emdash 1.0.1 → 1.2.0

package/dist/marketplace-CNxjq10S.mjs

@@ -1,257 +0,0 @@
-import { a as pluginManifestSchema, o as reconcileManifestAccess } from "./manifest-schema-DcZjRNEv.mjs";
-import { createGzipDecoder, unpackTar } from "modern-tar";
-
-//#region src/plugins/marketplace.ts
-/**
-* MarketplaceClient — HTTP client for the EmDash Plugin Marketplace
-*
-* Used by the install/update/proxy endpoints in EmDash core to communicate
-* with the marketplace Worker. The marketplace is a distribution channel,
-* not a runtime dependency — bundles are copied to site-local R2 at install time.
-*/
-const TRAILING_SLASHES = /\/+$/;
-const LEADING_DOT_SLASH = /^\.\//;
-var MarketplaceError = class extends Error {
-	constructor(message, status, code) {
-		super(message);
-		this.status = status;
-		this.code = code;
-		this.name = "MarketplaceError";
-	}
-};
-var MarketplaceUnavailableError = class extends MarketplaceError {
-	constructor(cause) {
-		super("Plugin marketplace is unavailable", void 0, "MARKETPLACE_UNAVAILABLE");
-		if (cause) this.cause = cause;
-	}
-};
-const MAX_REDIRECTS = 5;
-/**
-* Fetches a marketplace URL, following redirects only while they stay on
-* that URL's origin. Throws a `MarketplaceError` coded
-* `${codePrefix}_REDIRECT_UNTRUSTED` or `${codePrefix}_TOO_MANY_REDIRECTS`.
-*/
-async function fetchWithinOrigin(url, label, codePrefix) {
-	const origin = new URL(url).origin;
-	let currentUrl = url;
-	let response = await fetch(currentUrl, { redirect: "manual" });
-	for (let i = 0; i < MAX_REDIRECTS; i++) {
-		if (response.status < 300 || response.status >= 400) break;
-		const location = response.headers.get("location");
-		if (!location) break;
-		const target = new URL(location, currentUrl);
-		if (target.origin !== origin) throw new MarketplaceError(`${label} redirected to untrusted host: ${target.origin}`, response.status, `${codePrefix}_REDIRECT_UNTRUSTED`);
-		currentUrl = target.href;
-		response = await fetch(currentUrl, { redirect: "manual" });
-	}
-	if (response.status >= 300 && response.status < 400) throw new MarketplaceError(`${label} exceeded maximum redirects (${MAX_REDIRECTS})`, response.status, `${codePrefix}_TOO_MANY_REDIRECTS`);
-	return response;
-}
-var MarketplaceClientImpl = class {
-	baseUrl;
-	siteOrigin;
-	constructor(baseUrl, siteOrigin) {
-		this.baseUrl = baseUrl.replace(TRAILING_SLASHES, "");
-		this.siteOrigin = siteOrigin;
-	}
-	async search(query, opts) {
-		const params = new URLSearchParams();
-		if (query) params.set("q", query);
-		if (opts?.category) params.set("category", opts.category);
-		if (opts?.capability) params.set("capability", opts.capability);
-		if (opts?.sort) params.set("sort", opts.sort);
-		if (opts?.cursor) params.set("cursor", opts.cursor);
-		if (opts?.limit) params.set("limit", String(opts.limit));
-		const qs = params.toString();
-		const url = `${this.baseUrl}/api/v1/plugins${qs ? `?${qs}` : ""}`;
-		return await this.fetchJson(url);
-	}
-	async getPlugin(id) {
-		const url = `${this.baseUrl}/api/v1/plugins/${encodeURIComponent(id)}`;
-		return this.fetchJson(url);
-	}
-	async getVersions(id) {
-		const url = `${this.baseUrl}/api/v1/plugins/${encodeURIComponent(id)}/versions`;
-		return (await this.fetchJson(url)).items;
-	}
-	async downloadBundle(id, version) {
-		const bundleUrl = `${this.baseUrl}/api/v1/plugins/${encodeURIComponent(id)}/versions/${encodeURIComponent(version)}/bundle`;
-		let response;
-		try {
-			response = await fetchWithinOrigin(bundleUrl, "Bundle download", "BUNDLE");
-		} catch (err) {
-			if (err instanceof MarketplaceError) throw err;
-			throw new MarketplaceUnavailableError(err);
-		}
-		if (!response.ok) throw new MarketplaceError(`Failed to download bundle: ${response.status} ${response.statusText}`, response.status, "BUNDLE_DOWNLOAD_FAILED");
-		const tarballBytes = new Uint8Array(await response.arrayBuffer());
-		try {
-			return await extractBundle(tarballBytes);
-		} catch (err) {
-			if (err instanceof MarketplaceError) throw err;
-			throw new MarketplaceError("Failed to extract plugin bundle", void 0, "BUNDLE_EXTRACT_FAILED");
-		}
-	}
-	async reportInstall(id, version) {
-		const siteHash = await generateSiteHash(this.siteOrigin);
-		const url = `${this.baseUrl}/api/v1/plugins/${encodeURIComponent(id)}/installs`;
-		try {
-			await fetch(url, {
-				method: "POST",
-				headers: { "Content-Type": "application/json" },
-				body: JSON.stringify({
-					siteHash,
-					version
-				})
-			});
-		} catch {}
-	}
-	async searchThemes(query, opts) {
-		const params = new URLSearchParams();
-		if (query) params.set("q", query);
-		if (opts?.keyword) params.set("keyword", opts.keyword);
-		if (opts?.sort) params.set("sort", opts.sort);
-		if (opts?.cursor) params.set("cursor", opts.cursor);
-		if (opts?.limit) params.set("limit", String(opts.limit));
-		const qs = params.toString();
-		const url = `${this.baseUrl}/api/v1/themes${qs ? `?${qs}` : ""}`;
-		return this.fetchJson(url);
-	}
-	async getTheme(id) {
-		const url = `${this.baseUrl}/api/v1/themes/${encodeURIComponent(id)}`;
-		return this.fetchJson(url);
-	}
-	async fetchJson(url) {
-		let response;
-		try {
-			response = await fetch(url, { headers: { Accept: "application/json" } });
-		} catch (err) {
-			throw new MarketplaceUnavailableError(err);
-		}
-		if (!response.ok) {
-			let errorMessage = `Marketplace request failed: ${response.status}`;
-			try {
-				const body = await response.json();
-				if (body.error) errorMessage = body.error;
-			} catch {}
-			throw new MarketplaceError(errorMessage, response.status);
-		}
-		return await response.json();
-	}
-};
-/**
-* Extract manifest + code files from a tarball.
-*
-* The tarball is a gzipped tar archive containing:
-* - manifest.json
-* - backend.js
-* - admin.js (optional)
-*
-* We use a minimal tar parser since we only need to read a few small files.
-*/
-/**
-* Exported so the experimental registry install handler can reuse the
-* same parse / validate / hash primitive. Despite the file name, this
-* function predates the marketplace-vs-registry split and is generic
-* over plugin bundle tarballs regardless of distribution channel.
-*/
-const MAX_DECOMPRESSED_BUNDLE_BYTES = 256 * 1024;
-const MAX_BUNDLE_TAR_ENTRIES = 32;
-async function extractBundle(tarballBytes) {
-	const reader = new ReadableStream({ start(controller) {
-		controller.enqueue(tarballBytes);
-		controller.close();
-	} }).pipeThrough(createGzipDecoder()).getReader();
-	const chunks = [];
-	let total = 0;
-	while (true) {
-		const { done, value } = await reader.read();
-		if (done) break;
-		if (!value) continue;
-		total += value.byteLength;
-		if (total > MAX_DECOMPRESSED_BUNDLE_BYTES) {
-			try {
-				await reader.cancel();
-			} catch {}
-			throw new MarketplaceError(`Bundle decompressed size exceeds limit (${MAX_DECOMPRESSED_BUNDLE_BYTES} bytes)`, void 0, "INVALID_BUNDLE");
-		}
-		chunks.push(value);
-	}
-	const decompressedBytes = new Uint8Array(total);
-	{
-		let offset = 0;
-		for (const chunk of chunks) {
-			decompressedBytes.set(chunk, offset);
-			offset += chunk.byteLength;
-		}
-	}
-	const entries = await unpackTar(new ReadableStream({ start(controller) {
-		controller.enqueue(decompressedBytes);
-		controller.close();
-	} }));
-	if (entries.length > MAX_BUNDLE_TAR_ENTRIES) throw new MarketplaceError(`Bundle has too many tar entries (${entries.length} > ${MAX_BUNDLE_TAR_ENTRIES})`, void 0, "INVALID_BUNDLE");
-	const decoder = new TextDecoder();
-	const files = /* @__PURE__ */ new Map();
-	for (const entry of entries) if (entry.data && entry.header.type === "file") {
-		const name = entry.header.name.replace(LEADING_DOT_SLASH, "");
-		files.set(name, decoder.decode(entry.data));
-	}
-	const manifestJson = files.get("manifest.json");
-	const backendCode = files.get("backend.js");
-	if (!manifestJson) throw new MarketplaceError("Invalid bundle: missing manifest.json", void 0, "INVALID_BUNDLE");
-	if (!backendCode) throw new MarketplaceError("Invalid bundle: missing backend.js", void 0, "INVALID_BUNDLE");
-	let manifest;
-	try {
-		const parsed = JSON.parse(manifestJson);
-		const result = pluginManifestSchema.safeParse(parsed);
-		if (!result.success) throw new MarketplaceError("Invalid bundle: manifest.json failed validation", void 0, "INVALID_BUNDLE");
-		manifest = reconcileManifestAccess(result.data);
-	} catch (err) {
-		if (err instanceof MarketplaceError) throw err;
-		throw new MarketplaceError("Invalid bundle: malformed manifest.json", void 0, "INVALID_BUNDLE");
-	}
-	const hashBuffer = await crypto.subtle.digest("SHA-256", tarballBytes);
-	const hashArray = new Uint8Array(hashBuffer);
-	const checksum = Array.from(hashArray, (b) => b.toString(16).padStart(2, "0")).join("");
-	return {
-		manifest,
-		backendCode,
-		adminCode: files.get("admin.js"),
-		checksum
-	};
-}
-/**
-* Generate a stable non-identifying site hash from the site origin.
