@jingyi0605/codingns4dsh 0.2.1-beta.8 → 0.2.1-rc.2

package/data/build/dist/shared/quick-app-network-allow.js

@@ -0,0 +1,192 @@
+/** Exceptions to the public-only egress policy. An empty list denies every non-public target. */
+const RANGE_TEXT = [
+    ['0.0.0.0', 8], ['10.0.0.0', 8], ['100.64.0.0', 10], ['127.0.0.0', 8], ['169.254.0.0', 16], ['172.16.0.0', 12],
+    ['192.0.0.0', 24], ['192.0.2.0', 24], ['192.88.99.0', 24], ['192.168.0.0', 16], ['198.18.0.0', 15], ['198.51.100.0', 24],
+    ['203.0.113.0', 24], ['224.0.0.0', 4], ['240.0.0.0', 4], ['255.255.255.255', 32],
+    ['::', 128], ['::1', 128], ['fc00::', 7], ['fe80::', 10], ['ff00::', 8], ['2001:db8::', 32],
+];
+const RANGES = RANGE_TEXT.map(([text, prefix]) => {
+    const ip = parseIp(text);
+    if (!ip)
+        throw new Error(`Invalid egress range ${text}.`);
+    return { family: ip.family, bytes: ip.bytes, prefix };
+});
+export function parseQuickAppNetworkAllow(value) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value) || value.length > 16)
+        throw invalid();
+    const allow = [];
+    const seen = new Set();
+    for (const item of value) {
+        if (typeof item !== 'string')
+            throw invalid();
+        const text = item.trim().toLowerCase();
+        if (!text)
+            continue;
+        const canonical = canonicalEntry(text);
+        if (!canonical)
+            throw invalid();
+        if (seen.has(canonical))
+            continue;
+        seen.add(canonical);
+        allow.push(canonical);
+    }
+    return allow;
+}
+export function quickAppAddressBlocked(address, family) {
+    const ip = canonicalIp(address);
+    if (!ip || ip.family !== family)
+        return true;
+    return blockedRange(ip, family === 4 ? 32 : 128);
+}
+/** Clash, Surge, and sing-box map public names onto 198.18.0.0/15. Literal addresses stay blocked. */
+export function quickAppFakeIpAddress(address, family) {
+    const ip = canonicalIp(address);
+    const range = RANGES.find(item => item.family === 4 && item.prefix === 15);
+    return ip?.family === family && ip.family === 4 && range !== undefined && samePrefix(range.bytes, ip.bytes, range.prefix);
+}
+export function quickAppAllowMatchesName(allow, hostname) {
+    const host = hostname.toLowerCase().replace(/\.$/u, '');
+    return allow.some(entry => entry === host && !entry.includes('/') && parseIp(entry) === null);
+}
+/** True when this saved entry explicitly permits the hostname or the resolved address. */
+export function quickAppAllowMatches(allow, hostname, address, family) {
+    const host = hostname.toLowerCase().replace(/\.$/u, '');
+    const target = parseIp(address);
+    if (!target || target.family !== family)
+        return false;
+    return allow.some(entry => {
+        const slash = entry.lastIndexOf('/');
+        const base = parseIp(slash === -1 ? entry : entry.slice(0, slash));
+        if (!base)
+            return entry === host;
+        if (base.family !== family)
+            return false;
+        const prefix = slash === -1 ? (family === 4 ? 32 : 128) : Number(entry.slice(slash + 1));
+        return samePrefix(base.bytes, target.bytes, prefix);
+    });
+}
+function canonicalEntry(text) {
+    if (text.length > 253)
+        return null;
+    const slash = text.lastIndexOf('/');
+    if (slash > 0) {
+        const prefix = Number(text.slice(slash + 1));
+        const ip = canonicalIp(text.slice(0, slash));
+        const max = ip?.family === 4 ? 32 : 128;
+        if (!ip || !/^\d{1,3}$/u.test(text.slice(slash + 1)) || prefix < 1 || prefix > max || !blockedRange(ip, prefix))
+            return null;
+        const network = mask(ip.bytes, prefix);
+        const formatted = formatIp({ family: ip.family, bytes: network });
+        return prefix === max ? formatted : `${formatted}/${prefix}`;
+    }
+    const ip = canonicalIp(text);
+    if (ip)
+        return blockedRange(ip, ip.family === 4 ? 32 : 128) ? formatIp(ip) : null;
+    const host = text.endsWith('.') ? text.slice(0, -1) : text;
+    if (!host || host.endsWith('.') || /^\d+$/u.test(host) || parseIp(host))
+        return null;
+    return /^(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/u.test(host) ? host : null;
+}
+function blockedRange(ip, prefix) {
+    return RANGES.some(range => range.family === ip.family && range.prefix <= prefix && samePrefix(range.bytes, ip.bytes, range.prefix));
+}
+function canonicalIp(text) {
+    const parsed = parseIp(text);
+    if (!parsed)
+        return null;
+    if (parsed.family === 6 && parsed.bytes.subarray(0, 10).every(byte => byte === 0) && parsed.bytes[10] === 255 && parsed.bytes[11] === 255) {
+        return { family: 4, bytes: parsed.bytes.subarray(12) };
+    }
+    return parsed;
+}
+function parseIp(text) {
+    if (text.includes('%') || text.includes('/'))
+        return null;
+    if (/^(?:0|[1-9]\d{0,2})(?:\.(?:0|[1-9]\d{0,2})){3}$/u.test(text)) {
+        const bytes = text.split('.').map(part => Number(part));
+        if (bytes.every(part => part <= 255))
+            return { family: 4, bytes: Uint8Array.from(bytes) };
+        return null;
+    }
+    const halves = text.split('::');
+    if (halves.length > 2)
+        return null;
+    const side = (value) => {
+        if (value === '')
+            return [];
+        const parts = value.split(':');
+        const groups = [];
+        for (let index = 0; index < parts.length; index += 1) {
+            const part = parts[index] ?? '';
+            if (index === parts.length - 1 && part.includes('.')) {
+                const tail = parseIp(part);
+                if (tail?.family !== 4)
+                    return null;
+                groups.push((tail.bytes[0] << 8) | tail.bytes[1], (tail.bytes[2] << 8) | tail.bytes[3]);
+            }
+            else if (!/^[0-9a-f]{1,4}$/u.test(part))
+                return null;
+            else
+                groups.push(Number.parseInt(part, 16));
+        }
+        return groups;
+    };
+    const left = side(halves[0] ?? '');
+    const right = halves.length === 2 ? side(halves[1] ?? '') : [];
+    if (!left || !right || (halves.length === 1 && left.length !== 8) || (halves.length === 2 && left.length + right.length >= 8))
+        return null;
+    const groups = halves.length === 1 ? left : [...left, ...Array(8 - left.length - right.length).fill(0), ...right];
+    const bytes = new Uint8Array(16);
+    groups.forEach((group, index) => { bytes[index * 2] = group >> 8; bytes[index * 2 + 1] = group & 255; });
+    return { family: 6, bytes };
+}
+function formatIp(ip) {
+    if (ip.family === 4)
+        return [...ip.bytes].join('.');
+    const groups = Array.from({ length: 8 }, (_, index) => (ip.bytes[index * 2] << 8) | ip.bytes[index * 2 + 1]);
+    let start = -1;
+    let length = 0;
+    for (let index = 0; index < groups.length;) {
+        if (groups[index] !== 0) {
+            index += 1;
+            continue;
+        }
+        let end = index;
+        while (end < groups.length && groups[end] === 0)
+            end += 1;
+        if (end - index > length) {
+            start = index;
+            length = end - index;
+        }
+        index = end;
+    }
+    const hex = groups.map(group => group.toString(16));
+    if (length < 2)
+        return hex.join(':');
+    return `${hex.slice(0, start).join(':')}::${hex.slice(start + length).join(':')}`;
+}
+function mask(bytes, prefix) {
+    const out = bytes.slice();
+    const whole = Math.floor(prefix / 8);
+    const bits = prefix % 8;
+    if (bits)
+        out[whole] = (out[whole] ?? 0) & (0xff << (8 - bits));
+    for (let index = whole + (bits ? 1 : 0); index < out.length; index += 1)
+        out[index] = 0;
+    return out;
+}
+function samePrefix(left, right, prefix) {
+    const whole = Math.floor(prefix / 8);
+    for (let index = 0; index < whole; index += 1)
+        if (left[index] !== right[index])
+            return false;
+    const bits = prefix % 8;
+    if (!bits)
+        return true;
+    const select = 0xff << (8 - bits) & 0xff;
+    return ((left[whole] ?? 0) & select) === ((right[whole] ?? 0) & select);
+}
+function invalid() { return new Error('Invalid local network allow list.'); }
+//# sourceMappingURL=quick-app-network-allow.js.map

