@happyvertical/smrt-education 0.58.0 → 0.59.0

package/dist/chunks/course-bundle-zip-5KUe3C5H.js

@@ -0,0 +1,323 @@
+import { o as CourseAuthoringError } from "./course-authoring-contracts-C4Hqba-e.js";
+//#region src/course-bundle-contracts.ts
+var KiB = 1024;
+var MiB = 1024 * KiB;
+var COURSE_BUNDLE_LIMITS = Object.freeze({
+	maxArchiveBytes: 100 * MiB,
+	maxEntries: 200,
+	maxEntryBytes: 50 * MiB,
+	maxTotalBytes: 200 * MiB,
+	maxCompressionRatio: 100,
+	ratioFloorBytes: 64 * KiB,
+	maxPathBytes: 512,
+	maxSegmentBytes: 255,
+	maxPathDepth: 8,
+	maxManifestBytes: 256 * KiB,
+	maxLessons: 50,
+	maxLessonBodyChars: 1e5,
+	maxOfficeMembers: 50,
+	maxRenderedBytes: 50 * MiB,
+	conversionTimeoutMs: 6e4
+});
+var COURSE_BUNDLE_MAX_ARCHIVE_DEPTH = 1;
+var COURSE_BUNDLE_MANIFEST_VERSION = 1;
+var COURSE_BUNDLE_MANIFEST_VERSION_2 = 2;
+var COURSE_BUNDLE_MANIFEST_PATH = "manifest.json";
+function resolveCourseBundleLimits(override = {}) {
+	const out = { ...COURSE_BUNDLE_LIMITS };
+	for (const key of Object.keys(out)) {
+		const value = override[key];
+		if (value !== void 0 && Number.isSafeInteger(value) && value >= 1 && value <= COURSE_BUNDLE_LIMITS[key]) out[key] = value;
+	}
+	return out;
+}
+var CourseBundleRefusedError = class extends CourseAuthoringError {
+	constructor(reason, entry) {
+		super("course-bundle-refused", `Course bundle refused: ${reason}.`);
+		this.reason = reason;
+		this.entry = entry;
+	}
+	reason;
+	entry;
+};
+var CourseBundleNotFoundError = class extends CourseAuthoringError {
+	constructor() {
+		super("course-bundle-not-found", "Course bundle import was not found.");
+	}
+};
+var COURSE_BUNDLE_RETRYABLE_REASONS = /* @__PURE__ */ new Set([
+	"converter_unavailable",
+	"converter_failed",
+	"converter_timeout"
+]);
+var COURSE_BUNDLE_PAGE_ROLES = [
+	"exercise",
+	"example",
+	"instructions",
+	"cover",
+	"answer_key",
+	"mixed",
+	"unknown"
+];
+var COURSE_BUNDLE_STAGES = [
+	"unpack",
+	"classify",
+	"render",
+	"extract",
+	"propose"
+];
+//#endregion
+//#region src/course-bundle-zip.ts
+var SIG_EOCD = 101010256;
+var SIG_ZIP64_LOCATOR = 117853008;
+var SIG_CENTRAL = 33639248;
+var SIG_LOCAL = 67324752;
+var EOCD_SIZE = 22;
+var CENTRAL_SIZE = 46;
+var LOCAL_SIZE = 30;
+var MAX_COMMENT = 65535;
+function node() {
+	const get = typeof process !== "undefined" && process.getBuiltinModule;
+	if (!get) throw new Error("Course bundle import requires a Node server");
+	return {
+		zlib: get("node:zlib"),
+		crypto: get("node:crypto")
+	};
+}
+function sha256Hex(bytes) {
+	return node().crypto.createHash("sha256").update(bytes).digest("hex");
+}
+var crcTable;
+function crc32(bytes) {
+	if (!crcTable) {
+		crcTable = /* @__PURE__ */ new Uint32Array(256);
+		for (let n = 0; n < 256; n++) {
+			let c = n;
+			for (let k = 0; k < 8; k++) c = c & 1 ? 3988292384 ^ c >>> 1 : c >>> 1;
+			crcTable[n] = c >>> 0;
+		}
+	}
+	let crc = 4294967295;
+	for (let i = 0; i < bytes.length; i++) crc = crcTable[(crc ^ bytes[i]) & 255] ^ crc >>> 8;
+	return (crc ^ 4294967295) >>> 0;
+}
+var refuse = (reason, entry) => {
+	throw new CourseBundleRefusedError(reason, entry);
+};
+var FORBIDDEN = /[\u0000-\u001f\u007f-\u009f\u200b-\u200f\u2028-\u202e\u2066-\u2069\ufeff]/;
+function isWellFormedString(value) {
+	return !/[\ud800-\udbff](?![\udc00-\udfff])|(?<![\ud800-\udbff])[\udc00-\udfff]/.test(value);
+}
+function normalizeBundlePath(raw, limits = COURSE_BUNDLE_LIMITS) {
+	if (typeof raw !== "string" || raw.length === 0) return refuse("invalid_path");
+	if (!isWellFormedString(raw) || FORBIDDEN.test(raw)) return refuse("invalid_path");
+	const text = raw.replaceAll("\\", "/");
+	if (Buffer.byteLength(text) > limits.maxPathBytes || text.startsWith("/") || /^[A-Za-z]:/.test(text) || text.includes(":")) return refuse("invalid_path");
+	const directory = text.endsWith("/");
+	const segments = (directory ? text.slice(0, -1) : text).split("/");
+	for (const segment of segments) if (segment === "" || segment === "." || segment === ".." || Buffer.byteLength(segment) > limits.maxSegmentBytes) return refuse("invalid_path");
+	if (segments.length > limits.maxPathDepth) return refuse("path_too_deep");
+	return {
+		path: segments.join("/"),
+		directory
+	};
+}
+var bundleNameKey = (path) => path.normalize("NFC").toLowerCase();
+function findEndRecord(bytes, view) {
+	const low = Math.max(0, bytes.length - EOCD_SIZE - MAX_COMMENT);
+	const candidates = [];
+	for (let i = bytes.length - EOCD_SIZE; i >= low; i--) {
+		if (view.getUint32(i, true) !== SIG_EOCD) continue;
+		if (i + EOCD_SIZE + view.getUint16(i + 20, true) === bytes.length) candidates.push(i);
+	}
+	if (candidates.length === 0) return refuse(bytes.length >= 4 && view.getUint32(0, true) === SIG_LOCAL ? "truncated" : "not_a_zip");
+	if (candidates.length > 1) return refuse("ambiguous_end_record");
+	return candidates[0];
+}
+function readZipArchive(input, limits = COURSE_BUNDLE_LIMITS, onProgress) {
+	if (!(input instanceof Uint8Array)) return refuse("not_a_zip");
+	if (input.length > limits.maxArchiveBytes) return refuse("archive_too_large");
+	if (input.length < EOCD_SIZE) return refuse("not_a_zip");
+	const bytes = input;
+	const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+	const eocd = findEndRecord(bytes, view);
+	if (eocd >= 20 && view.getUint32(eocd - 20, true) === SIG_ZIP64_LOCATOR) return refuse("zip64_unsupported");
+	const disk = view.getUint16(eocd + 4, true);
+	const cdDisk = view.getUint16(eocd + 6, true);
+	const entriesDisk = view.getUint16(eocd + 8, true);
+	const entries = view.getUint16(eocd + 10, true);
+	const cdSize = view.getUint32(eocd + 12, true);
+	const cdOffset = view.getUint32(eocd + 16, true);
+	if (entries === 65535 || cdSize === 4294967295 || cdOffset === 4294967295) return refuse("zip64_unsupported");
+	if (disk !== 0 || cdDisk !== 0 || entriesDisk !== entries) return refuse("multi_disk");
