@isomoes/iread 0.1.0

package/dist/server/feed-service.js

@@ -0,0 +1,523 @@
+// src/server/feed-service.ts
+// Domain logic: add/delete/refresh feeds, fetch+parse+sanitize+dedup+persist with
+// a state-preserving upsert, and list/get/patch/mark items. All queries are
+// parameterized; DB rows are mapped to the camelCase DTOs in shared/types.ts.
+// (PLAN Sections 5, 7)
+import { createHash } from 'node:crypto';
+import Parser from 'rss-parser';
+import { db, transaction, totalChanges, queryAll, queryGet, run, } from './db.js';
+import { fetchFeed } from './fetch-feed.js';
+import { assertSafeFeedUrl } from './ssrf.js';
+import { sanitizeArticleHtml, toPlainText } from './sanitize.js';
+const SUMMARY_MAX = 280;
+const LIMIT_DEFAULT = 50;
+const LIMIT_MAX = 200;
+export class ServiceError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'ServiceError';
+    }
+}
+const parser = new Parser({
+    customFields: {
+        item: [
+            ['content:encoded', 'contentEncoded'],
+            ['dc:creator', 'dcCreator'],
+            ['updated', 'atomUpdated'],
+        ],
+    },
+});
+// ---------------------------------------------------------------------------
+// Row -> DTO mappers
+// ---------------------------------------------------------------------------
+function mapFeed(row) {
+    return {
+        id: row.id,
+        feedUrl: row.feed_url,
+        siteUrl: row.site_url,
+        title: row.title,
+        description: row.description,
+        lastFetchedAt: row.last_fetched_at,
+        fetchError: row.fetch_error,
+        createdAt: row.created_at,
+    };
+}
+function mapFeedWithCounts(row) {
+    return {
+        ...mapFeed(row),
+        unreadCount: row.unread_count,
+        totalCount: row.total_count,
+    };
+}
+function mapItem(row) {
+    return {
+        id: row.id,
+        feedId: row.feed_id,
+        feedTitle: row.feed_title,
+        guid: row.guid,
+        link: row.link,
+        title: row.title,
+        author: row.author,
+        contentHtml: row.content_html,
+        summary: row.summary,
+        publishedAt: row.published_at,
+        fetchedAt: row.fetched_at,
+        isRead: row.is_read === 1,
+        isStarred: row.is_starred === 1,
+    };
+}
+function mapItemSummary(row) {
+    return {
+        id: row.id,
+        feedId: row.feed_id,
+        feedTitle: row.feed_title,
+        title: row.title,
+        author: row.author,
+        link: row.link,
+        summary: row.summary,
+        publishedAt: row.published_at,
+        isRead: row.is_read === 1,
+        isStarred: row.is_starred === 1,
+    };
+}
+// ---------------------------------------------------------------------------
+// Derivation helpers (PLAN 5.5, 5.6)
+// ---------------------------------------------------------------------------
+function sha256(s) {
+    return createHash('sha256').update(s).digest('hex');
+}
+function derivePublishedAt(item) {
+    for (const c of [item.isoDate, item.pubDate, item.atomUpdated, item.updated]) {
+        if (!c)
+            continue;
+        const ms = Date.parse(c);
+        if (!Number.isNaN(ms))
+            return ms;
+    }
+    return Date.now(); // last resort; anchors a dateless item to first-seen time
+}
+// ---------------------------------------------------------------------------
+// Feed counts query (reused by list + per-feed responses)
+// ---------------------------------------------------------------------------
+const FEED_COUNTS_SELECT = `
+  SELECT
+    f.id, f.feed_url, f.site_url, f.title, f.description, f.etag, f.last_modified,
+    f.last_fetched_at, f.fetch_error, f.created_at,
+    COALESCE(SUM(CASE WHEN i.is_read = 0 THEN 1 ELSE 0 END), 0) AS unread_count,
+    COALESCE(COUNT(i.id), 0) AS total_count
+  FROM feeds f
+  LEFT JOIN items i ON i.feed_id = f.id
+`;
+function getFeedWithCounts(id) {
+    const row = queryGet(`${FEED_COUNTS_SELECT} WHERE f.id = ? GROUP BY f.id`, id);
+    return row ? mapFeedWithCounts(row) : null;
+}
+function computeTotals() {
+    const row = queryGet(`SELECT
+       COUNT(*) AS all_count,
+       COALESCE(SUM(CASE WHEN is_read = 0 THEN 1 ELSE 0 END), 0) AS unread_count,
+       COALESCE(SUM(CASE WHEN is_starred = 1 THEN 1 ELSE 0 END), 0) AS starred_count
+     FROM items`);
+    return { all: row.all_count, unread: row.unread_count, starred: row.starred_count };
+}
+// ---------------------------------------------------------------------------
+// listFeeds (PLAN 7 GET /api/feeds)
+// ---------------------------------------------------------------------------
+export function listFeeds() {
+    const rows = queryAll(`${FEED_COUNTS_SELECT} GROUP BY f.id ORDER BY f.title COLLATE NOCASE ASC, f.id ASC`);
+    return {
+        feeds: rows.map(mapFeedWithCounts),
+        totals: computeTotals(),
+    };
+}
+const INSERT_ITEM = `
+  INSERT INTO items
+    (feed_id, guid, link, title, author, content_html, summary, published_at, dedup_key)
+  VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+  ON CONFLICT(feed_id, dedup_key) DO NOTHING
+`;
+const UPDATE_ITEM = `
+  UPDATE items SET
+    title        = ?,
+    author       = ?,
+    content_html = ?,
+    summary      = ?,
+    link         = ?
