@inkbox/sdk 0.2.16 → 0.3.1

package/dist/tunnels/client/_h2_transcode.js

@@ -0,0 +1,488 @@
+/**
+ * inkbox-tunnels/client/_h2_transcode.ts
+ *
+ * Server-side HTTP/2 fed by TLS plaintext via the WireDuplex pattern.
+ * Each h2 stream becomes a `DispatchRequest` handed to a `Dispatch`
+ * impl; the dispatcher's streamed response is encoded back into
+ * HEADERS+DATA+END_STREAM frames.
+ *
+ * Implements the Plaintext adapter contract used by the runtime in
+ * passthrough mode after the TLS terminator.
+ *
+ * WebSocket-over-h2 (RFC 8441 Extended CONNECT) is supported when the
+ * dispatcher exposes ``dispatchWebSocket``: the transcoder builds a
+ * byte-channel sink whose inbound DATA frames feed a frame decoder
+ * (unmasked per RFC 8441 §5.1) and whose outbound bytes ride h2 DATA
+ * frames. Dispatchers without that method respond ``:status 501``.
+ */
+import * as http2 from "node:http2";
+import { Duplex } from "node:stream";
+import { HOP_BY_HOP_RESPONSE } from "./_protocol.js";
+import { ByteChannelWebSocketSink } from "./_ws_passthrough.js";
+const OUTBOUND_END = Symbol("outbound-end");
+/**
+ * Wire-bytes Duplex injected into `http2.createServer()` via
+ * `server.emit("connection", duplex)`. Node's h2 server probes a small
+ * Socket-like surface on its underlying transport — the methods listed
+ * below cover the contract.
+ */
+class H2WireDuplex extends Duplex {
+    inbound = [];
+    outboundQueue = [];
+    outboundResolvers = [];
+    constructor() {
+        super({ allowHalfOpen: true });
+    }
+    pushIncoming(buf) {
+        this.inbound.push(buf);
+        this._read(0);
+    }
+    takeOutbound() {
+        if (this.outboundQueue.length > 0) {
+            return Promise.resolve(this.outboundQueue.shift());
+        }
+        return new Promise((resolve) => this.outboundResolvers.push(resolve));
+    }
+    endOutbound() {
+        this._enqueueOutbound(OUTBOUND_END);
+    }
+    _read(_size) {
+        while (this.inbound.length > 0) {
+            const chunk = this.inbound.shift();
+            if (!this.push(chunk))
+                return;
+        }
+    }
+    _write(chunk, _enc, cb) {
+        const buf = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
+        this._enqueueOutbound(buf);
+        cb();
+    }
+    _final(cb) {
+        cb();
+    }
+    setTimeout(_ms, _cb) { return this; }
+    setNoDelay(_b) { return this; }
+    setKeepAlive(_b, _ms) { return this; }
+    unref() { return this; }
+    ref() { return this; }
+    address() {
+        return { port: 0, family: "IPv4", address: "127.0.0.1" };
+    }
+    get remoteAddress() { return "127.0.0.1"; }
+    get remoteFamily() { return "IPv4"; }
+    get remotePort() { return 0; }
+    get localAddress() { return "127.0.0.1"; }
+    get localPort() { return 0; }
+    _enqueueOutbound(item) {
+        if (this.outboundResolvers.length > 0) {
+            this.outboundResolvers.shift()(item);
+            return;
+        }
+        this.outboundQueue.push(item);
+    }
+}
+// Re-exported under the legacy local name; canonical source is
+// ``_protocol.HOP_BY_HOP_RESPONSE``. Earlier copies drifted to the
+// wrong "trailers" token (TE/Connection value) instead of the
+// "trailer" header name.
+const RESPONSE_HOP_BY_HOP = HOP_BY_HOP_RESPONSE;
+/**
+ * h2 server fed by TLS plaintext; routes streams to a Dispatch impl.
+ * One instance per third-party TLS session.