package/data/build/dist/shared/quick-app-network-allow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-app-network-allow.js","sourceRoot":"","sources":["../../../../src/shared/quick-app-network-allow.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,MAAM,UAAU,GAAG;IACjB,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC;IAC9G,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;IACxH,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAC;IAChF,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC;CACnF,CAAA;AAGV,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;IAC/C,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxB,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,GAAG,CAAC,CAAA;IACzD,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,CAAA;AACvD,CAAC,CAAC,CAAA;AAEF,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,OAAO,EAAE,CAAA;IAC/D,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,MAAM,OAAO,EAAE,CAAA;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACtC,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,CAAC,SAAS;YAAE,MAAM,OAAO,EAAE,CAAA;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAQ;QACjC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACnB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACvB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,MAAa;IACnE,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IAC/B,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IAC5C,OAAO,YAAY,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;AAClD,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,MAAa;IAClE,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,CAAA;IAC1E,OAAO,EAAE,EAAE,MAAM,KAAK,MAAM,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;AAC3H,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAwB,EAAE,QAAgB;IACjF,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACvD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAA;AAC/F,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,oBAAoB,CAAC,KAAwB,EAAE,QAAgB,EAAE,OAAe,EAAE,MAAa;IAC7G,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAA;IACrD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACpC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;QAClE,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,KAAK,IAAI,CAAA;QAChC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAA;QACxC,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;QACxF,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;QAC5C,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;QAC5C,MAAM,GAAG,GAAG,EAAE,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA;QACvC,IAAI,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA;QAC5H,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QACjE,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,MAAM,EAAE,CAAA;IAC9D,CAAC;IACD,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,EAAE;QAAE,OAAO,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACjF,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACpF,OAAO,oFAAoF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;AACtH,CAAC;AAED,SAAS,YAAY,CAAC,EAAY,EAAE,MAAc;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;AACtI,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;QAC1I,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAA;IACxD,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACzD,IAAI,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;QACvD,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAA;QACzF,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAmB,EAAE;QAC9C,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,EAAE,CAAA;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;YAC/B,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;gBAC1B,IAAI,IAAI,EAAE,MAAM,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAA;gBACnC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAA;YAC7F,CAAC;iBAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAA;;gBACjD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;QAC7C,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1I,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAS,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAA;IACzH,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,CAAA,CAAC,CAAC,CAAC,CAAA;IACvG,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAA;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,EAAY;IAC5B,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAE,CAAC,CAAA;IAC9G,IAAI,KAAK,GAAG,CAAC,CAAC,CAAA;IACd,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC;QAC3C,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QACjD,IAAI,GAAG,GAAG,KAAK,CAAA;QACf,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,GAAG,IAAI,CAAC,CAAA;QACzD,IAAI,GAAG,GAAG,KAAK,GAAG,MAAM,EAAE,CAAC;YAAC,KAAK,GAAG,KAAK,CAAC;YAAC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAA;QAAC,CAAC;QACjE,KAAK,GAAG,GAAG,CAAA;IACb,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IACnD,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACpC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;AACnF,CAAC;AAED,SAAS,IAAI,CAAC,KAAiB,EAAE,MAAc;IAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;IACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAA;IACvB,IAAI,IAAI;QAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;IAC/D,KAAK,IAAI,KAAK,GAAG,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACvF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB,EAAE,KAAiB,EAAE,MAAc;IACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACpC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC;QAAE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;IAC7F,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAA;IACvB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IACxC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAA;AACzE,CAAC;AAED,SAAS,OAAO,KAAY,OAAO,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA,CAAC,CAAC"}

