
+            throw new UploadsClientError('The share link options are invalid.', {
+                status: 400, reason: 'upload-share-options-invalid'
+            });
+        }
+        await this.ensureLoaded();
+        const response = await this.fetch(`${this.apiBaseUrl}/api/storage/files/${idSegment(fileId)}/shares`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(parsed.data),
+            ...this.crossOriginCookieInit()
+        });
+        if (!response.ok)
+            throw httpFailure('Create share link', response.status);
+        return (await this.readJson(response, shareLinkResultSchema, 'share link')).result;
+    }
+    /**
+     * List active + revoked share links for a file (owner-only).
+     *
+     * GETs from platform-web's `/api/storage/files/[id]/shares`.
+     */
+    async listShareLinks(fileId) {
+        await this.ensureLoaded();
+        const response = await this.fetch(`${this.apiBaseUrl}/api/storage/files/${idSegment(fileId)}/shares`, {
+            method: 'GET',
+            ...this.crossOriginCookieInit()
+        });
+        if (!response.ok)
+            throw httpFailure('List share links', response.status);
+        return (await this.readJson(response, shareLinkListResultSchema, 'share link list')).results;
+    }
+    /**
+     * Revoke a share link (owner-only). Soft-revokes server-side so audit data
+     * survives. Returns false when the link does not exist or is not owned.
+     *
+     * DELETEs platform-web's `/api/storage/files/[id]/shares/[shareId]`.
+     */
+    async revokeShareLink(fileId, shareId) {
+        await this.ensureLoaded();
+        const response = await this.fetch(`${this.apiBaseUrl}/api/storage/files/${idSegment(fileId)}/shares/${idSegment(shareId)}`, { method: 'DELETE', ...this.crossOriginCookieInit() });
+        if (response.status === 404) {
+            return false;
+        }
+        if (!response.ok)
+            throw httpFailure('Revoke share link', response.status);
+        return true;
+    }
+    /**
+     * Assert that a file is owned by a specific user.
+     *
+     * Uses the /meta endpoint with an optional service token for server-to-server
+     * calls. Compares the file's userId field (returned in the JSON metadata)
+     * against the supplied userId. The X-User-Id header approach is not used
+     * because platform-web never reads that header for authorization.
+     *
+     * Any failure (a refused id, a failed request, an unreadable answer) is "not
+     * owned": the check fails closed and logs the failure's class only.
+     *
+     * @param fileId  - The file ID to check.
+     * @param userId  - The user ID to compare against the file's owner.
+     * @param serviceToken - Optional VIBES_INTERNAL_SERVICE_TOKEN for server-side
+     *   calls made without a forwarded user session cookie.
+     */
+    async assertOwnedBy(fileId, userId, serviceToken) {
+        await this.ensureLoaded();
+        const checked = await attempt(async () => {
+            const headers = {};
+            if (serviceToken) {
+                headers['Authorization'] = `Bearer ${serviceToken}`;
+            }
+            const metaInit = { method: 'GET', headers };
+            if (!serviceToken)
+                metaInit.credentials = 'include';
+            const response = await this.fetch(`${this.apiBaseUrl}/api/storage/files/${idSegment(fileId)}/meta`, metaInit);
+            if (!response.ok)
+                return false;
+            const data = await this.readJson(response, z.looseObject({ userId: z.string().optional() }), 'file metadata');
+            return data.userId === userId;
+        });
+        if (!checked.ok) {
+            getLogger('media', this.runtime).child({ context: 'uploads.client' }).warn('uploads.verifyOwnership: request failed; treating as not owned', {
+                failure: failureLabel(checked.failure)
+            });
+            return false;
+        }
+        return checked.value;
+    }
+    /**
+     * Delete a file.
+     *
+     * DELETEs from platform-web's /api/storage/files/[id] endpoint.
