@demiurgejs/core 0.2.0-beta.4 → 0.2.0-beta.6

package/dist/chunks/streaming-BlKlC3nw.js

@@ -0,0 +1,427 @@
+import { Readable as C, Transform as R } from "node:stream";
+import { pipeline as P } from "node:stream/promises";
+import { isIP as L } from "node:net";
+import { s as H, a as B, c as I, b as U } from "./index-LYve1rQp.js";
+import { renderToPipeableStream as k } from "react-dom/server";
+import { c as M } from "./document-shell-C0aPrkhd.js";
+const m = {
+  for: "x-forwarded-for",
+  host: "x-forwarded-host",
+  protocol: "x-forwarded-proto"
+}, N = !1, O = /* @__PURE__ */ new Set(["CONNECT", "TRACE", "TRACK"]);
+class $ extends Error {
+  method;
+  constructor(t) {
+    super(`HTTP method "${t}" is not supported.`), this.method = t, this.name = "UnsupportedMethodError";
+  }
+}
+class w extends Error {
+  host;
+  constructor(t) {
+    super(`HTTP host "${t}" is not allowed.`), this.host = t, this.name = "UntrustedHostError";
+  }
+}
+class y extends Error {
+  method;
+  constructor(t) {
+    super(
+      `The request body for the ${t} request was already read. A host such as Vercel Functions or Express body-parser reads the body before the adapter runs. Supply the recovered bytes with the toWebRequest body option.`
+    ), this.method = t, this.name = "ConsumedRequestBodyError";
+  }
+}
+function V(e) {
+  if (e.allowedHosts.length === 0)
+    throw new Error("Demiurge Node allowedHosts must contain at least one host.");
+  for (const n of e.allowedHosts)
+    if (!b(n))
+      throw new Error(`Demiurge Node allowed host "${n}" is invalid.`);
+  const t = e.trustProxy ?? N;
+  if (t !== !1) {
+    if ("hops" in t) {
+      if (!Number.isSafeInteger(t.hops) || t.hops < 0)
+        throw new Error(
+          "Demiurge Node trustProxy hop count must be a non-negative integer."
+        );
+      return;
+    }
+    for (const n of t.ranges) {
+      const o = n.split("/")[0];
+      v(o, n);
+    }
+  }
+}
+function de(e, t) {
+  V(t);
+  const n = e.method ?? "GET";
+  if (O.has(n.toUpperCase()))
+    throw new $(n);
+  const o = g(e.socket?.remoteAddress), r = Z(
+    o,
+    e.headers[m.for],
+    t.trustProxy ?? N
+  ), i = S(
+    e.headers[m.protocol],
+    r.forwardedDepth
+  ), f = t.scheme ?? Q(e, i), a = S(
+    e.headers[m.host],
+    r.forwardedDepth
+  ) ?? e.headers.host, c = X(a, t.allowedHosts), u = `${f}://${c}`, h = new URL(e.url ?? "/", u), l = te(e.headers), d = {
+    headers: l,
+    method: n,
+    signal: t.signal
+  };
+  if (n !== "GET" && n !== "HEAD") {
+    const s = j(e, t.body);
+    s === null ? (d.body = C.toWeb(e), d.duplex = "half") : (d.body = s.body, d.duplex = "half", s.length !== null ? (l.set("content-length", String(s.length)), l.delete("transfer-encoding")) : (l.delete("content-length"), l.delete("transfer-encoding")), s.contentType !== void 0 && (s.contentType === null ? l.delete("content-type") : l.set("content-type", s.contentType)));
+  }
+  const p = new Request(h, d);
+  return H(p, {
+    clientIp: W(t.clientIp, r.clientIp)
+  }), p;
+}
+function W(e, t) {
+  if (e === void 0)
+    return t;
+  if (L(e) === 0)
+    throw new Error(`Demiurge Node clientIp "${e}" is invalid.`);
+  return g(e);
+}
+function j(e, t) {
+  if (t !== void 0)
+    return {
+      body: t,
+      contentType: K(t),
+      length: J(t)
+    };
+  const n = e.body;
+  if (n != null)
+    return F(
+      n,
+      e.headers["content-type"],
+      e.method ?? ""
+    );
+  if (Number(e.headers["content-length"]) === 0)
+    return { body: null, length: 0 };
+  if (e.readableDidRead || _(e))
+    throw new y(e.method ?? "");
+  return e.readableEnded ? { body: null, length: 0 } : null;
+}
+function _(e) {
+  return !e.complete || e.readableLength > 0 || e.readableEnded ? !1 : Number(e.headers["content-length"]) > 0 || !!e.headers["transfer-encoding"];
+}
+function F(e, t, n) {
+  if (typeof e == "string")
+    return { body: e, length: Buffer.byteLength(e) };
+  if (ArrayBuffer.isView(e)) {
+    const r = Uint8Array.from(
+      new Uint8Array(e.buffer, e.byteOffset, e.byteLength)
+    );
+    return { body: r, length: r.byteLength };
+  }
+  if (e instanceof ArrayBuffer)
+    return { body: e, length: e.byteLength };
+  const o = Y(t);
+  if (o === "application/json") {
+    const r = JSON.stringify(e);
+    if (r === void 0)
+      throw new y(n);
+    return { body: r, contentType: void 0, length: Buffer.byteLength(r) };
+  }
+  if (o === "application/x-www-form-urlencoded" && G(e)) {
+    const r = z(e).toString();
+    return { body: r, contentType: void 0, length: Buffer.byteLength(r) };
+  }
+  throw new y(n);
+}
+function G(e) {
+  if (typeof e != "object" || e === null)
+    return !1;
+  const t = Object.getPrototypeOf(e);
+  return t === Object.prototype || t === null;
+}
+function z(e) {
+  const t = new URLSearchParams();
+  for (const [n, o] of Object.entries(e)) {
+    if (Array.isArray(o)) {
+      for (const r of o)
+        t.append(n, String(r));
+      continue;
+    }
+    t.append(n, String(o));
+  }
+  return t;
+}
+function J(e) {
+  return e === null ? 0 : typeof e == "string" ? Buffer.byteLength(e) : ArrayBuffer.isView(e) || e instanceof ArrayBuffer ? e.byteLength : e instanceof Blob ? e.size : e instanceof URLSearchParams ? Buffer.byteLength(e.toString()) : null;
+}
+function K(e) {
+  if (e === null || e instanceof FormData)
+    return null;
+  if (e instanceof URLSearchParams)
+    return "application/x-www-form-urlencoded;charset=UTF-8";
+  if (e instanceof Blob)
+    return e.type || null;
+}
+function Y(e) {
+  return e?.split(";")[0].trim().toLowerCase();
+}
+function Q(e, t) {
+  if (t) {
+    const n = t.toLowerCase();
+    if (n !== "http" && n !== "https")
+      throw new Error(`Unsupported forwarded protocol "${t}".`);
+    return n;
+  }
+  return e.socket?.encrypted ? "https" : "http";
+}
+function X(e, t) {
+  if (t.length === 0)
+    throw new Error("Demiurge Node allowedHosts must contain at least one host.");
+  if (!e)
+    throw new w("");
+  const n = b(e);
+  if (!n)
+    throw new w(e);
+  if (!t.some((r) => {
+    const i = b(r);
+    if (!i)
+      throw new Error(`Demiurge Node allowed host "${r}" is invalid.`);
+    return i.port ? i.host === n.host : i.hostname === n.hostname;
+  }))
+    throw new w(e);
+  return n.host;
+}
+function b(e) {
+  if (e.trim() !== e || e.includes("@"))
+    return null;
+  try {
+    const t = new URL(`http://${e}`);
+    return !t.hostname || t.pathname !== "/" || t.search || t.hash || t.host.toLowerCase() !== e.toLowerCase() ? null : t;
+  } catch {
+    return null;
+  }
+}
+function Z(e, t, n) {
+  const o = A(t), r = [...o, e];
+  if (n === !1)
+    return { clientIp: e, forwardedDepth: 0 };
+  if ("hops" in n) {
+    if (!Number.isSafeInteger(n.hops) || n.hops < 0)
+      throw new Error(
+        "Demiurge Node trustProxy hop count must be a non-negative integer."
