@earendil-works/chord 1.4.0 → 1.5.0

package/dist/next-node/http/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../../src/next-node/http/request.ts"],"names":[],"mappings":"AAAA,oHAAoH;AACpH,qHAAqH;AACrH,kEAAkE;AA4BlE,+GAA+G;AAC/G,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC5B,MAAM,CAAS;IAExB,YAAY,MAAc,EAAE,OAAe;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;CACD;AAED,wEAAwE;AACxE,MAAM,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC;AAElC,wDAAwD;AACxD,MAAM,SAAS,GAAqC,EAAE,CAAC;AAEvD,4GAA4G;AAC5G,MAAM,OAAO,UAAU;IACb,MAAM,CAAS;IACf,IAAI,CAAS;IACtB,MAAM,GAAqC,SAAS,CAAC;IAC5C,MAAM,CAAS;IACf,UAAU,CAAa;IACvB,KAAK,CAAS;IACd,SAAS,CAAW;IAC7B,8DAA8D;IACrD,OAAO,CAAS;IACzB,MAAM,CAA8B;IACpC,wDAAwD;IACxD,MAAM,GAAG,KAAK,CAAC;IAEf,YACC,QAAkB,EAClB,QAAsE,EACtE,KAAa;QAEb,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC9B,oGAAoG;QACpG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,oGAAoG;IACpG,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC;IACzC,CAAC;IAED,IAAI,KAAK;QACR,IAAI,CAAC,MAAM,KAAK,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,aAAa;QAC/B,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QACnD,CAAC;IACF,CAAC;IAED,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,aAAa;QAChC,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/E,IAAI,QAAQ,GAAG,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,2BAA2B,KAAK,QAAQ,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC;QAC7C,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO;QAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,CAAC;YACJ,SAAS,CAAC;gBACT,IAAI,IAA6C,CAAC;gBAClD,IAAI,CAAC;oBACJ,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACR,gGAAgG;oBAChG,oEAAoE;oBACpE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;gBAChE,CAAC;gBACD,IAAI,IAAI,CAAC,IAAI;oBAAE,OAAO;gBACtB,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC9B,IAAI,IAAI,GAAG,KAAK;oBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,2BAA2B,KAAK,QAAQ,CAAC,CAAC;gBACvF,MAAM,IAAI,CAAC,KAAK,CAAC;YAClB,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,0GAA0G;YAC1G,2FAA2F;YAC3F,MAAM,CAAC,WAAW,EAAE,CAAC;QACtB,CAAC;IACF,CAAC;CACD;AAED,6GAA6G;AAC7G,MAAM,UAAU,QAAQ,CAAC,GAAW;IACnC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACxC,IAAI,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACtC,IAAI,GAAG,GAAG,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACzC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC;QAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACrD,OAAO;QACN,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;QACjD,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;KAC/D,CAAC;AACH,CAAC","sourcesContent":["// Requests (slice 10 §2, D4): what a route, a wrap, a socket handler and an authenticator see of an HTTP request (a\n// Web `Request` once admitted), and its body, read only when asked: `json(limit?)` (1 MiB by default, malformed 400,\n// too large 413) and `body(limit?)`, an async iterable of chunks.\n\nimport type { JsonValue } from \"../../json.ts\";\nimport type { Provenance } from \"./admission.ts\";\nimport type { Incoming } from \"./incoming.ts\";\n\n/** A request as routes see it, once admitted: `origin` and `provenance` come only from admission. */\nexport interface HttpRequest {\n\treadonly method: string;\n\t/** The path, without the query, percent-encoded, its dot segments resolved (by the URL parser). */\n\treadonly path: string;\n\t/** The matched pattern's params, percent-decoded (`*` for the rest of a `/*` pattern). */\n\treadonly params: Readonly<Record<string, string>>;\n\treadonly query: URLSearchParams;\n\t/** The request's headers; read only. */\n\treadonly headers: Headers;\n\t/** `http://<host>` on loopback, `https://<host>` for an allowed host, a relay's origin for a relayed request. */\n\treadonly origin: string;\n\t/** Where it came from (decision \"The HTTP component's security baseline\" (1), \"Relays\"). */\n\treadonly provenance: Provenance;\n\t/** The server's script nonce: a page's inline scripts carry it (`<script nonce=\"…\">`), the CSP allows them. */\n\treadonly nonce: string;\n\t/** The body as JSON, at most `limit` bytes (1 MiB by default): `HttpFailure` 400 when malformed, 413 when larger. */\n\tjson(limit?: number): Promise<JsonValue>;\n\t/** The body's chunks, at most `limit` bytes (1 MiB by default): `HttpFailure` 413 past it, 400 when cut short. */\n\tbody(limit?: number): AsyncIterable<Uint8Array>;\n}\n\n/** A failure that answers its request with `status` when it escapes a route (400 malformed, 413 too large). */\nexport class HttpFailure extends Error {\n\treadonly status: number;\n\n\tconstructor(status: number, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"HttpFailure\";\n\t\tthis.status = status;\n\t}\n}\n\n/** What `json` and `body` read unless a route says otherwise: 1 MiB. */\nconst DEFAULT_LIMIT = 1024 * 1024;\n\n/** The params of a request no pattern matched (yet). */\nconst NO_PARAMS: Readonly<Record<string, string>> = {};\n\n/** A request over what the component reads of it; the component sets its params once it matched a route. */\nexport class WebRequest implements HttpRequest {\n\treadonly method: string;\n\treadonly path: string;\n\tparams: Readonly<Record<string, string>> = NO_PARAMS;\n\treadonly origin: string;\n\treadonly provenance: Provenance;\n\treadonly nonce: string;\n\treadonly #incoming: Incoming;\n\t/** The query string (without `?`), parsed when first read. */\n\treadonly #search: string;\n\t#query: URLSearchParams | undefined;\n\t/** Whether a reader took the body (it is read once). */\n\t#taken = false;\n\n\tconstructor(\n\t\tincoming: Incoming,\n\t\tadmitted: { readonly origin: string; readonly provenance: Provenance },\n\t\tnonce: string,\n\t) {\n\t\tthis.method = incoming.method;\n\t\t// The URL is parsed and serialized already (dot segments resolved, `\\` as `/`): only split it here.