stratal 0.0.27 → 0.1.0

package/dist/{storage-C30X81CS.mjs → storage-DBWVYMnn.mjs}

@@ -1,13 +1,12 @@
-import { c as Request, l as Singleton, p as inject, r as DI_TOKENS } from "./di-D7qmrAir.mjs";
-import { n as __decorateParam, t as __decorate } from "./decorate-CuAoSZvs.mjs";
-import { d as HttpException } from "./errors-C01O2T-n.mjs";
-import { n as Module } from "./module.decorator-CYHY6pG5.mjs";
-import "./module/index.mjs";
-import { t as StorageError } from "./storage.error-BStXPmO4.mjs";
-import { r as z } from "./zod-eKqqhZ5_.mjs";
-import { t as withZodI18n } from "./validation-CpOjviyT.mjs";
-import { t as Controller } from "./controller.decorator-YSTPQntu.mjs";
-import { n as Delete, o as Put, r as Get } from "./http-method.decorator-BljM8BDj.mjs";
+import { c as Request, l as Singleton, p as inject, r as DI_TOKENS } from "./di-DQ3xbjgf.mjs";
+import { n as __decorateParam, t as __decorate } from "./decorate-C79yt3Wt.mjs";
+import { d as HttpException } from "./errors-CrOXI_y5.mjs";
+import { n as Module } from "./module.decorator-CYbrOlX9.mjs";
+import { t as StorageError } from "./storage.error-Ao38Qdjx.mjs";
+import { t as Controller } from "./controller.decorator-BB0JcwMg.mjs";
+import { n as Delete, o as Put, r as Get } from "./http-method.decorator-BDi9LTWj.mjs";
+import { t as withZodI18n } from "./validation-CZ_B0aXY.mjs";
+import { _default, date, enum as enum$1, int, maximum, minLength, minimum, number, object, optional, string, url } from "zod/mini";
 //#region src/storage/storage.tokens.ts
 /**
 * Dependency injection tokens for the Storage module
@@ -68,7 +67,7 @@ let StorageManagerService = class StorageManagerService {
 	* @returns Storage provider instance
 	*/
 	async createProvider(config) {
-		const { R2StorageProvider } = await import("./r2-storage.provider-BoZmR6Ut.mjs").then((n) => n.n);
+		const { R2StorageProvider } = await import("./r2-storage.provider-wU_6api4.mjs").then((n) => n.n);
 		const bucket = this.env[config.binding];
 		if (!bucket) throw new StorageError(`R2 binding "${config.binding}" was not found in the environment`);
 		return new R2StorageProvider(config, bucket, this.env, this.options.route);
@@ -163,6 +162,73 @@ let StorageService = class StorageService {
 		return provider.exists(fullPath);
 	}
 	/**
+	* Delete many files in one call
+	*
+	* Providers delete in bulk — R2 takes 1000 keys per round trip — so this costs a fraction of
+	* the subrequests that looping over `delete` would. Paths that do not exist are ignored.
+	*
+	* @param relativePaths - Relative paths within the disk
+	* @param disk - Optional disk name (uses default if not provided)
+	*/
+	async deleteMany(relativePaths, disk) {
+		if (relativePaths.length === 0) return;
+		const diskName = this.resolveDisk(disk);
+		await (await this.storageManager.getProvider(diskName)).deleteMany(relativePaths.map((path) => this.buildFullPath(path, diskName)));
+	}
+	/**
+	* Read an object's metadata without transferring its body
+	*
+	* Use this to learn a file's size or content type when the contents are not needed — asking
+	* `head` for a hundred objects costs a hundred metadata reads, where `download` would move a
+	* hundred bodies.
+	*
+	* @param relativePath - Relative path within the disk
+	* @param disk - Optional disk name (uses default if not provided)
+	* @returns Metadata, or null when nothing exists at that path
+	*/
+	async head(relativePath, disk) {
+		const diskName = this.resolveDisk(disk);
+		const provider = await this.storageManager.getProvider(diskName);
+		const fullPath = this.buildFullPath(relativePath, diskName);
+		const result = await provider.head(fullPath);
+		if (result === null) return null;
+		return {
+			...result,
+			path: this.toRelativePath(result.path, diskName)
+		};
+	}
+	/**
+	* List objects on a disk, one page at a time
+	*
+	* **The result is a page, not the whole set.** Providers cap a single listing (R2 at 1000
+	* objects), so anything that aggregates across a prefix — summing sizes, counting files,
+	* copying a tree — must loop while `truncated` is true, passing `cursor` back in. Reading only
+	* the first page yields an answer that is quietly too small, with nothing having failed.
+	*
+	* Returned paths are relative to the disk, so they can be passed straight to `download`,
+	* `head` or `delete`.
+	*
+	* @param options - Prefix (relative to the disk), cursor and page limit
+	* @param disk - Optional disk name (uses default if not provided)
+	* @returns One page of matching objects
+	*/
+	async list(options = {}, disk) {
+		const diskName = this.resolveDisk(disk);
+		const provider = await this.storageManager.getProvider(diskName);
+		const fullPrefix = this.buildFullPath(options.prefix ?? "", diskName);
+		const page = await provider.list({
+			...options,
+			prefix: fullPrefix
+		});
+		return {
+			...page,
+			objects: page.objects.map((object) => ({
+				...object,
+				path: this.toRelativePath(object.path, diskName)
+			}))
+		};
+	}
+	/**
 	* Generate a presigned download URL
 	* @param relativePath - Relative path within the disk
 	* @param expiresIn - Optional expiry time in seconds (uses default if not provided)
@@ -229,6 +295,23 @@ let StorageService = class StorageService {
 		return `${root}/${relativePath}`.replace(/\/+/g, "/").replace(/^\//, "");
 	}
 	/**
+	* Strip the disk root from a provider path
+	*
+	* The inverse of `buildFullPath`, so what `head`/`list` hand back is what `download`/`delete`
+	* accept. A path that does not start with the root is returned unchanged rather than mangled —
+	* that can only happen if a provider returned something outside the disk, and silently trimming
+	* a prefix off it would disguise the fault as a valid path.
+	*
+	* @param fullPath - Path as the provider reported it
+	* @param diskName - Name of the disk
+	* @returns Path relative to the disk root
+	*/
+	toRelativePath(fullPath, diskName) {
+		const root = this.buildFullPath("", diskName);
+		if (root === "" || !fullPath.startsWith(root)) return fullPath;
+		return fullPath.slice(root.length).replace(/^\//, "");
+	}
+	/**
 	* Substitute template variables in path
 	* Override this method in subclasses to add custom substitutions
 	*
@@ -364,7 +447,38 @@ var FileNotFoundError = class extends HttpException {
 };
 //#endregion
 //#region src/storage/controllers/storage.controller.ts
-const diskParam = z.object({ disk: z.string() });
+const diskParam = object({ disk: string() });
+/**
+* Content types rendered inline by {@link StorageController.download}.
+*
+* Stored objects are served from the same origin as the application, so any response the browser
+* treats as a document runs in that origin's security context. Echoing an object's stored content
+* type back with `Content-Disposition: inline` therefore turns a bucket into a script-injection
+* vector: an object stored as `text/html` — or `image/svg+xml`, which is scriptable and is
+* deliberately absent below — executes against whatever session fetched it.
+*
+* The allowlist is deliberately the safe set rather than a blocklist of dangerous types, so a
+* format nobody anticipated downloads instead of rendering.
+*/
+const DEFAULT_INLINE_CONTENT_TYPES = /* @__PURE__ */ new Set([
+	"application/pdf",
+	"image/png",
+	"image/jpeg",
+	"image/gif",
+	"image/webp"
+]);
+/**
+* Strips characters that cannot legally appear in the quoted `filename="…"` parameter.
+*
+* Beyond the quote and backslash that would break out of the quoting, RFC 7230 §3.2 limits a header
+* field value to visible ASCII, space, horizontal tab and obs-text — so every C0 control and DEL is
+* removed too, not just CR and LF. A key holding one of those would otherwise emit a malformed
+* header that a strict parser or intermediary may reject or interpret differently. Bytes 0x80–0xFF
+* are obs-text and stay, so non-ASCII filenames survive intact.