-* The same origin always produces the same hash, so the marketplace
-* installs table deduplicates correctly per (plugin_id, site_hash).
-*/
-async function generateSiteHash(siteOrigin) {
-	const seed = siteOrigin ? `emdash-site:${siteOrigin}` : `emdash-anonymous`;
-	try {
-		const hash = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(seed));
-		const arr = new Uint8Array(hash);
-		return Array.from(arr.slice(0, 8), (b) => b.toString(16).padStart(2, "0")).join("");
-	} catch {
-		let h = 2166136261;
-		for (let i = 0; i < seed.length; i++) {
-			h ^= seed.charCodeAt(i);
-			h = Math.imul(h, 16777619);
-		}
-		const h2 = h ^ h >>> 16;
-		return (h >>> 0).toString(16).padStart(8, "0") + (h2 >>> 0).toString(16).padStart(8, "0");
-	}
-}
-/**
-* Create a MarketplaceClient for the given marketplace URL.
-*
-* @param baseUrl - The marketplace API base URL (e.g. "https://marketplace.emdashcms.com")
-* @param siteOrigin - The origin of the EmDash site (e.g. "https://myblog.example.com").
-*   Used to generate a stable, non-identifying site hash for install deduplication.
-*/
-function createMarketplaceClient(baseUrl, siteOrigin) {
-	return new MarketplaceClientImpl(baseUrl, siteOrigin);
-}
-
-//#endregion
-export { fetchWithinOrigin as i, MarketplaceUnavailableError as n, createMarketplaceClient as r, MarketplaceError as t };
-//# sourceMappingURL=marketplace-CNxjq10S.mjs.map

package/dist/marketplace-CNxjq10S.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"marketplace-CNxjq10S.mjs","names":[],"sources":["../src/plugins/marketplace.ts"],"sourcesContent":["/**\n * MarketplaceClient — HTTP client for the EmDash Plugin Marketplace\n *\n * Used by the install/update/proxy endpoints in EmDash core to communicate\n * with the marketplace Worker. The marketplace is a distribution channel,\n * not a runtime dependency — bundles are copied to site-local R2 at install time.\n */\n\nimport { createGzipDecoder, unpackTar } from \"modern-tar\";\n\nimport { pluginManifestSchema, reconcileManifestAccess } from \"./manifest-schema.js\";\nimport type { PluginManifest } from \"./types.js\";\n\n// ── Module-level regex patterns ───────────────────────────────────\n\nconst TRAILING_SLASHES = /\\/+$/;\nconst LEADING_DOT_SLASH = /^\\.\\//;\n\n// ── Types ──────────────────────────────────────────────────────────\n\nexport interface MarketplacePluginSummary {\n\tid: string;\n\tname: string;\n\tdescription: string | null;\n\tauthor: {\n\t\tname: string;\n\t\tverified: boolean;\n\t\tavatarUrl: string | null;\n\t};\n\tcapabilities: string[];\n\tkeywords: string[];\n\tinstallCount: number;\n\thasIcon: boolean;\n\ticonUrl: string;\n\tlatestVersion?: {\n\t\tversion: string;\n\t\taudit?: {\n\t\t\tverdict: string;\n\t\t\triskScore: number;\n\t\t};\n\t\timageAudit?: {\n\t\t\tverdict: string;\n\t\t};\n\t};\n\tcreatedAt: string;\n\tupdatedAt: string;\n}\n\nexport interface MarketplaceVersionSummary {\n\tversion: string;\n\tminEmDashVersion: string | null;\n\tbundleSize: number;\n\tchecksum: string;\n\tchangelog: string | null;\n\tcapabilities: string[];\n\tstatus: string;\n\tauditVerdict: string | null;\n\timageAuditVerdict: string | null;\n\tpublishedAt: string;\n}\n\nexport interface MarketplacePluginDetail extends MarketplacePluginSummary {\n\trepositoryUrl: string | null;\n\thomepageUrl: string | null;\n\tlicense: string | null;\n\tlatestVersion?: {\n\t\tversion: string;\n\t\tminEmDashVersion: string | null;\n\t\tbundleSize: number;\n\t\tchecksum: string;\n\t\tchangelog: string | null;\n\t\treadme: string | null;\n\t\thasIcon: boolean;\n\t\tscreenshotCount: number;\n\t\tscreenshotUrls: string[];\n\t\tcapabilities: string[];\n\t\tstatus: string;\n\t\taudit?: {\n\t\t\tverdict: string;\n\t\t\triskScore: number;\n\t\t};\n\t\timageAudit?: {\n\t\t\tverdict: string;\n\t\t};\n\t\tpublishedAt: string;\n\t};\n}\n\nexport interface MarketplaceSearchOpts {\n\tcategory?: string;\n\tcapability?: string;\n\tsort?: \"installs\" | \"updated\" | \"created\" | \"name\";\n\tcursor?: string;\n\tlimit?: number;\n}\n\nexport interface MarketplaceSearchResult {\n\titems: MarketplacePluginSummary[];\n\tnextCursor?: string;\n}\n\n// ── Theme types ───────────────────────────────────────────────────\n\nexport interface MarketplaceThemeSummary {\n\tid: string;\n\tname: string;\n\tdescription: string | null;\n\tauthor: {\n\t\tname: string;\n\t\tverified: boolean;\n\t\tavatarUrl: string | null;\n\t};\n\tkeywords: string[];\n\tpreviewUrl: string;\n\tdemoUrl: string | null;\n\thasThumbnail: boolean;\n\tthumbnailUrl: string | null;\n\tcreatedAt: string;\n\tupdatedAt: string;\n}\n\nexport interface MarketplaceThemeDetail extends MarketplaceThemeSummary {\n\tauthor: {\n\t\tid: string;\n\t\tname: string;\n\t\tverified: boolean;\n\t\tavatarUrl: string | null;\n\t};\n\trepositoryUrl: string | null;\n\thomepageUrl: string | null;\n\tlicense: string | null;\n\tscreenshotCount: number;\n\tscreenshotUrls: string[];\n}\n\nexport interface MarketplaceThemeSearchOpts {\n\tkeyword?: string;\n\tsort?: \"name\" | \"created\" | \"updated\";\n\tcursor?: string;\n\tlimit?: number;\n}\n\nexport interface MarketplaceThemeSearchResult {\n\titems: MarketplaceThemeSummary[];\n\tnextCursor?: string;\n}\n\nexport interface PluginBundle {\n\tmanifest: PluginManifest;\n\tbackendCode: string;\n\tadminCode?: string;\n\tchecksum: string;\n}\n\n// ── Interface ──────────────────────────────────────────────────────\n\nexport interface MarketplaceClient {\n\t/** Search the marketplace catalog */\n\tsearch(query?: string, opts?: MarketplaceSearchOpts): Promise<MarketplaceSearchResult>;\n\n\t/** Get full plugin detail */\n\tgetPlugin(id: string): Promise<MarketplacePluginDetail>;\n\n\t/** Get version history for a plugin */\n\tgetVersions(id: string): Promise<MarketplaceVersionSummary[]>;\n\n\t/** Download and extract a plugin bundle */\n\tdownloadBundle(id: string, version: string): Promise<PluginBundle>;\n\n\t/** Fire-and-forget install stat (never throws) */\n\treportInstall(id: string, version: string): Promise<void>;\n\n\t/** Search theme listings */\n\tsearchThemes(\n\t\tquery?: string,\n\t\topts?: MarketplaceThemeSearchOpts,\n\t): Promise<MarketplaceThemeSearchResult>;\n\n\t/** Get full theme detail */\n\tgetTheme(id: string): Promise<MarketplaceThemeDetail>;\n}\n\n// ── Errors ─────────────────────────────────────────────────────────\n\nexport class MarketplaceError extends Error {\n\tconstructor(\n\t\tmessage: string,\n\t\tpublic readonly status?: number,\n\t\tpublic readonly code?: string,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"MarketplaceError\";\n\t}\n}\n\nexport class MarketplaceUnavailableError extends MarketplaceError {\n\tconstructor(cause?: unknown) {\n\t\tsuper(\"Plugin marketplace is unavailable\", undefined, \"MARKETPLACE_UNAVAILABLE\");\n\t\tif (cause) this.cause = cause;\n\t}\n}\n\nconst MAX_REDIRECTS = 5;\n\n/**\n * Fetches a marketplace URL, following redirects only while they stay on\n * that URL's origin. Throws a `MarketplaceError` coded\n * `${codePrefix}_REDIRECT_UNTRUSTED` or `${codePrefix}_TOO_MANY_REDIRECTS`.