@jingyi0605/codingns4dsh 0.2.1-beta.9 → 0.2.1-rc.3

package/data/build/dist/shared/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/shared/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,gCAAgC,EAChC,4BAA4B,EAC5B,qBAAqB,EACrB,6BAA6B,EAC7B,mCAAmC,EACnC,4CAA4C,EAC5C,8BAA8B,EAC9B,4BAA4B,EAC5B,iCAAiC,EACjC,kCAAkC,EAClC,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,iCAAiC,EACjC,kCAAkC,EAClC,yBAAyB,EACzB,0BAA0B,EAC1B,gCAAgC,EAChC,qBAAqB,EACrB,qCAAqC,EACrC,8CAA8C,EAC9C,gCAAgC,EAChC,8BAA8B,EAC9B,gCAAgC,EAChC,uCAAuC,EACvC,wCAAwC,EACxC,6BAA6B,EAC7B,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,mCAAmC,EACnC,gCAAgC,EAChC,+CAA+C,EAC/C,sCAAsC,EACtC,kCAAkC,EAClC,2BAA2B,EAC3B,mBAAmB,EACnB,6BAA6B,EAC7B,gBAAgB,EAChB,yBAAyB,GA0B1B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,oCAAoC,EACpC,+BAA+B,EAC/B,6BAA6B,EAC7B,8BAA8B,EAC9B,2BAA2B,GAO5B,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,+BAA+B,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAA;AAwB5R,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,2BAA2B,EAC3B,qBAAqB,EACrB,yBAAyB,GAE1B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,EAC3B,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,wBAAwB,CAAA;AAS/B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,8BAA8B,EAC9B,0BAA0B,EAC1B,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,GAMpB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AA8D/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AAkCtE,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,uBAAuB,EACvB,0BAA0B,EAC1B,kBAAkB,GAenB,MAAM,sBAAsB,CAAA;AAuB7B,OAAO,EACL,kBAAkB,EAClB,gBAAgB,GAMjB,MAAM,6BAA6B,CAAA;AAwEpC,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AACxJ,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,GAGxB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,gCAAgC,EAChC,2BAA2B,EAC3B,yBAAyB,EACzB,8BAA8B,EAC9B,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,2BAA2B,EAC3B,uBAAuB,EACvB,4BAA4B,EAC5B,2BAA2B,GAQ5B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAAmE,MAAM,gCAAgC,CAAA;AACvK,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAA8B,MAAM,+BAA+B,CAAA;AAE9H,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAmE,MAAM,oCAAoC,CAAA;AAC/K,OAAO,EAAE,4BAA4B,EAAE,gCAAgC,EAAE,qCAAqC,EAC5G,yBAAyB,EAAE,gCAAgC,EAAiE,MAAM,+BAA+B,CAAA;AACnK,OAAO,EAAE,+BAA+B,EAAE,uCAAuC,EAAE,+BAA+B,EAChH,iCAAiC,EACC,MAAM,8BAA8B,CAAA;AACxE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,8BAA8B,EAAE,gCAAgC,EAAE,8BAA8B,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAA;AAEvQ,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,oBAAoB,EAAgC,MAAM,wBAAwB,CAAA;AAClJ,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,2BAA2B,EAE3B,SAAS,EACT,SAAS,EACT,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/shared/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,gCAAgC,EAChC,4BAA4B,EAC5B,qBAAqB,EACrB,6BAA6B,EAC7B,mCAAmC,EACnC,4CAA4C,EAC5C,8BAA8B,EAC9B,4BAA4B,EAC5B,iCAAiC,EACjC,mCAAmC,EACnC,kCAAkC,EAClC,6BAA6B,EAC7B,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,iCAAiC,EACjC,kCAAkC,EAClC,yBAAyB,EACzB,0BAA0B,EAC1B,gCAAgC,EAChC,qBAAqB,EACrB,qCAAqC,EACrC,8CAA8C,EAC9C,gCAAgC,EAChC,8BAA8B,EAC9B,gCAAgC,EAChC,uCAAuC,EACvC,wCAAwC,EACxC,6BAA6B,EAC7B,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,EACnC,gCAAgC,EAChC,+CAA+C,EAC/C,sCAAsC,EACtC,kCAAkC,EAClC,mCAAmC,EACnC,2BAA2B,EAC3B,mBAAmB,EACnB,6BAA6B,EAC7B,gBAAgB,EAChB,yBAAyB,GA4B1B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,2BAA2B,EAC3B,8BAA8B,GAI/B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,oCAAoC,EACpC,6BAA6B,EAC7B,+BAA+B,EAC/B,6BAA6B,EAC7B,6BAA6B,EAC7B,8BAA8B,EAC9B,2BAA2B,EAC3B,4BAA4B,EAC5B,mCAAmC,EACnC,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,GAO3B,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,+BAA+B,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAA;AAwB5R,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,2BAA2B,EAC3B,qBAAqB,EACrB,yBAAyB,GAE1B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,EAC3B,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,wBAAwB,CAAA;AAS/B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,8BAA8B,EAC9B,0BAA0B,EAC1B,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,GAMpB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AA8D/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AA2EtE,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,uBAAuB,EACvB,0BAA0B,EAC1B,kBAAkB,GAenB,MAAM,sBAAsB,CAAA;AAuB7B,OAAO,EACL,kBAAkB,EAClB,gBAAgB,GAMjB,MAAM,6BAA6B,CAAA;AAwEpC,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AACxJ,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,GAGxB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,gCAAgC,EAChC,2BAA2B,EAC3B,yBAAyB,EACzB,8BAA8B,EAC9B,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,2BAA2B,EAC3B,uBAAuB,EACvB,4BAA4B,EAC5B,2BAA2B,GAQ5B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAAmE,MAAM,gCAAgC,CAAA;AACvK,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAA8B,MAAM,+BAA+B,CAAA;AAE9H,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAmE,MAAM,oCAAoC,CAAA;AAC/K,OAAO,EAAE,4BAA4B,EAAE,gCAAgC,EAAE,qCAAqC,EAC5G,yBAAyB,EAAE,gCAAgC,EAAiE,MAAM,+BAA+B,CAAA;AACnK,OAAO,EAAE,+BAA+B,EAAE,uCAAuC,EAAE,+BAA+B,EAChH,iCAAiC,EACC,MAAM,8BAA8B,CAAA;AACxE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,8BAA8B,EAAE,gCAAgC,EAAE,8BAA8B,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAA;AAEvQ,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,oBAAoB,EAAgC,MAAM,wBAAwB,CAAA;AAClJ,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,2BAA2B,EAE3B,SAAS,EACT,SAAS,EACT,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAA"}

