@jini-ai/http-kit 0.2.1

package/dist/model-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-proxy.js","sourceRoot":"","sources":["../src/model-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmFG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,GAiClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAkC,MAAM,UAAU,CAAC;AAC5E,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,YAAY,CAAC;AAYlD,SAAS,wBAAwB,CAAC,OAAuC;IACvE,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,mDAAmD,OAAO,CAAC,QAAQ,mBAAmB,OAAO,CAAC,aAAa,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;AAC/I,CAAC;AAoCD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAcD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,WAAW,CAAC,IAAa;IAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,eAAe,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAE/E,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,GAAG,CAAC,eAAe,CAAC,mCAAmC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/H,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,eAAe,CAAC,kCAAkC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,GAAG,CAAC,eAAe,CAAC,oCAAoC,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,CAAC;IACjI,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACnE,OAAO,GAAG,CAAC,eAAe,CAAC,wCAAwC,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC3E,OAAO,GAAG,CAAC,eAAe,CAAC,4CAA4C,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvE,OAAO,GAAG,CAAC,eAAe,CAAC,0CAA0C,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,GAAG,CAAC,eAAe,CAAC,6CAA6C,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACpE,OAAO,GAAG,CAAC,eAAe,CAAC,8CAA8C,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,EAAE,CAAC;QACR,MAAM;QACN,KAAK;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAsC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1G,CAAC,CAAC;AACL,CAAC;AASD,SAAS,0BAA0B,CAAC,IAAa;IAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,MAAM,GAAG,IAA+B,CAAC;IAE/C,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;QACxG,OAAO,GAAG,CAAC,eAAe,CAAC,qCAAqC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,CAAC;IACnI,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,GAAG,CAAC,eAAe,CAAC,2CAA2C,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,GAAG,CAAC,eAAe,CAAC,uCAAuC,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,GAAG,CAAC,eAAe,CAAC,sCAAsC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,EAAE,CAAC;QACR,GAAG,MAAM,CAAC,KAAK;QACf,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC,CAAC;AACL,CAAC;AAMD,SAAS,uBAAuB,CAAC,IAAa;IAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,MAAM,GAAG,IAA+B,CAAC;IAE/C,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,GAAG,CAAC,eAAe,CAAC,sCAAsC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,EAAE,CAAC;QACR,GAAG,MAAM,CAAC,KAAK;QACf,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC,CAAC;AACL,CAAC;AAUD,SAAS,sBAAsB,CAAC,IAAa;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,MAAM,GAAG,IAA+B,CAAC;IAE/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC,eAAe,CAAC,oCAAoC,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,CAAC;IACjI,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnF,OAAO,GAAG,CAAC,eAAe,CAAC,uCAAuC,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,CAAC;IACvI,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,GAAG,CAAC,eAAe,CAAC,sCAAsC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,EAAE,CAAC;QACR,GAAG,MAAM,CAAC,KAAK;QACf,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC,CAAC;AACL,CAAC;AAQD,uTAAuT;AACvT,SAAS,uBAAuB,CAAC,IAAa;IAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,MAAM,GAAG,IAA+B,CAAC;IAE/C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,GAAG,CAAC,eAAe,CAAC,uCAAuC,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,GAAG,CAAC,eAAe,CAAC,sCAAsC,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QACvF,OAAO,GAAG,CAAC,eAAe,CAAC,gDAAgD,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,EAAE,CAAC;QACR,GAAG,MAAM,CAAC,KAAK;QACf,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvG,CAAC,CAAC;AACL,CAAC;AAeD,SAAS,uBAAuB,CAAC,IAAa;IAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,MAAM,GAAG,IAA+B,CAAC;IAE/C,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,GAAG,CAAC,eAAe,CAAC,sCAAsC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,EAAE,CAAC;QACR,GAAG,MAAM,CAAC,KAAK;QACf,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC,CAAC;AACL,CAAC;AAMD,gOAAgO;AAChO,SAAS,aAAa,CAAC,GAAW,EAAE,KAAwB;IAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,cAAc,CAC3B,GAAY,EACZ,GAAa,EACb,OAAuB,EACvB,QAAoD,EACpD,eAAkE,EAClE,KAA+C,EAC/C,GAAqF;IAErF,4FAA4F;IAC5F,2FAA2F;IAC3F,4BAA4B;IAC5B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,OAAsD,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QAED,OAAO,GAAG,gBAAgB,CAAwB,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;QACxG,OAAO,CAAC,IAAI,EAAE,CAAC;QAEf,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,KAAqC,CAAC,CAAC,CAAC,CAAC;QAClH,yFAAyF;QACzF,4FAA4F;QAC5F,oFAAoF;QACpF,4FAA4F;QAC5F,6EAA6E;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uFAAuF;QACvF,2FAA2F;QAC3F,2FAA2F;QAC3F,+FAA+F;QAC/F,6FAA6F;QAC7F,+FAA+F;QAC/F,iFAAiF;QACjF,mCAAmC;QACnC,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;QACnC,eAAe,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,EAAE,CAAC;YACZ,0FAA0F;YAC1F,4FAA4F;YAC5F,4FAA4F;YAC5F,yFAAyF;YACzF,qFAAqF;YACrF,OAAO,CAAC,OAAO,CACb,aAAa,CAAC,GAAG,EAAE,EAAE;gBACnB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,4BAA4B;gBACrC,IAAI,EAAE,aAAa;aACY,CAAC,CACnC,CAAC;YACF,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAkC,CAAC,CAAC,CAAC;QAC1G,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAC5B,wFAAwF;YACxF,0FAA0F;YAC1F,2EAA2E;YAC3E,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,gBAAgB,EAAE,4BAA4B,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;QACvH,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC9B,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC;AAED,oMAAoM;AACpM,SAAS,wBAAwB,CAC/B,GAAY,EACZ,IAAY,EACZ,OAAuB,EACvB,QAAoD,EACpD,eAAkE,EAClE,KAA+C,EAC/C,GAAqF;IAErF,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CAC7C,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,CAAC,CACzE,CAAC;AACJ,CAAC;AAQD,kNAAkN;AAClN,SAAS,0BAA0B,CAAC,IAAwB;IAC1D,OAAO;QACL,SAAS,EAAE;YACT,KAAK,EAAE,0BAAgE;YACvE,GAAG,EAAE,CAAC,CAAC,MAAmC,EAAE,OAA4C,EAAE,EAAE,CAC1F,oBAAoB,CAAC;gBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAuD;gBACxE,OAAO;gBACP,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAA+C,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxG,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,oBAAoB;oBAC3B,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