package/data/build/dist/shared/quick-app-network-bootstrap.d.ts

@@ -0,0 +1,9 @@
+/** Browser-side fetch/XHR shim. Kept free of host imports because its source is copied into the sandbox document. */
+export declare function quickAppPageEgressUrl(pageHref: string): string;
+export declare function quickAppRequestUsesEgress(pageHref: string, requestUrl: string): boolean;
+export declare function quickAppNetworkSource(): string;
+/** Runs before any application script, including when the iframe loads the file directly. */
+export declare function quickAppPreparedHtml(html: string): string;
+export declare function quickAppNetworkBootstrap(): string;
+export declare function quickAppNetworkInstall(): void;
+//# sourceMappingURL=quick-app-network-bootstrap.d.ts.map

package/data/build/dist/shared/quick-app-network-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-app-network-bootstrap.d.ts","sourceRoot":"","sources":["../../../../src/shared/quick-app-network-bootstrap.ts"],"names":[],"mappings":"AAAA,qHAAqH;AAErH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK9D;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAKvF;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAUzD;AAED,wBAAgB,wBAAwB,IAAI,MAAM,CAIjD;AAoBD,wBAAgB,sBAAsB,IAAI,IAAI,CAgE7C"}

package/data/build/dist/shared/quick-app-network-bootstrap.js

@@ -0,0 +1,134 @@
+/** Browser-side fetch/XHR shim. Kept free of host imports because its source is copied into the sandbox document. */
+export function quickAppPageEgressUrl(pageHref) {
+    const page = new URL(pageHref);
+    const base = page.pathname.match(/^\/__codingns\/quick-apps\/[^/]+\//);
+    const prefix = base ? base[0] : page.pathname.replace(/[^/]*$/u, '');
+    return new URL(`${prefix}__quickapp/egress`, pageHref).href;
+}
+export function quickAppRequestUsesEgress(pageHref, requestUrl) {
+    const page = new URL(pageHref);
+    const target = new URL(requestUrl, pageHref);
+    if (target.protocol !== 'http:' && target.protocol !== 'https:')
+        return false;
+    return target.host !== page.host;
+}
+export function quickAppNetworkSource() {
+    return [quickAppPageEgressUrl, quickAppRequestUsesEgress, quickAppNetworkInstall].map(item => item.toString()).join('\n');
+}
+/** Runs before any application script, including when the iframe loads the file directly. */
+export function quickAppPreparedHtml(html) {
+    const bootstrap = `<script>${quickAppNetworkSource()}\nquickAppNetworkInstall();</script>`;
+    const doctype = /^(?:\uFEFF)?(?:\s|<!--[\s\S]*?-->)*(<!doctype(?:[^>"']|"[^"]*"|'[^']*')*>)/iu.exec(html);
+    const doctypeEnd = doctype?.[0].length ?? 0;
+    const document = html.slice(doctypeEnd);
+    const htmlTag = /<html\b(?:[^>"']|"[^"]*"|'[^']*')*>/iu.exec(document);
+    const headTag = /<head\b(?:[^>"']|"[^"]*"|'[^']*')*>/iu.exec(document);
+    const anchor = headTag !== null && (htmlTag === null || headTag.index > htmlTag.index) ? headTag : htmlTag;
+    const insertionPoint = anchor === null ? doctypeEnd : doctypeEnd + anchor.index + anchor[0].length;
+    return `${html.slice(0, insertionPoint)}${bootstrap}${html.slice(insertionPoint)}`;
+}
+export function quickAppNetworkBootstrap() {
+    return `<!DOCTYPE html><html><head><meta charset="utf-8"><title>Quick App</title></head><body><script>${quickAppNetworkSource()}
+${quickAppNetworkBootstrapRuntime.toString()}
+quickAppNetworkBootstrapRuntime();</script></body></html>`;
+}
+function quickAppNetworkBootstrapRuntime() {
+    const source = fetch(location.href, { headers: { Accept: 'text/html' } }).then(response => {
+        if (!response.ok)
+            throw new Error('The application HTML could not be loaded.');
+        return response.text();
+    });
+    void source.then(html => {
+        quickAppNetworkInstall();
+        document.open();
+        document.write(html);
+        document.close();
+    }).catch(error => {
+        const message = document.createElement('p');
+        message.setAttribute('role', 'alert');
+        message.textContent = error instanceof Error ? error.message : 'Application network initialization failed.';
+        document.body.replaceChildren(message);
+    });
+}
+export function quickAppNetworkInstall() {
+    const current = globalThis.fetch;
+    if (current.__quickAppEgress && XMLHttpRequest.prototype.open.__quickAppEgress)
+        return;
+    const nativeFetch = (current.__quickAppEgress ? current : globalThis.fetch).bind(globalThis);
+    const endpoint = quickAppPageEgressUrl(location.href);
+    const xhrOpen = XMLHttpRequest.prototype.open;
+    const xhrSend = XMLHttpRequest.prototype.send;
+    const xhrSetHeader = XMLHttpRequest.prototype.setRequestHeader;