\n\t\tconst { path, search } = splitUrl(incoming.url);\n\t\tthis.path = path;\n\t\tthis.#search = search;\n\t\tthis.origin = admitted.origin;\n\t\tthis.provenance = admitted.provenance;\n\t\tthis.nonce = nonce;\n\t\tthis.#incoming = incoming;\n\t}\n\n\t/** The headers: on Chord's Node server the Web `Request` is made only when something reads them. */\n\tget headers(): Headers {\n\t\treturn this.#incoming.request().headers;\n\t}\n\n\tget query(): URLSearchParams {\n\t\tthis.#query ??= new URLSearchParams(this.#search);\n\t\treturn this.#query;\n\t}\n\n\tasync json(limit = DEFAULT_LIMIT): Promise<JsonValue> {\n\t\tconst chunks: Uint8Array[] = [];\n\t\tfor await (const chunk of this.body(limit)) chunks.push(chunk);\n\t\tconst text = Buffer.concat(chunks).toString(\"utf8\");\n\t\ttry {\n\t\t\treturn JSON.parse(text) as JsonValue;\n\t\t} catch {\n\t\t\tthrow new HttpFailure(400, \"the body is no JSON\");\n\t\t}\n\t}\n\n\tasync *body(limit = DEFAULT_LIMIT): AsyncIterable<Uint8Array> {\n\t\tif (this.#taken) throw new Error(\"request body: read twice\");\n\t\tthis.#taken = true;\n\t\tconst declared = Number(this.#incoming.header(\"content-length\") ?? Number.NaN);\n\t\tif (declared > limit) throw new HttpFailure(413, `the body is larger than ${limit} bytes`);\n\t\tconst stream = this.#incoming.request().body;\n\t\tif (stream === null) return;\n\t\tconst reader = stream.getReader();\n\t\tlet read = 0;\n\t\ttry {\n\t\t\tfor (;;) {\n\t\t\t\tlet next: Awaited<ReturnType<typeof reader.read>>;\n\t\t\t\ttry {\n\t\t\t\t\tnext = await reader.read();\n\t\t\t\t} catch {\n\t\t\t\t\t// A body cut short (a disconnect, a broken stream) is no body: a prefix must never parse as the\n\t\t\t\t\t// whole (Sol's recheck N4: valid JSON then an error ran the route).\n\t\t\t\t\tthrow new HttpFailure(400, \"the body could not be read whole\");\n\t\t\t\t}\n\t\t\t\tif (next.done) return;\n\t\t\t\tread += next.value.byteLength;\n\t\t\t\tif (read > limit) throw new HttpFailure(413, `the body is larger than ${limit} bytes`);\n\t\t\t\tyield next.value;\n\t\t\t}\n\t\t} finally {\n\t\t\t// Past the limit, or a reader that stopped early: the rest stays unread (its server closes the connection\n\t\t\t// after the response); a cancel could reset the connection before the response is written.\n\t\t\treader.releaseLock();\n\t\t}\n\t}\n}\n\n/** A serialized URL's path (from the first `/` after the authority) and query (without `?`, no fragment). */\nexport function splitUrl(url: string): { readonly path: string; readonly search: string } {\n\tconst authority = url.indexOf(\"//\") + 2;\n\tlet start = url.indexOf(\"/\", authority);\n\tlet end = url.indexOf(\"#\", authority);\n\tif (end < 0) end = url.length;\n\tconst mark = url.indexOf(\"?\", authority);\n\tif (start < 0 || (mark >= 0 && start > mark)) start = -1;\n\tconst pathEnd = mark >= 0 && mark < end ? mark : end;\n\treturn {\n\t\tpath: start < 0 ? \"/\" : url.slice(start, pathEnd),\n\t\tsearch: mark >= 0 && mark < end ? url.slice(mark + 1, end) : \"\",\n\t};\n}\n"]}

package/dist/next-node/http/response.d.ts

@@ -0,0 +1,63 @@
+import type { JsonValue } from "../../json.ts";
+import type { Ctx } from "../../next/host/index.ts";
+import type { AnswerHeaders } from "./headers.ts";
+/**
+ * A route's answer, as a description; `headers` replace same-named default ones (a route widens its own CSP); a list
+ * sends one line per value (several `Set-Cookie`).
+ */
+export type HttpResponse = {
+    readonly headers?: Readonly<Record<string, string | readonly string[]>>;
+} & ({
+    readonly kind: "json";
+    readonly value: JsonValue;
+    readonly status?: number;
+} | {
+    readonly kind: "html";
+    readonly body: string;
+    readonly status?: number;
+} | {
+    readonly kind: "bytes";
+    readonly mime: string;
+    /** The length: `Content-Length` and ranges; without it, read until `read` returns an empty chunk. */
+    readonly size?: number;
+    /** `length` bytes from `offset` (fewer only at the end of a body without `size`), in the request's scope. */
+    readonly read: (offset: number, length: number, ctx: Ctx) => Promise<Uint8Array>;
+    /** The file name it is saved under. */
+    readonly download?: string;
+    /** Shown in the browser instead of saved (an image, a video), with a `sandbox` CSP. */
+    readonly inline?: true;
+    /** Whether a single range is answered 206 (with `size`). */
+    readonly ranges?: boolean;
+} | {
+    readonly kind: "redirect";
+    readonly to: string;
+    readonly status?: 302 | 303 | 307;
+} | {
+    readonly kind: "error";
+    readonly status: number;
+    readonly message?: string;
+});
+/** What the component answers: a status, its headers, and a whole body, a pulled one, or none. */
+export type Answer = {
+    readonly status: number;
+    readonly headers: AnswerHeaders;
+    /** A whole body is its text (UTF-8): Node writes a string body in one write with the head. */
+    readonly body: string | ReadableStream<Uint8Array> | null;
+};
+/** A `bytes` body that could not be read whole (a throwing or a short `read`). */
+export declare class ResponseFailure extends Error {
+    constructor(message: string, options?: ErrorOptions);
+}
+/**
+ * The answer to `request` for `response` over `defaults` (which it changes): throws when a header is invalid (a CR or
+ * LF) or the value is no JSON. A `bytes` body that cannot be read whole is reported to `failed` (its stream errors).