+      );
+    const a = Math.min(n.hops, o.length);
+    return {
+      clientIp: r[r.length - 1 - a],
+      forwardedDepth: n.hops
+    };
+  }
+  let i = r.length - 1, f = 0;
+  for (; i > 0 && x(r[i], n.ranges); )
+    i -= 1, f += 1;
+  return {
+    clientIp: r[i],
+    forwardedDepth: f || (x(e, n.ranges) ? 1 : 0)
+  };
+}
+function S(e, t) {
+  if (t === 0)
+    return;
+  const n = A(e);
+  if (n.length !== 0)
+    return n[Math.max(0, n.length - t)];
+}
+function A(e) {
+  return (Array.isArray(e) ? e : [e]).flatMap((t) => t?.split(",") ?? []).map((t) => t.trim()).filter(Boolean);
+}
+function x(e, t) {
+  return t.some((n) => v(e, n));
+}
+function v(e, t) {
+  const [n, o] = t.split("/"), r = T(g(e)), i = T(g(n));
+  if (!r || !i || r.length !== i.length) {
+    if (!i)
+      throw new Error(`Demiurge Node trustProxy range "${t}" is invalid.`);
+    return !1;
+  }
+  const f = r.length * 8, a = o === void 0 ? f : Number(o);
+  if (!Number.isInteger(a) || a < 0 || a > f)
+    throw new Error(`Demiurge Node trustProxy range "${t}" is invalid.`);
+  for (let c = 0; c < a; c += 1) {
+    const u = 1 << 7 - c % 8;
+    if ((r[Math.floor(c / 8)] & u) !== (i[Math.floor(c / 8)] & u))
+      return !1;
+  }
+  return !0;
+}
+function g(e) {
+  return e ? e.startsWith("::ffff:") ? e.slice(7) : e : "unknown";
+}
+function T(e) {
+  const t = L(e);
+  if (t === 4)
+    return e.split(".").map(Number);
+  if (t !== 6)
+    return null;
+  const [n = "", o = ""] = e.split("::"), r = n ? n.split(":") : [], i = o ? o.split(":") : [], f = 8 - r.length - i.length;
+  return [
+    ...r,
+    ...Array.from({ length: f }, () => "0"),
+    ...i
+  ].flatMap((c) => {
+    const u = Number.parseInt(c, 16);
+    return [u >> 8, u & 255];
+  });
+}
+function he(e) {
+  e.statusCode = 501, e.setHeader("content-type", "text/plain; charset=utf-8"), e.end("Not Implemented");
+}
+async function pe(e, t) {
+  const n = ne(t.headers);
+  if (t.headers.forEach((o, r) => {
+    r !== "set-cookie" && e.setHeader(r, o);
+  }), n.length > 0 && e.setHeader("set-cookie", n), e.statusCode = t.status, t.statusText && (e.statusMessage = t.statusText), !t.body) {
+    e.end();
+    return;
+  }
+  try {
+    await P(
+      C.fromWeb(
+        t.body
+      ),
+      e
+    );
+  } catch (o) {
+    if (!ee(o))
+      throw o;
+  }
+}
+const q = /* @__PURE__ */ new Set([
+  "ECONNRESET",
+  "EPIPE",
+  "ERR_STREAM_DESTROYED",
+  "ERR_STREAM_PREMATURE_CLOSE"
+]);
+function ee(e) {
+  return e instanceof Error && "code" in e && typeof e.code == "string" && q.has(e.code);
+}
+function te(e) {
+  const t = new Headers();
+  for (const [n, o] of Object.entries(e)) {
+    if (Array.isArray(o)) {
+      for (const r of o)
+        t.append(n, r);
+      continue;
+    }
+    o && t.set(n, o);
+  }
+  return t;
+}
+function ne(e) {
+  const t = e.getSetCookie;
+  if (t)
+    return t.call(e);
+  const n = e.get("set-cookie");
+  return n ? re(n) : [];
+}
+function re(e) {
+  return e.split(/,\s*(?=[^;,=\s]+\s*=)/);
+}
+function ge(e, t = {}) {
+  return e.render.mode === "streaming" ? oe(e, t) : B(e, t);
+}
+async function oe(e, t = {}) {
+  if (t.signal?.aborted)
+    throw t.signal.reason;
+  const n = I(e, t), o = U(e, n);
+  return await new Promise((r, i) => {
+    let f = !1, a = !1, c = !1, u = "", h;
+    const l = new R({
+      destroy(s, E) {
+        f || (a = !0), E(s);
+      },
+      flush(s) {
+        s(null, u);
+      },
+      transform(s, E, D) {
+        D(null, s);
+      }
+    }), d = () => {
+      a = !0, h?.abort(t.signal?.reason), l.destroy();
+    }, p = () => t.signal?.removeEventListener("abort", d);
+    l.once("finish", () => {
+      f = !0;
+    }), l.once("close", () => {
+      p(), f || (a = !0, h?.abort(new Error("Demiurge streaming response was cancelled.")));
+    }), t.signal?.addEventListener("abort", d, { once: !0 }), h = k(o, {
+      nonce: t.nonce,
+      onError(s) {
+        c && !a && t.onStreamError?.(s);
+      },
+      onShellError(s) {
+        p(), i(s);
+      },
+      onShellReady() {
+        (async () => {
+          try {
+            const s = await M(e, {
+              ...t,
+              scripts: n.scripts()
+            });
+            u = s.suffix, n.flushHead(), l.push(s.prefix), c = !0, h?.pipe(l), r(
+              new Response(ie(l), {
+                headers: { "content-type": "text/html; charset=utf-8" }
+              })
+            );
+          } catch (s) {
+            p(), h?.abort(s), l.destroy(), i(s);
+          }
+        })();
+      }
+    });
+  });
+}
+function ie(e) {
+  let t = !1, n = () => {
+  };
+  return new ReadableStream({
+    cancel() {
+      t = !0, n(), e.pause(), e.destroy();
+    },
+    pull() {
+      e.resume();
+    },
+    start(o) {
+      e.on("data", r), e.once("end", i), e.once("error", f), e.once("close", a);
+      function r(u) {
+        t || (o.enqueue(Uint8Array.from(u)), (o.desiredSize ?? 1) <= 0 && e.pause());
+      }
+      function i() {
+        t || (t = !0, c(), o.close());
+      }
+      function f(u) {
+        t || (t = !0, c(), o.error(u));
+      }
+      function a() {
+        t || (t = !0, c(), o.close());
+      }
+      function c() {
+        e.off("data", r), e.off("end", i), e.off("error", f), e.off("close", a);
+      }
+      n = c;
+    }
+  });
+}
+export {
+  y as C,
+  $ as U,
+  w as a,
+  pe as b,
+  oe as c,
+  te as d,
+  ge as r,
+  de as t,
+  V as v,
+  he as w
+};
+//# sourceMappingURL=streaming-BlKlC3nw.js.map

