firebase-admin-edge 1.1.0 → 2.0.0

package/dist/storage/storage-reference-endpoints.js

@@ -0,0 +1,276 @@
+import { FirebaseEdgeError } from '../auth/errors.js';
+import { storageFetch, readStorageObject, validateStorageOperation } from './storage-endpoints.js';
+/** @internal Explicit IAM signing reuses the configured OAuth identity and transport. */
+export async function storageSignBlob(email, token, value, endpoint, fetch) {
+    const base = new URL(endpoint);
+    if (base.protocol !== 'https:' ||
+        !(base.hostname === 'iamcredentials.googleapis.com' ||
+            base.hostname.endsWith('-iamcredentials.googleapis.com')) ||
+        base.username ||
+        base.password ||
+        base.search ||
+        base.hash ||
+        !/^\/v1\/projects\/[^/]+\/serviceAccounts\/$/.test(base.pathname)) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'signingEndpoint must be a Google IAM Credentials service-accounts HTTPS endpoint.'
+        });
+    }
+    const bytes = new TextEncoder().encode(value);
+    let binary = '';
+    for (const byte of bytes) {
+        binary += String.fromCharCode(byte);
+    }
+    const response = await storageFetch(`${base.href}${encodeURIComponent(email)}:signBlob`, {
+        method: 'POST',
+        redirect: 'manual',
+        headers: {
+            Authorization: `Bearer ${token}`,
+            'Content-Type': 'application/json'
+        },
+        body: JSON.stringify({ payload: btoa(binary) })
+    }, fetch);
+    const data = await readStorageObject(response);
+    if (typeof data.signedBlob !== 'string' || !data.signedBlob) {
+        throw new FirebaseEdgeError({
+            code: 'storage/internal-error',
+            message: 'IAM signing returned no signature.'
+        });
+    }
+    const signature = Uint8Array.from(atob(data.signedBlob), (character) => character.charCodeAt(0));
+    return signature.buffer;
+}
+/** @internal Translate named reference operations into REST requests. */
+export function storageReferenceActionOptions(action) {
+    if (action.kind === 'makePrivate') {
+        return {
+            method: 'PATCH',
+            qs: {
+                ...action.preconditions,
+                predefinedAcl: action.strict ? 'private' : 'projectPrivate'
+            },
+            json: { ...action.metadata, acl: null }
+        };
+    }
+    if (action.kind === 'restoreBucket') {
+        if (!/^\d+$/.test(action.generation) ||
+            (action.projection !== undefined &&
+                !['full', 'noAcl'].includes(action.projection))) {
+            throw new FirebaseEdgeError({
+                code: 'storage/invalid-argument',
+                message: 'Bucket restoration requires a generation.'
+            });
+        }
+        return {
+            method: 'POST',
+            uri: '/restore',
+            qs: {
+                generation: action.generation,
+                ...(action.projection !== undefined && {
+                    projection: action.projection
+                })
+            }
+        };
+    }
+    if (action.kind === 'atomicMove') {
+        validateStorageOperation('validation', {
+            kind: 'metadata',
+            name: action.destination
+        });
+        return {
+            method: 'POST',
+            uri: `/moveTo/o/${encodeURIComponent(action.destination)}`,
+            qs: action.preconditions
+        };
+    }
+    if (action.kind === 'watch') {
+        if (!action.id?.trim() ||
+            !action.config?.address?.startsWith('https://')) {
+            throw new FirebaseEdgeError({
+                code: 'storage/invalid-argument',
+                message: 'Channels require an ID and HTTPS webhook address.'
+            });
+        }
+        return {
+            method: 'POST',
+            uri: '/o/watch',
+            json: {
+                ...action.config,
+                id: action.id,
+                type: action.config.type ?? 'web_hook'
+            }
+        };
+    }
+    if (!action.id?.trim() || !action.resourceId?.trim()) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Channel ID and resource ID are required.'
