@agent-native/core 0.117.1 → 0.117.2

package/dist/extensions/local.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/extensions/local.ts"],"names":[],"mappings":"AAIA,OAAO,EAIL,KAAK,8BAA8B,EACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,GAAG,EAAE,OAAO,CAAC;IACb,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,yBAAyB,CAAC;IACvC,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AA+VD,wBAAsB,mBAAmB,CACvC,OAAO,GAAE,8BAAmC,GAC3C,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA+C9B;AAED,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,8BAAmC,GAC3C,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAGnC;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,YAAY,GAAG,iBAAiB,GAAG,IAAI,GAAG,SAAS,GACvD,GAAG,IAAI,iBAAiB,CAI1B;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,iBAAiB;IAE9D,IAAI;IACJ,KAAK;IACL,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,SAAS;IACT,KAAK;IACL,WAAW;EAEd"}
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/extensions/local.ts"],"names":[],"mappings":"AAIA,OAAO,EAIL,KAAK,8BAA8B,EACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,GAAG,EAAE,OAAO,CAAC;IACb,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,yBAAyB,CAAC;IACvC,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAgWD,wBAAsB,mBAAmB,CACvC,OAAO,GAAE,8BAAmC,GAC3C,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA+C9B;AAED,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,8BAAmC,GAC3C,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAGnC;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,YAAY,GAAG,iBAAiB,GAAG,IAAI,GAAG,SAAS,GACvD,GAAG,IAAI,iBAAiB,CAI1B;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,iBAAiB;IAE9D,IAAI;IACJ,KAAK;IACL,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,SAAS;IACT,KAAK;IACL,WAAW;EAEd"}

package/dist/extensions/local.js

@@ -224,6 +224,7 @@ async function readLocalExtensionFolder(options) {
         icon: typeof manifest.icon === "string" ? manifest.icon : null,
         createdAt,
         updatedAt,
+        archivedAt: null,
         hiddenAt: null,
         hiddenBy: null,
         ownerEmail: "local-files",

package/dist/extensions/local.js.map

@@ -1 +1 @@
-{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/extensions/local.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAG3B,MAAM,6BAA6B,CAAC;AAqCrC,MAAM,qBAAqB,GAAG,6BAA6B,CAAC;AAE5D,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QACtD,CAAC,CAAC,KAAK,CAAC,IAAI;QACZ,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB,EAAE,KAAK,GAAG,MAAM;IAC7D,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,UAAU,GAAG,cAAc,CAC/B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAC/C,CAAC;IACF,IACE,CAAC,UAAU;QACX,UAAU,KAAK,GAAG;QAClB,UAAU,KAAK,IAAI;QACnB,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAC5E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,YAAoB,EAAE,KAAa;IAC1E,MAAM,QAAQ,GAAG,qBAAqB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACvD,IACE,QAAQ,KAAK,EAAE;QACf,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EACzB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,YAAY,4BAA4B,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,MAAM,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB,EAAE,YAAoB;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,MAAM,YAAY,GAAG;QACnB,OAAO;QACP,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;YAC1B,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;KACH,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,SAAS,SAAS,+BAA+B,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAgB,EAAE,QAAgB;IACpE,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC;YACxC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;SAC3B,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,YAAoB;IAC/D,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,yBAAyB,YAAY,eAAe,qBAAqB,EAAE,CAC5E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,EAAU;IAC7B,OAAO,CACL,EAAE;SACC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAa;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,GAAG,CAAC;IAChC,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,WAAW,GAA8B;QAC7C,UAAU,EAAE,EAAE;QACd,aAAa,EAAE,IAAI;QACnB,GAAG,EAAE,KAAK;QACV,aAAa,EAAE,KAAK;KACrB,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC,MAAM,SAAS,GAAG,CAAC,MAAc,EAAE,EAAE;QACnC,MAAM,UAAU,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,UAAU;YAAE,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACvC,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACnD,WAAW,CAAC,aAAa,GAAG,IAAI,CAAC;gBACjC,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9D,WAAW,CAAC,GAAG,GAAG,IAAI,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC1D,WAAW,CAAC,aAAa,GAAG,IAAI,CAAC;gBACjC,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC9D,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;gBAAE,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG;YAC/C,CAAC,CAAC,CAAC,GAAG,CAAC;YACP,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5E,KAAK,MAAM,MAAM,IAAI,UAAU;YAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC7C,WAAW,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAClD,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACvC,WAAW,CAAC,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC;QAC5C,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,SAAS;YAAE,WAAW,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QAChE,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC7C,WAAW,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAClD,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC9C,WAAW,CAAC,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC;QACnD,CAAC;IACH,CAAC;IAED,WAAW,CAAC,UAAU,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,qBAAqB,CAAC,GAA2B;IACxD,OAAO,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CACnB,QAAgB,EAChB,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACzE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,EAAE,IAAI,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,OAMvC;IACC,MAAM,qBAAqB,GAAG,IAAI,CAAC,IAAI,CACrC,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,UAAU,CACnB,CAAC;IACF,MAAM,qBAAqB,GAAG,cAAc,CAC1C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAC5D,CAAC;IACF,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CACpC,qBAAqB,EACrB,gBAAgB,CACjB,CAAC;IACF,MAAM,YAAY,GAAG,YAAY,CAC/B,qBAAqB,EACrB,oBAAoB,CACrB,CAAC;IACF,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,+CAA+C,oBAAoB,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,WAAqC,CAAC;IACvD,MAAM,oBAAoB,GAAG,cAAc,CACzC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAC3D,CAAC;IACF,MAAM,EAAE,GAAG,oBAAoB,CAC7B,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAClE,oBAAoB,CACrB,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAClB,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;QAChC,CAAC,CAAC,QAAQ,CAAC,KAAK;QAChB,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YACjC,CAAC,CAAC,QAAQ,CAAC,IAAI;YACf,CAAC,CAAC,YAAY,CACnB,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAChE,aAAa,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,0BAA0B,CAC7D,qBAAqB,EACrB,iBAAiB,CAClB,CAAC;IACF,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAClD,CAAC,WAAW,EAAE,CAAC;IAChB,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,CAC1D,CAAC,WAAW,EAAE,CAAC;IAChB,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,GAAG,CAAC;YACT,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChC,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;SAChC,CAAC;KACH,CAAC,IAAI,EAAE,CAAC;IACT,MAAM,WAAW,GAAG,oBAAoB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/D,MAAM,IAAI,GACR,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE;QACvD,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE;QACtB,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAEtB,OAAO;QACL,EAAE;QACF,IAAI;QACJ,WAAW,EACT,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;QACtE,OAAO;QACP,IAAI,EAAE,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAC9D,SAAS;QACT,SAAS;QACT,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,aAAa;QACzB,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE;YACN,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa,EAAE,qBAAqB;YACpC,YAAY,EAAE,oBAAoB;YAClC,SAAS,EAAE,cAAc,CACvB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,aAAa,CAAC,CACtD;YACD,WAAW;YACX,KAAK;SACN;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,OAKzC;IACC,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC7C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE;QAAE,OAAO,EAAE,CAAC;IAEpE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE;QACzD,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC;IACH,MAAM,IAAI,GAAwB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IACE,CAAC,KAAK,CAAC,WAAW,EAAE;YACpB,KAAK,CAAC,cAAc,EAAE;YACtB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAC1B,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,wBAAwB,CAAC;YACzC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,UAAU,EAAE,KAAK,CAAC,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,GAAG;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAO,GAAmC,EAAE;IAE5C,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,IAAI,GAAwB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,MAAM,cAAc,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC1C,MAAM,IAAI,GAAG,MAAM,0BAA0B,CAAC;YAC5C,GAAG,OAAO;YACV,YAAY,EAAE,MAAM,CAAC,IAAI;YACzB,KAAK;YACL,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE;SAC7B,CAAC,CAAC;QACH,IAAI,IAAI,KAAK,aAAa;YAAE,SAAS;QAErC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,aAAa,CAC9C,MAAM,CAAC,OAAO,EACd,IAAI,EACJ,YAAY,CACb,CAAC;YACF,IAAI,CAAC,IAAI,CACP,GAAG,CAAC,MAAM,0BAA0B,CAAC;gBACnC,KAAK;gBACL,aAAa,EAAE,MAAM,CAAC,OAAO;gBAC7B,QAAQ,EAAE,QAAQ;gBAClB,gBAAgB,EAAE,YAAY;aAC/B,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,iCAAiC,GAAG,CAAC,EAAE,QAAQ,YAAY,QAAQ,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,CAC7F,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,CACd,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CACnE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAU,EACV,OAAO,GAAmC,EAAE;IAE5C,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAAwD;IAExD,OAAO,CACL,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,aAAa,CAC3E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,GAAsB;IAChE,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;QACrB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;QACvB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ;QAC7B,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa;QACvC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY;QACrC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS;QAC/B,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;QACvB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW;KACpC,CAAC;AACJ,CAAC","sourcesContent":["import fsSync from \"node:fs\";\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\n\nimport {\n  loadAgentNativeManifest,\n  resolveAgentNativeDataMode,\n  type AgentNativeManifestApp,\n  type LoadAgentNativeManifestOptions,\n} from \"../local-artifacts/index.js\";\nimport type { ExtensionRow } from \"./store.js\";\n\nexport interface LocalExtensionPermissions {\n  appActions: string[];\n  extensionData: boolean;\n  sql: boolean;\n  externalFetch: boolean;\n}\n\nexport interface LocalExtensionSource {\n  mode: \"local-files\";\n  appId: string;\n  rootPath: string;\n  extensionPath: string;\n  manifestPath: string;\n  entryPath: string;\n  permissions: LocalExtensionPermissions;\n  slots: string[];\n}\n\nexport interface LocalExtensionRow extends ExtensionRow {\n  source: LocalExtensionSource;\n}\n\ninterface LocalExtensionManifest {\n  id?: unknown;\n  name?: unknown;\n  description?: unknown;\n  icon?: unknown;\n  entry?: unknown;\n  main?: unknown;\n  slots?: unknown;\n  slot?: unknown;\n  permissions?: unknown;\n}\n\nconst LOCAL_EXTENSION_ID_RE = /^[a-z0-9][a-z0-9._-]{0,79}$/;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction errorCode(error: unknown): string | undefined {\n  return isRecord(error) && typeof error.code === \"string\"\n    ? error.code\n    : undefined;\n}\n\nfunction asStringArray(value: unknown): string[] {\n  if (typeof value === \"string\" && value.trim()) return [value.trim()];\n  if (!Array.isArray(value)) return [];\n  return value.filter((item): item is string => typeof item === \"string\");\n}\n\nfunction normalizeSlash(filePath: string): string {\n  return filePath.replace(/\\\\/g, \"/\");\n}\n\nfunction normalizeRelativePath(filePath: string, label = \"path\"): string {\n  if (!filePath || typeof filePath !== \"string\") {\n    throw new Error(`${label} is required`);\n  }\n  if (filePath.includes(\"\\0\")) {\n    throw new Error(`${label} must not contain null bytes`);\n  }\n  if (path.isAbsolute(filePath)) {\n    throw new Error(`${label} must be relative`);\n  }\n  const normalized = normalizeSlash(\n    path.posix.normalize(normalizeSlash(filePath)),\n  );\n  if (\n    !normalized ||\n    normalized === \".\" ||\n    normalized === \"..\" ||\n    normalized.startsWith(\"../\") ||\n    normalized.split(\"/\").some((part) => !part || part === \".\" || part === \"..\")\n  ) {\n    throw new Error(`${label} must be a safe relative path`);\n  }\n  return normalized;\n}\n\nfunction resolveInside(basePath: string, relativePath: string, label: string) {\n  const safePath = normalizeRelativePath(relativePath, label);\n  const absolutePath = path.resolve(basePath, safePath);\n  const relative = path.relative(basePath, absolutePath);\n  if (\n    relative === \"\" ||\n    relative.startsWith(\"..\") ||\n    path.isAbsolute(relative)\n  ) {\n    throw new Error(`${label} \"${relativePath}\" is outside the workspace`);\n  }\n  return { safePath, absolutePath };\n}\n\nfunction noFollowOpenFlags(): number {\n  return fsSync.constants.O_RDONLY | (fsSync.constants.O_NOFOLLOW ?? 0);\n}\n\nfunction assertNoSymlinkPathSync(rootPath: string, absolutePath: string): void {\n  const relative = path.relative(rootPath, absolutePath);\n  const segments = relative.split(path.sep).filter(Boolean);\n  let current = rootPath;\n  const pathsToCheck = [\n    current,\n    ...segments.map((segment) => {\n      current = path.join(current, segment);\n      return current;\n    }),\n  ];\n\n  for (const candidate of pathsToCheck) {\n    const stat = fsSync.lstatSync(candidate);\n    if (stat.isSymbolicLink()) {\n      throw new Error(`Path \"${candidate}\" must not traverse a symlink`);\n    }\n  }\n}\n\nfunction readTextFileWithoutSymlink(rootPath: string, filePath: string) {\n  assertNoSymlinkPathSync(rootPath, filePath);\n  const fd = fsSync.openSync(filePath, noFollowOpenFlags());\n  try {\n    return {\n      content: fsSync.readFileSync(fd, \"utf8\"),\n      stat: fsSync.fstatSync(fd),\n    };\n  } finally {\n    fsSync.closeSync(fd);\n  }\n}\n\nfunction normalizeExtensionId(rawId: string, manifestPath: string): string {\n  const id = rawId.trim();\n  if (!LOCAL_EXTENSION_ID_RE.test(id)) {\n    throw new Error(\n      `Local extension id in ${manifestPath} must match ${LOCAL_EXTENSION_ID_RE}`,\n    );\n  }\n  return id;\n}\n\nfunction titleFromId(id: string): string {\n  return (\n    id\n      .replace(/[-_]+/g, \" \")\n      .replace(/\\s+/g, \" \")\n      .trim()\n      .replace(/\\b\\w/g, (char) => char.toUpperCase()) || id\n  );\n}\n\nfunction normalizeActionPermission(value: string): string | null {\n  const trimmed = value.trim();\n  if (!trimmed) return null;\n  if (trimmed === \"*\") return \"*\";\n  if (/^[A-Za-z0-9_.:-]+$/.test(trimmed)) return trimmed;\n  return null;\n}\n\nfunction normalizePermissions(value: unknown): LocalExtensionPermissions {\n  const permissions: LocalExtensionPermissions = {\n    appActions: [],\n    extensionData: true,\n    sql: false,\n    externalFetch: false,\n  };\n  const appActions = new Set<string>();\n\n  const addAction = (action: string) => {\n    const normalized = normalizeActionPermission(action);\n    if (normalized) appActions.add(normalized);\n  };\n\n  if (Array.isArray(value)) {\n    for (const item of value) {\n      if (typeof item !== \"string\") continue;\n      if (item === \"extensionData\" || item === \"storage\") {\n        permissions.extensionData = true;\n        continue;\n      }\n      if (item === \"sql\" || item === \"dbQuery\" || item === \"dbExec\") {\n        permissions.sql = true;\n        continue;\n      }\n      if (item === \"externalFetch\" || item === \"extensionFetch\") {\n        permissions.externalFetch = true;\n        continue;\n      }\n      const actionMatch = item.match(/^(?:appAction|action):(.+)$/);\n      if (actionMatch?.[1]) addAction(actionMatch[1]);\n    }\n  } else if (isRecord(value)) {\n    const rawActions =\n      value.appActions === \"*\" || value.actions === \"*\"\n        ? [\"*\"]\n        : [...asStringArray(value.appActions), ...asStringArray(value.actions)];\n    for (const action of rawActions) addAction(action);\n    if (typeof value.extensionData === \"boolean\") {\n      permissions.extensionData = value.extensionData;\n    }\n    if (typeof value.storage === \"boolean\") {\n      permissions.extensionData = value.storage;\n    }\n    if (typeof value.sql === \"boolean\") permissions.sql = value.sql;\n    if (typeof value.externalFetch === \"boolean\") {\n      permissions.externalFetch = value.externalFetch;\n    }\n    if (typeof value.extensionFetch === \"boolean\") {\n      permissions.externalFetch = value.extensionFetch;\n    }\n  }\n\n  permissions.appActions = [...appActions].sort();\n  return permissions;\n}\n\nfunction manifestAppExtensions(app: AgentNativeManifestApp): string[] {\n  return asStringArray(app.extensions);\n}\n\nfunction readJsonFile(\n  rootPath: string,\n  filePath: string,\n): { value: unknown; stat: fsSync.Stats } | null {\n  try {\n    const { content, stat } = readTextFileWithoutSymlink(rootPath, filePath);\n    return { value: JSON.parse(content) as unknown, stat };\n  } catch (error) {\n    if (errorCode(error) === \"ENOENT\") return null;\n    throw error;\n  }\n}\n\nasync function readLocalExtensionFolder(options: {\n  appId: string;\n  workspaceRoot: string;\n  rootPath: string;\n  rootAbsolutePath: string;\n  folderName: string;\n}): Promise<LocalExtensionRow | null> {\n  const extensionAbsolutePath = path.join(\n    options.rootAbsolutePath,\n    options.folderName,\n  );\n  const extensionRelativePath = normalizeSlash(\n    path.relative(options.workspaceRoot, extensionAbsolutePath),\n  );\n  const manifestAbsolutePath = path.join(\n    extensionAbsolutePath,\n    \"extension.json\",\n  );\n  const manifestRead = readJsonFile(\n    extensionAbsolutePath,\n    manifestAbsolutePath,\n  );\n  if (!manifestRead) return null;\n  const rawManifest = manifestRead.value;\n  if (!isRecord(rawManifest)) {\n    throw new Error(\n      `Local extension manifest must be an object: ${manifestAbsolutePath}`,\n    );\n  }\n  const manifest = rawManifest as LocalExtensionManifest;\n  const manifestRelativePath = normalizeSlash(\n    path.relative(options.workspaceRoot, manifestAbsolutePath),\n  );\n  const id = normalizeExtensionId(\n    typeof manifest.id === \"string\" ? manifest.id : options.folderName,\n    manifestAbsolutePath,\n  );\n  const entry = String(\n    typeof manifest.entry === \"string\"\n      ? manifest.entry\n      : typeof manifest.main === \"string\"\n        ? manifest.main\n        : \"index.html\",\n  );\n  const { safePath: entrySafePath, absolutePath: entryAbsolutePath } =\n    resolveInside(extensionAbsolutePath, entry, \"entry\");\n  const { content, stat: entryStat } = readTextFileWithoutSymlink(\n    extensionAbsolutePath,\n    entryAbsolutePath,\n  );\n  const manifestStat = manifestRead.stat;\n  const updatedAt = new Date(\n    Math.max(manifestStat.mtimeMs, entryStat.mtimeMs),\n  ).toISOString();\n  const createdAt = new Date(\n    Math.min(manifestStat.birthtimeMs, entryStat.birthtimeMs),\n  ).toISOString();\n  const slots = [\n    ...new Set([\n      ...asStringArray(manifest.slots),\n      ...asStringArray(manifest.slot),\n    ]),\n  ].sort();\n  const permissions = normalizePermissions(manifest.permissions);\n  const name =\n    typeof manifest.name === \"string\" && manifest.name.trim()\n      ? manifest.name.trim()\n      : titleFromId(id);\n\n  return {\n    id,\n    name,\n    description:\n      typeof manifest.description === \"string\" ? manifest.description : \"\",\n    content,\n    icon: typeof manifest.icon === \"string\" ? manifest.icon : null,\n    createdAt,\n    updatedAt,\n    hiddenAt: null,\n    hiddenBy: null,\n    ownerEmail: \"local-files\",\n    orgId: null,\n    visibility: \"private\",\n    source: {\n      mode: \"local-files\",\n      appId: options.appId,\n      rootPath: options.rootPath,\n      extensionPath: extensionRelativePath,\n      manifestPath: manifestRelativePath,\n      entryPath: normalizeSlash(\n        path.posix.join(extensionRelativePath, entrySafePath),\n      ),\n      permissions,\n      slots,\n    },\n  };\n}\n\nasync function listLocalExtensionsForRoot(options: {\n  appId: string;\n  workspaceRoot: string;\n  rootPath: string;\n  rootAbsolutePath: string;\n}): Promise<LocalExtensionRow[]> {\n  let rootStat;\n  try {\n    rootStat = await fs.lstat(options.rootAbsolutePath);\n  } catch (error) {\n    if (errorCode(error) === \"ENOENT\") return [];\n    throw error;\n  }\n  if (!rootStat.isDirectory() || rootStat.isSymbolicLink()) return [];\n\n  const entries = await fs.readdir(options.rootAbsolutePath, {\n    withFileTypes: true,\n  });\n  const rows: LocalExtensionRow[] = [];\n  for (const entry of entries) {\n    if (\n      !entry.isDirectory() ||\n      entry.isSymbolicLink() ||\n      entry.name.startsWith(\".