\n */\nexport async function fetchWithinOrigin(\n\turl: string,\n\tlabel: string,\n\tcodePrefix: string,\n): Promise<Response> {\n\tconst origin = new URL(url).origin;\n\tlet currentUrl = url;\n\tlet response = await fetch(currentUrl, { redirect: \"manual\" });\n\n\tfor (let i = 0; i < MAX_REDIRECTS; i++) {\n\t\tif (response.status < 300 || response.status >= 400) break;\n\n\t\tconst location = response.headers.get(\"location\");\n\t\tif (!location) break;\n\n\t\tconst target = new URL(location, currentUrl);\n\t\tif (target.origin !== origin) {\n\t\t\tthrow new MarketplaceError(\n\t\t\t\t`${label} redirected to untrusted host: ${target.origin}`,\n\t\t\t\tresponse.status,\n\t\t\t\t`${codePrefix}_REDIRECT_UNTRUSTED`,\n\t\t\t);\n\t\t}\n\t\tcurrentUrl = target.href;\n\t\tresponse = await fetch(currentUrl, { redirect: \"manual\" });\n\t}\n\n\tif (response.status >= 300 && response.status < 400) {\n\t\tthrow new MarketplaceError(\n\t\t\t`${label} exceeded maximum redirects (${MAX_REDIRECTS})`,\n\t\t\tresponse.status,\n\t\t\t`${codePrefix}_TOO_MANY_REDIRECTS`,\n\t\t);\n\t}\n\treturn response;\n}\n\n// ── Implementation ─────────────────────────────────────────────────\n\nclass MarketplaceClientImpl implements MarketplaceClient {\n\tprivate readonly baseUrl: string;\n\tprivate readonly siteOrigin: string | undefined;\n\n\tconstructor(baseUrl: string, siteOrigin?: string) {\n\t\t// Strip trailing slash\n\t\tthis.baseUrl = baseUrl.replace(TRAILING_SLASHES, \"\");\n\t\tthis.siteOrigin = siteOrigin;\n\t}\n\n\tasync search(query?: string, opts?: MarketplaceSearchOpts): Promise<MarketplaceSearchResult> {\n\t\tconst params = new URLSearchParams();\n\t\tif (query) params.set(\"q\", query);\n\t\tif (opts?.category) params.set(\"category\", opts.category);\n\t\tif (opts?.capability) params.set(\"capability\", opts.capability);\n\t\tif (opts?.sort) params.set(\"sort\", opts.sort);\n\t\tif (opts?.cursor) params.set(\"cursor\", opts.cursor);\n\t\tif (opts?.limit) params.set(\"limit\", String(opts.limit));\n\n\t\tconst qs = params.toString();\n\t\tconst url = `${this.baseUrl}/api/v1/plugins${qs ? `?${qs}` : \"\"}`;\n\t\tconst data = await this.fetchJson<MarketplaceSearchResult>(url);\n\t\treturn data;\n\t}\n\n\tasync getPlugin(id: string): Promise<MarketplacePluginDetail> {\n\t\tconst url = `${this.baseUrl}/api/v1/plugins/${encodeURIComponent(id)}`;\n\t\treturn this.fetchJson<MarketplacePluginDetail>(url);\n\t}\n\n\tasync getVersions(id: string): Promise<MarketplaceVersionSummary[]> {\n\t\tconst url = `${this.baseUrl}/api/v1/plugins/${encodeURIComponent(id)}/versions`;\n\t\tconst data = await this.fetchJson<{ items: MarketplaceVersionSummary[] }>(url);\n\t\treturn data.items;\n\t}\n\n\tasync downloadBundle(id: string, version: string): Promise<PluginBundle> {\n\t\tconst bundleUrl = `${this.baseUrl}/api/v1/plugins/${encodeURIComponent(id)}/versions/${encodeURIComponent(version)}/bundle`;\n\n\t\tlet response: Response;\n\t\ttry {\n\t\t\tresponse = await fetchWithinOrigin(bundleUrl, \"Bundle download\", \"BUNDLE\");\n\t\t} catch (err) {\n\t\t\tif (err instanceof MarketplaceError) throw err;\n\t\t\tthrow new MarketplaceUnavailableError(err);\n\t\t}\n\n\t\tif (!response.ok) {\n\t\t\tthrow new MarketplaceError(\n\t\t\t\t`Failed to download bundle: ${response.status} ${response.statusText}`,\n\t\t\t\tresponse.status,\n\t\t\t\t\"BUNDLE_DOWNLOAD_FAILED\",\n\t\t\t);\n\t\t}\n\n\t\tconst tarballBytes = new Uint8Array(await response.arrayBuffer());\n\t\ttry {\n\t\t\treturn await extractBundle(tarballBytes);\n\t\t} catch (err) {\n\t\t\tif (err instanceof MarketplaceError) throw err;\n\t\t\tthrow new MarketplaceError(\n\t\t\t\t\"Failed to extract plugin bundle\",\n\t\t\t\tundefined,\n\t\t\t\t\"BUNDLE_EXTRACT_FAILED\",\n\t\t\t);\n\t\t}\n\t}\n\n\tasync reportInstall(id: string, version: string): Promise<void> {\n\t\t// Generate a stable site hash from the site origin (best-effort, non-identifying)\n\t\tconst siteHash = await generateSiteHash(this.siteOrigin);\n\t\tconst url = `${this.baseUrl}/api/v1/plugins/${encodeURIComponent(id)}/installs`;\n\n\t\ttry {\n\t\t\tawait fetch(url, {\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\t\t\tbody: JSON.stringify({ siteHash, version }),\n\t\t\t});\n\t\t} catch {\n\t\t\t// Fire-and-forget — never throw\n\t\t}\n\t}\n\n\tasync searchThemes(\n\t\tquery?: string,\n\t\topts?: MarketplaceThemeSearchOpts,\n\t): Promise<MarketplaceThemeSearchResult> {\n\t\tconst params = new URLSearchParams();\n\t\tif (query) params.set(\"q\", query);\n\t\tif (opts?.keyword) params.set(\"keyword\", opts.keyword);\n\t\tif (opts?.sort) params.set(\"sort\", opts.sort);\n\t\tif (opts?.cursor) params.set(\"cursor\", opts.cursor);\n\t\tif (opts?.limit) params.set(\"limit\", String(opts.limit));\n\n\t\tconst qs = params.toString();\n\t\tconst url = `${this.baseUrl}/api/v1/themes${qs ? `?${qs}` : \"\"}`;\n\t\treturn this.fetchJson<MarketplaceThemeSearchResult>(url);\n\t}\n\n\tasync getTheme(id: string): Promise<MarketplaceThemeDetail> {\n\t\tconst url = `${this.baseUrl}/api/v1/themes/${encodeURIComponent(id)}`;\n\t\treturn this.fetchJson<MarketplaceThemeDetail>(url);\n\t}\n\n\tprivate async fetchJson<T>(url: string): Promise<T> {\n\t\tlet response: Response;\n\t\ttry {\n\t\t\tresponse = await fetch(url, {\n\t\t\t\theaders: { Accept: \"application/json\" },\n\t\t\t});\n\t\t} catch (err) {\n\t\t\tthrow new MarketplaceUnavailableError(err);\n\t\t}\n\n\t\tif (!response.ok) {\n\t\t\tlet errorMessage = `Marketplace request failed: ${response.status}`;\n\t\t\ttry {\n\t\t\t\tconst body: { error?: string } = await response.json();\n\t\t\t\tif (body.error) errorMessage = body.error;\n\t\t\t} catch {\n\t\t\t\t// use default message\n\t\t\t}\n\t\t\tthrow new MarketplaceError(errorMessage, response.status);\n\t\t}\n\n\t\tconst data: T = await response.json();\n\t\treturn data;\n\t}\n}\n\n// ── Bundle extraction ──────────────────────────────────────────────\n\n/**\n * Extract manifest + code files from a tarball.\n *\n * The tarball is a gzipped tar archive containing:\n * - manifest.json\n * - backend.js\n * - admin.js (optional)\n *\n * We use a minimal tar parser since we only need to read a few small files.\n */\n/**\n * Exported so the experimental registry install handler can reuse the\n * same parse / validate / hash primitive. Despite the file name, this\n * function predates the marketplace-vs-registry split and is generic\n * over plugin bundle tarballs regardless of distribution channel.\n */\n// Aligns with RFC 0001 §\"Bundle size limits\" (256 KiB decompressed,\n// 20 files). Matches `MAX_BUNDLE_SIZE` in @emdash-cms/plugin-cli. We\n// don't import that constant to keep this runtime module independent\n// of the authoring CLI; the two values must stay in sync.