studiograph 1.3.48-next.2 → 1.3.48-next.201

package/dist/core/format-registry.d.ts

@@ -0,0 +1,170 @@
+/**
+ * Format Registry — the single source of truth for how Studiograph ingests
+ * every file type.
+ *
+ * Framework-free and dependency-free (sits alongside `validation.ts` /
+ * `schema-registry.ts`), so it can be imported by server routes, services,
+ * the MCP layer, the CLI, and serialized to the web client over
+ * `GET /api/formats`. Every ingestion surface reads from here instead of
+ * maintaining its own parallel extension / MIME / accept list — that
+ * divergence (a stale `.xlsx`, a half-supported `.svg`, a PDF that becomes
+ * an asset on one path and a note on another) is exactly what this registry
+ * exists to kill.
+ *
+ * Each `FormatEntry` declares the full disposition of a format: how it's
+ * handled, whether the original is retained, what (if anything) it derives
+ * to, how it's indexed for search, and which extractor feeds that index.
+ * The fields are consumed incrementally across the phased refactor — P0 wires
+ * the routing (`handler`, `category`, `extractor`, `sanitize`) and the
+ * searchability contract (`indexAs`); later phases consume `deriveTo` /
+ * `derive` (conversions, P2), `extractor` for sidecars/captions (indexing,
+ * P3), `mimeTypes` (MCP presign, P4), and the serialized shape (client, P5).
+ *
+ * "Dependency-free" here means no npm packages / no framework — the Node
+ * `path` builtin is fine and shared with the rest of `src/core`.
+ */
+/** How a format is dispatched + what it ultimately becomes. */
+export type FormatCategory = 'direct-note' | 'direct-dataset' | 'asset-convertible' | 'asset' | 'bookmarks';
+/** Which server handler ingests the bytes. */
+export type FormatHandler = 'importDirect' | 'uploadAsset' | 'importBookmarks';
+/** The entity a convertible format derives to (entry-primary, D1). */
+export type FormatDeriveTo = 'note' | 'dataset' | 'reference' | null;
+/** When the derivation happens. */
+export type FormatDerive = 'inline' | 'deferred' | 'none';
+/**
+ * How the format feeds the search index.
+ * - `body`    — the entity body itself is the index text (notes, datasets).
+ * - `sidecar` — extracted text written to a `.studiograph/assets-text/` sidecar.
+ * - `caption` — vision caption + OCR text written to a sidecar.
+ * - `none`    — opaque; filename + frontmatter only (`indexable: false`).
+ */
+export type FormatIndexAs = 'body' | 'sidecar' | 'caption' | 'none';
+/** The extractor that produces index text for this format (null = none). */
+export type FormatExtractor = 'pdf' | 'docx' | 'xlsx' | 'image-caption' | null;
+export interface FormatEntry {
+    /** Lowercased, dot-prefixed extensions (`['.md']`). */
+    extensions: string[];
+    /** MIME types — drives the MCP presign allowlist (P4) + client hints. */
+    mimeTypes: string[];
+    category: FormatCategory;
+    /** Entry-primary: keep the original binary after deriving (D1). */
+    retainSource: boolean;
+    deriveTo: FormatDeriveTo;
+    derive: FormatDerive;
+    /** `'none'` ⇒ `indexable: false` in frontmatter. */
+    indexAs: FormatIndexAs;
+    handler: FormatHandler;
+    extractor: FormatExtractor;
+    /** Declarative upper bound (bytes). Not enforced in P0; wired later. */
+    maxBytes: number;
+    /** Bytes need sanitizing before they're stored/served (SVG XSS, D7). */
+    sanitize?: 'svg';
+    /**
+     * P0 transitional marker: this format's target `handler` isn't wired yet,
+     * so it temporarily routes through the legacy agent-extraction path and is
+     * excluded from `assetUploadExtensions()` (preserving today's behavior).
+     * Remove it when the real handler lands — docx when the deterministic
+     * markdown convert ships (P2); svg when `sanitize-html` is wired (P3) — at
+     * which point the format flows to `uploadAsset` like every other asset.
+     */
+    transitional?: 'agent-extract';
+}
+/**
+ * The disposition for any file the registry doesn't recognize: a generic
+ * opaque asset, never content-indexed. `resolveFormat` returns this exact
+ * (frozen) reference for unknown types so callers can identity-check it —
+ * the P0 dispatcher rejects on `entry === FALLBACK_ASSET_ENTRY` to preserve
+ * today's reject behavior; P0b removes that guard to accept unknowns
+ * leniently (the only behavior change between the two phases).
