@aglyn/aglyn 1.0.0-beta.143

package/src/lib/plugin-manager/plugin-activity-actions.d.ts

@@ -0,0 +1,122 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Plugin-declared activity actions (AGL-2940).
+ *
+ * Most rows in `orgs/{orgId}/activity` and `hosts/{hostId}/activity` store
+ * a prose action written at the call site. A plugin whose rows are read by
+ * more than a person — a filter chip, a staff facet, an actor table — stores
+ * a CODE (`ai.job.output`) and declares here what the code means: the label
+ * a reader sees, the scope it is written at, and the group its filter chip
+ * belongs to. The activity renderers read this catalog for labels and
+ * filters, so a second plugin with coded rows gets a chip and a facet group
+ * by registering, with no edit to the renderers.
+ *
+ * Declared at module scope from both the client barrel and the `/server`
+ * entry (the AGL-428 pattern), with an explicit `pluginId`: module scope
+ * runs before the loader's ownership marker is set.
+ */
+export type PluginActivityScope = 'org' | 'host' | 'staff';
+/**
+ * A resource a PLUGIN files an org activity row under (AGL-2978): the
+ * plugin's id, a colon and the plugin's own noun — `acme-mail:mailbox`.
+ *
+ * Core's activity targets are a closed list of core's own resources. A
+ * plugin's resource is not one of them and is never added to that list; the
+ * org log's target type accepts any namespaced type instead, and the feed
+ * reads the noun after the colon for a reader. The namespace keeps two
+ * plugins' nouns from meaning one thing.
+ */
+export type PluginActivityTargetType = `${string}:${string}`;
+/** Whether a stored target type is a plugin's namespaced one. */
+export declare function isPluginActivityTargetType(type: unknown): type is PluginActivityTargetType;
+/**
+ * The noun a plugin's namespaced type names — `acme-mail:mailbox` →
+ * `mailbox` — or `undefined` for any other type.
+ */
+export declare function pluginActivityTargetNoun(type: unknown): string | undefined;
+export interface PluginActivityAction {
+    /** The stored action code — dotted, stable, never a sentence. */
+    key: string;
+    /** What a person reads for the code in the feed and the actor table. */
+    label: string;
+    /** Which log(s) the writers put the code in. */
+    scope: PluginActivityScope | readonly PluginActivityScope[];
+    /** The feed target types rows carrying this code file their output under. */
+    resourceTypes?: readonly string[];
+}
+/**
+ * The filter a plugin's coded rows share: one chip in the org feed and the
+ * actor table, one facet group on the staff audit page.
+ */
+export interface PluginActivityGroup {
+    /** Stable group id — the facet's value (`ai`). */
+    id: string;
+    /** The chip and the facet option (`AI`). */
+    label: string;
+    /**
+     * Staff audit actions that belong to the group without carrying one of the
+     * registered codes — rows written by core on the plugin's behalf, matched
+     * by prefix (`billing.assistOverage.`).
+     */
+    staffAuditPrefixes?: readonly string[];
+    /**
+     * Staff audit actions a plugin's staff doors write when staff READ
+     * something rather than change it (AGL-2939): the audit log files them as
+     * an access. Matched exactly.
+     */
+    staffAuditAccessActions?: readonly string[];
+}
+export interface PluginActivityRegistration {
+    pluginId: string;
+    group: PluginActivityGroup;
+    actions: readonly PluginActivityAction[];
+}
+/**
+ * Idempotent per plugin — re-registration replaces that plugin's catalog. A
+ * code already declared by a DIFFERENT plugin is refused for the whole
+ * registration: two owners for one code would give the row two labels.
+ */
+export declare function registerPluginActivityActions(registration: PluginActivityRegistration): void;
+/** Every registration, in registration order. */
+export declare function listPluginActivityRegistrations(): PluginActivityRegistration[];
+/** Every declared action across plugins. */
+export declare function listPluginActivityActions(): PluginActivityAction[];
+/** The readable label for a declared code; `undefined` for any other action. */
+export declare function pluginActivityActionLabel(action: unknown): string | undefined;
+/** The group a stored action's code belongs to, or `undefined`. */
+export declare function pluginActivityGroupForAction(action: unknown): PluginActivityGroup | undefined;
+/**
+ * The filter chips the feeds offer: one per registered group, each with the
+ * codes its chip keeps. What an `action isAnyOf …` request sends.
+ */
+export declare function listPluginActivityFilters(): Array<{
+    group: PluginActivityGroup;
+    actions: string[];
+}>;
+/**
+ * The staff audit facet group for an action: a registered group when the
+ * action is one of its codes or starts with one of its prefixes, else the
+ * action's leading namespace (`billing`, `org`, `plugins`).
+ */
+export declare function pluginStaffAuditActionGroup(action: unknown): string;
+/** Whether a staff audit action is a read some plugin declared (AGL-2939). */
+export declare function isPluginStaffAuditAccess(action: unknown): boolean;
+/** How a facet group reads in the menu: a registered label, else the id. */
+export declare function pluginStaffAuditActionGroupLabel(group: string): string;
+/** Test seam: forget every registration. */
+export declare function resetPluginActivityActionsForTests(): void;

package/src/lib/plugin-manager/plugin-activity-actions.js

@@ -0,0 +1,140 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * Plugin-declared activity actions (AGL-2940).
+ *
+ * Most rows in `orgs/{orgId}/activity` and `hosts/{hostId}/activity` store
+ * a prose action written at the call site. A plugin whose rows are read by
+ * more than a person — a filter chip, a staff facet, an actor table — stores
+ * a CODE (`ai.job.output`) and declares here what the code means: the label
+ * a reader sees, the scope it is written at, and the group its filter chip
+ * belongs to. The activity renderers read this catalog for labels and
+ * filters, so a second plugin with coded rows gets a chip and a facet group
+ * by registering, with no edit to the renderers.
+ *
+ * Declared at module scope from both the client barrel and the `/server`
+ * entry (the AGL-428 pattern), with an explicit `pluginId`: module scope
+ * runs before the loader's ownership marker is set.
