@marifold/service 0.60.0

package/dist/Security.js

@@ -0,0 +1,231 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveSecurityOptions = resolveSecurityOptions;
+exports.registerSecurity = registerSecurity;
+const crypto = __importStar(require("crypto"));
+const net_1 = require("net");
+const path = __importStar(require("path"));
+const core_1 = require("@marifold/core");
+function resolveSecurityOptions(config, overrides = {}) {
+    const configured = config?.tokenEnv ? process.env[config.tokenEnv] : config?.token;
+    const token = overrides.token ?? configured;
+    return {
+        ...(token ? { token } : {}),
+        corsOrigins: overrides.corsOrigins ?? config?.corsOrigins ?? [],
+    };
+}
+const CORS_METHODS = 'GET,POST,PATCH,DELETE,OPTIONS';
+const CORS_HEADERS = 'authorization, content-type, last-event-id';
+const CORS_MAX_AGE = '600';
+/** Host values a default loopback-bound service legitimately sees. */
+const LOOPBACK_HOST = /^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i;
+/** Native EventSource cannot set headers, so the runs event stream may carry
+ * the token as ?access_token=. Fetch-based SSE with the header is preferred. */
+const QUERY_TOKEN_PATHS = /^\/v1\/runs\/[^/]+\/events(\?|$)/;
+/**
+ * One onRequest hook enforcing, in order: the browser origin allowlist (with
+ * preflight short-circuit), a bind-scope Host check, and optional bearer auth.
+ * Runs before route matching, so unknown routes are protected too.
+ */
+function registerSecurity(server, options) {
+    server.addHook('onRequest', async (request, reply) => {
+        if (options.access === 'private' && !isPrivateNetworkAddress(request.ip)) {
+            throw core_1.MarifoldError.networkForbidden(request.ip);
+        }
+        const origin = request.headers.origin;
+        if (typeof origin === 'string' && origin !== '' && !isSameAllowedOrigin(origin, request.headers.host, options)) {
+            if (!options.corsOrigins.includes(origin))
+                throw core_1.MarifoldError.originForbidden(origin);
+            reply.header('Access-Control-Allow-Origin', origin);
+            reply.header('Vary', 'Origin');
+            if (request.method === 'OPTIONS') {
+                await reply
+                    .status(204)
+                    .header('Access-Control-Allow-Methods', CORS_METHODS)
+                    .header('Access-Control-Allow-Headers', CORS_HEADERS)
+                    .header('Access-Control-Max-Age', CORS_MAX_AGE)
+                    .send();
+                return reply;
+            }
+        }
+        const host = request.headers.host;
+        if (typeof host === 'string' && host !== '' && !isAllowedHost(host, options)) {
+            throw core_1.MarifoldError.originForbidden(host);
+        }
+        if (!options.token)
+            return;
+        // Only the stateful API is token-gated: the static Web UI shell (and
+        // /health) must stay reachable — the shell carries no secrets, and every
+        // data route is versioned under /v1. Gate on the NORMALIZED pathname (not
+        // a raw-URL prefix) so variants like //v1/x or /v1/../v1/x can't slip past
+        // the check regardless of how strictly the router matches them.
+        if (!isApiPath(request.url))
+            return;
+        const presented = extractToken(request);
+        if (!presented || !timingSafeEqualString(presented, options.token)) {
+            throw core_1.MarifoldError.unauthorized();
+        }
+    });
+}
+/** True when the request targets the token-gated /v1 API, judged on the
+ * normalized decoded pathname. Undecodable or suspicious paths are treated as
+ * API (gated) — fail closed. Note: deliberately NOT `new URL(url, base)` — a
+ * raw path like `//v1/x` would parse as protocol-relative (host `v1`), hiding
+ * the very prefix this check exists to see. */
+function isApiPath(url) {
+    let pathname = url.split(/[?#]/, 1)[0];
+    try {
+        pathname = decodeURIComponent(pathname);
+    }
+    catch {
+        return true;
+    }
+    if (!pathname.startsWith('/') || pathname.includes('\0') || pathname.includes('\\'))
+        return true;
+    // posix.normalize resolves ./.. segments; a leading `//` is preserved by
+    // POSIX rules, so collapse leading slashes explicitly.
+    const normalized = path.posix.normalize(pathname).replace(/^\/+/, '/');
+    return normalized === '/v1' || normalized.startsWith('/v1/');
+}
+/** The service-hosted app is same-origin whether it was reached through the
