@cortexkit/aft-bridge 0.30.2 → 0.30.3

package/dist/index.d.ts

@@ -15,13 +15,12 @@ export type { Logger, LogMeta } from "./logger.js";
 export type { MigrationHarness, MigrationOptions, MigrationStatus } from "./migration.js";
 export { ensureStorageMigrated, getMigrationStatus, resolveCortexKitStorageRoot, resolveLegacyStorageRoot, } from "./migration.js";
 export { __test__ as __onnxTest__, cleanupOnnxRuntime, ensureOnnxRuntime, getManualInstallHint, isOrtAutoDownloadSupported, } from "./onnx-runtime.js";
-export { repairRootScopedStorageFile, resolveHarnessStoragePath } from "./paths.js";
+export { markAnnouncementSeen, repairRootScopedStorageFile, resolveHarnessStoragePath, shouldShowAnnouncement, } from "./paths.js";
 export { PLATFORM_ARCH_MAP, PLATFORM_ASSET_MAP } from "./platform.js";
 export type { PoolOptions } from "./pool.js";
 export { BridgePool, HomeProjectRootError, isHomeDirectoryRoot } from "./pool.js";
 export type { AftErrorResponse, AftPushFrame, AftRequestEnvelope, AftResponse, AftSuccessResponse, BashCompletedFrame, BgCompletion, ConfigureWarningFrame, PermissionAskFrame, ProgressFrame, StatusCompression, StatusCompressionAggregate, StatusResponse, } from "./protocol.js";
 export { findBinary, findBinarySync, platformKey } from "./resolver.js";
-export { _isPrivateIpv4, cleanupUrlCache, fetchUrlToTempFile } from "./url-fetch.js";
 export type { ZoomResponseLike } from "./zoom-format.js";
 export { formatZoomText } from "./zoom-format.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EACV,oBAAoB,EACpB,sBAAsB,EACtB,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,EACxB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EACL,cAAc,EACd,YAAY,EACZ,aAAa,EACb,WAAW,EACX,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC1E,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE1F,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,QAAQ,IAAI,YAAY,EACxB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAEpF,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACtE,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAElF,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,qBAAqB,EACrB,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,0BAA0B,EAC1B,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAExE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAErF,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EACV,oBAAoB,EACpB,sBAAsB,EACtB,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,EACxB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EACL,cAAc,EACd,YAAY,EACZ,aAAa,EACb,WAAW,EACX,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC1E,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE1F,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,QAAQ,IAAI,YAAY,EACxB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACtE,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAElF,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,qBAAqB,EACrB,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,0BAA0B,EAC1B,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAExE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -18,12 +18,10 @@ export { compressionSavingsPercent, formatTokenCount } from "./format.js";
 export { ensureStorageMigrated, getMigrationStatus, resolveCortexKitStorageRoot, resolveLegacyStorageRoot, } from "./migration.js";
 // --- ONNX runtime ---
 export { __test__ as __onnxTest__, cleanupOnnxRuntime, ensureOnnxRuntime, getManualInstallHint, isOrtAutoDownloadSupported, } from "./onnx-runtime.js";
-export { repairRootScopedStorageFile, resolveHarnessStoragePath } from "./paths.js";
+export { markAnnouncementSeen, repairRootScopedStorageFile, resolveHarnessStoragePath, shouldShowAnnouncement, } from "./paths.js";
 // --- platform helpers ---
 export { PLATFORM_ARCH_MAP, PLATFORM_ASSET_MAP } from "./platform.js";
 export { BridgePool, HomeProjectRootError, isHomeDirectoryRoot } from "./pool.js";
 export { findBinary, findBinarySync, platformKey } from "./resolver.js";
-// --- URL fetch (shared by aft_outline / aft_zoom URL targets) ---
-export { _isPrivateIpv4, cleanupUrlCache, fetchUrlToTempFile } from "./url-fetch.js";
 export { formatZoomText } from "./zoom-format.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,0BAA0B;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAUrD,oBAAoB;AACpB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACzE,4BAA4B;AAC5B,OAAO,EACL,cAAc,EACd,YAAY,EACZ,aAAa,EACb,WAAW,EACX,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,gCAAgC;AAChC,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG1E,4BAA4B;AAC5B,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,uBAAuB;AACvB,OAAO,EACL,QAAQ,IAAI,YAAY,EACxB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACpF,2BAA2B;AAC3B,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEtE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAiBlF,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACxE,mEAAmE;AACnE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGrF,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,0BAA0B;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAUrD,oBAAoB;AACpB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACzE,4BAA4B;AAC5B,OAAO,EACL,cAAc,EACd,YAAY,EACZ,aAAa,EACb,WAAW,EACX,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,gCAAgC;AAChC,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG1E,4BAA4B;AAC5B,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,uBAAuB;AACvB,OAAO,EACL,QAAQ,IAAI,YAAY,EACxB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,YAAY,CAAC;AACpB,2BAA2B;AAC3B,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEtE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAiBlF,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAGxE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/paths.d.ts

@@ -1,4 +1,41 @@
 import type { MigrationHarness } from "./migration.js";
 export declare function resolveHarnessStoragePath(storageRoot: string, harness: MigrationHarness, ...segments: string[]): string;
 export declare function repairRootScopedStorageFile(storageRoot: string, harness: MigrationHarness, fileName: string): string;
+/**
+ * Decides whether to surface the version-specific announcement dialog/toast.
+ *
+ * Three cases, all driven off the persisted `last_announced_version` file:
+ *
+ * 1. **Existing user, same version** — file matches `currentVersion`. Skip.
+ *
+ * 2. **Existing user, upgrade** — file holds a *different* non-empty version.
+ *    Show the dialog so the user sees what's new in their upgrade. After the
+ *    dialog is dismissed, the host calls `markAnnouncementSeen` to record
+ *    `currentVersion`.
+ *
+ * 3. **Fresh install or ephemeral sandbox** — file does not exist OR holds
+ *    only whitespace. We deliberately do NOT show changelog bullets to a
+ *    first-time user (no context to interpret them), AND we don't pester
+ *    Docker/CI/disposable-VM users whose storage gets wiped every boot.