\n//\n// Tar adds per-file headers (~512 bytes each) plus directory entries,\n// so the entry count cap is set comfortably above RFC's 20-file limit.\n// Going over either is a strong signal the bundle isn't a legitimate\n// sandboxed plugin.\nconst MAX_DECOMPRESSED_BUNDLE_BYTES = 256 * 1024;\nconst MAX_BUNDLE_TAR_ENTRIES = 32;\n\nexport async function extractBundle(tarballBytes: Uint8Array): Promise<PluginBundle> {\n\t// Decompress fully into memory first, then parse the tar.\n\t// Passing a pipeThrough() stream directly to unpackTar causes a backpressure\n\t// deadlock in workerd: the tar decoder's body-stream pull() needs more\n\t// decompressed data, but the upstream pipe is stalled waiting for the\n\t// decoder's writable side to drain — a circular dependency.\n\tconst decompressedStream = new ReadableStream<Uint8Array>({\n\t\tstart(controller) {\n\t\t\tcontroller.enqueue(tarballBytes);\n\t\t\tcontroller.close();\n\t\t},\n\t}).pipeThrough(createGzipDecoder());\n\n\t// Collect decompressed bytes with a hard cap. A gzip-bomb -- a small\n\t// tarball that decompresses to gigabytes -- otherwise exhausts\n\t// worker / Node memory before we know to reject it. The cap matches\n\t// RFC 0001's publish-time bundle size limit (MAX_DECOMPRESSED_BUNDLE_BYTES);\n\t// anything past that isn't a legitimate sandboxed plugin.\n\tconst reader = decompressedStream.getReader();\n\tconst chunks: Uint8Array[] = [];\n\tlet total = 0;\n\twhile (true) {\n\t\tconst { done, value } = await reader.read();\n\t\tif (done) break;\n\t\tif (!value) continue;\n\t\ttotal += value.byteLength;\n\t\tif (total > MAX_DECOMPRESSED_BUNDLE_BYTES) {\n\t\t\ttry {\n\t\t\t\tawait reader.cancel();\n\t\t\t} catch {\n\t\t\t\t// nothing to do\n\t\t\t}\n\t\t\tthrow new MarketplaceError(\n\t\t\t\t`Bundle decompressed size exceeds limit (${MAX_DECOMPRESSED_BUNDLE_BYTES} bytes)`,\n\t\t\t\tundefined,\n\t\t\t\t\"INVALID_BUNDLE\",\n\t\t\t);\n\t\t}\n\t\tchunks.push(value);\n\t}\n\tconst decompressedBytes = new Uint8Array(total);\n\t{\n\t\tlet offset = 0;\n\t\tfor (const chunk of chunks) {\n\t\t\tdecompressedBytes.set(chunk, offset);\n\t\t\toffset += chunk.byteLength;\n\t\t}\n\t}\n\n\tconst decompressed = new ReadableStream<Uint8Array>({\n\t\tstart(controller) {\n\t\t\tcontroller.enqueue(decompressedBytes);\n\t\t\tcontroller.close();\n\t\t},\n\t});\n\n\tconst entries = await unpackTar(decompressed);\n\tif (entries.length > MAX_BUNDLE_TAR_ENTRIES) {\n\t\tthrow new MarketplaceError(\n\t\t\t`Bundle has too many tar entries (${entries.length} > ${MAX_BUNDLE_TAR_ENTRIES})`,\n\t\t\tundefined,\n\t\t\t\"INVALID_BUNDLE\",\n\t\t);\n\t}\n\n\tconst decoder = new TextDecoder();\n\tconst files = new Map<string, string>();\n\tfor (const entry of entries) {\n\t\tif (entry.data && entry.header.type === \"file\") {\n\t\t\t// Strip leading ./ prefix that tar tools commonly add\n\t\t\tconst name = entry.header.name.replace(LEADING_DOT_SLASH, \"\");\n\t\t\tfiles.set(name, decoder.decode(entry.data));\n\t\t}\n\t}\n\n\tconst manifestJson = files.get(\"manifest.json\");\n\tconst backendCode = files.get(\"backend.js\");\n\n\tif (!manifestJson) {\n\t\tthrow new MarketplaceError(\n\t\t\t\"Invalid bundle: missing manifest.json\",\n\t\t\tundefined,\n\t\t\t\"INVALID_BUNDLE\",\n\t\t);\n\t}\n\tif (!backendCode) {\n\t\tthrow new MarketplaceError(\"Invalid bundle: missing backend.js\", undefined, \"INVALID_BUNDLE\");\n\t}\n\n\tlet manifest: PluginManifest;\n\ttry {\n\t\tconst parsed: unknown = JSON.parse(manifestJson);\n\t\tconst result = pluginManifestSchema.safeParse(parsed);\n\t\tif (!result.success) {\n\t\t\tthrow new MarketplaceError(\n\t\t\t\t\"Invalid bundle: manifest.json failed validation\",\n\t\t\t\tundefined,\n\t\t\t\t\"INVALID_BUNDLE\",\n\t\t\t);\n\t\t}\n\t\tmanifest = reconcileManifestAccess(result.data);\n\t} catch (err) {\n\t\tif (err instanceof MarketplaceError) throw err;\n\t\tthrow new MarketplaceError(\n\t\t\t\"Invalid bundle: malformed manifest.json\",\n\t\t\tundefined,\n\t\t\t\"INVALID_BUNDLE\",\n\t\t);\n\t}\n\n\t// Compute SHA-256 checksum of the tarball for verification\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- Uint8Array is a valid BufferSource at runtime; TS lib mismatch\n\tconst hashBuffer = await crypto.subtle.digest(\"SHA-256\", tarballBytes as unknown as BufferSource);\n\tconst hashArray = new Uint8Array(hashBuffer);\n\tconst checksum = Array.from(hashArray, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n\n\treturn {\n\t\tmanifest,\n\t\tbackendCode,\n\t\tadminCode: files.get(\"admin.js\"),\n\t\tchecksum,\n\t};\n}\n\n// ── Helpers ────────────────────────────────────────────────────────\n\n/**\n * Generate a stable non-identifying site hash from the site origin.\n * The same origin always produces the same hash, so the marketplace\n * installs table deduplicates correctly per (plugin_id, site_hash).\n */\nasync function generateSiteHash(siteOrigin?: string): Promise<string> {\n\tconst seed = siteOrigin ? `emdash-site:${siteOrigin}` : `emdash-anonymous`;\n\ttry {\n\t\tconst hash = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(seed));\n\t\tconst arr = new Uint8Array(hash);\n\t\treturn Array.from(arr.slice(0, 8), (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n\t} catch {\n\t\t// Fallback for environments without crypto.subtle: FNV-1a hash encoded as hex.\n\t\t// Deterministic, uniform distribution, no origin leakage.\n\t\tlet h = 0x811c9dc5;\n\t\tfor (let i = 0; i < seed.length; i++) {\n\t\t\th ^= seed.charCodeAt(i);\n\t\t\th = Math.imul(h, 0x01000193);\n\t\t}\n\t\tconst h2 = h ^ (h >>> 16);\n\t\treturn (h >>> 0).toString(16).padStart(8, \"0\") + (h2 >>> 0).toString(16).padStart(8, \"0\");\n\t}\n}\n\n// ── Factory ────────────────────────────────────────────────────────\n\n/**\n * Create a MarketplaceClient for the given marketplace URL.\n *\n * @param baseUrl - The marketplace API base URL (e.g. \"https://marketplace.emdashcms.com\")\n * @param siteOrigin - The origin of the EmDash site (e.g. \"https://myblog.example.com\").\n *   Used to generate a stable, non-identifying site hash for install deduplication.