canopycms 0.0.56 → 0.0.58

package/dist/assets/pipeline.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Finalize pipeline: turns raw uploaded bytes into a validated AssetMeta
+ * (+ optional public object for svg/pdf), or a typed rejection. Pure
+ * transform - no store I/O here (see finalize.ts for the store orchestration
+ * that dedups, writes, and calls this).
+ *
+ * Server-only - never import this module from client/editor code. It pulls
+ * in `file-type`, `image-size`, and the SVG sanitizer, none of which belong
+ * in a browser bundle.
+ */
+import type { AssetMeta } from './types';
+/** Client-declared content types accepted at presign time (UX only - never trusted at finalize). */
+export declare const ALLOWED_UPLOAD_CONTENT_TYPES: Set<string>;
+export interface FinalizeInput {
+    data: Uint8Array;
+    filename: string;
+    uploadedBy?: string;
+}
+export interface FinalizePublicObject {
+    key: string;
+    data: Uint8Array;
+    contentType: string;
+    contentDisposition: string;
+    cacheControl: string;
+}
+export interface FinalizeSuccess {
+    ok: true;
+    meta: AssetMeta;
+    /** Canonical bytes to persist as the original - sanitized bytes for svg, untouched otherwise. */
+    data: Uint8Array;
+    publicObject?: FinalizePublicObject;
+}
+export interface FinalizeRejection {
+    ok: false;
+    status: 413 | 415;
+    error: string;
+}
+export type FinalizeResult = FinalizeSuccess | FinalizeRejection;
+/**
+ * Run the finalize pipeline over freshly-uploaded bytes: sniff the real file
+ * type (never trust the client-declared contentType beyond presign-time UX),
+ * sanitize if svg, hash, extract dimensions, and build the AssetMeta + any
+ * public object (svg/pdf only) the caller should persist.
+ *
+ * Order matters: for SVG, sanitization happens BEFORE hashing - the sanitized
+ * bytes are what get hashed and stored, so a later re-sanitization (e.g. a
+ * stricter sanitizer version) cannot desync a stored hash from its content.
+ */
+export declare function runFinalizePipeline(input: FinalizeInput): Promise<FinalizeResult>;
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/assets/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/assets/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAMxC,oGAAoG;AACpG,eAAO,MAAM,4BAA4B,aAIvC,CAAA;AAkBF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,UAAU,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,UAAU,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,IAAI,CAAA;IACR,IAAI,EAAE,SAAS,CAAA;IACf,iGAAiG;IACjG,IAAI,EAAE,UAAU,CAAA;IAChB,YAAY,CAAC,EAAE,oBAAoB,CAAA;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,KAAK,CAAA;IACT,MAAM,EAAE,GAAG,GAAG,GAAG,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,MAAM,cAAc,GAAG,eAAe,GAAG,iBAAiB,CAAA;AAoEhE;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CA8FvF"}

package/dist/assets/pipeline.js

@@ -0,0 +1,202 @@
+/**
+ * Finalize pipeline: turns raw uploaded bytes into a validated AssetMeta
+ * (+ optional public object for svg/pdf), or a typed rejection. Pure
+ * transform - no store I/O here (see finalize.ts for the store orchestration
+ * that dedups, writes, and calls this).
+ *
+ * Server-only - never import this module from client/editor code. It pulls
+ * in `file-type`, `image-size`, and the SVG sanitizer, none of which belong
+ * in a browser bundle.
+ */
+import { fileTypeFromBuffer } from 'file-type';
+import { imageSize } from 'image-size';
+import { create as createContentDisposition } from 'content-disposition';
+import { hashBytes, publicKey, slugifyFilename } from './keys.js';
+import { sanitizeSvg } from './svg-sanitizer.js';
+import { MAX_INPUT_PIXELS } from './transform-directives.js';
+const RASTER_MIME_TYPES = new Set(['image/png', 'image/jpeg', 'image/webp', 'image/gif']);
+const PDF_MIME_TYPE = 'application/pdf';
+const SVG_MIME_TYPE = 'image/svg+xml';
+/** Client-declared content types accepted at presign time (UX only - never trusted at finalize). */
+export const ALLOWED_UPLOAD_CONTENT_TYPES = new Set([
+    ...RASTER_MIME_TYPES,
+    PDF_MIME_TYPE,
+    SVG_MIME_TYPE,
+]);
+const PDF_MAX_BYTES = 25 * 1024 * 1024;
+/**
+ * Defensive raster byte cap, independent of whatever the configured
+ * AssetStore's own upload-size limit happens to be (that limit lives at the
+ * store/API boundary, not here) - mirrors PDF_MAX_BYTES's role as a
+ * pipeline-level backstop rather than the sole enforcement point.