package/dist/chunks/streaming-BlKlC3nw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming-BlKlC3nw.js","sources":["../../src/node/http.ts","../../src/node/streaming.ts"],"sourcesContent":["import { Readable } from \"node:stream\";\nimport { pipeline } from \"node:stream/promises\";\nimport { isIP } from \"node:net\";\nimport type {\n  IncomingHttpHeaders,\n  IncomingMessage,\n  ServerResponse,\n} from \"node:http\";\nimport { setRequestConnectionMetadata } from \"../server/request-metadata\";\n\nexport type HttpScheme = \"http\" | \"https\";\n\nexport type NodeOriginPolicy = {\n  allowedHosts: readonly string[];\n  trustProxy?: TrustProxy;\n};\n\nexport type ToWebRequestOptions = NodeOriginPolicy & {\n  // A host that reads the request body before the adapter runs can supply the\n  // bytes it recovered. The adapter then uses them instead of the stream.\n  body?: BodyInit | null;\n  // A managed host can provide a client address from a provider-owned header\n  // without trusting the forwarded host or the full proxy chain.\n  clientIp?: string;\n  // A managed host can provide its protocol without trusting forwarded host\n  // or address headers from the same proxy hop.\n  scheme?: HttpScheme;\n  signal?: AbortSignal;\n};\n\nexport type TrustProxy =\n  | false\n  | { hops: number }\n  | { ranges: readonly string[] };\n\nconst forwardedHeaders = {\n  for: \"x-forwarded-for\",\n  host: \"x-forwarded-host\",\n  protocol: \"x-forwarded-proto\",\n} as const satisfies Record<\"for\" | \"host\" | \"protocol\", string>;\nconst defaultTrustProxy = false satisfies TrustProxy;\n\n// The Fetch specification prohibits these methods in the `Request` constructor.\n// `new Request(...)` throws for them. Without this guard, an unauthenticated\n// client can make a generic 500 response and add stack traces to the server log.\nconst forbiddenMethods = new Set([\"CONNECT\", \"TRACE\", \"TRACK\"]);\n\nexport class UnsupportedMethodError extends Error {\n  method: string;\n\n  constructor(method: string) {\n    super(`HTTP method \"${method}\" is not supported.`);\n    this.method = method;\n    this.name = \"UnsupportedMethodError\";\n  }\n}\n\nexport class UntrustedHostError extends Error {\n  host: string;\n\n  constructor(host: string) {\n    super(`HTTP host \"${host}\" is not allowed.`);\n    this.host = host;\n    this.name = \"UntrustedHostError\";\n  }\n}\n\nexport class ConsumedRequestBodyError extends Error {\n  method: string;\n\n  constructor(method: string) {\n    super(\n      `The request body for the ${method} request was already read. ` +\n        \"A host such as Vercel Functions or Express body-parser reads the \" +\n        \"body before the adapter runs. Supply the recovered bytes with the \" +\n        \"toWebRequest body option.\",\n    );\n    this.method = method;\n    this.name = \"ConsumedRequestBodyError\";\n  }\n}\n\nexport function validateNodeOriginPolicy(policy: NodeOriginPolicy) {\n  if (policy.allowedHosts.length === 0) {\n    throw new Error(\"Demiurge Node allowedHosts must contain at least one host.\");\n  }\n\n  for (const host of policy.allowedHosts) {\n    if (!parseAuthority(host)) {\n      throw new Error(`Demiurge Node allowed host \"${host}\" is invalid.`);\n    }\n  }\n\n  const trustProxy = policy.trustProxy ?? defaultTrustProxy;\n\n  if (trustProxy === false) {\n    return;\n  }\n\n  if (\"hops\" in trustProxy) {\n    if (!Number.isSafeInteger(trustProxy.hops) || trustProxy.hops < 0) {\n      throw new Error(\n        \"Demiurge Node trustProxy hop count must be a non-negative integer.\",\n      );\n    }\n\n    return;\n  }\n\n  for (const range of trustProxy.ranges) {\n    const network = range.split(\"/\")[0];\n    ipMatchesRange(network, range);\n  }\n}\n\nexport function toWebRequest(\n  request: IncomingMessage,\n  options: ToWebRequestOptions,\n) {\n  validateNodeOriginPolicy(options);\n  const method = request.method ?? \"GET\";\n\n  if (forbiddenMethods.has(method.toUpperCase())) {\n    throw new UnsupportedMethodError(method);\n  }\n\n  const peerAddress = normalizeIpAddress(request.socket?.remoteAddress);\n  const proxy = resolveProxyChain(\n    peerAddress,\n    request.headers[forwardedHeaders.for],\n    options.trustProxy ?? defaultTrustProxy,\n  );\n  const forwardedProtocol = selectForwardedValue(\n    request.headers[forwardedHeaders.protocol],\n    proxy.forwardedDepth,\n  );\n  const protocol = options.scheme ?? resolveProtocol(request, forwardedProtocol);\n  const host = selectForwardedValue(\n    request.headers[forwardedHeaders.host],\n    proxy.forwardedDepth,\n  ) ?? request.headers.host;\n  const authority = validateAllowedHost(host, options.allowedHosts);\n  const origin = `${protocol}://${authority}`;\n  const url = new URL(request.url ?? \"/\", origin);\n  const headers = toHeaders(request.headers);\n  const init: RequestInit & { duplex?: \"half\" } = {\n    headers,\n    method,\n    signal: options.signal,\n  };\n\n  if (method !== \"GET\" && method !== \"HEAD\") {\n    const recovered = resolveRecoveredBody(request, options.body);\n\n    if (recovered === null) {\n      // TYPE-EVIDENCE: Readable.toWeb returns a web stream that matches the DOM ReadableStream body type.\n      init.body = Readable.toWeb(request) as ReadableStream;\n      init.duplex = \"half\";\n    } else {\n      init.body = recovered.body;\n      init.duplex = \"half\";\n\n      if (recovered.length !== null) {\n        // The host reports the length of the original bytes. Recovered bytes\n        // can have a different length, so the header must describe what this\n        // request carries.\n        headers.set(\"content-length\", String(recovered.length));\n        headers.delete(\"transfer-encoding\");\n      } else {\n        // The supplied body can have a different size from the incoming body.\n        // Remove framing headers when the adapter cannot determine its size.\n        headers.delete(\"content-length\");\n        headers.delete(\"transfer-encoding\");\n      }\n\n      if (recovered.contentType !== undefined) {\n        if (recovered.contentType === null) {\n          headers.delete(\"content-type\");\n        } else {\n          headers.set(\"content-type\", recovered.contentType);\n        }\n      }\n    }\n  }\n\n  const webRequest = new Request(url, init);\n  setRequestConnectionMetadata(webRequest, {\n    clientIp: resolveClientIp(options.clientIp, proxy.clientIp),\n  });\n\n  return webRequest;\n}\n\nfunction resolveClientIp(configured: string | undefined, fallback: string) {\n  if (configured === undefined) {\n    return fallback;\n  }\n\n  if (isIP(configured) === 0) {\n    throw new Error(`Demiurge Node clientIp \"${configured}\" is invalid.`);\n  }\n\n  return normalizeIpAddress(configured)!;\n}\n\n// A host that reads the request body before the adapter runs leaves an\n// IncomingMessage that gives no data and never ends. `Readable.toWeb` on that\n// stream makes a request body that waits forever, and every unsafe request\n// stops with no error. The adapter must use the bytes the host kept instead.\n// A `null` result means the adapter still owns the stream.\nfunction resolveRecoveredBody(\n  request: IncomingMessage,\n  suppliedBody: BodyInit | null | undefined,\n) {\n  if (suppliedBody !