\")\n    ) {\n      continue;\n    }\n    const row = await readLocalExtensionFolder({\n      appId: options.appId,\n      workspaceRoot: options.workspaceRoot,\n      rootPath: options.rootPath,\n      rootAbsolutePath: options.rootAbsolutePath,\n      folderName: entry.name,\n    });\n    if (row) rows.push(row);\n  }\n  return rows;\n}\n\nexport async function listLocalExtensions(\n  options: LoadAgentNativeManifestOptions = {},\n): Promise<LocalExtensionRow[]> {\n  const loaded = await loadAgentNativeManifest({ ...options, optional: true });\n  if (!loaded) return [];\n\n  const rows: LocalExtensionRow[] = [];\n  const seenIds = new Map<string, string>();\n  for (const [appId, app] of Object.entries(loaded.manifest.apps ?? {})) {\n    const extensionRoots = manifestAppExtensions(app);\n    if (extensionRoots.length === 0) continue;\n    const mode = await resolveAgentNativeDataMode({\n      ...options,\n      manifestPath: loaded.path,\n      appId,\n      defaults: { mode: app.mode },\n    });\n    if (mode !== \"local-files\") continue;\n\n    for (const root of extensionRoots) {\n      const { safePath, absolutePath } = resolveInside(\n        loaded.rootDir,\n        root,\n        \"extensions\",\n      );\n      rows.push(\n        ...(await listLocalExtensionsForRoot({\n          appId,\n          workspaceRoot: loaded.rootDir,\n          rootPath: safePath,\n          rootAbsolutePath: absolutePath,\n        })),\n      );\n    }\n  }\n\n  for (const row of rows) {\n    const existingPath = seenIds.get(row.id);\n    if (existingPath) {\n      throw new Error(\n        `Duplicate local extension id \"${row.id}\" in ${existingPath} and ${row.source.manifestPath}`,\n      );\n    }\n    seenIds.set(row.id, row.source.manifestPath);\n  }\n\n  return rows.sort(\n    (a, b) => a.name.localeCompare(b.name) || a.id.localeCompare(b.id),\n  );\n}\n\nexport async function getLocalExtension(\n  id: string,\n  options: LoadAgentNativeManifestOptions = {},\n): Promise<LocalExtensionRow | null> {\n  const rows = await listLocalExtensions(options);\n  return rows.find((row) => row.id === id) ?? null;\n}\n\nexport function isLocalExtensionRow(\n  row: ExtensionRow | LocalExtensionRow | null | undefined,\n): row is LocalExtensionRow {\n  return (\n    isRecord(row) && isRecord(row.source) && row.source.mode === \"local-files\"\n  );\n}\n\nexport function localExtensionSourceSummary(row: LocalExtensionRow) {\n  return {\n    mode: row.source.mode,\n    appId: row.source.appId,\n    rootPath: row.source.rootPath,\n    extensionPath: row.source.extensionPath,\n    manifestPath: row.source.manifestPath,\n    entryPath: row.source.entryPath,\n    slots: row.source.slots,\n    permissions: row.source.permissions,\n  };\n}\n"]}
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/extensions/local.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAG3B,MAAM,6BAA6B,CAAC;AAqCrC,MAAM,qBAAqB,GAAG,6BAA6B,CAAC;AAE5D,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QACtD,CAAC,CAAC,KAAK,CAAC,IAAI;QACZ,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB,EAAE,KAAK,GAAG,MAAM;IAC7D,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,UAAU,GAAG,cAAc,CAC/B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAC/C,CAAC;IACF,IACE,CAAC,UAAU;QACX,UAAU,KAAK,GAAG;QAClB,UAAU,KAAK,IAAI;QACnB,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAC5E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,YAAoB,EAAE,KAAa;IAC1E,MAAM,QAAQ,GAAG,qBAAqB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACvD,IACE,QAAQ,KAAK,EAAE;QACf,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EACzB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,YAAY,4BAA4B,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,MAAM,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB,EAAE,YAAoB;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,MAAM,YAAY,GAAG;QACnB,OAAO;QACP,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;YAC1B,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;KACH,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,SAAS,SAAS,+BAA+B,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAgB,EAAE,QAAgB;IACpE,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC;YACxC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;SAC3B,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,YAAoB;IAC/D,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,yBAAyB,YAAY,eAAe,qBAAqB,EAAE,CAC5E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,EAAU;IAC7B,OAAO,CACL,EAAE;SACC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAa;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,GAAG,CAAC;IAChC,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,WAAW,GAA8B;QAC7C,UAAU,EAAE,EAAE;QACd,aAAa,EAAE,IAAI;QACnB,GAAG,EAAE,KAAK;QACV,aAAa,EAAE,KAAK;KACrB,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC,MAAM,SAAS,GAAG,CAAC,MAAc,EAAE,EAAE;QACnC,MAAM,UAAU,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,UAAU;YAAE,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACvC,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACnD,WAAW,CAAC,aAAa,GAAG,IAAI,CAAC;gBACjC,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9D,WAAW,CAAC,GAAG,GAAG,IAAI,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC1D,WAAW,CAAC,aAAa,GAAG,IAAI,CAAC;gBACjC,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC9D,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;gBAAE,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG;YAC/C,CAAC,CAAC,CAAC,GAAG,CAAC;YACP,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5E,KAAK,MAAM,MAAM,IAAI,UAAU;YAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC7C,WAAW,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAClD,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACvC,WAAW,CAAC,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC;QAC5C,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,SAAS;YAAE,WAAW,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QAChE,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC7C,WAAW,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAClD,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC9C,WAAW,CAAC,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC;QACnD,CAAC;IACH,CAAC;IAED,WAAW,CAAC,UAAU,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,qBAAqB,CAAC,GAA2B;IACxD,OAAO,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CACnB,QAAgB,EAChB,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACzE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,EAAE,IAAI,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,OAMvC;IACC,MAAM,qBAAqB,GAAG,IAAI,CAAC,IAAI,CACrC,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,UAAU,CACnB,CAAC;IACF,MAAM,qBAAqB,GAAG,cAAc,CAC1C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAC5D,CAAC;IACF,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CACpC,qBAAqB,EACrB,gBAAgB,CACjB,CAAC;IACF,MAAM,YAAY,GAAG,YAAY,CAC/B,qBAAqB,EACrB,oBAAoB,CACrB,CAAC;IACF,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,+CAA+C,oBAAoB,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,WAAqC,CAAC;IACvD,MAAM,oBAAoB,GAAG,cAAc,CACzC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAC3D,CAAC;IACF,MAAM,EAAE,GAAG,oBAAoB,CAC7B,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAClE,oBAAoB,CACrB,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAClB,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;QAChC,CAAC,CAAC,QAAQ,CAAC,KAAK;QAChB,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YACjC,CAAC,CAAC,QAAQ,CAAC,IAAI;YACf,CAAC,CAAC,YAAY,CACnB,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAChE,aAAa,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,0BAA0B,CAC7D,qBAAqB,EACrB,iBAAiB,CAClB,CAAC;IACF,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAClD,CAAC,WAAW,EAAE,CAAC;IAChB,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,CAC1D,CAAC,WAAW,EAAE,CAAC;IAChB,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,GAAG,CAAC;YACT,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChC,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;SAChC,CAAC;KACH,CAAC,IAAI,EAAE,CAAC;IACT,MAAM,WAAW,GAAG,oBAAoB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/D,MAAM,IAAI,GACR,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE;QACvD,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE;QACtB,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAEtB,OAAO;QACL,EAAE;QACF,IAAI;QACJ,WAAW,EACT,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;QACtE,OAAO;QACP,IAAI,EAAE,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAC9D,SAAS;QACT,SAAS;QACT,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,aAAa;QACzB,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE;YACN,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa,EAAE,qBAAqB;YACpC,YAAY,EAAE,oBAAoB;YAClC,SAAS,EAAE,cAAc,CACvB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,aAAa,CAAC,CACtD;YACD,WAAW;YACX,KAAK;SACN;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,OAKzC;IACC,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC7C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE;QAAE,OAAO,EAAE,CAAC;IAEpE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE;QACzD,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC;IACH,MAAM,IAAI,GAAwB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IACE,CAAC,KAAK,CAAC,WAAW,EAAE;YACpB,KAAK,CAAC,cAAc,EAAE;YACtB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAC1B,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,wBAAwB,CAAC;YACzC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,UAAU,EAAE,KAAK,CAAC,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,GAAG;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAO,GAAmC,EAAE;IAE5C,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,IAAI,GAAwB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,MAAM,cAAc,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC1C,MAAM,IAAI,GAAG,MAAM,0BAA0B,CAAC;YAC5C,GAAG,OAAO;YACV,YAAY,EAAE,MAAM,CAAC,IAAI;YACzB,KAAK;YACL,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE;SAC7B,CAAC,CAAC;QACH,IAAI,IAAI,KAAK,aAAa;YAAE,SAAS;QAErC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,aAAa,CAC9C,MAAM,CAAC,OAAO,EACd,IAAI,EACJ,YAAY,CACb,CAAC;YACF,IAAI,CAAC,IAAI,CACP,GAAG,CAAC,MAAM,0BAA0B,CAAC;gBACnC,KAAK;gBACL,aAAa,EAAE,MAAM,CAAC,OAAO;gBAC7B,QAAQ,EAAE,QAAQ;gBAClB,gBAAgB,EAAE,YAAY;aAC/B,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,iCAAiC,GAAG,CAAC,EAAE,QAAQ,YAAY,QAAQ,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,CAC7F,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,CACd,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CACnE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAU,EACV,OAAO,GAAmC,EAAE;IAE5C,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAAwD;IAExD,OAAO,CACL,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,aAAa,CAC3E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,GAAsB;IAChE,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;QACrB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;QACvB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ;QAC7B,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa;QACvC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY;QACrC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS;QAC/B,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;QACvB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW;KACpC,CAAC;AACJ,CAAC","sourcesContent":["import fsSync from \"node:fs\";\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\n\nimport {\n  loadAgentNativeManifest,\n  resolveAgentNativeDataMode,\n  type AgentNativeManifestApp,\n  type LoadAgentNativeManifestOptions,\n} from \"../local-artifacts/index.js\";\nimport type { ExtensionRow } from \"./store.js\";\n\nexport interface LocalExtensionPermissions {\n  appActions: string[];\n  extensionData: boolean;\n  sql: boolean;\n  externalFetch: boolean;\n}\n\nexport interface LocalExtensionSource {\n  mode: \"local-files\";\n  appId: string;\n  rootPath: string;\n  extensionPath: string;\n  manifestPath: string;\n  entryPath: string;\n  permissions: LocalExtensionPermissions;\n  slots: string[];\n}\n\nexport interface LocalExtensionRow extends ExtensionRow {\n  source: LocalExtensionSource;\n}\n\ninterface LocalExtensionManifest {\n  id?: unknown;\n  name?: unknown;\n  description?: unknown;\n  icon?: unknown;\n  entry?: unknown;\n  main?: unknown;\n  slots?: unknown;\n  slot?: unknown;\n  permissions?: unknown;\n}\n\nconst LOCAL_EXTENSION_ID_RE = /^[a-z0-9][a-z0-9._-]{0,79}$/;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction errorCode(error: unknown): string | undefined {\n  return isRecord(error) && typeof error.code === \"string\"\n    ? error.code\n    : undefined;\n}\n\nfunction asStringArray(value: unknown): string[] {\n  if (typeof value === \"string\" && value.trim()) return [value.trim()];\n  if (!Array.isArray(value)) return [];\n  return value.filter((item): item is string => typeof item === \"string\");\n}\n\nfunction normalizeSlash(filePath: string): string {\n  return filePath.replace(/\\\\/g, \"/\");\n}\n\nfunction normalizeRelativePath(filePath: string, label = \"path\"): string {\n  if (!filePath || typeof filePath !== \"string\") {\n    throw new Error(`${label} is required`);\n  }\n  if (filePath.includes(\"\\0\")) {\n    throw new Error(`${label} must not contain null bytes`);\n  }\n  if (path.isAbsolute(filePath)) {\n    throw new Error(`${label} must be relative`);\n  }\n  const normalized = normalizeSlash(\n    path.posix.normalize(normalizeSlash(filePath)),\n  );\n  if (\n    !normalized ||\n    normalized === \".\" ||\n    normalized === \"..\" ||\n    normalized.startsWith(\"../\") ||\n    normalized.split(\"/\").some((part) => !part || part === \".\" || part === \"..\")\n  ) {\n    throw new Error(`${label} must be a safe relative path`);\n  }\n  return normalized;\n}\n\nfunction resolveInside(basePath: string, relativePath: string, label: string) {\n  const safePath = normalizeRelativePath(relativePath, label);\n  const absolutePath = path.resolve(basePath, safePath);\n  const relative = path.relative(basePath, absolutePath);\n  if (\n    relative === \"\" ||\n    relative.startsWith(\"..\") ||\n    path.isAbsolute(relative)\n  ) {\n    throw new Error(`${label} \"${relativePath}\" is outside the workspace`);\n  }\n  return { safePath, absolutePath };\n}\n\nfunction noFollowOpenFlags(): number {\n  return fsSync.constants.O_RDONLY | (fsSync.constants.O_NOFOLLOW ?? 0);\n}\n\nfunction assertNoSymlinkPathSync(rootPath: string, absolutePath: string): void {\n  const relative = path.relative(rootPath, absolutePath);\n  const segments = relative.split(path.sep).filter(Boolean);\n  let current = rootPath;\n  const pathsToCheck = [\n    current,\n    ...segments.map((segment) => {\n      current = path.join(current, segment);\n      return current;\n    }),\n  ];\n\n  for (const candidate of pathsToCheck) {\n    const stat = fsSync.lstatSync(candidate);\n    if (stat.isSymbolicLink()) {\n      throw new Error(`Path \"${candidate}\" must not traverse a symlink`);\n    }\n  }\n}\n\nfunction readTextFileWithoutSymlink(rootPath: string, filePath: string) {\n  assertNoSymlinkPathSync(rootPath, filePath);\n  const fd = fsSync.openSync(filePath, noFollowOpenFlags());\n  try {\n    return {\n      content: fsSync.readFileSync(fd, \"utf8\"),\n      stat: fsSync.fstatSync(fd),\n    };\n  } finally {\n    fsSync.closeSync(fd);\n  }\n}\n\nfunction normalizeExtensionId(rawId: string, manifestPath: string): string {\n  const id = rawId.trim();\n  if (!LOCAL_EXTENSION_ID_RE.test(id)) {\n    throw new Error(\n      `Local extension id in ${manifestPath} must match ${LOCAL_EXTENSION_ID_RE}`,\n    );\n  }\n  return id;\n}\n\nfunction titleFromId(id: string): string {\n  return (\n    id\n      .replace(/[-_]+/g, \" \")\n      .replace(/\\s+/g, \" \")\n      .trim()\n      .replace(/\\b\\w/g, (char) => char.toUpperCase()) || id\n  );\n}\n\nfunction normalizeActionPermission(value: string): string | null {\n  const trimmed = value.trim();\n  if (!trimmed) return null;\n  if (trimmed === \"*\") return \"*\";\n  if (/^[A-Za-z0-9_.:-]+$/.test(trimmed)) return trimmed;\n  return null;\n}\n\nfunction normalizePermissions(value: unknown): LocalExtensionPermissions {\n  const permissions: LocalExtensionPermissions = {\n    appActions: [],\n    extensionData: true,\n    sql: false,\n    externalFetch: false,\n  };\n  const appActions = new Set<string>();\n\n  const addAction = (action: string) => {\n    const normalized = normalizeActionPermission(action);\n    if (normalized) appActions.add(normalized);\n  };\n\n  if (Array.isArray(value)) {\n    for (const item of value) {\n      if (typeof item !== \"string\") continue;\n      if (item === \"extensionData\" || item === \"storage\") {\n        permissions.extensionData = true;\n        continue;\n      }\n      if (item === \"sql\" || item === \"dbQuery\" || item === \"dbExec\") {\n        permissions.sql = true;\n        continue;\n      }\n      if (item === \"externalFetch\" || item === \"extensionFetch\") {\n        permissions.externalFetch = true;\n        continue;\n      }\n      const actionMatch = item.match(/^(?:appAction|action):(.+)$/);\n      if (actionMatch?.