+ */
+export class H2TranscoderPlaintext {
+    wire;
+    server;
+    maxInboundBodyBytes;
+    forwardedForIp;
+    sniHost;
+    closed = false;
+    constructor(opts) {
+        this.wire = new H2WireDuplex();
+        this.maxInboundBodyBytes = opts.maxInboundBodyBytes;
+        this.forwardedForIp = opts.forwardedForIp;
+        this.sniHost = opts.sniHost;
+        this.server = http2.createServer({
+            settings: {
+                enablePush: false,
+                maxConcurrentStreams: 100,
+                enableConnectProtocol: true,
+            },
+        });
+        this.server.on("stream", (stream, headers) => {
+            void this.handleStream(opts.dispatch, stream, headers);
+        });
+        this.server.emit("connection", this.wire);
+    }
+    async feed(plaintext) {
+        if (this.closed)
+            return;
+        this.wire.pushIncoming(plaintext);
+    }
+    async pumpOutbound(send) {
+        while (true) {
+            const item = await this.wire.takeOutbound();
+            if (item === OUTBOUND_END)
+                return;
+            try {
+                await send(item);
+            }
+            catch {
+                return;
+            }
+        }
+    }
+    async aclose() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        try {
+            this.server.close();
+        }
+        catch {
+            /* swallow */
+        }
+        this.wire.endOutbound();
+    }
+    async handleStream(dispatch, stream, headers) {
+        const method = headers[":method"] ?? "GET";
+        const path = headers[":path"] ?? "/";
+        const protocol = headers[":protocol"];
+        const isWebSocket = method === "CONNECT" &&
+            typeof protocol === "string" &&
+            protocol.toLowerCase() === "websocket";
+        // WebSocket-over-h2 — if the dispatcher exposes
+        // ``dispatchWebSocket``, build a byte-channel sink whose inbound
+        // bytes come from the stream's DATA frames (unmasked per RFC 8441
+        // §5.1) and whose outbound bytes flow back as DATA frames. Falls
+        // back to 501 when the dispatcher can't service WS upgrades.
+        if (isWebSocket) {
+            if (typeof dispatch.dispatchWebSocket === "function") {
+                await this.handleWebSocketStream(dispatch, stream, headers, method, path);
+                return;
+            }
+            try {
+                stream.respond({
+                    ":status": 501,
+                    "content-type": "text/plain",
+                    "inkbox-reason": "websocket-over-h2-not-implemented",
+                });
+                stream.end();
+            }
+            catch {
+                /* swallow */
+            }
+            return;
+        }
+        const flatHeaders = [];
+        let wsSubprotocol = null;
+        for (const [k, v] of Object.entries(headers)) {
+            if (Array.isArray(v)) {
+                for (const item of v)
+                    flatHeaders.push([k, item]);
+            }
+            else if (typeof v === "string") {
+                flatHeaders.push([k, v]);
+            }
+            if (k === "sec-websocket-protocol" && typeof v === "string") {
+                wsSubprotocol = v;
+            }
+        }
+        let inboundCount = 0;
+        let oversize = false;
+        const bodyChunks = [];
+        const bodyResolvers = [];
+        const enqueue = (item) => {
+            if (bodyResolvers.length > 0) {
+                bodyResolvers.shift()(item);
+                return;
+            }
+            bodyChunks.push(item);
+        };
+        stream.on("data", (chunk) => {
+            if (oversize)
+                return;
+            const buf = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
+            inboundCount += buf.length;
+            if (inboundCount > this.maxInboundBodyBytes) {
+                oversize = true;
+                try {
+                    stream.close(http2.constants.NGHTTP2_REFUSED_STREAM);
+                }
+                catch {
+                    /* swallow */
+                }
+                enqueue(null);
+                return;
+            }
+            enqueue(buf);
+        });
+        stream.on("end", () => enqueue(null));
+        stream.on("error", () => enqueue(null));
