@atlasauth/emulator-core 0.2.0 → 0.3.0

package/dist/custom-html.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Custom hosted HTML and CSS for a page template region (the `custom` component).
+ *
+ * The author's markup is never trusted, and never placed in the sign-in page itself. Three layers, each enough on its own:
+ *
+ *  1. Allowlist sanitizer (this file). Only the tags, attributes and CSS properties below survive; there is no script, no style
+ *     attribute, no event handler, no form control, no iframe, no object, no SVG, no `url()`, no import and no custom property.
+ *     Links and images are https (links also mailto) only. A write that contains anything else is refused with the reason;
+ *     the same function runs again, leniently (dropping what it does not allow), every time the template is rendered, so a
+ *     row that was edited in the database is just as safe.
+ *  2. Server-side render into a sandboxed iframe (`srcdoc`): `sandbox` without `allow-scripts` or `allow-same-origin`, so the
+ *     frame has an opaque origin and cannot touch the sign-in form, read its fields, restyle it, or draw over it.
+ *  3. A content-security-policy inside the frame that allows no script, no connection, no form post and no base element, and
+ *     images from https only.
+ *
+ * Template variables are a fixed list substituted into text (never into attributes), HTML-escaped.
+ *
+ * This is the same allowlist, tokenizer and CSS rules the Atlas API applies (copied, not imported: the emulator has no dependency on the
+ * server packages), so a block that is refused here is refused in production for the same reason.
+ */
+export declare const MAX_CUSTOM_HTML_BYTES: number;
+export declare const MAX_CUSTOM_CSS_BYTES: number;
+export declare const MAX_CUSTOM_TAGS = 300;
+export declare const CUSTOM_MIN_HEIGHT = 40;
+export declare const CUSTOM_MAX_HEIGHT = 1200;
+/** The variables a custom block may use as `{{name}}` in text. */
+export declare const CUSTOM_VARIABLES: readonly ["year", "locale"];
+export type CustomVariables = Partial<Record<(typeof CUSTOM_VARIABLES)[number], string>>;
+export interface Sanitized {
+    out: string;
+    /** What was not allowed. Empty means the input was already clean. */
+    problems: string[];
+}
+/**
+ * Reduce markup to the allowlist. Returns the clean markup and every problem found (a tag, attribute or value that was
+ * dropped). `vars` substitutes `{{year}}` / `{{locale}}` in text (escaped); an unknown `{{name}}` is a problem.
+ */
+export declare function sanitizeCustomHtml(input: string, opts?: {
+    vars?: CustomVariables;
+}): Sanitized;
+/** Reduce CSS to the allowlist: class/tag selectors, a fixed property list, no url(), no imports, no custom properties. */
+export declare function sanitizeCustomCss(input: string): Sanitized;
+/** The policy inside the frame: nothing runs, nothing connects, nothing posts; images from https only; no base element. */
+export declare const CUSTOM_FRAME_CSP = "default-src 'none'; img-src https:; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'";
+/** The `sandbox` attribute value: popups only (for links), and never scripts, forms or the page's origin. */
+export declare const CUSTOM_FRAME_SANDBOX = "allow-popups allow-popups-to-escape-sandbox";
+/** The complete document placed in the iframe. `html` and `css` must already be sanitized. */
+export declare function customFrameDocument(html: string, css: string, lang: string): string;
+/** The iframe element for a custom block (sanitizes again: the stored value is not trusted at render time). */
+export declare function renderCustomBlock(n: {
+    html: string;
+    css?: string;
+    height: number;
+    title?: string;
+}, vars?: CustomVariables): string;
+/** The `custom` component of a page template, validated like the API does: the same refusals, the same messages, the stored value is the sanitized form. */
+export declare function parseCustomComponent(n: Record<string, unknown>, path: string, depth: number): Record<string, unknown>;

package/dist/custom-html.js

@@ -0,0 +1,491 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CUSTOM_FRAME_SANDBOX = exports.CUSTOM_FRAME_CSP = exports.CUSTOM_VARIABLES = exports.CUSTOM_MAX_HEIGHT = exports.CUSTOM_MIN_HEIGHT = exports.MAX_CUSTOM_TAGS = exports.MAX_CUSTOM_CSS_BYTES = exports.MAX_CUSTOM_HTML_BYTES = void 0;
+exports.sanitizeCustomHtml = sanitizeCustomHtml;
+exports.sanitizeCustomCss = sanitizeCustomCss;
+exports.customFrameDocument = customFrameDocument;
+exports.renderCustomBlock = renderCustomBlock;
+exports.parseCustomComponent = parseCustomComponent;
+const errors_1 = require("./errors");
+const escapeHtml = (s) => s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#39;');
+/**
+ * Custom hosted HTML and CSS for a page template region (the `custom` component).
+ *
+ * The author's markup is never trusted, and never placed in the sign-in page itself. Three layers, each enough on its own:
+ *
+ *  1. Allowlist sanitizer (this file). Only the tags, attributes and CSS properties below survive; there is no script, no style
+ *     attribute, no event handler, no form control, no iframe, no object, no SVG, no `url()`, no import and no custom property.
+ *     Links and images are https (links also mailto) only. A write that contains anything else is refused with the reason;
+ *     the same function runs again, leniently (dropping what it does not allow), every time the template is rendered, so a
+ *     row that was edited in the database is just as safe.
+ *  2. Server-side render into a sandboxed iframe (`srcdoc`): `sandbox` without `allow-scripts` or `allow-same-origin`, so the
+ *     frame has an opaque origin and cannot touch the sign-in form, read its fields, restyle it, or draw over it.