+ *    Instead we silently **seed** the file with `currentVersion` so the very
+ *    next launch behaves like case 1. Future upgrades still trigger case 2.
+ *
+ * Failures to read/write the marker file are non-fatal: we never let a
+ * filesystem hiccup spam an announcement. On any I/O error the function
+ * returns `false` and the host treats this turn as already-announced.
+ *
+ * Returns:
+ *   - `true`  → the caller should render the announcement and then call
+ *               `markAnnouncementSeen(...)` once the user has seen it.
+ *   - `false` → skip rendering. (File was already up-to-date, OR this was a
+ *               fresh-install seed and the file has now been written so the
+ *               next launch will also skip.)
+ */
+export declare function shouldShowAnnouncement(storageRoot: string, harness: MigrationHarness, currentVersion: string): boolean;
+/**
+ * Records that the user has seen `currentVersion`'s announcement. Best-effort
+ * filesystem write — failures are silently swallowed because the worst case
+ * is repeating the announcement once, not a broken plugin.
+ */
+export declare function markAnnouncementSeen(storageRoot: string, harness: MigrationHarness, currentVersion: string): void;
 //# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,gBAAgB,EACzB,GAAG,QAAQ,EAAE,MAAM,EAAE,GACpB,MAAM,CAER;AAED,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,MAAM,GACf,MAAM,CAeR"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,gBAAgB,EACzB,GAAG,QAAQ,EAAE,MAAM,EAAE,GACpB,MAAM,CAER;AAED,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,MAAM,GACf,MAAM,CAeR;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,gBAAgB,EACzB,cAAc,EAAE,MAAM,GACrB,OAAO,CAkCT;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,gBAAgB,EACzB,cAAc,EAAE,MAAM,GACrB,IAAI,CAWN"}

package/dist/paths.js

@@ -1,4 +1,4 @@
-import { existsSync, mkdirSync, renameSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 export function resolveHarnessStoragePath(storageRoot, harness, ...segments) {
     return join(storageRoot, harness, ...segments);
@@ -18,4 +18,85 @@ export function repairRootScopedStorageFile(storageRoot, harness, fileName) {
     }
     return harnessPath;
 }
+/**
+ * Decides whether to surface the version-specific announcement dialog/toast.
+ *
+ * Three cases, all driven off the persisted `last_announced_version` file:
+ *
+ * 1. **Existing user, same version** — file matches `currentVersion`. Skip.
+ *
+ * 2. **Existing user, upgrade** — file holds a *different* non-empty version.
+ *    Show the dialog so the user sees what's new in their upgrade. After the
+ *    dialog is dismissed, the host calls `markAnnouncementSeen` to record
+ *    `currentVersion`.
+ *
+ * 3. **Fresh install or ephemeral sandbox** — file does not exist OR holds
+ *    only whitespace. We deliberately do NOT show changelog bullets to a
+ *    first-time user (no context to interpret them), AND we don't pester
+ *    Docker/CI/disposable-VM users whose storage gets wiped every boot.
+ *    Instead we silently **seed** the file with `currentVersion` so the very
+ *    next launch behaves like case 1. Future upgrades still trigger case 2.
+ *
+ * Failures to read/write the marker file are non-fatal: we never let a
+ * filesystem hiccup spam an announcement. On any I/O error the function
+ * returns `false` and the host treats this turn as already-announced.
+ *
+ * Returns:
+ *   - `true`  → the caller should render the announcement and then call
+ *               `markAnnouncementSeen(...)` once the user has seen it.
+ *   - `false` → skip rendering. (File was already up-to-date, OR this was a
+ *               fresh-install seed and the file has now been written so the
+ *               next launch will also skip.)
+ */
+export function shouldShowAnnouncement(storageRoot, harness, currentVersion) {
+    if (!currentVersion)
+        return false;
+    const versionFile = repairRootScopedStorageFile(storageRoot, harness, "last_announced_version");
+    let lastVersion = "";
+    try {
+        if (existsSync(versionFile)) {
+            lastVersion = readFileSync(versionFile, "utf-8").trim();
+        }
+    }
+    catch {
+        // Read failed — be conservative and skip the announcement so a flaky
+        // filesystem can't repeatedly flash a dialog.
+        return false;
+    }
+    if (lastVersion === currentVersion)
+        return false;
+    if (!lastVersion) {
+        // Fresh install or sandbox: silently mark as seen. The next launch sees
+        // case 1 (file matches) and stays quiet. Real upgrades from a persisted
+        // older version still hit the `lastVersion !== currentVersion` path
+        // above and surface the dialog.
+        try {
+            mkdirSync(dirname(versionFile), { recursive: true });
+            writeFileSync(versionFile, currentVersion);
+        }
+        catch {
+            // Best-effort. If we couldn't seed the file we still skip this turn so
+            // the user isn't pestered; we'll just try to seed again next launch.
+        }
+        return false;
+    }
+    return true;
+}
+/**
+ * Records that the user has seen `currentVersion`'s announcement. Best-effort
+ * filesystem write — failures are silently swallowed because the worst case
+ * is repeating the announcement once, not a broken plugin.
+ */
+export function markAnnouncementSeen(storageRoot, harness, currentVersion) {
+    if (!currentVersion)
+        return;
+    const versionFile = repairRootScopedStorageFile(storageRoot, harness, "last_announced_version");
+    try {
+        mkdirSync(dirname(versionFile), { recursive: true });
+        writeFileSync(versionFile, currentVersion);
+    }
+    catch {
+        // Best-effort.