+ * default loopback bind or an explicitly authenticated remote bind. */
+function isSameAllowedOrigin(origin, host, options) {
+    if (!host || !isAllowedHost(host, options))
+        return false;
+    return origin === `http://${host}` || origin === `https://${host}`;
+}
+function isAllowedHost(host, options) {
+    if (options.access === 'loopback')
+        return LOOPBACK_HOST.test(host);
+    const hostname = hostnameFromHeader(host);
+    if (!hostname)
+        return false;
+    const normalized = hostname.toLowerCase();
+    return normalized === options.boundHost.toLowerCase()
+        || isPrivateNetworkAddress(normalized)
+        || !normalized.includes('.')
+        || normalized.endsWith('.local')
+        || normalized.endsWith('.ts.net');
+}
+function hostnameFromHeader(host) {
+    try {
+        const hostname = new URL(`http://${host}`).hostname;
+        return hostname.startsWith('[') && hostname.endsWith(']')
+            ? hostname.slice(1, -1)
+            : hostname;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** True for directly connected client ranges intended by private access:
+ * loopback, RFC 1918 LANs, IPv4/IPv6 link-local, IPv6 ULA, and the shared
+ * 100.64/10 range used by Tailscale. X-Forwarded-For is intentionally ignored;
+ * Fastify's direct socket peer is the security boundary. */
+function isPrivateNetworkAddress(address) {
+    const bytes = parseIpAddress(address);
+    if (!bytes)
+        return false;
+    if (bytes.length === 4)
+        return isPrivateIpv4(bytes);
+    const mapped = bytes.slice(0, 10).every(byte => byte === 0)
+        && bytes[10] === 0xff
+        && bytes[11] === 0xff;
+    if (mapped)
+        return isPrivateIpv4(bytes.slice(12));
+    const loopback = bytes.slice(0, 15).every(byte => byte === 0) && bytes[15] === 1;
+    const uniqueLocal = (bytes[0] & 0xfe) === 0xfc;
+    const linkLocal = bytes[0] === 0xfe && (bytes[1] & 0xc0) === 0x80;
+    return loopback || uniqueLocal || linkLocal;
+}
+function isPrivateIpv4(bytes) {
+    return bytes[0] === 10
+        || bytes[0] === 127
+        || (bytes[0] === 169 && bytes[1] === 254)
+        || (bytes[0] === 172 && bytes[1] >= 16 && bytes[1] <= 31)
+        || (bytes[0] === 192 && bytes[1] === 168)
+        || (bytes[0] === 100 && bytes[1] >= 64 && bytes[1] <= 127);
+}
+function parseIpAddress(rawAddress) {
+    const address = rawAddress.split('%', 1)[0];
+    const version = (0, net_1.isIP)(address);
+    if (version === 4)
+        return address.split('.').map(part => Number(part));
+    if (version !== 6)
+        return undefined;
+    let ipv6 = address.toLowerCase();
+    if (ipv6.includes('.')) {
+        const lastColon = ipv6.lastIndexOf(':');
+        const ipv4 = parseIpAddress(ipv6.slice(lastColon + 1));
+        if (!ipv4 || ipv4.length !== 4)
+            return undefined;
+        ipv6 = `${ipv6.slice(0, lastColon)}:${((ipv4[0] << 8) | ipv4[1]).toString(16)}:${((ipv4[2] << 8) | ipv4[3]).toString(16)}`;
+    }
+    const halves = ipv6.split('::');
+    if (halves.length > 2)
+        return undefined;
+    const left = halves[0] ? halves[0].split(':') : [];
+    const right = halves.length === 2 && halves[1] ? halves[1].split(':') : [];
+    const missing = 8 - left.length - right.length;
+    if (missing < 0 || (halves.length === 1 && missing !== 0))
+        return undefined;
+    const words = [...left, ...Array(missing).fill('0'), ...right].map(word => Number.parseInt(word, 16));
+    if (words.length !== 8 || words.some(word => !Number.isInteger(word) || word < 0 || word > 0xffff)) {
+        return undefined;
+    }
+    return words.flatMap(word => [word >> 8, word & 0xff]);
+}
+function extractToken(request) {
+    const header = request.headers.authorization;
+    if (typeof header === 'string' && header.startsWith('Bearer ')) {
+        const token = header.slice('Bearer '.length).trim();
+        if (token)
+            return token;
+    }
+    if (request.method === 'GET' && QUERY_TOKEN_PATHS.test(request.url)) {
+        const url = new URL(request.url, 'http://loopback');
+        return url.searchParams.get('access_token') ?? undefined;
+    }
+    return undefined;
+}
+function timingSafeEqualString(a, b) {
+    const left = Buffer.from(a);
+    const right = Buffer.from(b);
+    if (left.length !== right.length)
+        return false;
+    return crypto.timingSafeEqual(left, right);
+}
+//# sourceMappingURL=Security.js.map