+ *  3. A content-security-policy inside the frame that allows no script, no connection, no form post and no base element, and
+ *     images from https only.
+ *
+ * Template variables are a fixed list substituted into text (never into attributes), HTML-escaped.
+ *
+ * This is the same allowlist, tokenizer and CSS rules the Atlas API applies (copied, not imported: the emulator has no dependency on the
+ * server packages), so a block that is refused here is refused in production for the same reason.
+ */
+exports.MAX_CUSTOM_HTML_BYTES = 16 * 1024;
+exports.MAX_CUSTOM_CSS_BYTES = 8 * 1024;
+exports.MAX_CUSTOM_TAGS = 300;
+exports.CUSTOM_MIN_HEIGHT = 40;
+exports.CUSTOM_MAX_HEIGHT = 1200;
+/** The variables a custom block may use as `{{name}}` in text. */
+exports.CUSTOM_VARIABLES = ['year', 'locale'];
+const ALLOWED_TAGS = new Set([
+    'div', 'span', 'p', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'ul', 'ol', 'li', 'a', 'img', 'br', 'hr', 'strong', 'em', 'b', 'i', 'u', 's', 'small', 'sub', 'sup',
+    'blockquote', 'section', 'header', 'footer', 'nav', 'article', 'aside', 'main', 'figure', 'figcaption', 'table', 'thead', 'tbody', 'tfoot', 'tr', 'th', 'td', 'caption',
+    'pre', 'code', 'dl', 'dt', 'dd', 'address', 'mark', 'abbr', 'cite', 'q', 'time',
+]);
+const VOID_TAGS = new Set(['br', 'hr', 'img']);
+/** Tags whose content must never be kept as text when the tag itself is dropped. */
+const DROP_CONTENT = new Set(['script', 'style', 'iframe', 'frame', 'frameset', 'object', 'embed', 'noscript', 'template', 'textarea', 'title', 'xmp', 'plaintext', 'svg', 'math', 'select', 'option', 'audio', 'video', 'canvas', 'applet', 'head']);
+const SAFE_HTTPS = /^https:\/\/[^\s"'<>`\\]{1,2000}$/;
+const SAFE_MAILTO = /^mailto:[^\s@"'<>`\\]+@[^\s@"'<>`\\]+$/;
+const GLOBAL_ATTRS = new Set(['class', 'title', 'lang', 'dir', 'aria-label', 'aria-hidden']);
+const TAG_ATTRS = { a: ['href'], img: ['src', 'alt', 'width', 'height'], td: ['colspan', 'rowspan'], th: ['colspan', 'rowspan'], time: ['datetime'] };
+/** Attributes the renderer sets itself; an author's value is ignored (not an error). */
+const IGNORED_ATTRS = new Set(['target', 'rel', 'loading', 'referrerpolicy']);
+const ENTITY = /^&(?:[A-Za-z][A-Za-z0-9]{1,31}|#\d{1,7}|#x[0-9A-Fa-f]{1,6});/;
+/** Text safe between tags: markup characters become entities; a valid entity (`&amp;`, `&#169;`) is kept. */
+function escapeText(t) {
+    let out = '';
+    for (let i = 0; i < t.length; i++) {
+        const c = t[i];
+        if (c === '&') {
+            const m = ENTITY.exec(t.slice(i, i + 40));
+            if (m) {
+                out += m[0];
+                i += m[0].length - 1;
+            }
+            else
+                out += '&amp;';
+        }
+        else if (c === '<')
+            out += '&lt;';
+        else if (c === '>')
+            out += '&gt;';
+        else if (c === '\u0000')
+            continue;
+        else
+            out += c;
+    }
+    return out;
+}
+const VAR_RE = /\{\{\s*([A-Za-z_][A-Za-z0-9_.]*)\s*\}\}/g;
+/** Parse the attributes of an open tag starting after its name. Returns null when the tag never ends. */
+function readAttrs(src, from) {
+    const attrs = [];
+    let i = from;
+    for (;;) {
+        while (i < src.length && /\s/.test(src[i]))
+            i++;
+        if (i >= src.length)
+            return null;
+        if (src[i] === '>')
+            return { attrs, end: i + 1, selfClose: false };
+        if (src[i] === '/' && src[i + 1] === '>')
+            return { attrs, end: i + 2, selfClose: true };
+        if (src[i] === '/') {
+            i++;
+            continue;
+        }
+        const nm = /^[^\s"'<>\/=]+/.exec(src.slice(i, i + 200));
+        if (!nm) {
+            // A stray quote or "=" with no name: skip the character.
+            i++;
+            continue;
+        }
+        i += nm[0].length;
+        while (i < src.length && /\s/.test(src[i]))
+            i++;
+        let value = null;
+        if (src[i] === '=') {
+            i++;
+            while (i < src.length && /\s/.test(src[i]))
+                i++;
+            const q = src[i];
+            if (q === '"' || q === "'") {
+                const close = src.indexOf(q, i + 1);
+                if (close === -1)
+                    return null;
+                value = src.slice(i + 1, close);
+                i = close + 1;
+            }
+            else {
+                const m = /^[^\s"'=<>`]+/.exec(src.slice(i, i + 2100));
+                value = m ? m[0] : '';
+                i += value.length;
+            }
+        }
+        attrs.push({ name: nm[0].toLowerCase(), value });
+    }
+}
+/**
+ * Reduce markup to the allowlist. Returns the clean markup and every problem found (a tag, attribute or value that was
+ * dropped). `vars` substitutes `{{year}}` / `{{locale}}` in text (escaped); an unknown `{{name}}` is a problem.