+ */ /** A namespaced type as the log stores it: `pluginId:noun`, both parts plain. */ const PLUGIN_TARGET_TYPE = /^([a-z][a-z0-9-]*):([A-Za-z][A-Za-z0-9]*)$/;
+/** Whether a stored target type is a plugin's namespaced one. */ export function isPluginActivityTargetType(type) {
+    return typeof type === 'string' && PLUGIN_TARGET_TYPE.test(type);
+}
+/**
+ * The noun a plugin's namespaced type names — `acme-mail:mailbox` →
+ * `mailbox` — or `undefined` for any other type.
+ */ export function pluginActivityTargetNoun(type) {
+    var _PLUGIN_TARGET_TYPE_exec;
+    if (typeof type !== 'string') return undefined;
+    return (_PLUGIN_TARGET_TYPE_exec = PLUGIN_TARGET_TYPE.exec(type)) == null ? void 0 : _PLUGIN_TARGET_TYPE_exec[2];
+}
+const registrations = new Map();
+/**
+ * Idempotent per plugin — re-registration replaces that plugin's catalog. A
+ * code already declared by a DIFFERENT plugin is refused for the whole
+ * registration: two owners for one code would give the row two labels.
+ */ export function registerPluginActivityActions(registration) {
+    const pluginId = registration.pluginId.trim();
+    if (!pluginId) throw new Error('plugin activity actions need a pluginId');
+    for (const action of registration.actions){
+        const owner = ownerOfActivityAction(action.key);
+        if (owner && owner !== pluginId) {
+            throw new Error(`activity action "${action.key}" is already declared by "${owner}"; ` + `refused "${pluginId}"`);
+        }
+    }
+    registrations.set(pluginId, registration);
+}
+function ownerOfActivityAction(key) {
+    for (const registration of registrations.values()){
+        if (registration.actions.some((action)=>action.key === key)) {
+            return registration.pluginId;
+        }
+    }
+    return undefined;
+}
+/** Every registration, in registration order. */ export function listPluginActivityRegistrations() {
+    return [
+        ...registrations.values()
+    ];
+}
+/** Every declared action across plugins. */ export function listPluginActivityActions() {
+    return listPluginActivityRegistrations().flatMap((entry)=>[
+            ...entry.actions
+        ]);
+}
+/** The readable label for a declared code; `undefined` for any other action. */ export function pluginActivityActionLabel(action) {
+    if (typeof action !== 'string') return undefined;
+    for (const registration of registrations.values()){
+        const match = registration.actions.find((entry)=>entry.key === action);
+        if (match) return match.label;
+    }
+    return undefined;
+}
+/** The group a stored action's code belongs to, or `undefined`. */ export function pluginActivityGroupForAction(action) {
+    if (typeof action !== 'string') return undefined;
+    for (const registration of registrations.values()){
+        if (registration.actions.some((entry)=>entry.key === action)) {
+            return registration.group;
+        }
+    }
+    return undefined;
+}
+/**
+ * The filter chips the feeds offer: one per registered group, each with the
+ * codes its chip keeps. What an `action isAnyOf …` request sends.
+ */ export function listPluginActivityFilters() {
+    return listPluginActivityRegistrations().map((entry)=>({
+            group: entry.group,
+            actions: entry.actions.map((action)=>action.key)
+        }));
+}
+/**
+ * The staff audit facet group for an action: a registered group when the
+ * action is one of its codes or starts with one of its prefixes, else the
+ * action's leading namespace (`billing`, `org`, `plugins`).
+ */ export function pluginStaffAuditActionGroup(action) {
+    const text = typeof action === 'string' ? action.trim() : '';
+    if (!text) return '';
+    const byCode = pluginActivityGroupForAction(text);
+    if (byCode) return byCode.id;
+    for (const registration of registrations.values()){
+        var _registration_group_staffAuditPrefixes;
+        const prefixes = (_registration_group_staffAuditPrefixes = registration.group.staffAuditPrefixes) != null ? _registration_group_staffAuditPrefixes : [];
+        if (prefixes.some((prefix)=>text.startsWith(prefix))) {
+            return registration.group.id;
+        }
+    }
+    const dot = text.indexOf('.');
+    return dot > 0 ? text.slice(0, dot) : text;
+}
+/** Whether a staff audit action is a read some plugin declared (AGL-2939). */ export function isPluginStaffAuditAccess(action) {
+    if (typeof action !== 'string' || !action) return false;
+    for (const registration of registrations.values()){
+        var _registration_group_staffAuditAccessActions;
+        if ((_registration_group_staffAuditAccessActions = registration.group.staffAuditAccessActions) == null ? void 0 : _registration_group_staffAuditAccessActions.includes(action)) return true;
+    }
+    return false;
+}
+/** How a facet group reads in the menu: a registered label, else the id. */ export function pluginStaffAuditActionGroupLabel(group) {
+    for (const registration of registrations.values()){
+        if (registration.group.id === group) return registration.group.label;
+    }
+    return group;
+}
+/** Test seam: forget every registration. */ export function resetPluginActivityActionsForTests() {