+	if (entries === 0) return refuse("empty_bundle");
+	if (entries > limits.maxEntries) return refuse("too_many_entries");
+	if (cdSize < entries * CENTRAL_SIZE || cdOffset + cdSize !== eocd) return refuse("invalid_central_directory");
+	const decoder = new TextDecoder("utf-8", { fatal: true });
+	const central = [];
+	const names = /* @__PURE__ */ new Set();
+	let at = cdOffset;
+	for (let n = 0; n < entries; n++) {
+		if (at + CENTRAL_SIZE > eocd || view.getUint32(at, true) !== SIG_CENTRAL) return refuse("invalid_central_directory");
+		const madeBy = view.getUint16(at + 4, true);
+		const flags = view.getUint16(at + 8, true);
+		const method = view.getUint16(at + 10, true);
+		const crc = view.getUint32(at + 16, true);
+		const compressed = view.getUint32(at + 20, true);
+		const size = view.getUint32(at + 24, true);
+		const nameLength = view.getUint16(at + 28, true);
+		const extraLength = view.getUint16(at + 30, true);
+		const commentLength = view.getUint16(at + 32, true);
+		const diskStart = view.getUint16(at + 34, true);
+		const external = view.getUint32(at + 38, true);
+		const localOffset = view.getUint32(at + 42, true);
+		const next = at + CENTRAL_SIZE + nameLength + extraLength + commentLength;
+		if (next > eocd) return refuse("invalid_central_directory");
+		const rawName = bytes.subarray(at + CENTRAL_SIZE, at + CENTRAL_SIZE + nameLength);
+		let decoded;
+		try {
+			decoded = decoder.decode(rawName);
+		} catch {
+			return refuse("invalid_path");
+		}
+		const { path, directory } = normalizeBundlePath(decoded, limits);
+		if (flags & 8257 || method === 99) return refuse("encrypted_entry", path);
+		if (method !== 0 && method !== 8) return refuse("unsupported_method", path);
+		if (compressed === 4294967295 || size === 4294967295 || localOffset === 4294967295) return refuse("zip64_unsupported", path);
+		if (diskStart !== 0) return refuse("multi_disk", path);
+		if (madeBy >>> 8 === 3) {
+			const type = external >>> 16 & 61440;
+			if (type === 40960) return refuse("symlink_entry", path);
+			if (type !== 0 && type !== 32768 && type !== 16384) return refuse("special_entry", path);
+		} else if (external & 1024) return refuse("symlink_entry", path);
+		if (directory && (size !== 0 || compressed > 2)) return refuse("invalid_entry", path);
+		const key = bundleNameKey(path);
+		if (names.has(key)) return refuse("duplicate_name", path);
+		names.add(key);
+		if (method === 0 && compressed !== size) return refuse("size_mismatch", path);
+		if (size > limits.ratioFloorBytes && method === 8 && (compressed === 0 || size / compressed > limits.maxCompressionRatio)) return refuse("compression_ratio", path);
+		central.push({
+			name: path,
+			rawName,
+			method,
+			crc,
+			compressed,
+			size,
+			localOffset,
+			directory
+		});
+		at = next;
+	}
+	if (at !== eocd) return refuse("invalid_central_directory");
+	const located = [];
+	const ranges = [];
+	for (const entry of central) {
+		if (entry.directory) continue;
+		if (entry.localOffset + LOCAL_SIZE > cdOffset) return refuse("entry_out_of_range", entry.name);
+		if (view.getUint32(entry.localOffset, true) !== SIG_LOCAL) return refuse("local_header_mismatch", entry.name);
+		if (view.getUint16(entry.localOffset + 6, true) & 8257) return refuse("encrypted_entry", entry.name);
+		if (view.getUint16(entry.localOffset + 8, true) !== entry.method) return refuse("local_header_mismatch", entry.name);
+		const nameLength = view.getUint16(entry.localOffset + 26, true);
+		const extraLength = view.getUint16(entry.localOffset + 28, true);
+		const start = entry.localOffset + LOCAL_SIZE + nameLength + extraLength;
+		const end = start + entry.compressed;
+		if (end > cdOffset) return refuse("entry_out_of_range", entry.name);
+		const local = bytes.subarray(entry.localOffset + LOCAL_SIZE, entry.localOffset + LOCAL_SIZE + nameLength);
+		if (local.length !== entry.rawName.length || !local.every((b, i) => b === entry.rawName[i])) return refuse("local_header_mismatch", entry.name);
+		located.push({
+			...entry,
+			start,
+			end
+		});
+		ranges.push([
+			entry.localOffset,
+			end,
+			entry.name
+		]);
+	}
+	ranges.sort((a, b) => a[0] - b[0]);
+	for (let i = 1; i < ranges.length; i++) if (ranges[i][0] < ranges[i - 1][1]) return refuse("overlapping_entries", ranges[i][2]);
+	let declared = 0;
+	for (const entry of located) if (entry.size <= limits.maxEntryBytes) declared += entry.size;
+	if (declared > limits.maxTotalBytes) return refuse("total_too_large");
+	const { zlib } = node();
+	const out = [];
+	let total = 0;
+	onProgress?.(0, located.length);
+	for (const entry of [...located].sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0)) {
+		if (entry.size > limits.maxEntryBytes) {
+			out.push({
+				path: entry.name,
+				size: entry.size,
+				bytes: null,
+				sha256: null,
+				refusal: "entry_too_large"
+			});
+			onProgress?.(out.length, located.length);
+			continue;
+		}
+		const data = bytes.subarray(entry.start, entry.end);
+		let inflated;
+		if (entry.method === 0) inflated = Buffer.from(data);
+		else try {
+			inflated = zlib.inflateRawSync(data, { maxOutputLength: Math.max(entry.size, 1) });
+		} catch (error) {
+			return refuse(error.code === "ERR_BUFFER_TOO_LARGE" ? "size_mismatch" : "inflate_failed", entry.name);
+		}
+		if (inflated.length !== entry.size) return refuse("size_mismatch", entry.name);
+		if (crc32(inflated) !== entry.crc) return refuse("bad_crc", entry.name);
+		total += inflated.length;
+		if (total > limits.maxTotalBytes) return refuse("total_too_large");
+		out.push({
+			path: entry.name,
+			size: inflated.length,
+			bytes: inflated,
+			sha256: sha256Hex(inflated),
+			refusal: null
+		});
+		onProgress?.(out.length, located.length);
+	}
+	return out;
+}
+function readFileSet(files, limits = COURSE_BUNDLE_LIMITS, onProgress) {
+	if (!Array.isArray(files) || files.length === 0) return refuse("empty_bundle");