+ */
+export declare const FALLBACK_ASSET_ENTRY: FormatEntry;
+/** Look up a format by extension (dot-prefixed or bare). */
+export declare function lookupByExtension(ext: string): FormatEntry | undefined;
+/** Look up a format by MIME type. */
+export declare function lookupByMime(mime: string): FormatEntry | undefined;
+/**
+ * Resolve the disposition for a file. Never returns undefined — unknown
+ * types resolve to `FALLBACK_ASSET_ENTRY` (identity-checkable). Extension is
+ * the primary key; `mime` is a fallback when the filename carries no usable
+ * extension. Bookmark detection is by content (`isNetscapeBookmarkFile`),
+ * NOT handled here.
+ */
+export declare function resolveFormat(filename: string, mime?: string): FormatEntry;
+/** A format is searchable when it declares any index extraction. */
+export declare function isIndexable(entry: FormatEntry): boolean;
+/**
+ * Extensions whose bytes are stored as a binary asset (category `asset` or
+ * `asset-convertible`), plus `.csv` — which is a direct-dataset on the web
+ * import path but has historically been accepted by `uploadAsset` too (the
+ * agent `import_file` tool stores a dropped `.csv` as an opaque asset). Kept
+ * in the set so `isAssetUploadExtension` preserves that behavior exactly.
+ * Returned WITHOUT the leading dot to match the legacy `base.ts` set.
+ */
+export declare function assetUploadExtensions(): Set<string>;
+/**
+ * Extensions the `import-service` text path participates in — verbatim
+ * direct-write formats, anything with a text/caption extractor, and the
+ * sanitized SVG. Used to derive `import-service`'s `isSupportedFile`.
+ *
+ * This is a (small) superset of the legacy literal — it additionally
+ * includes `.xlsx`, `.avif`, `.heic` — but every one of those extra
+ * extensions is an asset-upload extension, so it is caught by
+ * `isAssetUploadExtension` *before* `isSupportedFile` is ever consulted in
+ * the only live caller (the agent `import_file` tool). The observable
+ * behavior is therefore identical to the legacy set. Dot-prefixed.
+ */
+export declare function importServiceExtensions(): Set<string>;
+/**
+ * Per-ingress capability (P4, Codex drift-guard). Each ingress path has a
+ * different trust model, so "which formats may travel this path" is a property
+ * of the format + the path, expressed here in the registry rather than as a
+ * special-case in the presign/upload code:
+ *
+ *  - `presign`   — MCP pre-signed PUT straight to R2. The app NEVER holds the
+ *    bytes, so it cannot sanitize them. Only formats that are safe as raw bytes
+ *    are eligible: image assets with no `sanitize` requirement and not still on
+ *    the transitional agent path. This is what keeps SVG (sanitize: 'svg') and
+ *    every doc/video/opaque type OFF the presign path without a hardcoded list.
+ *  - `inline`    — MCP base64 bytes through the app (V3) OR web multipart. The
+ *    app holds the bytes, so it CAN sanitize — SVG is allowed here (sanitize
+ *    runs before store). Any asset the upload pipeline accepts is inline-able.
+ *  - `multipart` — alias of `inline` for the web upload route's perspective.
+ *
+ * A format is presign-safe iff: it's an image asset, needs no sanitization, and
+ * isn't transitional. Today that's png/jpeg/gif/webp/avif/heic — exactly the
+ * set the old hardcoded `{png, jpeg}` was a subset of, now derived.
+ */
+export declare function isPresignSafe(entry: FormatEntry): boolean;
+/** A format may travel the inline/multipart path iff the upload pipeline takes
+ *  it (any asset, including ones that need sanitizing — the app holds the bytes
+ *  and sanitizes before store). Excludes still-transitional formats. */
+export declare function isInlineUploadAllowed(entry: FormatEntry): boolean;
+/**
+ * MIME allowlist for the MCP PRESIGN path (Content-Type gate baked into the PUT
+ * signature). Derived from `isPresignSafe` — NOT every asset MIME. The presign
+ * service + the MCP tool's mime enum both read this so they can't drift.
+ */
+export declare function presignMimeAllowlist(): string[];
+/**
+ * MIME allowlist for the INLINE-bytes / multipart path (V3 — the app holds the
+ * bytes and can sanitize). Broader than presign: includes SVG and the
+ * convertible docs. Drives the V3 `upload_asset_inline` MCP tool's gate.
+ */
+export declare function inlineUploadMimeAllowlist(): string[];
+/**
+ * The HTML `accept` attribute value covering every ingestible format
+ * (extensions + MIME types). The single source the client's fragmented
+ * accept lists collapse onto (P5).