+     */
+    async delete(fileId) {
+        await this.ensureLoaded();
+        const response = await this.fetch(`${this.apiBaseUrl}/api/storage/files/${idSegment(fileId)}`, {
+            method: 'DELETE',
+            ...this.crossOriginCookieInit()
+        });
+        if (response.status === 404) {
+            return false;
+        }
+        if (!response.ok)
+            throw httpFailure('Delete file', response.status);
+        return true;
+    }
+    /**
+     * Storage usage for a user.
+     *
+     * platform-web exposes no usage endpoint to this client, so there is no
+     * answer to give: the call refuses (`upload-usage-unavailable`) instead of
+     * answering zeros that a caller would read as "nothing stored". Query
+     * platform-web directly for usage.
+     */
+    async getUserStorageUsage(_userId) {
+        await this.ensureLoaded();
+        throw new UploadsClientError('Storage usage is not available through the uploads client.', {
+            status: 501,
+            reason: 'upload-usage-unavailable'
+        });
+    }
+    // ------------------------------------------------------------------
+    // Internal helpers
+    // ------------------------------------------------------------------
+    /**
+     * Refuse an upload that cannot succeed, before any request: unknown kind,
+     * empty provenance, a size or type the package forbids, a size over the
+     * caller's own cap, or a type outside the caller's own allowlist.
+     */
+    validateUploadOptions(options) {
+        const size = options.file instanceof Blob ? options.file.size : options.file.byteLength;
+        const contentType = options.contentType ?? (options.file instanceof Blob ? options.file.type : undefined);
+        const checked = validateUpload(size, contentType || undefined, {
+            maxSize: options.maxSize,
+            allowList: options.allowList
+        });
+        if (!checked.valid)
+            throw checked.error;
+    }
+    /** The response's JSON body, parsed by `schema`; an unreadable or mismatching body is `upload-response-invalid`. */
+    async readJson(response, schema, what) {
+        const read = await attempt(() => response.json());
+        const parsed = read.ok ? schema.safeParse(read.value) : undefined;
+        if (parsed?.success)
+            return parsed.data;
+        throw new UploadsClientError(`The uploads service answered ${what} in a shape this client does not accept.`, {
+            status: 502,
+            reason: 'upload-response-invalid'
+        });
+    }
+    /**
+     * Build the upload URL with query parameters.
+     */
+    async buildUploadUrl(options) {
+        const baseUrl = this.apiBaseUrl ?? (await this.resolveUploadsApiBaseUrl());
+        // Internal-service uploads (no user cookie) go to the token-gated internal
+        // route; cookie-authenticated browser uploads use the public one.
+        const path = options.serviceToken
+            ? '/api/internal/storage/upload'
+            : '/api/storage/upload';
+        const url = new URL(`${baseUrl}${path}`);
+        url.searchParams.set('sourceApp', options.sourceApp);
+        url.searchParams.set('sourceId', options.sourceId);
+        if (options.isPublic) {
+            url.searchParams.set('isPublic', 'true');
+        }
+        return url;
+    }
+    /**
+     * Cookie-authenticated requests carry session cookies so the catalogued
+     * platform origin can authenticate the browser user even when that origin
+     * differs from the page origin (cross-origin deployments must also allow
+     * the credentials on the platform side). Service-token requests carry their
+     * own Authorization identity instead, so they never depend on cookies.
+     */
+    crossOriginCookieInit() {
+        return { credentials: 'include' };
+    }
+    /**
+     * Resolve the uploads API base URL from the `platform` service catalog.
+     * When that service is undeclared, the browser page origin is the host fact.
+     */
+    async resolveUploadsApiBaseUrl() {
+        const platformDeclared = this.runtime.hasKind('infra/service') &&
+            this.runtime.query('infra/service').withId('platform').descriptors().length > 0;
+        if (platformDeclared) {
+            // Resolved lazily so hosts without a platform catalog (every browser
+            // mount, which falls through to the page origin below) never load
+            // the service reader on the client's critical path.
+            const { serviceOrigin } = await import('@vibesdotdev/infra-contracts/service');
+            return (await serviceOrigin(this.runtime, 'platform')).replace(/\/$/, '');
+        }
+        const browserOrigin = browserWindowOrigin();
+        if (browserOrigin)
+            return browserOrigin;
+        throw new UploadsClientError('The platform origin is not declared for this host (compose the platform infra/service catalog).', { status: 503, reason: 'uploads-origin-unresolved' });
+    }
+    /**
+     * Perform a fetch request.