+*/
+function contentDispositionFilename(path) {
+	return (path.split("/").pop() ?? "download").replace(/["\\\x00-\x1f\x7f]/g, "") || "download";
+}
 let StorageController = class StorageController {
 	storage;
 	constructor(storage) {
@@ -376,10 +490,13 @@ let StorageController = class StorageController {
 		const result = await this.storage.download(path, disk);
 		const stream = result.toStream();
 		if (!stream) throw new FileNotFoundError(path);
+		const renderInline = DEFAULT_INLINE_CONTENT_TYPES.has(result.contentType.split(";")[0].trim().toLowerCase());
 		return new Response(stream, { headers: {
-			"Content-Type": result.contentType,
+			"Content-Type": renderInline ? result.contentType : "application/octet-stream",
 			"Content-Length": String(result.size),
-			"Content-Disposition": "inline"
+			"Content-Disposition": renderInline ? "inline" : `attachment; filename="${contentDispositionFilename(path)}"`,
+			"X-Content-Type-Options": "nosniff",
+			"Content-Security-Policy": "sandbox; default-src 'none'"
 		} });
 	}
 	async upload(ctx) {
@@ -422,53 +539,54 @@ StorageController = __decorate([Controller("/storage", { hideFromDocs: true }),
 * Hono stores wildcard params under the key matching the path pattern.
 */
 function extractWildcardPath(ctx) {
-	return new URL(ctx.c.req.url).pathname.split("/").slice(3).join("/");
+	const encoded = new URL(ctx.c.req.url).pathname.split("/").slice(3).join("/");
+	try {
+		return decodeURIComponent(encoded);
+	} catch {
+		return encoded;
+	}
 }
 //#endregion
 //#region src/storage/contracts/delete-file.input.ts
-const deleteFileInputSchema = z.object({
-	path: z.string().min(1, withZodI18n("zodI18n.errors.custom.filePathRequired")),
-	disk: z.string().optional()
+const deleteFileInputSchema = object({
+	path: string().check(minLength(1, withZodI18n("zodI18n.errors.custom.filePathRequired"))),
+	disk: optional(string())
 });
 //#endregion
 //#region src/storage/contracts/file-exists.input.ts
-const fileExistsInputSchema = z.object({
-	path: z.string().min(1, withZodI18n("zodI18n.errors.custom.filePathRequired")),
-	disk: z.string().optional()
+const fileExistsInputSchema = object({
+	path: string().check(minLength(1, withZodI18n("zodI18n.errors.custom.filePathRequired"))),
+	disk: optional(string())
 });
 //#endregion
 //#region src/storage/contracts/get-presigned-url.input.ts
-const getPresignedUrlInputSchema = z.object({
-	path: z.string().min(1, withZodI18n("zodI18n.errors.custom.filePathRequired")),
-	method: z.enum([
-		"GET",
-		"PUT",
-		"DELETE",
-		"HEAD"
-	]).default("GET"),
-	expiresIn: z.number().int().min(1).max(604800).optional(),
-	disk: z.string().optional()
+const httpMethod = enum$1([
+	"GET",
+	"PUT",
+	"DELETE",
+	"HEAD"
+]);
+const getPresignedUrlInputSchema = object({
+	path: string().check(minLength(1, withZodI18n("zodI18n.errors.custom.filePathRequired"))),
+	method: _default(httpMethod, "GET"),
+	expiresIn: optional(number().check(int(), minimum(1), maximum(604800))),
+	disk: optional(string())
 });
-const presignedUrlResultSchema = z.object({
-	url: z.string().url(),
-	expiresIn: z.number(),
-	expiresAt: z.date(),
-	method: z.enum([
-		"GET",
-		"PUT",
-		"DELETE",
-		"HEAD"
-	])
+const presignedUrlResultSchema = object({
+	url: url(),
+	expiresIn: number(),
+	expiresAt: date(),
+	method: httpMethod
 });
 //#endregion
 //#region src/storage/contracts/upload-file.input.ts
-const uploadResultSchema = z.object({
-	path: z.string(),
-	disk: z.string(),
-	fullPath: z.string(),
-	size: z.number(),
-	mimeType: z.string(),
-	uploadedAt: z.date()
+const uploadResultSchema = object({
+	path: string(),
+	disk: string(),
+	fullPath: string(),
+	size: number(),
+	mimeType: string(),
+	uploadedAt: date()
 });
 //#endregion
 //#region src/storage/errors/file-too-large.error.ts
@@ -493,4 +611,4 @@ var InvalidFileTypeError = class extends HttpException {
 //#endregion
 export { presignedUrlResultSchema as a, StorageController as c, StorageService as d, StorageManagerService as f, getPresignedUrlInputSchema as i, FileNotFoundError as l, FileTooLargeError as n, fileExistsInputSchema as o, STORAGE_TOKENS as p, uploadResultSchema as r, deleteFileInputSchema as s, InvalidFileTypeError as t, StorageModule as u };
 
-//# sourceMappingURL=storage-C30X81CS.mjs.map
+//# sourceMappingURL=storage-DBWVYMnn.mjs.map

package/dist/storage-DBWVYMnn.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-DBWVYMnn.mjs","names":["enum_"],"sources":["../src/storage/storage.tokens.ts","../src/storage/services/storage-manager.service.ts","../src/storage/services/storage.service.ts","../src/storage/storage.module.ts","../src/storage/errors/file-not-found.error.ts","../src/storage/controllers/storage.controller.ts","../src/storage/contracts/delete-file.input.ts","../src/storage/contracts/file-exists.input.ts","../src/storage/contracts/get-presigned-url.input.ts","../src/storage/contracts/upload-file.input.ts","../src/storage/errors/file-too-large.error.ts","../src/storage/errors/invalid-file-type.error.ts"],"sourcesContent":["/**\n * Dependency injection tokens for the Storage module\n * Using Symbol-based tokens to avoid magic strings\n */\nexport const STORAGE_TOKENS = {\n  Options: Symbol.for('stratal:storage:options'),\n  StorageService: Symbol.for('stratal:storage:service'),\n  StorageManager: Symbol.for('stratal:storage:manager'),\n} as const\n","import { inject } from '../../di'\nimport { Singleton } from '../../di/decorators'\nimport { DI_TOKENS } from '../../di/tokens'\nimport { type StratalEnv } from '../../env'\nimport { StorageError } from '../storage.error'\nimport type { IStorageProvider } from '../providers/storage-provider.interface'\nimport { STORAGE_TOKENS } from '../storage.tokens'\nimport type { StorageConfig, StorageEntry } from '../types'\n\n/**\n * Storage Manager Service\n * Manages multiple storage providers (one per disk)\n * Handles lazy initialization and caching of R2 providers\n */\n@Singleton(STORAGE_TOKENS.StorageManager)\nexport class StorageManagerService {\n  private readonly providers = new Map<string, IStorageProvider>()\n  private readonly creationPromises = new Map<string, Promise<IStorageProvider>>()\n  