,IAAuB,EAAgC,EAAE,CAAC,IAAI,CAAC,oBAAqB,CAAC,IAAI,CAAC,EAAE;oBAC9G,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAiD;SACtD;QACD,MAAM,EAAE;YACN,KAAK,EAAE,uBAA6D;YACpE,GAAG,EAAE,CAAC,CAAC,MAAgC,EAAE,OAAyC,EAAE,EAAE,CACpF,iBAAiB,CAAC;gBAChB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,MAAM,CAAC,QAAoD;gBACrE,OAAO;gBACP,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAoD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7G,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,iBAAiB;oBACxB,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,IAAoB,EAA6B,EAAE,CAAC,IAAI,CAAC,iBAAkB,CAAC,IAAI,CAAC,EAAE;oBACrG,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAiD;SACtD;QACD,KAAK,EAAE;YACL,KAAK,EAAE,sBAA4D;YACnE,GAAG,EAAE,CAAC,CAAC,MAA+B,EAAE,OAAwC,EAAE,EAAE,CAClF,gBAAgB,CAAC;gBACf,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAmD;gBACpE,OAAO;gBACP,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAmD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5G,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,gBAAgB;oBACvB,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,IAAmB,EAA4B,EAAE,CAAC,IAAI,CAAC,gBAAiB,CAAC,IAAI,CAAC,EAAE;oBAClG,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAiD;SACtD;QACD,MAAM,EAAE;YACN,KAAK,EAAE,uBAA6D;YACpE,GAAG,EAAE,CAAC,CAAC,MAAgC,EAAE,OAAyC,EAAE,EAAE,CACpF,iBAAiB,CAAC;gBAChB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,MAAM,CAAC,QAA+C;gBAChE,OAAO;gBACP,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAA4C,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrG,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5F,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,iBAAiB;oBACxB,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,IAAoB,EAA6B,EAAE,CAAC,IAAI,CAAC,iBAAkB,CAAC,IAAI,CAAC,EAAE;oBACrG,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAiD;SACtD;QACD,MAAM,EAAE;YACN,KAAK,EAAE,uBAA6D;YACpE,GAAG,EAAE,CAAC,CAAC,MAAgC,EAAE,OAAyC,EAAE,EAAE,CACpF,iBAAiB,CAAC;gBAChB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,MAAM,CAAC,QAAoD;gBACrE,OAAO;gBACP,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAoD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7G,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,iBAAiB;oBACxB,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,IAAoB,EAA6B,EAAE,CAAC,IAAI,CAAC,iBAAkB,CAAC,IAAI,CAAC,EAAE;oBACrG,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAiD;SACtD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,oBAAoB,GAA4D,IAAI,GAAG,CAAC;IAC5F,WAAW;IACX,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,QAAQ;CACT,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,oBAAoB,CAAC,GAAG,CAAC,KAAmD,CAAC,CAAC;AACvF,CAAC;AAED;;;;;GAKG;AACH,SAAS,+BAA+B,CACtC,GAAY,EACZ,OAAuB,EACvB,eAAkE,EAClE,QAAoD;IAEpD,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5E,0FAA0F;QAC1F,sFAAsF;QACtF,4FAA4F;QAC5F,iFAAiF;QACjF,6FAA6F;QAC7F,4FAA4F;QAC5F,sFAAsF;QACtF,0FAA0F;QAC1F,6DAA6D;QAC7D,EAAE;QACF,uFAAuF;QACvF,4EAA4E;QAC5E,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,EAAE,CAAC;gBACnD,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,aAAa,EAAE,qBAAqB,aAAa,EAAE,CAAC,CAAC,CAAC;gBAC5F,OAAO;YACT,CAAC;YACD,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAClG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,2FAA2F;YAC3F,2FAA2F;YAC3F,iFAAiF;YACjF,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;YACnC,wFAAwF;YACxF,0FAA0F;YAC1F,wFAAwF;YACxF,yEAAyE;YACzE,IAAI,oBAAoB,CAAC,aAAa,CAAC,EAAE,CAAC;gBACxC,eAAe,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CACX,mDAAmD,aAAa,IAAI,SAAS,mBAAmB,aAAa,GAAG,EAChH,KAAK,CACN,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,gBAAgB,EAAE,4BAA4B,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;YACvH,CAAC;iBAAM,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBAC9B,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2IAA2I;AAC3I,MAAM,UAAU,wBAAwB,CAAC,GAAY,EAAE,IAAwB,EAAE,OAAuB;IACtG,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,wBAAwB,CAAC;IAEzE,wBAAwB,CACtB,GAAG,EACH,6BAA6B,EAC7B,OAAO,EACP,WAAW,EACX,eAAe,EACf,0BAA0B,EAC1B,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAClB,oBAAoB,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAuD;QACxE,OAAO;QACP,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAA+C,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxG,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,oBAAoB;YAC3B,CAAC,CAAC;gBACE,WAAW,EAAE,CAAC,IAAuB,EAAgC,EAAE,CAAC,IAAI,CAAC,oBAAqB,CAAC,IAAI,CAAC;aACzG;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CACL,CAAC;IAEF,wBAAwB,CACtB,GAAG,EACH,0BAA0B,EAC1B,OAAO,EACP,QAAQ,EACR,eAAe,EACf,uBAAuB,EACvB,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAClB,iBAAiB,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAoD;QACrE,OAAO;QACP,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAoD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,iBAAiB;YACxB,CAAC,CAAC;gBACE,WAAW,EAAE,CAAC,IAAoB,EAA6B,EAAE,CAAC,IAAI,CAAC,iBAAkB,CAAC,IAAI,CAAC;aAChG;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CACL,CAAC;IAEF,wBAAwB,CACtB,GAAG,EACH,yBAAyB,EACzB,OAAO,EACP,OAAO,EACP,eAAe,EACf,sBAAsB,EACtB,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAClB,gBAAgB,CAAC;QACf,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAmD;QACpE,OAAO;QACP,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAmD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5G,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,gBAAgB;YACvB,CAAC,CAAC;gBACE,WAAW,EAAE,CAAC,IAAmB,EAA4B,EAAE,CAAC,IAAI,CAAC,gBAAiB,CAAC,IAAI,CAAC;aAC7F;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CACL,CAAC;IAEF,wBAAwB,CACtB,GAAG,EACH,0BAA0B,EAC1B,OAAO,EACP,QAAQ,EACR,eAAe,EACf,uBAAuB,EACvB,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAClB,iBAAiB,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAA+C;QAChE,OAAO;QACP,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAA4C,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,iBAAiB;YACxB,CAAC,CAAC;gBACE,WAAW,EAAE,CAAC,IAAoB,EAA6B,EAAE,CAAC,IAAI,CAAC,iBAAkB,CAAC,IAAI,CAAC;aAChG;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CACL,CAAC;IAEF,wBAAwB,CACtB,GAAG,EACH,0BAA0B,EAC1B,OAAO,EACP,QAAQ,EACR,eAAe,EACf,uBAAuB,EACvB,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAClB,iBAAiB,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAoD;QACrE,OAAO;QACP,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAoD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,iBAAiB;YACxB,CAAC,CAAC;gBACE,WAAW,EAAE,CAAC,IAAoB,EAA6B,EAAE,CAAC,IAAI,CAAC,iBAAkB,CAAC,IAAI,CAAC;aAChG;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CACL,CAAC;IAEF,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC;AACnG,CAAC"}