+    }
+}
 //# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,MAAM,UAAU,yBAAyB,CACvC,WAAmB,EACnB,OAAyB,EACzB,GAAG,QAAkB;IAErB,OAAO,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,WAAmB,EACnB,OAAyB,EACzB,QAAgB;IAEhB,MAAM,WAAW,GAAG,yBAAyB,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAE7C,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,WAAW,CAAC;IAEzE,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,oDAAoD;IACtD,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,MAAM,UAAU,yBAAyB,CACvC,WAAmB,EACnB,OAAyB,EACzB,GAAG,QAAkB;IAErB,OAAO,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,WAAmB,EACnB,OAAyB,EACzB,QAAgB;IAEhB,MAAM,WAAW,GAAG,yBAAyB,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAE7C,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,WAAW,CAAC;IAEzE,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,oDAAoD;IACtD,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,OAAyB,EACzB,cAAsB;IAEtB,IAAI,CAAC,cAAc;QAAE,OAAO,KAAK,CAAC;IAElC,MAAM,WAAW,GAAG,2BAA2B,CAAC,WAAW,EAAE,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAEhG,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,WAAW,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,8CAA8C;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,WAAW,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAEjD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,wEAAwE;QACxE,wEAAwE;QACxE,oEAAoE;QACpE,gCAAgC;QAChC,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,aAAa,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,qEAAqE;QACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAmB,EACnB,OAAyB,EACzB,cAAsB;IAEtB,IAAI,CAAC,cAAc;QAAE,OAAO;IAE5B,MAAM,WAAW,GAAG,2BAA2B,CAAC,WAAW,EAAE,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAEhG,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,aAAa,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/aft-bridge",
-  "version": "0.30.2",
+  "version": "0.30.3",
   "type": "module",
   "description": "Shared NDJSON bridge transport, binary resolution, and ONNX runtime helpers for AFT agent-host plugins (OpenCode, Pi)",
   "license": "MIT",

package/dist/url-fetch.d.ts

@@ -1,33 +0,0 @@
-import { lookup } from "node:dns/promises";
-import { type Dispatcher } from "undici";
-interface FetchUrlOptions {
-    allowPrivate?: boolean;
-    /** Test-only injection point. Production fetches use undici with DNS pinning. */
-    fetchImpl?: FetchImpl;
-    /** Test-only injection point. Production DNS resolution uses node:dns/promises.lookup. */
-    lookup?: LookupFn;
-    /** Test-only injection point for observing the DNS-pinned dispatcher. */
-    dispatcherFactory?: (validatedIp: string) => Dispatcher;
-}
-type LookupFn = typeof lookup;
-interface FetchInit {
-    signal?: AbortSignal;
-    redirect?: "manual";
-    dispatcher?: Dispatcher;
-    headers?: Record<string, string>;
-}
-type FetchImpl = (input: string, init: FetchInit) => Promise<Response>;
-/** Exported for unit tests. */
-export declare function _isPrivateIpv4(address: string): boolean;
-/**
- * Fetch a URL to a cached temp file. Uses disk cache with 1-day TTL.
- * Returns the cached file path the Rust outline/zoom command can read.
- * Throws on errors (invalid URL, network failure, unsupported content type, oversized body).
- */
-export declare function fetchUrlToTempFile(url: string, storageDir: string, options?: FetchUrlOptions): Promise<string>;
-/**
- * Remove cache entries older than TTL. Called periodically at plugin startup.
- */
-export declare function cleanupUrlCache(storageDir: string): void;
-export {};
-//# sourceMappingURL=url-fetch.d.ts.map

package/dist/url-fetch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"url-fetch.d.ts","sourceRoot":"","sources":["../src/url-fetch.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAW3C,OAAO,EAAS,KAAK,UAAU,EAAwB,MAAM,QAAQ,CAAC;AAoBtE,UAAU,eAAe;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,iFAAiF;IACjF,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,0FAA0F;IAC1F,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,UAAU,CAAC;CACzD;AAED,KAAK,QAAQ,GAAG,OAAO,MAAM,CAAC;AAC9B,UAAU,SAAS;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAyBvE,+BAA+B;AAC/B,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAavD;AAqVD;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,MAAM,CAAC,CAuIjB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAkCxD"}

package/dist/url-fetch.js

@@ -1,526 +0,0 @@
-import { createHash, randomBytes } from "node:crypto";
-import { lookup } from "node:dns/promises";
-import { existsSync, mkdirSync, readdirSync, readFileSync, unlinkSync, writeFileSync, } from "node:fs";
-import { isIP } from "node:net";
-import { join } from "node:path";
-import { Agent, fetch as undiciFetch } from "undici";
-import { log, warn } from "./active-logger.js";
-/** Max response body size (10 MB) */
-const MAX_RESPONSE_BYTES = 10 * 1024 * 1024;
-/** Cache TTL: 1 day */
-const CACHE_TTL_MS = 24 * 60 * 60 * 1000;
-/** Fetch timeout: 30 seconds — covers initial connect + headers */
-const FETCH_TIMEOUT_MS = 30_000;
-/**
- * Per-chunk body read timeout: 15 seconds. Resets after every successful
- * chunk so legitimate large/slow downloads still complete, but a stalled
- * mid-body stream (e.g. CDN edge drops the connection without closing the
- * socket cleanly) is aborted within this window. Without this guard the
- * body loop blocks indefinitely because Node's `AbortController` from
- * `fetch()` only covers the connect+headers phase, not body streaming.
- */
-const BODY_CHUNK_TIMEOUT_MS = 15_000;
-const MAX_REDIRECTS = 5;
-function cacheDir(storageDir) {
-    return join(storageDir, "url_cache");
-}
-function hashUrl(url) {
-    return createHash("sha256").update(url).digest("hex").slice(0, 16);
-}
-function metaPath(storageDir, hash) {
-    return join(cacheDir(storageDir), `${hash}.meta.json`);
-}
-function contentPath(storageDir, hash, extension) {
-    return join(cacheDir(storageDir), `${hash}${extension}`);
-}
-/** Exported for unit tests. */
-export function _isPrivateIpv4(address) {
-    const parts = address.split(".").map((part) => Number.parseInt(part, 10));
-    if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part)))
-        return true;
-    const [a, b] = parts;
-    return (a === 0 || // 0.0.0.0/8 — wildcard, blocked to prevent local-host bypass
-        a === 10 ||
-        a === 127 ||
-        (a === 172 && b >= 16 && b <= 31) ||
-        (a === 192 && b === 168) ||
-        (a === 169 && b === 254) ||
-        a >= 224 // multicast (224/4) and reserved (240/4)
-    );
-}
-/**
- * Expand a possibly-compressed IPv6 address to 8 hextets (numbers).
- * Returns null on parse failure.