+    registrations.clear();
+}
+
+//# sourceMappingURL=plugin-activity-actions.js.map

package/src/lib/plugin-manager/plugin-activity-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-activity-actions.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Plugin-declared activity actions (AGL-2940).\n *\n * Most rows in `orgs/{orgId}/activity` and `hosts/{hostId}/activity` store\n * a prose action written at the call site. A plugin whose rows are read by\n * more than a person — a filter chip, a staff facet, an actor table — stores\n * a CODE (`ai.job.output`) and declares here what the code means: the label\n * a reader sees, the scope it is written at, and the group its filter chip\n * belongs to. The activity renderers read this catalog for labels and\n * filters, so a second plugin with coded rows gets a chip and a facet group\n * by registering, with no edit to the renderers.\n *\n * Declared at module scope from both the client barrel and the `/server`\n * entry (the AGL-428 pattern), with an explicit `pluginId`: module scope\n * runs before the loader's ownership marker is set.\n */\n\nexport type PluginActivityScope = 'org' | 'host' | 'staff'\n\n/**\n * A resource a PLUGIN files an org activity row under (AGL-2978): the\n * plugin's id, a colon and the plugin's own noun — `acme-mail:mailbox`.\n *\n * Core's activity targets are a closed list of core's own resources. A\n * plugin's resource is not one of them and is never added to that list; the\n * org log's target type accepts any namespaced type instead, and the feed\n * reads the noun after the colon for a reader. The namespace keeps two\n * plugins' nouns from meaning one thing.\n */\nexport type PluginActivityTargetType = `${string}:${string}`\n\n/** A namespaced type as the log stores it: `pluginId:noun`, both parts plain. */\nconst PLUGIN_TARGET_TYPE = /^([a-z][a-z0-9-]*):([A-Za-z][A-Za-z0-9]*)$/\n\n/** Whether a stored target type is a plugin's namespaced one. */\nexport function isPluginActivityTargetType(type: unknown): type is PluginActivityTargetType {\n  return typeof type === 'string' && PLUGIN_TARGET_TYPE.test(type)\n}\n\n/**\n * The noun a plugin's namespaced type names — `acme-mail:mailbox` →\n * `mailbox` — or `undefined` for any other type.\n */\nexport function pluginActivityTargetNoun(type: unknown): string | undefined {\n  if (typeof type !== 'string') return undefined\n  return PLUGIN_TARGET_TYPE.exec(type)?.[2]\n}\n\nexport interface PluginActivityAction {\n  /** The stored action code — dotted, stable, never a sentence. */\n  key: string\n  /** What a person reads for the code in the feed and the actor table. */\n  label: string\n  /** Which log(s) the writers put the code in. */\n  scope: PluginActivityScope | readonly PluginActivityScope[]\n  /** The feed target types rows carrying this code file their output under. */\n  resourceTypes?: readonly string[]\n}\n\n/**\n * The filter a plugin's coded rows share: one chip in the org feed and the\n * actor table, one facet group on the staff audit page.\n */\nexport interface PluginActivityGroup {\n  /** Stable group id — the facet's value (`ai`). */\n  id: string\n  /** The chip and the facet option (`AI`). */\n  label: string\n  /**\n   * Staff audit actions that belong to the group without carrying one of the\n   * registered codes — rows written by core on the plugin's behalf, matched\n   * by prefix (`billing.assistOverage.`).\n   */\n  staffAuditPrefixes?: readonly string[]\n  /**\n   * Staff audit actions a plugin's staff doors write when staff READ\n   * something rather than change it (AGL-2939): the audit log files them as\n   * an access. Matched exactly.\n   */\n  staffAuditAccessActions?: readonly string[]\n}\n\nexport interface PluginActivityRegistration {\n  pluginId: string\n  group: PluginActivityGroup\n  actions: readonly PluginActivityAction[]\n}\n\nconst registrations = new Map<string, PluginActivityRegistration>()\n\n/**\n * Idempotent per plugin — re-registration replaces that plugin's catalog. A\n * code already declared by a DIFFERENT plugin is refused for the whole\n * registration: two owners for one code would give the row two labels.\n */\nexport function registerPluginActivityActions(\n  registration: PluginActivityRegistration,\n): void {\n  const pluginId = registration.pluginId.trim()\n  if (!pluginId) throw new Error('plugin activity actions need a pluginId')\n  for (const action of registration.actions) {\n    const owner = ownerOfActivityAction(action.key)\n    if (owner && owner !== pluginId) {\n      throw new Error(\n        `activity action \"${action.key}\" is already declared by \"${owner}\"; ` +\n          `refused \"${pluginId}\"`,\n      )\n    }\n  }\n  registrations.set(pluginId, registration)\n}\n\nfunction ownerOfActivityAction(key: string): string | undefined {\n  for (const registration of registrations.values()) {\n    if (registration.actions.some((action) => action.key === key)) {\n      return registration.pluginId\n    }\n  }\n  return undefined\n}\n\n/** Every registration, in registration order. */\nexport function listPluginActivityRegistrations(): PluginActivityRegistration[] {\n  return [...registrations.values()]\n}\n\n/** Every declared action across plugins. */\nexport function listPluginActivityActions(): PluginActivityAction[] {\n  return listPluginActivityRegistrations().flatMap((entry) => [...entry.actions])\n}\n\n/** The readable label for a declared code; `undefined` for any other action. */\nexport function pluginActivityActionLabel(action: unknown): string | undefined {\n  if (typeof action !