\n */\nexport function createMarketplaceClient(baseUrl: string, siteOrigin?: string): MarketplaceClient {\n\treturn new MarketplaceClientImpl(baseUrl, siteOrigin);\n}\n"],"mappings":";;;;;;;;;;;AAeA,MAAM,mBAAmB;AACzB,MAAM,oBAAoB;AAwK1B,IAAa,mBAAb,cAAsC,MAAM;CAC3C,YACC,SACA,AAAgB,QAChB,AAAgB,MACf;AACD,QAAM,QAAQ;EAHE;EACA;AAGhB,OAAK,OAAO;;;AAId,IAAa,8BAAb,cAAiD,iBAAiB;CACjE,YAAY,OAAiB;AAC5B,QAAM,qCAAqC,QAAW,0BAA0B;AAChF,MAAI,MAAO,MAAK,QAAQ;;;AAI1B,MAAM,gBAAgB;;;;;;AAOtB,eAAsB,kBACrB,KACA,OACA,YACoB;CACpB,MAAM,SAAS,IAAI,IAAI,IAAI,CAAC;CAC5B,IAAI,aAAa;CACjB,IAAI,WAAW,MAAM,MAAM,YAAY,EAAE,UAAU,UAAU,CAAC;AAE9D,MAAK,IAAI,IAAI,GAAG,IAAI,eAAe,KAAK;AACvC,MAAI,SAAS,SAAS,OAAO,SAAS,UAAU,IAAK;EAErD,MAAM,WAAW,SAAS,QAAQ,IAAI,WAAW;AACjD,MAAI,CAAC,SAAU;EAEf,MAAM,SAAS,IAAI,IAAI,UAAU,WAAW;AAC5C,MAAI,OAAO,WAAW,OACrB,OAAM,IAAI,iBACT,GAAG,MAAM,iCAAiC,OAAO,UACjD,SAAS,QACT,GAAG,WAAW,qBACd;AAEF,eAAa,OAAO;AACpB,aAAW,MAAM,MAAM,YAAY,EAAE,UAAU,UAAU,CAAC;;AAG3D,KAAI,SAAS,UAAU,OAAO,SAAS,SAAS,IAC/C,OAAM,IAAI,iBACT,GAAG,MAAM,+BAA+B,cAAc,IACtD,SAAS,QACT,GAAG,WAAW,qBACd;AAEF,QAAO;;AAKR,IAAM,wBAAN,MAAyD;CACxD,AAAiB;CACjB,AAAiB;CAEjB,YAAY,SAAiB,YAAqB;AAEjD,OAAK,UAAU,QAAQ,QAAQ,kBAAkB,GAAG;AACpD,OAAK,aAAa;;CAGnB,MAAM,OAAO,OAAgB,MAAgE;EAC5F,MAAM,SAAS,IAAI,iBAAiB;AACpC,MAAI,MAAO,QAAO,IAAI,KAAK,MAAM;AACjC,MAAI,MAAM,SAAU,QAAO,IAAI,YAAY,KAAK,SAAS;AACzD,MAAI,MAAM,WAAY,QAAO,IAAI,cAAc,KAAK,WAAW;AAC/D,MAAI,MAAM,KAAM,QAAO,IAAI,QAAQ,KAAK,KAAK;AAC7C,MAAI,MAAM,OAAQ,QAAO,IAAI,UAAU,KAAK,OAAO;AACnD,MAAI,MAAM,MAAO,QAAO,IAAI,SAAS,OAAO,KAAK,MAAM,CAAC;EAExD,MAAM,KAAK,OAAO,UAAU;EAC5B,MAAM,MAAM,GAAG,KAAK,QAAQ,iBAAiB,KAAK,IAAI,OAAO;AAE7D,SADa,MAAM,KAAK,UAAmC,IAAI;;CAIhE,MAAM,UAAU,IAA8C;EAC7D,MAAM,MAAM,GAAG,KAAK,QAAQ,kBAAkB,mBAAmB,GAAG;AACpE,SAAO,KAAK,UAAmC,IAAI;;CAGpD,MAAM,YAAY,IAAkD;EACnE,MAAM,MAAM,GAAG,KAAK,QAAQ,kBAAkB,mBAAmB,GAAG,CAAC;AAErE,UADa,MAAM,KAAK,UAAkD,IAAI,EAClE;;CAGb,MAAM,eAAe,IAAY,SAAwC;EACxE,MAAM,YAAY,GAAG,KAAK,QAAQ,kBAAkB,mBAAmB,GAAG,CAAC,YAAY,mBAAmB,QAAQ,CAAC;EAEnH,IAAI;AACJ,MAAI;AACH,cAAW,MAAM,kBAAkB,WAAW,mBAAmB,SAAS;WAClE,KAAK;AACb,OAAI,eAAe,iBAAkB,OAAM;AAC3C,SAAM,IAAI,4BAA4B,IAAI;;AAG3C,MAAI,CAAC,SAAS,GACb,OAAM,IAAI,iBACT,8BAA8B,SAAS,OAAO,GAAG,SAAS,cAC1D,SAAS,QACT,yBACA;EAGF,MAAM,eAAe,IAAI,WAAW,MAAM,SAAS,aAAa,CAAC;AACjE,MAAI;AACH,UAAO,MAAM,cAAc,aAAa;WAChC,KAAK;AACb,OAAI,eAAe,iBAAkB,OAAM;AAC3C,SAAM,IAAI,iBACT,mCACA,QACA,wBACA;;;CAIH,MAAM,cAAc,IAAY,SAAgC;EAE/D,MAAM,WAAW,MAAM,iBAAiB,KAAK,WAAW;EACxD,MAAM,MAAM,GAAG,KAAK,QAAQ,kBAAkB,mBAAmB,GAAG,CAAC;AAErE,MAAI;AACH,SAAM,MAAM,KAAK;IAChB,QAAQ;IACR,SAAS,EAAE,gBAAgB,oBAAoB;IAC/C,MAAM,KAAK,UAAU;KAAE;KAAU;KAAS,CAAC;IAC3C,CAAC;UACK;;CAKT,MAAM,aACL,OACA,MACwC;EACxC,MAAM,SAAS,IAAI,iBAAiB;AACpC,MAAI,MAAO,QAAO,IAAI,KAAK,MAAM;AACjC,MAAI,MAAM,QAAS,QAAO,IAAI,WAAW,KAAK,QAAQ;AACtD,MAAI,MAAM,KAAM,QAAO,IAAI,QAAQ,KAAK,KAAK;AAC7C,MAAI,MAAM,OAAQ,QAAO,IAAI,UAAU,KAAK,OAAO;AACnD,MAAI,MAAM,MAAO,QAAO,IAAI,SAAS,OAAO,KAAK,MAAM,CAAC;EAExD,MAAM,KAAK,OAAO,UAAU;EAC5B,MAAM,MAAM,GAAG,KAAK,QAAQ,gBAAgB,KAAK,IAAI,OAAO;AAC5D,SAAO,KAAK,UAAwC,IAAI;;CAGzD,MAAM,SAAS,IAA6C;EAC3D,MAAM,MAAM,GAAG,KAAK,QAAQ,iBAAiB,mBAAmB,GAAG;AACnE,SAAO,KAAK,UAAkC,IAAI;;CAGnD,MAAc,UAAa,KAAyB;EACnD,IAAI;AACJ,MAAI;AACH,cAAW,MAAM,MAAM,KAAK,EAC3B,SAAS,EAAE,QAAQ,oBAAoB,EACvC,CAAC;WACM,KAAK;AACb,SAAM,IAAI,4BAA4B,IAAI;;AAG3C,MAAI,CAAC,SAAS,IAAI;GACjB,IAAI,eAAe,+BAA+B,SAAS;AAC3D,OAAI;IACH,MAAM,OAA2B,MAAM,SAAS,MAAM;AACtD,QAAI,KAAK,MAAO,gBAAe,KAAK;WAC7B;AAGR,SAAM,IAAI,iBAAiB,cAAc,SAAS,OAAO;;AAI1D,SADgB,MAAM,SAAS,MAAM;;;;;;;;;;;;;;;;;;;AAgCvC,MAAM,gCAAgC,MAAM;AAC5C,MAAM,yBAAyB;AAE/B,eAAsB,cAAc,cAAiD;CAkBpF,MAAM,SAZqB,IAAI,eAA2B,EACzD,MAAM,YAAY;AACjB,aAAW,QAAQ,aAAa;AAChC,aAAW,OAAO;IAEnB,CAAC,CAAC,YAAY,mBAAmB,CAAC,CAOD,WAAW;CAC7C,MAAM,SAAuB,EAAE;CAC/B,IAAI,QAAQ;AACZ,QAAO,MAAM;EACZ,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,MAAM;AAC3C,MAAI,KAAM;AACV,MAAI,CAAC,MAAO;AACZ,WAAS,MAAM;AACf,MAAI,QAAQ,+BAA+B;AAC1C,OAAI;AACH,UAAM,OAAO,QAAQ;WACd;AAGR,SAAM,IAAI,iBACT,2CAA2C,8BAA8B,UACzE,QACA,iBACA;;AAEF,SAAO,KAAK,MAAM;;CAEnB,MAAM,oBAAoB,IAAI,WAAW,MAAM;CAC/C;EACC,IAAI,SAAS;AACb,OAAK,MAAM,SAAS,QAAQ;AAC3B,qBAAkB,IAAI,OAAO,OAAO;AACpC,aAAU,MAAM;;;CAWlB,MAAM,UAAU,MAAM,UAPD,IAAI,eAA2B,EACnD,MAAM,YAAY;AACjB,aAAW,QAAQ,kBAAkB;AACrC,aAAW,OAAO;IAEnB,CAAC,CAE2C;AAC7C,KAAI,QAAQ,SAAS,uBACpB,OAAM,IAAI,iBACT,oCAAoC,QAAQ,OAAO,KAAK,uBAAuB,IAC/E,QACA,iBACA;CAGF,MAAM,UAAU,IAAI,aAAa;CACjC,MAAM,wBAAQ,IAAI,KAAqB;AACvC,MAAK,MAAM,SAAS,QACnB,KAAI,MAAM,QAAQ,MAAM,OAAO,SAAS,QAAQ;EAE/C,MAAM,OAAO,MAAM,OAAO,KAAK,QAAQ,mBAAmB,GAAG;AAC7D,QAAM,IAAI,MAAM,QAAQ,OAAO,MAAM,KAAK,CAAC;;CAI7C,MAAM,eAAe,MAAM,IAAI,gBAAgB;CAC/C,MAAM,cAAc,MAAM,IAAI,aAAa;AAE3C,KAAI,CAAC,aACJ,OAAM,IAAI,iBACT,yCACA,QACA,iBACA;AAEF,KAAI,CAAC,YACJ,OAAM,IAAI,iBAAiB,sCAAsC,QAAW,iBAAiB;CAG9F,IAAI;AACJ,KAAI;EACH,MAAM,SAAkB,KAAK,MAAM,aAAa;EAChD,MAAM,SAAS,qBAAqB,UAAU,OAAO;AACrD,MAAI,CAAC,OAAO,QACX,OAAM,IAAI,iBACT,mDACA,QACA,iBACA;AAEF,aAAW,wBAAwB,OAAO,KAAK;UACvC,KAAK;AACb,MAAI,eAAe,iBAAkB,OAAM;AAC3C,QAAM,IAAI,iBACT,2CACA,QACA,iBACA;;CAKF,MAAM,aAAa,MAAM,OAAO,OAAO,OAAO,WAAW,aAAwC;CACjG,MAAM,YAAY,IAAI,WAAW,WAAW;CAC5C,MAAM,WAAW,MAAM,KAAK,YAAY,MAAM,EAAE,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;AAEvF,QAAO;EACN;EACA;EACA,WAAW,MAAM,IAAI,WAAW;EAChC;EACA;;;;;;;AAUF,eAAe,iBAAiB,YAAsC;CACrE,MAAM,OAAO,aAAa,eAAe,eAAe;AACxD,KAAI;EACH,MAAM,OAAO,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI,aAAa,CAAC,OAAO,KAAK,CAAC;EAClF,MAAM,MAAM,IAAI,WAAW,KAAK;AAChC,SAAO,MAAM,KAAK,IAAI,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;SAC5E;EAGP,IAAI,IAAI;AACR,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACrC,QAAK,KAAK,WAAW,EAAE;AACvB,OAAI,KAAK,KAAK,GAAG,SAAW;;EAE7B,MAAM,KAAK,IAAK,MAAM;AACtB,UAAQ,MAAM,GAAG,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,OAAO,GAAG,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI;;;;;;;;;;AAa3F,SAAgB,wBAAwB,SAAiB,YAAwC;AAChG,QAAO,IAAI,sBAAsB,SAAS,WAAW"}

package/dist/media-3v7mqAVX.mjs

@@ -1,294 +0,0 @@
-import { i as InvalidCursorError } from "./types-j6MBDjlZ.mjs";
-import { t as isValidFocalPointUpdate } from "./focal-point-JX8kcOTQ.mjs";
-import { t as MediaRepository } from "./media-CputjGE1.mjs";
-import { t as removeUploadAttempt } from "./upload-attempts-BodUoFBu.mjs";
-
-//#region src/api/handlers/media.ts
-const FOREIGN_KEY_VIOLATION_RE = /foreign key constraint failed/i;
-/**
-* List media items
-*/
-async function handleMediaList(db, params) {
-	try {
-		if (params.page !== void 0) {
-			const limit = Math.max(1, Math.min(params.limit || 50, 100));
-			const offset = (params.page - 1) * limit;
-			if (params.cursor !== void 0 || !Number.isSafeInteger(params.page) || params.page < 1 || !Number.isSafeInteger(offset)) return {
-				success: false,
-				error: {
-					code: "VALIDATION_ERROR",
-					message: "Invalid media page"
-				}
-			};
-			return {
-				success: true,
-				data: await new MediaRepository(db).findPage({
-					page: params.page,
-					limit,
-					mimeType: params.mimeType,
-					q: params.q,
-					folderId: params.folderId
-				})
-			};
-		}
-		const result = await new MediaRepository(db).findMany({
-			cursor: params.cursor,
-			limit: Math.max(1, Math.min(params.limit || 50, 100)),
-			mimeType: params.mimeType,
-			q: params.q,
-			folderId: params.folderId
-		});
-		return {
-			success: true,
-			data: {
-				items: result.items,
-				nextCursor: result.nextCursor
-			}
-		};
-	} catch (error) {
-		if (error instanceof InvalidCursorError) return {
-			success: false,
-			error: {
-				code: "INVALID_CURSOR",
-				message: error.message
-			}
-		};
-		return {
-			success: false,
-			error: {
-				code: "MEDIA_LIST_ERROR",
-				message: "Failed to list media"
-			}
-		};
-	}
-}
-/**
-* Get single media item
-*/
-async function handleMediaGet(db, id) {
-	try {
-		const item = await new MediaRepository(db).findById(id);
-		if (!item) return {
-			success: false,
-			error: {
-				code: "NOT_FOUND",
