@jmfederico/pi-web 1.202608.2 → 1.202609.1

package/dist/server/plugins/pluginBackendChannelProxyCoordinator.js

@@ -0,0 +1,234 @@
+import { WebSocket } from "ws";
+import { PLUGIN_BACKEND_CHANNEL_DATA_FRAME_MAX_BYTES, PLUGIN_BACKEND_CHANNEL_OPEN_FRAME_MAX_BYTES, PLUGIN_BACKEND_CHANNEL_QUEUE_MAX_BYTES, PLUGIN_BACKEND_CHANNEL_QUEUE_MAX_FRAMES, utf8ByteLength, } from "../../shared/pluginBackendProtocol.js";
+import { bridgePluginBackendChannelSockets, closePluginBackendChannelWebSocket, decodeBoundedPluginBackendChannelTextFrame, PluginBackendChannelTransportFrameError, setPluginBackendChannelSocketPayloadLimit, } from "../webSocketBridge.js";
+import { PluginBackendChannelProxyAdmissionError, rejectPluginBackendChannelProxyAdmission, } from "./pluginBackendChannelProxyAdmission.js";
+export class PluginBackendChannelProxyConnectionError extends Error {
+    constructor(closeCode, message, options) {
+        super(message, options);
+        this.closeCode = closeCode;
+        this.name = "PluginBackendChannelProxyConnectionError";
+    }
+}
+/**
+ * Own one proxy channel from edge admission through physical bridge teardown.
+ * Routes provide attribution and an upstream connector, but cannot split setup
+ * timeout ownership from the active bridge lifetime.
+ */
+export async function coordinatePluginBackendChannelProxy(options) {
+    let reservation;
+    try {
+        reservation = options.admissions.admit(options.scope);
+    }
+    catch (error) {
+        if (error instanceof PluginBackendChannelProxyAdmissionError) {
+            await rejectPluginBackendChannelProxyAdmission(options.downstream, error);
+        }
+        else {
+            await closePluginBackendChannelWebSocket(options.downstream, 1011, `Plugin backend channel admission failed: ${errorMessage(error)}`, { terminateImmediately: true });
+        }
+        return;
+    }
+    await new ManagedPluginBackendChannelProxy(options, reservation).start();
+}
+class ManagedPluginBackendChannelProxy {
+    constructor(options, reservation) {
+        this.options = options;
+        this.reservation = reservation;
+        this.phase = "accepted";
+        this.connectionAbort = new AbortController();
+        this.resolveCompletion = () => undefined;
+        this.completion = new Promise((resolve) => { this.resolveCompletion = resolve; });
+        this.onUpstreamOpen = () => {
+            this.beginBridge();
+        };
+        this.onUpstreamClose = () => {
+            this.beginClosing(1011, "Plugin backend channel upstream disconnected during transport setup");
+        };
+        this.onUpstreamError = (error) => {
+            this.beginClosing(1011, `Plugin backend channel upstream transport setup failed: ${errorMessage(error)}`);
+        };
+    }
+    start() {
+        try {
+            setPluginBackendChannelSocketPayloadLimit(this.options.downstream, PLUGIN_BACKEND_CHANNEL_OPEN_FRAME_MAX_BYTES);
+            this.prelude = new PluginBackendChannelPrelude(this.options.downstream, (code, reason) => { this.beginClosing(code, reason); });
+        }
+        catch (error) {
+            this.beginClosing(1011, `Plugin backend channel proxy setup failed: ${errorMessage(error)}`);
+            return this.completion;
+        }
+        const timeoutMs = this.reservation.transportConnectTimeoutMs;
+        this.transportConnectDeadline = setTimeout(() => {
+            this.beginClosing(1011, `Plugin backend channel transport connection timed out after ${String(timeoutMs)}ms`);
+        }, timeoutMs);
+        this.transportConnectDeadline.unref();
+        this.phase = "resolving";
+        let connection;
+        try {
+            connection = this.options.connectUpstream(this.connectionAbort.signal);
+        }
+        catch (error) {
+            this.handleConnectionFailure(error);
+            return this.completion;
+        }
+        void Promise.resolve(connection)
+            .then((upstream) => { this.attachUpstream(upstream); })
+            .catch((error) => { this.handleConnectionFailure(error); });
+        return this.completion;
+    }
+    attachUpstream(upstream) {
+        if (this.phase !== "resolving") {
+            void closePluginBackendChannelWebSocket(upstream, 1001, "Plugin backend channel proxy setup was cancelled", { terminateImmediately: true });
+            return;
+        }
+        this.upstream = upstream;