+  WHERE feed_id = ? AND dedup_key = ?
+`;
+/**
+ * Parse + sanitize a feed body. Returns the derived feed metadata and a
+ * SYNCHRONOUS `commit(feedId)` closure that performs the dedup upsert and returns
+ * the count of truly-new items. The async parse/sanitize work runs here (no DB);
+ * the caller runs `commit` inside a transaction so node:sqlite never awaits
+ * mid-transaction. (PLAN 5.3-5.7)
+ */
+async function parseAndPrepare(feedUrl, xml) {
+    const parsed = await parser.parseString(xml);
+    const feedMeta = {
+        title: (parsed.title ?? '').toString(),
+        siteUrl: parsed.link ?? null,
+        description: parsed.description ?? null,
+    };
+    // Derive + sanitize every item first (pure work, no DB).
+    const prepared = (parsed.items ?? []).map((raw) => {
+        // rss-parser's Item type omits several fields we read (author, id, updated),
+        // so widen it locally; all reads are optional/guarded.
+        const item = raw;
+        const rawContent = item.contentEncoded ?? item.content ?? item.summary ?? '';
+        const author = item.creator ?? item.dcCreator ?? item.author ?? null;
+        const guid = item.guid ?? item.id ?? null;
+        const link = item.link ?? null;
+        const title = (item.title ?? '(untitled)').toString();
+        return {
+            guid,
+            link,
+            title,
+            author: author === null || author === undefined ? null : String(author),
+            contentHtml: sanitizeArticleHtml(rawContent),
+            summary: toPlainText(item.contentSnippet ?? rawContent).trim().slice(0, SUMMARY_MAX) || null,
+            publishedAt: derivePublishedAt(item),
+            // guid, then link, then a STABLE synthetic hash of title + feedUrl (never a timestamp).
+            dedupKey: guid ?? link ?? sha256(`${title}\0${feedUrl}`),
+        };
+    });
+    function commit(feedId) {
+        // Pass 1: INSERT ... DO NOTHING for every item, measuring the total_changes()
+        // delta around the loop. DO NOTHING adds 0 on conflict and 1 on a real insert,
+        // so the delta is exactly the number of truly-new rows.
+        const insertStmt = db.prepare(INSERT_ITEM);
+        const before = totalChanges();
+        for (const p of prepared) {
+            insertStmt.run(feedId, p.guid, p.link, p.title, p.author, p.contentHtml, p.summary, p.publishedAt, p.dedupKey);
+        }
+        const newItems = totalChanges() - before;
+        // Pass 2: UPDATE mutable content for existing rows (idempotent for state:
+        // preserves published_at, fetched_at, is_read, is_starred, guid).
+        const updateStmt = db.prepare(UPDATE_ITEM);
+        for (const p of prepared) {
+            updateStmt.run(p.title, p.author, p.contentHtml, p.summary, p.link, feedId, p.dedupKey);
+        }
+        return newItems;
+    }
+    return { feedMeta, commit };
+}
+const UPDATE_FEED_ON_SUCCESS = `
+  UPDATE feeds SET
+    title = COALESCE(NULLIF(?, ''), title),
+    site_url = ?, description = ?,
+    etag = ?, last_modified = ?,
+    last_fetched_at = ?, fetch_error = NULL
+  WHERE id = ?
+`;
+async function refreshFeedRow(row) {
+    const now = Date.now();
+    try {
+        const result = await fetchFeed({
+            feedUrl: row.feed_url,
+            etag: row.etag,
+            lastModified: row.last_modified,
+        });
+        if (result.kind === 'notModified') {
+            // 304: nothing changed. Update last_fetched_at and clear any prior error.