== undefined) {\n    return {\n      body: suppliedBody,\n      contentType: suppliedBodyContentType(suppliedBody),\n      length: knownBodyLength(suppliedBody),\n    };\n  }\n\n  // TYPE-EVIDENCE: a host such as Vercel Functions or Express body-parser adds the parsed body to the request. The cast reads that optional property.\n  const parsed = (request as IncomingMessage & { body?: unknown }).body;\n\n  if (parsed !== undefined && parsed !== null) {\n    return encodeParsedBody(\n      parsed,\n      request.headers[\"content-type\"],\n      request.method ?? \"\",\n    );\n  }\n\n  if (Number(request.headers[\"content-length\"]) === 0) {\n    return { body: null, length: 0 };\n  }\n\n  if (request.readableDidRead || isDrainedByHost(request)) {\n    throw new ConsumedRequestBodyError(request.method ?? \"\");\n  }\n\n  if (request.readableEnded) {\n    return { body: null, length: 0 };\n  }\n\n  return null;\n}\n\n// A complete message with no buffered data and no read is a message that\n// another reader took. A message the adapter owns still holds its bytes.\nfunction isDrainedByHost(request: IncomingMessage) {\n  if (!request.complete || request.readableLength > 0 || request.readableEnded) {\n    return false;\n  }\n\n  const declaredLength = Number(request.headers[\"content-length\"]);\n\n  return declaredLength > 0 || Boolean(request.headers[\"transfer-encoding\"]);\n}\n\nfunction encodeParsedBody(\n  parsed: unknown,\n  contentType: string | undefined,\n  method: string,\n) {\n  if (typeof parsed === \"string\") {\n    return { body: parsed, length: Buffer.byteLength(parsed) };\n  }\n\n  if (ArrayBuffer.isView(parsed)) {\n    const bytes = Uint8Array.from(\n      new Uint8Array(parsed.buffer, parsed.byteOffset, parsed.byteLength),\n    );\n\n    return { body: bytes, length: bytes.byteLength };\n  }\n\n  if (parsed instanceof ArrayBuffer) {\n    return { body: parsed, length: parsed.byteLength };\n  }\n\n  const type = mediaType(contentType);\n\n  if (type === \"application/json\") {\n    const json = JSON.stringify(parsed);\n\n    if (json === undefined) {\n      throw new ConsumedRequestBodyError(method);\n    }\n\n    return { body: json, contentType: undefined, length: Buffer.byteLength(json) };\n  }\n\n  if (type === \"application/x-www-form-urlencoded\" && isRecord(parsed)) {\n    const encoded = toSearchParams(parsed).toString();\n\n    return { body: encoded, contentType: undefined, length: Buffer.byteLength(encoded) };\n  }\n\n  // A parsed multipart or unknown body does not contain the original bytes.\n  // Require the host to pass those bytes through the body option.\n  throw new ConsumedRequestBodyError(method);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  if (typeof value !== \"object\" || value === null) {\n    return false;\n  }\n\n  const prototype = Object.getPrototypeOf(value);\n\n  return prototype === Object.prototype || prototype === null;\n}\n\nfunction toSearchParams(parsed: object) {\n  const params = new URLSearchParams();\n\n  for (const [name, value] of Object.entries(parsed)) {\n    if (Array.isArray(value)) {\n      for (const item of value) {\n        params.append(name, String(item));\n      }\n\n      continue;\n    }\n\n    params.append(name, String(value));\n  }\n\n  return params;\n}\n\nfunction knownBodyLength(body: BodyInit | null) {\n  if (body === null) {\n    return 0;\n  }\n\n  if (typeof body === \"string\") {\n    return Buffer.byteLength(body);\n  }\n\n  if (ArrayBuffer.isView(body) || body instanceof ArrayBuffer) {\n    return body.byteLength;\n  }\n\n  if (body instanceof Blob) {\n    return body.size;\n  }\n\n  if (body instanceof URLSearchParams) {\n    return Buffer.byteLength(body.toString());\n  }\n\n  return null;\n}\n\nfunction suppliedBodyContentType(body: BodyInit | null) {\n  if (body === null || body instanceof FormData) {\n    return null;\n  }\n\n  if (body instanceof URLSearchParams) {\n    return \"application/x-www-form-urlencoded;charset=UTF-8\";\n  }\n\n  if (body instanceof Blob) {\n    return body.type || null;\n  }\n\n  return undefined;\n}\n\nfunction mediaType(contentType: string | undefined) {\n  return contentType?.split(\";\")[0].trim().toLowerCase();\n}\n\nfunction resolveProtocol(\n  request: IncomingMessage,\n  forwardedProtocol: string | undefined,\n) {\n  if (forwardedProtocol) {\n    const protocol = forwardedProtocol.toLowerCase();\n\n    if (protocol !== \"http\" && protocol !== \"https\") {\n      throw new Error(`Unsupported forwarded protocol \"${forwardedProtocol}\".`);\n    }\n\n    return protocol;\n  }\n\n  // TYPE-EVIDENCE: the socket may expose the encrypted flag that Node sets for TLS connections. The cast reads that optional flag.\n  return (request.socket as { encrypted?: boolean } | undefined)?.encrypted\n    ? \"https\"\n    : \"http\";\n}\n\nfunction validateAllowedHost(\n  host: string | undefined,\n  allowedHosts: readonly string[],\n) {\n  if (allowedHosts.length === 0) {\n    throw new Error(\"Demiurge Node allowedHosts must contain at least one host.\");\n  }\n\n  if (!host) {\n    throw new UntrustedHostError(\"\");\n  }\n\n  const authority = parseAuthority(host);\n\n  if (!authority) {\n    throw new UntrustedHostError(host);\n  }\n\n  const allowed = allowedHosts.some((candidate) => {\n    const expected = parseAuthority(candidate);\n\n    if (!expected) {\n      throw new Error(`Demiurge Node allowed host \"${candidate}\" is invalid.`);\n    }\n\n    return expected.port\n      ? expected.host === authority.host\n      : expected.hostname === authority.hostname;\n  });\n\n  if (!allowed) {\n    throw new UntrustedHostError(host);\n  }\n\n  return authority.host;\n}\n\nfunction parseAuthority(value: string) {\n  if (value.trim() !== value || value.includes(\"@\")) {\n    return null;\n  }\n\n  try {\n    const parsed = new URL(`http://${value}`);\n\n    if (\n      !parsed.hostname ||\n      parsed.pathname !== \"/\" ||\n      parsed.search ||\n      parsed.hash ||\n      parsed.host.toLowerCase() !== value.toLowerCase()\n    ) {\n      return null;\n    }\n\n    return parsed;\n  } catch {\n    return null;\n  }\n}\n\nfunction resolveProxyChain(\n  peerAddress: string,\n  forwardedFor: string | readonly string[] | undefined,\n  trustProxy: TrustProxy,\n) {\n  const forwarded = headerValues(forwardedFor);\n  const chain = [...forwarded, peerAddress];\n\n  if (trustProxy === false) {\n    return { clientIp: peerAddress, forwardedDepth: 0 };\n  }\n\n  if (\"hops\" in trustProxy) {\n    if (!Number.isSafeInteger(trustProxy.hops) || trustProxy.hops < 0) {\n      throw new Error(\n        \"Demiurge Node trustProxy hop count must be a non-negative integer.