+        stream.on("close", () => enqueue(null));
+        async function* bodyIter() {
+            while (true) {
+                if (bodyChunks.length > 0) {
+                    const item = bodyChunks.shift();
+                    if (item === null)
+                        return;
+                    yield item;
+                    continue;
+                }
+                const item = await new Promise((resolve) => bodyResolvers.push(resolve));
+                if (item === null)
+                    return;
+                yield item;
+            }
+        }
+        const dispatchRequest = {
+            method,
+            path,
+            headers: flatHeaders,
+            body: bodyIter(),
+            forwardedForIp: this.forwardedForIp,
+            sniHost: this.sniHost,
+            isWebSocket: false,
+            wsSubprotocol,
+            transport: "h2",
+        };
+        const sink = makeSink(stream);
+        try {
+            await dispatch.dispatch(dispatchRequest, sink);
+        }
+        catch {
+            try {
+                if (!sink.headSent) {
+                    stream.respond({ ":status": 502 });
+                    stream.end("upstream error");
+                }
+            }
+            catch {
+                /* swallow */
+            }
+        }
+        try {
+            if (!stream.closed && !sink.bodyEnded)
+                stream.end();
+        }
+        catch {
+            /* swallow */
+        }
+    }
+    async handleWebSocketStream(dispatch, stream, headers, method, path) {
+        const flatHeaders = [];
+        let wsSubprotocol = null;
+        for (const [k, v] of Object.entries(headers)) {
+            if (Array.isArray(v)) {
+                for (const item of v)
+                    flatHeaders.push([k, item]);
+            }
+            else if (typeof v === "string") {
+                flatHeaders.push([k, v]);
+            }
+            if (k === "sec-websocket-protocol" && typeof v === "string") {
+                wsSubprotocol = v;
+            }
+        }
+        let acceptInvoked = false;
+        const buildAccept = (subprotocol, extraHeaders) => {
+            acceptInvoked = true;
+            const out = { ":status": 200 };
+            if (subprotocol !== null) {
+                out["sec-websocket-protocol"] = subprotocol;
+            }
+            if (extraHeaders !== null) {
+                // Application-defined response headers — set-cookie, custom
+                // X-* flags, etc. Multi-value support via array, mirroring
+                // the h1 path. Caller has already filtered hop-by-hop /
+                // handshake-control headers.
+                for (const [hk, hv] of extraHeaders) {
+                    const kl = hk.toLowerCase();
+                    const existing = out[kl];
+                    if (existing === undefined) {
+                        out[kl] = hv;
+                    }
+                    else if (Array.isArray(existing)) {
+                        existing.push(hv);
+                    }
+                    else {
+                        out[kl] = [String(existing), hv];
+                    }
+                }
+            }
+            try {
+                stream.respond(out);
+            }
+            catch {
+                /* swallow */
+            }
+            return Buffer.alloc(0);
+        };
+        const buildReject = (status) => {
+            try {
+                stream.respond({
+                    ":status": status,
+                    "inkbox-reason": "websocket-rejected",
+                }, { endStream: true });
+            }
+            catch {
+                /* swallow */
+            }
+            return Buffer.alloc(0);
+        };
+        const sendPlaintext = async (data) => {
+            if (data.length === 0)
+                return;
+            await new Promise((resolve) => {
+                try {
+                    if (stream.write(data)) {
+                        resolve();
+                    }
+                    else {
+                        stream.once("drain", () => resolve());
+                    }
+                }
+                catch {
+                    resolve();
+                }
+            });
+        };
