@nifrajs/web 3.3.0 → 4.0.0

package/dist/plugins/vite-leak-guard.js

@@ -1,5 +1,5 @@
 /**
- * `@nifrajs/web/plugins/vite-leak-guard` - nifra's two client-leak guards, for a Vite/Rollup production
+ * `@nifrajs/web/plugins/vite-leak-guard` - nifra's client-leak guards, for a Vite/Rollup production
  * build.
  *
  * ## Why this exists
@@ -12,9 +12,9 @@
  * pipeline arriving WITHOUT them, or with a hastily re-implemented "mostly ported" copy, is the failure the
  * neutral module-graph seam was built to prevent.
  *
- * So this is not a second implementation. The detection logic (`detectNodeBuiltinsInClient`,
- * `detectServerOnlyInClient`) and the failure MESSAGES (`formatNodeBuiltinLeak`, `formatServerOnlyLeak`)
- * are the exact same functions the Bun build calls. This plugin only adapts Rollup's bundle shape into the
+ * So this is not a second implementation. The zone verification (`verifyClientGraph`,
+ * `accountEmittedFiles`), the `node:` and `backend-only` detectors and their failure MESSAGES are the
+ * exact same functions the Bun build calls. This plugin only adapts Rollup's bundle shape into the
  * neutral `ClientModuleGraph` (`fromRollupBundle`) and runs them. A leak reads identically whichever
  * bundler produced it, and there is one place to change if a guard changes.
  *
@@ -25,22 +25,42 @@
  * `fromRollupBundle` needs. Findings fail the build through Rollup's `this.error`, so the message lands in
  * the build output the same way a Bun-build throw does.
  *
- * Add it to the `plugins` of a Vite production build (the LAST plugin, so it sees the final graph):
+ * Add it to the `plugins` of a Vite production build (the LAST plugin, so it sees the final graph),
+ * with `viteBareBuiltinExternal()` first so a bare built-in such as `fs/promises` stays named:
  *
  *   // vite.config.ts (production client build)
- *   import { viteLeakGuard } from "@nifrajs/web/plugins/vite-leak-guard"
- *   export default { build: { rollupOptions: { plugins: [viteLeakGuard()] } } }
+ *   import { viteBareBuiltinExternal, viteLeakGuard } from "@nifrajs/web/plugins/vite-leak-guard"
+ *   export default {
+ *     plugins: [viteBareBuiltinExternal(), viteAssetUrlGuard({ appRoot: import.meta.dirname })],
+ *     build: {
+ *       rollupOptions: { external: [/^node:/], plugins: [viteLeakGuard({ appRoot: import.meta.dirname })] },
+ *     },
+ *   }
  */
-import { detectNodeBuiltinsInClient, detectServerOnlyInClient, formatNodeBuiltinLeak, formatServerOnlyLeak, } from "../build.js";
-import { fromRollupBundle } from "../module-graph.js";
+import { existsSync, statSync } from "node:fs";
+import { dirname, isAbsolute, relative, resolve } from "node:path";
+import { detectNodeBuiltinsInClient, detectServerOnlyInClient, formatNodeBuiltinLeak, formatServerOnlyLeak, } from "../build-plan.js";
+import { isBareNodeBuiltin } from "../internal/node-builtins.js";
+import { privateEnvCheck } from "../internal/private-env.js";
+import { emittedScanFiles, formatSecretFindings, graphScanInput, originName, publicScanFiles, scanForSecrets, textOf, } from "../internal/secret-scan.js";
+import { accountEmittedFiles, assetDenial, formatClientGraphVerdict, formatServerGraphVerdict, formatUnaccountedOutput, rollupModuleSource, verifyClientGraph, verifyServerGraph, } from "../internal/zone-graph.js";
+import { fromRollupBundle, } from "../module-graph.js";
+import { createZoneClassifier } from "../zones.js";
+const CSS_FILE = /\.(?:css|scss|sass|less|styl)(?:$|\?)/;
 /**
- * A Vite/Rollup plugin that fails the build when server-only code or a `node:` builtin reaches the client
- * bundle - the same two guards, and the same error messages, as nifra's Bun production build.
+ * A Vite/Rollup plugin that fails the build when anything the zones keep on the server reaches the client
+ * bundle, with the same checks and messages as nifra's Bun build: every module classified, the graph
+ * evidence complete, every emitted file traced back to it, and the `node:` and `backend-only` guards.
+ * It runs in `generateBundle`, before Rollup writes a byte.