\",\n      );\n    }\n\n    const clientHops = Math.min(trustProxy.hops, forwarded.length);\n\n    return {\n      clientIp: chain[chain.length - 1 - clientHops],\n      forwardedDepth: trustProxy.hops,\n    };\n  }\n\n  let index = chain.length - 1;\n  let trustedHops = 0;\n\n  while (\n    index > 0 &&\n    isAddressTrusted(chain[index], trustProxy.ranges)\n  ) {\n    index -= 1;\n    trustedHops += 1;\n  }\n\n  return {\n    clientIp: chain[index],\n    forwardedDepth:\n      trustedHops || (isAddressTrusted(peerAddress, trustProxy.ranges) ? 1 : 0),\n  };\n}\n\nfunction selectForwardedValue(\n  header: string | readonly string[] | undefined,\n  trustedDepth: number,\n) {\n  if (trustedDepth === 0) {\n    return undefined;\n  }\n\n  const values = headerValues(header);\n\n  if (values.length === 0) {\n    return undefined;\n  }\n\n  return values[Math.max(0, values.length - trustedDepth)];\n}\n\nfunction headerValues(value: string | readonly string[] | undefined) {\n  return (Array.isArray(value) ? value : [value])\n    .flatMap((item) => item?.split(\",\") ?? [])\n    .map((item) => item.trim())\n    .filter(Boolean);\n}\n\nfunction isAddressTrusted(address: string, ranges: readonly string[]) {\n  return ranges.some((range) => ipMatchesRange(address, range));\n}\n\nfunction ipMatchesRange(address: string, range: string) {\n  const [networkValue, prefixValue] = range.split(\"/\");\n  const addressBytes = ipBytes(normalizeIpAddress(address));\n  const networkBytes = ipBytes(normalizeIpAddress(networkValue));\n\n  if (!addressBytes || !networkBytes || addressBytes.length !== networkBytes.length) {\n    if (!networkBytes) {\n      throw new Error(`Demiurge Node trustProxy range \"${range}\" is invalid.`);\n    }\n\n    return false;\n  }\n\n  const maximumPrefix = addressBytes.length * 8;\n  const prefix = prefixValue === undefined ? maximumPrefix : Number(prefixValue);\n\n  if (!Number.isInteger(prefix) || prefix < 0 || prefix > maximumPrefix) {\n    throw new Error(`Demiurge Node trustProxy range \"${range}\" is invalid.`);\n  }\n\n  for (let bit = 0; bit < prefix; bit += 1) {\n    const mask = 1 << (7 - (bit % 8));\n\n    if ((addressBytes[Math.floor(bit / 8)] & mask) !==\n      (networkBytes[Math.floor(bit / 8)] & mask)) {\n      return false;\n    }\n  }\n\n  return true;\n}\n\nfunction normalizeIpAddress(address: string | undefined) {\n  if (!address) {\n    return \"unknown\";\n  }\n\n  return address.startsWith(\"::ffff:\") ? address.slice(7) : address;\n}\n\nfunction ipBytes(address: string) {\n  const version = isIP(address);\n\n  if (version === 4) {\n    return address.split(\".\").map(Number);\n  }\n\n  if (version !== 6) {\n    return null;\n  }\n\n  const [left = \"\", right = \"\"] = address.split(\"::\");\n  const leftGroups = left ? left.split(\":\") : [];\n  const rightGroups = right ? right.split(\":\") : [];\n  const missing = 8 - leftGroups.length - rightGroups.length;\n  const groups = [\n    ...leftGroups,\n    ...Array.from({ length: missing }, () => \"0\"),\n    ...rightGroups,\n  ];\n\n  return groups.flatMap((group) => {\n    const value = Number.parseInt(group, 16);\n    return [value >> 8, value & 255];\n  });\n}\n\n// Shared by the Node adapter and the Vite dev middleware so a request the\n// Fetch layer cannot represent gets the same answer in both.\nexport function writeNotImplemented(serverResponse: ServerResponse) {\n  serverResponse.statusCode = 501;\n  serverResponse.setHeader(\"content-type\", \"text/plain; charset=utf-8\");\n  serverResponse.end(\"Not Implemented\");\n}\n\nexport async function writeWebResponse(\n  serverResponse: ServerResponse,\n  webResponse: Response,\n) {\n  // `Headers.forEach` joins repeated headers with a comma, which is wrong for\n  // `set-cookie`: two cookies would arrive as one malformed header. Node's\n  // `setHeader` takes an array for exactly this case.\n  const cookies = getSetCookies(webResponse.headers);\n\n  webResponse.headers.forEach((value, name) => {\n    if (name === \"set-cookie\") {\n      return;\n    }\n\n    serverResponse.setHeader(name, value);\n  });\n\n  if (cookies.length > 0) {\n    serverResponse.setHeader(\"set-cookie\", cookies);\n  }\n\n  serverResponse.statusCode = webResponse.status;\n\n  // An empty status text would otherwise overwrite Node's default reason\n  // phrase with nothing at all.\n  if (webResponse.statusText) {\n    serverResponse.statusMessage = webResponse.statusText;\n  }\n\n  if (!webResponse.body) {\n    serverResponse.end();\n    return;\n  }\n\n  // `Readable.pipe()` does not destroy its source when the destination closes\n  // or has an error. An aborted client can leave the source stream open. It can\n  // also leave an associated file descriptor open. `pipeline` destroys the\n  // source when either side closes.\n  try {\n    // TYPE-EVIDENCE: the DOM body stream matches the Node web stream shape that fromWeb reads.\n    await pipeline(\n      Readable.fromWeb(\n        webResponse.body as import(\"node:stream/web\").ReadableStream,\n      ),\n      serverResponse,\n    );\n  } catch (error) {\n    if (!isClientDisconnect(error)) {\n      throw error;\n    }\n  }\n}\n\n// A client disconnect during a response is ordinary traffic, not a server\n// fault. A new throw would run the caller error path for each canceled download.\n// This path records a stack trace and creates an unused 500 response. An\n// unauthenticated client can cause this condition.\nconst clientDisconnectCodes = new Set([\n  \"ECONNRESET\",\n  \"EPIPE\",\n  \"ERR_STREAM_DESTROYED\",\n  \"ERR_STREAM_PREMATURE_CLOSE\",\n]);\n\nfunction isClientDisconnect(error: unknown) {\n  return (\n    error instanceof Error &&\n    \"code\" in error &&\n    typeof error.code === \"string\" &&\n    clientDisconnectCodes.has(error.code)\n  );\n}\n\nexport function toHeaders(headers: IncomingHttpHeaders) {\n  const nextHeaders = new Headers();\n\n  for (const [name, value] of Object.entries(headers)) {\n    if (Array.isArray(value)) {\n      for (const item of value) {\n        nextHeaders.append(name, item);\n      }\n      continue;\n    }\n\n    if (value) {\n      nextHeaders.set(name, value);\n    }\n  }\n\n  return nextHeaders;\n}\n\nfunction getSetCookies(headers: Headers) {\n  // TYPE-EVIDENCE: the getSetCookie method is a vendor extension present in some server runtimes. The cast reads that optional method for the runtime check.