+            db.prepare(`UPDATE feeds SET last_fetched_at = ?, fetch_error = NULL WHERE id = ?`).run(now, row.id);
+            return { feed: getFeedWithCounts(row.id), newItems: 0, ok: true };
+        }
+        // Parse + sanitize OUTSIDE the transaction (async, CPU work, no DB). Only the
+        // synchronous DB writes (commit) run inside the transaction so node:sqlite
+        // never awaits mid-transaction. CRITICAL (review fix #13): the new
+        // etag/last_modified are persisted only here, after a fully successful
+        // parse+upsert.
+        const { feedMeta, commit } = await parseAndPrepare(row.feed_url, result.xml);
+        const newItems = transaction(() => {
+            const inserted = commit(row.id);
+            db.prepare(UPDATE_FEED_ON_SUCCESS).run(feedMeta.title, feedMeta.siteUrl, feedMeta.description, result.etag, result.lastModified, now, row.id);
+            return inserted;
+        });
+        return { feed: getFeedWithCounts(row.id), newItems, ok: true };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        db.prepare(`UPDATE feeds SET last_fetched_at = ?, fetch_error = ? WHERE id = ?`).run(now, message, row.id);
+        return { feed: getFeedWithCounts(row.id), newItems: 0, ok: false };
+    }
+}
+function getFeedRow(id) {
+    return queryGet(`SELECT * FROM feeds WHERE id = ?`, id);
+}
+/** Refresh one feed by id. 404 (NOT_FOUND) if the id is unknown; a fetch failure
+ *  is data, not an error (returns the feed with fetchError set, newItems 0). */
+export async function refreshFeed(id) {
+    const row = getFeedRow(id);
+    if (!row)
+        throw new ServiceError('NOT_FOUND', 'Feed not found.');
+    const outcome = await refreshFeedRow(row);
+    return { feed: outcome.feed, newItems: outcome.newItems };
+}
+/** Refresh every feed sequentially. Never fails because one feed errored;
+ *  tallies refreshed/failed/newItems and returns the full updated feed list. */
+export async function refreshAll() {
+    const rows = queryAll(`SELECT * FROM feeds ORDER BY id ASC`);
+    let refreshed = 0;
+    let failed = 0;
+    let newItems = 0;
+    // Sequential, one transaction per feed (commit per feed keeps each transaction
+    // short on the synchronous DB; one failure never aborts the loop).
+    for (const row of rows) {
+        try {
+            const outcome = await refreshFeedRow(row);
+            if (outcome.ok)
+                refreshed += 1;
+            else
+                failed += 1;
+            newItems += outcome.newItems;
+        }
+        catch {
+            // refreshFeedRow already records its own errors; this guards against any
+            // unexpected throw so the loop always completes.
+            failed += 1;
+        }
+    }
+    return { feeds: listFeeds().feeds, refreshed, failed, newItems };
+}
+// ---------------------------------------------------------------------------
+// addFeed (PLAN 7 POST /api/feeds)
+// ---------------------------------------------------------------------------
+// Validate URL (SSRF guard), insert the feed row, then do the initial
+// fetch+parse+store synchronously. On parse failure the whole thing rolls back
+// and surfaces as 422 (there is no existing row to attach the error to).
+export async function addFeed(url) {
+    const trimmed = (url ?? '').trim();
+    if (!trimmed)
+        throw new ServiceError('BAD_INPUT', 'A feed URL is required.');
+    // SSRF guard up front (also validates scheme + resolvability).
+    try {
+        await assertSafeFeedUrl(trimmed);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : 'Unsafe or invalid URL.';
+        throw new ServiceError('UNSAFE_URL', message);
+    }
+    // Reject a duplicate before doing any network work.
+    const existing = queryGet(`SELECT id FROM feeds WHERE feed_url = ?`, trimmed);
+    if (existing)
+        throw new ServiceError('DUPLICATE', 'That feed is already subscribed.');
+    // Fetch + parse BEFORE touching the DB so a bad feed never leaves a row behind.
+    let fetchResult;
+    try {
+        fetchResult = await fetchFeed({ feedUrl: trimmed, etag: null, lastModified: null });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new ServiceError('UNPARSEABLE', `Could not fetch the feed: ${message}`);
+    }
+    if (fetchResult.kind === 'notModified') {
+        // No validators were sent, so a 304 here is anomalous; treat as unparseable.
