captify 0.1.15

package/dist/files/services/file-list/utilities/path-utilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-utilities.d.ts","sourceRoot":"","sources":["../../../../../lib/files/services/file-list/utilities/path-utilities.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAW3E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAMlF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAEvE;AA8DD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAiC7E;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,GAAE,MAAY,GAAG,MAAM,CA2ClF;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAanD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAiB5D"}

package/dist/files/services/file-list/utilities/path-utilities.js

@@ -0,0 +1,243 @@
+import { TENANT_PREFIX_TEMPLATE } from "../constants";
+import { FileListCrossTenantError, FileListPathTraversalError, FileListValidationError, } from "../errors";
+/**
+ * Builds the tenant-scoped S3 prefix for a given tenant and optional path.
+ *
+ * @param tenantId - The tenant identifier
+ * @param prefix - Optional folder path (relative to tenant root)
+ * @returns Full S3 prefix including tenant scope
+ *
+ * @example
+ * buildTenantPrefix("acme", "") => "tenants/acme/"
+ * buildTenantPrefix("acme", "documents") => "tenants/acme/documents/"
+ * buildTenantPrefix("acme", "documents/2025/") => "tenants/acme/documents/2025/"
+ */
+export function buildTenantPrefix(tenantId, prefix) {
+    const tenantPrefix = TENANT_PREFIX_TEMPLATE.replace("{tenantId}", tenantId);
+    if (!prefix) {
+        return tenantPrefix;
+    }
+    // Normalize prefix: ensure it ends with "/" for proper S3 listing
+    const normalizedPrefix = prefix.endsWith("/") ? prefix : `${prefix}/`;
+    return `${tenantPrefix}${normalizedPrefix}`;
+}
+/**
+ * Gets the tenant prefix for a given tenant ID.
+ *
+ * @param tenantId - The tenant identifier
+ * @returns Tenant prefix string
+ */
+export function getTenantPrefix(tenantId) {
+    return TENANT_PREFIX_TEMPLATE.replace("{tenantId}", tenantId);
+}
+/**
+ * Extracts the folder name from an S3 common prefix.
+ * Removes the full prefix and extracts just the immediate folder name.
+ *
+ * @param commonPrefix - Full S3 common prefix
+ * @param fullPrefix - The full prefix used in the list request
+ * @returns Just the folder name
+ *
+ * @example
+ * extractFolderName("tenants/acme/documents/2025/", "tenants/acme/documents/") => "2025"
+ */
+export function extractFolderName(commonPrefix, fullPrefix) {
+    // Remove the full prefix and trailing slash
+    const relativePath = commonPrefix.substring(fullPrefix.length).replace(/\/$/, "");
+    // Get just the immediate folder name (first segment)
+    return relativePath.split("/")[0];
+}
+/**
+ * Transforms an S3 object key to be relative to the tenant prefix.
+ * This removes the tenant prefix so clients work with relative paths.
+ *
+ * @param key - Full S3 object key
+ * @param tenantPrefix - The tenant prefix to remove
+ * @returns Key relative to tenant root
+ *
+ * @example
+ * toRelativeKey("tenants/acme/documents/2025/file.pdf", "tenants/acme/") => "documents/2025/file.pdf"
+ */
+export function toRelativeKey(key, tenantPrefix) {
+    return key.substring(tenantPrefix.length);
+}
+/**
+ * Dangerous path patterns that indicate path traversal attempts
+ */
+const DANGEROUS_PATTERNS = [
+    /\.\.\//, // ../
+    /\.\.\\/, // ..\
+    /(^|[\\/])\.\.($|[\\/])/, // standalone .. segment
+    /\.\//, // ./
+    /\.\\/, // .\
+    /^\/+/, // Leading slashes
+    /\/\/+/, // Multiple consecutive slashes
+];
+/**
+ * Normalizes a string by converting Unicode to NFKC form.
+ * This converts full-width characters to ASCII equivalents
+ * e.g., ．．／ (full-width) becomes ../ (ASCII)
+ */
+function normalizeUnicode(str) {
+    return str.normalize("NFKC");
+}
+/**
+ * Decodes a URL-encoded key safely.
