gazetta 0.5.0 → 0.7.0

package/dist/assets/scan-manifest-for-asset.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Scan a single page/fragment manifest for references to a given asset.
+ *
+ * Single responsibility: pure recursive walk of one manifest's content +
+ * nested inline components, emitting an `AssetRef` per match. No I/O,
+ * no site-wide knowledge — this is the inner kernel.
+ *
+ * Two consumers:
+ *   - `find-refs.ts` — loads the whole site and runs this walker over
+ *     every page/fragment manifest (including locale variants)
+ *   - future `.refs/` index writer — on every manifest save, runs this
+ *     walker over the just-saved manifest to update the index incrementally
+ *
+ * Splitting the walker from the site loader lets both use the same
+ * matching logic — the index writer can't call the site-wide scanner
+ * for one-manifest updates (wrong granularity, wrong cost).
+ *
+ * Match shape:
+ *   Any object value with a string-valued `_asset` property. The design
+ *   reserves the `_` prefix for Gazetta-interpreted fields, so false
+ *   positives require authors to violate the convention.
+ */
+import type { ComponentEntry, ComponentManifest } from '../types.js';
+import type { AssetRef } from './refs.js';
+export interface ScanManifestInput {
+    /** The manifest being scanned (page or fragment). */
+    readonly manifest: ComponentManifest;
+    /** Content-root-relative path of this manifest (for `AssetRef.path`). */
+    readonly manifestPath: string;
+    /** Which `AssetRef.source` discriminator to tag matches with. */
+    readonly source: 'page' | 'fragment';
+    /** The asset name to look for. */
+    readonly assetName: string;
+}
+/**
+ * The shape the walker operates on. Any object that might carry content
+ * or nested components — covers both `ComponentManifest` (no `name`) and
+ * inline components (`name` + the same `content`/`components`). One
+ * interface, no union — the walker treats `name` as optional and the
+ * structural-path computation falls back to the array index when it's
+ * absent.
+ */
+interface Walkable {
+    readonly name?: string;
+    readonly content?: Record<string, unknown>;
+    readonly components?: readonly ComponentEntry[];
+}
+/**
+ * Walk `input.manifest` and return every reference to `assetName`. One
+ * entry per match — a manifest that references the asset twice (in two
+ * different inline components, or twice in the same content blob)
+ * produces two entries with different `componentPath` values.
+ */
+export declare function scanManifestForAsset(input: ScanManifestInput): AssetRef[];
+/**
+ * Collect every asset name referenced by `manifest`. Companion to
+ * `scanManifestForAsset` but returns the *set* of names rather than
+ * located refs — for callers that need the dependency list, not the
+ * usage breadcrumb. Used by publish to know which assets to copy.
+ */
+export declare function collectAssetRefs(manifest: Walkable): Set<string>;
+export {};
+//# sourceMappingURL=scan-manifest-for-asset.d.ts.map

package/dist/assets/scan-manifest-for-asset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-manifest-for-asset.d.ts","sourceRoot":"","sources":["../../src/assets/scan-manifest-for-asset.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEzC,MAAM,WAAW,iBAAiB;IAChC,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAA;IACpC,yEAAyE;IACzE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAA;IACpC,kCAAkC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;;GAOG;AACH,UAAU,QAAQ;IAChB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;CAChD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,GAAG,QAAQ,EAAE,CAIzE;AA2DD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAIhE"}

