@datamoc/mw_games 0.8.1 → 0.9.0-alpha

package/CHANGELOG.md

@@ -7,6 +7,62 @@ the public API may still change between minor versions.
 
 ## [Unreleased]
 
+## [0.9.0-alpha] - 2026-09-13
+
+### Changed
+
+- MWL authoring syntax is now JSON5 instead of the WML-inspired tag/`key=value`
+  form: every `.mwl` file is a top-level array of `{ tag, ...attributes, children }`
+  nodes, values are real JSON5 numbers, booleans and strings (stringified back to
+  the `Record<string, string>` the schema, compiler and runtime already see), and
+  translatable strings are marked `_("...")` via a preprocessor rewrite. The
+  `#define`/`#include`/`#ifdef` textual pass is unchanged. The `"""..."""` block
+  form (item 317) is superseded by JSON5 `\n` escapes and backslash line
+  continuations. Clean cutover: all fixtures, examples, tests and doc examples
+  are migrated, the old tag parser is deleted, and `json5` (pure JS, no native
+  build) is a runtime dependency.
+
+## [0.8.2] - 2026-09-13
+
+### Added
+
+- `tests/builtin-pipes.test.ts`: regression coverage confirming `TiledSprite`/`NinePatch`
+  resolve to Pixi's own registered `tilingSprite`/`nineSliceSprite` pipes, a guarantee previously
+  verified only by a downstream consumer's own uncommitted script (item 336).
+
+### Changed
+
+- `mwl/runtime.ts`'s `executeNode` (a 226-line `switch` over 28 command tags, its own case
+  bodies inline) is now a `commandHandlers` dispatch table plus one small, independently-named
+  private method per command. No public API or behaviour change: `API_REPORT.md`'s diff is
+  purely additive private-method stubs, and all 166 `mwl-*.test.ts` tests pass unmodified
+  (item 337).
+- `DEVELOPMENT.md` documents why `coverage`/`coverage:check` exclude `Game.ts`,
+  `ColorTransformBatcher.ts`, `Minimap.ts`, `three-d/Vox.ts`, `DialogueStage.ts`,
+  `EventDialogue.ts` and `two-d/ui/**` (Pixi rendering/layout, verified by the visual smokes
+  instead of a coverage percentage), and why `core` holds optional network-facing clients
+  alongside always-needed primitives (item 333, item 334).
+- `GameOptions.extensions`'s doc comment now names `TiledSprite`/`NinePatch` alongside
+  `TintedSprite` as self-registering their Pixi render pipe automatically, closing a
+  documentation gap that likely explains why a cautious consumer wasn't confident enough to rely
+  on it (item 336).
+
+### Fixed
+
+- `mwl`'s `validateWorld` rejects a `__proto__`/`constructor`/`prototype` key anywhere in a
+  decoded save (item 335): `MwlRuntime.restore` merges a decoded save into its own world with
+  `Object.assign`, which honours such a key as a prototype substitution rather than an ordinary
+  value. `core/Sanitize.ts` gains `assertNoForbiddenKeys`, the same rejection `validateSchema`
+  already applied to fixed-shape data, generalised to `mwl`'s dynamic, arbitrarily-nested world
+  shape.
+- `SaveSystem.load` returns `null` for a corrupted or malformed slot instead of throwing an
+  uncaught `SyntaxError`, the same outcome a missing slot already produced; `importSlot` throws a
+  labelled `SaveSystem.importSlot: payload is not valid save data` error instead of a bare parse
+  error (item 331).
+- `Container2D`/`Texture2D` in `two-d/render/Types2D.ts` each carried two adjacent JSDoc blocks,
+  so only the generic, less useful one reached generated documentation; merged into one comment
+  each (item 332).
+
 ## [0.8.1] - 2026-09-12
 
