@ashlr/hub 3.3.0 → 3.3.2

package/dist/core/web/public/next/index.html

@@ -6,8 +6,8 @@
     <meta name="color-scheme" content="light dark" />
     <title>ashlr — operator console</title>
     <meta name="referrer" content="no-referrer" />
-    <script type="module" crossorigin src="/next/assets/index-Ct0mf8n4.js"></script>
-    <link rel="stylesheet" crossorigin href="/next/assets/index-CY0U241s.css">
+    <script type="module" crossorigin src="/next/assets/index-zVKD9krw.js"></script>
+    <link rel="stylesheet" crossorigin href="/next/assets/index-CDHQraxS.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/core/web/read-session-revocations.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Bounded, process-local revocation state for signed dashboard read sessions.
+ *
+ * Tickets are otherwise self-contained, so deleting the browser cookie alone
+ * would not revoke a copied ticket. This registry remembers the exact ticket
+ * digest until its signed expiry. If the bounded registry saturates, it tells
+ * the owning server to rotate the independent ticket-signing key and drain
+ * every stream. That invalidates all old tickets without evicting a still-live
+ * revocation and still permits a fresh ticket exchange afterward.
+ */
+export interface RevocableReadSession {
+    id: string;
+    expiresAt: number;
+}
+export interface ReadSessionRevocationResult {
+    rotateSigningKey: boolean;
+}
+export declare class ReadSessionRevocations {
+    private readonly maxEntries;
+    private readonly revoked;
+    constructor(maxEntries?: number);
+    private prune;
+    isRevoked(id: string, nowMs?: number): boolean;
+    revoke(session: RevocableReadSession, nowMs?: number): ReadSessionRevocationResult;
+    clear(): void;
+}

package/dist/core/web/read-session-revocations.js

@@ -0,0 +1,48 @@
+/**
+ * Bounded, process-local revocation state for signed dashboard read sessions.
+ *
+ * Tickets are otherwise self-contained, so deleting the browser cookie alone
+ * would not revoke a copied ticket. This registry remembers the exact ticket
+ * digest until its signed expiry. If the bounded registry saturates, it tells
+ * the owning server to rotate the independent ticket-signing key and drain
+ * every stream. That invalidates all old tickets without evicting a still-live
+ * revocation and still permits a fresh ticket exchange afterward.
+ */
+export class ReadSessionRevocations {
+    maxEntries;
+    revoked = new Map();
+    constructor(maxEntries = 1_024) {
+        this.maxEntries = maxEntries;
+        if (!Number.isSafeInteger(maxEntries) || maxEntries < 1) {
+            throw new Error('read session revocation capacity must be a positive integer');
+        }
+    }
+    prune(nowMs) {
+        for (const [id, expiresAt] of this.revoked) {
+            if (expiresAt <= nowMs)
+                this.revoked.delete(id);
+        }
+    }
+    isRevoked(id, nowMs = Date.now()) {
+        this.prune(nowMs);
+        return (this.revoked.get(id) ?? 0) > nowMs;
+    }
+    revoke(session, nowMs = Date.now()) {
+        this.prune(nowMs);
+        if (session.expiresAt <= nowMs) {
+            return { rotateSigningKey: false };
+        }
+        const priorExpiry = this.revoked.get(session.id);
+        if (priorExpiry !== undefined || this.revoked.size < this.maxEntries) {
+            this.revoked.set(session.id, Math.max(priorExpiry ?? 0, session.expiresAt));
+            return { rotateSigningKey: false };
+        }
+        // Never evict a live revocation. The caller must synchronously rotate the
+        // ticket-signing key and drain all streams before returning logout success.