+ */
+export declare function acceptAttribute(): string;
+/**
+ * JSON-safe projection of the registry for `GET /api/formats`. The client
+ * builds its accept lists, disposition matrix, and supported-types copy from
+ * this — `supported-file-types.ts` becomes a derived view (P5).
+ */
+export declare function serializeForClient(): {
+    formats: FormatEntry[];
+    accept: string;
+};
+/** All registered entries (read-only view). */
+export declare function allFormats(): FormatEntry[];

package/dist/core/format-registry.js

@@ -0,0 +1,404 @@
+/**
+ * Format Registry — the single source of truth for how Studiograph ingests
+ * every file type.
+ *
+ * Framework-free and dependency-free (sits alongside `validation.ts` /
+ * `schema-registry.ts`), so it can be imported by server routes, services,
+ * the MCP layer, the CLI, and serialized to the web client over
+ * `GET /api/formats`. Every ingestion surface reads from here instead of
+ * maintaining its own parallel extension / MIME / accept list — that
+ * divergence (a stale `.xlsx`, a half-supported `.svg`, a PDF that becomes
+ * an asset on one path and a note on another) is exactly what this registry
+ * exists to kill.
+ *
+ * Each `FormatEntry` declares the full disposition of a format: how it's
+ * handled, whether the original is retained, what (if anything) it derives
+ * to, how it's indexed for search, and which extractor feeds that index.
+ * The fields are consumed incrementally across the phased refactor — P0 wires
+ * the routing (`handler`, `category`, `extractor`, `sanitize`) and the
+ * searchability contract (`indexAs`); later phases consume `deriveTo` /
+ * `derive` (conversions, P2), `extractor` for sidecars/captions (indexing,
+ * P3), `mimeTypes` (MCP presign, P4), and the serialized shape (client, P5).
+ *
+ * "Dependency-free" here means no npm packages / no framework — the Node
+ * `path` builtin is fine and shared with the rest of `src/core`.
+ */
+import { extname } from 'path';
+const MB = 1024 * 1024;
+/** Matches the 100MB cap enforced inside the asset upload route today. */
+const ASSET_MAX_BYTES = 100 * MB;
+/** Generous bound for verbatim text imports. Declarative in P0. */
+const TEXT_MAX_BYTES = 25 * MB;
+/**
+ * The canonical format table. Order is not significant for lookup (maps are
+ * built below), but it reads top-to-bottom as: direct text → convertibles →
+ * image assets → opaque binary assets → bookmarks.
+ *
+ * The opaque-asset block intentionally enumerates the FULL set the web import
+ * dispatcher already accepts as assets today (video / audio / legacy office /
+ * design files / archives). P0 is a parity refactor: those formats stay
+ * assets, and genuinely-unlisted extensions stay *rejected* (they resolve to
+ * `FALLBACK_ASSET_ENTRY`, which the P0 dispatcher refuses). Accepting unknown
+ * types as generic assets is a deliberate, separately-shipped behavior change
+ * (P0b) — it flips only how the dispatcher treats the fallback, not this table.
+ */
+const FORMATS = [
+    // ── Direct text → entity (verbatim, no LLM) ──────────────────────────────
+    {
+        extensions: ['.md'],
+        mimeTypes: ['text/markdown'],
+        category: 'direct-note',
+        retainSource: false,
+        deriveTo: null,
+        derive: 'none',
+        indexAs: 'body',
+        handler: 'importDirect',
+        extractor: null,
+        maxBytes: TEXT_MAX_BYTES,
+    },
+    {
+        extensions: ['.txt'],
+        mimeTypes: ['text/plain'],
+        category: 'direct-note',
+        retainSource: false,
+        deriveTo: null,
+        derive: 'none',
+        indexAs: 'body',
+        handler: 'importDirect',
+        extractor: null,
+        maxBytes: TEXT_MAX_BYTES,
+    },
+    {
+        extensions: ['.csv'],
+        mimeTypes: ['text/csv'],
+        category: 'direct-dataset',
+        retainSource: false,
+        deriveTo: null,
+        derive: 'none',
+        indexAs: 'body',
+        handler: 'importDirect',
+        extractor: null,
+        maxBytes: TEXT_MAX_BYTES,
+    },
+    // ── Asset + optional deferred conversion (entry-primary, D1/D2) ───────────
+    {
+        extensions: ['.pdf'],
+        mimeTypes: ['application/pdf'],
+        category: 'asset-convertible',
+        retainSource: true,
+        deriveTo: 'note',
+        derive: 'deferred',
+        indexAs: 'sidecar',
+        handler: 'uploadAsset',
+        extractor: 'pdf',
+        maxBytes: ASSET_MAX_BYTES,
+    },
+    {
+        extensions: ['.docx'],
+        mimeTypes: ['application/vnd.openxmlformats-officedocument.wordprocessingml.document'],
+        category: 'asset-convertible',
+        retainSource: true,
+        deriveTo: 'note',
+        derive: 'deferred',
+        indexAs: 'sidecar',
+        handler: 'uploadAsset',
+        extractor: 'docx',
+        maxBytes: ASSET_MAX_BYTES,
+        // P2 flipped docx onto the asset path: it now uploads as an `asset` and
+        // converts to a note on demand (convert-service), so it's no longer
+        // transitional. (svg stays transitional until sanitize-html lands in P3.)