  */
-export function viteLeakGuard() {
+export function viteLeakGuard(options = {}) {
+    const appRoot = resolve(options.appRoot ?? process.cwd());
+    const root = resolve(options.root ?? appRoot);
+    const outDir = resolve(root, options.outDir ?? "dist");
     const plugin = {
         name: "nifra:leak-guard",
         generateBundle(_options, bundle) {
+            const classifier = classifierFor(appRoot, options);
             // Resolved import edges per module, straight from Rollup's graph. Dynamic imports count too: a
             // `node:`/server-only module reached only via `import()` still ships to the browser.
             const importsOf = (id) => {
@@ -49,11 +69,22 @@ export function viteLeakGuard() {
                     return [];
                 return [...(info.importedIds ?? []), ...(info.dynamicallyImportedIds ?? [])];
             };
-            const graph = fromRollupBundle(bundle, importsOf);
-            // Node-builtin guard first, then server-only - the same order as the Bun build, so the first error a
-            // dev sees is the same across pipelines when a module trips both.
-            const leak = formatNodeBuiltinLeak(detectNodeBuiltinsInClient(graph)) ??
-                formatServerOnlyLeak(detectServerOnlyInClient(graph));
+            const graph = completeGraph(fromRollupBundle(bundle, importsOf), this, importsOf);
+            const sources = { classifier, sourceOf: rollupModuleSource };
+            const privateEnv = privateEnvCheck(options.publicEnvPrefix ?? "PUBLIC_");
+            const outputs = Object.values(bundle);
+            for (const output of outputs) {
+                if (output.type !== "asset" && output.fileName !== undefined)
+                    options.verified?.add(output.fileName);
+            }
+            const leak = formatClientGraphVerdict(verifyClientGraph(graph, { ...sources, privateEnv })) ??
+                formatNodeBuiltinLeak(detectNodeBuiltinsInClient(graph)) ??
+                formatServerOnlyLeak(detectServerOnlyInClient(graph)) ??
+                formatUnaccountedOutput(accountEmittedFiles(emittedFiles(outputs, graph, root, options.verified), graph, {
+                    ...sources,
+                    outDir,
+                })) ??
+                secretLeak(outputs, graph, classifier, appRoot, options);
             if (leak === undefined)
                 return;
             // Record before throwing: the throw is what fails the build for a standalone user of this plugin,
@@ -64,4 +95,334 @@ export function viteLeakGuard() {
     };
     return plugin;
 }
+/** The secret scan over a finished bundle and the `public/` files that ship beside it. */
+function secretLeak(outputs, graph, classifier, appRoot, options) {
+    const { sources, originsOf } = graphScanInput(graph, rollupModuleSource, classifier);
+    const artifacts = [];
+    for (const output of outputs) {
+        const name = output.fileName;
+        if (name === undefined || name.startsWith(".vite/"))
+            continue;
+        if (output.type === "chunk") {
+            artifacts.push(...emittedScanFiles(name, output.code ?? "", originsOf(name)));
+            if (output.map)
+                artifacts.push({ name: `${name}.map`, text: JSON.stringify(output.map) });
+            continue;
+        }
+        const text = typeof output.source === "string"
+            ? output.source
+            : output.source === undefined
+                ? undefined
+                : textOf(output.source);
+        if (text !== undefined)
+            artifacts.push({ name, text });
+    }
+    const publicDir = options.secrets?.publicDir;
+    if (publicDir !== undefined && existsSync(publicDir)) {
+        artifacts.push(...publicScanFiles(publicDir, originName(appRoot, resolve(publicDir))));
+    }
+    return formatSecretFindings(scanForSecrets({
+        sources,
+        artifacts,
+        env: options.secrets?.env ?? process.env,
+        publicEnvPrefix: options.publicEnvPrefix ?? "PUBLIC_",
+        ...(options.secrets?.exemptions ? { exemptions: options.secrets.exemptions } : {}),
+    }));
+}
+/**
+ * The server build's half of the zone rules, with the same checks and message as nifra's Bun server
+ * build: every first-party module zoned, backend code never importing frontend code, shared code
+ * importing only shared code. It records the refusal in `leak` for the same reason the client guard
+ * does.