+	if (files.length > limits.maxEntries) return refuse("too_many_entries");
+	const names = /* @__PURE__ */ new Set();
+	const out = [];
+	let total = 0;
+	let memberTotal = 0;
+	onProgress?.(0, files.length);
+	for (const file of files) {
+		const { path, directory } = normalizeBundlePath(file?.path, limits);
+		if (directory || !(file.bytes instanceof Uint8Array)) return refuse("invalid_entry", path);
+		const key = bundleNameKey(path);
+		if (names.has(key)) return refuse("duplicate_name", path);
+		names.add(key);
+		total += file.bytes.length;
+		if (total > limits.maxArchiveBytes) return refuse("archive_too_large");
+		if (file.bytes.length > limits.maxEntryBytes) out.push({
+			path,
+			size: file.bytes.length,
+			bytes: null,
+			sha256: null,
+			refusal: "entry_too_large"
+		});
+		else {
+			memberTotal += file.bytes.length;
+			if (memberTotal > limits.maxTotalBytes) return refuse("total_too_large");
+			out.push({
+				path,
+				size: file.bytes.length,
+				bytes: file.bytes,
+				sha256: sha256Hex(file.bytes),
+				refusal: null
+			});
+		}
+		onProgress?.(out.length, files.length);
+	}
+	return out.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+}
+//#endregion
+export { resolveCourseBundleLimits as _, readZipArchive as a, COURSE_BUNDLE_MANIFEST_PATH as c, COURSE_BUNDLE_MAX_ARCHIVE_DEPTH as d, COURSE_BUNDLE_PAGE_ROLES as f, CourseBundleRefusedError as g, CourseBundleNotFoundError as h, readFileSet as i, COURSE_BUNDLE_MANIFEST_VERSION as l, COURSE_BUNDLE_STAGES as m, isWellFormedString as n, sha256Hex as o, COURSE_BUNDLE_RETRYABLE_REASONS as p, normalizeBundlePath as r, COURSE_BUNDLE_LIMITS as s, crc32 as t, COURSE_BUNDLE_MANIFEST_VERSION_2 as u };
+
+//# sourceMappingURL=course-bundle-zip-5KUe3C5H.js.map

package/dist/chunks/course-bundle-zip-5KUe3C5H.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"course-bundle-zip-5KUe3C5H.js","names":[],"sources":["../../src/course-bundle-contracts.ts","../../src/course-bundle-zip.ts"],"sourcesContent":["import { CourseAuthoringError } from './course-authoring-contracts.js';\n\nconst KiB = 1024;\nconst MiB = 1024 * KiB;\n\n/**\n * Hard ceilings for untrusted course bundles (SMRT #4578). A host may lower any\n * of them per call (`resolveCourseBundleLimits`) but never raise them. Declared\n * sizes in an archive are never trusted: every cap is enforced on the bytes\n * actually produced.\n */\nexport interface CourseBundleLimits {\n  /** Largest accepted archive (or total input of a plain file set), in bytes. */\n  maxArchiveBytes: number;\n  /** Most entries (files and directories) in one archive or file set. */\n  maxEntries: number;\n  /** Largest single inflated member. A larger honest member is recorded refused. */\n  maxEntryBytes: number;\n  /** Largest sum of inflated members. */\n  maxTotalBytes: number;\n  /** Largest inflated/compressed ratio for a member above `ratioFloorBytes`. */\n  maxCompressionRatio: number;\n  /** Members at or below this inflated size skip the ratio check. */\n  ratioFloorBytes: number;\n  /** Longest normalised path, in UTF-8 bytes. */\n  maxPathBytes: number;\n  /** Longest path segment, in UTF-8 bytes. */\n  maxSegmentBytes: number;\n  /** Deepest directory path (segments, including the file name). */\n  maxPathDepth: number;\n  /** Largest `manifest.json`. */\n  maxManifestBytes: number;\n  /** Most lessons one bundle may propose (matches the proposal schema). */\n  maxLessons: number;\n  /** Longest text member used as a lesson body, in characters. */\n  maxLessonBodyChars: number;\n  /** Most Word/PowerPoint members rendered per bundle; later ones are recorded unsupported. */\n  maxOfficeMembers: number;\n  /** Largest rendered PDF accepted back from the converter, in bytes. */\n  maxRenderedBytes: number;\n  /** Wall-clock budget for rendering one Office member, in milliseconds. */\n  conversionTimeoutMs: number;\n}\n\nexport const COURSE_BUNDLE_LIMITS: Readonly<CourseBundleLimits> = Object.freeze(\n  {\n    maxArchiveBytes: 100 * MiB,\n    maxEntries: 200,\n    maxEntryBytes: 50 * MiB,\n    maxTotalBytes: 200 * MiB,\n    maxCompressionRatio: 100,\n    ratioFloorBytes: 64 * KiB,\n    maxPathBytes: 512,\n    maxSegmentBytes: 255,\n    maxPathDepth: 8,\n    maxManifestBytes: 256 * KiB,\n    maxLessons: 50,\n    maxLessonBodyChars: 100_000,\n    maxOfficeMembers: 50,\n    maxRenderedBytes: 50 * MiB,\n    conversionTimeoutMs: 60_000,\n  },\n);\n\n/** Nested archives are never expanded: depth is one, and a zip member is unsupported evidence. */\nexport const COURSE_BUNDLE_MAX_ARCHIVE_DEPTH = 1;\n/** The original manifest schema version (page roles, no materials). */\nexport const COURSE_BUNDLE_MANIFEST_VERSION = 1;\n/** Manifest version 2: material roles and audience, lesson pages, course members, videos. */\nexport const COURSE_BUNDLE_MANIFEST_VERSION_2 = 2;\n/** Manifest location: the archive (or file set) root. */\nexport const COURSE_BUNDLE_MANIFEST_PATH = 'manifest.json';\n\n/** Clamp a host override to the hard ceilings; invalid values fall back to the ceiling. */\nexport function resolveCourseBundleLimits(\n  override: Partial<CourseBundleLimits> = {},\n): CourseBundleLimits {\n  const out = { ...COURSE_BUNDLE_LIMITS };\n  for (const key of Object.keys(out) as Array<keyof CourseBundleLimits>) {\n    const value = override[key];\n    if (\n      value !