@nifrajs/web 3.5.0 → 4.0.0

package/dist/dev-client.d.ts

@@ -0,0 +1,76 @@
+/**
+ * The browser half of the dev feed: a small inline script a dev server puts first in each page's
+ * `<head>`, so the agent sees what the page did after it left the server - uncaught errors, unhandled
+ * rejections, failed script/stylesheet loads, hydration mismatches and console output.
+ *
+ * Inline and first, rather than a module, so it is listening before any module (the framework, the
+ * HMR client, the app) runs. Dev only: nothing here is reachable from a production build.
+ */
+import { type DevLogLevel } from "./dev-feed.js";
+export interface DevClientConfig {
+    /** Where the batches go (same origin). */
+    readonly ingestPath: string;
+    /** Proves a batch came from a page this server served. */
+    readonly pageToken: string;
+    /** The request that rendered this document: browser entries from it carry the same id. */
+    readonly requestId?: string | undefined;
+    /** The document's path + search, so a client-side navigation away stops claiming that request. */
+    readonly documentPath?: string | undefined;
+    /** The issues indicator module, loaded on the first error the server answers for; none when off. */
+    readonly indicatorPath?: string | undefined;
+}
+/** The script's text (without the `<script>` element). */
+export declare function devClientSource(config: DevClientConfig): string;
+/** The CSP source that admits exactly `source`. */
+export declare function scriptHash(source: string): string;
+/** Whether a response is a page the script belongs in: HTML, with a body nobody has encoded yet. */
+export declare function isInjectablePage(response: Response, method: string): boolean;
+/**
+ * Prepare `headers` for the script: admit it in the page's CSP, by hash unless `nonced` (the caller
+ * puts a nonce on every script afterwards). Returns the `<script>` element to insert, or undefined
+ * when the page's CSP forbids scripts and nothing should be inserted.
+ */
+export declare function devClientTag(config: DevClientConfig, headers: Headers, origin: string, nonced?: boolean): string | undefined;
+/** `html` with `tag` inserted into its head; unchanged when there is no `<head>`. */
+export declare function injectIntoHtml(html: string, tag: string): string;
+/**
+ * Stream `body` with `tag` inserted into its head. Only the prefix up to the insertion point is held
+ * back; the rest streams through untouched, so a streamed SSR page keeps its first-byte time.
+ */
+export declare function injectIntoStream(body: ReadableStream<Uint8Array>, tag: string): ReadableStream<Uint8Array>;
+/** One batch is bounded by what `fetch(keepalive)` may carry. */
+export declare const CLIENT_BATCH_MAX_BYTES: number;
+export declare const CLIENT_BATCH_MAX_EVENTS = 50;
+interface EventContext {
+    readonly page: string;
+    readonly requestId?: string | undefined;
+}
+export interface BrowserError {
+    readonly name: string;
+    readonly message: string;
+    readonly stack: string;
+}
+export type ClientEvent = EventContext & ({
+    readonly kind: "error" | "rejection";
+    readonly name: string;
+    readonly message: string;
+    readonly stack: string;
+} | {
+    readonly kind: "resource";
+    readonly tag: string;
+    readonly url: string;
+} | {
+    readonly kind: "console";
+    readonly level: DevLogLevel;
+    readonly message: string;
+    /** The first Error a `console.error` call was given: frameworks report caught errors so. */
+    readonly error?: BrowserError | undefined;
+});
+export interface ClientBatch {
+    readonly token: string;
+    readonly events: readonly ClientEvent[];
+}
+/** A batch the script could have sent, or undefined. Malformed events are dropped, not fatal. */
+export declare function parseClientBatch(value: unknown): ClientBatch | undefined;
+export {};
+//# sourceMappingURL=dev-client.d.ts.map

package/dist/dev-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-client.d.ts","sourceRoot":"","sources":["../src/dev-client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,KAAK,WAAW,EAAiB,MAAM,eAAe,CAAA;AAG/D,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,0FAA0F;IAC1F,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,kGAAkG;IAClG,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1C,oGAAoG;IACpG,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5C;AA0FD,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAQ/D;AAED,mDAAmD;AACnD,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,oGAAoG;AACpG,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAK5E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,EACd,MAAM,UAAQ,GACb,MAAM,GAAG,SAAS,CASpB;AA2BD,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAGhE;AAYD;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,EAChC,GAAG,EAAE,MAAM,GACV,cAAc,CAAC,UAAU,CAAC,CAuC5B;AAMD,iEAAiE;AACjE,eAAO,MAAM,sBAAsB,QAAY,CAAA;AAC/C,eAAO,MAAM,uBAAuB,KAAK,CAAA;AAEzC,UAAU,YAAY;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,MAAM,WAAW,GAAG,YAAY,GACpC,CACI;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,WAAW,CAAA;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACzE;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;CAC1C,CACJ,CAAA;AAEH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAA;CACxC;AAiDD,iGAAiG;AACjG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAUxE"}