- */
-function expandIpv6(addr) {
-    if (addr === "::")
-        return [0, 0, 0, 0, 0, 0, 0, 0];
-    // Reject more than one "::"
-    const dcMatches = addr.match(/::/g);
-    if (dcMatches && dcMatches.length > 1)
-        return null;
-    // Handle dotted-quad tail by converting to two hextets.
-    let normalized = addr;
-    const lastColon = normalized.lastIndexOf(":");
-    if (lastColon !== -1) {
-        const tail = normalized.slice(lastColon + 1);
-        if (tail.includes(".")) {
-            const octets = tail.split(".").map((p) => Number.parseInt(p, 10));
-            if (octets.length !== 4 || octets.some((o) => Number.isNaN(o) || o < 0 || o > 255)) {
-                return null;
-            }
-            const h1 = ((octets[0] << 8) | octets[1]).toString(16);
-            const h2 = ((octets[2] << 8) | octets[3]).toString(16);
-            normalized = `${normalized.slice(0, lastColon)}:${h1}:${h2}`;
-        }
-    }
-    let parts;
-    if (normalized.includes("::")) {
-        const [left, right] = normalized.split("::");
-        const leftParts = left ? left.split(":") : [];
-        const rightParts = right ? right.split(":") : [];
-        const fill = 8 - leftParts.length - rightParts.length;
-        if (fill < 0)
-            return null;
-        parts = [...leftParts, ...Array(fill).fill("0"), ...rightParts];
-    }
-    else {
-        parts = normalized.split(":");
-    }
-    if (parts.length !== 8)
-        return null;
-    const hextets = parts.map((p) => {
-        const n = Number.parseInt(p, 16);
-        return Number.isNaN(n) || n < 0 || n > 0xffff ? -1 : n;
-    });
-    if (hextets.some((h) => h === -1))
-        return null;
-    return hextets;
-}
-function isPrivateIp(address) {
-    if (!address.includes(":")) {
-        return _isPrivateIpv4(address);
-    }
-    const lower = address.toLowerCase();
-    // Strip optional zone identifier (fe80::1%eth0 → fe80::1).
-    const noZone = lower.split("%")[0];
-    // Expand to 8 hextets so we can reliably detect IPv4-mapped/compatible
-    // forms even after URL canonicalization (e.g. [::ffff:127.0.0.1] →
-    // [::ffff:7f00:1]).
-    const hextets = expandIpv6(noZone);
-    if (hextets) {
-        // IPv4-mapped (::ffff:X.X.X.X) and IPv4-compatible (::X.X.X.X) — extract
-        // the embedded IPv4 from the last two hextets and check against IPv4 ranges.
-        const top6Zero = hextets.slice(0, 6).every((h) => h === 0);
-        const isMapped = hextets[0] === 0 &&
-            hextets[1] === 0 &&
-            hextets[2] === 0 &&
-            hextets[3] === 0 &&
-            hextets[4] === 0 &&
-            hextets[5] === 0xffff;
-        if (isMapped || top6Zero) {
-            const a = (hextets[6] >> 8) & 0xff;
-            const b = hextets[6] & 0xff;
-            const c = (hextets[7] >> 8) & 0xff;
-            const d = hextets[7] & 0xff;
-            const ipv4 = `${a}.${b}.${c}.${d}`;
-            // ::1 (loopback) and :: (unspecified) both fall into top6Zero and last
-            // hextet 0 or 1 — _isPrivateIpv4 already blocks 0.0.0.0 and 127/8.
-            if (top6Zero && hextets[6] === 0 && hextets[7] <= 1) {
-                return true;
-            }
-            return _isPrivateIpv4(ipv4);
-        }
-        const firstHextet = hextets[0];
-        return (
-        // fe80::/10 link-local
-        (firstHextet >= 0xfe80 && firstHextet <= 0xfebf) ||
-            // fc00::/7 unique local
-            (firstHextet >= 0xfc00 && firstHextet <= 0xfdff) ||
-            // ff00::/8 multicast
-            firstHextet >= 0xff00);
-    }
-    // Could not expand — be conservative and block.
-    return true;
-}
-async function assertPublicUrl(url, allowPrivate, dnsLookup = lookup) {
-    if (url.protocol !== "http:" && url.protocol !== "https:") {
-        throw new Error(`Only http:// and https:// URLs are supported, got: ${url.protocol}`);
-    }
-    if (allowPrivate)
-        return undefined;
-    // URL.hostname returns IPv6 literals wrapped in brackets ("[::1]") per WHATWG.
-    // Strip them before checking the address.
-    const hostname = url.hostname.replace(/^\[|\]$/g, "");
-    // If the hostname is already a literal IP, check it directly — skip DNS so we
-    // also catch malformed IPv6 forms (::127.0.0.1, ::ffff:127.0.0.1) that some
-    // resolvers reject as "not found" instead of returning the embedded IPv4.
-    if (isIP(hostname) || hostname.includes(":")) {
-        if (isPrivateIp(hostname)) {
-            throw new Error(`Blocked private URL host ${url.hostname} (${hostname})`);
-        }
-        return hostname;
-    }
-    const addresses = await dnsLookup(hostname, { all: true, verbatim: true });
-    for (const { address } of addresses) {
-        if (isPrivateIp(address)) {
-            throw new Error(`Blocked private URL host ${url.hostname} (${address})`);
-        }
-    }
-    if (addresses.length === 0) {
-        throw new Error(`Failed to resolve URL host ${url.hostname}`);
-    }
-    // Prefer IPv4 when available. AAAA can come first on many resolvers, but
-    // many user networks (corporate, home, mobile) don't have IPv6 transit, so
-    // pinning to AAAA causes EHOSTUNREACH / connect timeouts that surface as a
-    // bare `fetch failed`. Falls back to whatever DNS gave us if no IPv4 record.
-    // `family` is documented as numeric (4/6) but be defensive — some runtimes
-    // have surfaced it as the string "IPv4"/"IPv6" historically.
-    const ipv4 = addresses.find((entry) => entry.family === 4 ||
-        entry.family === "IPv4" ||
-        (typeof entry.address === "string" && isIP(entry.address) === 4));
-    const chosen = ipv4 ?? addresses[0];
-    if (!chosen || typeof chosen.address !== "string" || chosen.address.length === 0) {
-        // Should be unreachable given the length>0 check above, but the bare
-        // `Invalid IP address: undefined` failure surfaced by undici when an
-        // empty/undefined IP slips into connect.lookup is opaque enough that
-        // we want a clear, structured failure instead.