package/dist/origin-validation.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Same-origin / allow-listed-origin validation primitives for a locally-bound HTTP server:
+ * loopback + private-LAN host/IP classification, an explicit origin allow-list read from env,
+ * and the top-level `isLocalSameOrigin` decision `origin-guard.ts` wraps in the module's
+ * `Result` pipeline. Framework-independent — operates on plain header values, not an Express
+ * `Request`.
+ */
+export interface ParsedHostHeader {
+    hostname: string;
+    host: string;
+    port: string;
+}
+export interface RequestWithOriginHeaders {
+    headers?: {
+        host?: unknown;
+        origin?: unknown;
+        'sec-fetch-site'?: unknown;
+    };
+}
+/**
+ * Extra allow-listed origins, comma-separated, read from `JINI_ALLOWED_ORIGINS`.
+ *
+ * Deliberately never throws. This runs inside {@link isLocalSameOrigin}, which every same-origin
+ * check across the whole HTTP surface calls fresh on every incoming request — a config typo here
+ * used to throw a `TypeError` synchronously, and depending on which route it happened to hit, that
+ * either 500'd every request for the process's life or, worse, became an unhandled promise
+ * rejection with nothing to catch it (`attachments.ts`'s hand-mounted routes, `model-proxy.ts`'s
+ * `:provider` catch-all — see each file's own regression test). A malformed entry is dropped from
+ * the allow-list and logged instead, so the daemon degrades to "one fewer trusted origin," never
+ * "every request breaks." Call {@link assertValidAllowedOrigins} once at host startup to catch a
+ * misconfiguration loudly before any request-serving traffic exists at all — that is where a typo
+ * should actually be caught, not on the hot path.
+ */
+export declare function configuredAllowedOrigins(env?: NodeJS.ProcessEnv): string[];
+/**
+ * Boot-time companion to {@link configuredAllowedOrigins}: throws, naming every malformed entry,
+ * instead of silently dropping them. Meant to be called exactly once, early in host startup
+ * (before the HTTP server accepts connections), so a misconfigured `JINI_ALLOWED_ORIGINS` fails
+ * the boot loudly rather than quietly serving with a smaller-than-intended allow-list — or, before
+ * this function existed, throwing on the first request that happened to reach the same-origin
+ * guard instead of at boot.
+ */
+export declare function assertValidAllowedOrigins(env?: NodeJS.ProcessEnv): void;
+export declare function configuredAllowedHosts(origins?: string[]): string[];
+/** The primary bound port plus an optional secondary web port from `JINI_WEB_PORT`. */
+export declare function allowedBrowserPorts(port: number | string | null | undefined, env?: NodeJS.ProcessEnv): number[];
+export declare function parseHostHeader(value: unknown): ParsedHostHeader | null;
+export declare function isPrivateIpv4(hostname: unknown): boolean;
+export declare function isIpLiteralHostname(hostname: unknown): boolean;
+export declare function isLoopbackOrPrivateLanHost(hostname: unknown): boolean;
+export declare function isAllowedBrowserHost(hostHeader: unknown, ports: number[], bindHost: string, extraAllowedOrigins: string[]): boolean;
+export declare function isAllowedBrowserOrigin(origin: unknown, hostHeader: unknown, ports: number[], bindHost: string, extraAllowedOrigins: string[]): boolean;
+/**
+ * Top-level same-origin decision for a locally-bound HTTP server: same-origin GETs (which
+ * browsers may send with no `Origin` header per the Fetch spec) are accepted via the `Host`
+ * header + `Sec-Fetch-Site: same-origin` signal (a header set by the user agent, unforgeable
+ * from JavaScript); cross-origin requests must present an `Origin` that resolves to a loopback,
+ * private-LAN, or explicitly allow-listed (`JINI_ALLOWED_ORIGINS`) origin. Reverse-proxy
+ * deployments are supported by trusting an `Origin` that exactly matches an allow-listed entry,
+ * since the `Host` header a proxied daemon sees is the proxy's upstream address, not the
+ * browser-visible origin.
+ */
+export declare function isLocalSameOrigin(req: RequestWithOriginHeaders, port: number | string | null | undefined, env?: NodeJS.ProcessEnv): boolean;
+//# sourceMappingURL=origin-validation.d.ts.map

