@hyperdreamer/pi-webui 1.6.1 → 1.7.0

package/dist/client/index.html

@@ -53,7 +53,7 @@
       html, body { margin: 0; height: 100%; overflow: hidden; background: var(--pi-bg); color: var(--pi-text); }
       body { min-height: 100dvh; }
     </style>
-    <script type="module" crossorigin src="./assets/index-Cffeusjy.js"></script>
+    <script type="module" crossorigin src="./assets/index-C9z5sr6t.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/vendor-editor-core-vUi74DnD.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-editor-languages-DoaXUodB.js">
     <link rel="modulepreload" crossorigin href="./assets/vendor-terminal-D8k4UKM2.js">

package/dist/server/app.js

@@ -33,6 +33,8 @@ import { MachineService } from "./machines/machineService.js";
 import { registerMachineRoutes } from "./machines/machineRoutes.js";
 import { registerMachineProxyRoutes } from "./machines/machineProxyRoutes.js";
 import { proxyMachinePluginAsset, registerMachinePluginProxyRoutes } from "./machines/machinePluginProxyRoutes.js";
+import { registerLocalBrowserCapabilityRoutes } from "./browser/browserCapabilityRoutes.js";
+import { unavailableBrowserRuntime } from "./browser/browserRuntime.js";
 function registerLocalProjectRoutes(app, projects, workspaces, prefix, options = {}) {
     app.get(`${prefix}/projects`, async () => projects.list());
     app.post(`${prefix}/projects`, async (request, reply) => {
@@ -121,6 +123,9 @@ async function withProfileDependency(reply, operation) {
         return reply.code(503).send({ error: error.message });
     }
 }
+function isApiPath(requestUrl) {
+    return requestUrl === "/api" || requestUrl.startsWith("/api/") || requestUrl.startsWith("/api?");
+}
 export async function buildApp(deps = {}) {
     const app = Fastify({ logger: deps.logger ?? true, ...(deps.bodyLimit === undefined ? {} : { bodyLimit: deps.bodyLimit }) });
     // Vite proxies development API requests here, while production and machine-scoped
@@ -135,6 +140,7 @@ export async function buildApp(deps = {}) {
     const workspaces = deps.workspaces ?? new WorkspaceService();
     const configService = deps.config ?? createFilePiWebUiConfigService();
     const readConfig = () => readEffectiveConfig(configService);
+    const browserRuntime = deps.browserRuntime ?? unavailableBrowserRuntime();
     const sessionDaemon = deps.sessionDaemon ?? new SessionDaemonClient();
     const agentProfileProvider = deps.agentProfileProvider ?? new SessionDaemonActiveAgentProfileProvider(sessionDaemon);
     const piWebUiPlugins = deps.piWebUiPlugins ?? new PiWebUiPluginService({
@@ -183,6 +189,10 @@ export async function buildApp(deps = {}) {
     registerLocalMachineConfigRoutes(app, invalidatingConfigService);
     registerMachineRoutes(app, machines);
     registerMachinePluginProxyRoutes(app, machines);
+    registerLocalBrowserCapabilityRoutes(app, {
+        runtime: browserRuntime,
+        ...(deps.browserPrincipalProvider === undefined ? {} : { principalProvider: deps.browserPrincipalProvider }),
+    });
     registerLocalProjectRoutes(app, projects, workspaces, "/api", { config: configService });
     registerLocalProjectRoutes(app, projects, workspaces, "/api/machines/local", { config: configService });
     registerSessionProxyRoutes(app, sessionDaemon);
@@ -204,7 +214,11 @@ export async function buildApp(deps = {}) {
     const clientDist = deps.clientDist ?? (existsSync(packagedClientDist) ? packagedClientDist : join(process.cwd(), "dist", "client"));
     if (clientDist !== false && existsSync(clientDist)) {
         await app.register(fastifyStatic, { root: clientDist });
-        app.setNotFoundHandler((_request, reply) => reply.sendFile("index.html"));
+        app.setNotFoundHandler((request, reply) => {
+            if (isApiPath(request.url))
+                return reply.code(404).send({ error: "API route not found" });
+            return reply.sendFile("index.html");
+        });
     }
     return app;
 }

package/dist/server/app.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/server/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,OAA+E,MAAM,SAAS,CAAC;AACtG,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,gCAAgC,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC7H,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,iCAAiC,EAAE,MAAM,sCAAsC,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAA2B,MAAM,kCAAkC,CAAC;AACvG,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,8BAA8B,EAAE,oBAAoB,EAAE,gCAAgC,EAA6B,MAAM,mBAAmB,CAAC;AACtJ,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,mCAAmC,EAAyB,MAAM,uBAAuB,CAAC;AACnG,OAAO,EAAE,gDAAgD,EAAsC,MAAM,oCAAoC,CAAC;AAC1I,OAAO,EAAE,oCAAoC,EAAE,MAAM,mCAAmC,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAA2B,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAClG,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,uCAAuC,GAExC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,gCAAgC,EAAE,MAAM,wCAAwC,CAAC;AAwBnH,SAAS,0BAA0B,CAAC,GAAoB,EAAE,QAAwB,EAAE,UAA4B,EAAE,MAAc,EAAE,UAAoC,EAAE;IACtK,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAE3D,GAAG,CAAC,IAAI,CAA8D,GAAG,MAAM,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACnH,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAoC,GAAG,MAAM,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACtG,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAkC,GAAG,MAAM,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACjG,IAAI,CAAC;YACH,OAAO,MAAM,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAoC,GAAG,MAAM,iCAAiC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9G,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACxE,OAAO,MAAM,iCAAiC,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iCAAiC,CAAC,OAAgB,EAAE,UAA4B,EAAE,MAA2C;IAC1I,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzD,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QACxB,wBAAwB,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;KAC/C,CAAC,CAAC;IACH,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,WAAmB,EAAE,MAA2C;IACtG,MAAM,YAAY,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC;IACvF,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;AACzF,CAAC;AAMD,SAAS,iCAAiC,CAAC,GAAoB,EAAE,QAAwB,EAAE,UAA4B,EAAE,MAAc,EAAE,UAA2C,EAAE;IACpL,GAAG,CAAC,GAAG,CAA6I,GAAG,MAAM,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9L,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;QAC3I,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3I,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YAC5F,OAAO,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACrH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