+ */
+export function viteServerZoneGuard(options = {}) {
+    const appRoot = resolve(options.appRoot ?? process.cwd());
+    const plugin = {
+        name: "nifra:server-zone-guard",
+        generateBundle(_options, bundle) {
+            const classifier = classifierFor(appRoot, options);
+            const importsOf = (id) => {
+                const info = this.getModuleInfo(id);
+                if (info === null)
+                    return [];
+                return [...(info.importedIds ?? []), ...(info.dynamicallyImportedIds ?? [])];
+            };
+            const graph = completeGraph(fromRollupBundle(bundle, importsOf), this, importsOf);
+            const leak = formatServerGraphVerdict(verifyServerGraph(graph, {
+                classifier,
+                sourceOf: rollupModuleSource,
+                privateEnv: privateEnvCheck(options.publicEnvPrefix ?? "PUBLIC_"),
+            }));
+            if (leak === undefined)
+                return;
+            plugin.leak = leak;
+            this.error(new Error(leak));
+        },
+    };
+    return plugin;
+}
+/** The zone classifier for the app `options` names. */
+function classifierFor(appRoot, options) {
+    return createZoneClassifier({
+        appRoot,
+        ...(options.routesDir !== undefined ? { routesDir: options.routesDir } : {}),
+        ...(options.generatedFiles !== undefined ? { generatedFiles: options.generatedFiles } : {}),
+    });
+}
+/**
+ * The chunk graph plus every module the build loaded but tree-shook out of every chunk, with external
+ * edges marked: an import the bundle left external is evidence the graph has to account for.
+ */
+function completeGraph(graph, context, importsOf) {
+    const external = (id) => context.getModuleInfo(id)?.isExternal === true;
+    const modules = {};
+    for (const [id, module] of Object.entries(graph.modules)) {
+        modules[id] = {
+            imports: module.imports.map((im) => im.path !== undefined && !im.path.startsWith("node:") && external(im.path)
+                ? { ...im, external: true }
+                : im),
+        };
+    }
+    for (const id of context.getModuleIds?.() ?? []) {
+        if (modules[id] !== undefined || external(id))
+            continue;
+        modules[id] = {
+            imports: importsOf(id).map((path) => (external(path) ? { path, external: true } : { path })),
+        };
+    }
+    return { modules, chunks: graph.chunks };
+}
+/** Every file in the bundle, with what it claims to come from. */
+function emittedFiles(outputs, graph, root, verified) {
+    const fromRoot = (name) => (isAbsolute(name) ? name : resolve(root, name));
+    const moduleFiles = (ids) => ids.flatMap((id) => {
+        const source = rollupModuleSource(id);
+        return source.kind === "builtin" || source.file === undefined ? [] : [source.file];
+    });
+    const referencedBy = new Map();
+    for (const output of outputs) {
+        if (output.type !== "chunk")
+            continue;
+        for (const name of [
+            ...(output.viteMetadata?.importedCss ?? []),
+            ...(output.viteMetadata?.importedAssets ?? []),
+        ]) {
+            referencedBy.set(name, [
+                ...(referencedBy.get(name) ?? []),
+                ...moduleFiles(output.moduleIds ?? []),
+            ]);
+        }
+    }
+    const cssModules = moduleFiles(Object.keys(graph.modules).filter((id) => CSS_FILE.test(id)));
+    const files = [];
+    for (const output of outputs) {
+        const name = output.fileName;
+        // Vite's own bookkeeping (`.vite/manifest.json`); nifra deletes it before anything is deployed.
+        if (name === undefined || name.startsWith(".vite/"))
+            continue;
+        if (output.type === "chunk") {
+            files.push({ name, kind: "code", text: output.code ?? "" });
+            if (output.map)
+                files.push({ name: `${name}.map`, kind: "map", text: JSON.stringify(output.map) });
+            continue;
+        }
+        const text = typeof output.source === "string" ? output.source : undefined;
+        if (name.endsWith(".map")) {
+            files.push({ name, kind: "map", ...(text !== undefined ? { text } : {}) });
+            continue;
+        }
+        if (verified?.has(name))
+            continue;
+        // Vite names a synthesized asset (the `cssCodeSplit: false` aggregate is `style.css`) after no
+        // real file; only names that exist are evidence.
+        const original = (output.originalFileNames ?? [])
+            .map(fromRoot)
+            .filter((file) => existsSync(file));
+        const referenced = referencedBy.get(name) ?? [];
+        const sources = original.length > 0
+            ? original
+            : referenced.length > 0
+                ? referenced
+                : name.endsWith(".css")
+                    ? cssModules
+                    : [];
+        files.push({ name, kind: "asset", sources });
+    }
+    return files;
+}
+/**
+ * Keep a bare Node built-in (`fs/promises`, `path`) visible to {@link viteLeakGuard}. Vite resolves a
+ * bare built-in that is not an installed package to one shared `__vite-browser-external` stub: the
+ * import builds, does nothing in the browser, and no longer names the module. This plugin externalizes
+ * it as `node:<name>` instead, so the guard fails the build naming it, as the Bun build does. A package
+ * of the same name the app installed (`events`, `buffer`) still resolves to that package.