private readonly diskConfigs = new Map<string, StorageEntry>()\n\n  constructor(\n    @inject(STORAGE_TOKENS.Options)\n    private readonly options: StorageConfig,\n    @inject(DI_TOKENS.CloudflareEnv)\n    private readonly env: StratalEnv\n  ) {\n    this.initializeDiskConfigs()\n  }\n\n  /**\n   * Initialize disk configurations from options\n   */\n  private initializeDiskConfigs(): void {\n    for (const entry of this.options.storage) {\n      this.diskConfigs.set(entry.disk, entry)\n    }\n  }\n\n  /**\n   * Get provider for a specific disk\n   * Lazily initializes provider on first access\n   * @param diskName - Name of the disk\n   * @returns Storage provider instance\n   */\n  async getProvider(diskName: string): Promise<IStorageProvider> {\n    // Return cached provider if exists\n    const cached = this.providers.get(diskName)\n    if (cached) {\n      return cached\n    }\n\n    // Return in-flight creation promise to deduplicate concurrent calls\n    const inflight = this.creationPromises.get(diskName)\n    if (inflight) {\n      return inflight\n    }\n\n    // Get disk configuration\n    const diskConfig = this.diskConfigs.get(diskName)\n    if (!diskConfig) {\n      throw new StorageError(`Disk \"${diskName}\" is not configured`)\n    }\n\n    // Create provider and deduplicate concurrent calls\n    const promise = this.createProvider(diskConfig).then((provider) => {\n      this.providers.set(diskName, provider)\n      this.creationPromises.delete(diskName)\n      return provider\n    }).catch((error: unknown) => {\n      this.creationPromises.delete(diskName)\n      throw error\n    })\n\n    this.creationPromises.set(diskName, promise)\n\n    return promise\n  }\n\n  /**\n   * Create an R2 provider instance\n   * Dynamically imports R2StorageProvider to support code splitting\n   * @param config - Storage entry configuration\n   * @returns Storage provider instance\n   */\n  private async createProvider(config: StorageEntry): Promise<IStorageProvider> {\n    const { R2StorageProvider } = await import('../providers/r2-storage.provider')\n    const bucket = this.env[config.binding as keyof StratalEnv] as unknown as R2Bucket | undefined\n    if (!bucket) {\n      throw new StorageError(`R2 binding \"${config.binding}\" was not found in the environment`)\n    }\n    return new R2StorageProvider(config, bucket, this.env, this.options.route)\n  }\n\n  /**\n   * Get disk configuration\n   * @param diskName - Name of the disk\n   * @returns Storage entry configuration\n   */\n  getDiskConfig(diskName: string): StorageEntry {\n    const config = this.diskConfigs.get(diskName)\n    if (!config) {\n      throw new StorageError(`Disk \"${diskName}\" is not configured`)\n    }\n    return config\n  }\n\n  /**\n   * Check if a disk exists\n   * @param diskName - Name of the disk\n   * @returns True if disk exists, false otherwise\n   */\n  hasDisk(diskName: string): boolean {\n    return this.diskConfigs.has(diskName)\n  }\n\n  /**\n   * Get all available disk names\n   * @returns Array of disk names\n   */\n  getAvailableDisks(): string[] {\n    return Array.from(this.diskConfigs.keys())\n  }\n}\n","import { inject } from '../../di'\nimport { Request } from '../../di/decorators'\nimport type {\n  DownloadResult,\n  HeadResult,\n  ListOptions,\n  ListResult,\n  PresignedUrlResult,\n  UploadOptions,\n  UploadResult,\n} from '../contracts'\nimport { StorageError } from '../storage.error'\nimport type { StreamingBlobPayloadInputTypes } from '../providers/storage-provider.interface'\nimport { STORAGE_TOKENS } from '../storage.tokens'\nimport type { StorageConfig } from '../types'\nimport { type StorageManagerService } from './storage-manager.service'\n\n/**\n * Storage Service\n *\n * Main facade for storage operations.\n * Request-scoped for proper isolation.\n *\n * @example\n * ```typescript\n * @inject(STORAGE_TOKENS.StorageService)\n * private readonly storage: StorageService\n *\n * await this.storage.upload(file, 'documents/report.pdf')\n * ```\n */\n@Request(STORAGE_TOKENS.StorageService)\nexport class StorageService {\n  constructor(\n    @inject(STORAGE_TOKENS.StorageManager)\n    protected readonly storageManager: StorageManagerService,\n    @inject(STORAGE_TOKENS.Options)\n    protected readonly options: StorageConfig\n  ) { }\n\n  /**\n   * Upload content to storage\n   * @param body - Content to upload (stream, buffer, or string)\n   * @param relativePath - Relative path within the disk\n   * @param options - Upload options including size and mime type\n   * @param disk - Optional disk name (uses default if not provided)\n   * @returns Upload result with metadata\n   */\n  async upload(\n    body: StreamingBlobPayloadInputTypes,\n    relativePath: string,\n    options: UploadOptions,\n    disk?: string\n  ): Promise<UploadResult> {\n    const diskName = this.resolveDisk(disk)\n    const provider = await this.storageManager.getProvider(diskName)\n    const fullPath = this.buildFullPath(relativePath, diskName)\n\n    return provider.upload(body, fullPath, options)\n  }\n\n  /**\n   * Download a file from storage\n   * @param relativePath - Relative path within the disk\n   * @param disk - Optional disk name (uses default if not provided)\n   * @returns Download result with stream and metadata\n   */\n  async download(relativePath: string, disk?: string): Promise<DownloadResult> {\n    const diskName = this.resolveDisk(disk)\n    const provider = await this.storageManager.getProvider(diskName)\n    const fullPath = this.buildFullPath(relativePath, diskName)\n\n    return provider.download(fullPath)\n  }\n\n  /**\n   * Delete a file from storage\n   * @param relativePath - Relative path within the disk\n   * @param disk - Optional disk name (uses default if not provided)\n   */\n  async delete(relativePath: string, disk?: string): Promise<void> {\n    const diskName = this.resolveDisk(disk)\n    const provider = await this.storageManager.getProvider(diskName)\n    const fullPath = this.buildFullPath(relativePath, diskName)\n\n    await provider.delete(fullPath)\n  }\n\n  /**\n   * Check if a file exists in storage\n   * @param relativePath - Relative path within the disk\n   * @param disk - Optional disk name (uses default if not provided)\n   * @returns True if file exists, false otherwise\n   */\n  async exists(relativePath: string, disk?: string): Promise<boolean> {\n    const diskName = this.resolveDisk(disk)\n    const provider = await this.storageManager.getProvider(diskName)\n    const fullPath = this.buildFullPath(relativePath, diskName)\n\n    return provider.exists(fullPath)\n  }\n\n  /**\n   * Delete many files in one call\n   *\n   * Providers delete in bulk — R2 takes 1000 keys per round trip — so this costs a fraction of\n   * the subrequests that looping over `delete` would. Paths that do not exist are ignored.