+ * @throws FileListValidationError if decoding fails
+ */
+function decodeKey(key) {
+    try {
+        return decodeURIComponent(key);
+    }
+    catch (_a) {
+        throw new FileListValidationError("Invalid file path - malformed encoding");
+    }
+}
+/**
+ * Checks if a path contains dangerous traversal patterns
+ */
+function containsDangerousPatterns(path) {
+    // Check for null bytes
+    if (path.includes("\0")) {
+        return true;
+    }
+    // Check against dangerous patterns
+    return DANGEROUS_PATTERNS.some((pattern) => pattern.test(path));
+}
+/**
+ * Normalizes a path by removing empty segments and single dots
+ */
+function normalizePath(path) {
+    const segments = path.split("/").filter((segment) => segment !== "" && segment !== ".");
+    if (segments.some((segment) => segment === "..")) {
+        throw new FileListPathTraversalError();
+    }
+    return segments.join("/");
+}
+/**
+ * Validates and normalizes an S3 key to prevent path traversal attacks.
+ * Ensures the key belongs to the specified tenant.
+ *
+ * @param key - The user-provided S3 key (relative to tenant)
+ * @param tenantId - The tenant ID for validation
+ * @returns Normalized full S3 key
+ * @throws FileListPathTraversalError if path traversal is detected
+ * @throws FileListCrossTenantError if the key doesn't match tenant prefix
+ * @throws FileListValidationError if the key has malformed encoding
+ *
+ * @example
+ * validateAndNormalizeKey("documents/file.pdf", "acme") => "tenants/acme/documents/file.pdf"
+ */
+export function validateAndNormalizeKey(key, tenantId) {
+    if (!key || key.trim() === "") {
+        throw new FileListValidationError("File key is required");
+    }
+    // Step 1: Decode URL-encoded characters
+    const decodedKey = decodeKey(key);
+    // Step 2: Normalize Unicode (converts homoglyphs)
+    const normalizedKey = normalizeUnicode(decodedKey);
+    // Step 3: Check for dangerous patterns
+    if (containsDangerousPatterns(normalizedKey)) {
+        throw new FileListPathTraversalError();
+    }
+    // Step 4: Normalize the path
+    const cleanKey = normalizePath(normalizedKey);
+    if (cleanKey === "") {
+        throw new FileListValidationError("File key cannot be empty after normalization");
+    }
+    // Step 5: Build the full key with tenant prefix
+    const tenantPrefix = getTenantPrefix(tenantId);
+    const fullKey = `${tenantPrefix}${cleanKey}`;
+    // Step 6: Verify the full key starts with tenant prefix (defense in depth)
+    if (!fullKey.startsWith(tenantPrefix)) {
+        throw new FileListCrossTenantError();
+    }
+    return fullKey;
+}
+/**
+ * Sanitizes a filename for use in Content-Disposition header.
+ * Removes path components, control characters, and problematic characters.
+ *
+ * @param filename - The filename to sanitize
+ * @param maxLength - Maximum length (default: 255)
+ * @returns Sanitized filename
+ */
+export function sanitizeFilename(filename, maxLength = 255) {
+    if (!filename) {
+        return "download";
+    }
+    // Remove path components (path traversal prevention)
+    let sanitized = filename.replace(/^.*[\\/]/, "");
+    // Remove ASCII control characters (0x00–0x1F, 0x7F)
+    sanitized = Array.from(sanitized)
+        .filter((char) => {
+        const code = char.charCodeAt(0);
+        return code >= 32 && code !== 127;
+    })
+        .join("");
+    // Remove other problematic characters
+    sanitized = sanitized.replace(/[<>:"|?*]/g, "");
+    // Trim whitespace
+    sanitized = sanitized.trim();
+    // Prevent leading dots (hidden files) and multiple consecutive dots
+    sanitized = sanitized.replace(/^\.+/, "").replace(/\.{2,}/g, ".");
+    // If empty after sanitization, use default
+    if (!sanitized) {
+        return "download";
+    }
+    // Truncate if too long (preserve extension if possible)
+    if (sanitized.length > maxLength) {
+        const lastDot = sanitized.lastIndexOf(".");
+        if (lastDot > 0 && sanitized.length - lastDot <= 10) {
+            const ext = sanitized.substring(lastDot);
+            const name = sanitized.substring(0, maxLength - ext.length);
+            sanitized = name + ext;
+        }
+        else {
+            sanitized = sanitized.substring(0, maxLength);
+        }
+    }
+    return sanitized;
+}
+/**
+ * Extracts filename from an S3 key.