== undefined &&\n      Number.isSafeInteger(value) &&\n      value >= 1 &&\n      value <= COURSE_BUNDLE_LIMITS[key]\n    )\n      out[key] = value;\n  }\n  return out;\n}\n\nexport type CourseBundleRefusalReason =\n  | 'archive_too_large'\n  | 'not_a_zip'\n  | 'truncated'\n  | 'ambiguous_end_record'\n  | 'zip64_unsupported'\n  | 'multi_disk'\n  | 'too_many_entries'\n  | 'invalid_central_directory'\n  | 'invalid_entry'\n  | 'unsupported_method'\n  | 'encrypted_entry'\n  | 'symlink_entry'\n  | 'special_entry'\n  | 'invalid_path'\n  | 'path_too_deep'\n  | 'duplicate_name'\n  | 'entry_out_of_range'\n  | 'overlapping_entries'\n  | 'local_header_mismatch'\n  | 'compression_ratio'\n  | 'total_too_large'\n  | 'size_mismatch'\n  | 'bad_crc'\n  | 'inflate_failed'\n  | 'empty_bundle'\n  | 'manifest_invalid'\n  | 'manifest_version'\n  | 'manifest_unknown_key'\n  /** v2: a member role that is not a material role. */\n  | 'manifest_role'\n  /** v2: a learner audience on a guardian-only role, or an unknown audience. */\n  | 'manifest_audience'\n  /** v2: a page range that is malformed or names a member that cannot be paged. */\n  | 'manifest_pages'\n  /** v2: a video reference that is not an allowlisted YouTube id or URL. */\n  | 'manifest_video'\n  | 'manifest_missing_member'\n  | 'manifest_duplicate_member'\n  | 'duplicate_key'\n  | 'too_many_lessons'\n  | 'lesson_too_large';\n\n/**\n * The whole bundle is refused: it is hostile, damaged or outside the contract.\n * `reason` is stable; `entry` names the offending member path when one applies\n * (untrusted text, never rendered as markup).\n */\nexport class CourseBundleRefusedError extends CourseAuthoringError {\n  constructor(\n    readonly reason: CourseBundleRefusalReason,\n    readonly entry?: string,\n  ) {\n    super('course-bundle-refused', `Course bundle refused: ${reason}.`);\n  }\n}\nexport class CourseBundleNotFoundError extends CourseAuthoringError {\n  constructor() {\n    super('course-bundle-not-found', 'Course bundle import was not found.');\n  }\n}\n\n/** What the bytes of a bundle member turned out to be (by content, never by name alone). */\nexport type CourseBundleMemberKind =\n  | 'pdf'\n  | 'image'\n  | 'text'\n  /** Word (`.docx`): rendered to PDF by the converter, text read by the SDK processor. */\n  | 'docx'\n  /** PowerPoint (`.pptx`): the deck is kept as the original and as rendered pages. */\n  | 'pptx'\n  /** Excel (`.xlsx`): rendered to PDF by the converter; no text reader. */\n  | 'xlsx'\n  | 'manifest'\n  | 'unsupported';\nexport type CourseBundleMemberStatus =\n  /** Supported, unique content: handed to extraction and eligible for a lesson. */\n  | 'accepted'\n  /** Identical bytes to an earlier accepted member: evidence only, never extracted twice. */\n  | 'duplicate'\n  /** Visible but not understood (unknown type, nested archive, unreadable text). */\n  | 'unsupported'\n  /** Understood and refused (encrypted PDF, oversize member). */\n  | 'refused'\n  /** The bundle manifest itself. */\n  | 'metadata';\nexport type CourseBundleMemberReason =\n  | 'unsupported_type'\n  | 'nested_archive'\n  | 'unreadable_text'\n  | 'encrypted_pdf'\n  | 'entry_too_large'\n  | 'duplicate_content'\n  /** The OOXML package failed the bounded zip checks (bomb, bad paths, damaged). */\n  | 'unsafe_office'\n  /** More Office members than `maxOfficeMembers`. */\n  | 'office_limit'\n  /** No `DocumentConverter` is configured: the member cannot be rendered. */\n  | 'converter_unavailable'\n  /** The converter could not be reached or failed (server side). */\n  | 'converter_failed'\n  | 'converter_timeout'\n  | 'converter_too_large'\n  /** The converter refused the file, or returned something that is not a PDF. */\n  | 'converter_rejected';\n\n/**\n * Converter outcomes that a deliberate retry may repair. A bundle that was\n * never rendered or whose converter was unreachable can be rendered later;\n * a file the converter rejected, or a limit, cannot be fixed by asking again.\n */\nexport const COURSE_BUNDLE_RETRYABLE_REASONS: ReadonlySet<CourseBundleMemberReason> =\n  new Set(['converter_unavailable', 'converter_failed', 'converter_timeout']);\n\nexport const COURSE_BUNDLE_PAGE_ROLES = [\n  'exercise',\n  'example',\n  'instructions',\n  'cover',\n  'answer_key',\n  'mixed',\n  'unknown',\n] as const;\nexport type CourseBundlePageRole = (typeof COURSE_BUNDLE_PAGE_ROLES)[number];\n\n/** Named progress stages, in order. */\nexport const COURSE_BUNDLE_STAGES = [\n  'unpack',\n  'classify',\n  'render',\n  'extract',\n  'propose',\n] as const;\nexport type CourseBundleStage = (typeof COURSE_BUNDLE_STAGES)[number];\n/** One progress event. A stage emits `completed: 0` first and `completed === total` last. */\nexport interface CourseBundleProgress {\n  stage: CourseBundleStage;\n  completed: number;\n  total: number;\n}\n/** Observer only: a throwing listener never changes the import. */\nexport type CourseBundleProgressListener = (\n  event: CourseBundleProgress,\n) => void;\n\n/** A bundle supplied as one zip archive or as a plain set of files. */\nexport type CourseBundleInput =\n  | { archive: Uint8Array }\n  | { files: ReadonlyArray<{ path: string; bytes: Uint8Array }> };\n","/**\n * Bounded zip reader for untrusted course bundles (SMRT #4578). Reads the End\n * Of Central Directory and central directory, validates every offset and size\n * against the real buffer, inflates with a hard output cap and checks CRC32.\n * Stored and deflate only; zip64, multi-disk, encryption and symlinks are\n * refused with typed reasons. Nothing here touches the filesystem.\n */\nimport {\n  COURSE_BUNDLE_LIMITS,\n  type CourseBundleLimits,\n  type CourseBundleRefusalReason,\n  CourseBundleRefusedError,\n} from './course-bundle-contracts.js';\n\nconst SIG_EOCD = 0x06054b50;\nconst SIG_ZIP64_LOCATOR = 0x07064b50;\nconst SIG_CENTRAL = 0x02014b50;\nconst SIG_LOCAL = 0x04034b50;\nconst EOCD_SIZE = 22;\nconst CENTRAL_SIZE = 46;\nconst LOCAL_SIZE = 30;\nconst MAX_COMMENT = 0xffff;\n\n/** One member read from an archive or file set, before classification. */\nexport interface RawBundleMember {\n  /** Normalised, validated path. */\n  path: string;\n  size: number;\n  /** Null only when the member was refused as oversize and never inflated. */\n  bytes: Uint8Array | null;\n  sha256: string | null;\n  /** Set when the member was understood but not inflated. */\n  refusal: 'entry_too_large' | null;\n}\n\nfunction node() {\n  const get = (typeof process !