package/dist/Security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Security.js","sourceRoot":"","sources":["../src/Security.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,MAAM,mCAAe;AACjC,6BAA2B;AAC3B,MAAY,IAAI,iCAAa;AAE7B,yCAAsE;AAkBtE,gCACE,MAAyC,EACzC,SAAS,GAA+C,EAAE;IAE1D,MAAM,UAAU,GAAG,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC;IACnF,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,UAAU,CAAC;IAC5C,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,MAAM,EAAE,WAAW,IAAI,EAAE;KAChE,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG,+BAA+B,CAAC;AACrD,MAAM,YAAY,GAAG,4CAA4C,CAAC;AAClE,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,sEAAsE;AACtE,MAAM,aAAa,GAAG,4CAA4C,CAAC;AACnE;gFACgF;AAChF,MAAM,iBAAiB,GAAG,kCAAkC,CAAC;AAE7D;;;;GAIG;AACH,0BAAiC,MAAuB,EAAE,OAA+B;IACvF,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACnD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACzE,MAAM,oBAAa,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/G,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,MAAM,oBAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACvF,KAAK,CAAC,MAAM,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;YACpD,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,KAAK;qBACR,MAAM,CAAC,GAAG,CAAC;qBACX,MAAM,CAAC,8BAA8B,EAAE,YAAY,CAAC;qBACpD,MAAM,CAAC,8BAA8B,EAAE,YAAY,CAAC;qBACpD,MAAM,CAAC,wBAAwB,EAAE,YAAY,CAAC;qBAC9C,IAAI,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YAC7E,MAAM,oBAAa,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,OAAO;QAC3B,qEAAqE;QACrE,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,gEAAgE;QAChE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO;QACpC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACnE,MAAM,oBAAa,CAAC,YAAY,EAAE,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;+CAI+C;AAC/C,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,yEAAyE;IACzE,uDAAuD;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvE,OAAO,UAAU,KAAK,KAAK,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC/D,CAAC;AAED;uEACuE;AACvE,SAAS,mBAAmB,CAC1B,MAAc,EACd,IAAwB,EACxB,OAA+B;IAE/B,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,MAAM,KAAK,UAAU,IAAI,EAAE,IAAI,MAAM,KAAK,WAAW,IAAI,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,OAA+B;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEnE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,UAAU,KAAK,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;WAChD,uBAAuB,CAAC,UAAU,CAAC;WACnC,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;WACzB,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;WAC7B,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC;QACpD,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YACvD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACvB,CAAC,CAAC,QAAQ,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;4DAG4D;AAC5D,SAAS,uBAAuB,CAAC,OAAe;IAC9C,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;IAEpD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;WACtD,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI;WAClB,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC;IACxB,IAAI,MAAM;QAAE,OAAO,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACjF,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC;IAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC;IAClE,OAAO,QAAQ,IAAI,WAAW,IAAI,SAAS,CAAC;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,KAAe;IACpC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE;WACjB,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;WAChB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;WACtC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;WACtD,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;WACtC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAA,UAAI,EAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEpC,IAAI,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACjD,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IAC7H,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/C,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACtG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC;QACnG,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,OAAuB;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACpD,OAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;IAC3D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAS,EAAE,CAAS;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC"}

package/dist/Sse.d.ts

@@ -0,0 +1,17 @@
+import { FastifyReply } from 'fastify';
+/** Response headers for a server-sent-event stream over a hijacked reply. */
+export declare const SSE_HEADERS: {
+    readonly 'Content-Type': 'text/event-stream; charset=utf-8';
+    readonly 'Cache-Control': 'no-cache, no-transform';
+    readonly Connection: 'keep-alive';
+    readonly 'X-Accel-Buffering': 'no';
+};
+/** Write one SSE frame. `id` (when given) becomes the frame's `id:` field so
+ * EventSource reconnects report it back via the Last-Event-ID header. */
+export declare function writeSse(reply: FastifyReply, event: string, data: unknown, id?: number): void;
+/** Suggest a client reconnect delay (EventSource honors `retry:`). */
+export declare function writeSseRetry(reply: FastifyReply, delayMs: number): void;
+/** Periodic comment frames so idle streams keep proxies and clients from
+ * timing out the connection. Returns the stop function; call it on close. */
+export declare function startSseHeartbeat(reply: FastifyReply, intervalMs?: number): () => void;
+//# sourceMappingURL=Sse.d.ts.map