\n  const getSetCookie = (headers as Headers & {\n    getSetCookie?: () => string[];\n  }).getSetCookie;\n\n  if (getSetCookie) {\n    return getSetCookie.call(headers);\n  }\n\n  const combined = headers.get(\"set-cookie\");\n\n  return combined ? splitSetCookies(combined) : [];\n}\n\nfunction splitSetCookies(value: string) {\n  return value.split(/,\\s*(?=[^;,=\\s]+\\s*=)/);\n}\n","import { Transform } from \"node:stream\";\nimport { renderToPipeableStream } from \"react-dom/server\";\nimport type { LoadedRouteMatch } from \"../router\";\nimport { createDocumentShell } from \"../server/document-shell\";\nimport { createPageRenderTree } from \"../server/render-tree\";\nimport { createPageScriptContext } from \"../server/render-tree\";\nimport {\n  renderPageResponse,\n  type SsrRenderOptions,\n} from \"../server/ssr\";\n\nexport function renderNodePageResponse(\n  match: LoadedRouteMatch,\n  options: SsrRenderOptions = {},\n) {\n  return match.render.mode === \"streaming\"\n    ? renderStreamingPageResponse(match, options)\n    : renderPageResponse(match, options);\n}\n\nexport async function renderStreamingPageResponse(\n  match: LoadedRouteMatch,\n  options: SsrRenderOptions = {},\n) {\n  if (options.signal?.aborted) {\n    throw options.signal.reason;\n  }\n\n  const scripts = createPageScriptContext(match, options);\n  const content = createPageRenderTree(match, scripts);\n\n  return await new Promise<Response>((resolveResponse, rejectResponse) => {\n    let completed = false;\n    let cancelled = false;\n    let responseCommitted = false;\n    let documentSuffix = \"\";\n    // TYPE-EVIDENCE: undefined is a member of the declared union type. The cast only makes the variable type explicit.\n    let stream = undefined as ReturnType<typeof renderToPipeableStream> | undefined;\n    const documentStream = new Transform({\n      destroy(error, callback) {\n        if (!completed) {\n          cancelled = true;\n        }\n\n        callback(error);\n      },\n      flush(callback) {\n        callback(null, documentSuffix);\n      },\n      transform(chunk, _encoding, callback) {\n        callback(null, chunk);\n      },\n    });\n    const abort = () => {\n      cancelled = true;\n      stream?.abort(options.signal?.reason);\n      documentStream.destroy();\n    };\n    const cleanup = () => options.signal?.removeEventListener(\"abort\", abort);\n\n    documentStream.once(\"finish\", () => {\n      completed = true;\n    });\n    documentStream.once(\"close\", () => {\n      cleanup();\n\n      if (!completed) {\n        cancelled = true;\n        stream?.abort(new Error(\"Demiurge streaming response was cancelled.\"));\n      }\n    });\n    options.signal?.addEventListener(\"abort\", abort, { once: true });\n\n    stream = renderToPipeableStream(content, {\n      nonce: options.nonce,\n      onError(error) {\n        if (responseCommitted && !cancelled) {\n          options.onStreamError?.(error);\n        }\n      },\n      onShellError(error) {\n        cleanup();\n        rejectResponse(error);\n      },\n      onShellReady() {\n        void (async () => {\n          try {\n            const shell = await createDocumentShell(match, {\n              ...options,\n              scripts: scripts.scripts(),\n            });\n            documentSuffix = shell.suffix;\n            scripts.flushHead();\n            documentStream.push(shell.prefix);\n            responseCommitted = true;\n            stream?.pipe(documentStream);\n            resolveResponse(\n              new Response(toWebReadableStream(documentStream), {\n                headers: { \"content-type\": \"text/html; charset=utf-8\" },\n              }),\n            );\n          } catch (error) {\n            cleanup();\n            stream?.abort(error);\n            documentStream.destroy();\n            rejectResponse(error);\n          }\n        })();\n      },\n    });\n  });\n}\n\nexport function toWebReadableStream(stream: Transform) {\n  let closed = false;\n  let removeListeners = () => {};\n\n  return new ReadableStream<Uint8Array>({\n    cancel() {\n      closed = true;\n      removeListeners();\n      stream.pause();\n      stream.destroy();\n    },\n    pull() {\n      stream.resume();\n    },\n    start(controller) {\n      stream.on(\"data\", onData);\n      stream.once(\"end\", onEnd);\n      stream.once(\"error\", onError);\n      stream.once(\"close\", onClose);\n\n      function onData(chunk: Buffer) {\n        if (closed) {\n          return;\n        }\n\n        controller.enqueue(Uint8Array.from(chunk));\n\n        if ((controller.desiredSize ?? 1) <= 0) {\n          stream.pause();\n        }\n      }\n\n      function onEnd() {\n        if (!closed) {\n          closed = true;\n          cleanup();\n          controller.close();\n        }\n      }\n\n      function onError(error: Error) {\n        if (!closed) {\n          closed = true;\n          cleanup();\n          controller.error(error);\n        }\n      }\n\n      function onClose() {\n        if (!closed) {\n          closed = true;\n          cleanup();\n          controller.close();\n        }\n      }\n\n      function cleanup() {\n        stream.off(\"data\", onData);\n        stream.off(\"end\", onEnd);\n        stream.off(\"error\", onError);\n        stream.off(\"close\", onClose);\n      }\n\n      removeListeners = cleanup;\n    },\n  });\n}\n"],"names":["forwardedHeaders","defaultTrustProxy","forbiddenMethods","UnsupportedMethodError","method","UntrustedHostError","host","ConsumedRequestBodyError","validateNodeOriginPolicy","policy","parseAuthority","trustProxy","range","network","ipMatchesRange","toWebRequest","request","options","peerAddress","normalizeIpAddress","proxy","resolveProxyChain","forwardedProtocol","selectForwardedValue","protocol","resolveProtocol","authority","validateAllowedHost","origin","url","headers","toHeaders","init","recovered","resolveRecoveredBody","Readable","webRequest","setRequestConnectionMetadata","resolveClientIp","configured","fallback","isIP","suppliedBody","suppliedBodyContentType","knownBodyLength","parsed","encodeParsedBody","isDrainedByHost","contentType","bytes","type","mediaType","json","isRecord","encoded","toSearchParams","value","prototype","params","name","item","body","allowedHosts","candidate","expected","forwardedFor","forwarded","headerValues","chain","clientHops","index","trustedHops","isAddressTrusted","header