+        const sink = new ByteChannelWebSocketSink({
+            sendPlaintext,
+            buildAcceptResponse: buildAccept,
+            buildRejectResponse: buildReject,
+            requireClientMask: false, // RFC 8441 §5.1 — h2 WS frames unmasked
+            onClose: async () => {
+                try {
+                    if (!stream.closed)
+                        stream.end();
+                }
+                catch {
+                    /* swallow */
+                }
+            },
+        });
+        const wsSink = sink;
+        stream.on("data", (chunk) => {
+            const buf = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
+            wsSink.feedInbound(buf);
+        });
+        stream.on("end", () => wsSink.signalInboundEof());
+        stream.on("close", () => wsSink.signalInboundEof());
+        stream.on("error", () => wsSink.signalInboundEof());
+        const dispatchRequest = {
+            method,
+            path,
+            headers: flatHeaders,
+            body: emptyAsyncIter(),
+            forwardedForIp: this.forwardedForIp,
+            sniHost: this.sniHost,
+            isWebSocket: true,
+            wsSubprotocol,
+            transport: "h2",
+        };
+        try {
+            await dispatch.dispatchWebSocket(dispatchRequest, wsSink);
+        }
+        catch {
+            if (!acceptInvoked) {
+                try {
+                    await wsSink.reject({ status: 500 });
+                }
+                catch {
+                    /* swallow */
+                }
+            }
+        }
+        finally {
+            try {
+                await wsSink.aclose();
+            }
+            catch {
+                /* swallow */
+            }
+        }
+    }
+}
+async function* emptyAsyncIter() {
+    if (false)
+        yield Buffer.alloc(0);
+}
+function makeSink(stream) {
+    const state = { headSent: false, bodyEnded: false };
+    return {
+        get headSent() { return state.headSent; },
+        get bodyEnded() { return state.bodyEnded; },
+        async sendHead(head) {
+            if (state.headSent)
+                return;
+            state.headSent = true;
+            const out = { ":status": head.status };
+            for (const [k, v] of head.headers) {
+                const kl = k.toLowerCase();
+                if (RESPONSE_HOP_BY_HOP.has(kl))
+                    continue;
+                if (kl.startsWith(":"))
+                    continue;
+                // Accumulate duplicates as arrays.
+                const existing = out[kl];
+                if (existing === undefined) {
+                    out[kl] = v;
+                }
+                else if (Array.isArray(existing)) {
+                    existing.push(v);
+                }
+                else {
+                    out[kl] = [String(existing), v];
+                }
+            }
+            try {
+                stream.respond(out);
+            }
+            catch {
+                /* stream closed before respond — swallow */
+            }
+        },
+        async sendBody(chunk) {
+            if (state.bodyEnded || chunk.length === 0)
+                return;
+            await new Promise((resolve) => {
+                // stream.write may return false → wait for drain.
+                const ok = stream.write(chunk, (err) => {
+                    if (err)
+                        resolve(); // best effort; let the server drain naturally
+                    else
+                        resolve();
+                });
+                if (!ok) {
+                    // Still resolved by the callback; nothing else to do here.
+                }
+            });
+        },
+        async endBody() {
+            if (state.bodyEnded)
+                return;
+            state.bodyEnded = true;
+            try {
+                await new Promise((resolve) => stream.end(resolve));
+            }
+            catch {
+                /* swallow */
+            }
+        },
+        async reset(reason) {
+            if (state.bodyEnded)
+                return;
+            state.bodyEnded = true;
+            try {
+                stream.close(http2.constants.NGHTTP2_INTERNAL_ERROR);
+            }
+            catch {
+                /* swallow */