package/dist/Sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sse.d.ts","sourceRoot":"","sources":["../src/Sse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,6EAA6E;AAC7E,eAAO,MAAM,WAAW;aACtB,cAAc,EAAE,kCAAkC;aAClD,eAAe,EAAE,wBAAwB;aACzC,UAAU,EAAE,YAAY;aAExB,mBAAmB,EAAE,IAAI;CACjB,CAAC;AAIX;yEACyE;AACzE,wBAAgB,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAI7F;AAED,sEAAsE;AACtE,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAExE;AAED;6EAC6E;AAC7E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,SAAwB,GAAG,MAAM,IAAI,CAMrG"}

package/dist/Sse.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SSE_HEADERS = void 0;
+exports.writeSse = writeSse;
+exports.writeSseRetry = writeSseRetry;
+exports.startSseHeartbeat = startSseHeartbeat;
+/** Response headers for a server-sent-event stream over a hijacked reply. */
+exports.SSE_HEADERS = {
+    'Content-Type': 'text/event-stream; charset=utf-8',
+    'Cache-Control': 'no-cache, no-transform',
+    Connection: 'keep-alive',
+    // Tells buffering reverse proxies (nginx) to pass frames through untouched.
+    'X-Accel-Buffering': 'no',
+};
+const HEARTBEAT_INTERVAL_MS = 15_000;
+/** Write one SSE frame. `id` (when given) becomes the frame's `id:` field so
+ * EventSource reconnects report it back via the Last-Event-ID header. */
+function writeSse(reply, event, data, id) {
+    if (id !== undefined)
+        reply.raw.write(`id: ${id}\n`);
+    reply.raw.write(`event: ${event}\n`);
+    reply.raw.write(`data: ${JSON.stringify(data)}\n\n`);
+}
+/** Suggest a client reconnect delay (EventSource honors `retry:`). */
+function writeSseRetry(reply, delayMs) {
+    reply.raw.write(`retry: ${delayMs}\n\n`);
+}
+/** Periodic comment frames so idle streams keep proxies and clients from
+ * timing out the connection. Returns the stop function; call it on close. */
+function startSseHeartbeat(reply, intervalMs = HEARTBEAT_INTERVAL_MS) {
+    const timer = setInterval(() => {
+        reply.raw.write(': ping\n\n');
+    }, intervalMs);
+    timer.unref?.();
+    return () => clearInterval(timer);
+}
+//# sourceMappingURL=Sse.js.map

package/dist/Sse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sse.js","sourceRoot":"","sources":["../src/Sse.ts"],"names":[],"mappings":";;;;;;AAEA,6EAA6E;AAChE,QAAA,WAAW,GAAG;IACzB,cAAc,EAAE,kCAAkC;IAClD,eAAe,EAAE,wBAAwB;IACzC,UAAU,EAAE,YAAY;IACxB,4EAA4E;IAC5E,mBAAmB,EAAE,IAAI;CACjB,CAAC;AAEX,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC;yEACyE;AACzE,kBAAyB,KAAmB,EAAE,KAAa,EAAE,IAAa,EAAE,EAAW;IACrF,IAAI,EAAE,KAAK,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;IACrC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,sEAAsE;AACtE,uBAA8B,KAAmB,EAAE,OAAe;IAChE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,OAAO,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED;6EAC6E;AAC7E,2BAAkC,KAAmB,EAAE,UAAU,GAAG,qBAAqB;IACvF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC,EAAE,UAAU,CAAC,CAAC;IACf,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC"}

