@aalis/plugin-webui-server 0.14.1 → 0.16.0

package/dist/routes/files.js

@@ -1,130 +1,44 @@
 // ============================================================
-// routes/files.ts — WebUI 文件管理 REST 路由（storage URI 版）
+// routes/files.ts — 按句柄下载文件
 //
-// storage 必填，所有操作走 StorageService，没有 node:fs 兜底分支。
-// 前端仅需传递相对于 fileRoot 的路径字符串（如 "data/images/xxx.png"）。
+// GET /api/session-file?sessionId=<会话>&handle=<句柄>：会话条目里的文件。句柄由会话服务签发、绑定会话与文件，先请它核验。
+// GET /api/page-file?handle=<句柄>：页面单元格里的文件。句柄由本插件签发（page-files.ts）。
+// 核验出的存储地址读出后一律当附件以 octet-stream 下发，不在 WebUI 源里内联。只有 owner（cookie 闸）能取。
+// 不接受存储地址：按地址任意读取会把 data 根（家目录的 state/，里面有 token 与审计）整个暴露出去。
+// 句柄核验不过（含签发方不在、重启过）回 403，文件已不在回 404，其余读不出的回 500 并记告警。
 // ============================================================
-import { basename } from 'node:path';
-/** 注册文件管理相关 REST 路由 */
-export function registerFileRoutes(expressApp, opts, gate) {
-    const { storage, fileRoot } = opts;
-    function storageUri(relPath) {
-        const cleanPath = relPath.replace(/^\/+/, '');
-        return `${fileRoot}:/${cleanPath}`;
-    }
-    function pathFromStorageUri(uri) {
-        const idx = uri.indexOf(':/');
-        return idx >= 0 ? uri.slice(idx + 2) : uri;
-    }
-    function storageRootBrowsable() {
-        const root = storage.listRoots().find(r => r.name === fileRoot);
-        return Boolean(root?.browsable);
-    }
-    function sendStorageError(res, err) {
-        const message = err instanceof Error ? err.message : String(err);
-        const status = message.includes('路径不合法') || message.includes('不允许')
-            ? 403
-            : message.includes('不存在') || message.includes('ENOENT')
-                ? 404
-                : message.includes('不是目录') || message.includes('不能') || message.includes('不合法')
-                    ? 400
-                    : 500;
-        res.status(status).json({ error: message });
-    }
-    function guardBrowsable(res) {
-        if (!storageRootBrowsable()) {
-            res.status(403).json({ error: '文件根不可浏览' });
-            return false;
-        }
-        return true;
-    }
-    // 列出目录内容
-    expressApp.get('/api/files', gate(), async (req, res) => {
-        const dir = String(req.query.path || '');
-        if (!guardBrowsable(res))
-            return;
-        try {
-            const result = await storage.list(storageUri(dir));
-            res.json({ path: result.path, entries: result.entries });
-        }
-        catch (err) {
-            sendStorageError(res, err);
-        }
-    });
-    // 获取文件/目录详情
-    expressApp.get('/api/files/info', gate(), async (req, res) => {
-        const filePath = String(req.query.path || '');
-        if (!guardBrowsable(res))
-            return;
-        try {
-            const info = await storage.stat(storageUri(filePath));
-            res.json(info);
-        }
-        catch (err) {
-            sendStorageError(res, err);
-        }
-    });
-    // 下载文件
-    expressApp.get('/api/files/download', gate(), async (req, res) => {
-        const filePath = String(req.query.path || '');
-        if (!guardBrowsable(res))
+import { isStorageNotFound } from '@aalis/api-storage';
+import { route } from '../route.js';
+import { t } from '../texts.js';
+import { pipeToResponse } from './pipe-to-response.js';
+export function registerFileRoutes(expressApp, storage, issuers, logger, gate) {
+    /** what 是日志里的叫法：会话文件或页面文件 */
+    async function sendAttachment(res, file, what) {
+        if (!file) {
+            res.status(403).json({ error: t('invalidHandle') });
             return;
-        try {
-            const result = await storage.createReadStream(storageUri(filePath));
-            const fileName = basename(result.stat.name);
-            res.setHeader('Content-Disposition', `attachment; filename*=UTF-8''${encodeURIComponent(fileName)}`);
-            res.setHeader('Content-Length', result.stat.size);
-            // 客户端中断（取消下载/关标签页/断网）时 res 触发 'close'，而 Node 的 pipe 只 unpipe、
-            // 不 destroy 源流——fs.ReadStream 会停在 paused 态永不 end，fd 不回收。正常结束时
-            // destroy 打在已 autoClose 的流上是 no-op，happy path 行为不变。
-            res.on('close', () => result.stream.destroy());
-            result.stream.pipe(res);
-        }
-        catch (err) {
-            sendStorageError(res, err);
-        }
-    });
-    // 重命名
-    expressApp.post('/api/files/rename', gate(), async (req, res) => {
-        const { path: filePath, newName } = req.body ?? {};
-        if (!filePath || !newName) {
-            res.status(400).json({ error: '缺少参数' });
-            return;
-        }
-        if (typeof newName !== 'string' ||
-            newName.includes('/') ||
-            newName.includes('\\') ||
-            newName === '.' ||
-            newName === '..') {
-            res.status(400).json({ error: '文件名不合法' });
-            return;
-        }
-        if (!guardBrowsable(res))
-            return;
-        try {
-            const newUri = await storage.rename(storageUri(String(filePath)), String(newName));
-            res.json({ ok: true, newPath: pathFromStorageUri(newUri) });
-        }
-        catch (err) {
-            sendStorageError(res, err);
         }
-    });
-    // 删除
-    expressApp.post('/api/files/delete', gate(), async (req, res) => {
-        const { path: filePath } = req.body ?? {};
-        if (!filePath) {
-            res.status(400).json({ error: '缺少参数' });
-            return;
-        }
-        if (!guardBrowsable(res))
-            return;
         try {
-            await storage.delete(storageUri(String(filePath)));
-            res.json({ ok: true });
+            const { stream, stat } = await storage.createReadStream(file.uri);
+            // attachment 按扩展名设了类型，随后一律盖成 octet-stream
+            res.attachment(file.name);
+            res.setHeader('Content-Type', 'application/octet-stream');
+            res.setHeader('Content-Length', stat.size);
+            res.setHeader('X-Content-Type-Options', 'nosniff');
+            pipeToResponse(stream, res, logger, `${what} ${file.uri}`);
         }
         catch (err) {
-            sendStorageError(res, err);
+            if (isStorageNotFound(err)) {
+                res.status(404).json({ error: t('fileGone') });
+                return;
+            }
+            logger.warn(`读取${what} ${file.uri} 失败:`, err);
+            res.status(500).json({ error: t('readFailed') });
         }
-    });
+    }
+    route(expressApp, 'GET /api/session-file', gate(), (req, res) => sendAttachment(res, issuers.sessions.present
+        ? issuers.sessions.use.resolveFile(String(req.query.sessionId ?? ''), String(req.query.handle ?? ''))
+        : undefined, '会话文件'));
+    route(expressApp, 'GET /api/page-file', gate(), (req, res) => sendAttachment(res, issuers.pages.resolve(String(req.query.handle ?? '')), '页面文件'));
 }
 //# sourceMappingURL=files.js.map