+     */
+    async fetch(url, init) {
+        // `globalThis.fetch` must stay bound to `globalThis`; a detached reference
+        // throws "Illegal invocation" on workerd (Cloudflare Workers), which is
+        // where server-side uploads (e.g. account-web avatars) run.
+        const fetchFn = this.httpClient?.fetch ?? globalThis.fetch.bind(globalThis);
+        return fetchFn(url, init);
+    }
+}
+/**
+ * Error thrown by UploadsClient: a `CapabilityError` whose code follows the
+ * HTTP status, carrying `status` and a `reason`, naming no response body.
+ */
+export class UploadsClientError extends CapabilityError {
+    status;
+    constructor(message, options) {
+        super(message, codeForStatus(options?.status), {
+            reason: options?.reason ?? 'upload-request-failed',
+            retryable: false,
+            details: options?.status === undefined ? undefined : { status: options.status },
+            cause: options?.cause
+        });
+        this.name = 'UploadsClientError';
+        this.status = options?.status;
+    }
+}
+/** An HTTP failure: the operation and the status, never the response body. */
+function httpFailure(operation, status) {
+    return new UploadsClientError(`${operation} failed (HTTP ${status}).`, { status });
+}
+/** One path segment for `id`: an opaque token, percent-encoded; anything else is `upload-id-invalid`. */
+function idSegment(id) {
+    const token = OpaqueMediaIdSchema.safeParse(id);
+    if (!token.success) {
+        throw new UploadsClientError('An upload id is not an opaque token.', {
+            status: 400,
+            reason: 'upload-id-invalid'
+        });
+    }
+    return encodeURIComponent(token.data);
+}
+/**
+ * Create an uploads client instance directly.
+ *
+ * Prefer getVibesUploadsClient(runtime) for runtime-resolved access.
+ */
+export function createUploadsClient(runtime, context) {
+    return new UploadsClient({ id: 'uploads', kind: 'runtime/client' }, context, runtime);
+}
+export default UploadsClient;
+//# sourceMappingURL=uploads-client.js.map

package/dist/uploads/client/uploads-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads-client.js","sourceRoot":"","sources":["../../../src/uploads/client/uploads-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAiE,MAAM,qBAAqB,CAAC;AACrH,OAAO,EACN,iBAAiB,EAEjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAmB,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,YAAY,EAA4B,MAAM,wBAAwB,CAAC;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EACN,4BAA4B,EAC5B,qBAAqB,EACrB,yBAAyB,EAGzB,MAAM,sBAAsB,CAAC;AAsC9B,kGAAkG;AAClG,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAGH,qHAAqH;AACrH,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5F,CAAC,CAAC;AAEH,SAAS,mBAAmB;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;IAClF,OAAO,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,gDAAgD;AAChD,SAAS,aAAa,CAAC,MAA0B;IAChD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAC/C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,eAAe,CAAC;IACjG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,eAAe,CAAC;IAC3C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,mBAAmB,CAAC;IAC/C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IACvC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,UAAU,CAAC;IACtC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC;IAC1C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IACvD,OAAO,aAAa,CAAC;AACtB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,aAAc,SAAQ,iBAAiB;IAC3C,UAAU,GAAkB,IAAI,CAAC;IACjC,UAAU,GAAmC,IAAI,CAAC;IAE1D,YACC,aAAsC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC/E,OAAqB,EACrB,OAAsB;QAEtB,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAEkB,KAAK,CAAC,MAAM;QAC9B,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;IACzD,CAAC;IAEQ,OAAO;QACf,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,KAAK,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,KAAoB;QAChC,MAAM,MAAM,GAAG,YAAY,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,qBAAqB;gBAC7D,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,2BAA2B;oBAC3F,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,uBAAuB;wBACtF,CAAC,CAAC,wBAAwB,CAAC;YAC5B,MAAM,IAAI,kBAAkB,CAAC,gCAAgC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE1B,sEAAsE;QACtE,iEAAiE;QACjE,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC7C,MAAM,IAAI,kBAAkB,CAAC,4CAA4C,EAAE;gBAC1E,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,mCAAmC;aAC3C,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAE/C,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,QAAQ,GACb,OAAO,CAAC,IAAI,YAAY,IAAI;YAC3B,CAAC,CAAC,OAAO,CAAC,IAAI;YACd,CAAC,CAAC,IAAI,IAAI,CACR,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAC9B,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAC/D,CAAC;QACL,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,YAAY,IAAI,QAAQ,CAAC,CAAC;QAEpE,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,OAAO,CAAC,YAAY,EAAE,CAAC;YAC5D,IAAI,OAAO,CAAC,MAAM;gBAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;YAChE,IAAI,OAAO,CAAC,cAAc;gBAAE,OAAO,CAAC,yBAAyB,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;QACzF,CAAC;QAED,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACtE,IAAI,CAAC,OAAO,CAAC,YAAY;YAAE,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAExD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,EAAE,QAAQ,CAAC,CAAC;QAEjF,OAAO;YACN,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,YAAY;YAC3C,WAAW,EAAE,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,WAAW;YAClD,IAAI,EAAE,IAAI,CAAC,QAAQ;YACnB,WAAW,EAAE,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;SAChE,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,GAAa;QAC3B,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE1B,yDAAyD;QACzD,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACtD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBACjB,6FAA6F;gBAC7F,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACtK,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACF,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,YAAqB;QAC9C,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE1B,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,YAAY,EAAE,CAAC;YAClB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,YAAY,EAAE,CAAC;QACrD,CAAC;QAED,MAAM,QAAQ,GAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACzD,IAAI,CAAC,YAAY;YAAE,QAAQ,CAAC,WAAW,GAAG,SAAS,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,UAAU,sBAAsB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE1G,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,WAAW,CAAC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE1E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;QAE5E,OAAO;YACN,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,SAAS;YAC9C,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;YAC9B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS;SAChC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,MAAc;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,kBAAkB,CAAC,wDAAwD,EAAE;gBACtF,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,2BAA2B;aACnC,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,OAAO,sBAAsB,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5D,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,UAAkC,EAAE;QACzE,MAAM,MAAM,GAAG,YAAY,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,EAAE;gBACnE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,8BAA8B;aACnD,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,UAAU,sBAAsB,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE;YACrG,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;YACjC,GAAG,IAAI,CAAC,qBAAqB,EAAE;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,WAAW,CAAC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE1E,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;IACpF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,MAAc;QAClC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,UAAU,sBAAsB,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE;YACrG,MAAM,EAAE,KAAK;YACb,GAAG,IAAI,CAAC,qBAAqB,EAAE;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,WAAW,CAAC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEzE,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9F,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,OAAe;QACpD,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAChC,GAAG,IAAI,CAAC,UAAU,sBAAsB,SAAS,CAAC,MAAM,CAAC,WAAW,SAAS,CAAC,OAAO,CAAC,EAAE,EACxF,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,qBAAqB,EAAE,EAAE,CACrD,CAAC;QAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,WAAW,CAAC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE1E,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,MAAc,EAAE,YAAqB;QACxE,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE1B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,IAAI,EAAE;YACxC,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,IAAI,YAAY,EAAE,CAAC;gBAClB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,YAAY,EAAE,CAAC;YACrD,CAAC;YAED,MAAM,QAAQ,GAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YACzD,IAAI,CAAC,YAAY;gBAAE,QAAQ,CAAC,WAAW,GAAG,SAAS,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,UAAU,sBAAsB,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAE9G,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,KAAK,CAAC;YAE/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;YAC9G,OAAO,