package/dist/StaticRoutes.d.ts

@@ -0,0 +1,16 @@
+import { FastifyInstance } from 'fastify';
+/** Resolve the Web bundle staged beside the compiled service entrypoints. */
+export declare function resolveBundledWebDir(moduleDir?: string): string | undefined;
+/**
+ * Host a built single-page Web UI from `webDir` (hand-rolled on purpose —
+ * zero-plugin house style, and the SPA/JSON-404 coordination is easier owned
+ * than configured):
+ *
+ * - `/v1/*` and `/health` fall through to the JSON 404 handler untouched.
+ * - Real files stream with their content type; Vite's content-hashed
+ *   `/assets/*` get immutable caching, everything else no-cache.
+ * - Extensionless misses serve index.html (SPA fallback for clean deep links).
+ * - Paths resolving outside `webDir` are rejected (traversal guard).
+ */
+export declare function registerStaticRoutes(server: FastifyInstance, webDir: string): void;
+//# sourceMappingURL=StaticRoutes.d.ts.map

package/dist/StaticRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StaticRoutes.d.ts","sourceRoot":"","sources":["../src/StaticRoutes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAqBxD,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAAC,SAAS,SAAY,GAAG,MAAM,GAAG,SAAS,CAO9E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAuBlF"}

package/dist/StaticRoutes.js

@@ -0,0 +1,145 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveBundledWebDir = resolveBundledWebDir;
+exports.registerStaticRoutes = registerStaticRoutes;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const CONTENT_TYPES = {
+    '.html': 'text/html; charset=utf-8',
+    '.js': 'text/javascript; charset=utf-8',
+    '.mjs': 'text/javascript; charset=utf-8',
+    '.css': 'text/css; charset=utf-8',
+    '.json': 'application/json; charset=utf-8',
+    '.map': 'application/json; charset=utf-8',
+    '.svg': 'image/svg+xml',
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.webp': 'image/webp',
+    '.gif': 'image/gif',
+    '.ico': 'image/x-icon',
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2',
+    '.txt': 'text/plain; charset=utf-8',
+};
+/** Resolve the Web bundle staged beside the compiled service entrypoints. */
+function resolveBundledWebDir(moduleDir = __dirname) {
+    const candidate = path.join(moduleDir, 'web');
+    try {
+        return fs.statSync(path.join(candidate, 'index.html')).isFile() ? candidate : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Host a built single-page Web UI from `webDir` (hand-rolled on purpose —
+ * zero-plugin house style, and the SPA/JSON-404 coordination is easier owned
+ * than configured):
+ *
+ * - `/v1/*` and `/health` fall through to the JSON 404 handler untouched.
+ * - Real files stream with their content type; Vite's content-hashed
+ *   `/assets/*` get immutable caching, everything else no-cache.
+ * - Extensionless misses serve index.html (SPA fallback for clean deep links).
+ * - Paths resolving outside `webDir` are rejected (traversal guard).
+ */
+function registerStaticRoutes(server, webDir) {
+    const root = path.resolve(webDir);
+    server.get('/*', async (request, reply) => {
+        const pathname = decodePathname(request.url);
+        if (pathname === undefined)
+            return notFound(reply);
+        if (pathname === '/health' || pathname === '/v1' || pathname.startsWith('/v1/')) {
+            return notFound(reply);
+        }
+        const resolved = path.resolve(root, `.${path.posix.normalize(pathname)}`);
+        if (resolved !== root && !resolved.startsWith(root + path.sep))
+            return notFound(reply);
+        const filePath = await resolveFile(resolved);
+        if (filePath)
+            return sendFile(reply, filePath, pathname);
+        // SPA fallback: routes without an extension are app views.
+        if (path.posix.extname(pathname) === '') {
+            const index = await resolveFile(path.join(root, 'index.html'));
+            if (index)
+                return sendFile(reply, index, '/index.html');
+        }
+        return notFound(reply);
+    });
+}
+function decodePathname(url) {
+    try {
+        const pathname = new URL(url, 'http://loopback').pathname;
+        const decoded = decodeURIComponent(pathname);
+        // Encoded separators or null bytes have no legitimate use here.
+        if (decoded.includes('\0') || decoded.includes('\\'))
+            return undefined;
+        return decoded;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function resolveFile(candidate) {
+    try {
+        const stat = await fs.promises.stat(candidate);
+        if (stat.isFile())
+            return candidate;
+        if (stat.isDirectory()) {
+            const index = path.join(candidate, 'index.html');
+            const indexStat = await fs.promises.stat(index).catch(() => undefined);
+            if (indexStat?.isFile())
+                return index;
+        }
+    }
+    catch {
+        // Missing — the caller decides between SPA fallback and 404.
+    }
+    return undefined;
+}
+function sendFile(reply, filePath, pathname) {
+    const type = CONTENT_TYPES[path.extname(filePath).toLowerCase()] ?? 'application/octet-stream';
+    const immutable = pathname.startsWith('/assets/');
+    return reply
+        .header('content-type', type)
+        .header('cache-control', immutable ? 'public, max-age=31536000, immutable' : 'no-cache')
+        .send(fs.createReadStream(filePath));
+}
+function notFound(reply) {
+    reply.callNotFound();
+    return reply;
+}
+//# sourceMappingURL=StaticRoutes.js.map