+        return { rotateSigningKey: true };
+    }
+    clear() {
+        this.revoked.clear();
+    }
+}
+//# sourceMappingURL=read-session-revocations.js.map

package/dist/core/web/read-session-revocations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-session-revocations.js","sourceRoot":"","sources":["../../../src/core/web/read-session-revocations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAWH,MAAM,OAAO,sBAAsB;IAGJ;IAFZ,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAErD,YAA6B,aAAa,KAAK;QAAlB,eAAU,GAAV,UAAU,CAAQ;QAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAa;QACzB,KAAK,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3C,IAAI,SAAS,IAAI,KAAK;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,SAAS,CAAC,EAAU,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;QACtC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;IAC7C,CAAC;IAED,MAAM,CAAC,OAA6B,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;QACtD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,OAAO,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;YAC/B,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACrE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YAC5E,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;QACrC,CAAC;QAED,0EAA0E;QAC1E,4EAA4E;QAC5E,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/core/web/server.js

@@ -20,7 +20,8 @@ import { createServer } from 'node:http';
 import { createHash, createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
 import { fileURLToPath } from 'node:url';
 import { join, dirname } from 'node:path';
-import { handleApi, drainSseConnections } from './api.js';
+import { handleApi, drainSseConnections, drainSseSession } from './api.js';
+import { ReadSessionRevocations } from './read-session-revocations.js';
 import { serveStatic } from './static.js';
 // ---------------------------------------------------------------------------
 // Host-header allowlist (anti DNS-rebinding)
@@ -38,6 +39,7 @@ const MAX_READ_SESSION_BYTES = 256;
 const READ_CLIENT_HEADER = 'x-ashlr-read-client';
 const READ_CLIENT_QUERY = 'client';
 const READ_CLIENT_RE = /^[a-f0-9]{64}$/;
+const READ_SESSION_REVOCATION_CAPACITY = 64;
 function isAllowedHost(host) {
     if (!host)
         return false;
@@ -71,7 +73,10 @@ function sendJson(res, status, body, headers = {}) {
         'X-Content-Type-Options': 'nosniff',
         ...headers,
     });
-    res.end(JSON.stringify(body));
+    const publicBody = body && typeof body === 'object' && 'error' in body
+        ? { ...body, error: String(body.error).slice(0, 512) }
+        : body;
+    res.end(JSON.stringify(publicBody));
 }
 function clientBinding(clientProof) {
     return createHash('sha256').update(clientProof, 'utf8').digest('base64url');
@@ -86,12 +91,12 @@ function ticketPayload(expiresAtMs, nonce, binding) {
         binding,
     ].join('.');
 }
-function signTicketPayload(payload, token) {
-    return createHmac('sha256', token).update(payload, 'utf8').digest('base64url');
+function signTicketPayload(payload, signingKey) {
+    return createHmac('sha256', signingKey).update(payload, 'utf8').digest('base64url');
 }
-function mintReadSession(token, clientProof, nowMs = Date.now()) {
+function mintReadSession(signingKey, clientProof, nowMs = Date.now()) {
     const payload = ticketPayload(nowMs + READ_SESSION_TTL_MS, randomBytes(16).toString('base64url'), clientBinding(clientProof));
-    return `${payload}.${signTicketPayload(payload, token)}`;
+    return `${payload}.${signTicketPayload(payload, signingKey)}`;
 }
 function readClientHeader(req) {
     const value = headerValue(req, READ_CLIENT_HEADER);
@@ -138,40 +143,48 @@ function readCookie(req, name) {
     }
     return found;
 }
-function validReadSession(req, token, url, nowMs = Date.now()) {
+function validateReadSession(req, signingKey, url, revocations, purpose = 'read', nowMs = Date.now()) {
     const ticket = readCookie(req, READ_SESSION_COOKIE);
     if (!ticket)
-        return false;
-    const clientProof = readSessionClientProof(req, url);
+        return null;
+    const clientProof = purpose === 'logout' ? readClientHeader(req) : readSessionClientProof(req, url);
     if (!clientProof)
-        return false;
+        return null;
     const parts = ticket.split('.');
     if (parts.length !== 7)
-        return false;
+        return null;
     const [version, method, pathPrefix, expiresRaw, nonce, binding, signature] = parts;
     if (version !== READ_SESSION_VERSION
         || method !== READ_SESSION_METHOD
         || pathPrefix !== READ_SESSION_PATH_PREFIX
-        || (req.method ?? 'GET').toUpperCase() !== method
-        || !url.pathname.startsWith(pathPrefix)
+        || (purpose === 'read' && (req.method ?? 'GET').toUpperCase() !== method)
+        || (purpose === 'read' && !url.pathname.startsWith(pathPrefix))
         || !/^\d{13}$/.test(expiresRaw ?? '')
         || !/^[A-Za-z0-9_-]{22}$/.test(nonce ?? '')
         || !/^[A-Za-z0-9_-]{43}$/.test(binding ?? '')
         || !/^[A-Za-z0-9_-]{43}$/.test(signature ?? ''))
-        return false;
+        return null;
     const expiresAtMs = Number(expiresRaw);
     if (!Number.isSafeInteger(expiresAtMs)
         || expiresAtMs <= nowMs
         || expiresAtMs > nowMs + READ_SESSION_TTL_MS + READ_SESSION_FUTURE_SKEW_MS)
-        return false;
+        return null;
     if (!safeEqual(binding, clientBinding(clientProof)))
-        return false;
+        return null;
     const payload = ticketPayload(expiresAtMs, nonce, binding);
-    return safeEqual(signature, signTicketPayload(payload, token));
+    if (!safeEqual(signature, signTicketPayload(payload, signingKey)))
+        return null;
+    const session = {
+        id: createHash('sha256').update(ticket, 'utf8').digest('hex'),
+        expiresAt: expiresAtMs,
+    };
+    return revocations.isRevoked(session.id, nowMs) ? null : session;
 }
-function hasReadAuthority(req, token, url) {
-    return safeEqual(headerValue(req, 'x-ashlr-token'), token)
-        || validReadSession(req, token, url);
+function readAuthority(req, token, signingKey, url, revocations) {
+    if (safeEqual(headerValue(req, 'x-ashlr-token'), token))
+        return { kind: 'header' };
+    const session = validateReadSession(req, signingKey, url, revocations);
+    return session ? { kind: 'session', session } : null;
 }
 function sessionCookie(value, maxAgeSeconds) {
     // The dashboard is intentionally plain HTTP on loopback, so a Secure cookie
@@ -211,10 +224,18 @@ export async function startServer(cfg, opts) {
     // while the mutation token is accepted only by handleApi mutation gates.