,MAA0C;IAC3E,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC;AAC/C,CAAC;AAED,SAAS,8BAA8B,CAAC,MAA4B,EAAE,WAAmD;IACvH,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;QACzB,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC1B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAChD,WAAW,CAAC,UAAU,EAAE,CAAC;YACzB,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAI,KAAmB,EAAE,SAA2B;IACtF,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,6BAA6B,CAAC;YAAE,MAAM,KAAK,CAAC;QACnE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB,EAAE;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7H,kFAAkF;IAClF,gFAAgF;IAChF,MAAM,GAAG,CAAC,QAAQ,CAAC,eAAe,EAAE;QAClC,iBAAiB,EAAE,IAAI;QACvB,mBAAmB,EAAE,KAAK;QAC1B,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,cAAc,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,gBAAgB,EAAE,CAAC;IAC7D,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,IAAI,8BAA8B,EAAE,CAAC;IACtE,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,mBAAmB,EAAE,CAAC;IACtE,MAAM,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,IAAI,IAAI,uCAAuC,CAAC,aAAa,CAAC,CAAC;IACrH,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,oBAAoB,CAAC;QACrE,cAAc,EAAE,UAAU;QAC1B,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,yBAAyB,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG;KAC1F,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,mCAAmC,CAAC,oBAAoB,CAAC,CAAC;IAChG,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,gDAAgD,CAAC,oBAAoB,CAAC,CAAC;IACzH,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,wBAAwB,CAC5E,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAClB,MAAM,kBAAkB,GAAG,MAAM,oBAAoB,CAAC,qBAAqB,EAAE,CAAC;QAC9E,OAAO,gBAAgB,CAAC,aAAa,EAAE;YACrC,iBAAiB,EAAE,KAAK;YACxB,GAAG,CAAC,kBAAkB,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzG,CAAC,CAAC;IACL,CAAC,EACD,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,yCAAyC,CAAC,CAAC,CAAC,CAAC,EAAE,CACrG,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,cAAc,CAAC,SAAS,EAAE;QAC9D,YAAY,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC;KACrD,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAErI,GAAG,CAAC,GAAG,CAAgD,+BAA+B,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/G,IAAI,MAAM,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC;YAAE,OAAO;QAEtH,OAAO,qBAAqB,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3F,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC1F,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAwC,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,GAAG;QACrH,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC7C,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,kBAAkB,GAAG,MAAM,oBAAoB,CAAC,qBAAqB,EAAE,CAAC;QAC9E,OAAO,uBAAuB,CAAC,aAAa,EAAE,kBAAkB,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrJ,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/E,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACjH,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAChI,uBAAuB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACzC,uBAAuB,CAAC,GAAG,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;IAChE,oCAAoC,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC5D,oCAAoC,CAAC,GAAG,EAAE,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;IACnF,MAAM,yBAAyB,GAAG,8BAA8B,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IACpG,oBAAoB,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;IACrD,gCAAgC,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;IAEjE,qBAAqB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrC,gCAAgC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAEhD,0BAA0B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACzF,0BAA0B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAExG,0BAA0B,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC/C,0BAA0B,CAAC,GAAG,EAAE,aAAa,EAAE,qBAAqB,CAAC,CAAC;IACtE,+BAA+B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAC9F,+BAA+B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAC7G,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7C,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;IACpE,2BAA2B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACtE,2BAA2B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAC7F,+BAA+B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IAC1E,+BAA+B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAEjG,wBAAwB,CAAC,GAAG,EAAE,eAAe,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC3G,wBAAwB,CAAC,GAAG,EAAE,8BAA8B,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAE1H,iCAAiC,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAChG,iCAAiC,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAE/G,0BAA0B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE1C,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpI,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACxD,GAAG,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/server/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,OAA+E,MAAM,SAAS,CAAC;AACtG,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,gCAAgC,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC7H,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,iCAAiC,EAAE,MAAM,sCAAsC,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAA2B,MAAM,kCAAkC,CAAC;AACvG,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,8BAA8B,EAAE,oBAAoB,EAAE,gCAAgC,EAA6B,MAAM,mBAAmB,CAAC;AACtJ,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,mCAAmC,EAAyB,MAAM,uBAAuB,CAAC;AACnG,OAAO,EAAE,gDAAgD,EAAsC,MAAM,oCAAoC,CAAC;AAC1I,OAAO,EAAE,oCAAoC,EAAE,MAAM,mCAAmC,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAA2B,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAClG,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,uCAAuC,GAExC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,gCAAgC,EAAE,MAAM,wCAAwC,CAAC;AACnH,OAAO,EAAE,oCAAoC,EAAiC,MAAM,sCAAsC,CAAC;AAC3H,OAAO,EAAE,yBAAyB,EAA6B,MAAM,6BAA6B,CAAC;AA4BnG,SAAS,0BAA0B,CAAC,GAAoB,EAAE,QAAwB,EAAE,UAA4B,EAAE,MAAc,EAAE,UAAoC,EAAE;IACtK,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAE3D,GAAG,CAAC,IAAI,CAA8D,GAAG,MAAM,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACnH,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAoC,GAAG,MAAM,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACtG,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAkC,GAAG,MAAM,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACjG,IAAI,CAAC;YACH,OAAO,MAAM,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAoC,GAAG,MAAM,iCAAiC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9G,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACxE,OAAO,MAAM,iCAAiC,