+ */
+function sanitizeCustomHtml(input, opts = {}) {
+    const problems = [];
+    const note = (m) => {
+        if (problems.length < 20 && !problems.includes(m))
+            problems.push(m);
+    };
+    if (input.length > exports.MAX_CUSTOM_HTML_BYTES) {
+        note(`html is larger than ${exports.MAX_CUSTOM_HTML_BYTES / 1024} KB.`);
+        input = input.slice(0, exports.MAX_CUSTOM_HTML_BYTES);
+    }
+    let out = '';
+    const stack = [];
+    let tags = 0;
+    let i = 0;
+    let skip = null; // inside a dropped raw-content element
+    const text = (raw) => {
+        if (skip)
+            return;
+        const escaped = escapeText(raw);
+        out += escaped.replace(VAR_RE, (whole, name) => {
+            if (!exports.CUSTOM_VARIABLES.includes(name)) {
+                note(`{{${name}}} is not a variable. Available: ${exports.CUSTOM_VARIABLES.map((v) => `{{${v}}}`).join(', ')}.`);
+                return '';
+            }
+            const v = opts.vars?.[name];
+            return v === undefined ? whole : escapeHtml(v);
+        });
+    };
+    while (i < input.length) {
+        if (input[i] !== '<') {
+            const next = input.indexOf('<', i);
+            const end = next === -1 ? input.length : next;
+            text(input.slice(i, end));
+            i = end;
+            continue;
+        }
+        if (input.startsWith('<!--', i)) {
+            const close = input.indexOf('-->', i + 4);
+            i = close === -1 ? input.length : close + 3;
+            continue;
+        }
+        if (input[i + 1] === '!' || input[i + 1] === '?') {
+            note('Declarations, CDATA and processing instructions are not allowed.');
+            const close = input.indexOf('>', i);
+            i = close === -1 ? input.length : close + 1;
+            continue;
+        }
+        const closeTag = /^<\/([A-Za-z][A-Za-z0-9-]*)\s*>/.exec(input.slice(i, i + 80));
+        if (closeTag) {
+            const name = closeTag[1].toLowerCase();
+            i += closeTag[0].length;
+            if (skip) {
+                if (name === skip)
+                    skip = null;
+                continue;
+            }
+            const at = stack.lastIndexOf(name);
+            if (at === -1) {
+                if (ALLOWED_TAGS.has(name))
+                    note(`Unmatched </${name}>.`);
+                continue;
+            }
+            while (stack.length > at)
+                out += `</${stack.pop()}>`;
+            continue;
+        }
+        const open = /^<([A-Za-z][A-Za-z0-9-]*)/.exec(input.slice(i, i + 80));
+        if (!open) {
+            text('<');
+            i += 1;
+            continue;
+        }
+        const name = open[1].toLowerCase();
+        const parsed = readAttrs(input, i + open[0].length);
+        if (!parsed) {
+            note('A tag is never closed.');
+            break;
+        }
+        i = parsed.end;
+        if (skip)
+            continue;
+        if (!ALLOWED_TAGS.has(name)) {
+            note(`<${name}> is not allowed.`);
+            if (DROP_CONTENT.has(name) && !parsed.selfClose && !VOID_TAGS.has(name))
+                skip = name;
+            continue;
+        }
+        if (++tags > exports.MAX_CUSTOM_TAGS) {
+            note(`At most ${exports.MAX_CUSTOM_TAGS} tags.`);
+            break;
+        }
+        const allowed = new Set([...GLOBAL_ATTRS, ...(TAG_ATTRS[name] ?? [])]);
+        let html = `<${name}`;
+        let hasAlt = false;
+        const seen = new Set();
+        for (const a of parsed.attrs) {
+            if (IGNORED_ATTRS.has(a.name) || seen.has(a.name))
+                continue;
+            if (!allowed.has(a.name)) {
+                note(`The ${a.name} attribute is not allowed on <${name}>${a.name === 'style' ? ' (put CSS in the css field)' : ''}.`);
+                continue;
+            }
+            const v = a.value ?? '';
+            let ok = true;
+            switch (a.name) {
+                case 'class':
+                    ok = /^[A-Za-z0-9_ -]{1,200}$/.test(v);
+                    break;
+                case 'title':
+                case 'alt':
+                case 'aria-label':
+                    ok = v.length <= 300 && !v.includes('\u0000');
+                    break;
+                case 'lang':
+                    ok = /^[A-Za-z]{2,3}(-[A-Za-z0-9]{2,8}){0,3}$/.test(v);
+                    break;
+                case 'dir':
+                    ok = v === 'ltr' || v === 'rtl' || v === 'auto';
+                    break;
+                case 'aria-hidden':
+                    ok = v === 'true' || v === 'false';
+                    break;
+                case 'href':
+                    ok = SAFE_HTTPS.test(v) || SAFE_MAILTO.test(v);
+                    break;
+                case 'src':
+                    ok = SAFE_HTTPS.test(v);
+                    break;
+                case 'width':
+                case 'height':
+                    ok = /^\d{1,4}$/.test(v) && Number(v) <= 2000;
+                    break;
+                case 'colspan':
+                case 'rowspan':
+                    ok = /^\d{1,2}$/.test(v) && Number(v) >= 1;
+                    break;
+                case 'datetime':
+                    ok = /^[0-9TZ:+.\- ]{1,40}$/.test(v);
+                    break;
+            }
+            if (!ok) {
+                note(`${a.name} on <${name}> has a value that is not allowed${a.name === 'href' || a.name === 'src' ? ' (https only; links may also be mailto:)' : ''}.`);
+                continue;
+            }
+            seen.add(a.name);
+            if (a.name === 'alt')
+                hasAlt = true;
+            html += ` ${a.name}="${escapeHtml(v)}"`;
+        }
+        if (name === 'img') {
+            if (!hasAlt) {
+                note('<img> needs an alt attribute (use alt="" for a decorative image).');
+                html += ' alt=""';
+            }
+            if (!parsed.attrs.some((a) => a.name === 'src' && a.value && SAFE_HTTPS.test(a.value))) {
+                // An image with no valid source draws nothing: drop it.