== 'string') return undefined\n  for (const registration of registrations.values()) {\n    const match = registration.actions.find((entry) => entry.key === action)\n    if (match) return match.label\n  }\n  return undefined\n}\n\n/** The group a stored action's code belongs to, or `undefined`. */\nexport function pluginActivityGroupForAction(\n  action: unknown,\n): PluginActivityGroup | undefined {\n  if (typeof action !== 'string') return undefined\n  for (const registration of registrations.values()) {\n    if (registration.actions.some((entry) => entry.key === action)) {\n      return registration.group\n    }\n  }\n  return undefined\n}\n\n/**\n * The filter chips the feeds offer: one per registered group, each with the\n * codes its chip keeps. What an `action isAnyOf …` request sends.\n */\nexport function listPluginActivityFilters(): Array<{\n  group: PluginActivityGroup\n  actions: string[]\n}> {\n  return listPluginActivityRegistrations().map((entry) => ({\n    group: entry.group,\n    actions: entry.actions.map((action) => action.key),\n  }))\n}\n\n/**\n * The staff audit facet group for an action: a registered group when the\n * action is one of its codes or starts with one of its prefixes, else the\n * action's leading namespace (`billing`, `org`, `plugins`).\n */\nexport function pluginStaffAuditActionGroup(action: unknown): string {\n  const text = typeof action === 'string' ? action.trim() : ''\n  if (!text) return ''\n  const byCode = pluginActivityGroupForAction(text)\n  if (byCode) return byCode.id\n  for (const registration of registrations.values()) {\n    const prefixes = registration.group.staffAuditPrefixes ?? []\n    if (prefixes.some((prefix) => text.startsWith(prefix))) {\n      return registration.group.id\n    }\n  }\n  const dot = text.indexOf('.')\n  return dot > 0 ? text.slice(0, dot) : text\n}\n\n/** Whether a staff audit action is a read some plugin declared (AGL-2939). */\nexport function isPluginStaffAuditAccess(action: unknown): boolean {\n  if (typeof action !== 'string' || !action) return false\n  for (const registration of registrations.values()) {\n    if (registration.group.staffAuditAccessActions?.includes(action)) return true\n  }\n  return false\n}\n\n/** How a facet group reads in the menu: a registered label, else the id. */\nexport function pluginStaffAuditActionGroupLabel(group: string): string {\n  for (const registration of registrations.values()) {\n    if (registration.group.id === group) return registration.group.label\n  }\n  return group\n}\n\n/** Test seam: forget every registration. */\nexport function resetPluginActivityActionsForTests(): void {\n  registrations.clear()\n}\n"],"names":["PLUGIN_TARGET_TYPE","isPluginActivityTargetType","type","test","pluginActivityTargetNoun","undefined","exec","registrations","Map","registerPluginActivityActions","registration","pluginId","trim","Error","action","actions","owner","ownerOfActivityAction","key","set","values","some","listPluginActivityRegistrations","listPluginActivityActions","flatMap","entry","pluginActivityActionLabel","match","find","label","pluginActivityGroupForAction","group","listPluginActivityFilters","map","pluginStaffAuditActionGroup","text","byCode","id","prefixes","staffAuditPrefixes","prefix","startsWith","dot","indexOf","slice","isPluginStaffAuditAccess","staffAuditAccessActions","includes","pluginStaffAuditActionGroupLabel","resetPluginActivityActionsForTests","clear"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;CAeC,GAgBD,+EAA+E,GAC/E,MAAMA,qBAAqB;AAE3B,+DAA+D,GAC/D,OAAO,SAASC,2BAA2BC,IAAa;IACtD,OAAO,OAAOA,SAAS,YAAYF,mBAAmBG,IAAI,CAACD;AAC7D;AAEA;;;CAGC,GACD,OAAO,SAASE,yBAAyBF,IAAa;QAE7CF;IADP,IAAI,OAAOE,SAAS,UAAU,OAAOG;IACrC,QAAOL,2BAAAA,mBAAmBM,IAAI,CAACJ,0BAAxBF,wBAA+B,CAAC,EAAE;AAC3C;AA0CA,MAAMO,gBAAgB,IAAIC;AAE1B;;;;CAIC,GACD,OAAO,SAASC,8BACdC,YAAwC;IAExC,MAAMC,WAAWD,aAAaC,QAAQ,CAACC,IAAI;IAC3C,IAAI,CAACD,UAAU,MAAM,IAAIE,MAAM;IAC/B,KAAK,MAAMC,UAAUJ,aAAaK,OAAO,CAAE;QACzC,MAAMC,QAAQC,sBAAsBH,OAAOI,GAAG;QAC9C,IAAIF,SAASA,UAAUL,UAAU;YAC/B,MAAM,IAAIE,MACR,CAAC,iBAAiB,EAAEC,OAAOI,GAAG,CAAC,0BAA0B,EAAEF,MAAM,GAAG,CAAC,GACnE,CAAC,SAAS,EAAEL,SAAS,CAAC,CAAC;QAE7B;IACF;IACAJ,cAAcY,GAAG,CAACR,UAAUD;AAC9B;AAEA,SAASO,sBAAsBC,GAAW;IACxC,KAAK,MAAMR,gBAAgBH,cAAca,MAAM,GAAI;QACjD,IAAIV,aAAaK,OAAO,CAACM,IAAI,CAAC,CAACP,SAAWA,OAAOI,GAAG,KAAKA,MAAM;YAC7D,OAAOR,aAAaC,QAAQ;QAC9B;IACF;IACA,OAAON;AACT;AAEA,+CAA+C,GAC/C,OAAO,SAASiB;IACd,OAAO;WAAIf,cAAca,MAAM;KAAG;AACpC;AAEA,0CAA0C,GAC1C,OAAO,SAASG;IACd,OAAOD,kCAAkCE,OAAO,CAAC,CAACC,QAAU;eAAIA,MAAMV,OAAO;SAAC;AAChF;AAEA,8EAA8E,GAC9E,OAAO,SAASW,0BAA0BZ,MAAe;IACvD,IAAI,OAAOA,WAAW,UAAU,OAAOT;IACvC,KAAK,MAAMK,gBAAgBH,cAAca,MAAM,GAAI;QACjD,MAAMO,QAAQjB,aAAaK,OAAO,CAACa,IAAI,CAAC,CAACH,QAAUA,MAAMP,GAAG