package/dist/StaticRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StaticRoutes.js","sourceRoot":"","sources":["../src/StaticRoutes.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,EAAE,+BAAW;AACzB,MAAY,IAAI,iCAAa;AAG7B,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,iCAAiC;IACzC,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,2BAA2B;CACpC,CAAC;AAEF,6EAA6E;AAC7E,8BAAqC,SAAS,GAAG,SAAS;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,8BAAqC,MAAuB,EAAE,MAAc;IAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAElC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAChF,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEvF,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAEzD,2DAA2D;QAC3D,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;YAC/D,IAAI,KAAK;gBAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC;QAC1D,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC7C,gEAAgE;QAChE,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACvE,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,SAAiB;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,SAAS,CAAC;QACpC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACjD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACvE,IAAI,SAAS,EAAE,MAAM,EAAE;gBAAE,OAAO,KAAK,CAAC;QACxC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAmB,EAAE,QAAgB,EAAE,QAAgB;IACvE,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;IAC/F,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAClD,OAAO,KAAK;SACT,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC;SAC5B,MAAM,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,UAAU,CAAC;SACvF,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAmB;IACnC,KAAK,CAAC,YAAY,EAAE,CAAC;IACrB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/Validation.d.ts

@@ -0,0 +1,19 @@
+import { ImageInput, RunFileInput } from '@marifold/core';
+export type JsonObject = Record<string, unknown>;
+export declare function objectBody(value: unknown): JsonObject;
+export declare function requiredString(value: unknown, label: string): string;
+export declare function stringValue(value: unknown, label: string): string;
+export declare function optionalStringField<Key extends string>(key: Key, value: unknown): Record<Key, string> | Record<string, never>;
+export declare function optionalBooleanField<Key extends string>(key: Key, value: unknown): Record<Key, boolean> | Record<string, never>;
+export declare function optionalPositiveIntegerField<Key extends string>(key: Key, value: unknown): Record<Key, number> | Record<string, never>;
+export declare function optionalNonNegativeIntegerField<Key extends string>(key: Key, value: unknown): Record<Key, number> | Record<string, never>;
+export declare function stringArray(value: unknown, label: string): string[];
+export declare function optionalImagesField(value: unknown): {
+    images: ImageInput[];
+} | Record<string, never>;
+/** Binary run inputs are base64 JSON because the service remains a compact
+ * loopback API. Core stages them into the run's read-only input directory. */
+export declare function optionalRunFilesField(value: unknown): {
+    files: RunFileInput[];
+} | Record<string, never>;
+//# sourceMappingURL=Validation.d.ts.map

package/dist/Validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Validation.d.ts","sourceRoot":"","sources":["../src/Validation.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EAIV,YAAY,EACb,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjD,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAGrD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAIpE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGjE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,SAAS,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAG7H;AAED,wBAAgB,oBAAoB,CAAC,GAAG,SAAS,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAI/H;AAED,wBAAgB,4BAA4B,CAAC,GAAG,SAAS,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAMtI;AAED,wBAAgB,+BAA+B,CAAC,GAAG,SAAS,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAMzI;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAGnE;AAID,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,MAAM,EAAE,UAAU,EAAE,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAoBpG;AAED;8EAC8E;AAC9E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,YAAY,EAAE,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAiCvG"}