+        this.phase = "connecting";
+        upstream.once("open", this.onUpstreamOpen);
+        upstream.once("close", this.onUpstreamClose);
+        upstream.once("error", this.onUpstreamError);
+        if (upstream.readyState === WebSocket.OPEN) {
+            this.beginBridge();
+        }
+        else if (upstream.readyState !== WebSocket.CONNECTING) {
+            this.beginClosing(1011, "Plugin backend channel upstream was not available");
+        }
+    }
+    beginBridge() {
+        const upstream = this.upstream;
+        if (this.phase !== "connecting" || upstream === undefined)
+            return;
+        if (upstream.readyState !== WebSocket.OPEN) {
+            this.beginClosing(1011, "Plugin backend channel upstream did not open cleanly");
+            return;
+        }
+        if (this.options.downstream.readyState !== WebSocket.OPEN) {
+            this.beginClosing(1001, "Plugin backend channel client disconnected during transport setup");
+            return;
+        }
+        this.clearTransportConnectDeadline();
+        this.detachUpstreamSetupListeners();
+        const initialClientFrames = this.prelude?.takeFrames() ?? [];
+        this.prelude = undefined;
+        this.phase = "bridging";
+        let bridgeCompletion;
+        try {
+            bridgeCompletion = bridgePluginBackendChannelSockets(this.options.downstream, upstream, { initialClientFrames });
+        }
+        catch (error) {
+            this.beginClosing(1011, `Plugin backend channel bridge setup failed: ${errorMessage(error)}`);
+            return;
+        }
+        void bridgeCompletion
+            .then(() => { this.finishBridge(); })
+            .catch((error) => {
+            this.beginClosing(1011, `Plugin backend channel bridge failed: ${errorMessage(error)}`);
+        });
+    }
+    handleConnectionFailure(error) {
+        if (this.phase !== "resolving")
+            return;
+        if (error instanceof PluginBackendChannelProxyConnectionError) {
+            this.beginClosing(error.closeCode, error.message);
+            return;
+        }
+        this.beginClosing(1011, `Plugin backend channel upstream connection failed: ${errorMessage(error)}`);
+    }
+    finishBridge() {
+        if (this.phase !== "bridging")
+            return;
+        this.phase = "closing";
+        this.finishClosed();
+    }
+    beginClosing(code, reason) {
+        if (this.phase === "closing" || this.phase === "closed")
+            return;
+        this.phase = "closing";
+        this.clearTransportConnectDeadline();
+        this.connectionAbort.abort(new Error(reason));
+        this.prelude?.dispose();
+        this.prelude = undefined;
+        this.detachUpstreamSetupListeners();
+        const sockets = this.upstream === undefined
+            ? [this.options.downstream]
+            : [this.options.downstream, this.upstream];
+        void Promise.allSettled(sockets.map(async (socket) => { await closePluginBackendChannelWebSocket(socket, code, reason); })).then(() => { this.finishClosed(); });
+    }
+    finishClosed() {
+        if (this.phase === "closed")
+            return;
+        this.phase = "closed";
+        this.clearTransportConnectDeadline();
+        this.prelude?.dispose();
+        this.prelude = undefined;
+        this.detachUpstreamSetupListeners();
+        this.reservation.release();
+        this.resolveCompletion();
+    }
+    clearTransportConnectDeadline() {
+        if (this.transportConnectDeadline === undefined)
+            return;
+        clearTimeout(this.transportConnectDeadline);
+        this.transportConnectDeadline = undefined;
+    }
+    detachUpstreamSetupListeners() {
+        if (this.upstream === undefined)
+            return;
+        this.upstream.off("open", this.onUpstreamOpen);
+        this.upstream.off("close", this.onUpstreamClose);
+        this.upstream.off("error", this.onUpstreamError);
+    }
+}
+class PluginBackendChannelPrelude {
+    constructor(downstream, onFailure) {
+        this.downstream = downstream;
+        this.onFailure = onFailure;
+        this.frames = [];
+        this.bytes = 0;
+        this.disposed = false;
+        this.onMessage = (data, isBinary) => {
+            try {
+                const firstFrame = this.frames.length === 0;