+ *
+ * @param key - S3 object key
+ * @returns Filename (last segment of the path)
+ */
+export function extractFilename(key) {
+    const segments = key.split("/").filter((s) => s !== "");
+    if (segments.length > 0) {
+        return segments[segments.length - 1];
+    }
+    // Fallback: try to detect extension from key
+    const extensionMatch = key.match(/\.([a-zA-Z0-9]+)$/);
+    if (extensionMatch) {
+        return `download.${extensionMatch[1]}`;
+    }
+    return "download";
+}
+/**
+ * Builds a Set of all path segments from a full path.
+ * Example: "a/b/c" => Set {"a", "a/b", "a/b/c"}
+ * @param path - The full path to build the Set from.
+ * @returns The built Set of path segments.
+ */
+export function buildPathHierarchy(path) {
+    // Validate input for path traversal attempts
+    const normalizedPath = normalizeUnicode(path);
+    if (containsDangerousPatterns(normalizedPath)) {
+        throw new FileListPathTraversalError();
+    }
+    const parts = path.split("/").filter((part) => part !== "");
+    const paths = new Set();
+    let currentPath = "";
+    for (const part of parts) {
+        // Append the current part to the current path if it's not empty
+        currentPath = currentPath ? `${currentPath}/${part}` : part;
+        // Add the current path to the Set
+        paths.add(currentPath);
+    }
+    return paths;
+}
+//# sourceMappingURL=path-utilities.js.map

package/dist/files/services/file-list/utilities/path-utilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-utilities.js","sourceRoot":"","sources":["../../../../../lib/files/services/file-list/utilities/path-utilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,uCAAuC,CAAC;AAE/C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,MAAe;IACjE,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAE5E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,kEAAkE;IAClE,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC;IAEtE,OAAO,GAAG,YAAY,GAAG,gBAAgB,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,sBAAsB,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,UAAkB;IACxE,4CAA4C;IAC5C,MAAM,YAAY,GAAG,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElF,qDAAqD;IACrD,OAAO,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,YAAoB;IAC7D,OAAO,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,kBAAkB,GAAG;IACzB,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;IAChB,wBAAwB,EAAE,wBAAwB;IAClD,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE,+BAA+B;CAChC,CAAC;AAEX;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,WAAM,CAAC;QACP,MAAM,IAAI,uBAAuB,CAAC,wCAAwC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,yBAAyB,CAAC,IAAY;IAC7C,uBAAuB;IACvB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mCAAmC;IACnC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC;IAExF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,0BAA0B,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW,EAAE,QAAgB;IACnE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,uBAAuB,CAAC,sBAAsB,CAAC,CAAC;IAC5D,CAAC;IAED,wCAAwC;IACxC,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAElC,kDAAkD;IAClD,MAAM,aAAa,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAEnD,uCAAuC;IACvC,IAAI,yBAAyB,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,0BAA0B,EAAE,CAAC;IACzC,CAAC;IAED,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAE9C,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAAC,8CAA8C,CAAC,CAAC;IACpF,CAAC;IAED,gDAAgD;IAChD,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,GAAG,YAAY,GAAG,QAAQ,EAAE,CAAC;IAE7C,2EAA2E;IAC3E,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,wBAAwB,EAAE,CAAC;IACvC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,YAAoB,GAAG;IACxE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,qDAAqD;IACrD,IAAI,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAEjD,oDAAoD;IACpD,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;SAC9B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,OAAO,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC;IACpC,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,sCAAsC;IACtC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAEhD,kBAAkB;IAClB,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAE7B,oEAAoE;IACpE,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAElE,2CAA2C;IAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,wDAAwD;IACxD,IAAI,SAAS,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,OAAO,IAAI,EAAE,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5D,SAAS,GAAG,IAAI,GAAG,GAAG,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,6CAA6C;IAC7C,MAAM,cAAc,GAAG,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACtD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,YAAY,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,6CAA6C;IAC7C,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,yBAAyB,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,0BAA0B,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,gEAAgE;QAChE,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,kCAAkC;QAClC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/files/services/file-list/utilities.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Builds the tenant-scoped S3 prefix for a given tenant and optional path.