package/data/build/dist/shared/peer-host-http-routes.d.ts

@@ -3,6 +3,10 @@
  * 路由命中只表示允许使用 Host 票据；目标端仍必须验证签名、有效期与撤销状态。
  */
 export declare const PEER_HOST_HTTP_PROXY_RULES: readonly [{
+    readonly prefix: "/api/codingns/quickApps/remote";
+    readonly methods: readonly ["POST"];
+    readonly exact: true;
+}, {
     readonly prefix: "/api/codingns/host/status";
     readonly methods: readonly ["POST"];
 }, {

package/data/build/dist/shared/peer-host-http-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"peer-host-http-routes.d.ts","sourceRoot":"","sources":["../../../../src/shared/peer-host-http-routes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwB7B,CAAA;AAEV,4CAA4C;AAC5C,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAKzE"}
+{"version":3,"file":"peer-host-http-routes.d.ts","sourceRoot":"","sources":["../../../../src/shared/peer-host-http-routes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyB7B,CAAA;AAEV,4CAA4C;AAC5C,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAOzE"}

package/data/build/dist/shared/peer-host-http-routes.js

@@ -3,6 +3,7 @@
  * 路由命中只表示允许使用 Host 票据；目标端仍必须验证签名、有效期与撤销状态。
  */
 export const PEER_HOST_HTTP_PROXY_RULES = [
+    { prefix: '/api/codingns/quickApps/remote', methods: ['POST'], exact: true },
     { prefix: '/api/codingns/host/status', methods: ['POST'] },
     // 仅开放只读的会话通知事实源，不放行助理配置、派发或审批动作。
     { prefix: '/api/codingns/assistant/notifications/source', methods: ['POST'] },
@@ -29,6 +30,9 @@ export const PEER_HOST_HTTP_PROXY_RULES = [
 ];
 /** 按完整路径段匹配，不能让 debug-admin 等相似前缀借用调试授权。 */
 export function isPeerHostHttpRoute(method, path) {
+    // Installation changes are local settings operations, not delegated workspace RPCs.
+    if (path === '/api/codingns/cli/management' || path.startsWith('/api/codingns/cli/management/'))
+        return false;
     const route = PEER_HOST_HTTP_PROXY_RULES.find(candidate => ('exact' in candidate && candidate.exact === true)
         ? path === candidate.prefix
         : path === candidate.prefix || path.startsWith(`${candidate.prefix}/`));

package/data/build/dist/shared/peer-host-http-routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"peer-host-http-routes.js","sourceRoot":"","sources":["../../../../src/shared/peer-host-http-routes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,EAAE,MAAM,EAAE,2BAA2B,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IAC1D,iCAAiC;IACjC,EAAE,MAAM,EAAE,8CAA8C,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IAC7E,EAAE,MAAM,EAAE,oCAAoC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IACnE,EAAE,MAAM,EAAE,+BAA+B,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IAC9D,EAAE,MAAM,EAAE,qCAAqC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IACpE,EAAE,MAAM,EAAE,yCAAyC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IACxE,EAAE,MAAM,EAAE,yCAAyC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IACxE,EAAE,MAAM,EAAE,0CAA0C,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IACzE,2CAA2C;IAC3C,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IAClD,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IAClD,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IACpD,EAAE,MAAM,EAAE,8BAA8B,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IAC7D,EAAE,MAAM,EAAE,+BAA+B,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IAC9D,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE;IAC/C,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE;IACrD,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE;IAC9C,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;IACzD,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;IACxE,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE;IAChD,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE;IACrD,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE;CAChD,CAAA;AAEV,4CAA4C;AAC5C,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,IAAY;IAC9D,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,IAAI,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,CAAC;QAC3G,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM;QAC3B,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACzE,OAAO,KAAK,KAAK,SAAS,IAAK,KAAK,CAAC,OAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;AACnG,CAAC"}
+{"version":3,"file":"peer-host-http-routes.js","sourceRoot":"","sources":["../../../../src/shared/peer-host-http-routes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,EAAE,MAAM,EAAE,gCAAgC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;IAC5E,EAAE,MAAM,EAAE,2BAA2B,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IAC1D,iCAAiC;IACjC,EAAE,MAAM,EAAE,8CAA8C,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IAC7E,EAAE,MAAM,EAAE,oCAAoC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IACnE,EAAE,MAAM,EAAE,+BAA+B,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IAC9D,EAAE,MAAM,EAAE,qCAAqC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IACpE,EAAE,MAAM,EAAE,yCAAyC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IACxE,EAAE,MAAM,EAAE,yCAAyC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IACxE,EAAE,MAAM,EAAE,0CAA0C,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IACzE,2CAA2C;IAC3C,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IAClD,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IAClD,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IACpD,EAAE,MAAM,EAAE,8BAA8B,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IAC7D,EAAE,MAAM,EAAE,+BAA+B,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;IAC9D,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE;IAC/C,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE;IACrD,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE;IAC9C,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;IACzD,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;IACxE,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE;IAChD,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE;IACrD,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE;CAChD,CAAA;AAEV,4CAA4C;AAC5C,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,IAAY;IAC9D,oFAAoF;IACpF,IAAI,IAAI,KAAK,8BAA8B,IAAI,IAAI,CAAC,UAAU,CAAC,+BAA+B,CAAC;QAAE,OAAO,KAAK,CAAA;IAC7G,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,IAAI,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,CAAC;QAC3G,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM;QAC3B,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACzE,OAAO,KAAK,KAAK,SAAS,IAAK,KAAK,CAAC,OAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;AACnG,CAAC"}

package/data/build/dist/shared/provider-icon-resources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-icon-resources.d.ts","sourceRoot":"","sources":["../../../../src/shared/provider-icon-resources.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,eAAO,MAAM,kBAAkB,kCAAkC,CAAA;AAEjE,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAqBhE,CAAA"}
+{"version":3,"file":"provider-icon-resources.d.ts","sourceRoot":"","sources":["../../../../src/shared/provider-icon-resources.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,eAAO,MAAM,kBAAkB,kCAAkC,CAAA;AAEjE,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAsBhE,CAAA"}

package/data/build/dist/shared/provider-icon-resources.js

@@ -1,6 +1,7 @@
 /** Client 与 Host 共用固定资源目录；避开 Desktop 将 /assets 固定映射到应用安装目录的路径。 */
 export const PROVIDER_ICON_PATH = '/api/codingns/provider-icons/';
 export const PROVIDER_ICON_FILES = {
+    magpie: 'magpie.png',
     dsh: 'deepseek-harness.svg',
     'command-code': 'command-code.svg',
     'claude-code': 'claude-code.png',