+            }
+            void reason;
+        },
+    };
+}
+//# sourceMappingURL=_h2_transcode.js.map

package/dist/tunnels/client/_h2_transcode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_h2_transcode.js","sourceRoot":"","sources":["../../../src/tunnels/client/_h2_transcode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAOrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,YAAa,SAAQ,MAAM;IACvB,OAAO,GAAa,EAAE,CAAC;IACvB,aAAa,GAAwC,EAAE,CAAC;IACxD,iBAAiB,GAErB,EAAE,CAAC;IAEP;QACE,KAAK,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,YAAY,CAAC,GAAW;QACtB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IAED,YAAY;QACV,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAG,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,WAAW;QACT,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAEQ,KAAK,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAG,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO;QAChC,CAAC;IACH,CAAC;IAEQ,MAAM,CACb,KAAsB,EACtB,IAAY,EACZ,EAAgC;QAEhC,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACnE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC3B,EAAE,EAAE,CAAC;IACP,CAAC;IAEQ,MAAM,CAAC,EAAgC;QAC9C,EAAE,EAAE,CAAC;IACP,CAAC;IAED,UAAU,CAAC,GAAW,EAAE,GAAgB,IAAU,OAAO,IAAI,CAAC,CAAC,CAAC;IAChE,UAAU,CAAC,EAAY,IAAU,OAAO,IAAI,CAAC,CAAC,CAAC;IAC/C,YAAY,CAAC,EAAY,EAAE,GAAY,IAAU,OAAO,IAAI,CAAC,CAAC,CAAC;IAC/D,KAAK,KAAW,OAAO,IAAI,CAAC,CAAC,CAAC;IAC9B,GAAG,KAAW,OAAO,IAAI,CAAC,CAAC,CAAC;IAC5B,OAAO;QACL,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,aAAa,KAAa,OAAO,WAAW,CAAC,CAAC,CAAC;IACnD,IAAI,YAAY,KAAa,OAAO,MAAM,CAAC,CAAC,CAAC;IAC7C,IAAI,UAAU,KAAa,OAAO,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,YAAY,KAAa,OAAO,WAAW,CAAC,CAAC,CAAC;IAClD,IAAI,SAAS,KAAa,OAAO,CAAC,CAAC,CAAC,CAAC;IAE7B,gBAAgB,CAAC,IAAkC;QACzD,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAG,CAAC,IAAI,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;CACF;AAED,+DAA+D;AAC/D,mEAAmE;AACnE,8DAA8D;AAC9D,yBAAyB;AACzB,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAShD;;;GAGG;AACH,MAAM,OAAO,qBAAqB;IACf,IAAI,CAAe;IACnB,MAAM,CAAoB;IAC1B,mBAAmB,CAAS;IAC5B,cAAc,CAAgB;IAC9B,OAAO,CAAgB;IAChC,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAY,IAA+B;QACzC,IAAI,CAAC,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACpD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE;gBACR,UAAU,EAAE,KAAK;gBACjB,oBAAoB,EAAE,GAAG;gBACzB,qBAAqB,EAAE,IAAI;aAC5B;SACF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;YAC3C,KAAK,IAAI,CAAC,YAAY,CACpB,IAAI,CAAC,QAAQ,EACb,MAAiC,EACjC,OAAO,CACR,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAsC;QACvD,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,IAAI,IAAI,KAAK,YAAY;gBAAE,OAAO;YAClC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,QAAkB,EAClB,MAA+B,EAC/B,OAAkC;QAElC,MAAM,MAAM,GAAI,OAAO,CAAC,SAAS,CAAY,IAAI,KAAK,CAAC;QACvD,MAAM,IAAI,GAAI,OAAO,CAAC,OAAO,CAAY,IAAI,GAAG,CAAC;QACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,WAAW,GACf,MAAM,KAAK,SAAS;YACpB,OAAO,QAAQ,KAAK,QAAQ;YAC5B,QAAQ,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC;QAEzC,gDAAgD;QAChD,iEAAiE;QACjE,kEAAkE;QAClE,iEAAiE;QACjE,6DAA6D;QAC7D,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,OAAO,QAAQ,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;gBACrD,MAAM,IAAI,CAAC,qBAAqB,CAC9B,QAAQ,EACR,MAAM,EACN,OAAO,EACP,MAAM,EACN,IAAI,CACL,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,OAAO,CAAC;oBACb,SAAS,EAAE,GAAG;oBACd,cAAc,EAAE,YAAY;oBAC5B,eAAe,EAAE,mCAAmC;iBACrD,CAAC,CAAC;gBACH,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAA4B,EAAE,CAAC;QAChD,IAAI,aAAa,GAAkB,IAAI,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,KAAK,MAAM,IAAI,IAAI,CAAC;oBAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,CAAC,KAAK,wBAAwB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC5D,aAAa,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,UAAU,GAAyB,EAAE,CAAC;QAC5C,MAAM,aAAa,GAA0C,EAAE,CAAC;QAEhE,MAAM,OAAO,GAAG,CAAC,IAAmB,EAAQ,EAAE;YAC5C,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,aAAa,CAAC,KAAK,EAAG,CAAC,IAAI,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAC3C,IAAI,QAAQ;gBAAE,OAAO;YACrB,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACnE,YAAY,IAAI,GAAG,CAAC,MAAM,CAAC;YAC3B,IAAI,YAAY,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC5C,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