-				message: `Media item not found: ${id}`
-			}
-		};
-		return {
-			success: true,
-			data: { item }
-		};
-	} catch {
-		return {
-			success: false,
-			error: {
-				code: "MEDIA_GET_ERROR",
-				message: "Failed to get media"
-			}
-		};
-	}
-}
-/**
-* Create media item (after file upload)
-*/
-async function handleMediaCreate(db, input) {
-	try {
-		return {
-			success: true,
-			data: { item: await new MediaRepository(db).create(input) }
-		};
-	} catch {
-		return {
-			success: false,
-			error: {
-				code: "MEDIA_CREATE_ERROR",
-				message: "Failed to create media"
-			}
-		};
-	}
-}
-/**
-* Confirm an upload minted by the signed upload URL endpoint.
-*
-* The storage key must belong to a pending media row created for the same
-* user; arbitrary keys never reach storage this way.
-*/
-async function handleMediaRegisterUpload(db, storage, input) {
-	const invalidKey = {
-		success: false,
-		error: {
-			code: "INVALID_STORAGE_KEY",
-			message: "storageKey does not match a pending upload created for this user; request a signed upload URL first"
-		}
-	};
-	try {
-		const repo = new MediaRepository(db);
-		const pending = await repo.findPendingByStorageKey(input.storageKey);
-		if (!pending) return invalidKey;
-		if ((pending.authorId ?? null) !== (input.authorId ?? null)) return invalidKey;
-		if (pending.size === null) return {
-			success: false,
-			error: {
-				code: "INVALID_STATE",
-				message: "Pending upload has no expected size"
-			}
-		};
-		if (!await storage.exists(input.storageKey)) return {
-			success: false,
-			error: {
-				code: "FILE_NOT_FOUND",
-				message: "File was not uploaded to storage"
-			}
-		};
-		const storedFile = await storage.download(input.storageKey);
-		try {
-			if (storedFile.size !== pending.size) return {
-				success: false,
-				error: {
-					code: "UPLOAD_SIZE_MISMATCH",
-					message: "Stored file size does not match the pending upload"
-				}
-			};
-		} finally {
-			try {
-				await storedFile.body.cancel();
-			} catch (error) {
-				console.error("[media] upload confirmation cancellation failed:", error);
-			}
-		}
-		const item = await repo.confirmUpload(pending.id, void 0, input.storageKey);
-		if (!item) return invalidKey;
-		try {
-			await repo.deleteUploadAttempt(input.storageKey);
-		} catch (error) {
-			console.error("[media] upload attempt cleanup failed:", error);
-		}
-		return {
-			success: true,
-			data: { item }
-		};
-	} catch {
-		return {
-			success: false,
-			error: {
-				code: "MEDIA_REGISTER_ERROR",
-				message: "Failed to register the upload"
-			}
-		};
-	}
-}
-/**
-* Update media metadata
-*/
-async function handleMediaUpdate(db, id, input) {
-	if (!isValidFocalPointUpdate(input)) return {
-		success: false,
-		error: {
-			code: "VALIDATION_ERROR",
-			message: "focalX and focalY must both be valid numbers or both be null"
-		}
-	};
-	try {
-		const item = await new MediaRepository(db).update(id, input);
-		if (!item) return {
-			success: false,
-			error: {
-				code: "NOT_FOUND",
-				message: `Media item not found: ${id}`
-			}
-		};
-		return {
-			success: true,
-			data: { item }
-		};
-	} catch (error) {
-		if (isForeignKeyViolation(error)) return {
-			success: false,
-			error: {
-				code: "NOT_FOUND",
-				message: "Media folder not found"
-			}
-		};
-		return {
-			success: false,
-			error: {
-				code: "MEDIA_UPDATE_ERROR",
-				message: "Failed to update media"
-			}
-		};
-	}
-}
-async function handleMediaReplaceMetadata(db, id, expectedStorageKey, input) {
-	try {
-		const item = await new MediaRepository(db).replaceReadyFile(id, expectedStorageKey, input);
-		if (!item) return {
-			success: false,
-			error: {
-				code: "MEDIA_REPLACE_METADATA_ERROR",
-				message: "Failed to update replaced media metadata"
-			}
-		};
-		return {
-			success: true,
-			data: { item }
-		};
-	} catch {
-		return {
-			success: false,
-			error: {
-				code: "MEDIA_REPLACE_METADATA_ERROR",
-				message: "Failed to update replaced media metadata"
-			}
-		};
-	}
-}
-function isForeignKeyViolation(error) {
-	if (error && typeof error === "object") {
-		if ("code" in error && error.code === "23503") return true;
-	}
-	const message = error instanceof Error ? error.message : "";
-	if (FOREIGN_KEY_VIOLATION_RE.test(message)) return true;
-	return Boolean(error && typeof error === "object" && "cause" in error && isForeignKeyViolation(error.cause));
-}
-/** Delete a media item, then delete or queue cleanup of its stored object. */
-async function handleMediaDelete(db, id, storage) {
-	try {
-		const repo = new MediaRepository(db);
-		const notFound = {
-			success: false,
-			error: {
-				code: "NOT_FOUND",
-				message: `Media item not found: ${id}`
-			}
-		};
-		const media = await repo.findById(id);
-		if (!media) return notFound;
-		if (storage) await repo.trackStorageKeyForCleanup(media.id, media.storageKey);
-		const storageKey = await repo.deleteWithStorageKey(id);
-		if (!storageKey) return notFound;
-		let storageDeleted = false;
-		if (storage) if (await repo.isStorageKeyReferenced(storageKey)) await repo.deleteUploadAttempt(storageKey);
-		else storageDeleted = await removeUploadAttempt(storage, repo, storageKey, { allowUntracked: true });
-		return {
-			success: true,
-			data: {
-				deleted: true,
-				storageKey,
-				storageDeleted
-			}
-		};
-	} catch {
-		return {
-			success: false,
-			error: {
-				code: "MEDIA_DELETE_ERROR",
-				message: "Failed to delete media"
-			}
-		};
-	}
-}
-
-//#endregion
-export { handleMediaRegisterUpload as a, handleMediaList as i, handleMediaDelete as n, handleMediaReplaceMetadata as o, handleMediaGet as r, handleMediaUpdate as s, handleMediaCreate as t };
-//# sourceMappingURL=media-3v7mqAVX.mjs.map

package/dist/media-3v7mqAVX.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"media-3v7mqAVX.mjs","names":[],"sources":["../src/api/handlers/media.ts"],"sourcesContent":["/**\n * Media CRUD handlers\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { MediaRepository, type MediaItem } from \"../../database/repositories/media.js\";\nimport { InvalidCursorError } from \"../../database/repositories/types.js\";\nimport type { Database } from \"../../database/types.js\";\nimport { isValidFocalPointUpdate, type FocalPointUpdate } from \"../../media/focal-point.js\";\nimport { removeUploadAttempt } from \"../../media/upload-attempts.js\";\nimport type { Storage } from \"../../storage/types.js\";\nimport type { ApiResult } from \"../types.js\";\n\nconst FOREIGN_KEY_VIOLATION_RE = /foreign key constraint failed/i;\n\nexport interface MediaListResponse {\n\titems: MediaItem[];\n\tnextCursor?: string;\n\ttotalCount?: number;\n}\n\nexport interface MediaResponse {\n\titem: MediaItem;\n}\n\n/**\n * List media items\n */\nexport async function handleMediaList(\n\tdb: Kysely<Database>,\n\tparams: {\n\t\tcursor?: string;\n\t\tpage?: number;\n\t\tlimit?: number;\n\t\tmimeType?: string | readonly string[];\n\t\tq?: string;\n\t\tfolderId?: string | null;\n\t},\n): Promise<ApiResult<MediaListResponse>> {\n\ttry {\n\t\tif (params.page !