[1]) addAction(actionMatch[1]);\n    }\n  } else if (isRecord(value)) {\n    const rawActions =\n      value.appActions === \"*\" || value.actions === \"*\"\n        ? [\"*\"]\n        : [...asStringArray(value.appActions), ...asStringArray(value.actions)];\n    for (const action of rawActions) addAction(action);\n    if (typeof value.extensionData === \"boolean\") {\n      permissions.extensionData = value.extensionData;\n    }\n    if (typeof value.storage === \"boolean\") {\n      permissions.extensionData = value.storage;\n    }\n    if (typeof value.sql === \"boolean\") permissions.sql = value.sql;\n    if (typeof value.externalFetch === \"boolean\") {\n      permissions.externalFetch = value.externalFetch;\n    }\n    if (typeof value.extensionFetch === \"boolean\") {\n      permissions.externalFetch = value.extensionFetch;\n    }\n  }\n\n  permissions.appActions = [...appActions].sort();\n  return permissions;\n}\n\nfunction manifestAppExtensions(app: AgentNativeManifestApp): string[] {\n  return asStringArray(app.extensions);\n}\n\nfunction readJsonFile(\n  rootPath: string,\n  filePath: string,\n): { value: unknown; stat: fsSync.Stats } | null {\n  try {\n    const { content, stat } = readTextFileWithoutSymlink(rootPath, filePath);\n    return { value: JSON.parse(content) as unknown, stat };\n  } catch (error) {\n    if (errorCode(error) === \"ENOENT\") return null;\n    throw error;\n  }\n}\n\nasync function readLocalExtensionFolder(options: {\n  appId: string;\n  workspaceRoot: string;\n  rootPath: string;\n  rootAbsolutePath: string;\n  folderName: string;\n}): Promise<LocalExtensionRow | null> {\n  const extensionAbsolutePath = path.join(\n    options.rootAbsolutePath,\n    options.folderName,\n  );\n  const extensionRelativePath = normalizeSlash(\n    path.relative(options.workspaceRoot, extensionAbsolutePath),\n  );\n  const manifestAbsolutePath = path.join(\n    extensionAbsolutePath,\n    \"extension.json\",\n  );\n  const manifestRead = readJsonFile(\n    extensionAbsolutePath,\n    manifestAbsolutePath,\n  );\n  if (!manifestRead) return null;\n  const rawManifest = manifestRead.value;\n  if (!isRecord(rawManifest)) {\n    throw new Error(\n      `Local extension manifest must be an object: ${manifestAbsolutePath}`,\n    );\n  }\n  const manifest = rawManifest as LocalExtensionManifest;\n  const manifestRelativePath = normalizeSlash(\n    path.relative(options.workspaceRoot, manifestAbsolutePath),\n  );\n  const id = normalizeExtensionId(\n    typeof manifest.id === \"string\" ? manifest.id : options.folderName,\n    manifestAbsolutePath,\n  );\n  const entry = String(\n    typeof manifest.entry === \"string\"\n      ? manifest.entry\n      : typeof manifest.main === \"string\"\n        ? manifest.main\n        : \"index.html\",\n  );\n  const { safePath: entrySafePath, absolutePath: entryAbsolutePath } =\n    resolveInside(extensionAbsolutePath, entry, \"entry\");\n  const { content, stat: entryStat } = readTextFileWithoutSymlink(\n    extensionAbsolutePath,\n    entryAbsolutePath,\n  );\n  const manifestStat = manifestRead.stat;\n  const updatedAt = new Date(\n    Math.max(manifestStat.mtimeMs, entryStat.mtimeMs),\n  ).toISOString();\n  const createdAt = new Date(\n    Math.min(manifestStat.birthtimeMs, entryStat.birthtimeMs),\n  ).toISOString();\n  const slots = [\n    ...new Set([\n      ...asStringArray(manifest.slots),\n      ...asStringArray(manifest.slot),\n    ]),\n  ].sort();\n  const permissions = normalizePermissions(manifest.permissions);\n  const name =\n    typeof manifest.name === \"string\" && manifest.name.trim()\n      ? manifest.name.trim()\n      : titleFromId(id);\n\n  return {\n    id,\n    name,\n    description:\n      typeof manifest.description === \"string\" ? manifest.description : \"\",\n    content,\n    icon: typeof manifest.icon === \"string\" ? manifest.icon : null,\n    createdAt,\n    updatedAt,\n    archivedAt: null,\n    hiddenAt: null,\n    hiddenBy: null,\n    ownerEmail: \"local-files\",\n    orgId: null,\n    visibility: \"private\",\n    source: {\n      mode: \"local-files\",\n      appId: options.appId,\n      rootPath: options.rootPath,\n      extensionPath: extensionRelativePath,\n      manifestPath: manifestRelativePath,\n      entryPath: normalizeSlash(\n        path.posix.join(extensionRelativePath, entrySafePath),\n      ),\n      permissions,\n      slots,\n    },\n  };\n}\n\nasync function listLocalExtensionsForRoot(options: {\n  appId: string;\n  workspaceRoot: string;\n  rootPath: string;\n  rootAbsolutePath: string;\n}): Promise<LocalExtensionRow[]> {\n  let rootStat;\n  try {\n    rootStat = await fs.lstat(options.rootAbsolutePath);\n  } catch (error) {\n    if (errorCode(error) === \"ENOENT\") return [];\n    throw error;\n  }\n  if (!rootStat.isDirectory() || rootStat.isSymbolicLink()) return [];\n\n  const entries = await fs.readdir(options.rootAbsolutePath, {\n    withFileTypes: true,\n  });\n  const rows: LocalExtensionRow[] = [];\n  for (const entry of entries) {\n    if (\n      !entry.isDirectory() ||\n      entry.isSymbolicLink() ||\n      entry.name.startsWith(\".\")\n    ) {\n      continue;\n    }\n    const row = await readLocalExtensionFolder({\n      appId: options.appId,\n      workspaceRoot: options.workspaceRoot,\n      rootPath: options.rootPath,\n      rootAbsolutePath: options.rootAbsolutePath,\n      folderName: entry.name,\n    });\n    if (row) rows.push(row);\n  }\n  return rows;\n}\n\nexport async function listLocalExtensions(\n  options: LoadAgentNativeManifestOptions = {},\n): Promise<LocalExtensionRow[]> {\n  const loaded = await loadAgentNativeManifest({ ...options, optional: true });\n  if (!loaded) return [];\n\n  const rows: LocalExtensionRow[] = [];\n  const seenIds = new Map<string, string>();\n  for (const [appId, app] of Object.entries(loaded.manifest.apps ?? {})) {\n    const extensionRoots = manifestAppExtensions(app);\n    if (extensionRoots.length === 0) continue;\n    const mode = await resolveAgentNativeDataMode({\n      ...options,\n      manifestPath: loaded.path,\n      appId,\n      defaults: { mode: app.mode },\n    });\n    if (mode !== \"local-files\") continue;\n\n    for (const root of extensionRoots) {\n      const { safePath, absolutePath } = resolveInside(\n        loaded.rootDir,\n        root,\n        \"extensions\",\n      );\n      rows.push(\n        ...(await listLocalExtensionsForRoot({\n          appId,\n          workspaceRoot: loaded.rootDir,\n          rootPath: safePath,\n          rootAbsolutePath: absolutePath,\n        })),\n      );\n    }\n  }\n\n  for (const row of rows) {\n    const existingPath = seenIds.get(row.id);\n    if (existingPath) {\n      throw new Error(\n        `Duplicate local extension id \"${row.id}\" in ${existingPath} and ${row.source.manifestPath}`,\n      );\n    }\n    seenIds.set(row.id, row.source.manifestPath);\n  }\n\n  return rows.sort(\n    (a, b) => a.name.localeCompare(b.name) || a.id.localeCompare(b.id),\n  );\n}\n\nexport async function getLocalExtension(\n  id: string,\n  options: LoadAgentNativeManifestOptions = {},\n): Promise<LocalExtensionRow | null> {\n  const rows = await listLocalExtensions(options);\n  return rows.find((row) => row.id === id) ?? null;\n}\n\nexport function isLocalExtensionRow(\n  row: ExtensionRow | LocalExtensionRow | null | undefined,\n): row is LocalExtensionRow {\n  return (\n    isRecord(row) && isRecord(row.source) && row.source.mode === \"local-files\"\n  );\n}\n\nexport function localExtensionSourceSummary(row: LocalExtensionRow) {\n  return {\n    mode: row.source.mode,\n    appId: row.source.appId,\n    rootPath: row.source.rootPath,\n    extensionPath: row.source.extensionPath,\n    manifestPath: row.source.manifestPath,\n    entryPath: row.source.entryPath,\n    slots: row.source.slots,\n    permissions: row.source.permissions,\n  };\n}\n"]}

package/dist/extensions/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/extensions/routes.ts"],"names":[],"mappings":"AAiEA,wBAAgB,uBAAuB,2FA+CtC;AAg2BD,eAAO,MAAM,kBAAkB,QACqa,CAAC;AAMrc,eAAO,MAAM,gBAAgB,QACilB,CAAC;AAM/mB,eAAO,MAAM,oBAAoB,QACgB,CAAC;AAMlD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAQ/D"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/extensions/routes.ts"],"names":[],"mappings":"AAiEA,wBAAgB,uBAAuB,2FA+CtC;AAq2BD,eAAO,MAAM,kBAAkB,QACqa,CAAC;AAMrc,eAAO,MAAM,gBAAgB,QACilB,CAAC;AAM/mB,eAAO,MAAM,oBAAoB,QACgB,CAAC;AAMlD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAQ/D"}

package/dist/extensions/routes.js

@@ -140,7 +140,7 @@ async function dispatch(event, method, parts, userEmail) {
         }
         const access = await resolveAccess("extension", parts[0]);
         const extension = access?.resource;
-        if (!extension) {
+        if (!access || !extension || extension.archivedAt) {
             setResponseStatus(event, 404);
             return { error: "Extension not found" };
         }
@@ -216,11 +216,12 @@ async function dispatch(event, method, parts, userEmail) {
             return extensionResponse(localExtension, "viewer");
         }
         const access = await resolveAccess("extension", parts[0]);
-        if (!access) {
+        const extension = access?.resource;
+        if (!access || !extension || extension.archivedAt) {
             setResponseStatus(event, 404);
             return { error: "Extension not found" };
         }
-        return extensionResponse(access.resource, access.role);
+        return extensionResponse(extension, access.role);
     }
     // POST /:id/hide — remove from the current user's Extensions list/sidebar
     // without deleting the underlying extension for teammates or shared slots.
@@ -325,7 +326,7 @@ async function dispatch(event, method, parts, userEmail) {
             setResponseStatus(event, 404);
             return { error: "Extension not found" };
         }
-        return { ok: true };
+        return { ok: true, archived: true };
     }
     setResponseStatus(event, 404);
     return { error: "Not found" };
@@ -509,6 +510,10 @@ async function handleExtensionDataDelete(event, extensionId, collection, itemId,
 }
 async function requireExtensionDataAccess(event, extensionId, minRole) {
     const access = await resolveAccess("extension", extensionId);
+    if (access?.resource && access.resource.archivedAt) {
+        setResponseStatus(event, 404);
+        return { ok: false, response: { error: "Extension not found" } };
+    }
     if (access) {
         if (ROLE_RANK[access.role] < ROLE_RANK[minRole]) {
             setResponseStatus(event, 403);

package/dist/extensions/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/extensions/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,IAAI,CAAC;AAEZ,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EACL,qCAAqC,EACrC,oBAAoB,EACpB,uBAAuB,GAExB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EACL,qBAAqB,EACrB,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAkB,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,GAEpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,yBAAyB,EACzB,aAAa,EACb,YAAY,EACZ,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EACd,YAAY,EACZ,0BAA0B,EAC1B,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,8BAA8B,EAC9B,eAAe,EACf,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,GAEvB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EACL,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,iBAAiB,CAAC;AAEzB,MAAM,UAAU,uBAAuB;IACrC,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;aACzC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;aACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,QAAQ;YACpB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC/B,IAAI,CAAC;oBACH,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QAC9C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;QAE1D,IAAI,CAAC;YACH,OAAO,MAAM,qBAAqB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;gBAClE,MAAM,sBAAsB,EAAE,CAAC;gBAC/B,OAAO,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;gBAClC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YAChC,CAAC;YACD,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;gBAC7C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,CAAC;AAE7C,SAAS,2BAA2B,CAAC,KAAa;IAChD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,KAAc,EACd,MAAc,EACd,KAAe,EACf,SAAiB;IAEjB,wDAAwD;IACxD,IACE,MAAM,KAAK,MAAM;QACjB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,EACpB,CAAC;QACD,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,mDAAmD;IACnD,IACE,MAAM,KAAK,MAAM;QACjB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EACnB,CAAC;QACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,kEAAkE;IAClE,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAClE,OAAO,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACvE,CAAC;IAED,8DAA8D;IAC9D,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACnE,OAAO,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACzE,CAAC;IAED,iEAAiE;IACjE,IAAI,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACrE,OAAO,yBAAyB,CAC9B,KAAK,EACL,KAAK,CAAC,CAAC,CAAC,EACR,KAAK,CAAC,CAAC,CAAC,EACR,KAAK,CAAC,CAAC,CAAC,EACR,SAAS,CACV,CAAC;IACJ,CAAC;IAED,cAAc;IACd,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACpE,OAAO,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,qEAAqE;IACrE,0EAA0E;IAC1E,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,qBAAqB,GACzB,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,uBAAuB,CAAC,KAAK,MAAM,CAAC;QACnE,MAAM,cAAc,GAClB,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,mBAAmB,EAAE,CAAC;QAC3E,OAAO,OAAO,CAAC,GAAG,CAChB,CAAC,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAClC,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,CAAC,CACtD,CACF,CAAC;IACJ,CAAC;IAED,kBAAkB;IAClB,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QACvC,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QAC9C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,kBAAkB;IAClB,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACpE,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,IAAI,GAAG,kBAAkB,CAC7B,cAAc,CAAC,OAAO,EACtB,SAAS,EACT,MAAM,EACN,KAAK,CAAC,CAAC,CAAC,EACR;gBACE,WAAW,EAAE,cAAc,CAAC,UAAU;gBACtC,WAAW,EAAE,SAAS;gBACtB,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,aAAa;gBACrB,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC,WAAW;aAC/C,CACF,CAAC;YACF,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,0BAA0B,CAAC,CAAC;YACrE,iBAAiB,CAAC,KAAK,EAAE,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;YAC1E,iBAAiB,CAAC,KAAK,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;YAC9D,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,MAAM,EAAE,QAAQ,CAAC;QACnC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACvC,mEAAmE;QACnE,gEAAgE;QAChE,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC;QAEpD,MAAM,IAAI,GAAG,kBAAkB,CAC7B,SAAS,CAAC,OAAO,EACjB,SAAS,EACT,MAAM,EACN,KAAK,CAAC,CAAC,CAAC,EACR;YACE,WAAW,EAAE,SAAS,CAAC,UAAU;YACjC,WAAW,EAAE,SAAS;YACtB,QAAQ;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CACF,CAAC;QACF,2EAA2E;QAC3E,iEAAiE;QACjE,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,0BAA0B,CAAC,CAAC;QACrE,iBAAiB,CAAC,KAAK,EAAE,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;QAC1E,iBAAiB,CAAC,KAAK,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAC9D,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2DAA2D;IAC3D,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,KAAK,GACT,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS;YAC7C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,cAAc,GAClB,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM,CAAC;QAC5D,OAAO;YACL,OAAO,EAAE,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBAC5C,KAAK;gBACL,cAAc;aACf,CAAC;SACH,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0EAA0E;IAC1E,IACE,MAAM,KAAK,MAAM;QACjB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;QACtB,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EACtB,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,WAAW;IACX,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,iBAAiB,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,iBAAiB,CAAC,MAAM,CAAC,QAAwB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACnE,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAED,sEAAsE;IACtE,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC;IAED,yEAAyE;IACzE,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QAC1E,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IAED,gEAAgE;IAChE,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,eAAe,EAAE,CAAC;QAC5E,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,WAAW;IACX,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,IACE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,EACjD,CAAC;YACD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,KAAK,EACH,4GAA4G;aAC/G,CAAC;QACJ,CAAC;QACD,MAAM,gBAAgB,GACpB,IAAI,CAAC,OAAO,KAAK,SAAS;YAC1B,IAAI,CAAC,OAAO,KAAK,SAAS;YAC1B,IAAI,CAAC,KAAK,KAAK,SAAS;YACxB,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;QAC5B,MAAM,aAAa,GACjB,IAAI,CAAC,IAAI,KAAK,SAAS;YACvB,IAAI,CAAC,WAAW,KAAK,SAAS;YAC9B,IAAI,CAAC,IAAI,KAAK,SAAS;YACvB,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;QAEhC,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBAC9C,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,oBAAoB,EAClB,IAAI,CAAC,oBAAoB,KAAK,IAAI;oBAClC,IAAI,CAAC,oBAAoB,KAAK,MAAM;gBACtC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;aACvD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,gBAAgB,IAAI,CAAC,aAAa,EAAE,CAAC;YACxC,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,cAAc;IACd,IAAI,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAqC,EACrC,IAAiC,EACjC,OAAO,GAAiC,EAAE;IAE1C,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,KAAK;QACxB,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,CAAC,IAAI;YACL,CAAC,MAAM,aAAa,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;iBACtC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC;iBACtC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,WAAW,GACf,OAAO,CAAC,cAAc,KAAK,KAAK;QAC9B,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;QACjD,CAAC,CAAC,GAAG,CAAC;IACV,OAAO;QACL,GAAG,WAAW;QACd,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,KAAK;YACZ,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,YAAY;gBACZ,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACrD,CAAC,CAAC,KAAK;QACX,SAAS,EAAE,KAAK;YACd,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,YAAY;gBACZ,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC3C,CAAC,CAAC,KAAK;QACX,cAAc,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;KACrC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,KAAc,EACd,WAAmB;IAEnB,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC5D,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACjC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,OAAO;QACL,KAAK,EACH,2LAA2L;QAC7L,MAAM,EAAE,cAAc,CAAC,MAAM;KAC9B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,KAAc,EACd,WAAmB,EACnB,UAAkB,EAClB,SAAiB;IAEjB,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAEvC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,MAAM,UAAU,GAAG,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,UAAU;QACtB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC;QACjD,CAAC,CAAC,GAAG,CAAC;IACR,MAAM,KAAK,GAAG,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC;IACxD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAEhC,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACzD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE;;;;gBAIK;YACV,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC;SAC9C,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE;;;;;gBAKK;YACV,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,EAAE,KAAK,CAAC;SAC/D,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;;;cAIK;QACV,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC;KAClD,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,KAAc,EACd,WAAmB,EACnB,UAAkB,EAClB,SAAiB;IAEjB,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAEvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,UAAU,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAI,GACR,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,wBAAwB,EAAE,CAAC;QAC/D,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,iIAAiI;YACnI,QAAQ,EAAE,wBAAwB;SACnC,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACpD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAEhC,IAAI,KAAK,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,cAAc,GAAG,EAAE;QACvB,CAAC,CAAC;4EACsE;QACxE,CAAC,CAAC;4EACsE,CAAC;IAE3E,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE;;OAEF,cAAc,EAAE;QACnB,IAAI,EAAE;YACJ,UAAU,EAAE;YACZ,WAAW;YACX,UAAU;YACV,MAAM;YACN,IAAI;YACJ,SAAS;YACT,KAAK;YACL,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAM,CAAC,CAAC,CAAC,IAAI;YAC/B,QAAQ;YACR,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,MAAM;QACV,WAAW;QACX,UAAU;QACV,IAAI;QACJ,UAAU,EAAE,SAAS;QACrB,KAAK;QACL,KAAK,EAAE,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACrC,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,KAAc,EACd,WAAmB,EACnB,UAAkB,EAClB,MAAc,EACd,SAAiB;IAEjB,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAEvC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,MAAM,KAAK,GAAG,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC;IACxD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACzD,CAAC;QACD,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,EAAE,2HAA2H;YAChI,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC;SAC/C,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,wIAAwI;QAC7I,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC;KACnD,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,KAAc,EACd,WAAmB,EACnB,OAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE;oBACR,KAAK,EAAE,YAAY,OAAO,sBAAsB,WAAW,UAAU,MAAM,CAAC,IAAI,GAAG;iBACpF;aACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC5D,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YACrD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,EAAE,KAAK,EAAE,8CAA8C,EAAE;aACpE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,KAAc,EACd,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;IACxB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,gFAAgF;SACnF,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAA2B,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;IAE1B,IAAI,WAAW,GAAG,MAAM,CAAC;IACzB,uEAAuE;IACvE,yEAAyE;IACzE,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,aAAa,GAA2B,EAAE,CAAC;IACjD,IAAI,YAAY,GAAG,OAAO,CAAC;IAC3B,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,eAAe,GAA2B,EAAE,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,qCAAqC,CAC3D,MAAM,EACN,SAAS,CACV,CAAC;QACF,WAAW,GAAG,SAAS,CAAC,QAAQ,CAAC;QACjC,eAAe,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;QAChD,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;QAExD,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAClD,MAAM,YAAY,GAAG,MAAM,qCAAqC,CAC9D,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EACxC,SAAS,CACV,CAAC;YACF,aAAa,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC;YAC1C,eAAe,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