     const readToken = randomBytes(32).toString('hex');
     const token = randomBytes(32).toString('hex');
+    let readSessionSigningKey = randomBytes(32).toString('hex');
+    const readSessionRevocations = new ReadSessionRevocations(READ_SESSION_REVOCATION_CAPACITY);
     const server = createServer((req, res) => {
         // The EventSource client proof appears in its same-origin URL because the
         // browser API cannot set headers. Never allow it to escape in a Referer.
         res.setHeader('Referrer-Policy', 'no-referrer');
+        // Legacy index.html contains its stylesheet inline; scripts remain
+        // external-only. The new console uses external assets for both.
+        res.setHeader('Content-Security-Policy', "default-src 'self'; base-uri 'none'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'");
+        res.setHeader('X-Frame-Options', 'DENY');
+        res.setHeader('Cross-Origin-Resource-Policy', 'same-origin');
+        res.setHeader('Permissions-Policy', 'camera=(), microphone=(), geolocation=()');
         // ── 1. Host-header allowlist (anti DNS-rebinding) ──────────────────────
         if (!isAllowedHost(req.headers.host)) {
             res.writeHead(403, { 'Content-Type': 'text/plain' });
@@ -228,6 +249,7 @@ export async function startServer(cfg, opts) {
         }
         const path = url.pathname;
         const method = (req.method ?? 'GET').toUpperCase();
+        const authority = readAuthority(req, readToken, readSessionSigningKey, url, readSessionRevocations);
         // Exchange the raw operator token for a short-lived, read-only browser
         // session. The ticket is HMAC-bound to this server process and cannot be
         // used by any mutation route, which still requires the raw header.
@@ -241,13 +263,32 @@ export async function startServer(cfg, opts) {
                     sendJson(res, 400, { error: 'invalid read client proof' });
                     return;
                 }
-                const ticket = mintReadSession(readToken, readClientHeader(req));
+                const ticket = mintReadSession(readSessionSigningKey, readClientHeader(req));
                 sendJson(res, 204, undefined, {
                     'Set-Cookie': sessionCookie(ticket, Math.floor(READ_SESSION_TTL_MS / 1000)),
                 });
                 return;
             }
             if (method === 'DELETE') {
+                const session = !url.search
+                    ? validateReadSession(req, readSessionSigningKey, url, readSessionRevocations, 'logout')
+                    : null;
+                if (!session) {
+                    sendJson(res, 401, { code: 'SESSION_REQUIRED', error: 'valid read session required' });
+                    return;
+                }
+                const revocation = readSessionRevocations.revoke(session);
+                if (revocation.rotateSigningKey) {
+                    // Capacity exhaustion must never resurrect an evicted ticket. Rotate
+                    // the independent signer synchronously and drain all old streams;
+                    // the stable raw read token can still mint fresh tickets afterward.
+                    readSessionSigningKey = randomBytes(32).toString('hex');
+                    readSessionRevocations.clear();
+                    drainSseConnections();
+                }
+                else {
+                    drainSseSession(session.id);
+                }
                 sendJson(res, 204, undefined, {
                     'Set-Cookie': sessionCookie('', 0),
                 });
@@ -258,7 +299,7 @@ export async function startServer(cfg, opts) {
         }
         // Public liveness is intentionally content-free and bounded. Operators
         // with read authority retain the richer persisted /api/health projection.
-        if (path === '/api/health' && method === 'GET' && !hasReadAuthority(req, readToken, url)) {
+        if (path === '/api/health' && method === 'GET' && !authority) {
             sendJson(res, 200, { ok: true });
             return;
         }
@@ -266,7 +307,7 @@ export async function startServer(cfg, opts) {
         // GET (including SSE) is default-deny here before route dispatch.
         if (method === 'GET'
             && (path === '/api' || path.startsWith('/api/'))
-            && !hasReadAuthority(req, readToken, url)) {
+            && !authority) {
             sendJson(res, 401, { error: 'unauthorized: read session required' }, {
                 Vary: 'Cookie, X-Ashlr-Token, X-Ashlr-Read-Client',
             });
@@ -274,7 +315,11 @@ export async function startServer(cfg, opts) {
         }
         // ── 2. API routes ──────────────────────────────────────────────────────
         // handleApi is async; wrap to catch errors without crashing the server.