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iCAAiC,CAAC,OAAgB,EAAE,UAA4B,EAAE,MAA2C;IAC1I,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzD,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QACxB,wBAAwB,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;KAC/C,CAAC,CAAC;IACH,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,WAAmB,EAAE,MAA2C;IACtG,MAAM,YAAY,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC;IACvF,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;AACzF,CAAC;AAMD,SAAS,iCAAiC,CAAC,GAAoB,EAAE,QAAwB,EAAE,UAA4B,EAAE,MAAc,EAAE,UAA2C,EAAE;IACpL,GAAG,CAAC,GAAG,CAA6I,GAAG,MAAM,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9L,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;QAC3I,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3I,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YAC5F,OAAO,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACrH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,MAA0C;IAC3E,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC;AAC/C,CAAC;AAED,SAAS,8BAA8B,CAAC,MAA4B,EAAE,WAAmD;IACvH,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;QACzB,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC1B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAChD,WAAW,CAAC,UAAU,EAAE,CAAC;YACzB,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAI,KAAmB,EAAE,SAA2B;IACtF,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,6BAA6B,CAAC;YAAE,MAAM,KAAK,CAAC;QACnE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,UAAkB;IACnC,OAAO,UAAU,KAAK,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB,EAAE;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7H,kFAAkF;IAClF,gFAAgF;IAChF,MAAM,GAAG,CAAC,QAAQ,CAAC,eAAe,EAAE;QAClC,iBAAiB,EAAE,IAAI;QACvB,mBAAmB,EAAE,KAAK;QAC1B,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,cAAc,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,gBAAgB,EAAE,CAAC;IAC7D,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,IAAI,8BAA8B,EAAE,CAAC;IACtE,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,yBAAyB,EAAE,CAAC;IAC1E,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,mBAAmB,EAAE,CAAC;IACtE,MAAM,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,IAAI,IAAI,uCAAuC,CAAC,aAAa,CAAC,CAAC;IACrH,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,oBAAoB,CAAC;QACrE,cAAc,EAAE,UAAU;QAC1B,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,yBAAyB,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG;KAC1F,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,mCAAmC,CAAC,oBAAoB,CAAC,CAAC;IAChG,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,gDAAgD,CAAC,oBAAoB,CAAC,CAAC;IACzH,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,wBAAwB,CAC5E,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAClB,MAAM,kBAAkB,GAAG,MAAM,oBAAoB,CAAC,qBAAqB,EAAE,CAAC;QAC9E,OAAO,gBAAgB,CAAC,aAAa,EAAE;YACrC,iBAAiB,EAAE,KAAK;YACxB,GAAG,CAAC,kBAAkB,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzG,CAAC,CAAC;IACL,CAAC,EACD,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,yCAAyC,CAAC,CAAC,CAAC,CAAC,EAAE,CACrG,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,cAAc,CAAC,SAAS,EAAE;QAC9D,YAAY,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC;KACrD,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAErI,GAAG,CAAC,GAAG,CAAgD,+BAA+B,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/G,IAAI,MAAM,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC;YAAE,OAAO;QAEtH,OAAO,qBAAqB,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3F,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC1F,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAwC,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,GAAG;QACrH,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC7C,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,kBAAkB,GAAG,MAAM,oBAAoB,CAAC,qBAAqB,EAAE,CAAC;QAC9E,OAAO,uBAAuB,CAAC,aAAa,EAAE,kBAAkB,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrJ,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/E,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACjH,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAChI,uBAAuB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACzC,uBAAuB,CAAC,GAAG,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;IAChE,oCAAoC,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC5D,oCAAoC,CAAC,GAAG,EAAE,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;IACnF,MAAM,yBAAyB,GAAG,8BAA8B,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IACpG,oBAAoB,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;IACrD,gCAAgC,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;IAEjE,qBAAqB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrC,gCAAgC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAChD,oCAAoC,CAAC,GAAG,EAAE;QACxC,OAAO,EAAE,cAAc;QACvB,GAAG,CAAC,IAAI,CAAC,wBAAwB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,wBAAwB,EAAE,CAAC;KAC7G,CAAC,CAAC;IAEH,0BAA0B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACzF,0BAA0B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAExG,0BAA0B,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC/C,0BAA0B,CAAC,GAAG,EAAE,aAAa,EAAE,qBAAqB,CAAC,CAAC;IACtE,+BAA+B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAC9F,+BAA+B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAC7G,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7C,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;IACpE,2BAA2B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACtE,2BAA2B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAC7F,+BAA+B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IAC1E,+BAA+B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAEjG,wBAAwB,CAAC,GAAG,EAAE,eAAe,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC3G,wBAAwB,CAAC,GAAG,EAAE,8BAA8B,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAE1H,iCAAiC,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAChG,iCAAiC,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAE/G,0BAA0B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE1C,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpI,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACxD,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;YACxC,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAC1F,OAAO,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server/browser/browserCapabilities.js

@@ -0,0 +1,74 @@
+const BROWSER_PROTOCOL_VERSION = 1;
+const MAX_TABS_PER_SESSION = 10;
+const MAX_SESSIONS_PER_PRINCIPAL = 2;
+/**
+ * Pure feature gate for the browser capability. The runtime adapter must prove
+ * every isolation property; partial readiness never becomes browser access.