package/data/build/dist/shared/provider-icon-resources.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-icon-resources.js","sourceRoot":"","sources":["../../../../src/shared/provider-icon-resources.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,MAAM,CAAC,MAAM,kBAAkB,GAAG,+BAA+B,CAAA;AAEjE,MAAM,CAAC,MAAM,mBAAmB,GAAqC;IACnE,GAAG,EAAE,sBAAsB;IAC3B,cAAc,EAAE,kBAAkB;IAClC,aAAa,EAAE,iBAAiB;IAChC,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,YAAY;IACpB,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,kBAAkB;IACzB,KAAK,EAAE,WAAW;IAClB,EAAE,EAAE,QAAQ;IACZ,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe;IAC1B,YAAY,EAAE,gBAAgB;IAC9B,UAAU,EAAE,cAAc;IAC1B,KAAK,EAAE,WAAW;IAClB,UAAU,EAAE,cAAc;IAC1B,WAAW,EAAE,iBAAiB;IAC9B,MAAM,EAAE,YAAY;CACrB,CAAA"}
+{"version":3,"file":"provider-icon-resources.js","sourceRoot":"","sources":["../../../../src/shared/provider-icon-resources.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,MAAM,CAAC,MAAM,kBAAkB,GAAG,+BAA+B,CAAA;AAEjE,MAAM,CAAC,MAAM,mBAAmB,GAAqC;IACnE,MAAM,EAAE,YAAY;IACpB,GAAG,EAAE,sBAAsB;IAC3B,cAAc,EAAE,kBAAkB;IAClC,aAAa,EAAE,iBAAiB;IAChC,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,YAAY;IACpB,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,kBAAkB;IACzB,KAAK,EAAE,WAAW;IAClB,EAAE,EAAE,QAAQ;IACZ,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe;IAC1B,YAAY,EAAE,gBAAgB;IAC9B,UAAU,EAAE,cAAc;IAC1B,KAAK,EAAE,WAAW;IAClB,UAAU,EAAE,cAAc;IAC1B,WAAW,EAAE,iBAAiB;IAC9B,MAAM,EAAE,YAAY;CACrB,CAAA"}

package/data/build/dist/shared/quick-app-browser-storage.d.ts

@@ -0,0 +1,33 @@
+import type { QuickApp } from './contracts/quick-apps.js';
+export declare const QUICK_APP_STORAGE_PROTOCOL = "codingns.quick-app-storage.v1";
+export declare const QUICK_APP_STORAGE_LIMITS: Readonly<{
+    bytes: number;
+    keys: 1024;
+    pending: 64;
+    timeoutMs: 10000;
+}>;
+export type QuickAppStorageArea = 'local' | 'session';
+export type QuickAppStorageEntries = [string, string][];
+export interface QuickAppStorageAreaApi {
+    getItem(key: string): Promise<string | null>;
+    setItem(key: string, value: string): Promise<void>;
+    removeItem(key: string): Promise<void>;
+    clear(): Promise<void>;
+    keys(): Promise<string[]>;
+    flush(): Promise<void>;
+}
+export interface QuickAppStorageApi extends QuickAppStorageAreaApi {
+    readonly session: QuickAppStorageAreaApi;
+}
+export interface QuickAppStorageRequest {
+    id: number;
+    area: QuickAppStorageArea;
+    operation: 'getItem' | 'setItem' | 'removeItem' | 'clear' | 'keys' | 'flush';
+    key?: string;
+    value?: string;
+}
+/** Metadata changes preserve storage; reassignment to another source does not. */
+export declare function quickAppStorageKey(app: Pick<QuickApp, 'id' | 'hostId' | 'workspaceId' | 'documentRoot' | 'entryPath'>): string;
+export declare function validateQuickAppStorageEntries(value: unknown): asserts value is QuickAppStorageEntries;
+export declare function isQuickAppStorageRequest(value: unknown): value is QuickAppStorageRequest;
+//# sourceMappingURL=quick-app-browser-storage.d.ts.map

package/data/build/dist/shared/quick-app-browser-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-app-browser-storage.d.ts","sourceRoot":"","sources":["../../../../src/shared/quick-app-browser-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AAEzD,eAAO,MAAM,0BAA0B,kCAAkC,CAAA;AACzE,eAAO,MAAM,wBAAwB;;;;;EAAwF,CAAA;AAC7H,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,SAAS,CAAA;AACrD,MAAM,MAAM,sBAAsB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAA;AACvD,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAC5C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClD,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AACD,MAAM,WAAW,kBAAmB,SAAQ,sBAAsB;IAChE,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAA;CACzC;AACD,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,mBAAmB,CAAA;IACzB,SAAS,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAA;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,QAAQ,GAAG,aAAa,GAAG,cAAc,GAAG,WAAW,CAAC,GAAG,MAAM,CAE9H;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAMtG;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,sBAAsB,CAUxF"}

package/data/build/dist/shared/quick-app-browser-storage.js

@@ -0,0 +1,33 @@
+export const QUICK_APP_STORAGE_PROTOCOL = 'codingns.quick-app-storage.v1';
+export const QUICK_APP_STORAGE_LIMITS = Object.freeze({ bytes: 2 * 1024 * 1024, keys: 1024, pending: 64, timeoutMs: 10_000 });
+/** Metadata changes preserve storage; reassignment to another source does not. */
+export function quickAppStorageKey(app) {
+    return `codingns.quickApps.storage.v1:${JSON.stringify([app.hostId, app.workspaceId, app.id, app.documentRoot, app.entryPath])}`;
+}
+export function validateQuickAppStorageEntries(value) {
+    if (!Array.isArray(value))
+        throw new DOMException('Invalid application storage data.', 'DataError');
+    if (value.length > QUICK_APP_STORAGE_LIMITS.keys)
+        throw new DOMException('Application storage quota exceeded.', 'QuotaExceededError');
+    if (Array.from(value).some(entry => !Array.isArray(entry) || entry.length !== 2 || Array.from(entry).some(part => typeof part !== 'string'))
+        || new Set(value.map(entry => entry[0])).size !== value.length)
+        throw new DOMException('Invalid application storage data.', 'DataError');
+    if (JSON.stringify(value).length * 2 > QUICK_APP_STORAGE_LIMITS.bytes)
+        throw new DOMException('Application storage quota exceeded.', 'QuotaExceededError');
+}
+export function isQuickAppStorageRequest(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const request = value;
+    if (Object.keys(request).some(key => !['id', 'area', 'operation', 'key', 'value'].includes(key))
+        || !Number.isSafeInteger(request.id) || Number(request.id) < 1 || (request.area !== 'local' && request.area !== 'session') || typeof request.operation !== 'string')
+        return false;
+    if (request.operation === 'setItem')
+        return typeof request.key === 'string' && typeof request.value === 'string'
+            && (request.key.length + request.value.length) * 2 <= QUICK_APP_STORAGE_LIMITS.bytes;
+    if (request.operation === 'getItem' || request.operation === 'removeItem')
+        return typeof request.key === 'string'
+            && request.key.length * 2 <= QUICK_APP_STORAGE_LIMITS.bytes && request.value === undefined;
+    return ['clear', 'keys', 'flush'].includes(request.operation) && request.key === undefined && request.value === undefined;
+}
+//# sourceMappingURL=quick-app-browser-storage.js.map