package/dist/routes/files.js.map

@@ -1 +1 @@
-{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/routes/files.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,sDAAsD;AACtD,EAAE;AACF,mDAAmD;AACnD,sDAAsD;AACtD,+DAA+D;AAE/D,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAYrC,uBAAuB;AACvB,MAAM,UAAU,kBAAkB,CAAC,UAA2B,EAAE,IAAuB,EAAE,IAAe;IACtG,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAEnC,SAAS,UAAU,CAAC,OAAe;QACjC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9C,OAAO,GAAG,QAAQ,KAAK,SAAS,EAAE,CAAC;IACrC,CAAC;IAED,SAAS,kBAAkB,CAAC,GAAW;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7C,CAAC;IAED,SAAS,oBAAoB;QAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAChE,OAAO,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAClC,CAAC;IAED,SAAS,gBAAgB,CAAC,GAAqB,EAAE,GAAY;QAC3D,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,MAAM,GACV,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;YAClD,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACrD,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAC7E,CAAC,CAAC,GAAG;oBACL,CAAC,CAAC,GAAG,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,SAAS,cAAc,CAAC,GAAqB;QAC3C,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS;IACT,UAAU,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACnD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,YAAY;IACZ,UAAU,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;IACP,UAAU,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,gCAAgC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACrG,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,8DAA8D;YAC9D,8DAA8D;YAC9D,oDAAoD;YACpD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM;IACN,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9D,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QACD,IACE,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtB,OAAO,KAAK,GAAG;YACf,OAAO,KAAK,IAAI,EAChB,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACnF,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,KAAK;IACL,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9D,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACnD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/routes/files.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,4BAA4B;AAC5B,EAAE;AACF,qFAAqF;AACrF,oEAAoE;AACpE,wEAAwE;AACxE,6DAA6D;AAC7D,uDAAuD;AACvD,+DAA+D;AAG/D,OAAO,EAAE,iBAAiB,EAAuB,MAAM,oBAAoB,CAAC;AAM5E,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,aAAa,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,UAAU,kBAAkB,CAChC,UAA2B,EAC3B,OAAuB,EACvB,OAA0G,EAC1G,MAAc,EACd,IAAe;IAEf,6BAA6B;IAC7B,KAAK,UAAU,cAAc,CAC3B,GAAoC,EACpC,IAA+C,EAC/C,IAAY;QAEZ,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClE,0CAA0C;YAC1C,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;YAC1D,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;YACnD,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC;YAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,EAAE,uBAAuB,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAC9D,cAAc,CACZ,GAAG,EACH,OAAO,CAAC,QAAQ,CAAC,OAAO;QACtB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACrG,CAAC,CAAC,SAAS,EACb,MAAM,CACP,CACF,CAAC;IACF,KAAK,CAAC,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAC3D,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CACnF,CAAC;AACJ,CAAC"}

