@jingyi0605/codingns4dsh 0.2.1-beta.8 → 0.2.1-rc.2

package/data/build/dist/host/modules/quick-apps/launches.js

@@ -0,0 +1,80 @@
+import { createHash, randomBytes, randomUUID, timingSafeEqual } from 'node:crypto';
+import { realpath } from 'node:fs/promises';
+import { QUICK_APP_LIMITS } from '../../../shared/contracts/quick-apps.js';
+import { quickAppDefinitionKey } from './registry.js';
+import { deny, QuickAppError } from './errors.js';
+export class QuickAppLaunches {
+    registry;
+    now;
+    launches = new Map();
+    stopped = false;
+    constructor(registry, now = Date.now) {
+        this.registry = registry;
+        this.now = now;
+    }
+    async create(app, principal, permissions) {
+        const workspaceReference = this.registry.root(app);
+        const workspaceRoot = await realpath(workspaceReference);
+        await this.prune();
+        if (this.stopped)
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'Quick Apps is disabled.');
+        if (this.launches.size >= QUICK_APP_LIMITS.launches)
+            throw new QuickAppError(429, 'QUICK_APP_LIMIT', 'Too many active launches.');
+        const credential = randomBytes(32).toString('base64url');
+        const launch = { id: randomUUID(), app: structuredClone(app), principal, workspaceRoot, workspaceReference,
+            permissions: structuredClone(permissions), expiresAt: this.now() + QUICK_APP_LIMITS.lifetimeMs,
+            credentialDigest: digest(credential), abort: new AbortController(), dispose: async () => undefined };
+        this.launches.set(launch.id, launch);
+        return { launch, credential };
+    }
+    authorize(launch, credential) {
+        if (credential !== undefined && !timingSafeEqual(launch.credentialDigest, digest(credential)))
+            throw new QuickAppError(401, 'QUICK_APP_UNAUTHENTICATED', 'App authentication required.');
+        if (this.stopped || this.launches.get(launch.id) !== launch || launch.abort.signal.aborted)
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'This launch has been revoked.');
+        if (launch.expiresAt <= this.now()) {
+            void this.revoke(launch.id).catch(() => undefined);
+            throw new QuickAppError(410, 'QUICK_APP_LAUNCH_EXPIRED', 'This launch has expired.');
+        }
+        let current;
+        try {
+            current = this.registry.get(launch.app.id);
+            this.registry.root(current);
+        }
+        catch {
+            void this.revoke(launch.id).catch(() => undefined);
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'The shortcut was removed.');
+        }
+        if (quickAppDefinitionKey(current) !== quickAppDefinitionKey(launch.app) || this.registry.root(current) !== launch.workspaceReference) {
+            void this.revoke(launch.id).catch(() => undefined);
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'The shortcut or workspace changed.');
+        }
+    }
+    async validateWorkspace(launch) {
+        this.authorize(launch);
+        if (await realpath(launch.workspaceReference) !== launch.workspaceRoot) {
+            void this.revoke(launch.id).catch(() => undefined);
+            throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'The workspace location changed.');
+        }
+    }
+    requireOwner(id, principal) {
+        const launch = this.launches.get(id);
+        if (!launch || launch.principal !== principal)
+            deny();
+        return launch;
+    }
+    async revoke(id) {
+        const launch = this.launches.get(id);
+        if (!launch)
+            return;
+        this.launches.delete(id);
+        launch.abort.abort();
+        await launch.dispose();
+    }
+    async revokeApp(id) { await Promise.all([...this.launches.values()].filter(launch => launch.app.id === id).map(launch => this.revoke(launch.id))); }
+    async prune() { await Promise.all([...this.launches.values()].filter(launch => launch.expiresAt <= this.now()).map(launch => this.revoke(launch.id))); }
+    async dispose() { this.stopped = true; await Promise.all([...this.launches.keys()].map(id => this.revoke(id))); }
+    get size() { return this.launches.size; }
+}
+function digest(value) { return createHash('sha256').update(value).digest(); }
+//# sourceMappingURL=launches.js.map