-        handleApi(req, res, cfg, { token, allowDispatch: opts.allowDispatch })
+        handleApi(req, res, cfg, {
+            token,
+            allowDispatch: opts.allowDispatch,
+            readSession: authority?.kind === 'session' ? authority.session : undefined,
+        })
             .then((handled) => {
             if (handled)
                 return;
@@ -288,10 +333,10 @@ export async function startServer(cfg, opts) {
             .catch(() => {
             // Never let an unhandled rejection crash the server.
             if (!res.headersSent) {
-                res.writeHead(500, { 'Content-Type': 'text/plain' });
+                sendJson(res, 500, { code: 'INTERNAL_ERROR', error: 'internal server error' });
             }
-            if (!res.writableEnded) {
-                res.end('Internal server error');
+            else if (!res.writableEnded) {
+                res.end();
             }
         });
     });
@@ -329,6 +374,7 @@ export async function startServer(cfg, opts) {
                 // Drain all open SSE response streams registered by handleApi, then
                 // close the HTTP server (stops accepting new connections).
                 drainSseConnections();
+                readSessionRevocations.clear();
                 if (typeof server.closeAllConnections === 'function') {
                     server.closeAllConnections();
                 }

package/dist/core/web/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/core/web/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,8EAA8E;AAC9E,6CAA6C;AAC7C,uEAAuE;AACvE,8EAA8E;AAE9E,MAAM,OAAO,GAAG,4CAA4C,CAAC;AAE7D,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AACjD,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AACzC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAC1C,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AACjD,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AACnC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,SAAS,aAAa,CAAC,IAAwB;IAC7C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,WAAW,CAAC,GAAoB,EAAE,IAAY;IACrD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,OAAO,GAAG,IAAI,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,GAAoB;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,GAAmB,EACnB,MAAc,EACd,IAAa,EACb,UAAkC,EAAE;IAEpC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,iCAAiC;QACjD,eAAe,EAAE,UAAU;QAC3B,wBAAwB,EAAE,SAAS;QACnC,GAAG,OAAO;KACX,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB,EAAE,KAAa,EAAE,OAAe;IACxE,OAAO;QACL,oBAAoB;QACpB,mBAAmB;QACnB,wBAAwB;QACxB,MAAM,CAAC,WAAW,CAAC;QACnB,KAAK;QACL,OAAO;KACR,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,KAAa;IACvD,OAAO,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,WAAmB,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;IAC7E,MAAM,OAAO,GAAG,aAAa,CAC3B,KAAK,GAAG,mBAAmB,EAC3B,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EACrC,aAAa,CAAC,WAAW,CAAC,CAC3B,CAAC;IACF,OAAO,GAAG,OAAO,IAAI,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAoB;IAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACnD,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,GAAoB,EAAE,GAAQ;IAC5D,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QACnC,IAAI,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC;YAAE,OAAO,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,iBAAiB;YAAE,OAAO,EAAE,CAAC;QAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAAE,OAAO,EAAE,CAAC;IACvD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,mFAAmF;AACnF,SAAS,UAAU,CAAC,GAAoB,EAAE,IAAY;IACpD,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,uBAAuB;QAAE,OAAO,EAAE,CAAC;IAEhF,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;YAAE,SAAS;QACxE,IAAI,KAAK;YAAE,OAAO,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,sBAAsB;YAAE,OAAO,EAAE,CAAC;QACnF,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAoB,EACpB,KAAa,EACb,GAAQ,EACR,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;IAElB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IACnF,IACE,OAAO,KAAK,oBAAoB;WAC7B,MAAM,KAAK,mBAAmB;WAC9B,UAAU,KAAK,wBAAwB;WACvC,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;WAC9C,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;WACpC,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;WAClC,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;WACxC,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;WAC1C,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IAEf,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACvC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC;WAC/B,WAAW,IAAI,KAAK;WACpB,WAAW,GAAG,KAAK,GAAG,mBAAmB,GAAG,2BAA2B;QAC1E,OAAO,KAAK,CAAC;IAEf,IAAI,CAAC,SAAS,CAAC,OAAQ,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnE,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,EAAE,KAAM,EAAE,OAAQ,CAAC,CAAC;IAC7D,OAAO,SAAS,CAAC,SAAU,EAAE,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAoB,EACpB,KAAa,EACb,GAAQ;IAER,OAAO,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC;WACrD,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,aAAqB;IACzD,4EAA4E;IAC5E,uEAAuE;IACvE,2EAA2E;IAC3E,0EAA0E;IAC1E,OAAO,GAAG,mBAAmB,IAAI,KAAK,oDAAoD,aAAa,EAAE,CAAC;AAC5G,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,mBAAmB;AACnB,4DAA4D;AAC5D,6DAA6D;AAC7D,uEAAuE;AACvE,EAAE;AACF,6BAA6B;AAC7B,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,0DAA0D;AAC1D,8EAA8E;AAE9E,MAAM,UAAU,SAAS;IACvB,6EAA6E;IAC7E,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACtC,CAAC;IACD,oFAAoF;IACpF,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAgB,EAChB,IAAsB;IAEtB,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE9C,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAEhD,0EAA0E;QAC1E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAEnD,uEAAuE;QACvE,yEAAyE;QACzE,mEAAmE;QACnE,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;oBAC7D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC,CAAC;oBAChF,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;oBAC3D,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;gBACjE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE;oBAC5B,YAAY,EAAE,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;iBAC5E,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE;oBAC5B,YAAY,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;iBACnC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,uEAAuE;QACvE,0EAA0E;QAC1E,IAAI,IAAI,KAAK,aAAa,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;YACzF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,wEAAwE;QACxE,kEAAkE;QAClE,IACE,MAAM,KAAK,KAAK;eACb,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;eAC7C,CAAC,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,EACzC,CAAC;YACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,EAAE;gBACnE,IAAI,EAAE,4CAA4C;aACnD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;aACnE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAChB,IAAI,OAAO;gBAAE,OAAO;YAEpB,sEAAsE;YACtE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,qDAAqD;YACrD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBACvB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvE,uDAAuD;IACvD,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAE/B,2EAA2E;IAC3E,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACzC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,oBAAoB,IAAI,EAAE,CAAC;IAEvC,4EAA4E;IAC5E,MAAM,MAAM,GAAoB;QAC9B,IAAI;QACJ,SAAS;QACT,KAAK;QACL,GAAG;QACH,KAAK;YACH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7B,oEAAoE;gBACpE,2DAA2D;gBAC3D,mBAAmB,EAAE,CAAC;gBACtB,IAAI,OAAO,MAAM,CAAC,mBAAmB,KAAK,UAAU,EAAE,CAAC;oBACrD,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBAC/B,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/core/web/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,8EAA8E;AAC9E,6CAA6C;AAC7C,uEAAuE;AACvE,8EAA8E;AAE9E,MAAM,OAAO,GAAG,4CAA4C,CAAC;AAE7D,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AACjD,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AACzC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAC1C,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AACjD,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AACnC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,MAAM,gCAAgC,GAAG,EAAE,CAAC;AAE5C,SAAS,aAAa,CAAC,IAAwB;IAC7C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,WAAW,CAAC,GAAoB,EAAE,IAAY;IACrD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,OAAO,GAAG,IAAI,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,GAAoB;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,GAAmB,EACnB,MAAc,EACd,IAAa,EACb,UAAkC,EAAE;IAEpC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,iCAAiC;QACjD,eAAe,EAAE,UAAU;QAC3B,wBAAwB,EAAE,SAAS;QACnC,GAAG,OAAO;KACX,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI;QACpE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,CAAE,IAA2B,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;QAC9E,CAAC,CAAC,IAAI,CAAC;IACT,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB,EAAE,KAAa,EAAE,OAAe;IACxE,OAAO;QACL,oBAAoB;QACpB,mBAAmB;QACnB,wBAAwB;QACxB,MAAM,CAAC,WAAW,CAAC;QACnB,KAAK;QACL,OAAO;KACR,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,UAAkB;IAC5D,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB,EAAE,WAAmB,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;IAClF,MAAM,OAAO,GAAG,aAAa,CAC3B,KAAK,GAAG,mBAAmB,EAC3B,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EACrC,aAAa,CAAC,WAAW,CAAC,CAC3B,CAAC;IACF,OAAO,GAAG,OAAO,IAAI,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAoB;IAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACnD,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,GAAoB,EAAE,GAAQ;IAC5D,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QACnC,IAAI,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC;YAAE,OAAO,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,iBAAiB;YAAE,OAAO,EAAE,CAAC;QAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAAE,OAAO,EAAE,CAAC;IACvD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,mFAAmF;AACnF,SAAS,UAAU,CAAC,GAAoB,EAAE,IAAY;IACpD,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,uBAAuB;QAAE,OAAO,EAAE,CAAC;IAEhF,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;YAAE,SAAS;QACxE,IAAI,KAAK;YAAE,OAAO,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,sBAAsB;YAAE,OAAO,EAAE,CAAC;QACnF,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAID,SAAS,mBAAmB,CAC1B,GAAoB,EACpB,UAAkB,EAClB,GAAQ,EACR,WAAmC,EACnC,UAA6B,MAAM,EACnC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;IAElB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,WAAW,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpG,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IACnF,IACE,OAAO,KAAK,oBAAoB;WAC7B,MAAM,KAAK,mBAAmB;WAC9B,UAAU,KAAK,wBAAwB;WACvC,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;WACtE,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;WAC5D,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;WAClC,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