package/dist/assets/scan-manifest-for-asset.js

@@ -0,0 +1,105 @@
+/**
+ * Walk `input.manifest` and return every reference to `assetName`. One
+ * entry per match — a manifest that references the asset twice (in two
+ * different inline components, or twice in the same content blob)
+ * produces two entries with different `componentPath` values.
+ */
+export function scanManifestForAsset(input) {
+    const out = [];
+    walkComponent(input.manifest, '', input, out);
+    return out;
+}
+/** Walk a component (page manifest, fragment manifest, or inline child). */
+function walkComponent(comp, componentPath, input, out) {
+    if (comp.content) {
+        scanValue(comp.content, componentPath, input, out);
+    }
+    // Fragment refs like "@header" don't carry content here — they're
+    // scanned as their own manifests by the orchestrator.
+    if (comp.components) {
+        for (let i = 0; i < comp.components.length; i++) {
+            const child = comp.components[i];
+            if (typeof child === 'string')
+                continue;
+            const childPath = componentPath ? `${componentPath}.${nameFor(child, i)}` : nameFor(child, i);
+            walkComponent(child, childPath, input, out);
+        }
+    }
+}
+function nameFor(comp, index) {
+    return comp.name ?? `[${index}]`;
+}
+/**
+ * Recursively walk a value looking for `{ _asset: "<assetName>", ... }`.
+ * Matches only when `_asset` is a string equal to the target — avoids
+ * false positives on numeric or unrelated keys.
+ */
+function scanValue(value, path, input, out) {
+    if (value === null || typeof value !== 'object')
+        return;
+    if (Array.isArray(value)) {
+        for (let i = 0; i < value.length; i++) {
+            scanValue(value[i], path ? `${path}[${i}]` : `[${i}]`, input, out);
+        }
+        return;
+    }
+    const obj = value;
+    const assetField = obj._asset;
+    if (typeof assetField === 'string' && assetField === input.assetName) {
+        out.push({
+            source: input.source,
+            path: input.manifestPath,
+            // `null` means "the ref is at the manifest's top-level content" —
+            // no sentinel string (like "<root>") for UI code to compare against.
+            componentPath: path === '' ? null : path,
+        });
+        // Don't early-return — the asset ref object might itself contain
+        // nested refs (a future template that composes embedded refs inside
+        // an asset ref). Keep walking.
+    }
+    for (const [key, child] of Object.entries(obj)) {
+        if (key === '_asset')
+            continue;
+        scanValue(child, path ? `${path}.${key}` : key, input, out);
+    }
+}
+/**
+ * Collect every asset name referenced by `manifest`. Companion to
+ * `scanManifestForAsset` but returns the *set* of names rather than
+ * located refs — for callers that need the dependency list, not the
+ * usage breadcrumb. Used by publish to know which assets to copy.
+ */
+export function collectAssetRefs(manifest) {
+    const names = new Set();
+    collectFromComponent(manifest, names);
+    return names;
+}
+function collectFromComponent(comp, out) {
+    if (comp.content)
+        collectFromValue(comp.content, out);
+    if (comp.components) {
+        for (const child of comp.components) {
+            if (typeof child === 'string')
+                continue;
+            collectFromComponent(child, out);
+        }
+    }
+}
+function collectFromValue(value, out) {
+    if (value === null || typeof value !== 'object')
+        return;
+    if (Array.isArray(value)) {
+        for (const item of value)
+            collectFromValue(item, out);
+        return;
+    }
+    const obj = value;
+    if (typeof obj._asset === 'string')
+        out.add(obj._asset);
+    for (const [key, child] of Object.entries(obj)) {
+        if (key === '_asset')
+            continue;
+        collectFromValue(child, out);
+    }
+}
+//# sourceMappingURL=scan-manifest-for-asset.js.map

package/dist/assets/scan-manifest-for-asset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-manifest-for-asset.js","sourceRoot":"","sources":["../../src/assets/scan-manifest-for-asset.ts"],"names":[],"mappings":"AAkDA;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAwB;IAC3D,MAAM,GAAG,GAAe,EAAE,CAAA;IAC1B,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;IAC7C,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,4EAA4E;AAC5E,SAAS,aAAa,CAAC,IAAc,EAAE,aAAqB,EAAE,KAAwB,EAAE,GAAe;IACrG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;IACpD,CAAC;IACD,kEAAkE;IAClE,sDAAsD;IACtD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;YAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,SAAQ;YACvC,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YAC7F,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAuB,EAAE,KAAa;IACrD,OAAO,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,CAAA;AAClC,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,KAAc,EAAE,IAAY,EAAE,KAAwB,EAAE,GAAe;IACxF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAM;IAEvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;QACpE,CAAC;QACD,OAAM;IACR,CAAC;IAED,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAA;IAC7B,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QACrE,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,YAAY;YACxB,kEAAkE;YAClE,qEAAqE;YACrE,aAAa,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;SACzC,CAAC,CAAA;QACF,iEAAiE;QACjE,oEAAoE;QACpE,+BAA+B;IACjC,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,GAAG,KAAK,QAAQ;YAAE,SAAQ;QAC9B,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;IAC7D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAkB;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACrC,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAc,EAAE,GAAgB;IAC5D,IAAI,IAAI,CAAC,OAAO;QAAE,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IACrD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,SAAQ;YACvC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,GAAgB;IACxD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAM;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACrD,OAAM;IACR,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACvD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,GAAG,KAAK,QAAQ;YAAE,SAAQ;QAC9B,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC;AACH,CAAC"}