 ### Added

package/MWG - Best Practices.md

@@ -0,0 +1,97 @@
+# MWG: Best Practices
+
+Practical guidance for someone starting a real project with `mwg` today: how to work with the
+grain of the framework instead of against it. Pair this with
+[MWG: Deep Code and Architecture Review](MWG%20-%20Deep%20Code%20and%20Architecture%20Review.md)
+for the *why* behind each of these; this document is the *how*.
+
+## Start from a working example, not a blank page
+
+The shipped examples (colour-transform, interface, dialogue/stage, roguelike dungeon) are
+real, buildable, `file://`-verified projects, not snippets. Copy the one closest to your game
+and grow it, rather than assembling a project from the API reference alone. Decide early which
+of the two install paths in the getting-started guide you actually need (a bundler-based
+project with npm, or a plain `<script>` tag with no build step at all) and verify your own
+project reaches a working `file://` page under that path before you build much on top of it.
+
+## Reach for the typed facade first, the escape hatch second
+
+Ordinary sprites, shapes, text, and containers go through `Sprite2D`/`Shape2D`/`Text2D`/
+`TiledSprite`/`Gradient`. None of that requires your own code to name `pixi.js` anywhere. Only
+reach for `two-d/pixi-interop` when you need a specific Pixi capability the facade doesn't
+cover, and keep that usage confined to as few files as you can, the same way `mwg` itself
+confines all Pixi-internal knowledge to one file. Two concrete benefits, not just tidiness:
+your project stays portable if you ever need the Babylon path instead, and `pixi.js` is an
+optional peer dependency, so code that never touches the escape hatch never has to install it.
+
+## Keep game logic renderer-free where you can
+
+Model state and rules in plain data and `core`/`simulation`-level terms (stable entity ids via
+`EntityRegistry`, not live object references) rather than reaching into a sprite or a scene
+from inside game logic. Code written this way can be tested with Node's own test runner with
+no renderer, no browser, and no ticker in the loop at all, the same separation that lets `mwg`
+run the identical scene-lifecycle and save-system code under either a Pixi or a Babylon game.
+
+## Load once per scene, then stay synchronous
+
+Call `load(paths)` up front for a scene and treat everything after that as synchronous code.
+Scattering `await` through per-frame or per-action logic is a sign an asset load has drifted
+into the wrong place; move it back to scene setup, using the `optional`/`onMissing` path if a
+particular asset is allowed to be missing.
+
+## Trust your own data, validate everything else
+
+Use `SaveSystem.load()` for a save this same process previously wrote. For anything that
+crossed a device or a network boundary, a pasted save code, a cloud sync, a value a server
+handed back, use `importSlot`/`importExternal` instead, and validate the *shape* of what comes
+back, not just that it parsed as JSON. Apply the same split in your own persistence code even
+outside `SaveSystem`: "this process wrote it a moment ago" and "this arrived from somewhere
+else" are different trust levels, and worth two different code paths, not one path with an
+optimistic cast.
+
+## Test the way `mwg` tests itself
+
+Plain `.ts` sources under Node's built-in test runner, no framework, is a deliberate choice
+here: it keeps the dependency list short and the tests portable. A green test suite and a
+clean typecheck are necessary, not sufficient, verify anything visual (layout, a window's
+position, whether choice text is legible against its background) by building an example and
+actually looking at it. If you can't check a UI change visually yourself, say so plainly rather
+than calling it done on the strength of the typechecker alone.
+
+## Verify from `file://`, not only from a dev server
+
+The entire point of this framework is a game that opens by double-clicking a local file, no
+server. A feature that only works against a bundler's dev server has not been verified against
+the target it's actually meant to ship to. Build, then open the built page directly, before
+calling a feature finished.
+
+## Only pull in the renderer you actually use
+
+`three-d` is kept off the root barrel specifically so a 2D project never pays for Babylon; a
+Babylon project likewise never needs to pull in Pixi. Import `two-d` or `3d`, not both, unless
+your game genuinely mixes both kinds of scenes.
+
+## Keep your own vocabulary out of your own shared code
+
+`mwg` holds no rule, value, or vocabulary belonging to any single reference game, only the
+generic mechanic shape; your own game's specific numbers, names, and content stay in your own
+game layer, supplied to `mwg`'s generic primitives as data. If your project grows multiple
+internal systems, campaigns, or a modding surface, apply the same discipline one level up: keep
+the genuinely generic mechanics generic, and keep any one system's specific content as data
+that mechanic consumes, rather than baking it into the mechanic itself.
+
+## Don't build for the reuse you don't have yet
+
+Favour plain data and composition over an early abstraction layer, a manager class, an event
+bus, a plugin system, before you have a second real call site that actually needs it. `mwg`'s
+own modules lean this way on purpose (`StatBlock`'s fixed modifier order over a rule engine,
+`EntityTemplate`'s plain content rows over a generic component system) and it's a good default
+for your own game code too: an abstraction with exactly one caller costs a future reader a hop
+and buys nothing until a second caller actually shows up.
+
+## Verify an API claim before building on it
+
+`mwg` is pre-alpha and still adding surface between releases. Check REFERENCE.md (or the
+generated API docs) for the actual current name and signature of something before assuming it
+matches a similar-sounding API from a different framework you've used before, especially for
+anything not yet covered by the API-stability guarantee that starts at 1.0.