package/data/build/dist/host/modules/quick-apps/launches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launches.js","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/launches.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,EAAE,qBAAqB,EAAyB,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAgBjD,MAAM,OAAO,gBAAgB;IAGE;IAA6C;IAFzD,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAA;IACrD,OAAO,GAAG,KAAK,CAAA;IACvB,YAA6B,QAA0B,EAAmB,MAAM,IAAI,CAAC,GAAG;QAA3D,aAAQ,GAAR,QAAQ,CAAkB;QAAmB,QAAG,GAAH,GAAG,CAAW;IAAG,CAAC;IAE5F,KAAK,CAAC,MAAM,CAAC,GAAa,EAAE,SAAiB,EAAE,WAAgC;QAC7E,MAAM,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAClD,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAA;QACxD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAClB,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,yBAAyB,CAAC,CAAA;QAC9F,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,gBAAgB,CAAC,QAAQ;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,2BAA2B,CAAC,CAAA;QACjI,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACxD,MAAM,MAAM,GAAmB,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB;YACxH,WAAW,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,UAAU;YAC9F,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,eAAe,EAAE,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAA;QACtG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACpC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IAC/B,CAAC;IACD,SAAS,CAAC,MAAsB,EAAE,UAAmB;QACnD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAA;QACxL,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,+BAA+B,CAAC,CAAA;QAC9K,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,0BAA0B,EAAE,0BAA0B,CAAC,CAAA;QAAC,CAAC;QAChL,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YACrF,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,2BAA2B,CAAC,CAAA;QAChF,CAAC;QACD,IAAI,qBAAqB,CAAC,OAAO,CAAC,KAAK,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACtI,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,oCAAoC,CAAC,CAAA;QACzF,CAAC;IACH,CAAC;IACD,KAAK,CAAC,iBAAiB,CAAC,MAAsB;QAC5C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACtB,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YACvE,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,iCAAiC,CAAC,CAAA;QACtF,CAAC;IACH,CAAC;IACD,YAAY,CAAC,EAAU,EAAE,SAAiB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,EAAE,CAAA;QACrD,OAAO,MAAM,CAAA;IACf,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACxB,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;QACpB,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;IACxB,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,EAAU,IAAmB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IAC1K,KAAK,CAAC,KAAK,KAAoB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IACtK,KAAK,CAAC,OAAO,KAAoB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IAC/H,IAAI,IAAI,KAAa,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAA,CAAC,CAAC;CACjD;AAED,SAAS,MAAM,CAAC,KAAa,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAA,CAAC,CAAC"}

package/data/build/dist/host/modules/quick-apps/paths.d.ts

@@ -0,0 +1,14 @@
+/** Paths have one representation on every platform; no URL decoding in filesystem code. */
+export declare function appPath(value: unknown, allowRoot?: boolean): string;
+export declare function insidePath(root: string, path: string): boolean;
+export declare function withinScope(scope: string, path: string): boolean;
+export declare function publicPath(path: string): boolean;
+/** Reject all symlinks, including in-root aliases; this also keeps mutation queue keys unique. */
+export declare function resolveAppPath(workspace: string, path: string, allowMissingLeaf?: boolean): Promise<string>;
+/** Inspect the raw request target before WHATWG URL can erase traversal segments. */
+export declare function decodeResourceTarget(target: string): {
+    path: string;
+    query: string;
+    trailingSlash: boolean;
+};
+//# sourceMappingURL=paths.d.ts.map

package/data/build/dist/host/modules/quick-apps/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/paths.ts"],"names":[],"mappings":"AAIA,2FAA2F;AAC3F,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,UAAO,GAAG,MAAM,CAKhE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAG9D;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGhD;AAED,kGAAkG;AAClG,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,UAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAkB/G;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAU5G"}