+ */
+export declare function answerOf(response: HttpResponse, request: {
+    readonly method: string;
+    header(name: string): string | null;
+}, defaults: AnswerHeaders, ctx: Ctx, failed: (error: unknown) => void): Answer;
+/** The answer for an error `status` with its reason phrase (or `message`) as plain text. */
+export declare function errorAnswer(status: number, headers: AnswerHeaders, message?: string, head?: boolean): Answer;
+/** `answer` as a Web `Response`. */
+export declare function webResponse(answer: Answer): Response;
+//# sourceMappingURL=response.d.ts.map

package/dist/next-node/http/response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.d.ts","sourceRoot":"","sources":["../../../src/next-node/http/response.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,CAAC,CAAA;CAAE,GAAG,CACtG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1E;IACA,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qGAAqG;IACrG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,6GAA6G;IAC7G,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACjF,uCAAuC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,uFAAuF;IACvF,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;IACvB,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CACzB,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAA;CAAE,GACrF;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAChF,CAAC;AAEF,kGAAkG;AAClG,MAAM,MAAM,MAAM,GAAG;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,8FAA8F;IAC9F,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;CAC1D,CAAC;AAEF,kFAAkF;AAClF,qBAAa,eAAgB,SAAQ,KAAK;IACzC,YAAY,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,EAGlD;CACD;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CACvB,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;CAAE,EACzE,QAAQ,EAAE,aAAa,EACvB,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAC9B,MAAM,CAuBR;AAED,4FAA4F;AAC5F,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,UAAQ,GAAG,MAAM,CAE1G;AAED,oCAAoC;AACpC,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAKpD"}

package/dist/next-node/http/response.js

@@ -0,0 +1,202 @@
+// Responses (slice 10 §2, D5, R6; decision "The HTTP component's security baseline" (4), (6)): routes return
+// descriptions and the component turns them into an answer, a status, headers and a body: the default headers first,
+// the response's own replacing same-named ones (validated: a CR or LF throws), `json`, `html`, `redirect`, `error`,
+// and `bytes` read in 256 KiB pieces as the consumer pulls them (ranges 206/416, `HEAD`, an attachment unless inline,
+// safe download names; without a `size`, until an empty read).
+import { STATUS_CODES } from "node:http";
+/** A `bytes` body that could not be read whole (a throwing or a short `read`). */
+export class ResponseFailure extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "ResponseFailure";
+    }
+}
+/**
+ * The answer to `request` for `response` over `defaults` (which it changes): throws when a header is invalid (a CR or
+ * LF) or the value is no JSON. A `bytes` body that cannot be read whole is reported to `failed` (its stream errors).
+ */
+export function answerOf(response, request, defaults, ctx, failed) {
+    const headers = defaults;
+    for (const name in response.headers)
+        headers.set(name, response.headers[name]);
+    const head = request.method === "HEAD";
+    switch (response.kind) {
+        case "json":
+            return whole(response.status ?? 200, headers, "application/json; charset=utf-8", JSON.stringify(response.value), head);
+        case "html":
+            return whole(response.status ?? 200, headers, "text/html; charset=utf-8", response.body, head);
+        case "redirect":
+            headers.set("Location", response.to);
+            return whole(response.status ?? 302, headers, undefined, "", head);
+        case "error":
+            return errorAnswer(response.status, headers, response.message, head);
+        case "bytes":
+            return bytesAnswer(response, request, headers, ctx, failed);
+    }
+}
+/** The answer for an error `status` with its reason phrase (or `message`) as plain text. */
+export function errorAnswer(status, headers, message, head = false) {
+    return whole(status, headers, "text/plain; charset=utf-8", message ?? STATUS_CODES[status] ?? "", head);
+}
+/** `answer` as a Web `Response`. */
+export function webResponse(answer) {
+    // Bodies are bytes over plain `ArrayBuffer`s (never shared memory); the DOM types ask for exactly that.
+    const headers = new Headers();
+    for (const [name, value] of answer.headers.lines())
+        headers.append(name, value);
+    return new Response(answer.body, { status: answer.status, headers });
+}
+/**
+ * A whole body: `type` unless a header set one, and its length; none for `HEAD`, and neither for a status that
+ * carries no body (204, 205, 304: Sol's recheck N8, `Response` threw on them).
+ */
+function whole(status, headers, type, text, head) {
+    if (status < 200 || status > 599)
+        throw new RangeError(`response: status ${status}`);
+    if (BODYLESS.has(status)) {
+        headers.delete("Content-Type");
+        headers.delete("Content-Length");
+        return { status, headers, body: null };
+    }
+    if (type !== undefined && !headers.has("content-type"))
+        headers.set("Content-Type", type);
+    headers.set("Content-Length", String(Buffer.byteLength(text)));
+    return { status, headers, body: head || text === "" ? null : text };
+}
+/** The statuses whose responses carry no body. */
+const BODYLESS = new Set([204, 205, 304]);
+/** One `read` of a `bytes` body: 256 KiB. */
+const PIECE = 256 * 1024;
+/** A `bytes` answer: its range or all of it, or until an empty read without a `size`. */
+function bytesAnswer(response, request, headers, ctx, failed) {
+    if (!headers.has("content-type"))
+        headers.set("Content-Type", response.mime);
+    headers.set("Content-Disposition", disposition(response));
+    if (response.inline === true)
+        headers.set("Content-Security-Policy", `${headers.get("content-security-policy") ?? ""}; sandbox`);
+    const { size } = response;
+    let start = 0;
+    let length = size;
+    let status = 200;
+    if (size !== undefined && response.ranges === true) {
+        headers.set("Accept-Ranges", "bytes");
+        const range = rangeOf(request.header("range"), size);
+        if (range === "unsatisfiable") {
+            headers.set("Content-Range", `bytes */${size}`);
+            return whole(416, headers, undefined, "", true);
+        }
+        if (range !== undefined) {
+            ({ start, length } = range);
+            status = 206;
+            headers.set("Content-Range", `bytes ${start}-${start + range.length - 1}/${size}`);
+        }
+    }
+    if (length !== undefined)
+        headers.set("Content-Length", String(length));
+    if (request.method === "HEAD" || length === 0)
+        return { status, headers, body: null };
+    return { status, headers, body: pulled(response, start, length, ctx, failed) };
+}
+/**
+ * The body of a `bytes` response from `start`, `length` bytes (`undefined`: until an empty read), read one piece per
+ * pull, so the consumer's backpressure paces the reads; a `read` that throws or comes back short fails it. It follows
+ * the request's scope: once sealed (a disconnect, `close`) the stream errors, no read starts, a late one is dropped
+ * (Astra's recheck R2, Sol's N3: a held `Response` went on reading after the seal).