package/MWG - Deep Code and Architecture Review.md

@@ -0,0 +1,238 @@
+# MWG: Deep Code and Architecture Review
+
+This is an architecture deep-dive for developers building with `mwg`: not what exists
+(that's [REFERENCE.md](https://github.com/datamoc/mwg/blob/main/REFERENCE.md)'s job) or what
+it's for (that's `README.md`'s), but how the pieces fit together and why they're shaped the
+way they are. Read it once before you structure a non-trivial project, then use it as a map
+when you need to decide where new code of your own belongs.
+
+`mwg` is pre-alpha (`0.y.z`): the public API documented in REFERENCE.md and API_REPORT.md is
+meant to be stable from 1.0 on, and anything not yet there carries an `@experimental` tag.
+Nothing below hides that status behind confident prose; where a design choice is a deliberate
+trade-off rather than a finished guarantee, it's said so.
+
+## The constraint that shapes everything: `file://`
+
+A game built with `mwg` is meant to run by double-clicking a local HTML file. No server, no
+install step, nothing to download at runtime. That single requirement cascades into most of
+the framework's less obvious decisions:
+
+- `fetch()`, XHR, and `<script type="module">` are all blocked from `file://`, and Chrome
+  treats even a same-folder `<img>` as cross-origin for WebGL. So every asset a build touches
+  is compiled into a `data:` URI ahead of time, not fetched at runtime.
+- The standalone library build is a classic IIFE, not ES modules, so it can load from a plain
+  `<script>` tag with no bundler at all.
+- A build's last step rewrites the bundler's `<script type="module">` entry tag to a classic
+  deferred script and inlines the compiled asset data before it, in document order.
+
+If you only take one thing from this document: verify a change by opening the *built* page
+from `file://`, not just by trusting a dev server. A feature that only works under Vite's dev
+server is not finished.
+
+## Module map and dependency direction
+
+Every module is its own barrel (`import { X } from '@datamoc/mw_games/core'`, or the matching
+subpath), plus a root re-export. Two rendering worlds sit side by side over one renderer-free
+core, and nothing in that core knows either exists:
+
+```
+                     +------------------------------------------+
+                     |  core  (renderer-free, imports nothing)   |
+                     |  Scene lifecycle, SceneStack, Signal,     |
+                     |  Random, Input, SaveSystem, Session        |
+                     +------------------------------------------+
+                        ^                              ^
+                        |                              |
+        +---------------+----------------+  +----------+---------------+
+        |  two-d  (PixiJS)                |  |  three-d  (Babylon.js,   |
+        |  Game, Scene2D, Camera,          |  |  optional, off the root |
+        |  TileMap, Sprite2D/Shape2D/      |  |  barrel so a 2D game     |
+        |  Text2D facade, ui, stage        |  |  never pays for it)     |
+        +----------------------------------+  +--------------------------+
+
+  renderer-free alongside core: i18n, actors, world, battle, simulation,
+  roguelike, board, audio, rpg, ai, mwl, assets/paths
+```
+
+`core` importing no other module (and no renderer) is what lets the same scene-lifecycle and
+save-system code run under a Babylon game as under a Pixi one. This isn't a documentation
+claim taken on faith: `tests/renderer-isolation.test.ts` walks the real import graph in both
+directions (nothing under `two-d` reaches Babylon, nothing under `three-d` reaches Pixi, no
+example names `pixi.js`/`@babylonjs/*` directly) and fails the build if the boundary slips.
+`roguelike` adds only `rot-js`; `pixi.js`, `@babylonjs/core`/`@babylonjs/loaders`, and
+`@capacitor/core` are all optional peer dependencies rather than installed ones, so a project
+brings in exactly the renderer it draws with, no more.
+
+## Execution model
+
+`Game` (`two-d`) owns one Pixi `Application`, a `SceneStack<Scene2D>`, and the frame loop,
+which normally runs off Pixi's own ticker. `core.Scene` is lifecycle only
+(`create`/`update`/`resize`/`onSuspend`/`onResume`/`destroy`) and owns no display node at all;
+`two-d.Scene2D` adds exactly one field, a `stage` container, on top of it. `SceneStack` is
+generic over that lifecycle type alone, which is what lets it be reused unchanged on the
+Babylon side.
+
+Scene changes go through `switchScene`, which queues a request and drains it at the start of
+the *next* frame, so a frame never updates a scene that was just asked to leave. Only the top
+of the stack receives `update`, but every scene in the stack still renders, which is what
+makes a translucent pause menu over live gameplay work without special-casing it.
+
+`Game.step(dt)` drives exactly one frame synchronously, bypassing the ticker. Reach for it in
+headless contexts (tests) and when a backgrounded browser tab has throttled
+`requestAnimationFrame` down to a rate that makes a game look frozen for reasons that have
+nothing to do with your code.
+
+## Rendering model
+
+`Camera` never moves "the camera": it moves a `world` container under a fixed viewport,
+including for rotation, which turns the whole layer once about the view centre rather than
+transforming tiles individually. Grid maps render through a chunked `TileMap`, so off-screen
+chunks can be culled as a block instead of tile by tile.
+
+Per-sprite additive colour (a poison tint, a hit-flash) needs both a multiply *and* an add in
+the same pass, which Pixi's built-in `tint` (multiply only) can't express. `mwg` implements
+that as a custom batcher, `ColorTransformBatcher`, extending Pixi's own `Batcher` so the extra
+math rides in the same draw call rather than costing a separate filter pass per sprite. This
+is also the one place in the entire framework allowed to import Pixi's batcher or shader
+internals; nothing else does. You don't opt into any of this by hand: importing `TintedSprite`
+(directly, or via `TileMap`/`DialogueStage`/`AnimatedSprite`, all built on it) registers the
+colour-transform pipe at module load time, before your own code runs.
+
+## The PixiJS boundary
+
+The design intent (recorded as ADR-001, "a game consumes `mwg`, not PixiJS or Babylon.js
+directly, in ordinary use") is a genuine constraint, not a suggestion, and it's enforced the
+same way the module boundary is: by a test that scans the real API surface, not by convention.
+It has three tiers:
+
+1. **The typed facade** - `Container2D`/`Texture2D`/`Rect`/`TextureRegion`
+   (`two-d/render/Types2D.ts`) and `Node2D`/`Shape2D`/`Text2D`/`Sprite2D`/`TiledSprite`/
+   `Gradient` (`two-d/render/Shape2D.ts`). Ordinary sprites, shapes, text, and containers all
+   go through here, and none of it requires your code to name `pixi.js` anywhere, in a type
+   position or a value position.
+2. **One documented escape hatch** - `two-d/pixi-interop.ts`, published at
+   `@datamoc/mw_games/two-d/pixi-interop`, a small, explicit re-export of the handful of Pixi
+   symbols the facade doesn't (yet) cover. If you genuinely need a Pixi capability the facade
+   doesn't expose, this is where that dependency belongs, confined to as few files in your own
+   project as you can manage, the same discipline `mwg` holds `ColorTransformBatcher.ts` to
+   internally.
+3. **`pixi.js` itself is an optional peer dependency**, not a direct one. A project that never