+ */
+export function evaluateBrowserRemoteCapability(principal, readiness) {
+    if (!hasTrustedPrincipal(principal))
+        return unavailable("BROWSER_AUTH_REQUIRED", false);
+    if (!principal.permissions.includes("browser.use"))
+        return unavailable("BROWSER_FORBIDDEN", false);
+    if (!hasSafeRuntime(readiness))
+        return unavailableBrowserRemoteCapability();
+    return {
+        available: true,
+        protocolVersions: [BROWSER_PROTOCOL_VERSION],
+        profileModes: ["ephemeral"],
+        limits: {
+            maxTabsPerSession: readiness.limits.maxTabsPerSession,
+            maxSessionsPerPrincipal: readiness.limits.maxSessionsPerPrincipal,
+        },
+        egress: {
+            mode: readiness.egress.mode,
+            privateNetworksBlocked: true,
+        },
+    };
+}
+function hasTrustedPrincipal(principal) {
+    if (!isRecord(principal) || typeof principal["subject"] !== "string" || !Array.isArray(principal["permissions"]))
+        return false;
+    return principal["subject"].trim() !== "" && principal["permissions"].every(isBrowserPermission);
+}
+function isBrowserPermission(value) {
+    return value === "browser.use" || value === "browser.admin" || value === "browser.persistent-profile";
+}
+function hasSafeRuntime(readiness) {
+    if (!isRecord(readiness) || !isRecord(readiness["egress"]) || !Array.isArray(readiness["protocolVersions"]))
+        return false;
+    const egress = readiness["egress"];
+    return readiness["controlChannel"] === "authenticated-private"
+        && readiness["chromiumSandbox"] === "enforced"
+        && readiness["profileIsolation"] === "ephemeral-per-principal"
+        && readiness["hostIsolation"] === "enforced"
+        && readiness["debuggingTransport"] === "pipe-private"
+        && egress["state"] === "enforced"
+        && (egress["mode"] === "public-web" || egress["mode"] === "domain-allowlist")
+        && egress["privateNetworksBlocked"] === true
+        && readiness["protocolVersions"].includes(BROWSER_PROTOCOL_VERSION)
+        && hasBoundedLimits(readiness["limits"]);
+}
+function hasBoundedLimits(limits) {
+    if (!isRecord(limits))
+        return false;
+    const maxTabsPerSession = limits["maxTabsPerSession"];
+    const maxSessionsPerPrincipal = limits["maxSessionsPerPrincipal"];
+    return typeof maxTabsPerSession === "number"
+        && typeof maxSessionsPerPrincipal === "number"
+        && isPositiveIntegerAtMost(maxTabsPerSession, MAX_TABS_PER_SESSION)
+        && isPositiveIntegerAtMost(maxSessionsPerPrincipal, MAX_SESSIONS_PER_PRINCIPAL);
+}
+function isPositiveIntegerAtMost(value, maximum) {
+    return Number.isSafeInteger(value) && value > 0 && value <= maximum;
+}
+export function unavailableBrowserRemoteCapability() {
+    return unavailable("BROWSER_UNAVAILABLE", true);
+}
+function unavailable(code, retryable) {
+    return { available: false, code, retryable };
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=browserCapabilities.js.map

package/dist/server/browser/browserCapabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserCapabilities.js","sourceRoot":"","sources":["../../../src/server/browser/browserCapabilities.ts"],"names":[],"mappings":"AAEA,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACnC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAkCrC;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,SAAuC,EAAE,SAAkC;IACzH,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC;QAAE,OAAO,WAAW,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IACxF,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,WAAW,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IACnG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;QAAE,OAAO,kCAAkC,EAAE,CAAC;IAE5E,OAAO;QACL,SAAS,EAAE,IAAI;QACf,gBAAgB,EAAE,CAAC,wBAAwB,CAAC;QAC5C,YAAY,EAAE,CAAC,WAAW,CAAC;QAC3B,MAAM,EAAE;YACN,iBAAiB,EAAE,SAAS,CAAC,MAAM,CAAC,iBAAiB;YACrD,uBAAuB,EAAE,SAAS,CAAC,MAAM,CAAC,uBAAuB;SAClE;QACD,MAAM,EAAE;YACN,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI;YAC3B,sBAAsB,EAAE,IAAI;SAC7B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAkB;IAC7C,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/H,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,SAAS,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,4BAA4B,CAAC;AACxG,CAAC;AAED,SAAS,cAAc,CAAC,SAAkB;IACxC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1H,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,SAAS,CAAC,gBAAgB,CAAC,KAAK,uBAAuB;WACzD,SAAS,CAAC,iBAAiB,CAAC,KAAK,UAAU;WAC3C,SAAS,CAAC,kBAAkB,CAAC,KAAK,yBAAyB;WAC3D,SAAS,CAAC,eAAe,CAAC,KAAK,UAAU;WACzC,SAAS,CAAC,oBAAoB,CAAC,KAAK,cAAc;WAClD,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU;WAC9B,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,kBAAkB,CAAC;WAC1E,MAAM,CAAC,wBAAwB,CAAC,KAAK,IAAI;WACzC,SAAS,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;WAChE,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAe;IACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,iBAAiB,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACtD,MAAM,uBAAuB,GAAG,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAClE,OAAO,OAAO,iBAAiB,KAAK,QAAQ;WACvC,OAAO,uBAAuB,KAAK,QAAQ;WAC3C,uBAAuB,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;WAChE,uBAAuB,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa,EAAE,OAAe;IAC7D,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,OAAO,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,kCAAkC;IAChD,OAAO,WAAW,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B,EAAE,SAAkB;IACpE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/server/browser/browserCapabilityRoutes.js

@@ -0,0 +1,34 @@
+import { evaluateBrowserRemoteCapability, unavailableBrowserRemoteCapability } from "./browserCapabilities.js";
+import { unavailableBrowserRuntimeReadiness } from "./browserRuntime.js";
+/**
+ * This foundation intentionally registers capability discovery only. Browser
+ * controls and remote federation wait for the required runtime/delegation work.