,KAAKJ;QACjE,IAAIa,OAAO,OAAOA,MAAME,KAAK;IAC/B;IACA,OAAOxB;AACT;AAEA,iEAAiE,GACjE,OAAO,SAASyB,6BACdhB,MAAe;IAEf,IAAI,OAAOA,WAAW,UAAU,OAAOT;IACvC,KAAK,MAAMK,gBAAgBH,cAAca,MAAM,GAAI;QACjD,IAAIV,aAAaK,OAAO,CAACM,IAAI,CAAC,CAACI,QAAUA,MAAMP,GAAG,KAAKJ,SAAS;YAC9D,OAAOJ,aAAaqB,KAAK;QAC3B;IACF;IACA,OAAO1B;AACT;AAEA;;;CAGC,GACD,OAAO,SAAS2B;IAId,OAAOV,kCAAkCW,GAAG,CAAC,CAACR,QAAW,CAAA;YACvDM,OAAON,MAAMM,KAAK;YAClBhB,SAASU,MAAMV,OAAO,CAACkB,GAAG,CAAC,CAACnB,SAAWA,OAAOI,GAAG;QACnD,CAAA;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASgB,4BAA4BpB,MAAe;IACzD,MAAMqB,OAAO,OAAOrB,WAAW,WAAWA,OAAOF,IAAI,KAAK;IAC1D,IAAI,CAACuB,MAAM,OAAO;IAClB,MAAMC,SAASN,6BAA6BK;IAC5C,IAAIC,QAAQ,OAAOA,OAAOC,EAAE;IAC5B,KAAK,MAAM3B,gBAAgBH,cAAca,MAAM,GAAI;YAChCV;QAAjB,MAAM4B,YAAW5B,yCAAAA,aAAaqB,KAAK,CAACQ,kBAAkB,YAArC7B,yCAAyC,EAAE;QAC5D,IAAI4B,SAASjB,IAAI,CAAC,CAACmB,SAAWL,KAAKM,UAAU,CAACD,UAAU;YACtD,OAAO9B,aAAaqB,KAAK,CAACM,EAAE;QAC9B;IACF;IACA,MAAMK,MAAMP,KAAKQ,OAAO,CAAC;IACzB,OAAOD,MAAM,IAAIP,KAAKS,KAAK,CAAC,GAAGF,OAAOP;AACxC;AAEA,4EAA4E,GAC5E,OAAO,SAASU,yBAAyB/B,MAAe;IACtD,IAAI,OAAOA,WAAW,YAAY,CAACA,QAAQ,OAAO;IAClD,KAAK,MAAMJ,gBAAgBH,cAAca,MAAM,GAAI;YAC7CV;QAAJ,KAAIA,8CAAAA,aAAaqB,KAAK,CAACe,uBAAuB,qBAA1CpC,4CAA4CqC,QAAQ,CAACjC,SAAS,OAAO;IAC3E;IACA,OAAO;AACT;AAEA,0EAA0E,GAC1E,OAAO,SAASkC,iCAAiCjB,KAAa;IAC5D,KAAK,MAAMrB,gBAAgBH,cAAca,MAAM,GAAI;QACjD,IAAIV,aAAaqB,KAAK,CAACM,EAAE,KAAKN,OAAO,OAAOrB,aAAaqB,KAAK,CAACF,KAAK;IACtE;IACA,OAAOE;AACT;AAEA,0CAA0C,GAC1C,OAAO,SAASkB;IACd1C,cAAc2C,KAAK;AACrB"}

package/src/lib/plugin-manager/plugin-bridge.d.ts

@@ -0,0 +1,98 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Capability-scoped postMessage bridge protocol (AGL-45), per AGL-43 §2.
+ * The host frames a plugin on a dedicated cross-origin; this module is the
+ * versioned wire schema plus the validators BOTH sides run on every inbound
+ * message. v1 contract: host passes declared props IN, plugin returns a
+ * render height and named events OUT — no DOM, storage, or network access
+ * through the bridge. Pure module: no `window`, so it unit-tests directly.
+ */
+/** Bump when the message shape changes incompatibly. */
+export declare const PLUGIN_BRIDGE_VERSION = 1;
+/** Host → plugin. */
+export type PluginHostMessage = {
+    type: 'init';
+    v: number;
+    /** Props filtered to the manifest's declared `props` allowlist. */
+    props: Record<string, unknown>;
+    /** Color scheme the host wants the plugin to match. */
+    scheme?: 'light' | 'dark';
+} | {
+    type: 'props';
+    v: number;
+    props: Record<string, unknown>;
+};
+/** Plugin → host. */
+export type PluginGuestMessage = {
+    type: 'ready';
+    v: number;
+} | {
+    type: 'resize';
+    v: number;
+    height: number;
+} | {
+    type: 'event';
+    v: number;
+    /** Must be one of the manifest's declared `events`. */
+    name: string;
+    payload?: unknown;
+} | {
+    type: 'fetch-request';
+    v: number;
+    id: string;
+    url: string;
+    method?: string;
+    body?: string;
+} | {
+    type: 'error';
+    v: number;
+    message: string;
+};
+/** Host → plugin fetch reply (AGL-191). */
+export interface PluginFetchResponseMessage {
+    type: 'fetch-response';
+    v: number;
+    id: string;
+    ok: boolean;
+    status: number;
+    body?: string;
+    error?: string;
+}
+/** Largest plugin-declared render height the host will honor (px). */
+export declare const PLUGIN_MAX_HEIGHT_PX = 4096;
+/**
+ * Filters a props object to the manifest-declared allowlist and drops
+ * non-JSON-serializable values, so the host never leaks undeclared state
+ * (host doc, auth, other props) across the bridge.
+ */
+export declare function filterPluginProps(props: Record<string, unknown> | undefined, allowed: string[] | undefined): Record<string, unknown>;
+/**
+ * Validates a message the HOST received from a plugin frame. Callers must
+ * ALSO verify `event.origin === pluginOrigin` and `event.source === frame`
+ * before trusting the result — origin/source checks are the security
+ * boundary; this only shapes the payload. Unknown event names (not in the
+ * manifest allowlist) are rejected here.
+ */
+export declare function parseGuestMessage(data: unknown, allowedEvents: string[] | undefined): PluginGuestMessage | null;
+/**
+ * Validates a message a PLUGIN received from the host. The loader calls
+ * this after confirming `event.origin` is an aglyn origin. `init` carries
+ * the already-filtered props (the host filtered them via
+ * `filterPluginProps`), so the loader can trust the shape.
+ */
+export declare function parseHostMessage(data: unknown): PluginHostMessage | null;

package/src/lib/plugin-manager/plugin-bridge.js

@@ -0,0 +1,154 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * Capability-scoped postMessage bridge protocol (AGL-45), per AGL-43 §2.
+ * The host frames a plugin on a dedicated cross-origin; this module is the
+ * versioned wire schema plus the validators BOTH sides run on every inbound
+ * message. v1 contract: host passes declared props IN, plugin returns a
+ * render height and named events OUT — no DOM, storage, or network access
+ * through the bridge. Pure module: no `window`, so it unit-tests directly.