+ */
+export function viteBareBuiltinExternal() {
+    return {
+        name: "nifra:bare-builtin-external",
+        enforce: "pre",
+        async resolveId(source, importer) {
+            if (!isBareNodeBuiltin(source))
+                return null;
+            const resolved = await this.resolve(source, importer, { skipSelf: true });
+            if (resolved !== null && !resolved.id.startsWith("__vite-browser-external"))
+                return resolved;
+            return { id: `node:${source}`, external: true };
+        },
+    };
+}
+const POSTFIX = /[?#].*$/s;
+const URL_SCHEME = /^(?:[a-z][a-z\d+.-]*:|\/\/)/i;
+/**
+ * Keep server files out of a Vite client build's assets. A `new URL("./x", import.meta.url)` makes
+ * Vite copy the file it names into the output, or inline it into the chunk as a `data:` URL when it is
+ * small - no module and no import edge, so {@link viteLeakGuard}'s graph never sees it. This refuses a
+ * reference whose file the zones keep off the browser (backend code, a route's backend half, a server
+ * function's source, a file in no zone), and stops Vite inlining such a file anywhere else (a
+ * stylesheet's `url()`), so it is emitted where the leak guard's output accounting names it.
+ *
+ * Add it to the top-level `plugins`, after any framework plugin: it reads each module once that
+ * module is JavaScript, before Vite resolves the references.
+ */
+export function viteAssetUrlGuard(options = {}) {
+    const appRoot = resolve(options.appRoot ?? process.cwd());
+    let classifier;
+    const denial = (file) => {
+        classifier ??= classifierFor(appRoot, options);
+        return assetDenial(classifier.classify(file));
+    };
+    const shown = (file) => relative(appRoot, file).replaceAll("\\", "/");
+    const plugin = {
+        name: "nifra:asset-url-guard",
+        apply: "build",
+        config(config) {
+            const own = config.build?.assetsInlineLimit;
+            return {
+                build: {
+                    assetsInlineLimit: (file, content) => denial(file) !== undefined
+                        ? false
+                        : typeof own === "function"
+                            ? own(file, content)
+                            : own === undefined
+                                ? undefined
+                                : content.length < own,
+                },
+            };
+        },
+        async transform(code, id, transformOptions) {
+            if (transformOptions?.ssr === true || !code.includes("import.meta.url"))
+                return null;
+            const importer = id.replace(POSTFIX, "");
+            if (!isAbsolute(importer) || importer.includes("/node_modules/") || CSS_FILE.test(importer))
+                return null;
+            let program;
+            try {
+                program = this.parse(code);
+            }
+            catch {
+                return null;
+            }
+            const problems = [];
+            for (const url of newUrlLiterals(program)) {
+                if (URL_SCHEME.test(url))
+                    continue;
+                for (const file of await assetUrlFiles(this, url, importer)) {
+                    const reason = denial(file);
+                    if (reason !== undefined) {
+                        problems.push(`${shown(importer)}: new URL(${JSON.stringify(url)}, import.meta.url) names ${shown(file)}: ${reason}`);
+                    }
+                }
+            }
+            if (problems.length === 0)
+                return null;
+            const leak = `[nifra/web] the browser build references files that may not ship to a browser:\n${problems.map((line) => `  - ${line}`).join("\n")}\n` +
+                "The bundler copies or inlines the file such a URL names, so it would ship as it is. Reach " +
+                "backend code through a route's backend half (x.backend.ts) or a *.fn.ts server function; a " +
+                "file the browser loads belongs in frontend/ or public/.";
+            plugin.leak = leak;
+            return this.error(new Error(leak));
+        },
+    };
+    return plugin;
+}
+/**
+ * The files a `new URL(url, import.meta.url)` can name, resolved the ways Vite tries: beside the
+ * module, then through the resolver (aliases, extensions, a root-relative path). Existing files only;
+ * a reference to nothing ships nothing.