package/dist/assets/serve-route.d.ts

@@ -0,0 +1,45 @@
+/**
+ * HTTP route: `GET /assets/*` — serve asset bytes from a storage provider.
+ *
+ * Thin adapter. Opens a `readStream` and pipes it to the response with
+ * Content-Type + cache headers. Range request support lets `<video>`
+ * seek and `<audio>` resume.
+ *
+ * Mount this at the top level of the serving app (dev server,
+ * `gazetta serve`), NOT under `/admin` — the resolver emits root-relative
+ * `/assets/...` URLs that must match this route.
+ *
+ * The factory takes a **storage resolver** + an optional **adapter
+ * resolver**. Storage gives us the bytes; adapter gives us the cache
+ * policy. Without an adapter resolver, the route falls back to the
+ * sharp adapter's policy (immutable, the v1 default) — that keeps
+ * dev/test flows that don't wire transform config working unchanged.
+ *
+ * Security:
+ * - Rejects paths containing `..` (belt-and-suspenders)
+ * - Cache headers come from `adapter.cachePolicy()` — whatever the
+ *   adapter says is right for the URLs it produces. Default
+ *   (sharp adapter) returns `immutable` because hash-in-path is
+ *   content-addressed: new bytes mean a new URL.
+ */
+import { Hono } from 'hono';
+import type { StorageProvider } from '../types.js';
+import type { TransformAdapter } from '../transforms/adapter.js';
+/**
+ * Resolve the storage provider to serve from, given an optional target
+ * query param. Narrower than the admin-api SourceContextResolver — this
+ * route only needs storage, not the rest of the source context.
+ */
+export type AssetStorageResolver = (targetName: string | undefined) => Promise<StorageProvider>;
+/**
+ * Resolve the transform adapter for the active target. Per-target
+ * because adapter config (and thus cache policy) is per-target.
+ * Optional — when absent, the route uses the sharp adapter's policy.
+ */
+export type AssetAdapterResolver = (targetName: string | undefined) => Promise<TransformAdapter>;
+export interface AssetServeRoutesOptions {
+    resolveStorage: AssetStorageResolver;
+    resolveAdapter?: AssetAdapterResolver;
+}
+export declare function assetServeRoutes(resolveStorageOrOptions: AssetStorageResolver | AssetServeRoutesOptions): Hono;
+//# sourceMappingURL=serve-route.d.ts.map

package/dist/assets/serve-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-route.d.ts","sourceRoot":"","sources":["../../src/assets/serve-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,KAAK,EAAiB,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAa/E;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;AAE/F;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;AAEhG,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,oBAAoB,CAAA;IACpC,cAAc,CAAC,EAAE,oBAAoB,CAAA;CACtC;AAED,wBAAgB,gBAAgB,CAAC,uBAAuB,EAAE,oBAAoB,GAAG,uBAAuB,GAAG,IAAI,CAsD9G"}