+ */
+const RASTER_MAX_BYTES = 50 * 1024 * 1024;
+/** EXIF orientation values 5-8 are 90-degree rotations, which swap width/height. */
+const isRotated90 = (orientation) => orientation !== undefined && orientation >= 5 && orientation <= 8;
+const PUBLIC_CACHE_CONTROL = 'public, max-age=31536000, immutable';
+/** U+FEFF (byte-order mark). Built from a char code, not a literal, so this file's source stays pure ASCII. */
+const BOM = String.fromCharCode(0xfeff);
+/**
+ * Strip anything that may legally precede the root `<svg>` element: a BOM,
+ * whitespace, XML comments, the `<?xml ... ?>` prolog, and a `<!DOCTYPE ...>`
+ * declaration - in any order, any number of times (some tools emit more than
+ * one comment). Loops until a pass makes no further change.
+ */
+function stripSvgPreamble(text) {
+    let stripped = text.startsWith(BOM) ? text.slice(BOM.length) : text;
+    let previous;
+    do {
+        previous = stripped;
+        stripped = stripped.replace(/^\s+/, '');
+        stripped = stripped.replace(/^<!--[\s\S]*?-->/, '');
+        stripped = stripped.replace(/^<\?xml[\s\S]*?\?>/i, '');
+        stripped = stripped.replace(/^<!DOCTYPE[\s\S]*?>/i, '');
+    } while (stripped !== previous);
+    return stripped;
+}
+/**
+ * Detect whether `data` is an SVG document. `file-type` cannot do this (SVG is
+ * a text format, not magic-byte-detectable) - and, discovered empirically,
+ * `file-type` does NOT simply return `undefined` for all SVGs either: an SVG
+ * with an `<?xml ?>` prolog gets positively sniffed as generic `application/xml`.
+ * So the pipeline's real branch condition is "not a recognized raster/pdf mime"
+ * (which covers both file-type returning undefined AND returning some other
+ * non-allowlisted guess like application/xml), and within that branch this
+ * function does the actual SVG determination: decode as UTF-8 (reject on
+ * failure), strip anything that may precede the root element, and require the
+ * first element to be `<svg` (case-insensitive).
+ *
+ * Returns the decoded text on success (so the caller doesn't have to decode
+ * twice), or `null` if this is not a decodable SVG document.
+ */
+function sniffSvg(data) {
+    let text;
+    try {
+        text = new TextDecoder('utf-8', { fatal: true }).decode(data);
+    }
+    catch {
+        return null;
+    }
+    const stripped = stripSvgPreamble(text);
+    return /^<svg[\s>/]/i.test(stripped) ? text : null;
+}
+/**
+ * Extract width/height (rasters and svg only - PDFs have no pixel dims).
+ * Non-fatal on failure: a corrupt-but-magic-byte-valid file still finalizes,
+ * just without dimensions (AssetMeta.width/height are optional).
+ */
+function computeDimensions(data) {
+    try {
+        const result = imageSize(data);
+        let { width, height } = result;
+        if (isRotated90(result.orientation)) {
+            ;
+            [width, height] = [height, width];
+        }
+        return { width, height };
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Run the finalize pipeline over freshly-uploaded bytes: sniff the real file
+ * type (never trust the client-declared contentType beyond presign-time UX),
+ * sanitize if svg, hash, extract dimensions, and build the AssetMeta + any
+ * public object (svg/pdf only) the caller should persist.
+ *
+ * Order matters: for SVG, sanitization happens BEFORE hashing - the sanitized
+ * bytes are what get hashed and stored, so a later re-sanitization (e.g. a
+ * stricter sanitizer version) cannot desync a stored hash from its content.