+        throw new ServiceError('UNPARSEABLE', 'The server returned 304 with no prior validators.');
+    }
+    let prepared;
+    try {
+        prepared = await parseAndPrepare(trimmed, fetchResult.xml);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new ServiceError('UNPARSEABLE', `That URL did not parse as a feed: ${message}`);
+    }
+    const now = Date.now();
+    const feedId = transaction(() => {
+        // INSERT may still race a concurrent add; the UNIQUE constraint protects us.
+        const ins = run(`INSERT INTO feeds (feed_url, last_fetched_at) VALUES (?, ?)`, trimmed, now);
+        const id = ins.lastInsertRowid;
+        prepared.commit(id);
+        db.prepare(UPDATE_FEED_ON_SUCCESS).run(prepared.feedMeta.title, prepared.feedMeta.siteUrl, prepared.feedMeta.description, fetchResult.etag, fetchResult.lastModified, now, id);
+        return id;
+    });
+    const feed = getFeedWithCounts(feedId);
+    if (!feed)
+        throw new ServiceError('NOT_FOUND', 'Feed disappeared after insert.');
+    return feed;
+}
+// ---------------------------------------------------------------------------
+// deleteFeed (PLAN 7 DELETE /api/feeds/:id) — cascades to items via FK.
+// ---------------------------------------------------------------------------
+export function deleteFeed(id) {
+    const res = run(`DELETE FROM feeds WHERE id = ?`, id);
+    if (res.changes === 0)
+        throw new ServiceError('NOT_FOUND', 'Feed not found.');
+}
+// ---------------------------------------------------------------------------
+// listItems (PLAN 7 GET /api/items) — dynamic WHERE built from fixed fragments
+// with bound params only; limit/offset coerced + clamped before binding.
+// ---------------------------------------------------------------------------
+const ITEM_SELECT = `
+  SELECT
+    i.id, i.feed_id, i.guid, i.link, i.title, i.author, i.content_html, i.summary,
+    i.published_at, i.fetched_at, i.is_read, i.is_starred, i.dedup_key,
+    f.title AS feed_title
+  FROM items i
+  JOIN feeds f ON f.id = i.feed_id
+`;
+function buildItemFilters(query) {
+    const clauses = [];
+    const params = [];
+    if (typeof query.feedId === 'number' && Number.isFinite(query.feedId)) {
+        clauses.push('i.feed_id = ?');
+        params.push(Math.trunc(query.feedId));
+    }
+    const view = query.view ?? 'all';
+    if (view === 'unread') {
+        clauses.push('i.is_read = 0');
+    }
+    else if (view === 'starred') {
+        clauses.push('i.is_starred = 1');
+    }
+    const q = (query.q ?? '').trim();
+    if (q) {
+        // Case-insensitive substring on title + summary. LIKE is case-insensitive for
+        // ASCII; we lower() both sides and escape LIKE wildcards in the user term.
+        const term = `%${q.toLowerCase().replace(/[\\%_]/g, (m) => `\\${m}`)}%`;
+        clauses.push("(lower(i.title) LIKE ? ESCAPE '\\' OR lower(COALESCE(i.summary, '')) LIKE ? ESCAPE '\\')");
+        params.push(term, term);
+    }
+    const where = clauses.length ? `WHERE ${clauses.join(' AND ')}` : '';
+    return { where, params };
+}
+export function listItems(query) {
+    const limit = clampLimit(query.limit);
+    const offset = clampOffset(query.offset);
+    const { where, params } = buildItemFilters(query);
+    const total = queryGet(`SELECT COUNT(*) AS n FROM items i ${where}`, ...params).n;
+    const rows = queryAll(`${ITEM_SELECT} ${where} ORDER BY i.published_at DESC, i.id DESC LIMIT ? OFFSET ?`, ...params, limit, offset);
+    return { items: rows.map(mapItemSummary), total, limit, offset };
+}
+export function clampLimit(raw) {
+    if (raw === undefined || !Number.isFinite(raw))
+        return LIMIT_DEFAULT;
+    const n = Math.trunc(raw);
+    if (n < 1)
+        return 1;
+    if (n > LIMIT_MAX)
+        return LIMIT_MAX;
+    return n;
+}
+export function clampOffset(raw) {
+    if (raw === undefined || !Number.isFinite(raw))
+        return 0;
+    const n = Math.trunc(raw);
+    return n < 0 ? 0 : n;
+}
+// ---------------------------------------------------------------------------
+// getItem (PLAN 7 GET /api/items/:id) — full item incl sanitized contentHtml.
+// ---------------------------------------------------------------------------
+export function getItem(id) {
+    const row = queryGet(`${ITEM_SELECT} WHERE i.id = ?`, id);
+    if (!row)
+        throw new ServiceError('NOT_FOUND', 'Item not found.');
+    return mapItem(row);
+}
+// ---------------------------------------------------------------------------
+// patchItem (PLAN 7 PATCH /api/items/:id) — update read/starred state.