package/dist/routes/frames.d.ts

@@ -0,0 +1,4 @@
+import express from 'express';
+/** dirOf 按 token 取插件前端的 webui/ 目录（realpath），没有这个 token 时回 undefined */
+export declare function registerFrameRoutes(expressApp: express.Express, dirOf: (token: string) => string | undefined): void;
+//# sourceMappingURL=frames.d.ts.map

package/dist/routes/frames.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frames.d.ts","sourceRoot":"","sources":["../../src/routes/frames.ts"],"names":[],"mappings":"AAeA,OAAO,OAAO,MAAM,SAAS,CAAC;AAoD9B,uEAAuE;AACvE,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,IAAI,CAyCnH"}

package/dist/routes/frames.js

@@ -0,0 +1,103 @@
+// ============================================================
+// routes/frames.ts — 插件前端的文件托管
+//
+// GET /frames/:token/<路径> 给出插件前端 webui/ 里的文件，token 是页面登记时随机生成的（pages.ts），页面撤回或重新
+// 登记后旧的回 404；GET /frames/_base/<路径> 给出 api-webui 随包带的公用文件（助手、样式基线与助手导入的
+// schema-i18n）。注册在认证之前，不看 cookie：token 只出现在要登录的 GET /api/pages 里，文件是随包发布的代码，不含数据。
+// 托管用 express.static，前面另加扩展名白名单与 realpath 两道；不合的一律 404，不回目录、不发 3xx：重定向之后 CSP 只按
+// 来源匹配、不看路径，「只放行这一页的目录」就失效了。只收 GET 与 HEAD。
+// 响应头带框架 CSP，盖过全局的文档级 CSP。CSP 的来源取请求的 Host，写成带路径、不带协议的来源，http 访问与经 TLS 代理的
+// https 访问都成立；Host 只收主机名或 IPv4 地址加可选端口，去掉默认端口。
+// ============================================================
+import { createRequire } from 'node:module';
+import { dirname, extname, join } from 'node:path';
+import { FRAME_SANDBOX } from '@aalis/api-webui';
+import express from 'express';
+import { realWithin } from '../pages.js';
+/** 公用文件的地址段 */
+const BASE = '_base';
+/** api-webui 随包带的公用文件所在的目录 */
+const BASE_DIR = join(dirname(createRequire(import.meta.url).resolve('@aalis/api-webui/package.json')), 'dist', 'frame');
+/** 托管的扩展名：网页、脚本、样式、图片与字体 */
+const EXTENSIONS = new Set([
+    '.html',
+    '.js',
+    '.mjs',
+    '.css',
+    '.svg',
+    '.png',
+    '.jpg',
+    '.jpeg',
+    '.gif',
+    '.webp',
+    '.woff2',
+]);
+/** 主机名或 IPv4 地址，加可选端口。IPv6 字面地址写不进 CSP 的来源，带分号、空白、斜杠的会改写 CSP，都不收 */
+const HOST = /^[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)*(?::\d{1,5})?$/;
+/**
+ * 框架 CSP：除脚本外按类型放开、不按来源限，样式、字体、图片、音视频与数据请求都能取外站的。只留两道：脚本只认这一页的
+ * 目录与公用目录（不许内联与 eval，worker 经回退链同样只认它们），框架里不能再嵌别的网页（frame 与 object 都不给）。
+ * 宿主接口靠不同源挡：框架是不透明来源，请求不带登录状态，改状态的请求与 WebSocket 握手按来源被拒
+ */
+function frameCsp(host, token) {
+    return [
+        `sandbox ${FRAME_SANDBOX}`,
+        `script-src ${host}/frames/${token}/ ${host}/frames/${BASE}/`,
+        "frame-src 'none'",
+        "object-src 'none'",
+        `frame-ancestors ${host}`,
+    ].join('; ');
+}
+/** 请求里的路径按 %xx 解开，与 express.static 的解法相同；解不开的回 undefined */
+function decoded(path) {
+    try {
+        return decodeURIComponent(path);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** dirOf 按 token 取插件前端的 webui/ 目录（realpath），没有这个 token 时回 undefined */
+export function registerFrameRoutes(expressApp, dirOf) {
+    expressApp.use('/frames/:token', (req, res) => {
+        if (req.method !== 'GET' && req.method !== 'HEAD') {
+            res.setHeader('Allow', 'GET, HEAD');
+            res.status(405).end();
+            return;
+        }
+        const given = req.headers.host ?? '';
+        if (!HOST.test(given)) {
+            res.status(400).end();
+            return;
+        }