package/dist/assets/serve-route.js

@@ -0,0 +1,123 @@
+/**
+ * HTTP route: `GET /assets/*` — serve asset bytes from a storage provider.
+ *
+ * Thin adapter. Opens a `readStream` and pipes it to the response with
+ * Content-Type + cache headers. Range request support lets `<video>`
+ * seek and `<audio>` resume.
+ *
+ * Mount this at the top level of the serving app (dev server,
+ * `gazetta serve`), NOT under `/admin` — the resolver emits root-relative
+ * `/assets/...` URLs that must match this route.
+ *
+ * The factory takes a **storage resolver** + an optional **adapter
+ * resolver**. Storage gives us the bytes; adapter gives us the cache
+ * policy. Without an adapter resolver, the route falls back to the
+ * sharp adapter's policy (immutable, the v1 default) — that keeps
+ * dev/test flows that don't wire transform config working unchanged.
+ *
+ * Security:
+ * - Rejects paths containing `..` (belt-and-suspenders)
+ * - Cache headers come from `adapter.cachePolicy()` — whatever the
+ *   adapter says is right for the URLs it produces. Default
+ *   (sharp adapter) returns `immutable` because hash-in-path is
+ *   content-addressed: new bytes mean a new URL.
+ */
+import { Hono } from 'hono';
+import { stream } from 'hono/streaming';
+import { sharpAdapter } from '../transforms/sharp.js';
+/** Where assets live, relative to the target storage root. */
+const ASSETS_ROOT = 'assets';
+/** MIME lookup for extensions we produce in v1 (JPEG, PNG). */
+const MIME_BY_EXT = {
+    jpg: 'image/jpeg',
+    jpeg: 'image/jpeg',
+    png: 'image/png',
+};
+export function assetServeRoutes(resolveStorageOrOptions) {
+    // Accept either the legacy `resolveStorage` callable or an options
+    // object. The callable form keeps the pre-step-18 signature working
+    // for callers that haven't migrated.
+    const opts = typeof resolveStorageOrOptions === 'function'
+        ? { resolveStorage: resolveStorageOrOptions }
+        : resolveStorageOrOptions;
+    const app = new Hono();
+    app.get('/assets/*', async (c) => {
+        const url = new URL(c.req.url);
+        const path = url.pathname.replace(/^\/assets\//, '');
+        if (path.includes('..') || path.startsWith('/')) {
+            return c.text('Invalid asset path', 400);
+        }
+        const targetName = c.req.query('target');
+        const storage = await opts.resolveStorage(targetName);
+        const storagePath = `${ASSETS_ROOT}/${path}`;
+        if (!(await storage.exists(storagePath))) {
+            return c.text('Not found', 404);
+        }
+        const ext = path.split('.').pop()?.toLowerCase() ?? '';
+        const mime = MIME_BY_EXT[ext] ?? 'application/octet-stream';
+        const range = parseRange(c.req.header('range'));
+        // Cache policy from the adapter. The route only has the URL path,
+        // so it constructs a minimal AssetUrlInput — name/hash/ext parsed
+        // from the filename. Today's adapters return constant policies
+        // regardless of input; future per-input policy adapters will have
+        // what they need.
+        const adapter = opts.resolveAdapter ? await opts.resolveAdapter(targetName) : sharpAdapter;
+        const policy = adapter.cachePolicy(parseAssetUrlInput(path, ext));
+        try {
+            const bodyStream = await storage.readStream(storagePath, range);
+            c.header('Content-Type', mime);
+            c.header('X-Content-Type-Options', 'nosniff');
+            c.header('Cache-Control', policy.cacheControl);
+            if (policy.vary)
+                c.header('Vary', policy.vary);
+            return stream(c, async (out) => {
+                await out.pipe(bodyStream);
+            });
+        }
+        catch {
+            return c.text('Error reading asset', 500);
+        }
+    });
+    return app;
+}
+/**
+ * Parse a minimal `AssetUrlInput` from the URL path. Used only for the
+ * `cachePolicy()` call — the route doesn't need to recover full
+ * variants/dimensions, just whatever the adapter might key on.
+ *
+ * Filename shape: `{name}-{hash}[.{loc}][.{theme}][-{w}w].{ext}`. We
+ * extract `name` and `hash`; selector/variants/dims default to nulls.
+ * Future adapters that need more (e.g. per-locale cache TTL) would
+ * expand this parser or we'd thread the resolver-time inputs through
+ * a different path.
+ */
+function parseAssetUrlInput(path, ext) {
+    // Strip extension.
+    const stem = path.replace(/\.[^.]+$/, '');
+    // Match `{name}-{hash}` where hash is 8 hex chars; everything after
+    // the first hash-suffix is selector + width.
+    const m = /^(.+)-([0-9a-f]{8})/.exec(stem);
+    const name = m ? m[1] : stem;
+    const hash = m ? m[2] : '';
+    return {
+        name,
+        hash,
+        ext,
+        selector: null,
+        variants: [],
+        width: null,
+        height: null,
+    };
+}
+/** Parse a byte-range HTTP header into the storage provider's `ByteRange`. */
+function parseRange(header) {
+    if (!header)
+        return undefined;
+    const match = /^bytes=(\d+)-(\d+)?$/.exec(header);
+    if (!match)
+        return undefined;
+    const start = Number.parseInt(match[1], 10);
+    const end = match[2] ? Number.parseInt(match[2], 10) : Number.POSITIVE_INFINITY;
+    return Number.isFinite(end) ? { start, end } : undefined;
+}
+//# sourceMappingURL=serve-route.js.map