+ */
+async function assetUrlFiles(context, url, importer) {
+    const files = new Set();
+    const add = (path) => {
+        const file = path?.replace(POSTFIX, "");
+        if (file === undefined || !isAbsolute(file) || file.includes("\0"))
+            return;
+        if (statSync(file, { throwIfNoEntry: false })?.isFile() === true)
+            files.add(file);
+    };
+    if (!url.startsWith("/"))
+        add(resolve(dirname(importer), url.replace(POSTFIX, "")));
+    const sources = url.startsWith(".") || url.startsWith("/") ? [url] : [url, `./${url}`];
+    for (const source of sources) {
+        try {
+            add((await context.resolve(source, importer, { skipSelf: true }))?.id);
+        }
+        catch {
+            // An unresolvable reference is one Vite leaves unchanged.
+        }
+    }
+    return [...files];
+}
+const field = (node, key) => typeof node === "object" && node !== null ? Reflect.get(node, key) : undefined;
+/** `import.meta.url`, and not `new.target.url`. */
+const isImportMetaUrl = (node) => field(node, "type") === "MemberExpression" &&
+    field(node, "computed") === false &&
+    field(field(node, "property"), "name") === "url" &&
+    field(field(field(node, "object"), "meta"), "name") === "import";
+/** A string literal's text as written and as it evaluates; nothing for a template with holes. */
+function literalTexts(node) {
+    const type = field(node, "type");
+    if (type === "Literal") {
+        const value = field(node, "value");
+        const raw = field(node, "raw");
+        if (typeof value !== "string")
+            return [];
+        return typeof raw === "string" ? [value, raw.slice(1, -1)] : [value];
+    }
+    if (type !== "TemplateLiteral")
+        return [];
+    const holes = field(node, "expressions");
+    const quasis = field(node, "quasis");
+    if (!Array.isArray(holes) || holes.length > 0 || !Array.isArray(quasis))
+        return [];
+    const value = field(quasis[0], "value");
+    return [field(value, "cooked"), field(value, "raw")].filter((text) => typeof text === "string");
+}
+/**
+ * The URL text of every `new URL("...", import.meta.url)` in a parsed module. Parsed rather than
+ * matched, so a comment inside the call cannot hide one; a template with holes is skipped, as Vite
+ * turns it into an `import.meta.glob` the module graph sees.
+ */
+function newUrlLiterals(program) {
+    const found = new Set();
+    const stack = [program];
+    while (stack.length > 0) {
+        const node = stack.pop();
+        if (typeof node !== "object" || node === null)
+            continue;
+        const args = field(node, "arguments");
+        if (field(node, "type") === "NewExpression" &&
+            field(field(node, "callee"), "type") === "Identifier" &&
+            field(field(node, "callee"), "name") === "URL" &&
+            Array.isArray(args) &&
+            isImportMetaUrl(args[1])) {
+            for (const text of literalTexts(args[0]))
+                found.add(text);
+        }
+        for (const child of Object.values(node)) {
+            if (typeof child === "object" && child !== null)
+                stack.push(child);
+        }
+    }
+    return [...found];
+}
 //# sourceMappingURL=vite-leak-guard.js.map

package/dist/plugins/vite-leak-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"vite-leak-guard.js","sourceRoot":"","sources":["../../src/plugins/vite-leak-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,gBAAgB,EAAyB,MAAM,oBAAoB,CAAA;AAyC5E;;;GAGG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,MAAM,GAAoB;QAC9B,IAAI,EAAE,kBAAkB;QACxB,cAAc,CAAC,QAAQ,EAAE,MAAM;YAC7B,+FAA+F;YAC/F,qFAAqF;YACrF,MAAM,SAAS,GAAG,CAAC,EAAU,EAAqB,EAAE;gBAClD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;gBACnC,IAAI,IAAI,KAAK,IAAI;oBAAE,OAAO,EAAE,CAAA;gBAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9E,CAAC,CAAA;YACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;YACjD,qGAAqG;YACrG,kEAAkE;YAClE,MAAM,IAAI,GACR,qBAAqB,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;gBACxD,oBAAoB,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAA;YACvD,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAM;YAC9B,kGAAkG;YAClG,mGAAmG;YACnG,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;YAClB,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QAC7B,CAAC;KACF,CAAA;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}
+{"version":3,"file":"vite-leak-guard.js","sourceRoot":"","sources":["../../src/plugins/vite-leak-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClE,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAC5D,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,UAAU,EACV,eAAe,EAGf,cAAc,EACd,MAAM,GACP,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,mBAAmB,EACnB,WAAW,EAEX,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAEL,gBAAgB,GAGjB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,oBAAoB,EAAuB,MAAM,aAAa,CAAA;AAwFvE,MAAM,QAAQ,GAAG,uCAAuC,CAAA;AAExD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,UAA4B,EAAE;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACzD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,CAAA;IACtD,MAAM,MAAM,GAAoB;QAC9B,IAAI,EAAE,kBAAkB;QACxB,cAAc,CAAC,QAAQ,EAAE,MAAM;YAC7B,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAClD,+FAA+F;YAC/F,qFAAqF;YACrF,MAAM,SAAS,GAAG,CAAC,EAAU,EAAqB,EAAE;gBAClD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;gBACnC,IAAI,IAAI,KAAK,IAAI;oBAAE,OAAO,EAAE,CAAA;gBAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9E,CAAC,CAAA;YACD,MAAM,KAAK,GAAG,aAAa,CAAC,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;YACjF,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAA;YAC5D,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC,CAAA;YACxE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAoD,CAAC,CAAA;YACnF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAC1D,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAC1C,CAAC;YACD,MAAM,IAAI,GACR,wBAAwB,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC9E,qBAAqB,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;gBACxD,oBAAoB,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;gBACrD,uBAAuB,CACrB,mBAAmB,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE;oBAC/E,GAAG,OAAO;oBACV,MAAM;iBACP,CAAC,CACH;gBACD,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;YAC1D,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAM;YAC9B,kGAAkG;YAClG,mGAAmG;YACnG,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;YAClB,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QAC7B,CAAC;KACF,CAAA;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,0FAA0F;AAC1F,SAAS,UAAU,CACjB,OAAoC,EACpC,KAAwB,EACxB,UAAmD,EACnD,OAAe,EACf,OAAyB;IAEzB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAA;IACpF,MAAM,SAAS,GAAqB,EAAE,CAAA;IACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAA;QAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAQ;QAC7D,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,SAAS,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC7E,IAAI,MAAM,CAAC,GAAG;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACzF,SAAQ;QACV,CAAC;QACD,MAAM,IAAI,GACR,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YAC/B,CAAC,CAAC,MAAM,CAAC,MAAM;YACf,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;gBAC3B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC7B,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACxD,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,SAAS,CAAA;IAC5C,IAAI,SAAS,KAAK,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,SAAS,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;IACxF,CAAC;IACD,OAAO,oBAAoB,CACzB,cAAc,CAAC;QACb,OAAO;QACP,SAAS;QACT,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG;QACxC,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,SAAS;QACrD,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnF,CAAC,CACH,CAAA;AACH,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkC,EAAE;IACtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACzD,MAAM,MAAM,GAAoB;QAC9B,IAAI,EAAE,yBAAyB;QAC/B,cAAc,CAAC,QAAQ,EAAE,MAAM;YAC7B,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAClD,MAAM,SAAS,GAAG,CAAC,EAAU,EAAqB,EAAE;gBAClD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;gBACnC,IAAI,IAAI,KAAK,IAAI;oBAAE,OAAO,EAAE,CAAA;gBAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9E,CAAC,CAAA;YACD,MAAM,KAAK,GAAG,aAAa,CAAC,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;YACjF,MAAM,IAAI,GAAG,wBAAwB,CACnC,iBAAiB,CAAC,KAAK,EAAE;gBACvB,UAAU;gBACV,QAAQ,EAAE,kBAAkB;gBAC5B,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC;aAClE,CAAC,CACH,CAAA;YACD,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAM;YAC9B,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;YAClB,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QAC7B,CAAC;KACF,CAAA;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,uDAAuD;AACvD,SAAS,aAAa,CAAC,OAAe,EAAE,OAA+B;IACrE,OAAO,oBAAoB,CAAC;QAC1B,OAAO;QACP,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5F,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CACpB,KAAwB,EACxB,OAA4B,EAC5B,SAA4C;IAE5C,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAW,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,UAAU,KAAK,IAAI,CAAA;IACxF,MAAM,OAAO,GAAgC,EAAE,CAAA;IAC/C,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,OAAO,CAAC,EAAE,CAAC,GAAG;YACZ,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACjC,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC;gBACxE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC3B,CAAC,CAAC,EAAE,CACP;SACF,CAAA;IACH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,SAAS,IAAI,QAAQ,CAAC,EAAE,CAAC;YAAE,SAAQ;QACvD,OAAO,CAAC,EAAE,CAAC,GAAG;YACZ,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;SAC7F,CAAA;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAA;AAC1C,CAAC;AAED,kEAAkE;AAClE,SAAS,YAAY,CACnB,OAAoC,EACpC,KAAwB,EACxB,IAAY,EACZ,QAAyC;IAEzC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;IAC1F,MAAM,WAAW,GAAG,CAAC,GAAsB,EAAY,EAAE,CACvD,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;QACjB,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAA;QACrC,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IACJ,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAA;IAChD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,SAAQ;QACrC,KAAK,MAAM,IAAI,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,IAAI,EAAE,CAAC;YAC3C,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