+                const text = decodeBoundedPluginBackendChannelTextFrame(data, isBinary, firstFrame ? PLUGIN_BACKEND_CHANNEL_OPEN_FRAME_MAX_BYTES : PLUGIN_BACKEND_CHANNEL_DATA_FRAME_MAX_BYTES, firstFrame ? "Plugin backend channel first client frame" : "Plugin backend channel client frame");
+                if (firstFrame) {
+                    setPluginBackendChannelSocketPayloadLimit(this.downstream, PLUGIN_BACKEND_CHANNEL_DATA_FRAME_MAX_BYTES);
+                }
+                const frameBytes = utf8ByteLength(text);
+                if (this.frames.length >= PLUGIN_BACKEND_CHANNEL_QUEUE_MAX_FRAMES
+                    || this.bytes + frameBytes > PLUGIN_BACKEND_CHANNEL_QUEUE_MAX_BYTES) {
+                    this.onFailure(1013, "Plugin backend channel proxy prelude queue limit was exceeded");
+                    return;
+                }
+                this.frames.push(text);
+                this.bytes += frameBytes;
+            }
+            catch (error) {
+                this.onFailure(error instanceof PluginBackendChannelTransportFrameError ? error.closeCode : 1011, errorMessage(error));
+            }
+        };
+        this.onClose = () => {
+            this.onFailure(1001, "Plugin backend channel client disconnected during transport setup");
+        };
+        this.onError = (error) => {
+            this.onFailure(1011, `Plugin backend channel client transport setup failed: ${errorMessage(error)}`);
+        };
+        downstream.on("message", this.onMessage);
+        downstream.once("close", this.onClose);
+        downstream.once("error", this.onError);
+    }
+    takeFrames() {
+        this.dispose();
+        return this.frames;
+    }
+    dispose() {
+        if (this.disposed)
+            return;
+        this.disposed = true;
+        this.downstream.off("message", this.onMessage);
+        this.downstream.off("close", this.onClose);
+        this.downstream.off("error", this.onError);
+    }
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=pluginBackendChannelProxyCoordinator.js.map

package/dist/server/plugins/pluginBackendChannelProxyCoordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginBackendChannelProxyCoordinator.js","sourceRoot":"","sources":["../../../src/server/plugins/pluginBackendChannelProxyCoordinator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAgB,MAAM,IAAI,CAAC;AAC7C,OAAO,EACL,2CAA2C,EAC3C,2CAA2C,EAC3C,sCAAsC,EACtC,uCAAuC,EACvC,cAAc,GACf,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,iCAAiC,EACjC,kCAAkC,EAClC,0CAA0C,EAC1C,uCAAuC,EACvC,yCAAyC,GAC1C,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uCAAuC,EAIvC,wCAAwC,GACzC,MAAM,yCAAyC,CAAC;AAWjD,MAAM,OAAO,wCAAyC,SAAQ,KAAK;IAGjE,YACW,SAAiB,EAC1B,OAAe,EACf,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAJf,cAAS,GAAT,SAAS,CAAQ;QAHnB,SAAI,GAAG,0CAA0C,CAAC;IAQ3D,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,OAAoD;IAEpD,IAAI,WAAiD,CAAC;IACtD,IAAI,CAAC;QACH,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uCAAuC,EAAE,CAAC;YAC7D,MAAM,wCAAwC,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,MAAM,kCAAkC,CACtC,OAAO,CAAC,UAAU,EAClB,IAAI,EACJ,4CAA4C,YAAY,CAAC,KAAK,CAAC,EAAE,EACjE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC/B,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,gCAAgC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,KAAK,EAAE,CAAC;AAC3E,CAAC;AAID,MAAM,gCAAgC;IAqBpC,YACmB,OAAoD,EACpD,WAAiD;QADjD,YAAO,GAAP,OAAO,CAA6C;QACpD,gBAAW,GAAX,WAAW,CAAsC;QAtB5D,UAAK,GAAe,UAAU,CAAC;QAItB,oBAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QACjD,sBAAiB,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;QACvC,eAAU,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnF,mBAAc,GAAG,GAAS,EAAE;YAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC,CAAC;QAEe,oBAAe,GAAG,GAAS,EAAE;YAC5C,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,qEAAqE,CAAC,CAAC;QACjG,CAAC,CAAC;QAEe,oBAAe,GAAG,CAAC,KAAY,EAAQ,EAAE;YACxD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,2DAA2D,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5G,CAAC,CAAC;IAKC,CAAC;IAEJ,KAAK;QACH,IAAI,CAAC;YACH,yCAAyC,CACvC,IAAI,CAAC,OAAO,CAAC,UAAU,EACvB,2CAA2C,CAC5C,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,IAAI,2BAA2B,CAC5C,IAAI,CAAC,OAAO,CAAC,UAAU,EACvB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CACvD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,8CAA8C,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7F,OAAO,IAAI,CAAC,UAAU,CAAC;QACzB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC;QAC7D,IAAI,CAAC,wBAAwB,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9C,IAAI,CAAC,YAAY,CACf,IAAI,EACJ,+DAA+D,MAAM,CAAC,SAAS,CAAC,IAAI,CACrF,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;QAEzB,IAAI,UAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC,UAAU,CAAC;QACzB,CAAC;QACD,KAAK,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;aAC7B,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;aACtD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,GAAG,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAEO,cAAc,CAAC,QAAmB;QACxC,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC/B,KAAK,kCAAkC,CACrC,QAAQ,EACR,IAAI,EACJ,kDAAkD,EAClD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC/B,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7C,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;YACxD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,mDAAmD,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO;QAClE,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,sDAAsD,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YAC1D,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,mEAAmE,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QAED,IAAI,CAAC,6BAA6B,EAAE,CAAC;QACrC,IAAI,CAAC,4BAA4B,EAAE,CAAC;QACpC,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC7D,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;QAExB,IAAI,gBAA+B,CAAC;QACpC,IAAI,CAAC;YACH,gBAAgB,GAAG,iCAAiC,CAClD,IAAI,CAAC,OAAO,CAAC,UAAU,EACvB,QAAQ,EACR,EAAE,mBAAmB,EAAE,CACxB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,+CAA+C,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9F,OAAO;QACT,CAAC;QACD,KAAK,gBAAgB;aAClB,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;aACpC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,yCAAyC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,uBAAuB,CAAC,KAAc;QAC5C,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO;QACvC,IAAI,KAAK,YAAY,wCAAwC,EAAE,CAAC;YAC9D,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,sDAAsD,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO;QACtC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,MAAc;QAC/C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QAChE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,6BAA6B,EAAE,CAAC;QACrC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,4BAA4B,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS;YACzC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YAC3B,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,KAAK,OAAO,CAAC,UAAU,CACrB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,kCAAkC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CACnG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QACpC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,6BAA6B,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,4BAA4B,EAAE,CAAC;QACpC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAEO,6BAA6B;QACnC,IAAI,IAAI,CAAC,wBAAwB,KAAK,SAAS;YAAE,OAAO;QACxD,YAAY,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC5C,IAAI,CAAC,wBAAwB,GAAG,SAAS,CAAC;IAC5C,CAAC;IAEO,4BAA4B;QAClC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO;QACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACnD,CAAC;CACF;AAED,MAAM,2BAA2B;IA4C/B,YACmB,UAAqB,EACrB,SAAiD;QADjD,eAAU,GAAV,UAAU,CAAW;QACrB,cAAS,GAAT,SAAS,CAAwC;QA7CnD,WAAM,GAAa,EAAE,CAAC;QAC/B,UAAK,GAAG,CAAC,CAAC;QACV,aAAQ,GAAG,KAAK,CAAC;QAER,cAAS,GAAG,CAAC,IAAa,EAAE,QAAiB,EAAQ,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;gBAC5C,MAAM,IAAI,GAAG,0CAA0C,CACrD,IAAI,EACJ,QAAQ,EACR,UAAU,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,2CAA2C,EACtG,UAAU,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,qCAAqC,CACjG,CAAC;gBACF,IAAI,UAAU,EAAE,CAAC;oBACf,yCAAyC,CACvC,IAAI,CAAC,UAAU,EACf,2CAA2C,CAC5C,CAAC;gBACJ,CAAC;gBACD,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,uCAAuC;uBAC5D,IAAI,CAAC,KAAK,GAAG,UAAU,GAAG,sCAAsC,EAAE,CAAC;oBACtE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,+DAA+D,CAAC,CAAC;oBACtF,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvB,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,SAAS,CACZ,KAAK,YAAY,uCAAuC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EACjF,YAAY,CAAC,KAAK,CAAC,CACpB,CAAC;YACJ,CAAC;QACH,CAAC,CAAC;QAEe,YAAO,GAAG,GAAS,EAAE;YACpC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,mEAAmE,CAAC,CAAC;QAC5F,CAAC,CAAC;QAEe,YAAO,GAAG,CAAC,KAAY,EAAQ,EAAE;YAChD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,yDAAyD,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC,CAAC;QAMA,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,UAAU;QACR,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/server/plugins/pluginBackendChannelProxyRoutes.js