package/dist/Validation.js

@@ -0,0 +1,125 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.objectBody = objectBody;
+exports.requiredString = requiredString;
+exports.stringValue = stringValue;
+exports.optionalStringField = optionalStringField;
+exports.optionalBooleanField = optionalBooleanField;
+exports.optionalPositiveIntegerField = optionalPositiveIntegerField;
+exports.optionalNonNegativeIntegerField = optionalNonNegativeIntegerField;
+exports.stringArray = stringArray;
+exports.optionalImagesField = optionalImagesField;
+exports.optionalRunFilesField = optionalRunFilesField;
+const core_1 = require("@marifold/core");
+function objectBody(value) {
+    if (typeof value === 'object' && value !== null && !Array.isArray(value))
+        return value;
+    throw core_1.MarifoldError.configInvalid('Expected a JSON object request body.');
+}
+function requiredString(value, label) {
+    const text = stringValue(value, label);
+    if (!text.trim())
+        throw core_1.MarifoldError.configInvalid(`${label} cannot be empty.`);
+    return text;
+}
+function stringValue(value, label) {
+    if (typeof value !== 'string')
+        throw core_1.MarifoldError.configInvalid(`${label} must be a string.`);
+    return value;
+}
+function optionalStringField(key, value) {
+    if (value === undefined)
+        return {};
+    return { [key]: stringValue(value, key) };
+}
+function optionalBooleanField(key, value) {
+    if (value === undefined)
+        return {};
+    if (typeof value !== 'boolean')
+        throw core_1.MarifoldError.configInvalid(`${key} must be a boolean.`);
+    return { [key]: value };
+}
+function optionalPositiveIntegerField(key, value) {
+    if (value === undefined)
+        return {};
+    if (typeof value !== 'number' || !Number.isInteger(value) || value <= 0) {
+        throw core_1.MarifoldError.configInvalid(`${key} must be a positive integer.`);
+    }
+    return { [key]: value };
+}
+function optionalNonNegativeIntegerField(key, value) {
+    if (value === undefined)
+        return {};
+    if (typeof value !== 'number' || !Number.isInteger(value) || value < 0) {
+        throw core_1.MarifoldError.configInvalid(`${key} must be a non-negative integer.`);
+    }
+    return { [key]: value };
+}
+function stringArray(value, label) {
+    if (!Array.isArray(value))
+        throw core_1.MarifoldError.configInvalid(`${label} must be an array of strings.`);
+    return value.map((item, index) => stringValue(item, `${label}[${index}]`));
+}
+// App clients send images as base64 payloads ({data, mediaType}) or URLs;
+// local file paths are not accepted over the service boundary.
+function optionalImagesField(value) {
+    if (value === undefined)
+        return {};
+    if (!Array.isArray(value))
+        throw core_1.MarifoldError.configInvalid('Expected images to be an array.');
+    const images = value.map((item, index) => {
+        if (typeof item !== 'object' || item === null || Array.isArray(item)) {
+            throw core_1.MarifoldError.configInvalid(`Expected images[${index}] to be an object.`);
+        }
+        const image = item;
+        const data = typeof image.data === 'string' && image.data ? image.data : undefined;
+        const url = typeof image.url === 'string' && image.url ? image.url : undefined;
+        if ((data === undefined) === (url === undefined)) {
+            throw core_1.MarifoldError.configInvalid(`Expected images[${index}] to set exactly one of data or url.`);
+        }
+        return {
+            ...(data !== undefined ? { data } : {}),
+            ...(url !== undefined ? { url } : {}),
+            ...(typeof image.mediaType === 'string' && image.mediaType ? { mediaType: image.mediaType } : {}),
+        };
+    });
+    return { images };
+}
+/** Binary run inputs are base64 JSON because the service remains a compact
+ * loopback API. Core stages them into the run's read-only input directory. */
+function optionalRunFilesField(value) {
+    if (value === undefined)
+        return {};
+    if (!Array.isArray(value))
+        throw core_1.MarifoldError.configInvalid('Expected files to be an array.');
+    let total = 0;
+    const files = value.map((item, index) => {
+        if (typeof item !== 'object' || item === null || Array.isArray(item)) {
+            throw core_1.MarifoldError.configInvalid(`Expected files[${index}] to be an object.`);
+        }
+        const file = item;
+        const name = requiredString(file.name, `files[${index}].name`);
+        const mediaType = requiredString(file.mediaType, `files[${index}].mediaType`);
+        const data = requiredString(file.data, `files[${index}].data`);
+        if (!/^[A-Za-z0-9+/]*={0,2}$/.test(data) || data.length % 4 === 1) {
+            throw core_1.MarifoldError.configInvalid(`files[${index}].data must be base64.`);
+        }
+        const size = Buffer.from(data, 'base64').length;
+        if (size === 0)
+            throw core_1.MarifoldError.configInvalid(`files[${index}].data cannot be empty.`);
+        total += size;
+        if (total > core_1.MAX_RUN_INPUT_BYTES) {
+            throw core_1.MarifoldError.configInvalid(`Run files exceed ${core_1.MAX_RUN_INPUT_BYTES / (1024 * 1024)} MiB.`);
+        }
+        let inspectionText;
+        if (file.inspectionText !== undefined) {
+            inspectionText = stringValue(file.inspectionText, `files[${index}].inspectionText`);
+            if (Buffer.byteLength(inspectionText, 'utf8') > core_1.MAX_RUN_INSPECTION_TEXT_BYTES) {
+                throw core_1.MarifoldError.configInvalid(`files[${index}].inspectionText exceeds ${core_1.MAX_RUN_INSPECTION_TEXT_BYTES / 1024} KiB.`);
+            }
+        }
+        return { name, mediaType, data, ...(inspectionText !== undefined ? { inspectionText } : {}) };
+    });
+    return { files };
+}
+//# sourceMappingURL=Validation.js.map