-        throw new Error(`DNS lookup for ${url.hostname} returned no usable address (got: ${JSON.stringify(addresses)})`);
-    }
-    return chosen.address;
-}
-function createPinnedDispatcher(validatedIp) {
-    const family = validatedIp.includes(":") ? 6 : 4;
-    // Node 18+ calls the lookup with `opts.all: true` (especially via TLS /
-    // happy-eyeballs paths). When `all` is true the callback expects an *array*
-    // of `{address, family}` objects, not the legacy `(err, address, family)`
-    // 3-arg shape. Calling the legacy form there causes Node to surface
-    // `TypeError [ERR_INVALID_IP_ADDRESS]: Invalid IP address: undefined` from
-    // net:emitLookup, wrapped by undici as a bare `fetch failed`. Honor
-    // whichever shape `opts.all` requested.
-    // (Cast to `any` because undici's `LookupFunction` type only models the
-    // single-address callback overload, not the `all: true` variadic.)
-    // biome-ignore lint/suspicious/noExplicitAny: dual-overload lookup callback
-    const pinnedLookup = (_hostname, opts, 
-    // biome-ignore lint/suspicious/noExplicitAny: dual-overload lookup callback
-    callback) => {
-        if (opts?.all) {
-            callback(null, [{ address: validatedIp, family }]);
-        }
-        else {
-            callback(null, validatedIp, family);
-        }
-    };
-    return new Agent({
-        connect: { lookup: pinnedLookup },
-    });
-}
-function resolveRedirectUrl(currentUrl, location) {
-    if (!location) {
-        throw new Error(`Redirect from ${currentUrl.href} missing Location header`);
-    }
-    return new URL(location, currentUrl);
-}
-// Detect Bun runtime. When undici is bundled into a Bun-targeted bundle
-// (opencode-plugin builds with `bun build --target node`), the bundled undici
-// fetch + bundled stream classes can stall on body reads against many real
-// hosts (github.com, registry.npmjs.org, unpkg.com, api.github.com). This is a
-// known interaction between bundled undici streams and Bun's runtime — the
-// same undici code works fine when loaded via Node `require()` directly.
-//
-// When running under Bun, fall back to the runtime's native global fetch (Bun
-// has its own performant fetch impl). SSRF protection is still active via
-// `assertPublicUrl`; we just skip the per-connection DNS pinning since Bun's
-// native fetch doesn't accept an undici dispatcher. The window for DNS
-// rebinding is small (one DNS lookup → one TCP connect) and the URL fetch
-// surface in AFT is opt-in tooling, not an untrusted server-side request path.
-//
-// biome-ignore lint/suspicious/noExplicitAny: detect Bun runtime
-const isBunRuntime = typeof globalThis.Bun !== "undefined";
-async function fetchWithRedirects(startUrl, allowPrivate, deps = {}) {
-    let currentUrl = startUrl;
-    // Honor explicit fetchImpl override (tests). Otherwise: Bun gets native fetch,
-    // Node gets undici with pinned dispatcher.
-    const fetchImpl = deps.fetchImpl ?? (isBunRuntime ? globalThis.fetch : undiciFetch);
-    const dnsLookup = deps.lookup ?? lookup;
-    for (let redirectCount = 0; redirectCount <= MAX_REDIRECTS; redirectCount++) {
-        const validatedIp = await assertPublicUrl(currentUrl, allowPrivate, dnsLookup);
-        // Pinned dispatcher only works with undici (Node path). Bun's native fetch
-        // doesn't accept a dispatcher arg, so skip pinning there. An explicit
-        // `dispatcherFactory` (test injection) always wins over runtime detection
-        // so unit tests can keep asserting the pin behavior without spinning up
-        // a real Node process.
-        let dispatcher;
-        if (validatedIp) {
-            if (deps.dispatcherFactory) {
-                dispatcher = deps.dispatcherFactory(validatedIp);
-            }
-            else if (!isBunRuntime) {
-                dispatcher = createPinnedDispatcher(validatedIp);
-            }
-        }
-        const controller = new AbortController();
-        const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-        let response;
-        try {
-            response = await fetchImpl(currentUrl.href, {
-                signal: controller.signal,
-                redirect: "manual",
-                dispatcher,
-                headers: {
-                    "user-agent": "aft-opencode-plugin",
-                    // Prioritize markdown for content-negotiating servers (GitHub API, many docs sites).
-                    // `application/vnd.github.raw` is GitHub's custom type — returns raw markdown from
-                    // repo file and readme endpoints. Falls back to HTML if markdown is not available.
-                    accept: "application/vnd.github.raw, text/markdown, text/x-markdown, text/html;q=0.9, application/json;q=0.8, text/plain;q=0.5",
-                },
-            });
-        }
-        catch (err) {
-            // undici wraps the underlying network error (ECONNREFUSED / ETIMEDOUT /
-            // EHOSTUNREACH / ENOTFOUND / cert errors) inside `.cause` and exposes a
-            // bare "fetch failed" on the outer Error. Surfacing the cause's `code`
-            // and message turns an unactionable failure into something the agent
-            // (and the user) can actually triage.
-            const error = err;
-            const cause = error.cause;
-            const causeCode = cause?.code ?? error.code;
-            const causeMsg = cause?.message ?? "";
-            const detail = causeCode
-                ? causeMsg
-                    ? `${causeCode}: ${causeMsg}`
-                    : causeCode
-                : (error.message ?? "unknown error");
-            // Log the full chain so triage doesn't depend on the agent surface
-            // forwarding the wrapped error message.
-            warn(`URL fetch failed: ${currentUrl.href} — ${detail}`, {
-                outerMessage: error.message,
-                causeName: cause?.name,
-                causeCode,
-                causeErrno: cause?.errno,
-                causeSyscall: cause?.syscall,
-            });
-            throw new Error(`Failed to fetch ${currentUrl.href}: ${detail}`);
-        }
-        finally {
-            clearTimeout(timer);
-        }
-        if (response.status < 300 || response.status >= 400) {
-            return response;
-        }
-        if (redirectCount === MAX_REDIRECTS) {
-            throw new Error(`Too many redirects fetching ${startUrl.href}`);
-        }
-        currentUrl = resolveRedirectUrl(currentUrl, response.headers.get("location"));
-    }
-    throw new Error(`Too many redirects fetching ${startUrl.href}`);
-}
-/**
- * Map a Content-Type header to a file extension AFT can parse.