package/data/build/dist/shared/quick-app-browser-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-app-browser-storage.js","sourceRoot":"","sources":["../../../../src/shared/quick-app-browser-storage.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,0BAA0B,GAAG,+BAA+B,CAAA;AACzE,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;AAsB7H,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,GAAmF;IACpH,OAAO,iCAAiC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAA;AAClI,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAc;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,mCAAmC,EAAE,WAAW,CAAC,CAAA;IACnG,IAAI,KAAK,CAAC,MAAM,GAAG,wBAAwB,CAAC,IAAI;QAAE,MAAM,IAAI,YAAY,CAAC,qCAAqC,EAAE,oBAAoB,CAAC,CAAA;IACrI,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;WACvI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,mCAAmC,EAAE,WAAW,CAAC,CAAA;IAC1I,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,wBAAwB,CAAC,KAAK;QAAE,MAAM,IAAI,YAAY,CAAC,qCAAqC,EAAE,oBAAoB,CAAC,CAAA;AAC5J,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACrD,MAAM,OAAO,GAAG,KAAgC,CAAA;IAChD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;WAC3F,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACnL,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;eAC3G,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,wBAAwB,CAAC,KAAK,CAAA;IACtF,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,YAAY;QAAE,OAAO,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;eAC5G,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,wBAAwB,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAA;IAC5F,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAA;AAC3H,CAAC"}

package/data/build/dist/shared/quick-app-network-allow.d.ts

@@ -0,0 +1,8 @@
+export declare function parseQuickAppNetworkAllow(value: unknown): readonly string[];
+export declare function quickAppAddressBlocked(address: string, family: 4 | 6): boolean;
+/** Clash, Surge, and sing-box map public names onto 198.18.0.0/15. Literal addresses stay blocked. */
+export declare function quickAppFakeIpAddress(address: string, family: 4 | 6): boolean;
+export declare function quickAppAllowMatchesName(allow: readonly string[], hostname: string): boolean;
+/** True when this saved entry explicitly permits the hostname or the resolved address. */
+export declare function quickAppAllowMatches(allow: readonly string[], hostname: string, address: string, family: 4 | 6): boolean;
+//# sourceMappingURL=quick-app-network-allow.d.ts.map

package/data/build/dist/shared/quick-app-network-allow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-app-network-allow.d.ts","sourceRoot":"","sources":["../../../../src/shared/quick-app-network-allow.ts"],"names":[],"mappings":"AAeA,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CAgB3E;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAI9E;AAED,sGAAsG;AACtG,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAI7E;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAG5F;AAED,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAYxH"}