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,gEAAgE,EAAE;gBAC5I,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC;aACtC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,MAAc;QAC1B,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,UAAU,sBAAsB,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE;YAC9F,MAAM,EAAE,QAAQ;YAChB,GAAG,IAAI,CAAC,qBAAqB,EAAE;SAC/B,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,WAAW,CAAC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEpE,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACxC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE1B,MAAM,IAAI,kBAAkB,CAAC,4DAA4D,EAAE;YAC1F,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,0BAA0B;SAClC,CAAC,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,mBAAmB;IACnB,qEAAqE;IAErE;;;;OAIG;IACK,qBAAqB,CAAC,OAAsB;QACnD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;QACxF,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1G,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,IAAI,SAAS,EAAE;YAC9D,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,MAAM,OAAO,CAAC,KAAK,CAAC;IACzC,CAAC;IAED,oHAAoH;IAC5G,KAAK,CAAC,QAAQ,CAAsB,QAAkB,EAAE,MAAS,EAAE,IAAY;QACtF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QACxC,MAAM,IAAI,kBAAkB,CAAC,gCAAgC,IAAI,0CAA0C,EAAE;YAC5G,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,yBAAyB;SACjC,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc,CAAC,OAAsB;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC,CAAC;QAC3E,2EAA2E;QAC3E,kEAAkE;QAClE,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY;YAChC,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,qBAAqB,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;QAEzC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACrD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEnD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,GAAG,CAAC;IACZ,CAAC;IAED;;;;;;OAMG;IACK,qBAAqB;QAC5B,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IACnC,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,wBAAwB;QACrC,MAAM,gBAAgB,GACrB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;YACrC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QACjF,IAAI,gBAAgB,EAAE,CAAC;YACtB,qEAAqE;YACrE,kEAAkE;YAClE,oDAAoD;YACpD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;YAC/E,OAAO,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC;QAC5C,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,IAAI,kBAAkB,CAC3B,iGAAiG,EACjG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,2BAA2B,EAAE,CACpD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,IAAkB;QAClD,2EAA2E;QAC3E,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5E,OAAO,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;CACD;AAED;;;GAGG;AACH,MAAM,OAAO,kBAAmB,SAAQ,eAAe;IAC7C,MAAM,CAAU;IAEzB,YAAY,OAAe,EAAE,OAA6D;QACzF,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE;YAC9C,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,uBAAuB;YAClD,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;YAC/E,KAAK,EAAE,OAAO,EAAE,KAAK;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;IAC/B,CAAC;CACD;AAED,8EAA8E;AAC9E,SAAS,WAAW,CAAC,SAAiB,EAAE,MAAc;IACrD,OAAO,IAAI,kBAAkB,CAAC,GAAG,SAAS,iBAAiB,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,yGAAyG;AACzG,SAAS,SAAS,CAAC,EAAU;IAC5B,MAAM,KAAK,GAAG,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,kBAAkB,CAAC,sCAAsC,EAAE;YACpE,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,mBAAmB;SAC3B,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAClC,OAAsB,EACtB,OAAqB;IAErB,OAAO,IAAI,aAAa,CACvB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,EACzC,OAAO,EACP,OAAO,CACP,CAAC;AACH,CAAC;AAED,eAAe,aAAa,CAAC"}

package/dist/uploads/docs/uploads.docs.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { DocsTopicDescriptor } from '@vibesdotdev/docs-contracts';
+declare const descriptor: DocsTopicDescriptor;
+export default descriptor;
+//# sourceMappingURL=uploads.docs.descriptor.d.ts.map

package/dist/uploads/docs/uploads.docs.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads.docs.descriptor.d.ts","sourceRoot":"","sources":["../../../src/uploads/docs/uploads.docs.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEvE,QAAA,MAAM,UAAU,EAAE,mBA8DjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/uploads/docs/uploads.docs.descriptor.js

@@ -0,0 +1,65 @@
+const descriptor = {
+    kind: 'docs/topic',
+    id: 'uploads',
+    title: 'Uploads',
+    summary: 'Runtime-resolved file uploads: the uploads/store kind, the uploads client, and share links.',
+    body: {
+        type: 'markdown',
+        sourceType: 'raw',
+        source: `---
+title: Uploads
+summary: Store and share files through the runtime-resolved uploads surface.