- * Returns null for unsupported types.
- */
-function resolveExtension(contentType) {
-    // Normalize: strip parameters (after `;`) AND pick the first value if the server
-    // echoed back a comma-separated list (GitHub API does this for /readme endpoints).
-    const lower = contentType.toLowerCase().split(";")[0].split(",")[0].trim();
-    if (lower === "text/html" ||
-        lower === "application/xhtml+xml" ||
-        lower === "application/vnd.github.html" ||
-        lower === "application/vnd.github+html") {
-        return ".html";
-    }
-    if (lower === "text/markdown" ||
-        lower === "text/x-markdown" ||
-        lower === "application/markdown" ||
-        // GitHub API raw content type — returns raw markdown for README endpoints
-        lower === "application/vnd.github.raw" ||
-        lower === "application/vnd.github+raw" ||
-        lower === "application/vnd.github.v3.raw") {
-        return ".md";
-    }
-    if (lower === "text/plain") {
-        // treat plain text as markdown so aft_outline can show headings if present
-        return ".md";
-    }
-    if (lower === "application/json" || lower === "application/ld+json" || lower.endsWith("+json")) {
-        // JSON is parseable by aft_outline (top-level keys become symbols).
-        // Covers npm registry, unpkg package.json, OpenAPI specs, etc.
-        return ".json";
-    }
-    return null;
-}
-/**
- * Fetch a URL to a cached temp file. Uses disk cache with 1-day TTL.
- * Returns the cached file path the Rust outline/zoom command can read.
- * Throws on errors (invalid URL, network failure, unsupported content type, oversized body).
- */
-export async function fetchUrlToTempFile(url, storageDir, options = {}) {
-    let parsed;
-    try {
-        parsed = new URL(url);
-    }
-    catch {
-        throw new Error(`Invalid URL: ${url}`);
-    }
-    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-        throw new Error(`Only http:// and https:// URLs are supported, got: ${parsed.protocol}`);
-    }
-    const allowPrivate = options.allowPrivate === true;
-    // Enforce the caller's current SSRF policy before consulting the disk cache.
-    // Otherwise a URL previously cached with allowPrivate=true could be replayed
-    // by a later allowPrivate=false call without re-validating the host.
-    await assertPublicUrl(parsed, allowPrivate, options.lookup);
-    const dir = cacheDir(storageDir);
-    mkdirSync(dir, { recursive: true });
-    const hash = hashUrl(url);
-    const metaFile = metaPath(storageDir, hash);
-    // Check cache
-    if (existsSync(metaFile)) {
-        try {
-            const meta = JSON.parse(readFileSync(metaFile, "utf8"));
-            const age = Date.now() - meta.fetchedAt;
-            const cached = contentPath(storageDir, hash, meta.extension);
-            if (age < CACHE_TTL_MS && existsSync(cached)) {
-                log(`URL cache hit: ${url} (${Math.round(age / 1000)}s old)`);
-                return cached;
-            }
-        }
-        catch {
-            // corrupted meta, re-fetch
-        }
-    }
-    log(`Fetching URL: ${url}`);
-    const response = await fetchWithRedirects(parsed, allowPrivate, options);
-    if (!response.ok) {
-        throw new Error(`HTTP ${response.status} ${response.statusText} fetching ${url}`);
-    }
-    const contentType = response.headers.get("content-type") || "text/plain";
-    const extension = resolveExtension(contentType);
-    if (!extension) {
-        throw new Error(`Unsupported content type '${contentType}' for ${url}. Supported: text/html, text/markdown, text/plain`);
-    }
-    const lengthHeader = response.headers.get("content-length");
-    if (lengthHeader) {
-        const length = Number.parseInt(lengthHeader, 10);
-        if (Number.isFinite(length) && length > MAX_RESPONSE_BYTES) {
-            throw new Error(`Response too large: ${length} bytes (max ${MAX_RESPONSE_BYTES})`);
-        }
-    }
-    // Stream with size cap and per-chunk timeout. The AbortController used for
-    // the initial fetch() only covers connect + headers — once we hold a
-    // ReadableStream reader, `reader.read()` has no built-in timeout, so a
-    // server that sends headers and then stalls mid-body (CDN edge drops the
-    // socket, partial response, rate limit hold) blocks this loop forever.
-    // The per-chunk timer is reset after every successful read, so legitimate
-    // large/slow downloads still complete cleanly.
-    const reader = response.body?.getReader();
-    if (!reader) {
-        throw new Error(`Failed to read response body for ${url}`);
-    }
-    const chunks = [];
-    let total = 0;
-    try {
-        while (true) {
-            let chunkTimer;
-            const stallSymbol = Symbol("body-stall");
-            const stallPromise = new Promise((resolve) => {
-                chunkTimer = setTimeout(() => resolve(stallSymbol), BODY_CHUNK_TIMEOUT_MS);
-            });
-            let result;
-            try {
-                result = await Promise.race([reader.read(), stallPromise]);
-            }
-            finally {
-                if (chunkTimer)
-                    clearTimeout(chunkTimer);
-            }
-            if (result === stallSymbol) {
-                reader.cancel().catch(() => { });
-                throw new Error(`Body read stalled (no data for ${BODY_CHUNK_TIMEOUT_MS}ms) fetching ${url}`);
-            }
-            const { done, value } = result;
-            if (done)
-                break;
-            if (value) {
-                total += value.length;
-                if (total > MAX_RESPONSE_BYTES) {
-                    reader.cancel().catch(() => { });
-                    throw new Error(`Response exceeded ${MAX_RESPONSE_BYTES} bytes, aborted`);
-                }
-                chunks.push(value);
-            }
-        }
-    }
-    finally {
-        // Defensive: release any held lock so the underlying stream can be GCed
-        // even if a throw skipped the loop's normal exit. `releaseLock` is a no-op
-        // if the reader was already cancelled.