;YACnD,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,UAAU,GAAG,MAAM,qCAAqC,CAC5D,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAC/D,SAAS,CACV,CAAC;YACF,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;YACnC,eAAe,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;YACjD,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,0BAA0B,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,YAAY,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;IAE1D,IAAI,MAAM,4BAA4B,CAAC,WAAW,CAAC,EAAE,CAAC;QACpD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QAC3B,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE;QACzC,GAAG;KACJ,CAAC,CACH,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;YAClD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,KAAK,EAAE,QAAQ,MAAM,CAAC,IAAI,sCAAsC;aACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAC;IAEvD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAE7D,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,8EAA8E;IAC9E,0EAA0E;IAC1E,yDAAyD;IACzD,MAAM,UAAU,GAAG,CAAC,MAAM,wBAAwB,EAAE,CAAC,IAAI,SAAS,CAAC;IAEnE,IAAI,CAAC;QACH,MAAM,SAAS,GAA2C;YACxD,MAAM;YACN,OAAO;YACP,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,QAAQ,EAAE,QAAQ;SACnB,CAAC;QACF,IAAI,UAAU;YAAE,SAAS,CAAC,UAAU,GAAG,UAAU,CAAC;QAClD,IAAI,YAAY,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,MAAM,YAAY,GAAG,OAAO,YAAY,KAAK,QAAQ,CAAC;YACtD,SAAS,CAAC,IAAI,GAAG,YAAY;gBAC3B,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACjC,kEAAkE;YAClE,qEAAqE;YACrE,qEAAqE;YACrE,+DAA+D;YAC/D,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,cAAc,CAC1C,CAAC;YACF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,YAAY,GAChB,CAAC,YAAY;oBACb,CAAC,OAAO,YAAY,KAAK,QAAQ;wBAC/B,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;wBAC7B,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;gBAChC,IAAI,YAAY;oBAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YACjE,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAErD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1E,IAAI,WAAW,IAAI,CAAC,MAAM,4BAA4B,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;gBACrE,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC;YACnE,CAAC;YACD,IAAI,WAAW,EAAE,CAAC;gBAChB,KAAK,MAAM,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,EAAE,CAAC;oBACjD,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC;oBACxD,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;wBAClD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO;4BACL,KAAK,EAAE,wCAAwC,MAAM,CAAC,IAAI,GAAG;yBAC9D,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI,EAAE;oBACJ,QAAQ,EAAE,WAAW;wBACnB,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC;wBACzC,CAAC,CAAC,QAAQ;iBACb;aACF,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,YAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QAED,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,aAAa,CAAC,YAAY,EAAE,YAAY,CAAC;SAChD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;QACjD,CAAC;QACD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,yBAAyB,aAAa,CAC3C,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAC3B,YAAY,CACb,EAAE;SACJ,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,IAAI,qBAAqB,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAE7D,KAAK,UAAU,gBAAgB,CAC7B,EAAqC,EACrC,IAAc;IAEd,MAAM,eAAe,GAAG,qBAAqB,CAAC;IAC9C,IAAI,cAA2B,CAAC;IAChC,qBAAqB,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACpD,cAAc,GAAG,OAAO,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,CAAC;IAEtB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC;IAChC,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;IAC7C,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,CAAY,EAAE,EAAE;QAChC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC;IACF,OAAO,CAAC,KAAK,GAAG,CAAC,GAAG,CAAY,EAAE,EAAE;QAClC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAU,EAAE,EAAE;QACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aAC3C,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC,CAAQ,CAAC;IACV,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC;QACtB,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,eAAe,CAAC;QACvC,cAAc,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAAc;IAC1C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,cAAc,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAC;QAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,6DAA6D;SACrE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YAC5C,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,cAAc,EAAE,CAAC;IACnD,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAC7B,kcAAkc,CAAC;AAErc,iFAAiF;AACjF,0EAA0E;AAC1E,uEAAuE;AACvE,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAC3B,4mBAA4mB,CAAC;AAE/mB,8EAA8E;AAC9E,8EAA8E;AAC9E,wEAAwE;AACxE,4DAA4D;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAC/B,+CAA+C,CAAC;AAElD,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,GAAW;IACpD,MAAM,SAAS,GAAG,GAAG;SAClB,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;SACjC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,GAAG;SACpB,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC5B,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAc;IACzC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,cAAc,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC;QAC5C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,oEAAoE;SACvE,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAC;QAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,6DAA6D;SACrE,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,oBAAoB,EAAE,GAAG,CAAC,EAAE,CAAC;QAC9C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,2HAA2H;SAC9H,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YAC5C,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,aAAa,EAAE,CAAC;IAClD,CAAC;AACH,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\n\nimport {\n  defineEventHandler,\n  getMethod,\n  setResponseStatus,\n  setResponseHeader,\n  type H3Event,\n} from \"h3\";\n\nimport { getDbExec, isPostgres } from \"../db/client.js\";\nimport { getOrgContext } from \"../org/context.js\";\nimport {\n  resolveKeyReferencesWithRequestScopes,\n  validateUrlAllowlist,\n  getResolvedKeyAllowlist,\n  type ResolvedKeyReference,\n} from \"../secrets/substitution.js\";\nimport { getSession } from \"../server/auth.js\";\nimport { readBody } from \"../server/h3-helpers.js\";\nimport {\n  runWithRequestContext,\n  getRequestOrgId,\n} from \"../server/request-context.js\";\nimport { ForbiddenError, resolveAccess } from \"../sharing/access.js\";\nimport { ROLE_RANK, type ShareRole } from \"../sharing/schema.js\";\nimport { ExtensionContentEditError } from \"./content-patch.js\";\nimport { buildExtensionHtml, EXTENSION_IFRAME_CSP } from \"./html-shell.js\";\nimport {\n  getLocalExtension,\n  isLocalExtensionRow,\n  listLocalExtensions,\n  type LocalExtensionRow,\n} from \"./local.js\";\nimport {\n  collectSecretValues,\n  normalizeExtensionProxyMethod,\n  readResponseTextWithLimit,\n  redactSecrets,\n  redactString,\n  sanitizeOutboundHeaders,\n} from \"./proxy-security.js\";\nimport {\n  listExtensions,\n  getExtension,\n  getExtensionHistoryVersion,\n  listExtensionHistory,\n  createExtension,\n  updateExtension,\n  updateExtensionContent,\n  restoreExtensionHistoryVersion,\n  deleteExtension,\n  hideExtension,\n  unhideExtension,\n  globalHideExtension,\n  globalUnhideExtension,\n  ensureExtensionsTables,\n  type ExtensionRow,\n} from \"./store.js\";\nimport { getThemeVars } from \"./theme.js\";\nimport {\n  createSsrfSafeDispatcher,\n  isBlockedExtensionUrlWithDns,\n} from \"./url-safety.js\";\n\nexport function createExtensionsHandler() {\n  return defineEventHandler(async (event: H3Event) => {\n    const method = getMethod(event);\n    const pathname = (event.url?.pathname || \"\")\n      .replace(/^\\/+/, \"\")\n      .replace(/\\/+$/, \"\");\n    const parts = pathname\n      ? pathname.split(\"/\").map((part) => {\n          try {\n            return decodeURIComponent(part);\n          } catch {\n            return part;\n          }\n        })\n      : [];\n\n    const session = await getSession(event).catch(() => null);\n    if (!session?.email) {\n      setResponseStatus(event, 401);\n      return { error: \"Authentication required\" };\n    }\n\n    const orgCtx = await getOrgContext(event).catch(() => null);\n    const userEmail = normalizeExtensionUserEmail(session.email);\n    if (!userEmail) {\n      setResponseStatus(event, 401);\n      return { error: \"Authentication required\" };\n    }\n    const orgId = orgCtx?.orgId ?? session.orgId ?? undefined;\n\n    try {\n      return await runWithRequestContext({ userEmail, orgId }, async () => {\n        await ensureExtensionsTables();\n        return dispatch(event, method, parts, userEmail);\n      });\n    } catch (err) {\n      if (err instanceof ForbiddenError) {\n        setResponseStatus(event, 403);\n        return { error: err.message };\n      }\n      if (err instanceof ExtensionContentEditError) {\n        setResponseStatus(event, 400);\n        return { error: err.message, errorCode: err.code };\n      }\n      throw err;\n    }\n  });\n}\n\nconst MAX_EXTENSION_DATA_BYTES = 1024 * 1024;\n\nfunction normalizeExtensionUserEmail(email: string): string {\n  return email.trim().toLowerCase();\n}\n\nasync function dispatch(\n  event: H3Event,\n  method: string,\n  parts: string[],\n  userEmail: string,\n): Promise<unknown> {\n  // POST /sql/query — read-only SQL for extension iframes\n  if (\n    method === \"POST\" &&\n    parts.length === 2 &&\n    parts[0] === \"sql\" &&\n    parts[1] === \"query\"\n  ) {\n    return handleSqlQuery(event);\n  }\n\n  // POST /sql/exec — write SQL for extension iframes\n  if (\n    method === \"POST\" &&\n    parts.length === 2 &&\n    parts[0] === \"sql\" &&\n    parts[1] === \"exec\"\n  ) {\n    return handleSqlExec(event);\n  }\n\n  // GET /data/:extensionId/:collection — list items in a collection\n  if (method === \"GET\" && parts.length === 3 && parts[0] === \"data\") {\n    return handleExtensionDataList(event, parts[1], parts[2], userEmail);\n  }\n\n  // POST /data/:extensionId/:collection — create/upsert an item\n  if (method === \"POST\" && parts.length === 3 && parts[0] === \"data\") {\n    return handleExtensionDataUpsert(event, parts[1], parts[2], userEmail);\n  }\n\n  // DELETE /data/:extensionId/:collection/:itemId — delete an item\n  if (method === \"DELETE\" && parts.length === 4 && parts[0] === \"data\") {\n    return handleExtensionDataDelete(\n      event,\n      parts[1],\n      parts[2],\n      parts[3],\n      userEmail,\n    );\n  }\n\n  // POST /proxy\n  if (method === \"POST\" && parts.length === 1 && parts[0] === \"proxy\") {\n    return handleProxy(event, userEmail);\n  }\n\n  // GET / — list. `?includeGloballyHidden=true` surfaces extensions an\n  // admin/owner has globally hidden (so they can be unhidden for everyone).\n  if (method === \"GET\" && parts.length === 0) {\n    const includeGloballyHidden =\n      event.url?.searchParams?.get(\"includeGloballyHidden\") === \"true\";\n    const includeContent =\n      event.url?.searchParams?.get(\"includeContent\") === \"true\";\n    const rows = await listExtensions({ includeGloballyHidden });\n    const localRows = includeGloballyHidden ? [] : await listLocalExtensions();\n    return Promise.all(\n      [...rows, ...localRows].map((row) =>\n        extensionResponse(row, undefined, { includeContent }),\n      ),\n    );\n  }\n\n  // POST / — create\n  if (method === \"POST\" && parts.length === 0) {\n    const body = await readBody(event);\n    if (!body.name) {\n      setResponseStatus(event, 400);\n      return { error: \"name is required\" };\n    }\n    const extension = await createExtension(body);\n    setResponseStatus(event, 201);\n    return extension;\n  }\n\n  // GET /:id/render\n  if (method === \"GET\" && parts.length === 2 && parts[1] === \"render\") {\n    const localExtension = await getLocalExtension(parts[0]);\n    if (localExtension) {\n      const search = event.url?.search || \"\";\n      const isDark = search.includes(\"dark=1\") || search.includes(\"dark=true\");\n      const themeVars = getThemeVars(isDark);\n      const html = buildExtensionHtml(\n        localExtension.content,\n        themeVars,\n        isDark,\n        parts[0],\n        {\n          authorEmail: localExtension.ownerEmail,\n          viewerEmail: userEmail,\n          isAuthor: false,\n          role: \"viewer\",\n          source: \"local-files\",\n          permissions: localExtension.source.permissions,\n        },\n      );\n      setResponseHeader(event, \"Content-Type\", \"text/html; charset=utf-8\");\n      setResponseHeader(event, \"Content-Security-Policy\", EXTENSION_IFRAME_CSP);\n      setResponseHeader(event, \"X-Content-Type-Options\", \"nosniff\");\n      setResponseHeader(event, \"Referrer-Policy\", \"no-referrer\");\n      return html;\n    }\n\n    const access = await resolveAccess(\"extension\", parts[0]);\n    const extension = access?.resource;\n    if (!extension) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    const search = event.url?.search || \"\";\n    const isDark = search.includes(\"dark=1\") || search.includes(\"dark=true\");\n    const themeVars = getThemeVars(isDark);\n    // Compute viewer-vs-author binding so the iframe can warn when the\n    // viewer is NOT the author. The role is plumbed through to gate\n    // dangerous bridge helpers in iframe-bridge.ts (audit H4).\n    const isAuthor = extension.ownerEmail === userEmail;\n\n    const html = buildExtensionHtml(\n      extension.content,\n      themeVars,\n      isDark,\n      parts[0],\n      {\n        authorEmail: extension.ownerEmail,\n        viewerEmail: userEmail,\n        isAuthor,\n        role: access.role,\n      },\n    );\n    // Security headers per render. `frame-ancestors` in the CSP must be set as\n    // an HTTP header to be enforced; meta-CSP can't set it per spec.\n    setResponseHeader(event, \"Content-Type\", \"text/html; charset=utf-8\");\n    setResponseHeader(event, \"Content-Security-Policy\", EXTENSION_IFRAME_CSP);\n    setResponseHeader(event, \"X-Content-Type-Options\", \"nosniff\");\n    setResponseHeader(event, \"Referrer-Policy\", \"no-referrer\");\n    return html;\n  }\n\n  // GET /:id/history — list saved snapshots for an extension\n  if (method === \"GET\" && parts.length === 2 && parts[1] === \"history\") {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const limitParam = event.url?.searchParams?.get(\"limit\");\n    const limit =\n      limitParam === null || limitParam === undefined\n        ? undefined\n        : Number(limitParam);\n    const includeContent =\n      event.url?.searchParams?.get(\"includeContent\") === \"true\";\n    return {\n      history: await listExtensionHistory(parts[0], {\n        limit,\n        includeContent,\n      }),\n    };\n  }\n\n  // GET /:id/history/:version — fetch one snapshot plus its previous-version diff\n  if (method === \"GET\" && parts.length === 3 && parts[1] === \"history\") {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const detail = await getExtensionHistoryVersion(parts[0], parts[2]);\n    if (!detail) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension history version not found\" };\n    }\n    return detail;\n  }\n\n  // POST /:id/history/:version/restore — restore display metadata + content\n  if (\n    method === \"POST\" &&\n    parts.length === 4 &&\n    parts[1] === \"history\" &&\n    parts[3] === \"restore\"\n  ) {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const restored = await restoreExtensionHistoryVersion(parts[0], parts[2]);\n    if (!restored) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension history version not found\" };\n    }\n    return extensionResponse(restored);\n  }\n\n  // GET /:id\n  if (method === \"GET\" && parts.length === 1) {\n    const localExtension = await getLocalExtension(parts[0]);\n    if (localExtension) {\n      return extensionResponse(localExtension, \"viewer\");\n    }\n\n    const access = await resolveAccess(\"extension\", parts[0]);\n    if (!access) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    return extensionResponse(access.resource as ExtensionRow, access.role);\n  }\n\n  // POST /:id/hide — remove from the current user's Extensions list/sidebar\n  // without deleting the underlying extension for teammates or shared slots.\n  if (method === \"POST\" && parts.length === 2 && parts[1] === \"hide\") {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const ok = await hideExtension(parts[0]);\n    if (!ok) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    return { ok: true, hidden: true };\n  }\n\n  // POST /:id/unhide — restore an extension hidden by the current user.\n  if (method === \"POST\" && parts.length === 2 && parts[1] === \"unhide\") {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const ok = await unhideExtension(parts[0]);\n    if (!ok) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    return { ok: true, hidden: false };\n  }\n\n  // POST /:id/global-hide — admin/owner hides the extension from EVERYONE.\n  if (method === \"POST\" && parts.length === 2 && parts[1] === \"global-hide\") {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const ok = await globalHideExtension(parts[0]);\n    if (!ok) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    return { ok: true, globallyHidden: true };\n  }\n\n  // POST /:id/global-unhide — admin/owner reverses a global hide.\n  if (method === \"POST\" && parts.length === 2 && parts[1] === \"global-unhide\") {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const ok = await globalUnhideExtension(parts[0]);\n    if (!ok) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    return { ok: true, globallyHidden: false };\n  }\n\n  // PUT /:id\n  if (method === \"PUT\" && parts.length === 1) {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const body = await readBody(event);\n    if (\n      typeof body.visibility === \"string\" &&\n      body.visibility.trim().toLowerCase() === \"public\"\n    ) {\n      setResponseStatus(event, 403);\n      return {\n        error:\n          \"Extensions cannot be made public — use private or org visibility instead. No content changes were applied.\",\n      };\n    }\n    const hasContentUpdate =\n      body.content !== undefined ||\n      body.patches !== undefined ||\n      body.edits !== undefined ||\n      body.format !== undefined;\n    const hasMetaUpdate =\n      body.name !== undefined ||\n      body.description !== undefined ||\n      body.icon !== undefined ||\n      body.visibility !== undefined;\n\n    let result = null;\n    if (hasContentUpdate) {\n      result = await updateExtensionContent(parts[0], {\n        content: body.content,\n        allowFullReplacement:\n          body.allowFullReplacement === true ||\n          body.allowFullReplacement === \"true\",\n        patches: body.patches,\n        edits: body.edits,\n        format: body.format === true || body.format === \"true\",\n      });\n    }\n    if (hasMetaUpdate) {\n      result = await updateExtension(parts[0], body);\n    }\n    if (!hasContentUpdate && !hasMetaUpdate) {\n      result = await getExtension(parts[0]);\n    }\n    if (!result) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    return result;\n  }\n\n  // DELETE /:id\n  if (method === \"DELETE\" && parts.length === 1) {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const ok = await deleteExtension(parts[0]);\n    if (!ok) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    return { ok: true };\n  }\n\n  setResponseStatus(event, 404);\n  return { error: \"Not found\" };\n}\n\nasync function extensionResponse(\n  row: ExtensionRow | LocalExtensionRow,\n  role?: \"owner\" | ShareRole | null,\n  options: { includeContent?: boolean } = {},\n) {\n  const local = isLocalExtensionRow(row);\n  const resolvedRole = local\n    ? \"viewer\"\n    : (role ??\n      (await resolveAccess(\"extension\", row.id)\n        .then((access) => access?.role ?? null)\n        .catch(() => null)));\n  const responseRow =\n    options.includeContent === false\n      ? (({ content: _content, ...rest }) => rest)(row)\n      : row;\n  return {\n    ...responseRow,\n    role: resolvedRole,\n    canEdit: local\n      ? false\n      : resolvedRole\n        ? [\"owner\", \"admin\", \"editor\"].includes(resolvedRole)\n        : false,\n    canDelete: local\n      ? false\n      : resolvedRole\n        ? [\"owner\", \"admin\"].includes(resolvedRole)\n        : false,\n    globallyHidden: row.hiddenAt != null,\n  };\n}\n\nasync function localExtensionSqlOnlyResponse(\n  event: H3Event,\n  extensionId: string,\n): Promise<unknown | null> {\n  const localExtension = await getLocalExtension(extensionId);\n  if (!localExtension) return null;\n  setResponseStatus(event, 400);\n  return {\n    error:\n      \"This extension is backed by local files. Edit its extension.json or entry file in the workspace; SQL-backed extension history, sharing, hide, update, and delete operations do not apply.