+    },
+    {
+        extensions: ['.xlsx'],
+        mimeTypes: ['application/vnd.openxmlformats-officedocument.spreadsheetml.sheet'],
+        category: 'asset-convertible',
+        retainSource: true,
+        deriveTo: 'dataset',
+        derive: 'deferred',
+        indexAs: 'sidecar',
+        handler: 'uploadAsset',
+        extractor: 'xlsx',
+        maxBytes: ASSET_MAX_BYTES,
+    },
+    // ── Image assets (caption + OCR indexed, P3) ──────────────────────────────
+    ...imageAssets(
+    // Ordered most-common-first (drives the import modal's "View supported
+    // files" list, which preserves this order rather than sorting): the
+    // formats people actually have, then the newer avif/heic tail.
+    { exts: ['.jpg', '.jpeg'], mime: 'image/jpeg' }, { exts: ['.png'], mime: 'image/png' }, { exts: ['.gif'], mime: 'image/gif' }, { exts: ['.webp'], mime: 'image/webp' }, { exts: ['.heic'], mime: 'image/heic' }, { exts: ['.avif'], mime: 'image/avif' }, 
+    // SVG is sanitized on ingest where the server holds the bytes (D7).
+    // P0 transitional: until `sanitize-html` is wired (P3) it stays on the
+    // agent-extraction path and must NOT reach uploadAsset — storing an
+    // unsanitized svg reopens the stored-XSS hole the asset route blocks.
+    { exts: ['.svg'], mime: 'image/svg+xml', sanitize: 'svg', transitional: 'agent-extract' }),
+    // ── Opaque binary assets (filename/metadata only) ─────────────────────────
+    // Enumerated to preserve current dispatcher behavior: these all become
+    // assets today via ASSET_UPLOAD_EXTENSIONS. None are content-indexed.
+    ...opaqueAssets(['.mp4', 'video/mp4'], ['.mov', 'video/quicktime'], ['.webm', 'video/webm'], ['.avi', 'video/x-msvideo'], ['.mkv', 'video/x-matroska'], ['.m4v', 'video/x-m4v'], ['.mp3', 'audio/mpeg'], ['.wav', 'audio/wav'], ['.m4a', 'audio/mp4'], ['.ogg', 'audio/ogg'], ['.flac', 'audio/flac'], ['.aac', 'audio/aac'], ['.xls', 'application/vnd.ms-excel'], ['.numbers', 'application/octet-stream'], ['.tsv', 'text/tab-separated-values'], ['.doc', 'application/msword'], ['.pptx', 'application/vnd.openxmlformats-officedocument.presentationml.presentation'], ['.ppt', 'application/vnd.ms-powerpoint'], ['.key', 'application/octet-stream'], ['.pages', 'application/octet-stream'], ['.indd', 'application/octet-stream'], ['.idml', 'application/octet-stream'], ['.sketch', 'application/octet-stream'], ['.psd', 'image/vnd.adobe.photoshop'], ['.ai', 'application/postscript'], ['.fig', 'application/octet-stream'], ['.zip', 'application/zip'], ['.tar', 'application/x-tar'], ['.gz', 'application/gzip'], ['.7z', 'application/x-7z-compressed'], ['.rar', 'application/vnd.rar']),
+    // ── Bookmarks (Netscape HTML → reference entities) ────────────────────────
+    // Detected by content (`isNetscapeBookmarkFile`), NOT by extension — a
+    // `.html` file is not necessarily a bookmark export. The dispatcher's
+    // content-sniff + routing lands in P8; until then bookmark exports use the
+    // dedicated `POST /api/repos/:repo/import-bookmarks` endpoint and a bare
+    // `.html` resolves to the fallback (rejected in P0). This entry carries no
+    // extensions so it is reachable only via the content sniff.