+ */
+function pulled(response, start, length, ctx, failed) {
+    const end = length === undefined ? Number.POSITIVE_INFINITY : start + length;
+    const signal = ctx.abortSignal;
+    let offset = start;
+    let sealed;
+    return new ReadableStream({
+        start: (controller) => {
+            if (signal === undefined)
+                return;
+            // Sealed before the stream exists (an abort while the route returned it): no event will come
+            // (Sol's third recheck: the request never finished, `close` waited its whole bound).
+            if (signal.aborted)
+                return controller.error(signal.reason);
+            sealed = () => controller.error(signal.reason);
+            signal.addEventListener("abort", sealed, { once: true });
+        },
+        pull: async (controller) => {
+            if (signal?.aborted)
+                return controller.error(signal.reason);
+            const want = Math.min(PIECE, end - offset);
+            let chunk;
+            try {
+                chunk = await response.read(offset, want, ctx);
+                if (length !== undefined && chunk.byteLength !== want) {
+                    throw new ResponseFailure(`bytes: read ${chunk.byteLength} of ${want} bytes at ${offset} (size ${response.size})`);
+                }
+            }
+            catch (error) {
+                // A read cut by the seal is no failure of the response.
+                if (signal?.aborted)
+                    return;
+                failed(error);
+                controller.error(error);
+                return;
+            }
+            // Sealed while reading: the stream errored already, the late chunk is dropped.
+            if (signal?.aborted)
+                return;
+            if (chunk.byteLength === 0 || offset + chunk.byteLength >= end) {
+                if (chunk.byteLength > 0)
+                    controller.enqueue(chunk);
+                if (sealed !== undefined)
+                    signal?.removeEventListener("abort", sealed);
+                controller.close();
+                return;
+            }
+            controller.enqueue(chunk);
+            offset += chunk.byteLength;
+        },
+        cancel: () => {
+            if (sealed !== undefined)
+                signal?.removeEventListener("abort", sealed);
+        },
+    }, { highWaterMark: 0 });
+}
+/**
+ * The single range `header` asks for within `size` bytes; `undefined` for none, a malformed or a multi-range one (the
+ * whole body); `unsatisfiable` for one starting at or past the end.
+ */
+function rangeOf(header, size) {
+    if (header === null)
+        return undefined;
+    const match = /^bytes=(\d*)-(\d*)$/.exec(header.trim());
+    if (match === null)
+        return undefined;
+    const [, from = "", to = ""] = match;
+    if (from === "" && to === "")
+        return undefined;
+    if (from === "") {
+        const suffix = Number(to);
+        if (suffix === 0 || size === 0)
+            return "unsatisfiable";
+        const length = Math.min(suffix, size);
+        return { start: size - length, length };
+    }
+    const start = Number(from);
+    if (start >= size)
+        return "unsatisfiable";
+    const last = to === "" ? size - 1 : Math.min(Number(to), size - 1);
+    if (last < start)
+        return undefined;
+    return { start, length: last - start + 1 };
+}
+/**
+ * `Content-Disposition`: `inline` or `attachment`, with the download name as an ASCII fallback and as UTF-8 (RFC 6266,
+ * RFC 5987), its control and bidirectional formatting characters dropped (a name must read as it is).
+ */
+function disposition(response) {
+    const kind = response.inline === true ? "inline" : "attachment";
+    if (response.download === undefined)
+        return kind;
+    const name = response.download.replace(/[\u0000-\u001f\u007f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/g, "");
+    const ascii = name.replace(/[^\x20-\x7e]|["\\]/g, "_");
+    const encoded = encodeURIComponent(name).replace(/['()*]/g, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`);
+    return `${kind}; filename="${ascii}"; filename*=UTF-8''${encoded}`;
+}
+//# sourceMappingURL=response.js.map

package/dist/next-node/http/response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.js","sourceRoot":"","sources":["../../../src/next-node/http/response.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,qHAAqH;AACrH,oHAAoH;AACpH,sHAAsH;AACtH,+DAA+D;AAE/D,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAsCzC,kFAAkF;AAClF,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACzC,YAAY,OAAe,EAAE,OAAsB;QAClD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAC/B,CAAC;CACD;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACvB,QAAsB,EACtB,OAAyE,EACzE,QAAuB,EACvB,GAAQ,EACR,MAAgC;IAEhC,MAAM,OAAO,GAAG,QAAQ,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IACvC,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM;YACV,OAAO,KAAK,CACX,QAAQ,CAAC,MAAM,IAAI,GAAG,EACtB,OAAO,EACP,iCAAiC,EACjC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC9B,IAAI,CACJ,CAAC;QACH,KAAK,MAAM;YACV,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChG,KAAK,UAAU;YACd,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACrC,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACpE,KAAK,OAAO;YACX,OAAO,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtE,KAAK,OAAO;YACX,OAAO,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;AACF,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,OAAsB,EAAE,OAAgB,EAAE,IAAI,GAAG,KAAK;IACjG,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,2BAA2B,EAAE,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;AACzG,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,WAAW,CAAC,MAAc;IACzC,wGAAwG;IACxG,