package/data/build/dist/host/modules/quick-apps/paths.js

@@ -0,0 +1,72 @@
+import { lstat, realpath } from 'node:fs/promises';
+import { isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { deny } from './errors.js';
+/** Paths have one representation on every platform; no URL decoding in filesystem code. */
+export function appPath(value, allowRoot = true) {
+    if (typeof value !== 'string' || value.length > 2048 || /[\\\x00-\x1f\x7f:%?#]/u.test(value))
+        deny('Invalid relative path.');
+    if (value === '.' || value === '') {
+        if (allowRoot)
+            return '';
+        deny();
+    }
+    if (value.startsWith('/') || value.endsWith('/') || value.split('/').some(part => part === '' || part === '.' || part === '..' || /[. ]$/u.test(part)))
+        deny('Invalid relative path.');
+    return value;
+}
+export function insidePath(root, path) {
+    const suffix = relative(root, path);
+    return suffix === '' || (!isAbsolute(suffix) && suffix !== '..' && !suffix.startsWith(`..${sep}`));
+}
+export function withinScope(scope, path) {
+    return scope === '' || path === scope || path.startsWith(`${scope}/`);
+}
+export function publicPath(path) {
+    return !path.split('/').some(part => part.startsWith('.') || /^(?:node_modules|id_rsa|id_ed25519)$/iu.test(part)
+        || /(?:\.(?:pem|key|p12|pfx)|(?:^|[-_.])(?:credentials|secrets?)(?:\.|$))/iu.test(part));
+}
+/** Reject all symlinks, including in-root aliases; this also keeps mutation queue keys unique. */
+export async function resolveAppPath(workspace, path, allowMissingLeaf = false) {
+    const root = await realpath(workspace);
+    const normalized = appPath(path);
+    let current = root;
+    const parts = normalized === '' ? [] : normalized.split('/');
+    for (let index = 0; index < parts.length; index++) {
+        current = join(current, parts[index]);
+        try {
+            const info = await lstat(current);
+            if (info.isSymbolicLink())
+                deny('Symbolic links are not served by Quick Apps.');
+            if (index < parts.length - 1 && !info.isDirectory())
+                deny();
+        }
+        catch (error) {
+            if (allowMissingLeaf && index === parts.length - 1 && error.code === 'ENOENT')
+                break;
+            throw error;
+        }
+    }
+    if (!insidePath(root, resolve(current)))
+        deny();
+    return current;
+}
+/** Inspect the raw request target before WHATWG URL can erase traversal segments. */
+export function decodeResourceTarget(target) {
+    if (!target.startsWith('/') || target.startsWith('//') || /[\\#\x00-\x20\x7f]/u.test(target))
+        deny('Invalid HTTP request target.');
+    const split = target.indexOf('?');
+    const raw = split < 0 ? target : target.slice(0, split);
+    const query = split < 0 ? '' : target.slice(split);
+    if (/%(?:2f|5c|25)/iu.test(raw))
+        deny('Ambiguous URL encoding.');
+    let decoded;
+    try {
+        decoded = decodeURIComponent(raw);
+    }
+    catch {
+        deny('Malformed URL encoding.');
+    }
+    const trailingSlash = decoded.endsWith('/');
+    return { path: appPath(decoded.slice(1, trailingSlash ? -1 : undefined)), query, trailingSlash };
+}
+//# sourceMappingURL=paths.js.map

package/data/build/dist/host/modules/quick-apps/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAElC,2FAA2F;AAC3F,MAAM,UAAU,OAAO,CAAC,KAAc,EAAE,SAAS,GAAG,IAAI;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA;IAC5H,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAAC,IAAI,SAAS;YAAE,OAAO,EAAE,CAAC;QAAC,IAAI,EAAE,CAAA;IAAC,CAAC;IACvE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA;IACtL,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACnC,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAA;AACpG,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,IAAY;IACrD,OAAO,KAAK,KAAK,EAAE,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;AACvE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC;WAC3G,yEAAyE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5F,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,IAAY,EAAE,gBAAgB,GAAG,KAAK;IAC5F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,OAAO,GAAG,IAAI,CAAA;IAClB,MAAM,KAAK,GAAG,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAE,CAAC,CAAA;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;YACjC,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,IAAI,CAAC,8CAA8C,CAAC,CAAA;YAC/E,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,IAAI,EAAE,CAAA;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,gBAAgB,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAK;YAC/G,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAAE,IAAI,EAAE,CAAA;IAC/C,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAClI,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACvD,MAAM,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAClD,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,yBAAyB,CAAC,CAAA;IAChE,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QAAC,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;IAAC,CAAC;IACnF,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC3C,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAA;AAClG,CAAC"}