+ */ /** Bump when the message shape changes incompatibly. */ export const PLUGIN_BRIDGE_VERSION = 1;
+/** Largest plugin-declared render height the host will honor (px). */ export const PLUGIN_MAX_HEIGHT_PX = 4096;
+const isPlainObject = (value)=>Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+/**
+ * Filters a props object to the manifest-declared allowlist and drops
+ * non-JSON-serializable values, so the host never leaks undeclared state
+ * (host doc, auth, other props) across the bridge.
+ */ export function filterPluginProps(props, allowed) {
+    if (!props || !(allowed == null ? void 0 : allowed.length)) return {};
+    const out = {};
+    for (const key of allowed){
+        const value = props[key];
+        if (value === undefined) continue;
+        try {
+            // JSON-serializable subset check. `JSON.stringify` returns undefined
+            // for functions/symbols (no throw) and throws on cycles/BigInt — both
+            // must be dropped so undeclared/unclonable state can't cross.
+            if (JSON.stringify(value) === undefined) continue;
+            out[key] = value;
+        } catch (unused) {
+        // Skip unserializable values silently — they can't cross postMessage.
+        }
+    }
+    return out;
+}
+/**
+ * Validates a message the HOST received from a plugin frame. Callers must
+ * ALSO verify `event.origin === pluginOrigin` and `event.source === frame`
+ * before trusting the result — origin/source checks are the security
+ * boundary; this only shapes the payload. Unknown event names (not in the
+ * manifest allowlist) are rejected here.
+ */ export function parseGuestMessage(data, allowedEvents) {
+    if (!isPlainObject(data)) return null;
+    if (data['v'] !== PLUGIN_BRIDGE_VERSION) return null;
+    switch(data['type']){
+        case 'ready':
+            return {
+                type: 'ready',
+                v: PLUGIN_BRIDGE_VERSION
+            };
+        case 'resize':
+            {
+                const height = Number(data['height']);
+                if (!Number.isFinite(height) || height < 0) return null;
+                return {
+                    type: 'resize',
+                    v: PLUGIN_BRIDGE_VERSION,
+                    height: Math.min(height, PLUGIN_MAX_HEIGHT_PX)
+                };
+            }
+        case 'event':
+            {
+                var _data_name;
+                const name = String((_data_name = data['name']) != null ? _data_name : '');
+                if (!name || !(allowedEvents != null ? allowedEvents : []).includes(name)) return null;
+                let payload = data['payload'];
+                // Only pass JSON-round-trippable payloads to host code.
+                try {
+                    payload = payload === undefined ? undefined : JSON.parse(JSON.stringify(payload));
+                } catch (unused) {
+                    payload = undefined;
+                }
+                return {
+                    type: 'event',
+                    v: PLUGIN_BRIDGE_VERSION,
+                    name,
+                    payload
+                };
+            }
+        case 'fetch-request':
+            {
+                var _data_id, _data_url, _data_method;
+                // Shape-only here; the HOST re-validates the url against the manifest
+                // network allowlist (isPluginNetworkAllowed) before proxying.
+                const id = String((_data_id = data['id']) != null ? _data_id : '');
+                const url = String((_data_url = data['url']) != null ? _data_url : '');
+                if (!id || !url) return null;
+                const rawMethod = String((_data_method = data['method']) != null ? _data_method : 'GET').toUpperCase();
+                const method = rawMethod === 'POST' ? 'POST' : 'GET';
+                const body = typeof data['body'] === 'string' ? data['body'] : undefined;
+                return _extends({
+                    type: 'fetch-request',
+                    v: PLUGIN_BRIDGE_VERSION,
+                    id,
+                    url,
+                    method
+                }, body !== undefined ? {
+                    body
+                } : {});
+            }
+        case 'error':
+            var _data_message;
+            return {
+                type: 'error',
+                v: PLUGIN_BRIDGE_VERSION,
+                message: String((_data_message = data['message']) != null ? _data_message : 'Plugin error').slice(0, 500)
+            };
+        default:
+            return null;
+    }
+}
+/**
+ * Validates a message a PLUGIN received from the host. The loader calls
+ * this after confirming `event.origin` is an aglyn origin. `init` carries
+ * the already-filtered props (the host filtered them via
+ * `filterPluginProps`), so the loader can trust the shape.
+ */ export function parseHostMessage(data) {
+    if (!isPlainObject(data)) return null;
+    if (data['v'] !== PLUGIN_BRIDGE_VERSION) return null;
+    if (data['type'] === 'init' || data['type'] === 'props') {
+        const props = isPlainObject(data['props']) ? data['props'] : {};