package/dist/dev-client.js

@@ -0,0 +1,280 @@
+/**
+ * The browser half of the dev feed: a small inline script a dev server puts first in each page's
+ * `<head>`, so the agent sees what the page did after it left the server - uncaught errors, unhandled
+ * rejections, failed script/stylesheet loads, hydration mismatches and console output.
+ *
+ * Inline and first, rather than a module, so it is listening before any module (the framework, the
+ * HMR client, the app) runs. Dev only: nothing here is reachable from a production build.
+ */
+import { createHash } from "node:crypto";
+import { isDevLogLevel } from "./dev-feed.js";
+import { admitInlineScript } from "./internal/dev-csp.js";
+// ES2017, no dependencies, one global: `__nifraDevClient`, the idempotence flag that also queues issues
+// for the indicator module. Keep it small: it ships in every dev page, and its hash goes into every CSP
+// that needs one.
+const CLIENT_SOURCE = String.raw `(function(C){
+if(window.__nifraDevClient)return;var S=window.__nifraDevClient={issues:[]};
+var nonce=document.currentScript&&document.currentScript.nonce,loading=0;
+var q=[],timer=0,inside=0,MSG=8000,STACK=16000;
+function cap(s,n){s=String(s);return s.length>n?s.slice(0,n)+"...":s}
+function where(){return location.pathname+location.search}
+function ser(v,d){
+if(typeof v==="string")return v;
+if(v instanceof Error)return v.stack||v.name+": "+v.message;
+if(typeof v==="function")return"[Function "+(v.name||"anonymous")+"]";
+if(typeof v!=="object"||v===null)return String(v);
+if(typeof Element!=="undefined"&&v instanceof Element)return"<"+v.tagName.toLowerCase()+(v.id?"#"+v.id:"")+">";
+if(d>2)return Array.isArray(v)?"[Array]":"[Object]";
+var seen=[];
+try{return JSON.stringify(v,function(k,x){
+if(typeof x==="object"&&x!==null){if(seen.indexOf(x)!==-1)return"[Circular]";seen.push(x)}
+if(typeof x==="bigint")return x+"n";
+if(x instanceof Error)return x.name+": "+x.message;
+return x})}catch(e){return Object.prototype.toString.call(v)}}
+function fmt(a){
+var args=Array.prototype.slice.call(a),out=[];
+if(typeof args[0]==="string"&&args[0].indexOf("%")!==-1){
+var rest=args.slice(1);
+out.push(args[0].replace(/%([sdifoOjc%])/g,function(m,k){
+if(k==="%")return"%";
+if(!rest.length)return m;
+var v=rest.shift();
+if(k==="c")return"";
+if(k==="d"||k==="i")return String(parseInt(v,10));
+if(k==="f")return String(parseFloat(v));
+return ser(v,0)}));
+args=rest}
+for(var i=0;i<args.length;i++)out.push(ser(args[i],0));
+return out.join(" ")}
+function send(keep){
+clearTimeout(timer);timer=0;
+while(q.length){
+var body=JSON.stringify({token:C.t,events:q.splice(0,50)});
+try{fetch(C.u,{method:"POST",body:body,keepalive:!!keep&&body.length<60000,headers:{"content-type":"application/json"},credentials:"same-origin"}).then(function(r){if(r.status===200&&C.i)return r.json().then(issues)}).catch(function(){})}catch(e){}}}
+function issues(j){
+var list=j&&j.issues;if(!list||!list.length)return;
+if(S.indicator){S.indicator.add(list);return}
+S.issues=S.issues.concat(list);if(loading)return;loading=1;
+var s=document.createElement("script");s.type="module";s.src=C.i;if(nonce)s.nonce=nonce;
+(document.head||document.documentElement).appendChild(s)}
+function push(e){
+e.page=cap(where(),2000);
+if(C.r&&e.page===C.p)e.requestId=C.r;
+q.push(e);
+if(q.length>=50)send(false);else if(!timer)timer=setTimeout(send,100)}
+["debug","info","log","warn","error"].forEach(function(level){
+var orig=console[level];if(typeof orig!=="function")return;
+console[level]=function(){
+if(!inside){inside=1;try{
+var ev={kind:"console",level:level,message:cap(fmt(arguments),MSG)};
+if(level==="error")for(var i=0;i<arguments.length;i++){var x=arguments[i];
+if(x instanceof Error){ev.error={name:cap(x.name,200),message:cap(x.message,MSG),stack:cap(x.stack||"",STACK)};break}}
+push(ev)}catch(e){}inside=0}
+return orig.apply(this,arguments)}});
+addEventListener("error",function(ev){
+var t=ev.target;
+if(t&&t!==window&&t.tagName){
+var tag=t.tagName.toLowerCase(),rel=(t.rel||"").toLowerCase();
+if(tag==="script"||(tag==="link"&&/stylesheet|modulepreload|preload/.test(rel)))push({kind:"resource",tag:tag,url:cap(t.src||t.href||"",2000)});
+return}
+var e=ev.error;
+if(!e&&ev.message==="Script error.")return;
+push({kind:"error",name:cap(e&&e.name?e.name:"Error",200),message:cap(e&&e.message!=null?e.message:ev.message,MSG),
+stack:cap(e&&e.stack?e.stack:(ev.filename?"    at "+ev.filename+":"+ev.lineno+":"+ev.colno:""),STACK)})},true);
+addEventListener("unhandledrejection",function(ev){
+var r=ev.reason;
+if(r instanceof Error)push({kind:"rejection",name:cap(r.name,200),message:cap(r.message,MSG),stack:cap(r.stack||"",STACK)});
+else push({kind:"rejection",name:"UnhandledRejection",message:cap(ser(r,0),MSG)})});
+addEventListener("pagehide",function(){send(true)});
+document.addEventListener("visibilitychange",function(){if(document.visibilityState==="hidden")send(true)});
+})`;
+// `</script` inside a JSON value would end the element early; `<!--` can start a script-data escape.
+const scriptSafe = (json) => json
+    .replaceAll("<", "\\u003c")
+    .replaceAll(">", "\\u003e")
+    .replaceAll("\u2028", "\\u2028")
+    .replaceAll("\u2029", "\\u2029");
+/** The script's text (without the `<script>` element). */
+export function devClientSource(config) {
+    const settings = { u: config.ingestPath, t: config.pageToken };
+    if (config.indicatorPath !== undefined)
+        settings.i = config.indicatorPath;
+    if (config.requestId !== undefined && config.documentPath !== undefined) {
+        settings.r = config.requestId;
+        settings.p = config.documentPath;
+    }
+    return `${CLIENT_SOURCE}(${scriptSafe(JSON.stringify(settings))})`;
+}
+/** The CSP source that admits exactly `source`. */
+export function scriptHash(source) {
+    return `'sha256-${createHash("sha256").update(source).digest("base64")}'`;
+}
+/** Whether a response is a page the script belongs in: HTML, with a body nobody has encoded yet. */
+export function isInjectablePage(response, method) {
+    if (method === "HEAD" || response.body === null)
+        return false;
+    if (response.status === 204 || response.status === 304)
+        return false;
+    if (response.headers.has("content-encoding"))
+        return false;
+    return (response.headers.get("content-type") ?? "").toLowerCase().includes("text/html");
+}
+/**
+ * Prepare `headers` for the script: admit it in the page's CSP, by hash unless `nonced` (the caller