;gBACvD,CAAC;gBAAC,MAAM,CAAC;oBACP,aAAa;gBACf,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAExC,KAAK,SAAS,CAAC,CAAC,QAAQ;YACtB,OAAO,IAAI,EAAE,CAAC;gBACZ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAG,CAAC;oBACjC,IAAI,IAAI,KAAK,IAAI;wBAAE,OAAO;oBAC1B,MAAM,IAAI,CAAC;oBACX,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE,CACxD,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAC5B,CAAC;gBACF,IAAI,IAAI,KAAK,IAAI;oBAAE,OAAO;gBAC1B,MAAM,IAAI,CAAC;YACb,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAoB;YACvC,MAAM;YACN,IAAI;YACJ,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,QAAQ,EAAE;YAChB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,KAAK;YAClB,aAAa;YACb,SAAS,EAAE,IAAI;SAChB,CAAC;QAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACnB,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;oBACnC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,QAAkB,EAClB,MAA+B,EAC/B,OAAkC,EAClC,MAAc,EACd,IAAY;QAEZ,MAAM,WAAW,GAA4B,EAAE,CAAC;QAChD,IAAI,aAAa,GAAkB,IAAI,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,KAAK,MAAM,IAAI,IAAI,CAAC;oBAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,CAAC,KAAK,wBAAwB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC5D,aAAa,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,IAAI,aAAa,GAAG,KAAK,CAAC;QAE1B,MAAM,WAAW,GAAG,CAClB,WAA0B,EAC1B,YAA4C,EACpC,EAAE;YACV,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM,GAAG,GAA8B,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;YAC1D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzB,GAAG,CAAC,wBAAwB,CAAC,GAAG,WAAW,CAAC;YAC9C,CAAC;YACD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC1B,4DAA4D;gBAC5D,2DAA2D;gBAC3D,wDAAwD;gBACxD,6BAA6B;gBAC7B,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC;oBACpC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;oBACzB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;wBAC3B,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC;oBACf,CAAC;yBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACpB,CAAC;yBAAM,CAAC;wBACN,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC,CAAC;QAEF,MAAM,WAAW,GAAG,CAAC,MAAc,EAAU,EAAE;YAC7C,IAAI,CAAC;gBACH,MAAM,CAAC,OAAO,CACZ;oBACE,SAAS,EAAE,MAAM;oBACjB,eAAe,EAAE,oBAAoB;iBACtC,EACD,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC,CAAC;QAEF,MAAM,aAAa,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;YAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC9B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,IAAI,CAAC;oBACH,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBACvB,OAAO,EAAE,CAAC;oBACZ,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;oBACxC,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,wBAAwB,CAAC;YACxC,aAAa;YACb,mBAAmB,EAAE,WAAW;YAChC,mBAAmB,EAAE,WAAW;YAChC,iBAAiB,EAAE,KAAK,EAAE,wCAAwC;YAClE,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,IAAI,CAAC,MAAM,CAAC,MAAM;wBAAE,MAAM,CAAC,GAAG,EAAE,CAAC;gBACnC,CAAC;gBAAC,MAAM,CAAC;oBACP,aAAa;gBACf,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAA6B,IAAI,CAAC;QAE9C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAC3C,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACnE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAEpD,MAAM,eAAe,GAAoB;YACvC,MAAM;YACN,IAAI;YACJ,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,cAAc,EAAE;YACtB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI;YACjB,aAAa;YACb,SAAS,EAAE,IAAI;SAChB,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,iBAAkB,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvC,CAAC;gBAAC,MAAM,CAAC;oBACP,aAAa;gBACf,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,KAAK,SAAS,CAAC,CAAC,cAAc;IAC5B,IAAI,KAAgB;QAAE,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CACf,MAA+B;IAE/B,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACpD,OAAO;QACL,IAAI,QAAQ,KAAK,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzC,IAAI,SAAS,KAAK,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,QAAQ,CAAC,IAA0B;YACvC,IAAI,KAAK,CAAC,QAAQ;gBAAE,OAAO;YAC3B,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;YACtB,MAAM,GAAG,GAA8B,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAClE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC3B,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC1C,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACjC,mCAAmC;gBACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;gBACzB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC;qBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACnC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnB,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;YAC9C,CAAC;QACH,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,KAAa;YAC1B,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAClD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,kDAAkD;gBAClD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;oBACrC,IAAI,GAAG;wBAAE,OAAO,EAAE,CAAC,CAAC,8CAA8C;;wBAC7D,OAAO,EAAE,CAAC;gBACjB,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,2DAA2D;gBAC7D,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,OAAO;YACX,IAAI,KAAK,CAAC,SAAS;gBAAE,OAAO;YAC5B,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,MAAc;YACxB,IAAI,KAAK,CAAC,SAAS;gBAAE,OAAO;YAC5B,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;YACD,KAAK,MAAM,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tunnels/client/_handler.d.ts

@@ -0,0 +1,62 @@
+/**
+ * inkbox-tunnels/client/_handler.ts
+ *
+ * In-process Fetch-API HTTP handler. The user supplies a
+ * `(req: Request, ctx: InkboxRequestContext) => Response | Promise<Response>`
+ * function; the runtime synthesizes a `Request` from the envelope,
+ * invokes the handler, reads the response with the same per-chunk size
+ * cap as the URL-forward path, and returns a discriminated union the
+ * runtime maps onto fixed on-wire response shapes.
+ *
+ * Mirrors Python `_asgi.py` semantics at the wire level. The TS-side
+ * shape is Web standards (Fetch API) instead of ASGI 3.0.
+ */
+import type { Envelope, ReadonlyEnvelope } from "./_envelope.js";
+export interface InkboxRequestContext {
+    /**
+     * Tripped when the runtime's deadline expires. Plumbed through to
+     * the handler so user code can react cooperatively.
+     */
+    signal: AbortSignal;
+    /**
+     * Best-effort original client IP (from the inkbox forwarded-for
+     * meta header). null when not advertised by the server.
+     */
+    forwardedForIp: string | null;
+    /** SNI host as observed at the public ingress, when available. */
+    sniHost: string | null;
+    /**
+     * Read-only access to the parsed envelope for callers that need
+     * metadata not exposed elsewhere on the context. Escape hatch only;
+     * prefer the typed fields above.
+     */
+    envelope: ReadonlyEnvelope;
+}
+export type InkboxHandler = (req: Request, ctx: InkboxRequestContext) => Response | Promise<Response>;
+export type InProcessHttpResult = {
+    kind: "ok";
+    status: number;
+    headers: Array<[string, string]>;
+    body: Buffer;
+} | {
+    kind: "too-large";
+    status: 502;
+    inkboxReason: "response-too-large";
+} | {
+    kind: "handler-error";
+    status: 502;
+    inkboxReason: "handler-error";
+};
+export interface DispatchHttpInProcessOpts {
+    envelope: Envelope;
+    handler: InkboxHandler;
+    publicHost: string;
+    maxResponseBytes: number;
+    signal: AbortSignal;
+}
+/**
+ * Synthesize a `Request` from the envelope, invoke the handler, read
+ * back the response under the size cap.
+ */
+export declare function dispatchHttpInProcess(opts: DispatchHttpInProcessOpts): Promise<InProcessHttpResult>;
+//# sourceMappingURL=_handler.d.ts.map

package/dist/tunnels/client/_handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_handler.d.ts","sourceRoot":"","sources":["../../../src/tunnels/client/_handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGjE,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,MAAM,EAAE,WAAW,CAAC;IACpB;;;OAGG;IACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,kEAAkE;IAClE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;;;OAIG;IACH,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,MAAM,aAAa,GAAG,CAC1B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,oBAAoB,KACtB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAElC,MAAM,MAAM,mBAAmB,GAC3B;IACE,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;CACd,GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,GAAG,CAAC;IACZ,YAAY,EAAE,oBAAoB,CAAC;CACpC,GACD;IACE,IAAI,EAAE,eAAe,CAAC;IACtB,MAAM,EAAE,GAAG,CAAC;IACZ,YAAY,EAAE,eAAe,CAAC;CAC/B,CAAC;AAEN,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,mBAAmB,CAAC,CAyG9B"}