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE;QAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChF,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAiD,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AACnH,CAAC;AAED;;;GAGG;AACH,SAAS,KAAK,CAAC,MAAc,EAAE,OAAsB,EAAE,IAAwB,EAAE,IAAY,EAAE,IAAa;IAC3G,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,MAAM,EAAE,CAAC,CAAC;IACrF,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACrE,CAAC;AAED,kDAAkD;AAClD,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE/D,6CAA6C;AAC7C,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC;AAEzB,yFAAyF;AACzF,SAAS,WAAW,CACnB,QAA2D,EAC3D,OAAyE,EACzE,OAAsB,EACtB,GAAQ,EACR,MAAgC;IAEhC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1D,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;QAC3B,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpG,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;IACF,CAAC;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;AAChF,CAAC;AAED;;;;;GAKG;AACH,SAAS,MAAM,CACd,QAA2D,EAC3D,KAAa,EACb,MAA0B,EAC1B,GAAQ,EACR,MAAgC;IAEhC,MAAM,GAAG,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC;IAC7E,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC;IAC/B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,MAAgC,CAAC;IACrC,OAAO,IAAI,cAAc,CACxB;QACC,KAAK,EAAE,CAAC,UAAU,EAAE,EAAE;YACrB,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO;YACjC,6FAA6F;YAC7F,qFAAqF;YACrF,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3D,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC1B,IAAI,MAAM,EAAE,OAAO;gBAAE,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC;YAC3C,IAAI,KAAiB,CAAC;YACtB,IAAI,CAAC;gBACJ,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/C,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;oBACvD,MAAM,IAAI,eAAe,CACxB,eAAe,KAAK,CAAC,UAAU,OAAO,IAAI,aAAa,MAAM,UAAU,QAAQ,CAAC,IAAI,GAAG,CACvF,CAAC;gBACH,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,wDAAwD;gBACxD,IAAI,MAAM,EAAE,OAAO;oBAAE,OAAO;gBAC5B,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACxB,OAAO;YACR,CAAC;YACD,+EAA+E;YAC/E,IAAI,MAAM,EAAE,OAAO;gBAAE,OAAO;YAC5B,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,IAAI,MAAM,GAAG,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;gBAChE,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC;oBAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpD,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACvE,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO;YACR,CAAC;YACD,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;QAC5B,CAAC;QACD,MAAM,EAAE,GAAG,EAAE;YACZ,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxE,CAAC;KACD,EACD,EAAE,aAAa,EAAE,CAAC,EAAE,CACpB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,OAAO,CAAC,MAAqB,EAAE,IAAY;IACnD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;IACrC,IAAI,IAAI,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,eAAe,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,eAAe,CAAC;IAC1C,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IACnE,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,SAAS,CAAC;IACnC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,QAAgE;IACpF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;IAChE,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,oEAAoE,EAAE,EAAE,CAAC,CAAC;IACjH,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,CAC/C,SAAS,EACT,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAC7D,CAAC;IACF,OAAO,GAAG,IAAI,eAAe,KAAK,uBAAuB,OAAO,EAAE,CAAC;AACpE,CAAC","sourcesContent":["// Responses (slice 10 §2, D5, R6; decision \"The HTTP component's security baseline\" (4), (6)): routes return\n// descriptions and the component turns them into an answer, a status, headers and a body: the default headers first,\n// the response's own replacing same-named ones (validated: a CR or LF throws), `json`, `html`, `redirect`, `error`,\n// and `bytes` read in 256 KiB pieces as the consumer pulls them (ranges 206/416, `HEAD`, an attachment unless inline,\n// safe download names; without a `size`, until an empty read).\n\nimport { STATUS_CODES } from \"node:http\";\nimport type { JsonValue } from \"../../json.ts\";\nimport type { Ctx } from \"../../next/host/index.ts\";\nimport type { AnswerHeaders } from \"./headers.ts\";\n\n/**\n * A route's answer, as a description; `headers` replace same-named default ones (a route widens its own CSP); a list\n * sends one line per value (several `Set-Cookie`).\n */\nexport type HttpResponse = { readonly headers?: Readonly<Record<string, string | readonly string[]>> } & (\n\t| { readonly kind: \"json\"; readonly value: JsonValue; readonly status?: number }\n\t| { readonly kind: \"html\"; readonly body: string; readonly status?: number }\n\t| {\n\t\t\treadonly kind: \"bytes\";\n\t\t\treadonly mime: string;\n\t\t\t/** The length: `Content-Length` and ranges; without it, read until `read` returns an empty chunk. */\n\t\t\treadonly size?: number;\n\t\t\t/** `length` bytes from `offset` (fewer only at the end of a body without `size`), in the request's scope. */\n\t\t\treadonly read: (offset: number, length: number, ctx: Ctx) => Promise<Uint8Array>;\n\t\t\t/** The file name it is saved under. */\n\t\t\treadonly download?: string;\n\t\t\t/** Shown in the browser instead of saved (an image, a video), with a `sandbox` CSP. */\n\t\t\treadonly inline?: true;\n\t\t\t/** Whether a single range is answered 206 (with `size`). */\n\t\t\treadonly ranges?: boolean;\n\t  }\n\t| { readonly kind: \"redirect\"; readonly to: string; readonly status?: 302 | 303 | 307 }\n\t| { readonly kind: \"error\"; readonly status: number; readonly message?: string }\n);\n\n/** What the component answers: a status, its headers, and a whole body, a pulled one, or none. */\nexport type Answer = {\n\treadonly status: number;\n\treadonly headers: AnswerHeaders;\n\t/** A whole body is its text (UTF-8): Node writes a string body in one write with the head. */\n\treadonly body: string | ReadableStream<Uint8Array> | null;\n};\n\n/** A `bytes` body that could not be read whole (a throwing or a short `read`). */\nexport class ResponseFailure extends Error {\n\tconstructor(message: string, options?: ErrorOptions) {\n\t\tsuper(message, options);\n\t\tthis.name = \"ResponseFailure\";\n\t}\n}\n\n/**\n * The answer to `request` for `response` over `defaults` (which it changes): throws when a header is invalid (a CR or\n * LF) or the value is no JSON. A `bytes` body that cannot be read whole is reported to `failed` (its stream errors).