+    {
+        extensions: [],
+        mimeTypes: ['text/html'],
+        category: 'bookmarks',
+        retainSource: false,
+        deriveTo: 'reference',
+        derive: 'inline',
+        indexAs: 'body',
+        handler: 'importBookmarks',
+        extractor: null,
+        maxBytes: TEXT_MAX_BYTES,
+    },
+];
+/** Concise builder for the caption-indexed image-asset block. */
+function imageAssets(...specs) {
+    return specs.map(s => ({
+        extensions: s.exts,
+        mimeTypes: [s.mime],
+        category: 'asset',
+        retainSource: true,
+        deriveTo: null,
+        derive: 'none',
+        indexAs: 'caption',
+        handler: 'uploadAsset',
+        extractor: 'image-caption',
+        maxBytes: ASSET_MAX_BYTES,
+        ...(s.sanitize ? { sanitize: s.sanitize } : {}),
+        ...(s.transitional ? { transitional: s.transitional } : {}),
+    }));
+}
+/** Concise builder for the opaque-asset block. */
+function opaqueAssets(...pairs) {
+    return pairs.map(([ext, mime]) => ({
+        extensions: [ext],
+        mimeTypes: [mime],
+        category: 'asset',
+        retainSource: true,
+        deriveTo: null,
+        derive: 'none',
+        indexAs: 'none',
+        handler: 'uploadAsset',
+        extractor: null,
+        maxBytes: ASSET_MAX_BYTES,
+    }));
+}
+/**
+ * The disposition for any file the registry doesn't recognize: a generic
+ * opaque asset, never content-indexed. `resolveFormat` returns this exact
+ * (frozen) reference for unknown types so callers can identity-check it —
+ * the P0 dispatcher rejects on `entry === FALLBACK_ASSET_ENTRY` to preserve
+ * today's reject behavior; P0b removes that guard to accept unknowns
+ * leniently (the only behavior change between the two phases).
+ */
+export const FALLBACK_ASSET_ENTRY = Object.freeze({
+    extensions: [],
+    mimeTypes: ['application/octet-stream'],
+    category: 'asset',
+    retainSource: true,
+    deriveTo: null,
+    derive: 'none',
+    indexAs: 'none',
+    handler: 'uploadAsset',
+    extractor: null,
+    maxBytes: ASSET_MAX_BYTES,
+});
+// ── Lookup maps ─────────────────────────────────────────────────────────────
+const byExtension = new Map();
+const byMime = new Map();
+for (const entry of FORMATS) {
+    for (const ext of entry.extensions)
+        byExtension.set(ext.toLowerCase(), entry);
+    for (const mime of entry.mimeTypes) {
+        // First entry wins on a shared MIME (e.g. text/csv) so lookupByMime is
+        // deterministic; extension lookup is the primary path anyway.
+        if (!byMime.has(mime.toLowerCase()))
+            byMime.set(mime.toLowerCase(), entry);
+    }
+}
+/**
+ * Extract the lowercased, dot-prefixed extension from a filename. Delegates
+ * to Node's `path.extname` (so dotfiles, multi-dot names, and trailing dots
+ * are handled the way the rest of the codebase handles them) and lowercases
+ * to match the registry's lowercased lookup keys.
+ */
+function extensionOf(filename) {
+    return extname(filename).toLowerCase();
+}
+// ── Public API ──────────────────────────────────────────────────────────────
+/** Look up a format by extension (dot-prefixed or bare). */
+export function lookupByExtension(ext) {
+    const norm = ext.startsWith('.') ? ext.toLowerCase() : `.${ext.toLowerCase()}`;
+    return byExtension.get(norm);
+}
+/** Look up a format by MIME type. */
+export function lookupByMime(mime) {
+    return byMime.get(mime.toLowerCase());
+}
+/**
+ * Resolve the disposition for a file. Never returns undefined — unknown
+ * types resolve to `FALLBACK_ASSET_ENTRY` (identity-checkable). Extension is
+ * the primary key; `mime` is a fallback when the filename carries no usable
+ * extension. Bookmark detection is by content (`isNetscapeBookmarkFile`),
+ * NOT handled here.
+ */
+export function resolveFormat(filename, mime) {
+    const byExt = byExtension.get(extensionOf(filename));
+    if (byExt)
+        return byExt;
+    if (mime) {
+        const m = byMime.get(mime.toLowerCase());
+        if (m)
+            return m;
+    }
+    return FALLBACK_ASSET_ENTRY;
+}
+/** A format is searchable when it declares any index extraction. */
+export function isIndexable(entry) {
+    return entry.indexAs !== 'none';
+}
+/**
+ * Extensions whose bytes are stored as a binary asset (category `asset` or
+ * `asset-convertible`), plus `.csv` — which is a direct-dataset on the web
+ * import path but has historically been accepted by `uploadAsset` too (the
+ * agent `import_file` tool stores a dropped `.csv` as an opaque asset). Kept
+ * in the set so `isAssetUploadExtension` preserves that behavior exactly.