\n   *\n   * @param relativePaths - Relative paths within the disk\n   * @param disk - Optional disk name (uses default if not provided)\n   */\n  async deleteMany(relativePaths: string[], disk?: string): Promise<void> {\n    if (relativePaths.length === 0) {\n      return\n    }\n\n    const diskName = this.resolveDisk(disk)\n    const provider = await this.storageManager.getProvider(diskName)\n\n    await provider.deleteMany(relativePaths.map((path) => this.buildFullPath(path, diskName)))\n  }\n\n  /**\n   * Read an object's metadata without transferring its body\n   *\n   * Use this to learn a file's size or content type when the contents are not needed — asking\n   * `head` for a hundred objects costs a hundred metadata reads, where `download` would move a\n   * hundred bodies.\n   *\n   * @param relativePath - Relative path within the disk\n   * @param disk - Optional disk name (uses default if not provided)\n   * @returns Metadata, or null when nothing exists at that path\n   */\n  async head(relativePath: string, disk?: string): Promise<HeadResult | null> {\n    const diskName = this.resolveDisk(disk)\n    const provider = await this.storageManager.getProvider(diskName)\n    const fullPath = this.buildFullPath(relativePath, diskName)\n\n    const result = await provider.head(fullPath)\n    if (result === null) {\n      return null\n    }\n\n    return { ...result, path: this.toRelativePath(result.path, diskName) }\n  }\n\n  /**\n   * List objects on a disk, one page at a time\n   *\n   * **The result is a page, not the whole set.** Providers cap a single listing (R2 at 1000\n   * objects), so anything that aggregates across a prefix — summing sizes, counting files,\n   * copying a tree — must loop while `truncated` is true, passing `cursor` back in. Reading only\n   * the first page yields an answer that is quietly too small, with nothing having failed.\n   *\n   * Returned paths are relative to the disk, so they can be passed straight to `download`,\n   * `head` or `delete`.\n   *\n   * @param options - Prefix (relative to the disk), cursor and page limit\n   * @param disk - Optional disk name (uses default if not provided)\n   * @returns One page of matching objects\n   */\n  async list(options: ListOptions = {}, disk?: string): Promise<ListResult> {\n    const diskName = this.resolveDisk(disk)\n    const provider = await this.storageManager.getProvider(diskName)\n    // An empty relative prefix still has to become the disk root, or a listing would escape the\n    // disk and return every other disk's objects sharing the bucket.\n    const fullPrefix = this.buildFullPath(options.prefix ?? '', diskName)\n\n    const page = await provider.list({ ...options, prefix: fullPrefix })\n\n    return {\n      ...page,\n      objects: page.objects.map((object) => ({\n        ...object,\n        path: this.toRelativePath(object.path, diskName),\n      })),\n    }\n  }\n\n  /**\n   * Generate a presigned download URL\n   * @param relativePath - Relative path within the disk\n   * @param expiresIn - Optional expiry time in seconds (uses default if not provided)\n   * @param disk - Optional disk name (uses default if not provided)\n   * @returns Presigned URL result\n   */\n  async getPresignedDownloadUrl(\n    relativePath: string,\n    expiresIn?: number,\n    disk?: string\n  ): Promise<PresignedUrlResult> {\n    return this.getPresignedUrl(relativePath, 'GET', expiresIn, disk)\n  }\n\n  /**\n   * Generate a presigned upload URL\n   * @param relativePath - Relative path within the disk\n   * @param expiresIn - Optional expiry time in seconds (uses default if not provided)\n   * @param disk - Optional disk name (uses default if not provided)\n   * @returns Presigned URL result\n   */\n  async getPresignedUploadUrl(\n    relativePath: string,\n    expiresIn?: number,\n    disk?: string\n  ): Promise<PresignedUrlResult> {\n    return this.getPresignedUrl(relativePath, 'PUT', expiresIn, disk)\n  }\n\n  /**\n   * Generate a presigned delete URL\n   * @param relativePath - Relative path within the disk\n   * @param expiresIn - Optional expiry time in seconds (uses default if not provided)\n   * @param disk - Optional disk name (uses default if not provided)\n   * @returns Presigned URL result\n   */\n  async getPresignedDeleteUrl(\n    relativePath: string,\n    expiresIn?: number,\n    disk?: string\n  ): Promise<PresignedUrlResult> {\n    return this.getPresignedUrl(relativePath, 'DELETE', expiresIn, disk)\n  }\n\n  /**\n   * Generate a presigned URL for any method\n   * @param relativePath - Relative path within the disk\n   * @param method - HTTP method (GET, PUT, DELETE, HEAD)\n   * @param expiresIn - Optional expiry time in seconds (uses default if not provided)\n   * @param disk - Optional disk name (uses default if not provided)\n   * @returns Presigned URL result\n   */\n  protected async getPresignedUrl(\n    relativePath: string,\n    method: 'GET' | 'PUT' | 'DELETE' | 'HEAD',\n    expiresIn?: number,\n    disk?: string\n  ): Promise<PresignedUrlResult> {\n    const diskName = this.resolveDisk(disk)\n    const provider = await this.storageManager.getProvider(diskName)\n    const fullPath = this.buildFullPath(relativePath, diskName)\n    const validatedExpiresIn = this.validateExpiresIn(expiresIn)\n\n    return provider.getPresignedUrl(fullPath, method, validatedExpiresIn)\n  }\n\n  /**\n   * Resolve disk name (use default if not provided)\n   * @param disk - Optional disk name\n   * @returns Resolved