package/dist/origin-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-validation.d.ts","sourceRoot":"","sources":["../src/origin-validation.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;CACH;AA6BD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,EAAE,CAavF;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,CAOpF;AAED,wBAAgB,sBAAsB,CAAC,OAAO,WAA6B,GAAG,MAAM,EAAE,CAErF;AAED,uFAAuF;AACvF,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EACxC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,EAAE,CAOV;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,GAAG,IAAI,CASvE;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAaxD;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAQ9D;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAWrE;AAED,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,OAAO,EACnB,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,EAAE,MAAM,EAChB,mBAAmB,EAAE,MAAM,EAAE,GAC5B,OAAO,CAaT;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,OAAO,EACnB,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,EAAE,MAAM,EAChB,mBAAmB,EAAE,MAAM,EAAE,GAC5B,OAAO,CA4BT;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,wBAAwB,EAC7B,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EACxC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAsBT"}

package/dist/origin-validation.js

@@ -0,0 +1,226 @@
+/**
+ * Same-origin / allow-listed-origin validation primitives for a locally-bound HTTP server:
+ * loopback + private-LAN host/IP classification, an explicit origin allow-list read from env,
+ * and the top-level `isLocalSameOrigin` decision `origin-guard.ts` wraps in the module's
+ * `Result` pipeline. Framework-independent — operates on plain header values, not an Express
+ * `Request`.
+ */
+/**
+ * Splits and trims the raw `JINI_ALLOWED_ORIGINS` value into individual candidate entries.
+ * Shared by {@link configuredAllowedOrigins} (lenient, per-request) and
+ * {@link assertValidAllowedOrigins} (strict, boot-time) so the two can never drift on what counts
+ * as "one entry."
+ */
+function splitAllowedOriginsEnv(env) {
+    const raw = env.JINI_ALLOWED_ORIGINS || '';
+    if (!raw.trim())
+        return [];
+    return raw
+        .split(',')
+        .map((origin) => origin.trim())
+        .filter(Boolean);
+}
+/** Normalizes one `JINI_ALLOWED_ORIGINS` entry into a `protocol://host` origin, or `undefined` if it isn't a valid http(s) origin. */
+function parseAllowedOrigin(entry) {
+    let parsed;
+    try {
+        parsed = new URL(entry);
+    }
+    catch {
+        return undefined;
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
+        return undefined;
+    return parsed.origin;
+}
+/**
+ * Extra allow-listed origins, comma-separated, read from `JINI_ALLOWED_ORIGINS`.
+ *
+ * Deliberately never throws. This runs inside {@link isLocalSameOrigin}, which every same-origin
+ * check across the whole HTTP surface calls fresh on every incoming request — a config typo here
+ * used to throw a `TypeError` synchronously, and depending on which route it happened to hit, that
+ * either 500'd every request for the process's life or, worse, became an unhandled promise
+ * rejection with nothing to catch it (`attachments.ts`'s hand-mounted routes, `model-proxy.ts`'s
+ * `:provider` catch-all — see each file's own regression test). A malformed entry is dropped from
+ * the allow-list and logged instead, so the daemon degrades to "one fewer trusted origin," never
+ * "every request breaks." Call {@link assertValidAllowedOrigins} once at host startup to catch a
+ * misconfiguration loudly before any request-serving traffic exists at all — that is where a typo
+ * should actually be caught, not on the hot path.
+ */
+export function configuredAllowedOrigins(env = process.env) {
+    const origins = [];
+    for (const entry of splitAllowedOriginsEnv(env)) {
+        const origin = parseAllowedOrigin(entry);
+        if (origin === undefined) {
+            console.warn(`[@jini-ai/http-kit] ignoring malformed JINI_ALLOWED_ORIGINS entry (must be an http:// or https:// origin): ${entry}`);
+            continue;
+        }
+        origins.push(origin);
+    }
+    return origins;
+}
+/**
+ * Boot-time companion to {@link configuredAllowedOrigins}: throws, naming every malformed entry,
+ * instead of silently dropping them. Meant to be called exactly once, early in host startup
+ * (before the HTTP server accepts connections), so a misconfigured `JINI_ALLOWED_ORIGINS` fails
+ * the boot loudly rather than quietly serving with a smaller-than-intended allow-list — or, before
+ * this function existed, throwing on the first request that happened to reach the same-origin
+ * guard instead of at boot.
+ */
+export function assertValidAllowedOrigins(env = process.env) {
+    const invalid = splitAllowedOriginsEnv(env).filter((entry) => parseAllowedOrigin(entry) === undefined);
+    if (invalid.length === 0)
+        return;
+    throw new Error(`JINI_ALLOWED_ORIGINS has ${invalid.length} invalid entr${invalid.length === 1 ? 'y' : 'ies'} ` +
+        `(must be http:// or https:// origins): ${invalid.join(', ')}`);
+}
+export function configuredAllowedHosts(origins = configuredAllowedOrigins()) {
+    return origins.map((origin) => new URL(origin).host);
+}
+/** The primary bound port plus an optional secondary web port from `JINI_WEB_PORT`. */
+export function allowedBrowserPorts(port, env = process.env) {
+    const ports = [];
+    const primary = Number(port);
+    if (primary)
+        ports.push(primary);
+    const webPort = Number(env.JINI_WEB_PORT);
+    if (webPort && webPort !== primary)
+        ports.push(webPort);
+    return ports;
+}