package/data/build/dist/host/modules/quick-apps/registry.d.ts

@@ -0,0 +1,30 @@
+import type { QuickApp, QuickAppAvailability, QuickAppPermissions } from '../../../shared/contracts/quick-apps.js';
+export interface QuickAppStorage {
+    read(): readonly QuickApp[];
+    write(apps: readonly QuickApp[]): Promise<void>;
+}
+export declare class QuickAppRegistry {
+    readonly storage: QuickAppStorage;
+    readonly workspaceRoot: (id: string) => string | null;
+    readonly hostId: string;
+    private readonly remoteValidate?;
+    private pending;
+    private stopped;
+    constructor(storage: QuickAppStorage, workspaceRoot: (id: string) => string | null, hostId?: string, remoteValidate?: ((app: QuickApp) => Promise<void>) | undefined);
+    list(): readonly QuickApp[];
+    get(id: string): QuickApp;
+    root(app: QuickApp): string;
+    validate(app: QuickApp): Promise<void>;
+    availability(app: QuickApp, htmlAvailable: boolean): Promise<QuickAppAvailability>;
+    upsert(input: unknown, expectedRevision: number): Promise<QuickApp>;
+    remove(id: string, expectedRevision: number): Promise<void>;
+    reorder(input: unknown): Promise<readonly QuickApp[]>;
+    revokeWorkspaceAccess(id: string, expectedRevision: number): Promise<QuickApp>;
+    dispose(): Promise<void>;
+    private serialize;
+}
+/** Ordering revisions protect metadata writes without changing launch files or permissions. */
+export declare function quickAppDefinitionKey(app: QuickApp): string;
+export declare function parseDefinition(input: unknown): Omit<QuickApp, 'revision'>;
+export declare function parsePermissions(value: unknown): QuickAppPermissions;
+//# sourceMappingURL=registry.d.ts.map

package/data/build/dist/host/modules/quick-apps/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/registry.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAMlH,MAAM,WAAW,eAAe;IAC9B,IAAI,IAAI,SAAS,QAAQ,EAAE,CAAA;IAC3B,KAAK,CAAC,IAAI,EAAE,SAAS,QAAQ,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAChD;AAED,qBAAa,gBAAgB;IAGf,QAAQ,CAAC,OAAO,EAAE,eAAe;IAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI;IAAE,QAAQ,CAAC,MAAM;IACnH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAHlC,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,OAAO,CAAQ;gBACF,OAAO,EAAE,eAAe,EAAW,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,EAAW,MAAM,SAAU,EAC5G,cAAc,CAAC,GAAE,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,aAAA;IAEpE,IAAI,IAAI,SAAS,QAAQ,EAAE;IAC3B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ;IAKzB,IAAI,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM;IAMrB,QAAQ,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAQtC,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAMxF,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAanE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3D,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,QAAQ,EAAE,CAAC;IAoBrD,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAYxE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAC9B,OAAO,CAAC,SAAS;CAQlB;AAED,+FAA+F;AAC/F,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,CAG3D;AAOD,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAwB1E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAQpE"}