package/data/build/dist/shared/quick-app-network-allow.js

@@ -0,0 +1,192 @@
+/** Exceptions to the public-only egress policy. An empty list denies every non-public target. */
+const RANGE_TEXT = [
+    ['0.0.0.0', 8], ['10.0.0.0', 8], ['100.64.0.0', 10], ['127.0.0.0', 8], ['169.254.0.0', 16], ['172.16.0.0', 12],
+    ['192.0.0.0', 24], ['192.0.2.0', 24], ['192.88.99.0', 24], ['192.168.0.0', 16], ['198.18.0.0', 15], ['198.51.100.0', 24],
+    ['203.0.113.0', 24], ['224.0.0.0', 4], ['240.0.0.0', 4], ['255.255.255.255', 32],
+    ['::', 128], ['::1', 128], ['fc00::', 7], ['fe80::', 10], ['ff00::', 8], ['2001:db8::', 32],
+];
+const RANGES = RANGE_TEXT.map(([text, prefix]) => {
+    const ip = parseIp(text);
+    if (!ip)
+        throw new Error(`Invalid egress range ${text}.`);
+    return { family: ip.family, bytes: ip.bytes, prefix };
+});
+export function parseQuickAppNetworkAllow(value) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value) || value.length > 16)
+        throw invalid();
+    const allow = [];
+    const seen = new Set();
+    for (const item of value) {
+        if (typeof item !== 'string')
+            throw invalid();
+        const text = item.trim().toLowerCase();
+        if (!text)
+            continue;
+        const canonical = canonicalEntry(text);
+        if (!canonical)
+            throw invalid();
+        if (seen.has(canonical))
+            continue;
+        seen.add(canonical);
+        allow.push(canonical);
+    }
+    return allow;
+}
+export function quickAppAddressBlocked(address, family) {
+    const ip = canonicalIp(address);
+    if (!ip || ip.family !== family)
+        return true;
+    return blockedRange(ip, family === 4 ? 32 : 128);
+}
+/** Clash, Surge, and sing-box map public names onto 198.18.0.0/15. Literal addresses stay blocked. */
+export function quickAppFakeIpAddress(address, family) {
+    const ip = canonicalIp(address);
+    const range = RANGES.find(item => item.family === 4 && item.prefix === 15);
+    return ip?.family === family && ip.family === 4 && range !== undefined && samePrefix(range.bytes, ip.bytes, range.prefix);
+}
+export function quickAppAllowMatchesName(allow, hostname) {
+    const host = hostname.toLowerCase().replace(/\.$/u, '');
+    return allow.some(entry => entry === host && !entry.includes('/') && parseIp(entry) === null);
+}
+/** True when this saved entry explicitly permits the hostname or the resolved address. */
+export function quickAppAllowMatches(allow, hostname, address, family) {
+    const host = hostname.toLowerCase().replace(/\.$/u, '');
+    const target = parseIp(address);
+    if (!target || target.family !== family)
+        return false;
+    return allow.some(entry => {
+        const slash = entry.lastIndexOf('/');
+        const base = parseIp(slash === -1 ? entry : entry.slice(0, slash));
+        if (!base)
+            return entry === host;
+        if (base.family !== family)
+            return false;
+        const prefix = slash === -1 ? (family === 4 ? 32 : 128) : Number(entry.slice(slash + 1));
+        return samePrefix(base.bytes, target.bytes, prefix);
+    });
+}
+function canonicalEntry(text) {
+    if (text.length > 253)
+        return null;
+    const slash = text.lastIndexOf('/');
+    if (slash > 0) {
+        const prefix = Number(text.slice(slash + 1));
+        const ip = canonicalIp(text.slice(0, slash));
+        const max = ip?.family === 4 ? 32 : 128;
+        if (!ip || !/^\d{1,3}$/u.test(text.slice(slash + 1)) || prefix < 1 || prefix > max || !blockedRange(ip, prefix))
+            return null;
+        const network = mask(ip.bytes, prefix);
+        const formatted = formatIp({ family: ip.family, bytes: network });
+        return prefix === max ? formatted : `${formatted}/${prefix}`;
+    }
+    const ip = canonicalIp(text);
+    if (ip)
+        return blockedRange(ip, ip.family === 4 ? 32 : 128) ? formatIp(ip) : null;
+    const host = text.endsWith('.') ? text.slice(0, -1) : text;
+    if (!host || host.endsWith('.') || /^\d+$/u.test(host) || parseIp(host))
+        return null;
+    return /^(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/u.test(host) ? host : null;
+}
+function blockedRange(ip, prefix) {
+    return RANGES.some(range => range.family === ip.family && range.prefix <= prefix && samePrefix(range.bytes, ip.bytes, range.prefix));
+}
+function canonicalIp(text) {
+    const parsed = parseIp(text);
+    if (!parsed)
+        return null;
+    if (parsed.family === 6 && parsed.bytes.subarray(0, 10).every(byte => byte === 0) && parsed.bytes[10] === 255 && parsed.bytes[11] === 255) {
+        return { family: 4, bytes: parsed.bytes.subarray(12) };
+    }
+    return parsed;
+}
+function parseIp(text) {
+    if (text.includes('%') || text.includes('/'))
+        return null;
+    if (/^(?:0|[1-9]\d{0,2})(?:\.(?:0|[1-9]\d{0,2})){3}$/u.test(text)) {
+        const bytes = text.split('.').map(part => Number(part));
+        if (bytes.every(part => part <= 255))
+            return { family: 4, bytes: Uint8Array.from(bytes) };
+        return null;
+    }
+    const halves = text.split('::');
+    if (halves.length > 2)
+        return null;
+    const side = (value) => {
+        if (value === '')
+            return [];
+        const parts = value.split(':');
+        const groups = [];
+        for (let index = 0; index < parts.length; index += 1) {
+            const part = parts[index] ?? '';
+            if (index === parts.length - 1 && part.includes('.')) {
+                const tail = parseIp(part);
+                if (tail?.family !== 4)
+                    return null;
+                groups.push((tail.bytes[0] << 8) | tail.bytes[1], (tail.bytes[2] << 8) | tail.bytes[3]);
+            }
+            else if (!/^[0-9a-f]{1,4}$/u.test(part))
+                return null;
+            else
+                groups.push(Number.parseInt(part, 16));
+        }
+        return groups;
+    };
+    const left = side(halves[0] ?? '');
+    const right = halves.length === 2 ? side(halves[1] ?? '') : [];
+    if (!left || !right || (halves.length === 1 && left.length !== 8) || (halves.length === 2 && left.length + right.length >= 8))
+        return null;
+    const groups = halves.length === 1 ? left : [...left, ...Array(8 - left.length - right.length).fill(0), ...right];
+    const bytes = new Uint8Array(16);
+    groups.forEach((group, index) => { bytes[index * 2] = group >> 8; bytes[index * 2 + 1] = group & 255; });
+    return { family: 6, bytes };
+}
+function formatIp(ip) {
+    if (ip.family === 4)
+        return [...ip.bytes].join('.');
+    const groups = Array.from({ length: 8 }, (_, index) => (ip.bytes[index * 2] << 8) | ip.bytes[index * 2 + 1]);
+    let start = -1;
+    let length = 0;
+    for (let index = 0; index < groups.length;) {
+        if (groups[index] !== 0) {
+            index += 1;
+            continue;
+        }
+        let end = index;
+        while (end < groups.length && groups[end] === 0)
+            end += 1;
+        if (end - index > length) {
+            start = index;
+            length = end - index;
+        }
+        index = end;
+    }
+    const hex = groups.map(group => group.toString(16));
+    if (length < 2)
+        return hex.join(':');
+    return `${hex.slice(0, start).join(':')}::${hex.slice(start + length).join(':')}`;
+}
+function mask(bytes, prefix) {
+    const out = bytes.slice();
+    const whole = Math.floor(prefix / 8);
+    const bits = prefix % 8;
+    if (bits)
+        out[whole] = (out[whole] ?? 0) & (0xff << (8 - bits));
+    for (let index = whole + (bits ? 1 : 0); index < out.length; index += 1)
+        out[index] = 0;
+    return out;
+}
+function samePrefix(left, right, prefix) {
+    const whole = Math.floor(prefix / 8);
+    for (let index = 0; index < whole; index += 1)
+        if (left[index] !== right[index])
+            return false;
+    const bits = prefix % 8;
+    if (!bits)
+        return true;
+    const select = 0xff << (8 - bits) & 0xff;
+    return ((left[whole] ?? 0) & select) === ((right[whole] ?? 0) & select);
+}
+function invalid() { return new Error('Invalid local network allow list.'); }
+//# sourceMappingURL=quick-app-network-allow.js.map