\",\n    source: localExtension.source,\n  };\n}\n\nasync function handleExtensionDataList(\n  event: H3Event,\n  extensionId: string,\n  collection: string,\n  userEmail: string,\n): Promise<unknown> {\n  await ensureExtensionsTables();\n  const access = await requireExtensionDataAccess(event, extensionId, \"viewer\");\n  if (!access.ok) return access.response;\n\n  const client = getDbExec();\n  const url = event.url;\n  const limitParam = url?.searchParams?.get(\"limit\");\n  const limit = limitParam\n    ? Math.min(Math.max(1, Number(limitParam)), 1000)\n    : 100;\n  const scope = url?.searchParams?.get(\"scope\") || \"user\";\n  const orgId = getRequestOrgId();\n\n  if (scope === \"org\") {\n    if (!orgId) {\n      setResponseStatus(event, 400);\n      return { error: \"Org context required for scope=org\" };\n    }\n    const result = await client.execute({\n      sql: `SELECT COALESCE(item_id, id) AS id, tool_id, collection, data, owner_email, scope, org_id, created_at, updated_at\n        FROM tool_data\n        WHERE tool_id = ? AND collection = ? AND scope = 'org' AND org_id = ?\n        ORDER BY created_at DESC\n        LIMIT ?`,\n      args: [extensionId, collection, orgId, limit],\n    });\n    return result.rows ?? [];\n  }\n\n  if (scope === \"all\") {\n    const result = await client.execute({\n      sql: `SELECT COALESCE(item_id, id) AS id, tool_id, collection, data, owner_email, scope, org_id, created_at, updated_at\n        FROM tool_data\n        WHERE tool_id = ? AND collection = ?\n          AND ((scope = 'user' AND lower(owner_email) = ?) OR (scope = 'org' AND org_id = ?))\n        ORDER BY created_at DESC\n        LIMIT ?`,\n      args: [extensionId, collection, userEmail, orgId ?? \"\", limit],\n    });\n    return result.rows ?? [];\n  }\n\n  const result = await client.execute({\n    sql: `SELECT COALESCE(item_id, id) AS id, tool_id, collection, data, owner_email, scope, org_id, created_at, updated_at\n      FROM tool_data\n      WHERE tool_id = ? AND collection = ? AND scope = 'user' AND lower(owner_email) = ?\n      ORDER BY updated_at DESC\n      LIMIT ?`,\n    args: [extensionId, collection, userEmail, limit],\n  });\n  return result.rows ?? [];\n}\n\nasync function handleExtensionDataUpsert(\n  event: H3Event,\n  extensionId: string,\n  collection: string,\n  userEmail: string,\n): Promise<unknown> {\n  await ensureExtensionsTables();\n  const access = await requireExtensionDataAccess(event, extensionId, \"editor\");\n  if (!access.ok) return access.response;\n\n  const body = await readBody(event);\n  if (body.data === undefined) {\n    setResponseStatus(event, 400);\n    return { error: \"data is required\" };\n  }\n  const itemId = String(body.id || randomUUID());\n  const data =\n    typeof body.data === \"string\" ? body.data : JSON.stringify(body.data);\n  if (Buffer.byteLength(data, \"utf8\") > MAX_EXTENSION_DATA_BYTES) {\n    setResponseStatus(event, 413);\n    return {\n      error:\n        \"Extension data is too large for SQL storage. Store large files, base64, or blobs in file storage and save only a URL or handle.\",\n      maxBytes: MAX_EXTENSION_DATA_BYTES,\n    };\n  }\n  const now = new Date().toISOString();\n  const scope = body.scope === \"org\" ? \"org\" : \"user\";\n  const orgId = getRequestOrgId();\n\n  if (scope === \"org\" && !orgId) {\n    setResponseStatus(event, 400);\n    return { error: \"Org context required for scope=org\" };\n  }\n\n  const scopeKey = scope === \"org\" ? `org:${orgId}` : userEmail;\n  const client = getDbExec();\n  const pg = isPostgres();\n  const conflictClause = pg\n    ? `ON CONFLICT (tool_id, collection, scope_key, item_id)\n       DO UPDATE SET data = EXCLUDED.data, updated_at = EXCLUDED.updated_at`\n    : `ON CONFLICT (tool_id, collection, scope_key, item_id)\n       DO UPDATE SET data = excluded.data, updated_at = excluded.updated_at`;\n\n  await client.execute({\n    sql: `INSERT INTO tool_data (id, tool_id, collection, item_id, data, owner_email, scope, org_id, scope_key, created_at, updated_at)\n     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n     ${conflictClause}`,\n    args: [\n      randomUUID(),\n      extensionId,\n      collection,\n      itemId,\n      data,\n      userEmail,\n      scope,\n      scope === \"org\" ? orgId! : null,\n      scopeKey,\n      now,\n      now,\n    ],\n  });\n  return {\n    id: itemId,\n    extensionId,\n    collection,\n    data,\n    ownerEmail: userEmail,\n    scope,\n    orgId: scope === \"org\" ? orgId : null,\n    createdAt: now,\n    updatedAt: now,\n  };\n}\n\nasync function handleExtensionDataDelete(\n  event: H3Event,\n  extensionId: string,\n  collection: string,\n  itemId: string,\n  userEmail: string,\n): Promise<unknown> {\n  await ensureExtensionsTables();\n  const access = await requireExtensionDataAccess(event, extensionId, \"editor\");\n  if (!access.ok) return access.response;\n\n  const url = event.url;\n  const scope = url?.searchParams?.get(\"scope\") || \"user\";\n  const orgId = getRequestOrgId();\n  const client = getDbExec();\n\n  if (scope === \"org\") {\n    if (!orgId) {\n      setResponseStatus(event, 400);\n      return { error: \"Org context required for scope=org\" };\n    }\n    await client.execute({\n      sql: `DELETE FROM tool_data WHERE COALESCE(item_id, id) = ? AND tool_id = ? AND collection = ? AND scope = 'org' AND org_id = ?`,\n      args: [itemId, extensionId, collection, orgId],\n    });\n    return { ok: true };\n  }\n\n  await client.execute({\n    sql: `DELETE FROM tool_data WHERE COALESCE(item_id, id) = ? AND tool_id = ? AND collection = ? AND scope = 'user' AND lower(owner_email) = ?`,\n    args: [itemId, extensionId, collection, userEmail],\n  });\n  return { ok: true };\n}\n\nasync function requireExtensionDataAccess(\n  event: H3Event,\n  extensionId: string,\n  minRole: ShareRole,\n): Promise<{ ok: true } | { ok: false; response: unknown }> {\n  const access = await resolveAccess(\"extension\", extensionId);\n  if (access) {\n    if (ROLE_RANK[access.role] < ROLE_RANK[minRole]) {\n      setResponseStatus(event, 403);\n      return {\n        ok: false,\n        response: {\n          error: `Requires ${minRole} role on extension ${extensionId} (have ${access.role})`,\n        },\n      };\n    }\n    return { ok: true };\n  }\n\n  const localExtension = await getLocalExtension(extensionId);\n  if (localExtension) {\n    if (!localExtension.source.permissions.extensionData) {\n      setResponseStatus(event, 403);\n      return {\n        ok: false,\n        response: { error: \"extensionData is disabled for this extension\" },\n      };\n    }\n    return { ok: true };\n  }\n\n  setResponseStatus(event, 404);\n  return { ok: false, response: { error: \"Extension not found\" } };\n}\n\nasync function handleProxy(\n  event: H3Event,\n  userEmail: string,\n): Promise<unknown> {\n  const body = await readBody(event);\n  const rawUrl = body.url;\n  if (!rawUrl || typeof rawUrl !== \"string\") {\n    setResponseStatus(event, 400);\n    return { error: \"url is required\" };\n  }\n\n  const method = normalizeExtensionProxyMethod(body.method || \"GET\");\n  if (!method) {\n    setResponseStatus(event, 405);\n    return {\n      error:\n        \"Unsupported HTTP method. Allowed methods: GET, POST, PUT, PATCH, DELETE, HEAD.\",\n    };\n  }\n  const rawHeaders: Record<string, string> = body.headers || {};\n  const rawBody = body.body;\n\n  let resolvedUrl = rawUrl;\n  // Resolve secret references per header value rather than over a single\n  // JSON.stringify(headers) blob. A secret value containing a double-quote\n  // would corrupt that JSON, the later JSON.parse would throw, and the request\n  // would silently fall back to the *unresolved* headers (placeholders intact).\n  const parsedHeaders: Record<string, string> = {};\n  let resolvedBody = rawBody;\n  const allSecretValues: string[] = [];\n  const allResolvedKeys: ResolvedKeyReference[] = [];\n\n  try {\n    const urlResult = await resolveKeyReferencesWithRequestScopes(\n      rawUrl,\n      userEmail,\n    );\n    resolvedUrl = urlResult.resolved;\n    allSecretValues.push(...urlResult.secretValues);\n    allResolvedKeys.push(...(urlResult.resolvedKeys ?? []));\n\n    for (const [hk, hv] of Object.entries(rawHeaders)) {\n      const headerResult = await resolveKeyReferencesWithRequestScopes(\n        typeof hv === \"string\" ? hv : String(hv),\n        userEmail,\n      );\n      parsedHeaders[hk] = headerResult.resolved;\n      allSecretValues.push(...headerResult.secretValues);\n      allResolvedKeys.push(...(headerResult.resolvedKeys ?? []));\n    }\n\n    if (rawBody) {\n      const bodyResult = await resolveKeyReferencesWithRequestScopes(\n        typeof rawBody === \"string\" ? rawBody : JSON.stringify(rawBody),\n        userEmail,\n      );\n      resolvedBody = bodyResult.resolved;\n      allSecretValues.push(...bodyResult.secretValues);\n      allResolvedKeys.push(...(bodyResult.resolvedKeys ?? []));\n    }\n  } catch (err: any) {\n    setResponseStatus(event, 400);\n    return { error: `Key resolution failed: ${err?.message ?? err}` };\n  }\n  const secretValues = collectSecretValues(allSecretValues);\n\n  if (await isBlockedExtensionUrlWithDns(resolvedUrl)) {\n    setResponseStatus(event, 403);\n    return { error: \"Requests to private/internal addresses are not allowed\" };\n  }\n\n  const uniqueResolvedKeys = new Map(\n    allResolvedKeys.map((ref) => [\n      `${ref.name}:${ref.scope}:${ref.scopeId}`,\n      ref,\n    ]),\n  );\n  for (const keyRef of uniqueResolvedKeys.values()) {\n    const allowlist = await getResolvedKeyAllowlist(keyRef);\n    if (!validateUrlAllowlist(resolvedUrl, allowlist)) {\n      setResponseStatus(event, 403);\n      return {\n        error: `Key \"${keyRef.name}\" is not allowed for this URL origin`,\n      };\n    }\n  }\n\n  const headers = sanitizeOutboundHeaders(parsedHeaders);\n\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), 15_000);\n\n  // Best-effort connect-time SSRF guard. When undici is available (it ships\n  // with Node 18+ but is not always exposed as an importable module), the\n  // dispatcher re-checks the resolved IP at TCP-connect time, closing the\n  // TOCTOU between the pre-flight `isBlockedExtensionUrlWithDns` lookup and the\n  // actual fetch lookup. If undici is not importable, fall through to plain\n  // fetch — the pre-flight remains the primary protection.\n  const dispatcher = (await createSsrfSafeDispatcher()) ?? undefined;\n\n  try {\n    const fetchOpts: RequestInit & { dispatcher?: unknown } = {\n      method,\n      headers,\n      signal: controller.signal,\n      redirect: \"manual\",\n    };\n    if (dispatcher) fetchOpts.dispatcher = dispatcher;\n    if (resolvedBody && [\"POST\", \"PUT\", \"PATCH\"].includes(method)) {\n      const isStringBody = typeof resolvedBody === \"string\";\n      fetchOpts.body = isStringBody\n        ? resolvedBody\n        : JSON.stringify(resolvedBody);\n      // Only inject Content-Type when (a) the caller didn't set one and\n      // (b) the body is actually JSON-shaped (object or stringified JSON).\n      // Otherwise leave it unset so the runtime fetch picks an appropriate\n      // default and we don't misrepresent text/plain bodies as JSON.\n      const hasContentType = Object.keys(headers).some(\n        (k) => k.toLowerCase() === \"content-type\",\n      );\n      if (!hasContentType) {\n        const isJsonShaped =\n          !isStringBody ||\n          (typeof resolvedBody === \"string\" &&\n            /^\\s*[{[]/.test(resolvedBody) &&\n            isLikelyJson(resolvedBody));\n        if (isJsonShaped) headers[\"Content-Type\"] = \"application/json\";\n      }\n    }\n\n    const response = await fetch(resolvedUrl, fetchOpts);\n\n    if (response.status >= 300 && response.status < 400) {\n      const location = response.headers.get(\"location\");\n      const redirectUrl = location ? new URL(location, resolvedUrl).href : null;\n      if (redirectUrl && (await isBlockedExtensionUrlWithDns(redirectUrl))) {\n        setResponseStatus(event, 403);\n        return { error: \"Redirect to private/internal address blocked\" };\n      }\n      if (redirectUrl) {\n        for (const keyRef of uniqueResolvedKeys.values()) {\n          const allowlist = await getResolvedKeyAllowlist(keyRef);\n          if (!validateUrlAllowlist(redirectUrl, allowlist)) {\n            setResponseStatus(event, 403);\n            return {\n              error: `Redirect URL is not allowed for key \"${keyRef.name}\"`,\n            };\n          }\n        }\n      }\n      return {\n        status: response.status,\n        body: {\n          redirect: redirectUrl\n            ? redactString(redirectUrl, secretValues)\n            : location,\n        },\n      };\n    }\n\n    const { text } = await readResponseTextWithLimit(response);\n    let responseBody: unknown;\n    try {\n      responseBody = JSON.parse(text);\n    } catch {\n      responseBody = text;\n    }\n\n    return {\n      status: response.status,\n      body: redactSecrets(responseBody, secretValues),\n    };\n  } catch (err: any) {\n    if (err?.name === \"AbortError\") {\n      setResponseStatus(event, 504);\n      return { error: \"Upstream request timed out\" };\n    }\n    setResponseStatus(event, 502);\n    return {\n      error: `Proxy request failed: ${redactSecrets(\n        err?.message ?? String(err),\n        secretValues,\n      )}`,\n    };\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n\n/**\n * Capture console output from a CLI script that uses console.log for results.\n * Same technique as wrapCliScript in agent-chat-plugin.ts.\n */\nlet captureCliOutputQueue: Promise<void> = Promise.resolve();\n\nasync function captureCliOutput(\n  fn: (args: string[]) => Promise<void>,\n  args: string[],\n): Promise<string> {\n  const previousCapture = captureCliOutputQueue;\n  let releaseCapture!: () => void;\n  captureCliOutputQueue = new Promise<void>((resolve) => {\n    releaseCapture = resolve;\n  });\n  await previousCapture;\n\n  const logs: string[] = [];\n  const origLog = console.log;\n  const origError = console.error;\n  const origStdoutWrite = process.stdout.write;\n  console.log = (...a: unknown[]) => {\n    logs.push(a.map(String).join(\" \"));\n  };\n  console.error = (...a: unknown[]) => {\n    logs.push(a.map(String).join(\" \"));\n  };\n  process.stdout.write = ((chunk: any) => {\n    if (typeof chunk === \"string\") logs.push(chunk);\n    else if (Buffer.isBuffer(chunk)) logs.push(chunk.toString());\n    return true;\n  }) as any;\n  try {\n    await fn(args);\n  } catch (err: any) {\n    logs.push(`Error: ${err?.message ?? String(err)}`);\n  } finally {\n    console.log = origLog;\n    console.error = origError;\n    process.stdout.write = origStdoutWrite;\n    releaseCapture();\n  }\n  return logs.join(\"\\n\") || \"(no output)\";\n}\n\nasync function handleSqlQuery(event: H3Event): Promise<unknown> {\n  const body = await readBody(event);\n  const sql = body.sql;\n  if (!sql || typeof sql !== \"string\") {\n    setResponseStatus(event, 400);\n    return { error: \"sql is required\" };\n  }\n\n  const cleanSql = stripSqlComments(sql);\n  if (!/^\\s*(SELECT|WITH)\\b/i.test(cleanSql)) {\n    setResponseStatus(event, 403);\n    return { error: \"Only SELECT queries are allowed from extensions\" };\n  }\n  if (matchesSqlGate(SENSITIVE_SQL_RE, sql)) {\n    setResponseStatus(event, 403);\n    return {\n      error: \"Sensitive framework tables are not readable from extensions\",\n    };\n  }\n\n  try {\n    const mod = await import(\"../scripts/db/query.js\");\n    const args = [\"--sql\", sql, \"--format\", \"json\"];\n    if (body.limit) args.push(\"--limit\", String(body.limit));\n    if (body.args !== undefined) {\n      if (!Array.isArray(body.args)) {\n        setResponseStatus(event, 400);\n        return { error: \"args must be an array\" };\n      }\n      args.push(\"--args\", JSON.stringify(body.args));\n    }\n    const output = await captureCliOutput(mod.default, args);\n    try {\n      return JSON.parse(output);\n    } catch {\n      return { output };\n    }\n  } catch (err: any) {\n    setResponseStatus(event, 500);\n    return { error: err?.message ?? \"Query failed\" };\n  }\n}\n\n// TODO(security): replace this regex blocklist with a SQL parser + an explicit\n// allowlist of tables a extension may read/write (e.g. only `tool_data`, plus a\n// per-template list). The current blocklist is best-effort defense in depth\n// and is by design bypassable via SQL constructions that don't include the\n// blocklisted token literally (string concat, dynamic SQL, etc). The temp-\n// view scoping in scripts/db/scoping.ts is the actual ownership boundary.\nexport const DESTRUCTIVE_SQL_RE =\n  /\\b(CREATE\\s+(?:(?:LOCAL|GLOBAL)\\s+)?(?:TEMPORARY|TEMP)?\\s*(TABLE|INDEX|VIEW|SCHEMA|DATABASE|TRIGGER|FUNCTION|EXTENSION|ROLE|TABLESPACE|PUBLICATION|SUBSCRIPTION)|DROP\\s+(TABLE|INDEX|VIEW|SCHEMA|DATABASE|TRIGGER|FUNCTION|EXTENSION|ROLE)|TRUNCATE|DELETE\\s+FROM\\s+(?!tool_data\\b)|ALTER\\s+(TABLE|VIEW|SCHEMA|DATABASE|FUNCTION|ROLE|EXTENSION|PUBLICATION)\\s+(?!tool_data\\b)|ATTACH|DETACH|VACUUM|REINDEX|PRAGMA|GRANT|REVOKE|SET\\s+ROLE|RESET\\s+ROLE|COPY)\\b/i;\n\n// Sensitive tables that extensions must not touch directly. Includes Better Auth\n// identity tables, framework infrastructure (tracing, evals, automations,\n// integrations, notifications, scheduling, sharing/orgs), and Postgres\n// catalogs that would let a extension enumerate or read internals.\nexport const SENSITIVE_SQL_RE =\n  /\\b(app_secrets|settings|user|users|session|sessions|account|accounts|verification|oauth_tokens|tools|extensions|tool_shares|tool_slots|tool_slot_installs|tool_hidden_extensions|tool_history|member|organization|invitation|jwks|agent_trace_spans|agent_trace_summaries|agent_feedback|agent_satisfaction_scores|agent_evals|agent_runs|agent_run_events|notifications|progress_runs|integration_configs|integration_pending_tasks|integration_thread_mappings|resources|org_members|org_invitations|bigquery_cache|dashboard_views|pg_catalog|information_schema|pg_class|pg_proc|pg_namespace|pg_user|pg_roles|pg_authid|pg_shadow)\\b/i;\n\n// Refuses positional INSERTs (no column list). `INSERT INTO recordings VALUES\n// (...)` would let a extension stuff arbitrary owner_email values into a row.\n// `INSERT INTO recordings (col1, col2) VALUES (...)` is required so the\n// downstream injectOwnership helper can append owner_email.\nexport const POSITIONAL_INSERT_RE =\n  /\\bINSERT\\s+INTO\\s+[\"'`]?\\w+[\"'`]?\\s+VALUES\\b/i;\n\nfunction stripSqlComments(sql: string): string {\n  return sql.replace(/\\/\\*[\\s\\S]*?\\*\\//g, \" \").replace(/--[^\\n]*/g, \" \");\n}\n\n/**\n * Test a blocklist regex against the SQL with comments normalized two ways, so\n * a comment placed *inside* a keyword can't smuggle a blocked construct past a\n * literal-token match:\n *   - comments → space  catches `DROP /* x *​/ TABLE` (token boundaries kept)\n *   - comments → empty  catches `DR/**​/OP TABLE`     (split keyword rejoined)\n *\n * A statement is refused if EITHER normalization trips the regex. This only\n * ever ADDS matches — it never newly-allows SQL — so it cannot loosen the gate\n * (real extension SQL doesn't embed comments inside keywords, so false-positive\n * risk is negligible). The authoritative ownership boundary remains the\n * fail-closed temp-view scoping in scripts/db/scoping.ts; this stays defense in\n * depth. See the TODO above re: replacing all of this with a real SQL parser.\n */\nexport function matchesSqlGate(re: RegExp, sql: string): boolean {\n  const withSpace = sql\n    .replace(/\\/\\*[\\s\\S]*?\\*\\//g, \" \")\n    .replace(/--[^\\n]*/g, \" \");\n  const withNothing = sql\n    .replace(/\\/\\*[\\s\\S]*?\\*\\//g, \"\")\n    .replace(/--[^\\n]*/g, \"\");\n  return re.test(withSpace) || re.test(withNothing);\n}\n\nfunction isLikelyJson(text: string): boolean {\n  try {\n    const parsed = JSON.parse(text);\n    return parsed !== null && typeof parsed === \"object\";\n  } catch {\n    return false;\n  }\n}\n\nasync function handleSqlExec(event: H3Event): Promise<unknown> {\n  const body = await readBody(event);\n  const sql = body.sql;\n  if (!sql || typeof sql !== \"string\") {\n    setResponseStatus(event, 400);\n    return { error: \"sql is required\" };\n  }\n\n  if (matchesSqlGate(DESTRUCTIVE_SQL_RE, sql)) {\n    setResponseStatus(event, 403);\n    return {\n      error:\n        \"Schema changes and destructive SQL are not allowed from extensions\",\n    };\n  }\n  if (matchesSqlGate(SENSITIVE_SQL_RE, sql)) {\n    setResponseStatus(event, 403);\n    return {\n      error: \"Sensitive framework tables are not writable from extensions\",\n    };\n  }\n  if (matchesSqlGate(POSITIONAL_INSERT_RE, sql)) {\n    setResponseStatus(event, 400);\n    return {\n      error:\n        \"INSERT must specify an explicit column list (e.g. INSERT INTO t (col1, col2) VALUES (?, ?)) so ownership can be injected.\",\n    };\n  }\n\n  try {\n    const mod = await import(\"../scripts/db/exec.js\");\n    const args = [\"--sql\", sql, \"--format\", \"json\"];\n    if (body.args !== undefined) {\n      if (!Array.isArray(body.args)) {\n        setResponseStatus(event, 400);\n        return { error: \"args must be an array\" };\n      }\n      args.push(\"--args\", JSON.stringify(body.args));\n    }\n    const output = await captureCliOutput(mod.default, args);\n    try {\n      return JSON.parse(output);\n    } catch {\n      return { output };\n    }\n  } catch (err: any) {\n    setResponseStatus(event, 500);\n    return { error: err?.message ?? \"Exec failed\" };\n  }\n}\n"]}