+ */
+export async function runFinalizePipeline(input) {
+    const sniffed = await fileTypeFromBuffer(input.data);
+    let kind;
+    let mime;
+    let ext;
+    let canonicalData = input.data;
+    if (sniffed && RASTER_MIME_TYPES.has(sniffed.mime)) {
+        if (input.data.byteLength > RASTER_MAX_BYTES) {
+            return {
+                ok: false,
+                status: 413,
+                error: `Raster image exceeds the ${RASTER_MAX_BYTES}-byte limit`,
+            };
+        }
+        kind = 'raster';
+        mime = sniffed.mime;
+        ext = sniffed.ext;
+    }
+    else if (sniffed && sniffed.mime === PDF_MIME_TYPE) {
+        if (input.data.byteLength > PDF_MAX_BYTES) {
+            return { ok: false, status: 413, error: `PDF exceeds the ${PDF_MAX_BYTES}-byte limit` };
+        }
+        kind = 'pdf';
+        mime = PDF_MIME_TYPE;
+        ext = sniffed.ext;
+    }
+    else {
+        // Not a recognized raster/pdf - could be a bare/prolog'd SVG, or genuine junk.
+        const svgText = sniffSvg(input.data);
+        if (!svgText) {
+            return { ok: false, status: 415, error: 'Unsupported or unrecognized file type' };
+        }
+        kind = 'svg';
+        mime = SVG_MIME_TYPE;
+        ext = 'svg';
+        canonicalData = new TextEncoder().encode(sanitizeSvg(svgText));
+    }
+    const hash32 = hashBytes(canonicalData);
+    const { slug } = slugifyFilename(input.filename);
+    const dims = kind === 'pdf' ? {} : computeDimensions(canonicalData);
+    // Decompression-bomb defense: a raster's on-disk size says nothing about
+    // its decoded pixel count (a solid-color 30000x30000 PNG compresses to a
+    // few KB) - reject on width*height before this asset is ever finalized, so
+    // the transform engine (transform.ts's own `limitInputPixels`) is never the
+    // only thing standing between an attacker and a huge decode. SVG is exempt:
+    // `computeDimensions` reads its declared viewBox/width/height attributes,
+    // not a decoded raster, so there is no analogous decode-time memory cost.
+    if (kind === 'raster' && dims.width !== undefined && dims.height !== undefined) {
+        const pixelCount = dims.width * dims.height;
+        if (pixelCount > MAX_INPUT_PIXELS) {
+            return {
+                ok: false,
+                status: 413,
+                error: `Image dimensions ${dims.width}x${dims.height} (${pixelCount} pixels) exceed the ${MAX_INPUT_PIXELS}-pixel limit`,
+            };
+        }
+    }
+    const meta = {
+        hash32,
+        filename: input.filename,
+        slug,
+        ext,
+        mime,
+        size: canonicalData.byteLength,
+        ...(dims.width !== undefined && { width: dims.width }),
+        ...(dims.height !== undefined && { height: dims.height }),
+        kind,
+        ...(input.uploadedBy && { uploadedBy: input.uploadedBy }),
+        uploadedAt: new Date().toISOString(),
+    };
+    let publicObject;
+    if (kind === 'svg' || kind === 'pdf') {
+        // svg: rendered inline by the browser. pdf: downloaded under its real
+        // original filename (never the slug) via Content-Disposition, built with
+        // the content-disposition package (RFC 5987) rather than string
+        // interpolation, so header-injection characters in the filename can never
+        // reach a raw HTTP header value.