\n */\nexport function answerOf(\n\tresponse: HttpResponse,\n\trequest: { readonly method: string; header(name: string): string | null },\n\tdefaults: AnswerHeaders,\n\tctx: Ctx,\n\tfailed: (error: unknown) => void,\n): Answer {\n\tconst headers = defaults;\n\tfor (const name in response.headers) headers.set(name, response.headers[name]!);\n\tconst head = request.method === \"HEAD\";\n\tswitch (response.kind) {\n\t\tcase \"json\":\n\t\t\treturn whole(\n\t\t\t\tresponse.status ?? 200,\n\t\t\t\theaders,\n\t\t\t\t\"application/json; charset=utf-8\",\n\t\t\t\tJSON.stringify(response.value),\n\t\t\t\thead,\n\t\t\t);\n\t\tcase \"html\":\n\t\t\treturn whole(response.status ?? 200, headers, \"text/html; charset=utf-8\", response.body, head);\n\t\tcase \"redirect\":\n\t\t\theaders.set(\"Location\", response.to);\n\t\t\treturn whole(response.status ?? 302, headers, undefined, \"\", head);\n\t\tcase \"error\":\n\t\t\treturn errorAnswer(response.status, headers, response.message, head);\n\t\tcase \"bytes\":\n\t\t\treturn bytesAnswer(response, request, headers, ctx, failed);\n\t}\n}\n\n/** The answer for an error `status` with its reason phrase (or `message`) as plain text. */\nexport function errorAnswer(status: number, headers: AnswerHeaders, message?: string, head = false): Answer {\n\treturn whole(status, headers, \"text/plain; charset=utf-8\", message ?? STATUS_CODES[status] ?? \"\", head);\n}\n\n/** `answer` as a Web `Response`. */\nexport function webResponse(answer: Answer): Response {\n\t// Bodies are bytes over plain `ArrayBuffer`s (never shared memory); the DOM types ask for exactly that.\n\tconst headers = new Headers();\n\tfor (const [name, value] of answer.headers.lines()) headers.append(name, value);\n\treturn new Response(answer.body as ConstructorParameters<typeof Response>[0], { status: answer.status, headers });\n}\n\n/**\n * A whole body: `type` unless a header set one, and its length; none for `HEAD`, and neither for a status that\n * carries no body (204, 205, 304: Sol's recheck N8, `Response` threw on them).\n */\nfunction whole(status: number, headers: AnswerHeaders, type: string | undefined, text: string, head: boolean): Answer {\n\tif (status < 200 || status > 599) throw new RangeError(`response: status ${status}`);\n\tif (BODYLESS.has(status)) {\n\t\theaders.delete(\"Content-Type\");\n\t\theaders.delete(\"Content-Length\");\n\t\treturn { status, headers, body: null };\n\t}\n\tif (type !== undefined && !headers.has(\"content-type\")) headers.set(\"Content-Type\", type);\n\theaders.set(\"Content-Length\", String(Buffer.byteLength(text)));\n\treturn { status, headers, body: head || text === \"\" ? null : text };\n}\n\n/** The statuses whose responses carry no body. */\nconst BODYLESS: ReadonlySet<number> = new Set([204, 205, 304]);\n\n/** One `read` of a `bytes` body: 256 KiB. */\nconst PIECE = 256 * 1024;\n\n/** A `bytes` answer: its range or all of it, or until an empty read without a `size`. */\nfunction bytesAnswer(\n\tresponse: Extract<HttpResponse, { readonly kind: \"bytes\" }>,\n\trequest: { readonly method: string; header(name: string): string | null },\n\theaders: AnswerHeaders,\n\tctx: Ctx,\n\tfailed: (error: unknown) => void,\n): Answer {\n\tif (!headers.has(\"content-type\")) headers.set(\"Content-Type\", response.mime);\n\theaders.set(\"Content-Disposition\", disposition(response));\n\tif (response.inline === true)\n\t\theaders.set(\"Content-Security-Policy\", `${headers.get(\"content-security-policy\") ?? \"\"}; sandbox`);\n\tconst { size } = response;\n\tlet start = 0;\n\tlet length = size;\n\tlet status = 200;\n\tif (size !== undefined && response.ranges === true) {\n\t\theaders.set(\"Accept-Ranges\", \"bytes\");\n\t\tconst range = rangeOf(request.header(\"range\"), size);\n\t\tif (range === \"unsatisfiable\") {\n\t\t\theaders.set(\"Content-Range\", `bytes */${size}`);\n\t\t\treturn whole(416, headers, undefined, \"\", true);\n\t\t}\n\t\tif (range !== undefined) {\n\t\t\t({ start, length } = range);\n\t\t\tstatus = 206;\n\t\t\theaders.set(\"Content-Range\", `bytes ${start}-${start + range.length - 1}/${size}`);\n\t\t}\n\t}\n\tif (length !== undefined) headers.set(\"Content-Length\", String(length));\n\tif (request.method === \"HEAD\" || length === 0) return { status, headers, body: null };\n\treturn { status, headers, body: pulled(response, start, length, ctx, failed) };\n}\n\n/**\n * The body of a `bytes` response from `start`, `length` bytes (`undefined`: until an empty read), read one piece per\n * pull, so the consumer's backpressure paces the reads; a `read` that throws or comes back short fails it. It follows\n * the request's scope: once sealed (a disconnect, `close`) the stream errors, no read starts, a late one is dropped\n * (Astra's recheck R2, Sol's N3: a held `Response` went on reading after the seal).