+ */
+export function registerLocalBrowserCapabilityRoutes(app, deps) {
+    app.get("/api/machines/local/browser/capabilities", async (request) => {
+        const principal = await resolveBrowserPrincipal(request, deps.principalProvider);
+        if (principal.status === "unavailable")
+            return unavailableBrowserRemoteCapability();
+        if (principal.status === "absent")
+            return evaluateBrowserRemoteCapability(undefined, unavailableBrowserRuntimeReadiness());
+        try {
+            return evaluateBrowserRemoteCapability(principal.value, await deps.runtime.readiness());
+        }
+        catch {
+            return evaluateBrowserRemoteCapability(principal.value, unavailableBrowserRuntimeReadiness());
+        }
+    });
+}
+async function resolveBrowserPrincipal(request, provider) {
+    if (provider === undefined)
+        return { status: "absent" };
+    try {
+        const principal = await provider.principalFor(request);
+        return principal === undefined ? { status: "absent" } : { status: "available", value: principal };
+    }
+    catch {
+        request.log.warn({ dependency: "browser-principal-provider" }, "browser principal provider unavailable");
+        return { status: "unavailable" };
+    }
+}
+//# sourceMappingURL=browserCapabilityRoutes.js.map

package/dist/server/browser/browserCapabilityRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserCapabilityRoutes.js","sourceRoot":"","sources":["../../../src/server/browser/browserCapabilityRoutes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,kCAAkC,EAAyB,MAAM,0BAA0B,CAAC;AACtI,OAAO,EAAE,kCAAkC,EAA6B,MAAM,qBAAqB,CAAC;AAgBpG;;;GAGG;AACH,MAAM,UAAU,oCAAoC,CAAC,GAAoB,EAAE,IAAwC;IACjH,GAAG,CAAC,GAAG,CAAC,0CAA0C,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpE,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjF,IAAI,SAAS,CAAC,MAAM,KAAK,aAAa;YAAE,OAAO,kCAAkC,EAAE,CAAC;QACpF,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,+BAA+B,CAAC,SAAS,EAAE,kCAAkC,EAAE,CAAC,CAAC;QAE3H,IAAI,CAAC;YACH,OAAO,+BAA+B,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,+BAA+B,CAAC,SAAS,CAAC,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAOD,KAAK,UAAU,uBAAuB,CAAC,OAAuB,EAAE,QAA8C;IAC5G,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACvD,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,4BAA4B,EAAE,EAAE,wCAAwC,CAAC,CAAC;QACzG,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACnC,CAAC;AACH,CAAC"}

package/dist/server/browser/browserPolicy.js

@@ -0,0 +1,382 @@
+import { isIP } from "node:net";
+const MAX_BROWSER_URL_LENGTH = 8_192;
+const MAX_ALLOWED_DOMAIN_COUNT = 64;
+const MAX_ALLOWED_PORT_COUNT = 16;
+const MAX_DNS_ANSWER_COUNT = 16;
+const DEFAULT_RESOLVER_DEADLINE_MS = 2_000;
+const MAX_RESOLVER_DEADLINE_MS = 10_000;
+const BROWSER_EGRESS_MODES = new Set(["public-web", "domain-allowlist"]);
+const NON_PUBLIC_HOSTS = new Set([
+    "localhost",
+    "metadata",
+    "metadata.google.internal",
+    "instance-data",
+    "instance-data.ec2.internal",
+]);
+const VALIDATED_BROWSER_EGRESS_POLICIES = new WeakSet();
+const SYSTEM_BROWSER_POLICY_CLOCK = { now: () => Date.now() };
+const SYSTEM_BROWSER_POLICY_TIMER = {
+    setTimeout: (callback, delayMs) => setTimeout(callback, delayMs),
+    clearTimeout: (handle) => {
+        clearTimeout(handle);
+    },
+};
+/**
+ * Compile trusted machine configuration once at browser-runtime load/reload.
+ * Invalid configuration must keep the runtime unavailable; navigation checks
+ * only accept this immutable compiled output and never re-normalize list data.