+        // 代理转来的 Host 可能写成 x:443，经 TLS 终结的代理还可能写成 x:80，原样写进 CSP 会与页面的端口对不上
+        const host = given.replace(/:(?:80|443)$/, '');
+        const { token } = req.params;
+        const dir = token === BASE ? BASE_DIR : dirOf(token);
+        const path = decoded(req.path);
+        if (!dir || !path || !EXTENSIONS.has(extname(path).toLowerCase()) || !realWithin(dir, path)) {
+            res.status(404).end();
+            return;
+        }
+        express.static(dir, {
+            dotfiles: 'ignore',
+            index: false,
+            redirect: false,
+            setHeaders: served => {
+                served.setHeader('Content-Security-Policy', frameCsp(host, token));
+                served.setHeader('X-Content-Type-Options', 'nosniff');
+                // 框架能取外站的资源：不把框架地址带给外站
+                served.setHeader('Referrer-Policy', 'no-referrer');
+                // 框架文档是不透明来源，模块脚本连取自己目录下的文件也走 CORS
+                served.setHeader('Access-Control-Allow-Origin', '*');
+                served.setHeader('Cache-Control', 'no-cache');
+            },
+        })(req, res, () => res.status(404).end());
+    });
+    // token 段的 %xx 解不开时，路由在解参数这一步就抛错、走不到上面；默认的错误处理会回堆栈，这里一律回 404。
+    // 紧跟在挂载之后，前面只有渲染中间件（只包 res.json，不抛错）与加 CSP 的中间件，接到的错误只会来自这里
+    expressApp.use((_err, _req, res, _next) => {
+        res.status(404).end();
+    });
+}
+//# sourceMappingURL=frames.js.map

package/dist/routes/frames.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frames.js","sourceRoot":"","sources":["../../src/routes/frames.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,+BAA+B;AAC/B,EAAE;AACF,iFAAiF;AACjF,wEAAwE;AACxE,kFAAkF;AAClF,gFAAgF;AAChF,2CAA2C;AAC3C,2EAA2E;AAC3E,+CAA+C;AAC/C,+DAA+D;AAE/D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,eAAe;AACf,MAAM,IAAI,GAAG,OAAO,CAAC;AACrB,8BAA8B;AAC9B,MAAM,QAAQ,GAAG,IAAI,CACnB,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,EAChF,MAAM,EACN,OAAO,CACR,CAAC;AACF,4BAA4B;AAC5B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AACH,oEAAoE;AACpE,MAAM,IAAI,GAAG,kDAAkD,CAAC;AAEhE;;;;GAIG;AACH,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,OAAO;QACL,WAAW,aAAa,EAAE;QAC1B,cAAc,IAAI,WAAW,KAAK,KAAK,IAAI,WAAW,IAAI,GAAG;QAC7D,kBAAkB;QAClB,mBAAmB;QACnB,mBAAmB,IAAI,EAAE;KAC1B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,4DAA4D;AAC5D,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,mBAAmB,CAAC,UAA2B,EAAE,KAA4C;IAC3G,UAAU,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAClD,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QACD,kEAAkE;QAClE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;YAC5F,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE;YAClB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,MAAM,CAAC,EAAE;gBACnB,MAAM,CAAC,SAAS,CAAC,yBAAyB,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;gBACnE,MAAM,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;gBACtD,uBAAuB;gBACvB,MAAM,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;gBACnD,mCAAmC;gBACnC,MAAM,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;gBACrD,MAAM,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YAChD,CAAC;SACF,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,8DAA8D;IAC9D,4DAA4D;IAC5D,UAAU,CAAC,GAAG,CAAC,CAAC,IAAa,EAAE,IAAqB,EAAE,GAAqB,EAAE,KAA2B,EAAE,EAAE;QAC1G,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/i18n.d.ts