+ * Returned WITHOUT the leading dot to match the legacy `base.ts` set.
+ */
+export function assetUploadExtensions() {
+    const out = new Set();
+    for (const entry of FORMATS) {
+        // Transitional formats (docx/svg in P0) target uploadAsset but still
+        // route through the legacy agent path, so they are NOT yet asset-upload
+        // extensions — excluding them keeps `isAssetUploadExtension` byte-for-byte
+        // identical to today's behavior.
+        if (entry.transitional)
+            continue;
+        if (entry.category === 'asset' || entry.category === 'asset-convertible') {
+            for (const ext of entry.extensions)
+                out.add(ext.replace(/^\./, ''));
+        }
+    }
+    out.add('csv');
+    return out;
+}
+/**
+ * Extensions the `import-service` text path participates in — verbatim
+ * direct-write formats, anything with a text/caption extractor, and the
+ * sanitized SVG. Used to derive `import-service`'s `isSupportedFile`.
+ *
+ * This is a (small) superset of the legacy literal — it additionally
+ * includes `.xlsx`, `.avif`, `.heic` — but every one of those extra
+ * extensions is an asset-upload extension, so it is caught by
+ * `isAssetUploadExtension` *before* `isSupportedFile` is ever consulted in
+ * the only live caller (the agent `import_file` tool). The observable
+ * behavior is therefore identical to the legacy set. Dot-prefixed.
+ */
+export function importServiceExtensions() {
+    const out = new Set();
+    for (const entry of FORMATS) {
+        if (entry.handler === 'importDirect' || entry.extractor !== null || entry.sanitize === 'svg') {
+            for (const ext of entry.extensions)
+                out.add(ext.toLowerCase());
+        }
+    }
+    return out;
+}
+/**
+ * Per-ingress capability (P4, Codex drift-guard). Each ingress path has a
+ * different trust model, so "which formats may travel this path" is a property
+ * of the format + the path, expressed here in the registry rather than as a
+ * special-case in the presign/upload code:
+ *
+ *  - `presign`   — MCP pre-signed PUT straight to R2. The app NEVER holds the
+ *    bytes, so it cannot sanitize them. Only formats that are safe as raw bytes
+ *    are eligible: image assets with no `sanitize` requirement and not still on
+ *    the transitional agent path. This is what keeps SVG (sanitize: 'svg') and
+ *    every doc/video/opaque type OFF the presign path without a hardcoded list.
+ *  - `inline`    — MCP base64 bytes through the app (V3) OR web multipart. The
+ *    app holds the bytes, so it CAN sanitize — SVG is allowed here (sanitize
+ *    runs before store). Any asset the upload pipeline accepts is inline-able.
+ *  - `multipart` — alias of `inline` for the web upload route's perspective.
+ *
+ * A format is presign-safe iff: it's an image asset, needs no sanitization, and
+ * isn't transitional. Today that's png/jpeg/gif/webp/avif/heic — exactly the
+ * set the old hardcoded `{png, jpeg}` was a subset of, now derived.
+ */
+export function isPresignSafe(entry) {
+    return entry.category === 'asset'
+        && entry.extractor === 'image-caption' // image, not opaque/doc/video
+        && entry.sanitize === undefined // raw bytes are safe as-is
+        && entry.transitional === undefined; // real handler is wired
+}
+/** A format may travel the inline/multipart path iff the upload pipeline takes
+ *  it (any asset, including ones that need sanitizing — the app holds the bytes
+ *  and sanitizes before store). Excludes still-transitional formats. */
+export function isInlineUploadAllowed(entry) {
+    return (entry.category === 'asset' || entry.category === 'asset-convertible')
+        && entry.transitional === undefined;
+}
+/**
+ * MIME allowlist for the MCP PRESIGN path (Content-Type gate baked into the PUT
+ * signature). Derived from `isPresignSafe` — NOT every asset MIME. The presign
+ * service + the MCP tool's mime enum both read this so they can't drift.
+ */
+export function presignMimeAllowlist() {
+    const out = new Set();
+    for (const entry of FORMATS) {
+        if (isPresignSafe(entry)) {
+            for (const mime of entry.mimeTypes)
+                out.add(mime);
+        }
+    }
+    return [...out];
+}
+/**
+ * MIME allowlist for the INLINE-bytes / multipart path (V3 — the app holds the
+ * bytes and can sanitize). Broader than presign: includes SVG and the
+ * convertible docs. Drives the V3 `upload_asset_inline` MCP tool's gate.