+ */
+export function compileBrowserEgressPolicy(config) {
+    if (!isRecord(config))
+        return undefined;
+    const mode = config["mode"];
+    const allowedDomains = config["allowedDomains"];
+    const allowedPorts = config["allowedPorts"];
+    if (!isBrowserEgressMode(mode))
+        return undefined;
+    if (!Array.isArray(allowedDomains) || allowedDomains.length > MAX_ALLOWED_DOMAIN_COUNT)
+        return undefined;
+    if (!Array.isArray(allowedPorts) || allowedPorts.length > MAX_ALLOWED_PORT_COUNT)
+        return undefined;
+    const normalizedDomains = [];
+    for (const entry of allowedDomains) {
+        const normalized = normalizeAllowedDomain(entry);
+        if (normalized === undefined)
+            return undefined;
+        if (!normalizedDomains.includes(normalized))
+            normalizedDomains.push(normalized);
+    }
+    const normalizedPorts = [];
+    for (const entry of allowedPorts) {
+        if (!isAllowedPort(entry))
+            return undefined;
+        if (!normalizedPorts.includes(entry))
+            normalizedPorts.push(entry);
+    }
+    if (mode === "domain-allowlist" && normalizedDomains.length === 0)
+        return undefined;
+    const policy = Object.freeze({
+        mode,
+        allowedDomains: Object.freeze(normalizedDomains),
+        allowedPorts: Object.freeze(normalizedPorts),
+    });
+    VALIDATED_BROWSER_EGRESS_POLICIES.add(policy);
+    return policy;
+}
+/**
+ * Parse and constrain an initial browser navigation without making a network
+ * request. This module never fetches or proxies a destination; Chromium must
+ * invoke the companion egress check for every request.
+ */
+export function evaluateBrowserNavigation(input, policy) {
+    if (!isCompiledBrowserEgressPolicy(policy))
+        return blocked("policy-invalid");
+    if (!isValidUrlInput(input))
+        return blocked("invalid-url");
+    let url;
+    try {
+        url = new URL(input);
+    }
+    catch {
+        return blocked("invalid-url");
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:")
+        return blocked("unsupported-scheme");
+    if (url.username !== "" || url.password !== "")
+        return blocked("userinfo-not-allowed");
+    const host = normalizeHostname(url.hostname);
+    if (host === undefined)
+        return blocked("invalid-url");
+    if (isNonPublicHostname(host))
+        return blocked("non-public-host");
+    const port = effectivePort(url);
+    if (!policy.allowedPorts.includes(port))
+        return blocked("port-not-allowed");
+    const hostAddressKind = isIP(host);
+    if (policy.mode === "domain-allowlist") {
+        if (hostAddressKind !== 0)
+            return blocked("literal-ip-not-allowed");
+        if (!isAllowedDomain(host, policy.allowedDomains))
+            return blocked("domain-not-allowed");
+    }
+    else if (hostAddressKind !== 0 && !isPublicInternetAddress(host)) {
+        return blocked("non-public-host");
+    }
+    url.hostname = host;
+    return { allowed: true, url: url.href, host, port, auditOrigin: url.origin };
+}
+/**
+ * Resolve a permitted hostname through an injected controlled resolver. This
+ * bounded preflight is defense in depth only: a future runtime still needs
+ * connection-time interception, a network boundary, and a concurrency budget
+ * to defeat rebinding and renderer paths.
+ */
+export async function evaluateBrowserEgress(input, policy, resolver, evaluationOptions) {
+    const navigation = evaluateBrowserNavigation(input, policy);
+    if (!navigation.allowed)
+        return navigation;
+    if (isIP(navigation.host) !== 0)
+        return navigation;
+    const options = resolveEgressEvaluationOptions(evaluationOptions);
+    if (options === undefined)
+        return blockedWithOrigin("dns-unavailable", navigation.auditOrigin);
+    const addresses = await resolveDnsWithDeadline(navigation.host, resolver, options);
+    if (!Array.isArray(addresses))
+        return blockedWithOrigin("dns-unavailable", navigation.auditOrigin);
+    if (addresses.length === 0)
+        return blockedWithOrigin("dns-no-addresses", navigation.auditOrigin);
+    if (addresses.length > MAX_DNS_ANSWER_COUNT)
+        return blockedWithOrigin("dns-answer-limit-exceeded", navigation.auditOrigin);
+    for (const address of addresses) {
+        if (typeof address !== "string" || !isPublicInternetAddress(address))
+            return blockedWithOrigin("non-public-address", navigation.auditOrigin);
+    }
+    return navigation;
+}
+/** Classify a DNS result or literal destination without exposing it to callers. */
+export function isPublicInternetAddress(address) {
+    const normalized = stripIpv6Brackets(address);
+    const version = isIP(normalized);
+    if (version === 4)
+        return isPublicIpv4(normalized);
+    if (version !== 6)
+        return false;
+    const value = parseIpv6(normalized);
+    return value !== undefined && isPublicIpv6(value);
+}
+function isCompiledBrowserEgressPolicy(policy) {
+    return typeof policy === "object" && policy !== null && VALIDATED_BROWSER_EGRESS_POLICIES.has(policy);
+}
+function isBrowserEgressMode(value) {
+    return typeof value === "string" && BROWSER_EGRESS_MODES.has(value);
+}
+function resolveEgressEvaluationOptions(evaluationOptions) {
+    const clock = evaluationOptions?.clock ?? SYSTEM_BROWSER_POLICY_CLOCK;
+    const timer = evaluationOptions?.timer ?? SYSTEM_BROWSER_POLICY_TIMER;
+    const resolverDeadlineMs = evaluationOptions?.resolverDeadlineMs ?? DEFAULT_RESOLVER_DEADLINE_MS;
+    if (typeof clock.now !== "function" || typeof timer.setTimeout !== "function" || typeof timer.clearTimeout !== "function")
+        return undefined;
+    if (!Number.isSafeInteger(resolverDeadlineMs) || resolverDeadlineMs < 1 || resolverDeadlineMs > MAX_RESOLVER_DEADLINE_MS)
+        return undefined;
+    return { clock, timer, resolverDeadlineMs };
+}
+async function resolveDnsWithDeadline(host, resolver, options) {
+    const controller = new AbortController();
+    let timerHandle;
+    try {
+        const startedAtMs = options.clock.now();
+        const deadlineAtMs = startedAtMs + options.resolverDeadlineMs;
+        if (!Number.isSafeInteger(startedAtMs) || !Number.isSafeInteger(deadlineAtMs))
+            return undefined;
+        const timeout = new Promise((resolve) => {
+            timerHandle = options.timer.setTimeout(() => {
+                controller.abort();
+                resolve(undefined);
+            }, options.resolverDeadlineMs);
+        });
+        // The race remains bounded even when a resolver ignores the abort signal.