+    const allowed = (name) => name === 'authorization' || name === 'content-type' || name === 'accept' || name === 'accept-language';
+    const bytesToBase64 = (bytes) => {
+        let binary = '';
+        for (let index = 0; index < bytes.length; index += 8192)
+            binary += String.fromCharCode.apply(null, bytes.subarray(index, index + 8192));
+        return btoa(binary);
+    };
+    const proxy = async (method, url, headers, body, signal, redirect) => {
+        const fields = headers.filter(([name]) => allowed(name));
+        const payload = { method, url, headers: fields, ...(redirect ? { redirect } : {}) };
+        if (body != null) {
+            const probe = new Response(body);
+            const type = probe.headers.get('content-type');
+            if (type && !fields.some(([name]) => name === 'content-type'))
+                fields.push(['content-type', type]);
+            const bytes = new Uint8Array(await probe.arrayBuffer());
+            if (bytes.byteLength)
+                payload.body = bytesToBase64(bytes);
+        }
+        return nativeFetch(endpoint, { method: 'POST', credentials: 'omit', headers: { 'Content-Type': 'text/plain; charset=utf-8' }, body: JSON.stringify(payload), ...(signal ? { signal } : {}) });
+    };
+    const shim = Object.assign((input, init) => {
+        const request = new Request(input, init);
+        if (!quickAppRequestUsesEgress(location.href, request.url))
+            return nativeFetch(request);
+        const headers = [];
+        request.headers.forEach((value, key) => headers.push([key, value]));
+        return proxy(request.method, request.url, headers, request.body, request.signal, request.redirect);
+    }, { __quickAppEgress: true });
+    if (!current.__quickAppEgress)
+        globalThis.fetch = shim;
+    if (XMLHttpRequest.prototype.open.__quickAppEgress)
+        return;
+    XMLHttpRequest.prototype.open = Object.assign(function open(method, url, async) {
+        const target = new URL(String(url), location.href);
+        Object.defineProperty(this, '__qaEgress', { configurable: true, value: { method: String(method || 'GET').toUpperCase(), url: target.href, headers: [], async: async !== false } });
+        return xhrOpen.call(this, String(method), url, async !== false);
+    }, { __quickAppEgress: true });
+    XMLHttpRequest.prototype.setRequestHeader = function setRequestHeader(name, value) {
+        this.__qaEgress?.headers.push([String(name).toLowerCase(), String(value)]);
+        return xhrSetHeader.call(this, name, value);
+    };
+    XMLHttpRequest.prototype.send = function send(body) {
+        const plan = this.__qaEgress;
+        if (!plan?.async || !quickAppRequestUsesEgress(location.href, plan.url))
+            return xhrSend.call(this, body);
+        if (body != null && typeof body !== 'string' && !(body instanceof Blob) && !(body instanceof ArrayBuffer) && !ArrayBuffer.isView(body) && !(body instanceof FormData) && !(body instanceof URLSearchParams))
+            return xhrSend.call(this, body);
+        const controller = new AbortController();
+        const abort = this.abort;
+        this.abort = function abortEgress() { controller.abort(); return abort.call(this); };
+        void proxy(plan.method, plan.url, plan.headers, body ?? null, controller.signal, 'follow').then(async (response) => {
+            const bytes = new Uint8Array(await response.arrayBuffer());
+            const text = new TextDecoder().decode(bytes);
+            const pairs = [];
+            response.headers.forEach((value, key) => pairs.push([key, value]));
+            const value = this.responseType === 'arraybuffer' ? bytes.buffer : this.responseType === 'blob' ? new Blob([bytes]) : this.responseType === 'json' ? JSON.parse(text || 'null') : text;
+            const define = (name, current) => Object.defineProperty(this, name, { configurable: true, get: () => current });
+            define('readyState', 4);
+            define('status', response.status);
+            define('statusText', response.statusText);
+            define('responseText', text);
+            define('response', value);
+            define('responseURL', response.url);
+            this.getAllResponseHeaders = () => pairs.map(([key, header]) => `${key}: ${header}`).join('\r\n');
+            this.getResponseHeader = name => pairs.find(([key]) => key === String(name).toLowerCase())?.[1] ?? null;
+            this.dispatchEvent(new Event('readystatechange'));
+            this.dispatchEvent(new Event('load'));
+            this.dispatchEvent(new Event('loadend'));
+        }).catch(() => { this.dispatchEvent(new Event('error')); this.dispatchEvent(new Event('loadend')); });
+    };
+}
+//# sourceMappingURL=quick-app-network-bootstrap.js.map