+ *
+ * @param tenantId - The tenant identifier
+ * @param prefix - Optional folder path (relative to tenant root)
+ * @returns Full S3 prefix including tenant scope
+ *
+ * @example
+ * buildTenantPrefix("acme", "") => "tenants/acme/"
+ * buildTenantPrefix("acme", "documents") => "tenants/acme/documents/"
+ * buildTenantPrefix("acme", "documents/2025/") => "tenants/acme/documents/2025/"
+ */
+export declare function buildTenantPrefix(tenantId: string, prefix?: string): string;
+/**
+ * Gets the tenant prefix for a given tenant ID.
+ *
+ * @param tenantId - The tenant identifier
+ * @returns Tenant prefix string
+ */
+export declare function getTenantPrefix(tenantId: string): string;
+/**
+ * Extracts the folder name from an S3 common prefix.
+ * Removes the full prefix and extracts just the immediate folder name.
+ *
+ * @param commonPrefix - Full S3 common prefix
+ * @param fullPrefix - The full prefix used in the list request
+ * @returns Just the folder name
+ *
+ * @example
+ * extractFolderName("tenants/acme/documents/2025/", "tenants/acme/documents/") => "2025"
+ */
+export declare function extractFolderName(commonPrefix: string, fullPrefix: string): string;
+/**
+ * Transforms an S3 object key to be relative to the tenant prefix.
+ * This removes the tenant prefix so clients work with relative paths.
+ *
+ * @param key - Full S3 object key
+ * @param tenantPrefix - The tenant prefix to remove
+ * @returns Key relative to tenant root
+ *
+ * @example
+ * toRelativeKey("tenants/acme/documents/2025/file.pdf", "tenants/acme/") => "documents/2025/file.pdf"
+ */
+export declare function toRelativeKey(key: string, tenantPrefix: string): string;
+/**
+ * Validates and normalizes an S3 key to prevent path traversal attacks.
+ * Ensures the key belongs to the specified tenant.
+ *
+ * @param key - The user-provided S3 key (relative to tenant)
+ * @param tenantId - The tenant ID for validation
+ * @returns Normalized full S3 key
+ * @throws FileListPathTraversalError if path traversal is detected
+ * @throws FileListCrossTenantError if the key doesn't match tenant prefix
+ * @throws FileListValidationError if the key has malformed encoding
+ *
+ * @example
+ * validateAndNormalizeKey("documents/file.pdf", "acme") => "tenants/acme/documents/file.pdf"
+ */
+export declare function validateAndNormalizeKey(key: string, tenantId: string): string;
+/**
+ * Sanitizes a filename for use in Content-Disposition header.
+ * Removes path components, control characters, and problematic characters.
+ *
+ * @param filename - The filename to sanitize
+ * @param maxLength - Maximum length (default: 255)
+ * @returns Sanitized filename
+ */
+export declare function sanitizeFilename(filename: string, maxLength?: number): string;
+/**
+ * Extracts filename from an S3 key.
+ *
+ * @param key - S3 object key
+ * @returns Filename (last segment of the path)
+ */
+export declare function extractFilename(key: string): string;
+/**
+ * Builds a Set of all path segments from a full path.
+ * Example: "a/b/c" => Set {"a", "a/b", "a/b/c"}
+ * @param path - The full path to build the Set from.
+ * @returns The built Set of path segments.