+ * puts a nonce on every script afterwards). Returns the `<script>` element to insert, or undefined
+ * when the page's CSP forbids scripts and nothing should be inserted.
+ */
+export function devClientTag(config, headers, origin, nonced = false) {
+    const source = devClientSource(config);
+    const hash = nonced ? undefined : scriptHash(source);
+    // A nonced client hands its nonce to the module it loads, so only a hashed one needs the URL admitted.
+    const indicator = nonced || config.indicatorPath === undefined ? undefined : new URL(config.indicatorPath, origin);
+    if (!admitInlineScript(headers, hash, new URL(config.ingestPath, origin), indicator))
+        return undefined;
+    return `<script data-nifra-dev>${source}</script>`;
+}
+// Latin-1 views keep string offsets equal to byte offsets, so a match position is a splice point.
+const latin1 = new TextDecoder("latin1");
+const HEAD_OPEN = /<head(?:\s[^>]*)?>/i;
+const META_CHARSET = /^\s*<meta\s[^>]*charset\s*=[^>]*>/i;
+// Past this, a page without `<head>` is a fragment: stop looking and stream it as it is.
+const HEAD_SEARCH_LIMIT = 64 * 1024;
+// Enough to see a `<meta charset>` that immediately follows `<head>`.
+const META_LOOKAHEAD = 256;
+/** Where the script goes in `text`: after `<head>`, and after a `<meta charset>` that leads it. */
+function insertionPoint(text, final) {
+    const head = HEAD_OPEN.exec(text);
+    if (head === null) {
+        const body = /<body[\s>]/i.test(text);
+        return final || body || text.length > HEAD_SEARCH_LIMIT ? "none" : "wait";
+    }
+    const afterHead = head.index + head[0].length;
+    const rest = text.slice(afterHead);
+    const meta = META_CHARSET.exec(rest);
+    if (meta !== null)
+        return afterHead + meta[0].length;
+    if (!final && rest.length < META_LOOKAHEAD && !/<(?!meta)/i.test(rest.replace(/^\s+/, "")))
+        return "wait";
+    return afterHead;
+}
+/** `html` with `tag` inserted into its head; unchanged when there is no `<head>`. */
+export function injectIntoHtml(html, tag) {
+    const at = insertionPoint(html, true);
+    return typeof at === "number" ? html.slice(0, at) + tag + html.slice(at) : html;
+}
+function concat(chunks, length) {
+    const out = new Uint8Array(length);
+    let offset = 0;
+    for (const chunk of chunks) {
+        out.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return out;
+}
+/**
+ * Stream `body` with `tag` inserted into its head. Only the prefix up to the insertion point is held
+ * back; the rest streams through untouched, so a streamed SSR page keeps its first-byte time.
+ */
+export function injectIntoStream(body, tag) {
+    const insert = new TextEncoder().encode(tag);
+    const held = [];
+    let heldBytes = 0;
+    let done = false;
+    const release = (controller, final) => {
+        const bytes = concat(held, heldBytes);
+        const at = insertionPoint(latin1.decode(bytes), final);
+        if (at === "wait")
+            return;
+        held.length = 0;
+        heldBytes = 0;
+        done = true;
+        if (at === "none") {
+            controller.enqueue(bytes);
+            return;
+        }
+        controller.enqueue(bytes.subarray(0, at));
+        controller.enqueue(insert);
+        controller.enqueue(bytes.subarray(at));
+    };
+    return body.pipeThrough(new TransformStream({
+        transform(chunk, controller) {
+            if (done) {
+                controller.enqueue(chunk);
+                return;
+            }
+            held.push(chunk);
+            heldBytes += chunk.byteLength;
+            release(controller, false);
+        },
+        flush(controller) {
+            if (!done && heldBytes > 0)
+                release(controller, true);
+        },
+    }));
+}
+// ---------------------------------------------------------------------------------------------------
+// What the script sends
+// ---------------------------------------------------------------------------------------------------
+/** One batch is bounded by what `fetch(keepalive)` may carry. */
+export const CLIENT_BATCH_MAX_BYTES = 64 * 1024;
+export const CLIENT_BATCH_MAX_EVENTS = 50;
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const text = (value, max) => typeof value === "string" ? value.slice(0, max) : undefined;
+// The script only ever tags an event with the id the server put in it; anything else is dropped.
+const REQUEST_ID = /^r\d{1,12}$/;
+function parseBrowserError(value) {
+    if (!isRecord(value))
+        return undefined;
+    const message = text(value.message, 8 * 1024);
+    if (message === undefined)
+        return undefined;
+    return {
+        name: text(value.name, 200) || "Error",
+        message,
+        stack: text(value.stack, 16 * 1024) ?? "",
+    };
+}
+function parseEvent(value) {
+    if (!isRecord(value))
+        return undefined;
+    const page = text(value.page, 2048);
+    if (page === undefined || !page.startsWith("/"))
+        return undefined;
+    const requestId = typeof value.requestId === "string" && REQUEST_ID.test(value.requestId)
+        ? value.requestId
+        : undefined;
+    if (value.kind === "error" || value.kind === "rejection") {
+        const error = parseBrowserError(value);
+        return error === undefined ? undefined : { kind: value.kind, ...error, page, requestId };
+    }
+    if (value.kind === "resource") {
+        const tag = text(value.tag, 20);
+        const url = text(value.url, 2048);
+        if (tag === undefined || url === undefined)
+            return undefined;
+        return { kind: "resource", tag, url, page, requestId };
+    }
+    if (value.kind === "console") {
+        const message = text(value.message, 8 * 1024);
+        if (message === undefined || !isDevLogLevel(value.level))
+            return undefined;
+        const error = parseBrowserError(value.error);
+        return { kind: "console", level: value.level, message, error, page, requestId };
+    }
+    return undefined;
+}
+/** A batch the script could have sent, or undefined. Malformed events are dropped, not fatal. */
+export function parseClientBatch(value) {
+    if (!isRecord(value) || typeof value.token !== "string" || !Array.isArray(value.events))
+        return undefined;
+    if (value.events.length > CLIENT_BATCH_MAX_EVENTS)
+        return undefined;
+    const events = [];
+    for (const raw of value.events) {
+        const event = parseEvent(raw);
+        if (event !== undefined)
+            events.push(event);
+    }
+    return { token: value.token, events };
+}
+//# sourceMappingURL=dev-client.js.map