disk name\n   */\n  protected resolveDisk(disk?: string): string {\n    const diskName = disk ?? this.options.defaultStorageDisk\n\n    if (!this.storageManager.hasDisk(diskName)) {\n      throw new StorageError(`Disk \"${diskName}\" is not configured`)\n    }\n\n    return diskName\n  }\n\n  /**\n   * Build full path with disk root and path template substitution\n   * @param relativePath - Relative path within the disk\n   * @param diskName - Name of the disk\n   * @returns Full path including disk root\n   */\n  protected buildFullPath(relativePath: string, diskName: string): string {\n    const diskConfig = this.storageManager.getDiskConfig(diskName)\n    let root = diskConfig.root || ''\n\n    // Substitute template variables\n    root = this.substituteTemplateVariables(root)\n\n    // Combine root and relative path\n    const fullPath = `${root}/${relativePath}`.replace(/\\/+/g, '/').replace(/^\\//, '')\n\n    return fullPath\n  }\n\n  /**\n   * Strip the disk root from a provider path\n   *\n   * The inverse of `buildFullPath`, so what `head`/`list` hand back is what `download`/`delete`\n   * accept. A path that does not start with the root is returned unchanged rather than mangled —\n   * that can only happen if a provider returned something outside the disk, and silently trimming\n   * a prefix off it would disguise the fault as a valid path.\n   *\n   * @param fullPath - Path as the provider reported it\n   * @param diskName - Name of the disk\n   * @returns Path relative to the disk root\n   */\n  protected toRelativePath(fullPath: string, diskName: string): string {\n    const root = this.buildFullPath('', diskName)\n    if (root === '' || !fullPath.startsWith(root)) {\n      return fullPath\n    }\n\n    return fullPath.slice(root.length).replace(/^\\//, '')\n  }\n\n  /**\n   * Substitute template variables in path\n   * Override this method in subclasses to add custom substitutions\n   *\n   * @param path - Path with template variables\n   * @returns Path with substituted variables\n   */\n  protected substituteTemplateVariables(path: string): string {\n    let result = path\n\n    // Substitute {date}, {year}, {month}\n    const now = new Date()\n    result = result.replace(/{date}/g, now.toISOString().split('T')[0])\n    result = result.replace(/{year}/g, now.getFullYear().toString())\n    result = result.replace(/{month}/g, (now.getMonth() + 1).toString().padStart(2, '0'))\n\n    return result\n  }\n\n  /**\n   * Validate expiry time for presigned URLs\n   * @param expiresIn - Optional expiry time in seconds\n   * @returns Validated expiry time\n   */\n  protected validateExpiresIn(expiresIn?: number): number {\n    const presignedUrlConfig = this.options.presignedUrl\n    const validatedExpiresIn = expiresIn ?? presignedUrlConfig.defaultExpiry\n\n    const minExpiry = 1\n    const maxExpiry = presignedUrlConfig.maxExpiry\n\n    if (validatedExpiresIn < minExpiry || validatedExpiresIn > maxExpiry) {\n      throw new StorageError(`Presigned URL expiry ${validatedExpiresIn}s is out of range (${minExpiry}–${maxExpiry}s)`)\n    }\n\n    return validatedExpiresIn\n  }\n\n  /**\n   * Get all available disk names\n   * @returns Array of disk names\n   */\n  getAvailableDisks(): string[] {\n    return this.storageManager.getAvailableDisks()\n  }\n\n  /**\n   * Chunked upload for streaming data without known size\n   * Uses multipart upload under the hood - handles retries and large files\n   *\n   * Use this method when:\n   * - Content-Length is unknown or unreliable\n   * - Uploading from streams that can't be rewound\n   * - Need automatic retry handling for transient failures\n   *\n   * @param body - Content to upload (stream or buffer)\n   * @param relativePath - Relative path within the disk\n   * @param options - Upload options (mimeType required, size optional)\n   * @param disk - Optional disk name (uses default if not provided)\n   * @returns Upload result with metadata\n   */\n  async chunkedUpload(\n    body: StreamingBlobPayloadInputTypes,\n    relativePath: string,\n    options: Omit<UploadOptions, 'size'> & { size?: number },\n    disk?: string\n  ): Promise<UploadResult> {\n    const diskName = this.resolveDisk(disk)\n    const provider = await this.storageManager.getProvider(diskName)\n    const fullPath = this.buildFullPath(relativePath, diskName)\n\n    return provider.chunkedUpload(body, fullPath, options)\n  }\n}\n","/**\n * Storage Module\n * Provides file storage capabilities using Cloudflare R2\n * Supports multiple disk configurations with dynamic path templates\n */\n\nimport { Module } from '../module'\nimport type { AsyncModuleOptions, DynamicModule } from '../module/types'\nimport { StorageManagerService } from './services/storage-manager.service'\nimport { StorageService } from './services/storage.service'\nimport { STORAGE_TOKENS } from './storage.tokens'\nimport type { StorageConfig } from './types'\n\n/**\n * Storage module options\n * Same as StorageConfig from types.ts\n */\nexport type StorageModuleOptions = StorageConfig\n\n@Module({\n  providers: [\n    { provide: STORAGE_TOKENS.StorageManager, useClass: StorageManagerService },\n    { provide: STORAGE_TOKENS.StorageService, useClass: StorageService },\n  ],\n})\nexport class StorageModule {\n  /**\n   * Configure StorageModule with static options\n   *\n   * @example\n   * ```typescript\n   * StorageModule.forRoot({\n   *   storage: [{ disk: 'uploads', binding: 'MY_BUCKET', root: 'uploads' }],\n   *   defaultStorageDisk: 'uploads',\n   *   presignedUrl: { defaultExpiry: 3600, maxExpiry: 86400 }\n   * })\n   * ```\n   */\n  static forRoot(options: StorageModuleOptions): DynamicModule {\n    return {\n      module: StorageModule,\n      providers: [\n        { provide: STORAGE_TOKENS.Options, useValue: options },\n      ],\n    }\n  }\n\n  /**\n   * Configure StorageModule with async factory\n   *\n   * Use when configuration depends on other services.