+export function parseHostHeader(value) {
+    const raw = String(headerValue(value) || '').trim();
+    if (!raw)
+        return null;
+    try {
+        const parsed = new URL(`http://${raw}`);
+        return { hostname: parsed.hostname, host: parsed.host, port: parsed.port || '80' };
+    }
+    catch {
+        return null;
+    }
+}
+export function isPrivateIpv4(hostname) {
+    const parts = String(hostname || '').split('.');
+    if (parts.length !== 4)
+        return false;
+    if (!parts.every((part) => /^\d+$/.test(part)))
+        return false;
+    const octets = parts.map((part) => Number(part));
+    if (!octets.every((n) => Number.isInteger(n) && n >= 0 && n <= 255))
+        return false;
+    const [a, b] = octets;
+    return (a === 10 ||
+        (a === 172 && b >= 16 && b <= 31) ||
+        (a === 192 && b === 168) ||
+        (a === 169 && b === 254));
+}
+export function isIpLiteralHostname(hostname) {
+    const host = String(hostname || '').trim();
+    if (!host)
+        return false;
+    if (host.startsWith('[') && host.endsWith(']'))
+        return true;
+    const parts = host.split('.');
+    if (parts.length !== 4)
+        return false;
+    if (!parts.every((part) => /^\d+$/.test(part)))
+        return false;
+    return parts.map(Number).every((n) => Number.isInteger(n) && n >= 0 && n <= 255);
+}
+export function isLoopbackOrPrivateLanHost(hostname) {
+    const host = String(hostname || '').toLowerCase();
+    return (host === 'localhost' ||
+        host === '127.0.0.1' ||
+        host === '::1' ||
+        host === '[::1]' ||
+        host === '0.0.0.0' ||
+        host === '::' ||
+        isPrivateIpv4(host));
+}
+export function isAllowedBrowserHost(hostHeader, ports, bindHost, extraAllowedOrigins) {
+    const requestHost = parseHostHeader(hostHeader);
+    if (!requestHost)
+        return false;
+    const loopbackHosts = ['127.0.0.1', 'localhost', '[::1]'];
+    const explicitHosts = new Set([
+        ...ports.flatMap((p) => [...loopbackHosts.map((h) => `${h}:${p}`), `${bindHost}:${p}`]),
+        ...configuredAllowedHosts(extraAllowedOrigins),
+    ]);
+    if (explicitHosts.has(requestHost.host))
+        return true;
+    if (!ports.map(String).includes(requestHost.port))
+        return false;
+    return isLoopbackOrPrivateLanHost(requestHost.hostname);
+}
+export function isAllowedBrowserOrigin(origin, hostHeader, ports, bindHost, extraAllowedOrigins) {
+    if (extraAllowedOrigins.includes(String(origin)))
+        return true;
+    let parsedOrigin;
+    try {
+        parsedOrigin = new URL(String(origin));
+    }
+    catch {
+        return false;
+    }
+    if (parsedOrigin.protocol !== 'http:' && parsedOrigin.protocol !== 'https:')
+        return false;
+    const requestHost = parseHostHeader(hostHeader);
+    if (!requestHost)
+        return false;
+    const schemes = ['http', 'https'];
+    const loopbackHosts = ['127.0.0.1', 'localhost', '[::1]'];
+    const explicitOrigins = new Set(ports.flatMap((p) => [
+        ...schemes.flatMap((s) => loopbackHosts.map((h) => `${s}://${h}:${p}`)),
+        ...schemes.map((s) => `${s}://${bindHost}:${p}`),
+    ]));
+    if (explicitOrigins.has(String(origin)))
+        return true;
+    const originPort = parsedOrigin.port || (parsedOrigin.protocol === 'https:' ? '443' : '80');
+    if (!ports.map(String).includes(originPort))
+        return false;
+    if (parsedOrigin.hostname !== requestHost.hostname)
+        return false;
+    return isLoopbackOrPrivateLanHost(parsedOrigin.hostname);
+}
+/**
+ * Top-level same-origin decision for a locally-bound HTTP server: same-origin GETs (which
+ * browsers may send with no `Origin` header per the Fetch spec) are accepted via the `Host`
+ * header + `Sec-Fetch-Site: same-origin` signal (a header set by the user agent, unforgeable
+ * from JavaScript); cross-origin requests must present an `Origin` that resolves to a loopback,
+ * private-LAN, or explicitly allow-listed (`JINI_ALLOWED_ORIGINS`) origin. Reverse-proxy
+ * deployments are supported by trusting an `Origin` that exactly matches an allow-listed entry,
+ * since the `Host` header a proxied daemon sees is the proxy's upstream address, not the
+ * browser-visible origin.
+ */
+export function isLocalSameOrigin(req, port, env = process.env) {
+    const host = String(headerValue(req.headers?.host) || '');
+    const origin = headerValue(req.headers?.origin);
+    const ports = allowedBrowserPorts(port, env);
+    const bindHost = env.JINI_BIND_HOST || '127.0.0.1';
+    const extraAllowedOrigins = configuredAllowedOrigins(env);
+    const ipOnlyExtraOrigins = extraAllowedOrigins.filter((o) => isIpLiteralHostname(new URL(o).hostname));
+    const localHostAllowed = isAllowedBrowserHost(host, ports, bindHost, ipOnlyExtraOrigins);
+    if (origin == null || origin === '') {
+        if (localHostAllowed)
+            return true;
+        const fetchSite = headerValue(req.headers?.['sec-fetch-site']);
+        if (fetchSite === 'same-origin') {
+            return isAllowedBrowserHost(host, ports, bindHost, extraAllowedOrigins);
+        }
+        return false;
+    }
+    if (extraAllowedOrigins.includes(origin))
+        return true;
+    if (!isAllowedBrowserHost(host, ports, bindHost, extraAllowedOrigins))
+        return false;
+    return isAllowedBrowserOrigin(origin, host, ports, bindHost, extraAllowedOrigins);
+}
+function headerValue(value) {
+    if (Array.isArray(value)) {
+        const first = value[0];
+        return first == null ? undefined : String(first);
+    }
+    return value == null ? undefined : String(value);
+}
+//# sourceMappingURL=origin-validation.js.map