package/dist/dev-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-client.js","sourceRoot":"","sources":["../src/dev-client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAoB,aAAa,EAAE,MAAM,eAAe,CAAA;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAezD,wGAAwG;AACxG,wGAAwG;AACxG,kBAAkB;AAClB,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2E7B,CAAA;AAEH,qGAAqG;AACrG,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAC1C,IAAI;KACD,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;KAC1B,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;KAC1B,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC;KAC/B,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;AAEpC,0DAA0D;AAC1D,MAAM,UAAU,eAAe,CAAC,MAAuB;IACrD,MAAM,QAAQ,GAA2B,EAAE,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,CAAA;IACtF,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;QAAE,QAAQ,CAAC,CAAC,GAAG,MAAM,CAAC,aAAa,CAAA;IACzE,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACxE,QAAQ,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAA;QAC7B,QAAQ,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAA;IAClC,CAAC;IACD,OAAO,GAAG,aAAa,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAA;AACpE,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,WAAW,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAA;AAC3E,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,gBAAgB,CAAC,QAAkB,EAAE,MAAc;IACjE,IAAI,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAA;IACpE,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACzF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAuB,EACvB,OAAgB,EAChB,MAAc,EACd,MAAM,GAAG,KAAK;IAEd,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IACpD,uGAAuG;IACvG,MAAM,SAAS,GACb,MAAM,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IAClG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC;QAClF,OAAO,SAAS,CAAA;IAClB,OAAO,0BAA0B,MAAM,WAAW,CAAA;AACpD,CAAC;AAED,kGAAkG;AAClG,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAA;AACxC,MAAM,SAAS,GAAG,qBAAqB,CAAA;AACvC,MAAM,YAAY,GAAG,oCAAoC,CAAA;AACzD,yFAAyF;AACzF,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAA;AACnC,sEAAsE;AACtE,MAAM,cAAc,GAAG,GAAG,CAAA;AAE1B,mGAAmG;AACnG,SAAS,cAAc,CAAC,IAAY,EAAE,KAAc;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrC,OAAO,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;IAC3E,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IACpD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxF,OAAO,MAAM,CAAA;IACf,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,GAAW;IACtD,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACrC,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACjF,CAAC;AAED,SAAS,MAAM,CAAC,MAA6B,EAAE,MAAc;IAC3D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;IAClC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACtB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAA;IAC5B,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAgC,EAChC,GAAW;IAEX,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAiB,EAAE,CAAA;IAC7B,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,IAAI,IAAI,GAAG,KAAK,CAAA;IAChB,MAAM,OAAO,GAAG,CACd,UAAwD,EACxD,KAAc,EACR,EAAE;QACR,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACrC,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;QACtD,IAAI,EAAE,KAAK,MAAM;YAAE,OAAM;QACzB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;QACf,SAAS,GAAG,CAAC,CAAA;QACb,IAAI,GAAG,IAAI,CAAA;QACX,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAClB,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QACD,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACzC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC1B,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IACxC,CAAC,CAAA;IACD,OAAO,IAAI,CAAC,WAAW,CACrB,IAAI,eAAe,CAAyB;QAC1C,SAAS,CAAC,KAAK,EAAE,UAAU;YACzB,IAAI,IAAI,EAAE,CAAC;gBACT,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;gBACzB,OAAM;YACR,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAChB,SAAS,IAAI,KAAK,CAAC,UAAU,CAAA;YAC7B,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QAC5B,CAAC;QACD,KAAK,CAAC,UAAU;YACd,IAAI,CAAC,IAAI,IAAI,SAAS,GAAG,CAAC;gBAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QACvD,CAAC;KACF,CAAC,CACH,CAAA;AACH,CAAC;AAED,sGAAsG;AACtG,wBAAwB;AACxB,sGAAsG;AAEtG,iEAAiE;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAA;AAC/C,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAA;AAoCzC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAEtE,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,GAAW,EAAsB,EAAE,CAC/D,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAE7D,iGAAiG;AACjG,MAAM,UAAU,GAAG,aAAa,CAAA;AAEhC,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAA;IAC7C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC3C,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO;QACtC,OAAO;QACP,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE;KAC1C,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACnC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACjE,MAAM,SAAS,GACb,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QACrE,CAAC,CAAC,KAAK,CAAC,SAAS;QACjB,CAAC,CAAC,SAAS,CAAA;IACf,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;QACtC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACjC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QAC5D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IACxD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAA;QAC7C,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QAC1E,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC5C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IACjF,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QACrF,OAAO,SAAS,CAAA;IAClB,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,uBAAuB;QAAE,OAAO,SAAS,CAAA;IACnE,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;QAC7B,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAA;AACvC,CAAC"}