\n   *\n   * @example\n   * ```typescript\n   * StorageModule.forRootAsync({\n   *   inject: [storageConfig.KEY],\n   *   useFactory: (storage) => ({\n   *     storage: storage.storage,\n   *     defaultStorageDisk: storage.defaultStorageDisk,\n   *     presignedUrl: storage.presignedUrl\n   *   })\n   * })\n   * ```\n   */\n  static forRootAsync(options: AsyncModuleOptions<StorageModuleOptions>): DynamicModule {\n    return {\n      module: StorageModule,\n      providers: [\n        {\n          provide: STORAGE_TOKENS.Options,\n          useFactory: options.useFactory,\n          inject: options.inject,\n        },\n      ],\n    }\n  }\n}\n","import { HttpException } from '../../errors'\n\nexport class FileNotFoundError extends HttpException {\n  constructor(path?: string) {\n    super(404, path ? `File not found: \"${path}\"` : 'File not found')\n  }\n}\n","import { object, string } from 'zod/mini'\nimport { inject } from '../../di'\nimport { Controller } from '../../router/decorators/controller.decorator'\nimport { Delete, Get, Put } from '../../router/decorators/http-method.decorator'\nimport { type RouterContext } from '../../router/router-context'\nimport { FileNotFoundError } from '../errors/file-not-found.error'\nimport type { StorageService } from '../services/storage.service'\nimport { STORAGE_TOKENS } from '../storage.tokens'\n\nconst diskParam = object({\n  disk: string(),\n})\n\n/**\n * Content types rendered inline by {@link StorageController.download}.\n *\n * Stored objects are served from the same origin as the application, so any response the browser\n * treats as a document runs in that origin's security context. Echoing an object's stored content\n * type back with `Content-Disposition: inline` therefore turns a bucket into a script-injection\n * vector: an object stored as `text/html` — or `image/svg+xml`, which is scriptable and is\n * deliberately absent below — executes against whatever session fetched it.\n *\n * The allowlist is deliberately the safe set rather than a blocklist of dangerous types, so a\n * format nobody anticipated downloads instead of rendering.\n */\nconst DEFAULT_INLINE_CONTENT_TYPES: ReadonlySet<string> = new Set([\n  'application/pdf',\n  'image/png',\n  'image/jpeg',\n  'image/gif',\n  'image/webp',\n])\n\n/**\n * Strips characters that cannot legally appear in the quoted `filename=\"…\"` parameter.\n *\n * Beyond the quote and backslash that would break out of the quoting, RFC 7230 §3.2 limits a header\n * field value to visible ASCII, space, horizontal tab and obs-text — so every C0 control and DEL is\n * removed too, not just CR and LF. A key holding one of those would otherwise emit a malformed\n * header that a strict parser or intermediary may reject or interpret differently. Bytes 0x80–0xFF\n * are obs-text and stay, so non-ASCII filenames survive intact.\n */\nfunction contentDispositionFilename(path: string): string {\n  const base = path.split('/').pop() ?? 'download'\n  // eslint-disable-next-line no-control-regex -- the control range is the point: these bytes are illegal in a header value.\n  return base.replace(/[\"\\\\\\x00-\\x1f\\x7f]/g, '') || 'download'\n}\n\n/**\n * Storage Controller\n *\n * Auto-registered controller that proxies R2 operations behind signed URLs.\n * Signature verification is applied via VerifySignatureMiddleware on the module's\n * configureRoutes() method.\n *\n * Routes:\n * - GET    /storage/:disk/*  → download file\n * - PUT    /storage/:disk/*  → upload file\n * - DELETE /storage/:disk/*  → delete file\n */\n@Controller('/storage', { hideFromDocs: true })\nexport class StorageController {\n  constructor(\n    @inject(STORAGE_TOKENS.StorageService)\n    private readonly storage: StorageService\n  ) {}\n\n  @Get('/:disk/*', { hideFromDocs: true, params: diskParam })\n  async download(ctx: RouterContext): Promise<Response> {\n    const disk = ctx.param('disk')\n    const path = extractWildcardPath(ctx)\n    const result = await this.storage.download(path, disk)\n\n    const stream = result.toStream()\n    if (!stream) {\n      throw new FileNotFoundError(path)\n    }\n\n    const renderInline = DEFAULT_INLINE_CONTENT_TYPES.has(\n      result.contentType.split(';')[0].trim().toLowerCase()\n    )\n\n    return new Response(stream, {\n      headers: {\n        // A type outside the allowlist is handed back as an opaque blob, so the browser has no\n        // reason to parse it as markup even when the stored content type claims otherwise.\n        'Content-Type': renderInline ? result.contentType : 'application/octet-stream',\n        'Content-Length': String(result.size),\n        'Content-Disposition': renderInline\n          ? 'inline'\n          : `attachment; filename=\"${contentDispositionFilename(path)}\"`,\n        // Prevents the browser sniffing past the content type above and rendering a disguised\n        // payload anyway.\n        'X-Content-Type-Options': 'nosniff',\n        // Defence in depth for the inline case: a viewer or decoder handling a malformed file gets\n        // an opaque origin with no scripting, so it cannot reach the session it was served to.\n        'Content-Security-Policy': \"sandbox; default-src 'none'\",\n      },\n    })\n  }\n\n  @Put('/:disk/*', { hideFromDocs: true, params: diskParam })\n  async upload(ctx: RouterContext): Promise<Response> {\n    const disk = ctx.param('disk')\n    const path = extractWildcardPath(ctx)\n\n    const body = ctx.c.req.raw.body\n    const contentType = ctx.header('content-type') ?? 'application/octet-stream'\n    const contentLength = ctx.header('content-length')\n\n    await this.storage.upload(body, path, {\n      mimeType: contentType,\n      size: contentLength ? parseInt(contentLength, 10) : 0,\n    }, disk)\n\n    return ctx.json({ path, disk }, 200)\n  }\n\n  @Delete('/:disk/*', { hideFromDocs: true, params: diskParam })\n  async destroy(ctx: RouterContext): Promise<Response> {\n    const disk = ctx.param('disk')\n    const path = extractWildcardPath(ctx)\n\n    await this.storage.delete(path, disk)\n\n    return ctx.c.body(null, 204)\n  }\n}\n\n/**\n * Extract the wildcard path from the Hono context.\n * Hono stores wildcard params under the key matching the path pattern.