+ */
+export declare function buildPathHierarchy(path: string): Set<string>;
+//# sourceMappingURL=utilities.d.ts.map

package/dist/files/services/file-list/utilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utilities.d.ts","sourceRoot":"","sources":["../../../../lib/files/services/file-list/utilities.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAW3E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAMlF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAEvE;AA8DD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAiC7E;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,GAAE,MAAY,GAAG,MAAM,CA2ClF;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAanD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAiB5D"}

package/dist/files/services/file-list/utilities.js

@@ -0,0 +1,243 @@
+import { TENANT_PREFIX_TEMPLATE } from "./constants";
+import { FileListCrossTenantError, FileListPathTraversalError, FileListValidationError, } from "./errors";
+/**
+ * Builds the tenant-scoped S3 prefix for a given tenant and optional path.
+ *
+ * @param tenantId - The tenant identifier
+ * @param prefix - Optional folder path (relative to tenant root)
+ * @returns Full S3 prefix including tenant scope
+ *
+ * @example
+ * buildTenantPrefix("acme", "") => "tenants/acme/"
+ * buildTenantPrefix("acme", "documents") => "tenants/acme/documents/"
+ * buildTenantPrefix("acme", "documents/2025/") => "tenants/acme/documents/2025/"
+ */
+export function buildTenantPrefix(tenantId, prefix) {
+    const tenantPrefix = TENANT_PREFIX_TEMPLATE.replace("{tenantId}", tenantId);
+    if (!prefix) {
+        return tenantPrefix;
+    }
+    // Normalize prefix: ensure it ends with "/" for proper S3 listing
+    const normalizedPrefix = prefix.endsWith("/") ? prefix : `${prefix}/`;
+    return `${tenantPrefix}${normalizedPrefix}`;
+}
+/**
+ * Gets the tenant prefix for a given tenant ID.
+ *
+ * @param tenantId - The tenant identifier
+ * @returns Tenant prefix string
+ */
+export function getTenantPrefix(tenantId) {
+    return TENANT_PREFIX_TEMPLATE.replace("{tenantId}", tenantId);
+}
+/**
+ * Extracts the folder name from an S3 common prefix.
+ * Removes the full prefix and extracts just the immediate folder name.
+ *
+ * @param commonPrefix - Full S3 common prefix
+ * @param fullPrefix - The full prefix used in the list request
+ * @returns Just the folder name
+ *
+ * @example
+ * extractFolderName("tenants/acme/documents/2025/", "tenants/acme/documents/") => "2025"
+ */
+export function extractFolderName(commonPrefix, fullPrefix) {
+    // Remove the full prefix and trailing slash
+    const relativePath = commonPrefix.substring(fullPrefix.length).replace(/\/$/, "");
+    // Get just the immediate folder name (first segment)
+    return relativePath.split("/")[0];
+}
+/**
+ * Transforms an S3 object key to be relative to the tenant prefix.
+ * This removes the tenant prefix so clients work with relative paths.
+ *
+ * @param key - Full S3 object key
+ * @param tenantPrefix - The tenant prefix to remove
+ * @returns Key relative to tenant root
+ *
+ * @example
+ * toRelativeKey("tenants/acme/documents/2025/file.pdf", "tenants/acme/") => "documents/2025/file.pdf"
+ */
+export function toRelativeKey(key, tenantPrefix) {
+    return key.substring(tenantPrefix.length);
+}
+/**
+ * Dangerous path patterns that indicate path traversal attempts
+ */
+const DANGEROUS_PATTERNS = [
+    /\.\.\//, // ../
+    /\.\.\\/, // ..\
+    /(^|[\\/])\.\.($|[\\/])/, // standalone .. segment
+    /\.\//, // ./
+    /\.\\/, // .\
+    /^\/+/, // Leading slashes
+    /\/\/+/, // Multiple consecutive slashes
+];
+/**
+ * Normalizes a string by converting Unicode to NFKC form.
+ * This converts full-width characters to ASCII equivalents
+ * e.g., ．．／ (full-width) becomes ../ (ASCII)
+ */
+function normalizeUnicode(str) {
+    return str.normalize("NFKC");
+}
+/**
+ * Decodes a URL-encoded key safely.