== 'undefined' && process.getBuiltinModule) as\n    | ((id: string) => unknown)\n    | false;\n  if (!get) throw new Error('Course bundle import requires a Node server');\n  return {\n    zlib: get('node:zlib') as typeof import('node:zlib'),\n    crypto: get('node:crypto') as typeof import('node:crypto'),\n  };\n}\n\nexport function sha256Hex(bytes: Uint8Array | string): string {\n  return node().crypto.createHash('sha256').update(bytes).digest('hex');\n}\n\nlet crcTable: Uint32Array | undefined;\nexport function crc32(bytes: Uint8Array): number {\n  if (!crcTable) {\n    crcTable = new Uint32Array(256);\n    for (let n = 0; n < 256; n++) {\n      let c = n;\n      for (let k = 0; k < 8; k++) c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1;\n      crcTable[n] = c >>> 0;\n    }\n  }\n  let crc = 0xffffffff;\n  for (let i = 0; i < bytes.length; i++)\n    crc = (crcTable[(crc ^ bytes[i]) & 0xff] as number) ^ (crc >>> 8);\n  return (crc ^ 0xffffffff) >>> 0;\n}\n\nconst refuse = (reason: CourseBundleRefusalReason, entry?: string): never => {\n  throw new CourseBundleRefusedError(reason, entry);\n};\n\nconst FORBIDDEN =\n  // biome-ignore lint/suspicious/noControlCharactersInRegex: refusing control characters in names\n  /[\\u0000-\\u001f\\u007f-\\u009f\\u200b-\\u200f\\u2028-\\u202e\\u2066-\\u2069\\ufeff]/;\n/** True when the string has no lone UTF-16 surrogates. */\nexport function isWellFormedString(value: string): boolean {\n  return !/[\\ud800-\\udbff](?![\\udc00-\\udfff])|(?<![\\ud800-\\udbff])[\\udc00-\\udfff]/.test(\n    value,\n  );\n}\n\n/**\n * Normalise and validate an entry or file name. Backslashes become `/`; empty,\n * `.` and `..` segments, absolute and drive-letter paths, `:` anywhere, NUL and\n * other control or bidi characters, over-long or over-deep paths are refused.\n * A trailing `/` (directory) is stripped and reported.\n */\nexport function normalizeBundlePath(\n  raw: unknown,\n  limits: CourseBundleLimits = COURSE_BUNDLE_LIMITS,\n): { path: string; directory: boolean } {\n  if (typeof raw !== 'string' || raw.length === 0)\n    return refuse('invalid_path');\n  if (!isWellFormedString(raw) || FORBIDDEN.test(raw))\n    return refuse('invalid_path');\n  const text = raw.replaceAll('\\\\', '/');\n  if (\n    Buffer.byteLength(text) > limits.maxPathBytes ||\n    text.startsWith('/') ||\n    /^[A-Za-z]:/.test(text) ||\n    text.includes(':')\n  )\n    return refuse('invalid_path');\n  const directory = text.endsWith('/');\n  const segments = (directory ? text.slice(0, -1) : text).split('/');\n  for (const segment of segments)\n    if (\n      segment === '' ||\n      segment === '.' ||\n      segment === '..' ||\n      Buffer.byteLength(segment) > limits.maxSegmentBytes\n    )\n      return refuse('invalid_path');\n  if (segments.length > limits.maxPathDepth) return refuse('path_too_deep');\n  return { path: segments.join('/'), directory };\n}\n\n/** Case- and normalisation-insensitive identity used to refuse colliding names. */\nexport const bundleNameKey = (path: string) =>\n  path.normalize('NFC').toLowerCase();\n\ninterface CentralEntry {\n  name: string;\n  rawName: Uint8Array;\n  method: number;\n  crc: number;\n  compressed: number;\n  size: number;\n  localOffset: number;\n  directory: boolean;\n}\n\nfunction findEndRecord(bytes: Uint8Array, view: DataView): number {\n  const low = Math.max(0, bytes.length - EOCD_SIZE - MAX_COMMENT);\n  const candidates: number[] = [];\n  for (let i = bytes.length - EOCD_SIZE; i >= low; i--) {\n    if (view.getUint32(i, true) !== SIG_EOCD) continue;\n    // The comment must run exactly to the end of the file, so a record forged\n    // inside a comment can only count if it also fits; two fits are ambiguous.\n    if (i + EOCD_SIZE + view.getUint16(i + 20, true) === bytes.length)\n      candidates.push(i);\n  }\n  if (candidates.length === 0)\n    return refuse(\n      bytes.length >= 4 && view.getUint32(0, true) === SIG_LOCAL\n        ? 'truncated'\n        : 'not_a_zip',\n    );\n  if (candidates.length > 1) return refuse('ambiguous_end_record');\n  return candidates[0] as number;\n}\n\n/**\n * Read every member of a zip archive. Throws `CourseBundleRefusedError` for a\n * hostile or damaged archive. A member whose honest declared size exceeds\n * `maxEntryBytes` is returned `entry_too_large` (visible, never inflated);\n * every other violation refuses the whole archive.\n */\nexport function readZipArchive(\n  input: Uint8Array,\n  limits: CourseBundleLimits = COURSE_BUNDLE_LIMITS,\n  onProgress?: (completed: number, total: number) => void,\n): RawBundleMember[] {\n  if (!(input instanceof Uint8Array)) return refuse('not_a_zip');\n  if (input.length > limits.maxArchiveBytes) return refuse('archive_too_large');\n  if (input.length < EOCD_SIZE) return refuse('not_a_zip');\n  const bytes = input;\n  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);\n  const eocd = findEndRecord(bytes, view);\n  if (eocd >= 20 && view.getUint32(eocd - 20, true) === SIG_ZIP64_LOCATOR)\n    return refuse('zip64_unsupported');\n  const disk = view.getUint16(eocd + 4, true);\n  const cdDisk = view.getUint16(eocd + 6, true);\n  const entriesDisk = view.getUint16(eocd + 8, true);\n  const entries = view.getUint16(eocd + 10, true);\n  const cdSize = view.getUint32(eocd + 12, true);\n  const cdOffset = view.getUint32(eocd + 16, true);\n  if (entries === 0xffff || cdSize === 0xffffffff || cdOffset === 0xffffffff)\n    return refuse('zip64_unsupported');\n  if (disk !== 0 || cdDisk !== 0 || entriesDisk !== entries)\n    return refuse('multi_disk');\n  if (entries === 0) return refuse('empty_bundle');\n  if (entries > limits.maxEntries) return refuse('too_many_entries');\n  if (\n    cdSize < entries * CENTRAL_SIZE ||\n    cdOffset + cdSize !