package/dist/origin-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-validation.js","sourceRoot":"","sources":["../src/origin-validation.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAgBH;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,GAAsB;IACpD,MAAM,GAAG,GAAG,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAC3B,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SAC9B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,sIAAsI;AACtI,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC3E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CACV,8GAA8G,KAAK,EAAE,CACtH,CAAC;YACF,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5E,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC;IACvG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,IAAI,KAAK,CACb,4BAA4B,OAAO,CAAC,MAAM,gBAAgB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;QAC7F,0CAA0C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAO,GAAG,wBAAwB,EAAE;IACzE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CACjC,IAAwC,EACxC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1C,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAiB;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAClF,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAA0C,CAAC;IAC1D,OAAO,CACL,CAAC,KAAK,EAAE;QACR,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;QACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAiB;IAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAClD,OAAO,CACL,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,KAAK;QACd,IAAI,KAAK,OAAO;QAChB,IAAI,KAAK,SAAS;QAClB,IAAI,KAAK,IAAI;QACb,aAAa,CAAC,IAAI,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,UAAmB,EACnB,KAAe,EACf,QAAgB,EAChB,mBAA6B;IAE7B,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/B,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;QAC5B,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,QAAQ,IAAI,CAAC,EAAE,CAAC,CAAC;QACvF,GAAG,sBAAsB,CAAC,mBAAmB,CAAC;KAC/C,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAErD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,0BAA0B,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAe,EACf,UAAmB,EACnB,KAAe,EACf,QAAgB,EAChB,mBAA6B;IAE7B,IAAI,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9D,IAAI,YAAY,CAAC;IACjB,IAAI,CAAC;QACH,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,KAAK,OAAO,IAAI,YAAY,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE1F,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/B,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACnB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,QAAQ,IAAI,CAAC,EAAE,CAAC;KACjD,CAAC,CACH,CAAC;IACF,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAErD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,YAAY,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,0BAA0B,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAA6B,EAC7B,IAAwC,EACxC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,IAAI,WAAW,CAAC;IACnD,MAAM,mBAAmB,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1D,mBAAmB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CACzC,CAAC;IAEF,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACzF,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QACpC,IAAI,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC/D,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,OAAO,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,OAAO,sBAAsB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC"}

package/dist/origin.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Same-origin security guard: wraps `isLocalSameOrigin` in the module's `Result` pipeline so
+ * the Adapter can treat an origin failure the same as a parse/handle failure.
+ */
+import type { Request } from 'express';
+import { type Result } from './types.js';
+/** The subset of server startup state `guardSameOrigin` needs: the resolved local port, and the
+ * environment the origin policy is read from. */
+export interface OriginContext {
+    resolvedPortRef: {
+        current: number;
+    };
+    /**
+     * Environment `JINI_BIND_HOST`, `JINI_ALLOWED_ORIGINS` and `JINI_WEB_PORT` are read from.
+     *
+     * @default `process.env`
+     *
+     * Present because a host can inject its own environment (`@jini-ai/server`'s
+     * `createLocalNodeDaemon`/`composeJiniKernel` `env` option), and that injection already reaches
+     * the origin-guard *middleware* — which is handed an explicit `env`. Without the same seam here,
+     * the two halves of one decision read two different environments: the middleware admits an origin
+     * the host configured and the per-route guard then rejects it, or a bind host the host never set
+     * decides what counts as same-origin.
+     */
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * Wraps `isLocalSameOrigin` so the HTTP Adapter can fold the origin decision into the same
+ * error-handling pipeline as parse/handle failures.
+ */
+export declare function guardSameOrigin(req: Request, origin: OriginContext): Result<void>;
+//# sourceMappingURL=origin.d.ts.map

package/dist/origin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin.d.ts","sourceRoot":"","sources":["../src/origin.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAElD;iDACiD;AACjD,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC;;;;;;;;;;;OAWG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAKjF"}

package/dist/origin.js

@@ -0,0 +1,14 @@
+import { createApiError } from '@jini-ai/protocol';
+import { isLocalSameOrigin } from './origin-validation.js';
+import { err, ok } from './types.js';
+/**
+ * Wraps `isLocalSameOrigin` so the HTTP Adapter can fold the origin decision into the same
+ * error-handling pipeline as parse/handle failures.
+ */
+export function guardSameOrigin(req, origin) {
+    if (isLocalSameOrigin(req, origin.resolvedPortRef.current, origin.env ?? process.env)) {
+        return ok(undefined);
+    }
+    return err(createApiError('FORBIDDEN', 'cross-origin request rejected'));
+}
+//# sourceMappingURL=origin.js.map

package/dist/origin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin.js","sourceRoot":"","sources":["../src/origin.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,YAAY,CAAC;AAqBlD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,MAAqB;IACjE,IAAI,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtF,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,CAAC,cAAc,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC,CAAC;AAC3E,CAAC"}