package/dist/assets/serve-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-route.js","sourceRoot":"","sources":["../../src/assets/serve-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAGvC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAErD,8DAA8D;AAC9D,MAAM,WAAW,GAAG,QAAQ,CAAA;AAE5B,+DAA+D;AAC/D,MAAM,WAAW,GAA2B;IAC1C,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;CACjB,CAAA;AAqBD,MAAM,UAAU,gBAAgB,CAAC,uBAAuE;IACtG,mEAAmE;IACnE,oEAAoE;IACpE,qCAAqC;IACrC,MAAM,IAAI,GACR,OAAO,uBAAuB,KAAK,UAAU;QAC3C,CAAC,CAAC,EAAE,cAAc,EAAE,uBAAuB,EAAE;QAC7C,CAAC,CAAC,uBAAuB,CAAA;IAE7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IAEtB,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;QAEpD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAA;QAC1C,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;QACrD,MAAM,WAAW,GAAG,GAAG,WAAW,IAAI,IAAI,EAAE,CAAA;QAC5C,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;QACjC,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;QACtD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAA;QAE3D,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;QAE/C,kEAAkE;QAClE,kEAAkE;QAClE,+DAA+D;QAC/D,kEAAkE;QAClE,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAA;QAC1F,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;QAEjE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YAC/D,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;YAC9B,CAAC,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;YAC7C,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;YAC9C,IAAI,MAAM,CAAC,IAAI;gBAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;YAC9C,OAAO,MAAM,CAAC,CAAC,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;gBAC3B,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC5B,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,GAAW;IACnD,mBAAmB;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;IACzC,oEAAoE;IACpE,6CAA6C;IAC7C,MAAM,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC3B,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,GAAG;QACH,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;KACb,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS,UAAU,CAAC,MAA0B;IAC5C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAA;IAC/E,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1D,CAAC"}

package/dist/assets/svg-sanitize.d.ts

@@ -0,0 +1,38 @@
+export interface SvgSanitizeResult {
+    /** Sanitized SVG bytes. UTF-8 encoded. */
+    bytes: Uint8Array;
+    /** Non-fatal warnings (e.g., large embedded base64). Empty when clean. */
+    warnings: readonly SvgSanitizeWarning[];
+}
+export type SvgSanitizeWarning = {
+    code: 'large-base64';
+    sizeBytes: number;
+    threshold: number;
+} | {
+    code: 'stripped-element';
+    tag: string;
+} | {
+    code: 'stripped-attribute';
+    attr: string;
+    on: string;
+};
+/**
+ * Thrown when sanitization can't proceed safely. Callers map to a
+ * 400 Bad Request (it's a client-correctable input failure).
+ */
+export declare class SvgSanitizeError extends Error {
+    readonly code: 'malformed-xml' | 'oversized-base64' | 'empty';
+    constructor(code: 'malformed-xml' | 'oversized-base64' | 'empty', message: string);
+}
+/**
+ * Sanitize an SVG. Returns the cleaned bytes + any warnings.
+ *
+ * Throws `SvgSanitizeError` on inputs that can't be safely cleaned —
+ * malformed XML, oversized embedded base64, or empty results after
+ * sanitization (which would indicate the input was entirely
+ * disallowed content).
+ */
+export declare function sanitizeSvg(input: Uint8Array): SvgSanitizeResult;
+/** Canonical IANA MIME for SVG. Re-exported so the preprocessor can match against it. */
+export declare const SVG_MIME_TYPE = "image/svg+xml";
+//# sourceMappingURL=svg-sanitize.d.ts.map

package/dist/assets/svg-sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"svg-sanitize.d.ts","sourceRoot":"","sources":["../../src/assets/svg-sanitize.ts"],"names":[],"mappings":"AA6DA,MAAM,WAAW,iBAAiB;IAChC,0CAA0C;IAC1C,KAAK,EAAE,UAAU,CAAA;IACjB,0EAA0E;IAC1E,QAAQ,EAAE,SAAS,kBAAkB,EAAE,CAAA;CACxC;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAA;AAE5D;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,kBAAkB,GAAG,OAAO,CAAA;gBACjD,IAAI,EAAE,eAAe,GAAG,kBAAkB,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM;CAKlF;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,iBAAiB,CA+GhE;AAED,yFAAyF;AACzF,eAAO,MAAM,aAAa,kBAAW,CAAA"}

package/dist/assets/svg-sanitize.js

@@ -0,0 +1,209 @@
+/**
+ * SVG sanitization — strip script-execution surfaces, external network
+ * references, and bloat-prone embedded data before the bytes ever touch
+ * storage.
+ *
+ * Why SVG specifically: an SVG is XML and the spec allows scriptable
+ * features (event handlers, `<script>`, `<foreignObject>` HTML embedding)
+ * plus references to external resources via `href` / `xlink:href`. A
+ * malicious SVG renders fine in a browser AND can exfiltrate data, fire
+ * tracking pixels, or run JS in same-origin contexts.
+ *
+ * Design (per design-media.md → Security):
+ *
+ *   Strip:
+ *     - <script>
+ *     - event handlers (onload, onclick, onmouseover, etc.)
+ *     - <foreignObject>           — embedded HTML (XSS surface)
+ *     - <animate> with timed events
+ *     - external `href` / `xlink:href` on <use>, <image>, <a>, <script>
+ *       (any URL — privacy + XSS defense)
+ *
+ *   Keep:
+ *     - <svg> root + path/shape/text/group elements
+ *     - inline data: URIs (those are local; no network)
+ *
+ *   Warn:
+ *     - embedded base64 data URI > 100 KB (bloat)
+ *
+ *   Reject:
+ *     - embedded base64 data URI > 1 MB (bloat heuristic)
+ *     - malformed XML (caller surfaces as upload validation failure)
+ *
+ * Hash + ingest contract: the hash is computed on the SANITIZED bytes,
+ * not the input. A malicious SVG and a benign SVG that produce
+ * identical sanitized output legitimately deduplicate. This means
+ * re-uploading the "same" SVG that happens to have script tags as a
+ * decoy hashes the same as a clean version — that's correct: content
+ * addresses what we keep, not what we received.
+ *
+ * SSR-safe: `isomorphic-dompurify` works in Node without a DOM
+ * polyfill, so we can sanitize at upload (Node) and at any future
+ * server-side render path.
+ */
+import DOMPurify from 'isomorphic-dompurify';
+const SVG_MIME = 'image/svg+xml';
+/**
+ * Soft warning: embedded base64 data URI larger than this triggers a
+ * `large-base64` warning in the result. Authors might be embedding a
+ * full PNG inside an SVG — usually a mistake.
+ */
+const BASE64_WARN_BYTES = 100 * 1024;
+/**
+ * Hard reject: embedded base64 data URI larger than this fails
+ * sanitization. Past this point the SVG is almost always carrying a
+ * full image as a workaround that should be a separate asset.
+ */
+const BASE64_REJECT_BYTES = 1024 * 1024;
+/**
+ * Thrown when sanitization can't proceed safely. Callers map to a
+ * 400 Bad Request (it's a client-correctable input failure).
+ */
+export class SvgSanitizeError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'SvgSanitizeError';
+    }
+}
+/**
+ * Sanitize an SVG. Returns the cleaned bytes + any warnings.
+ *
+ * Throws `SvgSanitizeError` on inputs that can't be safely cleaned —
+ * malformed XML, oversized embedded base64, or empty results after
+ * sanitization (which would indicate the input was entirely
+ * disallowed content).
+ */
+export function sanitizeSvg(input) {
+    const text = new TextDecoder('utf-8', { fatal: false }).decode(input).trim();
+    if (text.length === 0) {
+        throw new SvgSanitizeError('empty', 'Empty input — not a valid SVG');
+    }
+    // Fail fast on oversized embedded base64. We could trust DOMPurify
+    // to leave it alone (data: URIs in <image> are valid), but the
+    // bloat heuristic exists so the resulting asset isn't a 5 MB SVG
+    // hiding a JPEG. Detect before sanitization to spare the parse.
+    const oversized = findOversizedBase64(text);
+    if (oversized !== null) {
+        throw new SvgSanitizeError('oversized-base64', `Embedded base64 data URI exceeds ${BASE64_REJECT_BYTES} bytes (got ${oversized}). Upload as a separate asset.`);
+    }
+    const warnings = [];
+    // Track stripped elements + attributes via DOMPurify hooks for
+    // diagnostic output, and filter URI-shaped attributes (href,
+    // xlink:href) to allow only fragment refs (#id) and inline data:
+    // URIs. NOTE: DOMPurify's `ALLOWED_URI_REGEXP` config option is
+    // applied to ALL attribute values in some versions, not just
+    // URI-shaped ones — `r="5"` on a <circle> would match against it
+    // and be stripped. Hook-based filtering is the safe alternative.
+    //
+    // DOMPurify wraps non-document inputs in `<html><body>` for parsing;
+    // its hooks fire on those wrapping elements as "stripped." Filter