\n */\nfunction extractWildcardPath(ctx: RouterContext): string {\n  // Hono exposes wildcard capture as the raw path after the matched prefix\n  const url = new URL(ctx.c.req.url)\n  const fullPath = url.pathname\n  // Remove /storage/:disk/ prefix to get the file path\n  const parts = fullPath.split('/')\n  // ['', 'storage', 'disk', ...rest]\n  const encoded = parts.slice(3).join('/')\n\n  // `url.pathname` is percent-encoded, but object keys are stored raw — so a key holding a space,\n  // a non-ASCII character, `#` or `?` would be looked up as `%20`/`%C3%A9`/… and miss. Keys are\n  // opaque strings that may themselves contain `/`, so the remainder is decoded whole rather than\n  // per segment. A malformed escape cannot be decoded and is left as-is; the lookup then fails as\n  // a normal missing object instead of throwing a URIError out of the handler.\n  try {\n    return decodeURIComponent(encoded)\n  } catch {\n    return encoded\n  }\n}\n","import { minLength, object, optional, string } from 'zod/mini'\nimport type { infer as Infer } from 'zod/mini'\nimport { withZodI18n } from '../../i18n/validation'\n\nexport const deleteFileInputSchema = object({\n  path: string().check(minLength(1, withZodI18n('zodI18n.errors.custom.filePathRequired'))),\n  disk: optional(string()),\n})\n\nexport type DeleteFileInput = Infer<typeof deleteFileInputSchema>\n","import { minLength, object, optional, string } from 'zod/mini'\nimport type { infer as Infer } from 'zod/mini'\nimport { withZodI18n } from '../../i18n/validation'\n\nexport const fileExistsInputSchema = object({\n  path: string().check(minLength(1, withZodI18n('zodI18n.errors.custom.filePathRequired'))),\n  disk: optional(string()),\n})\n\nexport type FileExistsInput = Infer<typeof fileExistsInputSchema>\n","import { date, enum as enum_, int, maximum, minimum, minLength, number, object, optional, string, url, _default } from 'zod/mini'\nimport type { infer as Infer } from 'zod/mini'\nimport { withZodI18n } from '../../i18n/validation'\n\nconst httpMethod = enum_(['GET', 'PUT', 'DELETE', 'HEAD'])\n\nexport const getPresignedUrlInputSchema = object({\n  path: string().check(minLength(1, withZodI18n('zodI18n.errors.custom.filePathRequired'))),\n  method: _default(httpMethod, 'GET'),\n  expiresIn: optional(number().check(int(), minimum(1), maximum(604800))),\n  disk: optional(string()),\n})\n\nexport type GetPresignedUrlInput = Infer<typeof getPresignedUrlInputSchema>\n\nexport const presignedUrlResultSchema = object({\n  url: url(),\n  expiresIn: number(),\n  expiresAt: date(),\n  method: httpMethod,\n})\n\nexport type PresignedUrlResult = Infer<typeof presignedUrlResultSchema>\n","import { date, number, object, string } from 'zod/mini'\nimport type { infer as Infer } from 'zod/mini'\n\n/**\n * Upload options for streaming uploads\n */\nexport interface UploadOptions {\n  /**\n   * Size of the content in bytes\n   */\n  size: number\n  /**\n   * MIME type of the content\n   */\n  mimeType?: string\n  /**\n   * Custom metadata to store with the object (S3-specific)\n   * Stored as S3 object metadata headers\n   */\n  metadata?: Record<string, string>\n  /**\n   * Object tagging for lifecycle policies (S3-specific)\n   * Format: key=value (e.g., \"Tus-Completed=true\")\n   */\n  tagging?: string\n}\n\nexport const uploadResultSchema = object({\n  path: string(),\n  disk: string(),\n  fullPath: string(),\n  size: number(),\n  mimeType: string(),\n  uploadedAt: date(),\n})\n\nexport type UploadResult = Infer<typeof uploadResultSchema>\n","import { HttpException } from '../../errors'\n\nexport class FileTooLargeError extends HttpException {\n  constructor(public readonly size?: number, public readonly maxSize?: number) {\n    super(413, 'File too large')\n  }\n}\n","import { HttpException } from '../../errors'\n\nexport class InvalidFileTypeError extends HttpException {\n  constructor(public readonly mimeType?: string) {\n    super(422, 'Invalid file type')\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAIA,MAAa,iBAAiB;CAC5B,SAAS,OAAO,IAAI,yBAAyB;CAC7C,gBAAgB,OAAO,IAAI,yBAAyB;CACpD,gBAAgB,OAAO,IAAI,yBAAyB;AACtD;;;ACOO,IAAM,wBAAN,MAAM,sBAAsB;CAOd;CAEA;CARnB,4BAA6B,IAAI,IAA8B;CAC/D,mCAAoC,IAAI,IAAuC;CAC/E,8BAA+B,IAAI,IAA0B;CAE7D,YACE,SAEA,KAEA;EAHiB,KAAA,UAAA;EAEA,KAAA,MAAA;EAEjB,KAAK,sBAAsB;CAC7B;;;;CAKA,wBAAsC;EACpC,KAAK,MAAM,SAAS,KAAK,QAAQ,SAC/B,KAAK,YAAY,IAAI,MAAM,MAAM,KAAK;CAE1C;;;;;;;CAQA,MAAM,YAAY,UAA6C;EAE7D,MAAM,SAAS,KAAK,UAAU,IAAI,QAAQ;EAC1C,IAAI,QACF,OAAO;EAIT,MAAM,WAAW,KAAK,iBAAiB,IAAI,QAAQ;EACnD,IAAI,UACF,OAAO;EAIT,MAAM,aAAa,KAAK,YAAY,IAAI,QAAQ;EAChD,IAAI,CAAC,YACH,MAAM,IAAI,aAAa,SAAS,SAAS,oBAAoB;EAI/D,MAAM,UAAU,KAAK,eAAe,UAAU,CAAC,CAAC,MAAM,aAAa;GACjE,KAAK,UAAU,IAAI,UAAU,QAAQ;GACrC,KAAK,iBAAiB,OAAO,QAAQ;GACrC,OAAO;EACT,CAAC,CAAC,CAAC,OAAO,UAAmB;GAC3B,KAAK,iBAAiB,OAAO,QAAQ;GACrC,MAAM;EACR,CAAC;EAED,KAAK,iBAAiB,IAAI,UAAU,OAAO;EAE3C,OAAO;CACT;;;;;;;CAQA,MAAc,eAAe,QAAiD;EAC5E,MAAM,EAAE,sBAAsB,MAAM,OAAO,qCAAmC,CAAA,MAAA,MAAA,EAAA,CAAA;EAC9E,MAAM,SAAS,KAAK,IAAI,OAAO;EAC/B,IAAI,CAAC,QACH,MAAM,IAAI,aAAa,eAAe,OAAO,QAAQ,mCAAmC;EAE1F,OAAO,IAAI,kBAAkB,QAAQ,QAAQ,KAAK,KAAK,KAAK,QAAQ,KAAK;CAC3E;;;;;;CAOA,cAAc,UAAgC;EAC5C,MAAM,SAAS,KAAK,YAAY,IAAI,QAAQ;EAC5C,IAAI,CAAC,QACH,MAAM,IAAI,aAAa,SAAS,SAAS,oBAAoB;EAE/D,OAAO;CACT;;;;;;CAOA,QAAQ,UAA2B;EACjC,OAAO,KAAK,YAAY,IAAI,QAAQ;CACtC;;;;;CAMA,oBAA8B;EAC5B,OAAO,MAAM,KAAK,KAAK,YAAY,KAAK,CAAC;CAC3C;AACF;;CA5GC,UAAU,eAAe,cAAc;CAOnC,gBAAA,GAAA,OAAO,eAAe,OAAO,CAAA;CAE7B,gBAAA,GAAA,OAAO,UAAU,aAAa,CAAA;;;;ACS5B,IAAM,iBAAN,MAAM,eAAe;CAGL;CAEA;CAJrB,YACE,gBAEA,SAEA;EAHmB,KAAA,iBAAA;EAEA,KAAA,UAAA;CACjB;;;;;;;;;CAUJ,MAAM,OACJ,MACA,cACA,SACA,MACuB;EACvB,MAAM,WAAW,KAAK,YAAY,IAAI;EACtC,MAAM,WAAW,MAAM,KAAK,eAAe,YAAY,QAAQ;EAC/D,MAAM,WAAW,KAAK,cAAc,cAAc,QAAQ;EAE1D,OAAO,SAAS,OAAO,MAAM,UAAU,OAAO;CAChD;;;;;;;CAQA,MAAM,SAAS,cAAsB,MAAwC;EAC3E,MAAM,WAAW,KAAK,YAAY,IAAI;EACtC,MAAM,WAAW,MAAM,KAAK,eAAe,YAAY,QAAQ;EAC/D,MAAM,WAAW,KAAK,cAAc,cAAc,QAAQ;EAE1D,OAAO,SAAS,SAAS,QAAQ;CACnC;;;;;;CAOA,MAAM,OAAO,cAAsB,MAA8B;EAC/D,MAAM,WAAW,KAAK,YAAY,IAAI;EACtC,MAAM,WAAW,MAAM,KAAK,eAAe,YAAY,QAAQ;EAC/D,MAAM,WAAW,KAAK,cAAc,cAAc,QAAQ;EAE1D,MAAM,SAAS,OAAO,QAAQ;CAChC;;;;;;;CAQA,MAAM,OAAO,cAAsB,MAAiC;EAClE,MAAM,WAAW,KAAK,YAAY,IAAI;EACtC,MAAM,WAAW,MAAM,KAAK,eAAe,YAAY,QAAQ;EAC/D,MAAM,WAAW,KAAK,cAAc,cAAc,QAAQ;EAE1D,OAAO,SAAS,OAAO,QAAQ;CACjC;;;;;;;;;;CAWA,MAAM,WAAW,eAAyB,MAA8B;EACtE,IAAI,cAAc,WAAW,GAC3B;EAGF,MAAM,WAAW,KAAK,YAAY,IAAI;EAGtC,OAAM,MAFiB,KAAK,eAAe,YAAY,QAAQ,EAAA,CAEhD,WAAW,cAAc,KAAK,SAAS,KAAK,cAAc,MAAM,QAAQ,CAAC,CAAC;CAC3F;;;;;;;;;;;;CAaA,MAAM,KAAK,cAAsB,MAA2C;EAC1E,MAAM,WAAW,KAAK,YAAY,IAAI;EACtC,MAAM,WAAW,MAAM,KAAK,eAAe,YAAY,QAAQ;EAC/D,MAAM,WAAW,KAAK,cAAc,cAAc,QAAQ;EAE1D,MAAM,SAAS,MAAM,SAAS,KAAK,QAAQ;EAC3C,IAAI,WAAW,MACb,OAAO;EAGT,OAAO;GAAE,GAAG;GAAQ,MAAM,KAAK,eAAe,OAAO,MAAM,QAAQ;EAAE;CACvE;;;;;;;;;;;;;;;;CAiBA,MAAM,KAAK,UAAuB,CAAC,GAAG,MAAoC;EACxE,MAAM,WAAW,KAAK,YAAY,IAAI;EACtC,MAAM,WAAW,MAAM,KAAK,eAAe,YAAY,QAAQ;EAG/D,MAAM,aAAa,KAAK,cAAc,QAAQ,UAAU,IAAI,QAAQ;EAEpE,MAAM,OAAO,MAAM,SAAS,KAAK;GAAE,GAAG;GAAS,QAAQ;EAAW,CAAC;EAEnE,OAAO;GACL,GAAG;GACH,SAAS,KAAK,QAAQ,KAAK,YAAY;IACrC,GAAG;IACH,MAAM,KAAK,eAAe,OAAO,MAAM,QAAQ;GACjD,EAAE;EACJ;CACF;;;;;;;;CASA,MAAM,wBACJ,cACA,WACA,MAC6B;EAC7B,OAAO,KAAK,gBAAgB,cAAc,OAAO,WAAW,IAAI;CAClE;;;;;;;;CASA,MAAM,sBACJ,cACA,WACA,MAC6B;EAC7B,OAAO,KAAK,gBAAgB,cAAc,OAAO,WAAW,IAAI;CAClE;;;;;;;;CASA,MAAM,sBACJ,cACA,WACA,MAC6B;EAC7B,OAAO,KAAK,gBAAgB,cAAc,UAAU,WAAW,IAAI;CACrE;;;;;;;;;CAUA,MAAgB,gBACd,cACA,QACA,WACA,MAC6B;EAC7B,MAAM,WAAW,KAAK,YAAY,IAAI;EACtC,MAAM,WAAW,MAAM,KAAK,eAAe,YAAY,QAAQ;EAC/D,MAAM,WAAW,KAAK,cAAc,cAAc,QAAQ;EAC1D,MAAM,qBAAqB,KAAK,kBAAkB,SAAS;EAE3D,OAAO,SAAS,gBAAgB,UAAU,QAAQ,kBAAkB;CACtE;;;;;;CAOA,YAAsB,MAAuB;EAC3C,MAAM,WAAW,QAAQ,KAAK,QAAQ;EAEtC,IAAI,CAAC,KAAK,eAAe,QAAQ,QAAQ,GACvC,MAAM,IAAI,aAAa,SAAS,SAAS,oBAAoB;EAG/D,OAAO;CACT;;;;;;;CAQA,cAAwB,cAAsB,UAA0B;EAEtE,IAAI,OADe,KAAK,eAAe,cAAc,QACjC,CAAC,CAAC,QAAQ;EAG9B,OAAO,KAAK,4BAA4B,IAAI;EAK5C,OAFiB,GAAG,KAAK,GAAG,eAAe,QAAQ,QAAQ,GAAG,CAAC,CAAC,QAAQ,OAAO,EAEjE;CAChB;;;;;;;;;;;;;CAcA,eAAyB,UAAkB,UAA0B;EACnE,MAAM,OAAO,KAAK,cAAc,IAAI,QAAQ;EAC5C,IAAI,SAAS,MAAM,CAAC,SAAS,WAAW,IAAI,GAC1C,OAAO;EAGT,OAAO,SAAS,MAAM,KAAK,MAAM,CAAC,CAAC,QAAQ,OAAO,EAAE;CACtD;;;;;;;;CASA,4BAAsC,MAAsB;EAC1D,IAAI,SAAS;EAGb,MAAM,sBAAM,IAAI,KAAK;EACrB,SAAS,OAAO,QAAQ,WAAW,IAAI,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE;EAClE,SAAS,OAAO,QAAQ,WAAW,IAAI,YAAY,CAAC,CAAC,SAAS,CAAC;EAC/D,SAAS,OAAO,QAAQ,aAAa,IAAI,SAAS,IAAI,EAAA,CAAG,SAAS,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC;EAEpF,OAAO;CACT;;;;;;CAOA,kBAA4B,WAA4B;EACtD,MAAM,qBAAqB,KAAK,QAAQ;EACxC,MAAM,qBAAqB,aAAa,mBAAmB;EAE3D,MAAM,YAAY;EAClB,MAAM,YAAY,mBAAmB;EAErC,IAAI,qBAAqB,aAAa,qBAAqB,WACzD,MAAM,IAAI,aAAa,wBAAwB,mBAAmB,qBAAqB,UAAU,GAAG,UAAU,GAAG;EAGnH,OAAO;CACT;;;;;CAMA,oBAA8B;EAC5B,OAAO,KAAK,eAAe,kBAAkB;CAC/C;;;;;;;;;;;;;;;;CAiBA,MAAM,cACJ,MACA,cACA,SACA,MACuB;EACvB,MAAM,WAAW,KAAK,YAAY,IAAI;EACtC,MAAM,WAAW,MAAM,KAAK,eAAe,YAAY,QAAQ;EAC/D,MAAM,WAAW,KAAK,cAAc,cAAc,QAAQ;EAE1D,OAAO,SAAS,cAAc,MAAM,UAAU,OAAO;CACvD;AACF;;CAvVC,QAAQ,eAAe,cAAc;CAGjC,gBAAA,GAAA,OAAO,eAAe,cAAc,CAAA;CAEpC,gBAAA,GAAA,OAAO,eAAe,OAAO,CAAA;;;;;;;;;;ACX3B,IAAM,gBAAA,iBAAN,MAAM,cAAc;;;;;;;;;;;;;CAazB,OAAO,QAAQ,SAA8C;EAC3D,OAAO;GACL,QAAA;GACA,WAAW,CACT;IAAE,SAAS,eAAe;IAAS,UAAU;GAAQ,CACvD;EACF;CACF;;;;;;;;;;;;;;;;;;CAmBA,OAAO,aAAa,SAAkE;EACpF,OAAO;GACL,QAAA;GACA,WAAW,CACT;IACE,SAAS,eAAe;IACxB,YAAY,QAAQ;IACpB,QAAQ,QAAQ;GAClB,CACF;EACF;CACF;AACF;AAzDC,gBAAA,iBAAA,WAAA,CAAA,OAAO,EACN,WAAW,CACT;CAAE,SAAS,eAAe;CAAgB,UAAU;AAAsB,GAC1E;CAAE,SAAS,eAAe;CAAgB,UAAU;AAAe,CACrE,EACF,CAAC,CAAA,GAAA,aAAA;;;ACtBD,IAAa,oBAAb,cAAuC,cAAc;CACnD,YAAY,MAAe;EACzB,MAAM,KAAK,OAAO,oBAAoB,KAAK,KAAK,gBAAgB;CAClE;AACF;;;ACGA,MAAM,YAAY,OAAO,EACvB,MAAM,OAAO,EACf,CAAC;;;;;;;;;;;;;AAcD,MAAM,+CAAoD,IAAI,IAAI;CAChE;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;;;;;;AAWD,SAAS,2BAA2B,MAAsB;CAGxD,QAFa,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,WAAA,CAE1B,QAAQ,uBAAuB,EAAE,KAAK;AACpD;AAeO,IAAM,oBAAN,MAAM,kBAAkB;CAGV;CAFnB,YACE,SAEA;EADiB,KAAA,UAAA;CAChB;CAEH,MACM,SAAS,KAAuC;EACpD,MAAM,OAAO,IAAI,MAAM,MAAM;EAC7B,MAAM,OAAO,oBAAoB,GAAG;EACpC,MAAM,SAAS,MAAM,KAAK,QAAQ,SAAS,MAAM,IAAI;EAErD,MAAM,SAAS,OAAO,SAAS;EAC/B,IAAI,CAAC,QACH,MAAM,IAAI,kBAAkB,IAAI;EAGlC,MAAM,eAAe,6BAA6B,IAChD,OAAO,YAAY,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,YAAY,CACtD;EAEA,OAAO,IAAI,SAAS,QAAQ,EAC1B,SAAS;GAGP,gBAAgB,eAAe,OAAO,cAAc;GACpD,kBAAkB,OAAO,OAAO,IAAI;GACpC,uBAAuB,eACnB,WACA,yBAAyB,2BAA2B,IAAI,EAAE;GAG9D,0BAA0B;GAG1B,2BAA2B;EAC7B,EACF,CAAC;CACH;CAEA,MACM,OAAO,KAAuC;EAClD,MAAM,OAAO,IAAI,MAAM,MAAM;EAC7B,MAAM,OAAO,oBAAoB,GAAG;EAEpC,MAAM,OAAO,IAAI,EAAE,IAAI,IAAI;EAC3B,MAAM,cAAc,IAAI,OAAO,cAAc,KAAK;EAClD,MAAM,gBAAgB,IAAI,OAAO,gBAAgB;EAEjD,MAAM,KAAK,QAAQ,OAAO,MAAM,MAAM;GACpC,UAAU;GACV,MAAM,gBAAgB,SAAS,eAAe,EAAE,IAAI;EACtD,GAAG,IAAI;EAEP,OAAO,IAAI,KAAK;GAAE;GAAM;EAAK,GAAG,GAAG;CACrC;CAEA,MACM,QAAQ,KAAuC;EACnD,MAAM,OAAO,IAAI,MAAM,MAAM;EAC7B,MAAM,OAAO,oBAAoB,GAAG;EAEpC,MAAM,KAAK,QAAQ,OAAO,MAAM,IAAI;EAEpC,OAAO,IAAI,EAAE,KAAK,MAAM,GAAG;CAC7B;AACF;AA5DG,WAAA,CAAA,IAAI,YAAY;CAAE,cAAc;CAAM,QAAQ;AAAU,CAAC,CAAA,GAAA,kBAAA,WAAA,YAAA,IAAA;AAkCzD,WAAA,CAAA,IAAI,YAAY;CAAE,cAAc;CAAM,QAAQ;AAAU,CAAC,CAAA,GAAA,kBAAA,WAAA,UAAA,IAAA;AAiBzD,WAAA,CAAA,OAAO,YAAY;CAAE,cAAc;CAAM,QAAQ;AAAU,CAAC,CAAA,GAAA,kBAAA,WAAA,WAAA,IAAA;AA1D9D,oBAAA,WAAA,CAAA,WAAW,YAAY,EAAE,cAAc,KAAK,CAAC,GAAA,gBAAA,GAGzC,OAAO,eAAe,cAAc,CAAA,CAAA,GAAA,iBAAA;;;;;AAsEzC,SAAS,oBAAoB,KAA4B;CAOvD,MAAM,UAJW,IADD,IAAI,IAAI,EAAE,IAAI,GACX,CAAC,CAAC,SAEE,MAAM,GAET,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;CAOvC,IAAI;EACF,OAAO,mBAAmB,OAAO;CACnC,QAAQ;EACN,OAAO;CACT;AACF;;;ACpJA,MAAa,wBAAwB,OAAO;CAC1C,MAAM,OAAO,CAAC,CAAC,MAAM,UAAU,GAAG,YAAY,wCAAwC,CAAC,CAAC;CACxF,MAAM,SAAS,OAAO,CAAC;AACzB,CAAC;;;ACHD,MAAa,wBAAwB,OAAO;CAC1C,MAAM,OAAO,CAAC,CAAC,MAAM,UAAU,GAAG,YAAY,wCAAwC,CAAC,CAAC;CACxF,MAAM,SAAS,OAAO,CAAC;AACzB,CAAC;;;ACHD,MAAM,aAAaA,OAAM;CAAC;CAAO;CAAO;CAAU;AAAM,CAAC;AAEzD,MAAa,6BAA6B,OAAO;CAC/C,MAAM,OAAO,CAAC,CAAC,MAAM,UAAU,GAAG,YAAY,wCAAwC,CAAC,CAAC;CACxF,QAAQ,SAAS,YAAY,KAAK;CAClC,WAAW,SAAS,OAAO,CAAC,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,QAAQ,MAAM,CAAC,CAAC;CACtE,MAAM,SAAS,OAAO,CAAC;AACzB,CAAC;AAID,MAAa,2BAA2B,OAAO;CAC7C,KAAK,IAAI;CACT,WAAW,OAAO;CAClB,WAAW,KAAK;CAChB,QAAQ;AACV,CAAC;;;ACOD,MAAa,qBAAqB,OAAO;CACvC,MAAM,OAAO;CACb,MAAM,OAAO;CACb,UAAU,OAAO;CACjB,MAAM,OAAO;CACb,UAAU,OAAO;CACjB,YAAY,KAAK;AACnB,CAAC;;;AChCD,IAAa,oBAAb,cAAuC,cAAc;CACvB;CAA+B;CAA3D,YAAY,MAA+B,SAAkC;EAC3E,MAAM,KAAK,gBAAgB;EADD,KAAA,OAAA;EAA+B,KAAA,UAAA;CAE3D;AACF;;;ACJA,IAAa,uBAAb,cAA0C,cAAc;CAC1B;CAA5B,YAAY,UAAmC;EAC7C,MAAM,KAAK,mBAAmB;EADJ,KAAA,WAAA;CAE5B;AACF"}