+   touches the escape hatch never installs Pixi's actual package; only code that imports
+   `pixi-interop` does.
+
+Why go to this trouble: it's what makes the Babylon path (`three-d`) possible as more than a
+parallel rewrite, and it's what keeps a 2D-only project from paying for a 3D engine it never
+loads, or vice versa. Prefer the facade by default. Reach for the escape hatch deliberately,
+not reflexively, and keep that usage visible and narrow rather than scattered through your
+rendering code.
+
+## Simulation and time
+
+Two renderer-free authorities sit underneath both rendering paths:
+
+- **`roguelike.Scheduler`** is the sole authority on logical, turn-based time (ADR-003):
+  energy-cost ordering, fractional costs, a documented tie-break, `postpone` for delaying an
+  actor other than the current one, and a deterministic `toJSON`/`restore` snapshot.
+- **`simulation.SimulationRuntime`** is renderer-free and transactional (ADR-002): a command
+  produces its complete logical result, and charges the scheduler, synchronously, *before* any
+  presentation plays. `core.Presentation`'s `PresentationQueue` then lets rendering consume the
+  resulting events at its own pace, decoupled from when the logic actually happened. This is
+  proven, not just structured that way: running the same commands against three different
+  presentation-duration functions produces identical simulation state and events every time.
+
+A simulation's logical snapshot is deliberately a different thing from `core.SaveSystem`'s
+storage format (ADR-006): `SimulationSnapshot<State>` is plain JSON-safe data that `SaveSystem`
+stores as an opaque payload, never the reverse. Compose the two rather than reinventing either.
+
+## Entity identity and "something happened"
+
+Logical entities are referenced by a stable id, not held by object reference (ADR-004,
+`core.Entity`'s `EntityRegistry`). That id is what you pass into `Scheduler.toJSON`'s or
+`SimulationRuntime.snapshot`'s `actorId`, so identity composes cleanly with both authorities
+above without either needing to know about the other.
+
+Three distinct shapes exist for "something happened," on purpose, so one word doesn't have to
+mean three things depending on context (ADR-005):
+
+- **`GameEvent`** - an ordered *output* of a transition. Something a rule produced, never
+  something a global bus dispatches to drive other rules.
+- **`Hook`** (`HookRegistry`) - a synchronous, mid-calculation modification point.
+- **`Signal`** - a plain notification with no bearing on any rule at all.
+
+## Persistence
+
+`core.SaveSystem` gives named, versioned save slots over `localStorage`, with an in-memory
+fallback where storage isn't available, scoped deliberately to plain JSON-serialisable state
+rather than arbitrary object graphs. The API draws a real line between two kinds of input:
+`load()` trusts data this same process already wrote, while `importSlot`/`importExternal` are
+the path for anything that crossed a device or a network boundary, and validate size and
+content before accepting it. Follow that same split in your own save-adjacent code: trust what
+your own process just wrote, validate anything a player pastes in, syncs from elsewhere, or
+receives from a server, and don't assume "it's valid JSON" already means "it's valid data."
+
+`Session` reuses the same storage abstraction for exactly one counter, how many times a game
+has launched, so a native wrapper can decide when to ask for a rating. `mwg` counts; it never
+prompts on its own.
+
+## Assets
+
+`assets/paths.ts` resolves a path with no renderer in reach at all, which is what lets `two-d`
+and `three-d` share one compiled-asset map. `assets/loader.ts` is the half that actually needs
+Pixi. In development, paths are served normally; in a compiled build, resolution looks paths up
+in a global asset map that the build's own compile step populates. Call `load(paths)` once per
+scene; everything after that is meant to be synchronous, so don't scatter `await` through
+per-frame or per-action code. `load` also accepts an `optional` path list with a per-path
+`onMissing` callback, so one missing decal doesn't have to abort an otherwise-successful batch.
+
+## Framework scope discipline
+
+Two decisions worth understanding even though they don't change any API you call directly,
+because they set correct expectations for whether `mwg` will fit *your* game:
+
+- **No rule, value, or vocabulary specific to any one reference game lives in `mwg`** (ADR-007).
+  Every primitive is generic over a game-supplied type parameter; hunger values, weapon
+  formulas, faction rules, and the like stay in the game that needs them. If you come to `mwg`
+  from studying one of its reference games (Shattered Pixel Dungeon, ADOM, RPG Maker-style
+  projects, and others README.md names as capability targets), expect the mechanic's *shape*
+  to be there and the specific numbers not to be.
+- **`mwg` provides the mechanism for semantic messaging and localisation; your game supplies
+  the vocabulary** (ADR-008). `i18n.SemanticMessage`/`MessageChannel`/`MessageFormatter` build
+  on the existing catalog/plural/Fluent machinery; `mwg` holds no message type name, catalog
+  key, or translated string of its own anywhere in that path.
+
+In practice this means `mwg` will feel intentionally unopinionated about *what* your game says
+and *how much* damage a sword does, while still being opinionated about *how* time, identity,
+events, and persistence work underneath it.
+
+## Extension points
+
+`GameOptions.extensions` takes an array of registration functions, run once before Pixi's
+`app.init()` builds the renderer, for registering *your own* Pixi extension the same way `mwg`
+registers its colour-transform pipe internally. You won't need this for ordinary rendering
+work; it exists specifically for the case where your game needs its own custom Pixi-level
+behaviour alongside what `mwg` already provides.
+
+## Testing and verification philosophy
+
+`mwg`'s own test suite runs directly under Node's built-in test runner against `.ts` sources,
+no test framework, which is a stated feature, not an accident: the dependency list staying
+short is treated as part of the product. Worth adopting the same discipline in your own tests
+where it fits.
+
+Typechecking and unit tests verify correctness, not what a player actually sees. A window
+placed off-screen or choices rendered over text will not show up in `npm run check` or a green
+test suite; building an example and actually looking at it will. If you can't visually verify a
+UI change yourself, say so explicitly rather than reporting it done.
+
+## Status and where to go next
+
+- **REFERENCE.md** - the API index: every export, one line each, plus the generated
+  parameter-level documentation.
+- **The example games** (colour-transform, interface, dialogue/stage, roguelike dungeon) -
+  working, buildable, `file://`-verified starting points; closer to how to structure a real
+  project than any written description can be.
+- **`MWG: Best Practices.md`** - the companion to this document: concrete guidance for
+  structuring a new project well from day one, rather than how the framework itself is built.
+- **ROADMAP.md and ADR.md** (on the project's GitHub) - the full, numbered build history and
+  the reasoning behind the architectural decisions summarised above, for anyone who wants the
+  complete record rather than the digest.