@@ -0,0 +1,52 @@
+import { PAIRED_PLUGIN_BACKEND_CHANNEL_ROUTE_PATH, PLUGIN_BACKEND_CHANNEL_DATA_FRAME_MAX_BYTES } from "../../shared/pluginBackendProtocol.js";
+import { markPluginBackendChannelUpgradeRequest } from "../webSocketBridge.js";
+import { pluginBackendChannelProxyAdmissionPool, } from "./pluginBackendChannelProxyAdmission.js";
+import { coordinatePluginBackendChannelProxy, PluginBackendChannelProxyConnectionError, } from "./pluginBackendChannelProxyCoordinator.js";
+/** Browser-facing local route; session ownership stays in sessiond while this hop bounds transport resources. */
+export function registerPluginBackendChannelProxyRoutes(app, daemon, prefix = "/api", admissions = pluginBackendChannelProxyAdmissionPool(app)) {
+    app.get(`${prefix}${PAIRED_PLUGIN_BACKEND_CHANNEL_ROUTE_PATH}`, {
+        websocket: true,
+        onRequest(request, _reply, done) {
+            markPluginBackendChannelUpgradeRequest(request.raw);
+            done();
+        },
+    }, (socket, request) => {
+        const upstreamPath = daemonPluginBackendChannelPath(request.params);
+        void coordinatePluginBackendChannelProxy({
+            downstream: socket,
+            admissions,
+            scope: {
+                authorityId: "local",
+                pluginId: request.params.pluginId,
+                projectId: request.params.projectId,
+                workspaceId: request.params.workspaceId,
+            },
+            connectUpstream() {
+                try {
+                    return daemon.connectWebSocket(upstreamPath, {
+                        maxPayload: PLUGIN_BACKEND_CHANNEL_DATA_FRAME_MAX_BYTES,
+                    });
+                }
+                catch (error) {
+                    throw new PluginBackendChannelProxyConnectionError(1011, `Session daemon unavailable: ${errorMessage(error)}`, { cause: error });
+                }
+            },
+        });
+    });
+}
+function daemonPluginBackendChannelPath(params) {
+    return [
+        "/paired-plugin-backends",
+        encodeURIComponent(params.pluginId),
+        "projects",
+        encodeURIComponent(params.projectId),
+        "workspaces",
+        encodeURIComponent(params.workspaceId),
+        "channels",
+        encodeURIComponent(params.operation),
+    ].join("/");
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=pluginBackendChannelProxyRoutes.js.map

package/dist/server/plugins/pluginBackendChannelProxyRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginBackendChannelProxyRoutes.js","sourceRoot":"","sources":["../../../src/server/plugins/pluginBackendChannelProxyRoutes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,wCAAwC,EAAE,2CAA2C,EAAE,MAAM,uCAAuC,CAAC;AAC9I,OAAO,EAAE,sCAAsC,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAEL,sCAAsC,GACvC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,mCAAmC,EACnC,wCAAwC,GACzC,MAAM,2CAA2C,CAAC;AAanD,iHAAiH;AACjH,MAAM,UAAU,uCAAuC,CACrD,GAAoB,EACpB,MAAuC,EACvC,MAAM,GAAG,MAAM,EACf,aAAqD,sCAAsC,CAAC,GAAG,CAAC;IAEhG,GAAG,CAAC,GAAG,CACL,GAAG,MAAM,GAAG,wCAAwC,EAAE,EACtD;QACE,SAAS,EAAE,IAAI;QACf,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI;YAC7B,sCAAsC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,EAAE,CAAC;QACT,CAAC;KACF,EACD,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QAClB,MAAM,YAAY,GAAG,8BAA8B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpE,KAAK,mCAAmC,CAAC;YACvC,UAAU,EAAE,MAAM;YAClB,UAAU;YACV,KAAK,EAAE;gBACL,WAAW,EAAE,OAAO;gBACpB,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;gBACjC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;gBACnC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;aACxC;YACD,eAAe;gBACb,IAAI,CAAC;oBACH,OAAO,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE;wBAC3C,UAAU,EAAE,2CAA2C;qBACxD,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,wCAAwC,CAChD,IAAI,EACJ,+BAA+B,YAAY,CAAC,KAAK,CAAC,EAAE,EACpD,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;gBACJ,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,MAAuC;IAC7E,OAAO;QACL,yBAAyB;QACzB,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC;QACnC,UAAU;QACV,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC;QACpC,YAAY;QACZ,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC;QACtC,UAAU;QACV,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC;KACrC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/server/plugins/pluginBackendProxyRoutes.js