\n */\nfunction pulled(\n\tresponse: Extract<HttpResponse, { readonly kind: \"bytes\" }>,\n\tstart: number,\n\tlength: number | undefined,\n\tctx: Ctx,\n\tfailed: (error: unknown) => void,\n): ReadableStream<Uint8Array> {\n\tconst end = length === undefined ? Number.POSITIVE_INFINITY : start + length;\n\tconst signal = ctx.abortSignal;\n\tlet offset = start;\n\tlet sealed: (() => void) | undefined;\n\treturn new ReadableStream<Uint8Array>(\n\t\t{\n\t\t\tstart: (controller) => {\n\t\t\t\tif (signal === undefined) return;\n\t\t\t\t// Sealed before the stream exists (an abort while the route returned it): no event will come\n\t\t\t\t// (Sol's third recheck: the request never finished, `close` waited its whole bound).\n\t\t\t\tif (signal.aborted) return controller.error(signal.reason);\n\t\t\t\tsealed = () => controller.error(signal.reason);\n\t\t\t\tsignal.addEventListener(\"abort\", sealed, { once: true });\n\t\t\t},\n\t\t\tpull: async (controller) => {\n\t\t\t\tif (signal?.aborted) return controller.error(signal.reason);\n\t\t\t\tconst want = Math.min(PIECE, end - offset);\n\t\t\t\tlet chunk: Uint8Array;\n\t\t\t\ttry {\n\t\t\t\t\tchunk = await response.read(offset, want, ctx);\n\t\t\t\t\tif (length !== undefined && chunk.byteLength !== want) {\n\t\t\t\t\t\tthrow new ResponseFailure(\n\t\t\t\t\t\t\t`bytes: read ${chunk.byteLength} of ${want} bytes at ${offset} (size ${response.size})`,\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t} catch (error) {\n\t\t\t\t\t// A read cut by the seal is no failure of the response.\n\t\t\t\t\tif (signal?.aborted) return;\n\t\t\t\t\tfailed(error);\n\t\t\t\t\tcontroller.error(error);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\t// Sealed while reading: the stream errored already, the late chunk is dropped.\n\t\t\t\tif (signal?.aborted) return;\n\t\t\t\tif (chunk.byteLength === 0 || offset + chunk.byteLength >= end) {\n\t\t\t\t\tif (chunk.byteLength > 0) controller.enqueue(chunk);\n\t\t\t\t\tif (sealed !== undefined) signal?.removeEventListener(\"abort\", sealed);\n\t\t\t\t\tcontroller.close();\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tcontroller.enqueue(chunk);\n\t\t\t\toffset += chunk.byteLength;\n\t\t\t},\n\t\t\tcancel: () => {\n\t\t\t\tif (sealed !== undefined) signal?.removeEventListener(\"abort\", sealed);\n\t\t\t},\n\t\t},\n\t\t{ highWaterMark: 0 },\n\t);\n}\n\n/**\n * The single range `header` asks for within `size` bytes; `undefined` for none, a malformed or a multi-range one (the\n * whole body); `unsatisfiable` for one starting at or past the end.\n */\nfunction rangeOf(header: string | null, size: number): { start: number; length: number } | \"unsatisfiable\" | undefined {\n\tif (header === null) return undefined;\n\tconst match = /^bytes=(\\d*)-(\\d*)$/.exec(header.trim());\n\tif (match === null) return undefined;\n\tconst [, from = \"\", to = \"\"] = match;\n\tif (from === \"\" && to === \"\") return undefined;\n\tif (from === \"\") {\n\t\tconst suffix = Number(to);\n\t\tif (suffix === 0 || size === 0) return \"unsatisfiable\";\n\t\tconst length = Math.min(suffix, size);\n\t\treturn { start: size - length, length };\n\t}\n\tconst start = Number(from);\n\tif (start >= size) return \"unsatisfiable\";\n\tconst last = to === \"\" ? size - 1 : Math.min(Number(to), size - 1);\n\tif (last < start) return undefined;\n\treturn { start, length: last - start + 1 };\n}\n\n/**\n * `Content-Disposition`: `inline` or `attachment`, with the download name as an ASCII fallback and as UTF-8 (RFC 6266,\n * RFC 5987), its control and bidirectional formatting characters dropped (a name must read as it is).\n */\nfunction disposition(response: { readonly download?: string; readonly inline?: true }): string {\n\tconst kind = response.inline === true ? \"inline\" : \"attachment\";\n\tif (response.download === undefined) return kind;\n\tconst name = response.download.replace(/[\\u0000-\\u001f\\u007f\\u061c\\u200e\\u200f\\u202a-\\u202e\\u2066-\\u2069]/g, \"\");\n\tconst ascii = name.replace(/[^\\x20-\\x7e]|[\"\\\\]/g, \"_\");\n\tconst encoded = encodeURIComponent(name).replace(\n\t\t/['()*]/g,\n\t\t(char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`,\n\t);\n\treturn `${kind}; filename=\"${ascii}\"; filename*=UTF-8''${encoded}`;\n}\n"]}

package/dist/next-node/http/router.d.ts

@@ -0,0 +1,114 @@
+import type { WebSocket } from "ws";
+import type { Ctx } from "../../next/host/index.ts";
+import { type ComposeContext, type RegistryTable } from "../../next/registries/index.ts";
+import type { HttpRequest } from "./request.ts";
+import type { HttpResponse } from "./response.ts";
+/** A route: answers a request with a response description, in the request's scope (`ctx.principal`, its signal). */
+export type HttpRoute = (request: HttpRequest, ctx: Ctx) => Promise<HttpResponse>;
+/**
+ * A route with its options: `page` admits a top-level navigation from another site (a link to it) with its
+ * authentication; `crossSite` admits any foreign request (a webhook), always anonymous.
+ */
+export type HttpRouteOptions = {
+    readonly handler: HttpRoute;
+    readonly page?: true;
+    readonly crossSite?: true;
+};
+/** A wrap's phases, outermost first. */
+export type WrapPhase = "observe" | "headers" | "transform";
+/** A wrap (D2): runs around routes in its phase, around its own plugin's routes unless `scope` is `"all"`. */
+export type HttpWrap = {
+    readonly name: string;
+    readonly phase: WrapPhase;
+    /** `"own"` (default): around the contributing plugin's routes; `"all"`: every route. */
+    readonly scope?: "own" | "all";
+    /** Only around this route (`"GET /notes/:id"`); a route nobody contributes is a reported conflict. */
+    readonly route?: string;
+    readonly wrap: (request: HttpRequest, next: (request: HttpRequest) => Promise<HttpResponse>, ctx: Ctx) => Promise<HttpResponse>;
+};
+/**
+ * A plugin socket's handler (D6): a `ws` WebSocket after the checks and authentication, its `error` listener attached;
+ * its scope lasts until the socket closes.