package/data/build/dist/shared/quick-app-network-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-app-network-bootstrap.js","sourceRoot":"","sources":["../../../../src/shared/quick-app-network-bootstrap.ts"],"names":[],"mappings":"AAAA,qHAAqH;AAErH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IACpE,OAAO,IAAI,GAAG,CAAC,GAAG,MAAM,mBAAmB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAA;AAC7D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAAgB,EAAE,UAAkB;IAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IAC5C,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC7E,OAAO,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,CAAC,qBAAqB,EAAE,yBAAyB,EAAE,sBAAsB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC3H,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,SAAS,GAAG,WAAW,qBAAqB,EAAE,sCAAsC,CAAA;IAC1F,MAAM,OAAO,GAAG,8EAA8E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzG,MAAM,UAAU,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAA;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACvC,MAAM,OAAO,GAAG,uCAAuC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACtE,MAAM,OAAO,GAAG,uCAAuC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACtE,MAAM,MAAM,GAAG,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;IAC1G,MAAM,cAAc,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAClG,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAA;AACpF,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,iGAAiG,qBAAqB,EAAE;EAC/H,+BAA+B,CAAC,QAAQ,EAAE;0DACc,CAAA;AAC1D,CAAC;AAED,SAAS,+BAA+B;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;QACxF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QAC9E,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAA;IACxB,CAAC,CAAC,CAAA;IACF,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACtB,sBAAsB,EAAE,CAAA;QACxB,QAAQ,CAAC,IAAI,EAAE,CAAA;QACf,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACpB,QAAQ,CAAC,KAAK,EAAE,CAAA;IAClB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QACf,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QAC3C,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACrC,OAAO,CAAC,WAAW,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4CAA4C,CAAA;QAC3G,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,OAAO,GAAG,UAAU,CAAC,KAAiE,CAAA;IAC5F,IAAI,OAAO,CAAC,gBAAgB,IAAK,cAAc,CAAC,SAAS,CAAC,IAA8E,CAAC,gBAAgB;QAAE,OAAM;IACjK,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC5F,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACrD,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,CAAA;IAC7C,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,CAAA;IAC7C,MAAM,YAAY,GAAG,cAAc,CAAC,SAAS,CAAC,gBAAgB,CAAA;IAC9D,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,iBAAiB,CAAA;IACxI,MAAM,aAAa,GAAG,CAAC,KAAiB,EAAE,EAAE;QAC1C,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI;YAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAwB,CAAC,CAAA;QAC9J,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;IACrB,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,KAAK,EAAE,MAAc,EAAE,GAAW,EAAE,OAA2B,EAAE,IAAiC,EAAE,MAAoB,EAAE,QAA0B,EAAE,EAAE;QACpK,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACxD,MAAM,OAAO,GAA4G,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QAC5L,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAA;YAChC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;YAC9C,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAA;YAClG,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;YACvD,IAAI,KAAK,CAAC,UAAU;gBAAE,OAAO,CAAC,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;QAC3D,CAAC;QACD,OAAO,WAAW,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC/L,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAwB,EAAE,IAAkB,EAAE,EAAE;QAC1E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACxC,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,WAAW,CAAC,OAAO,CAAC,CAAA;QACvF,MAAM,OAAO,GAAuB,EAAE,CAAA;QACtC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;QACnE,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IACpG,CAAC,EAAE,EAAE,gBAAgB,EAAE,IAAa,EAAE,CAAC,CAAA;IACvC,IAAI,CAAC,OAAO,CAAC,gBAAgB;QAAE,UAAU,CAAC,KAAK,GAAG,IAAI,CAAA;IACtD,IAAK,cAAc,CAAC,SAAS,CAAC,IAA8E,CAAC,gBAAgB;QAAE,OAAM;IACrI,cAAc,CAAC,SAAS,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,CAAuB,MAAc,EAAE,GAAiB,EAAE,KAAe;QAClI,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,EAAwB,EAAE,KAAK,EAAE,KAAK,KAAK,KAAK,EAAE,EAAE,CAAC,CAAA;QACxM,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,KAAK,KAAK,CAAC,CAAA;IACjE,CAAC,EAAE,EAAE,gBAAgB,EAAE,IAAa,EAAE,CAAC,CAAA;IACvC,cAAc,CAAC,SAAS,CAAC,gBAAgB,GAAG,SAAS,gBAAgB,CAA0E,IAAY,EAAE,KAAa;QACxK,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC1E,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IAC7C,CAAC,CAAA;IACD,cAAc,CAAC,SAAS,CAAC,IAAI,GAAG,SAAS,IAAI,CAAuH,IAA+C;QACjN,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAA;QAC5B,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACxG,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,YAAY,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,YAAY,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,YAAY,eAAe,CAAC;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC5O,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QACxB,IAAI,CAAC,KAAK,GAAG,SAAS,WAAW,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,CAAA;QACnF,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,EAAC,QAAQ,EAAC,EAAE;YAC/G,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;YAC1D,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAC5C,MAAM,KAAK,GAAuB,EAAE,CAAA;YACpC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;YAClE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACtL,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,OAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;YAChI,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;YAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;YACnM,IAAI,CAAC,qBAAqB,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACjG,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;YACvG,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QACpI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;IACtG,CAAC,CAAA;AACH,CAAC"}

package/data/build/dist/shared/quick-app-proxy-path.d.ts

@@ -0,0 +1,6 @@
+/** A launch-only bearer address; neither a DSH credential nor a workspace path. */
+export declare const QUICK_APP_PROXY_PREFIX = "/__codingns/quick-apps/";
+/** The native Desktop embedding origin; preview resources use the verified Host listener. */
+export declare const QUICK_APP_DESKTOP_ORIGIN = "dsh-app://app";
+export declare function quickAppProxyBase(path: string): string | undefined;
+//# sourceMappingURL=quick-app-proxy-path.d.ts.map

package/data/build/dist/shared/quick-app-proxy-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-app-proxy-path.d.ts","sourceRoot":"","sources":["../../../../src/shared/quick-app-proxy-path.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,eAAO,MAAM,sBAAsB,4BAA4B,CAAA;AAC/D,6FAA6F;AAC7F,eAAO,MAAM,wBAAwB,kBAAkB,CAAA;AACvD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMlE"}

package/data/build/dist/shared/quick-app-proxy-path.js

@@ -0,0 +1,18 @@
+/** A launch-only bearer address; neither a DSH credential nor a workspace path. */
+export const QUICK_APP_PROXY_PREFIX = '/__codingns/quick-apps/';
+/** The native Desktop embedding origin; preview resources use the verified Host listener. */
+export const QUICK_APP_DESKTOP_ORIGIN = 'dsh-app://app';
+export function quickAppProxyBase(path) {
+    const base = /^\/__codingns\/quick-apps\/[A-Za-z0-9_-]{43}\//u.exec(path)?.[0];
+    if (!base)
+        return undefined;
+    // DSH matches URL-normalized paths. A raw prefix must never exempt a request
+    // that normalization would move into a privileged API outside this prefix.
+    try {
+        return new URL(path, 'http://host.invalid').pathname.startsWith(base) ? base : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=quick-app-proxy-path.js.map

package/data/build/dist/shared/quick-app-proxy-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-app-proxy-path.js","sourceRoot":"","sources":["../../../../src/shared/quick-app-proxy-path.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAA;AAC/D,6FAA6F;AAC7F,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAA;AACvD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,IAAI,GAAG,iDAAiD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9E,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAA;IAC3B,6EAA6E;IAC7E,2EAA2E;IAC3E,IAAI,CAAC;QAAC,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAA;IAAC,CAAC;AAC7H,CAAC"}