@@ -1,42 +1,49 @@
-import { PLUGIN_BACKEND_REQUEST_BODY_MAX_BYTES, PLUGIN_BACKEND_RESPONSE_BODY_MAX_BYTES, utf8ByteLength, } from "../../shared/pluginBackendProtocol.js";
-/** Browser-facing local route; all owner resolution and execution stays in sessiond. */
-export function registerPluginBackendProxyRoutes(app, daemon, prefix = "/api/plugin-backends") {
-    app.post(`${prefix}/:pluginId/projects/:projectId/workspaces/:workspaceId/:operation`, { bodyLimit: PLUGIN_BACKEND_REQUEST_BODY_MAX_BYTES }, async (request, reply) => {
+import { PAIRED_PLUGIN_BACKEND_REQUEST_ROUTE_PATH, PLUGIN_BACKEND_REQUEST_BODY_MAX_BYTES, PLUGIN_BACKEND_RESPONSE_BODY_MAX_BYTES, utf8ByteLength, } from "../../shared/pluginBackendProtocol.js";
+import { requestCancellation } from "../requestCancellation.js";
+/** Browser-facing package-paired route; package and workspace authority stay in sessiond. */
+export function registerPairedPluginBackendProxyRoutes(app, daemon) {
+    app.post(`/api${PAIRED_PLUGIN_BACKEND_REQUEST_ROUTE_PATH}`, { bodyLimit: PLUGIN_BACKEND_REQUEST_BODY_MAX_BYTES }, async (request, reply) => {
         const path = daemonPluginBackendPath(request.params);
-        let upstream;
+        const cancellation = requestCancellation(request, reply);
         try {
-            upstream = await daemon.request("POST", path, request.body);
+            let upstream;
+            try {
+                upstream = await daemon.request("POST", path, request.body, { signal: cancellation.signal });
+            }
+            catch (error) {
+                return await reply.code(502).send({
+                    error: `Session daemon unavailable: ${errorMessage(error)}`,
+                    code: "daemon-unavailable",
+                    pluginId: request.params.pluginId,
+                    operation: request.params.operation,
+                });
+            }
+            if (upstream.body === "" || utf8ByteLength(upstream.body) > PLUGIN_BACKEND_RESPONSE_BODY_MAX_BYTES) {
+                return await daemonProtocolError(reply, request.params, "Session daemon plugin backend returned an invalid response size");
+            }
+            let body;
+            try {
+                body = JSON.parse(upstream.body);
+            }
+            catch {
+                return await daemonProtocolError(reply, request.params, "Session daemon plugin backend returned invalid JSON");
+            }
+            if (isUnknownPluginBackendRoute(upstream.statusCode, body)) {
+                return await daemonProtocolError(reply, request.params, "Session daemon does not support plugin backend requests; restart or upgrade the session daemon");
+            }
+            return await reply
+                .code(upstream.statusCode)
+                .type("application/json; charset=utf-8")
+                .send(upstream.body);
         }
-        catch (error) {
-            return reply.code(502).send({
-                error: `Session daemon unavailable: ${errorMessage(error)}`,
-                code: "daemon-unavailable",
-                pluginId: request.params.pluginId,
-                operation: request.params.operation,
-            });
+        finally {
+            cancellation.dispose();
         }
-        if (upstream.body === "" || utf8ByteLength(upstream.body) > PLUGIN_BACKEND_RESPONSE_BODY_MAX_BYTES) {
-            return daemonProtocolError(reply, request.params, "Session daemon plugin backend returned an invalid response size");
-        }
-        let body;
-        try {
-            body = JSON.parse(upstream.body);
-        }
-        catch {
-            return daemonProtocolError(reply, request.params, "Session daemon plugin backend returned invalid JSON");
-        }
-        if (isUnknownPluginBackendRoute(upstream.statusCode, body)) {
-            return daemonProtocolError(reply, request.params, "Session daemon does not support plugin backend requests; restart or upgrade the session daemon");
-        }
-        return await reply
-            .code(upstream.statusCode)
-            .type("application/json; charset=utf-8")