+        });
+    }
+    return {
+        method: 'POST',
+        uri: '/stop',
+        json: { id: action.id, resourceId: action.resourceId }
+    };
+}
+/** @internal Construct the CSEK headers used for reads, writes and key rotation. */
+export async function storageEncryptionHeaders(key) {
+    let bytes;
+    try {
+        bytes =
+            typeof key === 'string'
+                ? Uint8Array.from(atob(key), (character) => character.charCodeAt(0))
+                : key;
+    }
+    catch {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Customer encryption keys must be valid base64 or bytes.'
+        });
+    }
+    if (!(bytes instanceof Uint8Array) || bytes.length !== 32) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Customer encryption keys must contain 32 bytes.'
+        });
+    }
+    const digest = await crypto.subtle.digest('SHA-256', bytes);
+    return {
+        'x-goog-encryption-algorithm': 'AES256',
+        'x-goog-encryption-key': btoa(String.fromCharCode(...bytes)),
+        'x-goog-encryption-key-sha256': btoa(String.fromCharCode(...new Uint8Array(digest)))
+    };
+}
+/** @internal Keep the Admin request escape hatch scoped to authenticated Storage resources. */
+export async function storageReferenceRequest(bucket, token, resource, options, fetch) {
+    validateStorageOperation(bucket, resource.kind === 'file'
+        ? { kind: 'metadata', name: resource.name }
+        : { kind: 'list', options: {} });
+    const { method = 'GET', uri = '', qs = {}, json, headers = {} } = options;
+    if (!['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD'].includes(method) ||
+        (uri &&
+            (!uri.startsWith('/') ||
+                uri.startsWith('//') ||
+                /[?#\\]/.test(uri) ||
+                uri.split('/').some((part) => /^(\.|%2e){1,2}$/i.test(part))))) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Requests must use a supported method and a relative resource path.'
+        });
+    }
+    const path = resource.kind === 'channel'
+        ? '/channels'
+        : `/b/${encodeURIComponent(bucket)}` +
+            (resource.kind === 'file'
+                ? `/o/${encodeURIComponent(resource.name)}`
+                : '');
+    const url = new URL(`https://storage.googleapis.com/storage/v1${path}${uri}`);
+    for (const [key, value] of Object.entries(qs)) {
+        if (value !== undefined) {
+            url.searchParams.set(key, String(value));
+        }
+    }
+    const requestHeaders = new Headers(headers);
+    requestHeaders.set('Authorization', `Bearer ${token}`);
+    if (json !== undefined) {
+        requestHeaders.set('Content-Type', 'application/json');
+    }
+    const response = await storageFetch(url.toString(), {
+        method,
+        headers: requestHeaders,
+        ...(json !== undefined && { body: JSON.stringify(json) })
+    }, fetch, [], resource.kind === 'bucket' ? 'bucket-not-found' : 'object-not-found');
+    if (response.status === 204 || method === 'HEAD') {
+        await response.body?.cancel();
+        return {};
+    }
+    const text = await response.text();
+    if (!text) {
+        return {};
+    }
+    const value = JSON.parse(text);
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new FirebaseEdgeError({
+            code: 'storage/internal-error',
+            message: 'Expected a Storage resource response.'
+        });
+    }
+    return value;
+}
+/** @internal Firebase token download URLs use the Firebase endpoint, not signed GCS URLs. */
+export async function storageDownloadURL(bucket, name, token, fetch) {
+    validateStorageOperation(bucket, { kind: 'metadata', name });
+    const url = new URL(`https://firebasestorage.googleapis.com/v0/b/${encodeURIComponent(bucket)}/o/${encodeURIComponent(name)}`);
+    const response = await storageFetch(url.toString(), { headers: { Authorization: `Bearer ${token}` } }, fetch);
+    const data = await readStorageObject(response);
+    if (typeof data.downloadTokens !== 'string' ||
+        !data.downloadTokens.split(',')[0]?.trim()) {
+        throw new FirebaseEdgeError({
+            code: 'storage/no-download-token',
+            message: 'No Firebase download token is available for this object.'