+        const contentDisposition = createContentDisposition(input.filename, {
+            type: kind === 'svg' ? 'inline' : 'attachment',
+        });
+        publicObject = {
+            key: publicKey(hash32, slug, ext),
+            data: canonicalData,
+            contentType: mime,
+            contentDisposition,
+            cacheControl: PUBLIC_CACHE_CONTROL,
+        };
+    }
+    return { ok: true, meta, data: canonicalData, publicObject };
+}
+//# sourceMappingURL=pipeline.js.map

package/dist/assets/pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../src/assets/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,MAAM,IAAI,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAExE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAA;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAGzD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAA;AACzF,MAAM,aAAa,GAAG,iBAAiB,CAAA;AACvC,MAAM,aAAa,GAAG,eAAe,CAAA;AAErC,oGAAoG;AACpG,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAS;IAC1D,GAAG,iBAAiB;IACpB,aAAa;IACb,aAAa;CACd,CAAC,CAAA;AAEF,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAEtC;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAEzC,oFAAoF;AACpF,MAAM,WAAW,GAAG,CAAC,WAA+B,EAAW,EAAE,CAC/D,WAAW,KAAK,SAAS,IAAI,WAAW,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,CAAA;AAEnE,MAAM,oBAAoB,GAAG,qCAAqC,CAAA;AAgClE,+GAA+G;AAC/G,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;AAEvC;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACnE,IAAI,QAAgB,CAAA;IACpB,GAAG,CAAC;QACF,QAAQ,GAAG,QAAQ,CAAA;QACnB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACvC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAA;QACnD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAA;QACtD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAA;IACzD,CAAC,QAAQ,QAAQ,KAAK,QAAQ,EAAC;IAC/B,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,QAAQ,CAAC,IAAgB;IAChC,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACvC,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;AACpD,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,IAAgB;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;QAC9B,IAAI,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACpC,CAAC;YAAA,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAoB;IAC5D,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAEpD,IAAI,IAAuB,CAAA;IAC3B,IAAI,IAAY,CAAA;IAChB,IAAI,GAAW,CAAA;IACf,IAAI,aAAa,GAAe,KAAK,CAAC,IAAI,CAAA;IAE1C,IAAI,OAAO,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;YAC7C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,4BAA4B,gBAAgB,aAAa;aACjE,CAAA;QACH,CAAC;QACD,IAAI,GAAG,QAAQ,CAAA;QACf,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;QACnB,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;IACnB,CAAC;SAAM,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,aAAa,EAAE,CAAC;YAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mBAAmB,aAAa,aAAa,EAAE,CAAA;QACzF,CAAC;QACD,IAAI,GAAG,KAAK,CAAA;QACZ,IAAI,GAAG,aAAa,CAAA;QACpB,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;IACnB,CAAC;SAAM,CAAC;QACN,+EAA+E;QAC/E,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAA;QACnF,CAAC;QACD,IAAI,GAAG,KAAK,CAAA;QACZ,IAAI,GAAG,aAAa,CAAA;QACpB,GAAG,GAAG,KAAK,CAAA;QACX,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA;IAChE,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,CAAC,CAAA;IACvC,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAChD,MAAM,IAAI,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAA;IAEnE,yEAAyE;IACzE,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAA;QAC3C,IAAI,UAAU,GAAG,gBAAgB,EAAE,CAAC;YAClC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,oBAAoB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,uBAAuB,gBAAgB,cAAc;aACzH,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAc;QACtB,MAAM;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI;QACJ,GAAG;QACH,IAAI;QACJ,IAAI,EAAE,aAAa,CAAC,UAAU;QAC9B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACzD,IAAI;QACJ,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;QACzD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAA;IAED,IAAI,YAA8C,CAAA;IAClD,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACrC,sEAAsE;QACtE,yEAAyE;QACzE,gEAAgE;QAChE,0EAA0E;QAC1E,iCAAiC;QACjC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE;YAClE,IAAI,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY;SAC/C,CAAC,CAAA;QACF,YAAY,GAAG;YACb,GAAG,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC;YACjC,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,IAAI;YACjB,kBAAkB;YAClB,YAAY,EAAE,oBAAoB;SACnC,CAAA;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,CAAA;AAC9D,CAAC"}

package/dist/assets/store-local.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Filesystem-backed AssetStore for dev and tests. Mirrors the same
+ * bucket-prefix layout as S3AssetStore (see keys.ts) so content behaves
+ * identically across adapters.
+ */
+import type { AssetMeta, AssetStore, BeginUploadInput, PublicObject, StagedUploadTarget } from './types';
+export interface LocalAssetStoreOptions {
+    /** Root directory. The five bucket prefixes are created as subdirectories under it. */
+    root: string;
+}
+export declare class LocalAssetStore implements AssetStore {
+    readonly capabilities: {
+        directUpload: boolean;
+    };
+    private readonly root;
+    constructor(options: LocalAssetStoreOptions);
+    /**
+     * Resolve a store key to an absolute filesystem path, guarding against
+     * escape from the root. Keys are internally generated (never taken
+     * verbatim from user input), but this guard is kept as defense-in-depth
+     * (ported from the v1 LocalAssetStore).
+     *
+     * A naive `resolved.startsWith(root)` check would let a sibling directory
+     * that merely shares the root's name as a prefix (e.g. root `.../assets`,
+     * sibling `.../assets-evil`) pass. Comparing against `root + path.sep`
+     * closes that gap.