package/data/build/dist/shared/quick-app-storage-bootstrap.d.ts

@@ -0,0 +1,9 @@
+/** Self-contained because the Host serializes this function into an opaque sandbox document. */
+export declare function quickAppStorageRuntime(token: string, protocol: string, limits: {
+    bytes: number;
+    keys: number;
+    pending: number;
+    timeoutMs: number;
+}): void;
+export declare function quickAppStorageBootstrap(token: string): string;
+//# sourceMappingURL=quick-app-storage-bootstrap.d.ts.map

package/data/build/dist/shared/quick-app-storage-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-app-storage-bootstrap.d.ts","sourceRoot":"","sources":["../../../../src/shared/quick-app-storage-bootstrap.ts"],"names":[],"mappings":"AAGA,gGAAgG;AAChG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA6IzJ;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI9D"}

package/data/build/dist/shared/quick-app-storage-bootstrap.js

@@ -0,0 +1,189 @@
+import { QUICK_APP_STORAGE_LIMITS, QUICK_APP_STORAGE_PROTOCOL } from './quick-app-browser-storage.js';
+import { quickAppNetworkInstall, quickAppNetworkSource } from './quick-app-network-bootstrap.js';
+/** Self-contained because the Host serializes this function into an opaque sandbox document. */
+export function quickAppStorageRuntime(token, protocol, limits) {
+    const source = fetch(location.href, { headers: { Accept: 'text/html' } }).then(response => {
+        if (!response.ok)
+            throw new Error('The application HTML could not be loaded.');
+        return response.text();
+    });
+    const documentId = Array.from(crypto.getRandomValues(new Uint8Array(16)), byte => byte.toString(16).padStart(2, '0')).join('');
+    const connect = new Promise((resolve, reject) => {
+        const send = () => parent.postMessage({ type: protocol, token, documentId }, '*');
+        const receive = (event) => {
+            if (event.source !== parent || event.data?.type !== protocol || event.data.token !== token || event.data.documentId !== documentId || event.ports.length !== 1)
+                return;
+            clearInterval(retry);
+            clearTimeout(timeout);
+            removeEventListener('message', receive);
+            resolve(event);
+        };
+        const retry = setInterval(send, 100);
+        const timeout = setTimeout(() => {
+            clearInterval(retry);
+            removeEventListener('message', receive);
+            reject(new Error('Open this application through the updated Quick Apps viewer to use browser storage.'));
+        }, limits.timeoutMs);
+        addEventListener('message', receive);
+        send();
+    });
+    void Promise.all([source, connect]).then(([html, event]) => {
+        const port = event.ports[0];
+        const pending = new Map();
+        const baseline = { local: new Map(event.data.snapshot.local ?? []), session: new Map(event.data.snapshot.session ?? []) };
+        const mirror = { local: new Map(baseline.local), session: new Map(baseline.session) };
+        const errors = {};
+        const writeErrors = {};
+        for (const area of ['local', 'session'])
+            if (event.data.errors[area]) {
+                errors[area] = new DOMException(event.data.errors[area].message, event.data.errors[area].name);
+            }
+        let sequence = 0;
+        let closed = false;
+        const mutation = (operation) => ['setItem', 'removeItem', 'clear'].includes(operation);
+        const apply = (map, request) => {
+            if (request.operation === 'setItem')
+                map.set(request.key, request.value);
+            else if (request.operation === 'removeItem')
+                map.delete(request.key);
+            else if (request.operation === 'clear')
+                map.clear();
+        };
+        const reconcile = (area) => {
+            mirror[area] = new Map(baseline[area]);
+            for (const { request } of pending.values())
+                if (request.area === area)
+                    apply(mirror[area], request);
+        };
+        const report = (error, area) => {
+            dispatchEvent(new CustomEvent('appstorageerror', { detail: { area, name: error.name, message: error.message } }));
+        };
+        const finish = (id, value, entries, error) => {
+            const item = pending.get(id);
+            if (!item)
+                return;
+            clearTimeout(item.timer);
+            pending.delete(id);
+            const area = item.request.area;
+            if (entries) {
+                baseline[area] = new Map(entries);
+                delete errors[area];
+            }
+            if (error && mutation(item.request.operation))
+                writeErrors[area] = error;
+            reconcile(area);
+            if (error)
+                item.reject(error);
+            else
+                item.resolve(value);
+        };
+        port.onmessage = message => {
+            const reply = message.data;
+            if (reply?.type === 'closed') {
+                closed = true;
+                for (const id of [...pending.keys()])
+                    finish(id, undefined, undefined, new DOMException(reply.error.message, reply.error.name));
+                port.close();
+                return;
+            }
+            if (!reply || !Number.isSafeInteger(reply.id))
+                return;
+            const error = reply.error ? new DOMException(reply.error.message, reply.error.name) : undefined;
+            finish(reply.id, reply.value, reply.entries, error);
+        };
+        const string = (value) => {
+            if (typeof value === 'symbol')
+                throw new TypeError('Storage keys and values cannot be symbols.');