+        });
+    }
+    url.searchParams.set('alt', 'media');
+    url.searchParams.set('token', data.downloadTokens.split(',')[0].trim());
+    return url.toString();
+}
+/** @internal Requester-pays billing and encryption stay in the transport layer. */
+export function storageScopedFetch(fetch, scope) {
+    return async (input, init) => {
+        if (scope.timeout !== undefined &&
+            (!Number.isSafeInteger(scope.timeout) || scope.timeout <= 0)) {
+            throw new FirebaseEdgeError({
+                code: 'storage/invalid-argument',
+                message: 'timeout must be a positive number of milliseconds.'
+            });
+        }
+        if (scope.timeout !== undefined) {
+            const deadline = AbortSignal.timeout(scope.timeout);
+            init = {
+                ...init,
+                signal: init?.signal
+                    ? AbortSignal.any([init.signal, deadline])
+                    : deadline
+            };
+        }
+        if (typeof input !== 'string' && !(input instanceof URL)) {
+            return fetch(input, init);
+        }
+        const url = new URL(input);
+        if (url.origin !== 'https://storage.googleapis.com') {
+            return fetch(input, init);
+        }
+        if (scope.userProject && !url.searchParams.has('userProject')) {
+            url.searchParams.set('userProject', scope.userProject);
+        }
+        if (scope.kmsKeyName &&
+            url.pathname.startsWith('/upload/') &&
+            !url.searchParams.has('kmsKeyName')) {
+            url.searchParams.set('kmsKeyName', scope.kmsKeyName);
+        }
+        const headers = new Headers(init?.headers);
+        if (scope.encryptionKey !== undefined) {
+            const encryption = await storageEncryptionHeaders(scope.encryptionKey);
+            const prefixes = url.pathname.includes('/rewriteTo/')
+                ? ['x-goog-encryption-', 'x-goog-copy-source-encryption-']
+                : ['x-goog-encryption-'];
+            for (const prefix of prefixes) {
+                if (!headers.has(`${prefix}key`)) {
+                    headers.set(`${prefix}algorithm`, 'AES256');
+                    headers.set(`${prefix}key`, encryption['x-goog-encryption-key']);
+                    headers.set(`${prefix}key-sha256`, encryption['x-goog-encryption-key-sha256']);
+                }
+            }
+        }
+        return fetch(url.toString(), { ...init, headers });
+    };
+}
+/** @internal Probe anonymous access without sending service-account credentials. */
+export async function storageIsPublic(bucket, name, fetch) {
+    validateStorageOperation(bucket, { kind: 'metadata', name });
+    const url = `https://storage.googleapis.com/${encodeURIComponent(bucket)}/${encodeURIComponent(name)}`;
+    const response = await storageFetch(url, { method: 'HEAD', redirect: 'manual' }, fetch, [403]);
+    await response.body?.cancel();
+    return response.status !== 403;
+}
+//# sourceMappingURL=storage-reference-endpoints.js.map

package/dist/storage/storage-reference-endpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-reference-endpoints.js","sourceRoot":"","sources":["../../src/storage/storage-reference-endpoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACH,YAAY,EACZ,iBAAiB,EACjB,wBAAwB,EAC3B,MAAM,wBAAwB,CAAC;AAEhC,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,KAAa,EACb,KAAa,EACb,KAAa,EACb,QAAgB,EAChB,KAA8B;IAE9B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,IACI,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAC1B,CAAC,CACG,IAAI,CAAC,QAAQ,KAAK,+BAA+B;YACjD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAC3D;QACD,IAAI,CAAC,QAAQ;QACb,IAAI,CAAC,QAAQ;QACb,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,IAAI;QACT,CAAC,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EACnE,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EACH,mFAAmF;SAC1F,CAAC,CAAC;IACP,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAC/B,GAAG,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,EACnD;QACI,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE;YACL,