+     */
+    private resolveKey;
+    private headersSidecarPath;
+    private writeHeadersSidecar;
+    private readHeadersSidecar;
+    private readFileOrNull;
+    private writeFile;
+    private deleteFileIfPresent;
+    beginUpload(_input: BeginUploadInput): Promise<StagedUploadTarget>;
+    /**
+     * Staging methods accept caller-influenced keys (finalize receives the key
+     * from the client), so they must never operate outside the staging prefix —
+     * otherwise a crafted key turns the staging cleanup into an arbitrary-object
+     * delete. The API layer validates too; this is defense-in-depth.
+     */
+    private assertStagingKey;
+    writeStaging(key: string, data: Uint8Array, _contentType?: string): Promise<void>;
+    readStaging(key: string): Promise<Uint8Array | null>;
+    deleteStaging(key: string): Promise<void>;
+    putOriginal(input: {
+        hash32: string;
+        ext: string;
+        data: Uint8Array;
+        contentType: string;
+    }): Promise<void>;
+    readOriginal(hash32: string): Promise<{
+        data: Uint8Array;
+        ext: string;
+        contentType?: string;
+    } | null>;
+    putPublicObject(input: {
+        key: string;
+        data: Uint8Array;
+        contentType: string;
+        contentDisposition?: string;
+        cacheControl?: string;
+    }): Promise<void>;
+    readPublicObject(key: string): Promise<PublicObject | null>;
+    /**
+     * Atomic-exclusive create: opens with the `wx` flag so two concurrent
+     * writers racing on the same hash32 have exactly one winner ('created')
+     * and exactly one loser ('already-exists'). The rename-based
+     * `atomicWriteFile` helper is deliberately NOT used here — a rename
+     * always clobbers the destination, which would let the second writer
+     * silently overwrite the first instead of losing cleanly.
+     */
+    putMetaIfAbsent(hash32: string, meta: AssetMeta): Promise<'created' | 'already-exists'>;
+    getMeta(hash32: string): Promise<AssetMeta | null>;
+    listMeta(input?: {
+        cursor?: string;
+        limit?: number;
+    }): Promise<{
+        items: AssetMeta[];
+        nextCursor?: string;
+    }>;
+    deleteMeta(hash32: string): Promise<void>;
+}
+//# sourceMappingURL=store-local.d.ts.map

package/dist/assets/store-local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-local.d.ts","sourceRoot":"","sources":["../../src/assets/store-local.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,OAAO,KAAK,EACV,SAAS,EACT,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EACnB,MAAM,SAAS,CAAA;AAEhB,MAAM,WAAW,sBAAsB;IACrC,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAA;CACb;AAcD,qBAAa,eAAgB,YAAW,UAAU;IAChD,QAAQ,CAAC,YAAY;;MAA0B;IAC/C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;gBAEjB,OAAO,EAAE,sBAAsB;IAI3C;;;;;;;;;;OAUG;IACH,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,kBAAkB;YAIZ,mBAAmB;YAInB,kBAAkB;YAUlB,cAAc;YAUd,SAAS;YAIT,mBAAmB;IAU3B,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQxE;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAMlB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjF,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAKpD,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKzC,WAAW,CAAC,KAAK,EAAE;QACvB,MAAM,EAAE,MAAM,CAAA;QACd,GAAG,EAAE,MAAM,CAAA;QACX,IAAI,EAAE,UAAU,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMX,YAAY,CAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAsBpE,eAAe,CAAC,KAAK,EAAE;QAC3B,GAAG,EAAE,MAAM,CAAA;QACX,IAAI,EAAE,UAAU,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;QACnB,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,YAAY,CAAC,EAAE,MAAM,CAAA;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUX,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAajE;;;;;;;OAOG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,GAAG,gBAAgB,CAAC;IAYvF,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAWlD,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACnE,KAAK,EAAE,SAAS,EAAE,CAAA;QAClB,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAC;IAkDI,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAShD"}

package/dist/assets/store-local.js

@@ -0,0 +1,254 @@
+/**
+ * Filesystem-backed AssetStore for dev and tests. Mirrors the same
+ * bucket-prefix layout as S3AssetStore (see keys.ts) so content behaves
+ * identically across adapters.