+                note('<img> needs an https src.');
+                continue;
+            }
+            html += ' loading="lazy" referrerpolicy="no-referrer"';
+        }
+        if (name === 'a')
+            html += ' target="_blank" rel="noopener noreferrer"';
+        html += '>';
+        out += html;
+        if (!VOID_TAGS.has(name) && !parsed.selfClose)
+            stack.push(name);
+        else if (!VOID_TAGS.has(name) && parsed.selfClose)
+            out += `</${name}>`;
+    }
+    while (stack.length)
+        out += `</${stack.pop()}>`;
+    return { out, problems };
+}
+// ---------------------------------------------------------------------------------------------------------------------
+// CSS
+const BOX = (p) => [p, `${p}-top`, `${p}-right`, `${p}-bottom`, `${p}-left`];
+const ALLOWED_PROPS = new Set([
+    'color', 'background', 'background-color', 'background-image', 'background-size', 'background-position', 'background-repeat',
+    'font', 'font-family', 'font-size', 'font-weight', 'font-style', 'line-height', 'letter-spacing', 'text-align', 'text-decoration', 'text-transform', 'text-indent', 'text-shadow',
+    'white-space', 'word-break', 'overflow-wrap', 'vertical-align', 'list-style', 'list-style-type',
+    ...BOX('margin'), ...BOX('padding'), ...BOX('border'), 'border-width', 'border-style', 'border-color', 'border-radius', 'border-collapse', 'border-spacing',
+    'width', 'min-width', 'max-width', 'height', 'min-height', 'max-height', 'box-sizing', 'aspect-ratio', 'object-fit',
+    'display', 'flex', 'flex-direction', 'flex-wrap', 'flex-grow', 'flex-shrink', 'flex-basis', 'gap', 'row-gap', 'column-gap',
+    'align-items', 'align-content', 'align-self', 'justify-content', 'justify-items', 'justify-self',
+    'grid-template-columns', 'grid-template-rows', 'grid-column', 'grid-row', 'opacity', 'box-shadow', 'overflow', 'float', 'clear',
+]);
+const ENUM_PROPS = {
+    display: ['block', 'inline', 'inline-block', 'flex', 'inline-flex', 'grid', 'none'],
+    overflow: ['visible', 'hidden', 'auto'],
+    float: ['left', 'right', 'none'],
+    clear: ['left', 'right', 'both', 'none'],
+};
+const ALLOWED_FUNCTIONS = new Set(['rgb', 'rgba', 'hsl', 'hsla', 'calc', 'min', 'max', 'clamp', 'linear-gradient', 'radial-gradient', 'repeat', 'minmax']);
+const VALUE_CHARS = /^[#A-Za-z0-9%.,\s\-+*/()"']*$/;
+const COMPOUND = /^(?:\*|[a-z][a-z0-9]*)?(?:\.[A-Za-z_][A-Za-z0-9_-]*|:(?:hover|focus|active|first-child|last-child|first-of-type|last-of-type|nth-child\((?:\d{1,3}|odd|even)\)))*$/;
+const MEDIA = /^@media\s+(?:screen\s+and\s+)?\(\s*(?:(?:max|min)-width\s*:\s*\d{1,4}px|prefers-color-scheme\s*:\s*(?:dark|light))\s*\)(?:\s+and\s+\(\s*(?:max|min)-width\s*:\s*\d{1,4}px\s*\))?$/i;
+function cssValueProblem(prop, value) {
+    if (!value || value.length > 300)
+        return 'value is empty or too long';
+    for (const m of value.toLowerCase().matchAll(/([a-z-]+)\s*\(/g))
+        if (!ALLOWED_FUNCTIONS.has(m[1]))
+            return `${m[1]}() is not allowed`;
+    if (/(?:^|[^a-z])(?:url|expression|javascript|behavior|image-set|attr|var|env)(?![a-z-])/i.test(value))
+        return 'value is not allowed';
+    if (!VALUE_CHARS.test(value))
+        return 'value has a character that is not allowed';
+    const en = ENUM_PROPS[prop];
+    if (en && !en.includes(value.toLowerCase()))
+        return `${prop} must be one of ${en.join(', ')}`;
+    return null;
+}
+/** A compound selector's element name, when it has one, must be a tag the markup may use (or body / html). */
+function tagOk(compound) {
+    const tag = /^[a-z][a-z0-9]*/.exec(compound)?.[0];
+    return !tag || tag === 'body' || tag === 'html' || ALLOWED_TAGS.has(tag);
+}
+function sanitizeRules(css, note, inMedia) {
+    let out = '';
+    let i = 0;
+    while (i < css.length) {
+        const open = css.indexOf('{', i);
+        if (open === -1) {
+            const rest = css.slice(i).trim();
+            if (rest)
+                note(rest.startsWith('@') ? `${rest.split(/[\s(]/)[0]} is not allowed (only @media with max-width, min-width or prefers-color-scheme).` : 'A rule has no block.');
+            break;
+        }
+        const prelude = css.slice(i, open).trim();
+        let depth = 1;
+        let j = open + 1;
+        while (j < css.length && depth > 0) {
+            if (css[j] === '{')
+                depth++;
+            else if (css[j] === '}')
+                depth--;
+            j++;
+        }
+        if (depth !== 0) {
+            note('A block is never closed.');
+            break;
+        }
+        const body = css.slice(open + 1, j - 1);
+        i = j;
+        if (prelude.startsWith('@')) {
+            if (inMedia || !MEDIA.test(prelude.replace(/\s+/g, ' '))) {
+                note(`${prelude.split(/[\s(]/)[0]} is not allowed (only @media with max-width, min-width or prefers-color-scheme).`);
+                continue;
+            }
+            const inner = sanitizeRules(body, note, true);
+            if (inner)
+                out += `${prelude.replace(/\s+/g, ' ')}{${inner}}`;
+            continue;
+        }
+        const selectors = [];
+        let selectorsOk = prelude.length > 0 && prelude.length <= 300 && /^[A-Za-z0-9_\-.\s,>+~:*()]+$/.test(prelude);