package/data/build/dist/shared/quick-app-network-allow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-app-network-allow.js","sourceRoot":"","sources":["../../../../src/shared/quick-app-network-allow.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,MAAM,UAAU,GAAG;IACjB,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC;IAC9G,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;IACxH,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAC;IAChF,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC;CACnF,CAAA;AAGV,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;IAC/C,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxB,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,GAAG,CAAC,CAAA;IACzD,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,CAAA;AACvD,CAAC,CAAC,CAAA;AAEF,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,OAAO,EAAE,CAAA;IAC/D,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,MAAM,OAAO,EAAE,CAAA;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACtC,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,CAAC,SAAS;YAAE,MAAM,OAAO,EAAE,CAAA;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAQ;QACjC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACnB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACvB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,MAAa;IACnE,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IAC/B,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IAC5C,OAAO,YAAY,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;AAClD,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,MAAa;IAClE,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,CAAA;IAC1E,OAAO,EAAE,EAAE,MAAM,KAAK,MAAM,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;AAC3H,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAwB,EAAE,QAAgB;IACjF,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACvD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAA;AAC/F,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,oBAAoB,CAAC,KAAwB,EAAE,QAAgB,EAAE,OAAe,EAAE,MAAa;IAC7G,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAA;IACrD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACpC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;QAClE,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,KAAK,IAAI,CAAA;QAChC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAA;QACxC,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;QACxF,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;QAC5C,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;QAC5C,MAAM,GAAG,GAAG,EAAE,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA;QACvC,IAAI,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA;QAC5H,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QACjE,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,MAAM,EAAE,CAAA;IAC9D,CAAC;IACD,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,EAAE;QAAE,OAAO,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACjF,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACpF,OAAO,oFAAoF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;AACtH,CAAC;AAED,SAAS,YAAY,CAAC,EAAY,EAAE,MAAc;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;AACtI,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;QAC1I,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAA;IACxD,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACzD,IAAI,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;QACvD,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAA;QACzF,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAmB,EAAE;QAC9C,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,EAAE,CAAA;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;YAC/B,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;gBAC1B,IAAI,IAAI,EAAE,MAAM,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAA;gBACnC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAA;YAC7F,CAAC;iBAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAA;;gBACjD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;QAC7C,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1I,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAS,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAA;IACzH,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,CAAA,CAAC,CAAC,CAAC,CAAA;IACvG,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAA;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,EAAY;IAC5B,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAE,CAAC,CAAA;IAC9G,IAAI,KAAK,GAAG,CAAC,CAAC,CAAA;IACd,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC;QAC3C,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QACjD,IAAI,GAAG,GAAG,KAAK,CAAA;QACf,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,GAAG,IAAI,CAAC,CAAA;QACzD,IAAI,GAAG,GAAG,KAAK,GAAG,MAAM,EAAE,CAAC;YAAC,KAAK,GAAG,KAAK,CAAC;YAAC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAA;QAAC,CAAC;QACjE,KAAK,GAAG,GAAG,CAAA;IACb,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IACnD,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACpC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;AACnF,CAAC;AAED,SAAS,IAAI,CAAC,KAAiB,EAAE,MAAc;IAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;IACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAA;IACvB,IAAI,IAAI;QAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;IAC/D,KAAK,IAAI,KAAK,GAAG,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACvF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB,EAAE,KAAiB,EAAE,MAAc;IACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACpC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC;QAAE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;IAC7F,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAA;IACvB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IACxC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAA;AACzE,CAAC;AAED,SAAS,OAAO,KAAY,OAAO,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA,CAAC,CAAC"}

package/data/build/dist/shared/quick-app-network-bootstrap.d.ts

@@ -0,0 +1,9 @@
+/** Browser-side fetch/XHR shim. Kept free of host imports because its source is copied into the sandbox document. */
+export declare function quickAppPageEgressUrl(pageHref: string): string;
+export declare function quickAppRequestUsesEgress(pageHref: string, requestUrl: string): boolean;
+export declare function quickAppNetworkSource(): string;
+/** Runs before any application script, including when the iframe loads the file directly. */
+export declare function quickAppPreparedHtml(html: string): string;
+export declare function quickAppNetworkBootstrap(): string;
+export declare function quickAppNetworkInstall(): void;
+//# sourceMappingURL=quick-app-network-bootstrap.d.ts.map

package/data/build/dist/shared/quick-app-network-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-app-network-bootstrap.d.ts","sourceRoot":"","sources":["../../../../src/shared/quick-app-network-bootstrap.ts"],"names":[],"mappings":"AAAA,qHAAqH;AAErH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK9D;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAKvF;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAUzD;AAED,wBAAgB,wBAAwB,IAAI,MAAM,CAIjD;AAoBD,wBAAgB,sBAAsB,IAAI,IAAI,CAgE7C"}