,IAAI,EAAE,CAAC;SAC/C,EAAE,CAAC;YACF,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE;gBACrB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACjC,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;aACvC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC5F,MAAM,KAAK,GAAkB,EAAE,CAAA;IAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAA;QAC5B,gGAAgG;QAChG,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAQ;QAC7D,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;YAC3D,IAAI,MAAM,CAAC,GAAG;gBACZ,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACpF,SAAQ;QACV,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;QAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1E,SAAQ;QACV,CAAC;QACD,IAAI,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC;YAAE,SAAQ;QACjC,+FAA+F;QAC/F,iDAAiD;QACjD,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC;aAC9C,GAAG,CAAC,QAAQ,CAAC;aACb,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;QACrC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAC/C,MAAM,OAAO,GACX,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACrB,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACrB,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,EAAE,CAAA;QACZ,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAsBD;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,KAAK;QACd,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ;YAC9B,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAA;YAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;YACzE,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,yBAAyB,CAAC;gBAAE,OAAO,QAAQ,CAAA;YAC5F,OAAO,EAAE,EAAE,EAAE,QAAQ,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QACjD,CAAC;KACF,CAAA;AACH,CAAC;AA2BD,MAAM,OAAO,GAAG,UAAU,CAAA;AAC1B,MAAM,UAAU,GAAG,8BAA8B,CAAA;AAEjD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkC,EAAE;IACpE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACzD,IAAI,UAAsC,CAAA;IAC1C,MAAM,MAAM,GAAG,CAAC,IAAY,EAAsB,EAAE;QAClD,UAAU,KAAK,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC9C,OAAO,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/C,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACrF,MAAM,MAAM,GAAwB;QAClC,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,OAAO;QACd,MAAM,CAAC,MAAM;YACX,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAA;YAC3C,OAAO;gBACL,KAAK,EAAE;oBACL,iBAAiB,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CACnC,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS;wBACxB,CAAC,CAAC,KAAK;wBACP,CAAC,CAAC,OAAO,GAAG,KAAK,UAAU;4BACzB,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;4BACpB,CAAC,CAAC,GAAG,KAAK,SAAS;gCACjB,CAAC,CAAC,SAAS;gCACX,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;iBAC/B;aACF,CAAA;QACH,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,gBAAgB;YACxC,IAAI,gBAAgB,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAAE,OAAO,IAAI,CAAA;YACpF,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;YACxC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACzF,OAAO,IAAI,CAAA;YACb,IAAI,OAAgB,CAAA;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,QAAQ,GAAa,EAAE,CAAA;YAC7B,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1C,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;oBAAE,SAAQ;gBAClC,KAAK,MAAM,IAAI,IAAI,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;oBAC3B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBACzB,QAAQ,CAAC,IAAI,CACX,GAAG,KAAK,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,4BAA4B,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CACvG,CAAA;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAA;YACtC,MAAM,IAAI,GACR,mFAAmF,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACvI,4FAA4F;gBAC5F,6FAA6F;gBAC7F,yDAAyD,CAAA;YAC3D,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;YAClB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QACpC,CAAC;KACF,CAAA;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAC1B,OAAuB,EACvB,GAAW,EACX,QAAgB;IAEhB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,MAAM,GAAG,GAAG,CAAC,IAAwB,EAAQ,EAAE;QAC7C,MAAM,IAAI,GAAG,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QACvC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAM;QAC1E,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACnF,CAAC,CAAA;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACnF,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,GAAG,EAAE,CAAC,CAAA;IACtF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,GAAG,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAA;AACnB,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,GAAW,EAAW,EAAE,CACpD,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAEhF,mDAAmD;AACnD,MAAM,eAAe,GAAG,CAAC,IAAa,EAAW,EAAE,CACjD,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,kBAAkB;IAC1C,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,KAAK;IACjC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,KAAK;IAChD,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,QAAQ,CAAA;AAElE,iGAAiG;AACjG,SAAS,YAAY,CAAC,IAAa;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAChC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAClC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAA;QACxC,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