+        if (selectorsOk) {
+            for (const sel of prelude.split(',')) {
+                const norm = sel.replace(/\s*([>+~])\s*/g, ' $1 ').trim().split(/\s+/);
+                const good = norm.length > 0 && norm.every((tok, k) => (/^[>+~]$/.test(tok) ? k > 0 && k < norm.length - 1 && !/^[>+~]$/.test(norm[k - 1]) : COMPOUND.test(tok) && tagOk(tok)));
+                if (!good) {
+                    selectorsOk = false;
+                    break;
+                }
+                selectors.push(norm.join(' ').replace(/ ([>+~]) /g, '$1'));
+            }
+        }
+        if (!selectorsOk) {
+            note(`Selector "${prelude.slice(0, 60)}" is not allowed (classes, allowed tags, :hover, :focus, :first-child, :last-child, combinators).`);
+            continue;
+        }
+        const decls = [];
+        for (const raw of body.split(';')) {
+            const d = raw.trim();
+            if (!d)
+                continue;
+            const colon = d.indexOf(':');
+            const prop = colon === -1 ? '' : d.slice(0, colon).trim().toLowerCase();
+            const value = colon === -1 ? '' : d.slice(colon + 1).trim();
+            if (!ALLOWED_PROPS.has(prop)) {
+                note(`The CSS property "${prop || d.slice(0, 30)}" is not allowed.`);
+                continue;
+            }
+            const bad = cssValueProblem(prop, value);
+            if (bad) {
+                note(`${prop}: ${bad}.`);
+                continue;
+            }
+            decls.push(`${prop}:${value.replace(/\s+/g, ' ')}`);
+        }
+        if (decls.length)
+            out += `${selectors.join(',')}{${decls.join(';')}}`;
+    }
+    return out;
+}
+/** Reduce CSS to the allowlist: class/tag selectors, a fixed property list, no url(), no imports, no custom properties. */
+function sanitizeCustomCss(input) {
+    const problems = [];
+    const note = (m) => {
+        if (problems.length < 20 && !problems.includes(m))
+            problems.push(m);
+    };
+    if (input.length > exports.MAX_CUSTOM_CSS_BYTES) {
+        note(`css is larger than ${exports.MAX_CUSTOM_CSS_BYTES / 1024} KB.`);
+        input = input.slice(0, exports.MAX_CUSTOM_CSS_BYTES);
+    }
+    if (input.includes('\\'))
+        note('Backslash escapes are not allowed in css.');
+    const stripped = input.replace(/\/\*[\s\S]*?\*\//g, ' ').replace(/\\/g, '');
+    const open = stripped.indexOf('/*');
+    if (open !== -1)
+        note('A comment is never closed.');
+    return { out: sanitizeRules(open === -1 ? stripped : stripped.slice(0, open), note, false), problems };
+}
+// ---------------------------------------------------------------------------------------------------------------------
+// The sandboxed frame
+/** The policy inside the frame: nothing runs, nothing connects, nothing posts; images from https only; no base element. */
+exports.CUSTOM_FRAME_CSP = "default-src 'none'; img-src https:; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'";
+/** The `sandbox` attribute value: popups only (for links), and never scripts, forms or the page's origin. */
+exports.CUSTOM_FRAME_SANDBOX = 'allow-popups allow-popups-to-escape-sandbox';
+const FRAME_BASE_CSS = 'html,body{margin:0;padding:0}body{font-family:system-ui,-apple-system,"Segoe UI",sans-serif;font-size:14px;line-height:1.5;color:#1f2937;background:transparent;word-wrap:break-word}img{max-width:100%;height:auto}a{color:#2563eb}';
+/** The complete document placed in the iframe. `html` and `css` must already be sanitized. */
+function customFrameDocument(html, css, lang) {
+    return `<!doctype html><html lang="${escapeHtml(lang)}"><head><meta charset="utf-8"><meta http-equiv="Content-Security-Policy" content="${exports.CUSTOM_FRAME_CSP}"><meta name="viewport" content="width=device-width,initial-scale=1"><style>${FRAME_BASE_CSS}</style>${css ? `<style>${css}</style>` : ''}</head><body>${html}</body></html>`;
+}
+/** The iframe element for a custom block (sanitizes again: the stored value is not trusted at render time). */
+function renderCustomBlock(n, vars = {}) {
+    const html = sanitizeCustomHtml(n.html, { vars }).out;
+    const css = n.css ? sanitizeCustomCss(n.css).out : '';
+    const height = Math.min(Math.max(Math.trunc(n.height) || exports.CUSTOM_MIN_HEIGHT, exports.CUSTOM_MIN_HEIGHT), exports.CUSTOM_MAX_HEIGHT);
+    const lang = vars.locale && /^[A-Za-z]{2,3}(-[A-Za-z0-9]{2,8}){0,3}$/.test(vars.locale) ? vars.locale : 'en';
+    return `<iframe class="tpl-custom" title="${escapeHtml(n.title || 'Custom content')}" sandbox="${exports.CUSTOM_FRAME_SANDBOX}" referrerpolicy="no-referrer" loading="lazy" height="${height}" srcdoc="${escapeHtml(customFrameDocument(html, css, lang))}"></iframe>`;
+}
+/** The `custom` component of a page template, validated like the API does: the same refusals, the same messages, the stored value is the sanitized form. */
+function parseCustomComponent(n, path, depth) {
+    const fail = (p, message) => {
+        throw new errors_1.EmulatorError('VALIDATION_FAILED', `${p}: ${message}`, p);
+    };
+    if (depth > 0)
+        fail(path, 'a custom block cannot sit inside columns.');
+    const html = typeof n.html === 'string' && n.html.trim() !== '' ? n.html : fail(`${path}.html`, 'must be a non-empty string of HTML.');