package/dist/dev-diagnostics.d.ts

@@ -1,3 +1,20 @@
+import { type Diagnostic } from "./diagnostic.js";
+/**
+ * Whether a codeframe may show `file` (the canonical path it would read) to a browser: source in a
+ * browser zone. A page reports its own stack frames, so it can name any path: data files and the dev
+ * server's own `.nifra/` files (the discovery record holds the agent token) never qualify.
+ */
+export declare function createSourceGate(root: string): (file: string) => boolean;
+/** A failure as the dev feed recorded it: the entry and request let its agent prompt name a check. */
+export interface CapturedFailure {
+    readonly diagnostic: Diagnostic;
+    readonly entry?: {
+        readonly id: string;
+        readonly seq: number;
+    } | undefined;
+    readonly requestId?: string | undefined;
+    readonly category?: string | undefined;
+}
 export interface DevDiagnostics {
     /** True when a request path targets the structured last-error endpoint. */
     isLastErrorPath(pathname: string): boolean;
@@ -13,8 +30,15 @@ export interface DevDiagnostics {
         readonly method: string;
         readonly url: string;
     }): string;
+    /** The overlay HTML for a failure the feed already recorded, which also becomes the last error. */
+    show(captured: CapturedFailure): string;
 }
 /** One diagnostics surface per dev server. `root` is the resolved project root; it scopes the codeframe
- * to the project (see buildDiagnostic). Both dev servers resolve a concrete root before calling this. */
-export declare function createDevDiagnostics(root: string): DevDiagnostics;
+ * to the project (see buildDiagnostic). Both dev servers resolve a concrete root before calling this.
+ * `build` replaces the default Diagnostic builder: the dev session passes one that also records the
+ * failure in its feed (redacted), so the overlay, this endpoint and the feed show the same object. */
+export declare function createDevDiagnostics(root: string, build?: (err: unknown, request: {
+    readonly method: string;
+    readonly url: string;
+}) => CapturedFailure): DevDiagnostics;
 //# sourceMappingURL=dev-diagnostics.d.ts.map

package/dist/dev-diagnostics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev-diagnostics.d.ts","sourceRoot":"","sources":["../src/dev-diagnostics.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;IAC1C;wGACoG;IACpG,SAAS,IAAI;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;KAAE,CAAA;IAC1F;4GACwG;IACxG,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAA;CAC1F;AAED;yGACyG;AACzG,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAoBjE"}
+{"version":3,"file":"dev-diagnostics.d.ts","sourceRoot":"","sources":["../src/dev-diagnostics.ts"],"names":[],"mappings":"AAYA,OAAO,EAAmB,KAAK,UAAU,EAA+B,MAAM,iBAAiB,CAAA;AAK/F;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAOxE;AAED,sGAAsG;AACtG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACvC;AAED,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;IAC1C;wGACoG;IACpG,SAAS,IAAI;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;KAAE,CAAA;IAC1F;4GACwG;IACxG,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAA;IACzF,mGAAmG;IACnG,IAAI,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CAAA;CACxC;AAED;;;sGAGsG;AACtG,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,CACN,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,KACvD,eAAe,GACnB,cAAc,CAqChB"}

package/dist/dev-diagnostics.js

@@ -8,12 +8,43 @@
  *
  * Vite once shipped without the `/__nifra/last-error` endpoint at all - the drift this module prevents.
  */
+import { relative } from "node:path";
 import { renderDiagnosticOverlay } from "./dev-error.js";
-import { buildDiagnostic, LAST_ERROR_PATH } from "./diagnostic.js";
+import { buildDiagnostic, fixPrompts, LAST_ERROR_PATH } from "./diagnostic.js";
+import { browserDenial, createZoneClassifier } from "./zones.js";
+const CODEFRAME_SOURCE = /\.(?:[cm]?[jt]sx?|vue|svelte|astro|mdx)$/i;
+/**
+ * Whether a codeframe may show `file` (the canonical path it would read) to a browser: source in a
+ * browser zone. A page reports its own stack frames, so it can name any path: data files and the dev
+ * server's own `.nifra/` files (the discovery record holds the agent token) never qualify.
+ */
+export function createSourceGate(root) {
+    const zones = createZoneClassifier({ appRoot: root });
+    return (file) => {
+        if (!CODEFRAME_SOURCE.test(file))
+            return false;
+        if ((relative(zones.appRoot, file).split(/[\\/]/)[0] ?? "").startsWith(".nifra"))
+            return false;
+        return browserDenial(zones.classify(file)) === undefined;
+    };
+}
 /** One diagnostics surface per dev server. `root` is the resolved project root; it scopes the codeframe
- * to the project (see buildDiagnostic). Both dev servers resolve a concrete root before calling this. */
-export function createDevDiagnostics(root) {
+ * to the project (see buildDiagnostic). Both dev servers resolve a concrete root before calling this.
+ * `build` replaces the default Diagnostic builder: the dev session passes one that also records the
+ * failure in its feed (redacted), so the overlay, this endpoint and the feed show the same object. */
+export function createDevDiagnostics(root, build) {
     let last;
+    const showSource = createSourceGate(root);
+    const show = (captured) => {
+        last = captured.diagnostic;
+        return renderDiagnosticOverlay(last, fixPrompts(last, {
+            surface: "overlay",
+            root,
+            entry: captured.entry,
+            requestId: captured.requestId,
+            category: captured.category ?? "ssr",
+        }));
+    };
     return {
         isLastErrorPath: (pathname) => pathname === LAST_ERROR_PATH,
         lastError: () => ({
@@ -25,10 +56,10 @@ export function createDevDiagnostics(root) {
                 "x-nifra-diagnostic": "true",
             },
         }),
-        capture: (err, request) => {
-            last = buildDiagnostic(err, { root, request });
-            return renderDiagnosticOverlay(last);
-        },
+        capture: (err, request) => show(build?.(err, request) ?? {
+            diagnostic: buildDiagnostic(err, { root, request, showSource }),
+        }),
+        show,
     };
 }
 //# sourceMappingURL=dev-diagnostics.js.map