package/data/build/dist/host/modules/quick-apps/registry.js

@@ -0,0 +1,195 @@
+import { randomUUID } from 'node:crypto';
+import { stat } from 'node:fs/promises';
+import { QUICK_APP_LIMITS } from '../../../shared/contracts/quick-apps.js';
+import { parseQuickAppNetworkAllow } from '../../../shared/quick-app-network-allow.js';
+import { appPath, publicPath, resolveAppPath, withinScope } from './paths.js';
+import { conflict, deny, QuickAppError } from './errors.js';
+export class QuickAppRegistry {
+    storage;
+    workspaceRoot;
+    hostId;
+    remoteValidate;
+    pending = Promise.resolve();
+    stopped = false;
+    constructor(storage, workspaceRoot, hostId = 'local', remoteValidate) {
+        this.storage = storage;
+        this.workspaceRoot = workspaceRoot;
+        this.hostId = hostId;
+        this.remoteValidate = remoteValidate;
+    }
+    list() { return [...structuredClone(this.storage.read())].sort((a, b) => a.order - b.order); }
+    get(id) {
+        const app = this.list().find(item => item.id === id);
+        if (!app)
+            throw new QuickAppError(404, 'QUICK_APP_UNAVAILABLE', 'The shortcut no longer exists.');
+        return app;
+    }
+    root(app) {
+        if (app.hostId !== this.hostId)
+            throw new QuickAppError(503, 'QUICK_APP_HOST_UNAVAILABLE', 'The owning Host is not connected through a verified Quick Apps route.');
+        const root = this.workspaceRoot(app.workspaceId);
+        if (!root)
+            throw new QuickAppError(404, 'QUICK_APP_WORKSPACE_UNAVAILABLE', 'The exact workspace is unavailable.');
+        return root;
+    }
+    async validate(app) {
+        if (app.hostId !== this.hostId && this.remoteValidate) {
+            await this.remoteValidate(app);
+            return;
+        }
+        const root = this.root(app);
+        if (!withinScope(app.documentRoot, app.entryPath) || !publicPath(app.entryPath))
+            deny();
+        if (!(await stat(await resolveAppPath(root, app.documentRoot))).isDirectory())
+            deny();
+        if (!(await stat(await resolveAppPath(root, app.entryPath))).isFile())
+            deny();
+        for (const mount of app.mounts)
+            if (!(await stat(await resolveAppPath(root, mount.workspacePath))).isDirectory())
+                deny();
+    }
+    async availability(app, htmlAvailable) {
+        if (app.hostId !== this.hostId)
+            return 'disconnected-host';
+        if (!this.workspaceRoot(app.workspaceId))
+            return 'missing-workspace';
+        try {
+            await this.validate(app);
+        }
+        catch {
+            return 'missing-file';
+        }
+        return app.kind === 'html' && !htmlAvailable ? 'unsupported-runtime' : 'available';
+    }
+    upsert(input, expectedRevision) {
+        return this.serialize(async () => {
+            const data = parseDefinition(input);
+            const apps = this.list();
+            const existing = data.id ? apps.find(app => app.id === data.id) : undefined;
+            if (existing ? expectedRevision !== existing.revision : expectedRevision !== 0 || Boolean(data.id))
+                conflict();
+            if (!existing && apps.length >= QUICK_APP_LIMITS.shortcuts)
+                throw new QuickAppError(429, 'QUICK_APP_LIMIT', 'Too many shortcuts.');
+            const app = { ...data, id: existing?.id ?? randomUUID(), revision: (existing?.revision ?? 0) + 1 };
+            await this.validate(app);
+            await this.storage.write([...apps.filter(item => item.id !== app.id), app]);
+            return app;
+        });
+    }
+    remove(id, expectedRevision) {
+        return this.serialize(async () => {
+            if (this.get(id).revision !== expectedRevision)
+                conflict();
+            await this.storage.write(this.list().filter(app => app.id !== id));
+        });
+    }
+    reorder(input) {
+        return this.serialize(async () => {
+            if (!Array.isArray(input) || input.length > QUICK_APP_LIMITS.shortcuts)
+                deny('Invalid shortcut order.');
+            const expected = new Map();
+            for (const item of input) {
+                if (!item || typeof item.id !== 'string' || !Number.isSafeInteger(item.expectedRevision) || expected.has(item.id))
+                    deny('Invalid shortcut order.');
+                expected.set(item.id, item.expectedRevision);
+            }
+            const apps = this.list();
+            if (apps.length !== expected.size || apps.some(app => expected.get(app.id) !== app.revision))
+                conflict();
+            const byId = new Map(apps.map(app => [app.id, app]));