package/dist/pack-http.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Route-pack registrar: mounts every composed pack's `http` registrar (`Pack.http`, typed
+ * `(app: unknown, services) => void` in `@jini-ai/core` so the kernel never depends on any one HTTP
+ * framework) onto a concrete app instance. This is the piece of extraction-plan.md §3's
+ * "@jini-ai/http-kit — HTTP/SSE transport + route-pack registrar" that ties a `Daemon` composed by
+ * `createDaemon` to a real HTTP surface: a pack that declares an `http(app, services)` function
+ * gets called with the *same* app and the *same* services object `@jini-ai/cli` would receive via
+ * `Pack.cli` (extraction-plan.md §2.3). `app` is typed `unknown` here (mirroring `Pack.http`'s own
+ * signature) rather than a concrete Express app type, since this registrar itself never touches
+ * `app` beyond passing it straight through to each pack's own `http(app, services)`.
+ *
+ * Injecting an `ExecutionDelegate` for the tool-execution boundary (extraction-plan.md §2.5,
+ * §10 task 6) is explicitly out of scope here — no `ToolExecutor` exists in this codebase yet.
+ * `mountPackHttp` only wires the transport-neutral pack composition already built in
+ * `@jini-ai/core`; a future task adds delegate injection once the boundary itself exists.
+ *
+ * **Note for pack authors:** a pack's own `http(app, services)` registrar receives the concrete
+ * Express instance the caller assembled — write it against Express's own API, or (preferred) build
+ * it on `@jini-ai/http-kit`'s own `defineJsonRoute`/`mountJsonRoute`.
+ */
+import type { Daemon, Pack } from '@jini-ai/core';
+type AnyPack = Pack<any, any, string>;
+/**
+ * Calls `pack.http(app, services)` for every pack in `packs` that declares an `http` registrar,
+ * passing the services object `createDaemon` already composed for that pack. Packs with no
+ * `http` registrar (e.g. a CLI-only or headless pack) are skipped.
+ */
+export declare function mountPackHttp<const Packs extends readonly AnyPack[]>(app: unknown, packs: Packs, daemon: Daemon<Packs>): void;
+export {};
+//# sourceMappingURL=pack-http.d.ts.map

package/dist/pack-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-http.d.ts","sourceRoot":"","sources":["../src/pack-http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAElD,KAAK,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AAEtC;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,CAAC,KAAK,SAAS,SAAS,OAAO,EAAE,EAClE,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GACpB,IAAI,CAKN"}

package/dist/pack-http.js

@@ -0,0 +1,12 @@
+/**
+ * Calls `pack.http(app, services)` for every pack in `packs` that declares an `http` registrar,
+ * passing the services object `createDaemon` already composed for that pack. Packs with no
+ * `http` registrar (e.g. a CLI-only or headless pack) are skipped.
+ */
+export function mountPackHttp(app, packs, daemon) {
+    const services = daemon.services;
+    for (const pack of packs) {
+        pack.http?.(app, services[pack.name]);
+    }
+}
+//# sourceMappingURL=pack-http.js.map

package/dist/pack-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-http.js","sourceRoot":"","sources":["../src/pack-http.ts"],"names":[],"mappings":"AAwBA;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAY,EACZ,KAAY,EACZ,MAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAmC,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/raw-sse.d.ts

@@ -0,0 +1,44 @@
+/**
+ * @module sse
+ *
+ * A Server-Sent Events primitive typed only against `node:http`'s `IncomingMessage`/
+ * `ServerResponse` — Express's `req`/`res` already satisfy these directly (`Response` extends
+ * `http.ServerResponse`), so `frontend-sessions.ts`'s `handleFrontendSessionStream` hands them
+ * straight through with no adapter of its own.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+/**
+ * Cap on messages buffered for one client while its socket reports backpressure. Mirrors
+ * `sse.ts`'s `DEFAULT_MAX_QUEUED_SSE_EVENTS` (SEC-006) — the two SSE primitives in this package
+ * should not disagree about how much a stalled consumer may cost the server. Once exceeded the
+ * connection is dropped rather than growing memory without bound.
+ */
+export declare const DEFAULT_MAX_QUEUED_SSE_MESSAGES = 1000;
+export interface CreateSseResponseOptions {
+    /** Milliseconds between keepalive ping comment lines, sent to keep an idle connection from being closed by an intermediary/timeout. Defaults to 15000. */
+    readonly keepAliveMs?: number;
+    /** Invoked exactly once, the first time this connection closes for any reason (an explicit `close()` call, or the client disconnecting) — the caller's seam for its own cleanup (e.g. unsubscribing from an event source). */
+    readonly onClose?: () => void;
+    /** Buffered-message ceiling before the connection is dropped. Defaults to {@link DEFAULT_MAX_QUEUED_SSE_MESSAGES}. */
+    readonly maxQueuedMessages?: number;
+}
+export interface SseConnection {
+    /** Writes one SSE `data:` event, JSON-serializing `data`. A no-op once the connection has closed. */
+    send(data: unknown): void;
+    /** Closes the connection: stops the keepalive interval and ends the response. Idempotent — safe to call more than once, or after the client has already disconnected. */
+    close(): void;
+    /** `true` once this connection has closed, whether via an explicit `close()` call or the client disconnecting. */
+    readonly closed: boolean;
+}
+/**
+ * Opens `res` as a Server-Sent Events stream: writes the `text/event-stream` response headers
+ * immediately, arms a keepalive interval, and wires client-disconnect detection.
+ *
+ * @param req - The raw request (Express's `Request` already satisfies this).
+ * @param res - The raw response (Express's `Response` already satisfies this).
+ * @returns An `SseConnection` the caller pushes events through and closes when done.
+ * @complexity O(1) to open; `send` is O(1) plus `JSON.stringify`'s cost in the payload's size.
+ * @overallScore 100/100
+ */
+export declare function createSseResponse(req: IncomingMessage, res: ServerResponse, options?: CreateSseResponseOptions): SseConnection;
+//# sourceMappingURL=raw-sse.d.ts.map