-        try {
-            reader.releaseLock();
-        }
-        catch { }
-    }
-    // Write content and meta atomically
-    const body = Buffer.concat(chunks);
-    const contentFile = contentPath(storageDir, hash, extension);
-    const nonce = randomBytes(8).toString("hex");
-    const tmpContent = `${contentFile}.tmp-${process.pid}-${nonce}`;
-    writeFileSync(tmpContent, body);
-    const { renameSync } = await import("node:fs");
-    renameSync(tmpContent, contentFile);
-    const meta = {
-        url,
-        contentType,
-        extension,
-        fetchedAt: Date.now(),
-    };
-    const tmpMeta = `${metaFile}.tmp-${process.pid}-${nonce}`;
-    writeFileSync(tmpMeta, JSON.stringify(meta));
-    renameSync(tmpMeta, metaFile);
-    log(`URL cached (${total} bytes): ${url}`);
-    return contentFile;
-}
-/**
- * Remove cache entries older than TTL. Called periodically at plugin startup.
- */
-export function cleanupUrlCache(storageDir) {
-    const dir = cacheDir(storageDir);
-    if (!existsSync(dir))
-        return;
-    let removed = 0;
-    try {
-        for (const entry of readdirSync(dir)) {
-            if (!entry.endsWith(".meta.json"))
-                continue;
-            const metaFile = join(dir, entry);
-            try {
-                const meta = JSON.parse(readFileSync(metaFile, "utf8"));
-                const age = Date.now() - meta.fetchedAt;
-                if (age > CACHE_TTL_MS) {
-                    const hash = entry.slice(0, -".meta.json".length);
-                    const content = contentPath(storageDir, hash, meta.extension);
-                    if (existsSync(content))
-                        unlinkSync(content);
-                    unlinkSync(metaFile);
-                    removed++;
-                }
-            }
-            catch {
-                // corrupted meta, remove it too
-                try {
-                    unlinkSync(metaFile);
-                    removed++;
-                }
-                catch { }
-            }
-        }
-    }
-    catch (err) {
-        warn(`URL cache cleanup failed: ${err.message}`);
-        return;
-    }
-    if (removed > 0) {
-        log(`URL cache cleanup: removed ${removed} stale entries`);
-    }
-}
-//# sourceMappingURL=url-fetch.js.map

package/dist/url-fetch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"url-fetch.js","sourceRoot":"","sources":["../src/url-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EACL,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAmB,KAAK,IAAI,WAAW,EAAE,MAAM,QAAQ,CAAC;AACtE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE/C,qCAAqC;AACrC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5C,uBAAuB;AACvB,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,mEAAmE;AACnE,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,aAAa,GAAG,CAAC,CAAC;AA6BxB,SAAS,QAAQ,CAAC,UAAkB;IAClC,OAAO,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,QAAQ,CAAC,UAAkB,EAAE,IAAY;IAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,IAAY,EAAE,SAAiB;IACtE,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,+BAA+B;AAC/B,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;IACrB,OAAO,CACL,CAAC,KAAK,CAAC,IAAI,6DAA6D;QACxE,CAAC,KAAK,EAAE;QACR,CAAC,KAAK,GAAG;QACT,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;QACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;QACxB,CAAC,IAAI,GAAG,CAAC,yCAAyC;KACnD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,4BAA4B;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnD,wDAAwD;IACxD,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;gBACnF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACvD,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACvD,UAAU,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,IAAI,KAAe,CAAC;IACpB,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QACtD,IAAI,IAAI,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1B,KAAK,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,2DAA2D;IAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEnC,uEAAuE;IACvE,mEAAmE;IACnE,oBAAoB;IACpB,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,OAAO,EAAE,CAAC;QACZ,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,MAAM,QAAQ,GACZ,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YAChB,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YAChB,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YAChB,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YAChB,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YAChB,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;QACxB,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;YACnC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;YACnC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;YAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,uEAAuE;YACvE,mEAAmE;YACnE,IAAI,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC/B,OAAO;QACL,uBAAuB;QACvB,CAAC,WAAW,IAAI,MAAM,IAAI,WAAW,IAAI,MAAM,CAAC;YAChD,wBAAwB;YACxB,CAAC,WAAW,IAAI,MAAM,IAAI,WAAW,IAAI,MAAM,CAAC;YAChD,qBAAqB;YACrB,WAAW,IAAI,MAAM,CACtB,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAAQ,EACR,YAAqB,EACrB,YAAsB,MAAM;IAE5B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,sDAAsD,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,YAAY;QAAE,OAAO,SAAS,CAAC;IAEnC,+EAA+E;IAC/E,0CAA0C;IAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAEtD,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,QAAQ,KAAK,QAAQ,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;QACpC,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,QAAQ,KAAK,OAAO,GAAG,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CACzB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,KAAK,CAAC;QACjB,KAAK,CAAC,MAAkB,KAAK,MAAM;QACpC,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CACnE,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjF,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,+CAA+C;QAC/C,MAAM,IAAI,KAAK,CACb,kBAAkB,GAAG,CAAC,QAAQ,qCAAqC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAChG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,SAAS,sBAAsB,CAAC,WAAmB;IACjD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,oEAAoE;IACpE,2EAA2E;IAC3E,oEAAoE;IACpE,wCAAwC;IACxC,wEAAwE;IACxE,mEAAmE;IACnE,4EAA4E;IAC5E,MAAM,YAAY,GAAQ,CACxB,SAAiB,EACjB,IAAmC;IACnC,4EAA4E;IAC5E,QAAa,EACb,EAAE;QACF,IAAI,IAAI,EAAE,GAAG,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC;IACF,OAAO,IAAI,KAAK,CAAC;QACf,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;KAClC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAe,EAAE,QAAuB;IAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,iBAAiB,UAAU,CAAC,IAAI,0BAA0B,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,wEAAwE;AACxE,8EAA8