+ */
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { getErrorMessage, isFileExistsError, isNotFoundError } from '../utils/error.js';
+import { atomicWriteFile } from '../utils/atomic-write.js';
+import { ASSET_PREFIXES, metaKey, originalKey, stagingKey } from './keys.js';
+/** Matches S3AssetStore's default; local has no separate configuration knob for it. */
+const DEFAULT_MAX_UPLOAD_BYTES = 50 * 1024 * 1024;
+const DEFAULT_LIST_LIMIT = 24;
+const HEADERS_SIDECAR_SUFFIX = '.headers.json';
+export class LocalAssetStore {
+    constructor(options) {
+        this.capabilities = { directUpload: false };
+        this.root = path.resolve(options.root);
+    }
+    /**
+     * Resolve a store key to an absolute filesystem path, guarding against
+     * escape from the root. Keys are internally generated (never taken
+     * verbatim from user input), but this guard is kept as defense-in-depth
+     * (ported from the v1 LocalAssetStore).
+     *
+     * A naive `resolved.startsWith(root)` check would let a sibling directory
+     * that merely shares the root's name as a prefix (e.g. root `.../assets`,
+     * sibling `.../assets-evil`) pass. Comparing against `root + path.sep`
+     * closes that gap.
+     */
+    resolveKey(key) {
+        const resolved = path.resolve(this.root, key);
+        const rootWithSep = this.root.endsWith(path.sep) ? this.root : this.root + path.sep;
+        if (resolved !== this.root && !resolved.startsWith(rootWithSep)) {
+            throw new Error(`Path traversal detected for key: ${key}`);
+        }
+        return resolved;
+    }
+    headersSidecarPath(filePath) {
+        return `${filePath}${HEADERS_SIDECAR_SUFFIX}`;
+    }
+    async writeHeadersSidecar(filePath, headers) {
+        await atomicWriteFile(this.headersSidecarPath(filePath), JSON.stringify(headers));
+    }
+    async readHeadersSidecar(filePath) {
+        try {
+            const raw = await fs.readFile(this.headersSidecarPath(filePath), 'utf-8');
+            return JSON.parse(raw);
+        }
+        catch (err) {
+            if (isNotFoundError(err))
+                return {};
+            throw err;
+        }
+    }
+    async readFileOrNull(filePath) {
+        try {
+            const buf = await fs.readFile(filePath);
+            return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);
+        }
+        catch (err) {
+            if (isNotFoundError(err))
+                return null;
+            throw err;
+        }
+    }
+    async writeFile(filePath, data) {
+        await atomicWriteFile(filePath, Buffer.from(data));
+    }
+    async deleteFileIfPresent(filePath) {
+        try {
+            await fs.unlink(filePath);
+        }
+        catch (err) {
+            if (!isNotFoundError(err))
+                throw err;
+        }
+        // Best-effort sidecar cleanup; a missing sidecar is not an error.
+        await fs.unlink(this.headersSidecarPath(filePath)).catch(() => { });
+    }
+    async beginUpload(_input) {
+        return {
+            mode: 'proxied',
+            stagingKey: stagingKey(randomUUID()),
+            maxBytes: DEFAULT_MAX_UPLOAD_BYTES,
+        };
+    }
+    /**
+     * Staging methods accept caller-influenced keys (finalize receives the key
+     * from the client), so they must never operate outside the staging prefix —
+     * otherwise a crafted key turns the staging cleanup into an arbitrary-object
+     * delete. The API layer validates too; this is defense-in-depth.