== eocd // central directory must end exactly at the end record\n  )\n    return refuse('invalid_central_directory');\n\n  const decoder = new TextDecoder('utf-8', { fatal: true });\n  const central: CentralEntry[] = [];\n  const names = new Set<string>();\n  let at = cdOffset;\n  for (let n = 0; n < entries; n++) {\n    if (at + CENTRAL_SIZE > eocd || view.getUint32(at, true) !== SIG_CENTRAL)\n      return refuse('invalid_central_directory');\n    const madeBy = view.getUint16(at + 4, true);\n    const flags = view.getUint16(at + 8, true);\n    const method = view.getUint16(at + 10, true);\n    const crc = view.getUint32(at + 16, true);\n    const compressed = view.getUint32(at + 20, true);\n    const size = view.getUint32(at + 24, true);\n    const nameLength = view.getUint16(at + 28, true);\n    const extraLength = view.getUint16(at + 30, true);\n    const commentLength = view.getUint16(at + 32, true);\n    const diskStart = view.getUint16(at + 34, true);\n    const external = view.getUint32(at + 38, true);\n    const localOffset = view.getUint32(at + 42, true);\n    const next = at + CENTRAL_SIZE + nameLength + extraLength + commentLength;\n    if (next > eocd) return refuse('invalid_central_directory');\n    const rawName = bytes.subarray(\n      at + CENTRAL_SIZE,\n      at + CENTRAL_SIZE + nameLength,\n    );\n    let decoded: string;\n    try {\n      decoded = decoder.decode(rawName);\n    } catch {\n      return refuse('invalid_path');\n    }\n    const { path, directory } = normalizeBundlePath(decoded, limits);\n    if (flags & (0x1 | 0x40 | 0x2000) || method === 99)\n      return refuse('encrypted_entry', path);\n    if (method !== 0 && method !== 8) return refuse('unsupported_method', path);\n    if (\n      compressed === 0xffffffff ||\n      size === 0xffffffff ||\n      localOffset === 0xffffffff\n    )\n      return refuse('zip64_unsupported', path);\n    if (diskStart !== 0) return refuse('multi_disk', path);\n    const host = madeBy >>> 8;\n    if (host === 3) {\n      const type = (external >>> 16) & 0o170000;\n      if (type === 0o120000) return refuse('symlink_entry', path);\n      if (type !== 0 && type !== 0o100000 && type !== 0o040000)\n        return refuse('special_entry', path);\n    } else if (external & 0x400) {\n      return refuse('symlink_entry', path); // DOS reparse point\n    }\n    if (directory && (size !== 0 || compressed > 2))\n      return refuse('invalid_entry', path);\n    const key = bundleNameKey(path);\n    if (names.has(key)) return refuse('duplicate_name', path);\n    names.add(key);\n    if (method === 0 && compressed !== size)\n      return refuse('size_mismatch', path);\n    if (\n      size > limits.ratioFloorBytes &&\n      method === 8 &&\n      (compressed === 0 || size / compressed > limits.maxCompressionRatio)\n    )\n      return refuse('compression_ratio', path);\n    central.push({\n      name: path,\n      rawName,\n      method,\n      crc,\n      compressed,\n      size,\n      localOffset,\n      directory,\n    });\n    at = next;\n  }\n  if (at !== eocd) return refuse('invalid_central_directory');\n\n  // Local headers and data ranges: inside the file, before the central\n  // directory, naming the same entry, never overlapping each other.\n  const located: Array<CentralEntry & { start: number; end: number }> = [];\n  const ranges: Array<[number, number, string]> = [];\n  for (const entry of central) {\n    if (entry.directory) continue;\n    if (entry.localOffset + LOCAL_SIZE > cdOffset)\n      return refuse('entry_out_of_range', entry.name);\n    if (view.getUint32(entry.localOffset, true) !== SIG_LOCAL)\n      return refuse('local_header_mismatch', entry.name);\n    const flags = view.getUint16(entry.localOffset + 6, true);\n    if (flags & (0x1 | 0x40 | 0x2000))\n      return refuse('encrypted_entry', entry.name);\n    if (view.getUint16(entry.localOffset + 8, true) !== entry.method)\n      return refuse('local_header_mismatch', entry.name);\n    const nameLength = view.getUint16(entry.localOffset + 26, true);\n    const extraLength = view.getUint16(entry.localOffset + 28, true);\n    const start = entry.localOffset + LOCAL_SIZE + nameLength + extraLength;\n    const end = start + entry.compressed;\n    if (end > cdOffset) return refuse('entry_out_of_range', entry.name);\n    const local = bytes.subarray(\n      entry.localOffset + LOCAL_SIZE,\n      entry.localOffset + LOCAL_SIZE + nameLength,\n    );\n    if (\n      local.length !== entry.rawName.length ||\n      !local.every((b, i) => b === entry.rawName[i])\n    )\n      return refuse('local_header_mismatch', entry.name);\n    located.push({ ...entry, start, end });\n    ranges.push([entry.localOffset, end, entry.name]);\n  }\n  ranges.sort((a, b) => a[0] - b[0]);\n  for (let i = 1; i < ranges.length; i++)\n    if (\n      (ranges[i] as [number, number, string])[0] <\n      (ranges[i - 1] as [number, number, string])[1]\n    )\n      return refuse(\n        'overlapping_entries',\n        (ranges[i] as [number, number, string])[2],\n      );\n\n  // Declared totals are checked up front, actual output again while inflating.\n  let declared = 0;\n  for (const entry of located)\n    if (entry.size <= limits.maxEntryBytes) declared += entry.size;\n  if (declared > limits.maxTotalBytes) return refuse('total_too_large');\n\n  const { zlib } = node();\n  const out: RawBundleMember[] = [];\n  let total = 0;\n  onProgress?.(0, located.length);\n  for (const entry of [...located].sort((a, b) =>\n    a.name < b.name ? -1 : a.name > b.name ? 1 : 0,\n  )) {\n    if (entry.size > limits.maxEntryBytes) {\n      out.push({\n        path: entry.name,\n        size: entry.size,\n        bytes: null,\n        sha256: null,\n        refusal: 'entry_too_large',\n      });\n      onProgress?.