+            const ordered = [...expected.keys()].map((id, order) => {
+                const app = byId.get(id);
+                return app.order === order ? app : { ...app, order, revision: app.revision + 1 };
+            });
+            // Ordering only changes metadata, including shortcuts whose Host or source is unavailable.
+            if (ordered.some(app => app !== byId.get(app.id)))
+                await this.storage.write(ordered);
+            return ordered;
+        });
+    }
+    revokeWorkspaceAccess(id, expectedRevision) {
+        return this.serialize(async () => {
+            const app = this.get(id);
+            if (app.revision !== expectedRevision)
+                conflict();
+            if (app.fileAccess !== 'workspace')
+                return app;
+            const { fileAccess: _access, ...definition } = app;
+            const updated = { ...definition, revision: app.revision + 1 };
+            // Revocation must work even when the entry or workspace is no longer accessible.
+            await this.storage.write(this.list().map(item => item.id === id ? updated : item));
+            return updated;
+        });
+    }
+    async dispose() { this.stopped = true; await this.pending.catch(() => undefined); }
+    serialize(operation) {
+        const next = this.pending.catch(() => undefined).then(() => {
+            if (this.stopped)
+                throw new QuickAppError(410, 'QUICK_APP_REVOKED', 'Quick Apps is disabled.');
+            return operation();
+        });
+        this.pending = next;
+        return next;
+    }
+}
+/** Ordering revisions protect metadata writes without changing launch files or permissions. */
+export function quickAppDefinitionKey(app) {
+    const { order: _order, revision: _revision, ...definition } = app;
+    return JSON.stringify(definition);
+}
+function text(value) {
+    if (typeof value !== 'string' || value.trim() === '' || value.length > 512 || /[\x00-\x1f]/u.test(value))
+        deny('Invalid shortcut metadata.');
+    return value.trim();
+}
+export function parseDefinition(input) {
+    if (!input || typeof input !== 'object' || Array.isArray(input))
+        deny();
+    const value = input;
+    if (value.kind !== 'html' && value.kind !== 'text')
+        deny();
+    if (value.fileAccess !== undefined && value.fileAccess !== 'workspace')
+        deny('Invalid workspace access policy.');
+    if (!Array.isArray(value.mounts) || value.mounts.length > 8 || typeof value.spaFallback !== 'boolean' || !Number.isSafeInteger(value.order))
+        deny();
+    const prefixes = [];
+    const mounts = value.mounts.map(item => {
+        if (!item || typeof item !== 'object' || item.read !== true || typeof item.urlPrefix !== 'string' || !item.urlPrefix.startsWith('/'))
+            deny();
+        const prefix = appPath(item.urlPrefix.slice(1), false);
+        if (prefix === '__quickapp' || prefix.startsWith('__quickapp/') || prefixes.some(previous => withinScope(previous, prefix) || withinScope(prefix, previous)))
+            deny('Overlapping or reserved mount.');
+        prefixes.push(prefix);
+        const workspacePath = appPath(item.workspacePath);
+        if (!publicPath(workspacePath))
+            deny();
+        return { urlPrefix: `/${prefix}`, workspacePath, read: true };
+    });
+    const entryPath = appPath(value.entryPath, false);
+    if (value.kind === 'html' && !/\.html?$/iu.test(entryPath))
+        deny('Choose an HTML entry file.');
+    let networkAllow = [];
+    try {
+        networkAllow = parseQuickAppNetworkAllow(value.networkAllow);
+    }
+    catch {
+        deny('Invalid local network allow list.');
+    }
+    return { id: value.id ? text(value.id) : '', title: text(value.title), hostId: text(value.hostId), workspaceId: text(value.workspaceId),
+        ...(value.kind === 'html' && value.fileAccess === 'workspace' ? { fileAccess: 'workspace' } : {}),
+        entryPath, documentRoot: appPath(value.documentRoot), kind: value.kind, spaFallback: value.spaFallback,
+        ...(networkAllow.length ? { networkAllow } : {}), mounts, order: value.order };
+}
+export function parsePermissions(value) {
+    if (!value || typeof value !== 'object')
+        deny();
+    const input = value;
+    const paths = (key) => {
+        if (!Array.isArray(input[key]) || input[key].length > 8)
+            deny('Invalid file permissions.');
+        return input[key].map((path) => { const normalized = appPath(path); if (!publicPath(normalized))
+            deny(); return normalized; });
+    };
+    return { read: paths('read'), write: paths('write'), delete: paths('delete') };
+}
+//# sourceMappingURL=registry.js.map