+ */
+export type HttpSocket = (socket: WebSocketHandle, request: HttpRequest, ctx: Ctx) => void | Promise<void>;
+/** A plugin socket: `ws`'s WebSocket, for the plugin's own protocol. */
+export type WebSocketHandle = WebSocket;
+/**
+ * A relay (p2's Radius): a forwarder on loopback that sends forwarded headers. `verify` recognizes its requests (a
+ * secret header, a signature) and names the origin the request came from and the origin allowed to frame it.
+ */
+export type HttpRelay = {
+    readonly name: string;
+    readonly verify: (request: Request) => {
+        readonly origin: string;
+        readonly framer?: string;
+    } | undefined;
+};
+/** What a plugin contributes to `Http`: a plain value, or a writable of one (its change recomposes the router). */
+export type HttpContribution = {
+    /** Routes by `"METHOD /pattern"`: exact segments, `:name`, a trailing `/*`. */
+    readonly routes?: Readonly<Record<string, HttpRoute | HttpRouteOptions>>;
+    readonly wraps?: readonly HttpWrap[];
+    /** Plugin sockets by pattern (no method). */
+    readonly sockets?: Readonly<Record<string, HttpSocket>>;
+    /** The largest frame this contribution's sockets accept; 1 MiB by default. */
+    readonly maxPayload?: number;
+    /** Hosts allowed besides loopback, as the client names them (`notes.example.com`): requests through them are https. */
+    readonly hosts?: readonly string[];
+    /** Origins allowed to frame the app's pages (CSP `frame-ancestors`). */
+    readonly framers?: readonly string[];
+    /** Relays whose forwarded requests are admitted (verified) on loopback. */
+    readonly relays?: readonly HttpRelay[];
+    /** Extra CSP sources by directive (`{ "img-src": ["https://cdn.example.com"] }`). */
+    readonly csp?: Readonly<Record<string, readonly string[]>>;
+};
+/** The router a request uses: as it was when the request started. */
+export type Router = {
+    /** The route for `method` and `path`, with its params and wraps; `bad_path` for a malformed one. */
+    route(method: string, path: string): RouteMatch | "bad_path" | undefined;
+    /** The plugin socket for `path`. */
+    socket(path: string): SocketMatch | "bad_path" | undefined;
+    /** The hosts contributions allow (lowercased). */
+    readonly hosts: ReadonlySet<string>;
+    /** The origins allowed to frame pages. */
+    readonly framers: ReadonlySet<string>;
+    /** The relays, in contributor order. */
+    readonly relays: readonly HttpRelay[];
+    /** Extra CSP sources by directive. */
+    readonly csp: ReadonlyMap<string, readonly string[]>;
+    /** The socket handlers it serves: a socket handed out by one no longer here is closed. */
+    readonly socketHandlers: ReadonlySet<HttpSocket>;
+};
+/** A matched route: its pattern, plugin, params, handler, options and wraps (outermost first). */
+export type RouteMatch = {
+    readonly pattern: string;
+    readonly plugin: string;
+    readonly params: Readonly<Record<string, string>>;
+    readonly handler: HttpRoute;
+    readonly page: boolean;
+    readonly crossSite: boolean;
+    readonly wraps: readonly ResolvedWrap[];
+};
+/** A matched plugin socket. */
+export type SocketMatch = {
+    readonly pattern: string;
+    readonly plugin: string;
+    readonly params: Readonly<Record<string, string>>;
+    readonly handler: HttpSocket;
+    readonly maxPayload: number;
+};
+/** A wrap as a route runs it, with its plugin. */
+export type ResolvedWrap = {
+    readonly wrap: HttpWrap;
+    readonly plugin: string;
+};
+/** The registry the HTTP component defines and serves (`http.facet`, plugin `chord.http`). */
+export declare const Http: import("../../next/registries/registry.ts").Registry<HttpContribution, Router>;
+/**
+ * The methods a Web `Request` cannot carry (the Fetch standard's forbidden methods): answered 501 at the wire, a route
+ * for one refused at compose.
+ */
+export declare const UNCARRIED: ReadonlySet<string>;
+/** Builds the router from `table` (the registry's `compose`): pure, conflicts reported, the first by plugin name wins. */
+export declare function composeRouter(table: RegistryTable<HttpContribution>, { report }: ComposeContext): Router;
+//# sourceMappingURL=router.d.ts.map

package/dist/next-node/http/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../../src/next-node/http/router.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,KAAK,cAAc,EAAkB,KAAK,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACzG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,oHAAoH;AACpH,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;AAElF;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;CAC1B,CAAC;AAEF,wCAAwC;AACxC,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;AAE5D,8GAA8G;AAC9G,MAAM,MAAM,QAAQ,GAAG;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,wFAAwF;IACxF,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IAC/B,sGAAsG;IACtG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,CACd,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC,EACrD,GAAG,EAAE,GAAG,KACJ,OAAO,CAAC,YAAY,CAAC,CAAC;CAC3B,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE3G,wEAAwE;AACxE,MAAM,MAAM,eAAe,GAAG,SAAS,CAAC;AAExC;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;CACzG,CAAC;AAEF,mHAAmH;AACnH,MAAM,MAAM,gBAAgB,GAAG;IAC9B,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACrC,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IACxD,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,uHAAuH;IACvH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,wEAAwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACvC,qFAAqF;IACrF,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;CAC3D,CAAC;AAEF,qEAAqE;AACrE,MAAM,MAAM,MAAM,GAAG;IACpB,oGAAoG;IACpG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IACzE,oCAAoC;IACpC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3D,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC,wCAAwC;IACxC,QAAQ,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,CAAC;IACtC,sCAAsC;IACtC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;IACrD,0FAA0F;IAC1F,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;CACjD,CAAC;AAEF,kGAAkG;AAClG,MAAM,MAAM,UAAU,GAAG;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;CACxC,CAAC;AAEF,+BAA+B;AAC/B,MAAM,MAAM,WAAW,GAAG;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,kDAAkD;AAClD,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,8FAA8F;AAC9F,eAAO,MAAM,IAAI,gFAAyE,CAAC;AAK3F;;;GAGG;AACH,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,CAA0C,CAAC;AAErF,0HAA0H;AAC1H,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,cAAc,GAAG,MAAM,CA0ExG"}