+// ---------------------------------------------------------------------------
+export function patchItem(id, patch) {
+    const sets = [];
+    const params = [];
+    if (typeof patch.isRead === 'boolean') {
+        sets.push('is_read = ?');
+        params.push(patch.isRead ? 1 : 0);
+    }
+    if (typeof patch.isStarred === 'boolean') {
+        sets.push('is_starred = ?');
+        params.push(patch.isStarred ? 1 : 0);
+    }
+    if (sets.length === 0) {
+        throw new ServiceError('BAD_INPUT', 'Provide at least one of isRead or isStarred.');
+    }
+    const res = run(`UPDATE items SET ${sets.join(', ')} WHERE id = ?`, ...params, id);
+    if (res.changes === 0)
+        throw new ServiceError('NOT_FOUND', 'Item not found.');
+    const row = queryGet(`${ITEM_SELECT} WHERE i.id = ?`, id);
+    return mapItemSummary(row);
+}
+// ---------------------------------------------------------------------------
+// markAllRead (PLAN 7 POST /api/items/mark-all-read) — scope = all|unread|starred
+// optionally constrained to a feed. Marking always sets is_read = 1.
+// ---------------------------------------------------------------------------
+export function markAllRead(scope) {
+    const clauses = ['is_read = 0']; // only count rows we actually flip
+    const params = [];
+    if (typeof scope.feedId === 'number' && Number.isFinite(scope.feedId)) {
+        clauses.push('feed_id = ?');
+        params.push(Math.trunc(scope.feedId));
+    }
+    // view 'all' and 'unread' mark the same set (reading sets is_read = 1);
+    // 'starred' marks all currently-starred items read.
+    if (scope.view === 'starred') {
+        clauses.push('is_starred = 1');
+    }
+    const res = run(`UPDATE items SET is_read = 1 WHERE ${clauses.join(' AND ')}`, ...params);
+    return res.changes;
+}
+// ---------------------------------------------------------------------------
+// importFeeds (PLAN 7 POST /api/opml) — bulk add from a deduped URL list.
+// ---------------------------------------------------------------------------
+// Each URL is SSRF-guarded; feeds already present are skipped; new feeds are
+// inserted and fetched best-effort (a fetch/parse failure is recorded in
+// fetchError but the import still counts it as added, not failed). A guard
+// rejection or insert race counts as failed.
+export async function importFeeds(urls) {
+    let added = 0;
+    let skipped = 0;
+    let failed = 0;
+    for (const url of urls) {
+        const trimmed = url.trim();
+        if (!trimmed) {
+            failed += 1;
+            continue;
+        }
+        // Skip duplicates (dedup on feedUrl) before any network work.
+        const existing = queryGet(`SELECT id FROM feeds WHERE feed_url = ?`, trimmed);
+        if (existing) {
+            skipped += 1;
+            continue;
+        }
+        // SSRF guard before fetching.
+        try {
+            await assertSafeFeedUrl(trimmed);
+        }
+        catch {
+            failed += 1;
+            continue;
+        }
+        // Insert the row first so an initial-fetch failure can be recorded against it
+        // (import still succeeds; the feed shows an error badge in the UI).
+        let feedId;
+        try {
+            feedId = run(`INSERT INTO feeds (feed_url) VALUES (?)`, trimmed).lastInsertRowid;
+        }
+        catch {
+            // UNIQUE race or other insert error.
+            failed += 1;
+            continue;
+        }
+        added += 1;
+        // Best-effort initial fetch; refreshFeedRow records its own errors and never
+        // throws for fetch/parse failures.
+        const row = getFeedRow(feedId);
+        if (row) {
+            try {
+                await refreshFeedRow(row);
+            }
+            catch {
+                // Already recorded on the feed; nothing more to do.