+    // out the wrapper tags so warnings only reflect content the author
+    // actually wrote.
+    const HOOK_NOISE = new Set(['html', 'head', 'body']);
+    const ALLOWED_URI_PATTERN = /^(?:#|data:image\/(?:png|jpeg|gif|webp);base64,)/i;
+    const URI_BEARING_ATTRS = new Set(['href', 'xlink:href', 'src']);
+    const removedElements = new Set();
+    const removedAttributes = new Set();
+    DOMPurify.removeAllHooks();
+    DOMPurify.addHook('uponSanitizeElement', (_node, data) => {
+        if (HOOK_NOISE.has(data.tagName))
+            return;
+        if (!data.allowedTags[data.tagName]) {
+            removedElements.add(data.tagName);
+        }
+    });
+    DOMPurify.addHook('uponSanitizeAttribute', (node, data) => {
+        const ownerTag = node.nodeName.toLowerCase();
+        // URI filtering: drop hrefs that aren't fragment-only or inline data:.
+        if (URI_BEARING_ATTRS.has(data.attrName)) {
+            if (data.attrValue && !ALLOWED_URI_PATTERN.test(data.attrValue)) {
+                data.keepAttr = false;
+                removedAttributes.add(`${ownerTag}.${data.attrName}`);
+                return;
+            }
+        }
+        if (HOOK_NOISE.has(ownerTag))
+            return;
+        if (!data.allowedAttributes[data.attrName]) {
+            removedAttributes.add(`${ownerTag}.${data.attrName}`);
+        }
+    });
+    let cleaned;
+    try {
+        cleaned = DOMPurify.sanitize(text, {
+            USE_PROFILES: { svg: true },
+            // Strip these even within the SVG profile — they're allowed by
+            // default but are XSS / privacy surfaces.
+            FORBID_TAGS: ['foreignObject', 'script', 'a'],
+            FORBID_ATTR: [
+                // Event handlers — DOMPurify strips these by default in safe
+                // mode but we explicit-list them so config drift doesn't reopen.
+                'onload',
+                'onclick',
+                'onmouseover',
+                'onmouseout',
+                'onfocus',
+                'onblur',
+                'onbegin',
+                'onend',
+                'onrepeat',
+                // URI-bearing attributes are filtered via the hook above.
+            ],
+            KEEP_CONTENT: false,
+        });
+    }
+    catch (err) {
+        DOMPurify.removeAllHooks();
+        throw new SvgSanitizeError('malformed-xml', `Could not parse SVG: ${err.message}`);
+    }
+    DOMPurify.removeAllHooks();
+    if (cleaned.trim().length === 0) {
+        throw new SvgSanitizeError('empty', 'Sanitization produced empty output — input had no allowed content');
+    }
+    // Soft warning: large embedded base64 (didn't trip the hard reject).
+    const softLarge = findLargestBase64(cleaned);
+    if (softLarge !== null && softLarge >= BASE64_WARN_BYTES) {
+        warnings.push({ code: 'large-base64', sizeBytes: softLarge, threshold: BASE64_WARN_BYTES });
+    }
+    for (const tag of removedElements) {
+        warnings.push({ code: 'stripped-element', tag });
+    }
+    for (const attr of removedAttributes) {
+        const [on, attrName] = attr.split('.');
+        warnings.push({ code: 'stripped-attribute', attr: attrName ?? attr, on: on ?? '?' });
+    }
+    return {
+        bytes: new TextEncoder().encode(cleaned),
+        warnings,
+    };
+}
+/** Canonical IANA MIME for SVG. Re-exported so the preprocessor can match against it. */
+export const SVG_MIME_TYPE = SVG_MIME;
+/**
+ * Find the largest embedded base64 data URI in the text. Returns the
+ * decoded byte size, or null when no data URIs are present.
+ *
+ * Approximation — base64 encodes 3 bytes per 4 chars (≈ 0.75 ratio).
+ * Counting raw characters and multiplying gives byte estimates that
+ * are off by ≤2 bytes (padding). Good enough for a size threshold.
+ */
+function findLargestBase64(text) {
+    // Anchor on `;base64,` then match the run of base64 chars + padding.
+    const re = /;base64,([A-Za-z0-9+/=]+)/g;
+    let largest = 0;
+    let m;
+    while ((m = re.exec(text)) !== null) {
+        const charLen = m[1].length;
+        const bytes = Math.floor((charLen * 3) / 4);
+        if (bytes > largest)
+            largest = bytes;
+    }
+    return largest > 0 ? largest : null;
+}
+function findOversizedBase64(text) {
+    const largest = findLargestBase64(text);
+    return largest !== null && largest > BASE64_REJECT_BYTES ? largest : null;
+}
+//# sourceMappingURL=svg-sanitize.js.map