+     */
+    assertStagingKey(key) {
+        if (!key.startsWith(`${ASSET_PREFIXES.staging}/`)) {
+            throw new Error(`Not a staging key: ${key}`);
+        }
+    }
+    async writeStaging(key, data, _contentType) {
+        this.assertStagingKey(key);
+        await this.writeFile(this.resolveKey(key), data);
+    }
+    async readStaging(key) {
+        this.assertStagingKey(key);
+        return this.readFileOrNull(this.resolveKey(key));
+    }
+    async deleteStaging(key) {
+        this.assertStagingKey(key);
+        await this.deleteFileIfPresent(this.resolveKey(key));
+    }
+    async putOriginal(input) {
+        const filePath = this.resolveKey(originalKey(input.hash32, input.ext));
+        await this.writeFile(filePath, input.data);
+        await this.writeHeadersSidecar(filePath, { contentType: input.contentType });
+    }
+    async readOriginal(hash32) {
+        const dir = this.resolveKey(ASSET_PREFIXES.originals);
+        let entries;
+        try {
+            entries = await fs.readdir(dir);
+        }
+        catch (err) {
+            if (isNotFoundError(err))
+                return null;
+            throw err;
+        }
+        const prefix = `${hash32}.`;
+        const match = entries.find((name) => name.startsWith(prefix) && !name.endsWith(HEADERS_SIDECAR_SUFFIX));
+        if (!match)
+            return null;
+        const filePath = path.join(dir, match);
+        const data = await this.readFileOrNull(filePath);
+        if (!data)
+            return null;
+        const headers = await this.readHeadersSidecar(filePath);
+        return { data, ext: match.slice(prefix.length), contentType: headers.contentType };
+    }
+    async putPublicObject(input) {
+        const filePath = this.resolveKey(input.key);
+        await this.writeFile(filePath, input.data);
+        await this.writeHeadersSidecar(filePath, {
+            contentType: input.contentType,
+            contentDisposition: input.contentDisposition,
+            cacheControl: input.cacheControl,
+        });
+    }
+    async readPublicObject(key) {
+        const filePath = this.resolveKey(key);
+        const data = await this.readFileOrNull(filePath);
+        if (!data)
+            return null;
+        const headers = await this.readHeadersSidecar(filePath);
+        return {
+            data,
+            contentType: headers.contentType,
+            contentDisposition: headers.contentDisposition,
+            cacheControl: headers.cacheControl,
+        };
+    }
+    /**
+     * Atomic-exclusive create: opens with the `wx` flag so two concurrent
+     * writers racing on the same hash32 have exactly one winner ('created')
+     * and exactly one loser ('already-exists'). The rename-based
+     * `atomicWriteFile` helper is deliberately NOT used here — a rename
+     * always clobbers the destination, which would let the second writer
+     * silently overwrite the first instead of losing cleanly.
+     */
+    async putMetaIfAbsent(hash32, meta) {
+        const filePath = this.resolveKey(metaKey(hash32));
+        await fs.mkdir(path.dirname(filePath), { recursive: true });
+        try {
+            await fs.writeFile(filePath, JSON.stringify(meta), { flag: 'wx' });
+            return 'created';
+        }
+        catch (err) {
+            if (isFileExistsError(err))
+                return 'already-exists';
+            throw err;
+        }
+    }
+    async getMeta(hash32) {
+        const filePath = this.resolveKey(metaKey(hash32));
+        try {
+            const raw = await fs.readFile(filePath, 'utf-8');
+            return JSON.parse(raw);
+        }
+        catch (err) {
+            if (isNotFoundError(err))
+                return null;
+            throw err;
+        }
+    }
+    async listMeta(input) {
+        const limit = input?.limit ?? DEFAULT_LIST_LIMIT;
+        const dir = this.resolveKey(ASSET_PREFIXES.meta);
+        let filenames;
+        try {
+            filenames = (await fs.readdir(dir)).filter((name) => name.endsWith('.json'));
+        }
+        catch (err) {
+            if (isNotFoundError(err))
+                filenames = [];
+            else
+                throw err;
+        }
+        const all = [];
+        for (const name of filenames) {
+            try {
+                const raw = await fs.readFile(path.join(dir, name), 'utf-8');
+                all.push(JSON.parse(raw));
+            }
+            catch (err) {
+                // A meta file racing with deleteMeta is expected under concurrency;
+                // anything else is a real problem worth surfacing via getErrorMessage.
+                if (!isNotFoundError(err)) {
+                    throw new Error(`Failed to read asset meta file '${name}': ${getErrorMessage(err)}`);
+                }
+            }
+        }
+        // Newest first; hash32 is the deterministic tiebreak for equal timestamps
+        // (common in fast test loops using Date.now()), which keeps pagination
+        // stable and duplicate/gap-free across calls.