+            }
+        }
+    }
+    return { added, skipped, failed, feeds: listFeeds().feeds };
+}
+/** All feeds as plain Feed DTOs (for OPML export). */
+export function listFeedsForExport() {
+    const rows = queryAll(`SELECT * FROM feeds ORDER BY title COLLATE NOCASE ASC, id ASC`);
+    return rows.map(mapFeed);
+}
+//# sourceMappingURL=feed-service.js.map

package/dist/server/feed-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feed-service.js","sourceRoot":"","sources":["../../src/server/feed-service.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,kFAAkF;AAClF,4EAA4E;AAC5E,8EAA8E;AAC9E,uBAAuB;AAEvB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,MAAM,MAAM,YAAY,CAAC;AAchC,OAAO,EACL,EAAE,EACF,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,GAAG,GAKJ,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjE,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,SAAS,GAAG,GAAG,CAAC;AAatB,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IAChC,YAAY,IAAsB,EAAE,OAAe;QACjD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AA8BD,MAAM,MAAM,GAAG,IAAI,MAAM,CAA2C;IAClE,YAAY,EAAE;QACZ,IAAI,EAAE;YACJ,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;YACrC,CAAC,YAAY,EAAE,WAAW,CAAC;YAC3B,CAAC,SAAS,EAAE,aAAa,CAAC;SAC3B;KACF;CACF,CAAC,CAAC;AAEH,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,aAAa,EAAE,GAAG,CAAC,eAAe;QAClC,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAsB;IAC/C,OAAO;QACL,GAAG,OAAO,CAAC,GAAG,CAAC;QACf,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,UAAU,EAAE,GAAG,CAAC,WAAW;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,GAAoB;IACnC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,MAAM,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU,KAAK,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAoB;IAC1C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,MAAM,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU,KAAK,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAE9E,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAK1B;IACC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,0DAA0D;AAC/E,CAAC;AAED,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E,MAAM,kBAAkB,GAAG;;;;;;;;CAQ1B,CAAC;AAEF,SAAS,iBAAiB,CAAC,EAAU;IACnC,MAAM,GAAG,GAAG,QAAQ,CAClB,GAAG,kBAAkB,+BAA+B,EACpD,EAAE,CACH,CAAC;IACF,OAAO,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,QAAQ,CAClB;;;;gBAIY,CACZ,CAAC;IACH,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC;AACtF,CAAC;AAED,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,UAAU,SAAS;IACvB,MAAM,IAAI,GAAG,QAAQ,CACnB,GAAG,kBAAkB,8DAA8D,CACpF,CAAC;IACF,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAClC,MAAM,EAAE,aAAa,EAAE;KACxB,CAAC;AACJ,CAAC;AAeD,MAAM,WAAW,GAAG;;;;;CAKnB,CAAC;AAEF,MAAM,WAAW,GAAG;;;;;;;;CAQnB,CAAC;AAcF;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAAC,OAAe,EAAE,GAAW;IAIzD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAE7C,MAAM,QAAQ,GAAG;QACf,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;QACtC,OAAO,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;QAC5B,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;KACxC,CAAC;IAEF,yDAAyD;IACzD,MAAM,QAAQ,GAAmB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAChE,6EAA6E;QAC7E,uDAAuD;QACvD,MAAM,IAAI,GAAG,GAAiB,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAC/B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtD,OAAO;YACL,IAAI;YACJ,IAAI;YACJ,KAAK;YACL,MAAM,EAAE,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACvE,WAAW,EAAE,mBAAmB,CAAC,UAAU,CAAC;YAC5C,OAAO,EACL,WAAW,CAAC,IAAI,CAAC,cAAc,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,IAAI,IAAI;YACrF,WAAW,EAAE,iBAAiB,CAAC,IAAI,CAAC;YACpC,wFAAwF;YACxF,QAAQ,EAAE,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,OAAO,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,SAAS,MAAM,CAAC,MAAc;QAC5B,8EAA8E;QAC9E,+EAA+E;QAC/E,wDAAwD;QACxD,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,UAAU,CAAC,GAAG,CACZ,MAAM,EACN,CAAC,CAAC,IAAI,EACN,CAAC,CAAC,IAAI,EACN,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,MAAM,EACR,CAAC,CAAC,WAAW,EACb,CAAC,CAAC,OAAO,EACT,CAAC,CAAC,WAAW,EACb,CAAC,CAAC,QAAQ,CACX,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC;QAEzC,0EAA0E;QAC1E,kEAAkE;QAClE,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC1F,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAgBD,MAAM,sBAAsB,GAAG;;;;;;;CAO9B,CAAC;AAEF,KAAK,UAAU,cAAc,CAAC,GAAY;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;YAC7B,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,aAAa;SAChC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,0EAA0E;YAC1E,EAAE,CAAC,OAAO,CACR,uEAAuE,CACxE,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACrE,CAAC;QAED,8EAA8E;QAC9E,2EAA2E;QAC3E,mEAAmE;QACnE,uEAAuE;QACvE,gBAAgB;QAChB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAE7E,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChC,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,GAAG,CACpC,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,WAAW,EACpB,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,YAAY,EACnB,GAAG,EACH,GAAG,CAAC,EAAE,CACP,CAAC;YACF,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,EAAE,CAAC,OAAO,CAAC,oEAAoE,CAAC,CAAC,GAAG,CAClF,GAAG,EACH,OAAO,EACP,GAAG,CAAC,EAAE,CACP,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,QAAQ,CAAU,kCAAkC,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAED;gFACgF;AAChF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAU;IAC1C,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;AAC5D,CAAC;AAED;gFACgF;AAChF,MAAM,CAAC,KAAK,UAAU,UAAU;IAM9B,MAAM,IAAI,GAAG,QAAQ,CAAU,qCAAqC,CAAC,CAAC;IACtE,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,+EAA+E;IAC/E,mEAAmE;IACnE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,EAAE;gBAAE,SAAS,IAAI,CAAC,CAAC;;gBAC1B,MAAM,IAAI,CAAC,CAAC;YACjB,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,iDAAiD;YACjD,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACnE,CAAC;AAED,8EAA8E;AAC9E,mCAAmC;AACnC,8EAA8E;AAC9E,sEAAsE;AACtE,+EAA+E;AAC/E,yEAAyE;AAEzE,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAW;IACvC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC;IAE7E,+DAA+D;IAC/D,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;QAC9E,MAAM,IAAI,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,oDAAoD;IACpD,MAAM,QAAQ,GAAG,QAAQ,CAAiB,yCAAyC,EAAE,OAAO,CAAC,CAAC;IAC9F,IAAI,QAAQ;QAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,kCAAkC,CAAC,CAAC;IAEtF,gFAAgF;IAChF,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,6BAA6B,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACvC,6EAA6E;QAC7E,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,mDAAmD,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,qCAAqC,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE;QAC9B,6EAA6E;QAC7E,MAAM,GAAG,GAAG,GAAG,CAAC,6DAA6D,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC7F,MAAM,EAAE,GAAG,GAAG,CAAC,eAAe,CAAC;QAE/B,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpB,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,GAAG,CACpC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EACvB,QAAQ,CAAC,QAAQ,CAAC,OAAO,EACzB,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAC7B,WAAW,CAAC,IAAI,EAChB,WAAW,CAAC,YAAY,EACxB,GAAG,EACH,EAAE,CACH,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;IACjF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,wEAAwE;AACxE,8EAA8E;AAE9E,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,MAAM,GAAG,GAAG,GAAG,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;AAChF,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,yEAAyE;AACzE,8EAA8E;AAE9E,MAAM,WAAW,GAAG;;;;;;;CAOnB,CAAC;AAEF,SAAS,gBAAgB,CAAC,KAAqB;IAC7C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,IAAI,GAAc,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC;IAC5C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;SAAM,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC;QACN,8EAA8E;QAC9E,2EAA2E;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,0FAA0F,CAAC,CAAC;QACzG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAqB;IAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAElD,MAAM,KAAK,GAAG,QAAQ,CACpB,qCAAqC,KAAK,EAAE,EAC5C,GAAG,MAAM,CACT,CAAC,CAAC,CAAC;IAEL,MAAM,IAAI,GAAG,QAAQ,CACnB,GAAG,WAAW,IAAI,KAAK,2DAA2D,EAClF,GAAG,MAAM,EACT,KAAK,EACL,MAAM,CACP,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAuB;IAChD,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IACrE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACpB,IAAI,CAAC,GAAG,SAAS;QAAE,OAAO,SAAS,CAAC;IACpC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAuB;IACjD,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAE9E,MAAM,UAAU,OAAO,CAAC,EAAU;IAChC,MAAM,GAAG,GAAG,QAAQ,CAAkB,GAAG,WAAW,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACjE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E;AAE9E,MAAM,UAAU,SAAS,CAAC,EAAU,EAAE,KAAuB;IAC3D,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,8CAA8C,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,oBAAoB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;IACnF,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAE9E,MAAM,GAAG,GAAG,QAAQ,CAAkB,GAAG,WAAW,iBAAiB,EAAE,EAAE,CAAE,CAAC;IAC5E,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,kFAAkF;AAClF,qEAAqE;AACrE,8EAA8E;AAE9E,MAAM,UAAU,WAAW,CAAC,KAAyB;IACnD,MAAM,OAAO,GAAa,CAAC,aAAa,CAAC,CAAC,CAAC,mCAAmC;IAC9E,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,wEAAwE;IACxE,oDAAoD;IACpD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,sCAAsC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC;IAC1F,OAAO,GAAG,CAAC,OAAO,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,2EAA2E;AAC3E,6CAA6C;AAE7C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc;IAM9C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QAED,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAiB,yCAAyC,EAAE,OAAO,CAAC,CAAC;QAC9F,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QAED,8BAA8B;QAC9B,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QAED,8EAA8E;QAC9E,oEAAoE;QACpE,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,yCAAyC,EAAE,OAAO,CAAC,CAAC,eAAe,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;YACrC,MAAM,IAAI,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QAED,KAAK,IAAI,CAAC,CAAC;QAEX,6EAA6E;QAC7E,mCAAmC;QACnC,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,oDAAoD;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC;AAC9D,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,GAAG,QAAQ,CAAU,+DAA+D,CAAC,CAAC;IAChG,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC"}

package/dist/server/fetch-feed.js

@@ -0,0 +1,83 @@
+// src/server/fetch-feed.ts
+// Streaming, size-capped, conditional-GET fetch of a feed URL. (PLAN 5.2)
+// The body is read incrementally and the request is aborted the moment cumulative
+// bytes exceed MAX_BYTES; the whole response is never buffered before the check.