package/data/build/dist/host/modules/quick-apps/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAEvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAA;AACtF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7E,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAO3D,MAAM,OAAO,gBAAgB;IAGN;IAAmC;IAAuD;IAC5F;IAHX,OAAO,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAA;IAC7C,OAAO,GAAG,KAAK,CAAA;IACvB,YAAqB,OAAwB,EAAW,aAA4C,EAAW,SAAS,OAAO,EAC5G,cAAiD;QAD/C,YAAO,GAAP,OAAO,CAAiB;QAAW,kBAAa,GAAb,aAAa,CAA+B;QAAW,WAAM,GAAN,MAAM,CAAU;QAC5G,mBAAc,GAAd,cAAc,CAAmC;IAAG,CAAC;IAExE,IAAI,KAA0B,OAAO,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;IAClH,GAAG,CAAC,EAAU;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;QACpD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,uBAAuB,EAAE,gCAAgC,CAAC,CAAA;QACjG,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,IAAI,CAAC,GAAa;QAChB,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,4BAA4B,EAAE,uEAAuE,CAAC,CAAA;QACnK,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAChD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,iCAAiC,EAAE,qCAAqC,CAAC,CAAA;QACjH,OAAO,IAAI,CAAA;IACb,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,GAAa;QAC1B,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAAC,OAAM;QAAC,CAAC;QACjG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,IAAI,EAAE,CAAA;QACvF,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,IAAI,EAAE,CAAA;QACrF,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,CAAA;QAC7E,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM;YAAE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;gBAAE,IAAI,EAAE,CAAA;IAC1H,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,GAAa,EAAE,aAAsB;QACtD,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,mBAAmB,CAAA;QAC1D,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,OAAO,mBAAmB,CAAA;QACpE,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,cAAc,CAAA;QAAC,CAAC;QAChE,OAAO,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW,CAAA;IACpF,CAAC;IACD,MAAM,CAAC,KAAc,EAAE,gBAAwB;QAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAC3E,IAAI,QAAQ,CAAC,CAAC,CAAC,gBAAgB,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,QAAQ,EAAE,CAAA;YAC9G,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC,SAAS;gBAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,qBAAqB,CAAC,CAAA;YAClI,MAAM,GAAG,GAAa,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAA;YAC5G,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;YACxB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;YAC3E,OAAO,GAAG,CAAA;QACZ,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,CAAC,EAAU,EAAE,gBAAwB;QACzC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,KAAK,gBAAgB;gBAAE,QAAQ,EAAE,CAAA;YAC1D,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;QACpE,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,CAAC,KAAc;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,CAAC,SAAS;gBAAE,IAAI,CAAC,yBAAyB,CAAC,CAAA;YACvG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;YAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAE,IAAI,CAAC,yBAAyB,CAAC,CAAA;gBAClJ,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;YAC9C,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YACxB,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC;gBAAE,QAAQ,EAAE,CAAA;YACxG,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;YACpD,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE;gBACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAA;gBACzB,OAAO,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAA;YAClF,CAAC,CAAC,CAAA;YACF,2FAA2F;YAC3F,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACpF,OAAO,OAAO,CAAA;QAChB,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,qBAAqB,CAAC,EAAU,EAAE,gBAAwB;QACxD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACxB,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB;gBAAE,QAAQ,EAAE,CAAA;YACjD,IAAI,GAAG,CAAC,UAAU,KAAK,WAAW;gBAAE,OAAO,GAAG,CAAA;YAC9C,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,UAAU,EAAE,GAAG,GAAG,CAAA;YAClD,MAAM,OAAO,GAAG,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAA;YAC7D,iFAAiF;YACjF,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YAClF,OAAO,OAAO,CAAA;QAChB,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,KAAK,CAAC,OAAO,KAAoB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC;IACzF,SAAS,CAAI,SAA2B;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;YACzD,IAAI,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,yBAAyB,CAAC,CAAA;YAC9F,OAAO,SAAS,EAAE,CAAA;QACpB,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;QACnB,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAED,+FAA+F;AAC/F,MAAM,UAAU,qBAAqB,CAAC,GAAa;IACjD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,UAAU,EAAE,GAAG,GAAG,CAAA;IACjE,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;AACnC,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAA;IAC5I,OAAO,KAAK,CAAC,IAAI,EAAE,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IACvE,MAAM,KAAK,GAAG,KAAgC,CAAA;IAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,IAAI,EAAE,CAAA;IAC1D,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,WAAW;QAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;IAChH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IACnJ,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACrC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,EAAE,CAAA;QAC5I,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACtD,IAAI,MAAM,KAAK,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;QACpM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrB,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACjD,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,IAAI,EAAE,CAAA;QACtC,OAAO,EAAE,SAAS,EAAE,IAAI,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,IAAa,EAAE,CAAA;IACxE,CAAC,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IACjD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAA;IAC9F,IAAI,YAAY,GAAsB,EAAE,CAAA;IACxC,IAAI,CAAC;QAAC,YAAY,GAAG,yBAAyB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,mCAAmC,CAAC,CAAA;IAAC,CAAC;IACxH,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QACrI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,WAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;QACtG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAe,EAAE,CAAA;AAC5F,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,IAAI,EAAE,CAAA;IAC/C,MAAM,KAAK,GAAG,KAAgC,CAAA;IAC9C,MAAM,KAAK,GAAG,CAAC,GAAW,EAAY,EAAE;QACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,2BAA2B,CAAC,CAAA;QAC1F,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAa,EAAE,EAAE,GAAG,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,IAAI,EAAE,CAAC,CAAC,OAAO,UAAU,CAAA,CAAC,CAAC,CAAC,CAAA;IACxI,CAAC,CAAA;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAA;AAChF,CAAC"}