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/extensions/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,IAAI,CAAC;AAEZ,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EACL,qCAAqC,EACrC,oBAAoB,EACpB,uBAAuB,GAExB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EACL,qBAAqB,EACrB,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAkB,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,GAEpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,yBAAyB,EACzB,aAAa,EACb,YAAY,EACZ,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EACd,YAAY,EACZ,0BAA0B,EAC1B,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,8BAA8B,EAC9B,eAAe,EACf,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,GAEvB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EACL,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,iBAAiB,CAAC;AAEzB,MAAM,UAAU,uBAAuB;IACrC,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;aACzC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;aACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,QAAQ;YACpB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC/B,IAAI,CAAC;oBACH,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QAC9C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;QAE1D,IAAI,CAAC;YACH,OAAO,MAAM,qBAAqB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;gBAClE,MAAM,sBAAsB,EAAE,CAAC;gBAC/B,OAAO,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;gBAClC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YAChC,CAAC;YACD,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;gBAC7C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,CAAC;AAE7C,SAAS,2BAA2B,CAAC,KAAa;IAChD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,KAAc,EACd,MAAc,EACd,KAAe,EACf,SAAiB;IAEjB,wDAAwD;IACxD,IACE,MAAM,KAAK,MAAM;QACjB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,EACpB,CAAC;QACD,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,mDAAmD;IACnD,IACE,MAAM,KAAK,MAAM;QACjB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EACnB,CAAC;QACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,kEAAkE;IAClE,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAClE,OAAO,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACvE,CAAC;IAED,8DAA8D;IAC9D,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACnE,OAAO,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACzE,CAAC;IAED,iEAAiE;IACjE,IAAI,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACrE,OAAO,yBAAyB,CAC9B,KAAK,EACL,KAAK,CAAC,CAAC,CAAC,EACR,KAAK,CAAC,CAAC,CAAC,EACR,KAAK,CAAC,CAAC,CAAC,EACR,SAAS,CACV,CAAC;IACJ,CAAC;IAED,cAAc;IACd,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACpE,OAAO,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,qEAAqE;IACrE,0EAA0E;IAC1E,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,qBAAqB,GACzB,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,uBAAuB,CAAC,KAAK,MAAM,CAAC;QACnE,MAAM,cAAc,GAClB,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,mBAAmB,EAAE,CAAC;QAC3E,OAAO,OAAO,CAAC,GAAG,CAChB,CAAC,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAClC,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,CAAC,CACtD,CACF,CAAC;IACJ,CAAC;IAED,kBAAkB;IAClB,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QACvC,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QAC9C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,kBAAkB;IAClB,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACpE,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,IAAI,GAAG,kBAAkB,CAC7B,cAAc,CAAC,OAAO,EACtB,SAAS,EACT,MAAM,EACN,KAAK,CAAC,CAAC,CAAC,EACR;gBACE,WAAW,EAAE,cAAc,CAAC,UAAU;gBACtC,WAAW,EAAE,SAAS;gBACtB,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,aAAa;gBACrB,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC,WAAW;aAC/C,CACF,CAAC;YACF,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,0BAA0B,CAAC,CAAC;YACrE,iBAAiB,CAAC,KAAK,EAAE,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;YAC1E,iBAAiB,CAAC,KAAK,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;YAC9D,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,MAAM,EAAE,QAAoC,CAAC;QAC/D,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YAClD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACvC,mEAAmE;QACnE,gEAAgE;QAChE,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC;QAEpD,MAAM,IAAI,GAAG,kBAAkB,CAC7B,SAAS,CAAC,OAAO,EACjB,SAAS,EACT,MAAM,EACN,KAAK,CAAC,CAAC,CAAC,EACR;YACE,WAAW,EAAE,SAAS,CAAC,UAAU;YACjC,WAAW,EAAE,SAAS;YACtB,QAAQ;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CACF,CAAC;QACF,2EAA2E;QAC3E,iEAAiE;QACjE,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,0BAA0B,CAAC,CAAC;QACrE,iBAAiB,CAAC,KAAK,EAAE,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;QAC1E,iBAAiB,CAAC,KAAK,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAC9D,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2DAA2D;IAC3D,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,KAAK,GACT,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS;YAC7C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,cAAc,GAClB,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM,CAAC;QAC5D,OAAO;YACL,OAAO,EAAE,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBAC5C,KAAK;gBACL,cAAc;aACf,CAAC;SACH,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0EAA0E;IAC1E,IACE,MAAM,KAAK,MAAM;QACjB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;QACtB,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EACtB,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,WAAW;IACX,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,iBAAiB,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,MAAM,EAAE,QAAoC,CAAC;QAC/D,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YAClD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACnE,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAED,sEAAsE;IACtE,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC;IAED,yEAAyE;IACzE,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QAC1E,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IAED,gEAAgE;IAChE,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,eAAe,EAAE,CAAC;QAC5E,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,WAAW;IACX,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,IACE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,EACjD,CAAC;YACD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,KAAK,EACH,4GAA4G;aAC/G,CAAC;QACJ,CAAC;QACD,MAAM,gBAAgB,GACpB,IAAI,CAAC,OAAO,KAAK,SAAS;YAC1B,IAAI,CAAC,OAAO,KAAK,SAAS;YAC1B,IAAI,CAAC,KAAK,KAAK,SAAS;YACxB,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;QAC5B,MAAM,aAAa,GACjB,IAAI,CAAC,IAAI,KAAK,SAAS;YACvB,IAAI,CAAC,WAAW,KAAK,SAAS;YAC9B,IAAI,CAAC,IAAI,KAAK,SAAS;YACvB,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;QAEhC,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBAC9C,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,oBAAoB,EAClB,IAAI,CAAC,oBAAoB,KAAK,IAAI;oBAClC,IAAI,CAAC,oBAAoB,KAAK,MAAM;gBACtC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;aACvD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,gBAAgB,IAAI,CAAC,aAAa,EAAE,CAAC;YACxC,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,cAAc;IACd,IAAI,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,aAAa,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAED,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAqC,EACrC,IAAiC,EACjC,OAAO,GAAiC,EAAE;IAE1C,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,KAAK;QACxB,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,CAAC,IAAI;YACL,CAAC,MAAM,aAAa,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;iBACtC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC;iBACtC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,WAAW,GACf,OAAO,CAAC,cAAc,KAAK,KAAK;QAC9B,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;QACjD,CAAC,CAAC,GAAG,CAAC;IACV,OAAO;QACL,GAAG,WAAW;QACd,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,KAAK;YACZ,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,YAAY;gBACZ,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACrD,CAAC,CAAC,KAAK;QACX,SAAS,EAAE,KAAK;YACd,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,YAAY;gBACZ,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC3C,CAAC,CAAC,KAAK;QACX,cAAc,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;KACrC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,KAAc,EACd,WAAmB;IAEnB,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC5D,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACjC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,OAAO;QACL,KAAK,EACH,2LAA2L;QAC7L,MAAM,EAAE,cAAc,CAAC,MAAM;KAC9B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,KAAc,EACd,WAAmB,EACnB,UAAkB,EAClB,SAAiB;IAEjB,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAEvC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,MAAM,UAAU,GAAG,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,UAAU;QACtB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC;QACjD,CAAC,CAAC,GAAG,CAAC;IACR,MAAM,KAAK,GAAG,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC;IACxD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAEhC,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACzD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE;;;;gBAIK;YACV,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC;SAC9C,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE;;;;;gBAKK;YACV,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,EAAE,KAAK,CAAC;SAC/D,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;;;cAIK;QACV,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC;KAClD,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,KAAc,EACd,WAAmB,EACnB,UAAkB,EAClB,SAAiB;IAEjB,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAEvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,UAAU,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAI,GACR,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,wBAAwB,EAAE,CAAC;QAC/D,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,iIAAiI;YACnI,QAAQ,EAAE,wBAAwB;SACnC,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACpD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAEhC,IAAI,KAAK,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,cAAc,GAAG,EAAE;QACvB,CAAC,CAAC;4EACsE;QACxE,CAAC,CAAC;4EACsE,CAAC;IAE3E,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE;;OAEF,cAAc,EAAE;QACnB,IAAI,EAAE;YACJ,UAAU,EAAE;YACZ,WAAW;YACX,UAAU;YACV,MAAM;YACN,IAAI;YACJ,SAAS;YACT,KAAK;YACL,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAM,CAAC,CAAC,CAAC,IAAI;YAC/B,QAAQ;YACR,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,MAAM;QACV,WAAW;QACX,UAAU;QACV,IAAI;QACJ,UAAU,EAAE,SAAS;QACrB,KAAK;QACL,KAAK,EAAE,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACrC,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,KAAc,EACd,WAAmB,EACnB,UAAkB,EAClB,MAAc,EACd,SAAiB;IAEjB,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAEvC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,MAAM,KAAK,GAAG,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC;IACxD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACzD,CAAC;QACD,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,EAAE,2HAA2H;YAChI,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC;SAC/C,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,wIAAwI;QAC7I,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC;KACnD,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,KAAc,EACd,WAAmB,EACnB,OAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,MAAM,EAAE,QAAQ,IAAK,MAAM,CAAC,QAAyB,CAAC,UAAU,EAAE,CAAC;QACrE,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE;oBACR,KAAK,EAAE,YAAY,OAAO,sBAAsB,WAAW,UAAU,MAAM,CAAC,IAAI,GAAG;iBACpF;aACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC5D,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YACrD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,EAAE,KAAK,EAAE,8CAA8C,EAAE;aACpE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,KAAc,EACd,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;IACxB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,gFAAgF;SACnF,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAA2B,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;IAE1B,IAAI,WAAW,GAAG,MAAM,CAAC;IACzB,uEAAuE;IACvE,yEAAyE;IACzE,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,aAAa,GAA2B,EAAE,CAAC;IACjD,IAAI,YAAY,GAAG,OAAO,CAAC;IAC3B,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,eAAe,GAA2B,EAAE,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,qCAAqC,CAC3D,MAAM,EACN,SAAS,CACV,CAAC;QACF,WAAW,GAAG,SAAS,CAAC,QAAQ,CAAC;QACjC,eAAe,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;QAChD,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;QAExD,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAClD,MAAM,YAAY,GAAG,MAAM,qCAAqC,CAC9D,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EACxC,SAAS,CACV,CAAC;YACF,aAAa,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC;YAC1C,eAAe,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;YACnD,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,UAAU,GAAG,MAAM,qCAAqC,CAC5D,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAC/D,SAAS,CACV,CAAC;YACF,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;YACnC,eAAe,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;YACjD,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,0BAA0B,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,YAAY,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;IAE1D,IAAI,MAAM,4BAA4B,CAAC,WAAW,CAAC,EAAE,CAAC;QACpD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QAC3B,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE;QACzC,GAAG;KACJ,CAAC,CACH,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;YAClD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,KAAK,EAAE,QAAQ,MAAM,CAAC,IAAI,sCAAsC;aACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAC;IAEvD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAE7D,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,8EAA8E;IAC9E,0EAA0E;IAC1E,yDAAyD;IACzD,MAAM,UAAU,GAAG,CAAC,MAAM,wBAAwB,EAAE,CAAC,IAAI,SAAS,CAAC;IAEnE,IAAI,CAAC;QACH,MAAM,SAAS,GAA2C;YACxD,MAAM;YACN,OAAO;YACP,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,QAAQ,EAAE,QAAQ;SACnB,CAAC;QACF,IAAI,UAAU;YAAE,SAAS,CAAC,UAAU,GAAG,UAAU,CAAC;QAClD,IAAI,YAAY,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,MAAM,YAAY,GAAG,OAAO,YAAY,KAAK,QAAQ,CAAC;YACtD,SAAS,CAAC,IAAI,GAAG,YAAY;gBAC3B,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACjC,kEAAkE;YAClE,qEAAqE;YACrE,qEAAqE;YACrE,+DAA+D;YAC/D,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,cAAc,CAC1C,CAAC;YACF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,YAAY,GAChB,CAAC,YAAY;oBACb,CAAC,OAAO,YAAY,KAAK,QAAQ;wBAC/B,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;wBAC7B,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;gBAChC,IAAI,YAAY;oBAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YACjE,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAErD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1E,IAAI,WAAW,IAAI,CAAC,MAAM,4BAA4B,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;gBACrE,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC;YACnE,CAAC;YACD,IAAI,WAAW,EAAE,CAAC;gBAChB,KAAK,MAAM,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,EAAE,CAAC;oBACjD,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC;oBACxD,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;wBAClD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO;4BACL,KAAK,EAAE,wCAAwC,MAAM,CAAC,IAAI,GAAG;yBAC9D,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI,EAAE;oBACJ,QAAQ,EAAE,WAAW;wBACnB,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC;wBACzC,CAAC,CAAC,QAAQ;iBACb;aACF,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,YAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QAED,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,aAAa,CAAC,YAAY,EAAE,YAAY,CAAC;SAChD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;QACjD,CAAC;QACD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,yBAAyB,aAAa,CAC3C,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAC3B,YAAY,CACb,EAAE;SACJ,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,IAAI,qBAAqB,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAE7D,KAAK,UAAU,gBAAgB,CAC7B,EAAqC,EACrC,IAAc;IAEd,MAAM,eAAe,GAAG,qBAAqB,CAAC;IAC9C,IAAI,cAA2B,CAAC;IAChC,qBAAqB,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACpD,cAAc,GAAG,OAAO,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,CAAC;IAEtB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC;IAChC,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;IAC7C,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,CAAY,EAAE,EAAE;QAChC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC;IACF,OAAO,CAAC,KAAK,GAAG,CAAC,GAAG,CAAY,EAAE,EAAE;QAClC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAU,EAAE,EAAE;QACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aAC3C,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC,CAAQ,CAAC;IACV,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC;QACtB,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,eAAe,CAAC;QACvC,cAAc,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAAc;IAC1C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,cAAc,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAC;QAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,6DAA6D;SACrE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YAC5C,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,cAAc,EAAE,CAAC;IACnD,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAC7B,kcAAkc,CAAC;AAErc,iFAAiF;AACjF,0EAA0E;AAC1E,uEAAuE;AACvE,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAC3B,4mBAA4mB,CAAC;AAE/mB,8EAA8E;AAC9E,8EAA8E;AAC9E,wEAAwE;AACxE,4DAA4D;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAC/B,+CAA+C,CAAC;AAElD,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,GAAW;IACpD,MAAM,SAAS,GAAG,GAAG;SAClB,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;SACjC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,GAAG;SACpB,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC5B,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAc;IACzC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,cAAc,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC;QAC5C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,oEAAoE;SACvE,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAC;QAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,6DAA6D;SACrE,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,oBAAoB,EAAE,GAAG,CAAC,EAAE,CAAC;QAC9C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,2HAA2H;SAC9H,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YAC5C,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,aAAa,EAAE,CAAC;IAClD,CAAC;AACH,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\n\nimport {\n  defineEventHandler,\n  getMethod,\n  setResponseStatus,\n  setResponseHeader,\n  type H3Event,\n} from \"h3\";\n\nimport { getDbExec, isPostgres } from \"../db/client.js\";\nimport { getOrgContext } from \"../org/context.js\";\nimport {\n  resolveKeyReferencesWithRequestScopes,\n  validateUrlAllowlist,\n  getResolvedKeyAllowlist,\n  type ResolvedKeyReference,\n} from \"../secrets/substitution.js\";\nimport { getSession } from \"../server/auth.js\";\nimport { readBody } from \"../server/h3-helpers.js\";\nimport {\n  runWithRequestContext,\n  