+import { fetchWithGuardedRedirects } from './ssrf.js';
+const USER_AGENT = 'iread/1.0 (+local RSS reader)';
+const FETCH_TIMEOUT_MS = 15_000;
+const MAX_BYTES = 10 * 1024 * 1024; // 10 MB
+function concat(chunks, total) {
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        out.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return out;
+}
+export async function fetchFeed(input) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), FETCH_TIMEOUT_MS);
+    try {
+        const headers = {
+            'User-Agent': USER_AGENT,
+            Accept: 'application/rss+xml, application/atom+xml, application/xml, text/xml, */*;q=0.1',
+        };
+        if (input.etag)
+            headers['If-None-Match'] = input.etag;
+        if (input.lastModified)
+            headers['If-Modified-Since'] = input.lastModified;
+        // assertSafeFeedUrl + manual redirect loop (max 5 hops, each hop re-checked)
+        // is enforced inside fetchWithGuardedRedirects.
+        const res = await fetchWithGuardedRedirects(input.feedUrl, {
+            headers,
+            signal: ctrl.signal,
+        });
+        if (res.status === 304) {
+            await res.body?.cancel().catch(() => { });
+            return { kind: 'notModified' };
+        }
+        if (!res.ok) {
+            await res.body?.cancel().catch(() => { });
+            throw new Error(`HTTP ${res.status} ${res.statusText}`);
+        }
+        // Fast reject on advertised Content-Length (untrusted but cheap).
+        const cl = Number(res.headers.get('content-length'));
+        if (Number.isFinite(cl) && cl > MAX_BYTES) {
+            await res.body?.cancel().catch(() => { });
+            throw new Error(`feed too large (${cl} bytes)`);
+        }
+        if (!res.body) {
+            throw new Error('empty response body');
+        }
+        // STREAM the body, aborting once cumulative size exceeds the cap. Never
+        // buffer the whole response before checking (arrayBuffer() would OOM first).
+        const reader = res.body.getReader();
+        const chunks = [];
+        let total = 0;
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (!value)
+                continue;
+            total += value.byteLength;
+            if (total > MAX_BYTES) {
+                ctrl.abort();
+                throw new Error(`feed too large (> ${MAX_BYTES} bytes)`);
+            }
+            chunks.push(value);
+        }
+        const xml = new TextDecoder('utf-8').decode(concat(chunks, total));
+        return {
+            kind: 'ok',
+            xml,
+            etag: res.headers.get('etag'),
+            lastModified: res.headers.get('last-modified'),
+        };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=fetch-feed.js.map

package/dist/server/fetch-feed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-feed.js","sourceRoot":"","sources":["../../src/server/fetch-feed.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,0EAA0E;AAC1E,kFAAkF;AAClF,iFAAiF;AAEjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEtD,MAAM,UAAU,GAAG,+BAA+B,CAAC;AACnD,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAY5C,SAAS,MAAM,CAAC,MAAoB,EAAE,KAAa;IACjD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAiB;IAC/C,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,OAAO,GAA2B;YACtC,YAAY,EAAE,UAAU;YACxB,MAAM,EACJ,iFAAiF;SACpF,CAAC;QACF,IAAI,KAAK,CAAC,IAAI;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;QACtD,IAAI,KAAK,CAAC,YAAY;YAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;QAE1E,6EAA6E;QAC7E,gDAAgD;QAChD,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,OAAO,EAAE;YACzD,OAAO;YACP,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,kEAAkE;QAClE,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;YAC1C,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QAED,wEAAwE;QACxE,6EAA6E;QAC7E,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;gBACtB,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,qBAAqB,SAAS,SAAS,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACnE,OAAO;YACL,IAAI,EAAE,IAAI;YACV,GAAG;YACH,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7B,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;SAC/C,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}