package/dist/dev-diagnostics.js.map

@@ -1 +1 @@
-{"version":3,"file":"dev-diagnostics.js","sourceRoot":"","sources":["../src/dev-diagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAA;AACxD,OAAO,EAAE,eAAe,EAAmB,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAanF;yGACyG;AACzG,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,IAA4B,CAAA;IAChC,OAAO;QACL,eAAe,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,eAAe;QAC3D,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAChB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB,IAAI,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAC3F;YACD,OAAO,EAAE;gBACP,cAAc,EAAE,iCAAiC;gBACjD,eAAe,EAAE,UAAU;gBAC3B,wBAAwB,EAAE,SAAS;gBACnC,oBAAoB,EAAE,MAAM;aAC7B;SACF,CAAC;QACF,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;YACxB,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;YAC9C,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAA;QACtC,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"dev-diagnostics.js","sourceRoot":"","sources":["../src/dev-diagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAA;AACxD,OAAO,EAAE,eAAe,EAAmB,UAAU,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAC/F,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAEhE,MAAM,gBAAgB,GAAG,2CAA2C,CAAA;AAEpE;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAG,oBAAoB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAA;QAC9F,OAAO,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS,CAAA;IAC1D,CAAC,CAAA;AACH,CAAC;AAuBD;;;sGAGsG;AACtG,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,KAGoB;IAEpB,IAAI,IAA4B,CAAA;IAChC,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACzC,MAAM,IAAI,GAAG,CAAC,QAAyB,EAAU,EAAE;QACjD,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAA;QAC1B,OAAO,uBAAuB,CAC5B,IAAI,EACJ,UAAU,CAAC,IAAI,EAAE;YACf,OAAO,EAAE,SAAS;YAClB,IAAI;YACJ,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,KAAK;SACrC,CAAC,CACH,CAAA;IACH,CAAC,CAAA;IACD,OAAO;QACL,eAAe,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,eAAe;QAC3D,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAChB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB,IAAI,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAC3F;YACD,OAAO,EAAE;gBACP,cAAc,EAAE,iCAAiC;gBACjD,eAAe,EAAE,UAAU;gBAC3B,wBAAwB,EAAE,SAAS;gBACnC,oBAAoB,EAAE,MAAM;aAC7B;SACF,CAAC;QACF,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CACxB,IAAI,CACF,KAAK,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI;YACvB,UAAU,EAAE,eAAe,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;SAChE,CACF;QACH,IAAI;KACL,CAAA;AACH,CAAC"}

package/dist/dev-error.d.ts

@@ -1,14 +1,5 @@
-/**
- * Dev-only error overlay. When a loader/action/render throws during `@nifrajs/web/vite` dev, this
- * renders a readable full-page overlay from a structured [Diagnostic] - the code, the message, a source
- * codeframe around the offending line, the recognised cause/fix when nifra has one, and the stack -
- * instead of a bare `err.stack` text dump. Dev-only by construction: it's called solely from the dev
- * server's catch, never in production (production maps errors to the `_error` route boundary).
- *
- * The overlay and the agent surfaces (`/__nifra/last-error`, `nifra_explain`) render from the SAME
- * `Diagnostic`, so a person and an agent see the identical failure, one as HTML and one as JSON.
- */
-import type { Diagnostic } from "./diagnostic.js";
-/** Render the overlay HTML from a prebuilt Diagnostic (the same object the agent surfaces serve). */
-export declare function renderDiagnosticOverlay(diagnostic: Diagnostic): string;
+import type { Diagnostic, FixPrompt } from "./diagnostic.js";
+/** Render the overlay HTML from a prebuilt Diagnostic (the same object the agent surfaces serve), with
+ * the paste-ready agent prompts for it when the caller built them. */
+export declare function renderDiagnosticOverlay(diagnostic: Diagnostic, prompts?: readonly FixPrompt[]): string;
 //# sourceMappingURL=dev-error.d.ts.map

package/dist/dev-error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev-error.d.ts","sourceRoot":"","sources":["../src/dev-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AA+BjD,qGAAqG;AACrG,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAkDtE"}
+{"version":3,"file":"dev-error.d.ts","sourceRoot":"","sources":["../src/dev-error.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AA4D5D;sEACsE;AACtE,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,UAAU,EACtB,OAAO,CAAC,EAAE,SAAS,SAAS,EAAE,GAC7B,MAAM,CA4DR"}