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,kBAAkB;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;KAClD,EACD,KAAK,CACR,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1D,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,oCAAoC;SAChD,CAAC,CAAC;IACP,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CACnE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAC1B,CAAC;IACF,OAAO,SAAS,CAAC,MAAM,CAAC;AAC5B,CAAC;AA2CD,yEAAyE;AACzE,MAAM,UAAU,6BAA6B,CACzC,MAA8B;IAE9B,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAChC,OAAO;YACH,MAAM,EAAE,OAAO;YACf,EAAE,EAAE;gBACA,GAAG,MAAM,CAAC,aAAa;gBACvB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB;aAC9D;YACD,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE;SAC1C,CAAC;IACN,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QAClC,IACI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;YAChC,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;gBAC5B,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EACrD,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,2CAA2C;aACvD,CAAC,CAAC;QACP,CAAC;QACD,OAAO;YACH,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,UAAU;YACf,EAAE,EAAE;gBACA,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI;oBACnC,UAAU,EAAE,MAAM,CAAC,UAAU;iBAChC,CAAC;aACL;SACJ,CAAC;IACN,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/B,wBAAwB,CAAC,YAAY,EAAE;YACnC,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,MAAM,CAAC,WAAW;SAC3B,CAAC,CAAC;QACH,OAAO;YACH,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,aAAa,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;YAC1D,EAAE,EAAE,MAAM,CAAC,aAAa;SAC3B,CAAC;IACN,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC1B,IACI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE;YAClB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,EACjD,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,mDAAmD;aAC/D,CAAC,CAAC;QACP,CAAC;QACD,OAAO;YACH,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,UAAU;YACf,IAAI,EAAE;gBACF,GAAG,MAAM,CAAC,MAAM;gBAChB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,UAAU;aACzC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,0CAA0C;SACtD,CAAC,CAAC;IACP,CAAC;IACD,OAAO;QACH,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;KACzD,CAAC;AACN,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC1C,GAAqC;IAErC,IAAI,KAA8B,CAAC;IACnC,IAAI,CAAC;QACD,KAAK;YACD,OAAO,GAAG,KAAK,QAAQ;gBACnB,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CACrC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAC1B;gBACH,CAAC,CAAC,GAAG,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,yDAAyD;SACrE,CAAC,CAAC;IACP,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,iDAAiD;SAC7D,CAAC,CAAC;IACP,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5D,OAAO;QACH,6BAA6B,EAAE,QAAQ;QACvC,uBAAuB,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC;QAC5D,8BAA8B,EAAE,IAAI,CAChC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CACjD;KACJ,CAAC;AACN,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,MAA0B,EAC1B,KAAa,EACb,QAAyB,EACzB,OAA8B,EAC9B,KAA8B;IAE9B,wBAAwB,CACpB,MAAM,EACN,QAAQ,CAAC,IAAI,KAAK,MAAM;QACpB,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;QAC3C,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CACtC,CAAC;IACF,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IAC1E,IACI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnE,CAAC,GAAG;YACA,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;gBACjB,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;gBAClB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EACxE,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EACH,oEAAoE;SAC3E,CAAC,CAAC;IACP,CAAC;IACD,MAAM,IAAI,GACN,QAAQ,CAAC,IAAI,KAAK,SAAS;QACvB,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,MAAM,kBAAkB,CAAC,MAAO,CAAC,EAAE;YACnC,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM;gBACrB,CAAC,CAAC,MAAM,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;gBAC3C,CAAC,CAAC,EAAE,CAAC,CAAC;IACpB,MAAM,GAAG,GAAG,IAAI,GAAG,CACf,4CAA4C,IAAI,GAAG,GAAG,EAAE,CAC3D,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,cAAc,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACrB,cAAc,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAC/B,GAAG,CAAC,QAAQ,EAAE,EACd;QACI,MAAM;QACN,OAAO,EAAE,cAAc;QACvB,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;KAC5D,EACD,KAAK,EACL,EAAE,EACF,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CACvE,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/C,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,uCAAuC;SACnD,CAAC,CAAC;IACP,CAAC;IACD,OAAO,KAAgC,CAAC;AAC5C,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,MAA0B,EAC1B,IAAY,EACZ,KAAa,EACb,KAA8B;IAE9B,wBAAwB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,GAAG,CACf,+CAA+C,kBAAkB,CAAC,MAAO,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC7G,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAC/B,GAAG,CAAC,QAAQ,EAAE,EACd,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,EACjD,KAAK,CACR,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,IACI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;QACvC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAC5C,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,0DAA0D;SACtE,CAAC,CAAC;IACP,CAAC;IACD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,kBAAkB,CAC9B,KAA8B,EAC9B,KAKC;IAED,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACzB,IACI,KAAK,CAAC,OAAO,KAAK,SAAS;YAC3B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,EAC9D,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,oDAAoD;aAChE,CAAC,CAAC;QACP,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpD,IAAI,GAAG;gBACH,GAAG,IAAI;gBACP,MAAM,EAAE,IAAI,EAAE,MAAM;oBAChB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;oBAC1C,CAAC,CAAC,QAAQ;aACjB,CAAC;QACN,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,EAAE,CAAC;YACvD,OAAO,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,gCAAgC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC;QACD,IACI,KAAK,CAAC,UAAU;YAChB,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;YACnC,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EACrC,CAAC;YACC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAC7C,KAAK,CAAC,aAAa,CACtB,CAAC;YACF,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC;gBACjD,CAAC,CAAC,CAAC,oBAAoB,EAAE,gCAAgC,CAAC;gBAC1D,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAC7B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,WAAW,EAAE,QAAQ,CAAC,CAAC;oBAC5C,OAAO,CAAC,GAAG,CACP,GAAG,MAAM,KAAK,EACd,UAAU,CAAC,uBAAuB,CAAE,CACvC,CAAC;oBACF,OAAO,CAAC,GAAG,CACP,GAAG,MAAM,YAAY,EACrB,UAAU,CAAC,8BAA8B,CAAE,CAC9C,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC;AACN,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,MAA0B,EAC1B,IAAY,EACZ,KAA8B;IAE9B,wBAAwB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,kCAAkC,kBAAkB,CAAC,MAAO,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;IACxG,MAAM,QAAQ,GAAG,MAAM,YAAY,CAC/B,GAAG,EACH,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,EACtC,KAAK,EACL,CAAC,GAAG,CAAC,CACR,CAAC;IACF,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,OAAO,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;AACnC,CAAC"}

package/dist/storage/storage-reference-helpers.d.ts

@@ -0,0 +1,12 @@
+import type { PreconditionOptions, CopyOptions } from './storage-reference-types.js';
+import type { StoragePreconditions, StorageCopyOptions } from './storage-types.js';
+import type { StorageIamPolicy } from './storage-bucket-types.js';
+/** @internal Normalize Admin numeric preconditions while preserving large string generations. */
+export declare function storagePreconditions(options?: PreconditionOptions): StoragePreconditions;
+/** @internal Reject unsafe numeric generations instead of silently losing precision. */
+export declare function storageGeneration(value: string | number): string;
+/** @internal Admin copy metadata fields live at the top level of CopyOptions. */
+export declare function storageCopyOptions(options: CopyOptions): StorageCopyOptions;
+/** @internal Preserve IAM conditions and etags while granting only log delivery. */
+export declare function storageLoggingPolicy(policy: StorageIamPolicy): StorageIamPolicy | undefined;