-            .send(upstream.body);
     });
 }
 function daemonPluginBackendPath(params) {
     return [
-        "/plugin-backends",
+        "/paired-plugin-backends",
         encodeURIComponent(params.pluginId),
         "projects",
         encodeURIComponent(params.projectId),

package/dist/server/plugins/pluginBackendProxyRoutes.js.map

@@ -1 +1 @@
-{"version":3,"file":"pluginBackendProxyRoutes.js","sourceRoot":"","sources":["../../../src/server/plugins/pluginBackendProxyRoutes.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qCAAqC,EACrC,sCAAsC,EACtC,cAAc,GACf,MAAM,uCAAuC,CAAC;AAU/C,wFAAwF;AACxF,MAAM,UAAU,gCAAgC,CAC9C,GAAoB,EACpB,MAAkC,EAClC,MAAM,GAAG,sBAAsB;IAE/B,GAAG,CAAC,IAAI,CACN,GAAG,MAAM,mEAAmE,EAC5E,EAAE,SAAS,EAAE,qCAAqC,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,QAAoE,CAAC;QACzE,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,+BAA+B,YAAY,CAAC,KAAK,CAAC,EAAE;gBAC3D,IAAI,EAAE,oBAAoB;gBAC1B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;gBACjC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;aACpC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,EAAE,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,sCAAsC,EAAE,CAAC;YACnG,OAAO,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,iEAAiE,CAAC,CAAC;QACvH,CAAC;QAED,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,qDAAqD,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,2BAA2B,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;YAC3D,OAAO,mBAAmB,CACxB,KAAK,EACL,OAAO,CAAC,MAAM,EACd,gGAAgG,CACjG,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,KAAK;aACf,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;aACzB,IAAI,CAAC,iCAAiC,CAAC;aACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAgC;IAC/D,OAAO;QACL,kBAAkB;QAClB,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC;QACnC,UAAU;QACV,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC;QACpC,YAAY;QACZ,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC;QACtC,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC;KACrC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAmB,EAAE,MAAgC,EAAE,OAAe;IACjG,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QAC1B,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAAC,UAAkB,EAAE,IAAa;IACpE,IAAI,UAAU,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,KAAK,KAAK,WAAW,IAAI,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"pluginBackendProxyRoutes.js","sourceRoot":"","sources":["../../../src/server/plugins/pluginBackendProxyRoutes.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wCAAwC,EACxC,qCAAqC,EACrC,sCAAsC,EACtC,cAAc,GACf,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAShE,6FAA6F;AAC7F,MAAM,UAAU,sCAAsC,CAAC,GAAoB,EAAE,MAAkC;IAC7G,GAAG,CAAC,IAAI,CACN,OAAO,wCAAwC,EAAE,EACjD,EAAE,SAAS,EAAE,qCAAqC,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,IAAI,QAAoE,CAAC;YACzE,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAChC,KAAK,EAAE,+BAA+B,YAAY,CAAC,KAAK,CAAC,EAAE;oBAC3D,IAAI,EAAE,oBAAoB;oBAC1B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;oBACjC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;iBACpC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,QAAQ,CAAC,IAAI,KAAK,EAAE,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,sCAAsC,EAAE,CAAC;gBACnG,OAAO,MAAM,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,iEAAiE,CAAC,CAAC;YAC7H,CAAC;YAED,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,qDAAqD,CAAC,CAAC;YACjH,CAAC;YACD,IAAI,2BAA2B,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC3D,OAAO,MAAM,mBAAmB,CAC9B,KAAK,EACL,OAAO,CAAC,MAAM,EACd,gGAAgG,CACjG,CAAC;YACJ,CAAC;YAED,OAAO,MAAM,KAAK;iBACf,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;iBACzB,IAAI,CAAC,iCAAiC,CAAC;iBACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAgC;IAC/D,OAAO;QACL,yBAAyB;QACzB,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC;QACnC,UAAU;QACV,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC;QACpC,YAAY;QACZ,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC;QACtC,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC;KACrC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAmB,EAAE,MAAgC,EAAE,OAAe;IACjG,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QAC1B,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAAC,UAAkB,EAAE,IAAa;IACpE,IAAI,UAAU,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,KAAK,KAAK,WAAW,IAAI,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}