package/README.md

@@ -402,9 +402,12 @@ The optional 3D group is now implemented without changing the existing 2D entry
 
 ## MWL
 
-MWL is the framework's declarative, WML-inspired authoring layer. It describes
-game data and commands while `mwg` remains responsible for execution, rendering,
-input, audio, and saves. MWL is a new language, not a WML compatibility layer.
+MWL is the framework's declarative, WML-inspired authoring layer. Content files
+are JSON5: a top-level array of `{ tag, ...attributes, children }` nodes, with
+real numbers and booleans for scalar values and `_("...")` marking translatable
+strings. It describes game data and commands while `mwg` remains responsible for
+execution, rendering, input, audio, and saves. MWL is a new language, not a WML
+compatibility layer.
 The Wesnoth port can nevertheless use its native `.cfg` files as build inputs:
 the port-owned WML front end parses them, the adapter converts the supported
 nodes to MWL, and the normal MWL compiler emits the runtime module.
@@ -461,7 +464,7 @@ reported as warnings. The output directory is safe to regenerate: its extracted
 CSS `url(data:...)` values and HTML `srcset` candidates are handled too, including
 their density descriptors.
 
-Translation messages are the values marked `_ "..."` in the source; the
+Translation messages are the values marked `_("...")` in the source; the
 extracted catalog matches `@datamoc/mw_games/i18n`. Hooks are referenced as
 `type:name`, declared in a manifest, and bundled with esbuild, which a game
 project installs itself (`npm install --save-dev esbuild`). The framework does

package/dist/core/Sanitize.d.ts

@@ -69,6 +69,14 @@ export type Schema = {
     items: Schema;
     maxLength?: number;
 };
+/**
+ * Recursively rejects `__proto__`/`constructor`/`prototype` as an own key anywhere in `value`,
+ * for data too dynamic for `validateSchema`'s fixed field list (a free-form variable bag, a
+ * dictionary keyed by content-chosen ids, both common in a save format). Reuses the same
+ * `FORBIDDEN_KEYS` set `validateSchema` enforces for fixed-shape objects; use this one instead
+ * when the shape itself isn't known ahead of time.
+ */
+export declare function assertNoForbiddenKeys(value: unknown, path?: string): void;
 /** throws with a path-qualified message at the first field that does not match `schema` */
 export declare function validateSchema(value: unknown, schema: Schema, path?: string): void;
 //# sourceMappingURL=Sanitize.d.ts.map

package/dist/core/Sanitize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Sanitize.d.ts","sourceRoot":"","sources":["../../src/core/Sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,WAAW,gBAAgB;IAChC,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,2GAA2G;AAC3G,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,OAAO,GAAE,gBAAqB,GAAG,IAAI,CAIzF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAU3D;AAED,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,MAAM,CAIxF;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,MAAM,GACf;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAI5E,2FAA2F;AAC3F,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,SAAM,GAAG,IAAI,CAsC/E"}
+{"version":3,"file":"Sanitize.d.ts","sourceRoot":"","sources":["../../src/core/Sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,WAAW,gBAAgB;IAChC,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,2GAA2G;AAC3G,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,OAAO,GAAE,gBAAqB,GAAG,IAAI,CAIzF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAU3D;AAED,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,MAAM,CAIxF;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,MAAM,GACf;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAI5E;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAM,GAAG,IAAI,CAWtE;AAED,2FAA2F;AAC3F,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,SAAM,GAAG,IAAI,CAsC/E"}