","trustedDepth","values","address","ranges","networkValue","prefixValue","addressBytes","ipBytes","networkBytes","maximumPrefix","prefix","bit","mask","version","left","right","leftGroups","rightGroups","missing","group","writeNotImplemented","serverResponse","writeWebResponse","webResponse","cookies","getSetCookies","pipeline","error","isClientDisconnect","clientDisconnectCodes","nextHeaders","getSetCookie","combined","splitSetCookies","renderNodePageResponse","match","renderStreamingPageResponse","renderPageResponse","scripts","createPageScriptContext","content","createPageRenderTree","resolveResponse","rejectResponse","completed","cancelled","responseCommitted","documentSuffix","stream","documentStream","Transform","callback","chunk","_encoding","abort","cleanup","renderToPipeableStream","shell","createDocumentShell","toWebReadableStream","closed","removeListeners","controller","onData","onEnd","onError","onClose"],"mappings":";;;;;;AAmCA,MAAMA,IAAmB;AAAA,EACvB,KAAK;AAAA,EACL,MAAM;AAAA,EACN,UAAU;AACZ,GACMC,IAAoB,IAKpBC,IAAmB,oBAAI,IAAI,CAAC,WAAW,SAAS,OAAO,CAAC;AAEvD,MAAMC,UAA+B,MAAM;AAAA,EAChD;AAAA,EAEA,YAAYC,GAAgB;AAC1B,UAAM,gBAAgBA,CAAM,qBAAqB,GACjD,KAAK,SAASA,GACd,KAAK,OAAO;AAAA,EACd;AACF;AAEO,MAAMC,UAA2B,MAAM;AAAA,EAC5C;AAAA,EAEA,YAAYC,GAAc;AACxB,UAAM,cAAcA,CAAI,mBAAmB,GAC3C,KAAK,OAAOA,GACZ,KAAK,OAAO;AAAA,EACd;AACF;AAEO,MAAMC,UAAiC,MAAM;AAAA,EAClD;AAAA,EAEA,YAAYH,GAAgB;AAC1B;AAAA,MACE,4BAA4BA,CAAM;AAAA,IAAA,GAKpC,KAAK,SAASA,GACd,KAAK,OAAO;AAAA,EACd;AACF;AAEO,SAASI,EAAyBC,GAA0B;AACjE,MAAIA,EAAO,aAAa,WAAW;AACjC,UAAM,IAAI,MAAM,4DAA4D;AAG9E,aAAWH,KAAQG,EAAO;AACxB,QAAI,CAACC,EAAeJ,CAAI;AACtB,YAAM,IAAI,MAAM,+BAA+BA,CAAI,eAAe;AAItE,QAAMK,IAAaF,EAAO,cAAcR;AAExC,MAAIU,MAAe,IAInB;AAAA,QAAI,UAAUA,GAAY;AACxB,UAAI,CAAC,OAAO,cAAcA,EAAW,IAAI,KAAKA,EAAW,OAAO;AAC9D,cAAM,IAAI;AAAA,UACR;AAAA,QAAA;AAIJ;AAAA,IACF;AAEA,eAAWC,KAASD,EAAW,QAAQ;AACrC,YAAME,IAAUD,EAAM,MAAM,GAAG,EAAE,CAAC;AAClC,MAAAE,EAAeD,GAASD,CAAK;AAAA,IAC/B;AAAA;AACF;AAEO,SAASG,GACdC,GACAC,GACA;AACA,EAAAT,EAAyBS,CAAO;AAChC,QAAMb,IAASY,EAAQ,UAAU;AAEjC,MAAId,EAAiB,IAAIE,EAAO,YAAA,CAAa;AAC3C,UAAM,IAAID,EAAuBC,CAAM;AAGzC,QAAMc,IAAcC,EAAmBH,EAAQ,QAAQ,aAAa,GAC9DI,IAAQC;AAAA,IACZH;AAAA,IACAF,EAAQ,QAAQhB,EAAiB,GAAG;AAAA,IACpCiB,EAAQ,cAAchB;AAAA,EAAA,GAElBqB,IAAoBC;AAAA,IACxBP,EAAQ,QAAQhB,EAAiB,QAAQ;AAAA,IACzCoB,EAAM;AAAA,EAAA,GAEFI,IAAWP,EAAQ,UAAUQ,EAAgBT,GAASM,CAAiB,GACvEhB,IAAOiB;AAAA,IACXP,EAAQ,QAAQhB,EAAiB,IAAI;AAAA,IACrCoB,EAAM;AAAA,EAAA,KACHJ,EAAQ,QAAQ,MACfU,IAAYC,EAAoBrB,GAAMW,EAAQ,YAAY,GAC1DW,IAAS,GAAGJ,CAAQ,MAAME,CAAS,IACnCG,IAAM,IAAI,IAAIb,EAAQ,OAAO,KAAKY,CAAM,GACxCE,IAAUC,GAAUf,EAAQ,OAAO,GACnCgB,IAA0C;AAAA,IAC9C,SAAAF;AAAA,IACA,QAAA1B;AAAA,IACA,QAAQa,EAAQ;AAAA,EAAA;AAGlB,MAAIb,MAAW,SAASA,MAAW,QAAQ;AACzC,UAAM6B,IAAYC,EAAqBlB,GAASC,EAAQ,IAAI;AAE5D,IAAIgB,MAAc,QAEhBD,EAAK,OAAOG,EAAS,MAAMnB,CAAO,GAClCgB,EAAK,SAAS,WAEdA,EAAK,OAAOC,EAAU,MACtBD,EAAK,SAAS,QAEVC,EAAU,WAAW,QAIvBH,EAAQ,IAAI,kBAAkB,OAAOG,EAAU,MAAM,CAAC,GACtDH,EAAQ,OAAO,mBAAmB,MAIlCA,EAAQ,OAAO,gBAAgB,GAC/BA,EAAQ,OAAO,mBAAmB,IAGhCG,EAAU,gBAAgB,WACxBA,EAAU,gBAAgB,OAC5BH,EAAQ,OAAO,cAAc,IAE7BA,EAAQ,IAAI,gBAAgBG,EAAU,WAAW;AAAA,EAIzD;AAEA,QAAMG,IAAa,IAAI,QAAQP,GAAKG,CAAI;AACxC,SAAAK,EAA6BD,GAAY;AAAA,IACvC,UAAUE,EAAgBrB,EAAQ,UAAUG,EAAM,QAAQ;AAAA,EAAA,CAC3D,GAEMgB;AACT;AAEA,SAASE,EAAgBC,GAAgCC,GAAkB;AACzE,MAAID,MAAe;AACjB,WAAOC;AAGT,MAAIC,EAAKF,CAAU,MAAM;AACvB,UAAM,IAAI,MAAM,2BAA2BA,CAAU,eAAe;AAGtE,SAAOpB,EAAmBoB,CAAU;AACtC;AAOA,SAASL,EACPlB,GACA0B,GACA;AACA,MAAIA,MAAiB;AACnB,WAAO;AAAA,MACL,MAAMA;AAAA,MACN,aAAaC,EAAwBD,CAAY;AAAA,MACjD,QAAQE,EAAgBF,CAAY;AAAA,IAAA;AAKxC,QAAMG,IAAU7B,EAAiD;AAEjE,MAA4B6B,KAAW;AACrC,WAAOC;AAAA,MACLD;AAAA,MACA7B,EAAQ,QAAQ,cAAc;AAAA,MAC9BA,EAAQ,UAAU;AAAA,IAAA;AAItB,MAAI,OAAOA,EAAQ,QAAQ,gBAAgB,CAAC,MAAM;AAChD,WAAO,EAAE,MAAM,MAAM,QAAQ,EAAA;AAG/B,MAAIA,EAAQ,mBAAmB+B,EAAgB/B,CAAO;AACpD,UAAM,IAAIT,EAAyBS,EAAQ,UAAU,EAAE;AAGzD,SAAIA,EAAQ,gBACH,EAAE,MAAM,MAAM,QAAQ,EAAA,IAGxB;AACT;AAIA,SAAS+B,EAAgB/B,GAA0B;AACjD,SAAI,CAACA,EAAQ,YAAYA,EAAQ,iBAAiB,KAAKA,EAAQ,gBACtD,KAGc,OAAOA,EAAQ,QAAQ,gBAAgB,CAAC,IAEvC,KAAK,EAAQA,EAAQ,QAAQ,mBAAmB;AAC1E;AAEA,SAAS8B,EACPD,GACAG,GACA5C,GACA;AACA,MAAI,OAAOyC,KAAW;AACpB,WAAO,EAAE,MAAMA,GAAQ,QAAQ,OAAO,WAAWA,CAAM,EAAA;AAGzD,MAAI,YAAY,OAAOA,CAAM,GAAG;AAC9B,UAAMI,IAAQ,WAAW;AAAA,MACvB,IAAI,WAAWJ,EAAO,QAAQA,EAAO,YAAYA,EAAO,UAAU;AAAA,IAAA;AAGpE,WAAO,EAAE,MAAMI,GAAO,QAAQA,EAAM,WAAA;AAAA,EACtC;AAEA,MAAIJ,aAAkB;AACpB,WAAO,EAAE,MAAMA,GAAQ,QAAQA,EAAO,WAAA;AAGxC,QAAMK,IAAOC,EAAUH,CAAW;AAElC,MAAIE,MAAS,oBAAoB;AAC/B,UAAME,IAAO,KAAK,UAAUP,CAAM;AAElC,QAAIO,MAAS;AACX,YAAM,IAAI7C,EAAyBH,CAAM;AAG3C,WAAO,EAAE,MAAMgD,GAAM,aAAa,QAAW,QAAQ,OAAO,WAAWA,CAAI,EAAA;AAAA,EAC7E;AAEA,MAAIF,MAAS,uCAAuCG,EAASR,CAAM,GAAG;AACpE,UAAMS,IAAUC,EAAeV,CAAM,EAAE,SAAA;AAEvC,WAAO,EAAE,MAAMS,GAAS,aAAa,QAAW,QAAQ,OAAO,WAAWA,CAAO,EAAA;AAAA,EACnF;AAIA,QAAM,IAAI/C,EAAyBH,CAAM;AAC3C;AAEA,SAASiD,EAASG,GAAkD;AAClE,MAAI,OAAOA,KAAU,YAAYA,MAAU;AACzC,WAAO;AAGT,QAAMC,IAAY,OAAO,eAAeD,CAAK;AAE7C,SAAOC,MAAc,OAAO,aAAaA,MAAc;AACzD;AAEA,SAASF,EAAeV,GAAgB;AACtC,QAAMa,IAAS,IAAI,gBAAA;AAEnB,aAAW,CAACC,GAAMH,CAAK,KAAK,OAAO,QAAQX,CAAM,GAAG;AAClD,QAAI,MAAM,QAAQW,CAAK,GAAG;AACxB,iBAAWI,KAAQJ;AACjB,QAAAE,EAAO,OAAOC,GAAM,OAAOC,CAAI,CAAC;AAGlC;AAAA,IACF;AAEA,IAAAF,EAAO,OAAOC,GAAM,OAAOH,CAAK,CAAC;AAAA,EACnC;AAEA,SAAOE;AACT;AAEA,SAASd,EAAgBiB,GAAuB;AAC9C,SAAIA,MAAS,OACJ,IAGL,OAAOA,KAAS,WACX,OAAO,WAAWA,CAAI,IAG3B,YAAY,OAAOA,CAAI,KAAKA,aAAgB,cACvCA,EAAK,aAGVA,aAAgB,OACXA,EAAK,OAGVA,aAAgB,kBACX,OAAO,WAAWA,EAAK,SAAA,CAAU,IAGnC;AACT;AAEA,SAASlB,EAAwBkB,GAAuB;AACtD,MAAIA,MAAS,QAAQA,aAAgB;AACnC,WAAO;AAGT,MAAIA,aAAgB;AAClB,WAAO;AAGT,MAAIA,aAAgB;AAClB,WAAOA,EAAK,QAAQ;AAIxB;AAEA,SAASV,EAAUH,GAAiC;AAClD,SAAOA,GAAa,MAAM,GAAG,EAAE,CAAC,EAAE,KAAA,EAAO,YAAA;AAC3C;AAEA,SAASvB,EACPT,GACAM,GACA;AACA,MAAIA,GAAmB;AACrB,UAAME,IAAWF,EAAkB,YAAA;AAEnC,QAAIE,MAAa,UAAUA,MAAa;AACtC,YAAM,IAAI,MAAM,mCAAmCF,CAAiB,IAAI;AAG1E,WAAOE;AAAA,EACT;AAGA,SAAQR,EAAQ,QAAgD,YAC5D,UACA;AACN;AAEA,SAASW,EACPrB,GACAwD,GACA;AACA,MAAIA,EAAa,WAAW;AAC1B,UAAM,IAAI,MAAM,4DAA4D;AAG9E,MAAI,CAACxD;AACH,UAAM,IAAID,EAAmB,EAAE;AAGjC,QAAMqB,IAAYhB,EAAeJ,CAAI;AAErC,MAAI,CAACoB;AACH,UAAM,IAAIrB,EAAmBC,CAAI;AAenC,MAAI,CAZYwD,EAAa,KAAK,CAACC,MAAc;AAC/C,UAAMC,IAAWtD,EAAeqD,CAAS;AAEzC,QAAI,CAACC;AACH,YAAM,IAAI,MAAM,+BAA+BD,CAAS,eAAe;AAGzE,WAAOC,EAAS,OACZA,EAAS,SAAStC,EAAU,OAC5BsC,EAAS,aAAatC,EAAU;AAAA,EACtC,CAAC;AAGC,UAAM,IAAIrB,EAAmBC,CAAI;AAGnC,SAAOoB,EAAU;AACnB;AAEA,SAAShB,EAAe8C,GAAe;AACrC,MAAIA,EAAM,WAAWA,KAASA,EAAM,SAAS,GAAG;AAC9C,WAAO;AAGT,MAAI;AACF,UAAMX,IAAS,IAAI,IAAI,UAAUW,CAAK,EAAE;AAExC,WACE,CAACX,EAAO,YACRA,EAAO,aAAa,OACpBA,EAAO,UACPA