;WACxC,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;WAC1C,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC;IAEd,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACvC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC;WAC/B,WAAW,IAAI,KAAK;WACpB,WAAW,GAAG,KAAK,GAAG,mBAAmB,GAAG,2BAA2B;QAC1E,OAAO,IAAI,CAAC;IAEd,IAAI,CAAC,SAAS,CAAC,OAAQ,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAElE,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,EAAE,KAAM,EAAE,OAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS,CAAC,SAAU,EAAE,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,MAAM,OAAO,GAAG;QACd,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC7D,SAAS,EAAE,WAAW;KACvB,CAAC;IACF,OAAO,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAGD,SAAS,aAAa,CACpB,GAAoB,EACpB,KAAa,EACb,UAAkB,EAClB,GAAQ,EACR,WAAmC;IAEnC,IAAI,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnF,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,aAAqB;IACzD,4EAA4E;IAC5E,uEAAuE;IACvE,2EAA2E;IAC3E,0EAA0E;IAC1E,OAAO,GAAG,mBAAmB,IAAI,KAAK,oDAAoD,aAAa,EAAE,CAAC;AAC5G,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,mBAAmB;AACnB,4DAA4D;AAC5D,6DAA6D;AAC7D,uEAAuE;AACvE,EAAE;AACF,6BAA6B;AAC7B,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,0DAA0D;AAC1D,8EAA8E;AAE9E,MAAM,UAAU,SAAS;IACvB,6EAA6E;IAC7E,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACtC,CAAC;IACD,oFAAoF;IACpF,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAgB,EAChB,IAAsB;IAEtB,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,qBAAqB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,sBAAsB,GAAG,IAAI,sBAAsB,CAAC,gCAAgC,CAAC,CAAC;IAE5F,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAChD,mEAAmE;QACnE,gEAAgE;QAChE,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,oNAAoN,CAAC,CAAC;QAC/P,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACzC,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,aAAa,CAAC,CAAC;QAC7D,GAAG,CAAC,SAAS,CAAC,oBAAoB,EAAE,0CAA0C,CAAC,CAAC;QAEhF,0EAA0E;QAC1E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,aAAa,CAC7B,GAAG,EACH,SAAS,EACT,qBAAqB,EACrB,GAAG,EACH,sBAAsB,CACvB,CAAC;QAEF,uEAAuE;QACvE,yEAAyE;QACzE,mEAAmE;QACnE,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;oBAC7D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC,CAAC;oBAChF,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;oBAC3D,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,eAAe,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC7E,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE;oBAC5B,YAAY,EAAE,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;iBAC5E,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM;oBACzB,CAAC,CAAC,mBAAmB,CACjB,GAAG,EACH,qBAAqB,EACrB,GAAG,EACH,sBAAsB,EACtB,QAAQ,CACT;oBACH,CAAC,CAAC,IAAI,CAAC;gBACT,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;oBACvF,OAAO;gBACT,CAAC;gBACD,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC1D,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAC;oBAChC,qEAAqE;oBACrE,kEAAkE;oBAClE,oEAAoE;oBACpE,qBAAqB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;oBACxD,sBAAsB,CAAC,KAAK,EAAE,CAAC;oBAC/B,mBAAmB,EAAE,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC9B,CAAC;gBACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE;oBAC5B,YAAY,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;iBACnC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,uEAAuE;QACvE,0EAA0E;QAC1E,IAAI,IAAI,KAAK,aAAa,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,wEAAwE;QACxE,kEAAkE;QAClE,IACE,MAAM,KAAK,KAAK;eACb,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;eAC7C,CAAC,SAAS,EACb,CAAC;YACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,EAAE;gBACnE,IAAI,EAAE,4CAA4C;aACnD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;YACvB,KAAK;YACL,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,WAAW,EAAE,SAAS,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SAC3E,CAAC;aACC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAChB,IAAI,OAAO;gBAAE,OAAO;YAEpB,sEAAsE;YACtE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,qDAAqD;YACrD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACjF,CAAC;iBAAM,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBAC9B,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvE,uDAAuD;IACvD,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAE/B,2EAA2E;IAC3E,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACzC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,oBAAoB,IAAI,EAAE,CAAC;IAEvC,4EAA4E;IAC5E,MAAM,MAAM,GAAoB;QAC9B,IAAI;QACJ,SAAS;QACT,KAAK;QACL,GAAG;QACH,KAAK;YACH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7B,oEAAoE;gBACpE,2DAA2D;gBAC3D,mBAAmB,EAAE,CAAC;gBACtB,sBAAsB,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,OAAO,MAAM,CAAC,mBAAmB,KAAK,UAAU,EAAE,CAAC;oBACrD,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBAC/B,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/web/static.d.ts

@@ -15,4 +15,4 @@
  *  - No outward calls; pure local fs read bounded to the assets dir.
  */
 import type { IncomingMessage, ServerResponse } from 'node:http';
-export declare function serveStatic(req: IncomingMessage, res: ServerResponse, dir: string): boolean;
+export declare function serveStatic(req: IncomingMessage, res: ServerResponse, dir: string, beforeDescriptorOpen?: (() => void) | undefined): boolean;

package/dist/core/web/static.js

@@ -14,7 +14,7 @@
  *  - NEVER throws — all errors are caught and surface as `false`.