+    if (n.css !== undefined && typeof n.css !== 'string')
+        fail(`${path}.css`, 'must be a string of CSS.');
+    const cleanHtml = sanitizeCustomHtml(html);
+    if (cleanHtml.problems.length)
+        fail(`${path}.html`, cleanHtml.problems.slice(0, 3).join(' '));
+    if (!cleanHtml.out.trim())
+        fail(`${path}.html`, 'has no content once sanitized.');
+    const cleanCss = n.css ? sanitizeCustomCss(n.css) : { out: '', problems: [] };
+    if (cleanCss.problems.length)
+        fail(`${path}.css`, cleanCss.problems.slice(0, 3).join(' '));
+    const height = typeof n.height === 'number' && Number.isInteger(n.height) && n.height >= exports.CUSTOM_MIN_HEIGHT && n.height <= exports.CUSTOM_MAX_HEIGHT ? n.height : fail(`${path}.height`, `is required: the frame's height in pixels, ${exports.CUSTOM_MIN_HEIGHT} to ${exports.CUSTOM_MAX_HEIGHT}.`);
+    let title;
+    if (n.title !== undefined) {
+        if (typeof n.title !== 'string' || n.title.trim() === '' || n.title.length > 120)
+            fail(`${path}.title`, 'must be a non-empty string of at most 120 characters.');
+        title = n.title;
+    }
+    return { type: 'custom', html: cleanHtml.out, ...(cleanCss.out ? { css: cleanCss.out } : {}), height, ...(title !== undefined ? { title } : {}) };
+}
+//# sourceMappingURL=custom-html.js.map

package/dist/custom-html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-html.js","sourceRoot":"","sources":["../src/custom-html.ts"],"names":[],"mappings":";;;AAiIA,gDAgKC;AAqHD,8CAcC;AAcD,kDAEC;AAGD,8CAMC;AAGD,oDAmBC;AAndD,qCAAyC;AAEzC,MAAM,UAAU,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAE9J;;;;;;;;;;;;;;;;;;;GAmBG;AAEU,QAAA,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC,QAAA,oBAAoB,GAAG,CAAC,GAAG,IAAI,CAAC;AAChC,QAAA,eAAe,GAAG,GAAG,CAAC;AACtB,QAAA,iBAAiB,GAAG,EAAE,CAAC;AACvB,QAAA,iBAAiB,GAAG,IAAI,CAAC;AACtC,kEAAkE;AACrD,QAAA,gBAAgB,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAU,CAAC;AAG5D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK;IAC3J,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS;IACvK,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;CAChF,CAAC,CAAC;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAC/C,oFAAoF;AACpF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtP,MAAM,UAAU,GAAG,kCAAkC,CAAC;AACtD,MAAM,WAAW,GAAG,wCAAwC,CAAC;AAC7D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;AAC7F,MAAM,SAAS,GAA6B,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;AAChL,wFAAwF;AACxF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAE9E,MAAM,MAAM,GAAG,8DAA8D,CAAC;AAE9E,6GAA6G;AAC7G,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1C,IAAI,CAAC,EAAE,CAAC;gBACN,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACZ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACvB,CAAC;;gBAAM,GAAG,IAAI,OAAO,CAAC;QACxB,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG;YAAE,GAAG,IAAI,MAAM,CAAC;aAC/B,IAAI,CAAC,KAAK,GAAG;YAAE,GAAG,IAAI,MAAM,CAAC;aAC7B,IAAI,CAAC,KAAK,QAAQ;YAAE,SAAS;;YAC7B,GAAG,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,MAAM,GAAG,0CAA0C,CAAC;AAa1D,yGAAyG;AACzG,SAAS,SAAS,CAAC,GAAW,EAAE,IAAY;IAC1C,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,SAAS,CAAC;QACR,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;YAAE,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACnE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACxF,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACnB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,yDAAyD;YACzD,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAClB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;YAAE,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,GAAkB,IAAI,CAAC;QAChC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACnB,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;gBAAE,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC9B,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;gBAChC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;gBACvD,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC;YACpB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,KAAa,EAAE,OAAmC,EAAE;IACrF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,GAAG,6BAAqB,EAAE,CAAC;QACzC,IAAI,CAAC,uBAAuB,6BAAqB,GAAG,IAAI,MAAM,CAAC,CAAC;QAChE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,6BAAqB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,IAAI,GAAkB,IAAI,CAAC,CAAC,uCAAuC;IACvE,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE;QAC3B,IAAI,IAAI;YAAE,OAAO;QACjB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;YACrD,IAAI,CAAE,wBAAsC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,KAAK,IAAI,oCAAoC,wBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACzG,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAyC,CAAC,CAAC;YACjE,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC1B,CAAC,GAAG,GAAG,CAAC;YACR,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1C,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACjD,IAAI,CAAC,kEAAkE,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACpC,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAChF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;YACxC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACxB,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,IAAI,KAAK,IAAI;oBAAE,IAAI,GAAG,IAAI,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBACd,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC;gBAC1D,SAAS;YACX,CAAC;YACD,OAAO,KAAK,CAAC,MAAM,GAAG,EAAE;gBAAE,GAAG,IAAI,KAAK,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;YACrD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC/B,MAAM;QACR,CAAC;QACD,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC;QACf,IAAI,IAAI;YAAE,SAAS;QACnB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,IAAI,mBAAmB,CAAC,CAAC;YAClC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,IAAI,GAAG,IAAI,CAAC;YACrF,SAAS;QACX,CAAC;QACD,IAAI,EAAE,IAAI,GAAG,uBAAe,EAAE,CAAC;YAC7B,IAAI,CAAC,WAAW,uBAAe,QAAQ,CAAC,CAAC;YACzC,MAAM;QACR,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC5D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,iCAAiC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACvH,SAAS;YACX,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,EAAE,GAAG,IAAI,CAAC;YACd,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;gBACf,KAAK,OAAO;oBACV,EAAE,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACvC,MAAM;gBACR,KAAK,OAAO,CAAC;gBACb,KAAK,KAAK,CAAC;gBACX,KAAK,YAAY;oBACf,EAAE,GAAG,CAAC,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBAC9C,MAAM;gBACR,KAAK,MAAM;oBACT,EAAE,GAAG,yCAAyC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACvD,MAAM;gBACR,KAAK,KAAK;oBACR,EAAE,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,MAAM,CAAC;oBAChD,MAAM;gBACR,KAAK,aAAa;oBAChB,EAAE,GAAG,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,CAAC;oBACnC,MAAM;gBACR,KAAK,MAAM;oBACT,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC/C,MAAM;gBACR,KAAK,KAAK;oBACR,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACxB,MAAM;gBACR,KAAK,OAAO,CAAC;gBACb,KAAK,QAAQ;oBACX,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;oBAC9C,MAAM;gBACR,KAAK,SAAS,CAAC;gBACf,KAAK,SAAS;oBACZ,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAC3C,MAAM;gBACR,KAAK,UAAU;oBACb,EAAE,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACrC,MAAM;YACV,CAAC;YACD,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,IAAI,oCAAoC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC1J,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjB,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;gBAAE,MAAM,GAAG,IAAI,CAAC;YACpC,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1C,CAAC;QACD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC,mEAAmE,CAAC,CAAC;gBAC1E,IAAI,IAAI,SAAS,CAAC;YACpB,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACvF,wDAAwD;gBACxD,IAAI,CAAC,2BAA2B,CAAC,CAAC;gBAClC,SAAS;YACX,CAAC;YACD,IAAI,IAAI,8CAA8C,CAAC;QACzD,CAAC;QACD,IAAI,IAAI,KAAK,GAAG;YAAE,IAAI,IAAI,4CAA4C,CAAC;QACvE,IAAI,IAAI,GAAG,CAAC;QACZ,GAAG,IAAI,IAAI,CAAC;QACZ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC3D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,SAAS;YAAE,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC;IACzE,CAAC;IACD,OAAO,KAAK,CAAC,MAAM;QAAE,GAAG,IAAI,KAAK,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;IAChD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,wHAAwH;AACxH,MAAM;AAEN,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;AACrF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,mBAAmB;IAC5H,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa;IACjL,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,iBAAiB;IAC/F,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,iBAAiB,EAAE,gBAAgB;IAC3J,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY;IACnH,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY;IAC1H,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,cAAc;IAChG,uBAAuB,EAAE,oBAAoB,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO;CAChI,CAAC,CAAC;AACH,MAAM,UAAU,GAA6B;IAC3C,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC;IACnF,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC;CACzC,CAAC;AACF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC3J,MAAM,WAAW,GAAG,+BAA+B,CAAC;AACpD,MAAM,QAAQ,GAAG,oKAAoK,CAAC;AACtL,MAAM,KAAK,GAAG,oLAAoL,CAAC;AAEnM,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,4BAA4B,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;YAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACtI,IAAI,sFAAsF,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,sBAAsB,CAAC;IACtI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,2CAA2C,CAAC;IACjF,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8GAA8G;AAC9G,SAAS,KAAK,CAAC,QAAgB;IAC7B,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,IAAyB,EAAE,OAAgB;IAC7E,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kFAAkF,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;YAC5K,MAAM;QACR,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;iBACvB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;YACjC,CAAC,EAAE,CAAC;QACN,CAAC;QACD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACjC,MAAM;QACR,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC,GAAG,CAAC,CAAC;QACN,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBACzD,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kFAAkF,CAAC,CAAC;gBACrH,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK;gBAAE,