getRequestOrgId,\n} from \"../server/request-context.js\";\nimport { ForbiddenError, resolveAccess } from \"../sharing/access.js\";\nimport { ROLE_RANK, type ShareRole } from \"../sharing/schema.js\";\nimport { ExtensionContentEditError } from \"./content-patch.js\";\nimport { buildExtensionHtml, EXTENSION_IFRAME_CSP } from \"./html-shell.js\";\nimport {\n  getLocalExtension,\n  isLocalExtensionRow,\n  listLocalExtensions,\n  type LocalExtensionRow,\n} from \"./local.js\";\nimport {\n  collectSecretValues,\n  normalizeExtensionProxyMethod,\n  readResponseTextWithLimit,\n  redactSecrets,\n  redactString,\n  sanitizeOutboundHeaders,\n} from \"./proxy-security.js\";\nimport {\n  listExtensions,\n  getExtension,\n  getExtensionHistoryVersion,\n  listExtensionHistory,\n  createExtension,\n  updateExtension,\n  updateExtensionContent,\n  restoreExtensionHistoryVersion,\n  deleteExtension,\n  hideExtension,\n  unhideExtension,\n  globalHideExtension,\n  globalUnhideExtension,\n  ensureExtensionsTables,\n  type ExtensionRow,\n} from \"./store.js\";\nimport { getThemeVars } from \"./theme.js\";\nimport {\n  createSsrfSafeDispatcher,\n  isBlockedExtensionUrlWithDns,\n} from \"./url-safety.js\";\n\nexport function createExtensionsHandler() {\n  return defineEventHandler(async (event: H3Event) => {\n    const method = getMethod(event);\n    const pathname = (event.url?.pathname || \"\")\n      .replace(/^\\/+/, \"\")\n      .replace(/\\/+$/, \"\");\n    const parts = pathname\n      ? pathname.split(\"/\").map((part) => {\n          try {\n            return decodeURIComponent(part);\n          } catch {\n            return part;\n          }\n        })\n      : [];\n\n    const session = await getSession(event).catch(() => null);\n    if (!session?.email) {\n      setResponseStatus(event, 401);\n      return { error: \"Authentication required\" };\n    }\n\n    const orgCtx = await getOrgContext(event).catch(() => null);\n    const userEmail = normalizeExtensionUserEmail(session.email);\n    if (!userEmail) {\n      setResponseStatus(event, 401);\n      return { error: \"Authentication required\" };\n    }\n    const orgId = orgCtx?.orgId ?? session.orgId ?? undefined;\n\n    try {\n      return await runWithRequestContext({ userEmail, orgId }, async () => {\n        await ensureExtensionsTables();\n        return dispatch(event, method, parts, userEmail);\n      });\n    } catch (err) {\n      if (err instanceof ForbiddenError) {\n        setResponseStatus(event, 403);\n        return { error: err.message };\n      }\n      if (err instanceof ExtensionContentEditError) {\n        setResponseStatus(event, 400);\n        return { error: err.message, errorCode: err.code };\n      }\n      throw err;\n    }\n  });\n}\n\nconst MAX_EXTENSION_DATA_BYTES = 1024 * 1024;\n\nfunction normalizeExtensionUserEmail(email: string): string {\n  return email.trim().toLowerCase();\n}\n\nasync function dispatch(\n  event: H3Event,\n  method: string,\n  parts: string[],\n  userEmail: string,\n): Promise<unknown> {\n  // POST /sql/query — read-only SQL for extension iframes\n  if (\n    method === \"POST\" &&\n    parts.length === 2 &&\n    parts[0] === \"sql\" &&\n    parts[1] === \"query\"\n  ) {\n    return handleSqlQuery(event);\n  }\n\n  // POST /sql/exec — write SQL for extension iframes\n  if (\n    method === \"POST\" &&\n    parts.length === 2 &&\n    parts[0] === \"sql\" &&\n    parts[1] === \"exec\"\n  ) {\n    return handleSqlExec(event);\n  }\n\n  // GET /data/:extensionId/:collection — list items in a collection\n  if (method === \"GET\" && parts.length === 3 && parts[0] === \"data\") {\n    return handleExtensionDataList(event, parts[1], parts[2], userEmail);\n  }\n\n  // POST /data/:extensionId/:collection — create/upsert an item\n  if (method === \"POST\" && parts.length === 3 && parts[0] === \"data\") {\n    return handleExtensionDataUpsert(event, parts[1], parts[2], userEmail);\n  }\n\n  // DELETE /data/:extensionId/:collection/:itemId — delete an item\n  if (method === \"DELETE\" && parts.length === 4 && parts[0] === \"data\") {\n    return handleExtensionDataDelete(\n      event,\n      parts[1],\n      parts[2],\n      parts[3],\n      userEmail,\n    );\n  }\n\n  // POST /proxy\n  if (method === \"POST\" && parts.length === 1 && parts[0] === \"proxy\") {\n    return handleProxy(event, userEmail);\n  }\n\n  // GET / — list. `?includeGloballyHidden=true` surfaces extensions an\n  // admin/owner has globally hidden (so they can be unhidden for everyone).\n  if (method === \"GET\" && parts.length === 0) {\n    const includeGloballyHidden =\n      event.url?.searchParams?.get(\"includeGloballyHidden\") === \"true\";\n    const includeContent =\n      event.url?.searchParams?.get(\"includeContent\") === \"true\";\n    const rows = await listExtensions({ includeGloballyHidden });\n    const localRows = includeGloballyHidden ? [] : await listLocalExtensions();\n    return Promise.all(\n      [...rows, ...localRows].map((row) =>\n        extensionResponse(row, undefined, { includeContent }),\n      ),\n    );\n  }\n\n  // POST / — create\n  if (method === \"POST\" && parts.length === 0) {\n    const body = await readBody(event);\n    if (!body.name) {\n      setResponseStatus(event, 400);\n      return { error: \"name is required\" };\n    }\n    const extension = await createExtension(body);\n    setResponseStatus(event, 201);\n    return extension;\n  }\n\n  // GET /:id/render\n  if (method === \"GET\" && parts.length === 2 && parts[1] === \"render\") {\n    const localExtension = await getLocalExtension(parts[0]);\n    if (localExtension) {\n      const search = event.url?.search || \"\";\n      const isDark = search.includes(\"dark=1\") || search.includes(\"dark=true\");\n      const themeVars = getThemeVars(isDark);\n      const html = buildExtensionHtml(\n        localExtension.content,\n        themeVars,\n        isDark,\n        parts[0],\n        {\n          authorEmail: localExtension.ownerEmail,\n          viewerEmail: userEmail,\n          isAuthor: false,\n          role: \"viewer\",\n          source: \"local-files\",\n          permissions: localExtension.source.permissions,\n        },\n      );\n      setResponseHeader(event, \"Content-Type\", \"text/html; charset=utf-8\");\n      setResponseHeader(event, \"Content-Security-Policy\", EXTENSION_IFRAME_CSP);\n      setResponseHeader(event, \"X-Content-Type-Options\", \"nosniff\");\n      setResponseHeader(event, \"Referrer-Policy\", \"no-referrer\");\n      return html;\n    }\n\n    const access = await resolveAccess(\"extension\", parts[0]);\n    const extension = access?.resource as ExtensionRow | undefined;\n    if (!access || !extension || extension.archivedAt) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    const search = event.url?.search || \"\";\n    const isDark = search.includes(\"dark=1\") || search.includes(\"dark=true\");\n    const themeVars = getThemeVars(isDark);\n    // Compute viewer-vs-author binding so the iframe can warn when the\n    // viewer is NOT the author. The role is plumbed through to gate\n    // dangerous bridge helpers in iframe-bridge.ts (audit H4).\n    const isAuthor = extension.ownerEmail === userEmail;\n\n    const html = buildExtensionHtml(\n      extension.content,\n      themeVars,\n      isDark,\n      parts[0],\n      {\n        authorEmail: extension.ownerEmail,\n        viewerEmail: userEmail,\n        isAuthor,\n        role: access.role,\n      },\n    );\n    // Security headers per render. `frame-ancestors` in the CSP must be set as\n    // an HTTP header to be enforced; meta-CSP can't set it per spec.\n    setResponseHeader(event, \"Content-Type\", \"text/html; charset=utf-8\");\n    setResponseHeader(event, \"Content-Security-Policy\", EXTENSION_IFRAME_CSP);\n    setResponseHeader(event, \"X-Content-Type-Options\", \"nosniff\");\n    setResponseHeader(event, \"Referrer-Policy\", \"no-referrer\");\n    return html;\n  }\n\n  // GET /:id/history — list saved snapshots for an extension\n  if (method === \"GET\" && parts.length === 2 && parts[1] === \"history\") {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const limitParam = event.url?.searchParams?.get(\"limit\");\n    const limit =\n      limitParam === null || limitParam === undefined\n        ? undefined\n        : Number(limitParam);\n    const includeContent =\n      event.url?.searchParams?.get(\"includeContent\") === \"true\";\n    return {\n      history: await listExtensionHistory(parts[0], {\n        limit,\n        includeContent,\n      }),\n    };\n  }\n\n  // GET /:id/history/:version — fetch one snapshot plus its previous-version diff\n  if (method === \"GET\" && parts.length === 3 && parts[1] === \"history\") {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const detail = await getExtensionHistoryVersion(parts[0], parts[2]);\n    if (!detail) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension history version not found\" };\n    }\n    return detail;\n  }\n\n  // POST /:id/history/:version/restore — restore display metadata + content\n  if (\n    method === \"POST\" &&\n    parts.length === 4 &&\n    parts[1] === \"history\" &&\n    parts[3] === \"restore\"\n  ) {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const restored = await restoreExtensionHistoryVersion(parts[0], parts[2]);\n    if (!restored) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension history version not found\" };\n    }\n    return extensionResponse(restored);\n  }\n\n  // GET /:id\n  if (method === \"GET\" && parts.length === 1) {\n    const localExtension = await getLocalExtension(parts[0]);\n    if (localExtension) {\n      return extensionResponse(localExtension, \"viewer\");\n    }\n\n    const access = await resolveAccess(\"extension\", parts[0]);\n    const extension = access?.resource as ExtensionRow | undefined;\n    if (!access || !extension || extension.archivedAt) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    return extensionResponse(extension, access.role);\n  }\n\n  // POST /:id/hide — remove from the current user's Extensions list/sidebar\n  // without deleting the underlying extension for teammates or shared slots.\n  if (method === \"POST\" && parts.length === 2 && parts[1] === \"hide\") {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const ok = await hideExtension(parts[0]);\n    if (!ok) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    return { ok: true, hidden: true };\n  }\n\n  // POST /:id/unhide — restore an extension hidden by the current user.\n  if (method === \"POST\" && parts.length === 2 && parts[1] === \"unhide\") {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const ok = await unhideExtension(parts[0]);\n    if (!ok) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    return { ok: true, hidden: false };\n  }\n\n  // POST /:id/global-hide — admin/owner hides the extension from EVERYONE.\n  if (method === \"POST\" && parts.length === 2 && parts[1] === \"global-hide\") {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const ok = await globalHideExtension(parts[0]);\n    if (!ok) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    return { ok: true, globallyHidden: true };\n  }\n\n  // POST /:id/global-unhide — admin/owner reverses a global hide.\n  if (method === \"POST\" && parts.length === 2 && parts[1] === \"global-unhide\") {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const ok = await globalUnhideExtension(parts[0]);\n    if (!ok) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    return { ok: true, globallyHidden: false };\n  }\n\n  // PUT /:id\n  if (method === \"PUT\" && parts.length === 1) {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const body = await readBody(event);\n    if (\n      typeof body.visibility === \"string\" &&\n      body.visibility.trim().toLowerCase() === \"public\"\n    ) {\n      setResponseStatus(event, 403);\n      return {\n        error:\n          \"Extensions cannot be made public — use private or org visibility instead. No content changes were applied.\",\n      };\n    }\n    const hasContentUpdate =\n      body.content !== undefined ||\n      body.patches !== undefined ||\n      body.edits !== undefined ||\n      body.format !== undefined;\n    const hasMetaUpdate =\n      body.name !== undefined ||\n      body.description !== undefined ||\n      body.icon !== undefined ||\n      body.visibility !== undefined;\n\n    let result = null;\n    if (hasContentUpdate) {\n      result = await updateExtensionContent(parts[0], {\n        content: body.content,\n        allowFullReplacement:\n          body.allowFullReplacement === true ||\n          body.allowFullReplacement === \"true\",\n        patches: body.patches,\n        edits: body.edits,\n        format: body.format === true || body.format === \"true\",\n      });\n    }\n    if (hasMetaUpdate) {\n      result = await updateExtension(parts[0], body);\n    }\n    if (!hasContentUpdate && !hasMetaUpdate) {\n      result = await getExtension(parts[0]);\n    }\n    if (!result) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    return result;\n  }\n\n  // DELETE /:id\n  if (method === \"DELETE\" && parts.length === 1) {\n    const localResponse = await localExtensionSqlOnlyResponse(event, parts[0]);\n    if (localResponse) return localResponse;\n    const ok = await deleteExtension(parts[0]);\n    if (!ok) {\n      setResponseStatus(event, 404);\n      return { error: \"Extension not found\" };\n    }\n    return { ok: true, archived: true };\n  }\n\n  setResponseStatus(event, 404);\n  return { error: \"Not found\" };\n}\n\nasync function extensionResponse(\n  row: ExtensionRow | LocalExtensionRow,\n  role?: \"owner\" | ShareRole | null,\n  options: { includeContent?: boolean } = {},\n) {\n  const local = isLocalExtensionRow(row);\n  const resolvedRole = local\n    ? \"viewer\"\n    : (role ??\n      (await resolveAccess(\"extension\", row.id)\n        .then((access) => access?.role ?? null)\n        .catch(() => null)));\n  const responseRow =\n    options.includeContent === false\n      ? (({ content: _content, ...rest }) => rest)(row)\n      : row;\n  return {\n    ...responseRow,\n    role: resolvedRole,\n    canEdit: local\n      ? false\n      : resolvedRole\n        ? [\"owner\", \"admin\", \"editor\"].includes(resolvedRole)\n        : false,\n    canDelete: local\n      ? false\n      : resolvedRole\n        ? [\"owner\", \"admin\"].includes(resolvedRole)\n        : false,\n    globallyHidden: row.hiddenAt != null,\n  };\n}\n\nasync function localExtensionSqlOnlyResponse(\n  event: H3Event,\n  extensionId: string,\n): Promise<unknown | null> {\n  const localExtension = await getLocalExtension(extensionId);\n  if (!localExtension) return null;\n  setResponseStatus(event, 400);\n  return {\n    error:\n      \"This extension is backed by local files. Edit its extension.json or entry file in the workspace; SQL-backed extension history, sharing, hide, update, and delete operations do not apply.\",\n    source: localExtension.source,\n  };\n}\n\nasync function handleExtensionDataList(\n  event: H3Event,\n  extensionId: string,\n  collection: string,\n  userEmail: string,\n): Promise<unknown> {\n  await ensureExtensionsTables();\n  const access = await requireExtensionDataAccess(event, extensionId, \"viewer\");\n  if (!access.ok) return access.response;\n\n  const client = getDbExec();\n  const url = event.url;\n  const limitParam = url?.searchParams?.get(\"limit\");\n  const limit = limitParam\n    ? Math.min(Math.max(1, Number(limitParam)), 1000)\n    : 100;\n  const scope = url?.searchParams?.get(\"scope\") || \"user\";\n  const orgId = getRequestOrgId();\n\n  if (scope === \"org\") {\n    if (!orgId) {\n      setResponseStatus(event, 400);\n      return { error: \"Org context required for scope=org\" };\n    }\n    const result = await client.execute({\n      sql: `SELECT COALESCE(item_id, id) AS id, tool_id, collection, data, owner_email, scope, org_id, created_at, updated_at\n        FROM tool_data\n        WHERE tool_id = ? AND collection = ? AND scope = 'org' AND org_id = ?\n        ORDER BY created_at DESC\n        LIMIT ?`,\n      args: [extensionId, collection, orgId, limit],\n    });\n    return result.rows ?? [];\n  }\n\n  if (scope === \"all\") {\n    const result = await client.execute({\n      sql: `SELECT COALESCE(item_id, id) AS id, tool_id, collection, data, owner_email, scope, org_id, created_at, updated_at\n        FROM tool_data\n        WHERE tool_id = ? AND collection = ?\n          AND ((scope = 'user' AND lower(owner_email) = ?) OR (scope = 'org' AND org_id = ?))\n        ORDER BY created_at DESC\n        LIMIT ?`,\n      args: [extensionId, collection, userEmail, orgId ?? \"\", limit],\n    });\n    return result.rows ?? [];\n  }\n\n  const result = await client.execute({\n    sql: `SELECT COALESCE(item_id, id) AS id, tool_id, collection, data, owner_email, scope, org_id, created_at, updated_at\n      FROM tool_data\n      WHERE tool_id = ? AND collection = ? AND scope = 'user' AND lower(owner_email) = ?\n      ORDER BY updated_at DESC\n      LIMIT ?`,\n    args: [extensionId, collection, userEmail, limit],\n  });\n  return result.rows ?? [];\n}\n\nasync function handleExtensionDataUpsert(\n  event: H3Event,\n  extensionId: string,\n  collection: string,\n  userEmail: string,\n): Promise<unknown> {\n  await ensureExtensionsTables();\n  const access = await requireExtensionDataAccess(event, extensionId, \"editor\");\n  if (!access.ok) return access.response;\n\n  const body = await readBody(event);\n  if (body.data === undefined) {\n    setResponseStatus(event, 400);\n    return { error: \"data is required\" };\n  }\n  const itemId = String(body.id || randomUUID());\n  const data =\n    typeof body.data === \"string\" ? body.data : JSON.stringify(body.data);\n  if (Buffer.byteLength(data, \"utf8\") > MAX_EXTENSION_DATA_BYTES) {\n    setResponseStatus(event, 413);\n    return {\n      error:\n        \"Extension data is too large for SQL storage. Store large files, base64, or blobs in file storage and save only a URL or handle.\",\n      maxBytes: MAX_EXTENSION_DATA_BYTES,\n    };\n  }\n  const now = new Date().toISOString();\n  const scope = body.scope === \"org\" ? \"org\" : \"user\";\n  const orgId = getRequestOrgId();\n\n  if (scope === \"org\" && !orgId) {\n    setResponseStatus(event, 400);\n    return { error: \"Org context required for scope=org\" };\n  }\n\n  const scopeKey = scope === \"org\" ? `org:${orgId}` : userEmail;\n  const client = getDbExec();\n  const pg = isPostgres();\n  const conflictClause = pg\n    ? `ON CONFLICT (tool_id, collection, scope_key, item_id)\n       DO UPDATE SET data = EXCLUDED.data, updated_at = EXCLUDED.updated_at`\n    : `ON CONFLICT (tool_id, collection, scope_key, item_id)\n       DO UPDATE SET data = excluded.data, updated_at = excluded.updated_at`;\n\n  await client.execute({\n    sql: `INSERT INTO tool_data (id, tool_id, collection, item_id, data, owner_email, scope, org_id, scope_key, created_at, updated_at)\n     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n     ${conflictClause}`,\n    args: [\n      randomUUID(),\n      extensionId,\n      collection,\n      itemId,\n      data,\n      userEmail,\n      scope,\n      scope === \"org\" ? orgId! : null,\n      scopeKey,\n      now,\n      now,\n    ],\n  });\n  return {\n    id: itemId,\n    extensionId,\n    collection,\n    data,\n    ownerEmail: userEmail,\n    scope,\n    orgId: scope === \"org\" ? orgId : null,\n    createdAt: now,\n    updatedAt: now,\n  };\n}\n\nasync function handleExtensionDataDelete(\n  event: H3Event,\n  extensionId: string,\n  collection: string,\n  itemId: string,\n  userEmail: string,\n): Promise<unknown> {\n  await ensureExtensionsTables();\n  const access = await requireExtensionDataAccess(event, extensionId, \"editor\");\n  if (!access.ok) return access.response;\n\n  const url = event.url;\n  const scope = url?.searchParams?.get(\"scope\") || \"user\";\n  const orgId = getRequestOrgId();\n  const client = getDbExec();\n\n  if (scope === \"org\") {\n    if (!orgId) {\n      setResponseStatus(event, 400);\n      return { error: \"Org context required for scope=org\" };\n    }\n    await client.execute({\n      sql: `DELETE FROM tool_data WHERE COALESCE(item_id, id) = ? AND tool_id = ? AND collection = ? AND scope = 'org' AND org_id = ?`,\n      args: [itemId, extensionId, collection, orgId],\n    });\n    return { ok: true };\n  }\n\n  await client.execute({\n    sql: `DELETE FROM tool_data WHERE COALESCE(item_id, id) = ? AND tool_id = ? AND collection = ? AND scope = 'user' AND lower(owner_email) = ?