,IAAI,KAAK,iBAAiB;QAAE,OAAO,EAAE,CAAA;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAA;IAClF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IACvC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CACzD,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CACnD,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,OAAgB;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,MAAM,KAAK,GAAc,CAAC,OAAO,CAAC,CAAA;IAClC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,CAAA;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,SAAQ;QACvD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACrC,IACE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,eAAe;YACvC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,YAAY;YACrD,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,KAAK;YAC9C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACnB,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EACxB,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC3D,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAA;AACnB,CAAC"}

package/dist/plugins/vite-zone-guard.d.ts

@@ -0,0 +1,61 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+export interface ViteZoneGuardOptions {
+    /** The app root: the directory holding `routes/`, `frontend/`, `backend/` and `shared/`. */
+    readonly appRoot: string;
+    /** The routes directory (default `<appRoot>/routes`). */
+    readonly routesDir?: string;
+    /** Generated client modules (the dev entry). */
+    readonly generatedFiles?: readonly string[];
+    /** The public-env prefix browser code may read (default `"PUBLIC_"`). */
+    readonly publicEnvPrefix?: string;
+}
+type Next = (error?: unknown) => void;
+type Middleware = (req: IncomingMessage, res: ServerResponse, next: Next) => void;
+interface PluginContext {
+    readonly environment?: {
+        readonly name?: string;
+    };
+    error(error: Error | string): never;
+    resolve(source: string, importer: string | undefined, options: {
+        readonly skipSelf: boolean;
+    } & Record<string, unknown>): Promise<{
+        readonly id: string;
+        readonly external?: boolean | string;
+    } | null>;
+}
+/** The slice of a Vite plugin this returns. Structural, so `vite` stays an optional peer. */
+export interface ViteZoneGuardPlugin {
+    readonly name: string;
+    readonly enforce: "pre";
+    config(): {
+        optimizeDeps: {
+            exclude: string[];
+        };
+    };
+    configResolved(config: {
+        readonly root: string;
+    }): void;
+    configureServer(server: {
+        readonly middlewares: {
+            use(middleware: Middleware): void;
+        };
+    }): void;
+    resolveId(this: PluginContext, source: string, importer: string | undefined, options?: {
+        readonly ssr?: boolean;
+        readonly scan?: boolean;
+    }): Promise<null>;
+    transform(this: PluginContext, code: string, id: string, options?: {
+        readonly ssr?: boolean;
+    }): null;
+    /**
+     * Why the module a request URL names failed to serve, when the guard refused one of its imports.
+     * Vite in middleware mode reports a transform error to the overlay and then passes the request on
+     * instead of answering it; the dev server answers with this.
+     */
+    refusalFor(url: string): string | undefined;
+    /** The source file a request URL names, when it names one. */
+    fileForUrl(url: string): string | undefined;
+}
+export declare function viteZoneGuard(options: ViteZoneGuardOptions): ViteZoneGuardPlugin;
+export {};
+//# sourceMappingURL=vite-zone-guard.d.ts.map

package/dist/plugins/vite-zone-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vite-zone-guard.d.ts","sourceRoot":"","sources":["../../src/plugins/vite-zone-guard.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAWhE,MAAM,WAAW,oBAAoB;IACnC,4FAA4F;IAC5F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,yDAAyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3C,yEAAyE;IACzE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAClC;AAKD,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,CAAA;AACrC,KAAK,UAAU,GAAG,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,CAAA;AAEjF,UAAU,aAAa;IACrB,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACjD,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAA;IACnC,OAAO,CACL,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChE,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;CACjF;AAED,6FAA6F;AAC7F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAA;IACvB,MAAM,IAAI;QAAE,YAAY,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,CAAA;SAAE,CAAA;KAAE,CAAA;IACjD,cAAc,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IACvD,eAAe,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,CAAA;SAAE,CAAA;KAAE,GAAG,IAAI,CAAA;IAC9F,SAAS,CACP,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAC5D,OAAO,CAAC,IAAI,CAAC,CAAA;IAChB,SAAS,CACP,IAAI,EAAE,aAAa,EACnB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,GACnC,IAAI,CAAA;IACP;;;;OAIG;IACH,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IAC3C,8DAA8D;IAC9D,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAC5C;AAcD,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,mBAAmB,CA0KhF"}