+        const resolution = Promise.resolve()
+            .then(() => resolver.resolve(host, { signal: controller.signal, deadlineAtMs }))
+            .catch(() => undefined);
+        return await Promise.race([resolution, timeout]);
+    }
+    catch {
+        return undefined;
+    }
+    finally {
+        controller.abort();
+        if (timerHandle !== undefined) {
+            try {
+                options.timer.clearTimeout(timerHandle);
+            }
+            catch {
+                // The resolver is already aborted and the bounded timer can no longer affect the decision.
+            }
+        }
+    }
+}
+function isAllowedPort(value) {
+    return typeof value === "number" && Number.isSafeInteger(value) && value >= 1 && value <= 65_535;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isValidUrlInput(input) {
+    return input.length > 0
+        && input.length <= MAX_BROWSER_URL_LENGTH
+        && input === input.trim()
+        && !hasControlCharacter(input);
+}
+function hasControlCharacter(value) {
+    for (const character of value) {
+        const code = character.charCodeAt(0);
+        if (code < 32 || code === 127)
+            return true;
+    }
+    return false;
+}
+function normalizeHostname(value) {
+    const host = stripIpv6Brackets(value).toLowerCase().replace(/\.+$/u, "");
+    if (host === "")
+        return undefined;
+    if (isIP(host) !== 0)
+        return host;
+    if (host.length > 253)
+        return undefined;
+    const labels = host.split(".");
+    if (labels.some((label) => label.length === 0 || label.length > 63 || !/^[a-z\d](?:[a-z\d-]*[a-z\d])?$/u.test(label)))
+        return undefined;
+    return host;
+}
+function stripIpv6Brackets(value) {
+    return value.startsWith("[") && value.endsWith("]") ? value.slice(1, -1) : value;
+}
+function isNonPublicHostname(host) {
+    return isIP(host) === 0 && (!host.includes(".")
+        || NON_PUBLIC_HOSTS.has(host)
+        || host.endsWith(".localhost")
+        || host.endsWith(".local")
+        || host.endsWith(".internal"));
+}
+function effectivePort(url) {
+    if (url.port !== "")
+        return Number(url.port);
+    return url.protocol === "http:" ? 80 : 443;
+}
+function normalizeAllowedDomain(value) {
+    if (typeof value !== "string" || value.trim() !== value || value === "")
+        return undefined;
+    const wildcard = value.startsWith("*.");
+    const rawHost = wildcard ? value.slice(2) : value;
+    const host = normalizeHostname(rawHost);
+    if (host === undefined || !host.includes(".") || isIP(host) !== 0)
+        return undefined;
+    return wildcard ? `*.${host}` : host;
+}
+function isAllowedDomain(host, allowedDomains) {
+    return allowedDomains.some((normalized) => {
+        if (!normalized.startsWith("*."))