  *  - No outward calls; pure local fs read bounded to the assets dir.
  */
-import { readFileSync, statSync } from 'node:fs';
+import { closeSync, constants, fstatSync, lstatSync, openSync, readFileSync, realpathSync } from 'node:fs';
 import { resolve, join, sep, normalize, extname } from 'node:path';
 // ---------------------------------------------------------------------------
 // Content-Type mapping (only the handful of extensions the SPA ships).
@@ -67,14 +67,16 @@ function extractPathname(rawUrl) {
 // ---------------------------------------------------------------------------
 // serveStatic
 // ---------------------------------------------------------------------------
-export function serveStatic(req, res, dir) {
+export function serveStatic(req, res, dir, beforeDescriptorOpen = undefined) {
     try {
         const rootDir = resolve(dir);
         const pathname = extractPathname(req.url);
         if (pathname === null)
             return false;
         // "/" (or empty) -> index.html (SPA shell).
-        let rel = pathname === '/' ? '/index.html' : pathname;
+        let rel = pathname === '/' ? '/index.html'
+            : (pathname === '/next' || pathname === '/next/') ? '/next/index.html'
+                : pathname;
         // Reject null bytes anywhere in the relative path.
         if (rel.includes('\x00'))
             return false;
@@ -91,28 +93,60 @@ export function serveStatic(req, res, dir) {
         if (candidate !== rootDir && !candidate.startsWith(rootWithSep)) {
             return false;
         }
-        // Stat — must be an existing regular file (never a directory).
-        let stat;
+        // Open first without following a replacement final symlink. All named-path
+        // containment and identity checks happen after descriptor custody is held,
+        // so the bytes are never read through a separately checked pathname.
+        let fd;
         try {
-            stat = statSync(candidate);
+            const realRoot = realpathSync(rootDir);
+            beforeDescriptorOpen?.();
+            fd = openSync(candidate, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+            const openedBefore = fstatSync(fd);
+            if (!openedBefore.isFile())
+                return false;
+            const realCandidate = realpathSync(candidate);
+            const realRootWithSep = realRoot.endsWith(sep) ? realRoot : realRoot + sep;
+            if (!realCandidate.startsWith(realRootWithSep))
+                return false;
+            const namedBefore = lstatSync(candidate);
+            if (namedBefore.isSymbolicLink() || !namedBefore.isFile() ||
+                openedBefore.dev !== namedBefore.dev || openedBefore.ino !== namedBefore.ino)
+                return false;
+            const body = readFileSync(fd);
+            const openedAfter = fstatSync(fd);
+            const realCandidateAfter = realpathSync(candidate);
+            const namedAfter = lstatSync(candidate);
+            if (!openedAfter.isFile() || !realCandidateAfter.startsWith(realRootWithSep) ||
+                namedAfter.isSymbolicLink() || !namedAfter.isFile() ||
+                openedBefore.dev !== openedAfter.dev || openedBefore.ino !== openedAfter.ino ||
+                openedAfter.dev !== namedAfter.dev || openedAfter.ino !== namedAfter.ino ||
+                openedBefore.size !== openedAfter.size ||
+                openedBefore.mtimeMs !== openedAfter.mtimeMs ||
+                openedBefore.ctimeMs !== openedAfter.ctimeMs ||
+                openedAfter.size !== namedAfter.size ||
+                openedAfter.mtimeMs !== namedAfter.mtimeMs ||
+                openedAfter.ctimeMs !== namedAfter.ctimeMs)
+                return false;
+            res.setHeader('Content-Type', contentTypeFor(candidate));
+            res.writeHead(200, {
+                'Content-Type': contentTypeFor(candidate),
+                'Content-Length': String(body.byteLength),
+                'Cache-Control': 'no-cache',
+                'X-Content-Type-Options': 'nosniff',
+            });
+            res.end(body);
+            return true;
         }
         catch {
             return false; // ENOENT and friends -> not found.
         }
-        if (!stat.isFile())
-            return false;
-        const body = readFileSync(candidate);
-        // Set Content-Type via setHeader (case-insensitive in real Node http) so
-        // downstream readers can look it up by the canonical lowercase name.
-        res.setHeader('Content-Type', contentTypeFor(candidate));
-        res.writeHead(200, {
-            'Content-Type': contentTypeFor(candidate),
-            'Content-Length': String(body.byteLength),
-            'Cache-Control': 'no-cache',
-            'X-Content-Type-Options': 'nosniff',
-        });
-        res.end(body);
-        return true;
+        finally {
+            if (fd !== undefined)
+                try {
+                    closeSync(fd);
+                }
+                catch { /* best effort */ }
+        }
     }
     catch {
         // NEVER throw — any unexpected error means "not served".