package/data/build/dist/shared/quick-app-network-bootstrap.js

@@ -0,0 +1,134 @@
+/** Browser-side fetch/XHR shim. Kept free of host imports because its source is copied into the sandbox document. */
+export function quickAppPageEgressUrl(pageHref) {
+    const page = new URL(pageHref);
+    const base = page.pathname.match(/^\/__codingns\/quick-apps\/[^/]+\//);
+    const prefix = base ? base[0] : page.pathname.replace(/[^/]*$/u, '');
+    return new URL(`${prefix}__quickapp/egress`, pageHref).href;
+}
+export function quickAppRequestUsesEgress(pageHref, requestUrl) {
+    const page = new URL(pageHref);
+    const target = new URL(requestUrl, pageHref);
+    if (target.protocol !== 'http:' && target.protocol !== 'https:')
+        return false;
+    return target.host !== page.host;
+}
+export function quickAppNetworkSource() {
+    return [quickAppPageEgressUrl, quickAppRequestUsesEgress, quickAppNetworkInstall].map(item => item.toString()).join('\n');
+}
+/** Runs before any application script, including when the iframe loads the file directly. */
+export function quickAppPreparedHtml(html) {
+    const bootstrap = `<script>${quickAppNetworkSource()}\nquickAppNetworkInstall();</script>`;
+    const doctype = /^(?:\uFEFF)?(?:\s|<!--[\s\S]*?-->)*(<!doctype(?:[^>"']|"[^"]*"|'[^']*')*>)/iu.exec(html);
+    const doctypeEnd = doctype?.[0].length ?? 0;
+    const document = html.slice(doctypeEnd);
+    const htmlTag = /<html\b(?:[^>"']|"[^"]*"|'[^']*')*>/iu.exec(document);
+    const headTag = /<head\b(?:[^>"']|"[^"]*"|'[^']*')*>/iu.exec(document);
+    const anchor = headTag !== null && (htmlTag === null || headTag.index > htmlTag.index) ? headTag : htmlTag;
+    const insertionPoint = anchor === null ? doctypeEnd : doctypeEnd + anchor.index + anchor[0].length;
+    return `${html.slice(0, insertionPoint)}${bootstrap}${html.slice(insertionPoint)}`;
+}
+export function quickAppNetworkBootstrap() {
+    return `<!DOCTYPE html><html><head><meta charset="utf-8"><title>Quick App</title></head><body><script>${quickAppNetworkSource()}
+${quickAppNetworkBootstrapRuntime.toString()}
+quickAppNetworkBootstrapRuntime();</script></body></html>`;
+}
+function quickAppNetworkBootstrapRuntime() {
+    const source = fetch(location.href, { headers: { Accept: 'text/html' } }).then(response => {
+        if (!response.ok)
+            throw new Error('The application HTML could not be loaded.');
+        return response.text();
+    });
+    void source.then(html => {
+        quickAppNetworkInstall();
+        document.open();
+        document.write(html);
+        document.close();
+    }).catch(error => {
+        const message = document.createElement('p');
+        message.setAttribute('role', 'alert');
+        message.textContent = error instanceof Error ? error.message : 'Application network initialization failed.';
+        document.body.replaceChildren(message);
+    });
+}
+export function quickAppNetworkInstall() {
+    const current = globalThis.fetch;
+    if (current.__quickAppEgress && XMLHttpRequest.prototype.open.__quickAppEgress)
+        return;
+    const nativeFetch = (current.__quickAppEgress ? current : globalThis.fetch).bind(globalThis);
+    const endpoint = quickAppPageEgressUrl(location.href);
+    const xhrOpen = XMLHttpRequest.prototype.open;
+    const xhrSend = XMLHttpRequest.prototype.send;
+    const xhrSetHeader = XMLHttpRequest.prototype.setRequestHeader;
+    const allowed = (name) => name === 'authorization' || name === 'content-type' || name === 'accept' || name === 'accept-language';
+    const bytesToBase64 = (bytes) => {
+        let binary = '';
+        for (let index = 0; index < bytes.length; index += 8192)
+            binary += String.fromCharCode.apply(null, bytes.subarray(index, index + 8192));
+        return btoa(binary);
+    };
+    const proxy = async (method, url, headers, body, signal, redirect) => {
+        const fields = headers.filter(([name]) => allowed(name));
+        const payload = { method, url, headers: fields, ...(redirect ? { redirect } : {}) };
+        if (body != null) {
+            const probe = new Response(body);
+            const type = probe.headers.get('content-type');
+            if (type && !fields.some(([name]) => name === 'content-type'))
+                fields.push(['content-type', type]);
+            const bytes = new Uint8Array(await probe.arrayBuffer());
+            if (bytes.byteLength)
+                payload.body = bytesToBase64(bytes);
+        }
+        return nativeFetch(endpoint, { method: 'POST', credentials: 'omit', headers: { 'Content-Type': 'text/plain; charset=utf-8' }, body: JSON.stringify(payload), ...(signal ? { signal } : {}) });
+    };
+    const shim = Object.assign((input, init) => {
+        const request = new Request(input, init);
+        if (!quickAppRequestUsesEgress(location.href, request.url))
+            return nativeFetch(request);
+        const headers = [];
+        request.headers.forEach((value, key) => headers.push([key, value]));
+        return proxy(request.method, request.url, headers, request.body, request.signal, request.redirect);
+    }, { __quickAppEgress: true });
+    if (!current.__quickAppEgress)
+        globalThis.fetch = shim;
+    if (XMLHttpRequest.prototype.open.__quickAppEgress)
+        return;
+    XMLHttpRequest.prototype.open = Object.assign(function open(method, url, async) {
+        const target = new URL(String(url), location.href);
+        Object.defineProperty(this, '__qaEgress', { configurable: true, value: { method: String(method || 'GET').toUpperCase(), url: target.href, headers: [], async: async !== false } });
+        return xhrOpen.call(this, String(method), url, async !== false);
+    }, { __quickAppEgress: true });
+    XMLHttpRequest.prototype.setRequestHeader = function setRequestHeader(name, value) {
+        this.__qaEgress?.headers.push([String(name).toLowerCase(), String(value)]);
+        return xhrSetHeader.call(this, name, value);
+    };
+    XMLHttpRequest.prototype.send = function send(body) {
+        const plan = this.__qaEgress;
+        if (!plan?.async || !quickAppRequestUsesEgress(location.href, plan.url))
+            return xhrSend.call(this, body);
+        if (body != null && typeof body !== 'string' && !(body instanceof Blob) && !(body instanceof ArrayBuffer) && !ArrayBuffer.isView(body) && !(body instanceof FormData) && !(body instanceof URLSearchParams))
+            return xhrSend.call(this, body);
+        const controller = new AbortController();
+        const abort = this.abort;
+        this.abort = function abortEgress() { controller.abort(); return abort.call(this); };
+        void proxy(plan.method, plan.url, plan.headers, body ?? null, controller.signal, 'follow').then(async (response) => {
+            const bytes = new Uint8Array(await response.arrayBuffer());
+            const text = new TextDecoder().decode(bytes);
+            const pairs = [];
+            response.headers.forEach((value, key) => pairs.push([key, value]));
+            const value = this.responseType === 'arraybuffer' ? bytes.buffer : this.responseType === 'blob' ? new Blob([bytes]) : this.responseType === 'json' ? JSON.parse(text || 'null') : text;
+            const define = (name, current) => Object.defineProperty(this, name, { configurable: true, get: () => current });
+            define('readyState', 4);
+            define('status', response.status);
+            define('statusText', response.statusText);
+            define('responseText', text);
+            define('response', value);
+            define('responseURL', response.url);
+            this.getAllResponseHeaders = () => pairs.map(([key, header]) => `${key}: ${header}`).join('\r\n');
+            this.getResponseHeader = name => pairs.find(([key]) => key === String(name).toLowerCase())?.[1] ?? null;
+            this.dispatchEvent(new Event('readystatechange'));
+            this.dispatchEvent(new Event('load'));
+            this.dispatchEvent(new Event('loadend'));
+        }).catch(() => { this.dispatchEvent(new Event('error')); this.dispatchEvent(new Event('loadend')); });
+    };
+}
+//# sourceMappingURL=quick-app-network-bootstrap.js.map