+            return host === normalized;
+        const suffix = normalized.slice(2);
+        return host !== suffix && host.endsWith(`.${suffix}`);
+    });
+}
+function blocked(reason) {
+    return { allowed: false, reason };
+}
+function blockedWithOrigin(reason, auditOrigin) {
+    return { allowed: false, reason, auditOrigin };
+}
+function isPublicIpv4(address) {
+    const octets = parseIpv4Octets(address);
+    if (octets === undefined)
+        return false;
+    const [first, second, third, fourth] = octets;
+    const value = ((first << 24) | (second << 16) | (third << 8) | fourth) >>> 0;
+    return !NON_PUBLIC_IPV4_PREFIXES.some(([prefix, bits]) => isIpv4Prefix(value, prefix, bits));
+}
+const NON_PUBLIC_IPV4_PREFIXES = [
+    [0x0000_0000, 8], // unspecified and "this" network
+    [0x0a00_0000, 8], // RFC1918
+    [0x6440_0000, 10], // carrier-grade NAT
+    [0x7f00_0000, 8], // loopback
+    [0xa9fe_0000, 16], // link-local / cloud metadata
+    [0xac10_0000, 12], // RFC1918
+    [0xc000_0000, 24], // IETF protocol assignments
+    [0xc000_0200, 24], // documentation
+    [0xc0a8_0000, 16], // RFC1918
+    [0xc612_0000, 15], // benchmarking
+    [0xc633_6400, 24], // documentation
+    [0xcb00_7100, 24], // documentation
+    [0xe000_0000, 4], // multicast and reserved
+];
+function isIpv4Prefix(value, prefix, bits) {
+    const mask = (0xffff_ffff << (32 - bits)) >>> 0;
+    return (value & mask) === (prefix & mask);
+}
+function isPublicIpv6(value) {
+    const embeddedIpv4 = embeddedIpv4Address(value);
+    if (embeddedIpv4 !== undefined)
+        return isPublicIpv4(integerToIpv4(embeddedIpv4));
+    if (isIpv6Prefix(value, IPV4_IPV6_TRANSLATION_ALLOCATION.prefix, IPV4_IPV6_TRANSLATION_ALLOCATION.bits))
+        return false;
+    if (!isIpv6Prefix(value, PUBLIC_NATIVE_IPV6_GLOBAL_UNICAST.prefix, PUBLIC_NATIVE_IPV6_GLOBAL_UNICAST.bits))
+        return false;
+    return !UNSUPPORTED_NATIVE_IPV6_PREFIXES.some(({ prefix, bits }) => isIpv6Prefix(value, prefix, bits));
+}
+function embeddedIpv4Address(value) {
+    if (!IPV4_EMBEDDED_IPV6_PREFIXES.some(({ prefix, bits }) => isIpv6Prefix(value, prefix, bits)))
+        return undefined;
+    return Number(value & 0xffffffffn);
+}
+function integerToIpv4(value) {
+    return [value >>> 24, (value >>> 16) & 255, (value >>> 8) & 255, value & 255].join(".");
+}
+function isIpv6Prefix(value, prefix, bits) {
+    return value >> BigInt(128 - bits) === prefix >> BigInt(128 - bits);
+}
+function parseIpv6(address) {
+    let normalized = address.toLowerCase();
+    const ipv4 = /\d+\.\d+\.\d+\.\d+$/u.exec(normalized)?.[0];
+    if (ipv4 !== undefined) {
+        const octets = parseIpv4Octets(ipv4);
+        if (octets === undefined)
+            return undefined;
+        const [first, second, third, fourth] = octets;
+        const highGroup = ((first << 8) | second).toString(16);
+        const lowGroup = ((third << 8) | fourth).toString(16);
+        normalized = `${normalized.slice(0, -ipv4.length)}${highGroup}:${lowGroup}`;
+    }
+    const halves = normalized.split("::");
+    if (halves.length > 2)
+        return undefined;
+    const [leftHalf, rightHalf] = halves;
+    if (leftHalf === undefined)
+        return undefined;
+    const left = leftHalf === "" ? [] : leftHalf.split(":");
+    const right = rightHalf === undefined || rightHalf === "" ? [] : rightHalf.split(":");
+    const missing = 8 - left.length - right.length;
+    if ((rightHalf === undefined && missing !== 0) || (rightHalf !== undefined && missing < 1))
+        return undefined;
+    const groups = [...left, ...Array.from({ length: missing }, () => "0"), ...right];
+    if (groups.length !== 8 || groups.some((group) => !/^[\da-f]{1,4}$/u.test(group)))
+        return undefined;
+    return groups.reduce((result, group) => (result << 16n) | BigInt(`0x${group}`), 0n);
+}
+function parseIpv4Octets(address) {
+    const parts = address.split(".").map(Number);
+    const [first, second, third, fourth] = parts;
+    if (parts.length !== 4 || first === undefined || second === undefined || third === undefined || fourth === undefined)
+        return undefined;
+    if (![first, second, third, fourth].every((part) => Number.isInteger(part) && part >= 0 && part <= 255))
+        return undefined;
+    return [first, second, third, fourth];
+}
+const IPV4_EMBEDDED_IPV6_PREFIXES = [
+    ipv6Prefix("::", 96), // IPv4-compatible
+    ipv6Prefix("::ffff:0:0", 96), // IPv4-mapped
+    ipv6Prefix("::ffff:0:0:0", 96), // IPv4-translated
+    ipv6Prefix("64:ff9b::", 96), // well-known NAT64
+];
+// Only the well-known /96 translation prefix is understood by this pure
+// classifier. Other addresses in the IANA translation allocation fail closed.
+const IPV4_IPV6_TRANSLATION_ALLOCATION = ipv6Prefix("64:ff9b::", 32);
+// Native IPv6 is public only in the ordinary global-unicast /3. This rejects
+// site-local, ULA, link-local, multicast, and non-GUA/unallocated 4000::/3.
+const PUBLIC_NATIVE_IPV6_GLOBAL_UNICAST = ipv6Prefix("2000::", 3);
+const UNSUPPORTED_NATIVE_IPV6_PREFIXES = [
+    // IETF protocol assignments include Teredo (2001::/32) and ORCHIDv2
+    // (2001:20::/28). Do not decode or permit any Teredo endpoint fields.
+    ipv6Prefix("2001::", 23),
+    ipv6Prefix("2001:db8::", 32), // documentation
+    ipv6Prefix("2002::", 16), // 6to4 transition addresses
+    ipv6Prefix("2620:4f:8000::", 48), // AS112 direct delegation
+    ipv6Prefix("3fff::", 20), // documentation
+];
+function ipv6Prefix(address, bits) {
+    const prefix = parseIpv6(address);
+    if (prefix === undefined)
+        throw new Error(`Invalid built-in IPv6 prefix: ${address}`);
+    return { prefix, bits };
+}
+//# sourceMappingURL=browserPolicy.js.map