package/dist/dev-error.js

@@ -1,3 +1,14 @@
+/**
+ * Dev-only error overlay. When a loader/action/render throws during `@nifrajs/web/vite` dev, this
+ * renders a readable full-page overlay from a structured [Diagnostic] - the code, the message, a source
+ * codeframe around the offending line, the recognised cause/fix when nifra has one, and the stack -
+ * instead of a bare `err.stack` text dump. Dev-only by construction: it's called solely from the dev
+ * server's catch, never in production (production maps errors to the `_error` route boundary).
+ *
+ * The overlay and the agent surfaces (`/__nifra/last-error`, `nifra_explain`) render from the SAME
+ * `Diagnostic`, so a person and an agent see the identical failure, one as HTML and one as JSON.
+ */
+import { createHash } from "node:crypto";
 const esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 /** The source codeframe block: numbered lines with the offending one highlighted. */
 function codeframeHtml(diagnostic) {
@@ -15,13 +26,34 @@ function fixHtml(diagnostic) {
     if (diagnostic.fix === undefined)
         return "";
     const anchor = diagnostic.docsAnchor !== undefined
-        ? `<div class="fix-docs">docs: <code>${esc(diagnostic.docsAnchor)}</code></div>`
+        ? `<div class="fix-docs">docs: <a href="https://nifra.dev/docs/${esc(diagnostic.docsAnchor)}" target="_blank" rel="noreferrer"><code>${esc(diagnostic.docsAnchor)}</code></a></div>`
         : "";
     const cause = diagnostic.cause !== undefined ? `<p class="fix-cause">${esc(diagnostic.cause)}</p>` : "";
     return `<div class="fix"><div class="fix-tag">likely fix</div>${cause}<p class="fix-do">${esc(diagnostic.fix)}</p>${anchor}</div>`;
 }
-/** Render the overlay HTML from a prebuilt Diagnostic (the same object the agent surfaces serve). */
-export function renderDiagnosticOverlay(diagnostic) {
+// Copies a prompt; falls back to selecting it in its textarea where the Clipboard API is unavailable
+// (a dev server reached over plain http from another machine is not a secure context).
+const COPY_SCRIPT = `(function(){var s=document.getElementById("nifra-copied");document.querySelectorAll("button[data-prompt]").forEach(function(b){b.addEventListener("click",function(){var t=document.getElementById("nifra-prompt-"+b.getAttribute("data-prompt"));if(!t)return;var d=t.closest("details");function done(ok){s.textContent=ok?"Copied. Paste it into your coding agent.":"Select the text below and copy it."}function manual(){var was=d.open;d.open=true;t.focus();t.select();var ok=false;try{ok=document.execCommand("copy")}catch(e){}if(ok)d.open=was;done(ok)}if(window.isSecureContext&&navigator.clipboard)navigator.clipboard.writeText(t.value).then(function(){done(true)},manual);else manual()})})})()`;
+const COPY_SCRIPT_HASH = `'sha256-${createHash("sha256").update(COPY_SCRIPT).digest("base64")}'`;
+// The overlay renders text a request can influence (its URL, a thrown message), so it allows only its
+// own copy script.
+const OVERLAY_CSP = `default-src 'none'; script-src ${COPY_SCRIPT_HASH}; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'`;
+/** The copy-a-prompt block: one button per fix, the prompts themselves readable without JS. */
+function promptsHtml(prompts) {
+    if (prompts === undefined || prompts.length === 0)
+        return "";
+    const single = prompts.length === 1;
+    const buttons = prompts
+        .map((p, i) => `<button type="button" data-prompt="${i}">${single ? "Copy prompt" : `Copy prompt: ${esc(p.label)}`}</button>`)
+        .join("");
+    const areas = prompts
+        .map((p, i) => `<label for="nifra-prompt-${i}">${esc(p.label)}</label><textarea id="nifra-prompt-${i}" readonly rows="12">${esc(p.prompt)}</textarea>`)
+        .join("");
+    return `<section class="prompts"><h1>Prompt for your coding agent</h1><p class="prompts-note">The error, the code and ${single ? "the fix" : "one fix"}, ready to paste. Paths are relative to the project and known secrets are redacted.</p><div class="prompt-buttons">${buttons}<span id="nifra-copied" aria-live="polite"></span></div><details><summary>Show the prompt${single ? "" : "s"}</summary>${areas}</details></section><script>${COPY_SCRIPT}</script>`;
+}
+/** Render the overlay HTML from a prebuilt Diagnostic (the same object the agent surfaces serve), with
+ * the paste-ready agent prompts for it when the caller built them. */
+export function renderDiagnosticOverlay(diagnostic, prompts) {
     const name = esc(diagnostic.name || "Error");
     const code = esc(diagnostic.code);
     const reqLine = diagnostic.request !== undefined
@@ -30,7 +62,7 @@ export function renderDiagnosticOverlay(diagnostic) {
     const framesHtml = diagnostic.frames.length > 0
         ? `<ol class="frames">${diagnostic.frames.map((f) => `<li>${esc(f.raw)}</li>`).join("")}</ol>`
         : `<p class="no-frames">No stack frames.</p>`;
-    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><title>${name} - nifra dev</title>
+    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="Content-Security-Policy" content="${OVERLAY_CSP}"><title>${name} - nifra dev</title>
 <style>
   :root { color-scheme: dark }
   body { margin: 0; background: #0b0d10; color: #e6e6e6; font: 14px/1.6 ui-monospace, SFMono-Regular, Menlo, monospace; }
@@ -59,11 +91,21 @@ export function renderDiagnosticOverlay(diagnostic) {
   .frames li:first-child { color: #d6e2ee; }
   .no-frames { color: #778; }
   footer { margin-top: 28px; color: #667; font-size: 12px; }
+  .prompts-note { margin: 0 0 10px; color: #9aa; }
+  .prompt-buttons { display: flex; flex-wrap: wrap; gap: 8px; align-items: center; }
+  .prompt-buttons button { font: inherit; font-size: 13px; color: #d6f2e4; background: #10241a; border: 1px solid #1f4d38; border-radius: 6px; padding: 6px 12px; cursor: pointer; }
+  .prompt-buttons button:hover, .prompt-buttons button:focus-visible { border-color: #7fe0af; outline: none; }
+  #nifra-copied { color: #7fe0af; font-size: 12px; }
+  details { margin-top: 10px; }
+  summary { cursor: pointer; color: #9aa; }
+  details label { display: block; margin: 12px 0 4px; color: #c98; font-size: 12px; }
+  textarea { width: 100%; box-sizing: border-box; background: #0f1319; color: #cdd6e0; border: 1px solid #222; border-radius: 8px; font: 12px/1.5 ui-monospace, SFMono-Regular, Menlo, monospace; padding: 8px; }
 </style></head><body>
 <div class="bar"><span class="tag">nifra dev</span><span class="code">${code}</span><span>${name}</span>${reqLine}</div>
 <main>
   <p class="message">${esc(diagnostic.message)}</p>
   ${fixHtml(diagnostic)}
+  ${promptsHtml(prompts)}
   ${codeframeHtml(diagnostic)}
   <h1>Stack</h1>
   ${framesHtml}