`,\n    args: [itemId, extensionId, collection, userEmail],\n  });\n  return { ok: true };\n}\n\nasync function requireExtensionDataAccess(\n  event: H3Event,\n  extensionId: string,\n  minRole: ShareRole,\n): Promise<{ ok: true } | { ok: false; response: unknown }> {\n  const access = await resolveAccess(\"extension\", extensionId);\n  if (access?.resource && (access.resource as ExtensionRow).archivedAt) {\n    setResponseStatus(event, 404);\n    return { ok: false, response: { error: \"Extension not found\" } };\n  }\n  if (access) {\n    if (ROLE_RANK[access.role] < ROLE_RANK[minRole]) {\n      setResponseStatus(event, 403);\n      return {\n        ok: false,\n        response: {\n          error: `Requires ${minRole} role on extension ${extensionId} (have ${access.role})`,\n        },\n      };\n    }\n    return { ok: true };\n  }\n\n  const localExtension = await getLocalExtension(extensionId);\n  if (localExtension) {\n    if (!localExtension.source.permissions.extensionData) {\n      setResponseStatus(event, 403);\n      return {\n        ok: false,\n        response: { error: \"extensionData is disabled for this extension\" },\n      };\n    }\n    return { ok: true };\n  }\n\n  setResponseStatus(event, 404);\n  return { ok: false, response: { error: \"Extension not found\" } };\n}\n\nasync function handleProxy(\n  event: H3Event,\n  userEmail: string,\n): Promise<unknown> {\n  const body = await readBody(event);\n  const rawUrl = body.url;\n  if (!rawUrl || typeof rawUrl !== \"string\") {\n    setResponseStatus(event, 400);\n    return { error: \"url is required\" };\n  }\n\n  const method = normalizeExtensionProxyMethod(body.method || \"GET\");\n  if (!method) {\n    setResponseStatus(event, 405);\n    return {\n      error:\n        \"Unsupported HTTP method. Allowed methods: GET, POST, PUT, PATCH, DELETE, HEAD.\",\n    };\n  }\n  const rawHeaders: Record<string, string> = body.headers || {};\n  const rawBody = body.body;\n\n  let resolvedUrl = rawUrl;\n  // Resolve secret references per header value rather than over a single\n  // JSON.stringify(headers) blob. A secret value containing a double-quote\n  // would corrupt that JSON, the later JSON.parse would throw, and the request\n  // would silently fall back to the *unresolved* headers (placeholders intact).\n  const parsedHeaders: Record<string, string> = {};\n  let resolvedBody = rawBody;\n  const allSecretValues: string[] = [];\n  const allResolvedKeys: ResolvedKeyReference[] = [];\n\n  try {\n    const urlResult = await resolveKeyReferencesWithRequestScopes(\n      rawUrl,\n      userEmail,\n    );\n    resolvedUrl = urlResult.resolved;\n    allSecretValues.push(...urlResult.secretValues);\n    allResolvedKeys.push(...(urlResult.resolvedKeys ?? []));\n\n    for (const [hk, hv] of Object.entries(rawHeaders)) {\n      const headerResult = await resolveKeyReferencesWithRequestScopes(\n        typeof hv === \"string\" ? hv : String(hv),\n        userEmail,\n      );\n      parsedHeaders[hk] = headerResult.resolved;\n      allSecretValues.push(...headerResult.secretValues);\n      allResolvedKeys.push(...(headerResult.resolvedKeys ?? []));\n    }\n\n    if (rawBody) {\n      const bodyResult = await resolveKeyReferencesWithRequestScopes(\n        typeof rawBody === \"string\" ? rawBody : JSON.stringify(rawBody),\n        userEmail,\n      );\n      resolvedBody = bodyResult.resolved;\n      allSecretValues.push(...bodyResult.secretValues);\n      allResolvedKeys.push(...(bodyResult.resolvedKeys ?? []));\n    }\n  } catch (err: any) {\n    setResponseStatus(event, 400);\n    return { error: `Key resolution failed: ${err?.message ?? err}` };\n  }\n  const secretValues = collectSecretValues(allSecretValues);\n\n  if (await isBlockedExtensionUrlWithDns(resolvedUrl)) {\n    setResponseStatus(event, 403);\n    return { error: \"Requests to private/internal addresses are not allowed\" };\n  }\n\n  const uniqueResolvedKeys = new Map(\n    allResolvedKeys.map((ref) => [\n      `${ref.name}:${ref.scope}:${ref.scopeId}`,\n      ref,\n    ]),\n  );\n  for (const keyRef of uniqueResolvedKeys.values()) {\n    const allowlist = await getResolvedKeyAllowlist(keyRef);\n    if (!validateUrlAllowlist(resolvedUrl, allowlist)) {\n      setResponseStatus(event, 403);\n      return {\n        error: `Key \"${keyRef.name}\" is not allowed for this URL origin`,\n      };\n    }\n  }\n\n  const headers = sanitizeOutboundHeaders(parsedHeaders);\n\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), 15_000);\n\n  // Best-effort connect-time SSRF guard. When undici is available (it ships\n  // with Node 18+ but is not always exposed as an importable module), the\n  // dispatcher re-checks the resolved IP at TCP-connect time, closing the\n  // TOCTOU between the pre-flight `isBlockedExtensionUrlWithDns` lookup and the\n  // actual fetch lookup. If undici is not importable, fall through to plain\n  // fetch — the pre-flight remains the primary protection.\n  const dispatcher = (await createSsrfSafeDispatcher()) ?? undefined;\n\n  try {\n    const fetchOpts: RequestInit & { dispatcher?: unknown } = {\n      method,\n      headers,\n      signal: controller.signal,\n      redirect: \"manual\",\n    };\n    if (dispatcher) fetchOpts.dispatcher = dispatcher;\n    if (resolvedBody && [\"POST\", \"PUT\", \"PATCH\"].includes(method)) {\n      const isStringBody = typeof resolvedBody === \"string\";\n      fetchOpts.body = isStringBody\n        ? resolvedBody\n        : JSON.stringify(resolvedBody);\n      // Only inject Content-Type when (a) the caller didn't set one and\n      // (b) the body is actually JSON-shaped (object or stringified JSON).\n      // Otherwise leave it unset so the runtime fetch picks an appropriate\n      // default and we don't misrepresent text/plain bodies as JSON.\n      const hasContentType = Object.keys(headers).some(\n        (k) => k.toLowerCase() === \"content-type\",\n      );\n      if (!hasContentType) {\n        const isJsonShaped =\n          !isStringBody ||\n          (typeof resolvedBody === \"string\" &&\n            /^\\s*[{[]/.test(resolvedBody) &&\n            isLikelyJson(resolvedBody));\n        if (isJsonShaped) headers[\"Content-Type\"] = \"application/json\";\n      }\n    }\n\n    const response = await fetch(resolvedUrl, fetchOpts);\n\n    if (response.status >= 300 && response.status < 400) {\n      const location = response.headers.get(\"location\");\n      const redirectUrl = location ? new URL(location, resolvedUrl).href : null;\n      if (redirectUrl && (await isBlockedExtensionUrlWithDns(redirectUrl))) {\n        setResponseStatus(event, 403);\n        return { error: \"Redirect to private/internal address blocked\" };\n      }\n      if (redirectUrl) {\n        for (const keyRef of uniqueResolvedKeys.values()) {\n          const allowlist = await getResolvedKeyAllowlist(keyRef);\n          if (!validateUrlAllowlist(redirectUrl, allowlist)) {\n            setResponseStatus(event, 403);\n            return {\n              error: `Redirect URL is not allowed for key \"${keyRef.name}\"`,\n            };\n          }\n        }\n      }\n      return {\n        status: response.status,\n        body: {\n          redirect: redirectUrl\n            ? redactString(redirectUrl, secretValues)\n            : location,\n        },\n      };\n    }\n\n    const { text } = await readResponseTextWithLimit(response);\n    let responseBody: unknown;\n    try {\n      responseBody = JSON.parse(text);\n    } catch {\n      responseBody = text;\n    }\n\n    return {\n      status: response.status,\n      body: redactSecrets(responseBody, secretValues),\n    };\n  } catch (err: any) {\n    if (err?.name === \"AbortError\") {\n      setResponseStatus(event, 504);\n      return { error: \"Upstream request timed out\" };\n    }\n    setResponseStatus(event, 502);\n    return {\n      error: `Proxy request failed: ${redactSecrets(\n        err?.message ?? String(err),\n        secretValues,\n      )}`,\n    };\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n\n/**\n * Capture console output from a CLI script that uses console.log for results.\n * Same technique as wrapCliScript in agent-chat-plugin.ts.\n */\nlet captureCliOutputQueue: Promise<void> = Promise.resolve();\n\nasync function captureCliOutput(\n  fn: (args: string[]) => Promise<void>,\n  args: string[],\n): Promise<string> {\n  const previousCapture = captureCliOutputQueue;\n  let releaseCapture!: () => void;\n  captureCliOutputQueue = new Promise<void>((resolve) => {\n    releaseCapture = resolve;\n  });\n  await previousCapture;\n\n  const logs: string[] = [];\n  const origLog = console.log;\n  const origError = console.error;\n  const origStdoutWrite = process.stdout.write;\n  console.log = (...a: unknown[]) => {\n    logs.push(a.map(String).join(\" \"));\n  };\n  console.error = (...a: unknown[]) => {\n    logs.push(a.map(String).join(\" \"));\n  };\n  process.stdout.write = ((chunk: any) => {\n    if (typeof chunk === \"string\") logs.push(chunk);\n    else if (Buffer.isBuffer(chunk)) logs.push(chunk.toString());\n    return true;\n  }) as any;\n  try {\n    await fn(args);\n  } catch (err: any) {\n    logs.push(`Error: ${err?.message ?? String(err)}`);\n  } finally {\n    console.log = origLog;\n    console.error = origError;\n    process.stdout.write = origStdoutWrite;\n    releaseCapture();\n  }\n  return logs.join(\"\\n\") || \"(no output)\";\n}\n\nasync function handleSqlQuery(event: H3Event): Promise<unknown> {\n  const body = await readBody(event);\n  const sql = body.sql;\n  if (!sql || typeof sql !== \"string\") {\n    setResponseStatus(event, 400);\n    return { error: \"sql is required\" };\n  }\n\n  const cleanSql = stripSqlComments(sql);\n  if (!/^\\s*(SELECT|WITH)\\b/i.test(cleanSql)) {\n    setResponseStatus(event, 403);\n    return { error: \"Only SELECT queries are allowed from extensions\" };\n  }\n  if (matchesSqlGate(SENSITIVE_SQL_RE, sql)) {\n    setResponseStatus(event, 403);\n    return {\n      error: \"Sensitive framework tables are not readable from extensions\",\n    };\n  }\n\n  try {\n    const mod = await import(\"../scripts/db/query.js\");\n    const args = [\"--sql\", sql, \"--format\", \"json\"];\n    if (body.limit) args.push(\"--limit\", String(body.limit));\n    if (body.args !== undefined) {\n      if (!Array.isArray(body.args)) {\n        setResponseStatus(event, 400);\n        return { error: \"args must be an array\" };\n      }\n      args.push(\"--args\", JSON.stringify(body.args));\n    }\n    const output = await captureCliOutput(mod.default, args);\n    try {\n      return JSON.parse(output);\n    } catch {\n      return { output };\n    }\n  } catch (err: any) {\n    setResponseStatus(event, 500);\n    return { error: err?.message ?? \"Query failed\" };\n  }\n}\n\n// TODO(security): replace this regex blocklist with a SQL parser + an explicit\n// allowlist of tables a extension may read/write (e.g. only `tool_data`, plus a\n// per-template list). The current blocklist is best-effort defense in depth\n// and is by design bypassable via SQL constructions that don't include the\n// blocklisted token literally (string concat, dynamic SQL, etc). The temp-\n// view scoping in scripts/db/scoping.ts is the actual ownership boundary.\nexport const DESTRUCTIVE_SQL_RE =\n  /\\b(CREATE\\s+(?:(?:LOCAL|GLOBAL)\\s+)?(?:TEMPORARY|TEMP)?\\s*(TABLE|INDEX|VIEW|SCHEMA|DATABASE|TRIGGER|FUNCTION|EXTENSION|ROLE|TABLESPACE|PUBLICATION|SUBSCRIPTION)|DROP\\s+(TABLE|INDEX|VIEW|SCHEMA|DATABASE|TRIGGER|FUNCTION|EXTENSION|ROLE)|TRUNCATE|DELETE\\s+FROM\\s+(?!tool_data\\b)|ALTER\\s+(TABLE|VIEW|SCHEMA|DATABASE|FUNCTION|ROLE|EXTENSION|PUBLICATION)\\s+(?!tool_data\\b)|ATTACH|DETACH|VACUUM|REINDEX|PRAGMA|GRANT|REVOKE|SET\\s+ROLE|RESET\\s+ROLE|COPY)\\b/i;\n\n// Sensitive tables that extensions must not touch directly. Includes Better Auth\n// identity tables, framework infrastructure (tracing, evals, automations,\n// integrations, notifications, scheduling, sharing/orgs), and Postgres\n// catalogs that would let a extension enumerate or read internals.\nexport const SENSITIVE_SQL_RE =\n  /\\b(app_secrets|settings|user|users|session|sessions|account|accounts|verification|oauth_tokens|tools|extensions|tool_shares|tool_slots|tool_slot_installs|tool_hidden_extensions|tool_history|member|organization|invitation|jwks|agent_trace_spans|agent_trace_summaries|agent_feedback|agent_satisfaction_scores|agent_evals|agent_runs|agent_run_events|notifications|progress_runs|integration_configs|integration_pending_tasks|integration_thread_mappings|resources|org_members|org_invitations|bigquery_cache|dashboard_views|pg_catalog|information_schema|pg_class|pg_proc|pg_namespace|pg_user|pg_roles|pg_authid|pg_shadow)\\b/i;\n\n// Refuses positional INSERTs (no column list). `INSERT INTO recordings VALUES\n// (...)` would let a extension stuff arbitrary owner_email values into a row.\n// `INSERT INTO recordings (col1, col2) VALUES (...)` is required so the\n// downstream injectOwnership helper can append owner_email.\nexport const POSITIONAL_INSERT_RE =\n  /\\bINSERT\\s+INTO\\s+[\"'`]?\\w+[\"'`]?\\s+VALUES\\b/i;\n\nfunction stripSqlComments(sql: string): string {\n  return sql.replace(/\\/\\*[\\s\\S]*?\\*\\//g, \" \").replace(/--[^\\n]*/g, \" \");\n}\n\n/**\n * Test a blocklist regex against the SQL with comments normalized two ways, so\n * a comment placed *inside* a keyword can't smuggle a blocked construct past a\n * literal-token match:\n *   - comments → space  catches `DROP /* x *​/ TABLE` (token boundaries kept)\n *   - comments → empty  catches `DR/**​/OP TABLE`     (split keyword rejoined)\n *\n * A statement is refused if EITHER normalization trips the regex. This only\n * ever ADDS matches — it never newly-allows SQL — so it cannot loosen the gate\n * (real extension SQL doesn't embed comments inside keywords, so false-positive\n * risk is negligible). The authoritative ownership boundary remains the\n * fail-closed temp-view scoping in scripts/db/scoping.ts; this stays defense in\n * depth. See the TODO above re: replacing all of this with a real SQL parser.\n */\nexport function matchesSqlGate(re: RegExp, sql: string): boolean {\n  const withSpace = sql\n    .replace(/\\/\\*[\\s\\S]*?\\*\\//g, \" \")\n    .replace(/--[^\\n]*/g, \" \");\n  const withNothing = sql\n    .replace(/\\/\\*[\\s\\S]*?\\*\\//g, \"\")\n    .replace(/--[^\\n]*/g, \"\");\n  return re.test(withSpace) || re.test(withNothing);\n}\n\nfunction isLikelyJson(text: string): boolean {\n  try {\n    const parsed = JSON.parse(text);\n    return parsed !== null && typeof parsed === \"object\";\n  } catch {\n    return false;\n  }\n}\n\nasync function handleSqlExec(event: H3Event): Promise<unknown> {\n  const body = await readBody(event);\n  const sql = body.sql;\n  if (!sql || typeof sql !== \"string\") {\n    setResponseStatus(event, 400);\n    return { error: \"sql is required\" };\n  }\n\n  if (matchesSqlGate(DESTRUCTIVE_SQL_RE, sql)) {\n    setResponseStatus(event, 403);\n    return {\n      error:\n        \"Schema changes and destructive SQL are not allowed from extensions\",\n    };\n  }\n  if (matchesSqlGate(SENSITIVE_SQL_RE, sql)) {\n    setResponseStatus(event, 403);\n    return {\n      error: \"Sensitive framework tables are not writable from extensions\",\n    };\n  }\n  if (matchesSqlGate(POSITIONAL_INSERT_RE, sql)) {\n    setResponseStatus(event, 400);\n    return {\n      error:\n        \"INSERT must specify an explicit column list (e.g. INSERT INTO t (col1, col2) VALUES (?, ?)) so ownership can be injected.\",\n    };\n  }\n\n  try {\n    const mod = await import(\"../scripts/db/exec.js\");\n    const args = [\"--sql\", sql, \"--format\", \"json\"];\n    if (body.args !== undefined) {\n      if (!Array.isArray(body.args)) {\n        setResponseStatus(event, 400);\n        return { error: \"args must be an array\" };\n      }\n      args.push(\"--args\", JSON.stringify(body.args));\n    }\n    const output = await captureCliOutput(mod.default, args);\n    try {\n      return JSON.parse(output);\n    } catch {\n      return { output };\n    }\n  } catch (err: any) {\n    setResponseStatus(event, 500);\n    return { error: err?.message ?? \"Exec failed\" };\n  }\n}\n"]}

package/dist/extensions/schema.d.ts

@@ -209,6 +209,25 @@ export declare const extensions: import("drizzle-orm/sqlite-core").SQLiteTableWi
         }, {}, {
             length: number;
         }>;
+        archivedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "archived_at";
+            tableName: "tools";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number;
+        }>;
         hiddenAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
             name: "hidden_at";
             tableName: "tools";
@@ -744,8 +763,8 @@ export declare const extensionHistory: import("drizzle-orm/sqlite-core").SQLiteT
     };
     dialect: 'sqlite';
 }>;
-export declare const EXTENSIONS_CREATE_SQL = "CREATE TABLE IF NOT EXISTS tools (\n  id TEXT PRIMARY KEY,\n  name TEXT NOT NULL,\n  description TEXT NOT NULL DEFAULT '',\n  content TEXT NOT NULL DEFAULT '',\n  icon TEXT,\n  created_at TEXT NOT NULL DEFAULT (datetime('now')),\n  updated_at TEXT NOT NULL DEFAULT (datetime('now')),\n  hidden_at TEXT,\n  hidden_by TEXT,\n  owner_email TEXT NOT NULL DEFAULT 'local@localhost',\n  org_id TEXT,\n  visibility TEXT NOT NULL DEFAULT 'private'\n)";
-export declare const EXTENSIONS_CREATE_SQL_PG = "CREATE TABLE IF NOT EXISTS tools (\n  id TEXT PRIMARY KEY,\n  name TEXT NOT NULL,\n  description TEXT NOT NULL DEFAULT '',\n  content TEXT NOT NULL DEFAULT '',\n  icon TEXT,\n  created_at TEXT NOT NULL DEFAULT now(),\n  updated_at TEXT NOT NULL DEFAULT now(),\n  hidden_at TEXT,\n  hidden_by TEXT,\n  owner_email TEXT NOT NULL DEFAULT 'local@localhost',\n  org_id TEXT,\n  visibility TEXT NOT NULL DEFAULT 'private'\n)";
+export declare const EXTENSIONS_CREATE_SQL = "CREATE TABLE IF NOT EXISTS tools (\n  id TEXT PRIMARY KEY,\n  name TEXT NOT NULL,\n  description TEXT NOT NULL DEFAULT '',\n  content TEXT NOT NULL DEFAULT '',\n  icon TEXT,\n  created_at TEXT NOT NULL DEFAULT (datetime('now')),\n  updated_at TEXT NOT NULL DEFAULT (datetime('now')),\n  archived_at TEXT,\n  hidden_at TEXT,\n  hidden_by TEXT,\n  owner_email TEXT NOT NULL DEFAULT 'local@localhost',\n  org_id TEXT,\n  visibility TEXT NOT NULL DEFAULT 'private'\n)";
+export declare const EXTENSIONS_CREATE_SQL_PG = "CREATE TABLE IF NOT EXISTS tools (\n  id TEXT PRIMARY KEY,\n  name TEXT NOT NULL,\n  description TEXT NOT NULL DEFAULT '',\n  content TEXT NOT NULL DEFAULT '',\n  icon TEXT,\n  created_at TEXT NOT NULL DEFAULT now(),\n  updated_at TEXT NOT NULL DEFAULT now(),\n  archived_at TEXT,\n  hidden_at TEXT,\n  hidden_by TEXT,\n  owner_email TEXT NOT NULL DEFAULT 'local@localhost',\n  org_id TEXT,\n  visibility TEXT NOT NULL DEFAULT 'private'\n)";
 export declare const EXTENSION_SHARES_CREATE_SQL = "CREATE TABLE IF NOT EXISTS tool_shares (\n  id TEXT PRIMARY KEY,\n  resource_id TEXT NOT NULL,\n  principal_type TEXT NOT NULL,\n  principal_id TEXT NOT NULL,\n  role TEXT NOT NULL DEFAULT 'viewer',\n  created_by TEXT NOT NULL,\n  created_at TEXT NOT NULL DEFAULT (datetime('now'))\n)";
 export declare const EXTENSION_SHARES_CREATE_SQL_PG = "CREATE TABLE IF NOT EXISTS tool_shares (\n  id TEXT PRIMARY KEY,\n  resource_id TEXT NOT NULL,\n  principal_type TEXT NOT NULL,\n  principal_id TEXT NOT NULL,\n  role TEXT NOT NULL DEFAULT 'viewer',\n  created_by TEXT NOT NULL,\n  created_at TEXT NOT NULL DEFAULT now()\n)";
 export declare const extensionData: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
@@ -973,6 +992,8 @@ export declare const EXTENSION_DATA_DROP_OLD_INDEX_SQL_PG = "DROP INDEX IF EXIST
 export declare const EXTENSIONS_OWNER_INDEX_SQL = "CREATE INDEX IF NOT EXISTS tools_owner_idx ON tools (owner_email)";
 export declare const EXTENSIONS_ORG_INDEX_SQL = "CREATE INDEX IF NOT EXISTS tools_org_idx ON tools (org_id)";
 export declare const EXTENSIONS_UPDATED_INDEX_SQL = "CREATE INDEX IF NOT EXISTS tools_updated_at_idx ON tools (updated_at)";
+export declare const EXTENSIONS_ARCHIVED_AT_COLUMN_SQL = "ALTER TABLE tools ADD COLUMN IF NOT EXISTS archived_at TEXT";
+export declare const EXTENSIONS_ARCHIVED_AT_INDEX_SQL = "CREATE INDEX IF NOT EXISTS tools_archived_at_idx ON tools (archived_at)";
 export declare const EXTENSIONS_HIDDEN_AT_COLUMN_SQL = "ALTER TABLE tools ADD COLUMN IF NOT EXISTS hidden_at TEXT";
 export declare const EXTENSIONS_HIDDEN_BY_COLUMN_SQL = "ALTER TABLE tools ADD COLUMN IF NOT EXISTS hidden_by TEXT";
 export declare const EXTENSIONS_HIDDEN_AT_INDEX_SQL = "CREATE INDEX IF NOT EXISTS tools_hidden_at_idx ON tools (hidden_at)";