E;AAC9E,2EAA2E;AAC3E,+EAA+E;AAC/E,2EAA2E;AAC3E,yEAAyE;AACzE,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,uEAAuE;AACvE,0EAA0E;AAC1E,+EAA+E;AAC/E,EAAE;AACF,iEAAiE;AACjE,MAAM,YAAY,GAAG,OAAQ,UAAkB,CAAC,GAAG,KAAK,WAAW,CAAC;AAEpE,KAAK,UAAU,kBAAkB,CAC/B,QAAa,EACb,YAAqB,EACrB,OAA4E,EAAE;IAE9E,IAAI,UAAU,GAAG,QAAQ,CAAC;IAC1B,+EAA+E;IAC/E,2CAA2C;IAC3C,MAAM,SAAS,GACb,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,CAAC,CAAE,UAAU,CAAC,KAAmB,CAAC,CAAC,CAAE,WAAyB,CAAC,CAAC;IAClG,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC;IAExC,KAAK,IAAI,aAAa,GAAG,CAAC,EAAE,aAAa,IAAI,aAAa,EAAE,aAAa,EAAE,EAAE,CAAC;QAC5E,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QAC/E,2EAA2E;QAC3E,sEAAsE;QACtE,0EAA0E;QAC1E,wEAAwE;QACxE,uBAAuB;QACvB,IAAI,UAAkC,CAAC;QACvC,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC3B,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YACnD,CAAC;iBAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBACzB,UAAU,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;QACrE,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE;gBAC1C,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ,EAAE,QAAQ;gBAClB,UAAU;gBACV,OAAO,EAAE;oBACP,YAAY,EAAE,qBAAqB;oBACnC,qFAAqF;oBACrF,mFAAmF;oBACnF,mFAAmF;oBACnF,MAAM,EACJ,uHAAuH;iBAC1H;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,wEAAwE;YACxE,uEAAuE;YACvE,qEAAqE;YACrE,sCAAsC;YACtC,MAAM,KAAK,GAAG,GAAiD,CAAC;YAChE,MAAM,KAAK,GAAG,KAAK,CAAC,KAEP,CAAC;YACd,MAAM,SAAS,GAAG,KAAK,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC;YAC5C,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,SAAS;gBACtB,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,GAAG,SAAS,KAAK,QAAQ,EAAE;oBAC7B,CAAC,CAAC,SAAS;gBACb,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,eAAe,CAAC,CAAC;YACvC,mEAAmE;YACnE,wCAAwC;YACxC,IAAI,CAAC,qBAAqB,UAAU,CAAC,IAAI,MAAM,MAAM,EAAE,EAAE;gBACvD,YAAY,EAAE,KAAK,CAAC,OAAO;gBAC3B,SAAS,EAAE,KAAK,EAAE,IAAI;gBACtB,SAAS;gBACT,UAAU,EAAE,KAAK,EAAE,KAAK;gBACxB,YAAY,EAAE,KAAK,EAAE,OAAO;aAC7B,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,mBAAmB,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;QACnE,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACpD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,IAAI,aAAa,KAAK,aAAa,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,UAAU,GAAG,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,WAAmB;IAC3C,iFAAiF;IACjF,mFAAmF;IACnF,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3E,IACE,KAAK,KAAK,WAAW;QACrB,KAAK,KAAK,uBAAuB;QACjC,KAAK,KAAK,6BAA6B;QACvC,KAAK,KAAK,6BAA6B,EACvC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IACE,KAAK,KAAK,eAAe;QACzB,KAAK,KAAK,iBAAiB;QAC3B,KAAK,KAAK,sBAAsB;QAChC,0EAA0E;QAC1E,KAAK,KAAK,4BAA4B;QACtC,KAAK,KAAK,4BAA4B;QACtC,KAAK,KAAK,+BAA+B,EACzC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QAC3B,2EAA2E;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,qBAAqB,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/F,oEAAoE;QACpE,+DAA+D;QAC/D,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,UAAkB,EAClB,UAA2B,EAAE;IAE7B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,sDAAsD,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC;IAEnD,6EAA6E;IAC7E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAE5D,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACjC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAE5C,cAAc;IACd,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAc,CAAC;YACrE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YACxC,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,GAAG,GAAG,YAAY,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7C,GAAG,CAAC,kBAAkB,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9D,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IAED,GAAG,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAEzE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,aAAa,GAAG,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC;IACzE,MAAM,SAAS,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,6BAA6B,WAAW,SAAS,GAAG,mDAAmD,CACxG,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC5D,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,kBAAkB,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,eAAe,kBAAkB,GAAG,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,qEAAqE;IACrE,uEAAuE;IACvE,yEAAyE;IACzE,uEAAuE;IACvE,0EAA0E;IAC1E,+CAA+C;IAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,UAAqD,CAAC;YAC1D,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;YACzC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,EAAE;gBAC/D,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC;YAEH,IAAI,MAAuC,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;YAC7D,CAAC;oBAAS,CAAC;gBACT,IAAI,UAAU;oBAAE,YAAY,CAAC,UAAU,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;gBAC3B,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,kCAAkC,qBAAqB,gBAAgB,GAAG,EAAE,CAC7E,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;YAC/B,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;gBACtB,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;oBAC/B,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBAChC,MAAM,IAAI,KAAK,CAAC,qBAAqB,kBAAkB,iBAAiB,CAAC,CAAC;gBAC5E,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,wEAAwE;QACxE,2EAA2E;QAC3E,uCAAuC;QACvC,IAAI,CAAC;YACH,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,oCAAoC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,GAAG,WAAW,QAAQ,OAAO,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;IAChE,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAChC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/C,UAAU,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAEpC,MAAM,IAAI,GAAc;QACtB,GAAG;QACH,WAAW;QACX,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;IAC1D,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE9B,GAAG,CAAC,eAAe,KAAK,YAAY,GAAG,EAAE,CAAC,CAAC;IAC3C,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO;IAE7B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,SAAS;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAc,CAAC;gBACrE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;gBACxC,IAAI,GAAG,GAAG,YAAY,EAAE,CAAC;oBACvB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;oBAClD,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC9D,IAAI,UAAU,CAAC,OAAO,CAAC;wBAAE,UAAU,CAAC,OAAO,CAAC,CAAC;oBAC7C,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACrB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;gBAChC,IAAI,CAAC;oBACH,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACrB,OAAO,EAAE,CAAC;gBACZ,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,6BAA8B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,GAAG,CAAC,8BAA8B,OAAO,gBAAgB,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}