package/dist/core/Sanitize.js

@@ -56,6 +56,26 @@ export function sanitizeInboundText(text, options = {}) {
     return text;
 }
 const FORBIDDEN_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
+/**
+ * Recursively rejects `__proto__`/`constructor`/`prototype` as an own key anywhere in `value`,
+ * for data too dynamic for `validateSchema`'s fixed field list (a free-form variable bag, a
+ * dictionary keyed by content-chosen ids, both common in a save format). Reuses the same
+ * `FORBIDDEN_KEYS` set `validateSchema` enforces for fixed-shape objects; use this one instead
+ * when the shape itself isn't known ahead of time.
+ */
+export function assertNoForbiddenKeys(value, path = '$') {
+    if (Array.isArray(value)) {
+        value.forEach((item, index) => assertNoForbiddenKeys(item, `${path}[${index}]`));
+        return;
+    }
+    if (value !== null && typeof value === 'object') {
+        for (const key of Object.keys(value)) {
+            if (FORBIDDEN_KEYS.has(key))
+                throw new Error(`${path} contains a forbidden key "${key}"`);
+            assertNoForbiddenKeys(value[key], `${path}.${key}`);
+        }
+    }
+}
 /** throws with a path-qualified message at the first field that does not match `schema` */
 export function validateSchema(value, schema, path = '$') {
     if (value === undefined) {

package/dist/core/Sanitize.js.map

@@ -1 +1 @@
-{"version":3,"file":"Sanitize.js","sourceRoot":"","sources":["../../src/core/Sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAOH,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,2GAA2G;AAC3G,MAAM,UAAU,SAAS,CAAC,IAAyB,EAAE,OAAO,GAAqB,EAAE;IAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAC5F,IAAI,IAAI,GAAG,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,gBAAgB,IAAI,SAAS,CAAC,CAAC;AACzG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS,CAAC,aAAa;QAC5E,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACd,gDAAgD,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,EAAE,CACnG,CAAC;QACH,CAAC;IACF,CAAC;AACF,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,OAAO,GAAqB,EAAE;IAC/E,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzB,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACb,CAAC;AAiBD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAE1E,2FAA2F;AAC3F,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,MAAc,EAAE,IAAI,GAAG,GAAG;IACxE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO;QAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IACxC,CAAC;IAED,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,QAAQ;YACZ,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;YAC3E,OAAO;QACR,KAAK,QAAQ;YACZ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,eAAe,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACxG,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,eAAe,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACxG,OAAO;QACR,KAAK,SAAS;YACb,IAAI,OAAO,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;YAC7E,OAAO;QACR,KAAK,OAAO;YACX,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;YACvE,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;gBACvE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kCAAkC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;YACxF,OAAO;QACR,KAAK,QAAQ,EAAE,CAAC;YACf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBACtE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;YAC9C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,GAAG,GAAG,CAAC,CAAC;YAC3F,CAAC;YACD,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChE,cAAc,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,OAAO;QACR,CAAC;IACF,CAAC;AACF,CAAC"}
+{"version":3,"file":"Sanitize.js","sourceRoot":"","sources":["../../src/core/Sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAOH,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,2GAA2G;AAC3G,MAAM,UAAU,SAAS,CAAC,IAAyB,EAAE,OAAO,GAAqB,EAAE;IAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAC5F,IAAI,IAAI,GAAG,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,gBAAgB,IAAI,SAAS,CAAC,CAAC;AACzG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS,CAAC,aAAa;QAC5E,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACd,gDAAgD,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,EAAE,CACnG,CAAC;QACH,CAAC;IACF,CAAC;AACF,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,OAAO,GAAqB,EAAE;IAC/E,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzB,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACb,CAAC;AAiBD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAE1E;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,IAAI,GAAG,GAAG;IAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QACjF,OAAO;IACR,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,GAAG,GAAG,CAAC,CAAC;YAC1F,qBAAqB,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;QAClF,CAAC;IACF,CAAC;AACF,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,MAAc,EAAE,IAAI,GAAG,GAAG;IACxE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO;QAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IACxC,CAAC;IAED,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,QAAQ;YACZ,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;YAC3E,OAAO;QACR,KAAK,QAAQ;YACZ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,eAAe,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACxG,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,eAAe,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACxG,OAAO;QACR,KAAK,SAAS;YACb,IAAI,OAAO,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;YAC7E,OAAO;QACR,KAAK,OAAO;YACX,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;YACvE,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;gBACvE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kCAAkC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;YACxF,OAAO;QACR,KAAK,QAAQ,EAAE,CAAC;YACf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBACtE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;YAC9C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,GAAG,GAAG,CAAC,CAAC;YAC3F,CAAC;YACD,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChE,cAAc,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,OAAO;QACR,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/core/Save.d.ts