+        all.sort((a, b) => {
+            if (a.uploadedAt !== b.uploadedAt)
+                return a.uploadedAt < b.uploadedAt ? 1 : -1;
+            return a.hash32 < b.hash32 ? 1 : -1;
+        });
+        let startIndex = 0;
+        if (input?.cursor) {
+            const afterHash32 = Buffer.from(input.cursor, 'base64').toString('utf-8');
+            const idx = all.findIndex((m) => m.hash32 === afterHash32);
+            startIndex = idx === -1 ? 0 : idx + 1;
+        }
+        const items = all.slice(startIndex, startIndex + limit);
+        const hasMore = startIndex + limit < all.length;
+        const nextCursor = hasMore
+            ? Buffer.from(items[items.length - 1].hash32, 'utf-8').toString('base64')
+            : undefined;
+        return { items, nextCursor };
+    }
+    async deleteMeta(hash32) {
+        const filePath = this.resolveKey(metaKey(hash32));
+        try {
+            await fs.unlink(filePath);
+        }
+        catch (err) {
+            if (isNotFoundError(err))
+                return;
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=store-local.js.map

package/dist/assets/store-local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-local.js","sourceRoot":"","sources":["../../src/assets/store-local.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACpF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAczE,uFAAuF;AACvF,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AACjD,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAC7B,MAAM,sBAAsB,GAAG,eAAe,CAAA;AAS9C,MAAM,OAAO,eAAe;IAI1B,YAAY,OAA+B;QAHlC,iBAAY,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;QAI7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;IAED;;;;;;;;;;OAUG;IACK,UAAU,CAAC,GAAW;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAA;QACnF,IAAI,QAAQ,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAA;QAC5D,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAEO,kBAAkB,CAAC,QAAgB;QACzC,OAAO,GAAG,QAAQ,GAAG,sBAAsB,EAAE,CAAA;IAC/C,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,QAAgB,EAAE,OAAsB;QACxE,MAAM,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;IACnF,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QAC/C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAA;YACzE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAA;QACzC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,eAAe,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAA;YACnC,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,QAAgB;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;YACvC,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAA;QACnE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,eAAe,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAA;YACrC,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,IAAgB;QACxD,MAAM,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IACpD,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,QAAgB;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC3B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAA;QACtC,CAAC;QACD,kEAAkE;QAClE,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACpE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAwB;QACxC,OAAO;YACL,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;YACpC,QAAQ,EAAE,wBAAwB;SACnC,CAAA;IACH,CAAC;IAED;;;;;OAKG;IACK,gBAAgB,CAAC,GAAW;QAClC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,cAAc,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,IAAgB,EAAE,YAAqB;QACrE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;QAC1B,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAW;QAC3B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;QAC1B,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAW;QAC7B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;QAC1B,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAKjB;QACC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QACtE,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC1C,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;IAC9E,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,MAAc;QAEd,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAA;QACrD,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACjC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,eAAe,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAA;YACrC,MAAM,GAAG,CAAA;QACX,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,CAAA;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CACxB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAC5E,CAAA;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACvD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAA;IACpF,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAMrB;QACC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC3C,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC1C,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE;YACvC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,GAAW;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACvD,OAAO;YACL,IAAI;YACJ,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAA;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,IAAe;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;QACjD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3D,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAClE,OAAO,SAAS,CAAA;QAClB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,iBAAiB,CAAC,GAAG,CAAC;gBAAE,OAAO,gBAAgB,CAAA;YACnD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;QACjD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAA;QACrC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,eAAe,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAA;YACrC,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA2C;QAIxD,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,kBAAkB,CAAA;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QAEhD,IAAI,SAAmB,CAAA;QACvB,IAAI,CAAC;YACH,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;QAC9E,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,eAAe,CAAC,GAAG,CAAC;gBAAE,SAAS,GAAG,EAAE,CAAA;;gBACnC,MAAM,GAAG,CAAA;QAChB,CAAC;QAED,MAAM,GAAG,GAAgB,EAAE,CAAA;QAC3B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;gBAC5D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC,CAAA;YACxC,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,oEAAoE;gBACpE,uEAAuE;gBACvE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,MAAM,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBACtF,CAAC;YACH,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,uEAAuE;QACvE,8CAA8C;QAC9C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAChB,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;gBAAE,OAAO,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC9E,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;QAEF,IAAI,UAAU,GAAG,CAAC,CAAA;QAClB,IAAI,KAAK,EAAE,MAAM,EAAE,CAAC;YAClB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YACzE,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAA;YAC1D,UAAU,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAA;QACvC,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,KAAK,CAAC,CAAA;QACvD,MAAM,OAAO,GAAG,UAAU,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM,CAAA;QAC/C,MAAM,UAAU,GAAG,OAAO;YACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzE,CAAC,CAAC,SAAS,CAAA;QAEb,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;QACjD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC3B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,eAAe,CAAC,GAAG,CAAC;gBAAE,OAAM;YAChC,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;CACF"}