package/dist/raw-sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-sse.d.ts","sourceRoot":"","sources":["../src/raw-sse.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,OAAO,CAAC;AAEpD,MAAM,WAAW,wBAAwB;IACvC,0JAA0J;IAC1J,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,8NAA8N;IAC9N,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B,sHAAsH;IACtH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,qGAAqG;IACrG,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,yKAAyK;IACzK,KAAK,IAAI,IAAI,CAAC;IACd,kHAAkH;IAClH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,GAAE,wBAA6B,GACrC,aAAa,CA+Ef"}

package/dist/raw-sse.js

@@ -0,0 +1,93 @@
+/**
+ * Cap on messages buffered for one client while its socket reports backpressure. Mirrors
+ * `sse.ts`'s `DEFAULT_MAX_QUEUED_SSE_EVENTS` (SEC-006) — the two SSE primitives in this package
+ * should not disagree about how much a stalled consumer may cost the server. Once exceeded the
+ * connection is dropped rather than growing memory without bound.
+ */
+export const DEFAULT_MAX_QUEUED_SSE_MESSAGES = 1000;
+/**
+ * Opens `res` as a Server-Sent Events stream: writes the `text/event-stream` response headers
+ * immediately, arms a keepalive interval, and wires client-disconnect detection.
+ *
+ * @param req - The raw request (Express's `Request` already satisfies this).
+ * @param res - The raw response (Express's `Response` already satisfies this).
+ * @returns An `SseConnection` the caller pushes events through and closes when done.
+ * @complexity O(1) to open; `send` is O(1) plus `JSON.stringify`'s cost in the payload's size.
+ * @overallScore 100/100
+ */
+export function createSseResponse(req, res, options = {}) {
+    let closed = false;
+    const maxQueuedMessages = options.maxQueuedMessages ?? DEFAULT_MAX_QUEUED_SSE_MESSAGES;
+    // Frames held back because the socket reported backpressure, flushed on `'drain'`. Every write
+    // this connection makes — events and keepalive pings alike — goes through this queue, so there is
+    // no second path that could bypass the bound.
+    const queue = [];
+    let writable = true;
+    res.writeHead(200, {
+        'Content-Type': 'text/event-stream',
+        'Cache-Control': 'no-cache, no-transform',
+        Connection: 'keep-alive',
+    });
+    /**
+     * Writes as much of the queue as the socket will accept. `res.write()` returning `false` means
+     * Node has buffered the frame internally and wants no more until `'drain'` — ignoring that (as
+     * this primitive used to) lets a client that simply stops reading accumulate the entire output of
+     * a run in memory, which is a denial of service reachable by anyone who can open a stream.
+     */
+    function pump() {
+        while (!closed && writable && queue.length > 0) {
+            const frame = queue.shift();
+            if (res.write(frame) === false)
+                writable = false;
+        }
+    }
+    /**
+     * Queues one frame, dropping the connection if the backlog has outgrown its bound. Disconnecting
+     * a stalled client is the deliberate choice over either growing without limit or silently
+     * discarding frames — a consumer that missed events in the middle of a stream cannot tell, while
+     * a closed stream is an observable signal it can reconnect from.
+     */
+    function enqueue(frame) {
+        if (closed)
+            return;
+        if (queue.length >= maxQueuedMessages) {
+            close();
+            return;
+        }
+        queue.push(frame);
+        pump();
+    }
+    const keepAliveMs = options.keepAliveMs ?? 15_000;
+    const keepAliveTimer = setInterval(() => {
+        enqueue(': ping\n\n');
+    }, keepAliveMs);
+    keepAliveTimer.unref?.();
+    function close() {
+        if (closed)
+            return;
+        closed = true;
+        queue.length = 0;
+        clearInterval(keepAliveTimer);
+        options.onClose?.();
+        res.end();
+    }
+    res.on('drain', () => {
+        writable = true;
+        pump();
+    });
+    // `IncomingMessage`'s `'close'` fires when the request/response cycle ends or the connection
+    // drops — not when a bodyless request merely finishes arriving — so this is the client-disconnect
+    // signal it reads as. `raw-sse.test.ts` pins that against a real socket rather than a fake
+    // emitter, because it is the kind of contract a mock will happily agree with either way.
+    req.on('close', close);
+    return {
+        send(data) {
+            enqueue(`data: ${JSON.stringify(data)}\n\n`);
+        },
+        close,
+        get closed() {
+            return closed;
+        },
+    };
+}
+//# sourceMappingURL=raw-sse.js.map

package/dist/raw-sse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-sse.js","sourceRoot":"","sources":["../src/raw-sse.ts"],"names":[],"mappings":"AAUA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAoBpD;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAoB,EACpB,GAAmB,EACnB,UAAoC,EAAE;IAEtC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,+BAA+B,CAAC;IACvF,+FAA+F;IAC/F,kGAAkG;IAClG,8CAA8C;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,QAAQ,GAAG,IAAI,CAAC;IAEpB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,wBAAwB;QACzC,UAAU,EAAE,YAAY;KACzB,CAAC,CAAC;IAEH;;;;;OAKG;IACH,SAAS,IAAI;QACX,OAAO,CAAC,MAAM,IAAI,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAC7B,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK;gBAAE,QAAQ,GAAG,KAAK,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,SAAS,OAAO,CAAC,KAAa;QAC5B,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,KAAK,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;YACtC,KAAK,EAAE,CAAC;YACR,OAAO;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,EAAE,CAAC;IACT,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC;IAClD,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;QACtC,OAAO,CAAC,YAAY,CAAC,CAAC;IACxB,CAAC,EAAE,WAAW,CAAC,CAAC;IAChB,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC;IAEzB,SAAS,KAAK;QACZ,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACjB,aAAa,CAAC,cAAc,CAAC,CAAC;QAC9B,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACpB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,6FAA6F;IAC7F,kGAAkG;IAClG,2FAA2F;IAC3F,yFAAyF;IACzF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEvB,OAAO;QACL,IAAI,CAAC,IAAa;YAChB,OAAO,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK;QACL,IAAI,MAAM;YACR,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}