package/data/build/dist/host/modules/quick-apps/remote.d.ts

@@ -0,0 +1,38 @@
+import type { QuickApp } from '../../../shared/contracts/quick-apps.js';
+import { type QuickAppOriginProvider } from '../../../dsh-capabilities/host/quick-app-origin-adapter.js';
+/** Only the authenticated PeerHost management carrier may implement this gateway. */
+export interface QuickAppPeerGateway {
+    call(hostId: string, workspaceId: string, action: string, payload: Record<string, unknown>, signal?: AbortSignal): Promise<unknown>;
+}
+export declare function quickAppTargetWorkspace(app: Pick<QuickApp, 'hostId' | 'workspaceId'>): string;
+/** Remote definitions are validated and held on the file-owning Host, never trusted as grants. */
+export declare class QuickAppRemoteOwner {
+    private readonly origins?;
+    private apps;
+    private readonly registry;
+    private readonly service;
+    private pending;
+    private stopped;
+    constructor(workspaceRoot: (id: string) => string | null, origins?: QuickAppOriginProvider | undefined);
+    handle(action: string, input: Record<string, unknown>, principal: string): Promise<unknown>;
+    dispose(): Promise<void>;
+}
+/** Controlling Host owns routing references; app payloads can never select a mutation destination. */
+export declare class QuickAppRemoteController {
+    private readonly gateway;
+    private readonly protectedUi;
+    private readonly proxy?;
+    private readonly active;
+    private readonly opening;
+    private readonly origins;
+    private stopped;
+    constructor(gateway: () => QuickAppPeerGateway | undefined, protectedUi?: (origin?: string) => boolean, proxy?: QuickAppOriginProvider | undefined);
+    call(app: QuickApp, action: string, payload?: Record<string, unknown>, signal?: AbortSignal): Promise<any>;
+    launch(app: QuickApp, principal: string, uiOrigin: string | undefined, signal?: AbortSignal, browserStorage?: boolean): Promise<unknown>;
+    owns(id: string): boolean;
+    document(id: string, principal: string, input: Record<string, unknown>, currentApp: (id: string) => QuickApp): Promise<unknown>;
+    close(id: string, principal: string): Promise<void>;
+    invalidate(app: QuickApp): Promise<void>;
+    dispose(): Promise<void>;
+}
+//# sourceMappingURL=remote.d.ts.map

package/data/build/dist/host/modules/quick-apps/remote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../../../../../../src/host/modules/quick-apps/remote.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAA+C,MAAM,yCAAyC,CAAA;AAMpH,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,4DAA4D,CAAA;AAKhI,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACpI;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,GAAG,aAAa,CAAC,GAAG,MAAM,CAI7F;AAED,kGAAkG;AAClG,qBAAa,mBAAmB;IAM4B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IALnF,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,OAAO,CAAQ;gBACX,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,EAAmB,OAAO,CAAC,EAAE,sBAAsB,YAAA;IAI3G,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAmCrF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAC/B;AAED,sGAAsG;AACtG,qBAAa,wBAAwB;IAKvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAyC,OAAO,CAAC,QAAQ,CAAC,WAAW;IACvG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IALzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4J;IACnL,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,OAAO,CAAQ;gBACM,OAAO,EAAE,MAAM,mBAAmB,GAAG,SAAS,EAAmB,WAAW,GAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAqB,EAClI,KAAK,CAAC,EAAE,sBAAsB,YAAA;IAC3C,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAMpH,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,UAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IA+DtI,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAK/H,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnD,UAAU,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAK/B"}