+        if (data['type'] === 'init') {
+            const scheme = data['scheme'];
+            return _extends({
+                type: 'init',
+                v: PLUGIN_BRIDGE_VERSION,
+                props
+            }, scheme === 'light' || scheme === 'dark' ? {
+                scheme
+            } : {});
+        }
+        return {
+            type: 'props',
+            v: PLUGIN_BRIDGE_VERSION,
+            props
+        };
+    }
+    return null;
+}
+
+//# sourceMappingURL=plugin-bridge.js.map

package/src/lib/plugin-manager/plugin-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-bridge.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Capability-scoped postMessage bridge protocol (AGL-45), per AGL-43 §2.\n * The host frames a plugin on a dedicated cross-origin; this module is the\n * versioned wire schema plus the validators BOTH sides run on every inbound\n * message. v1 contract: host passes declared props IN, plugin returns a\n * render height and named events OUT — no DOM, storage, or network access\n * through the bridge. Pure module: no `window`, so it unit-tests directly.\n */\n\n/** Bump when the message shape changes incompatibly. */\nexport const PLUGIN_BRIDGE_VERSION = 1\n\n/** Host → plugin. */\nexport type PluginHostMessage =\n  | {\n      type: 'init'\n      v: number\n      /** Props filtered to the manifest's declared `props` allowlist. */\n      props: Record<string, unknown>\n      /** Color scheme the host wants the plugin to match. */\n      scheme?: 'light' | 'dark'\n    }\n  | { type: 'props'; v: number; props: Record<string, unknown> }\n\n/** Plugin → host. */\nexport type PluginGuestMessage =\n  | { type: 'ready'; v: number }\n  | { type: 'resize'; v: number; height: number }\n  | {\n      type: 'event'\n      v: number\n      /** Must be one of the manifest's declared `events`. */\n      name: string\n      payload?: unknown\n    }\n  | {\n      // Host-mediated fetch (AGL-191): the host validates `url` against the\n      // manifest network allowlist and proxies it, replying with the\n      // matching `id`.\n      type: 'fetch-request'\n      v: number\n      id: string\n      url: string\n      method?: string\n      body?: string\n    }\n  | { type: 'error'; v: number; message: string }\n\n/** Host → plugin fetch reply (AGL-191). */\nexport interface PluginFetchResponseMessage {\n  type: 'fetch-response'\n  v: number\n  id: string\n  ok: boolean\n  status: number\n  body?: string\n  error?: string\n}\n\n/** Largest plugin-declared render height the host will honor (px). */\nexport const PLUGIN_MAX_HEIGHT_PX = 4096\n\nconst isPlainObject = (value: unknown): value is Record<string, unknown> =>\n  Boolean(value) && typeof value === 'object' && !Array.isArray(value)\n\n/**\n * Filters a props object to the manifest-declared allowlist and drops\n * non-JSON-serializable values, so the host never leaks undeclared state\n * (host doc, auth, other props) across the bridge.\n */\nexport function filterPluginProps(\n  props: Record<string, unknown> | undefined,\n  allowed: string[] | undefined,\n): Record<string, unknown> {\n  if (!props || !allowed?.length) return {}\n  const out: Record<string, unknown> = {}\n  for (const key of allowed) {\n    const value = props[key]\n    if (value === undefined) continue\n    try {\n      // JSON-serializable subset check. `JSON.stringify` returns undefined\n      // for functions/symbols (no throw) and throws on cycles/BigInt — both\n      // must be dropped so undeclared/unclonable state can't cross.\n      if (JSON.stringify(value) === undefined) continue\n      out[key] = value\n    } catch {\n      // Skip unserializable values silently — they can't cross postMessage.\n    }\n  }\n  return out\n}\n\n/**\n * Validates a message the HOST received from a plugin frame. Callers must\n * ALSO verify `event.origin === pluginOrigin` and `event.source === frame`\n * before trusting the result — origin/source checks are the security\n * boundary; this only shapes the payload. Unknown event names (not in the\n * manifest allowlist) are rejected here.\n */\nexport function parseGuestMessage(\n  data: unknown,\n  allowedEvents: string[] | undefined,\n): PluginGuestMessage | null {\n  if (!isPlainObject(data)) return null\n  if (data['v'] !== PLUGIN_BRIDGE_VERSION) return null\n  switch (data['type']) {\n    case 'ready':\n      return { type: 'ready', v: PLUGIN_BRIDGE_VERSION }\n    case 'resize': {\n      const height = Number(data['height'])\n      if (!Number.isFinite(height) || height < 0) return null\n      return {\n        type: 'resize',\n        v: PLUGIN_BRIDGE_VERSION,\n        height: Math.min(height, PLUGIN_MAX_HEIGHT_PX),\n      }\n    }\n    case 'event': {\n      const name = String(data['name'] ?? '')\n      if (!name || !(allowedEvents ?? []).includes(name)) return null\n      let payload = data['payload']\n      // Only pass JSON-round-trippable payloads to host code.