+tags: [uploads, storage, media]
+order: 1
+surfaces: [cli, web, in-app]
+hardware: [consumer, cloud]
+id: uploads
+---
+
+Apps upload files through the \`uploads\` runtime client, never through raw
+\`fetch\` against platform-web and never by constructing a storage service:
+
+\`\`\`ts
+import { getVibesUploadsClient } from '@vibesdotdev/media/uploads/client';
+
+const uploads = await getVibesUploadsClient(runtime);
+const file = await uploads.upload({
+  file: buffer,
+  kind: 'chat',
+  sourceApp: 'chat',
+  sourceId: roomId
+});
+\`\`\`
+
+The \`uploads/store\` kind names the storage backend. Hosts compose the
+adapter their scope can support (local filesystem on consumer hardware,
+R2/S3 in the cloud); features resolve it from the runtime and never import
+an adapter. The plugin also registers the runtime-owned
+\`uploads-storage\` client used by the internal legacy storage helpers.
+Initialization failures remain retryable and separate runtimes own separate
+services. Complete upload requests parse through \`uploadClientOptionsSchema\`
+before metadata reads or transport; provenance is trimmed and malformed or
+throwing inputs produce value-free typed refusals. The \`UploadsClient\` share-link methods create revocable public
+links for private files. Hosts configure the local adapter root with
+\`media.uploads.localPath\`: relative roots use the bound workspace, absolute
+roots are used directly, and an omitted root uses \`uploads\`. Save, read, and
+delete share this runtime-owned root and cannot escape it.
+
+\`validateUpload\` and HTTP requests share \`uploadLimitsSchema\`: optional caps
+are positive safe integers and allowlists contain strings. A malformed cap or
+allowlist is refused instead of compared against. \`validateUpload\` returns
+\`upload-limits-invalid\` (throwing accessors included) and uses the parsed
+snapshot; the HTTP boundary reports readable malformed caps as
+\`upload-limits-invalid\` and unreadable or throwing requests as
+\`upload-options-invalid\`. Defaults are 50 MiB and the canonical MIME allowlist.
+See the \`uploads.share-links\` topic.
+`
+    },
+    order: 1,
+    tags: ['uploads', 'storage', 'media'],
+    surfaces: ['cli', 'web', 'in-app'],
+    hardware: ['consumer', 'cloud'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=uploads.docs.descriptor.js.map

package/dist/uploads/docs/uploads.docs.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads.docs.descriptor.js","sourceRoot":"","sources":["../../../src/uploads/docs/uploads.docs.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAAwB;IACvC,IAAI,EAAE,YAAY;IAClB,EAAE,EAAE,SAAS;IACb,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,6FAA6F;IACtG,IAAI,EAAE;QACL,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,KAAK;QACjB,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+CT;KACC;IACD,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC;IACrC,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC;IAClC,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/uploads/docs/uploads.share-links.docs.descriptor.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Descriptor for uploads.share-links
+ */
+declare const descriptor: {
+    kind: "docs/topic";
+    id: string;
+    title: string;
+    summary: string;
+    body: {
+        type: "markdown";
+        sourceType: "raw";
+        source: string;
+    };
+    parent: string;
+    order: number;
+    tags: string[];
+    surfaces: readonly ["cli", "web", "in-app"];
+    hardware: readonly ["consumer", "cloud"];
+    enabled: boolean;
+};
+export default descriptor;
+//# sourceMappingURL=uploads.share-links.docs.descriptor.d.ts.map

package/dist/uploads/docs/uploads.share-links.docs.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads.share-links.docs.descriptor.d.ts","sourceRoot":"","sources":["../../../src/uploads/docs/uploads.share-links.docs.descriptor.ts"],"names":[],"mappings":"AAAA;;GAEG;AAmEH,QAAA,MAAM,UAAU;;;;;;;;;;;;;;;;CAgBf,CAAC;AAEF,eAAe,UAAU,CAAC"}