+ * @throws FileListValidationError if decoding fails
+ */
+function decodeKey(key) {
+    try {
+        return decodeURIComponent(key);
+    }
+    catch (_a) {
+        throw new FileListValidationError("Invalid file path - malformed encoding");
+    }
+}
+/**
+ * Checks if a path contains dangerous traversal patterns
+ */
+function containsDangerousPatterns(path) {
+    // Check for null bytes
+    if (path.includes("\0")) {
+        return true;
+    }
+    // Check against dangerous patterns
+    return DANGEROUS_PATTERNS.some((pattern) => pattern.test(path));
+}
+/**
+ * Normalizes a path by removing empty segments and single dots
+ */
+function normalizePath(path) {
+    const segments = path.split("/").filter((segment) => segment !== "" && segment !== ".");
+    if (segments.some((segment) => segment === "..")) {
+        throw new FileListPathTraversalError();
+    }
+    return segments.join("/");
+}
+/**
+ * Validates and normalizes an S3 key to prevent path traversal attacks.
+ * Ensures the key belongs to the specified tenant.
+ *
+ * @param key - The user-provided S3 key (relative to tenant)
+ * @param tenantId - The tenant ID for validation
+ * @returns Normalized full S3 key
+ * @throws FileListPathTraversalError if path traversal is detected
+ * @throws FileListCrossTenantError if the key doesn't match tenant prefix
+ * @throws FileListValidationError if the key has malformed encoding
+ *
+ * @example
+ * validateAndNormalizeKey("documents/file.pdf", "acme") => "tenants/acme/documents/file.pdf"
+ */
+export function validateAndNormalizeKey(key, tenantId) {
+    if (!key || key.trim() === "") {
+        throw new FileListValidationError("File key is required");
+    }
+    // Step 1: Decode URL-encoded characters
+    const decodedKey = decodeKey(key);
+    // Step 2: Normalize Unicode (converts homoglyphs)
+    const normalizedKey = normalizeUnicode(decodedKey);
+    // Step 3: Check for dangerous patterns
+    if (containsDangerousPatterns(normalizedKey)) {
+        throw new FileListPathTraversalError();
+    }
+    // Step 4: Normalize the path
+    const cleanKey = normalizePath(normalizedKey);
+    if (cleanKey === "") {
+        throw new FileListValidationError("File key cannot be empty after normalization");
+    }
+    // Step 5: Build the full key with tenant prefix
+    const tenantPrefix = getTenantPrefix(tenantId);
+    const fullKey = `${tenantPrefix}${cleanKey}`;
+    // Step 6: Verify the full key starts with tenant prefix (defense in depth)
+    if (!fullKey.startsWith(tenantPrefix)) {
+        throw new FileListCrossTenantError();
+    }
+    return fullKey;
+}
+/**
+ * Sanitizes a filename for use in Content-Disposition header.
+ * Removes path components, control characters, and problematic characters.
+ *
+ * @param filename - The filename to sanitize
+ * @param maxLength - Maximum length (default: 255)
+ * @returns Sanitized filename
+ */
+export function sanitizeFilename(filename, maxLength = 255) {
+    if (!filename) {
+        return "download";
+    }
+    // Remove path components (path traversal prevention)
+    let sanitized = filename.replace(/^.*[\\/]/, "");
+    // Remove ASCII control characters (0x00–0x1F, 0x7F)
+    sanitized = Array.from(sanitized)
+        .filter((char) => {
+        const code = char.charCodeAt(0);
+        return code >= 32 && code !== 127;
+    })
+        .join("");
+    // Remove other problematic characters
+    sanitized = sanitized.replace(/[<>:"|?*]/g, "");
+    // Trim whitespace
+    sanitized = sanitized.trim();
+    // Prevent leading dots (hidden files) and multiple consecutive dots
+    sanitized = sanitized.replace(/^\.+/, "").replace(/\.{2,}/g, ".");
+    // If empty after sanitization, use default
+    if (!sanitized) {
+        return "download";
+    }
+    // Truncate if too long (preserve extension if possible)
+    if (sanitized.length > maxLength) {
+        const lastDot = sanitized.lastIndexOf(".");
+        if (lastDot > 0 && sanitized.length - lastDot <= 10) {
+            const ext = sanitized.substring(lastDot);
+            const name = sanitized.substring(0, maxLength - ext.length);
+            sanitized = name + ext;
+        }
+        else {
+            sanitized = sanitized.substring(0, maxLength);
+        }
+    }
+    return sanitized;
+}
+/**
+ * Extracts filename from an S3 key.
+ *
+ * @param key - S3 object key
+ * @returns Filename (last segment of the path)
+ */
+export function extractFilename(key) {
+    const segments = key.split("/").filter((s) => s !== "");
+    if (segments.length > 0) {
+        return segments[segments.length - 1];
+    }
+    // Fallback: try to detect extension from key
+    const extensionMatch = key.match(/\.([a-zA-Z0-9]+)$/);
+    if (extensionMatch) {
+        return `download.${extensionMatch[1]}`;
+    }
+    return "download";
+}
+/**
+ * Builds a Set of all path segments from a full path.
+ * Example: "a/b/c" => Set {"a", "a/b", "a/b/c"}
+ * @param path - The full path to build the Set from.
+ * @returns The built Set of path segments.
+ */
+export function buildPathHierarchy(path) {
+    // Validate input for path traversal attempts
+    const normalizedPath = normalizeUnicode(path);
+    if (containsDangerousPatterns(normalizedPath)) {
+        throw new FileListPathTraversalError();
+    }
+    const parts = path.split("/").filter((part) => part !== "");
+    const paths = new Set();
+    let currentPath = "";
+    for (const part of parts) {
+        // Append the current part to the current path if it's not empty
+        currentPath = currentPath ? `${currentPath}/${part}` : part;
+        // Add the current path to the Set
+        paths.add(currentPath);
+    }
+    return paths;
+}
+//# sourceMappingURL=utilities.js.map

package/dist/files/services/file-list/utilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utilities.js","sourceRoot":"","sources":["../../../../lib/files/services/file-list/utilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,uCAAuC,CAAC;AAE/C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,MAAe;IACjE,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAE5E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,kEAAkE;IAClE,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC;IAEtE,OAAO,GAAG,YAAY,GAAG,gBAAgB,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,sBAAsB,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,UAAkB;IACxE,4CAA4C;IAC5C,MAAM,YAAY,GAAG,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElF,qDAAqD;IACrD,OAAO,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,YAAoB;IAC7D,OAAO,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,kBAAkB,GAAG;IACzB,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;IAChB,wBAAwB,EAAE,wBAAwB;IAClD,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE,+BAA+B;CAChC,CAAC;AAEX;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,WAAM,CAAC;QACP,MAAM,IAAI,uBAAuB,CAAC,wCAAwC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,yBAAyB,CAAC,IAAY;IAC7C,uBAAuB;IACvB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mCAAmC;IACnC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC;IAExF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,0BAA0B,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW,EAAE,QAAgB;IACnE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,uBAAuB,CAAC,sBAAsB,CAAC,CAAC;IAC5D,CAAC;IAED,wCAAwC;IACxC,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAElC,kDAAkD;IAClD,MAAM,aAAa,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAEnD,uCAAuC;IACvC,IAAI,yBAAyB,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,0BAA0B,EAAE,CAAC;IACzC,CAAC;IAED,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAE9C,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAAC,8CAA8C,CAAC,CAAC;IACpF,CAAC;IAED,gDAAgD;IAChD,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,GAAG,YAAY,GAAG,QAAQ,EAAE,CAAC;IAE7C,2EAA2E;IAC3E,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,wBAAwB,EAAE,CAAC;IACvC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,YAAoB,GAAG;IACxE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,qDAAqD;IACrD,IAAI,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAEjD,oDAAoD;IACpD,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;SAC9B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,OAAO,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC;IACpC,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,sCAAsC;IACtC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAEhD,kBAAkB;IAClB,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAE7B,oEAAoE;IACpE,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAElE,2CAA2C;IAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,wDAAwD;IACxD,IAAI,SAAS,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,OAAO,IAAI,EAAE,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5D,SAAS,GAAG,IAAI,GAAG,GAAG,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,6CAA6C;IAC7C,MAAM,cAAc,GAAG,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACtD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,YAAY,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,6CAA6C;IAC7C,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,yBAAyB,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,0BAA0B,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,gEAAgE;QAChE,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,kCAAkC;QAClC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}