\n      try {\n        payload = payload === undefined ? undefined : JSON.parse(\n          JSON.stringify(payload),\n        )\n      } catch {\n        payload = undefined\n      }\n      return { type: 'event', v: PLUGIN_BRIDGE_VERSION, name, payload }\n    }\n    case 'fetch-request': {\n      // Shape-only here; the HOST re-validates the url against the manifest\n      // network allowlist (isPluginNetworkAllowed) before proxying.\n      const id = String(data['id'] ?? '')\n      const url = String(data['url'] ?? '')\n      if (!id || !url) return null\n      const rawMethod = String(data['method'] ?? 'GET').toUpperCase()\n      const method = rawMethod === 'POST' ? 'POST' : 'GET'\n      const body =\n        typeof data['body'] === 'string' ? data['body'] : undefined\n      return {\n        type: 'fetch-request',\n        v: PLUGIN_BRIDGE_VERSION,\n        id,\n        url,\n        method,\n        ...(body !== undefined ? { body } : {}),\n      }\n    }\n    case 'error':\n      return {\n        type: 'error',\n        v: PLUGIN_BRIDGE_VERSION,\n        message: String(data['message'] ?? 'Plugin error').slice(0, 500),\n      }\n    default:\n      return null\n  }\n}\n\n/**\n * Validates a message a PLUGIN received from the host. The loader calls\n * this after confirming `event.origin` is an aglyn origin. `init` carries\n * the already-filtered props (the host filtered them via\n * `filterPluginProps`), so the loader can trust the shape.\n */\nexport function parseHostMessage(data: unknown): PluginHostMessage | null {\n  if (!isPlainObject(data)) return null\n  if (data['v'] !== PLUGIN_BRIDGE_VERSION) return null\n  if (data['type'] === 'init' || data['type'] === 'props') {\n    const props = isPlainObject(data['props'])\n      ? (data['props'] as Record<string, unknown>)\n      : {}\n    if (data['type'] === 'init') {\n      const scheme = data['scheme']\n      return {\n        type: 'init',\n        v: PLUGIN_BRIDGE_VERSION,\n        props,\n        ...(scheme === 'light' || scheme === 'dark' ? { scheme } : {}),\n      }\n    }\n    return { type: 'props', v: PLUGIN_BRIDGE_VERSION, props }\n  }\n  return null\n}\n"],"names":["PLUGIN_BRIDGE_VERSION","PLUGIN_MAX_HEIGHT_PX","isPlainObject","value","Boolean","Array","isArray","filterPluginProps","props","allowed","length","out","key","undefined","JSON","stringify","parseGuestMessage","data","allowedEvents","type","v","height","Number","isFinite","Math","min","name","String","includes","payload","parse","id","url","rawMethod","toUpperCase","method","body","message","slice","parseHostMessage","scheme"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;CAOC,GAED,sDAAsD,GACtD,OAAO,MAAMA,wBAAwB,EAAC;AAiDtC,oEAAoE,GACpE,OAAO,MAAMC,uBAAuB,KAAI;AAExC,MAAMC,gBAAgB,CAACC,QACrBC,QAAQD,UAAU,OAAOA,UAAU,YAAY,CAACE,MAAMC,OAAO,CAACH;AAEhE;;;;CAIC,GACD,OAAO,SAASI,kBACdC,KAA0C,EAC1CC,OAA6B;IAE7B,IAAI,CAACD,SAAS,EAACC,2BAAAA,QAASC,MAAM,GAAE,OAAO,CAAC;IACxC,MAAMC,MAA+B,CAAC;IACtC,KAAK,MAAMC,OAAOH,QAAS;QACzB,MAAMN,QAAQK,KAAK,CAACI,IAAI;QACxB,IAAIT,UAAUU,WAAW;QACzB,IAAI;YACF,qEAAqE;YACrE,sEAAsE;YACtE,8DAA8D;YAC9D,IAAIC,KAAKC,SAAS,CAACZ,WAAWU,WAAW;YACzCF,GAAG,CAACC,IAAI,GAAGT;QACb,EAAE,eAAM;QACN,sEAAsE;QACxE;IACF;IACA,OAAOQ;AACT;AAEA;;;;;;CAMC,GACD,OAAO,SAASK,kBACdC,IAAa,EACbC,aAAmC;IAEnC,IAAI,CAAChB,cAAce,OAAO,OAAO;IACjC,IAAIA,IAAI,CAAC,IAAI,KAAKjB,uBAAuB,OAAO;IAChD,OAAQiB,IAAI,CAAC,OAAO;QAClB,KAAK;YACH,OAAO;gBAAEE,MAAM;gBAASC,GAAGpB;YAAsB;QACnD,KAAK;YAAU;gBACb,MAAMqB,SAASC,OAAOL,IAAI,CAAC,SAAS;gBACpC,IAAI,CAACK,OAAOC,QAAQ,CAACF,WAAWA,SAAS,GAAG,OAAO;gBACnD,OAAO;oBACLF,MAAM;oBACNC,GAAGpB;oBACHqB,QAAQG,KAAKC,GAAG,CAACJ,QAAQpB;gBAC3B;YACF;QACA,KAAK;YAAS;oBACQgB;gBAApB,MAAMS,OAAOC,QAAOV,aAAAA,IAAI,CAAC,OAAO,YAAZA,aAAgB;gBACpC,IAAI,CAACS,QAAQ,CAAC,CAACR,wBAAAA,gBAAiB,EAAE,EAAEU,QAAQ,CAACF,OAAO,OAAO;gBAC3D,IAAIG,UAAUZ,IAAI,CAAC,UAAU;gBAC7B,wDAAwD;gBACxD,IAAI;oBACFY,UAAUA,YAAYhB,YAAYA,YAAYC,KAAKgB,KAAK,CACtDhB,KAAKC,SAAS,CAACc;gBAEnB,EAAE,eAAM;oBACNA,UAAUhB;gBACZ;gBACA,OAAO;oBAAEM,MAAM;oBAASC,GAAGpB;oBAAuB0B;oBAAMG;gBAAQ;YAClE;QACA,KAAK;YAAiB;oBAGFZ,UACCA,WAEMA;gBALzB,sEAAsE;gBACtE,8DAA8D;gBAC9D,MAAMc,KAAKJ,QAAOV,WAAAA,IAAI,CAAC,KAAK,YAAVA,WAAc;gBAChC,MAAMe,MAAML,QAAOV,YAAAA,IAAI,CAAC,MAAM,YAAXA,YAAe;gBAClC,IAAI,CAACc,MAAM,CAACC,KAAK,OAAO;gBACxB,MAAMC,YAAYN,QAAOV,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB,OAAOiB,WAAW;gBAC7D,MAAMC,SAASF,cAAc,SAAS,SAAS;gBAC/C,MAAMG,OACJ,OAAOnB,IAAI,CAAC,OAAO,KAAK,WAAWA,IAAI,CAAC,OAAO,GAAGJ;gBACpD,OAAO;oBACLM,MAAM;oBACNC,GAAGpB;oBACH+B;oBACAC;oBACAG;mBACIC,SAASvB,YAAY;oBAAEuB;gBAAK,IAAI,CAAC;YAEzC;QACA,KAAK;gBAIenB;YAHlB,OAAO;gBACLE,MAAM;gBACNC,GAAGpB;gBACHqC,SAASV,QAAOV,gBAAAA,IAAI,CAAC,UAAU,YAAfA,gBAAmB,gBAAgBqB,KAAK,CAAC,GAAG;YAC9D;QACF;YACE,OAAO;IACX;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASC,iBAAiBtB,IAAa;IAC5C,IAAI,CAACf,cAAce,OAAO,OAAO;IACjC,IAAIA,IAAI,CAAC,IAAI,KAAKjB,uBAAuB,OAAO;IAChD,IAAIiB,IAAI,CAAC,OAAO,KAAK,UAAUA,IAAI,CAAC,OAAO,KAAK,SAAS;QACvD,MAAMT,QAAQN,cAAce,IAAI,CAAC,QAAQ,IACpCA,IAAI,CAAC,QAAQ,GACd,CAAC;QACL,IAAIA,IAAI,CAAC,OAAO,KAAK,QAAQ;YAC3B,MAAMuB,SAASvB,IAAI,CAAC,SAAS;YAC7B,OAAO;gBACLE,MAAM;gBACNC,GAAGpB;gBACHQ;eACIgC,WAAW,WAAWA,WAAW,SAAS;gBAAEA;YAAO,IAAI,CAAC;QAEhE;QACA,OAAO;YAAErB,MAAM;YAASC,GAAGpB;YAAuBQ;QAAM;IAC1D;IACA,OAAO;AACT"}