+//# sourceMappingURL=storage-reference-helpers.d.ts.map

package/dist/storage/storage-reference-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-reference-helpers.d.ts","sourceRoot":"","sources":["../../src/storage/storage-reference-helpers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACR,mBAAmB,EACnB,WAAW,EACd,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EACR,oBAAoB,EACpB,kBAAkB,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAElE,iGAAiG;AACjG,wBAAgB,oBAAoB,CAChC,OAAO,GAAE,mBAAwB,GAClC,oBAAoB,CAmBtB;AAED,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAahE;AAED,iFAAiF;AACjF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,WAAW,GAAG,kBAAkB,CAkC3E;AAED,oFAAoF;AACpF,wBAAgB,oBAAoB,CAChC,MAAM,EAAE,gBAAgB,GACzB,gBAAgB,GAAG,SAAS,CAkB9B"}

package/dist/storage/storage-reference-helpers.js

@@ -0,0 +1,72 @@
+import { FirebaseEdgeError } from '../auth/errors.js';
+/** @internal Normalize Admin numeric preconditions while preserving large string generations. */
+export function storagePreconditions(options = {}) {
+    const result = {
+        ...(options.userProject !== undefined && {
+            userProject: options.userProject
+        })
+    };
+    for (const key of [
+        'ifGenerationMatch',
+        'ifGenerationNotMatch',
+        'ifMetagenerationMatch',
+        'ifMetagenerationNotMatch'
+    ]) {
+        const value = options[key];
+        if (value === undefined) {
+            continue;
+        }
+        result[key] = storageGeneration(value);
+    }
+    return result;
+}
+/** @internal Reject unsafe numeric generations instead of silently losing precision. */
+export function storageGeneration(value) {
+    if ((typeof value === 'number' &&
+        (!Number.isSafeInteger(value) || value < 0)) ||
+        !/^\d+$/.test(String(value))) {
+        throw new FirebaseEdgeError({
+            code: 'storage/invalid-argument',
+            message: 'Generation values must be nonnegative safe integers or integer strings.'
+        });
+    }
+    return String(value);
+}
+/** @internal Admin copy metadata fields live at the top level of CopyOptions. */
+export function storageCopyOptions(options) {
+    const { preconditionOpts, contentType, cacheControl, contentDisposition, contentEncoding, contentLanguage, storageClass, temporaryHold, eventBasedHold, customTime, metadata, ...copy } = options;
+    const writable = Object.fromEntries(Object.entries({
+        contentType,
+        cacheControl,
+        contentDisposition,
+        contentEncoding,
+        contentLanguage,
+        storageClass,
+        temporaryHold,
+        eventBasedHold,
+        customTime,
+        metadata
+    }).filter(([, value]) => value !== undefined));
+    return {
+        ...copy,
+        ...storagePreconditions(preconditionOpts),
+        ...(Object.keys(writable).length > 0 && { metadata: writable })
+    };
+}
+/** @internal Preserve IAM conditions and etags while granting only log delivery. */
+export function storageLoggingPolicy(policy) {
+    const member = 'group:cloud-storage-analytics@google.com';
+    const role = 'roles/storage.objectCreator';
+    const binding = policy.bindings.find((entry) => entry.role === role && !entry.condition);
+    if (binding?.members.includes(member)) {
+        return;
+    }
+    const bindings = policy.bindings.map((entry) => entry === binding
+        ? { ...entry, members: [...entry.members, member] }
+        : entry);
+    if (!binding) {
+        bindings.push({ role, members: [member] });
+    }
+    return { ...policy, bindings };
+}
+//# sourceMappingURL=storage-reference-helpers.js.map