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC;YAC9D,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG,IAAI,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9G,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACvE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACjL,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,WAAW,GAAG,KAAK,CAAC;oBACpB,MAAM;gBACR,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,aAAa,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,mGAAmG,CAAC,CAAC;YAC3I,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,qBAAqB,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC;gBACrE,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzC,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,CAAC,GAAG,IAAI,KAAK,GAAG,GAAG,CAAC,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,KAAK,CAAC,MAAM;YAAE,GAAG,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2HAA2H;AAC3H,SAAgB,iBAAiB,CAAC,KAAa;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,GAAG,4BAAoB,EAAE,CAAC;QACxC,IAAI,CAAC,sBAAsB,4BAAoB,GAAG,IAAI,MAAM,CAAC,CAAC;QAC9D,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,4BAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACpD,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;AACzG,CAAC;AAED,wHAAwH;AACxH,sBAAsB;AAEtB,2HAA2H;AAC9G,QAAA,gBAAgB,GAAG,oGAAoG,CAAC;AAErI,6GAA6G;AAChG,QAAA,oBAAoB,GAAG,6CAA6C,CAAC;AAElF,MAAM,cAAc,GAAG,sOAAsO,CAAC;AAE9P,8FAA8F;AAC9F,SAAgB,mBAAmB,CAAC,IAAY,EAAE,GAAW,EAAE,IAAY;IACzE,OAAO,8BAA8B,UAAU,CAAC,IAAI,CAAC,qFAAqF,wBAAgB,+EAA+E,cAAc,WAAW,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,gBAAgB,IAAI,gBAAgB,CAAC;AAC3U,CAAC;AAED,+GAA+G;AAC/G,SAAgB,iBAAiB,CAAC,CAAiE,EAAE,OAAwB,EAAE;IAC7H,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC;IACtD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,yBAAiB,EAAE,yBAAiB,CAAC,EAAE,yBAAiB,CAAC,CAAC;IACnH,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7G,OAAO,qCAAqC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,gBAAgB,CAAC,cAAc,4BAAoB,yDAAyD,MAAM,aAAa,UAAU,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,aAAa,CAAC;AACjQ,CAAC;AAED,4JAA4J;AAC5J,SAAgB,oBAAoB,CAAC,CAA0B,EAAE,IAAY,EAAE,KAAa;IAC1F,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,OAAe,EAAS,EAAE;QACjD,MAAM,IAAI,sBAAa,CAAC,mBAAmB,EAAE,GAAG,CAAC,KAAK,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC;IACF,IAAI,KAAK,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,qCAAqC,CAAC,CAAC;IACvI,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,IAAI,CAAC,GAAG,IAAI,MAAM,EAAE,0BAA0B,CAAC,CAAC;IACtG,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAc,CAAC,CAAC;IACrD,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM;QAAE,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9F,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,gCAAgC,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAa,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAc,EAAE,CAAC;IACpG,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM;QAAE,IAAI,CAAC,GAAG,IAAI,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,yBAAiB,IAAI,CAAC,CAAC,MAAM,IAAI,yBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,IAAI,CAAC,GAAG,IAAI,SAAS,EAAE,8CAA8C,yBAAiB,OAAO,yBAAiB,GAAG,CAAW,CAAC;IACvR,IAAI,KAAyB,CAAC;IAC9B,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,IAAI,CAAC,GAAG,IAAI,QAAQ,EAAE,uDAAuD,CAAC,CAAC;QACjK,KAAK,GAAG,CAAC,CAAC,KAAe,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACpJ,CAAC"}

package/dist/engine.d.ts

@@ -76,7 +76,7 @@ export declare class Engine {
     /** Last written body of each singleton settings route. */
     readonly singletons: Map<string, Obj>;
     /** Current-state presenters the change feed and snapshots read through. */
-    readonly presenters: Map<"user" | "organization" | "membership" | "invitation" | "role_assignment" | "api_key" | "machine" | "machine_grant", {
+    readonly presenters: Map<"user" | "api_key" | "organization" | "membership" | "invitation" | "role_assignment" | "machine" | "machine_grant", {
         one(id: string): Obj | null;
         all(): string[];
     }>;

package/dist/engine.js

@@ -13,6 +13,7 @@ const feed_1 = require("./feed");
 const messages_1 = require("./messages");
 const generic_1 = require("./generic");
 const platform_1 = require("./handlers/platform");
+const emu4_trust_1 = require("./handlers/emu4-trust");
 const handlers_1 = require("./handlers");
 const toHeaders = (h) => {
     const out = new Headers();
@@ -256,6 +257,9 @@ class Engine {
         const reply = await handler({ engine: this, request, params, query: url.searchParams, body, key, op });
         // A handler says "success" with 200 or 201; the document decides which one (a create is 201 only where the API says so).
         const status = op && (reply.status === undefined || reply.status === 200 || reply.status === 201) ? op.successStatus : (reply.status ?? 200);
+        // Every successful write leaves an audit row (the tamper-evident audit chain covers these rows).
+        if (status < 400)
+            (0, emu4_trust_1.auditMutation)(this, { method, path, params, key, body: reply.body });
         const headers = { ...budgetHeaders, ...(reply.headers ?? {}) };
         if (unknown.length)
             headers['Atlas-Unknown-Fields'] = unknown.join(',');