== undefined) {\n\t\t\tconst limit = Math.max(1, Math.min(params.limit || 50, 100));\n\t\t\tconst offset = (params.page - 1) * limit;\n\t\t\tif (\n\t\t\t\tparams.cursor !== undefined ||\n\t\t\t\t!Number.isSafeInteger(params.page) ||\n\t\t\t\tparams.page < 1 ||\n\t\t\t\t!Number.isSafeInteger(offset)\n\t\t\t) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: { code: \"VALIDATION_ERROR\", message: \"Invalid media page\" },\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tconst repo = new MediaRepository(db);\n\t\t\tconst result = await repo.findPage({\n\t\t\t\tpage: params.page,\n\t\t\t\tlimit,\n\t\t\t\tmimeType: params.mimeType,\n\t\t\t\tq: params.q,\n\t\t\t\tfolderId: params.folderId,\n\t\t\t});\n\t\t\treturn { success: true, data: result };\n\t\t}\n\n\t\tconst repo = new MediaRepository(db);\n\t\tconst result = await repo.findMany({\n\t\t\tcursor: params.cursor,\n\t\t\tlimit: Math.max(1, Math.min(params.limit || 50, 100)),\n\t\t\tmimeType: params.mimeType,\n\t\t\tq: params.q,\n\t\t\tfolderId: params.folderId,\n\t\t});\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: {\n\t\t\t\titems: result.items,\n\t\t\t\tnextCursor: result.nextCursor,\n\t\t\t},\n\t\t};\n\t} catch (error) {\n\t\tif (error instanceof InvalidCursorError) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"INVALID_CURSOR\", message: error.message },\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: {\n\t\t\t\tcode: \"MEDIA_LIST_ERROR\",\n\t\t\t\tmessage: \"Failed to list media\",\n\t\t\t},\n\t\t};\n\t}\n}\n\n/**\n * Get single media item\n */\nexport async function handleMediaGet(\n\tdb: Kysely<Database>,\n\tid: string,\n): Promise<ApiResult<MediaResponse>> {\n\ttry {\n\t\tconst repo = new MediaRepository(db);\n\t\tconst item = await repo.findById(id);\n\n\t\tif (!item) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: {\n\t\t\t\t\tcode: \"NOT_FOUND\",\n\t\t\t\t\tmessage: `Media item not found: ${id}`,\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: { item },\n\t\t};\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: {\n\t\t\t\tcode: \"MEDIA_GET_ERROR\",\n\t\t\t\tmessage: \"Failed to get media\",\n\t\t\t},\n\t\t};\n\t}\n}\n\n/**\n * Create media item (after file upload)\n */\nexport async function handleMediaCreate(\n\tdb: Kysely<Database>,\n\tinput: {\n\t\tfilename: string;\n\t\tmimeType: string;\n\t\tsize?: number;\n\t\twidth?: number;\n\t\theight?: number;\n\t\talt?: string;\n\t\tstorageKey: string;\n\t\tcontentHash?: string;\n\t\tblurhash?: string;\n\t\tdominantColor?: string;\n\t\tauthorId?: string;\n\t\tfolderId?: string | null;\n\t},\n): Promise<ApiResult<MediaResponse>> {\n\ttry {\n\t\tconst repo = new MediaRepository(db);\n\t\tconst item = await repo.create(input);\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: { item },\n\t\t};\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: {\n\t\t\t\tcode: \"MEDIA_CREATE_ERROR\",\n\t\t\t\tmessage: \"Failed to create media\",\n\t\t\t},\n\t\t};\n\t}\n}\n\n/**\n * Confirm an upload minted by the signed upload URL endpoint.\n *\n * The storage key must belong to a pending media row created for the same\n * user; arbitrary keys never reach storage this way.\n */\nexport async function handleMediaRegisterUpload(\n\tdb: Kysely<Database>,\n\tstorage: Storage,\n\tinput: {\n\t\tstorageKey: string;\n\t\tauthorId?: string;\n\t},\n): Promise<ApiResult<MediaResponse>> {\n\tconst invalidKey: ApiResult<never> = {\n\t\tsuccess: false,\n\t\terror: {\n\t\t\tcode: \"INVALID_STORAGE_KEY\",\n\t\t\tmessage:\n\t\t\t\t\"storageKey does not match a pending upload created for this user; request a signed upload URL first\",\n\t\t},\n\t};\n\ttry {\n\t\tconst repo = new MediaRepository(db);\n\t\tconst pending = await repo.findPendingByStorageKey(input.storageKey);\n\t\tif (!pending) return invalidKey;\n\t\tif ((pending.authorId ?? null) !== (input.authorId ?? null)) return invalidKey;\n\t\tif (pending.size === null) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: {\n\t\t\t\t\tcode: \"INVALID_STATE\",\n\t\t\t\t\tmessage: \"Pending upload has no expected size\",\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\t\tif (!(await storage.exists(input.storageKey))) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"FILE_NOT_FOUND\", message: \"File was not uploaded to storage\" },\n\t\t\t};\n\t\t}\n\n\t\tconst storedFile = await storage.download(input.storageKey);\n\t\ttry {\n\t\t\tif (storedFile.size !== pending.size) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"UPLOAD_SIZE_MISMATCH\",\n\t\t\t\t\t\tmessage: \"Stored file size does not match the pending upload\",\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t} finally {\n\t\t\ttry {\n\t\t\t\tawait storedFile.body.cancel();\n\t\t\t} catch (error) {\n\t\t\t\tconsole.error(\"[media] upload confirmation cancellation failed:\", error);\n\t\t\t}\n\t\t}\n\n\t\tconst item = await repo.confirmUpload(pending.id, undefined, input.storageKey);\n\t\tif (!item) return invalidKey;\n\t\ttry {\n\t\t\tawait repo.deleteUploadAttempt(input.storageKey);\n\t\t} catch (error) {\n\t\t\tconsole.error(\"[media] upload attempt cleanup failed:\", error);\n\t\t}\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: { item },\n\t\t};\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: {\n\t\t\t\tcode: \"MEDIA_REGISTER_ERROR\",\n\t\t\t\tmessage: \"Failed to register the upload\",\n\t\t\t},\n\t\t};\n\t}\n}\n\n/**\n * Update media metadata\n */\nexport async function handleMediaUpdate(\n\tdb: Kysely<Database>,\n\tid: string,\n\tinput: {\n\t\talt?: string;\n\t\tcaption?: string;\n\t\twidth?: number;\n\t\theight?: number;\n\t\tfolderId?: string | null;\n\t} & FocalPointUpdate,\n): Promise<ApiResult<MediaResponse>> {\n\tif (!isValidFocalPointUpdate(input)) {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: {\n\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\tmessage: \"focalX and focalY must both be valid numbers or both be null\",\n\t\t\t},\n\t\t};\n\t}\n\ttry {\n\t\tconst repo = new MediaRepository(db);\n\t\tconst item = await repo.update(id, input);\n\n\t\tif (!item) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: {\n\t\t\t\t\tcode: \"NOT_FOUND\",\n\t\t\t\t\tmessage: `Media item not found: ${id}`,\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: { item },\n\t\t};\n\t} catch (error) {\n\t\tif (isForeignKeyViolation(error)) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"NOT_FOUND\", message: \"Media folder not found\" },\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: {\n\t\t\t\tcode: \"MEDIA_UPDATE_ERROR\",\n\t\t\t\tmessage: \"Failed to update media\",\n\t\t\t},\n\t\t};\n\t}\n}\n\nexport async function handleMediaReplaceMetadata(\n\tdb: Kysely<Database>,\n\tid: string,\n\texpectedStorageKey: string,\n\tinput: { size: number; width: number; height: number; contentHash: string },\n): Promise<ApiResult<MediaResponse>> {\n\ttry {\n\t\tconst item = await new MediaRepository(db).replaceReadyFile(id, expectedStorageKey, input);\n\t\tif (!item) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: {\n\t\t\t\t\tcode: \"MEDIA_REPLACE_METADATA_ERROR\",\n\t\t\t\t\tmessage: \"Failed to update replaced media metadata\",\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\t\treturn { success: true, data: { item } };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: {\n\t\t\t\tcode: \"MEDIA_REPLACE_METADATA_ERROR\",\n\t\t\t\tmessage: \"Failed to update replaced media metadata\",\n\t\t\t},\n\t\t};\n\t}\n}\n\nfunction isForeignKeyViolation(error: unknown): boolean {\n\tif (error && typeof error === \"object\") {\n\t\tif (\"code\" in error && error.code === \"23503\") return true;\n\t}\n\tconst message = error instanceof Error ? error.message : \"\";\n\tif (FOREIGN_KEY_VIOLATION_RE.test(message)) return true;\n\treturn Boolean(\n\t\terror && typeof error === \"object\" && \"cause\" in error && isForeignKeyViolation(error.cause),\n\t);\n}\n\n/** Delete a media item, then delete or queue cleanup of its stored object. */\nexport async function handleMediaDelete(\n\tdb: Kysely<Database>,\n\tid: string,\n\tstorage?: Storage | null,\n): Promise<ApiResult<{ deleted: true; storageKey: string; storageDeleted: boolean }>> {\n\ttry {\n\t\tconst repo = new MediaRepository(db);\n\t\tconst notFound: ApiResult<never> = {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"NOT_FOUND\", message: `Media item not found: ${id}` },\n\t\t};\n\n\t\tconst media = await repo.findById(id);\n\t\tif (!media) return notFound;\n\n\t\tif (storage) await repo.trackStorageKeyForCleanup(media.id, media.storageKey);\n\t\tconst storageKey = await repo.deleteWithStorageKey(id);\n\t\tif (!storageKey) return notFound;\n\n\t\tlet storageDeleted = false;\n\t\tif (storage) {\n\t\t\tif (await repo.isStorageKeyReferenced(storageKey)) {\n\t\t\t\t// A legacy or concurrently-created row still owns this object. Remove\n\t\t\t\t// the cleanup marker created above so scheduled cleanup cannot delete it.\n\t\t\t\tawait repo.deleteUploadAttempt(storageKey);\n\t\t\t} else {\n\t\t\t\tstorageDeleted = await removeUploadAttempt(storage, repo, storageKey, {\n\t\t\t\t\tallowUntracked: true,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: { deleted: true, storageKey, storageDeleted },\n\t\t};\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: {\n\t\t\t\tcode: \"MEDIA_DELETE_ERROR\",\n\t\t\t\tmessage: \"Failed to delete media\",\n\t\t\t},\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;AAcA,MAAM,2BAA2B;;;;AAejC,eAAsB,gBACrB,IACA,QAQwC;AACxC,KAAI;AACH,MAAI,OAAO,SAAS,QAAW;GAC9B,MAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,OAAO,SAAS,IAAI,IAAI,CAAC;GAC5D,MAAM,UAAU,OAAO,OAAO,KAAK;AACnC,OACC,OAAO,WAAW,UAClB,CAAC,OAAO,cAAc,OAAO,KAAK,IAClC,OAAO,OAAO,KACd,CAAC,OAAO,cAAc,OAAO,CAE7B,QAAO;IACN,SAAS;IACT,OAAO;KAAE,MAAM;KAAoB,SAAS;KAAsB;IAClE;AAWF,UAAO;IAAE,SAAS;IAAM,MAPT,MADF,IAAI,gBAAgB,GAAG,CACV,SAAS;KAClC,MAAM,OAAO;KACb;KACA,UAAU,OAAO;KACjB,GAAG,OAAO;KACV,UAAU,OAAO;KACjB,CAAC;IACoC;;EAIvC,MAAM,SAAS,MADF,IAAI,gBAAgB,GAAG,CACV,SAAS;GAClC,QAAQ,OAAO;GACf,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI,OAAO,SAAS,IAAI,IAAI,CAAC;GACrD,UAAU,OAAO;GACjB,GAAG,OAAO;GACV,UAAU,OAAO;GACjB,CAAC;AAEF,SAAO;GACN,SAAS;GACT,MAAM;IACL,OAAO,OAAO;IACd,YAAY,OAAO;IACnB;GACD;UACO,OAAO;AACf,MAAI,iBAAiB,mBACpB,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAkB,SAAS,MAAM;IAAS;GACzD;AAEF,SAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS;IACT;GACD;;;;;;AAOH,eAAsB,eACrB,IACA,IACoC;AACpC,KAAI;EAEH,MAAM,OAAO,MADA,IAAI,gBAAgB,GAAG,CACZ,SAAS,GAAG;AAEpC,MAAI,CAAC,KACJ,QAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS,yBAAyB;IAClC;GACD;AAGF,SAAO;GACN,SAAS;GACT,MAAM,EAAE,MAAM;GACd;SACM;AACP,SAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS;IACT;GACD;;;;;;AAOH,eAAsB,kBACrB,IACA,OAcoC;AACpC,KAAI;AAIH,SAAO;GACN,SAAS;GACT,MAAM,EAAE,MAJI,MADA,IAAI,gBAAgB,GAAG,CACZ,OAAO,MAAM,EAItB;GACd;SACM;AACP,SAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS;IACT;GACD;;;;;;;;;AAUH,eAAsB,0BACrB,IACA,SACA,OAIoC;CACpC,MAAM,aAA+B;EACpC,SAAS;EACT,OAAO;GACN,MAAM;GACN,SACC;GACD;EACD;AACD,KAAI;EACH,MAAM,OAAO,IAAI,gBAAgB,GAAG;EACpC,MAAM,UAAU,MAAM,KAAK,wBAAwB,MAAM,WAAW;AACpE,MAAI,CAAC,QAAS,QAAO;AACrB,OAAK,QAAQ,YAAY,WAAW,MAAM,YAAY,MAAO,QAAO;AACpE,MAAI,QAAQ,SAAS,KACpB,QAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS;IACT;GACD;AAEF,MAAI,CAAE,MAAM,QAAQ,OAAO,MAAM,WAAW,CAC3C,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAkB,SAAS;IAAoC;GAC9E;EAGF,MAAM,aAAa,MAAM,QAAQ,SAAS,MAAM,WAAW;AAC3D,MAAI;AACH,OAAI,WAAW,SAAS,QAAQ,KAC/B,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS;KACT;IACD;YAEO;AACT,OAAI;AACH,UAAM,WAAW,KAAK,QAAQ;YACtB,OAAO;AACf,YAAQ,MAAM,oDAAoD,MAAM;;;EAI1E,MAAM,OAAO,MAAM,KAAK,cAAc,QAAQ,IAAI,QAAW,MAAM,WAAW;AAC9E,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI;AACH,SAAM,KAAK,oBAAoB,MAAM,WAAW;WACxC,OAAO;AACf,WAAQ,MAAM,0CAA0C,MAAM;;AAG/D,SAAO;GACN,SAAS;GACT,MAAM,EAAE,MAAM;GACd;SACM;AACP,SAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS;IACT;GACD;;;;;;AAOH,eAAsB,kBACrB,IACA,IACA,OAOoC;AACpC,KAAI,CAAC,wBAAwB,MAAM,CAClC,QAAO;EACN,SAAS;EACT,OAAO;GACN,MAAM;GACN,SAAS;GACT;EACD;AAEF,KAAI;EAEH,MAAM,OAAO,MADA,IAAI,gBAAgB,GAAG,CACZ,OAAO,IAAI,MAAM;AAEzC,MAAI,CAAC,KACJ,QAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS,yBAAyB;IAClC;GACD;AAGF,SAAO;GACN,SAAS;GACT,MAAM,EAAE,MAAM;GACd;UACO,OAAO;AACf,MAAI,sBAAsB,MAAM,CAC/B,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAa,SAAS;IAA0B;GAC/D;AAEF,SAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS;IACT;GACD;;;AAIH,eAAsB,2BACrB,IACA,IACA,oBACA,OACoC;AACpC,KAAI;EACH,MAAM,OAAO,MAAM,IAAI,gBAAgB,GAAG,CAAC,iBAAiB,IAAI,oBAAoB,MAAM;AAC1F,MAAI,CAAC,KACJ,QAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS;IACT;GACD;AAEF,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,MAAM;GAAE;SACjC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS;IACT;GACD;;;AAIH,SAAS,sBAAsB,OAAyB;AACvD,KAAI,SAAS,OAAO,UAAU,UAC7B;MAAI,UAAU,SAAS,MAAM,SAAS,QAAS,QAAO;;CAEvD,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,KAAI,yBAAyB,KAAK,QAAQ,CAAE,QAAO;AACnD,QAAO,QACN,SAAS,OAAO,UAAU,YAAY,WAAW,SAAS,sBAAsB,MAAM,MAAM,CAC5F;;;AAIF,eAAsB,kBACrB,IACA,IACA,SACqF;AACrF,KAAI;EACH,MAAM,OAAO,IAAI,gBAAgB,GAAG;EACpC,MAAM,WAA6B;GAClC,SAAS;GACT,OAAO;IAAE,MAAM;IAAa,SAAS,yBAAyB;IAAM;GACpE;EAED,MAAM,QAAQ,MAAM,KAAK,SAAS,GAAG;AACrC,MAAI,CAAC,MAAO,QAAO;AAEnB,MAAI,QAAS,OAAM,KAAK,0BAA0B,MAAM,IAAI,MAAM,WAAW;EAC7E,MAAM,aAAa,MAAM,KAAK,qBAAqB,GAAG;AACtD,MAAI,CAAC,WAAY,QAAO;EAExB,IAAI,iBAAiB;AACrB,MAAI,QACH,KAAI,MAAM,KAAK,uBAAuB,WAAW,CAGhD,OAAM,KAAK,oBAAoB,WAAW;MAE1C,kBAAiB,MAAM,oBAAoB,SAAS,MAAM,YAAY,EACrE,gBAAgB,MAChB,CAAC;AAIJ,SAAO;GACN,SAAS;GACT,MAAM;IAAE,SAAS;IAAM;IAAY;IAAgB;GACnD;SACM;AACP,SAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS;IACT;GACD"}