+            return String(value);
+        };
+        const request = (area, operation, key, value) => {
+            if (closed)
+                throw new DOMException('The application storage channel was closed.', 'SecurityError');
+            if (pending.size >= limits.pending)
+                throw new DOMException('Too many pending storage operations.', 'QuotaExceededError');
+            const item = { id: ++sequence, area, operation, ...(key !== undefined ? { key } : {}), ...(value !== undefined ? { value } : {}) };
+            if (mutation(operation)) {
+                const next = new Map(mirror[area]);
+                apply(next, item);
+                if (next.size > limits.keys || JSON.stringify([...next]).length * 2 > limits.bytes)
+                    throw new DOMException('Application storage quota exceeded.', 'QuotaExceededError');
+            }
+            const result = new Promise((resolve, reject) => {
+                const timer = setTimeout(() => finish(item.id, undefined, undefined, new DOMException('Application storage acknowledgement timed out.', 'TimeoutError')), limits.timeoutMs);
+                pending.set(item.id, { request: item, resolve, reject, timer });
+                try {
+                    port.postMessage(item);
+                }
+                catch (error) {
+                    finish(item.id, undefined, undefined, error);
+                }
+            });
+            reconcile(area);
+            return result;
+        };
+        const asyncArea = (area) => Object.freeze({
+            async getItem(key) { return await request(area, 'getItem', string(key)); },
+            async setItem(key, value) { await request(area, 'setItem', string(key), string(value)); },
+            async removeItem(key) { await request(area, 'removeItem', string(key)); },
+            async clear() { await request(area, 'clear'); },
+            async keys() { return await request(area, 'keys'); },
+            async flush() {
+                await request(area, 'flush');
+                const error = writeErrors[area];
+                delete writeErrors[area];
+                if (error)
+                    throw error;
+            },
+        });
+        const facade = (area) => {
+            const available = () => { if (errors[area])
+                throw errors[area]; };
+            const write = (operation, key, value) => {
+                available();
+                void request(area, operation, key, value).catch(error => report(error, area));
+            };
+            const methods = {
+                get length() { available(); return mirror[area].size; },
+                key(index) { available(); return [...mirror[area].keys()][Number(index) >>> 0] ?? null; },
+                getItem(key) { available(); return mirror[area].get(string(key)) ?? null; },
+                setItem(key, value) { write('setItem', string(key), string(value)); },
+                removeItem(key) { write('removeItem', string(key)); },
+                clear() { write('clear'); },
+            };
+            return new Proxy(Object.create(methods), {
+                get(target, key, receiver) { return Reflect.has(target, key) ? Reflect.get(target, key, receiver) : typeof key === 'string' ? methods.getItem(key) ?? undefined : undefined; },
+                set(_target, key, value) { methods.setItem(key, value); return true; },
+                deleteProperty(_target, key) { methods.removeItem(key); return true; },
+                ownKeys() { available(); return [...mirror[area].keys()]; },
+                has(target, key) { available(); return Reflect.has(target, key) || typeof key === 'string' && mirror[area].has(key); },
+                getOwnPropertyDescriptor(_target, key) { available(); return typeof key === 'string' && mirror[area].has(key) ? { configurable: true, enumerable: true, writable: true, value: mirror[area].get(key) } : undefined; },
+                defineProperty(_target, key, descriptor) { if (!('value' in descriptor) || descriptor.get || descriptor.set)
+                    return false; methods.setItem(key, descriptor.value); return true; },
+                preventExtensions() { return false; },
+            });
+        };
+        Object.defineProperties(window, {
+            appStorage: { value: Object.freeze({ ...asyncArea('local'), session: asyncArea('session') }) },
+            localStorage: { value: facade('local') },
+            sessionStorage: { value: facade('session') },
+        });
+        // Parse at the original URL, after hydration, so ordinary resource URLs and script order survive.
+        // MessagePort listeners remain attached when document.open clears Window/Document listeners.
+        quickAppNetworkInstall();
+        document.open();
+        document.write(html);
+        document.close();
+    }).catch(error => {
+        const message = document.createElement('p');
+        message.setAttribute('role', 'alert');
+        message.textContent = error instanceof Error ? error.message : 'Application storage initialization failed.';
+        document.body.replaceChildren(message);
+    });
+}
+export function quickAppStorageBootstrap(token) {
+    if (!/^[a-f0-9-]{36}$/u.test(token))
+        throw new Error('Invalid storage launch token.');
+    return `<!DOCTYPE html><html><head><meta charset="utf-8"><title>Quick App</title></head><body><script>${quickAppNetworkSource()}
+(${quickAppStorageRuntime.toString()})(${JSON.stringify(token)},${JSON.stringify(QUICK_APP_STORAGE_PROTOCOL)},${JSON.stringify(QUICK_APP_STORAGE_LIMITS)});</script></body></html>`;
+}
+//# sourceMappingURL=quick-app-storage-bootstrap.js.map