@@ -0,0 +1,20 @@
+import type { Contributions } from '@aalis/api-contributions';
+import type { I18nService } from '@aalis/api-i18n';
+import type { FrameTexts, PageLanguage } from '@aalis/api-webui';
+import type { ServiceSelection } from '@aalis/core';
+import type express from 'express';
+import type { RouteGate } from '../gate.js';
+import type { Localizer } from '../localize.js';
+/** 界面的语言：全局层的语言链与服务进程的时区。GET /api/i18n/languages 回它，SPA 兜底也写进前端入口的页面 */
+export declare const interfaceLanguage: (localizer: Pick<Localizer, "languages">) => PageLanguage;
+interface I18nDeps {
+    i18n: Pick<ServiceSelection<I18nService>, 'present' | 'use'>;
+    /** 语言包的来源 */
+    contributions: Pick<ServiceSelection<Contributions>, 'present' | 'use'>;
+    localizer: Pick<Localizer, 'languages'>;
+}
+/** 插件前端的字典：服务进程目录里这个 ns（插件名）的条目，与语言包给它补的译文 */
+export declare const frameTexts: (deps: I18nDeps, ns: string) => FrameTexts;
+export declare function registerI18nRoutes(expressApp: express.Express, deps: I18nDeps, gate: RouteGate): void;
+export {};
+//# sourceMappingURL=i18n.d.ts.map

package/dist/routes/i18n.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../../src/routes/i18n.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAc,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAuBhD,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,GAAI,WAAW,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,KAAG,YAG1E,CAAC;AAEH,UAAU,QAAQ;IAChB,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC,CAAC;IAC7D,aAAa;IACb,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC,CAAC;IACxE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;CACzC;AAuBD,8CAA8C;AAC9C,eAAO,MAAM,UAAU,GAAI,MAAM,QAAQ,EAAE,IAAI,MAAM,KAAG,UAGtD,CAAC;AAEH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAYrG"}