package/dist/Validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Validation.js","sourceRoot":"","sources":["../src/Validation.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yCAMwB;AAIxB,oBAA2B,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAmB,CAAC;IACrG,MAAM,oBAAa,CAAC,aAAa,CAAC,sCAAsC,CAAC,CAAC;AAC5E,CAAC;AAED,wBAA+B,KAAc,EAAE,KAAa;IAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,oBAAa,CAAC,aAAa,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACjF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qBAA4B,KAAc,EAAE,KAAa;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,oBAAa,CAAC,aAAa,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6BAAwD,GAAQ,EAAE,KAAc;IAC9E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,EAAyB,CAAC;AACnE,CAAC;AAED,8BAAyD,GAAQ,EAAE,KAAc;IAC/E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,MAAM,oBAAa,CAAC,aAAa,CAAC,GAAG,GAAG,qBAAqB,CAAC,CAAC;IAC/F,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAA0B,CAAC;AAClD,CAAC;AAED,sCAAiE,GAAQ,EAAE,KAAc;IACvF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACxE,MAAM,oBAAa,CAAC,aAAa,CAAC,GAAG,GAAG,8BAA8B,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAyB,CAAC;AACjD,CAAC;AAED,yCAAoE,GAAQ,EAAE,KAAc;IAC1F,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACvE,MAAM,oBAAa,CAAC,aAAa,CAAC,GAAG,GAAG,kCAAkC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAyB,CAAC;AACjD,CAAC;AAED,qBAA4B,KAAc,EAAE,KAAa;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,oBAAa,CAAC,aAAa,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;IACtG,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,0EAA0E;AAC1E,+DAA+D;AAC/D,6BAAoC,KAAc;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,oBAAa,CAAC,aAAa,CAAC,iCAAiC,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,oBAAa,CAAC,aAAa,CAAC,mBAAmB,KAAK,oBAAoB,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,KAAK,GAAG,IAA8D,CAAC;QAC7E,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/E,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;YACjD,MAAM,oBAAa,CAAC,aAAa,CAAC,mBAAmB,KAAK,sCAAsC,CAAC,CAAC;QACpG,CAAC;QACD,OAAO;YACL,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClG,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAED;8EAC8E;AAC9E,+BAAsC,KAAc;IAClD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,oBAAa,CAAC,aAAa,CAAC,gCAAgC,CAAC,CAAC;IAC/F,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,oBAAa,CAAC,aAAa,CAAC,kBAAkB,KAAK,oBAAoB,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,IAAI,GAAG,IAAyF,CAAC;QACvG,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,KAAK,aAAa,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,oBAAa,CAAC,aAAa,CAAC,SAAS,KAAK,wBAAwB,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC;QAChD,IAAI,IAAI,KAAK,CAAC;YAAE,MAAM,oBAAa,CAAC,aAAa,CAAC,SAAS,KAAK,yBAAyB,CAAC,CAAC;QAC3F,KAAK,IAAI,IAAI,CAAC;QACd,IAAI,KAAK,GAAG,0BAAmB,EAAE,CAAC;YAChC,MAAM,oBAAa,CAAC,aAAa,CAAC,oBAAoB,0BAAmB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,cAAkC,CAAC;QACvC,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,KAAK,kBAAkB,CAAC,CAAC;YACpF,IAAI,MAAM,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,oCAA6B,EAAE,CAAC;gBAC9E,MAAM,oBAAa,CAAC,aAAa,CAC/B,SAAS,KAAK,4BAA4B,oCAA6B,GAAG,IAAI,OAAO,CACtF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAChG,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC"}