package/dist/storage/storage-reference-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-reference-helpers.js","sourceRoot":"","sources":["../../src/storage/storage-reference-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAWtD,iGAAiG;AACjG,MAAM,UAAU,oBAAoB,CAChC,UAA+B,EAAE;IAEjC,MAAM,MAAM,GAAyB;QACjC,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI;YACrC,WAAW,EAAE,OAAO,CAAC,WAAW;SACnC,CAAC;KACL,CAAC;IACF,KAAK,MAAM,GAAG,IAAI;QACd,mBAAmB;QACnB,sBAAsB;QACtB,uBAAuB;QACvB,0BAA0B;KACpB,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,SAAS;QACb,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,KAAsB;IACpD,IACI,CAAC,OAAO,KAAK,KAAK,QAAQ;QACtB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAC9B,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EACH,yEAAyE;SAChF,CAAC,CAAC;IACP,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,OAAoB;IACnD,MAAM,EACF,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,YAAY,EACZ,aAAa,EACb,cAAc,EACd,UAAU,EACV,QAAQ,EACR,GAAG,IAAI,EACV,GAAG,OAAO,CAAC;IACZ,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC;QACX,WAAW;QACX,YAAY;QACZ,kBAAkB;QAClB,eAAe;QACf,eAAe;QACf,YAAY;QACZ,aAAa;QACb,cAAc;QACd,UAAU;QACV,QAAQ;KACX,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAChD,CAAC;IACF,OAAO;QACH,GAAG,IAAI;QACP,GAAG,oBAAoB,CAAC,gBAAgB,CAAC;QACzC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;KAClE,CAAC;AACN,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAChC,MAAwB;IAExB,MAAM,MAAM,GAAG,0CAA0C,CAAC;IAC1D,MAAM,IAAI,GAAG,6BAA6B,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CACrD,CAAC;IACF,IAAI,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO;IACX,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3C,KAAK,KAAK,OAAO;QACb,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE;QACnD,CAAC,CAAC,KAAK,CACd,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC"}

package/dist/storage/storage-reference-signing.d.ts

@@ -0,0 +1,40 @@
+import type { ServiceAccount } from '../auth/firebase-types.js';
+import type { GetSignedUrlOptions } from './storage-reference-types.js';
+export type StorageRemoteSigner = (value: string, endpoint: string) => Promise<ArrayBuffer>;
+/** @internal Support Admin V2/V4 signed URL options over the same web signing primitives. */
+export declare function signStorageReferenceUrl(account: ServiceAccount, bucket: string | undefined, name: string | undefined, options: GetSignedUrlOptions, remote?: StorageRemoteSigner): Promise<string>;
+export interface SignedPostPolicyOptions {
+    signingEndpoint?: string;
+    expires: string | number | Date;
+    conditions?: Array<Record<string, string> | [string, ...Array<string | number>]>;
+    fields?: Record<string, string>;
+    virtualHostedStyle?: boolean;
+    bucketBoundHostname?: string;
+    equals?: string[] | string[][];
+    startsWith?: string[] | string[][];
+    acl?: string;
+    successRedirect?: string;
+    successStatus?: string;
+    contentLengthRange?: {
+        min?: number;
+        max?: number;
+    };
+}
+/** @internal Form-upload policies are signed locally and do not send network requests. */
+export declare function signStoragePostPolicy(account: ServiceAccount, bucket: string | undefined, name: string, version: 'v2' | 'v4', options: SignedPostPolicyOptions, remote?: StorageRemoteSigner): Promise<{
+    string: string;
+    base64: string;
+    signature: string;
+    url?: undefined;
+    fields?: undefined;
+} | {
+    url: string;
+    fields: {
+        policy: string;
+        'x-goog-signature': string;
+    };
+    string?: undefined;
+    base64?: undefined;
+    signature?: undefined;
+}>;
+//# sourceMappingURL=storage-reference-signing.d.ts.map

package/dist/storage/storage-reference-signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-reference-signing.d.ts","sourceRoot":"","sources":["../../src/storage/storage-reference-signing.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAGxE,MAAM,MAAM,mBAAmB,GAAG,CAC9B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,KACf,OAAO,CAAC,WAAW,CAAC,CAAC;AA+C1B,6FAA6F;AAC7F,wBAAsB,uBAAuB,CACzC,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,mBAAmB,EAC5B,MAAM,CAAC,EAAE,mBAAmB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAoMjB;AAED,MAAM,WAAW,uBAAuB;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,CAAC,EAAE,KAAK,CACd,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAC/D,CAAC;IACF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACvD;AAED,0FAA0F;AAC1F,wBAAsB,qBAAqB,CACvC,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,IAAI,GAAG,IAAI,EACpB,OAAO,EAAE,uBAAuB,EAChC,MAAM,CAAC,EAAE,mBAAmB;;;;;;;;;;;;;;;GAyH/B"}