package/dist/routes/i18n.js

@@ -0,0 +1,78 @@
+// ============================================================
+// routes/i18n.ts — 多语言的两条路由
+//
+// GET /api/i18n/languages 给有文字可用的语言（供可选项与第三方客户端用；第一方前端只读后两样）、全局层的语言链与服务
+// 进程的时区（前端的文字、格式与时间按它们，不读浏览器的语言与时区；后两样另写进前端入口的页面，见 interfaceLanguage）；
+// GET /api/i18n/messages 给前端自带的字典
+// （外壳、契约包）补语言包的译文：取贡献点 i18n:pack 建索引，按 ns 与全局层的语言链筛，取舍（只补缺、指纹）
+// 由前端的 resolveText 做。i18n 缺席时前端按原文显示，语言、语言链与补充都是空的，时区照给。插件前端的字典连同补充经
+// frameTexts 交出（routes/pages.ts）。
+// ============================================================
+import { catalogEntries, indexPacks } from '@aalis/schema-i18n';
+import { route } from '../route.js';
+/** 语言标签的语言部分（zh-Hant-TW → zh）。收的都已规范化（语言链、语言包的语言），不会抛 */
+const baseLanguage = (tag) => new Intl.Locale(tag).language;
+const pad = (n) => String(n).padStart(2, '0');
+/**
+ * 服务进程的时区。环境变量 TZ 写成 POSIX 串（CST-8）或文件路径（:/etc/localtime）时 Node 取不到时区名（undefined，也见过
+ * Etc/Unknown），进程的本地时间照样带着那个偏移：按现在的偏移写成 IANA 的 Etc/GMT±N（这一组的符号与偏移相反，东八区是
+ * Etc/GMT-8），不是整点时写 ±HH:MM，偏移为 0 是 UTC。这样写不含夏令时的切换，只与进程现在的偏移一致
+ */
+function processTimeZone() {
+    const name = Intl.DateTimeFormat().resolvedOptions().timeZone;
+    if (name !== undefined && name !== 'Etc/Unknown')
+        return name;
+    const east = -new Date().getTimezoneOffset();
+    if (east === 0)
+        return 'UTC';
+    const minutes = Math.abs(east);
+    if (minutes % 60 === 0)
+        return `Etc/GMT${east > 0 ? '-' : '+'}${minutes / 60}`;
+    return `${east > 0 ? '+' : '-'}${pad(Math.floor(minutes / 60))}:${pad(minutes % 60)}`;
+}
+/** 界面的语言：全局层的语言链与服务进程的时区。GET /api/i18n/languages 回它，SPA 兜底也写进前端入口的页面 */
+export const interfaceLanguage = (localizer) => ({
+    chain: [...localizer.languages()],
+    timeZone: processTimeZone(),
+});
+/**
+ * 语言包给这些 ns 补的译文：ns → 键 → 各语言包给的。只留全局层语言链里某种的语言相同的（zh-TW 读者遇到只有简体时用
+ * 简体），另留 en（链里都没有时按 en）。i18n 缺席时为空
+ */
+function packedTexts(deps, names) {
+    if (!deps.i18n.present)
+        return {};
+    const wanted = new Set([...deps.localizer.languages(), 'en'].map(baseLanguage));
+    const packs = deps.contributions.present ? deps.contributions.use.collect('i18n:pack').map(({ spec }) => spec) : [];
+    const index = indexPacks(packs);
+    const entries = {};
+    for (const name of new Set(names)) {
+        const keys = {};
+        for (const [key, candidates] of index.get(name) ?? []) {
+            const kept = candidates.filter(({ language }) => wanted.has(baseLanguage(language)));
+            if (kept.length > 0)
+                keys[key] = kept;
+        }
+        if (Object.keys(keys).length > 0)
+            entries[name] = keys;
+    }
+    return entries;
+}
+/** 插件前端的字典：服务进程目录里这个 ns（插件名）的条目，与语言包给它补的译文 */
+export const frameTexts = (deps, ns) => ({
+    texts: catalogEntries().find(entry => entry.ns === ns) ?? null,
+    packs: packedTexts(deps, [ns])[ns] ?? {},
+});
+export function registerI18nRoutes(expressApp, deps, gate) {
+    route(expressApp, 'GET /api/i18n/languages', gate(), (_req, res) => {
+        res.json({
+            languages: deps.i18n.present ? [...deps.i18n.use.languages()] : [],
+            ...interfaceLanguage(deps.localizer),
+        });
+    });
+    route(expressApp, 'GET /api/i18n/messages', gate(), (req, res) => {
+        const { ns } = req.query;
+        res.json({ entries: typeof ns === 'string' ? packedTexts(deps, ns.split(',')) : {} });
+    });
+}
+//# sourceMappingURL=i18n.js.map

package/dist/routes/i18n.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.js","sourceRoot":"","sources":["../../src/routes/i18n.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,4BAA4B;AAC5B,EAAE;AACF,wEAAwE;AACxE,uEAAuE;AACvE,kCAAkC;AAClC,+DAA+D;AAC/D,qEAAqE;AACrE,kCAAkC;AAClC,+DAA+D;AAM/D,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIhE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,yDAAyD;AACzD,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;AAEpE,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAEtD;;;;GAIG;AACH,SAAS,eAAe;IACtB,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC;IAC9D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,iBAAiB,EAAE,CAAC;IAC7C,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,OAAO,GAAG,EAAE,KAAK,CAAC;QAAE,OAAO,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,OAAO,GAAG,EAAE,EAAE,CAAC;IAC/E,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC;AACxF,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,SAAuC,EAAgB,EAAE,CAAC,CAAC;IAC3F,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;IACjC,QAAQ,EAAE,eAAe,EAAE;CAC5B,CAAC,CAAC;AASH;;;GAGG;AACH,SAAS,WAAW,CAAC,IAAc,EAAE,KAAuB;IAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpH,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,OAAO,GAAiD,EAAE,CAAC;IACjE,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAiC,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACrF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QACxC,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAc,EAAE,EAAU,EAAc,EAAE,CAAC,CAAC;IACrE,KAAK,EAAE,cAAc,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI;IAC9D,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;CACzC,CAAC,CAAC;AAEH,MAAM,UAAU,kBAAkB,CAAC,UAA2B,EAAE,IAAc,EAAE,IAAe;IAC7F,KAAK,CAAC,UAAU,EAAE,yBAAyB,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACjE,GAAG,CAAC,IAAI,CAAC;YACP,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;YAClE,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;SACrC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/D,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC"}