(out.length, located.length);\n      continue;\n    }\n    const data = bytes.subarray(entry.start, entry.end);\n    let inflated: Buffer;\n    if (entry.method === 0) {\n      inflated = Buffer.from(data);\n    } else {\n      try {\n        inflated = zlib.inflateRawSync(data, {\n          maxOutputLength: Math.max(entry.size, 1),\n        });\n      } catch (error) {\n        return refuse(\n          (error as { code?: string }).code === 'ERR_BUFFER_TOO_LARGE'\n            ? 'size_mismatch'\n            : 'inflate_failed',\n          entry.name,\n        );\n      }\n    }\n    if (inflated.length !== entry.size)\n      return refuse('size_mismatch', entry.name);\n    if (crc32(inflated) !== entry.crc) return refuse('bad_crc', entry.name);\n    total += inflated.length;\n    if (total > limits.maxTotalBytes) return refuse('total_too_large');\n    out.push({\n      path: entry.name,\n      size: inflated.length,\n      bytes: inflated,\n      sha256: sha256Hex(inflated),\n      refusal: null,\n    });\n    onProgress?.(out.length, located.length);\n  }\n  return out;\n}\n\n/** Validate a plain file set the same way an archive is: paths, caps, duplicates. */\nexport function readFileSet(\n  files: ReadonlyArray<{ path: string; bytes: Uint8Array }>,\n  limits: CourseBundleLimits = COURSE_BUNDLE_LIMITS,\n  onProgress?: (completed: number, total: number) => void,\n): RawBundleMember[] {\n  if (!Array.isArray(files) || files.length === 0)\n    return refuse('empty_bundle');\n  if (files.length > limits.maxEntries) return refuse('too_many_entries');\n  const names = new Set<string>();\n  const out: RawBundleMember[] = [];\n  let total = 0;\n  let memberTotal = 0;\n  onProgress?.(0, files.length);\n  for (const file of files) {\n    const { path, directory } = normalizeBundlePath(file?.path, limits);\n    if (directory || !(file.bytes instanceof Uint8Array))\n      return refuse('invalid_entry', path);\n    const key = bundleNameKey(path);\n    if (names.has(key)) return refuse('duplicate_name', path);\n    names.add(key);\n    total += file.bytes.length;\n    if (total > limits.maxArchiveBytes) return refuse('archive_too_large');\n    if (file.bytes.length > limits.maxEntryBytes) {\n      out.push({\n        path,\n        size: file.bytes.length,\n        bytes: null,\n        sha256: null,\n        refusal: 'entry_too_large',\n      });\n    } else {\n      // Same member-byte bound as an archive's inflated total.\n      memberTotal += file.bytes.length;\n      if (memberTotal > limits.maxTotalBytes) return refuse('total_too_large');\n      out.push({\n        path,\n        size: file.bytes.length,\n        bytes: file.bytes,\n        sha256: sha256Hex(file.bytes),\n        refusal: null,\n      });\n    }\n    onProgress?.(out.length, files.length);\n  }\n  return out.sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));\n}\n"],"mappings":";;AAEA,IAAM,MAAM;AACZ,IAAM,MAAM,OAAO;AAyCZ,IAAM,uBAAqD,OAAO,OACvE;CACE,iBAAiB,MAAM;CACvB,YAAY;CACZ,eAAe,KAAK;CACpB,eAAe,MAAM;CACrB,qBAAqB;CACrB,iBAAiB,KAAK;CACtB,cAAc;CACd,iBAAiB;CACjB,cAAc;CACd,kBAAkB,MAAM;CACxB,YAAY;CACZ,oBAAoB;CACpB,kBAAkB;CAClB,kBAAkB,KAAK;CACvB,qBAAqB;AACvB,CACF;AAGO,IAAM,kCAAkC;AAExC,IAAM,iCAAiC;AAEvC,IAAM,mCAAmC;AAEzC,IAAM,8BAA8B;AAGpC,SAAS,0BACd,WAAwC,CAAC,GACrB;CACpB,MAAM,MAAM,EAAE,GAAG,qBAAqB;CACtC,KAAA,MAAW,OAAO,OAAO,KAAK,GAAG,GAAsC;EACrE,MAAM,QAAQ,SAAS;EACvB,IACE,UAAU,KAAA,KACV,OAAO,cAAc,KAAK,KAC1B,SAAS,KACT,SAAS,qBAAqB,MAE9B,IAAI,OAAO;CACf;CACA,OAAO;AACT;AAkDO,IAAM,2BAAN,cAAuC,qBAAqB;CACjE,YACW,QACA,OACT;EACA,MAAM,yBAAyB,0BAA0B,OAAM,EAAG;EAHzD,KAAA,SAAA;EACA,KAAA,QAAA;CAGX;CAJW;CACA;AAIb;AACO,IAAM,4BAAN,cAAwC,qBAAqB;CAClE,cAAc;EACZ,MAAM,2BAA2B,qCAAqC;CACxE;AACF;AAmDO,IAAM,kDACX,IAAI,IAAI;CAAC;CAAyB;CAAoB;AAAmB,CAAC;AAErE,IAAM,2BAA2B;CACtC;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAIO,IAAM,uBAAuB;CAClC;CACA;CACA;CACA;CACA;AACF;;;ACjNA,IAAM,WAAW;AACjB,IAAM,oBAAoB;AAC1B,IAAM,cAAc;AACpB,IAAM,YAAY;AAClB,IAAM,YAAY;AAClB,IAAM,eAAe;AACrB,IAAM,aAAa;AACnB,IAAM,cAAc;AAcpB,SAAS,OAAO;CACd,MAAM,MAAO,OAAO,YAAY,eAAe,QAAQ;CAGvD,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,6CAA6C;CACvE,OAAO;EACL,MAAM,IAAI,WAAW;EACrB,QAAQ,IAAI,aAAa;CAC3B;AACF;AAEO,SAAS,UAAU,OAAoC;CAC5D,OAAO,KAAK,CAAA,CAAE,OAAO,WAAW,QAAQ,CAAA,CAAE,OAAO,KAAK,CAAA,CAAE,OAAO,KAAK;AACtE;AAEA,IAAI;AACG,SAAS,MAAM,OAA2B;CAC/C,IAAI,CAAC,UAAU;EACb,2BAAW,IAAI,YAAY,GAAG;EAC9B,KAAA,IAAS,IAAI,GAAG,IAAI,KAAK,KAAK;GAC5B,IAAI,IAAI;GACR,KAAA,IAAS,IAAI,GAAG,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,aAAc,MAAM,IAAK,MAAM;GACvE,SAAS,KAAK,MAAM;EACtB;CACF;CACA,IAAI,MAAM;CACV,KAAA,IAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAChC,MAAO,UAAU,MAAM,MAAM,MAAM,OAAoB,QAAQ;CACjE,QAAQ,MAAM,gBAAgB;AAChC;AAEA,IAAM,UAAU,QAAmC,UAA0B;CAC3E,MAAM,IAAI,yBAAyB,QAAQ,KAAK;AAClD;AAEA,IAAM,YAEJ;AAEK,SAAS,mBAAmB,OAAwB;CACzD,OAAO,CAAC,yEAAyE,KAC/E,KACF;AACF;AAQO,SAAS,oBACd,KACA,SAA6B,sBACS;CACtC,IAAI,OAAO,QAAQ,YAAY,IAAI,WAAW,GAC5C,OAAO,OAAO,cAAc;CAC9B,IAAI,CAAC,mBAAmB,GAAG,KAAK,UAAU,KAAK,GAAG,GAChD,OAAO,OAAO,cAAc;CAC9B,MAAM,OAAO,IAAI,WAAW,MAAM,GAAG;CACrC,IACE,OAAO,WAAW,IAAI,IAAI,OAAO,gBACjC,KAAK,WAAW,GAAG,KACnB,aAAa,KAAK,IAAI,KACtB,KAAK,SAAS,GAAG,GAEjB,OAAO,OAAO,cAAc;CAC9B,MAAM,YAAY,KAAK,SAAS,GAAG;CACnC,MAAM,YAAY,YAAY,KAAK,MAAM,GAAG,EAAE,IAAI,KAAA,CAAM,MAAM,GAAG;CACjE,KAAA,MAAW,WAAW,UACpB,IACE,YAAY,MACZ,YAAY,OACZ,YAAY,QACZ,OAAO,WAAW,OAAO,IAAI,OAAO,iBAEpC,OAAO,OAAO,cAAc;CAChC,IAAI,SAAS,SAAS,OAAO,cAAc,OAAO,OAAO,eAAe;CACxE,OAAO;EAAE,MAAM,SAAS,KAAK,GAAG;EAAG;CAAU;AAC/C;AAGO,IAAM,iBAAiB,SAC5B,KAAK,UAAU,KAAK,CAAA,CAAE,YAAY;AAapC,SAAS,cAAc,OAAmB,MAAwB;CAChE,MAAM,MAAM,KAAK,IAAI,GAAG,MAAM,SAAS,YAAY,WAAW;CAC9D,MAAM,aAAuB,CAAC;CAC9B,KAAA,IAAS,IAAI,MAAM,SAAS,WAAW,KAAK,KAAK,KAAK;EACpD,IAAI,KAAK,UAAU,GAAG,IAAI,MAAM,UAAU;EAG1C,IAAI,IAAI,YAAY,KAAK,UAAU,IAAI,IAAI,IAAI,MAAM,MAAM,QACzD,WAAW,KAAK,CAAC;CACrB;CACA,IAAI,WAAW,WAAW,GACxB,OAAO,OACL,MAAM,UAAU,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,YAC7C,cACA,WACN;CACF,IAAI,WAAW,SAAS,GAAG,OAAO,OAAO,sBAAsB;CAC/D,OAAO,WAAW;AACpB;AAQO,SAAS,eACd,OACA,SAA6B,sBAC7B,YACmB