@@ -33,7 +33,14 @@ export declare class SaveSystem<T> {
     constructor(options: SaveSystemOptions);
     private key;
     save(slot: string, state: T, preview?: unknown): void;
-    /** reads a slot, migrating it up to the current version if it was saved at an older one */
+    /**
+     * Reads a slot, migrating it up to the current version if it was saved at an older one.
+     * Returns `null` for a corrupted or malformed slot the same way it already does for a
+     * missing one - a slot this `SaveSystem` wrote itself is trusted, but a truncated write
+     * (an interrupted browser storage flush, a quota eviction, a hand-edited value) is still
+     * possible, and a save-select screen should see "no usable save here", not an uncaught
+     * `SyntaxError`.
+     */
     load(slot: string): SaveData<T> | null;
     /**
      * Adopts a save this `SaveSystem` never wrote: `normalize` runs once on `externalBytes`,

package/dist/core/Save.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Save.d.ts","sourceRoot":"","sources":["../../src/core/Save.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,QAAQ;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAEhB,6FAA6F;IAC7F,OAAO,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ,CAAC,CAAC;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,CAAC,CAAC;CACT;AAED,iGAAiG;AACjG,MAAM,WAAW,WAAW;IAC3B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACjC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,IAAI,MAAM,EAAE,CAAC;CACjB;AAuBD,qGAAqG;AACrG,wBAAgB,cAAc,IAAI,WAAW,CAS5C;AAED,MAAM,WAAW,iBAAiB;IACjC,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAEhB,8FAA8F;IAC9F,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC;IACzD,OAAO,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,qBAAa,UAAU,CAAC,CAAC;IACxB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,OAAO,CAAc;IAE7B,YAAY,OAAO,EAAE,iBAAiB,EAKrC;IAED,OAAO,CAAC,GAAG;IAIX,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAGpD;IAED,2FAA2F;IAC3F,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAWrC;IAED;;;;;;;;;;;OAWG;IACH,cAAc,CACb,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,UAAU,EACzB,SAAS,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,EACzC,OAAO,CAAC,EAAE,OAAO,GACf,IAAI,CASN;IAED,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAEzB;IAED;;;;;;OAMG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI5D;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAWpE;IAED,0EAA0E;IAC1E,IAAI,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC,CAY9C;CACD"}
+{"version":3,"file":"Save.d.ts","sourceRoot":"","sources":["../../src/core/Save.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,QAAQ;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAEhB,6FAA6F;IAC7F,OAAO,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ,CAAC,CAAC;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,CAAC,CAAC;CACT;AAED,iGAAiG;AACjG,MAAM,WAAW,WAAW;IAC3B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACjC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,IAAI,MAAM,EAAE,CAAC;CACjB;AAuBD,qGAAqG;AACrG,wBAAgB,cAAc,IAAI,WAAW,CAS5C;AAED,MAAM,WAAW,iBAAiB;IACjC,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAEhB,8FAA8F;IAC9F,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC;IACzD,OAAO,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,qBAAa,UAAU,CAAC,CAAC;IACxB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,OAAO,CAAc;IAE7B,YAAY,OAAO,EAAE,iBAAiB,EAKrC;IAED,OAAO,CAAC,GAAG;IAIX,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAGpD;IAED;;;;;;;OAOG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAcrC;IAED;;;;;;;;;;;OAWG;IACH,cAAc,CACb,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,UAAU,EACzB,SAAS,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,EACzC,OAAO,CAAC,EAAE,OAAO,GACf,IAAI,CASN;IAED,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAEzB;IAED;;;;;;OAMG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI5D;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAiBpE;IAED,0EAA0E;IAC1E,IAAI,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC,CAY9C;CACD"}

package/dist/core/Save.js

@@ -63,17 +63,29 @@ export class SaveSystem {
         const data = { meta: { version: this.version, savedAt: Date.now(), preview }, state };
         this.storage.write(this.key(slot), JSON.stringify(data));
     }
-    /** reads a slot, migrating it up to the current version if it was saved at an older one */
+    /**
+     * Reads a slot, migrating it up to the current version if it was saved at an older one.
+     * Returns `null` for a corrupted or malformed slot the same way it already does for a
+     * missing one - a slot this `SaveSystem` wrote itself is trusted, but a truncated write
+     * (an interrupted browser storage flush, a quota eviction, a hand-edited value) is still
+     * possible, and a save-select screen should see "no usable save here", not an uncaught
+     * `SyntaxError`.
+     */
     load(slot) {
         const raw = this.storage.read(this.key(slot));
         if (!raw)
             return null;
-        const data = JSON.parse(raw);
-        let state = data.state;
-        for (let v = data.meta.version; v < this.version; v++) {
-            state = (this.migrations[v] ?? ((s) => s))(state);
+        try {
+            const data = JSON.parse(raw);
+            let state = data.state;
+            for (let v = data.meta.version; v < this.version; v++) {
+                state = (this.migrations[v] ?? ((s) => s))(state);
+            }
+            return { meta: { ...data.meta, version: this.version }, state: state };
+        }
+        catch {
+            return null;
         }
-        return { meta: { ...data.meta, version: this.version }, state: state };
     }
     /**
      * Adopts a save this `SaveSystem` never wrote: `normalize` runs once on `externalBytes`,
@@ -124,7 +136,14 @@ export class SaveSystem {
     importSlot(slot, payload, scrambleKey) {
         checkSize(payload);
         const raw = scrambleKey ? unscramble(payload, scrambleKey) : payload;
-        const data = JSON.parse(sanitizeInboundText(raw));
+        const sanitized = sanitizeInboundText(raw);
+        let data;
+        try {
+            data = JSON.parse(sanitized);
+        }
+        catch {
+            throw new Error('SaveSystem.importSlot: payload is not valid save data (not parseable JSON)');
+        }
         let state = data.state;
         for (let v = data.meta.version; v < this.version; v++) {
             state = (this.migrations[v] ?? ((s) => s))(state);