package/dist/core/web/static.js.map

@@ -1 +1 @@
-{"version":3,"file":"static.js","sourceRoot":"","sources":["../../../src/core/web/static.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnE,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E;AAE9E,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,uCAAuC;IAC9C,MAAM,EAAE,uCAAuC;IAC/C,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,iCAAiC;CAC1C,CAAC;AAEF,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E,SAAS,eAAe,CAAC,MAA0B;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,GAAG,CAAC;QAC1B,sEAAsE;QACtE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAChD,uEAAuE;QACvE,uEAAuE;QACvE,iDAAiD;QACjD,IAAI,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,yCAAyC;QACzC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,QAAQ,GAAG,GAAG,GAAG,QAAQ,CAAC;QACzD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,MAAM,UAAU,WAAW,CACzB,GAAoB,EACpB,GAAmB,EACnB,GAAW;IAEX,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAEpC,4CAA4C;QAC5C,IAAI,GAAG,GAAG,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;QAEtD,mDAAmD;QACnD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAEvC,oEAAoE;QACpE,oEAAoE;QACpE,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAChE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAErC,kEAAkE;QAClE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAE9C,mEAAmE;QACnE,sEAAsE;QACtE,+CAA+C;QAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC;QACpE,IAAI,SAAS,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,+DAA+D;QAC/D,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,CAAC,mCAAmC;QACnD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,KAAK,CAAC;QAEjC,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAErC,yEAAyE;QACzE,qEAAqE;QACrE,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;QACzD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,cAAc,CAAC,SAAS,CAAC;YACzC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YACzC,eAAe,EAAE,UAAU;YAC3B,wBAAwB,EAAE,SAAS;SACpC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"static.js","sourceRoot":"","sources":["../../../src/core/web/static.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC3G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnE,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E;AAE9E,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,uCAAuC;IAC9C,MAAM,EAAE,uCAAuC;IAC/C,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,iCAAiC;CAC1C,CAAC;AAEF,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E,SAAS,eAAe,CAAC,MAA0B;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,GAAG,CAAC;QAC1B,sEAAsE;QACtE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAChD,uEAAuE;QACvE,uEAAuE;QACvE,iDAAiD;QACjD,IAAI,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,yCAAyC;QACzC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,QAAQ,GAAG,GAAG,GAAG,QAAQ,CAAC;QACzD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,MAAM,UAAU,WAAW,CACzB,GAAoB,EACpB,GAAmB,EACnB,GAAW,EACX,uBAAiD,SAAS;IAE1D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAEpC,4CAA4C;QAC5C,IAAI,GAAG,GAAG,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa;YACxC,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,kBAAkB;gBACtE,CAAC,CAAC,QAAQ,CAAC;QAEb,mDAAmD;QACnD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAEvC,oEAAoE;QACpE,oEAAoE;QACpE,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAChE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAErC,kEAAkE;QAClE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAE9C,mEAAmE;QACnE,sEAAsE;QACtE,+CAA+C;QAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC;QACpE,IAAI,SAAS,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,2EAA2E;QAC3E,2EAA2E;QAC3E,qEAAqE;QACrE,IAAI,EAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACvC,oBAAoB,EAAE,EAAE,CAAC;YACzB,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3E,MAAM,YAAY,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;gBAAE,OAAO,KAAK,CAAC;YACzC,MAAM,aAAa,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC;YAC3E,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,eAAe,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC7D,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,WAAW,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE;gBACvD,YAAY,CAAC,GAAG,KAAK,WAAW,CAAC,GAAG,IAAI,YAAY,CAAC,GAAG,KAAK,WAAW,CAAC,GAAG;gBAAE,OAAO,KAAK,CAAC;YAC7F,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;YAC9B,MAAM,WAAW,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;YAClC,MAAM,kBAAkB,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;YACxC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,eAAe,CAAC;gBAC1E,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;gBACnD,YAAY,CAAC,GAAG,KAAK,WAAW,CAAC,GAAG,IAAI,YAAY,CAAC,GAAG,KAAK,WAAW,CAAC,GAAG;gBAC5E,WAAW,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG,IAAI,WAAW,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG;gBACxE,YAAY,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;gBACtC,YAAY,CAAC,OAAO,KAAK,WAAW,CAAC,OAAO;gBAC5C,YAAY,CAAC,OAAO,KAAK,WAAW,CAAC,OAAO;gBAC5C,WAAW,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI;gBACpC,WAAW,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO;gBAC1C,WAAW,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAC3D,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;YACzD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,cAAc,EAAE,cAAc,CAAC,SAAS,CAAC;gBACzC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;gBACzC,eAAe,EAAE,UAAU;gBAC3B,wBAAwB,EAAE,SAAS;aACpC,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,CAAC,mCAAmC;QACnD,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,KAAK,SAAS;gBAAE,IAAI,CAAC;oBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}