package/data/build/dist/shared/quick-app-network-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-app-network-bootstrap.js","sourceRoot":"","sources":["../../../../src/shared/quick-app-network-bootstrap.ts"],"names":[],"mappings":"AAAA,qHAAqH;AAErH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IACpE,OAAO,IAAI,GAAG,CAAC,GAAG,MAAM,mBAAmB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAA;AAC7D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAAgB,EAAE,UAAkB;IAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IAC5C,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC7E,OAAO,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,CAAC,qBAAqB,EAAE,yBAAyB,EAAE,sBAAsB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC3H,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,SAAS,GAAG,WAAW,qBAAqB,EAAE,sCAAsC,CAAA;IAC1F,MAAM,OAAO,GAAG,8EAA8E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzG,MAAM,UAAU,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAA;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACvC,MAAM,OAAO,GAAG,uCAAuC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACtE,MAAM,OAAO,GAAG,uCAAuC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACtE,MAAM,MAAM,GAAG,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;IAC1G,MAAM,cAAc,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAClG,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAA;AACpF,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,iGAAiG,qBAAqB,EAAE;EAC/H,+BAA+B,CAAC,QAAQ,EAAE;0DACc,CAAA;AAC1D,CAAC;AAED,SAAS,+BAA+B;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;QACxF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QAC9E,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAA;IACxB,CAAC,CAAC,CAAA;IACF,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACtB,sBAAsB,EAAE,CAAA;QACxB,QAAQ,CAAC,IAAI,EAAE,CAAA;QACf,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACpB,QAAQ,CAAC,KAAK,EAAE,CAAA;IAClB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QACf,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QAC3C,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACrC,OAAO,CAAC,WAAW,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4CAA4C,CAAA;QAC3G,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,OAAO,GAAG,UAAU,CAAC,KAAiE,CAAA;IAC5F,IAAI,OAAO,CAAC,gBAAgB,IAAK,cAAc,CAAC,SAAS,CAAC,IAA8E,CAAC,gBAAgB;QAAE,OAAM;IACjK,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC5F,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACrD,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,CAAA;IAC7C,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,CAAA;IAC7C,MAAM,YAAY,GAAG,cAAc,CAAC,SAAS,CAAC,gBAAgB,CAAA;IAC9D,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,iBAAiB,CAAA;IACxI,MAAM,aAAa,GAAG,CAAC,KAAiB,EAAE,EAAE;QAC1C,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI;YAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAwB,CAAC,CAAA;QAC9J,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;IACrB,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,KAAK,EAAE,MAAc,EAAE,GAAW,EAAE,OAA2B,EAAE,IAAiC,EAAE,MAAoB,EAAE,QAA0B,EAAE,EAAE;QACpK,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACxD,MAAM,OAAO,GAA4G,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QAC5L,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAA;YAChC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;YAC9C,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAA;YAClG,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;YACvD,IAAI,KAAK,CAAC,UAAU;gBAAE,OAAO,CAAC,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;QAC3D,CAAC;QACD,OAAO,WAAW,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC/L,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAwB,EAAE,IAAkB,EAAE,EAAE;QAC1E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACxC,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,WAAW,CAAC,OAAO,CAAC,CAAA;QACvF,MAAM,OAAO,GAAuB,EAAE,CAAA;QACtC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;QACnE,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IACpG,CAAC,EAAE,EAAE,gBAAgB,EAAE,IAAa,EAAE,CAAC,CAAA;IACvC,IAAI,CAAC,OAAO,CAAC,gBAAgB;QAAE,UAAU,CAAC,KAAK,GAAG,IAAI,CAAA;IACtD,IAAK,cAAc,CAAC,SAAS,CAAC,IAA8E,CAAC,gBAAgB;QAAE,OAAM;IACrI,cAAc,CAAC,SAAS,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,CAAuB,MAAc,EAAE,GAAiB,EAAE,KAAe;QAClI,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,EAAwB,EAAE,KAAK,EAAE,KAAK,KAAK,KAAK,EAAE,EAAE,CAAC,CAAA;QACxM,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,KAAK,KAAK,CAAC,CAAA;IACjE,CAAC,EAAE,EAAE,gBAAgB,EAAE,IAAa,EAAE,CAAC,CAAA;IACvC,cAAc,CAAC,SAAS,CAAC,gBAAgB,GAAG,SAAS,gBAAgB,CAA0E,IAAY,EAAE,KAAa;QACxK,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC1E,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IAC7C,CAAC,CAAA;IACD,cAAc,CAAC,SAAS,CAAC,IAAI,GAAG,SAAS,IAAI,CAAuH,IAA+C;QACjN,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAA;QAC5B,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACxG,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,YAAY,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,YAAY,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,YAAY,eAAe,CAAC;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC5O,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QACxB,IAAI,CAAC,KAAK,GAAG,SAAS,WAAW,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,CAAA;QACnF,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,EAAC,QAAQ,EAAC,EAAE;YAC/G,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;YAC1D,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAC5C,MAAM,KAAK,GAAuB,EAAE,CAAA;YACpC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;YAClE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACtL,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,OAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;YAChI,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;YAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;YACnM,IAAI,CAAC,qBAAqB,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACjG,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;YACvG,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QACpI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;IACtG,CAAC,CAAA;AACH,CAAC"}

package/data/build/dist/shared/quick-app-proxy-path.d.ts

@@ -0,0 +1,6 @@
+/** A launch-only bearer address; neither a DSH credential nor a workspace path. */
+export declare const QUICK_APP_PROXY_PREFIX = "/__codingns/quick-apps/";
+/** The native Desktop embedding origin; preview resources use the verified Host listener. */
+export declare const QUICK_APP_DESKTOP_ORIGIN = "dsh-app://app";
+export declare function quickAppProxyBase(path: string): string | undefined;
+//# sourceMappingURL=quick-app-proxy-path.d.ts.map

package/data/build/dist/shared/quick-app-proxy-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-app-proxy-path.d.ts","sourceRoot":"","sources":["../../../../src/shared/quick-app-proxy-path.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,eAAO,MAAM,sBAAsB,4BAA4B,CAAA;AAC/D,6FAA6F;AAC7F,eAAO,MAAM,wBAAwB,kBAAkB,CAAA;AACvD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMlE"}

package/data/build/dist/shared/quick-app-proxy-path.js

@@ -0,0 +1,18 @@
+/** A launch-only bearer address; neither a DSH credential nor a workspace path. */
+export const QUICK_APP_PROXY_PREFIX = '/__codingns/quick-apps/';
+/** The native Desktop embedding origin; preview resources use the verified Host listener. */
+export const QUICK_APP_DESKTOP_ORIGIN = 'dsh-app://app';
+export function quickAppProxyBase(path) {
+    const base = /^\/__codingns\/quick-apps\/[A-Za-z0-9_-]{43}\//u.exec(path)?.[0];
+    if (!base)
+        return undefined;
+    // DSH matches URL-normalized paths. A raw prefix must never exempt a request
+    // that normalization would move into a privileged API outside this prefix.
+    try {
+        return new URL(path, 'http://host.invalid').pathname.startsWith(base) ? base : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=quick-app-proxy-path.js.map

package/data/build/dist/shared/quick-app-proxy-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-app-proxy-path.js","sourceRoot":"","sources":["../../../../src/shared/quick-app-proxy-path.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAA;AAC/D,6FAA6F;AAC7F,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAA;AACvD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,IAAI,GAAG,iDAAiD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9E,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAA;IAC3B,6EAA6E;IAC7E,2EAA2E;IAC3E,IAAI,CAAC;QAAC,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAA;IAAC,CAAC;AAC7H,CAAC"}

package/data/build/dist/shared/quick-app-storage-bootstrap.d.ts

@@ -0,0 +1,9 @@
+/** Self-contained because the Host serializes this function into an opaque sandbox document. */
+export declare function quickAppStorageRuntime(token: string, protocol: string, limits: {
+    bytes: number;
+    keys: number;
+    pending: number;
+    timeoutMs: number;
+}): void;
+export declare function quickAppStorageBootstrap(token: string): string;
+//# sourceMappingURL=quick-app-storage-bootstrap.d.ts.map