package/dist/core/Save.js.map

@@ -1 +1 @@
-{"version":3,"file":"Save.js","sourceRoot":"","sources":["../../src/core/Save.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAuB/D,uFAAuF;AACvF,MAAM,aAAa;IAAnB;QACS,SAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAiB1C,CAAC;IAfA,IAAI,CAAC,GAAW;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,KAAa;QAC/B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,GAAW;QACjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,IAAI;QACH,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;CACD;AAED,qGAAqG;AACrG,MAAM,UAAU,cAAc;IAC7B,IAAI,OAAO,YAAY,KAAK,WAAW;QAAE,OAAO,IAAI,aAAa,EAAE,CAAC;IAEpE,OAAO;QACN,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC;QACxC,KAAK,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC;QACvD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;QAC7C,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;KACrC,CAAC;AACH,CAAC;AAYD,MAAM,OAAO,UAAU;IAMtB,YAAY,OAA0B;QACrC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACpD,CAAC;IAEO,GAAG,CAAC,IAAY;QACvB,OAAO,YAAY,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC,IAAY,EAAE,KAAQ,EAAE,OAAiB;QAC7C,MAAM,IAAI,GAAgB,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC;QACnG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,2FAA2F;IAC3F,IAAI,CAAC,IAAY;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;QAC5C,IAAI,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC;QAChC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;YACvD,KAAK,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAU,EAAE,CAAC;IAC7E,CAAC;IAED;;;;;;;;;;;OAWG;IACH,cAAc,CACb,IAAY,EACZ,aAAyB,EACzB,SAAyC,EACzC,OAAiB;QAEjB,SAAS,CAAC,aAAa,CAAC,CAAC;QACzB,IAAI,KAAK,GAAY,SAAS,CAAC,aAAa,CAAC,CAAC;QAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,KAAK,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,IAAI,GAAgB,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAU,EAAE,CAAC;QAC/G,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,CAAC,IAAY;QAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CAAC,IAAY,EAAE,WAAoB;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACvD,CAAC;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,WAAoB;QAC7D,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAsB,CAAC;QACvE,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACvB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;YACvD,KAAK,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,UAAU,GAAgB,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAU,EAAE,CAAC;QACrG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,0EAA0E;IAC1E,IAAI;QACH,MAAM,MAAM,GAAG,YAAY,IAAI,CAAC,SAAS,GAAG,CAAC;QAC7C,MAAM,GAAG,GAA4C,EAAE,CAAC;QAExD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG;gBAAE,SAAS;YAEnB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;CACD"}
+{"version":3,"file":"Save.js","sourceRoot":"","sources":["../../src/core/Save.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAuB/D,uFAAuF;AACvF,MAAM,aAAa;IAAnB;QACS,SAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAiB1C,CAAC;IAfA,IAAI,CAAC,GAAW;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,KAAa;QAC/B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,GAAW;QACjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,IAAI;QACH,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;CACD;AAED,qGAAqG;AACrG,MAAM,UAAU,cAAc;IAC7B,IAAI,OAAO,YAAY,KAAK,WAAW;QAAE,OAAO,IAAI,aAAa,EAAE,CAAC;IAEpE,OAAO;QACN,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC;QACxC,KAAK,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC;QACvD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;QAC7C,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;KACrC,CAAC;AACH,CAAC;AAYD,MAAM,OAAO,UAAU;IAMtB,YAAY,OAA0B;QACrC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACpD,CAAC;IAEO,GAAG,CAAC,IAAY;QACvB,OAAO,YAAY,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC,IAAY,EAAE,KAAQ,EAAE,OAAiB;QAC7C,MAAM,IAAI,GAAgB,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC;QACnG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;;OAOG;IACH,IAAI,CAAC,IAAY;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;YAC5C,IAAI,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC;YAChC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvD,KAAK,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAU,EAAE,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IAED;;;;;;;;;;;OAWG;IACH,cAAc,CACb,IAAY,EACZ,aAAyB,EACzB,SAAyC,EACzC,OAAiB;QAEjB,SAAS,CAAC,aAAa,CAAC,CAAC;QACzB,IAAI,KAAK,GAAY,SAAS,CAAC,aAAa,CAAC,CAAC;QAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,KAAK,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,IAAI,GAAgB,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAU,EAAE,CAAC;QAC/G,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,CAAC,IAAY;QAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CAAC,IAAY,EAAE,WAAoB;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACvD,CAAC;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,WAAoB;QAC7D,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACrE,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,IAAuB,CAAC;QAC5B,IAAI,CAAC;YACJ,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAsB,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACvB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;YACvD,KAAK,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,UAAU,GAAgB,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAU,EAAE,CAAC;QACrG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,0EAA0E;IAC1E,IAAI;QACH,MAAM,MAAM,GAAG,YAAY,IAAI,CAAC,SAAS,GAAG,CAAC;QAC7C,MAAM,GAAG,GAA4C,EAAE,CAAC;QAExD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG;gBAAE,SAAS;YAEnB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;CACD"}