,EAAO,QACPA,EAAO,KAAK,YAAA,MAAkBW,EAAM,gBAE7B,OAGFX;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAASxB,EACPH,GACA+C,GACAtD,GACA;AACA,QAAMuD,IAAYC,EAAaF,CAAY,GACrCG,IAAQ,CAAC,GAAGF,GAAWhD,CAAW;AAExC,MAAIP,MAAe;AACjB,WAAO,EAAE,UAAUO,GAAa,gBAAgB,EAAA;AAGlD,MAAI,UAAUP,GAAY;AACxB,QAAI,CAAC,OAAO,cAAcA,EAAW,IAAI,KAAKA,EAAW,OAAO;AAC9D,YAAM,IAAI;AAAA,QACR;AAAA,MAAA;AAIJ,UAAM0D,IAAa,KAAK,IAAI1D,EAAW,MAAMuD,EAAU,MAAM;AAE7D,WAAO;AAAA,MACL,UAAUE,EAAMA,EAAM,SAAS,IAAIC,CAAU;AAAA,MAC7C,gBAAgB1D,EAAW;AAAA,IAAA;AAAA,EAE/B;AAEA,MAAI2D,IAAQF,EAAM,SAAS,GACvBG,IAAc;AAElB,SACED,IAAQ,KACRE,EAAiBJ,EAAME,CAAK,GAAG3D,EAAW,MAAM;AAEhD,IAAA2D,KAAS,GACTC,KAAe;AAGjB,SAAO;AAAA,IACL,UAAUH,EAAME,CAAK;AAAA,IACrB,gBACEC,MAAgBC,EAAiBtD,GAAaP,EAAW,MAAM,IAAI,IAAI;AAAA,EAAA;AAE7E;AAEA,SAASY,EACPkD,GACAC,GACA;AACA,MAAIA,MAAiB;AACnB;AAGF,QAAMC,IAASR,EAAaM,CAAM;AAElC,MAAIE,EAAO,WAAW;AAItB,WAAOA,EAAO,KAAK,IAAI,GAAGA,EAAO,SAASD,CAAY,CAAC;AACzD;AAEA,SAASP,EAAaX,GAA+C;AACnE,UAAQ,MAAM,QAAQA,CAAK,IAAIA,IAAQ,CAACA,CAAK,GAC1C,QAAQ,CAACI,MAASA,GAAM,MAAM,GAAG,KAAK,CAAA,CAAE,EACxC,IAAI,CAACA,MAASA,EAAK,KAAA,CAAM,EACzB,OAAO,OAAO;AACnB;AAEA,SAASY,EAAiBI,GAAiBC,GAA2B;AACpE,SAAOA,EAAO,KAAK,CAACjE,MAAUE,EAAe8D,GAAShE,CAAK,CAAC;AAC9D;AAEA,SAASE,EAAe8D,GAAiBhE,GAAe;AACtD,QAAM,CAACkE,GAAcC,CAAW,IAAInE,EAAM,MAAM,GAAG,GAC7CoE,IAAeC,EAAQ9D,EAAmByD,CAAO,CAAC,GAClDM,IAAeD,EAAQ9D,EAAmB2D,CAAY,CAAC;AAE7D,MAAI,CAACE,KAAgB,CAACE,KAAgBF,EAAa,WAAWE,EAAa,QAAQ;AACjF,QAAI,CAACA;AACH,YAAM,IAAI,MAAM,mCAAmCtE,CAAK,eAAe;AAGzE,WAAO;AAAA,EACT;AAEA,QAAMuE,IAAgBH,EAAa,SAAS,GACtCI,IAASL,MAAgB,SAAYI,IAAgB,OAAOJ,CAAW;AAE7E,MAAI,CAAC,OAAO,UAAUK,CAAM,KAAKA,IAAS,KAAKA,IAASD;AACtD,UAAM,IAAI,MAAM,mCAAmCvE,CAAK,eAAe;AAGzE,WAASyE,IAAM,GAAGA,IAAMD,GAAQC,KAAO,GAAG;AACxC,UAAMC,IAAO,KAAM,IAAKD,IAAM;AAE9B,SAAKL,EAAa,KAAK,MAAMK,IAAM,CAAC,CAAC,IAAIC,QACtCJ,EAAa,KAAK,MAAMG,IAAM,CAAC,CAAC,IAAIC;AACrC,aAAO;AAAA,EAEX;AAEA,SAAO;AACT;AAEA,SAASnE,EAAmByD,GAA6B;AACvD,SAAKA,IAIEA,EAAQ,WAAW,SAAS,IAAIA,EAAQ,MAAM,CAAC,IAAIA,IAHjD;AAIX;AAEA,SAASK,EAAQL,GAAiB;AAChC,QAAMW,IAAU9C,EAAKmC,CAAO;AAE5B,MAAIW,MAAY;AACd,WAAOX,EAAQ,MAAM,GAAG,EAAE,IAAI,MAAM;AAGtC,MAAIW,MAAY;AACd,WAAO;AAGT,QAAM,CAACC,IAAO,IAAIC,IAAQ,EAAE,IAAIb,EAAQ,MAAM,IAAI,GAC5Cc,IAAaF,IAAOA,EAAK,MAAM,GAAG,IAAI,CAAA,GACtCG,IAAcF,IAAQA,EAAM,MAAM,GAAG,IAAI,CAAA,GACzCG,IAAU,IAAIF,EAAW,SAASC,EAAY;AAOpD,SANe;AAAA,IACb,GAAGD;AAAA,IACH,GAAG,MAAM,KAAK,EAAE,QAAQE,EAAA,GAAW,MAAM,GAAG;AAAA,IAC5C,GAAGD;AAAA,EAAA,EAGS,QAAQ,CAACE,MAAU;AAC/B,UAAMrC,IAAQ,OAAO,SAASqC,GAAO,EAAE;AACvC,WAAO,CAACrC,KAAS,GAAGA,IAAQ,GAAG;AAAA,EACjC,CAAC;AACH;AAIO,SAASsC,GAAoBC,GAAgC;AAClE,EAAAA,EAAe,aAAa,KAC5BA,EAAe,UAAU,gBAAgB,2BAA2B,GACpEA,EAAe,IAAI,iBAAiB;AACtC;AAEA,eAAsBC,GACpBD,GACAE,GACA;AAIA,QAAMC,IAAUC,GAAcF,EAAY,OAAO;AAsBjD,MApBAA,EAAY,QAAQ,QAAQ,CAACzC,GAAOG,MAAS;AAC3C,IAAIA,MAAS,gBAIboC,EAAe,UAAUpC,GAAMH,CAAK;AAAA,EACtC,CAAC,GAEG0C,EAAQ,SAAS,KACnBH,EAAe,UAAU,cAAcG,CAAO,GAGhDH,EAAe,aAAaE,EAAY,QAIpCA,EAAY,eACdF,EAAe,gBAAgBE,EAAY,aAGzC,CAACA,EAAY,MAAM;AACrB,IAAAF,EAAe,IAAA;AACf;AAAA,EACF;AAMA,MAAI;AAEF,UAAMK;AAAA,MACJjE,EAAS;AAAA,QACP8D,EAAY;AAAA,MAAA;AAAA,MAEdF;AAAA,IAAA;AAAA,EAEJ,SAASM,GAAO;AACd,QAAI,CAACC,GAAmBD,CAAK;AAC3B,YAAMA;AAAA,EAEV;AACF;AAMA,MAAME,wBAA4B,IAAI;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAASD,GAAmBD,GAAgB;AAC1C,SACEA,aAAiB,SACjB,UAAUA,KACV,OAAOA,EAAM,QAAS,YACtBE,EAAsB,IAAIF,EAAM,IAAI;AAExC;AAEO,SAAStE,GAAUD,GAA8B;AACtD,QAAM0E,IAAc,IAAI,QAAA;AAExB,aAAW,CAAC7C,GAAMH,CAAK,KAAK,OAAO,QAAQ1B,CAAO,GAAG;AACnD,QAAI,MAAM,QAAQ0B,CAAK,GAAG;AACxB,iBAAWI,KAAQJ;AACjB,QAAAgD,EAAY,OAAO7C,GAAMC,CAAI;AAE/B;AAAA,IACF;AAEA,IAAIJ,KACFgD,EAAY,IAAI7C,GAAMH,CAAK;AAAA,EAE/B;AAEA,SAAOgD;AACT;AAEA,SAASL,GAAcrE,GAAkB;AAEvC,QAAM2E,IAAgB3E,EAEnB;AAEH,MAAI2E;AACF,WAAOA,EAAa,KAAK3E,CAAO;AAGlC,QAAM4E,IAAW5E,EAAQ,IAAI,YAAY;AAEzC,SAAO4E,IAAWC,GAAgBD,CAAQ,IAAI,CAAA;AAChD;AAEA,SAASC,GAAgBnD,GAAe;AACtC,SAAOA,EAAM,MAAM,uBAAuB;AAC5C;AC/rBO,SAASoD,GACdC,GACA5F,IAA4B,IAC5B;AACA,SAAO4F,EAAM,OAAO,SAAS,cACzBC,GAA4BD,GAAO5F,CAAO,IAC1C8F,EAAmBF,GAAO5F,CAAO;AACvC;AAEA,eAAsB6F,GACpBD,GACA5F,IAA4B,IAC5B;AACA,MAAIA,EAAQ,QAAQ;AAClB,UAAMA,EAAQ,OAAO;AAGvB,QAAM+F,IAAUC,EAAwBJ,GAAO5F,CAAO,GAChDiG,IAAUC,EAAqBN,GAAOG,CAAO;AAEnD,SAAO,MAAM,IAAI,QAAkB,CAACI,GAAiBC,MAAmB;AACtE,QAAIC,IAAY,IACZC,IAAY,IACZC,IAAoB,IACpBC,IAAiB,IAEjBC;AACJ,UAAMC,IAAiB,IAAIC,EAAU;AAAA,MACnC,QAAQvB,GAAOwB,GAAU;AACvB,QAAKP,MACHC,IAAY,KAGdM,EAASxB,CAAK;AAAA,MAChB;AAAA,MACA,MAAMwB,GAAU;AACd,QAAAA,EAAS,MAAMJ,CAAc;AAAA,MAC/B;AAAA,MACA,UAAUK,GAAOC,GAAWF,GAAU;AACpC,QAAAA,EAAS,MAAMC,CAAK;AAAA,MACtB;AAAA,IAAA,CACD,GACKE,IAAQ,MAAM;AAClB,MAAAT,IAAY,IACZG,GAAQ,MAAMzG,EAAQ,QAAQ,MAAM,GACpC0G,EAAe,QAAA;AAAA,IACjB,GACMM,IAAU,MAAMhH,EAAQ,QAAQ,oBAAoB,SAAS+G,CAAK;AAExE,IAAAL,EAAe,KAAK,UAAU,MAAM;AAClC,MAAAL,IAAY;AAAA,IACd,CAAC,GACDK,EAAe,KAAK,SAAS,MAAM;AACjC,MAAAM,EAAA,GAEKX,MACHC,IAAY,IACZG,GAAQ,MAAM,IAAI,MAAM,4CAA4C,CAAC;AAAA,IAEzE,CAAC,GACDzG,EAAQ,QAAQ,iBAAiB,SAAS+G,GAAO,EAAE,MAAM,IAAM,GAE/DN,IAASQ,EAAuBhB,GAAS;AAAA,MACvC,OAAOjG,EAAQ;AAAA,MACf,QAAQoF,GAAO;AACb,QAAImB,KAAqB,CAACD,KACxBtG,EAAQ,gBAAgBoF,CAAK;AAAA,MAEjC;AAAA,MACA,aAAaA,GAAO;AAClB,QAAA4B,EAAA,GACAZ,EAAehB,CAAK;AAAA,MACtB;AAAA,MACA,eAAe;AACb,SAAM,YAAY;AAChB,cAAI;AACF,kBAAM8B,IAAQ,MAAMC,EAAoBvB,GAAO;AAAA,cAC7C,GAAG5F;AAAA,cACH,SAAS+F,EAAQ,QAAA;AAAA,YAAQ,CAC1B;AACD,YAAAS,IAAiBU,EAAM,QACvBnB,EAAQ,UAAA,GACRW,EAAe,KAAKQ,EAAM,MAAM,GAChCX,IAAoB,IACpBE,GAAQ,KAAKC,CAAc,GAC3BP;AAAA,cACE,IAAI,SAASiB,GAAoBV,CAAc,GAAG;AAAA,gBAChD,SAAS,EAAE,gBAAgB,2BAAA;AAAA,cAA2B,CACvD;AAAA,YAAA;AAAA,UAEL,SAAStB,GAAO;AACd,YAAA4B,EAAA,GACAP,GAAQ,MAAMrB,CAAK,GACnBsB,EAAe,QAAA,GACfN,EAAehB,CAAK;AAAA,UACtB;AAAA,QACF,GAAA;AAAA,MACF;AAAA,IAAA,CACD;AAAA,EACH,CAAC;AACH;AAEO,SAASgC,GAAoBX,GAAmB;AACrD,MAAIY,IAAS,IACTC,IAAkB,MAAM;AAAA,EAAC;AAE7B,SAAO,IAAI,eAA2B;AAAA,IACpC,SAAS;AACP,MAAAD,IAAS,IACTC,EAAA,GACAb,EAAO,MAAA,GACPA,EAAO,QAAA;AAAA,IACT;AAAA,IACA,OAAO;AACL,MAAAA,EAAO,OAAA;AAAA,IACT;AAAA,IACA,MAAMc,GAAY;AAChB,MAAAd,EAAO,GAAG,QAAQe,CAAM,GACxBf,EAAO,KAAK,OAAOgB,CAAK,GACxBhB,EAAO,KAAK,SAASiB,CAAO,GAC5BjB,EAAO,KAAK,SAASkB,CAAO;AAE5B,eAASH,EAAOX,GAAe;AAC7B,QAAIQ,MAIJE,EAAW,QAAQ,WAAW,KAAKV,CAAK,CAAC,IAEpCU,EAAW,eAAe,MAAM,KACnCd,EAAO,MAAA;AAAA,MAEX;AAEA,eAASgB,IAAQ;AACf,QAAKJ,MACHA,IAAS,IACTL,EAAA,GACAO,EAAW,MAAA;AAAA,MAEf;AAEA,eAASG,EAAQtC,GAAc;AAC7B,QAAKiC,MACHA,IAAS,IACTL,EAAA,GACAO,EAAW,MAAMnC,CAAK;AAAA,MAE1B;AAEA,eAASuC,IAAU;AACjB,QAAKN,MACHA,IAAS,IACTL,EAAA,GACAO,EAAW,MAAA;AAAA,MAEf;AAEA,eAASP,IAAU;AACjB,QAAAP,EAAO,IAAI,QAAQe,CAAM,GACzBf,EAAO,IAAI,OAAOgB,CAAK,GACvBhB,EAAO,IAAI,SAASiB,CAAO,GAC3BjB,EAAO,IAAI,SAASkB,CAAO;AAAA,MAC7B;AAEA,MAAAL,IAAkBN;AAAA,IACpB;AAAA,EAAA,CACD;AACH;"}