package/dist/assets/svg-sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"svg-sanitize.js","sourceRoot":"","sources":["../../src/assets/svg-sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAO,SAAS,MAAM,sBAAsB,CAAA;AAE5C,MAAM,QAAQ,GAAG,eAAe,CAAA;AAEhC;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAA;AAEpC;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAA;AAcvC;;;GAGG;AACH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,CAAgD;IAC7D,YAAY,IAAoD,EAAE,OAAe;QAC/E,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAChC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAA;IACtE,CAAC;IAED,mEAAmE;IACnE,+DAA+D;IAC/D,iEAAiE;IACjE,gEAAgE;IAChE,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;IAC3C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,oCAAoC,mBAAmB,eAAe,SAAS,gCAAgC,CAChH,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAyB,EAAE,CAAA;IAEzC,+DAA+D;IAC/D,6DAA6D;IAC7D,iEAAiE;IACjE,gEAAgE;IAChE,6DAA6D;IAC7D,iEAAiE;IACjE,iEAAiE;IACjE,EAAE;IACF,qEAAqE;IACrE,kEAAkE;IAClE,mEAAmE;IACnE,kBAAkB;IAClB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACpD,MAAM,mBAAmB,GAAG,mDAAmD,CAAA;IAC/E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAA;IAChE,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAA;IACzC,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAA;IAC3C,SAAS,CAAC,cAAc,EAAE,CAAA;IAC1B,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACvD,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAM;QACxC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACnC,CAAC;IACH,CAAC,CAAC,CAAA;IACF,SAAS,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;QAC5C,uEAAuE;QACvE,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAA;gBACrB,iBAAiB,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;gBACrD,OAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAM;QACpC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,iBAAiB,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;QACvD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QACH,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE;YACjC,YAAY,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;YAC3B,+DAA+D;YAC/D,0CAA0C;YAC1C,WAAW,EAAE,CAAC,eAAe,EAAE,QAAQ,EAAE,GAAG,CAAC;YAC7C,WAAW,EAAE;gBACX,6DAA6D;gBAC7D,iEAAiE;gBACjE,QAAQ;gBACR,SAAS;gBACT,aAAa;gBACb,YAAY;gBACZ,SAAS;gBACT,QAAQ;gBACR,SAAS;gBACT,OAAO;gBACP,UAAU;gBACV,0DAA0D;aAC3D;YACD,YAAY,EAAE,KAAK;SACpB,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,CAAC,cAAc,EAAE,CAAA;QAC1B,MAAM,IAAI,gBAAgB,CAAC,eAAe,EAAE,wBAAyB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAA;IAC/F,CAAC;IACD,SAAS,CAAC,cAAc,EAAE,CAAA;IAE1B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,mEAAmE,CAAC,CAAA;IAC1G,CAAC;IAED,qEAAqE;IACrE,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC5C,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,IAAI,iBAAiB,EAAE,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAA;IAC7F,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAA;IAClD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,IAAI,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;IACtF,CAAC;IAED,OAAO;QACL,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;QACxC,QAAQ;KACT,CAAA;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAA;AAErC;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,qEAAqE;IACrE,MAAM,EAAE,GAAG,4BAA4B,CAAA;IACvC,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,IAAI,CAAyB,CAAA;IAC7B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,MAAM,CAAA;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC3C,IAAI,KAAK,GAAG,OAAO;YAAE,OAAO,GAAG,KAAK,CAAA;IACtC,CAAC;IACD,OAAO,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;AACrC,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;IACvC,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;AAC3E,CAAC"}