+ */
+export function inlineUploadMimeAllowlist() {
+    const out = new Set();
+    for (const entry of FORMATS) {
+        if (isInlineUploadAllowed(entry)) {
+            for (const mime of entry.mimeTypes)
+                out.add(mime);
+        }
+    }
+    return [...out];
+}
+/**
+ * The HTML `accept` attribute value covering every ingestible format
+ * (extensions + MIME types). The single source the client's fragmented
+ * accept lists collapse onto (P5).
+ */
+export function acceptAttribute() {
+    const tokens = new Set();
+    for (const entry of FORMATS) {
+        for (const ext of entry.extensions)
+            tokens.add(ext);
+        for (const mime of entry.mimeTypes)
+            tokens.add(mime);
+    }
+    return [...tokens].join(',');
+}
+/**
+ * JSON-safe projection of the registry for `GET /api/formats`. The client
+ * builds its accept lists, disposition matrix, and supported-types copy from
+ * this — `supported-file-types.ts` becomes a derived view (P5).
+ */
+export function serializeForClient() {
+    return {
+        formats: FORMATS.map(e => ({ ...e, extensions: [...e.extensions], mimeTypes: [...e.mimeTypes] })),
+        accept: acceptAttribute(),
+    };
+}
+/** All registered entries (read-only view). */
+export function allFormats() {
+    return FORMATS;
+}
+//# sourceMappingURL=format-registry.js.map

package/dist/core/format-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-registry.js","sourceRoot":"","sources":["../../src/core/format-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AA4D/B,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACvB,0EAA0E;AAC1E,MAAM,eAAe,GAAG,GAAG,GAAG,EAAE,CAAC;AACjC,mEAAmE;AACnE,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,CAAC;AAE/B;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,GAAkB;IAC7B,4EAA4E;IAC5E;QACE,UAAU,EAAE,CAAC,KAAK,CAAC;QACnB,SAAS,EAAE,CAAC,eAAe,CAAC;QAC5B,QAAQ,EAAE,aAAa;QACvB,YAAY,EAAE,KAAK;QACnB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,cAAc;QACvB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,cAAc;KACzB;IACD;QACE,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,YAAY,CAAC;QACzB,QAAQ,EAAE,aAAa;QACvB,YAAY,EAAE,KAAK;QACnB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,cAAc;QACvB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,cAAc;KACzB;IACD;QACE,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,UAAU,CAAC;QACvB,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,KAAK;QACnB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,cAAc;QACvB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,cAAc;KACzB;IAED,6EAA6E;IAC7E;QACE,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,iBAAiB,CAAC;QAC9B,QAAQ,EAAE,mBAAmB;QAC7B,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,eAAe;KAC1B;IACD;QACE,UAAU,EAAE,CAAC,OAAO,CAAC;QACrB,SAAS,EAAE,CAAC,yEAAyE,CAAC;QACtF,QAAQ,EAAE,mBAAmB;QAC7B,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,eAAe;QACzB,wEAAwE;QACxE,oEAAoE;QACpE,0EAA0E;KAC3E;IACD;QACE,UAAU,EAAE,CAAC,OAAO,CAAC;QACrB,SAAS,EAAE,CAAC,mEAAmE,CAAC;QAChF,QAAQ,EAAE,mBAAmB;QAC7B,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,eAAe;KAC1B;IAED,6EAA6E;IAC7E,GAAG,WAAW;IACZ,uEAAuE;IACvE,oEAAoE;IACpE,+DAA+D;IAC/D,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAC/C,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EACrC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EACrC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EACvC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EACvC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE;IACvC,oEAAoE;IACpE,uEAAuE;IACvE,oEAAoE;IACpE,sEAAsE;IACtE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,CAC1F;IAED,6EAA6E;IAC7E,uEAAuE;IACvE,sEAAsE;IACtE,GAAG,YAAY,CACb,CAAC,MAAM,EAAE,WAAW,CAAC,EACrB,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAC3B,CAAC,OAAO,EAAE,YAAY,CAAC,EACvB,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAC3B,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC5B,CAAC,MAAM,EAAE,aAAa,CAAC,EACvB,CAAC,MAAM,EAAE,YAAY,CAAC,EACtB,CAAC,MAAM,EAAE,WAAW,CAAC,EACrB,CAAC,MAAM,EAAE,WAAW,CAAC,EACrB,CAAC,MAAM,EAAE,WAAW,CAAC,EACrB,CAAC,OAAO,EAAE,YAAY,CAAC,EACvB,CAAC,MAAM,EAAE,WAAW,CAAC,EACrB,CAAC,MAAM,EAAE,0BAA0B,CAAC,EACpC,CAAC,UAAU,EAAE,0BAA0B,CAAC,EACxC,CAAC,MAAM,EAAE,2BAA2B,CAAC,EACrC,CAAC,MAAM,EAAE,oBAAoB,CAAC,EAC9B,CAAC,OAAO,EAAE,2EAA2E,CAAC,EACtF,CAAC,MAAM,EAAE,+BAA+B,CAAC,EACzC,CAAC,MAAM,EAAE,0BAA0B,CAAC,EACpC,CAAC,QAAQ,EAAE,0BAA0B,CAAC,EACtC,CAAC,OAAO,EAAE,0BAA0B,CAAC,EACrC,CAAC,OAAO,EAAE,0BAA0B,CAAC,EACrC,CAAC,SAAS,EAAE,0BAA0B,CAAC,EACvC,CAAC,MAAM,EAAE,2BAA2B,CAAC,EACrC,CAAC,KAAK,EAAE,wBAAwB,CAAC,EACjC,CAAC,MAAM,EAAE,0BAA0B,CAAC,EACpC,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAC3B,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAC7B,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAC3B,CAAC,KAAK,EAAE,6BAA6B,CAAC,EACtC,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAChC;IAED,6EAA6E;IAC7E,uEAAuE;IACvE,sEAAsE;IACtE,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,4DAA4D;IAC5D;QACE,UAAU,EAAE,EAAE;QACd,SAAS,EAAE,CAAC,WAAW,CAAC;QACxB,QAAQ,EAAE,WAAW;QACrB,YAAY,EAAE,KAAK;QACnB,QAAQ,EAAE,WAAW;QACrB,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,iBAAiB;QAC1B,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,cAAc;KACzB;CACF,CAAC;AAEF,iEAAiE;AACjE,SAAS,WAAW,CAClB,GAAG,KAAgG;IAEnG,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrB,UAAU,EAAE,CAAC,CAAC,IAAI;QAClB,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACnB,QAAQ,EAAE,OAAyB;QACnC,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,MAAsB;QAC9B,OAAO,EAAE,SAA0B;QACnC,OAAO,EAAE,aAA8B;QACvC,SAAS,EAAE,eAAkC;QAC7C,QAAQ,EAAE,eAAe;QACzB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC,CAAC;AACN,CAAC;AAED,kDAAkD;AAClD,SAAS,YAAY,CAAC,GAAG,KAA8B;IACrD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,UAAU,EAAE,CAAC,GAAG,CAAC;QACjB,SAAS,EAAE,CAAC,IAAI,CAAC;QACjB,QAAQ,EAAE,OAAyB;QACnC,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,MAAsB;QAC9B,OAAO,EAAE,MAAuB;QAChC,OAAO,EAAE,aAA8B;QACvC,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,eAAe;KAC1B,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAgB,MAAM,CAAC,MAAM,CAAC;IAC7D,UAAU,EAAE,EAAE;IACd,SAAS,EAAE,CAAC,0BAA0B,CAAC;IACvC,QAAQ,EAAE,OAAO;IACjB,YAAY,EAAE,IAAI;IAClB,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,MAAM;IACf,OAAO,EAAE,aAAa;IACtB,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,eAAe;CAC1B,CAAC,CAAC;AAEH,+EAA+E;AAC/E,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;AACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;AAC9C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU;QAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;IAC9E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACnC,uEAAuE;QACvE,8DAA8D;QAC9D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;AACzC,CAAC;AAED,+EAA+E;AAE/E,4DAA4D;AAC5D,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;IAC/E,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,IAAa;IAC3D,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAC,KAAkB;IAC5C,OAAO,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC;AAClC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,qEAAqE;QACrE,wEAAwE;QACxE,2EAA2E;QAC3E,iCAAiC;QACjC,IAAI,KAAK,CAAC,YAAY;YAAE,SAAS;QACjC,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YACzE,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACf,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC7F,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,aAAa,CAAC,KAAkB;IAC9C,OAAO,KAAK,CAAC,QAAQ,KAAK,OAAO;WAC5B,KAAK,CAAC,SAAS,KAAK,eAAe,CAAG,8BAA8B;WACpE,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAU,2BAA2B;WACjE,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAK,wBAAwB;AACrE,CAAC;AAED;;wEAEwE;AACxE,MAAM,UAAU,qBAAqB,CAAC,KAAkB;IACtD,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,mBAAmB,CAAC;WACxE,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjG,MAAM,EAAE,eAAe,EAAE;KAC1B,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,UAAU;IACxB,OAAO,OAAO,CAAC;AACjB,CAAC"}