package/dist/dev-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"dev-error.js","sourceRoot":"","sources":["../src/dev-error.ts"],"names":[],"mappings":"AAYA,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAChC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AAE9F,qFAAqF;AACrF,SAAS,aAAa,CAAC,UAAsB;IAC3C,MAAM,EAAE,GAAG,UAAU,CAAC,SAAS,CAAA;IAC/B,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAC/B,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IACzF,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK;SAClB,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,qBAAqB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,eAAe,CAChJ;SACA,IAAI,CAAC,EAAE,CAAC,CAAA;IACX,OAAO,sCAAsC,GAAG,gCAAgC,IAAI,QAAQ,CAAA;AAC9F,CAAC;AAED,6GAA6G;AAC7G,SAAS,OAAO,CAAC,UAAsB;IACrC,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAC3C,MAAM,MAAM,GACV,UAAU,CAAC,UAAU,KAAK,SAAS;QACjC,CAAC,CAAC,qCAAqC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,eAAe;QAChF,CAAC,CAAC,EAAE,CAAA;IACR,MAAM,KAAK,GACT,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAwB,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IAC3F,OAAO,yDAAyD,KAAK,qBAAqB,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,MAAM,QAAQ,CAAA;AACpI,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,uBAAuB,CAAC,UAAsB;IAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,OAAO,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,OAAO,GACX,UAAU,CAAC,OAAO,KAAK,SAAS;QAC9B,CAAC,CAAC,qBAAqB,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS;QAC7F,CAAC,CAAC,EAAE,CAAA;IACR,MAAM,UAAU,GACd,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC,sBAAsB,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO;QAC9F,CAAC,CAAC,2CAA2C,CAAA;IACjD,OAAO,qEAAqE,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wEA8BV,IAAI,gBAAgB,IAAI,UAAU,OAAO;;uBAE1F,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC;IACnB,aAAa,CAAC,UAAU,CAAC;;IAEzB,UAAU;;sBAEQ,CAAA;AACtB,CAAC"}
+{"version":3,"file":"dev-error.js","sourceRoot":"","sources":["../src/dev-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGxC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAChC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AAE9F,qFAAqF;AACrF,SAAS,aAAa,CAAC,UAAsB;IAC3C,MAAM,EAAE,GAAG,UAAU,CAAC,SAAS,CAAA;IAC/B,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAC/B,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IACzF,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK;SAClB,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,qBAAqB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,eAAe,CAChJ;SACA,IAAI,CAAC,EAAE,CAAC,CAAA;IACX,OAAO,sCAAsC,GAAG,gCAAgC,IAAI,QAAQ,CAAA;AAC9F,CAAC;AAED,6GAA6G;AAC7G,SAAS,OAAO,CAAC,UAAsB;IACrC,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAC3C,MAAM,MAAM,GACV,UAAU,CAAC,UAAU,KAAK,SAAS;QACjC,CAAC,CAAC,+DAA+D,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,4CAA4C,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,mBAAmB;QACpL,CAAC,CAAC,EAAE,CAAA;IACR,MAAM,KAAK,GACT,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAwB,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IAC3F,OAAO,yDAAyD,KAAK,qBAAqB,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,MAAM,QAAQ,CAAA;AACpI,CAAC;AAED,qGAAqG;AACrG,uFAAuF;AACvF,MAAM,WAAW,GAAG,qrBAAqrB,CAAA;AAEzsB,MAAM,gBAAgB,GAAG,WAAW,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAA;AAEhG,sGAAsG;AACtG,mBAAmB;AACnB,MAAM,WAAW,GAAG,kCAAkC,gBAAgB,kEAAkE,CAAA;AAExI,+FAA+F;AAC/F,SAAS,WAAW,CAAC,OAAyC;IAC5D,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAA;IACnC,MAAM,OAAO,GAAG,OAAO;SACpB,GAAG,CACF,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,sCAAsC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,WAAW,CACjH;SACA,IAAI,CAAC,EAAE,CAAC,CAAA;IACX,MAAM,KAAK,GAAG,OAAO;SAClB,GAAG,CACF,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,4BAA4B,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,sCAAsC,CAAC,wBAAwB,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAC1I;SACA,IAAI,CAAC,EAAE,CAAC,CAAA;IACX,OAAO,iHAAiH,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,sHAAsH,OAAO,4FAA4F,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,aAAa,KAAK,+BAA+B,WAAW,WAAW,CAAA;AACzc,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,uBAAuB,CACrC,UAAsB,EACtB,OAA8B;IAE9B,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,OAAO,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,OAAO,GACX,UAAU,CAAC,OAAO,KAAK,SAAS;QAC9B,CAAC,CAAC,qBAAqB,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS;QAC7F,CAAC,CAAC,EAAE,CAAA;IACR,MAAM,UAAU,GACd,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC,sBAAsB,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO;QAC9F,CAAC,CAAC,2CAA2C,CAAA;IACjD,OAAO,kHAAkH,WAAW,YAAY,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wEAuC9E,IAAI,gBAAgB,IAAI,UAAU,OAAO;;uBAE1F,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC;IACnB,WAAW,CAAC,OAAO,CAAC;IACpB,aAAa,CAAC,UAAU,CAAC;;IAEzB,UAAU;;sBAEQ,CAAA;AACtB,CAAC"}