;CACnB,IAAI,EAAE,iBAAiB,aAAa,OAAO,OAAO,WAAW;CAC7D,IAAI,MAAM,SAAS,OAAO,iBAAiB,OAAO,OAAO,mBAAmB;CAC5E,IAAI,MAAM,SAAS,WAAW,OAAO,OAAO,WAAW;CACvD,MAAM,QAAQ;CACd,MAAM,OAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU;CAC1E,MAAM,OAAO,cAAc,OAAO,IAAI;CACtC,IAAI,QAAQ,MAAM,KAAK,UAAU,OAAO,IAAI,IAAI,MAAM,mBACpD,OAAO,OAAO,mBAAmB;CACnC,MAAM,OAAO,KAAK,UAAU,OAAO,GAAG,IAAI;CAC1C,MAAM,SAAS,KAAK,UAAU,OAAO,GAAG,IAAI;CAC5C,MAAM,cAAc,KAAK,UAAU,OAAO,GAAG,IAAI;CACjD,MAAM,UAAU,KAAK,UAAU,OAAO,IAAI,IAAI;CAC9C,MAAM,SAAS,KAAK,UAAU,OAAO,IAAI,IAAI;CAC7C,MAAM,WAAW,KAAK,UAAU,OAAO,IAAI,IAAI;CAC/C,IAAI,YAAY,SAAU,WAAW,cAAc,aAAa,YAC9D,OAAO,OAAO,mBAAmB;CACnC,IAAI,SAAS,KAAK,WAAW,KAAK,gBAAgB,SAChD,OAAO,OAAO,YAAY;CAC5B,IAAI,YAAY,GAAG,OAAO,OAAO,cAAc;CAC/C,IAAI,UAAU,OAAO,YAAY,OAAO,OAAO,kBAAkB;CACjE,IACE,SAAS,UAAU,gBACnB,WAAW,WAAW,MAEtB,OAAO,OAAO,2BAA2B;CAE3C,MAAM,UAAU,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC;CACxD,MAAM,UAA0B,CAAC;CACjC,MAAM,wBAAQ,IAAI,IAAY;CAC9B,IAAI,KAAK;CACT,KAAA,IAAS,IAAI,GAAG,IAAI,SAAS,KAAK;EAChC,IAAI,KAAK,eAAe,QAAQ,KAAK,UAAU,IAAI,IAAI,MAAM,aAC3D,OAAO,OAAO,2BAA2B;EAC3C,MAAM,SAAS,KAAK,UAAU,KAAK,GAAG,IAAI;EAC1C,MAAM,QAAQ,KAAK,UAAU,KAAK,GAAG,IAAI;EACzC,MAAM,SAAS,KAAK,UAAU,KAAK,IAAI,IAAI;EAC3C,MAAM,MAAM,KAAK,UAAU,KAAK,IAAI,IAAI;EACxC,MAAM,aAAa,KAAK,UAAU,KAAK,IAAI,IAAI;EAC/C,MAAM,OAAO,KAAK,UAAU,KAAK,IAAI,IAAI;EACzC,MAAM,aAAa,KAAK,UAAU,KAAK,IAAI,IAAI;EAC/C,MAAM,cAAc,KAAK,UAAU,KAAK,IAAI,IAAI;EAChD,MAAM,gBAAgB,KAAK,UAAU,KAAK,IAAI,IAAI;EAClD,MAAM,YAAY,KAAK,UAAU,KAAK,IAAI,IAAI;EAC9C,MAAM,WAAW,KAAK,UAAU,KAAK,IAAI,IAAI;EAC7C,MAAM,cAAc,KAAK,UAAU,KAAK,IAAI,IAAI;EAChD,MAAM,OAAO,KAAK,eAAe,aAAa,cAAc;EAC5D,IAAI,OAAO,MAAM,OAAO,OAAO,2BAA2B;EAC1D,MAAM,UAAU,MAAM,SACpB,KAAK,cACL,KAAK,eAAe,UACtB;EACA,IAAI;EACJ,IAAI;GACF,UAAU,QAAQ,OAAO,OAAO;EAClC,QAAQ;GACN,OAAO,OAAO,cAAc;EAC9B;EACA,MAAM,EAAE,MAAM,cAAc,oBAAoB,SAAS,MAAM;EAC/D,IAAI,QAAS,QAAwB,WAAW,IAC9C,OAAO,OAAO,mBAAmB,IAAI;EACvC,IAAI,WAAW,KAAK,WAAW,GAAG,OAAO,OAAO,sBAAsB,IAAI;EAC1E,IACE,eAAe,cACf,SAAS,cACT,gBAAgB,YAEhB,OAAO,OAAO,qBAAqB,IAAI;EACzC,IAAI,cAAc,GAAG,OAAO,OAAO,cAAc,IAAI;EAErD,IADa,WAAW,MACX,GAAG;GACd,MAAM,OAAQ,aAAa,KAAM;GACjC,IAAI,SAAS,OAAU,OAAO,OAAO,iBAAiB,IAAI;GAC1D,IAAI,SAAS,KAAK,SAAS,SAAY,SAAS,OAC9C,OAAO,OAAO,iBAAiB,IAAI;EACvC,OAAA,IAAW,WAAW,MACpB,OAAO,OAAO,iBAAiB,IAAI;EAErC,IAAI,cAAc,SAAS,KAAK,aAAa,IAC3C,OAAO,OAAO,iBAAiB,IAAI;EACrC,MAAM,MAAM,cAAc,IAAI;EAC9B,IAAI,MAAM,IAAI,GAAG,GAAG,OAAO,OAAO,kBAAkB,IAAI;EACxD,MAAM,IAAI,GAAG;EACb,IAAI,WAAW,KAAK,eAAe,MACjC,OAAO,OAAO,iBAAiB,IAAI;EACrC,IACE,OAAO,OAAO,mBACd,WAAW,MACV,eAAe,KAAK,OAAO,aAAa,OAAO,sBAEhD,OAAO,OAAO,qBAAqB,IAAI;EACzC,QAAQ,KAAK;GACX,MAAM;GACN;GACA;GACA;GACA;GACA;GACA;GACA;EACF,CAAC;EACD,KAAK;CACP;CACA,IAAI,OAAO,MAAM,OAAO,OAAO,2BAA2B;CAI1D,MAAM,UAAgE,CAAC;CACvE,MAAM,SAA0C,CAAC;CACjD,KAAA,MAAW,SAAS,SAAS;EAC3B,IAAI,MAAM,WAAW;EACrB,IAAI,MAAM,cAAc,aAAa,UACnC,OAAO,OAAO,sBAAsB,MAAM,IAAI;EAChD,IAAI,KAAK,UAAU,MAAM,aAAa,IAAI,MAAM,WAC9C,OAAO,OAAO,yBAAyB,MAAM,IAAI;EAEnD,IADc,KAAK,UAAU,MAAM,cAAc,GAAG,IAChD,IAAS,MACX,OAAO,OAAO,mBAAmB,MAAM,IAAI;EAC7C,IAAI,KAAK,UAAU,MAAM,cAAc,GAAG,IAAI,MAAM,MAAM,QACxD,OAAO,OAAO,yBAAyB,MAAM,IAAI;EACnD,MAAM,aAAa,KAAK,UAAU,MAAM,cAAc,IAAI,IAAI;EAC9D,MAAM,cAAc,KAAK,UAAU,MAAM,cAAc,IAAI,IAAI;EAC/D,MAAM,QAAQ,MAAM,cAAc,aAAa,aAAa;EAC5D,MAAM,MAAM,QAAQ,MAAM;EAC1B,IAAI,MAAM,UAAU,OAAO,OAAO,sBAAsB,MAAM,IAAI;EAClE,MAAM,QAAQ,MAAM,SAClB,MAAM,cAAc,YACpB,MAAM,cAAc,aAAa,UACnC;EACA,IACE,MAAM,WAAW,MAAM,QAAQ,UAC/B,CAAC,MAAM,OAAO,GAAG,MAAM,MAAM,MAAM,QAAQ,EAAE,GAE7C,OAAO,OAAO,yBAAyB,MAAM,IAAI;EACnD,QAAQ,KAAK;GAAE,GAAG;GAAO;GAAO;EAAI,CAAC;EACrC,OAAO,KAAK;GAAC,MAAM;GAAa;GAAK,MAAM;EAAI,CAAC;CAClD;CACA,OAAO,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE;CACjC,KAAA,IAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KACjC,IACG,OAAO,EAAC,CAA+B,KACvC,OAAO,IAAI,EAAC,CAA+B,IAE5C,OAAO,OACL,uBACC,OAAO,EAAC,CAA+B,EAC1C;CAGJ,IAAI,WAAW;CACf,KAAA,MAAW,SAAS,SAClB,IAAI,MAAM,QAAQ,OAAO,eAAe,YAAY,MAAM;CAC5D,IAAI,WAAW,OAAO,eAAe,OAAO,OAAO,iBAAiB;CAEpE,MAAM,EAAE,SAAS,KAAK;CACtB,MAAM,MAAyB,CAAC;CAChC,IAAI,QAAQ;CACZ,aAAa,GAAG,QAAQ,MAAM;CAC9B,KAAA,MAAW,SAAS,CAAC,GAAG,OAAO,CAAA,CAAE,MAAM,GAAG,MACxC,EAAE,OAAO,EAAE,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,CAC/C,GAAG;EACD,IAAI,MAAM,OAAO,OAAO,eAAe;GACrC,IAAI,KAAK;IACP,MAAM,MAAM;IACZ,MAAM,MAAM;IACZ,OAAO;IACP,QAAQ;IACR,SAAS;GACX,CAAC;GACD,aAAa,IAAI,QAAQ,QAAQ,MAAM;GACvC;EACF;EACA,MAAM,OAAO,MAAM,SAAS,MAAM,OAAO,MAAM,GAAG;EAClD,IAAI;EACJ,IAAI,MAAM,WAAW,GACnB,WAAW,OAAO,KAAK,IAAI;OAE3B,IAAI;GACF,WAAW,KAAK,eAAe,MAAM,EACnC,iBAAiB,KAAK,IAAI,MAAM,MAAM,CAAC,EACzC,CAAC;EACH,SAAS,OAAO;GACd,OAAO,OACJ,MAA4B,SAAS,yBAClC,kBACA,kBACJ,MAAM,IACR;EACF;EAEF,IAAI,SAAS,WAAW,MAAM,MAC5B,OAAO,OAAO,iBAAiB,MAAM,IAAI;EAC3C,IAAI,MAAM,QAAQ,MAAM,MAAM,KAAK,OAAO,OAAO,WAAW,MAAM,IAAI;EACtE,SAAS,SAAS;EAClB,IAAI,QAAQ,OAAO,eAAe,OAAO,OAAO,iBAAiB;EACjE,IAAI,KAAK;GACP,MAAM,MAAM;GACZ,MAAM,SAAS;GACf,OAAO;GACP,QAAQ,UAAU,QAAQ;GAC1B,SAAS;EACX,CAAC;EACD,aAAa,IAAI,QAAQ,QAAQ,MAAM;CACzC;CACA,OAAO;AACT;AAGO,SAAS,YACd,OACA,SAA6B,sBAC7B,YACmB;CACnB,IAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,GAC5C,OAAO,OAAO,cAAc;CAC9B,IAAI,MAAM,SAAS,OAAO,YAAY,OAAO,OAAO,kBAAkB;CACtE,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,MAAyB,CAAC;CAChC,IAAI,QAAQ;CACZ,IAAI,cAAc;CAClB,aAAa,GAAG,MAAM,MAAM;CAC5B,KAAA,MAAW,QAAQ,OAAO;EACxB,MAAM,EAAE,MAAM,cAAc,oBAAoB,MAAM,MAAM,MAAM;EAClE,IAAI,aAAa,EAAE,KAAK,iBAAiB,aACvC,OAAO,OAAO,iBAAiB,IAAI;EACrC,MAAM,MAAM,cAAc,IAAI;EAC9B,IAAI,MAAM,IAAI,GAAG,GAAG,OAAO,OAAO,kBAAkB,IAAI;EACxD,MAAM,IAAI,GAAG;EACb,SAAS,KAAK,MAAM;EACpB,IAAI,QAAQ,OAAO,iBAAiB,OAAO,OAAO,mBAAmB;EACrE,IAAI,KAAK,MAAM,SAAS,OAAO,eAC7B,IAAI,KAAK;GACP;GACA,MAAM,KAAK,MAAM;GACjB,OAAO;GACP,QAAQ;GACR,SAAS;EACX,CAAC;OACI;GAEL,eAAe,KAAK,MAAM;GAC1B,IAAI,cAAc,OAAO,eAAe,OAAO,OAAO,iBAAiB;GACvE,IAAI,KAAK;IACP;IACA,MAAM,KAAK,MAAM;IACjB,OAAO,KAAK;IACZ,QAAQ,UAAU,KAAK,KAAK;IAC5B,SAAS;GACX,CAAC;EACH;EACA,aAAa,IAAI,QAAQ,MAAM,MAAM;CACvC;CACA,OAAO,IAAI,MAAM,GAAG,MAAO,EAAE,OAAO,EAAE,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,CAAE;AAC5E"}